Cisco WAP150 Manual

Wireless-ac/n dual radio access point with poe
Hide thumbs Also See for WAP150:
Table of Contents

Advertisement

Quick Links

Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE /
Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point
with PoE
First Published: 2019-08-20
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883

Advertisement

Table of Contents
loading

Summary of Contents for Cisco WAP150

  • Page 1 Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE First Published: 2019-08-20 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000...
  • Page 2 Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com...
  • Page 3 The Java logo is a trademark or registered trademark of Sun Microsystems, Inc. in the U.S. or other countries. © 2019 Cisco Systems, Inc. All rights reserved.
  • Page 5: Table Of Contents

    Download Configuration Files Copying Configuration Files Clearing Configuration Files C H A P T E R 3 System Configuration Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 6 SSL Certificate File Status SNMP / SNMPv2c Settings SNMPv3 Views SNMPv3 Groups SNMPv3 Users SNMPv3 Targets Plug and Play (PnP) Security Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 7 WPA/PSK on WDS Links WorkGroup Bridge C H A P T E R 6 Fast Roaming Fast Roaming Configuring Fast Roaming Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 8 QoS Association Global Settings Guest Access Guest Access Instance Table Guest Group Table Guest User Account Web Portal Customization Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE viii...
  • Page 9 A P P E N D I X B Where to Go from Here Where to Go from Here Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 10 Contents Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 11: Getting Started

    The IP address can also be specified as the subnet IP address so that all subnet addresses, are added to the local intranet zone. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 12: Using The Access Point Setup Wizard

    Access Point Setup Wizard appears. This helps you perform the initial configurations. Use the following steps to complete the wizard: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 13 Click Next. The Configure Device - Set Password window appears. Step 12 Enter a New Password and enter it again in the Confirm Password field. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 14: Using The Access Point Setup Wizard With Mobile

    Access Point Setup Wizard with mobile style appears. This helps you perform the initial configurations. To configure the Access Point using the wizard, complete the following steps: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 15 Step 15 The WAP device is configured successfully. You are required to log in again with a new password. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 16: Changing Password

    • Remote IP Address — The IP address of a remote host using this service. All indicates that the service is available to all remote hosts that access the system. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 17: System Status

    • LAN2—Displays the status of Ethernet interface (LAN2). • LAN3—Displays the status of Ethernet interface (LAN3). • LAN4—Displays the status of Ethernet interface (LAN4). Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 18: Quick Start Configuration

    Configure Single Point Setup Configuring the WAP Device for Single Point Setup, on page Guest Access Guest Access, on page 96 Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 19: Window Navigation

    WAP device. If an arrow occurs after a main menu item, you can select to expand and display the submenu of each group. You can then select the desired submenu item to open the associated page. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 20: Management Buttons

    Refreshes the current page with the latest data. Apply Applies/Saves the settings or configuration. Update Updates the new information to the startup configuration. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 21: Administration

    Click Swap Images. A dialog box appears confirming the firmware image switch and subsequent reboot. Step 3 Click Yes to proceed. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 22: Http/Https Upgrade

    To verify that the firmware upgrade completed successfully, log into the configuration utility, open the Upgrade Firmware page, and view the active firmware version. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 23: Reboot

    Startup Configuration. The Mirror Configuration is preserved across factory resets, so it can be used to recover a system configuration after a factory reset by copying the Mirror Configuration to the Startup Configuration. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 24: Backup Configuration Files

    For a TFTP backup, enter the Configuration Filename with an.xml extension. Also include the path where the file is to be stored on the server and then enter the TFTP Server IPv4 Address. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 25: Copying Configuration Files

    Select Administration > Configuration Management> Clear. Step 2 Select Startup Configuration or Backup Configuration. Step 3 Click Clear Files. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 26 Administration Clearing Configuration Files Step 4 Click Yes. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 27: Lan

    (192.168.1.100). • Static IP Address, Subnet Mask, and Default Gateway—Enter the static IP address, subnet mask and default gateway. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 28: Dhcp Auto Configuration Settings

    Access point aborts Auto configuration if TFTP transaction is not initiated within this interval specified. The default value is 3 minutes. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 29: Ipv6 Configuration

    • IPv6 Domain Name Servers — Select one of the following options: • Dynamic — The DNS servers are recognized dynamically through the DHCPv6. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 30: Port Settings

    Cisco WAP device. When enabled, STP helps prevent switching loops. STP is recommended if you configure the WDS links. Step 1 Select LAN > Spanning Tree Protocol. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 31: Vlans Setting

    When a Bonjour-enabled WAP device is attached to a network, any Bonjour client can discover and get access to the configuration utility without prior configuration. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 32: Lldp

    WAP device to communicate with remote IPv6-capable hosts even when the LAN that connects them does not support the IPv6. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 33: Time

    Automatically Acquiring the Time Settings through NTP To automatically acquire the time settings from a NTP server, follow these steps: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 34: Manually Configuring The Time Settings

    • Daylight Saving Offset — Specify the number of minutes to move the clock forward when daylight savings time begins and backward when it ends. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 35: Notification

    Configuring the Persistent Log Step 1 Select Notification > Log Settings. Step 2 Configure these parameters: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 36: Remote Log Server Table

    Step 3 Click Apply. The changes are saved to the Startup Configuration. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 37: View System Log

    In the Email Alert area, configure the following parameters: • Administrative Mode — Check Enable to enable the email alert feature. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 38: Email Alert Examples

    Step 5 Click Apply. Email Alert Examples The following example shows how to fill in the Mail Server Configuration parameters: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 39: User Accounts

    The User Account Table shows the currently configured users. The user cisco is preconfigured in the system and has Read/Write privileges. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 40: Changing A User Password

    If you change your password, you must log in again to the system. Note Management This section describes how to configure the management settings on the WAP device. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 41: Management

    • HTTP Service — Enable or disable access through HTTP. By default, HTTP access is disabled. If you disable it, any current connections using that protocol are disconnected. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 42: Ssl Certificate File Status

    • If you select HTTP/HTTPS, confirm the download and then browse to the location to save the file on your network. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 43: Snmp / Snmpv2C Settings

    • NMS IPv4 Address/Name — Enter the IPv4 IP address, DNS host name, or subnet of the network management system (NMS). Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 44: Snmpv3 Views

    A MIB view called all is created by default in the system. This view contains all management objects supported by the system. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 45: Snmpv3 Groups

    By default, users of this group have read and write access to the default all MIB view. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 46: Snmpv3 Users

    DES type is supported. There are no default SNMPv3 users on the WAP device, and you can add up to eight users. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 47: Snmpv3 Targets

    The SNMPv3 user configuration should be completed before configuring the SNMPv3 targets. For more details, refer to SNMPv3 Users, on page The WAP device supports a maximum of eight targets. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 48: Plug And Play (Pnp)

    To use a self-signed SSL certificate or in the absence of your certificate in the pre-installed CA list, select User Note Specified and click Upload a certificate to upload the certificate you want. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 49: Security

    • Key-2 —Enter the RADIUS key associated with the configured backup RADIUS servers. The server at Server IP (IPv6) Address 2 uses Key 2. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 50: Configuring 802.1X For Wap150

    Click Upload. A confirmation window appears, followed by a progress bar to indicate the status of the upload. Step 5 Click Apply. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 51: Configuring 802.1X For Wap361

    When the first PC plugs in and tries to authenticate with the WAP device, the WAP device sends an authentication request to the primary server. If the primary server responds to the authentication request, the WAP device Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 52: Rogue Ap Detection

    When the Rogue AP detection is enabled, the radio periodically switches from its operating channel to scan other channels within the same band. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 53: Viewing The Rogue Ap List

    • Signal — The strength of the radio signal emitting from the rogue AP. The number representing the strength in decibels (dB) is displayed on the right side of the bar. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 54: Saving The Trusted Ap List

    Trusted AP List. The options are: • Replace — Imports the list and replaces the contents of the Trusted AP List. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 55: Configure Password Complexity

    WPA-PSK Complexity page to be used in the authentication process. More complex keys provide increased security. To configure the WPA-PSK complexity: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 56 • Minimum WPA-PSK Length — Enter a key length value. The minimum key length in number of characters is from 8 to 16. The default is 8. Step 4 Click Apply. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 57: Wireless

    • 802.11b/g/n (default) — 802.11b, 802.11g, and 802.11n clients operating in the 2.4-GHz frequency can connect to the WAP device. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 58 The client with which the WAP device is communicating must also support the short guard interval. Choose one of these options: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 59 • Max Associated Clients — The maximum number of stations allowed to access the WAP device at any one time. You can enter an integer between 0 and 200. The default is 200 stations. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 60 • Dedicated Spectrum Analyzer—In dedicated mode, the radio is used for spectrum analysis for more than 10% of the time and the client connections may work but are not guaranteed. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 61 • TSPEC Legacy WMM Queue Map Mode — Check Enable to enable the intermixing of legacy traffic on queues operating as ACM. By default, this mode is off. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 62: Networks

    In the Radio field, click the radio interface (Radio 1 or Radio 2) to which the VAP configuration parameters are applied. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 63 To set security with Static WEP, configure the radio as 802.11a or 802.11b/g mode. The 802.11n mode restricts the use of Static as the security. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 64: Configuring Security Settings

    This section describes the security settings that can be configured on the WAP device on the Networks page. There are three security setting options to choose from: None, WPA Personal and WPA Enterprise. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 65 The WiFi Alliance requires the PMF to be enabled and set to Capable (Default). You may disable it when the non-compliant wireless clients experience instability or connectivity issues. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 66 • A valid TKIP RADIUS IP address and RADIUS key • A valid CCMP (AES) IP address and RADIUS key Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 67 VAP. The default is 86400 seconds. The valid range is from 0 to 86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 68: Client Filter

    32 characters that uniquely identifies a wireless local area network. It is also referred to as the Network Name. Step 4 Click Apply. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 69: Configuring Mac Authentication On The Radius Server

    • System Time is outdated — The system time is outdated. • Managed Mode — The scheduler is in managed mode. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 70: Profile Rule Configuration

    To configure QoS on the WAP device, set the parameters on the transmission queues for different types of wireless traffic and specify the minimum and maximum wait times for transmission. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 71 • Minimum Contention Window — An input to the algorithm that determines the initial random backoff wait time (window) for a retry of a transmission failure. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 72 • Unscheduled Automatic Power Save Delivery — Check Enable to enable APSD. The APSD is recommended if VoIP phones access the network through the WAP device. Step 7 Click Apply. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 73: Wireless Bridge

    • All Cisco WAP devices participating in a WDS link must have the following identical settings: • Radio • IEEE 802.11 Mode • Channel Bandwidth Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 74: Configuring Wds Bridge

    Status table, the WDS(x) status should state Up. WPA/PSK on WDS Links These additional fields appear when you select WPA/PSK as the encryption type: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 75: Workgroup Bridge

    Before you configure Work Group Bridge on the WAP device, note these guidelines: • All WAP devices participating in Work Group Bridge must have the following identical settings: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 76 • WPA Enterprise Connection Status Indicates whether the WAP is connected to the Not Applicable (N/A) upstream WAP device. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 77 Client filter Note list. Step 5 Click Apply. The associated downstream clients now have connectivity to the upstream network. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 78 Wireless Bridge WorkGroup Bridge Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 79: Fast Roaming

    Step 2 Click ✚ to add a new row to the roaming table. Step 3 Configure the following parameters: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 80: Configuring Remote Key Holder List Profiles

    • NAS ID — NAS ID configured on the destination FBT enabled VAP. • RRB Key — Key used to encrypt RRM protocol messages. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 81 Clicking Export for selected profile/s will export only those profiles. Clicking Export with no profiles selected will Export all the profiles. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 82 Fast Roaming Configuring Remote Key Holder List Profiles Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 83: Single Point Setup

    The following table shows the wireless service limits of a Single Point Setup: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 84: Single Point Setup Negotiation

    Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 85: Operation Of A Device Dropped From A Single Point Setup

    Radio Settings Including TSPEC Settings (Some Configuration) exceptions) Log Settings Rogue AP Detection Client Filter Scheduler Management Access Control SNMP and SNMPv3 Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 86 Other Configuration Settings and Parameters that are Not Propagated in Single Point Setup Utilization Threshold Port Settings Bonjour VLAN and IPv4 IPv6 Address Bridge IPv6 Tunnel Packet Capture Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 87: Access Points

    IP address and the MAC-address is established in the subnet. The Cluster IP address configuration is shared among all the clustered APs. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 88: Firmware Management

    The filename cannot contain the following items: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more successive periods. 3. Enter the TFTP Server IPv4 Address and click Start-Upgrade. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 89: Channel Management

    For example, if the channel interference must be reduced by 75 percent and the proposed channel assignments will only reduce the interference by 30 percent, then the channels will not be reassigned. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 90: Channel Assignment Table

    Refresh the page to see the new channel assignment table. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 91: Access Control

    WAP device inspects the frame and checks the ACL rules against the content of the frame. If any of the rules match the content, a permit or deny action is taken on the frame. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 92: Workflow To Configure Acls

    Because there is an implicit deny all rule at the end of every ACL, traffic that is not explicitly permitted is dropped. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 93 0.0.0.0. To match the criteria to a 24-bit subnet (for example, 192.168.10.0/24), use a wild card mask of 0.0.0.255. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 94: Configure Ipv6 Acls

    Step 8 Click Apply. Configure IPv6 ACLs To configure an IPv6 ACL: Step 1 Select Access Control > ACL. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 95 • Select From List — Choose the keyword associated with the source port to match: ftp, ftpdata, http, smtp, snmp, telnet, tftp, www. Each of these keywords translates into its equivalent port number. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 96 • Custom — Enter a custom DSCP value, from 0 to 63. Step 7 Click OK. The changes are saved to the Startup Configuration. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 97: Configure Mac Acls

    • Address/ Mask — Enter the source MAC address mask specifying which bits in the source MAC to compare against an Ethernet frame. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 98: Client Qos

    During times of congestion, packets may be delayed, sent sporadically, or dropped. For typical Internet applications, Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 99: Configuring Ipv4 Traffic Classes

    Next Header field in IPv6 packets. Choose the protocol to match by keyword or enter a protocol ID: • All Traffic — Allows all traffic from any protocol. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 100 • IP ToS Mask — Enter an IP ToS Mask value to identify the bit positions in the IP ToS Bits value that are used for comparison against the IP ToS field in a packet. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 101: Configuring Ipv6 Traffic Classes

    Next Header field in IPv6 packets. Choose the protocol to match by keyword or enter a protocol ID: • All Traffic — Allows all traffic from any protocol. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 102 • IP DSCP Match to Value — Enter a custom DSCP value from 0 to 63 Step 7 Click OK. The changes are saved to the Startup Configuration. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 103: Configuring Mac Traffic Classes

    • Custom — Matches the Ethertype in the datagram header with a custom protocol identifier that is specified. The value can be a four-digit hexadecimal number in the range of 0600 to FFFF. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 104: Qos Policy

    • Send — Specifies that all packets for the associated traffic stream are to be forwarded if the traffic class criteria is met. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 105: Qos Association

    Click Apply. Note An interface can be bound with either a QoS policy or an ACL, but not both. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 106: Global Settings

    Web Portal Locale Table defines the show style of the authentication web page while the Guest Group Table decides the users’ username and password. To configure Guest Access Instance: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 107: Guest Access Instance Table

    • RADIUS Accounting — Check Enable to track and measure the resources that a particular user has consumed, such as the system time and the amount of data transmitted and received. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 108 Purple WiFi redirection service. Configure the following if using an external captive portal setting. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 109 For the Purple WiFi, the Server IP Address-1 and Address-2 varies for different regions. The table below specifies the same: Regions Address-1 Address-2 AMERICAS 34.94.146.135 34.94.183.201 Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 110: Guest Group Table

    The range is from 0 to 1440 minutes. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 111: Guest User Account

    In this table, click ✚ to access the Web Portal Customization page. To modify the locale, check the row and click Edit or click Delete to delete. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 112 • No Acceptance Warning — The text that appears in a pop-up window when a user submits login credentials without selecting the Acceptance Use Policy check box. The range is from 1 to 128 characters. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 113 Clicking Preview will show the text and the images that have already been saved to the Startup Configuration. If you make a change, click Apply before clicking Preview to see your changes. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 114 Access Control Web Portal Customization Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 115: Cisco Umbrella

    DNSCrypt is used to secure DNS communication between a DNS client and a DNS resolver. It prevents several Note types of DNS attacks, and snooping. Default is enabled. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 116 Click Apply to apply these configurations. The status of the registration is indicated in the Registration Status field. The status can be Successful, Registering or Failed. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 117: Monitor

    • Green round — At least one radio is working. One or two radios are enabled. Click the Wireless link to view the Wireless Status page. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 118: Lan Status

    • IP Address — The IP address of the WAP device. • Subnet Mask — The subnet mask of the WAP device Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 119: Wireless Status

    • Status — The administrative status (up or down) of the VAP. • MAC Address — The MAC address of the radio interface. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 120: Traffic Statistics

    According to the traffic order, the bar chart displays the top 5 Traffic WAP devices. • Upload—Throughput of transmitted. • Download—Throughput of received. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 121: Clients

    Click Upload or Download to not display data. Lowest SNR Clients List the lowest 5 devices according to Signal-to-Noise (SNR). Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 122 • Traffic( Up /Down)—The total number of bytes sent (Up) or received (Down) to the client device. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 123: Guests

    • Away Time — The time remaining, in seconds, for the client entry to be valid. The timer starts when the client dissociates from the CP. After the time reaches zero, the client is de-authenticated. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 124 • Failure Time — The time at which the authentication failure occurred. A timestamp is included that shows the time of the failure. You can click Export to download the current Authenticated/Failed clients message. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 125: Troubleshoot

    WAP device. The captured packets can then be analyzed by a network protocol analyzer for troubleshooting or performance optimization. There are two methods of packet capture: Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 126: Local Packet Capture

    Click Enable Filters. There are three checkboxes available (Ignore Beacons, Filter on Client, Filter on SSID). • Ignore Beacons — Enables or disables the capturing of 802.11 beacons detected or transmitted by the radio. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 127: Remote Packet Capture

    Select Troubleshoot > Packet Capture. Step 2 For the Packet Capture Method, click Stream to a Remote Host radio button. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 128: Stream To Cloudshark

    Filter on Client — Specifies the MAC address for WLAN Client Filter. Note The Client Filter is active only when a capture is performed on an 802.11 interface. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 129: Wireshark

    To initiate additional remote capture sessions, repeat the Wireshark configuration steps. No configuration required on the WAP device. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 130 WAP device from forwarding the captured beacon packets to the Wireshark tool. To reduce the performance impact of capturing the 802.11 beacons, disable the capture beacons mode. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 131: Packet Capture File Download

    • The second line chart update data every 5 seconds. It will show the CPU/RAM activity in 5 minutes. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 132: Download Cpu/Ram Data

    Click Download to generate the file based on the current system settings. After a short pause, a window appears to enable you to save the file to your computer. Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 133: Appendix A Deauthentication Message Reason Codes

    Disassociated because WAP device is unable to handle all currently associated STAs Class 2 frame received from nonauthenticated STA Class 3 frame received from nonassociated STA Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 134 Invalid AKMP Unsupported RSNE version Invalid RSNE capabilities IEEE 802.1X authentication failed Cipher suite rejected because of the security policy Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 135: Appendix B Where To Go From Here

    7XEEX17D99-3X49X08 1) found in the product open source documentation. Cisco WAP150 Administration Guide http://www.cisco.com/go/100_wap_ resourceshttp://www.cisco.com/go/300_wap_ CiscoWAP361 Administration Guide resources Cisco Power Adapters http://www.cisco.com/go/wap_accessories Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...
  • Page 136 Where to Go from Here Where to Go from Here Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE...

This manual is also suitable for:

Wap361

Table of Contents