Cisco Small Business AP541N Administration Manual
  1. Manuals
  2. Brands
  3. Cisco Manuals
  4. Wireless Access Point
  5. Small Business AP541N
  6. Administration manual

Cisco Small Business AP541N Administration Manual

Dual-band single-radio access point
Hide thumbs Also See for Small Business AP541N:
Table of Contents

Advertisement

Quick Links

ADMINISTRATION
GUIDE
Cisco Small Business
AP541N Dual-band Single-radio Access Point
OL-20285-01

Advertisement

Table of Contents
loading

Related Manuals for Cisco Small Business AP541N

Summary of Contents for Cisco Small Business AP541N

  • Page 1 ADMINISTRATION GUIDE Cisco Small Business AP541N Dual-band Single-radio Access Point OL-20285-01...

  • Page 2: Table Of Contents

    Connecting the Access Point to the PC through a Network Connection Launching the Access Point Configuration Utility Display the Configuration Utility By Using the Default IP Address Display the Configuration Utility by Using Cisco Configuration Assistant 2.1 or higher Display the Configuration Utility by Using Another IP Address...
  • Page 3 WEP on WDS Links WPA/PSK on WDS Links Bandwidth Utilization Configuring Quality of Service (QoS) Chapter 5: SNMP Configuring SNMP on the Access Point Configuring SNMP Views Configuring SNMP Groups Configuring SNMP Users SNMP Targets AP541N Dual-band Single-radio Access Point Administration Guide...
  • Page 4 Navigating to Configuration Information for a Specific Access Point Navigating to an Access Point by Using its IP Address in a URL Managing Cluster Sessions Sorting Session Information Configuring and Viewing Channel Management Settings AP541N Dual-band Single-radio Access Point Administration Guide...
  • Page 5 WDS Configuration from the Web Interface WDS Configuration Using SNMP Clustering Access Points Clustering APs by Using the Web Interface Clustering Access Points by Using SNMP Appendix 9:Default Settings Appendix 10:Where to Go From Here AP541N Dual-band Single-radio Access Point Administration Guide...

  • Page 6: Chapter 1: Getting Started

    Getting Started The Cisco AP541N Dual-band Single-radio Access Point is an advanced, standards-based solution for wireless networking in businesses of any size. The access point enables wireless local area network (WLAN) deployment while providing state-of-the-art wireless networking features. The access point operates in Standalone Mode. In Standalone Mode, the access point acts as an individual access point in the network, and you manage it by using the Access Point Configuration Utility, or SNMP.

  • Page 7: Administrator Computer Requirements

    Configuration Utility interface. Security Settings Ensure that security is disabled on the wireless client used initially to configure the access point. Once the device has been configured, security can be enabled. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 8: Administration Pc Ip Address

    “Connect the Access Point to an Administration PC” section. Otherwise, follow the instructions in “Connecting the Access Point to the PC through a Network Connection” Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 9: Connect The Access Point To An Administration Pc

    Plug the other end of the power cord into a power outlet. STEP 4 Configure the access point by following the instructions in the “Display the STEP 5 Configuration Utility By Using the Default IP Address” section. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 10: Connecting The Access Point To The Pc Through A Network Connection

    If you are not using PoE, connect the power adapter to the power port on the back STEP 3 of the access point, then plug the other end of the power cord into a power outlet. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 11: Launching The Access Point Configuration Utility

    To access the Access Point Configuration Utility, enter the default static IP address of the access point into a Web browser, do the following: STEP 1 Enter the Cisco AP541N default static IP address in the address bar and press Enter. For 192.168.10.10. example, http://...
  • Page 12 STEP 2 Username = cisco Default password cisco. (Passwords are case sensitive.) When you log in, the Getting Started page for the access point Configuration Utility is displayed, as shown in Figure Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 13 Getting Started Connecting the Access Point to a PC Figure 4 Getting Started Page STEP 3 Update the Cisco AP541N software with the latest version by clicking the Software as shown in Figure Upgrade link, Next, we recommend that you: •...

  • Page 14: Display The Configuration Utility By Using Cisco Configuration Assistant 2.1 Or Higher

    Display the Configuration Utility by Using Cisco Configuration Assistant 2.1 or higher Use Cisco Configuration Assistant 2. 1 or higher (CCA) to configure the access point when it is deployed in a Cisco Smart Business Communications System (SBCS) network with a UC520 or SR520.
  • Page 15 Connecting the Access Point to a PC When you have connected to the CCA site and the devices have been discovered, the Topology Map includes the Cisco AP541N. Non-Cisco devices connected to the switch are not shown in the Topology NOTE map.

  • Page 16: Display The Configuration Utility By Using Another Ip Address

    IP address of the access point into the Web browser The Login window displays, as shown in Figure Enter the login information: STEP 3 Username is cisco Default password is cisco (passwords are case sensitive) Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 17 IP address so that if you bring up another WLAN Cisco AP541N on the same network, the IP address for each access point is unique. If the IP address is not unique, a conflict results causing unpredictable results.

  • Page 18: Troubleshooting Your Connection

    If you cannot display the configuration utility, you can test the ability of the PC to communicate with the access point by using ping. To use ping on a PC running Windows: Verify that the Cisco AP541N is powered on and the LEDs indicate the appropriate STEP 1 links.

  • Page 19: Resetting The Device By Using The Reset Button

    Getting Started Troubleshooting Your Connection DHCP is enabled on the Cisco AP541N by default. When a DHCP server is enabled on your network and the access point is connected to the network, the DHCP server replaces the default static IP address with a DHCP server–assigned IP address.

  • Page 20: Configuring The Access Point By Using The Getting Started Page

    Click Change Administrator Password to provide a new administration password STEP 1 for the access point. (The username is cisco and it cannot be changed. The default password is cisco.) If you do not have a DHCP server on the network and do not plan to use one, click...

  • Page 21: Access Point Management Page

    The access point supports multiple client operating systems. Clients can be laptop or desktop computers, personal digital assistants (PDAs), or any other hand-held, portable or stationary device equipped with a Wi-Fi adapter and supporting drivers. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 22 Security modes are Static WEP, IEEE 802. 1 X, with RADIUS server, and WPA- PSK. For information about configuring security on the access point, see Configuring the Wireless Distribution System, page Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 23: Verifying The Installation

    If more than one administrator is logged onto the Configuration Utility and is making changes to the configuration, there is no guarantee that all configuration changes specified by multiple users will be applied. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 24: Configuring Security On The Wireless Access Point

    Station Isolation: Disabled • HTTP Redirect: Disable VAP1 has the following default settings: • VLAN ID: 100 • SSID: cisco-voice • Broadcast SSID: Enabled • Security: None • MAC Authentication Type: Disabled Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 25 None for the default VAP and for each VAP that you enable. For information about how to configure the security settings on each VAP, see Configuring the Wireless Distribution System, page Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 26: Chapter 2: Status

    Status The Status page provides information on the following: • Device Information • Network Interfaces • Traffic Statistics • Associated Clients • Rogue AP Detection Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 27: Device Information

    Shows the AP serial number. Serial Number Generic name to identify the type of hardware. Device Name Provides information about the product hardware. Device Description Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 28: Network Interfaces

    System Uptime last power-up/reboot. Network Interfaces The Network Interface Status window displays the current Wired Settings Wireless Settings of the access point. Click Refresh to refresh the page. Figure 6 Interface Status Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 29: Wired Settings

    If you reboot the access point, these figures indicate transmit and receive totals since the reboot. To view transmit and receive statistics for the access point, click the Traffic Statistics tab. Click Refresh to refresh the page. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 30 Status Traffic Statistics Figure 7 Viewing Traffic Statistics Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 31 Displays the total number of transmit and receive Errors errors detected by the AP. NA means that the drop and error counters for the VAP interfaces and the WDS interfaces are not supported. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 32: Associated Clients

    Shows which VAP the client is associated with. For Network example, an entry of wlan0vap2 means the client is associated with Wireless Radio 1, VAP 2. Shows the MAC address of the associated wireless Station client. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 33 Shows the number of packets and bytes transmitted To Station from the access point to the wireless client and the number of packets and bytes that were dropped upon transmission. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 34: Link Integrity Monitoring

    The Rogue AP Detection page displays information about all access points detected by the Cisco AP541N in the vicinity of the network. If the access point listed as a rogue is actually a legitimate access point, you can add it to the Known AP List.
  • Page 35 To enable neighbor access point detection and collect AP Detection information about neighbor access points, click Enabled. (default) To disable neighbor access point detection, click Disabled. To save the setting, click Apply. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 36 Detected Rogue AP List. NOTE: The Detected Rouge AP List and Known AP List provide information only; the Cisco AP541N does not have any control over the access points on the list and cannot apply any security policies to access points detected through the RF scan.
  • Page 37 2.4 indicates IEEE 802. 1 1b, 802. 1 1g, or 802. 1 1n mode (or a combination of the modes) • 5 indicates IEEE 802. 1 1a mode, 802. 1 1n mode, or a combination of modes. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 38 Rates are shown in megabits per second (Mbps). All Supported Rates are listed, with Basic Rates shown in bold. Rate sets are configured on the Wireless > Advanced Settings page. (See Modifying Advanced Settings, page 74.) Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 39: Save Or Import A List Of Known Access Points

    Use the Import feature to import a list of known access points from a saved list. The list might be from another Cisco access point or created from a text file. If the MAC address of an access point appears in the Known AP List, it will not be shown as a rogue.

  • Page 40: Chapter 3: Setup

    VLAN. If you have configured the management VLAN on your network with a different VLAN ID, you must change the VLAN ID of the access point management VLAN. To configure the LAN interface settings, click the LAN Settings tab. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 41 Setup LAN Settings Figure 10 LAN Settings Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 42 IP Address, Subnet Mask, and Default Gateway fields. The static IP address of the access point. This field is Static IP Address disabled if you use DHCP as the connection type. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 43: Configuring 802.1X Authentication

    802. 1 X authentication information that the access point can supply to the authentication server. To configure the access point 802. 1 X supplicant user name and password, click the 802. 1 X Authentication tab and configure the fields shown in Table Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 44 Table 8 IEEE 802.1X Authentication Field Descriptions Field Description Click Enabled to enable the Administrative status of the 802.1X Supplicant 802. 1 X Supplicant. Click Disabled to disable the Administrative status of the 802. 1 X Supplicant. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 45 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 46: Enabling The Network Time Protocol

    To configure the NTP that the access point uses manually as shown in Figure 12 on page 42 or by using a server as shown in Figure 13 on page 43, click the Time tab and update the fields as described in Table Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 47 Setup Enabling the Network Time Protocol Figure 12 Manually Enabling Network Time Protocol Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 48 Setup Enabling the Network Time Protocol Figure 13 Enabling Network Time Protocol Server Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 49 This field appears when you select Manually in the Set System Time field. Use the System Time list to select hours and minutes. All times are relative to the local time zone. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 50 Specify the time (24-hour format) by selecting the hours and minutes. DST Offset (minutes) From the DST Offset list, select the number of minutes to add during Daylight Savings Time (15 to 120 in 15-minute increments). Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 51 Changing some settings might cause the access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 52: Chapter 4: Wireless

    (AP MAC address). To configure the wireless interface, click the Wireless Radio Settings tab. Figure 14 Wireless Interface Configuration Table 10 describes the fields and configuration options available on the Radio Settings page. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 53 The MAC address is assigned by the manufacturer. You cannot change the MAC address. It is provided here for informational purposes as a unique identifier for the interface. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 54 2.4 GHz 802. 1 1n. Only 802. 1 1n clients operating in the 2.4-GHz frequency can connect to the access point. • 5 GHz 802. 1 1n.Only 802. 1 1n clients operating in the 5- GHz frequency can connect to the access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 55: Modifying Virtual Access Point Settings

    VAPs segment the wireless LAN into multiple broadcast domains that are the wireless equivalent of Ethernet VLANs. VAPs simulate multiple access points in one physical access point. The Cisco AP541N supports up to 16 VAPs. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 56 Before you configure VLANs on the access point, be sure to verify that the switch NOTE and DHCP server the access point uses can support IEEE 802. 1 Q VLAN encapsulation. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 57 If the primary server responds to the authentication request, the access point continues to use this RADIUS server as the primary server, and authentication requests are sent to the address you specify. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 58 VAP0 from WPA Personal or WPA Enterprise to None, Static WEP, or 802. 1 X, then remove the WPA security mode for all the WDS links. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 59 The RADIUS-assigned VLAN ID overrides the VLAN ID you configure on the VAP page. You configure the untagged and management VLAN IDs on the Ethernet Settings page. For more information, see Settings, page Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 60 SSID broadcast offers a very minimal level of protection on an otherwise exposed network (such as a guest network) where the priority is making it easy for clients to get a connection and where no sensitive information is available. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 61 Local: Use the MAC authentication list that you configure on the Wireless Connection Control page. • RADIUS: Use the MAC authentication list on the external RADIUS server. For more information about MAC authentication, see Client Connection Control, page Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 62 The entry is removed from the list of displayed VAPs. NOTE: VAP0 corresponds to the physical wireless radio interface and cannot be deleted. The Delete icon is not displayed for this VAP. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 63: Security (Mode)

    None (Plain-text) as it does prevent an outsider from easily sniffing out unencrypted wireless traffic. WEP encrypts data moving across the wireless network based on a static key. (The encryption algorithm is a stream cipher called RC4.) Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 64 The transfer key index indicates which WEP key the access point will use to encrypt the data it transmits. Specify the length of the key by clicking one of the radio Key Length buttons: • 64 bits • 128 bits Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 65 Key type you select. For example, if you use 128-bit ASCII keys, you must enter 13 characters in the WEP key. The number of characters required updates automatically based on how you set Key Length and Key Type. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 66 Client stations configured to use WEP as an open system (shared key mode not enabled) are able to associate with the access point, even if they do not have the correct WEP key. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 67 To use a separate RADIUS server for the VAP, clear the check box and enter the RADIUS server IP address and key in the following fields. Enter the address for the primary RADIUS server for RADIUS IP Address this VAP. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 68 (unicast) keys for each client associated to the VAP. The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 69 Enter up to three IPv4 addresses to use as the backup Address 1–3 RADIUS servers for this VAP. If authentication fails with the primary server, each configured backup server is tried in sequence. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 70 The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. After you configure the security settings, you must click Apply to apply the changes NOTE and to save the settings. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 71 WPA, select both of the check boxes. This lets both WPA and WPA2 client stations associate and authenticate, but uses the more robust WPA2 for clients that support it. This WPA configuration allows more interoperability, at the expense of some security. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 72 802. 1 1i standard, which includes CCMP (AES), and TKIP mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users. This security mode is backwards-compatible with wireless clients that support the original WPA. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 73 This option does not apply if you selected only WPA for WPA Versions because WPA does not support this feature. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 74 Enter up to three IPv4 addresses to use as the backup RADIUS IP Address 1–3 RADIUS servers for this VAP. If authentication fails with the primary server, each configured backup server is tried in sequence. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 75 The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. After you configure the security settings, you must click Apply to apply the changes NOTE and to save the settings. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 76: Client Connection Control

    MAC addresses to deny, all clients can access the network except for the clients on the deny list. To enable filtering by MAC address, click the Client Connection Control tab. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 77 All other stations are permitted access. NOTE: The filter you select is applied to the clients in the station list, regardless of whether that station list is local or on the RADIUS server. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 78 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 79: Configuring Mac Authentication On The Radius Server

    To specify the wireless radio settings, click the Advanced Settings tab. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 80 Modifying Advanced Settings Figure 17 Configuring the Wireless Radio Settings Different settings display depending on the mode you select. Table 19 describes the fields and configuration options for the Advanced Settings page. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 81 Select one of the following modes for the wireless radio interface: • 802. 1 1a • 802. 1 1b/g • 802. 1 1a/n • 802. 1 1b/g/n • 5 GHz 802. 1 1n • 2.4 GHz 802. 1 1n Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 82 The 40-MHz channel enables higher data rates but leaves fewer channels available for use by other 2.4 GHz and 5 GHz devices. Select a value to set the use of the channel bandwidth. The default is 20-MHz. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 83 Yes. The access point transmits data using a 400 ns guard Interval when communicating with clients that also support the short guard interval. • No. The access point transmits data using an 800 ns guard interval. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 84 The default behavior is to send a beacon frame once every 100 milliseconds (or 10 per second). Enter a value from 20 to 2000 milliseconds. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 85 The measurement is in beacons. For example, if you set this field to 1, clients will check for buffered data on the access point at every beacon. If you set this field to 10, clients will check on every 10th beacon. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 86 By default, fragmentation is off. We recommend not using fragmentation unless you suspect that there is wireless radio interference. The additional headers applied to each fragment increase the overhead on the network and can greatly reduce throughput. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 87 Specify the maximum number of stations allowed to access Maximum Stations this access point at any one time. You can enter a value between 0 and 200. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 88 Select the multicast traffic transmission rate you want the Fixed Multicast Rate access point to support. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 89 The rate limit burst range is 1-150 packets per second. The default rate limit burst setting is 150 packets per second. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 90: Configuring The Wireless Distribution System

    Wireless clients can still connect to an access point that is operating as a repeater. To specify the details of traffic exchange from this access point to others, click the WDS Bridge tab. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 91 Both access points participating in a WDS link must be on the same wireless radio channel and use the same IEEE 802. 1 1 mode. (See Modifying Advanced Settings, page 74 for information on configuring the Radio mode and channel.) Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 92 WEP and WPA (PSK). In WPA (PSK) mode, the access point uses WPA2-PSK with CCMP (AES) encryption over the WDS link. NOTE: To configure WPA-PSK on any WDS link, VAP0 of the selected wireless radio must be configured for WPA-PSK or WPA-Enterprise. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 93: Wep On Wds Links

    0–9, a–z, and A–Z. If you selected HEX, enter hexadecimal digits (any combination of 0–9 and a–f or A–F). These are the RC4 encryption keys shared with the stations using the access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 94: Wpa/Psk On Wds Links

    Changing some settings might cause the access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 95: Bandwidth Utilization

    Threshold accepting new client associations. The default is 0, which means that all new associations are allowed regardless of the utilization rate. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 96: Configuring Quality Of Service (Qos)

    Changing these values will affect the QoS provided. To set up queues for QoS, click the QoS tab under the Services heading and configure settings as described in Table Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 97 Most traditional IP data is sent to this queue. Data 3 (Background)—Lowest priority queue, high throughput. Bulk data that requires maximum throughput and is not time-sensitive is sent to this queue (FTP data, for example). Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 98 Valid values for cwMax are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1023. The value for cwMax must be higher than or equal to the value for cwMin. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 99 If WMM disabled, all the fields below it are not able to be edited. To disable WMM, click Disabled. To enable WMM, click Enabled. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 100 Doubling will continue until the size of the random backoff value reaches the number defined in the Maximum Contention Window. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 101 Changing some settings might cause the access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 102: Chapter 5: Snmp

    SNMPv3 views, groups, users, and targets, see Configuring SNMP Views, page 101. To configure SNMP, click the General tab under the SNMP heading and update the fields described in Table 25 on page Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 103 Apply to save your configuration changes. NOTE: If you disable SNMP, all remaining fields on the SNMP page are disabled. This is a global SNMP parameter that applies to SNMPv1, SNMPv2c, and SNMPv3. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 104 Only requests from the machines that identify themselves with this community name will be accepted. The community name can be in any alphanumeric format. Double quote (") is not a valid character. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 105 10.10.1.128/25, machines with IP addresses from 10.10.1.129 through 10.10.1.254 can execute SNMP requests on managed devices. In this example, 10.10.1.128 is the network address and 10.10.1.255 is the broadcast address. 126 addresses are designated. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 106: Configuring Snmp Views

    MIB views to control the OID range that SNMPv3 users can access. A MIB view called all that contains all management objects supported by the system is created by default. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 107 View names can contain up to 32 alphanumeric characters. Double quote (") is not a valid character. Specifies whether to include or exclude the view subtree or Type family of subtrees from the MIB view. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 108: Configuring Snmp Groups

    DES key/password for encryption. By default, users of this group have read and write access to default all MIB view, which can be modified by the user. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 109 Specify a name to use to identify the group. The Name default group names are RWPriv, RWAuth, and RO. Group names can contain up to 32 alphanumeric characters. Double quote (") is not a valid character. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 110 To remove a group, select the group and click Remove. After you configure the SNMPv3 Groups settings, you must click Apply to apply the NOTE changes and to save the settings. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 111: Configuring Snmp Users

    Double quote (") is not a valid character. Map the user to a group. The default groups are Group RWAuth, RWPriv, and RO. You can define additional groups on the SNMP Groups page. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 112 To remove a user, select the user and click Remove. After you configure the SNMPv3 Users settings, you must click Apply to apply the NOTE changes and to save the settings. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 113: Snmp Targets

    Enter the name of the SNMP user to associate with the target.To configure SNMP users, see Configuring SNMP Users, page 106. SNMPv3 Targets This field shows the SNMPv3 Targets on the access point. To remove a target, select it and click Remove. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 114 SNMP SNMP Targets After you configure the SNMPv3 Target settings, you must click Apply to apply the NOTE changes and to save the settings. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 115 SNMP SNMP Targets Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 116: Chapter 6: Administration

    Administration Administrator Use this page to configure the administrator information and to provide a new administration password for the access point. The default password is cisco. As an immediate first step in securing your wireless network, we recommend that NOTE you change the administrator password from the default.
  • Page 117 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 118: Access Point Configuration

    XML file is applied to the access point. Click the AP Configuration tab to access the configuration management page, which Figure 27 shows. Figure 27 Configuration Management Page Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 119: Resetting The Access Point To The Factory Default Configuration

    Enter the IP address of the TFTP server. STEP 3 Click Download to save the file. STEP 4 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 120: Saving The Current Configuration By Using Http

    Enter a name for the backup file in the Filename field, including the .xml file name STEP 2 extension and the path to the directory that contains the configuration file to upload. Enter the IP address of the TFTP server. STEP 3 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 121: Restoring The Current Configuration By Using Http

    Navigate to the directory that contains the file, then select the file to upload and STEP 4 click Open. Only those files saved as .xml backup configuration files are valid to use with NOTE Restore; for example, ap_config.xml. Click Restore. STEP 5 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 122: Rebooting The Access Point

    TFTP: Click the Software Upgrade tab in the Administration section. STEP 1 Information about the current software version is displayed and an option to upgrade a new software image is provided. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 123 Click OK to confirm the upgrade and start the process. STEP 6 The software upgrade process begins once you click Upgrade and then OK in the NOTE popup confirmation window. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 124: Upgrading The Software By Using Http

    Do not power down the access point while the upgrade is in progress. When the upgrade is complete, the access point restarts. The access point resumes normal operation with the same configuration settings it had before the upgrade. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 125: Event Logs

    And you can enable a remote log relay host to capture all system events and errors in a Kernel Log. To view system events, click the Events tab. Figure 28 Event Logs Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 126: Configuring Persistent Logging Options

    To configure persistent logging on the Event Logs page, set the persistence, severity, and depth options as described in Table 31, and then click Apply. Figure 29 Persistent Logging Options Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 127 NOTE access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 128: Configuring The Log Relay Host For Kernel Messages

    The syslog process will default to use port 514. We recommend keeping this NOTE default port. However; If you choose to reconfigure the log port, make sure that the port number you assign to syslog is not being used by another process. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 129: Enabling Or Disabling The Log Relay Host On The Events Page

    NOTE access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 130: Configuring The Web Server Settings

    By default both HTTP and HTTPS access are enabled. Either access type can be disabled. To configure the Web server settings, click the Web Server tab. Figure 31 Configuring Web Server Settings Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 131 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 132: Creating An Administration Access Control List

    To create an access list, click the Administration Access Control tab. Figure 32 Management ACL After you configure the settings, click Apply to apply the changes and to save the NOTE settings. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 133 SNMP access to the management interface. Enter up to five IPv4 addresses that are allowed IP Address (1–5) management access to the access point. Use dotted- decimal format (for example, 192.168.10.100). Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 134: Chapter 7: Clustering Multiple Access Points

    Clustering Multiple Access Points The Cisco AP541N supports access point clusters. A cluster provides a single point of administration and lets you view, deploy, configure, and secure the wireless network as a single entity rather than a series of separate wireless devices.

  • Page 135: Clustering Single And Dual Radio Access Points

    To view information about cluster members and to configure the location and cluster of an individual member, click the Access Points tab. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 136 To disable clustering on the access point, click Disable Clustering. Description of where the access point is physically Location located. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 137 You must configure the same cluster name on each access point that is a member of the cluster. The cluster name must be unique for each cluster you configure on the network. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 138: Removing An Access Point From The Cluster

    (group). Click Enable Clustering. STEP 3 The access point is now a cluster member. Its Status (Mode) on the Cluster > Access Points tab now indicates Cluster instead of Not Clustered. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 139: Navigating To Configuration Information For A Specific Access Point

    When accessing the Cluster - Sessions page, a maximum of 20 clients are reported NOTE per radio. To see all the associated clients, access the Client Associations page of the access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 140 To manage sessions associated with the cluster, click the Sessions tab. Figure 34 Session Management Details about the session information shown is described in Table Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 141 This value should fall within the range of the advertised rate set for the mode in use on the access point. For example, 6 to 54 Mbps for 802. 1 1a. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 142: Sorting Session Information

    If significant channel interference is detected, the Channel Manager automatically re-assigns some or all of the access to new channels per an efficiency algorithm (or automated channel point plan). Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 143 By using the Advanced settings on the page, you can modify the interference reduction potential that triggers channel re-assignment, change the schedule for automatic updates, and re-configure the channel set used for assignments. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 144: Stopping/Starting Automatic Channel Assignment

    Table 38 provides details about Current Channel Assignments. Table 38 Channel Assignments Field Description IP Address for the access point. IP Address Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 145: Viewing The Last Proposed Set Of Changes

    IP Address Radio channel on which this access point is currently Wireless Radio broadcasting. Radio channel to which this access point would be Proposed Channel re-assigned if the Channel Plan is executed. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 146: Configuring Advanced Settings

    However; if you re-set the minimal channel interference benefit to 25 percent and click Apply, the proposed channel plan will be implemented and channels reassigned as needed. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 147: Viewing Wireless Neighborhood Information

    (signal strength, channel, beacon interval). You can click on an access point to get additional statistics about the access points in radio range of the currently selected access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 148 • Detect faults. Unexpected changes in the coverage pattern are evident at a glance in the color coded table. Figure 36 Wireless Neighborhood Table 41 describes the Wireless Neighborhood information. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 149 You can click on an IP address to view more details on a particular access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 150 Dark Gray Bar—A dark gray bar and no signal strength number indicates this is the access point with the IP address listed above that column (since there is no value in showing how well the access point can detect itself). Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 151: Viewing Details For A Cluster Member

    Radio 1 of the access point with an IP address of 10.27.64. 1 77. Figure 37 Details for a Cluster Member AP Table 42 describes the parameters of an access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 152 100 milliseconds (or 10 per second). Shows the date and time of the last beacon received from this Beacon Age access point. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 153 Clustering Multiple Access Points Viewing Wireless Neighborhood Information Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 154: Chapter 8: Configuration Examples

    For all SNMP examples, the objects you use to modify the access point are in a private MIB. The path to the tables that contain the objects is iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).lvl7(6132).lvl7Products(1).fas tPath(1).fastPathWLANAP(28), as shown in Figure Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 155: Configuring A Vap

    Configuring a VAP This example shows how to configure VAP 3 with the following non-default settings: • VLAN ID: 3 • SSID: Marketing • Security: WPA Personal using WPA2 with CCMP (AES) Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 156: Vap Configuration From The Web Interface

    Enter a WPA encryption key in the Key field. STEP 7 The key can be a mix of alphanumeric and special characters. The key is case sensitive and can be between 8 and 63 characters. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 157: Vap Configuration Using Snmp

    Navigate to the objects in the apRadioBss > apBssTable table. STEP 11 Walk the apBssDescr object to view the instance ID for VAP 2. STEP 12 VAP 2 on wireless Radio 1 is instance 3. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 158: Configuring Wireless Radio Settings

    In the Maximum Stations field, change the value to 100. STEP 6 In the Transmit Power field, change the value to High. STEP 7 The next window shows the Advanced Settings page with the settings specified in this example. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 159 Configuration Examples Configuring Wireless Radio Settings Click Apply to update the access point with the new settings. STEP 8 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 160: Wireless Radio Configuration Using Snmp

    MyAP2 with a MAC address of 00:30:AB:00:00:B0. The WDS link has the following settings, which must be configured on both APs: • Encryption: WPA (PSK) • SSID: wds-link • Key: abcdefghijk Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 161: Wds Configuration From The Web Interface

    Click Apply to apply the WDS settings to the access point. STEP 6 Log onto MyAP2 and repeat steps 2-5 (but be sure to use the MAC address of STEP 7 MyAP1 in the Remote Address field). Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 162: Wds Configuration Using Snmp

    Set the value of instance 1 in the apIfConfigWdsWpaPskKey object to abcdefthijk. STEP 7 Some MIB browsers require that the value be entered in HEX values rather than ASCII values. Perform the same configuration steps on MyAP2. STEP 8 Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 163: Clustering Access Points

    After you refresh the page, other APs that are on the same bridged segment, have wireless radios in the same operating mode, are enabled for clustering, and have the same cluster name appear in the Access Points table. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 164 STEP 6 The page refreshes and lists the proposed channel changes for all APs in the cluster. The interval setting in the Advanced section determine how often proposed changes are applied. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 165: Clustering Access Points By Using Snmp

    Configuration Examples Clustering Access Points Clustering Access Points by Using SNMP Cluster configuration by using SNMP is not supported. Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 166: Appendix 9:Default Settings

    Untagged VLAN ID Radio Settings Radio Radio 1 IEEE 802. 1 1 Mode 802. 1 1b/g/n 802. 1 1b/g/n Channel Auto Wireless Radio 1 Channel 20 MHz Bandwidth 802. 1 1a/n Channel Auto Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 167 Enabled Limiting Fixed Multicast Rate Auto Beacon Interval DTIM Period Fragmentation Threshold 2346 RTS Threshold 2347 Virtual Access Point Settings Status VAP0 is enabled on both radios, all other VAPs disabled Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 168 Public Managed AP Mode Disabled Authentication (802. 1 X Disabled Supplicant) Management ACL Disabled HTTP Access Enabled HTTPS Access Enabled SNMP Agent Port SNMP Set Requests Disabled Console Port Access Enabled Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 169 Table 43 UAP Default Settings (Continued) Feature Default Telnet Access Enabled SSH Access Enabled Enabled Network Time Protocol None (NTP) Clustering Stopped Client QoS Global Admin Disabled Mode VAP QoS Mode Disabled Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 170: Appendix 10:Where To Go From Here

    Where to Go From Here Cisco provides a wide range of resources to help you and your customer obtain the full benefits of the AP541N Dual-band Single-radio Access Point. Product Resources Resource Location www.cisco.com/go/smallbizsupport Cisco Small Business Support Community http://www.cisco.com/en/US/products/ Technical Documentation ps10492/index.html...
  • Page 171 Open Source License Notices www.cisco.com/en/US/products/ps10024/ Regulatory Compliance and Safety Information tsd_products_support_series_home.html http://www.cisco.com/en/US/products/ Cisco Configuration Assistant ps7287/index.html www.cisco.com/web/partners/sell/smb Cisco Partner Central site for Small Business www.cisco.com/smb Cisco Small Business Home www.cisco.com/go/marketplace Marketplace Cisco AP541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 172 Cisco, Cisco Systems, the Cisco logo, and the Cisco Systems logo are registered trademarks or trademarks of Cisco and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

Table of Contents