Cisco WAP121 Instruction Manual

5(9,(:'5$)79HUVLRQ{&,6&2&21),'(17,$//
&LVFR6PDOO%XVLQHVV
:$3
:$3
$'0,1,675$7,21
*8,'(
Wireless-N Access Point with Power over Ethernet
Wireless-N Selectable -Band Access Point with 
Power over Ethernet

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 2
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
&RQWHQWV
&KDSWHU*HWWLQJ6WDUWHG 
Starting the Web-based AP Configuration Utility 7
Launching the Utility 8
Logging In 8
Logging Out 8
Using the Access Point Setup Wizard 9
Getting Started 10
Window Navigation 11
Application Header 11
Navigation Window 11
Management Buttons 12
&KDSWHU9LHZLQJ6WDWLVWLFV 
System Summary 14
Network Interfaces 15
Traffic Statistics 16
WorkGroup Bridge Transmit/Receive 17
Associated Clients 18
TSPEC Client Associations 19
Rogue AP Detection 21
TSPEC Status and Statistics 25
TSPEC AP Statistics 26
RADIO Statistics 27
Email Alert Status 28
Log 29
&KDSWHU/$16HWWLQJV 
Port Settings 30
LAN 31
Time Settings 33

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 3
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
&RQWHQWV
&KDSWHU:LUHOHVV6HWWLQJV 
Radio 36
Networks 43
SSID Naming Conventions 43
VLAN IDs 44
Configuring VAPs 44
Configuring Security Settings 47
None (Plain-text) 47
Static WEP 47
Dynamic WEP 50
WPA Personal 51
WPA Enterprise 53
Scheduler 55
Adding Scheduler Profiles 56
Configuring Scheduler Rules 57
Scheduler Association 58
Bandwidth Utilization 58
MAC Filtering 59
Configuring a MAC Filter List Locally on the AP 59
Configuring MAC Authentication on the RADIUS Server 60
WDS Bridge 60
Work Group Bridge 62
QoS 65
WPS Setup 67
WPS Overview 68
Usage Scenarios 68
WPS Roles 69
Enabling and disabling WPS on a VAP 69
External and Internal Registration 70
Client Enrollment 70
Optional Use of Internal Registrar 71
Lockdown Capability 71
VAP Configuration Changes 72
External Registration 72

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 4
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
&RQWHQWV
Exclusive Operation of WPS Transactions 72
Backward Compatibility with WPS Version 1.0 73
Configuring WPS Settings 73
WPS Process 74
Enrolling a Client Using the PIN Method 74
Enrolling a Client Using the Push Button Method 75
Viewing Instance Summary Information 76
&KDSWHU6103Y 
SNMP Overview 77
General SNMP Settings 78
SNMP Views 80
SNMP Groups 81
SNMP Users 83
SNMP Targets 84
&KDSWHU$GPLQLVWUDWLRQ 
System Settings 86
User Accounts 87
Adding a User 87
Changing a User Password 88
Firmware Upgrade 89
TFTP Upgrade 89
HTTP Upgrade 90
Packet Capture 90
Packet Capture Configuration 91
Local Packet Capture 92
Remote Packet Capture 93
Packet Capture File Download 96
Log Settings 97
Configuring the Persistent Log 97
Remote Log Server 98

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 5
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
&RQWHQWV
Email Alert 99
Discovery—Bonjour 101
HTTP/HTTPS Service 102
Configuring HTTP and HTTPS Services 102
Managing SSL Certificates 103
Telnet/SSH Service 104
Management Access Control 104
Download/Backup Configuration File 105
Backing Up a Configuration File 106
Downloading a Configuration File 107
Configuration Files Properties 107
Copying and Saving the Configuration 108
Rebooting 109
&KDSWHU6\VWHP6HFXULW\ 
RADIUS Server 110
802.1X Supplicant 112
Password Complexity 113
WPA-PSK Complexity 114
&KDSWHU&DSWLYH3RUWDO 
Configuring Global Captive Portal Settings 117
Configuring Instances 118
Configuring VAPs 120
Uploading Binary Files 121
Customizing the Captive Portal Web Pages 122
Web Customization Preview 124
Local Groups 125
Local Users 125
Local User/Group Associations 127

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 6
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
&RQWHQWV
Authenticated Clients 127
Failed Authentication Clients 128
&KDSWHU&OLHQW4XDOLW\RI6HUYLFH 
ACLs 130
IPv4 and IPv6 ACLs 130
MAC ACLs 131
Configuring ACLs 131
Class Map 137
Adding a Class Map 138
Defining a Class Map 138
Policy Map 142
Client QoS Association 144
Client QoS Status 145

2
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 7
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
*HWWLQJ6WDUWHG
This chapter provides an introduction to the web-based access point (AP)
configuration utility, and includes the following topics:
•6WDUWLQJWKH:HEEDVHG$3&RQILJXUDWLRQ8WLOLW\
•8VLQJWKH$FFHVV3RLQW6HWXS:L]DUG
•*HWWLQJ6WDUWHG
•:LQGRZ1DYLJDWLRQ
6WDUWLQJWKH:HEEDVHG$3&RQILJXUDWLRQ8WLOLW\
This section describes how to navigate the AP configuration utility.
Browsers have the following restrictions:
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the AP. You can, however, use the DNS (Domain Name System)
server to create a domain name that contains the IPv6 address, and then
use that domain name in the address bar in place of the IPv6 address.
•To use Internet Explorer 8, open a browser window and configure the
following settings:
Click 7RROV!,QWHUQHW2SWLRQV and then select the 6HFXULW\ tab. Select
/RFDO,QWUDQHW and click 6LWHV. Click $GYDQFHG and then click $GG. Add the
intranet address of the AP (http://<ip-address>) to the local intranet zone.
The IP address can also be specified as the subnet IP address, so that all
addresses in the subnet are added to the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of IPv6 link local address to access the AP from
your browser.

*HWWLQJ6WDUWHG
Starting the Web-based AP Configuration Utility
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 8

REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
/DXQFKLQJWKH8WLOLW\
To open the web-based AP configuration utility:
67(3  Open a Web browser.
67(3  Enter the IP address of the AP you are configuring in the address bar on the
browser, and then press Enter. The Login page opens.
/RJJLQJ,Q
To log in to the web-based AP configuration utility:
67(3  Enter the user name and password. The factory default user name is FLVFR and the
default password is FLVFR.
67(3  If this is the first time that you logged on with the default user name (FLVFR) and the
default password (FLVFR) or your password has expired, the Change Admin
Password page opens. Enter the new password and confirm it, click $SSO\, and
then click &ORVH. The new password is saved.
Then, enter the user name FLVFR and the new password on the Login page.
67(3  Click /RJLQ.
When the login attempt is successful, the Access Point Startup Wizard page
opens.
If you entered an incorrect user name or password, an error message is displayed
and the Login page remains displayed on the screen.
See 8VLQJWKH$FFHVV3RLQW6HWXS:L]DUGSDJH for instructions on using the
wizard.
/RJJLQJ2XW
By default, the application logs out after five minutes of inactivity. See +773
+77366HUYLFH for instructions on changing the default timeout period.
To logout, click /RJRXW in the top right corner of any page.

*HWWLQJ6WDUWHG
Using the Access Point Setup Wizard
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 9

REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
8VLQJWKH$FFHVV3RLQW6HWXS:L]DUG
The first time you log into the AP (or after it has been reset to the factory default
settings), the Access Point Startup Wizard displays to help you perform initial
configuration. Follow these steps to complete the wizard:
127( If you click Cancel to bypass the Wizard, the Change Password page displays. You
can then change the default password for logging in. For all other settings, the
factory default configuration will apply.
67(3  Click 1H[W. The Wizard displays the first of several Configuration windows, the
Access Point Setup Wizard—IP Address window.
67(3  Configure the system to receive its IP information from a DHCP server, or specify
this information manually. For a description of these fields, see /$1SDJH.
67(3  Click 1H[W. The Access Point Setup Wizard—Time Settings window displays.
67(3  Select your time zone, and then configure the system time manually or set the AP
to get its time from an NTP server. For a description of these options, see 7LPH
6HWWLQJVSDJH.
67(3  Click 1H[W. The Wizard displays the first of four security windows, the Access
Point Setup Wizard—Device Password window.
67(3  Enter a 1HZ3DVVZRUG and enter it again in the &RQILUP3DVVZRUG text box. For
more information about passwords, see 8VHU$FFRXQWVSDJH.
67(3  Click 1H[W. The Wizard displays the second of four security windows, the Access
Point Setup Wizard—Network Name window.
67(3  Enter a 1HWZRUN1DPH. This name serves as the SSID for the default wireless
network.
67(3  Click 1H[W. The Wizard displays the third of four security windows, the Access
Point Setup Wizard—Wireless Security window.
67(3 Choose a security type. For a description of these options, see 6\VWHP6HFXULW\
SDJH .
67(3 Click 1H[W. The Wizard displays the Access Point Setup Wizard—Summary
window.
67(3 Review the settings you configured. If they are correct, click 6XEPLW. Or, click %DFN
to reconfigure one or more settings. If you click &DQFHO, all settings are returned to
the previous values.

*HWWLQJ6WDUWHG
Getting Started
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 10

REVIEW DRAFT Version 2—CISCO CONFIDENTIAL
If you click 1H[W, the Wizard displays the Access Point Setup Wizard—Finish
window.
67(3 Click )LQLVK. The Getting Started window displays.
*HWWLQJ6WDUWHG
To simplify device configuration through quick navigation, the Getting Started
page provides links for performing common tasks.
/LQNVRQWKH*HWWLQJ6WDUWHG3DJH
&DWHJRU\ /LQN1DPHRQWKH3DJH /LQNHG3DJH
Initial Setup Run Setup Wizard Access Point Startup
Wizard
Configure Radio Settings Radio
Configure Wireless Network Settings Networks
Configure LAN Settings LAN
Run WPS WPS Setup
Device
Status System Summary System Summary
Wireless Client Associations Network Interfaces
Quick
Access Change Account Password User Accounts
Upgrade Device Firmware Upgrade Firmware
Backup/Restore Configuration Download/Backup
Configuration File
Other
Resources Support Cisco AP support site
Forums Cisco Support
Community site