Cisco WAP371 Instruction Manual

Cisco Small Business
WAP371 Wireless-AC/N Dual Radio Access Point
with Single Point Setup
ADMINISTRATION
GUIDE

Cisco Small Business WAP371 Wireless Access Point Administration Guide 1
Contents
Chapter 1: Getting Started 5
Starting the Web-Based Configuration Utility 5
Using the Access Point Setup Wizard 6
Getting Started 9
Window Navigation 10
Chapter 2: Status and Statistics 13
System Summary 13
Network Interfaces 15
Traffic Statistics 16
WorkGroup Bridge Transmit/Receive 16
Associated Clients 17
TSPEC Client Associations 18
TSPEC Status and Statistics 20
TSPEC AP Statistics 22
Radio Statistics 22
Email Alert Status 24
Log 24
Chapter 3: Administration 25
System Settings 25
User Accounts 26
Time Settings 28
Log Settings 29
Email Alert 31
LED Display 34
HTTP/HTTPS Service 35
Management Access Control 37
Manage Firmware 37
Download/Backup Configuration File 39

Cisco Small Business WAP371 Wireless Access Point Administration Guide 2
Contents
Configuration Files Properties 41
Copy/Save Configuration 42
Reboot 42
Discovery—Bonjour 43
Packet Capture 44
Support Information 50
Chapter 4: LAN 52
Port Settings 52
VLAN and IPv4 Address Settings 53
IPv6 Addresses 54
IPv6 Tunnel 56
LLDP 57
Chapter 5: Wireless 60
Radio 60
Rogue AP Detection 68
Networks 71
Scheduler 82
Scheduler Association 85
Bandwidth Utilization 86
MAC Filtering 86
WDS Bridge 88
WorkGroup Bridge 91
Quality of Service 94
Chapter 6: System Security 99
RADIUS Server 99
802.1X Supplicant 101
Password Complexity 102

Cisco Small Business WAP371 Wireless Access Point Administration Guide 3
Contents
WPA-PSK Complexity 103
Chapter 7: Client Quality of Service 105
Client QoS Global Settings 105
ACL 105
Class Map 113
Policy Map 117
Client QoS Association 119
Client QoS Status 121
Chapter 8: Simple Network Management Protocol 123
General SNMP Settings 123
Views 126
Groups 127
Users 129
Targets 130
Chapter 9: Captive Portal 132
Local Groups 132
Local Users 133
Instance Configuration 134
Instance Association 137
Web Portal Customization 138
Captive Portal Global Configuration 142
Authenticated Clients 143
Failed Authentication Clients 144
Chapter 10: Single Point Setup 145
Single Point Setup Overview 145
Access Points 149

Cisco Small Business WAP371 Wireless Access Point Administration Guide 4
Contents
Sessions 152
Channel Management 154
Wireless Neighborhood 157
Appendix A: Deauthentication Message Reason Codes 161
Deauthentication Reason Code Table 161
Appendix B: Where to Go From Here 163

1
Cisco Small Business WAP371 Wireless Access Point Administration Guide 2
Getting Started
This chapter provides an introduction to the Wireless Access Point (WAP) devices web-based
configuration utility, and includes these topics:
• Starting the Web-Based Configuration Utility
• Using the Access Point Setup Wizard
• Getting Started
• Window Navigation
Starting the Web-Based Configuration Utility
This section describes system requirements and how to navigate the web-based configuration
utility.
Supported Browsers
•Internet Explorer 7.0 or later
•Chrome 5.0 or later
•Firefox 3.0 or later
•Safari 3.0 or later
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address to access
the AP. You can, however, use the Domain Name System (DNS) server to create a
domain name that contains the IPv6 address, and then use that domain name in the
address bar in place of the IPv6 address.
•When using Internet Explorer 8, you can configure security settings from Internet
Explorer. Select Tools > Internet Options and then select the Security tab. Select
Local Intranet and select Sites. Select Advanced and then select Add. Add the
intranet address of the AP (http://<ip-address>) to the local intranet zone. The IP

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP371 Wireless Access Point Administration Guide 3
1
address can also be specified as the subnet IP address, so that all addresses in the
subnet are added to the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the IPv6 global
address instead of the IPv6 local address to access the AP from your browser.
Logging Out
By default, the web-based AP configuration utility logs out after 10 minutes of inactivity. See
HTTP/HTTPS Service for instructions on changing the default timeout period.
To log out, click Logout in the top right corner of the web-based AP configuration utility.
Using the Access Point Setup Wizard
The first time that you log into the AP (or after it has been reset to the factory default settings),
the Access Point Setup Wizard appears to help you perform initial configurations. Follow
these steps to complete the wizard:
NOTE If you click Cancel to bypass the Wizard, the Change Password page appears. You can then
change the default password for logging in. For all other settings, the factory default
configurations apply.
You must log in again after changing your password.
STEP 1 Click Next on the Welcome page of the Wizard. The Configure Device - IP Address window
appears.
STEP 2 Click Dynamic IP Address (DHCP) if you want the WAP device to receive an IP address from
a DHCP server. Or select Static IP Address to configure IP Address manually. For a
description of these fields, see VLAN and IPv4 Address Settings.
STEP 3 Click Next. The Single Point Setup — Set a Cluster window appears. For a description of
Single Point Setup, see Single Point Setup.
STEP 4 To create a new Single Point Setup of WAP devices, select Create a New Cluster and specify a
New Cluster Name. When you configure your devices with the same cluster name and enable
Single Point Setup mode on other WAP devices, they automatically join the group.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP371 Wireless Access Point Administration Guide 4
1
If you already have a cluster on your network, you can add this device to it by clicking Join an
Existing Cluster, and then entering the Existing Cluster Name.
If you do not want this device to participate in a Single Point Setup at this time, click Do not
Enable Single Point Setup.
(Optional) You can enter text in the AP Location field to note the physical location of the WAP
device.
STEP 5 Click Next. The Configure Device - Set System Date and Time window appears.
STEP 6 Select your time zone, and then set the system time manually or set up the WAP device to get
its time from an NTP server. For a description of these options, see Time Settings.
STEP 7 Click Next. The Enable Security - Set Password window appears.
STEP 8 Enter a New Password and enter it again in the Confirm Password text box. For more
information about passwords, see User Accounts.
NOTE You can uncheck the Password Complexity box if you wish to disable the
password security rules. However, we strongly recommend keeping the password
security rules enabled.
STEP 9 Click Next. The Enable Security - Name Your Wireless Network window appears for the
Radio 1 interface.
NOTE For this window and the following two windows (Wireless Security and VLAN
ID), you configure these settings for the Radio 1 interface first. Then the windows
repeat to enable you to configure these settings for Radio 2.
STEP 10 Enter a Network Name. This name serves as the SSID for the default wireless network.
STEP 11 Click Next. The Enable Security - Secure Your Wireless Network window appears.
STEP 12 Choose a security encryption type and enter a security key. For a description of these options,
see System Security.
STEP 13 Click Next. The Wizard displays the Enable Security- Assign the VLAN ID For Your Wireless
Network window.
STEP 14 Enter a VLAN ID for traffic received on the wireless network.
It is suggested that you assign a different VLAN ID from the default (1) to wireless traffic, in
order to segregate it from management traffic on VLAN 1.
STEP 15 Click Next.
STEP 16 For the WAP371 device, the Network Name, Wireless Security, and VLAN ID pages show to
enable configuring Radio 2. When finished with configuring Radio 2, click Next.

Getting Started
Using the Access Point Setup Wizard
Cisco Small Business WAP371 Wireless Access Point Administration Guide 5
1
The Wizard displays the Enable Captive Portal - Create Your Guest Network window.
STEP 17 Select whether or not to set up an authentication method for guests on your network, and click
Next.
If you click No, skip to STEP 25.
If you click Yes, the Wizard displays the Enable Captive Portal - Name Your Guest Network
window.
STEP 18 Specify a Guest Network Name for Radio 1. For the WAP371 device, select whether the guest
network uses Radio 1 or Radio 2.
STEP 19 Click Next. The Wizard displays the Enable Captive Portal - Secure Your Guest Network
window.
STEP 20 Choose a security encryption type for the guest network and enter a security key. For a
description of these options, see System Security.
STEP 21 Click Next. The Wizard displays the Enable Captive Portal - Assign the VLAN ID window.
STEP 22 Specify a VLAN ID for the guest network. The guest network VLAN ID should be different
from the management VLAN ID.
STEP 23 Click Next. The Wizard displays the Enable Captive Portal - Enable Redirect URL window.
STEP 24 Select Enable Redirect URL and specify a fully qualified domain name or IP address in the
Redirect URL field (including http://). If specified, guest network users are redirected to the
specified URL after authenticating.
STEP 25 Click Next. The Wizard displays the Summary - Confirm Your Settings window.
STEP 26 Review the settings that you configured. Click Back to reconfigure one or more settings. If
you click Cancel, all settings are returned to the previous or default values.
STEP 27 If they are correct, click Submit. Your WAP setup settings are saved and a confirmation
window appears.
STEP 28 Click Finish. The Login window appears to log in to the AP using the changed password.

Getting Started
Getting Started
Cisco Small Business WAP371 Wireless Access Point Administration Guide 6
1
Getting Started
To simplify device configuration through quick navigation, the Getting Started page provides
links for performing common tasks. The Getting Started page is the default window every time
you log into the web-based AP configuration utility.
Links on the Getting Started Page
Category Link Name (on the Page) Linked Page
Initial Setup Run Setup Wizard Using the Access Point
Setup Wizard
Configure Radio Settings Radio
Configure Wireless Network Settings Networks
Configure LAN Settings LAN
Configure Single Point Setup Single Point Setup
Device Status System Summary System Summary
Wireless Status Network Interfaces
Quick Access Change Account Password User Accounts
Upgrade Device Firmware Manage Firmware
Backup/Restore Configuration Download/Backup
Configuration File