Document Outline

• Stratix 5100 Wireless Access Point/Workgroup Bridge User Manual
  • Important User Information
  • Table of Contents
  • Preface
    • Audience
    • Purpose
    • Organization
    • Conventions
    • Additional Resources
      • Rockwell Automation Support
  • 1 - Getting Started with the Stratix 5100 WAP
    • Regulatory Domains
    • Configuring the Access Point
    • Management Options
    • Roaming Client Devices
    • Network Configuration Examples
      • Root Access Point
    • Repeater Access Point
      • Bridges
      • Workgroup Bridge
      • Central Unit in a Wireless Network
    • Unpacking
    • Items Shipped with the WAP
  • 2 - Install the Stratix 5100 Wireless Access Point/ Workgroup Bridge
    • Ports and Connections
    • Stratix 5100 WAP Specifications
      • Ethernet Cable Recommendation
    • External Antennas
      • Antenna Cable Extensions Recommendation
    • Preparing the Access Point
    • Initial configuration
    • Prevent Damage to the WAP
    • Install the WAP
      • IDF Closets (telecommunications or other electrical equipment)
      • Very High Altitudes
      • Common or Distributed Antenna System (DAS)
    • Grounding the Access Point
    • Securing the Access Point
      • Securing the Access Point to the Mounting Plate
      • Using a Security Cable
    • Mounting the Access Point
      • Access Point Spacing Recommendation
      • Mounting an Access Point on a Hard Ceiling or a Wall
      • Brackets and Clips
      • Mounting the Access Point to a Network or Electrical Box
    • Deploying the Access Point on the Wireless Network
      • Access Point Status Indicators
      • Checking Power
    • Configure the Access Point
  • 3 - Stratix 5100 Device Manager Configuration Startup
    • Using Device Manager
    • Before You Start
    • Login to the Stratix 5100 WAP
    • Obtain and Assign an IP Address
      • Default IP Address Behavior
    • Connect to the Stratix 5100 WAP Access Point Locally
    • Default Radio Settings
    • Reset the WAP to Default Settings
      • Reset to WAP Default Settings by Using MODE
      • Reset to Default Settings by Using the GUI
    • Logging into the Access Point
    • Using Online Help
    • Configure the Basic Settings for an Access Point
    • Enable the Radio on the Network
    • Using VLANs
    • Configuring Security
      • Easy Set-up Page Security Types
      • Easy Setup Network Configuration Security Limitations
      • Create an SSID from the Security Menu
      • Enabling HTTPS for Secure Browsing
    • CLI Configuration Example
    • Deleting an HTTPS Certificate
    • Disabling the Web Browser Interface
  • 4 - Stratix 5100 Device Manager Parameter Definitions
    • Device Manager System Management Tabs
    • Easy Setup Network Configuration Page
      • Network Configuration Settings on the Easy Setup Page
      • Radio Configuration Settings on the Easy Setup Page
      • Security Configuration Settings on the Easy Setup Page
    • Network Page
      • Network Interface Summary Page
      • Network Interface IP Address Page
      • Network Interface GigabitEthernet Status Page
      • Network Interface: GigabitEthernet Settings
      • Network Interface: Radio0-802.11n 2 GHz and Radio1-802.11n 5 GHz Status
      • Detailed Status
      • Network Interface Radio Settings Page
      • Carrier Busy Test
    • Association Page
    • Wireless Page
      • AP
      • WDS
    • Security Page
      • Admin Access Page
      • Encryption Manager Page
      • SSID Manger Page
      • Server Manager Page
      • Server Manager Global Properties
      • AP Authentication
      • AP Authentication Certificates
      • Intrusion Detection
      • Local RADIUS Server
      • Advanced Security
    • Services Page
      • Telnet/SSH
      • Hot Standby Page
      • CDP Page
      • DNS Page
      • Filters Page
      • MAC Address Filters Page
      • IP Filters Page
      • Ethertype Filters Page
      • HTTP Page
      • QoS Policies Page
      • QoS: Radio Page
      • Stream Page
      • SNMP Page
      • SNTP Page
      • VLAN Page
      • ARP Caching Page
      • Band Select Page
    • Management Page
      • Webauth Login
    • Software Page
      • Software Upgrade HTTP Page
      • Software Upgrade TFTP Page
      • System Configuration Page
    • Event Log Page
      • Configuration Options Page
  • 5 - Configure the Stratix 5100 WAP Using the Command-Line Interface
    • Cisco IOS Command Modes
    • Getting Help
      • Abbreviating Commands
    • Using No and Default Forms of Commands
    • Understanding CLI Messages
    • Using Command History
      • Changing the Command History Buffer Size
    • Recalling Commands
      • Disabling the Command History Feature
    • Using Editing Features
      • Enabling and Disabling Editing Features
      • Editing Commands through Keystrokes
      • Editing Command Lines that Wrap
    • Searching and Filtering Output of show and more Commands
    • Accessing CLI
      • Opening CLI with Telnet
    • Opening CLI with Secure Shell
      • Reset Default Settings by Using CLI
    • Security CLI Configuration Examples
      • Example 1: No Security
      • Example 2: Static WEP
      • Example 3: EAP Authentication
      • Example 4: WPA
    • Assign an IP Address by Using CLI
    • Using a Terminal Application Session to Access CLI
    • Configuring the 802.1X Supplicant
    • Creating a Credentials Profile
      • Applying the Credentials to an Interface or SSID
      • Applying the Credentials Profile to the Wired Port
      • Applying the Credentials Profile to an SSID Used for the Uplink
    • Creating and Applying EAP Method Profiles
  • 6 - Administering the WAP Access
    • Disabling the Mode Button
    • Preventing Unauthorized Access to Your Access Point
    • Protecting Access to Privileged EXEC Commands
    • Default Password and Privilege Level Configuration
    • Setting or Changing a Static Enable Password
    • Protecting Enable and Enable Secret Passwords with Encryption
    • Configuring Username and Password Pairs
    • Configuring Multiple Privilege Levels
      • Setting the Privilege Level for a Command
      • Logging Into and Exiting a Privilege Level
    • Controlling Access Point Access with RADIUS
      • Default RADIUS Configuration
      • Configuring RADIUS Login Authentication
      • Defining AAA Server Groups
      • Configuring RADIUS Authorization for User Privileged Access and Network Services
      • Displaying the RADIUS Configuration
    • Controlling Access Point Access with TACACS+
      • Default TACACS+ Configuration
      • Configuring TACACS+ Login Authentication
      • Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
      • Displaying the TACACS+ Configuration
    • Configuring Ethernet Speed and Duplex Settings
    • Configuring the Access Point for Wireless Network Management
    • Configuring the Access Point for Local Authentication and Authorization
    • Configuring the Authentication Cache and Profile
    • Configuring the Access Point to Provide DHCP Service
      • Setting up the DHCP Server
    • Monitoring and Maintaining the DHCP Server Access Point
      • Show Commands
      • Clear Commands
      • Debug Command
    • Configuring the Access Point for Secure Shell
      • Understanding SSH
      • Configuring SSH
    • Configuring Client ARP Caching
      • Optional ARP Caching
      • Configuring ARP Caching
    • Managing the System Time and Date
      • Configuring SNTP
      • Configuring Time and Date Manually
      • Setting the System Clock
      • Displaying the Time and Date Configuration
      • Configuring the Time Zone
      • Configuring Summer Time (Daylight Saving Time)
    • Defining HTTP Access
    • Configuring a System Name and Prompt
    • Default System Name and Prompt Configuration
      • Configuring a System Name
    • Understanding DNS
      • Default DNS Configuration
      • Setting Up DNS
      • Displaying the DNS Configuration
  • 7 - Configuring Radio Settings
    • Enabling the Radio Interface
    • Configuring the Role in Radio Network
    • Universal Workgroup Bridge Mode
    • Configuring Dual-radio Fallback
    • Radio Tracking
    • Fast Ethernet Tracking
    • MAC-Address Tracking
    • Configuring Radio Data Rates
    • Access Points Send Multicast and Management Frames at Highest Basic Rate
    • Configuring MCS Rates
    • Configuring Radio Transmit Power
    • Limiting the Power Level for Associated Client Devices
    • Configuring Radio Channel Settings
    • 802.11n Channel Widths
    • Dynamic Frequency Selection
      • Radar Detection on a DFS Channel
    • CLI Commands
      • Confirming that DFS is Enabled
    • Configuring a Channel
      • Blocking Channels from DFS Selection
    • Setting the 802.11n Guard Interval
    • Configuring Location-based Services
      • Understanding Location-Based Services
      • Configuring LBS on Access Points
    • Disabling and Enabling Short Radio Preambles
    • Configuring Transmit and Receive Antennas
    • Enabling and Disabling Gratuitous Probe Response
    • Disabling and Enabling Aironet Extensions
    • Configuring the Ethernet Encapsulation Transformation Method
    • Enabling and Disabling Reliable Multicast to Workgroup Bridges
    • Enabling and Disabling Public Secure Packet Forwarding
    • Configuring Protected Ports
    • Configuring the Beacon Period and the DTIM
    • Configure RTS Threshold and Retries
    • Configuring the Maximum Data Retries
    • Configuring the Fragmentation Threshold
    • Enabling Short Slot Time for 802.11g Radios
    • Performing a Carrier Busy Test
    • Configuring ClientLink
      • Using CLI to Configure ClientLink
    • Debugging Radio Functions
  • 8 - Configuring Multiple SSIDs
    • Understanding Multiple SSIDs
    • Effect of Software Versions on SSIDs
    • Configuring Multiple SSIDs
      • Default SSID Configuration
      • Creating an SSID Globally
      • Viewing SSIDs Configured Globally
      • Using Spaces in SSIDs
    • Restrict SSIDs by Using a RADIUS Server
    • Configuring Multiple Basic SSIDs
      • Requirements for Configuring Multiple BSSIDs
      • Guidelines for Using Multiple BSSIDs
      • Configuring Multiple BSSIDs
      • CLI Configuration Example
      • Displaying Configured BSSIDs
    • Assigning IP Redirection for an SSID
      • Guidelines for Using IP Redirection
      • Configuring IP Redirection
    • Including an SSID in an SSIDL IE
    • NAC Support for MBSSID
    • Configuring NAC for MBSSID
  • 9 - Configuring Spanning Tree Protocol
    • Understanding Spanning Tree Protocol (STP)
    • Access Point/Bridge Protocol Data Units
    • Election of the Spanning- tree Root
    • Spanning-tree Timers
    • Creating the Spanning-tree Topology
      • Spanning-tree Interface States
      • Blocking State
      • Listening State
      • Learning State
      • Forwarding State
      • Disabled State
    • Configuring STP Features
      • Default STP Configuration
      • Configuring STP Settings
    • STP Configuration Examples
      • Root Bridge without VLANs
      • Non-root Bridge without VLANs
      • Root Bridge with VLANs
      • Non-root Bridge with VLANs
    • Displaying Spanning-tree Status
  • 10 - Configure an Access Point as a Local Authenticator
    • Understanding Local Authentication
    • Configuring a Local Authenticator
      • Configuration Overview
    • Configuring/Enabling Local MAC Authentication
      • Configuring the SSID
      • Creating Local MAC Address Lists
    • Creating and Enabling MAC Authentication by Using RADIUS Server
      • Add the RADIUS Server
      • Setting the MAC Authentication Method
    • Configuring Network EMAP
      • Configuring Advanced EAP Parameters
    • Configuring the Local Authenticator Access Point by Using CLI
      • Configuring Other Access Points to Use the Local Authenticator
    • Configuring EAP-FAST Settings
      • Configuring PAC Settings
      • PAC Expiration Times
      • Generating PACs Manually
      • Configuring an Authority ID
      • Configuring Server Keys
      • Possible PAC Failures Caused by Access Point Clock
    • Limiting the Local Authenticator to One Authentication Type
    • Unblocking Locked Usernames
      • Viewing Local Authenticator Statistics
    • Using Debug Messages
  • 11 - Configuring Cipher Suites and WEP
    • Understanding Cipher Suites and WEP
    • Configuring Cipher Suites and WEP
      • Creating WEP Keys
      • WEP Key Restrictions
      • Example WEP Key Setup
      • Enabling Cipher Suites and WEP
      • Matching Cipher Suites with WPA or CCKM
      • Enabling and Disabling Broadcast Key Rotation
  • 12 - Configuring Authentication Types
    • Understanding Authentication Types
    • Open Authentication to the Access Point
      • Shared Key Authentication to the Access Point
      • EAP Authentication to the Network
      • MAC Address Authentication to the Network
      • Combining MAC-Based, EAP, and Open Authentication
      • Using CCKM for Authenticated Clients
    • Using WPA Key Management
      • Software and Firmware Requirements for WPA, CCKM, CKIP, and WPA- TKIP
    • Configuring Authentication Types
      • Assigning Authentication Types to an SSID
      • Configuring WPA Migration Mode
    • Configuring Additional WPA Settings
      • Setting a Pre-shared Key
      • Configuring Group Key Updates
      • Configuring MAC Authentication Caching
    • Configuring Authentication Hold-off, Timeout, and Interval
    • Creating and Applying EAP Method Profiles for the 802.1X Supplicant
      • Creating an EAP Method Profile
      • Applying an EAP Profile to the Fast Ethernet Interface
      • Applying an EAP Profile to an Uplink SSID
    • Matching Access Point and Client Device Authentication Types
  • 13 - Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services
    • Understanding WDS
      • Role of the WDS Device
      • Role of Access Points by Using the WDS Device
    • Understanding Fast Secure Roaming
    • Understanding Radio Management
    • Understanding Layer 3 Mobility
    • Understanding Wireless Intrusion Detection Services
    • Configuring WDS
      • Guidelines for WDS
      • Requirements for WDS
      • Configuration Overview
    • Configuring Access Points as Potential WDS Devices
      • Configure a Group of Servers
      • Configuring Access Points to Use the WDS Device
    • CLI Configuration Example
      • Configuring WDS-Only Mode
      • Viewing WDS Information
      • Using Debug Messages
    • Configuring Fast Secure Roaming
      • Requirements for Fast Secure Roaming
      • Configuring Access Points to Support Fast Secure Roaming
      • CLI Configuration Example
    • Configuring Management Frame Protection
    • Management Frame Protection
      • Overview
      • Protection of Unicast Management Frames
      • Protection of Broadcast Management Frames
    • Client MFP for Access Points in Root Mode
      • Configuring Client MFP
    • Configuring Radio Management
      • CLI Configuration Example
    • Configuring Access Points to Participate in WIDS
      • Configuring the Access Point for Scanner Mode
      • Configuring the Access Point for Monitor Mode
      • Displaying Monitor Mode Statistics
      • Configuring Monitor Mode Limits
      • Configuring an Authentication Failure Limit
    • Configuring WLSM Failover
      • Resilient Tunnel Recovery
      • Active/Standby WLSM Failover
  • 14 - Configuring RADIUS and TACACS+ Servers
    • Configuring and Enabling RADIUS
      • RADIUS Operation
      • Configuring RADIUS
      • Default RADIUS Configuration
      • Identifying the RADIUS Server Host
      • Configuring RADIUS Login Authentication
      • Defining AAA Server Groups
      • Configuring RADIUS Authorization for User Privileged Access and Network Services
      • Configuring Packet of Disconnect
      • Starting RADIUS Accounting
    • Selecting the CSID Format
      • Configuring Settings for All RADIUS Servers
    • Configuring the Access Point to Use Vendor-specific RADIUS Attributes
    • Configuring the Access Point for Vendor-proprietary RADIUS Server Communication
      • Configuring WISPr RADIUS Attributes
      • Displaying the RADIUS Configuration
      • RADIUS Attributes Sent by the Access Point
    • Configuring and Enabling TACACS+
      • TACACS+ Operation
      • Configuring TACACS+
      • Default TACACS+ Configuration
      • Identifying the TACACS+ Server Host and Setting the Authentication Key
      • Configuring TACACS+ Login Authentication
      • Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
      • Starting TACACS+ Accounting
      • Displaying the TACACS+ Configuration
  • 15 - Configuring VLANs
    • Understanding VLANs
      • Related Documents
      • Incorporating Wireless Devices into VLANs
    • Configuring VLANs
      • Assigning SSIDs to VLANs.
      • Assigning Names to VLANs
      • Using a RADIUS Server to Assign Users to VLANs
      • Using a RADIUS Server for Dynamic Mobility Group Assignment
      • Viewing VLANs Configured on the Access Point
    • VLAN Configuration Example
    • Configuring/Enabling VLAN with SSID by Using Stratix 5100 Device Manager
      • Set the Encryption for the VLAN
  • 16 - Configuring QoS
    • Understanding QoS for Wireless LANs
      • QoS for Wireless LANs Versus QoS on Wired LANs
      • Impact of QoS on a Wireless LAN
      • Precedence of QoS Settings
    • Configure QoS by Using Straitx 5100 Device Manager
      • Using Wi-Fi Multimedia Mode
    • Configuring QoS
      • Configuration Guidelines
      • Configuring QoS by Using the Web Browser Interface
      • Adjusting Radio Access Categories
  • 17 - Configuring Filters
    • Understanding Filters
    • Configuring Filters by Using CLI Commands
      • Creating a Time-base ACL
    • Configuring Filters by Using Stratix 5100 Device Manager
      • Configuring and Enabling MAC Address Filters
      • Configuring and Enabling IP Filters
      • Configuring and Enabling IP Filters
      • Configuring and Enabling Ethertype Filters
  • 18 - Configuring CDP
    • Understanding CDP
    • Configuring CDP
      • Default CDP Configuration
      • Configuring the CDP Characteristics
      • Disabling and Enabling CDP
      • Disabling and Enabling CDP on an Interface
    • Monitoring and Maintaining CDP
  • 19 - Configuring SNMP
    • Understanding SNMP
      • SNMP Versions
      • SNMP Manager Functions
      • SNMP Agent Functions
      • SNMP Community Strings
      • Using SNMP to Access MIB Variables
    • Configuring SNMP
      • Default SNMP Configuration
      • Enabling the SNMP Agent
      • Configuring Community Strings
      • Specifying SNMP-Server Group Names
      • Configuring SNMP-Server Hosts
      • Configuring SNMP-Server Users
      • Configuring Trap Managers and Enabling Traps
      • Setting the Agent Contact and Location Information
      • Using the snmp-server view Command
      • SNMP Examples
    • Displaying SNMP Status
  • 20 - Configuring Repeater and Standby Access Points and Workgroup Bridge Mode
    • Understanding Repeater Access Points
    • Configuring a Repeater Access Point
      • Default Configuration
      • Guidelines for Repeaters
    • Setting Up a Repeater
    • Aligning Antennas
    • Verifying Repeater Operation
    • Setting Up a Repeater as a LEAP Client
    • Setting Up a Repeater as a WPA Client
    • Understanding Hot Standby
    • Configuring Hot Standby
    • Configuring a Hot Standby Access Point by Using CLI
    • Verifying Standby Operation
    • Understanding Workgroup Bridge Mode
    • Treating Workgroup Bridges as Infrastructure Devices or as Client Devices
    • Configuring a Workgroup Bridge for Roaming
    • Configuring a Workgroup Bridge for Limited Channel Scanning
      • Configuring the Limited Channel Set
      • Ignoring the CCX Neighbor List
      • Configuring a Client VLAN
    • Workgroup Bridge VLAN Tagging
    • Configuring Workgroup Bridge Mode
    • Using Workgroup Bridges in a Lightweight Environment
    • Guidelines for Using Workgroup Bridges in a Lightweight Environment
    • Sample Workgroup Bridge Configuration
    • Enabling VideoStream Support on Workgroup Bridges
  • 21 - Configuring System Message Logging
    • Understanding System Message Logging
    • Configuring System Message Logging
      • Default System Message Logging Configuration
      • Disabling and Enabling Message Logging
      • Setting the Message Display Destination Device
      • Enabling and Disabling Timestamps on Log Messages
      • Enabling and Disabling Sequence Numbers in Log Messages
      • Defining the Message Severity Level
      • Limiting Syslog Messages Sent to the History Table and to SNMP
      • Setting a Logging Rate Limit
      • Configuring UNIX Syslog Servers
    • Displaying the Logging Configuration
  • 22 - Troubleshooting
    • Checking the Status Indicators
    • Checking Basic Settings
      • SSID
      • WEP Keys
      • Security Settings
    • Resetting to the Default Configuration
      • Using the MODE Button
    • Using the Web Browser Interface
    • Using CLI
    • Reloading the Access Point Image
      • Using the HTTP Interface
      • Using the TFTP Interface
      • Using CLI
      • Obtaining TFTP Server Software
  • A - Protocol Filters
    • Ethertype Protocols
    • IP Protocols
    • IP Port Protocols
  • B - Supported MIBs
    • MIB List
    • Using FTP to Access the MIB Files
  • Error and Event Messages
    • Conventions
    • Software Auto Upgrade Messages
    • Association Management Messages
    • Unzip Messages
    • System Log Messages
    • 802.11 Subsystem Messages
    • Inter-Access Point Protocol Messages
    • Local Authenticator Messages
    • WDS Messages
    • Mini IOS Messages
    • Access Point/Bridge Messages
    • Cisco Discovery Protocol Messages
    • External Radius Server Error Messages
    • LWAPP Error Messages
    • Sensor Messages
    • SNMP Error Messages
    • SSH Error Messages
  • Glossary
  • Index
  • Back cover