Cisco WAP121 Instruction Manual

Cisco Small Business
WAP121 Wireless-N Access Point with PoE and
WAP321 Wireless-N Selectable-Band Access Point
with PoE
ADMINISTRATION
GUIDE

© 2012 Cisco Systems, Inc. All rights reserved. 78-20373-01
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 3
Contents
Chapter 1: Getting Started 8
Starting the Web-based Configuration Utility 8
Launching the Web-based Configuration Utility 9
Logging Out 10
Using the Access Point Setup Wizard 10
Getting Started 11
Window Navigation 12
Configuration Utility Header 12
Navigation Window 13
Management Buttons 13
Chapter 2: Viewing Statistics 14
System Summary 14
Network Interfaces 16
Traffic Statistics 17
WorkGroup Bridge Transmit/Receive 18
Associated Clients 19
TSPEC Client Associations 20
TSPEC Status and Statistics 22
TSPEC AP Statistics 24
RADIO Statistics 24
Email Alert Status 26
Log 27
Chapter 3: Administration 28
System Settings 29
User Accounts 29
Adding a User 29
Changing a User Password 30
Time Settings 31

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 4
Contents
Log Settings 33
Configuring the Persistent Log 33
Remote Log Server 34
Email Alert 35
Email Alert Examples: 37
HTTP/HTTPS Service 37
Configuring HTTP and HTTPS Services 37
Managing SSL Certificates 39
Telnet/SSH Service 40
Management Access Control 40
Firmware Upgrade 41
TFTP Upgrade 41
HTTP Upgrade 42
Download/Backup Configuration File 43
Backing Up a Configuration File 43
Downloading a Configuration File 44
Configuration Files Properties 45
Copy/Save Configuration 46
Reboot 47
Discovery—Bonjour 47
Packet Capture 48
Packet Capture Configuration 49
Local Packet Capture 50
Remote Packet Capture 51
Packet Capture File Download 54
Chapter 4: LAN Settings 55
Port Settings 55
LAN Settings 56
Chapter 5: Wireless Settings 59

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 5
Contents
Radio 60
Rogue AP Detection 67
Networks 70
SSID Naming Conventions 70
VLAN IDs 71
Configuring VAPs 71
Configuring Security Settings 74
Scheduler 83
Adding Scheduler Profiles 83
Configuring Scheduler Rules 84
Scheduler Association 85
Bandwidth Utilization 85
MAC Filtering 86
Configuring a MAC Filter List Locally on the WAP device 86
Configuring MAC Authentication on the RADIUS Server 88
WDS Bridge 88
Work Group Bridge 90
Quality of Service 93
WPS Setup 96
WPS Overview 96
Configuring WPS Settings 102
WPS Process 104
Enrolling a Client Using the PIN Method 104
Enrolling a Client Using the Push Button Method 105
Viewing Instance Summary Information 105
Chapter 6: System Security 106
RADIUS Server 106
802.1X Supplicant 108
Password Complexity 110
WPA-PSK Complexity 111

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 6
Contents
Chapter 7: Client Quality of Service 112
ACLs 112
IPv4 and IPv6 ACLs 112
MAC ACLs 113
Configuring ACLs 113
Class Map 119
Adding a Class Map 120
Defining a Class Map 120
Policy Map 124
Client QoS Association 126
Client QoS Status 128
Chapter 8: Simple Network Management Protocol 130
SNMP Overview 130
General SNMP Settings 131
SNMP Views 133
SNMP Groups 134
SNMP Users 136
SNMP Targets 137
Chapter 9: Captive Portal 139
Global Captive Portal Configuration 140
Instance Configuration 141
Instance Association 144
Upload Binary Files 145
Web Customization 146
Web Customization Preview 149
Local Groups 149
Local Users 150
Authenticated Clients 151

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 7
Contents
Failed Authentication Clients 152
Appendix A: Where to Go From Here 154

1
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 8
Getting Started
This chapter provides an introduction to the web-based access point
configuration utility, and includes these topics:
•Starting the Web-based Configuration Utility
•Using the Access Point Setup Wizard
•Getting Started
•Window Navigation
Starting the Web-based Configuration Utility
This section describes system requirements and how to navigate the web-based
configuration utility.
Supported Browsers
•Internet Explorer 7.0 or later
•Chrome 5.0 or later
•Firefox 3.0 or later
•Safari 3.0 or later
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the WAP device. You can, however, use the DNS (Domain Name
System) server to create a domain name that contains the IPv6 address,
and then use that domain name in the address bar in place of the IPv6
address.
•When using Internet Explorer 8, you can configure security settings from
Internet Explorer. Click Tools > Internet Options and then select the
Security tab. Select Local Intranet and click Sites. Click Advanced and

Getting Started
Starting the Web-based Configuration Utility
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 9
1
then click Add. Add the intranet address of the WAP device (http://<ip-
address>) to the local intranet zone. The IP address can also be specified
as the subnet IP address, so that all addresses in the subnet are added to
the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 local address to access the WAP
device from your browser.
Launching the Web-based Configuration Utility
To open the web-based configuration utility:
STEP 1 Open a Web browser.
STEP 2 Enter the IP address of the WAP device that you are configuring in the address bar
on the browser, and then press Enter. The Login page opens.
•To find your IP address, you can use the Cisco FindIT Network Discovery
Utility. This tool enables you to automatically discover all supported Cisco
Small Business devices in the same local network segment as your
computer. For more information, see www.cisco.com/go/findit.
•For further instructions on how to locate the IP address of your WAP device,
see the Quick Start Guide. See Where to Go From Here for document
locations.
STEP 3 Enter the user name and password. The factory default user name is cisco and the
default password is cisco.
STEP 4 Click Login. The Access Point Startup Wizard page opens.
If this is the first time that you logged on with the default user name (cisco) and the
default password (cisco) or your password has expired, the Change Admin
Password page opens. Enter the new password and confirm it, click Apply, and
then click Close. The new password is saved. Then, enter the user name cisco and
the new password on the Login page.
See Using the Access Point Setup Wizard, page 10 for instructions on using the
wizard.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 10
1
Logging Out
By default, the web-based configuration utility logs out after 10 minutes of
inactivity. See HTTP/HTTPS Service for instructions on changing the default
timeout period.
To logout, click Logout in the top right corner of the web-based configuration
utility.
Using the Access Point Setup Wizard
The first time that you log into the WAP device (or after it has been reset to the
factory default settings), the Access Point Startup Wizard displays to help you
perform initial configurations. Follow these steps to complete the wizard:
NOTE If you click Cancel to bypass the Wizard, the Change Password page displays. You
can then change the default password for logging in. For all other settings, the
factory default configuration will apply.
STEP 1 Click Next on the Welcome page of the Wizard. The Configure Device - IP
Address window displays.
STEP 2 Click Dynamic IP Address (DHCP) if you want the WAP device to receive an IP
address from a DHCP server. Or select Static IP Address to configure IP Address
manually. For a description of these fields, see LAN Settings, page 56.
STEP 3 Click Next. The Configure Device - Set System Date and Time window displays.
STEP 4 Select your time zone, and then set the system time manually or set up the WAP
device to get its time from an NTP server. For a description of these options, see
Time Settings, page 31.
STEP 5 Click Next. The Enable Security - Set Password window displays.
STEP 6 Enter a New Password and enter it again in the Confirm Password text box. For
more information about passwords, see User Accounts, page 29.
NOTE You can click the Password Complexity check box if you wish to
disable the password security rules. However, it is strongly recommend to
keep the password security rules enabled.
STEP 7 Click Next. The Enable Security - Name Your Wireless Network window
displays.