Cisco Business Access Point Administration Guide, Version ...

1 CiscoBusinessAccessPointAdministrationGu ide, :2020-06-10 LastModified:2022-09-15 AmericasHeadquartersCiscoSystems, West TasmanDriveSanJose,CA 95134-1706 : 408 526-4000800 553-NETS(6387)Fax:408 527-0883 THE SPECIFICATIONSANDINFORMATIONREGARDINGTHE PRODUCTSIN THISMANUALARE SUBJECTTO STATEMENTS,INFORMATION,ANDRECOMMENDATION SIN THISMANUALARE BELIEVEDTO BE ACCURATE BUT ARE PRESENTEDWITHOUTWARRANTYOF ANYKIND,EXPRESSOR THEIRAPPLICATIONOF SOFTWARE LICENSEANDLIMITEDWARRANTYFOR THE ACCOMPANYINGPRODUCTARE SET FORTH IN THE INFORMATIONPACKETTHAT SHIPPEDWITHTHE PRODUCTANDARE INCORPORATED HEREINBY YOUARE UNABLETO LOCATE THE SOFTWARE LICENSEOR LIMITEDWARRANTY,CONTACT YOURCISCOREPRESENTATIVEFOR A Ciscoimplementationof TCP headercompressionis an adaptationof a programdevelopedby the Universityof California,Berkeley(UCB)

2 As part of UCB'spublicdomainversionofthe 1981,Regentsof the Universityof ,ALL DOCUMENTFILESANDSOFTWARE OF THESESUPPLIERSARE PROVIDED AS IS" WITHALL ABOVE-NAMEDSUPPLIERSDISCLAIMALL WARRANTIES,EXPRESSEDOR IMPLIED,INCLUDING,WITHOUTLIMITATION,THOS EOFMERCHANTABILITY, FITNESSFOR A PARTICULARPURPOSEANDNONINFRINGEMENTOR ARISINGFROMA COURSEOF DEALING,USAGE,OR NO EVENTSHALLCISCOOR ITS SUPPLIERSBE LIABLEFOR ANYINDIRECT, SPECIAL,CONSEQUENTIAL,OR INCIDENTAL DAMAGES,INCLUDING,WITHOUTLIMITATION,LOST PROFITSOR LOSSOR DAMAGETO DATA ARISINGOUTOF THE USE OR INABILITYTO USE THISMANUAL,EVENIF CISCOOR ITS SUPPLIERSHAVE BEENADVISEDOF THE POSSIBILITYOF InternetProtocol(IP) addressesand phonenumbersused in this documentare not intendedto be actualaddressesand examples,commanddisplayoutput,networktop ologydiagrams,and other figuresincludedin the documentare shownfor illustrativepurposesonly.

3 Any use of actualIP addressesor phonenumbersin illustrativecontentis unintentionaland printedcopiesand duplicatesoft copiesof this documentare the currentonlineversionfor the morethan 200 offices phonenumbersare listedon the Ciscowebsiteat documentationset for this productstrivesto use purposesof this documentationset, bias-freeis definedas languagethat does not implydiscriminationbasedonage, disability, gender, racialidentity, ethnicidentity, sexualorientation,socioeconomicstatus,an d intersectionality. Exceptionsmay be presentin the documentationdue to languagethatis hardcodedin the user interfacesof the productsoftware,languageused basedon standardsdocumentation,or languagethat is used by a the Ciscologo are trademarksor registeredtrademarksof Ciscoand/orits affiliatesin the and view a list of Ciscotrademarks,go to this URL: Third-partytrademarksmentionedare the propertyof their use of the wordpartnerdoes not implyapartnershiprelationshipbetweenCisc oand any othercompany.

4 (1721R) 2022 CiscoSystems,Inc. All Java logo is a trademarkor registeredtrademarkof Sun Microsystems,Inc. in the or othercountries. 2022 CiscoSystems,Inc. All GUI5 CHAPTER2 Usingthe CiscoBusinessWirelessAccessPointGUI5 GettingStarted9 CHAPTER3 Prerequisitefor Settingup and AccessingCiscoBusinessWirelessAP9AP DeploymentModels10 Launchingthe SetupWizard12 Usingthe SetupWizard13 Logginginto the CiscoBusinessWirelessAP16 AddingNew SubordinateAPs16 AddingMeshExtenders17 Monitoring19 CHAPTER4 Aboutthe CiscoBusinessWirelessAP MonitoringService19 Customizingthe NetworkSummaryView20 CustomizingAccessPointsTable View21 ViewingAccessPointDetails22 ViewingClientDetails29 ViewingGuestClientDetails32 CiscoBusinessAccessPointAdministrationGu ide.

5 Client33 Performinga ClientPing Test33 Performinga ConnectionTest33 Generatingan EventLog33 ViewingMeshExtender34 ViewingApplications35 ViewingRogueAccessPoints35 Configuringthe RogueAP States36 ViewingRogueClientDetails36 ViewingInterfererDetails37 WirelessDashboard37 Customizingthe AccessPointPerformanceView39 AddingWidgets39 RemovingWidgets40 Customizingthe ClientPerformanceView40 Addinga Widget40 Removinga Widget41 WirelessSettings43 CHAPTER5 AboutWLAN sand RLANsin CBWA ccessPointNetwork43 SettingUp WLANsRLAN sand WLANU sers43 ViewingWLANs44 Addingand Modifyinga WLAN45 ConfiguringGeneralDetails45 ConfiguringWLANS ecurity46 ConfiguringVLANand Firewall52 ConfiguringTraffic Shaping53 ConfiguringAdvancedOptions54 ConfiguringScheduling55 Enablingand DisablingWLANsRLANs56 ConfiguringRLANin AP56 Editingand DeletingWLANsRLANs57 Viewingand ManagingWLANU sers57 Blockingand UnblockingClients58 CiscoBusinessAccessPointAdministrationGu ide.

6 GuestUsers59 PersonalPSK for Clients60 ManagingAssociatedAccessPoints61 GlobalAP Configuration62 AdministeringAccessPoints62 AccessPointGroups65 Settinga LoginPage for WLANG uestUsers66 Settingthe DefaultLoginPage67 Settinga CustomizedLoginPage67 AboutCiscoMesh69 ConvertNon-Meshto MeshDeployment69 MeshNetworkComponents70 ChangingMeshParameters72 BackhaulClientAccess72 MeshBackhaulRadioResourceManagement73 MeshBackhaulSlot73 ModifyingAP Port Configurationto Access /Trunk Mode73 VLANT ransparent74 Management75 CHAPTER6 AboutManagementAccessInterface75 SettingUp ManagementAccessInterface75 Limitationof Web BasedManagementSessions76 ManagingUser PriorityOrder77 ManagingAdminAccounts77 Addingan AdminAccount77 Editingan AdminAccount78 Deletingan AdminAccount79 ManagingGuestUsersusingthe LobbyAdminaccount79 Creatinga GuestUser Account79 ManagingTACACS+and RADIUSS ervers80 AddingTACACS+Servers80 ConfiguringRADIUSS ervers81 AddingRADIUSS ervers82 CiscoBusinessAccessPointAdministrationGu ide.

7 CachedUsers83 SettingDate and Time84 UsingNTP Serversto AutomaticallySet the Date and Time84 Addingand EditingNTP Servers84 RefreshingNTP ServerStatus85 Deletingand DisablingNTP Servers85 ConfiguringDate and Time Manually85 Updatingthe CBWAP Software86 Updatingthe SoftwareusingHTTP88 Upgradingthe Softwarefor First MeshExtenderusingHTTP89 Updatingthe SoftwareusingTFTP90 Updatingthe SoftwareusingSFTP91 Updatingthe SoftwarethroughCiscoBusinessDashboard93 Services95 CHAPTER7 MediaSteam95 AboutMulticastDomainNameSystem98 Restrictionsfor ConfiguringMulticastDNS100 ConfiguringMulticastDNS100 MappingmDNSP rofileto WLAN101 ConfiguringmDNSP olicy102 CiscoUmbrellaOverview103 ConfiguringCiscoUmbrellaon PrimaryAP104 AddingPolicyto UmbrellaProfile104 ApplyingCiscoUmbrellaProfileto WLAN105 Advanced107 CHAPTER8 ManagingSNMP107 ConfiguringSNMPA ccess107 SNMPTrap Receivers108 Add an SNMPv3 User109 DeleteSNMPv3 User109 SettingUp SystemMessageLogs110 CiscoBusinessAccessPointAdministrationGu ide.

8 Parameters111 AdvancedRF Parameters111 OptimizedRoaming111 Restrictionsfor OptimizedRoaming112 ConfiguringOptimizedRoaming112RF Profiles113RF ParameterOptimizationSettings114 Troubleshootingin PrimaryAP116UI Indicator116 UsingPrimaryAP Tools116 Restartingthe PrimaryAP116 Clearingthe PrimaryAP Configurationand Resettingto FactoryDefaults116 ClearingConfigurationsfor all APs and Resettingto FactoryDefaults117 Exportand ImportPrimaryAP Configuration117 Savingthe PrimaryAP Configuration118 TroubleshootingFiles118 TroubleshootingTools118 UploadingFiles119 Certificates121 SecuritySettings121 ConfiguringAccessControlLists (ACL)122 Applyingthe ACL to WLANat Pre-AuthLevel124 Applyingthe ACL to WLANat Post-AuthLevel124 ConfiguringAAAO verridein WLAN124 CiscoBusinessDashboardSettings124 appendix - SupportingTopics127 APPENDIXALAN port functionalityfor differentmodels127 LED ColorIndicatorsfor CiscoBusinessWirelessAPs128 LED DisplaySettings130 PrimaryAP Failoverand ElectionProcess131 Pre-downloadingan Imageto an AccessPoint132 Creatinga GuestNetwork132 CiscoBusinessAccessPointAdministrationGu ide.

9 Deviceto FactoryDefault133 SNMPT raps in CBWAP135 Deploymentand TroubleshootingGuidelines136 appendix - Mountingand GroundingAccessPoints141 APPENDIXBA boutMounting141 Preparingthe AP for Installation141 MountingCBW140AC/240AC142 MountingCBW145AC147 MountingCBW141AC152 MountingCBW142AC152 MountingCBW143AC157 Groundingan AccessPoint159 appendix - Glossaryof Terms161 APPENDIXCC iscoBusinessWireless- GlossaryOf authentication(CWA)162 ChannelIsolation162 ChannelWidth163 ClientQoS163 CiscoBusinessAccessPointAdministrationGu ide, Roaming164H164 HTTPS164I164 IPv4164 IPv6164 ISE164L164 LLDP164 LoadBalancing165 LocalProbe165M165 Max Data Rate165 MultipleSSIDs165N165 NetworkPlug n Play165O165 OperatingMode165P165 PMKID165 PoE-PD166 PoE-PSE166Q166 QoS166R166 RADIUSS erver166 RadioDomains166 CiscoBusinessAccessPointAdministrationGu ide, Detection166S166 Scheduler166 SignalQuality167 SignalStrength167 SpatialStreams167 SpectrumIntelligence167 SSID167 SSIDB roadcast167V167 VLAN167W168 WDS168 WPA/WPA2168 WPA2 Enterprise168 WPA3168 appendix - CiscoOnlineSupport169 APPENDIXDC iscoBusinessOnlineSupport169 CiscoBusinessAccessPointAdministrationGu ide.

10 Chaptercontainsthe followingsections: AboutCiscoBusinessWirelessAccessPoints, on page 1 SupportedCiscoAccessPoints, on page 1 SupportedSoftwareImages, on page 2 SupportedBrowsers, on page 2 RelatedDocuments, on page 3 AboutCiscoBusinessWirelessAccessPointsTh e CiscoBusinessWireless(CBW)networksolutio ncomprisesof at least one Wave 2 CiscoBusinessSeriesAccessPointwith an in-builtsoftwarethat managesotheraccesspointsin the AccessPoint(AP) that controlsall the AccessPointsin the networkis termedas the PrimaryAP and theaccesspointscontrolledby the PrimaryAP is termedas the SubordinateAP in this PrimaryAP has two roles:It controlsall the SubordinateAPs that join the independentlyserveswirelessclientslike may refer this administrationguidefor detailson both the PrimaryAPs and the SubordinateAPs.