Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems OL-6415-04 manual Obtaining Documentation, Cisco.com

Models: OL-6415-04

1 188

Download 188 pages 52.52 Kb

Page 13

Preface

Obtaining Documentation

Table 1	Related and Referenced Documents (continued)

Cisco Product		Document Title

Cisco 800 series routers		Cisco 850 Series and Cisco 870 Series Routers Hardware Installation
		Guide

		Cisco 850 Series and Cisco 870 Series Access Routers Cabling and Setup
		Quick Start Guide

		Cisco 850 Series and Cisco 870 Series Access Routers Software
		Configuration Guide

		Regulatory Compliance and Safety Information for Cisco 800 Series and
		SOHO Series Routers

		Upgrading Memory in Cisco 800 Routers

Cisco 1800 series routers		Cisco 1800 Series Integrated Services Routers (Modular) Quick Start
		Guide

		Cisco 1800 Series Routers Hardware Installation Documents

		Cisco 1800 Series Software Configuration Guide

		Cisco 1800 Series Cards and Modules

		Regulatory Compliance and Safety Information for Cisco 1840 Routers

		Cisco Modular Access Router Cable Specifications

Cisco IOS software		Cisco IOS software documentation, all releases.
		Refer to the documentation for the Cisco IOS software release installed
		on your router.

Additional Documentation		Cisco AP HWIC and Access Router Wireless Configuration Guide

		Cisco Aironet 2.4-GHz Articulated Dipole Antenna (AIR-ANT4941

		Cisco Aironet High Gain Omnidirectional Ceiling Mount Antenna
		(AIR-ANT1728)

		Cisco Aironet 2 dBi Diversity Omnidirectional Ceiling Mount Antenna
		(AIR-ANT5959)

		Antenna Cabling

		Declarations of Conformity and Regulatory Information for Cisco Access
		Products with 802.11a/b/g and 802.11b/g Radios

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/techsupport

Cisco Wireless ISR and HWIC Access Point Configuration Guide

	OL-6415-04	13

Image 13

Cisco Systems OL-6415-04 manual Obtaining Documentation, Cisco.com

Contents

Text Part Number 0L-6415-04 Corporate HeadquartersPage N T E N T S Ssid Configuration Methods Supported by Cisco IOS Releases Creating Cipher Suites Protocol Filters Local Authenticator Messages Contents Cisco Wireless Router and Hwic Configuration Guide Audience PrefacePurpose Preface provides information on the following topicsConventions OrganizationPreface Conventions Cisco Product Document Title Related PublicationsCisco.com Obtaining DocumentationProduct Documentation DVD Documentation FeedbackOrdering Documentation Cisco Product Security Overview Reporting Security Problems in Cisco ProductsObtaining Technical Assistance Submitting a Service RequestCisco Technical Support & Documentation Website Obtaining Additional Publications and Information Definitions of Service Request SeverityPreface Obtaining Additional Publications and Information Overview Wireless Device ManagementRoot Unit on a Wired LAN Network Configuration ExampleFeatures Overview Features Overview Overview Cisco Wireless Router and Hwic Configuration Guide Configuring Radio Settings Enabling the Radio Interface Command PurposeRoles in Radio Network Cisco Role in Radio Network Eries ISRsConfiguring Network or Fallback Role Sample Bridging Configuration Bridge Features Not SupportedFollowing is a sample of a Root Bridge Configuration Following is a sample of Non-Root Bridge Configuration Interface Dot11Radio0/1/0 no ip address Configuring Universal Client Mode Universal Client ModeNAT Network Address Translation Following configuration is supported on NATVirtual interface to aid NAT translation No service password-encryption Hostname C1803WUC Configuring Radio Settings Configuring Radio Data Rates Configuring Radio Data RatesSpeed Throughput ofdm default11.0 2.0 5.5 basic-1.0 2.0 5.5 6.0 9.0End Return to privileged Exec mode Configuring Radio Transmit PowerDBm 100 125 150 200 250Power local Limiting the Power Level for Associated Client Devices5 6 7 10 13 15 17 MaximumPower client Configuring Radio Channel Settings20 30 50 100 maximum 10 20 30 50 MaximumRegulatory Domains Channel CenterIdentifier MHz 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 24672472 2484 Channel GHz Channels on Which DFS is Automatically Enabled DFS Automatically Enabled on Some 5-GHz Radio ChannelsConfirming that DFS is Enabled Enabling and Disabling World ModeThis example shows how to unblock all frequencies for DFS Blocking Channels from DFS SelectionEnabling and Disabling Short Radio Preambles Antenna receive Configuring Transmit and Receive AntennasDiversity left right Antenna transmitDisable Access Point extensions Disabling and Enabling Access Point ExtensionsNo dot11 extension aironet Payload-encapsulation Snap or 802.1h dot1h, the default settingSet the encapsulation transformation method to RFC1042 Snap dot1hEnable Pspf Configure terminal Enter global configuration modeBridge-group group port-protected Configuring Protected Ports Configuring Beacon Period and DtimConfiguring Maximum Data Retries Configuring RTS Threshold and RetriesRts threshold value Rts retries valueBytes for the 2.4-GHz radio. Enter a setting from 256 to Configuring Fragmentation ThresholdEnabling Short Slot Time for 802.11g Radios Fragment-threshold valuePerforming a Carrier Busy Test OL-6415-04 Configuring Multiple SSIDs Understanding Multiple SSIDs Ssid Configuration Methods Supported by Cisco IOS ReleasesVlan Creating an Ssid Globally Configuring Multiple SSIDsCommand Purpose Viewing SSIDs Configured Globally Using a Radius Server to Restrict SSIDsUsing Spaces in SSIDs Requirements for Configuring Multiple BSSIDs Configuring Multiple Basic SSIDsGuidelines for Using Multiple BSSIDs Displaying Configured BSSIDs CLI Configuration ExampleEnabling Mbssid and Ssidl at the same time Information-element ssidlUse the no form of the command to disable Ssidl IEs Sample Configuration for Enabling Mbssid and SsidlBelow is a sample configuration for enabling Mbssid Below is a sample configuration for enabling SsidlInterface Dot11Radio0/0/0 no ip address OL-6415-04 Configuring an Access Point as a Local Authenticator Configure a Local Authenticator Understand Local AuthenticationConfiguration Overview Guidelines for Local AuthenticatorsConfiguring the Local Authenticator Access Point Aaa new-model Enable AAARadius-server local Reauthentication time secondsVlan vlan Ssid ssidMac-auth-only Password nthash passwordThis example shows how to set up EAP-FAST authentication End Routerconfig# aaa new-model Configuring PAC Settings Configuring EAP-FAST SettingsConfiguring Server Keys Configuring an Authority IDPossible PAC Failures Caused by Access Point Clock Viewing Local Authenticator Statistics Limiting the Local Authenticator to One Authentication TypeThis example shows local authenticator statistics Unblocking Locked UsernamesUsing Debug Messages Understand Encryption Types, Configure Encryption Types, Configuring Encryption TypesUnderstand Encryption Types Creating WEP Keys Configure Encryption TypesWEP Key Restrictions Security Configuration WEP Key RestrictionEncryption KeyAccess Point Associated Device Slot Transmit? Key Contents Example WEP Key SetupCreating Cipher Suites Cipher Suites Compatible with WPA Compatible Cipher Suites Enabling and Disabling Broadcast Key RotationWPA Security Security Type in Universal Client ModeTkip AES TKIP+AES Universal client configurationWEP 40-bit WEP 128-bit Caveats DebuggingWEP OL-6415-04 Configuring Authentication Types Open Authentication to Access Point Understand Authentication TypesTraffic from client Shared Key Authentication to Access PointSequence for EAP Authentication EAP Authentication to NetworkMAC Address Authentication to the Network Using WPA Key Management Combining MAC-Based, EAP, and Open Authentication5shows the WPA key management process Software and Firmware Requirements for WPA and WPA-TKIP WPA-PSK Mode Windows XP YesThird Party Host Supplicant Protocol Required? SystemsAssigning Authentication Types to an Ssid Configure Authentication TypesOptional Set the authentication type to open for this Ssid Authentication openMac-address list-name alternate Optional eap list-nameAuthentication network-eap Authentication sharedAuthentication key-management Mac-address list-nameConfiguring WPA Migration Mode Wpa-psk hex ascii 0 Configuring Additional WPA SettingsConfiguring MAC Authentication Caching Dot11 holdoff-time seconds Dot1x client-timeout secondsDot1x reauth-period seconds ServerDetects two MIC failures within 60 seconds, it blocks all Security Feature Client Setting Access Point SettingTkip clients on that interface for the holdtime period WPA-PSK Security Feature Client Setting Access Point Setting Configuring Radius Servers Understanding Radius Configuring and Enabling RadiusRadius Operation Default Radius Configuration Configuring RadiusIdentifying the Radius Server Host Port for authentication requests.Optional For acct-port Acct-port port-number timeoutRadius-server timeout command is used Radius-server host hostnameShow running-config Verify your entries Configuring Radius Login AuthenticationLogin authentication default Aaa authentication login defaultAuthentication login command Include-in-access-req format %hDefining AAA Server Groups Port for accounting requests Port for authentication requestsAaa group server radius group-name Define the AAA server-group with a group nameRadius Starting Radius Accounting Selecting the Csid Format Configuring Settings for All Radius ServersOption MAC Address Example Show running-config Verify your settings Radius-server vsa send accounting AuthenticationRadius-server host hostname ip-address non-standard Radius-server key string Configuring WISPr Radius AttributesSnmp-server location location Displaying the Radius ConfigurationAttribute ID Description Radius Attributes Sent by the Access PointVLAN-ID VSA attribute NAS-Location Disc-Cause-Ext Acct-Terminate-CauseConfiguring VLANs Understanding VLANs Related Documents LAN and Vlan Segmentation with Wireless DevicesIncorporating Wireless Devices into VLANs Configuring VLANsInterface dot11radio 0.x Configuring a VlanEncapsulation dot1q vlan-id Guidelines for Using Vlan Names Using a Radius Server to Assign Users to VLANsAssigning Names to VLANs Creating a Vlan NameViewing VLANs Configured on the Access Point Ssid Vlan ID Vlan Configuration ExampleVlan 1 Interfaces Vlan 2 Interfaces Vlan 3 Interfaces Configuring VlanConfiguring VLANs Vlan Configuration Example OL-6415-04 Understanding QoS for Wireless LANs, Configuring QoS, Configuring QoSQoS for Wireless LANs Versus QoS on Wired LANs Understanding QoS for Wireless LANsImpact of QoS on a Wireless LAN Upstream and Downstream Traffic Flow Precedence of QoS SettingsUsing Wi-Fi Multimedia Mode Configuration Guidelines Configuring QoSAdjusting Radio Access Categories Fixed Slot TimeDisabling Igmp Snooping Helper Sample Configuration Using the CLIIeee 802.11b 2.4-GHz Band Channel SettingsCenter Frequency Americas JapanIeee 802.11a 5-GHz Band Ieee 802.11g 2.4-GHz BandCenter Regulatory Domains Americas -A Emea -E Japan -J FrequencyFrequency North America OL-6415-04 Protocol Filters Protocol Igmp IcmpTCP EGP PUP ChaosISO Designator POP2 TsapPOP3 IMAP2RPC RIPUucp CVSMIB List Supported MIBsIEEE802dot11-MIB RFC1213-MIB RFC1398-MIB SNMPv2-MIB SNMPv2-SMI SNMPv2-TC Using FTP to Access the MIB FilesHow to Read System Messages Error and Event MessagesThis appendix lists the CLI error and event messages Level DescriptionExplanation a station disassociated from an access point Explanation a station associated to an access pointMessage Traceback Reports Association Management MessagesSubsystem Messages Recommended Action None Explanation The device has begun its DFS scanning process Recommended Action None Error Message DOT11-4-RMINCAPABLE Interface interface Recommended Action Reload the system Error Message DOT11-4-CANTASSOC Cannot associate characters Recommended Action None Recommended Action Local Authenticator Messages Wireless network composed of stations without Access Points Network with wireless stationsAccess Point Operating in the 2.4-GHz bandGL-2 Hoc modeWired Ethernet network LAN 802.11 specificationsAn antenna that radiates its signal in a spherical pattern Corresponding IP addressesTransmission at 2 Mbps Transmission at 6, 9, 12, 18, 24, 36, 48, and 54 MbpsThat of a cable While maintaining an unbroken connection to the LANComputing device with an installed client adapter Wireless MultiMedia802.1X for authenticated key management AES-CCMP EAPIN-2 EAP-FAST 1Leap FTPOfdm Names, Vlan Network-EAPQbss Local authentication Names Ssid 4 Vlan command 4 Guest mode Multiple SSIDs Support Using spacesRegulatory Domains Radius RFCWPA migration mode Wpa-psk command World-mode commandIN-7 IN-8 IN-9 IN-10 IN-11 IN-12 IN-13 IN-14