Cisco WAP571 Instruction Manual

Cisco WAP571 Wireless-AC/N Premium Dual Radio Access
Point with PoE
Cisco WAP571E Wireless-AC/N Premium Dual Radio Out-
door Access Point
ADMINISTRATION
GUIDE

Cisco WAP571/E Administration Guide 3
Contents
Chapter 1: Getting Started 9
Starting the Web-Based Configuration Utility 9
Logging Out 10
Using the Access Point Setup Wizard 10
Getting Started 13
Window Navigation 14
Chapter 2: Status and Statistics 17
System Summary 18
Network Interfaces 19
Traffic Statistics 21
Wireless Multicast Forwarding Statistics 22
WorkGroup Bridge Transmit/Receive 24
Associated Clients 24
TSPEC Client Associations 26
TSPEC Status and Statistics 28
TSPEC AP Statistics 30
Radio Statistics 30
Email Alert Status 32
Log 32
Chapter 3: Administration 33
System Settings 34
User Accounts 34
Adding a User 35
Changing a User Password 35
Time Settings 36
Log Settings 38
Configuring the Persistent Log 38
Remote Log Server 39

Cisco WAP571/E Administration Guide 4
Contents
Email Alert 40
Email Alert Examples 42
LED Display 43
HTTP/HTTPS Service 44
Configuring HTTP and HTTPS Services 44
Managing SSL Certificates 45
Management Access Control 46
Manage Firmware 47
Swapping the Firmware Image 47
TFTP Upgrade 48
HTTP Upgrade 49
Download/Backup Configuration File 49
Backing Up a Configuration File 50
Downloading a Configuration File 51
Configuration Files Properties 52
Copy/Save Configuration 52
Reboot 53
Discovery—Bonjour 54
Packet Capture 54
Local Packet Capture 56
Remote Packet Capture 58
Packet Capture File Download 61
Support Information 61
Spanning Tree Settings 62
Chapter 4: LAN 63
Port Settings 63
VLAN Configuration 64
IPv4 Setting 65
IPv6 Setting 66

Cisco WAP571/E Administration Guide 5
Contents
IPv6 Tunnel 68
LLDP 69
Chapter 5: Wireless 71
Radio 71
Rogue AP Detection 80
Viewing the Rogue AP List 80
Creating and Saving a Trusted AP List 83
Importing a Trusted AP List 83
Networks 84
SSID Naming Conventions 84
VLAN IDs 85
Configuring VAPs 85
Configuring Security Settings 88
Wireless Multicast Forwarding 96
Scheduler 97
Adding Scheduler Profiles 98
Configuring Scheduler Rules 98
Scope of Scheduler Rules 99
Scheduler Association 100
MAC Filtering 101
Configuring a MAC Filter List Locally on the WAP Device 101
Configuring MAC Authentication on the RADIUS Server 102
Bridge 102
WEP on WDS Links 105
WPA/PSK on WDS Links 105
Workgroup Bridge 106
Quality of Service 108

Cisco WAP571/E Administration Guide 6
Contents
Chapter 6: Spectrum Analyzer 113
Chapter 7: System Security 115
RADIUS Server 115
802.1X Supplicant 117
Password Complexity 119
WPA-PSK Complexity 120
Chapter 8: Client Quality of Service 121
Client QoS Global Settings 121
Class Map 122
Adding a Class Map 127
Policy Map 129
Client QoS Association 131
QoS Status 132
Chapter 9: ACL 133
ACL Rule 133
ACL Association 142
ACL Status 143
144
Chapter 10: SNMP 145
SNMP Overview 145
General SNMP Settings 146
Views 148
Groups 149
Users 151
Targets 153

Cisco WAP571/E Administration Guide 7
Contents
Chapter 11: Captive Portal 155
Global Configuration 155
Local Groups/Users 157
Local Groups 157
Local Users 158
Instance Configuration 159
Instance Association 162
Web Portal Customization 163
Uploading and Deleting Images 166
Authenticated Clients 167
Chapter 12: Single Point Setup 169
Single Point Setup Overview 169
Managing Single Point Setup Across Access Points 170
Single Point Setup Negotiation 171
Operation of a Device Dropped From a Single Point Setup 171
Configuration Parameters Propagated and Not Propagated to Single Point
Setup Access Points 172
Access Points 174
Sessions 177
Channel Management 179
Viewing Channel Assignments and Setting Locks 180
Configuring Advanced Settings 181
Wireless Neighborhood 182
Viewing Details for a Single Point Setup Member 184
Cluster Firmware Upgrade 184
Appendix A: Deauthentication Message Reason Codes 187
Deauthentication Reason Code Table 187
Appendix B: Where to Go From Here 189

Cisco WAP571/E Administration Guide 8
Contents

1
Cisco WAP571/E Administration Guide 9
Getting Started
This section provides an introduction to the Wireless Access Point (WAP) devices
web-based configuration utility, and includes these topics:
•Starting the Web-Based Configuration Utility
•Using the Access Point Setup Wizard
•Getting Started
•Window Navigation
Starting the Web-Based Configuration Utility
This section describes system requirements and how to navigate the web-based
configuration utility.
Supported Browsers
•Internet Explorer 7.0 or later
•Chrome 5.0 or later
•Firefox 3.0 or later
•Safari 3.0 or later
Browser Restrictions
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the Access Point. You can, however, use the Domain Name
System (DNS) server to create a domain name that contains the IPv6
address, and then use that domain name in the address bar in place of the
IPv6 address.
•When using Internet Explorer 8, you can configure security settings from
Internet Explorer. Select Tools > Internet Options and then select the
Security tab. Select Local Intranet and select Sites. Select Advanced and

Getting Started
Using the Access Point Setup Wizard
Cisco WAP571/E Administration Guide 10
1
then select Add. Add the intranet address of the Access Point (http://<ip-
address>) to the local intranet zone. The IP address can also be specified
as the subnet IP address, so that all addresses in the subnet are added to
the local intranet zone.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 local address to access the Access
Point from your browser.
Logging Out
By default, the web-based AP configuration utility logs out after 10 minutes of
inactivity. See HTTP/HTTPS Service for instructions on changing the default
timeout period.
To log out, click Logout in the top right corner of the web-based AP configuration
utility.
Using the Access Point Setup Wizard
The first time that you log into the Access Point (or after it has been reset to the
factory default settings), the Access Point Setup Wizard appears to help you
perform initial configurations. Follow these steps to complete the wizard:
You must log in again after changing your password.
STEP 1 Click Next on the Welcome page of the Wizard. The Configure Device - IP
Address window appears.
STEP 2 Click Dynamic IP Address (DHCP) if you want the WAP device to receive an IP
address from a DHCP server. You can also select Static IP Address to configure
the IP Address manually. For a description of these fields, see IPv4 Setting.
STEP 3 Click Next. The Single Point Setup-Set a Cluster window appears. For a
description of Single Point Setup, see Single Point Setup Overview.
STEP 4 To create a new Single Point Setup of WAP devices, select Create a New Cluster
and specify a New Cluster Name. When you configure your devices with the
same cluster name and enable Single Point Setup mode on other WAP devices,
they automatically join the group.