Cisco WAP121 Instruction Manual

Cisco Small Business
WAP121 Wireless-N Access Point with PoE
and
WAP321 Wireless-N Selectable-Band Access Point
with PoE
ADMINISTRATION
GUIDE

© 2012 Cisco Systems, Inc. All rights reserved. 78-20373-02
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 1
Contents
Chapter 1: Getting Started 7
Starting the Web-Based Configuration Utility 7
Launching the Web-Based Configuration Utility 8
Logging Out 9
Using the Access Point Setup Wizard 9
Getting Started 12
Window Navigation 13
Configuration Utility Header 13
Navigation Pane 13
Management Buttons 14
Chapter 2: Status and Statistics 15
System Summary 15
Network Interfaces 17
Traffic Statistics 18
WorkGroup Bridge Transmit/Receive 18
Associated Clients 19
TSPEC Client Associations 21
TSPEC Status and Statistics 23
TSPEC AP Statistics 24
Radio Statistics 25
Email Alert Status 26
Log 27
Chapter 3: Administration 28
System Settings 29
User Accounts 29
Adding a User 30
Changing a User Password 30
Time Settings 31

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 2
Contents
Log Settings 33
Configuring the Persistent Log 33
Remote Log Server 34
Email Alert 35
Email Alert Examples 37
HTTP/HTTPS Service 38
Configuring HTTP and HTTPS Services 38
Managing SSL Certificates 39
Management Access Control 40
Upgrade Firmware 41
TFTP Upgrade 41
HTTP Upgrade 42
Firmware Recovery 43
Download/Backup Configuration File 45
Backing Up a Configuration File 45
Downloading a Configuration File 46
Configuration Files Properties 47
Copy/Save Configuration 47
Reboot 48
Discovery—Bonjour 49
Packet Capture 49
Packet Capture Configuration 50
Local Packet Capture 51
Remote Packet Capture 52
Packet Capture File Download 55
Support Information 56
Chapter 4: LAN 57
Port Settings 57
VLAN and IPv4 Address Settings 58
IPv6 Addresses 59

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 3
Contents
Chapter 5: Wireless 62
Radio 62
Rogue AP Detection 69
Viewing the Rogue AP List 70
Creating and Saving a Trusted AP List 72
Importing a Trusted AP List 72
Networks 73
SSID Naming Conventions 73
VLAN IDs 74
Configuring VAPs 74
Configuring Security Settings 77
None (Plain-text) 77
Static WEP 77
Dynamic WEP 79
WPA Personal 81
WPA Enterprise 83
Scheduler 85
Adding Scheduler Profiles 85
Configuring Scheduler Rules 86
Scheduler Association 87
Bandwidth Utilization 88
MAC Filtering 88
Configuring a MAC Filter List Locally on the WAP Device 88
Configuring MAC Authentication on the RADIUS Server 89
WDS Bridge 90
WEP on WDS Links 92
WPA/PSK on WDS Links 92
WorkGroup Bridge 93
Quality of Service 96
WPS Setup 99
WPS Overview 99
Usage Scenarios 100

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 4
Contents
WPS Roles 101
Enabling and Disabling WPS on a VAP 101
External and Internal Registration 102
Client Enrollment 102
Optional Use of Built-In Registrar 103
Lockdown Capability 103
VAP Configuration Changes 104
External Registration 104
Exclusive Operation of WPS Transactions 105
Backward Compatibility with WPS Version 1.0 105
Configuring WPS Settings 105
Instance Status 107
WPS Process 107
Enrolling a Client Using the PIN Method 107
Enrolling a Client Using the Push Button Method 108
Viewing Instance Status Information 109
Viewing Instance Summary Information 109
Chapter 6: System Security 110
RADIUS Server 110
802.1X Supplicant 112
Password Complexity 114
WPA-PSK Complexity 115
Chapter 7: Client Quality of Service 116
Client QoS Global Settings 116
ACL 116
IPv4 and IPv6 ACLs 117
MAC ACLs 117
Configuring ACLs 117
Class Map 124
Adding a Class Map 124
Defining a Class Map 125
Policy Map 129

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 5
Contents
Client QoS Association 130
Client QoS Status 132
Chapter 8: Simple Network Management Protocol 134
SNMP Overview 134
General SNMP Settings 135
Views 137
Groups 138
Users 140
Targets 141
Chapter 9: Captive Portal 143
Captive Portal Global Configuration 144
Instance Configuration 145
Instance Association 148
Web Portal Customization 148
Uploading and Deleting Images 151
Local Groups 152
Local Users 153
Authenticated Clients 154
Failed Authentication Clients 155
Chapter 10: Single Point Setup 157
Single Point Setup Overview 157
Managing Single Point Setup Across WAP Devices 158
Single Point Setup Negotiation 159
Operation of a WAP Device Dropped From a Single Point Setup 160
Propagation of Configuration Settings and Parameters in
Single Point Setup 160
Access Points 162
Configuring the WAP Device for Single Point Setup 162

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 6
Contents
Viewing Single Point Setup Information 164
Adding a New Access Point to a Single Point Setup Cluster 164
Removing an Access Point from a Single Point Setup Cluster 165
Navigating to Configuration Information for a Specific WAP Device 165
Navigating to a WAP Device Using its IP Address in a URL 166
Sessions 166
Channel Management 167
Viewing Channel Assignments and Setting Locks 169
Current Channel Assignments Table 169
Proposed Channel Assignments Table 170
Configuring Advanced Settings 170
Wireless Neighborhood 171
Viewing Details for a Cluster Member 173

1
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 7
Getting Started
This chapter provides an introduction to the Wireless Access Point (WAP) devices
web-based configuration utility, and includes these topics:
•Starting the Web-Based Configuration Utility
•Using the Access Point Setup Wizard
•Getting Started
•Window Navigation
Starting the Web-Based Configuration Utility
This section describes system requirements and how to navigate the web-based
configuration utility.
Supported Browsers
•Internet Explorer 7.0 or later
•Chrome 5.0 or later
•Firefox 3.0 or later
•Safari 3.0 or later
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the WAP device. You can, however, use the Domain Name System
(DNS) server to create a domain name that contains the IPv6 address, and
then use that domain name in the address bar in place of the IPv6 address.
•When using Internet Explorer 8, you can configure security settings from
Internet Explorer. Select Tools > Internet Options and then select the
Security tab. Select Local Intranet and select Sites. Select Advanced and
then select Add. Add the intranet address of the WAP device (http://<ip-

Getting Started
Starting the Web-Based Configuration Utility
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 8
1
address>) to the local intranet zone. The IP address can also be specified
as the subnet IP address, so that all addresses in the subnet are added to
the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 local address to access the WAP
device from your browser.
Launching the Web-Based Configuration Utility
To open the configuration utility:
STEP 1 Open a web browser.
Enter the IP address of the WAP device that you are configuring in the address bar
on the browser and then press Enter. The Login page opens.
•To find your IP address, you can use the Cisco FindIT Network Discovery
Utility. This tool enables you to automatically discover all supported Cisco
Small Business devices in the same local network segment as your
computer. For more information, go to cisco.com and enter www.cisco.com/
go/findit.
•For further instructions on how to locate the IP address of your WAP device,
see the WAP device Quick Start Guide.
STEP 2 Enter the user name and password. The factory default user name is cisco and the
default password is cisco.
STEP 3 Click Log In. The Access Point Setup Wizard page opens.
If this is the first time that you logged on with the default user name (cisco) and the
default password (cisco) or your password has expired, the Change Admin
Password page opens. Enter the new password and confirm it, click Apply, and
then click Close. The new password is saved. Then, enter the user name cisco and
the new password on the Login page.
See Using the Access Point Setup Wizard for instructions on using the wizard.