Cisco AP541N Dual-band Single-radio Access Point Administration ...

More documents

Recommendations

Info

4WirelessModifying Virtual Access Point SettingsIEEE 802.1X AuthenticationIEEE 802.1X is the standard defining port-based authentication and infrastructurefor doing key management. Extensible Authentication Protocol (EAP) messagessent over an IEEE 802.11 wireless network using a protocol called EAPEncapsulation Over LANs (EAPOL). IEEE 802.1X provides dynamically-generatedkeys that are periodically refreshed. An RC4 stream cipher is used to encrypt theframe body and cyclic redundancy checking (CRC) of each 802.11 frame.This mode requires the use of an external RADIUS server to authenticate users.The access point requires a RADIUS server capable of EAP, such as the MicrosoftInternet Authentication Server. To work with Windows clients, the authenticationserver must support Protected EAP (PEAP) and MSCHAP V2.You can use any of a variety of authentication methods that the IEEE 802.1X modesupports, including certificates, Kerberos, and public key authentication. You mustconfigure the client stations to use the same authentication method the accesspoint uses.NOTEAfter you configure the security settings, you must click Apply to apply the changesand to save the settings.Table 13 IEEE 802.1XFieldUse Global RADIUSServer SettingsDescriptionBy default each VAP uses the global RADIUS settingsthat you define for the access point at the top of theVAP page. However, you can configure each VAP touse a different set of RADIUS servers.To use the global RADIUS server settings, make surethe check box is selected.To use a separate RADIUS server for the VAP, clear thecheck box and enter the RADIUS server IP addressand key in the following fields.RADIUS IP AddressEnter the address for the primary RADIUS server forthis VAP.67 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
WirelessModifying Virtual Access Point Settings4Table 13 IEEE 802.1XFieldRADIUS IP Address1–3DescriptionEnter up to three IPv4 addresses to use as the backupRADIUS servers for this VAP.If authentication fails with the primary server, eachconfigured backup server is tried in sequence.RADIUS KeyEnter the RADIUS key in the text box.The RADIUS Key is the shared secret key for theglobal RADIUS server. You can use up to 63 standardalphanumeric and special characters. The key is casesensitive, and you must configure the same key on theaccess point and on your RADIUS server. The text youenter will be displayed as "*" characters to preventothers from seeing the RADIUS key as you type.RADIUS Key 1–3Enable RADIUSAccountingEnter the RADIUS key associated with the configuredbackup RADIUS servers. The server at RADIUS IPAddress-1 uses RADIUS Key-1, RADIUS IP Address-2uses RADIUS Key-2, and so forth.Select this option to track and measure the resourcesa particular user has consumed such as system time,amount of data transmitted and received, and so forth.If you enable RADIUS accounting, it is enabled for theprimary RADIUS server and all backup servers.Broadcast KeyRefresh RateEnter a value to set the interval at which the broadcast(group) key is refreshed for clients associated to thisVAP.The valid range is 0–86400 seconds. A value of 0indicates that the broadcast key is not refreshed.Session Key RefreshRateEnter a value to set the interval at which the accesspoint will refresh session (unicast) keys for each clientassociated to the VAP.The valid range is 0–86400 seconds. A value of 0indicates that the broadcast key is not refreshed.Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 68
Page 1 and 2:
ADMINISTRATIONGUIDECisco Small Busi
Page 3 and 4:
ContentsNetwork Interfaces 28Wired
Page 5 and 6:
ContentsNavigating to an Access Poi
Page 7 and 8:
PrefaceTable 1 describes the typogr
Page 9 and 10:
1Getting StartedThe Cisco Access Po
Page 11 and 12:
Getting StartedConnecting the Acces
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20: Getting StartedConnecting the Acces
Page 21 and 22: Getting StartedTroubleshooting Your
Page 23 and 24: Getting StartedConfiguring the Acce
Page 25 and 26: Getting StartedWireless Client Requ
Page 27 and 28: Getting StartedConfiguring Security
Page 29 and 30: 2StatusThe Status page provides inf
Page 31 and 32: 2Table 3FieldDevice Information Pag
Page 33 and 34: StatusTraffic Statistics2Figure 7Vi
Page 35 and 36: StatusAssociated Clients2Associated
Page 37 and 38: StatusRogue AP Detection2Link Integ
Page 39 and 40: StatusRogue AP Detection2Table 6Fie
Page 41 and 42: StatusRogue AP Detection2Table 6Fie
Page 43 and 44: 3SetupLAN SettingsThe default wired
Page 45 and 46: 3Table 7 describes the fields to vi
Page 47 and 48: SetupConfiguring 802.1X Authenticat
Page 49 and 50: SetupEnabling the Network Time Prot
Page 55 and 56: 4WirelessModifying Wireless Radio S
Page 57 and 58: 4Table 10FieldModeRadio Settings Fi
Page 59 and 60: WirelessModifying Virtual Access Po
Page 69: WirelessModifying Virtual Access Po
Page 79 and 80: WirelessClient Connection Control4C
Page 81 and 82: WirelessClient Connection Control4T
Page 83 and 84: WirelessModifying Advanced Settings
Page 95 and 96: WirelessConfiguring the Wireless Di
Page 97 and 98: WirelessConfiguring the Wireless Di
Page 99 and 100: WirelessBandwidth Utilization4Bandw
Page 101 and 102: WirelessConfiguring Quality of Serv
Page 107 and 108: 5SNMPConfiguring SNMP on the Access
Page 109 and 110: 5Table 25FieldSNMP Settings (Contin
Page 111 and 112: SNMPConfiguring SNMP on the Access
Page 119 and 120: SNMPSNMP Targets5NOTEAfter you conf
Page 121 and 122:
6AdministrationAdministratorUse thi
Page 123 and 124:
6Access Point ConfigurationThe acce
Page 125 and 126:
AdministrationAccess Point Configur
Page 127 and 128:
AdministrationSoftware Upgrade6The
Page 129 and 130:
AdministrationSoftware Upgrade6The
Page 131 and 132:
AdministrationEvent Logs6Click Refr
Page 133 and 134:
AdministrationEvent Logs6Configurin
Page 135 and 136:
AdministrationConfiguring the Web S
Page 137 and 138:
AdministrationCreating an Administr
Page 139 and 140:
7Clustering Multiple Access PointsT
Page 141 and 142:
7Figure 33Cluster Information and M
Page 143 and 144:
Clustering Multiple Access PointsMa
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Clustering Multiple Access PointsCo
Page 151 and 152:
Clustering Multiple Access PointsCo
Page 153 and 154:
Clustering Multiple Access PointsVi
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
8Configuration ExamplesThis chapter
Page 161 and 162:
8VAP Configuration from the Web Int
Page 163 and 164:
Configuration ExamplesConfiguring W
Page 165 and 166:
Configuration ExamplesConfiguring t
Page 167 and 168:
Configuration ExamplesConfiguring t
Page 169 and 170:
Configuration ExamplesClustering Ac
Page 171 and 172:
ADefault SettingsWhen you first pow
Page 173 and 174:
Default SettingsATable 43UAP Defaul
Page 175 and 176:
BWhere to Go From HereCisco provide
show all

Cisco AP541N Dual-band Single-radio Access Point Administration ...

Create successful ePaper yourself

Delete template?

Save as template?