Cisco Systems Network Card WAP121 User Manual

ADMINISTRATION  
GUIDE  
Cisco Small Business  
WAP121 Wireless-N Access Point with PoE  
and  
WAP321 Wireless-N Selectable-Band Access Point  
with PoE  
Download from Www.Somanuals.com. All Manuals Search And Download.  
1
Getting Started  
This chapter provides an introduction to the Wireless Access Point (WAP) devices  
web-based configuration utility, and includes these topics:  
Starting the Web-Based Configuration Utility  
This section describes system requirements and how to navigate the web-based  
configuration utility.  
Supported Browsers  
Internet Explorer 7.0 or later  
Chrome 5.0 or later  
Firefox 3.0 or later  
Safari 3.0 or later  
Browser Restrictions  
If you are using Internet Explorer 6, you cannot directly use an IPv6 address  
to access the WAP device. You can, however, use the Domain Name System  
(DNS) server to create a domain name that contains the IPv6 address, and  
then use that domain name in the address bar in place of the IPv6 address.  
When using Internet Explorer 8, you can configure security settings from  
Internet Explorer. Select Tools > Internet Options and then select the  
Security tab. Select Local Intranet and select Sites. Select Advanced and  
then select Add. Add the intranet address of the WAP device (http://<ip-  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
7
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Getting Started  
Starting the Web-Based Configuration Utility  
1
address>) to the local intranet zone. The IP address can also be specified  
as the subnet IP address, so that all addresses in the subnet are added to  
the local intranet zone.  
If you have multiple IPv6 interfaces on your management station, use the  
IPv6 global address instead of the IPv6 local address to access the WAP  
device from your browser.  
Launching the Web-Based Configuration Utility  
To open the configuration utility:  
STEP 1 Open a web browser.  
Enter the IP address of the WAP device that you are configuring in the address bar  
on the browser and then press Enter. The Login page opens.  
To find your IP address, you can use the Cisco FindIT Network Discovery  
Utility. This tool enables you to automatically discover all supported Cisco  
Small Business devices in the same local network segment as your  
computer. For more information, go to cisco.com and enter www.cisco.com/  
go/findit.  
For further instructions on how to locate the IP address of your WAP device,  
see the WAP device Quick Start Guide.  
STEP 2 Enter the user name and password. The factory default user name is cisco and the  
default password is cisco.  
STEP 3 Click Log In. The Access Point Setup Wizard page opens.  
If this is the first time that you logged on with the default user name (cisco) and the  
default password (cisco) or your password has expired, the Change Admin  
Password page opens. Enter the new password and confirm it, click Apply, and  
then click Close. The new password is saved. Then, enter the user name cisco and  
the new password on the Login page.  
See Using the Access Point Setup Wizard for instructions on using the wizard.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
8
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Getting Started  
Using the Access Point Setup Wizard  
1
Logging Out  
By default, the configuration utility logs out after 10 minutes of inactivity. See  
HTTP/HTTPS Service for instructions on changing the default timeout period.  
To log out, click Logout in the top right corner of the configuration utility.  
Using the Access Point Setup Wizard  
The first time that you log into the WAP device (or after it has been reset to the  
factory default settings), the Access Point Setup Wizard appears to help you  
perform initial configurations. Follow these steps to complete the wizard:  
NOTE If you click Cancel to bypass the Wizard, the Change Password page appears. You  
can then change the default password for logging in. For all other settings, the  
factory default configurations apply.  
You must log in again after changing your password.  
STEP 1 Click Next on the Welcome page of the Wizard. The Configure Device - IP  
Address window appears.  
STEP 2 Click Dynamic IP Address (DHCP) if you want the WAP device to receive an IP  
address from a DHCP server. Or select Static IP Address to configure IP Address  
manually. For a description of these fields, see VLAN and IPv4 Address Settings.  
STEP 3 Click Next. The Single Point Setup — Set a Cluster window appears. For a  
description of Single Point Setup, see Single Point Setup.  
STEP 4 To create a new Single Point Setup of WAP devices, select Create a New Cluster  
and specify a New Cluster Name. When you configure your devices with the  
same cluster name and enable Single Point Setup mode on other WAP devices,  
they automatically join the group.  
If you already have a cluster on your network, you can add this device to it by  
clicking Join an Existing Cluster, and then entering the Existing Cluster Name.  
If you do not want this device to participate in a Single Point Setup at this time,  
click Do not Enable Single Point Setup.  
(Optional) You can enter text in the AP Location field to note the physical location  
of the WAP device.  
STEP 5 Click Next. The Configure Device - Set System Date and Time window appears.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
9
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Getting Started  
Using the Access Point Setup Wizard  
1
STEP 6 Select your time zone, and then set the system time manually or set up the WAP  
device to get its time from an NTP server. For a description of these options, see  
STEP 7 Click Next. The Enable Security - Set Password window appears.  
STEP 8 Enter a New Password and enter it again in the Confirm Password text box. For  
more information about passwords, see User Accounts.  
NOTE You can uncheck the Password Complexity box if you wish to disable  
the password security rules. However, we strongly recommend keeping the  
password security rules enabled.  
STEP 9 Click Next. The Enable Security - Name Your Wireless Network window appears.  
STEP 10 Enter a Network Name. This name serves as the SSID for the default wireless  
network.  
STEP 11 Click Next. The Enable Security - Secure Your Wireless Network window appears.  
STEP 12 Choose a security encryption type and enter a security key. For a description of  
these options, see System Security.  
STEP 13 Click Next. The Wizard displays the Enable Security- Assign the VLAN ID For Your  
Wireless Network window.  
STEP 14 Enter a VLAN ID for traffic received on the wireless network.  
It is suggested that you assign a different VLAN ID from the default (1) to wireless  
traffic, in order to segregate it from management traffic on VLAN 1.  
STEP 15 Click Next.  
For the WAP121 device, the Wizard displays the Summary - Confirm Your Settings  
window. Skip to STEP 24.  
For the WAP321 device, the Wizard displays the Enable Captive Portal - Create  
Your Guest Network window.  
STEP 16 Select whether or not to set up an authentication method for guests on your  
network (WAP321 only), and click Next.  
If you click No, skip to STEP 24.  
If you click Yes, the Wizard displays the Enable Captive Portal - Name Your Guest  
Network window.  
STEP 17 Specify a Guest Network Name.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
10  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Getting Started  
Using the Access Point Setup Wizard  
1
STEP 18 Click Next. The Wizard displays the Enable Captive Portal - Secure Your Guest  
Network window.  
STEP 19 Choose a security encryption type for the guest network and enter a security key.  
For a description of these options, see System Security.  
STEP 20 Click Next. The Wizard displays the Enable Captive Portal - Assign the VLAN ID  
window.  
STEP 21 Specify a VLAN ID for the guest network. The guest network VLAN ID should be  
different from the management VLAN ID.  
STEP 22 Click Next. The Wizard displays the Enable Captive Portal - Enable Redirect URL  
window.  
STEP 23 Select Enable Redirect URL and specify a fully qualified domain name or IP  
address in the Redirect URL field (including http://). If specified, guest network  
users are redirected to the specified URL after authenticating.  
STEP 24 Click Next. The Wizard displays the Summary - Confirm Your Settings window.  
STEP 25 Review the settings that you configured. Click Back to reconfigure one or more  
settings. If you click Cancel, all settings are returned to the previous or default  
values.  
STEP 26 If they are correct, click Submit. Your WAP setup settings are saved and a  
confirmation window appears.  
STEP 27 Click Finish. The Getting Started window appears.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
11  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Getting Started  
Getting Started  
1
Getting Started  
To simplify device configuration through quick navigation, the Getting Started  
page provides links for performing common tasks. The Getting Started page is the  
default window every time you log into the configuration utility.  
Links on the Getting Started Page  
Category  
Link Name (on the Page)  
Linked Page  
Initial Setup  
Run Setup Wizard  
Configure Radio Settings  
Configure Wireless Network Settings Networks  
Configure LAN Settings  
Run WPS  
Configure Single Point Setup  
System Summary  
Device  
Status  
Wireless Status  
Quick  
Change Account Password  
Upgrade Device Firmware  
Backup/Restore Configuration  
Access  
Other  
Support  
Forums  
A link to the Cisco WAP  
support site.  
Resources  
A link to the Cisco  
Support Community  
site.  
Wireless Planning Tool  
A link to Fluke networks  
AirMagnet Planner for  
Cisco Small Business.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
12  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Getting Started  
Window Navigation  
1
Window Navigation  
This section describes the features of the configuration utility.  
Configuration Utility Header  
The Configuration Utility header contains standard information and appears at the  
top on every page. It provides these buttons:  
Buttons  
Button Name  
Description  
(User)  
The account name (Administrator or Guest) of the user  
logged into the WAP device. The factory default user  
name is cisco.  
Log Out  
About  
Help  
Click to log out of the configuration utility.  
Click to show the WAP device type and version number.  
Click to show the online help. The online help is designed  
to be viewed with browsers using UTF-8 encoding. If the  
online help shows errant characters, verify that the  
encoding settings on your browser are set to UTF-8.  
Navigation Pane  
A navigation pane, or main menu, is located on the left side of each page. The  
navigation pane is a list of the top-level features of the WAP devices. If a main  
menu item is preceded by an arrow, select to expand and display the submenu of  
each group. You can then select on the desired submenu item to open the  
associated page.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
13  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Getting Started  
Window Navigation  
1
Management Buttons  
The table below describes the commonly used buttons that appear on various  
pages in the system.  
Management Buttons  
Button Name  
Add  
Description  
Adds a new entry to the table or database.  
Cancels the changes made to the page.  
Clears all entries in the log table.  
Cancel  
Clear All  
Delete  
Edit  
Deletes an entry in a table. Select an entry first.  
Edits or modifies an existing entry. Select an entry first.  
Redisplays the current page with the latest data.  
Saves the settings or configuration.  
Refresh  
Save  
Update  
Updates the new information to the startup  
configuration.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
14  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
2
Status and Statistics  
This chapter describes how to display status and statistics and contains these  
topics:  
System Summary  
The System Summary page shows basic information such as the hardware model  
description, software version, and the time that has elapsed since the last reboot.  
To view system information, select Status and Statistics > System Summary in  
the navigation pane. Or, select System Summary under Device Status on the  
Getting Started page.  
The System Summary page shows this information:  
PID VID—The WAP hardware model and version.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
15  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Status and Statistics  
System Summary  
2
Serial Number—The serial number of the Cisco WAP device.  
Base MAC Address—The WAP MAC address.  
Firmware Version—The firmware version number of the active image.  
Firmware MD5 Checksum—The checksum for the active image.  
Host Name—A name assigned to the device.  
System Uptime—The time that has elapsed since the last reboot.  
System Time—The current system time.  
Power Source—The system may be powered by a power adapter, or may  
be receiving power-over-Ethernet from PoE power-sourcing equipment  
(PSE).  
The TCP/UDP Service table shows basic information about protocols and  
services operating on the WAP.  
Service—The name of the service, if available.  
Protocol—The underlying transport protocol that the service uses (TCP or  
UDP).  
Local IP Address—The IP address, if any, of a remote device that is  
connected to this service on the WAP device. All indicates that any IP  
address on the device can use this service.  
Local Port—The port number for the service.  
Remote IP Address—The IP address of a remote host, if any, that is using  
this service. All indicates that the service is available to all remote hosts that  
access the system.  
Remote Port—The port number of any remote device communicating with  
this service.  
Connection State—The state of the service. For UDP, only connections in  
the Active state appear in the table. In the Active state, a connection is  
established between the WAP device and a client or server. The TCP states  
are:  
-
-
Listening—The service is listening for connection requests.  
Active—A connection session is established and packets are being  
transmitted and received.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
16  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Status and Statistics  
Network Interfaces  
2
-
-
Established—A connection session is established between the WAP  
device and a server or client, depending on the role of each device with  
respect to this protocol.  
Time Wait—The closing sequence has been initiated and the WAP is  
waiting for a system-defined timeout period (typically 60 seconds)  
before closing the connection.  
You can click Refresh to refresh the screen and show the most current information.  
Network Interfaces  
Use the Network Interfaces page to show configuration and status information  
about the wired and wireless interfaces. To show the Network Interfaces page,  
select Status and Statistics > Network Interface in the navigation pane.  
The Network Interfaces page shows this information:  
LAN Status—These settings apply to the internal interface. For the  
WAP321, the information indicates whether or not Green Ethernet mode is  
enabled.  
To change any of these settings, click the Edit link. After you click Edit, you  
are redirected to the VLAN and IPv4 Address Settings page. See VLAN and  
IPv4 Address Settings for descriptions of these fields.  
Radio Status—These settings include the Wireless Radio mode (Enabled  
or Disabled), the MAC address associated with the radio interface, the  
802.11 mode (a/b/g/n), and the channel used by the interface.  
To change the wireless settings, click the Edit link. After you click Edit, you  
are redirected to the Radio page. See Radio for descriptions of these fields.  
Interface Status—This table lists status information for each Virtual Access  
Point (VAP) and on each Wireless Distribution System (WDS) interface.  
If the VAP has been configured, the table lists the SSID, the administrative  
status (up or down), the MAC address of the radio interface, the VLAN ID,  
the name of any associated scheduler profile, and the current state (active  
or inactive). The state indicates whether the VAP is exchanging data with a  
client.  
You can click Refresh to refresh the screen and show the most current information.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
17  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Status and Statistics  
Traffic Statistics  
2
Traffic Statistics  
Use the Traffic Statistics page to view basic information about the WAP. It also  
provides a real-time display of transmit and receive statistics for the Ethernet  
interface, the Virtual Access Points (VAPs), and any WDS interfaces. All transmit  
and receive statistics reflect the totals since the WAP was last started. If you  
reboot the WAP, these figures indicate transmit and receive totals since the reboot.  
To show the Traffic Statistics page, select Status and Statistics > Traffic  
Statistics in the navigation pane.  
The Traffic Statistics page shows summary data and statistics for traffic in each  
direction.  
Network Interface—Name of the Ethernet interface and each VAP and  
WDS interface.  
Each VAP interface name is followed by its SSID in parentheses.  
Total Packets—The total packets sent (in Transmit table) or received (in  
Received table) by this WAP device.  
Total Bytes—The total bytes sent (in Transmit table) or received (in  
Received table) by this WAP device.  
Total Dropped Packets—The total number of dropped packets sent (in  
Transmit table) or received (in Received table) by this WAP device.  
Total Dropped Bytes—The total number of dropped bytes sent (in Transmit  
table) or received (in Received table) by this WAP device.  
Errors—The total number of errors related to sending and receiving data on  
this WAP device.  
You can click Refresh to refresh the screen and show the most current information.  
WorkGroup Bridge Transmit/Receive  
The WorkGroup Bridge Transmit/Receive page shows packet and byte counts for  
traffic between stations on a WorkGroup Bridge. For information on configuring  
WorkGroup Bridges, see WorkGroup Bridge.  
To show the WorkGroup Bridge Transmit/Receive page, select Status and  
Statistics > WorkGroup Bridge in the navigation pane.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
18  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Status and Statistics  
Associated Clients  
2
Each network interface that is configured as a WorkGroup Bridge interface shows  
these fields:  
Network Interface—Name of the Ethernet or VAP interface.  
Status and Statistics—Whether the interface is disconnected or is  
administratively configured as up or down.  
VLAN ID—Virtual LAN (VLAN) ID. You can use VLANs to establish multiple  
internal and guest networks on the same WAP device. The VLAN ID is set on  
the VAP tab.See Configuring VAPs.  
Name (SSID)—Wireless network name. Also known as the SSID, this  
alphanumeric key uniquely identifies a wireless local area network. The  
SSID is set on the VAP tab. See Configuring VAPs.  
Additional information appears for the transmit and receive direction for each  
WorkGroup Bridge interface:  
Total Packets—The total number of packets bridged between the wired  
clients in the WorkGroup Bridge and the wireless network.  
Total Bytes—The total number of bytes bridged between the wired clients  
in the WorkGroup Bridge and the wireless network.  
You can click Refresh to refresh the screen and show the most current information.  
Associated Clients  
You can use the Associated Clients page to view the client stations associated  
with a particular access point.  
To show the Associated Clients page, select Status and Statistics > Associated  
Clients in the navigation pane.  
The associated stations are shown along with information about packet traffic  
transmitted and received for each station.  
Total Number of Associated Clients—The total number of clients currently  
associated with the WAP device.  
Network Interface—The VAP the client is associated with.  
Station—The MAC address of the associated wireless client.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
19  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Status and Statistics  
Associated Clients  
2
Status—The Authenticated and Associated Status shows the underlying  
IEEE 802.11 authentication and association status, which is present no  
matter which type of security the client uses to connect to the WAP device.  
This status does not show IEEE 802.1X authentication or association status.  
These are some points to keep in mind with regard to this field:  
-
If the WAP device security mode is None or Static WEP, the  
authentication and association status of clients appears as expected;  
that is, if a client shows as authenticated to the WAP device, it is able to  
transmit and receive data. (The reason why is that Static WEP uses only  
IEEE 802.11 authentication.)  
-
If the WAP device uses IEEE 802.1X or WPA security, it is possible for a  
client association to appear as authenticated (through IEEE 802.11  
security) although it is not actually authenticated through the second  
layer of security.  
From Station/To Station—For the From Station, the counters indicate the  
packets or bytes received by the wireless client. For the To Station, the  
counters indicate the number of packets and bytes transmitted from the  
WAP device to the wireless client.  
-
Packets—Number of packets received (transmitted) from the wireless  
client.  
-
-
Bytes—Number of bytes received (transmitted) from the wireless client.  
Drop Packets—Number of packets dropped after being received  
(transmitted).  
-
-
Drop Bytes—Number of bytes that dropped after being received  
(transmitted).  
TS Violate Packets (From Station)—Number of packets sent from a  
client STA to the WAP device in excess of its active Traffic Stream (TS)  
uplink bandwidth, or for an access category requiring admission control  
to which the client STA has not been admitted.  
-
TS Violate Packets (To Station)—Number of packets sent from the  
WAP device to a client STA in excess of its active TS downlink  
bandwidth, or for an access category requiring admission control to  
which the client STA has not been admitted.  
Up Time—The amount of time the client has been associated with the WAP  
device.  
You can click Refresh to refresh the screen and show the most current information.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
20  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Status and Statistics  
TSPEC Client Associations  
2
TSPEC Client Associations  
The TSPEC Client Associations page provides real-time information about the  
TSPEC client data transmitted and received by this access point. The tables on  
the TSPEC Client Associations page show voice and video packets transmitted  
and received since the association started, along with status information.  
A TSPEC is a traffic specification that is sent from a QoS-capable wireless client to  
a WAP device requesting a certain amount of network access for the Traffic  
Stream (TS) it represents. A traffic stream is a collection of data packets identified  
by the wireless client as belonging to a particular user priority. An example of a  
voice traffic stream is a Wi-Fi CERTIFIED telephone handset that marks its codec-  
generated data packets as voice priority traffic. An example of a video traffic  
stream is a video player application on a wireless laptop that prioritizes a video  
conference feed from a corporate server.  
To view TSPEC client association statistics, select Status and Statistics > TSPEC  
Client Associations in the navigation pane.  
The TSPEC Client Associations page shows this information:  
Status and Statistics:  
Network Interface—Radio interface used by the client.  
SSID—Service set identifier associated with this TS client.  
Station—Client station MAC address.  
TS Identifier—TSPEC Traffic Session Identifier (range 0 to 7).  
Access Category—TS Access Category (voice or video).  
Direction—Traffic direction for this TS. Direction can be one of these  
options:  
-
-
-
uplink—From client to device.  
downlink—From device to client.  
bidirectional  
User Priority—User Priority (UP) for this TS. The UP is sent with each  
packet in the UP portion of the IP header. Typical values are as follows:  
-
-
6 or 7 for voice  
4 or 5 for video  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
21  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Status and Statistics  
TSPEC Client Associations  
2
The value may differ depending on other priority traffic sessions.  
Medium Time—Time that the TS traffic occupies the transmission medium.  
Excess Usage Events—Number of times that the client has exceeded the  
medium time established for its TSPEC. Minor, infrequent violations are  
ignored.  
VAP MAC Address—Virtual Access Point MAC address.  
Statistics:  
Network Interface—Radio interface used by the client.  
Station—Client station MAC address.  
TS Identifier—TSPEC Traffic Session Identifier (range 0 to 7).  
Access Category—TS Access Category (voice or video).  
Direction—The traffic direction for this TS. Direction can be one of these  
options:  
-
-
-
uplink—From client to device.  
downlink—From device to client.  
bidirectional  
From Station—Shows the number of packets and bytes received from the  
wireless client and the number of packets and bytes that were dropped  
after being received.  
-
-
Packets—Number of packets in excess of an admitted TSPEC.  
Bytes—Number of bytes when no TSPEC has been established and  
admission is required by the WAP device.  
To Station—The number of packets and bytes transmitted from the WAP  
device to the wireless client and the number of packets and bytes that were  
dropped upon transmission.  
-
-
Packets—Number of packets in excess of an admitted TSPEC.  
Bytes—Number of bytes for which no TSPEC has been established  
when admission is required by the WAP device.  
You can click Refresh to refresh the screen and show the most current information.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
22  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Status and Statistics  
TSPEC Status and Statistics  
2
TSPEC Status and Statistics  
The TSPEC Status and Statistics page provides this information:  
Summary information about TSPEC sessions by radio.  
Summary information about TSPEC sessions by VAP.  
Real-time transmit and receive statistics for the radio interface and the  
network interface(s).  
All of the transmit and receive statistics shown are totals since the WAP device  
was last started. If you reboot the WAP device, these figures indicate transmit and  
receive totals since the reboot.  
To view TSPEC status and statistics, select Status and Statistics > TSPEC Status  
and Statistics in the navigation pane.  
The TSPEC Status and Statistics page provides this status information for the  
WLAN (Radio) and VAP interfaces:  
Network Interface—Name of the Radio or VAP interface.  
Access Category—Current Access Category associated with this Traffic  
Stream (voice or video).  
Status—Whether the TSPEC session is enabled (up) or not (down) for the  
corresponding Access Category.  
NOTE Status is a configuration status (it does not necessarily represent the  
current session activity).  
Active Traffic Stream—Number of currently active TSPEC Traffic Streams  
for this radio and Access Category.  
Traffic Stream Clients—Number of Traffic Stream clients associated with  
this radio and Access Category.  
Medium Time Admitted—Time allocated for this Access Category over the  
transmission medium to carry data. This value should be less than or equal  
to the maximum bandwidth allowed over the medium for this TS.  
Medium Time Unallocated—Time of unused bandwidth for this Access  
Category.  
These statistics appear separately for the transmit and receive paths on the  
wireless radio interface:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
23  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Status and Statistics  
TSPEC AP Statistics  
2
Access Category—The Access Category associated with this Traffic  
Stream (voice or video).  
Total Packets—Total number of TS packets sent (in Transmit table) or  
received (in Received table) by this Radio for the specified Access  
Category.  
Total Bytes—Total number of bytes received in the specified access  
category.  
These statistics appear separately for the transmit and receive paths on the  
network interfaces (VAPs):  
Total Voice Packets—Total number of TS voice packets sent (in Transmit  
table) or received (in Received table) by this WAP device for this VAP.  
Total Voice Bytes—Total TS voice bytes sent (in Transmit table) or received  
(in Received table) by this WAP device for this VAP.  
Total Video Packets—Total number of TS video packets sent (in Transmit  
table) or received (in Received table) by this WAP device for this VAP.  
Total Video Bytes—Total TS video bytes sent (in Transmit table) or  
received (in Received table) by this WAP device for this VAP.  
You can click Refresh to refresh the screen and show the most current information.  
TSPEC AP Statistics  
The TSPEC AP Statistics page provides information on the voice and video Traffic  
Streams accepted and rejected by the WAP device. To view the TSPEC AP  
Statistics page, select Status and Statistics > TSPEC AP Statistics in the  
navigation pane.  
TSPEC Statistics Summary for Voice ACM—The total number of  
accepted and the total number of rejected voice traffic streams.  
TSPEC Statistics Summary for Video ACM—The total number of  
accepted and the total number of rejected video traffic streams.  
You can click Refresh to refresh the screen and show the most current information.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
24  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Status and Statistics  
Radio Statistics  
2
Radio Statistics  
You can use the Radio Statistics page to show packet-level and byte-level  
statistics for the wireless radio interface. To view the Radio Statistics page, select  
Status and Statistics > Radio Statistics in the navigation pane.  
Packets Received—Total packets received by the WAP device.  
Packets Transmitted—Total packets transmitted by the WAP device.  
Bytes Received—Total bytes received by the WAP device.  
Bytes Transmitted—Total bytes transmitted by the WAP device.  
Packets Receive Dropped—Number of packets received by the WAP  
device that were dropped.  
Packets Transmit Dropped—Number of packets transmitted by the WAP  
device that were dropped.  
Bytes Receive Dropped—Number of bytes received by the WAP device  
that were dropped.  
Bytes Transmit Dropped—Number of bytes transmitted by the WAP  
device that were dropped.  
Fragments Received—Number of fragmented frames received by the  
WAP device.  
Fragments Transmitted—Number of fragmented frames sent by the WAP  
device.  
Multicast Frames Received—Count of MSDU frames received with the  
multicast bit set in the destination MAC address.  
Multicast Frames Transmitted—Count of successfully transmitted MSDU  
frames where the multicast bit was set in the destination MAC address.  
Duplicate Frame Count—Number of times a frame was received and the  
Sequence Control field indicates it was a duplicate.  
Failed Transmit Count—Number of times an MSDU was not transmitted  
successfully due to transmit attempts exceeding either the short retry limit  
or the long retry limit.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
25  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Status and Statistics  
Email Alert Status  
2
FCS Error Count—Count of FCS errors detected in a received MPDU  
frame.  
Transmit Retry Count—Number of times an MSDU is successfully  
transmitted after one or more retries.  
ACK Failure Count—Count of ACK frames not received when expected.  
RTS Failure Count—Count of CTS frames not received in response to an  
RTS frame.  
WEP Undecryptable Count—Number of frames discarded because they  
could not be decrypted by the radio. Frames can be discarded because the  
frame was not encrypted, or it was encrypted with a privacy option not  
supported by the WAP device.  
RTS Success Count—Count of CTS frames received in response to an  
RTS frame.  
Multiple Retry Count—Number of times an MSDU is successfully  
transmitted after more than one retry.  
Frames Transmitted Count—Count of each successfully transmitted  
MSDU.  
You can click Refresh to refresh the screen and show the most current information.  
Email Alert Status  
The Email Alert Status page provides information about the email alerts sent  
based on the syslog messages generated in the WAP device. To view the Email  
Alert Status page, select Status and Statistics > Email Alert Status in the  
navigation pane.  
Email Alert Status—The Email Alert configured status. The status is either  
Enabled or Disabled. The default is Disabled.  
Number of Emails Sent—The total number of emails sent. The range is an  
unsigned integer of 32 bits. The default is 0.  
Number of Emails Failed—The total number of email failures. The range is  
an unsigned integer of 32 bits. The default is 0.  
Time Last Email Sent—The day, date, and time when the last email was  
sent.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
26  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Status and Statistics  
Log  
2
Log  
The Log page shows a list of system events that generated a log entry, such as  
login attempts and configuration changes. The log is cleared upon a reboot and  
can be cleared by an administrator. Up to 512 events can be shown. Older entries  
are removed from the list as needed to make room for new events.  
To view the Log page, select Status and Statistics > Log Status in the navigation  
pane.  
Time Stamp—The system time when the event occurred.  
Severity—Whether the event is due to an error (err) or is informational (info).  
Service—The software component associated with the event.  
Description—A description of the event.  
You can click Refresh to refresh the screen and show the most current information.  
You can click Clear All to clear all entries from the log.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
27  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
3
Administration  
This chapter describes how to configure global system settings and perform  
diagnostics.  
It contains these topics:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
28  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
System Settings  
3
System Settings  
The System Settings page enables you to configure information that identifies the  
WAP device within the network.  
To configure system settings:  
STEP 1 Select Administration > System Settings in the navigation pane.  
STEP 2 Enter the parameters:  
Host Name—Administratively assigned name for the WAP device. By  
convention, the name is the fully qualified domain name of the node. The  
default host name is wap concatenated with the last 6 hex digits of the MAC  
address of the WAP device. Host Name labels can contain only letters, digits  
and hyphens. Host Name labels cannot begin or end with a hyphen. No other  
symbols, punctuation characters, or blank spaces are permitted. The Host  
Name can be 1 to 63 characters long.  
System Contact—A contact person for the WAP device. The System  
Contact can be 0 to 255 characters long and can include spaces and special  
characters.  
System Location—Description of the physical location of the WAP device.  
The System Location can be 0 to 255 characters long and can include  
spaces and special characters.  
STEP 3 Click Save. The changes are saved to the Startup Configuration.  
User Accounts  
One management user is configured on the WAP device by default:  
User Name: cisco  
Password: cisco  
You can use the User Accounts page to configure up to four additional users and to  
change a user password.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
29  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Administration  
User Accounts  
3
Adding a User  
To add a new user:  
STEP 1 Select Administration > User Accounts in the navigation pane.  
The User Account Table shows the currently configured users. The user cisco is  
preconfigured in the system to have Read/Write privileges.  
All other users can have Read Only Access, but not Read/Write access.  
STEP 2 Click Add. A new row of text boxes appears.  
STEP 3 Check the box for the new user and select Edit.  
STEP 4 Enter a User Name between 1 to 32 alphanumeric characters. Only numbers 0 to  
9 and letters a to z (upper or lower) are allowed for user names.  
STEP 5 Enter a New Password between 1 and 64 characters and then enter the same  
password in the Confirm New Password text box.  
As you enter a password, the number and color of vertical bars changes to  
indicate the password strength, as follows:  
Red—The password fails to meet the minimum complexity requirements.  
Orange—The password meets the minimum complexity requirements but  
the password strength is weak.  
Green—The password is strong.  
STEP 6 Click Save. The changes are saved to the Startup Configuration.  
NOTE To delete a user, select the check box next to the user name and select Delete. To  
save your deletion permanently, select Save when complete.  
Changing a User Password  
To change a user password:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
30  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Administration  
Time Settings  
3
STEP 1 Select Administration > User Accounts in the navigation pane.  
The User Account Table shows the currently configured users. The user cisco is  
preconfigured in the system to have Read/Write privileges. The password for the  
user cisco can be changed.  
STEP 2 Select the user to configure and click Edit.  
STEP 3 Enter a New Password between 1 and 64 characters and then enter the same  
password in the Confirm New Password text box.  
As you enter a password, the number and color of vertical bars changes to  
indicate the password strength, as follows:  
Red—The password fails to meet the minimum complexity requirements.  
Orange—The password meets the minimum complexity requirements but  
the password strength is weak.  
Green—The password is strong.  
STEP 4 Click Save. The changes are saved to the Startup Configuration.  
NOTE If you change your password, you must log in again to the system.  
Time Settings  
A system clock provides a network-synchronized time-stamping service for  
software events such as message logs. You can configure the system clock  
manually or configure the WAP device as a Network Time Protocol (NTP) client  
that obtains the clock data from a server.  
Use the Time Settings page to set the system time manually or to configure the  
system to acquire its time settings from a preconfigured NTP server. By default,  
the WAP device is configured to obtain its time from a predefined list of NTP  
servers.  
The current system time appears at the top of the page, along with the System  
Clock Source option.  
To use NTP to have the WAP device automatically acquire its time settings:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
31  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Administration  
Time Settings  
3
STEP 1 For the System Clock Source field, select Network Time Protocol (NTP).  
STEP 2 Configure these parameters:  
NTP Server/IPv4/IPv6 Address Name—Specify the IPv4 address, IPv6  
address, or hostname of an NTP server. A default NTP server is listed.  
A hostname can consist of one or more labels, which are sets of up to 63  
alphanumeric characters. If a hostname includes multiple labels, each is  
separated by a period (.). The entire series of labels and periods can be up  
to 253 characters long.  
Time Zone—Select the time zone for your location.  
STEP 3 Select Adjust Time for Daylight Savings if daylight savings time is applicable to  
your time zone. When selected, configure these fields:  
Daylight Savings Start—Select the week, day, month, and time when  
daylight savings time starts.  
Daylight Savings End—Select the week, day, month, and time when  
daylight savings time ends.  
Daylight Savings Offset—Specify the number of minutes to move the clock  
forward when daylight savings time begins and backward when it ends.  
STEP 4 Click Save. The changes are saved to the Startup Configuration.  
To manually configure the time settings:  
STEP 1 For the System Clock Source field, select Manually.  
STEP 2 Configure these parameters:  
System Date—Select the current month, day, and year date from the drop-  
down lists.  
System Time—Select the current hour and minutes in 24-hour clock format,  
such as 22:00:00 for 10 p.m.  
Time Zone—Select the time zone for your location.  
STEP 3 Select Adjust Time for Daylight Savings if daylight savings time is applicable to  
your time zone. When selected, configure these fields:  
Daylight Savings Start—Select the week, day, month, and time when  
daylight savings time starts.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
32  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Administration  
Log Settings  
3
Daylight Savings End—Select the week, day, month, and time when  
daylight savings time ends.  
Daylight Savings Offset—Specify the number of minutes to move the clock  
forward when daylight savings time begins and backward when it ends.  
STEP 4 Click Save. The changes are saved to the Startup Configuration.  
Log Settings  
You can use the Log Settings page to enable log messages to be saved in  
permanent memory. You can also send logs to a remote host.  
Configuring the Persistent Log  
If the system unexpectedly reboots, log messages can be useful to diagnose the  
cause. However, log messages are erased when the system reboots unless you  
enable persistent logging.  
!
CAUTION Enabling persistent logging can wear out the flash (nonvolatile) memory and  
degrade network performance. Only enable persistent logging to debug a  
problem. Make sure that you disable persistent logging after you finish debugging  
the problem.  
To configure persistent logging:  
STEP 1 Select Administration > Log Settings in the navigation pane.  
STEP 2 Configure the parameters:  
Persistence—Click Enable to save system logs to nonvolatile memory so  
that the logs are kept when the WAP device reboots. You can save up to 128  
log messages in the nonvolatile memory. When the limit of 128 is reached,  
the oldest log message is overwritten by the newest message. Clear this  
field to save system logs to volatile memory. Logs in volatile memory are  
deleted when the system reboots.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
33  
Download from Www.Somanuals.com. All Manuals Search And Download.  
   
Administration  
Log Settings  
3
Severity—The minimum severity that an event must have for it to be written  
to the log in nonvolatile memory. For example, if you specify 2 (critical), then  
critical, alert, and emergency events are logged to nonvolatile memory. Error  
messages with a severity level of 3 to 7 are written to volatile memory.  
Depth—The maximum number of messages, up to 512, that can be stored in  
volatile memory. When the number you configure in this field is reached, the  
oldest log event is overwritten by the newest log event. Note that the  
maximum number of log messages that can be stored in nonvolatile memory  
(the persistent log) is 128, which is not configurable.  
STEP 3 Click Save. The changes are saved to the Startup Configuration.  
Remote Log Server  
The Kernel Log is a comprehensive list of system events (shown in the System  
Log) and kernel messages such as error conditions.  
You cannot view kernel log messages directly from the web interface. You must  
first set up a remote log server to receive and capture logs. Then you can  
configure the WAP device to log to the remote log server.  
Remote log server collection for WAP device syslog messages provides these  
features:  
Allows aggregation of syslog messages from multiple APs  
Stores a longer history of messages than is kept on a single WAP device  
Triggers scripted management operations and alerts  
To specify a host on your network to serve as a remote log server:  
STEP 1 Select Administration > Log Settings in the navigation pane.  
STEP 2 Configure the parameters:  
Remote Log—Enables the WAP device to send log messages to a remote  
host. When disabled, all log messages are kept on the local system.  
Server IPv4/IPv6 Address/Name—The IPv4 or IPv6 address, or the  
hostname of the remote log server.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
34  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
Email Alert  
3
A hostname can consist of one or more labels, which are sets of up to 63  
alphanumeric characters. If a hostname includes multiple labels, each is  
separated by a period (.). The entire series of labels and periods can be up  
to 253 characters long.  
UDP Port—The logical port number for the syslog process on the remote  
host. The range is from 1 to 65535. The default port is 514.  
Using the default port is recommended. If you choose to reconfigure the log  
port, make sure that the port number you assign to syslog is available for use.  
STEP 3 Click Save. The changes are saved to the Startup Configuration.  
If you enabled a Remote Log host, clicking Save activates remote logging. The  
WAP device sends its kernel messages real-time for display to the remote log  
server monitor, a specified kernel log file, or other storage, depending on your  
configurations.  
If you disabled a Remote Log host, clicking Save disables remote logging.  
NOTE After new settings are saved, the corresponding processes may be stopped and  
restarted. When this happens, the WAP device may lose connectivity. We  
recommend that you change WAP device settings when a loss of connectivity will  
least affect your wireless clients.  
Email Alert  
Use the email alert feature to send messages to the configured email addresses  
when particular system events occur.  
The feature supports mail server configuration, message severity configuration,  
and up to three email address configurations to send urgent and non-urgent email  
alerts.  
TIP Do not use your personal email address, which would unnecessarily expose your  
personal email login credentials. Use a separate email account instead. Also be  
aware that many email accounts keep a copy of all sent messages by default.  
Anyone with access to this email account has access to the sent messages.  
Review your email settings to ensure that they are appropriate for the privacy  
policy of your business.  
To configure the WAP device to send email alerts:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
35  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
Email Alert  
3
STEP 1 Select Administration > Email Alert in the navigation pane.  
STEP 2 In the Global Configuration area, configure these parameters:  
Administrative Mode—Choose to enable the email alert feature globally.  
From Email Address—Enter the address to show as the sender of the email.  
The address is a 255 character string with only printable characters. No  
address is configured by default.  
Log Duration—Choose the frequency at which scheduled messages are  
sent. The range is from 30 to 1440 minutes. The default is 30 minutes.  
Scheduled Message Severity—Log messages of this severity level or  
higher are grouped and sent to the configuration email address at the  
frequency specified by the Log Duration. Select from these values: None,  
Emergency, Alert, Critical, Error, Warning, Notice, Info, and Debug. If set to  
None, then no scheduled severity messages are sent. The default severity is  
Warning.  
Urgent Message Severity—Log messages of this severity level or higher  
are sent to the configured email address immediately. Select from these  
values: None, Emergency, Alert, Critical, Error, Warning, Notice, Info, and  
Debug. If set to None, then no urgent severity messages are sent. The default  
is Alert.  
STEP 3 In the Mail Server Configuration area, configure these parameters:  
Server IPv4 Address/Name—Enter the IP address or hostname of the  
outgoing SMTP server. (You can check with your email provider for the  
hostname.) The server address must be a valid IPv4 address or hostname.  
The IPv4 address should be in a form similar to xxx.xxx.xxx.xxx (192.0.2.10).  
A hostname can consist of one or more labels, which are sets of up to 63  
alphanumeric characters. If a hostname includes multiple labels, each is  
separated by a period (.). The entire series of labels and periods can be up  
to 253 characters long.  
Data Encryption—Enter the mode of security for the outbound email alert.  
The alert can be sent using secure TLS protocol or the default Open  
protocol. Using secure TLSv1 protocol can prevent eavesdropping and  
tampering during the communication across the public network.  
Port—Enter the SMTP port number to use for outbound emails. The range is  
a valid port number from 0 to 65535. The default port is 465. The port  
generally depends on the mode used by the email provider.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
36  
Download from Www.Somanuals.com. All Manuals Search And Download.  
Administration  
Email Alert  
3
Username—Enter the username for the email account that will be used to  
send these emails. Typically (but not always) the username is the full email  
address including the domain (such as [email protected]). The specified  
account will be used as the email address of the sender. The username can  
be from 1 to 64 alphanumeric characters.  
Password—Enter the password for the email account that will be used to  
send these emails. The password can be from 1 to 64 characters.  
STEP 4 Configure the email addresses and subject line.  
To Email Address 1/2/3—Enter up to three addresses to receive email  
alerts. Each email address must be valid.  
Email Subject—Enter the text to appear in the email subject line. This can be  
up to a 255 character alphanumeric string.  
STEP 5 Click Te s t M a i l to send a test email to validate the configured email account.  
STEP 6 Click Save. The changes are saved to the Startup Configuration.  
Email Alert Examples  
The following example shows how to fill in the Mail Server Configuration  
parameters:  
Gmail  
Server IPv4 Address/Name = smtp.gmail.com  
Data Encryption = TLSv1  
Port = 465  
Username = Your full email address you can use to login to your email account  
associated with the above server  
Password = xxxxxxxx is a valid password of your valid email account  
To Email Address 1 = [email protected]  
Windows Live Hotmail  
Windows Live Hotmail recommends the following settings:  
Data Encryption: TLSv1  
SMTP Server: smtp.live.com  
SMTP Port: 587  
Username: Your full email address, such as [email protected] or  
Password: Your Windows Live account password  
Yahoo! Mail  
Yahoo requires using a paid account for this type of service. Yahoo  
recommends the following settings:  
Data Encryption: TLSv1  
SMTP Server: plus.smtp.mail.yahoo.com  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
37  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
HTTP/HTTPS Service  
3
SMTP Port: 465 or 587  
Username: Your email address, without the domain name such as myName (without  
@yahoo.com)  
Password: Your Yahoo account password  
The following example shows a sample format of a general log email:  
Sent: Wednesday, September 09, 2009 11:16 AM  
Subject: log message from AP  
TIME  
PriorityProcess Id  
Message  
Sep 8 03:48:25 info  
Sep 8 03:48:26 info  
reached  
login[1457]  
root login on ttyp0  
mini_http-ssl[1175] Max concurrent connections of 20  
HTTP/HTTPS Service  
Use the HTTP/HTTPS Service page to enable and configure web-based  
management connections. If HTTPS is used for secure management sessions, you  
also use the HTTP/HTTPS Service page to manage the required SSL certificates.  
Configuring HTTP and HTTPS Services  
To configure HTTP and HTTP services:  
STEP 1 Select Administration > HTTP/HTTPS Service in the navigation pane.  
STEP 2 Configure these Global Settings:  
Maximum Sessions—The number of web sessions, including both HTTP  
and HTTPS, that can be in use at the same time.  
When a user logs on to the WAP device configuration utility, a session is  
created. This session is maintained until the user logs off or the Session  
Timeout expires. The range is from 1 to 10 sessions. The default is 5. If the  
maximum number of sessions is reached, the next user who attempts to log  
on to the configuration utility receives an error message about the session  
limit.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
38  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Administration  
HTTP/HTTPS Service  
3
Session Timeout—The maximum amount of time, in minutes, an inactive  
user remains logged on to the WAP device configuration utility. When the  
configured timeout is reached, the user is automatically logged off. The  
range is from 1 to 60 minutes. The default is 10 minutes.  
STEP 3 Configure HTTP and HTTPS services:  
HTTP Server—Enables access through HTTP. By default, HTTP access is  
enabled. If you disable it, any current connections using that protocol are  
disconnected.  
HTTP Port—The logical port number to use for HTTP connections, from  
1025 to 65535. The default port number for HTTP connections is the well-  
known IANA port number 80.  
HTTPS Server—Enables access through secure HTTP. By default, HTTPS  
access is enabled. If you disable it, any current connections using that  
protocol are disconnected.  
HTTPS Port—The logical port number to use for HTTP connections, from  
1025 to 65535. The default port number for HTTP connections is the well-  
known IANA port number 443.  
Redirect HTTP to HTTPS—Redirects management HTTP access attempts  
on the HTTP port to the HTTPS port. This field is available only when HTTP  
access is disabled.  
STEP 4 Click Save. The changes are saved to the Startup Configuration.  
Managing SSL Certificates  
To use HTTPS services, the WAP device must have a valid SSL certificate. The  
WAP device can generate a certificate or you can download it from your network  
or from a TFTP server.  
To generate the certificate with the WAP device, click Generate SSL Certificate.  
This should be done after the WAP device has acquired an IP address to ensure  
that the common name for the certificate matches the IP address of the WAP  
device. Generating a new SSL certificate restarts the secure web server. The  
secure connection does not work until the new certificate is accepted on the  
browser.  
In the Certificate File Status area, you can view whether a certificate currently  
exists on the WAP device, and view this information about it:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
39  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
Management Access Control  
3
Certificate File Present  
Certificate Expiration Date  
Certificate Issuer Common Name  
If an SSL certificate (with a .pem extension) exists on the WAP device, you can  
download it to your computer as a backup. In the Download SSL Certificate (From  
Device to PC) area, select HTTP or TFTP for the Download Method and click  
Download.  
If you select HTTP, you are prompted to confirm the download and then to  
browse to the location to save the file on your network.  
If you select TFTP, additional fields appear to enable you to enter the File  
Name to assign to the downloaded file, and enter the TFTP server address  
where the file will be downloaded.  
You can also upload a certificate file (with a .pem extension) from your computer to  
the WAP device. In the Upload SSL Certificate (From PC to Device) area, select  
HTTP or TFTP for the Upload Method.  
For HTTP, browse to the network location, select the file, and click Upload.  
For TFTP, enter the File Name as it exists on the TFTP server and the TFTP  
Server IPv4 Address, then click Upload. The filename cannot contain the  
following characters: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more  
successive periods.  
A confirmation appears when the upload was successful.  
Management Access Control  
You can create an access control list (ACL) that lists up to five IPv4 hosts and five  
IPv6 hosts that are authorized to access the WAP device configuration utility. If this  
feature is disabled, anyone can access the configuration utility from any network  
client by supplying the correct WAP device username and password.  
If the management ACL is enabled, access through the web and SNMP is  
restricted to the specified IP hosts.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
40  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
Upgrade Firmware  
3
!
CAUTION Verify any IP address that you enter. If you enter an IP address that does not match  
your Administrative computer, you will lose access to the configuration interface. It  
is highly recommend to give the Administrative computer a static IP address, so the  
address does not change over time.  
To create an access list:  
STEP 1 Select Administration > Management Access Control in the navigation pane.  
STEP 2 Select Enable for the Management ACL Mode.  
STEP 3 Enter up to five IPv4 and five IPv6 addresses that will be allowed access.  
STEP 4 Verify the IP addresses are correct.  
STEP 5 Click Save. The changes are saved to the Startup Configuration.  
Upgrade Firmware  
As new versions of the WAP device firmware become available, you can upgrade  
the firmware on your devices to take advantage of new features and  
enhancements. The WAP device uses a TFTP or HTTP client for firmware  
upgrades.  
After you upload new firmware and the system reboots, the newly added  
firmware becomes the primary image. If the upgrade fails, the original firmware  
remains as the primary image.  
NOTE When you upgrade the firmware, the access point retains the existing configuration  
information.  
TFTP Upgrade  
To upgrade the firmware on an access point using TFTP:  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
41  
Download from Www.Somanuals.com. All Manuals Search And Download.  
     
Administration  
Upgrade Firmware  
3
STEP 1 Select Administration > Update Firmware in the navigation pane.  
The Product ID (PID) and active and inactive firmware versions appear.  
STEP 2 Select TFTP for Transfer Method.  
STEP 3 Enter a name (1 to 256 characters) for the image file in the Source File Name field,  
including the path to the directory that contains the image to upload.  
For example, to upload the ap_upgrade.tar image located in the /share/builds/ap  
directory, enter: /share/builds/ap/ap_upgrade.tar  
The firmware upgrade file supplied must be a tar file. Do not attempt to use bin  
files or files of other formats for the upgrade; these types of files do not work.  
The filename cannot contain the following items: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *,  
and two or more successive periods.  
STEP 4 Enter the TFTP Server IPv4 Address and click Upgrade.  
Uploading the new software may take several minutes. Do not refresh the page or  
navigate to another page while uploading the new software, or the software  
upload is aborted. When the process is complete the access point restarts and  
resumes normal operation.  
STEP 5 To verify that the firmware upgrade completed successfully, log into the user  
interface and display the Upgrade Firmware page and view the active firmware  
version.  
HTTP Upgrade  
To upgrade using HTTP:  
STEP 1 Select HTTP for Transfer Method.  
STEP 2 If you know the name and path to the new file, enter it in the Source File Name  
field. Otherwise, click the Browse button and locate the firmware image file on  
your network.  
The firmware upgrade file supplied must be a tar file. Do not attempt to use bin  
files or files of other formats for the upgrade; these types of files do not work.  
STEP 3 Click Upgrade to apply the new firmware image.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
42  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
Firmware Recovery  
3
Uploading the new software may take several minutes. Do not refresh the page or  
navigate to another page while uploading the new software, or the software  
upload is aborted. When the process is complete, the access point restarts and  
resumes normal operation.  
STEP 4 To verify that the firmware upgrade completed successfully, log into the user  
interface, display the Upgrade Firmware page, and view the active firmware  
version.  
Firmware Recovery  
The WAP device has a firmware recovery feature that enables the restoration of a  
valid image on the WAP device after a failed download. If the power goes down  
during an image download, the WAP device might not be able to boot. In this  
event, although the image is not usable, the boot loader file that loads the firmware  
image from flash memory to RAM should continue to be functional. An HTTP  
server is embedded in the boot loader file, enabling the administrator to connect  
to the WAP device over the LAN port and use a web browser to download and  
install a new firmware image.  
The WAP device enters the HTTP firmware recovery mode when it is booted and  
the boot loader cannot find a valid image in flash memory. In this mode, the boot  
loader sets the internal network port to the following static IP address:  
IP Address: 192.168.1.254  
Network Mask: 255.255.255.0  
Default Gateway: 192.168.1.1  
An HTTP server starts and listens for client connections on port 80.  
NOTE The Firmware Recovery page is shown in the web-based configuration utility only  
when an image needs to be restored.  
To use this feature to download a new firmware image:  
STEP 1 Directly connect a PC to the LAN port.  
STEP 2 Configure the IP address and mask on the management PC to be in the same  
subnet as the switch.  
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE  
43  
Download from Www.Somanuals.com. All Manuals Search And Download.  
 
Administration  
Firmware Recovery  
3
NOTE You can access the system across a network if the default gateway IP  
address is 192.168.1.1.  
STEP 3 Open a web browser and enter the IP address of the switch in the address bar  
(192.168.1.254).  
NOTE The HTTP firmware recovery features support the following  
browsers:  
-
-
Firefox 3.0 and later versions  
Internet Explorer 6 and later versions  
A Firmware Recovery page appears. No authentication is required.  
The web page shows the PIC VID (product ID and vendor ID), serial number, and  
MAC address of the WAP device.  
STEP 4 Select Browse and select a valid firmware image to download.  
A progress bar appears while the file is downloading. The following message  
appears upon a successful download:  
100% Complete  
File downloaded successfully. Please wait while the file is being written to  
flash. System will automatically reboot.  
The file selected by administrator is downloaded to RAM and is validated for the  
following conditions:  
The CRC of the file is good.  
The STK file is built for this platform.  
The STK file size is within the partition limits (4.5 MB is reserved for this file).  
If these conditions are met, the file is written to flash memory and the system is  
rebooted using the new firmware.