Cisco WAP125 Service manual

Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with
PoE
First Published: 2016-10-12
Last Modified: 2017-06-08
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
The Java logo is a trademark or registered trademark of Sun Microsystems, Inc. in the U.S. or other countries.
©2017 Cisco Systems, Inc. All rights reserved.

CONTENTS
CHAPTER 1 Getting Started 1
Getting Started with the Configuration 1
Using the Access Point Setup Wizard 2
Changing Password 4
TCP/UDP Service 4
System Status 5
Quick Start Configuration 6
Window Navigation 6
Navigation Pane 7
Management Buttons 7
CHAPTER 2 System Configuration 9
LAN 9
IPv4 Configuration 9
DHCP Auto Configuration Settings 10
IPv6 Configuration 11
Port Settings Table 12
Spanning Tree Protocol 13
VLANs Setting 13
Neighbor Discover 13
LLDP 14
IPv6 Tunnel 14
Time 15
Automatically Acquiring the Time Settings through NTP 16
Manually Configuring the Time Settings 16
Notification 17
LED Display 17
Log Settings 17
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
iii

Remote Log Server 18
View System Log 19
Email Alert/ Mail Server/ Message Configuration 19
Email Alert Examples 21
User Accounts 21
Adding a User 22
Changing a User Password 22
Management 23
Connect Session Settings/HTTP/HTTPS Service Task 23
SSL Certificate File Status 24
SNMP / SNMPv2c Settings 25
SNMPv3 Views 26
SNMPv3 Groups 27
SNMPv3 Users 29
SNMPv3 Targets 30
Security 30
RADIUS Server 30
802.1x Supplicant 31
Rogue AP Detection 32
Viewing the Rogue AP List 33
Saving the Trusted AP List 34
Importing a Trusted AP List 34
Configure Password Complexity 35
Configure WAP-PSK Complexity 36
CHAPTER 3 Wireless 37
Radio 37
Networks 42
Configuring VAPs 43
Configuring Security Settings 45
Client Filter 49
Configuring a Client Filter List Locally on the WAP device 49
Configuring MAC Authentication on the Radius Server 50
Scheduler 50
Scheduler Profile Configuration 51
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
iv
Contents

Profile Rule Configuration 51
QoS 52
CHAPTER 4 Wireless Bridge 55
Wireless Bridge 55
Configuring WDS Bridge 56
WEP on WDS Links 57
WPA/PSK on WDS Links 57
WorkGroup Bridge 57
CHAPTER 5 Fast Roaming 61
Fast Roaming 61
Configuring Fast Roaming 62
Configuring Remote Key Holder List Profiles 63
CHAPTER 6 Access Control 65
ACL 65
IPv4 and IPv6 ACLs 65
Workflow to Configure ACLs 66
Configure IPv4 ACLs 66
Configure IPv6 ACLs 69
Configure MAC ACLs 71
Client QoS 73
Configuring IPv4 Traffic Classes 73
Configuring IPv6 Traffic Classes 75
Configuring MAC Traffic Classes 77
QoS Policy 79
QoS Association 80
Guest Access 80
Guest Access Instance Table 81
Guest Group Table 83
Guest User Account 84
Web Portal Customization 84
CHAPTER 7 Monitor 87
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
v
Contents

Dashboard 87
LAN Status 88
Wireless Status 89
Traffic Statistics 90
Clients 90
Guests 92
CHAPTER 8 Administration 93
Firmware 93
Swapping the Firmware Image 93
HTTP/HTTPS Upgrade 94
TFTP Upgrade 94
Configuration Files 95
Backup Configuration Files 95
Download Configuration Files 96
Copying Configuration Files 96
Clearing Configuration Files 97
Reboot 98
Schedule Reboot 98
CHAPTER 9 Troubleshoot 99
Packet Capture 99
Local Packet Capture 100
Remote Packet Capture 101
Wireshark 101
Packet Capture File Download 103
Using HTTP 104
Support Information 104
Download CPU/RAM Data 105
CHAPTER 10 Where to Go from Here 107
Where to Go from Here 107
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
vi
Contents

CHAPTER 1
Getting Started
This chapter contains the following sections:
•Getting Started with the Configuration, page 1
•Using the Access Point Setup Wizard, page 2
•Changing Password, page 4
•TCP/UDP Service, page 4
•System Status, page 5
•Quick Start Configuration, page 6
•Window Navigation, page 6
Getting Started with the Configuration
This section describes the system requirements and how to access the web-based Configuration Utility.
Supported Browsers
Before you begin to use the configuration utility, make sure that you have a computer with Internet Explorer
9 or later, Firefox 46 or later, Chrome 49 or later, Safari 5.0 or later.
Browser Restrictions
•If using Internet Explorer 9, configure the following security settings:
◦Select Tools,Internet Options and then select the Security tab.
◦Next, select Local Intranet and then select Sites.
◦Select Advanced and then select Add. Add the intranet address of the WAP device
http://<ip-address> to the local intranet zone. The IP address can also be specified as the
subnet IP address so that all subnet addresses, are added to the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the IPv6 global address instead
of the IPv6 local address to access the WAP device from your browser.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
1

Launching the Web-based Configuration Utility
Follow these steps to access the configuration utility from your computer to configure the WAP device:
1Connect the WAP device to the same network (IP subnet) as your computer. The factory default IP address
configuration of the WAP device is DHCP. Make sure that your DHCP server is running and can be
accessed.
2Locate the IP address of the WAP device.
aThe WAP device can be accessed and managed by using the Cisco FindIT Network Discovery Utility.
This utility enables you to automatically discover all supported Cisco devices in the same local network
segment as your computer. You can get a snapshot view of each device or launch the product
configuration utility to view and configure the settings. For more information, see http://www.cisco.com/
go/findit.
bThe WAP device is Bonjour-enabled and automatically broadcasts its services and listens for services
being advertised by other Bonjour-enabled devices. If you have a Bonjour- enabled browser, such as
Microsoft Internet Explorer with a Bonjour plug-in, or the Apple Mac Safari browser, you can find
the WAP device on your local network without knowing its IP address.
You can download the complete Bonjour for Microsoft Internet Explorer browser from Apple’s website
by visiting: http://www.apple.com/bonjour/ .
cLocate the IP address assigned by your DHCP server by accessing your router or DHCP server. See
your DHCP server instructions for more information.
3Launch a web browser, such as Microsoft Internet Explorer.
4In the address bar, enter the default DHCP address and press Enter.
5Enter the default user name and password: cisco in the Username and Password fields.
6Click Log In. The Access Point Setup Wizard appears.
Follow the Setup Wizard instructions to finish the installation. We strongly recommend that you use the Setup
Wizard for the first installation. See Using the Access Point Setup Wizard, on page 2 for more information.
Logging Out
By default, the configuration utility logs out after 10 minutes of inactivity. See Management, on page 23 for
instructions on changing the default timeout period.
To log out, click Logout in the top right corner of the configuration utility.
Using the Access Point Setup Wizard
The first time that you log into the Access Point (or after it has been reset to the factory default settings), the
Access Point Setup Wizard appears to help you perform initial configurations. Follow these steps to complete
the wizard:
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
2
Getting Started
Using the Access Point Setup Wizard

You must log in again after changing your password:
Step 1 Click Next on the Welcome page of the wizard. The Configure Device —IP Address window appears.
Step 2 Click Dynamic IP Address (DHCP) (recommended) to receive an IP address from a DHCP server, or click Static IP
Address to configure the IP address manually. For a description of these fields, see IPv4 Configuration, on page 9.
Step 3 Click Next. The Configure Device —Set System Date And Time window appears.
Step 4 Choose your time zone, and then set the system time automatically from an NTP server or manually. For a description
of these options, see Time, on page 15.
Step 5 Click Next. The Configure Device —Set Password window appears.
Step 6 Enter a New Password and enter it again in the Confirm Password field.
Uncheck Password Complexity to disable the password security rules. However, we strongly recommend
keeping the password security rules enabled. For more information about passwords, see Security, on page 30.
Note
Step 7 Click Next. The Configure Radio 1 —Name Your Wireless Network window appears.
Step 8 Enter a Network Name. This name serves as the SSID for the default wireless network.
Step 9 Click Next. The Configure Radio 1 —Secure Your Wireless Network window appears.
Step 10 Choose a security encryption type and enter a security key. For a description of these options, see Configuring Security
Settings, on page 45.
Step 11 Click Next. The Configure Radio 1—Assign The VLAN ID For Your Wireless Network window appears.
Step 12 Choose the VLAN ID for traffic received on the wireless network.
We recommend that you assign a different VLAN ID from the default (1) to the wireless traffic, in order to segregate it
from the management traffic on VLAN 1.
Step 13 Click Next. Repeat the step 9 to step 14 to configure the settings for Radio 2 interface.
Step 14 Click Next. The Enable Captive Portal —Create Your Guest Network window appears.
Step 15 Select whether or not to set up an authentication method for guests on your network, and click Next.
If you click No, skip to Step 23.
If you click Yes, the Enable Captive Portal —Name Your Guest Network window appears.
Step 16 Specify a Guest Network Name.
Step 17 Click Next. The Enable Captive Portal —Secure Your Guest Network window appears.
Step 18 Choose a security encryption type for the guest network and enter a security key. For a description of these options, see
Configuring Security Settings.
Step 19 Click Next. The Enable Captive Portal —Assign the VLAN ID window appears.
Step 20 Specify a VLAN ID for the guest network. The guest network VLAN ID should be different from the management
VLAN ID.
Step 21 Click Next. The Enable Captive Portal —Enable Redirect URL window appears.
Step 22 Check Enable Redirect URL and enter a fully qualified domain name (FQDN) or IP address in the Redirect URL field
(including http://). If specified, the guest network users are redirected to the specified URL after authenticating.
Step 23 Click Next. The Summary —Confirm Your Settings window appears.
Step 24 Review the settings that you configured. Click Back to reconfigure one or more settings. If you click Cancel, all settings
are returned to the previous or default values.
Step 25 If they are correct, click Submit. Your setup settings are saved and a confirmation window appears.
Step 26 Click Finish.
The WAP device was configured successfully. You are required to log in again with the new password.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
3
Getting Started
Using the Access Point Setup Wizard

Changing Password
For security reasons, you are required to change the administrative password at a set interval. You will need
to access this page when the Password Aging Time is up.
Password complexity is enabled by default. The minimum password complexity requirements are shown on
the Change Password page. The new password must comply with the default complexity rules, or it can be
disabled temporarily by disabling Password Complexity. See Security, on page 30 for more information.
To change the default password, configure the following:
•Old Password —Enter the current password (default is cisco).
•New Password —Enter a new password.
•Confirm Password —Enter the new password again for confirmation.
•Password Strength Meter —Displays the strength of the new password.
•Password Complexity —The password complexity is enabled by default and requires that the new
password conform to the following complexity settings:
◦Is different from the user name.
◦Is different from the current password.
◦Has a minimum length of eight characters.
◦Contains characters from at least three character classes (uppercase letters, lowercase letters,
numbers, and special characters available on a standard keyboard).
Check Disable to disable the password complexity rules. However, we strongly recommend that you keep
the password complexity rules enabled.
Note
TCP/UDP Service
The TCP/UDP Service table displays the protocols and services operating on the WAP.
•Service —The service name.
•Protocol —The underlying transport protocol that the service uses (TCP or UDP).
•Local IP Address —The local IP address of the connected device. All indicates that any IP address on
the device can use this service.
•Local Port —The local port number.
•Remote IP Address —The IP address of a remote host using this service. All indicates that the service
is available to all remote hosts that access the system.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
4
Getting Started
Changing Password

•Remote Port —The port number of any remote device communicating with this service.
•Connection State —The state of the service. For UDP, only connections in the Active or Established
states appear in the table. The TCP states are:
◦Listening —The service is listening for connection requests.
◦Active —A connection session is established and the packets are being transmitted and received.
◦Established —A connection session is established between the WAP device and a server or client.
◦Time Wait —The closing sequence has been initiated and the WAP device is waiting for a
system-defined timeout period (typically 60 seconds) before closing the connection.
You can modify or rearrange the order on the TCP/UDP Service Table. Click Refresh to refresh the screen
and show the most current information.
You can also enter parameters related to Service, Protocol and other details to filter the TCP/UDP Services
displayed.
Click Back to return to the Getting Started page.
Note
System Status
The System Status page displays the hardware model description, software version, and the various configuration
parameters such as:
•PID VID —The hardware model and version of the WAP device.
•Serial Number —The serial number of the WAP device.
•Hostname —The host name assigned to the WAP device.
•MAC Address —The MAC address of the WAP device.
•IPv4 Address —The IP address of the WAP device.
•IPv6 Address —The IPv6 address of the WAP device.
•LAN Port —Displays the status of Ethernet interface.
•Radio 1 (2.4GHz) —The 2.4GHz mode is enabled or disabled for the Radio 1 interface.
•Radio 2 (5GHz) —The 5GHz mode is enabled or disabled for the Radio 2 interface.
•Power Source —The system may be powered by a power adapter, or may be receiving power over
Ethernet (PoE) from a Power Sourcing Equipment (PSE).
•System Uptime —The time elapsed since the last reboot.
•System Time —The current system time.
•Firmware Version (Active Image) —The firmware version of the active image.
•Firmware MD5 Checksum (Active Image) —The checksum for the active image.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
5
Getting Started
System Status

•Firmware Version (Non-active) —The firmware version of the backup image.
•Firmware MD5 Checksum (Non-active) —The checksum for the backup image.
Quick Start Configuration
To simplify the device configuration through quick navigation, the Getting Started page provides links for
performing common tasks. The Getting Started page is the default window at start-up.
Linked PageLink Name (on the Page)Category
Using the Access Point Setup
Wizard, on page 2
Setup WizardQuick Access
Adding a User, on page 22Change Account Password
Configuration Files, on page 95Backup/Restore Configuration
Firmware, on page 93Upgrade Device Firmware
Radio, on page 37Wireless SettingsAdvanced Configuration
Management, on page 23Management Setting
IPv4 Configuration, on page 9LAN Setting
Guest Access, on page 80Guest Access
Dashboard, on page 87DashboardMore Information
TCP/UDP Service, on page 4TCP/UDP Service
LED Display, on page 17View System Log
Traffic Statistics, on page 90Traffic Statistics
For additional information on the device, you can access the product support page or the Cisco Support
Community by:
•Click Support to access the product support page.
•Click Forums to access the Cisco Support Community page.
Window Navigation
Use the navigation buttons to move around the graphical user interface of the WAP.
Configuration Utility Header
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
6
Getting Started
Quick Start Configuration

The configuration utility header contains standard information and appears at the top of every page. The header
provides these buttons:
DescriptionButton Name
The account name (Administrator or Guest) of the
user logged into the WAP device. The factory default
user name is cisco.
(User)
Hover the mouse pointer over the button, and select
a language. The factory default language is English.
(Language)
Click to log out of the configuration utility.
Click to show the WAP device type and version
number.
Click to show the context-sensitive online help. The
online help is designed to be viewed with browsers
using UTF-8 encoding. If the online help shows errant
characters, verify that the encoding settings on your
browser are set to UTF-8.
Navigation Pane
A navigation pane, or main menu, is located on the left side of each page. The navigation pane is a list on the
top-level features of the WAP device. If a main menu item is preceded by an arrow, select to expand and
display the submenu of each group. You can then select the desired submenu item to open the associated page.
Management Buttons
The following table describes the commonly-used buttons that appear on various pages in the system:
DescriptionButton Name
Adds a new entry to a table or database.Add
Cancels a change made to the page.Cancel
Clears all entries in a log table.Clear All
Deletes an entry in a table.Delete
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
7
Getting Started
Navigation Pane

Edits an existing entry.Edit
Refreshes the current page with the latest data.Refresh
Saves the settings or configuration.Save
Updates the new information to the startup
configuration.
Update
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
8
Getting Started
Management Buttons

CHAPTER 2
System Configuration
This chapter describes how to configure global system settings and perform diagnostics. It contains the
following topics:
•LAN, page 9
•Time, page 15
•Notification, page 17
•User Accounts, page 21
•Management, page 23
•Security, page 30
LAN
This section describes how to configure the port, VLAN, LLDP, IPv4, and IPv6 settings on the WAP device.
IPv4 Configuration
Use the IPv4 Setting page to configure the IPv4 address.
Step 1 Select LAN > IPv4 Configuration.
Step 2 Configure the following IPv4 settings:
•Connection Type —By default, the DHCP client on the WAP device automatically broadcasts the requests for
network information. If you want to use a static IP address, you must disable the DHCP client and manually
configure the IP address and other network information.
Choose one of the following options:
◦DHCP —The WAP device acquires its IP address from a DHCP server on the LAN.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
9

◦Static IP —Manually configure the IPv4 address. The IPv4 address should be in a form similar to
xxx.xxx.xxx.xxx (172.17.144.170).
•Static IP Address, Subnet Mask, and Default Gateway —Enter the static IP address, subnet mask and default
gateway.
•Domain Name Servers —Select one of the following options:
◦Dynamic —The WAP device acquires the DNS server addresses from a DHCP server on the LAN.
◦Manual —Enter up to two IP addresses in the fields provided.
Step 3 Click Save to save the changes.
DHCP Auto Configuration Settings
•DHCP Auto Configuration Options—This option is enabled by default. When AP comes up with
factory defaults, it first tries to auto configure using DHCP options.
During Auto Configuration:
◦AP boots up with only Ethernet interface enabled and WLAN interfaces down.
◦No services are available to User (except User Interfaces).
◦DHCP Auto Configuration Options is disabled automatically after Wait Interval or TFTP upload
of Configuration file whichever is earlier.
◦Disabling the DHCP client (i.e., configure use a static IP address) or disabling DHCP Auto
Configuration Options immediately aborts Auto configuration.
DHCP client automatically broadcasts requests for DHCP options 66 and 67. If DHCP and DHCP Auto
Configuration Options are enabled, Access Point is Auto configured during next reboot considering the
information received from DHCP Server for DHCP requests.
Configuration upload operation by User/Cisco overrides the Auto Configuration so that the chosen
configuration file is given preference. In any other cases of rebooting the AP such as firmware upgrade
or reboot operations, existing Auto Configuration settings will be effective.
Note
•TFTP Server IPv4 Address/Host Name—If you configure TFTP server address, it is used in case of
failure to retrieve file from other TFTP Servers specified by DHCP server during Auto Configuration.
Enter IPv4 address or hostname information. If it happens to be in hostname format DNS server must
be available to translate hostname into IP address.
The value is used during the Auto Configuration procedure during next boot-up.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
10
System Configuration
DHCP Auto Configuration Settings

•Configuration File Name—If you specify the configuration file name, it is retrieved from TFTP Server
during Auto Configuration of AP, in case the boot file name is not received from DHCP server. Absence
of this value indicates config.xml to be used. The file must have an xml extension if specified.
The value is used during the Auto Configuration procedure during next boot-up.
•Wait Interval—If configured, Access Point comes up with the local configuration and makes enabled
services available to the user, after the wait interval. Access point aborts Auto configuration if TFTP
transaction is not initiated within this interval specified.
The value is used during the Auto Configuration procedure during next boot-up.
•Status Log—This field displays reason of Auto Configuration completion or abort.
IPv6 Configuration
Use the IPv6 Setting page to configure the IPv6 address by following these steps:.
Step 1 Select LAN > IPv6 Configuration.
Step 2 Configure the following parameters:
•IPv6 Connection Type —Select one of the following options:
◦DHCPv6 —The IPv6 address is assigned by a DHCPv6 server.
◦Static IPv6 —Manually configure the IPv6 address. The IPv6 address should be in a form similar to
xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx (2001:DB8:CAD5:7D91).
•IPv6 Administrative Mode —Check Enable to enable IPv6 administrative mode.
•IPv6 Auto Configuration Administrative Mode —Check Enable to enable the IPv6 automatic address
configuration.
When the IPv6 automatic address configuration is enabled, the WAP device recognizes its IPv6 addresses and
gateway by processing the router advertisements received on the LAN port. The WAP device can have multiple
auto-configured IPv6 addresses.
•Static IPv6 Address —Enter the static IPv6 address. The WAP device can have a static IPv6 address even if
addresses have already been configured automatically.
•Static IPv6 Address Prefix Length —Enter the prefix length of the static address, which is an integer in the range
of 0 to 128. The default is 0.
•Static IPv6 Address Status —Select one of the following options:
◦Operational —The IP address has been verified as unique and is usable on the LAN interface.
◦Tentative —The WAP device automatically initiates a duplicate address detection (DAD) process when a
static IP address is assigned. This IPv6 address is tentative as it is being verified on the network and cannot
be used to transmit or receive traffic.
◦Blank (no value) —No IP address is assigned.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
11
System Configuration
IPv6 Configuration

•IPv6 Autoconfigured Global Addresses —Lists the IPv6 addresses which have been automatically assigned to
the device.
•IPv6 Link Local Address —The IPv6 address used by the local physical link. The link local address is not
configurable and is assigned by using the IPv6 Neighbor Discovery process.
•Default IPv6 Gateway —The statically configured default IPv6 gateway.
•IPv6 Domain Name Servers —Select one of the following options:
◦Dynamic —The DNS servers are recognized dynamically through the DHCPv6.
◦Manual —To manually specify up to two IPv6 DNS servers.
Port Settings Table
Use the Port Settings Table to view and configure the settings for the port that connects the WAP device to
a LAN.
Step 1 Select LAN > More > Port Settings Table.
The Port Settings Table displays the following status and configurations for the LAN interface:
•Link Status —Displays the current port link status.
•Port Speed —When in review mode, it lists the current port speed. When in edit mode, and the Auto Negotiation
is disabled, select a port speed such as 100 Mbps or 10 Mbps. The 1000 Mbps speed is the only supported when
Auto-Negotiation is enabled.
•Duplex Mode —When in review mode, it lists the current port duplex mode. When in edit mode, and the Auto
Negotiation is disabled, select either Half or Full duplex mode.
•Auto Negotiation —When enabled, the port negotiates with its link partner to set the fastest link speed and duplex
mode available. When disabled, you can manually configure the Port Speed and Duplex Mode.
•Green Ethernet —Green Ethernet Mode supports both the auto-power-down mode and the EEE (Energy Efficient
Ethernet, IEEE 802.3az) mode. The Green Ethernet Mode works only when the auto-negotiation on the port is
enabled. The auto-power-down mode reduces the chip power when the signal from a link partner is not present.
The WAP device automatically enters into a low-power mode when energy on the line is lost, and it resumes normal
operation when energy is detected. The EEE mode supports QUIET times during low link utilization, allowing
both sides of a link to disable portions of each PHY’s operating circuit and save power.
Step 2 Click Save.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
12
System Configuration
Port Settings Table

Spanning Tree Protocol
In the Spanning Tree Protocol mode, check Enable checkbox to enable the STP mode on the Cisco WAP
device. When enabled, STP helps prevent switching loops. STP is recommended if you configure WDS links.
VLANs Setting
Use the VLAN Configuration page to view and configure the VLANs settings.
Step 1 Select LAN > More > VLANs Setting Table.
Step 2 Configure these parameters:
•Untagged VLAN ID —Specifies a number between 1 and 4094 for the untagged VLAN ID. The default is 1. The
traffic on the VLAN that you specify in this field is not be tagged with a VLAN ID when forwarded to the network.
•Description —Description of the related VLAN.
•Management VLAN —The Management VLAN is the VLAN used to access the WAP device through Telnet
or the web GUI. There must be only one VLAN as the management VLAN. If no interface (wire or wireless) is
assigned to the Management VLAN, there will be no interface that a user can use to access the configuration utility.
•VLAN —Select from the drop-down list (Untagged or Tagged) VLAN.
By default, all traffic on the WAP device uses the VLAN 1, the default untagged VLAN. This means that all traffic
is untagged until you disable the untagged VLAN, change the untagged traffic VLAN ID, or change the VLAN
ID for a VAP or client using RADIUS.
Step 3 Click Save. The changes are saved to the Startup Configuration.
Neighbor Discover
Bonjour enables the WAP device and its services to be discovered by using multicast DNS (mDNS). Bonjour
advertises services to the network and answers queries for the service types that it supports, simplifying
network configuration in your environments.
The WAP device advertises these service types:
•Cisco-specific device description (csco-sb) —This service enables clients to discover the Cisco WAP
devices and other products deployed in your networks.
•Management user interfaces —This service identifies the management interfaces available on the
WAP device (HTTP and SNMP).
When a Bonjour-enabled WAP device is attached to a network, any Bonjour client can discover and get access
to the configuration utility without prior configuration.
A system administrator can use an installed Internet Explorer plug-in to discover the WAP device. The
web-based Configuration Utility shows up as a tab in the browser.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
13
System Configuration
Spanning Tree Protocol

The system administrator can view the Bonjour enabled WAP’s using the latest Internet Explorer plug-in
(Cisco FindIT tool). All WAP devices present in a cluster, are shown under the cluster name after the
Bonjour discovery process. The administrator should ensure that the name of the cluster is unique within
a network.
Note
Bonjour works in both IPv4 and IPv6.
To enable the WAP device to be discovered through Bonjour, follow these steps:
Step 1 Select LAN > Neighbor Discover .
Step 2 Check Enable to enable Bonjour.
Step 3 Click Save. The changes are saved to the Startup Configuration.
LLDP
The Link Layer Discovery Protocol (LLDP) is defined by the IEEE 802.1AB standard and allows the UAP
to advertise its system name, system capabilities, and power requirements. This information can help to identify
system topology and detect bad configurations on the LAN. The AP also supports the Link Layer Discovery
Protocol for the Media Endpoint Devices (LLDP-MED), which standardizes additional information elements
that devices can pass to each other to improve network management.
Step 1 To configure the LLDP settings, select LAN > LLDP.
Step 2 Configure the following parameters:
•LLDP Mode —Check Enable to enable the LLDP. Once enabled, the AP transmits LLDP Protocol Data Units
to the neighbor devices.
•TX Interval —The number of seconds between each LLDP message transmissions. The valid range is 5 to 32768
seconds. The default value is 30 seconds.
•POE Priority —Select the priority level from the drop-down list (Critical, High, Low or Unknown). The PoE
priority helps the Power Sourcing Equipment (PSE), determine which powered devices should be given priority
in power allocation when the PSE doesn't have enough capacity to supply power to all connected devices.
Step 3 Click Save.
IPv6 Tunnel
The WAP device supports the Intra-Site Automatic Tunnel Addressing Protocol (ISATAP). The ISATAP
enables the WAP device to transmit IPv6 packets encapsulated within the IPv4 packets over the LAN. The
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
14
System Configuration
LLDP