Cisco WAP131 Instruction Manual

Cisco WAP131 Wireless-N Dual Radio Access Point
with PoE
Cisco WAP351 Wireless-N Dual Radio Access Point
with 5 Ports Switch
ADMINISTRATION
GUIDE

© 2014 Cisco Systems, Inc. All rights reserved. OL-32504-01
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco WAP131 and WAP351 Administration Guide 3
Contents
Chapter 1: Getting Started 9
Getting Started with the Configuration 9
Supported Browsers 9
Browser Restrictions 9
Launching the Web-based Configuration Utility 10
Logging Out 11
Using the Access Point Setup Wizard 11
Configuring Cisco WAP131 Setup Wizard 12
Configuring Cisco WAP351 Setup Wizard 13
Changing the Default Password 16
Quick Start Configuration 17
Window Navigation 18
Configuration Utility Header 18
Navigation Pane/Main Menu 18
Management Buttons 19
Chapter 2: Status and Statistics 20
System Summary 20
Network Interfaces 22
Traffic Statistics 25
WorkGroup Bridge Transmit/Receive 25
Associated Clients 26
Radio Statistics 28
Email Alert Status 29
View Log 30
TSPEC Client Associations 30
TSPEC Status and Statistics 32
TSPEC AP Statistics 34

Cisco WAP131 and WAP351 Administration Guide 4
Contents
Chapter 3: Administration 35
System Settings 36
User Accounts 36
Adding a User 37
Changing a User Password 37
Time Settings 38
Automatically Acquiring the Time Settings through NTP 38
Manually Configuring the Time Settings 39
Log Settings 40
Configuring the Persistent Log 40
Configuring Remote Log Server 41
Email Alert 42
Configuring Email Alert Settings 43
Email Alert Examples 44
HTTP/HTTPS Service 45
Configuring HTTP and HTTPS Services 45
Managing SSL Certificates 47
Management Access Control 48
Manage Firmware 48
Swapping the Firmware Image 49
TFTP Upgrade 49
HTTP/HTTPS Upgrade 50
Manage Configuration File 51
Backup Configuration File 51
Download Configuration File 52
Copy/Save Configuration 53
Configuration Files Properties 54
Reboot 54
Discovery—Bonjour 55
Packet Capture 56
Packet Capture Configuration 56

Cisco WAP131 and WAP351 Administration Guide 5
Contents
Local Packet Capture 57
Remote Packet Capture 59
Packet Capture Status 62
Packet Capture File Download 62
Support Information 63
Spanning Tree Settings 63
Chapter 4: LAN 65
Port Settings 65
Configuring Port Settings for Cisco WAP131 65
Configuring Port Settings for Cisco WAP351 66
VLAN Configuration 67
Configuring VLAN Settings for Cisco WAP131 67
Configuring VLAN Settings for Cisco WAP351 68
IPv4 Setting 69
IPv6 Setting 70
Chapter 5: Wireless 74
Radio 74
Rogue AP Detection 81
Viewing the Rogue AP List 82
Saving the Trusted AP List 84
Importing a Trusted AP List 84
Networks 85
SSID Naming Conventions 85
VLAN IDs 86
Configuring VAPs 86
Configuring Security Settings 89
None (Plain-text) 89
Static WEP 89
Static WEP Rules 91
Dynamic WEP 91

Cisco WAP131 and WAP351 Administration Guide 6
Contents
WPA Personal 93
WPA Enterprise 94
Scheduler 97
Adding Scheduler Profiles 97
Configuring Scheduler Rules 98
Scheduler Association 99
Bandwidth Utilization 99
MAC Filtering 100
Configuring a MAC Filter List Locally on the WAP device 100
Configuring MAC Authentication on the RADIUS Server 101
WDS Bridge 102
Configuring STP for Cisco WAP131 103
Configuring Untagged VLAN for Cisco WAP351 103
Configuring WDS Bridge 104
WEP on WDS Links 105
WPA/PSK on WDS Links 105
WorkGroup Bridge 106
Quality of Service 109
Chapter 6: System Security 113
RADIUS Server 113
802.1X/802.1X Supplicant 115
Configure 802.1X Supplicant for Cisco WAP131 115
Configure 802.1X for Cisco WAP351 117
Password Complexity 120
WPA-PSK Complexity 121
Chapter 7: Quality of Service 122
Global Settings 122
Configuring QoS Settings for Cisco WAP131 122
Configuring QoS Settings for Cisco WAP351 123

Cisco WAP131 and WAP351 Administration Guide 7
Contents
Class Map 124
Configuring an IPv4 Class Map 124
Configuring an IPv6 Class Map 127
Configuring a MAC Class Map 129
Policy Map 131
QoS Association 133
QoS Status 133
Chapter 8: ACL 135
ACL Rule 135
IPv4 and IPv6 ACLs 135
MAC ACLs 136
Workflow to Configure ACLs 136
Configure IPv4 ACLs 136
Configure IPv6 ACLs 140
Configure MAC ACLs 142
ACL Association 144
ACL Status 145
Chapter 9: SNMP 147
General 147
Views 150
Groups 151
Users 153
Targets 154
Chapter 10: Captive Portal 156
Global Configuration 157
Local Groups/Users 158
Local Groups 158
Local Users 159

Cisco WAP131 and WAP351 Administration Guide 8
Contents
Instance Configuration 160
Instance Association 163
Web Portal Customization 164
Configuring CP Authentication Page 164
Uploading and Deleting Images 167
Authenticated Clients 168
Chapter 11: Single Point Setup 170
Single Point Setup Overview 170
Managing Single Point Setup Across Access Points 171
Single Point Setup Negotiation 172
Operation of a Device Dropped From a Single Point Setup 173
Configuration Parameters Propagated and Not Propagated to Single Point
Setup Access Points 173
Access Points 175
Configuring the WAP Device for Single Point Setup 175
Viewing Single Point Setup Information 176
Adding a WAP Device to a Single Point Setup 177
Removing a WAP Device from a Single Point Setup 177
Navigating to Configuration Information for a Specific Device 177
Navigating to a Device Using its IP Address in a URL 178
Sessions 178
Channel Management 180
Configuring and Viewing the Channel Assignments 180
Viewing Channel Assignments and Setting Locks 181
Configuring Advanced Settings 182
Wireless Neighborhood 183
Viewing Neighboring Devices 183
Viewing Details for a Single Point Setup Member 185
Appendix A: Where to Go From Here 186

1
Cisco WAP131 and WAP351 Administration Guide 9
Getting Started
This chapter provides an introduction to the web-based Configuration Utility of the
Cisco WAP131 and WAP351 Wireless-N Dual Radio Access Points. It includes
these topics:
•Getting Started with the Configuration
•Using the Access Point Setup Wizard
•Changing the Default Password
•Quick Start Configuration
•Window Navigation
Getting Started with the Configuration
This section describes system requirements and how to access the web-based
Configuration Utility.
Supported Browsers
Before you begin to use the configuration utility, make sure that you have a
computer with Internet Explorer 7.0 or later, Firefox 3.0 or later, Chrome 5.0 or later,
or Safari 3.0 or later.
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the WAP device. You can, however, use the Domain Name System
(DNS) server to create a domain name that contains the IPv6 address, and
then use that domain name in the address bar in place of the IPv6 address.

Getting Started
Getting Started with the Configuration
Cisco WAP131 and WAP351 Administration Guide 10
1
•When using Internet Explorer 8, you can configure security settings from
Internet Explorer.
-Select Tools -> Internet Options and then select the Security tab.
-Select Local Intranet and then select Sites.
-Select Advanced and then select Add. Add the intranet address of the
WAP device (http://<ip- address>) to the local intranet zone. The IP
address can also be specified as the subnet IP address so that all
addresses in the subnet are added to the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 local address to access the WAP
device from your browser.
Launching the Web-based Configuration Utility
Follow these steps to access the configuration utility from your computer to
configure the WAP device:
STEP 1 Connect the WAP deviceto the same network (IP subnet) as your computer. The
factory default IP address configuration of the WAP device is DHCP. Make sure
that your DHCP server is running and can be reached.
STEP 2 Locate the IP address of the WAP device.
a. The WAP device can be accessed and managed by Cisconetwork tools and
services including the Cisco FindIT Network Discovery Utility that enables you
to automatically discover all supported Cisco devices in the same local
network segment as your computer. You can get a snapshot view of each
device or launch the product configurationutility to view and configure the
settings. For more information, see http://www.cisco.com/go/findit.
b. The WAP device is Bonjour-enabled and automatically broadcasts its services
and listens for services being advertised by other Bonjour-enabled devices. If
you have a Bonjour-enabled browser, such as Microsoft Internet Explorer with a
Bonjour plug-in, or the Apple Mac Safari browser, you can find the WAP device
on your local network without knowing its IP address.
You can download the complete Bonjour for Microsoft Internet Explorer browser
from Apple’s website by visiting: http://www.apple.com/bonjour/.
c. Locate the IP address assigned by your DHCP server by accessing your router
or DHCP server. See your DHCP server instructions for more information.