Cisco M10-RM Guida rapida

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Cisco IOS Software Configuration Guide

for Cisco Aironet Access Points

Cisco IOS Releases 12.4(10b)JA and 12.3(8)JEC

May 2010

Text Part Number: OL-14209-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at

www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1005R)

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

iii

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

CONTENTS

Preface xix

Audience 1-xix

Purpose 1-xix

Organization 1-xx

Conventions 1-xxi

Related Publications 1-xxiii

Obtaining Documentation, Obtaining Support, and Security Guidelines 1-xxiv

Overview 1-1

Features 1-2

Features Introduced in This Release 1-2

Management Options 1-2

Roaming Client Devices 1-3

Network Configuration Examples 1-3

Root Access Point 1-3

Repeater Access Point 1-4

Bridges 1-5

Workgroup Bridge 1-5

Central Unit in an All-Wireless Network 1-6

Using the Web-Browser Interface 2-1

Using the Web-Browser Interface for the First Time 2-3

Using the Management Pages in the Web-Browser Interface 2-3

Using Action Buttons 2-4

Character Restrictions in Entry Fields 2-5

Enabling HTTPS for Secure Browsing 2-5

CLI Configuration Example 2-13

Deleting an HTTPS Certificate 2-13

Using Online Help 2-14

Changing the Location of Help Files 2-14

Disabling the Web-Browser Interface 2-15

Contents

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Using the Command-Line Interface 3-1

Cisco IOS Command Modes 3-2

Getting Help 3-3

Abbreviating Commands 3-3

Using no and default Forms of Commands 3-4

Understanding CLI Messages 3-4

Using Command History 3-4

Changing the Command History Buffer Size 3-5

Recalling Commands 3-5

Disabling the Command History Feature 3-5

Using Editing Features 3-6

Enabling and Disabling Editing Features 3-6

Editing Commands Through Keystrokes 3-6

Editing Command Lines that Wrap 3-7

Searching and Filtering Output of show and more Commands 3-8

Accessing the CLI 3-9

Opening the CLI with Telnet 3-9

Opening the CLI with Secure Shell 3-9

Configuring the Access Point for the First Time 4-1

Before You Start 4-2

Resetting the Device to Default Settings 4-2

Resetting to Default Settings Using the MODE Button 4-2

Resetting to Default Settings Using the GUI 4-2

Resetting to Default Settings Using the CLI 4-3

Obtaining and Assigning an IP Address 4-4

Default IP Address Behavior 4-4

Connecting to the 1100 Series Access Point Locally 4-5

Connecting to the 1130 Series Access Point Locally 4-6

Connecting to the 1200, 1230, 1240, and 1250 Series Access Points Locally 4-6

Connecting to the 1300 Series Access Point/Bridge Locally 4-7

Default Radio Settings 4-7

Assigning Basic Settings 4-8

Default Settings on the Express Setup Page 4-14

Configuring Basic Security Settings 4-16

Contents

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Understanding Express Security Settings 4-18

Using VLANs 4-18

Express Security Types 4-19

Express Security Limitations 4-21

Using the Express Security Page 4-21

CLI Configuration Examples 4-22

Configuring System Power Settings for 1130 and 1240 Series Access Points 4-27

Assigning an IP Address Using the CLI 4-28

Using a Telnet Session to Access the CLI 4-28

Configuring the 802.1X Supplicant 4-29

Creating a Credentials Profile 4-29

Applying the Credentials to an Interface or SSID 4-30

Applying the Credentials Profile to the Wired Port 4-30

Applying the Credentials Profile to an SSID Used For the Uplink 4-31

Creating and Applying EAP Method Profiles 4-32

Administering the Access PointWireless Device Access 5-1

Disabling the Mode Button 5-2

Preventing Unauthorized Access to Your Access Point 5-3

Protecting Access to Privileged EXEC Commands 5-3

Default Password and Privilege Level Configuration 5-4

Setting or Changing a Static Enable Password 5-4

Protecting Enable and Enable Secret Passwords with Encryption 5-6

Configuring Username and Password Pairs 5-7

Configuring Multiple Privilege Levels 5-8

Setting the Privilege Level for a Command 5-8

Logging Into and Exiting a Privilege Level 5-9

Controlling Access Point Access with RADIUS 5-9

Default RADIUS Configuration 5-10

Configuring RADIUS Login Authentication 5-10

Defining AAA Server Groups 5-12

Configuring RADIUS Authorization for User Privileged Access and

Network Services 5-14

Displaying the RADIUS Configuration 5-15

Controlling Access Point Access with TACACS+ 5-15

Default TACACS+ Configuration 5-15

Contents

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Configuring TACACS+ Login Authentication 5-15

Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 5-17

Displaying the TACACS+ Configuration 5-17

Configuring Ethernet Speed and Duplex Settings 5-18

Configuring the Access Point for Wireless Network Management 5-18

Configuring the Access Point for Local Authentication and Authorization 5-19

Configuring the Authentication Cache and Profile 5-20

Configuring the Access Point to Provide DHCP Service 5-22

Setting up the DHCP Server 5-22

Monitoring and Maintaining the DHCP Server Access Point 5-24

Show Commands 5-24

Clear Commands 5-25

Debug Command 5-25

Configuring the Access Point for Secure Shell 5-25

Understanding SSH 5-25

Configuring SSH 5-26

Configuring Client ARP Caching 5-26

Understanding Client ARP Caching 5-26

Optional ARP Caching 5-26

Configuring ARP Caching 5-27

Managing the System Time and Date 5-27

Understanding Simple Network Time Protocol 5-27

Configuring SNTP 5-28

Configuring Time and Date Manually 5-28

Setting the System Clock 5-28

Displaying the Time and Date Configuration 5-29

Configuring the Time Zone 5-29

Configuring Summer Time (Daylight Saving Time) 5-30

Defining HTTP Access 5-32

Configuring a System Name and Prompt 5-32

Default System Name and Prompt Configuration 5-32

Configuring a System Name 5-32

Understanding DNS 5-33

Default DNS Configuration 5-33

Setting Up DNS 5-34

Displaying the DNS Configuration 5-35

Creating a Banner 5-35

Contents

vii

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Default Banner Configuration 5-35

Configuring a Message-of-the-Day Login Banner 5-35

Configuring a Login Banner 5-37

Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode 5-37

Migrating to Japan W52 Domain 5-37

Verifying the Migration 5-39

Configuring Multiple VLAN and Rate Limiting for Point-to-Multipoint Bridging 5-39

CLI Command 5-40

Configuring Radio Settings 6-1

Enabling the Radio Interface 6-2

Configuring the Role in Radio Network 6-2

Universal Workgroup Bridge Mode 6-5

Configuring Dual-Radio Fallback 6-5

Radio Tracking 6-6

Fast Ethernet Tracking 6-6

MAC-Address Tracking 6-6

Bridge Features Not Supported 6-7

Configuring Radio Data Rates 6-7

Access Points Send Multicast and Management Frames at Highest Basic Rate 6-8

Configuring MCS Rates 6-10

Configuring Radio Transmit Power 6-11

Limiting the Power Level for Associated Client Devices 6-13

Configuring Radio Channel Settings 6-14

802.11n Channel Widths 6-15

Dynamic Frequency Selection 6-16

CLI Commands 6-18

Confirming that DFS is Enabled 6-18

Configuring a Channel 6-19

Blocking Channels from DFS Selection 6-19

Setting the 802.11n Guard Interval 6-20

Configuring Location-Based Services 6-21

Understanding Location-Based Services 6-21

Configuring LBS on Access Points 6-21

Enabling and Disabling World Mode 6-22

Contents

viii

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Disabling and Enabling Short Radio Preambles 6-23

Configuring Transmit and Receive Antennas 6-24

Enabling and Disabling Gratuitous Probe Response 6-25

Disabling and Enabling Aironet Extensions 6-26

Configuring the Ethernet Encapsulation Transformation Method 6-27

Enabling and Disabling Reliable Multicast to Workgroup Bridges 6-28

Enabling and Disabling Public Secure Packet Forwarding 6-29

Configuring Protected Ports 6-30

Configuring the Beacon Period and the DTIM 6-30

Configure RTS Threshold and Retries 6-31

Configuring the Maximum Data Retries 6-32

Configuring the Fragmentation Threshold 6-32

Enabling Short Slot Time for 802.11g Radios 6-33

Performing a Carrier Busy Test 6-33

Configuring VoIP Packet Handling 6-33

Viewing VoWLAN Metrics 6-34

Viewing Voice Reports 6-34

Viewing Wireless Client Reports 6-37

Viewing Voice Fault Summary 6-38

Configuring Voice QoS Settings 6-38

Configuring Voice Fault Settings 6-39

Configuring Multiple SSIDs 7-1

Understanding Multiple SSIDs 7-2

Effect of Software Versions on SSIDs 7-2

Configuring Multiple SSIDs 7-4

Default SSID Configuration 7-4

Creating an SSID Globally 7-4

Viewing SSIDs Configured Globally 7-6

Using Spaces in SSIDs 7-6

Using a RADIUS Server to Restrict SSIDs 7-7

Configuring Multiple Basic SSIDs 7-8

Requirements for Configuring Multiple BSSIDs 7-8

Guidelines for Using Multiple BSSIDs 7-8

Configuring Multiple BSSIDs 7-8

CLI Configuration Example 7-10

Contents

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Displaying Configured BSSIDs 7-10

Assigning IP Redirection for an SSID 7-11

Guidelines for Using IP Redirection 7-12

Configuring IP Redirection 7-12

Including an SSID in an SSIDL IE 7-13

NAC Support for MBSSID 7-13

Configuring NAC for MBSSID 7-16

Configuring Spanning Tree Protocol 8-1

Understanding Spanning Tree Protocol 8-2

STP Overview 8-2

1300 and 350 Series Bridge Interoperability 8-3

Access Point/Bridge Protocol Data Units 8-3

Election of the Spanning-Tree Root 8-4

Spanning-Tree Timers 8-5

Creating the Spanning-Tree Topology 8-5

Spanning-Tree Interface States 8-5

Blocking State 8-7

Listening State 8-7

Learning State 8-7

Forwarding State 8-8

Disabled State 8-8

Configuring STP Features 8-8

Default STP Configuration 8-8

Configuring STP Settings 8-9

STP Configuration Examples 8-10

Root Bridge Without VLANs 8-10

Non-Root Bridge Without VLANs 8-11

Root Bridge with VLANs 8-11

Non-Root Bridge with VLANs 8-13

Displaying Spanning-Tree Status 8-14

Configuring an Access Point as a Local Authenticator 9-1

Understanding Local Authentication 9-2

Configuring a Local Authenticator 9-2

Guidelines for Local Authenticators 9-3

Configuration Overview 9-3

Contents

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Configuring the Local Authenticator Access Point 9-3

Configuring Other Access Points to Use the Local Authenticator 9-6

Configuring EAP-FAST Settings 9-7

Configuring PAC Settings 9-7

Configuring an Authority ID 9-8

Configuring Server Keys 9-8

Possible PAC Failures Caused by Access Point Clock 9-8

Limiting the Local Authenticator to One Authentication Type 9-9

Unblocking Locked Usernames 9-9

Viewing Local Authenticator Statistics 9-9

Using Debug Messages 9-11

Configuring Cipher Suites and WEP 10-1

Understanding Cipher Suites and WEP 10-2

Configuring Cipher Suites and WEP 10-3

Creating WEP Keys 10-3

WEP Key Restrictions 10-5

Example WEP Key Setup 10-5

Enabling Cipher Suites and WEP 10-6

Matching Cipher Suites with WPA and CCKM 10-7

Enabling and Disabling Broadcast Key Rotation 10-7

Configuring Authentication Types 11-1

Understanding Authentication Types 11-2

Open Authentication to the Access Point 11-2

Shared Key Authentication to the Access Point 11-3

EAP Authentication to the Network 11-4

MAC Address Authentication to the Network 11-5

Combining MAC-Based, EAP, and Open Authentication 11-6

Using CCKM for Authenticated Clients 11-6

Using WPA Key Management 11-7

Software and Firmware Requirements for WPA, CCKM, CKIP, and WPA-TKIP 11-8

Configuring Authentication Types 11-10

Assigning Authentication Types to an SSID 11-10

Configuring WPA Migration Mode 11-13

Configuring Additional WPA Settings 11-14

Configuring MAC Authentication Caching 11-15

Configuring Authentication Holdoffs, Timeouts, and Intervals 11-16

Creating and Applying EAP Method Profiles for the 802.1X Supplicant 11-17

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Cisco Punto di accesso wireless

Cisco

Cisco Aironet 1600 Series Guida di riferimento rapido

Cisco

Cisco WAP200 - Small Business Wireless-G Access... Manuale utente

Cisco

Cisco Aironet 600 Series Manuale utente

Cisco

Cisco Aironet 3700 Series Guida di riferimento rapido

Cisco

Cisco Small Business AP541N Manuale utente

Cisco

Cisco AIR-AP1232AG-A-K9 - Aironet 1230AG - Wireless Access... Manuale utente

Cisco

Cisco Meraki MR55-HW Manuale

Cisco

Cisco aironet 2800 series Guida di riferimento rapido

Cisco

Cisco Meraki Go GR10 Manuale utente

Cisco

Cisco Linksys WAP55AG Manuale utente

Cisco

Cisco Cisco Aironet Wireless LAN Client Manuale utente

Cisco

Cisco aironet 1810 series Manuale utente

Cisco

Cisco Meraki Go GR60 Manuale utente

Cisco

Cisco Aironet 1530 Series Manuale

Cisco

Cisco Aironet 1400 Series Manuale

Cisco

Cisco AIR-LAP1252AG-A-K9 - Aironet 1252AG - Wireless Access... Manuale utente

Cisco

Cisco AIR-AP352E2R - Aironet 350 - Wireless Access... Manuale utente

Cisco

Cisco Catalyst IW9165E Manuale utente

Cisco

Cisco aironet 2800 series Guida di riferimento rapido

Cisco

Cisco WAP200 - Small Business Wireless-G Access... Manuale di istruzioni

Cisco

Cisco Meraki MR84 Manuale

Cisco

Cisco 1700 series Manuale

Cisco

Cisco AIR-AP1041N-A-K9 Manuale utente

Cisco

Cisco MERAKI MR44 Manuale utente

Manuali Punto di accesso wireless popolari di altre marche

D-Link

D-Link DWL-2100AP - AirPlus Xtreme G Manuale utente

Ubiquiti

Ubiquiti NanoStation NSM2 Manuale utente

Aruba

Aruba IAP-335 Manuale utente

Advantek Networks

Advantek Networks AWN-AP-54MR Manuale utente

IP-COM

IP-COM AP355 Manuale utente

Buffalo

Buffalo AirStation WLA-L11G Manuale utente

EnGenius

EnGenius EnStationACv2 Manuale utente

D-Link

D-Link DAP-3662 Manuale utente

xG Technology

xG Technology xMax CN1300 Manuale utente

Widelink

Widelink ezWave WAP-1100 Series Manuale utente

Edimax

Edimax CAP1200 Manuale utente

Ubiquiti

Ubiquiti LBE-5AC-Gen2 Manuale utente

Aruba

Aruba AP-203R Manuale utente

LuXout Shades

LuXout Shades LUXSHADE MOTION Manuale utente

CreatComm

CreatComm TB5F Manuale utente

SineDigital

SineDigital MW-1500AP(H) Manuale utente

TP-Link

TP-Link AP9650 V1 Manuale utente

Draytek

Draytek VIGORAP 902 Manuale utente