Cisco WAP125 Administrator's Manual
  1. Manuals
  2. Brands
  3. Cisco Manuals
  4. Wireless Access Point
  5. WAP125
  6. Administrator's manual

Cisco WAP125 Administrator's Manual

Wireless-ac/n dual band desktop access point with poe
Hide thumbs Also See for WAP125:
Table of Contents

Advertisement

Quick Links

Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with
PoE
First Published: 2016-10-12
Last Modified: 2017-06-08
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883

Advertisement

Table of Contents
loading

Related Manuals for Cisco WAP125

Summary of Contents for Cisco WAP125

  • Page 1 Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with First Published: 2016-10-12 Last Modified: 2017-06-08 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
  • Page 2 Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

  • Page 3: Table Of Contents

    Port Settings Table Spanning Tree Protocol VLANs Setting Neighbor Discover LLDP IPv6 Tunnel Time Automatically Acquiring the Time Settings through NTP Manually Configuring the Time Settings Notification LED Display Log Settings Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...
  • Page 4 Radio Networks Configuring VAPs Configuring Security Settings Client Filter Configuring a Client Filter List Locally on the WAP device Configuring MAC Authentication on the Radius Server Scheduler Scheduler Profile Configuration Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...
  • Page 5 Configuring MAC Traffic Classes QoS Policy QoS Association Guest Access Guest Access Instance Table Guest Group Table Guest User Account Web Portal Customization Monitor C H A P T E R 7 Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...
  • Page 6 Packet Capture File Download Using HTTP Support Information Download CPU/RAM Data Where to Go from Here C H A P T E R 1 0 Where to Go from Here Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 7: Chapter 1 Getting Started

    • If you have multiple IPv6 interfaces on your management station, use the IPv6 global address instead of the IPv6 local address to access the WAP device from your browser. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 8: Using The Access Point Setup Wizard

    2 Locate the IP address of the WAP device. a The WAP device can be accessed and managed by using the Cisco FindIT Network Discovery Utility. This utility enables you to automatically discover all supported Cisco devices in the same local network segment as your computer.

  • Page 9: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    If they are correct, click Submit. Your setup settings are saved and a confirmation window appears. Step 26 Click Finish. The WAP device was configured successfully. You are required to log in again with the new password. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 10: Changing Password

    To change the default password, configure the following: • Old Password — Enter the current password (default is cisco). • New Password — Enter a new password. • Confirm Password — Enter the new password again for confirmation.

  • Page 11: System Status

    • System Time — The current system time. • Firmware Version (Active Image) — The firmware version of the active image. • Firmware MD5 Checksum (Active Image) — The checksum for the active image. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 12: Quick Start Configuration

    LED Display, on page 17 Traffic Statistics Traffic Statistics, on page 90 For additional information on the device, you can access the product support page or the Cisco Support Community by: • Click Support to access the product support page.

  • Page 13: Navigation Pane

    Adds a new entry to a table or database. Cancel Cancels a change made to the page. Clear All Clears all entries in a log table. Delete Deletes an entry in a table. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 14: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    Management Buttons Edit Edits an existing entry. Refresh Refreshes the current page with the latest data. Save Saves the settings or configuration. Update Updates the new information to the startup configuration. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 15: System Configuration

    IP address and other network information. Choose one of the following options: ◦DHCP — The WAP device acquires its IP address from a DHCP server on the LAN. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 16: Dhcp Auto Configuration Settings

    Configuration Options are enabled, Access Point is Auto configured during next reboot considering the information received from DHCP Server for DHCP requests. Configuration upload operation by User/Cisco overrides the Auto Configuration so that the chosen Note configuration file is given preference. In any other cases of rebooting the AP such as firmware upgrade or reboot operations, existing Auto Configuration settings will be effective.

  • Page 17: Ipv6 Configuration

    IP address is assigned. This IPv6 address is tentative as it is being verified on the network and cannot be used to transmit or receive traffic. ◦Blank (no value) — No IP address is assigned. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 18: Port Settings Table

    The EEE mode supports QUIET times during low link utilization, allowing both sides of a link to disable portions of each PHY’s operating circuit and save power. Step 2 Click Save. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 19: Spanning Tree Protocol

    Spanning Tree Protocol Spanning Tree Protocol In the Spanning Tree Protocol mode, check Enable checkbox to enable the STP mode on the Cisco WAP device. When enabled, STP helps prevent switching loops. STP is recommended if you configure WDS links.

  • Page 20: Lldp

    The system administrator can view the Bonjour enabled WAP’s using the latest Internet Explorer plug-in (Cisco FindIT tool). All WAP devices present in a cluster, are shown under the cluster name after the Bonjour discovery process. The administrator should ensure that the name of the cluster is unique within a network.

  • Page 21: Time

    WAP device is configured to obtain its time from a predefined list of NTP servers. The current system time appears at the top of the page, along with the System Clock Source option. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 22: Automatically Acquiring The Time Settings Through Ntp

    • Time Zone — Select the time zone for your location. • Adjust for Daylight Saving Time — If daylight savings time is applicable to your time zone, check this option and configure the following fields: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 23: Notification

    If the system unexpectedly reboots, the log messages can be useful to diagnose the cause. However, log messages are erased when the system reboots unless you enable persistent logging. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 24: Remote Log Server

    In the Remote Log Server Table, configure the following parameters: • Server IPv4/IPv6 Address/Name — Enter the IPv4 or IPv6 address, or the host name of the remote log server. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 25: View System Log

    The email alert feature supports mail server configuration, message severity configuration, and up to three email addresses to send urgent and non-urgent email alerts. Use the Email Alert to send messages to the configured email addresses when particular system events occur. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 26: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Password — Enter the password for the email account that will be used to send these emails. The password can be from 1 to 64 characters. Step 4 In the Message Configuration area, configure the email addresses and subject line: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 27: Email Alert Examples

    Sep 8 03:48:26 info >> mini_http-ssl[1175]>Max concurrent connections of 20 reached User Accounts One management user is configured on the WAP device by default: • User Name: cisco • Password: cisco Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 28: Adding A User

    Step 1 Select System Configuration > User Accounts. The User Account Table shows the currently configured users. The user cisco is preconfigured in the system and has Read/Write privileges. All other users can have Read Only access, but not Read/Write access.

  • Page 29: Management

    In the Global Settings area, configure the following parameters: • Maximum Sessions — Enter the number of web sessions, including both the HTTP and HTTPS, that can be in use at the same time. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 30: Ssl Certificate File Status

    The secure connection does not work until the new certificate is accepted on the browser. In the SSL Certificate File Status area, you can view the current certificate on the WAP device. The following will be displayed: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 31: Snmp / Snmpv2C Settings

    The community name acts as a simple authentication feature to restrict the devices on the network that can request data from the SNMP agent. The name functions as a password, and the request is assumed to be authentic if the sender knows the password. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 32: Snmpv3 Views

    An SNMP MIB view is a family of view subtrees in the MIB hierarchy. A view subtree is identified by the pairing of an Object Identifier (OID) subtree value with a bit string mask value. Each MIB view is defined Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 33: Snmpv3 Groups

    The SNMPv3 groups allow you to combine users into groups of different authorization and access privileges. Each group is associated with one of three security levels: • noAuthNoPriv • authNoPriv Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 34: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Read Views — Choose the read access to MIBs for the group, from one of the following options: ◦view-all — The group is allowed to view and read all MIBs. ◦view-none — The group cannot view or read MIBs. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 35: Snmpv3 Users

    • Encryption Pass Phrase — If you specify DES or AES128 as the encryption type, enter the pass phrase to use to encrypt the SNMP requests. The pass phrase must be between 8 and 32 characters in length. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 36: Snmpv3 Targets

    RADIUS Server Several features require communication with a RADIUS authentication server. For example, when you configure the Virtual Access Points (VAPs) on the WAP device, you can configure security methods that Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 37: 802.1X Supplicant

    WAP device as an 802.1X supplicant (client) on the wired network. A user name and password with the MD5 algorithm encryption can be configured to allow the WAP device to authenticate using 802.1X. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 38: Rogue Ap Detection

    APs are detected, they are shown on the Rogue AP Detection page. If an AP listed as a rogue is legitimate, it can be added to the Known AP List. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 39: Viewing The Rogue Ap List

    The number shown indicates the mode: ◦ 2.4 indicates IEEE 802.11b, 802.11g, or 802.11n mode (or a combination of the modes). ◦ 5 indicates IEEE 802.11a or 802.11n mode (or both modes). Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 40: Saving The Trusted Ap List

    You can import a list of known APs from a saved list. The list may be acquired from another AP or created from a text file. If the MAC address of an AP appears in the Trusted AP List, it is not detected as a rogue. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 41: Configure Password Complexity

    • Minimum Password Length — The minimum password character length is a range from 0 to 32. The default is • Password Aging Support — Check to enable password expiration after a configured time period. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 42: Configure Wap-Psk Complexity

    • Minimum WPA-PSK Length — Enter a key length value. The minimum key length in number of characters is from 8 to 16. The default is 8. Step 4 Click Save. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 43: Wireless

    In the Basic Settings area, configure these parameters for the selected radio interface: Note Local regulations may prohibit the use of certain radio modes. Not all modes are available in all countries. • Radio — Check Enable to enable the radio interface. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 44: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    Federal Communications Commission (FCC) or the International Telecommunication Union (ITU-R). • Scheduler — For the radio interface, select the profile from the list. Step 4 In the Advanced Settings area, configure these parameters: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 45: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    The additional headers applied to each fragment increase the overhead on the network and can greatly reduce the throughput. • RTS Threshold — The Request to Send (RTS) Threshold value. The valid integer range must be from 0 to 65535. The default is 65535 octets. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 46: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Broadcast/Multicast Rate Limiting — Multicast and broadcast rate limiting can improve overall network performance by limiting the number of packets transmitted across the network. By default, this feature is disabled. Until you enable this feature, these fields are disabled: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 47: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • TSPEC Video ACM Limit — The upper limit on the amount of traffic that the WAP device attempts to transmit on the wireless medium using a video AC to gain access. The default limit is 15 percent of total traffic. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 48: Networks

    Each VAP is associated with a VLAN, and is identified by a VLAN ID (VID). A VID can be any value from 1 to 4094, inclusive. This Cisco WAP device supports nine active VLANs (eight for WLAN plus one management VLAN).

  • Page 49: Configuring Vaps

    WLAN using the repeated unicast or multicast the frames. • Security — Choose the type of authentication required for access to the VAP. The options are: ◦ None ◦ Static WEP ◦ WPA Personal ◦ WPA Enterprise Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 50: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    To delete a VAP, check the VAP and click Delete. To edit a VAP, check the VAP and click Edit. To save your Note changes, click Save when complete. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 51: Configuring Security Settings

    WEP key or not. This algorithm is also used in plain text, IEEE 802.1X, and WPA modes. When the authentication algorithm is set to Open System, any client can associate with the WAP device. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 52: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    This security mode is backwards-compatible for the wireless clients that support the original WPA. To configure WPA Personal, configure the following: • WPA Versions — Choose the types of client stations from the following: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 53: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    VAP. The default is 86400 seconds and the valid range is from 0 to 86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 54: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    ◦ Capable ◦ Required WiFi Alliance requires PMF to be enabled with default setting of Capable. You may Note disable it when non-compliant wireless clients experience instability or connectivity issues. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 55: Client Filter

    The WAP device supports one local Client filter list only. The filter can be configured to grant access only to the MAC addresses on the list, or to deny access only to addresses on the list. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 56: Configuring Mac Authentication On The Radius Server

    The WAP device supports up to 16 profiles. Only valid rules are added to the profile. Up to 16 rules are grouped together to form a scheduling profile. Periodic time entries belonging to the same profile cannot overlap. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 57: Scheduler Profile Configuration

    From the Day of the Week menu, choose the recurring schedule for the rule. You can configure the rule to occur daily, each weekday, each weekend day (Saturday and Sunday), or any single day of the week. Step 5 Set the start and end times: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 58: Qos

    The four queues are: • Data 0 (Voice) — High priority queue, with minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 59: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    WAP device. The Transmission Opportunity (TXOP) is an interval of time, in milliseconds, when a WME client station has the right to initiate transmissions onto the wireless medium (WM) towards the WAP device. The TXOP Limit maximum value is 65535. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 60: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Unscheduled Automatic Power Save Delivery (APSD) — Check Enable to enable APSD. The APSD is recommended if VoIP phones access the network through the WAP device. Step 7 Click Save. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 61: Wireless Bridge

    The wireless clients can still connect to an WAP device that is operating as a repeater. Before you configure WDS on the WAP device, note these guidelines: • All Cisco WAP devices participating in a WDS link must have the following identical settings: ◦ Radio...

  • Page 62: Configuring Wds Bridge

    You can verify if the bridge link is up by accessing the Monitor > Dashboard > Wireless page. In the Interface Note Status table, the WDS(x) status should state Up. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 63: Wep On Wds Links

    WAP device. WDS is a better solution and is preferred over the Work Group Bridge solution. Use WDS if you are bridging the Cisco WAP150 and Cisco WAP361 devices. If you are not, then consider the Work Group Bridge. When the Work Group Bridge feature is enabled, the VAP configurations are not applied;...

  • Page 64: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    Infrastructure Client Interface. Infrastructure Client Interface. Radio Specifies the Radio Id (Radio 1 (2.4 GHz) or Specifies the Radio Id (Radio 1 (2.4 GHz) or Radio 2 (5GHz)). Radio 2 (5GHz)). Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 65: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    Specifies if the broadcast of the SSID is Check if you want the downstream SSID to SSID Broadcast available, enabled or disabled. be broadcast. SSID Broadcast is enabled by default. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 66: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    If you choose Local or RADIUS, see Client Filter for instructions on creating the Client filter Note list. Step 5 Click Save. The associated downstream clients now have connectivity to the upstream network. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 67: Fast Roaming

    FBT is enabled per VAP per radio. Before you configure FBT on a VAP, be sure to verify that the VAP is configured with WPA2 security, Note pre-authentication disabled and MFP disabled. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 68: Configuring Fast Roaming

    After configuring the FBT settings, click Save to save the settings. Changing some settings might cause the AP to stop and restart the system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change AP settings when the WLAN traffic is low. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 69: Configuring Remote Key Holder List Profiles

    Click Save after copying or deleting a profile. Clicking Export for selected profile/s will export only those profiles. Clicking Export with no profiles Caution selected will Export all the profiles. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 70: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    Fast Roaming Configuring Remote Key Holder List Profiles Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 71: Access Control

    MAC ACLs are Layer 2 ACLs. You can configure the rules to inspect fields of a frame such as the source or destination MAC address, the VLAN ID, or the class of service. When a frame enters the WAP device port, Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 72: Workflow To Configure Acls

    A smaller number means a higher priority. The priority of the new rule will be the lowest of all explicit rules. Note that there is always an implicit rule denying all traffic with lowest priority. • Action — Choose whether to Deny or Permit the action. The default action is Deny. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 73: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Destination IPv4 Address — Requires a packet's destination IP address to match the address defined in the appropriate fields. ◦Any — Enter any IP address. ◦Single Address — Enter an IP address to apply this criteria. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 74: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    To delete or modify an ACL, select the ACL and then click Delete or Edit To delete or modify a rule, select the rule in the Rule Configuration area and click Delete or Edit. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 75: Configure Ipv6 Acls

    • Source IPv6 Address — Requires the packet's source IP address to match the address defined in the appropriate fields. ◦Any— Allows for any IP address. ◦Single Address — Enter the IP address to apply this criteria. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 76: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    ◦Custom — Enter the IANA port number to match to the destination port identified in the datagram header. The port range is from 0 to 65535 and includes three different types of ports: ◦0 to 1023 — Well known ports ◦1024 to 49151 — Registered ports Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 77: Configure Mac Acls

    • Action — Choose whether to Deny or Permit the action. The default action is Deny. When you choose Permit, the rule allows all traffic that meets the rule criteria to enter the WAP device. Traffic that does not meet the criteria is dropped. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 78: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    ◦Custom — Enter an 802.1p user priority to compare against an Ethernet frame. The valid range is from 0 to Step 7 Click OK. The changes are saved to the Startup Configuration. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 79: Client Qos

    • Source Address — Requires a packet's source IPv4 address to match the IPv4 address defined in the appropriate fields. ◦Any — Any IPv4 address to be used as the source address. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 80: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Destination Port — Includes a destination port in the match condition for the rule. The destination port is identified in the datagram header. ◦Any — Any port is allowed as the destination port. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 81: Configuring Ipv6 Traffic Classes

    To add and configure an IPv6 class map: Step 1 Select Client QoS > Traffic Classes. Step 2 Click ✚ to add a Traffic Class. Note The maximum number of class maps is Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 82: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    The port range is from 0 to 65535 and includes three different types of ports: ◦0 to 1023 — Well-Known Ports ◦1024 to 49151 — Registered Ports ◦49152 to 65535 — Dynamic and/or Private Port Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 83: Configuring Mac Traffic Classes

    To add and configure a MAC class map: Step 1 Select Client QoS > Traffic Classes. Step 2 Click ✚ to add a Traffic Class. Note The maximum number of class maps is Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 84: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    ◦User Defined — Enter the specific VLAN ID to compare against an Ethernet frame. This field is located in the first/only 802.1Q VLAN tag. The port range is 1 to 4094. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 85: Qos Policy

    QoS provided. Select a value from the drop-down list. ◦Remark IP Precedence — Marks all packets for the associated traffic stream with the specified IP precedence value. The IP precedence value is an integer from 0 to 7 Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 86: Qos Association

    When you use a wireless client connect to VAP, and access any URL, the web will hijack the URL to Web Portal Locale page, which you are configure at Access Control/Guest Access page. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 87: Guest Access Instance Table

    Captive Portal. This setting limits the bandwidth used to receive data from the network. The range is from 0 to 300 Mbps. The default is 0. ◦Total Guest User— Total number of guest users. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 88: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    • Web Portal Locale — Select a web portal locale that was created previously from the drop-down list. Step 4 Click Save . Your changes are saved to the Startup Configuration. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 89: Guest Group Table

    • Total Guest Users — Displays the number of total guest users. Click the value link on the Total Guest Users to display the Guest User Account page. Step 4 Click Save. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 90: Guest User Account

    • Background Image — Click Browse to choose the image. You can click Upload to upload the images for CP instances. • Logo Image — Click Browse to choose the logo image. You can click Upload to upload the logo images. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 91: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    256 characters. • Restore — Deletes the current locale. Step 5 Click Save. Your changes are saved to the Startup Configuration. Step 6 Click Preview to view the updated page. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 92: Cisco Wap125 Wireless-Ac/N Dual Band Desktop Access Point With Poe

    Clicking Preview will show the text and the images that have already been saved to the Startup Configuration. If you make a change, click Save before clicking Preview to see your changes. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 93: Monitor

    • Red round — No wired connection. • Green round — Wired connection. Click the LAN link to view the LAN Status page. Wireless • Red round — All radios are disabled. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 94: Lan Status

    LAN Status Click on the LAN circle to display the following configuration and status settings on the LAN interface. • MAC Address — The MAC address of the WAP device. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 95: Wireless Status

    Click Back to return to the Dashboard page. Interface Status The Interface Status table displays the following status information for each Virtual Access Point (VAP) and on each Wireless Distribution System (WDS) interface: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 96: Traffic Statistics

    You can click Refresh to view the updated information. Note Clients Clients The Clients page displays the client stations associated with the device. Total Number Of Associated Clients—The total number of clients on the WAP device. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...
  • Page 97 • Throughput Meter — The last 30 seconds' throughput / Data Rate. You can order the clients through Clients Details, Network (SSID), and so on. Note You can filter clients the through Clients Details, Network (SSID), and so on. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 98: Guests

    You can click export to upload the current Authenticated/Failed clients message. Before you click the export button, select the Authenticated client or Failed client to upload, then click Note Export. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 99: Administration

    To swap the firmware image running on the WAP device: Step 1 Select Administration > Firmware. The product ID (PID VID) and active and inactive firmware versions are displayed. Step 2 Click Swap Images. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 100: Http/Https Upgrade

    The filename cannot contain the following items: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more successive periods. Step 3 Enter the TFTP Server IPv4 address and click Upgrade. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 101: Configuration Files

    The filename cannot contain the following characters: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more successive periods. Step 5 For a TFTP backup, enter the TFTP IPv4 address. Step 6 Select the configuration file to back up: Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 102: Download Configuration Files

    You can copy files within the WAP device file system. For example, you can copy the Backup Configuration file to the Startup Configuration file type, so that it is used the next time you boot up the WAP device. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 103: Clearing Configuration Files

    To delete the Startup Configuration or Backup Configuration file: Step 1 Select Administration > Configuration Files> Clear. Step 2 Select Startup Configuration or Backup Configuration. Step 3 Click Clear Files. Step 4 Click OK. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 104: Reboot

    • In — Set the reboot time for the reboot to occur after the function is enabled. Note For In, the reboot scheduler is still effective after the device reboots. Step 3 Click Save. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 105: Troubleshoot

    Use the Packet Capture page to configure the parameters of the packet capture, start a local or remote packet capture, view the current packet capture status, and download a packet capture file. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 106: Local Packet Capture

    • The capture time reaches the configured duration. • The capture file reaches its maximum size. • The administrator stops the capture. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 107: Remote Packet Capture

    Click Start Capture to start the capture. To stop the capture, click Stop Capture. Wireshark First, download Wireshark and install it on your computer. You can download Wireshark from https:// www.wireshark.org/. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...
  • Page 108 • Exclude beacons and ACK/RTS/CTS frames: !(wlan.fc.type_subtype == 8 | | wlan.fc.type == 1) • Data frames only: wlan.fc.type == 2 • Traffic on a specific BSSID: wlan.bssid == 00:02:bc:00:17:d0 Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 109: Packet Capture File Download

    Enter the TFTP Server Filename to download if different from the default. By default, the captured packets are stored in the folder file /tmp/apcapture.pcap on the WAP device. Step 4 Click Download. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 110: Using Http

    • The first line chart update data every 1 seconds. It will show the CPU/RAM activity in 60 seconds. • The second line chart update data every 5 seconds. It will show the CPU/RAM activity in 5 minutes. Step 4 Click Save. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 111: Download Cpu/Ram Data

    Step 5 Click Download to generate the file based on the current system settings. After a short pause, a window appears to enable you to save the file to your computer. Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...
  • Page 112 Troubleshoot Download CPU/RAM Data Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

  • Page 113: Chapter 1 0 Where To Go From Here

    Cisco Firmware Downloads http://www.cisco.com/go/smallbizfirmware Select a link to download the firmware for your Cisco product. No login is required. Cisco Open Source Requests If you wish to receive a copy of the source code to which you are...
  • Page 114 Where to Go from Here Where to Go from Here Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE...

Table of Contents