Survey
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
Read This First This guide is designed to help you quickly set up and configure your Cisco Aironet 1300 Series Outdoor Access Point/Bridge. This guide does not cover mounting the access point/bridge or establishing a bridge link. Those subjects are covered in the Cisco Aironet 1300 Series Outdoor Access Point/Bridge Mounting Instructions, which shipped with your access point/bridge. You must complete the procedures in the mounting instruction document and then use this guide to initially configure the access point/bridge to connect to your LAN. Important Information Recent Cisco IOS releases have changed the way an unconfigured access point/bridge behaves when booted for the first time. This section describes this behavior and provides instructions on how to open‘ the access point’s configuration pages. Quick Start Guide Cisco Aironet 1300 Series Access Point 1 Cisco IOS Release 12.2(15)JA and Earlier Setting Default Remarks Login/Password Cisco/Cisco Case-sensitive SSID autoinstall — Radio status Enabled — Roll in Radio Network Root bridge — IP Address Assigned by DHCP If DHCP disabled, the default IP address is 10.0.0.1. See the “Assigning Basic Settings” section on page 18 for additional information. 2 78-15954-02 Cisco IOS Release 12.3(2)JA Setting Default Remarks Login/Password Cisco/Cisco Case-sensitive SSID autoinstall Case-sensitive Radio status Enabled — Role in Radio Network Root bridge — IP Address Assigned by DHCP If DHCP disabled, the access point continues to send DHCP requests indefinitely. To assign an IP address, you must access the unit’s console port. See the “Using the CLI” section on page 14 for additional information. Quick Start Guide Cisco Aironet 1300 Series Access Point 3 Cisco IOS Release 12.3(4)JA and Later Setting Default Remarks Login/Password Cisco/Cisco Case-sensitive SSID None assigned You must create an SSID. See the “Assigning an IP Address Using the CLI” section on page 16 Radio status disabled You must enable the radio interfaces. “Enabling the Radio Interfaces” section on page 5 for additional information. Role in Radio Network Root AP — IP Address Assigned by DHCP If DHCP is disabled, the access point continues to send DHCP requests indefinitely. To assign an IP address, you must access the unit’s console port. See the “Using the CLI” section on page 14 for additional information. 4 78-15954-02 Enabling the Radio Interfaces In Cisco IOS Release 12.3(4)JA and later, the access point/bridge radio is disabled by default, and there is no SSID. You must create an SSID and enable the radios before the access point/bridge will allow wireless associations from other devices. These changes to the default configuration improve the security of newly installed access point/bridges. To enable the radio interfaces using the access point/bridge’s graphical user interface (GUI), follow these instructions: 1. Use your internet browser to access your access point. The default login and password is Cisco. Both are case-sensitive. 2. When the Summary Status page displays, choose Express > SSID Manager. The Global SSID Manager page appears. 3. Create an SSID for each radio interface. An SSID can be any alphanumeric, case-sensitive entry from 2 to 32 characters. The following six characters are not allowed: ?, “, $. [. \, and +. In addition, the following three characters cannot be the first character: !, #, and ;. 4. Click Apply. 5. Choose Network Interface > Radio 802.11g and the Radio Status page appears. 6. Click Settings and the Radio Settings Page appears. 7. Click Enable in the Enable Radio field. Quick Start Guide Cisco Aironet 1300 Series Access Point 5 8. Click Apply. 9. Close your internet browser. Note You can enable the radios using the access point’s command line interface (CLI). See the Cisco IOS Software Configuration Guide for Cisco Aironet Access Points for additional information. Checking the LEDs The access point/bridge has four LEDs on its back panel that provide operational information about the access point/bridge. See the following illustration. 6 78-15954-02 R S E 117061 I R Radio LED S Status LED E Ethernet LED I Install LED The following table shows normal mode LED indications. Quick Start Guide Cisco Aironet 1300 Series Access Point 7 Note For detailed information about the LEDs, see the Cisco Aironet 1300 Series Outdoor Access Point/Bridge Hardware Installation Guide. Ethernet LED Status LED Radio LED Meaning Off — — Ethernet link is down or disabled. Blinking green — — Transmitting and receiving Ethernet packets. Blinking amber — — Transmitting and receiving Ethernet errors. Amber — — Firmware error. — Blinking green — Root bridge mode—no remote bridges associated. Non-root bridge—not associated to the root bridge. — Green — Root mode—associated to at least one remote bridge. Non-root mode—associated to the root bridge. 8 78-15954-02 Ethernet LED Status LED Radio LED Meaning Blinking amber — General warning. Red Amber Red Loading Firmware error. — — Blinking green Transmitting and receiving radio packets—normal operation. — — Blinking amber Maximum retries or buffer full occurred on radio interface. Amber Radio firmware error. Note The access point/bridge uses a blinking code to identify various error conditions. See the Cisco Aironet 1300 Outdoor Access Point/ Bridge Hardware Installation Guide for a detailed description of the codes. Quick Start Guide Cisco Aironet 1300 Series Access Point 9 Related Documents The following document provides detailed information about installing your access point/bridge: • Cisco Aironet 1300 Series Outdoor Access Point/Bridge Hardware Installation Guide This guide provides instructions for configuring your access point/bridge using its graphical user interface (GUI). You may also configure the access point/bridge through its console port to access the command line interface (CLI) and issue IOS commands. If you choose to use the CLI, please refer to the following documents for additional information and instructions: • Cisco Aironet 1300 Series Outdoor Access Point/Bridge Software Configuration Guide • Cisco IOS Command Reference for Cisco Aironet Access Points and Bridges In addition to the integrated antenna, the access point/bridge can be used with existing certified Cisco Aironet 2.4-GHz antennas. If you are using an optional external antenna, please refer to the applicable documentation for the specific antenna. Antenna documentation is shipped with the antenna. With the exception of this guide, the documents identified in this section are available on Cisco.com. Follow this link to access them: http://www.cisco.com/en/US/products/ps5861/tsd_products_support_series_ home.html 10 78-15954-02 Before You Begin Before you configure the access point/bridge, make sure you are using a computer connected to the same network as the access point/bridge, and obtain the following information from your network administrator: • A host name (system name) for the access point/bridge • The case-sensitive wireless service set identifier (SSID) that your access point/bridges use • If your access point/bridge is not connected to a DHCP server, a unique IP address for it • If the access point/bridge is not on the same subnet as your PC, a default gateway address and subnet mask • A Simple Network Management Protocol (SNMP) community name and the SNMP file attribute (if SNMP is in use) • If you use IPSU to find or assign the access point/bridge IP address, the MAC address from the product label on the access point/bridge (such as 00164625854c) Quick Start Guide Cisco Aironet 1300 Series Access Point 11 Resetting the Access Point/Bridge to Default Settings You can use the web-browser interface or the CLI to reset the access point/bridge to a factory default configuration. Note The following steps reset all configuration settings to factory defaults, including passwords, WEP keys, the IP address, and the SSID. Using the Web-Browser Interface Follow the steps below to delete the current configuration and return all access point/bridge settings to the factory defaults using the Web-browser interface. 1. Open your Internet browser. 2. Enter the access point/bridge’s IP address in the browser address or location line and press Enter. An Enter Network Password window appears. 3. Enter your username (default Cisco) in the User Name field. 12 78-15954-02 4. Enter the bridge password (default Cisco) in the Password field and press Enter. The Summary Status page appears. 5. Click System Software and the System Software window appears. 6. Click System Configuration and the System Configuration window appears. 7. Click Reset to Defaults. A warning appears prompting you to turn off any popup blocking software on your system. 8. Click OK. The system restarts. Note 9. If the bridge is configured with a static IP address, the IP address does not change. After the bridge reboots, you can reconfigure the bridge by using the Web-browser interface or the CLI (refer to the Cisco IOS Software Configuration Guide for Cisco Aironet Bridges or to the Cisco IOS Software Configuration Guide for Cisco Aironet Access Points). Quick Start Guide Cisco Aironet 1300 Series Access Point 13 Using the CLI From the privileged EXEC mode, you can reset the access point/bridge configuration to factory default values using the CLI by following these steps: 1. Enter erase nvram to erase all NVRAM files including the startup configuration. 2. Enter Y when the following CLI message appears: Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]. 3. Enter reload when the following CLI message appears: Erase of nvram: complete. This command reloads the operating system. 4. Enter Y when the following CLI message appears: Proceed with reload? [confirm]. 14 78-15954-02 Caution 5. Do not interrupt the boot process or the configuration file will be damaged. Wait until the access point/bridge Install Mode LED begins to blink green before continuing with CLI configuration changes. You will see the following CLI message when the load process has finished: Line protocal on Interface Dot11Radio0, changed state to up. After the access point/bridge reboots, you can reconfigure it with the Web-browser interface or the CLI. The access point/bridge is configured with the factory default values including the IP address (set to receive an IP address using DHCP). To obtain the access point/bridge’s new IP address, you can use the show interface bvi1 CLI command. Quick Start Guide Cisco Aironet 1300 Series Access Point 15 Obtaining and Assigning an IP Address To browse to the access point/bridge’s Express Setup page, you must either obtain or assign the access point/bridge’s IP address using one of the following methods: • Use a DHCP server (if available) to automatically assign an IP address. You can find out the DHCP-assigned IP address using one of the following methods: – Provide your organization’s network administrator with your access point’s MAC address. – Use the console port to identify the assigned address or assign one manually. Assigning an IP Address Using the CLI When you connect the access point to the wired LAN, the access point/bridge links to the network using a bridge virtual interface (BVI) that it creates automatically. Instead of tracking separate IP addresses for the access point’s Ethernet and radio ports, the network uses the BVI. 16 78-15954-02 When you assign an IP address to the access point/bridge using the CLI, you must assign the address to the BVI. Beginning in a privileged EXEC mode, follow these steps to assign an IP address to the access point/bridge’s BVI: Command Purpose Step 1 configure terminal Enters global configuration mode. Step 2 Interface bvi1 Enters interface configuration mode for the BVI. Step 3 ip address address mask Assigns an IP address and subnet mask address to the BVI. Note If you used a Telnet session to connect to the access point, you lose your connection when you assign a new IP address to the BVI. If you need to continue configuring the access point using Telnet, use the new IP address to open another Telnet session to the access point. Quick Start Guide Cisco Aironet 1300 Series Access Point 17 Using a Telnet Session to Access the CLI Follow these steps to access the CLI using a Telnet session. These steps are for a PC running Microsoft Windows with a Telnet terminal application. Check your PC operating instructions for detailed instructions. 1. Choose Start > Programs > Accessories > Telnet. If Telnet is not listed in your Accessories menu, choose Start > Run, type Telnet in the entry field, and press Enter. 2. When the Telnet window appears, click Connect and choose Remote System. 3. In the Host Name field, type the access point’s IP address and click Connect. Assigning Basic Settings After you determine or assign the bridge’s IP address, you can browse to the bridge’s Express Setup page and perform an initial configuration. Follow these steps. 1. Open your Internet browser. The bridge web-browser interface is fully compatible with these browsers: Microsoft Internet Explorer 6.0 and later and Netscape Navigator 7.0 and later. 18 78-15954-02 2. Enter the bridge’s IP address in the browser address line and press Enter. An Enter Network Password windows appears. 3. Press Tab to bypass the Username field and advance to the Password field. 4. Enter the case-sensitive password Cisco and press Enter. The Summary Status page appears. The following illustration shows the Summary Status page. Quick Start Guide Cisco Aironet 1300 Series Access Point 19 5. Click Express Setup. The Express Setup page appears. The following illustration shows the Express Setup page. 6. Enter the configuration settings you obtained from your system administrator. The following table lists the configurable settings and their defaults. 20 78-15954-02 Setting Description and Default Host Name A name for the bridge that identifies it on your network. Default: ap Configuration Server Protocol IP Address Specifies how the bridge obtains an IP address. Options: DHCP or Static IP Default: DHCP Option Description DHCP IP address is automatically assigned by network’s DHCP server. Static IP The bridge uses an IP address you enter in the IP Address field. Assigns or changes the bridge’s IP address. If DHCP is enabled, leave this field blank. Default: Depends on Cisco IOS Release in use. See “Important Information” section on page 1 for additional information. IP Subnet Mask Identifies the subnet on which your bridge resides. Provided by your network administrator. If DHCP is enabled, leave this field blank. Quick Start Guide Cisco Aironet 1300 Series Access Point 21 Setting Description and Default Default Gateway Identifies the address the bridge uses to access another network. Provided by your network administrator. The entry 255.255.255.224 indicates no gateway. If DHCP is enabled, leave this field blank. SNMP Community 22 Identifies the Simple Network Management Protocol (SNMP) used to manage the network on which the bridge resides. Sets protocol attributes. Provided by your network administrator. Attribute Description Read-Only Bridge allows only SNMP read acesses. User cannot change bridge configuration. Read-Write Bridge allows SNMP read and write accesses. User can change bridge configuration. 78-15954-02 Setting Description and Default Role in Radio Network Determines what function the bridge performs in the wireless network. Options: Root, Non-Root, Install Mode, Root AP, Workgroup Bridge Default: Depends on Cisco IOS Release in use. See “Important Information” section on page 1 for additional information. Root Bridge connects directly to the main Ethernet LAN and accepts associations from other bridges and clients. Non-root Bridge connects to a remote LAN and must associate with a root bridge using the wireless interface. Install Mode Activates the bridge install and alignment mode. Root AP Bridge emulates a Cisco Aironet 1100 Series Access Point and allows clients to associate to it. Workgroup Bridge Bridge emulates a Cisco Aironet 350 Series Workgroup Bridge and allows devices to connect to it through a hub. Quick Start Guide Cisco Aironet 1300 Series Access Point 23 Setting Description and Default Optimize Optimizes the bridge’s radio performance in the wireless Radio Network network. for Options: Throughput, Range, Default, Custom Default: Default Aironet Extensions 24 Option Description Throughput Maximizes data volume handled by the bridge but might reduce its range. Range Maximizes the bridge’s range but might reduce throughput. Default The bridge retains default radio settings that are designed to provide good range and throughput. Custom Bridge uses settings that you enter on the Network Interfaces. Selecting Custom takes you to the Network Interfaces: Settings page. This setting is always enabled on Cisco Aironet 1300 Series Bridges. 78-15954-02 Note 7. If the bridge’s IP address changes while you are configuring the bridge using the web-browser interface or a Telnet session over the wired LAN, you lose your connection to the bridge. If you lose your connection, reconnect to the bridge using its new IP address. Follow the steps in the “Resetting the Access Point/Bridge to Default Settings” section on page 12 if you need to start over. Click Apply to save your settings. If you changed the IP address, you lose your connection to the bridge. Browse to the new IP address to reconnect to the bridge. Configuring Security Settings After you assign basic settings to your access point, you must configure security settings to prevent unauthorized access to your network. Because it is a radio device, the access point can communicate beyond the physical boundaries of your work site. Just as you use the Express Setup page to assign basic settings, you can use the Express Security page to create unique SSIDs and assign one of four security types to them. The following illustration shows the Express Security page. Quick Start Guide Cisco Aironet 1300 Series Access Point 25 26 78-15954-02 Understanding Express Security Settings When the bridge configuration is at factory defaults, the first SSID that you create using the Express security page overwrites the default SSID, which has no security settings. The SSIDs that you create appear in the SSID table at the bottom of the page. You can create up to 16 SSIDs on the bridge. If you use VLANs on your wireless LAN and assign SSIDs to VLANs, you can create multiple SSIDs using any of the four security settings on the Express Security page. However, if you do not use VLANs on your wireless LAN, the security options that you can assign to SSIDs are limited because on the Express Security page encryption settings and authentication types are linked. Without VLANs, encryption settings (WEP and ciphers) apply to an interface, such as the 2.4-GHz radio, and you cannot use more than one encryption setting on an interface. For example, when you create an SSID with static WEP with VLANs disabled, you cannot create additional SSIDs with WPA authentication because they use different encryption settings. If you find that the security setting for an SSID conflicts with another SSID, you can delete one or more SSIDs to eliminate the conflict. Quick Start Guide Cisco Aironet 1300 Series Access Point 27 The following table briefly describes the four security settings you can assign to an SSID using the Express Security page. Security Type Description No Security The least secure option. Use this option only for SSIDs used in a public space and assign it to a VLAN that restricts access to your network. Static WEP Key More secure than no security. However, static WEP keys are vulnerable to attack. EAP Enables 802.1x authentication. Requires an IP address Authentication and shared secret for an authentication server on your network (server authentication port 1645). You do not need to enter a WEP key. WPA 28 Wi-Fi Protected Access (WPA) permits wireless access to users authenticated against a database through the services of an authentication server, then encrypts their IP traffic with stronger algorithms than those used in WEP. As with EAP authentication, you must enter the IP address and shared secret for an authentication server on your network (server authentication port 1645). 78-15954-02 Note For more information about settings on the Express Security page, see Chapter 2 of the Cisco Aironet 1300 Series Wireless Bridge Software Configuration Guide. Express Security Limitations Because the Express Security page is designed for simple configuration of basic security, the options available are a subset of the bridge’s security capabilities. Keep these limitations in mind when using the Express Security page: • You cannot edit SSIDs. However, you can delete SSIDs and re-create them. • You cannot assign SSIDs to specific radio interfaces. The SSIDs that you create are enabled on all radio interfaces. To assign SSIDs to specific radio interfaces, use the Security SSID Manager page. • You cannot configure multiple authentication servers. To configure multiple authentication servers, use the Security Server Manager page. • You cannot configure multiple WEP keys. To configure multiple WEP keys, use the Security Encryption Manager page. Quick Start Guide Cisco Aironet 1300 Series Access Point 29 • You cannot assign an SSID to a VLAN that is already configured on the bridge. To assign an SSID to an existing VLAN, use the Security SSID Manager page. You cannot configure combinations of authentication types on the same SSID (such as MAC address authentication and EAP authentication). To configure combinations of authentication types, use the Security SSID Manager page. Configuring Advanced Parameters Your bridge is now running but probably requires additional configuring to conform to your network’s operational and security requirements. Refer to the Cisco Aironet 1300 Series Outdoor Access Point/Bridge Software Configuration Guide for detailed information and instructions. The following table lists the chapters you need to consult. For information on Go to Using the command line interface Chapter 4 Configuring radio settings Chapter 6 Configuring SSIDs (including multiple SSIDs) Chapter 7 Configuring Spanning Tree Protocol Chapter 8 Configuring WEP and WEP features (TKIP, MIC) Chapter 9 Configuring authentication types (LEAP) Chapter 10 30 78-15954-02 For information on Go to Configuring WDS, Fast Secure Roaming and Radio Management Chapter 11 Configuring RADIUS and TACACS servers Chapter 12 Configuring VLANs Chapter 13 Configuring QoS Chapter 14 Configuring filters Chapter 15 Configuring CDP Chapter 16 Configuring SNMP Chapter 17 Configuring the bridge as an access point Chapter 20 Configuring the bridge as a workgroup bridge Chapter 20 Quick Start Guide Cisco Aironet 1300 Series Access Point 31 Cisco One-Year Limited Hardware Warranty Terms There are special terms applicable to your hardware warranty and various services that you can use during the warranty period. Your formal Warranty Statement, including the warranties and license agreements applicable to Cisco software, is available on Cisco.com. Follow these steps to access and download the Cisco Information Packet and your warranty and license agreements from Cisco.com. 1. Launch your browser, and go to this URL: http://www.cisco.com/en/US/products/prod_warranties_listing.h tml The Warranties and License Agreements page appears. 2. To read the Cisco Information Packet, follow these steps: a. Click the Information Packet Number field, and make sure that the part number 78-5235-03A0 is highlighted. b. Select the language in which you would like to read the document. c. Click Go. The Cisco Limited Warranty and Software License page from the Information Packet appears. 32 78-15954-02 d. Read the document online, or click the PDF icon to download and print the document in Adobe Portable Document Format (PDF). Note 3. You must have Adobe Acrobat Reader to view and print PDF files. You can download the reader from Adobe’s website: http://www.adobe.com. To read translated and localized warranty information about your product, follow these steps: a. Enter this part number in the Warranty Document Number field: 78-10747-01C0 b. Select the language in which you would like to view the document. c. Click Go. The Cisco warranty page appears. d. Read the document online, or click the PDF icon to download and print the document in Adobe Portable Document Format (PDF). You can also contact the Cisco service and support website for assistance: http://www.cisco.com/cisco/web/support/index.html Duration of Hardware Warranty One (1) Year Quick Start Guide Cisco Aironet 1300 Series Access Point 33 Replacement, Repair, or Refund Policy for Hardware Cisco or its service center will use commercially reasonable efforts to ship a replacement part within ten (10) working days after receipt of a Return Materials Authorization (RMA) request. Actual delivery times can vary, depending on the customer location. Cisco reserves the right to refund the purchase price as its exclusive warranty remedy. To Receive a Return Materials Authorization (RMA) Number Contact the company from whom you purchased the product. If you purchased the product directly from Cisco, contact your Cisco Sales and Service Representative. Complete the information below, and keep it for reference. Company product purchased from Company telephone number Product model number Product serial number Maintenance contract number 34 78-15954-02