Document Outline

• Contents
• Chapter 1 Introduction
  • 1.1 New Features
    • 1.1.1 Adaptive AP
    • 1.1.2 Rogue AP Enhancements
    • 1.1.3 Bandwidth Management Enhancements
    • 1.1.4 Radius Time-Based Authentication
    • 1.1.5 QBSS Support
  • 1.2 Feature Overview
    • 1.2.1 Single or Dual Mode Radio Options
    • 1.2.2 Separate LAN and WAN Ports
    • 1.2.3 Multiple Mounting Options
    • 1.2.4 Antenna Support for 2.4 GHz and 5.2 GHz Radios
    • 1.2.5 Sixteen Configurable WLANs
    • 1.2.6 Support for 4 BSSIDs per Radio
    • 1.2.7 Quality of Service (QoS) Support
    • 1.2.8 Industry Leading Data Security
      • 1.2.8.1 Kerberos Authentication
      • 1.2.8.2 EAP Authentication
      • 1.2.8.3 WEP Encryption
      • 1.2.8.4 KeyGuard Encryption
      • 1.2.8.5 Wi-Fi Protected Access (WPA) Using TKIP Encryption
      • 1.2.8.6 WPA2-CCMP (802.11i) Encryption
      • 1.2.8.7 Firewall Security
      • 1.2.8.8 VPN Tunnels
      • 1.2.8.9 Content Filtering
    • 1.2.9 VLAN Support
    • 1.2.10 Multiple Management Accessibility Options
    • 1.2.11 Updatable Firmware
    • 1.2.12 Programmable SNMP v1/v2/v3 Trap Support
    • 1.2.13 Power-over-Ethernet Support
    • 1.2.14 MU-MU Transmission Disallow
    • 1.2.15 Voice Prioritization
    • 1.2.16 Support for CAM and PSP MUs
    • 1.2.17 Statistical Displays
    • 1.2.18 Transmit Power Control
    • 1.2.19 Advanced Event Logging Capability
    • 1.2.20 Configuration File Import/Export Functionality
    • 1.2.21 Default Configuration Restoration
    • 1.2.22 DHCP Support
    • 1.2.23 Multi-Function LEDs
    • 1.2.24 Mesh Networking
    • 1.2.25 Additional LAN Subnet
    • 1.2.26 On-board Radius Server Authentication
    • 1.2.27 Hotspot Support
    • 1.2.28 Routing Information Protocol (RIP)
    • 1.2.29 Manual Date and Time Settings
    • 1.2.30 Dynamic DNS
    • 1.2.31 Auto Negotiation
  • 1.3 Theory of Operations
    • 1.3.1 Cellular Coverage
    • 1.3.2 MAC Layer Bridging
    • 1.3.3 Media Types
    • 1.3.4 Direct-Sequence Spread Spectrum
    • 1.3.5 MU Association Process
    • 1.3.6 Operating Modes
    • 1.3.7 Management Access Options
    • 1.3.8 AP-51xx MAC Address Assignment
• Chapter 2 Hardware Installation
  • 2.1 Precautions
  • 2.2 Available Product Configurations
    • 2.2.1 AP-5131 Configurations
    • 2.2.2 AP-5181 Configurations
  • 2.3 Requirements
  • 2.4 Access Point Placement
    • 2.4.1 Site Surveys
    • 2.4.2 Antenna Options
      • 2.4.2.1 AP-5131 Antenna Options
      • 2.4.2.2 AP-5181 Antenna Options
  • 2.5 Power Options
    • 2.5.1 AP-5131 Power Options
    • 2.5.2 AP-5181 Power Options
  • 2.6 Power Injector and Power Tap Systems
    • 2.6.1 Installing the Power Injector or Power Tap
      • 2.6.1.1 Preparing for Site Installation
      • 2.6.1.2 Cabling the Power Injector and Power Tap
      • 2.6.1.3 Power Injector LED Indicators
  • 2.7 Mounting an AP-5131
    • 2.7.1 Desk Mounted Installations
    • 2.7.2 Wall Mounted Installations
    • 2.7.3 Suspended Ceiling T-Bar Installations
    • 2.7.4 Above the Ceiling (Plenum) Installations
  • 2.8 AP-5131 LED Indicators
  • 2.9 Mounting an AP-5181
    • 2.9.1 AP-5181 Pole Mounted Installations
    • 2.9.2 AP-5181 Wall Mounted Installations
  • 2.10 AP-5181 LED Indicators
  • 2.11 Setting Up MUs
• Chapter 3 Getting Started
  • 3.1 Installing the Access Point
  • 3.2 Configuration Options
  • 3.3 Default Configuration Changes for the Access Point
  • 3.4 Initially Connecting to the Access Point
    • 3.4.1 Connecting to the Access Point using the WAN Port
    • 3.4.2 Connecting to the Access Point using the LAN Port
  • 3.5 Basic Device Configuration
    • 3.5.1 Configuring Device Settings
      • 3.5.1.1 Configuring WLAN Security Settings
    • 3.5.2 Testing Connectivity
    • 3.5.3 Where to Go from Here?
• Chapter 4 System Configuration
  • 4.1 Configuring System Settings
  • 4.2 Adaptive AP Setup
  • 4.3 Configuring Data Access
  • 4.4 Managing Certificate Authority (CA) Certificates
    • 4.4.1 Importing a CA Certificate
    • 4.4.2 Creating Self Certificates for Accessing the VPN
    • 4.4.3 Creating a Certificate for Onboard Radius Authentication
  • 4.5 Configuring SNMP Settings
    • 4.5.1 Configuring SNMP Access Control
    • 4.5.2 Enabling SNMP Traps
    • 4.5.3 Configuring Specific SNMP Traps
    • 4.5.4 Configuring SNMP RF Trap Thresholds
  • 4.6 Configuring Network Time Protocol (NTP)
  • 4.7 Logging Configuration
  • 4.8 Importing/Exporting Configurations
  • 4.9 Updating Device Firmware
    • 4.9.1 Upgrade/Downgrade Considerations
• Chapter 5 Network Management
  • 5.1 Configuring the LAN Interface
    • 5.1.1 Configuring VLAN Support
    • 5.1.2 Configuring LAN1 and LAN2 Settings
      • 5.1.2.1 Configuring Advanced DHCP Server Settings
      • 5.1.2.2 Setting the Type Filter Configuration
  • 5.2 Configuring WAN Settings
    • 5.2.1 Configuring Network Address Translation (NAT) Settings
      • 5.2.1.1 Configuring Port Forwarding
    • 5.2.2 Configuring Dynamic DNS
  • 5.3 Enabling Wireless LANs (WLANs)
    • 5.3.1 Creating/Editing Individual WLANs
      • 5.3.1.1 Configuring WLAN Security Policies
      • 5.3.1.2 Configuring a WLAN Access Control List (ACL)
      • 5.3.1.3 Setting the WLAN Quality of Service (QoS) Policy
      • 5.3.1.4 Configuring WLAN Hotspot Support
    • 5.3.2 Setting the WLAN’s Radio Configuration
      • 5.3.2.1 Configuring the 802.11a or 802.11b/g Radio
    • 5.3.3 Configuring Bandwidth Management Settings
  • 5.4 Configuring Router Settings
    • 5.4.1 Setting the RIP Configuration
• Chapter 6 Configuring Access Point Security
  • 6.1 Configuring Security Options
  • 6.2 Setting Passwords
    • 6.2.1 Resetting the Access Point Password
  • 6.3 Enabling Authentication and Encryption Schemes
  • 6.4 Configuring Kerberos Authentication
  • 6.5 Configuring 802.1x EAP Authentication
  • 6.6 Configuring WEP Encryption
  • 6.7 Configuring KeyGuard Encryption
  • 6.8 Configuring WPA/WPA2 Using TKIP
  • 6.9 Configuring WPA2-CCMP (802.11i)
  • 6.10 Configuring Firewall Settings
    • 6.10.1 Configuring LAN to WAN Access
      • 6.10.1.1 Available Protocols
    • 6.10.2 Configuring Advanced Subnet Access
  • 6.11 Configuring VPN Tunnels
    • 6.11.1 Configuring Manual Key Settings
    • 6.11.2 Configuring Auto Key Settings
    • 6.11.3 Configuring IKE Key Settings
    • 6.11.4 Viewing VPN Status
  • 6.12 Configuring Content Filtering Settings
  • 6.13 Configuring Rogue AP Detection
    • 6.13.1 Moving Rogue APs to the Allowed AP List
      • 6.13.1.1 Displaying Rogue AP Details
    • 6.13.2 Using MUs to Detect Rogue Devices
  • 6.14 Configuring User Authentication
    • 6.14.1 Configuring the Radius Server
    • 6.14.2 Configuring LDAP Authentication
    • 6.14.3 Configuring a Proxy Radius Server
    • 6.14.4 Managing the Local User Database
      • 6.14.4.1 Mapping Users to Groups
    • 6.14.5 Defining User Access Permissions by Group
      • 6.14.5.1 Editing Group Access Permissions
• Chapter 7 Monitoring Statistics
  • 7.1 Viewing WAN Statistics
  • 7.2 Viewing LAN Statistics
    • 7.2.1 Viewing a LAN’s STP Statistics
  • 7.3 Viewing Wireless Statistics
    • 7.3.1 Viewing WLAN Statistics
  • 7.4 Viewing Radio Statistics Summary
    • 7.4.1 Viewing Radio Statistics
      • 7.4.1.1 Retry Histogram
  • 7.5 Viewing MU Statistics Summary
    • 7.5.1 Viewing MU Details
    • 7.5.2 Pinging Individual MUs
    • 7.5.3 MU Authentication Statistics
  • 7.6 Viewing the Mesh Statistics Summary
  • 7.7 Viewing Known Access Point Statistics
• Chapter 8 CLI Reference
  • 8.1 Connecting to the CLI
    • 8.1.1 Accessing the CLI through the Serial Port
    • 8.1.2 Accessing the CLI via Telnet
    • 8.4.10 Firmware Update Commands
• Chapter 9 Configuring Mesh Networking
  • 9.1 Mesh Networking Overview
    • 9.1.1 The AP-51xx Client Bridge Association Process
      • 9.1.1.1 Client Bridge Configuration Process Example
    • 9.1.2 Spanning Tree Protocol (STP)
    • 9.1.3 Defining the Mesh Topology
    • 9.1.4 Mesh Networking and the AP-51xx’s Two Subnets
    • 9.1.5 Normal Operation
    • 9.1.6 Impact of Importing/Exporting Configurations to a Mesh Network
  • 9.2 Configuring Mesh Networking Support
    • 9.2.1 Setting the LAN Configuration for Mesh Networking Support
    • 9.2.2 Configuring a WLAN for Mesh Networking Support
    • 9.2.3 Configuring the Access Point Radio for Mesh Support
  • 9.3 Mesh Network Deployment - Quick Setup
    • 9.3.1 Scenario 1 - Two Base Bridges and One Client Bridge
      • 9.3.1.1 Configuring AP#1:
      • 9.3.1.2 Configuring AP#2
      • 9.3.1.3 Configuring AP#3
      • 9.3.1.4 Verifying Mesh Network Functionality for Scenario #1
    • 9.3.2 Scenario 2 - Two Hop Mesh Network with a Base Bridge Repeater and a Client Bridge
      • 9.3.2.1 Configuring AP#1
      • 9.3.2.2 Configuring AP#2
      • 9.3.2.3 Configuring AP#3
      • 9.3.2.4 Verifying Mesh Network Functionality for Scenario #2
  • 9.4 Mesh Networking Frequently Asked Questions
• Chapter 10 Adaptive AP
  • 10.1 Adaptive AP Overview
    • 10.1.1 Where to Go From Here
    • 10.1.2 Adaptive AP Management
    • 10.1.3 Types of Adaptive APs
    • 10.1.4 Licensing
    • 10.1.5 Switch Discovery
      • 10.1.5.1 Auto Discovery using DHCP
      • 10.1.5.2 Manual Adoption Configuration
    • 10.1.6 Securing a Configuration Channel Between Switch and AP
    • 10.1.7 Adaptive AP WLAN Topology
    • 10.1.8 Configuration Updates
    • 10.1.9 Securing Data Tunnels between the Switch and AAP
    • 10.1.10 Adaptive AP Switch Failure
    • 10.1.11 Remote Site Survivability (RSS)
    • 10.1.12 Adaptive Mesh Support
  • 10.2 Supported Adaptive AP Topologies
    • 10.2.1 Topology Deployment Considerations
    • 10.2.2 Extended WLANs Only
    • 10.2.3 Independent WLANs Only
    • 10.2.4 Extended WLANs with Independent WLANs
    • 10.2.5 Extended WLAN with Mesh Networking
  • 10.3 How the AP Receives its Adaptive Configuration
  • 10.4 Establishing Basic Adaptive AP Connectivity
    • 10.4.1 Adaptive AP Configuration
      • 10.4.1.1 Adopting an Adaptive AP Manually
      • 10.4.1.2 Adopting an Adaptive AP Using a Configuration File
      • 10.4.1.3 Adopting an Adaptive AP Using DHCP Options
    • 10.4.2 Switch Configuration
    • 10.4.3 Adaptive AP Deployment Considerations
    • 10.4.4 Sample Switch Configuration File for IPSec and Independent WLAN
• Appendix A Technical Specifications
  • A.1 Physical Characteristics
    • A.1.1 AP-5131 Physical Characteristics
    • A.1.2 AP-5181 Physical Characteristics
  • A.2 Electrical Characteristics
  • A.3 Radio Characteristics
  • A.4 Antenna Specifications
    • A.4.1 AP-5131 Antenna Specifications
      • A.4.1.1 2.4 GHz Antenna Matrix
      • A.4.1.2 5.2 GHz Antenna Matrix
      • A.4.1.3 AP-5131 Additional Antenna Components
      • A.4.1.4 AP-5131 Antenna Accessory Connectors, Cable Type and Length
    • A.4.2 AP-5181 Antenna Specifications
  • A.5 Country Codes
• Appendix B Usage Scenarios
  • B.1 Configuring Automatic Updates using a DHCP or Linux BootP Server
    • B.1.1 Windows - DHCP Server Configuration
      • B.1.1.1 Embedded Options - Using Option 43
      • B.1.1.2 Global Options - Using Extended/Standard Options
      • B.1.1.3 DHCP Priorities
    • B.1.2 Linux - BootP Server Configuration
      • B.1.2.1 BootP Options
      • B.1.2.2 BootP Priorities
  • B.2 Configuring an IPSEC Tunnel and VPN FAQs
    • B.2.1 Configuring a VPN Tunnel Between Two Access Points
    • B.2.2 Configuring a Cisco VPN Device
    • B.2.3 Frequently Asked VPN Questions
  • B.3 Replacing an AP-4131 with an AP-5131 or AP-5181
• Appendix C Customer Support
• Index