Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE Cisco WAP361 Wireless-AC/N ...

203 Pages·2016·1.69 MB·English

ADMINISTRATION
GUIDE
Cisco WAP150 Wireless-AC/N Dual Radio Access
Point with PoE
Cisco WAP361 Wireless-AC/N Dual Radio Wall
Plate Access Point with PoE
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Ciscotrademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)
© 2015 Cisco Systems, Inc. All rights reserved. OL-32504-01
Contents
Chapter 1: Getting Started 9
Getting Started with the Configuration 9
Supported Browsers 9
Browser Restrictions 9
Launching the Web-based Configuration Utility 10
Logging Out 11
Using the Access Point Setup Wizard 11
Changing the Default Password 14
Quick Start Configuration 15
Window Navigation 16
Configuration Utility Header 16
Navigation Pane/Main Menu 16
Management Buttons 17
Chapter 2: Status and Statistics 19
System Summary 19
Network Interfaces 21
Traffic Statistics 24
Wireless Multicast Forwarding Statistics 25
WorkGroup Bridge Transmit/Receive 26
Associated Clients 27
Radio Statistics 28
Email Alert Status 30
View Log 30
TSPEC Client Associations 31
TSPEC Status and Statistics 33
TSPEC AP Statistics 35
Chapter 3: Administration 37
System Settings 38
Cisco WAP150 and WAP361 Administration Guide 3
Contents
User Accounts 38
Adding a User 39
Changing a User Password 39
Time Settings 40
Automatically Acquiring the Time Settings through NTP 40
Manually Configuring the Time Settings 41
Log Settings 42
Configuring the Persistent Log 42
Configuring Remote Log Server 43
Email Alert 44
Configuring Email Alert Settings 45
Email Alert Examples 46
LED Display 47
HTTP/HTTPS Service 48
Configuring HTTP and HTTPS Services 48
Managing SSL Certificates 49
Management Access Control 50
Manage Firmware 51
Swapping the Firmware Image 51
TFTP Upgrade 52
HTTP/HTTPS Upgrade 53
Manage Configuration File 53
Backup Configuration File 54
Download Configuration File 55
Copy/Save Configuration 55
Configuration Files Properties 56
Reboot 57
Discovery—Bonjour 57
Packet Capture 58
Packet Capture Configuration 59
Local Packet Capture 60
Cisco WAP150 and WAP361 Administration Guide 4
Contents
Remote Packet Capture 61
Packet Capture Status 64
Packet Capture File Download 64
Support Information 65
Spanning Tree Settings 66
Chapter 4: LAN 67
Port Settings 67
Configuring Port Settings for Cisco WAP150 67
Configuring Port Settings for Cisco WAP361 68
VLAN Configuration 69
Configuring VLAN Settings for WAP150 69
Configuring VLAN Settings for Cisco WAP361 70
IPv4 Setting 71
IPv6 Setting 72
LLDP 75
Chapter 5: Wireless 77
Radio 77
Rogue AP Detection 85
Viewing the Rogue AP List 85
Saving the Trusted AP List 88
Importing a Trusted AP List 88
Networks 89
SSID Naming Conventions 89
VLAN IDs 90
Configuring VAPs 90
Configuring Security Settings 93
Wireless Multicast Forwarding 101
Scheduler 102
Adding Scheduler Profiles 102
Cisco WAP150 and WAP361 Administration Guide 5
Contents
Configuring Scheduler Rules 103
Scheduler Association 104
Bandwidth Utilization 104
MAC Filtering 105
Configuring a MAC Filter List Locally on the WAP device 105
Configuring MAC Authentication on the RADIUS Server 106
WDS Bridge 107
Configuring STP for Cisco WAP150 108
Configuring Untagged VLAN for Cisco WAP361 108
Configuring WDS Bridge 109
WEP on WDS Links 110
WPA/PSK on WDS Links 110
WorkGroup Bridge 111
Quality of Service 114
Chapter 6: System Security 117
RADIUS Server 117
802.1X/802.1X Supplicant 119
Configure 802.1X Supplicant for Cisco WAP150 119
Configure 802.1X for Cisco WAP361 121
Password Complexity 124
WPA-PSK Complexity 125
Chapter 7: Quality of Service 127
Global Settings 127
Configuring QoS Settings for Cisco WAP150 127
Configuring QoS Settings for Cisco WAP361 128
Class Map 129
Configuring an IPv4 Class Map 129
Configuring an IPv6 Class Map 132
Configuring a MAC Class Map 134
Cisco WAP150 and WAP361 Administration Guide 6
Contents
Policy Map 136
QoS Association 138
QoS Status 138
Chapter 8: ACL 141
ACL Rule 141
IPv4 and IPv6 ACLs 141
MAC ACLs 142
Workflow to Configure ACLs 142
Configure IPv4 ACLs 142
Configure IPv6 ACLs 146
Configure MAC ACLs 148
ACL Association 150
ACL Status 151
Chapter 9: SNMP 153
General 153
Views 156
Groups 157
Users 159
Targets 160
Chapter 10: Captive Portal 162
Global Configuration 163
Local Groups/Users 164
Local Groups (WAP 361 only) 164
Local Users 165
Instance Configuration 167
Instance Association 173
Web Portal Customization 174
Configuring CP Authentication for Cisco WAP150 174
Cisco WAP150 and WAP361 Administration Guide 7
Contents
Configuring CP Authentication for Cisco WAP361 176
Uploading and Deleting Images 179
Authenticated Clients 180
Chapter 11: Single Point Setup 182
Single Point Setup Overview 182
Managing Single Point Setup Across Access Points 183
Single Point Setup Negotiation 184
Operation of a Device Dropped From a Single Point Setup 185
Configuration Parameters Propagated and Not Propagated to Single Point
Setup Access Points 185
Access Points 187
Configuring the WAP Device for Single Point Setup 187
Viewing Single Point Setup Information 189
Adding a WAP Device to a Single Point Setup 189
Removing a WAP Device from a Single Point Setup 189
Navigating to Configuration Information for a Specific Device 190
Navigating to a Device Using its IP Address in a URL 190
Configuring the Cluster Management Address 190
Sessions 191
Channel Management 192
Configuring and Viewing the Channel Assignments 193
Viewing Channel Assignments and Setting Locks 194
Configuring Advanced Settings 195
Wireless Neighborhood 196
Viewing Neighboring Devices 196
Viewing Details for a Single Point Setup Member 198
Cluster Firmware Upgrade 198
Appendix A: Where to Go From Here 202
Cisco WAP150 and WAP361 Administration Guide 8
1
Getting Started
This chapter provides an introduction to the web-based Configuration Utility of the
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE and Cisco
WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE. It includes
these topics:
• Getting Started with the Configuration
• Using the Access Point Setup Wizard
• Changing the Default Password
• Quick Start Configuration
• Window Navigation
Getting Started with the Configuration
This section describes system requirements and how to access the web-based
Configuration Utility. q
Supported Browsers
Before you begin to use the configuration utility, make sure that you have a
computer with Internet Explorer 7.0 or later, Firefox 3.0 or later, Chrome 5.0 or later,
or Safari 3.0 or later.
Browser Restrictions
• If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the WAP device. You can, however, use the Domain Name System
(DNS) server to create a domain name that contains the IPv6 address, and
then use that domain name in the address bar in place of the IPv6 address.
Cisco WAP150 and WAP361 Administration Guide 9
1
Getting Started
Getting Started with the Configuration
• When using Internet Explorer 8, you can configure the security settings.
- Select Tools -> Internet Options and then select the Security tab.
- Select Local Intranet and then select Sites.
- Select Advanced and then select Add. Add the intranet address of the
WAP device (http://<ip-address>) to the local intranet zone. The IP
address can also be specified as the subnet IP address so that all
addresses in the subnet are added to the local intranet zone.
• If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 local address to access the WAP
device from your browser.
Launching the Web-based Configuration Utility
Follow these steps to access the configuration utility from your computer to
configure the WAP device:
STEP 1 Connect the WAP device to the same network (IP subnet) as your computer. The
factory default IP address configuration of the WAP device is DHCP. Make sure
that your DHCP server is running and can be accessed.
STEP 2 Locate the IP address of the WAP device.
a. The WAP device can be accessed and managed by Cisco network tools and
services including the Cisco FindIT Network Discovery Utility; this utility
enables you to automatically discover all supported Cisco devices in the same
local network segment as your computer. You can get a snapshot view of each
device or launch the product configuration utility to view and configure the
settings. For more information, see http://www.cisco.com/go/findit.
b. The WAP device is Bonjour-enabled and automatically broadcasts its services
and listens for services being advertised by other Bonjour-enabled devices. If
you have a Bonjour-enabled browser, such as Microsoft Internet Explorer with a
Bonjour plug-in, or the Apple Mac Safari browser, you can find the WAP device
on your local network without knowing its IP address.
You can download the complete Bonjour for Microsoft Internet Explorer browser
from Apple’s website by visiting: http://www.apple.com/bonjour/.
c. Locate the IP address assigned by your DHCP server by accessing your router
or DHCP server. See your DHCP server instructions for more information.
STEP 3 Launch a web browser, such as Microsoft Internet Explorer.
Cisco WAP150 and WAP361 Administration Guide 10