Cisco Small Business WAP551 Instruction Manual

Cisco Small Business
WAP551 Wireless-N Access Point with PoE
and
WAP561 Wireless-N Selectable-Band Access Point
with PoE
ADMINISTRATION
GUIDE

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 1
Contents
Chapter 1: Getting Started 5
Starting the Web-Based Configuration Utility 5
Using the Access Point Setup Wizard 6
Getting Started 9
Window Navigation 10
Chapter 2: Status and Statistics 12
System Summary 12
Network Interfaces 14
Traffic Statistics 15
WorkGroup Bridge Transmit/Receive 16
Associated Clients 16
TSPEC Client Associations 18
TSPEC Status and Statistics 20
TSPEC AP Statistics 22
Radio Statistics 22
Email Alert Status 24
Log 24
Chapter 3: Administration 25
System Settings 26
User Accounts 26
Time Settings 28
Log Settings 30
Email Alert 32
HTTP/HTTPS Service 35
Management Access Control 37
Manage Firmware 38
Download/Backup Configuration File 40
Configuration Files Properties 42

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 2
Contents
Copy/Save Configuration 42
Reboot 43
Discovery—Bonjour 44
Packet Capture 44
Support Information 51
Chapter 4: LAN 52
Port Settings 52
VLAN and IPv4 Address Settings 53
IPv6 Addresses 54
IPv6 Tunnel 56
Chapter 5: Wireless 58
Radio 58
Rogue AP Detection 66
Networks 69
Scheduler 81
Scheduler Association 83
Bandwidth Utilization 83
MAC Filtering 84
WDS Bridge 85
WorkGroup Bridge 89
Quality of Service 92
WPS Setup 95
WPS Process 102
Chapter 6: System Security 105
RADIUS Server 105
802.1X Supplicant 107
Password Complexity 109

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 3
Contents
WPA-PSK Complexity 110
Chapter 7: Client Quality of Service 111
Client QoS Global Settings 111
ACL 111
Class Map 118
Policy Map 123
Client QoS Association 125
Client QoS Status 127
Chapter 8: Simple Network Management Protocol 129
General SNMP Settings 129
Views 132
Groups 133
Users 135
Targets 136
Chapter 9: Captive Portal 138
Captive Portal Global Configuration 139
Instance Configuration 140
Instance Association 143
Web Portal Customization 143
Local Groups 147
Local Users 148
Authenticated Clients 149
Failed Authentication Clients 150
Chapter 10: Single Point Setup 152
Single Point Setup Overview 152
Access Points 157

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 4
Contents
Sessions 160
Channel Management 161
Wireless Neighborhood 165
Chapter A: Deauthentication Message Reason Codes 168
Deauthentication Reason Code Table 168
Appendix B: Where to Go From Here 170

1
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 5
Getting Started
This chapter provides an introduction to the Wireless Access Point (WAP) devices
web-based configuration utility, and includes these topics:
•Starting the Web-Based Configuration Utility
•Using the Access Point Setup Wizard
•Getting Started
•Window Navigation
Starting the Web-Based Configuration Utility
This section describes system requirements and how to navigate the web-based
configuration utility.
Supported Browsers
•Internet Explorer 7.0 or later
•Chrome 5.0 or later
•Firefox 3.0 or later
•Safari 3.0 or later
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the WAP device. You can, however, use the Domain Name System
(DNS) server to create a domain name that contains the IPv6 address, and
then use that domain name in the address bar in place of the IPv6 address.
•When using Internet Explorer 8, you can configure security settings from
Internet Explorer. Select Tools > Internet Options and then select the
Security tab. Select Local Intranet and select Sites. Select Advanced and
then select Add. Add the intranet address of the WAP device (http://<ip-

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 6
1
address>) to the local intranet zone. The IP address can also be specified
as the subnet IP address, so that all addresses in the subnet are added to
the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 local address to access the WAP
device from your browser.
By default, the web-based AP configuration utility logs out after 10 minutes of
inactivity. See HTTP/HTTPS Service for instructions on changing the default
timeout period.
To log out, click Logout in the top right corner of the web-based AP configuration
utility.
Using the Access Point Setup Wizard
The first time that you log into the WAP device (or after it has been reset to the
factory default settings), the Access Point Setup Wizard appears to help you
perform initial configurations. Follow these steps to complete the wizard:
NOTE If you click Cancel to bypass the Wizard, the Change Password page appears. You
can then change the default password for logging in. For all other settings, the
factory default configurations apply.
You must log in again after changing your password.
STEP 1 Click Next on the Welcome page of the Wizard. The Configure Device - IP
Address window appears.
STEP 2 Click Dynamic IP Address (DHCP) if you want the WAP device to receive an IP
address from a DHCP server. Or select Static IP Address to configure IP Address
manually. For a description of these fields, see VLAN and IPv4 Address Settings.
STEP 3 Click Next. The Single Point Setup — Set a Cluster window appears. For a
description of Single Point Setup, see Single Point Setup.
STEP 4 To create a new Single Point Setup of WAP devices, select Create a New Cluster
and specify a New Cluster Name. When you configure your devices with the
same cluster name and enable Single Point Setup mode on other WAP devices,
they automatically join the group.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 7
1
If you already have a cluster on your network, you can add this device to it by
clicking Join an Existing Cluster, and then entering the Existing Cluster Name.
If you do not want this device to participate in a Single Point Setup at this time,
click Do not Enable Single Point Setup.
(Optional) You can enter text in the AP Location field to note the physical location
of the WAP device.
STEP 5 Click Next. The Configure Device - Set System Date and Time window appears.
STEP 6 Select your time zone, and then set the system time manually or set up the WAP
device to get its time from an NTP server. For a description of these options, see
Time Settings.
STEP 7 Click Next. The Enable Security - Set Password window appears.
STEP 8 Enter a New Password and enter it again in the Confirm Password text box. For
more information about passwords, see User Accounts.
NOTE You can uncheck the Password Complexity box if you wish to disable
the password security rules. However, we strongly recommend keeping the
password security rules enabled.
STEP 9 Click Next. The Enable Security - Name Your Wireless Network window appears
for the Radio 1 interface.
NOTE For this window and the following two windows (Wireless Security
and VLAN ID), you configure these settings for the Radio 1 interface first.
Then, for WAP561 devices, the windows repeat to enable you to configure
these settings for Radio 2.
STEP 10 Enter a Network Name. This name serves as the SSID for the default wireless
network.
STEP 11 Click Next. The Enable Security - Secure Your Wireless Network window appears.
STEP 12 Choose a security encryption type and enter a security key. For a description of
these options, see System Security.
STEP 13 Click Next. The Wizard displays the Enable Security- Assign the VLAN ID For Your
Wireless Network window.
STEP 14 Enter a VLAN ID for traffic received on the wireless network.
It is suggested that you assign a different VLAN ID from the default (1) to wireless
traffic, in order to segregate it from management traffic on VLAN 1.
STEP 15 Click Next.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 8
1
STEP 16 For the WAP561 device, the Network Name, Wireless Security, and VLAN ID
pages show to enable configuring Radio 2. When finished with configuring Radio
2, click Next.
The Wizard displays the Enable Captive Portal - Create Your Guest Network
window.
STEP 17 Select whether or not to set up an authentication method for guests on your
network, and click Next.
If you click No, skip to STEP 25.
If you click Yes, the Wizard displays the Enable Captive Portal - Name Your Guest
Network window.
STEP 18 Specify a Guest Network Name for Radio 1. For the WAP561 device, select
whether the guest network uses Radio 1 or Radio 2.
STEP 19 Click Next. The Wizard displays the Enable Captive Portal - Secure Your Guest
Network window.
STEP 20 Choose a security encryption type for the guest network and enter a security key.
For a description of these options, see System Security.
STEP 21 Click Next. The Wizard displays the Enable Captive Portal - Assign the VLAN ID
window.
STEP 22 Specify a VLAN ID for the guest network. The guest network VLAN ID should be
different from the management VLAN ID.
STEP 23 Click Next. The Wizard displays the Enable Captive Portal - Enable Redirect URL
window.
STEP 24 Select Enable Redirect URL and specify a fully qualified domain name or IP
address in the Redirect URL field (including http://). If specified, guest network
users are redirected to the specified URL after authenticating.
STEP 25 Click Next. The Wizard displays the Summary - Confirm Your Settings window.
STEP 26 Review the settings that you configured. Click Back to reconfigure one or more
settings. If you click Cancel, all settings are returned to the previous or default
values.
STEP 27 If they are correct, click Submit. Your WAP setup settings are saved and a
confirmation window appears.
STEP 28 Click Finish. The Getting Started window appears.

Getting Started
Getting Started
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 9
1
Getting Started
To simplify device configuration through quick navigation, the Getting Started
page provides links for performing common tasks. The Getting Started page is the
default window every time you log into the web-based AP configuration utility.
Links on the Getting Started Page
Category Link Name (on the Page) Linked Page
Initial Setup Run Setup Wizard Using the Access
Point Setup Wizard
Configure Radio Settings Radio
Configure Wireless Network Settings Networks
Configure LAN Settings LAN
Run WPS WPS Setup
Configure Single Point Setup Single Point Setup
Device
Status
System Summary System Summary
Wireless Status Network Interfaces
Quick
Access
Change Account Password User Accounts
Upgrade Device Firmware Manage Firmware
Backup/Restore Configuration Download/Backup
Configuration File