Cisco AP541N-A-K9 Administration Manual
  1. Manuals
  2. Brands
  3. Cisco Manuals
  4. Wireless Access Point
  5. AP541N-A-K9
  6. Administration manual

Cisco AP541N-A-K9 Administration Manual

Small business pro dual-band single-radio access point
Hide thumbs
Table of Contents

Advertisement

Quick Links

ADMINISTRATION
GUIDE
Cisco Small Business Pro
AP 541N Dual-band Single-radio Access Point
OL-20285-01

Advertisement

Table of Contents
loading

Related Manuals for Cisco AP541N-A-K9

Summary of Contents for Cisco AP541N-A-K9

  • Page 1 ADMINISTRATION GUIDE Cisco Small Business Pro AP 541N Dual-band Single-radio Access Point OL-20285-01...

  • Page 2: Table Of Contents

    Connecting the Access Point to the PC through a Network Connection Launching the Access Point Configuration Utility Display the Configuration Utility By Using the Default IP Address Display the Configuration Utility by Using Cisco Configuration Assistant 2.1 or higher Display the Configuration Utility by Using Another IP Address...
  • Page 3 Configuring the Wireless Distribution System WEP on WDS Links WPA/PSK on WDS Links Bandwidth Utilization Configuring Quality of Service (QoS) Chapter 5: SNMP Configuring SNMP on the Access Point Configuring SNMP Views Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 4 Clustering Single and Dual Radio Access Points Viewing and Configuring Cluster Members Removing an Access Point from the Cluster Adding an Access Point to a Cluster Navigating to Configuration Information for a Specific Access Point Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 5 WDS Configuration from the Web Interface WDS Configuration Using SNMP Clustering Access Points Clustering APs by Using the Web Interface Clustering Access Points by Using SNMP Appendix A:Default Settings Appendix B:Where to Go From Here Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 6: Preface

    Audience This guide is intended for System Administrators that are responsible for configuring and operating a network by using Cisco software To obtain the greatest benefit from this guide, you should also have basic knowledge of Ethernet and wireless networking concepts.
  • Page 7 Preface Table 1 describes the typographical conventions used in this guide. Table 1 Typographical Conventions Symbol Example Description Bold Click Apply to save Menu titles, page names, and button your settings. names Blue Text Document Hyperlinked text. Conventions, page courier font WLAN-AP# show Screen text, file names, commands, network...

  • Page 8: Online Help, Supported Browsers, And Limitations

    Preface Online Help, Supported Browsers, and Limitations Online help for the Access Point Configuration Utility pages provides information about all fields and features available from the Access Point Configuration Utility. The information in the online help is a subset of the information available in the AP541N Dual-band Single-radio Access Point Administration Guide.

  • Page 9: Chapter 1: Getting Started

    IP address. If you use VLANs or IEEE 802. 1 X Authentication (port security) on your network, you might need to configure additional settings on the access point before it can connect to the network. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 10: Administrator Computer Requirements

    Utility interface. Security Settings Ensure that security is disabled on the wireless client used initially to configure the access point. Once the device has been configured, security can be enabled. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 11: Administration Pc Ip Address

    “Connect the Access Point to an Administration PC” section. Otherwise, follow the instructions in “Connecting the Access Point to the PC through a Network Connection” Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 12: Connect The Access Point To An Administration Pc

    Plug the other end of the power cord into a power outlet. STEP 4 Configure the access point by following the instructions in the “Display the STEP 5 Configuration Utility By Using the Default IP Address” section. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 13: Connecting The Access Point To The Pc Through A Network Connection

    If you are not using PoE, connect the power adapter to the power port on the back STEP 3 of the access point, then plug the other end of the power cord into a power outlet. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 14: Launching The Access Point Configuration Utility

    To access the Access Point Configuration Utility, enter the default static IP address of the access point into a Web browser, do the following: STEP 1 Enter the Cisco AP 541N default static IP address in the address bar and press Enter. For 192.168.10.10. example, http://...
  • Page 15 Username = cisco Default password cisco. (Passwords are case sensitive.) When you log in, the Getting Started page for the access point Configuration Utility is displayed, as shown in Figure Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 16 Getting Started Connecting the Access Point to a PC Figure 4 Getting Started Page STEP 3 Update the Cisco AP 541N software with the latest version by clicking the Software as shown in Figure Upgrade link, Next, we recommend that you: •...

  • Page 17: Display The Configuration Utility By Using Cisco Configuration Assistant 2.1 Or Higher

    Display the Configuration Utility by Using Cisco Configuration Assistant 2.1 or higher Use Cisco Configuration Assistant 2. 1 or higher (CCA) to configure the access point when it is deployed in a Cisco Smart Business Communications System (SBCS) network with a UC520 or SR520.
  • Page 18 Connecting the Access Point to a PC When you have connected to the CCA site and the devices have been discovered, the Topology Map includes the Cisco AP541N. Non-Cisco devices connected to the switch are not shown in the Topology NOTE map.

  • Page 19: Display The Configuration Utility By Using Another Ip Address

    IP address of the access point into the Web browser The Login window displays, as shown in Figure Enter the login information: STEP 3 Username is cisco Default password is cisco (passwords are case sensitive) Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 20 When you log in, the Getting Started page for the access point Configuration Utility is displayed, as shown in Figure STEP 4 Update the Cisco AP 541N software with the latest version by clicking the Software as shown in Figure Upgrade link, Next, we recommend that you: •...

  • Page 21: Troubleshooting Your Connection

    If you cannot display the configuration utility, you can test the ability of the PC to communicate with the access point by using ping. To use ping on a PC running Windows: Verify that the Cisco AP 541N is powered on and the LEDs indicate the STEP 1 appropriate links.

  • Page 22: Resetting The Device By Using The Reset Button

    Getting Started Troubleshooting Your Connection DHCP is enabled on the Cisco AP 541N by default. When a DHCP server is enabled on your network and the access point is connected to the network, the DHCP server replaces the default static IP address with a DHCP server–assigned IP address.

  • Page 23: Configuring The Access Point By Using The Getting Started Page

    Click Change Administrator Password to provide a new administration password STEP 1 for the access point. (The username is cisco and it cannot be changed. The default password is cisco.) If you do not have a DHCP server on the network and do not plan to use one, click...

  • Page 24: Access Point Management Page

    The access point supports multiple client operating systems. Clients can be laptop or desktop computers, personal digital assistants (PDAs), or any other hand-held, portable or stationary device equipped with a Wi-Fi adapter and supporting drivers. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 25 Security modes are Static WEP, IEEE 802. 1 X, with RADIUS server, and WPA- PSK. For information about configuring security on the access point, see Configuring the Wireless Distribution System, page Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 26: Verifying The Installation

    If more than one administrator is logged onto the Configuration Utility and is making changes to the configuration, there is no guarantee that all configuration changes specified by multiple users will be applied. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 27: Configuring Security On The Wireless Access Point

    Station Isolation: Disabled • HTTP Redirect: Disable VAP1 has the following default settings: • VLAN ID: 100 • SSID: cisco-voice • Broadcast SSID: Enabled • Security: None • MAC Authentication Type: Disabled Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 28 None for the default VAP and for each VAP that you enable. For information about how to configure the security settings on each VAP, see Configuring the Wireless Distribution System, page Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 29: Chapter 2: Status

    Status The Status page provides information on the following: • Device Information • Network Interfaces • Traffic Statistics • Associated Clients • Rogue AP Detection Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 30: Device Information

    Shows the AP serial number. Serial Number Generic name to identify the type of hardware. Device Name Provides information about the product hardware. Device Description Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 31: Network Interfaces

    Network Interfaces The Network Interface Status window displays the current Wired Settings Wireless Settings of the access point. Click Refresh to refresh the page. Figure 6 Interface Status Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 32: Wired Settings

    To view transmit and receive statistics for the access point, click the Traffic Statistics tab. Click Refresh to refresh the page. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 33 Status Traffic Statistics Figure 7 Viewing Traffic Statistics Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 34 Displays the total number of transmit and receive Errors errors detected by the AP. NA means that the drop and error counters for the VAP interfaces and the WDS interfaces are not supported. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 35: Associated Clients

    Shows which VAP the client is associated with. For Network example, an entry of wlan0vap2 means the client is associated with Wireless Radio 1, VAP 2. Shows the MAC address of the associated wireless Station client. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 36 Shows the number of packets and bytes transmitted To Station from the access point to the wireless client and the number of packets and bytes that were dropped upon transmission. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 37: Link Integrity Monitoring

    The Rogue AP Detection page displays information about all access points detected by the Cisco AP 541N in the vicinity of the network. If the access point listed as a rogue is actually a legitimate access point, you can add it to the Known AP List.
  • Page 38 To enable neighbor access point detection and collect AP Detection information about neighbor access points, click Enabled. (default) To disable neighbor access point detection, click Disabled. To save the setting, click Apply. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 39 Detected Rogue AP List. NOTE: The Detected Rouge AP List and Known AP List provide information only; the Cisco AP 541N does not have any control over the access points on the list and cannot apply any security policies to access points detected through the RF scan.
  • Page 40 2.4 indicates IEEE 802. 1 1b, 802. 1 1g, or 802. 1 1n mode (or a combination of the modes) • 5 indicates IEEE 802. 1 1a mode, 802. 1 1n mode, or a combination of modes. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 41 (Mbps). All Supported Rates are listed, with Basic Rates shown in bold. Rate sets are configured on the Wireless > Advanced Settings page. (See Modifying Advanced Settings, page 79.) Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 42: Save Or Import A List Of Known Access Points

    Use the Import feature to import a list of known access points from a saved list. The list might be from another Cisco access point or created from a text file. If the MAC address of an access point appears in the Known AP List, it will not be shown as a rogue.

  • Page 43: Chapter 3: Setup

    VLAN. If you have configured the management VLAN on your network with a different VLAN ID, you must change the VLAN ID of the access point management VLAN. To configure the LAN interface settings, click the LAN Settings tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 44 Setup LAN Settings Figure 10 LAN Settings Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 45 DNS, and gateway information from a DHCP server. If you select Static IP, you must enter information in the Static IP Address, Subnet Mask, and Default Gateway fields. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 46: Configuring 802.1X Authentication

    To configure the access point 802. 1 X supplicant user name and password, click the 802. 1 X Authentication tab and configure the fields shown in Table Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 47 Field Description Click Enabled to enable the Administrative status of the 802.1X Supplicant 802. 1 X Supplicant. Click Disabled to disable the Administrative status of the 802. 1 X Supplicant. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 48 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 49: Enabling The Network Time Protocol

    Figure 12 on page 47 or by using a server as shown in Figure 13 on page 48, click the Time tab and update the fields as described in Table Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 50 Setup Enabling the Network Time Protocol Figure 12 Manually Enabling Network Time Protocol Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 51 Setup Enabling the Network Time Protocol Figure 13 Enabling Network Time Protocol Server Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 52 This field appears when you select Manually in the Set System Time field. Use the System Time list to select hours and minutes. All times are relative to the local time zone. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 53 Specify the time (24-hour format) by selecting the hours and minutes. DST Offset (minutes) From the DST Offset list, select the number of minutes to add during Daylight Savings Time (15 to 120 in 15-minute increments). Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 54 Changing some settings might cause the access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 55: Chapter 4: Wireless

    To configure the wireless interface, click the Wireless Radio Settings tab. Figure 14 Wireless Interface Configuration Table 10 describes the fields and configuration options available on the Radio Settings page. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 56 The MAC address is assigned by the manufacturer. You cannot change the MAC address. It is provided here for informational purposes as a unique identifier for the interface. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 57 2.4-GHz frequency can connect to the access point. • 5 GHz 802. 1 1n.Only 802. 1 1n clients operating in the 5- GHz frequency can connect to the access point. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 58: Modifying Virtual Access Point Settings

    VAPs segment the wireless LAN into multiple broadcast domains that are the wireless equivalent of Ethernet VLANs. VAPs simulate multiple access points in one physical access point. The Cisco AP 541N supports up to 16 VAPs. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 59 Before you configure VLANs on the access point, be sure to verify that the switch NOTE and DHCP server the access point uses can support IEEE 802. 1 Q VLAN encapsulation. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 60 If the primary server responds to the authentication request, the access point continues to use this RADIUS server as the primary server, and authentication requests are sent to the address you specify. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 61 VAP0 from WPA Personal or WPA Enterprise to None, Static WEP, or 802. 1 X, then remove the WPA security mode for all the WDS links. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 62 The RADIUS-assigned VLAN ID overrides the VLAN ID you configure on the VAP page. You configure the untagged and management VLAN IDs on the Ethernet Settings page. For more information, see Settings, page Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 63 SSID broadcast offers a very minimal level of protection on an otherwise exposed network (such as a guest network) where the priority is making it easy for clients to get a connection and where no sensitive information is available. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 64 Wireless Connection Control page. • RADIUS: Use the MAC authentication list on the external RADIUS server. For more information about MAC authentication, see Client Connection Control, page Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 65 The entry is removed from the list of displayed VAPs. NOTE: VAP0 corresponds to the physical wireless radio interface and cannot be deleted. The Delete icon is not displayed for this VAP. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 66: Security (Mode)

    None (Plain-text) as it does prevent an outsider from easily sniffing out unencrypted wireless traffic. WEP encrypts data moving across the wireless network based on a static key. (The encryption algorithm is a stream cipher called RC4.) Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 67 Specify the length of the key by clicking one of the radio Key Length buttons: • 64 bits • 128 bits Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 68 Key type you select. For example, if you use 128-bit ASCII keys, you must enter 13 characters in the WEP key. The number of characters required updates automatically based on how you set Key Length and Key Type. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 69 Client stations configured to use WEP as an open system (shared key mode not enabled) are able to associate with the access point, even if they do not have the correct WEP key. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 70 To use a separate RADIUS server for the VAP, clear the check box and enter the RADIUS server IP address and key in the following fields. Enter the address for the primary RADIUS server for RADIUS IP Address this VAP. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 71 (unicast) keys for each client associated to the VAP. The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 72 Enter up to three IPv4 addresses to use as the backup Address 1–3 RADIUS servers for this VAP. If authentication fails with the primary server, each configured backup server is tried in sequence. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 73 The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. After you configure the security settings, you must click Apply to apply the changes NOTE and to save the settings. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 74 WPA, select both of the check boxes. This lets both WPA and WPA2 client stations associate and authenticate, but uses the more robust WPA2 for clients that support it. This WPA configuration allows more interoperability, at the expense of some security. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 75 802. 1 1i standard, which includes CCMP (AES), and TKIP mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users. This security mode is backwards-compatible with wireless clients that support the original WPA. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 76 This option does not apply if you selected only WPA for WPA Versions because WPA does not support this feature. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 77 Enter up to three IPv4 addresses to use as the backup RADIUS IP Address 1–3 RADIUS servers for this VAP. If authentication fails with the primary server, each configured backup server is tried in sequence. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 78 The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. After you configure the security settings, you must click Apply to apply the changes NOTE and to save the settings. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 79: Client Connection Control

    MAC addresses to deny, all clients can access the network except for the clients on the deny list. To enable filtering by MAC address, click the Client Connection Control tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 80 All other stations are permitted access. NOTE: The filter you select is applied to the clients in the station list, regardless of whether that station list is local or on the RADIUS server. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 81 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 82: Configuring Mac Authentication On The Radius Server

    To specify the wireless radio settings, click the Advanced Settings tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 83 Wireless Modifying Advanced Settings Figure 17 Configuring the Wireless Radio Settings Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 84 Wireless Modifying Advanced Settings Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 85 Select one of the following modes for the wireless radio interface: • 802. 1 1a • 802. 1 1b/g • 802. 1 1a/n • 802. 1 1b/g/n • 5 GHz 802. 1 1n • 2.4 GHz 802. 1 1n Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 86 The 40-MHz channel enables higher data rates but leaves fewer channels available for use by other 2.4 GHz and 5 GHz devices. Select a value to set the use of the channel bandwidth. The default is 20-MHz. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 87 Yes. The access point transmits data using a 400 ns guard Interval when communicating with clients that also support the short guard interval. • No. The access point transmits data using an 800 ns guard interval. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 88 The default behavior is to send a beacon frame once every 100 milliseconds (or 10 per second). Enter a value from 20 to 2000 milliseconds. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 89 1, clients will check for buffered data on the access point at every beacon. If you set this field to 10, clients will check on every 10th beacon. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 90 By default, fragmentation is off. We recommend not using fragmentation unless you suspect that there is wireless radio interference. The additional headers applied to each fragment increase the overhead on the network and can greatly reduce throughput. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 91 Specify the maximum number of stations allowed to access Maximum Stations this access point at any one time. You can enter a value between 0 and 200. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 92 Select the multicast traffic transmission rate you want the Fixed Multicast Rate access point to support. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 93 The rate limit burst range is 1-150 packets per second. The default rate limit burst setting is 150 packets per second. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 94: Configuring The Wireless Distribution System

    Wireless clients can still connect to an access point that is operating as a repeater. To specify the details of traffic exchange from this access point to others, click the WDS Bridge tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 95 Both access points participating in a WDS link must be on the same wireless radio channel and use the same IEEE 802. 1 1 mode. (See Modifying Advanced Settings, page 79 for information on configuring the Radio mode and channel.) Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 96 WPA2-PSK with CCMP (AES) encryption over the WDS link. NOTE: To configure WPA-PSK on any WDS link, VAP0 of the selected wireless radio must be configured for WPA-PSK or WPA-Enterprise. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 97: Wep On Wds Links

    0–9, a–z, and A–Z. If you selected HEX, enter hexadecimal digits (any combination of 0–9 and a–f or A–F). These are the RC4 encryption keys shared with the stations using the access point. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 98: Wpa/Psk On Wds Links

    Changing some settings might cause the access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 99: Bandwidth Utilization

    Threshold accepting new client associations. The default is 0, which means that all new associations are allowed regardless of the utilization rate. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 100: Configuring Quality Of Service (Qos)

    Changing these values will affect the QoS provided. To set up queues for QoS, click the QoS tab under the Services heading and configure settings as described in Table Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 101 Most traditional IP data is sent to this queue. Data 3 (Background)—Lowest priority queue, high throughput. Bulk data that requires maximum throughput and is not time-sensitive is sent to this queue (FTP data, for example). Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 102 Valid values for cwMax are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1023. The value for cwMax must be higher than or equal to the value for cwMin. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 103 If WMM disabled, all the fields below it are not able to be edited. To disable WMM, click Disabled. To enable WMM, click Enabled. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 104 Doubling will continue until the size of the random backoff value reaches the number defined in the Maximum Contention Window. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 105 Changing some settings might cause the access point to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 106 Wireless Configuring Quality of Service (QoS) Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 107: Chapter 5: Snmp

    SNMPv3 views, groups, users, and targets, see Configuring SNMP Views, page 108. To configure SNMP, click the General tab under the SNMP heading and update the fields described in Table 25 on page 105. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 108 Apply to save your configuration changes. NOTE: If you disable SNMP, all remaining fields on the SNMP page are disabled. This is a global SNMP parameter that applies to SNMPv1, SNMPv2c, and SNMPv3. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 109 Only requests from the machines that identify themselves with this community name will be accepted. The community name can be in any alphanumeric format. Double quote (") is not a valid character. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 110 10.10.1.128/25, machines with IP addresses from 10.10.1.129 through 10.10.1.254 can execute SNMP requests on managed devices. In this example, 10.10.1.128 is the network address and 10.10.1.255 is the broadcast address. 126 addresses are designated. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 111: Configuring Snmp Views

    MIB views to control the OID range that SNMPv3 users can access. A MIB view called all that contains all management objects supported by the system is created by default. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 112 View names can contain up to 32 alphanumeric characters. Double quote (") is not a valid character. Specifies whether to include or exclude the view subtree or Type family of subtrees from the MIB view. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 113: Configuring Snmp Groups

    DES key/password for encryption. By default, users of this group have read and write access to default all MIB view, which can be modified by the user. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 114 Specify a name to use to identify the group. The Name default group names are RWPriv, RWAuth, and RO. Group names can contain up to 32 alphanumeric characters. Double quote (") is not a valid character. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 115 To remove a group, select the group and click Remove. After you configure the SNMPv3 Groups settings, you must click Apply to apply the NOTE changes and to save the settings. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 116: Configuring Snmp Users

    Double quote (") is not a valid character. Map the user to a group. The default groups are Group RWAuth, RWPriv, and RO. You can define additional groups on the SNMP Groups page. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 117 To remove a user, select the user and click Remove. After you configure the SNMPv3 Users settings, you must click Apply to apply the NOTE changes and to save the settings. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 118: Snmp Targets

    SNMP users, see Configuring SNMP Users, page 113. SNMPv3 This field shows the SNMPv3 Targets on the access point. To Targets remove a target, select it and click Remove. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 119 SNMP SNMP Targets After you configure the SNMPv3 Target settings, you must click Apply to apply the NOTE changes and to save the settings. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 120 SNMP SNMP Targets Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 121: Chapter 6: Administration

    Administration Administrator Use this page to configure the administrator information and to provide a new administration password for the access point. The default password is cisco. As an immediate first step in securing your wireless network, we recommend that NOTE you change the administrator password from the default.
  • Page 122 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 123: Access Point Configuration

    XML file is applied to the access point. Click the AP Configuration tab to access the configuration management page, which Figure 27 shows. Figure 27 Configuration Management Page Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 124: Resetting The Access Point To The Factory Default Configuration

    Enter the IP address of the TFTP server. STEP 3 Click Download to save the file. STEP 4 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 125: Saving The Current Configuration By Using Http

    Enter a name for the backup file in the Filename field, including the .xml file name STEP 2 extension and the path to the directory that contains the configuration file to upload. Enter the IP address of the TFTP server. STEP 3 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 126: Restoring The Current Configuration By Using Http

    Navigate to the directory that contains the file, then select the file to upload and STEP 4 click Open. Only those files saved as .xml backup configuration files are valid to use with NOTE Restore; for example, ap_config.xml. Click Restore. STEP 5 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 127: Rebooting The Access Point

    Click the Software Upgrade tab in the Administration section. STEP 1 Information about the current software version is displayed and an option to upgrade a new software image is provided. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 128 Click OK to confirm the upgrade and start the process. STEP 6 The software upgrade process begins once you click Upgrade and then OK in the NOTE popup confirmation window. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 129: Upgrading The Software By Using Http

    Do not power down the access point while the upgrade is in progress. When the upgrade is complete, the access point restarts. The access point resumes normal operation with the same configuration settings it had before the upgrade. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 130: Event Logs

    And you can enable a remote log relay host to capture all system events and errors in a Kernel Log. To view system events, click the Events tab. Figure 28 Event Logs Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 131: Configuring Persistent Logging Options

    To configure persistent logging on the Event Logs page, set the persistence, severity, and depth options as described in Table 31, and then click Apply. Figure 29 Persistent Logging Options Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 132 If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 133: Configuring The Log Relay Host For Kernel Messages

    The syslog process will default to use port 514. We recommend keeping this NOTE default port. However; If you choose to reconfigure the log port, make sure that the port number you assign to syslog is not being used by another process. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 134: Enabling Or Disabling The Log Relay Host On The Events Page

    If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 135: Configuring The Web Server Settings

    By default both HTTP and HTTPS access are enabled. Either access type can be disabled. To configure the Web server settings, click the Web Server tab. Figure 31 Configuring Web Server Settings Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 136 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 137: Creating An Administration Access Control List

    To create an access list, click the Administration Access Control tab. Figure 32 Management ACL After you configure the settings, click Apply to apply the changes and to save the NOTE settings. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 138 SNMP access to the management interface. Enter up to five IPv4 addresses that are allowed IP Address (1–5) management access to the access point. Use dotted- decimal format (for example, 192.168.10.100). Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 139: Chapter 7: Clustering Multiple Access Points

    Clustering Multiple Access Points The Cisco AP 541N supports access point clusters. A cluster provides a single point of administration and lets you view, deploy, configure, and secure the wireless network as a single entity rather than a series of separate wireless devices.

  • Page 140: Clustering Single And Dual Radio Access Points

    To view information about cluster members and to configure the location and cluster of an individual member, click the Access Points tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 141 If clustering is not enabled, then the access point is operating in stand-alone mode and none of the information in this table is visible. To disable clustering on the access point, click Disable Clustering. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 142 Location physically located. The location can be a maximum of 64 characters in length. All alphanumeric characters except double quote (") are valid. Null or empty space is not allowed. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 143: Removing An Access Point From The Cluster

    The Access Points tab for a standalone access point indicates that the current mode is standalone and provides a button for adding the access point to a cluster (group). Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 144: Navigating To Configuration Information For A Specific Access Point

    IP address for that access point as a URL directly into a Web browser address bar in the following form: http://IPAddressOfAccessPoint where IPAddressOfAccessPoint is the address of the particular access point you want to monitor or configure. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 145: Managing Cluster Sessions

    A client station can roam between access points and maintain the session. To manage sessions associated with the cluster, click the Sessions tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 146 You must configure the same cluster name on each access point that is a member of the cluster. The cluster name must be unique for each cluster you configure on the network. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 147: Sorting Session Information

    For example, if you want to see the table rows ordered by signal strength, click the Signal column label. The entries are sorted by signal strength. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 148: Configuring And Viewing Channel Management Settings

    You can start channel management to optimize channel usage across the cluster on a scheduled interval. To configure and view the channel assignments for the cluster members, click the Channel Management tab. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 149: Stopping/Starting Automatic Channel Assignment

    Channel Management overrides the default cluster behavior, which is to NOTE synchronize radio channels of all access points across a cluster. When Channel Management is enabled, the radio Channel is not synced across the cluster to other access points. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 150: Viewing Current Channel Assignments And Setting Locks

    IP Address for the access point. IP Address MAC address of the radio. Wireless Radio Band on which the access point is broadcasting. Band Radio channel on which this access point is currently Channel broadcasting. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 151: Viewing The Last Proposed Set Of Changes

    Radio channel on which this access point is currently Wireless Radio broadcasting. Radio channel to which this access point would be Proposed Channel re-assigned if the Channel Plan is executed. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 152: Configuring Advanced Settings

    However; if you re-set the minimal channel interference benefit to 25 percent and click Apply, the proposed channel plan will be implemented and channels reassigned as needed. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 153: Viewing Wireless Neighborhood Information

    (signal strength, channel, beacon interval). You can click on an access point to get additional statistics about the access points in radio range of the currently selected access point. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 154 • Detect faults. Unexpected changes in the coverage pattern are evident at a glance in the color coded table. Figure 36 Wireless Neighborhood Table 41 describes the Wireless Neighborhood information. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 155 You can click on an IP address to view more details on a particular access point. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 156 IP address listed above that column (since there is no value in showing how well the access point can detect itself). Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 157: Viewing Details For A Cluster Member

    Radio 1 of the access point with an IP address of 10.27.64. 1 77. Figure 37 Details for a Cluster Member AP Table 42 describes the parameters of an access point. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 158 100 milliseconds (or 10 per second). Shows the date and time of the last beacon received from this Beacon Age access point. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 159: Chapter 8: Configuration Examples

    For all SNMP examples, the objects you use to modify the access point are in a private MIB. The path to the tables that contain the objects is iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).lvl7(6132).lvl7Products(1).fa stPath(1).fastPathWLANAP(28), as shown in Figure Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 160: Configuring A Vap

    Configuring a VAP This example shows how to configure VAP 3 with the following non-default settings: • VLAN ID: 3 • SSID: Marketing • Security: WPA Personal using WPA2 with CCMP (AES) Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 161: Vap Configuration From The Web Interface

    Enter a WPA encryption key in the Key field. STEP 7 The key can be a mix of alphanumeric and special characters. The key is case sensitive and can be between 8 and 63 characters. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 162: Vap Configuration Using Snmp

    Navigate to the objects in the apRadioBss > apBssTable table. STEP 11 Walk the apBssDescr object to view the instance ID for VAP 2. STEP 12 VAP 2 on wireless Radio 1 is instance 3. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 163: Configuring Wireless Radio Settings

    In the Maximum Stations field, change the value to 100. STEP 6 In the Transmit Power field, change the value to High. STEP 7 The next window shows the Advanced Settings page with the settings specified in this example. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 164 Configuration Examples Configuring Wireless Radio Settings Click Apply to update the access point with the new settings. STEP 8 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 165: Wireless Radio Configuration Using Snmp

    MyAP2 with a MAC address of 00:30:AB:00:00:B0. The WDS link has the following settings, which must be configured on both APs: • Encryption: WPA (PSK) • SSID: wds-link • Key: abcdefghijk Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 166: Wds Configuration From The Web Interface

    Click Apply to apply the WDS settings to the access point. STEP 6 Log onto MyAP2 and repeat steps 2-5 (but be sure to use the MAC address of STEP 7 MyAP1 in the Remote Address field). Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 167: Wds Configuration Using Snmp

    Set the value of instance 1 in the apIfConfigWdsWpaPskKey object to abcdefthijk. STEP 7 Some MIB browsers require that the value be entered in HEX values rather than ASCII values. Perform the same configuration steps on MyAP2. STEP 8 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 168: Clustering Access Points

    After you refresh the page, other APs that are on the same bridged segment, have wireless radios in the same operating mode, are enabled for clustering, and have the same cluster name appear in the Access Points table. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...
  • Page 169 STEP 6 The page refreshes and lists the proposed channel changes for all APs in the cluster. The interval setting in the Advanced section determine how often proposed changes are applied. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 170: Clustering Access Points By Using Snmp

    Configuration Examples Clustering Access Points Clustering Access Points by Using SNMP Cluster configuration by using SNMP is not supported. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide...

  • Page 171: Appendix A:default Settings

    Default Settings When you first power on an access point, it has the default settings shown in Table Table 43 UAP Default Settings Feature Default System Information User Name cisco Password cisco Ethernet Interface Settings Connection Type DHCP DHCP Enabled IP Address 192.
  • Page 172 IEEE 802. 1 1b: 2, 1 IEEE 802. 1 1g: 11, 5.5, 2, 1 EEE 5-GHz 802. 1 1n: 24, 12, 6 IEEE 2.4 GHz 802. 1 1n: 11, 5.5, 2, 1 SSIDs cisco-data, cisco-voice, cisco-scan Broadcast/Multicast Rate Enabled Limiting Fixed Multicast Rate...
  • Page 173 Default Settings Table 43 UAP Default Settings (Continued) Feature Default VLAN ID Network Name (SSID) Cisco VAP for VAP0 SSID for all other VAPs is Virtual Access Point where is the VAP number. Broadcast SSID Allow Security (mode) VAP2 is WPA Personal...
  • Page 174 Default Settings Table 43 UAP Default Settings (Continued) Feature Default Telnet Access Enabled SSH Access Enabled Enabled Network Time Protocol (NTP) None Clustering Stopped Client QoS Global Admin Disabled Mode VAP QoS Mode Disabled Default Settings...

  • Page 175: Appendix B:where To Go From Here

    Where to Go From Here Cisco provides a wide range of resources to help you and your customer obtain the full benefits of the AP 541N Dual-band Single-radio Access Point. Product Resources Resource Location www.cisco.com/go/smallbizsupport Cisco Small Business Support Community www.cisco.com/en/US/products/ps10024/...
  • Page 176 Warranty and End User License Agreement www.cisco.com/go/osln Open Source License Notices www.cisco.com/en/US/products/ps10024/ Regulatory Compliance and tsd_products_support_series_home.html Safety Information http://www.cisco.com/en/US/products/ps7287/ Cisco Configuration Assistant index.html www.cisco.com/web/partners/sell/smb Cisco Partner Central site for Small Business www.cisco.com/smb Cisco Small Business Home www.cisco.com/go/marketplace Marketplace Default Settings...

This manual is also suitable for:

Ap 541n

Table of Contents