Text Part Number OL-2159-05
Corporate Headquarters
 Copyright 2001-2003, Cisco Systems, Inc All rights reserved
 Iii
N T E N T S
 Navigating Using the Map Windows
 Native Vlan ID
 WEP Not Set on the Wireless Phone
 Vii
Settings on the Authenticator Configuration
 Viii
Event Notifications Setup
 Setting Up Administrator Authorization
 Snmp Setup
 Ssid
 Xii
 Audience and Scope
Organization
Xiii
 Conventions
Tip Means the following are useful tips
Xiv
 Related Publications
Obtaining Documentation
Cisco.com
 Xvi
Documentation CD-ROM
Ordering Documentation
Documentation Feedback
 Xvii
Obtaining Technical Assistance
Cisco TAC Website Opening a TAC Case
TAC Case Priority Definitions
 Xviii
Obtaining Additional Publications and Information
 A P T E R
Overview
 Key Features
 Quality of Service Support
Management Options
Roaming Client Devices
 These documents are available on Cisco.com
What is QoS?
Limitations and Restrictions
Related Documents
 Vlan Support
What is a VLAN?
 Incorporating Wireless Devices into VLANs
 Vlan Example
Level of Access
 Root Unit on a Wired LAN
Network Configuration Examples
 Access Points as Root Units on a Wired LAN
Repeater Unit that Extends Wireless Range
 Access Point as Repeater
Central Unit in an All-Wireless Network
 Using the Management Interfaces
 Button/Link Description
Using the Web-Browser Interface
Using the Web-Browser Interface for the First Time
Using the Management Pages in the Web-Browser Interface
 Map Window with Network Ports Pages Expanded
Navigating Using the Map Windows
 Preparing to Use a Terminal Emulator
Using the Command-Line Interface
 Changing Settings with the CLI
Connecting the Serial Cable
Setting Up the Terminal Emulator
 Function Description
Selecting Pages and Settings
 Using Snmp
Using a Telnet Session
Applying Changes to the Configuration
 Supported MIBs
 Radio Configuration and Basic Settings
 Express Setup
Basic Settings
 MAC Address
Entering Basic Settings
Express Setup page contains the following settings
System Name
 Default Gateway
Configuration Server Protocol
Default IP Address
Default IP Subnet Mask
 Root-Unit Access Points
 Radio Network Optimization Optimize Radio Network For
Security Setup Link
 Radio Configuration
Snmp Admin. Community
Radio Network Compatibility Ensure Compatibility With
 Entering Identity Information
Settings on the AP Radio Identification
 Service Set ID Ssid
Primary Port Settings
Default IP Address
Default IP Subnet Mask
 Entering Radio Hardware Information
Leap Password
 Settings on the AP Radio Hardware
AP Radio Hardware page contains the following settings
Allow Broadcast Ssid to Associate?
 Data Rates
Enable World Mode
 Max. RTS Retries
Transmit Power
Frag. Threshold
RTS Threshold
 Default Radio Channel
Search for Less-Congested Radio Channel
Restrict Searched Channels
 Receive Antenna and Transmit Antenna
Entering Advanced Configuration Information
 AP Radio Advanced Page for Internal Radio
 Packet Forwarding
Settings on the AP Radio Advanced
AP Radio Advanced pages contain the following settings
Requested Status
 Ssid For Use By Infrastructure Stations
Default Multicast Address Filters
Maximum Multicast Packets/Second
Radio Cell Role
 Classify Workgroup Bridges as Network Infrastructure
Use Aironet Extensions
 Ethernet Encapsulation Transform
Quality of Service Setup Link
Vlan Setup Link
Require Use of Radio Firmware
 Broadcast WEP Key rotation interval sec
Advanced Primary Ssid Setup Link
Preferred Access Points
Temporal Key Integrity Protocol
 Radio Preamble
Radio Modulation
 Non-Root Mobility
Ethernet Configuration
 Entering Ethernet Hardware Information
Settings on the Ethernet Identification
 Settings on the Ethernet Hardware
Ethernet Hardware page contains the following settings
Speed
 Loss of Backbone Connectivity # of Secs
Loss of Backbone Connectivity Action
Loss of Backbone Connectivity Ssid
 Ethernet Advanced page contains the following settings
Settings on the Ethernet Advanced
 Default Unicast and Multicast Address Filters
 Default Unicast Address Filter
Always Unblock Ethernet When STP is Disabled
Optimize Ethernet for
 OL-2159-05
 Configuring VLANs
 Settings on the Vlan Setup
Vlan setup page contains the following settings
Entering Vlan Information
 Vlan 802.1Q Tagging
802.1Q Encapsulation Mode
Maximum Number of Enabled Vlan IDs
Vlan Summary Status Link
 Vlan Name
Vlan Security Policy
Single Vlan ID which allows Unencrypted packets
Optionally allow Encrypted packets on the unencrypted Vlan
 TKIP/MIC
Native Vlan Configuration
Broadcast Domain Segmentation
Parameter
 Deployment of Infrastructure and Non infrastructure Devices
Primary and Secondary SSIDs
 Vlan ID
RADIUS-Based Vlan Access Control
 Vlan
Criteria for Deploying Wireless VLANs
 Wireless Vlan Deployment Example
 5shows the wireless Vlan deployment scenario described above
 Creating the Native Vlan
Using the Configuration Screens
Obtaining and Recording Vlan ID and Setup Information
Creating and Configuring VLANs on the Access Point
 Vlan Setup
 Vlan ID #1 Setup
 Creating the Full- and Part-Time VLANs
 Creating the Guest Vlan
Creating the Maintenance Vlan
 Creating and Configuring the SSIDs
 AP Radio Internal Service Sets
 Configuring VLANs Wireless Vlan Deployment Example
 Enabling Vlan 802.1Q Tagging and Identifying the Native Vlan
 11 AP Radio Service Sets
 Creating an Ssid for Infrastructure Devices
Guidelines for Wireless Vlan Deployment
 OL-2159-05
 Configuring Filters and QoS
 Protocol Filtering
Filter Setup
 Enter a descriptive filter set name in the Set Name field
Creating a Protocol Filter
 Filter Set
 Enabling a Protocol Filter
 Address Filters
MAC Address Filtering
 Creating a MAC Address Filter
 AP Radio Advanced
 AP Radio Primary Ssid
 QoS Configuration
 Settings on the Quality of Service Setup
Use Symbol Extensions
Generate Qbss Element
 Traffic Category
Applying QoS
By Station
Send Igmp General Query
 10 Protocol Filters Setup
 12 Vlan ID
By Vlan
 By Filter
13 Filters Priority Setting
 By Dscp Value
By CoS Value
 17 Vlan Setup
Wireless QoS Deployment Example
 18 Vlan ID #xx
 WEP Not Set on the Wireless Phone
WEP Set on the Wireless Phone
 20 AP Radio Internal Service Sets
 21 AP Radio Internal Service Sets
 OL-2159-05
 Configuring Proxy Mobile IP
 Introduction to Mobility in IP
Proxy Mobile IP
 Nomadic Approach
Mobile Approach
Mobile IP Explained
 Mobile IP Environment
 Mobile IP Traffic Pattern
Proxy Mobile IP Explained
 Before Deploying Proxy Mobile IP
 Components of a Proxy Mobile IP Network
Issues to Consider While Deploying Proxy Mobile IP
 Agent Discovery
How Proxy Mobile IP Works
 Home Agent Subnet Mask
Subnet Map Exchange
 Tunneling
Registration
 Proxy Mobile IP Security
Proxy Mobile IP Setup
 General
Proxy Mobile IP Setup
 Authoritative AP n
Authentication Server
Settings on the Proxy Mobile IP General
Enable Proxy Mobile IP
 Settings on the Authenticator Configuration
 Local SA Bindings
Settings on the Local SA Bindings
 Statistics
Settings on the Proxy Mobile IP Statistics
 MN IP Addresses
Authentication Failures for HA
Authentication Failures for FA
Active AAP
 Configuring Proxy Mobile IP
Settings on the Subnet Map Table
View Subnet Map Table
 Configuring Proxy Mobile IP on Your Wired LAN
 11 a Sample Network
 13 AP Radio Internal Service Sets
 15 Proxy Mobile IP General
 17 Subnet Map Table
 18 Authenticator Configuration
 20 Network Configuration Screen for an Access Point Client
 22 Passed Authentication Screen
 Configuring Other Settings
 Entering Time Server Settings
Server Setup
 Settings on the Time Server Setup
 Entering Boot Server Settings
Settings on the Boot Server Setup
Boot Server Setup page contains the following settings
 Dhcp Multiple-Offer Timeout sec
Configuration Server Protocol
Use Previous Configuration Server Settings
Bootp Server Timeout sec
 Option Definition
Dhcp Requested Lease Duration min
Dhcp Minimum Lease Duration min
Dhcp Client Identifier Type
 Dhcp Class Identifier
Settings on the Web Server Setup
Web Server Setup page contains the following settings
Dhcp Client Identifier Value
 Http Port
Default Help Root URL
Default Web Root URL
Allow Non-Console Browsing
 Domain Name System
Entering Name Server Settings
Settings on the Name Server Setup
Default Domain
 Domain Name Servers
Entering FTP Settings
Settings on the FTP Setup
FTP Setup page contains the following settings
 Routing Setup
 Entering Routing Settings
New Network Route Settings
Routing Setup page contains the following settings
 Association Table Display Setup
Installed Network Routes list
Association Table Filters
 Configuring Other Settings Association Table Display Setup
 Settings on the Association Table Filters
Stations to Show
Fields to Show
 Primary Sort
Association Table Advanced
Packets To/From Station
Bytes To/From Station
 Association Table Advanced
Settings on the Association Table Advanced
 Maximum Number of Forwarding Table Entries
Rogue AP Alert Timeout minutes
Handle Station Alerts as Severity Level
Maximum number of bytes stored per Station Alert packet
 Default Activity Timeout seconds Per Device Class
Event Notification Setup
Event Display Setup
Settings on the Event Display Setup
 Severity Level Description
How should time generally be displayed?
How should Event Elapsed non-wall-clock Time be displayed?
Severity Level at which to display events
 Event Handling Setup
 10 The Event Handling Setup
 Maximum number of bytes stored per Alert packet
Settings on the Event Handling Setup
Disposition of Events
Handle Station Events as Severity Level
 Event Notifications Setup
Clear Alert Statistics
Purge Trace Buffer
 Snmp Trap Community
Settings on the Event Notifications Setup
Should Notify-Disposition Events generate Snmp Traps?
Snmp Trap Destination
 Ieee Snmp Traps Should Generate the Following Notifications
Should Syslog Messages use the Cisco Emblem Format?
Syslog Destination Address
Syslog Facility Number
 Security Setup
 Encrypting Radio Signals with WEP
Security Overview
Levels of Security
 Network Authentication Types
Additional WEP Security Features
 Sequence for EAP Authentication
 Wired LAN Client
 Sequence for Open Authentication
Combining MAC-Based, EAP, and Open Authentication
 Protecting the Access Point Configuration with User Manager
Setting Up WEP
 Transmit? Key Contents
Key Access Point Associated Device
 Not set
 Snmp Variable WEP Full WEP Off
Enabling Additional WEP Security Features
Using Snmp to Set Up WEP
Enabling Message Integrity Check MIC
 AP Radio Advanced Page for Internal Radio
 Enabling Temporal Key Integrity Protocol Tkip
 Enabling Broadcast WEP Key Rotation
 Setting Up Open or Shared Key Authentication
 Enabling EAP on the Access Point
Setting Up EAP Authentication
 Firmware Version Draft 802.1x-2001
 Access Point EAP Settings for Various Client Configurations
 Enabling EAP in Cisco Secure ACS
Click Add New Access Server
 Setting a Session-Based WEP Key Timeout
Setting Up a Repeater Access Point As a Leap Client
 AP Radio Identification Page for Internal Radio
 Enabling MAC-Based Authentication on the Access Point
Setting Up MAC-Based Authentication
 11 Authenticator Configuration
 Security Setup Setting Up MAC-Based Authentication
 12 AP Radio Advanced
 Authenticating Client Devices Using MAC Addresses or EAP
 Enabling MAC-Based Authentication in Cisco Secure ACS
 Summary of Settings for Authentication Types
Authentication Types Required Settings
Leap
 EAP-TLS, EAP-MD5
 Attribute ID Description
Radius Attributes Sent by the Access Point
 VSA attribute Nas-location Vlan-id Auth-algo-type
Acct-Delay-Time
Acct-Session-Id
Acct-Authentic
 Acct-Terminate-Cause
Setting Up Backup Authentication Servers
 Setting Up Administrator Authorization
 Creating a List of Authorized Management System Users
14 Security Setup
 16 User Management Window
 Click Apply. You are returned to the User Information
Setting up Centralized Administrator Authentication
Click User Information. The User Information page appears
Click Add New User. The User Management window appears
 18 Authenticator Configuration
 System Flow Notes
 Authorization Parameters
 Network Management
 Using the Association Table
Setting the Display Options
Browsing to Network Devices
 Station
Using Station Pages
 Station Identification and Status
Information on Station Pages
 Rate, Signal, and Status Information
To Station Information
From Station Information
 Performing Pings and Link Tests
Hops and Timing Information
Performing a Ping
 Click Link Test
Performing a Link Test
 Using the Network Map Window
Deauthenticating and Disassociating Client Devices
Clearing and Updating Statistics
 Using Cisco Discovery Protocol
 MIB for CDP
Settings on the CDP Setup
 Port Assignments
Assigning Network Ports
 Settings on the Port Assignments
Enabling Wireless Network Accounting
 Accounting Setup
Settings on the Accounting Setup
 Attribute Definition
Accounting Attributes
 Radiusipadr
 OL-2159-05
 10-1
Managing Firmware and Configurations
 10-2
Full Update of the Firmware Components
Updating Firmware
Updating with the Browser from a Local Drive
 10-3
Selective Update of the Firmware Components
 10-4
Updating from a File Server
 10-5
Update All Firmware From File Server
 10-6
Update Firmware From File Server
 10-7
Retrieving Firmware and Web Page Files
 10-8
Distributing Firmware
 10-9
Distributing a Configuration
 10-10
Limiting Distributions
 10-11
Downloading the Current Configuration
 10-12
Uploading a Configuration
Uploading from a Local Drive
Uploading from a File Server
 10-13
Resetting the Configuration
 10-14
Restarting the Access Point
 11-1
Management System Setup
 Snmp Setup
Settings on the Snmp Setup
11-2
 Using the Database Query
Settings on the Database Query
11-3
 Console and Telnet Setup
Changing Settings with the Database Query
11-4
 Settings on the Console/Telnet
Using Secure Shell
11-5
 11-6
 12-1
Special Configurations
 12-2
Setting Up a Repeater Access Point
 12-3
 12-4
 12-5
Using Hot Standby Mode
 12-6
 12-7
 12-8
 13-1
Sections in this chapter include
 13-2
Using Diagnostic Pages
Network Diagnostics
Selections on the Network Diagnostics
 13-3
Radio Diagnostics Tests
 Vlan Summary Status
SSIDs Int, Mod
13-4
 13-5
Network Ports
 Identifying Information and Status
Data Received
13-6
 Data Transmitted
Ethernet Port
13-7
 Configuration Information
Receive Statistics
13-8
 AP Radio
Transmit Statistics
13-9
 AP Radio Port
13-10
 13-11
 13-12
Display Options
 Display Settings
Event Log
13-13
 13-14
Log Headings
Saving the Log
Event Log Summary
 Using Command-Line Diagnostics
Command Information Displayed
13-15
 13-16
Entering Diagnostic Commands
 Diagnostic Command Results
Eapdiag1on
13-17
 Eapdiag2on
Vxdiagarpshow
13-18
 13-19
 13-20
Vxdiagcheckstack
 13-21
Vxdiaghostshow
 13-22
Vxdiagi
 13-23
Vxdiagipstatshow
 13-24
Vxdiagmemshow
 13-25
Vxdiagmuxshow
 13-26
Vxdiagrouteshow
 13-27
Vxdiagtcpstatshow
 13-28
Reserving Access Point Memory for a Packet Trace Log File
Tracing Packets
Vxdiagudpstatshow
 13-29
Tracing Packets for Specific Devices
 13-30
Tracing Packets for Ethernet and Radio Ports
Viewing Packet Trace Data
Packets Stored in a Log File
 Checking the Top Panel Indicators
Packets Displayed on the CLI
13-31
 13-32
Message Ethernet Status Radio Meaning Type Indicator
 13-33
Finding an Access Point by Blinking the Top Panel Indicators
 13-34
Checking Basic Settings
EAP Authentication Requires Matching 802.1x Protocol Drafts
WEP Keys
 13-35
Firmware Version Draft
 13-36
Resetting to the Default Configuration
 13-37
 13-38
 Channels, Power Levels, and Antenna Gains
 Channels
Ieee 802.11a
Regulatory Domains
 Ieee 802.11b
Maximum Power Levels and Antenna Gains
 Americas -A 100 Eirp maximum 13.5 Emea -E MW Eirp maximum
Maximum Power Level mW
Regulatory Domain Antenna Gain dBi Maximum Power Level mW
Regulatory Domain With 6-dBi Antenna Gain
 Regulatory Domain Antenna Gain dBi Maximum Power Level mW
 OL-2159-05
 Protocol Filter Lists
 ISO Designator
Protocol
 Smtp
UDP XNS-IDP ISO-TP4 ISO-CNLP Cnlp
Vines
SVP
 POP2
Tftp
Http
Tsap
 RIP
Cmot
BGP
IRC
 Radius
CVS
RFE
 Event Log Messages
 With a timestamp, messages look like this example
Default Format
Message Formats
Cisco Emblem Format
 Logalert
Loginfo
Syslog Severity Emblem Severity
Logemerg
 Reason
Message Descriptions
Possible Cause or
Severity Event Description Mnemonic Recommended Action
 Host
Device
 Newaddr
Srchost
IfDescr
 Srchost to port ifDescr
Desthost length pktLen
 Reqlen bytes
 IfDescr error= errornum
Packet from srchost to desthost
Desthost on port ifDescr
 From srchost to desthost on port
IfDescr error=erronum
For procedure on port ifDescr
Srchost to desthost on port
 Srchost on port ifDescr
 Version
Srchost to desthost of unknown
Desthost
 Prtrarpip
Sysreboot
Rebootinf
Admin
 Port device
 Status
 PktLen
IfDescr errno=errno
 Ethercon
ENC WEP
Unenc
Xidexp
 Media port
 Frame
Frame bytes
 Unit
Username Failed
Username
Port devName unit
 Hstndbyeth
1XVER
Hstndbyen
Assoclost
 Nulses
Instkey
Acctcon
Amngrreq
 Open
Norbuf
Nosbuf
Noaserv
 VlanID
 IfIndex Awcmib
IfIndex MIB
 Taskstarted
Nomibdkey
Badsize
Taskfailed
 SsidIdx
 Statuses and Reasons
 Appendix C Event Log Messages Statuses and Reasons
 OL-2159-05
 IN-1
Numerics
 Dtim
CDP MIB
Dhcp
CLI
 IN-3
 Ethernet Locate unit by flashing LEDs
Radio traffic
IN-4
 IN-5
Pspf
 SSH
Vlan
IN-6
 IN-7
Warm restart
 IN-8