Home
Cisco
Wireless Access Point
M10-RM
Cisco M10-RM User Manual
4
of 1
of 1 rating
520 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
CH
A
P
T
E
R
11-1
Cisco IOS Software Configuratio
n Guide for Cisco Aironet Ac
cess Points
OL-14209-01
11
Configuring Authentication Types
This chapter descri
bes how to configure authentica
tion types on the access pointwireless device. This
chapter contains
these sections
:
•
Understanding Authen
tication T
ypes, page
11-2
•
Config
uring Authentication
T
ypes, page
11-10
•
Matching Access Point and Clie
nt Device Authentication T
ypes, pa
ge
11-19
222
224
Table of Contents
Default Chapter
3
Table of Contents
3
Related Publications
25
Overview
27
Features
28
Features Introduced in this Release
28
Management Options
28
Roaming Client Devices
29
Network Configuration Examples
29
Root Access Point
29
Repeater Access Point
30
Bridges
31
Workgroup Bridge
31
Central Unit in an All-Wireless Network
32
Using the Web-Browser Interface
33
Using the Web-Browser Interface for the First Time
35
Using the Management Pages in the Web-Browser Interface
35
Using Action Buttons
36
Character Restrictions in Entry Fields
37
Enabling HTTPS for Secure Browsing
37
CLI Configuration Example
45
Deleting an HTTPS Certificate
45
Using Online Help
46
Changing the Location of Help Files
46
Disabling the Web-Browser Interface
47
Using the Command-Line Interface
49
Cisco IOS Command Modes
50
Getting Help
51
Abbreviating Commands
51
Using no and Default Forms of Commands
52
Understanding CLI Messages
52
Using Command History
52
Changing the Command History Buffer Size
53
Recalling Commands
53
Disabling the Command History Feature
53
Using Editing Features
54
Enabling and Disabling Editing Features
54
Editing Commands through Keystrokes
54
Editing Command Lines that Wrap
55
Searching and Filtering Output of Show and more Commands
56
Accessing the CLI
57
Opening the CLI with Telnet
57
Opening the CLI with Secure Shell
57
Configuring the Access Point for the First Time
59
Before You Start
60
Resetting the Device to Default Settings
60
Resetting to Default Settings Using the MODE Button
60
Resetting to Default Settings Using the GUI
60
Resetting to Default Settings Using the CLI
61
Obtaining and Assigning an IP Address
62
Default IP Address Behavior
62
Connecting to the 1100 Series Access Point Locally
63
Connecting to the 1130 Series Access Point Locally
64
Connecting to the 1200, 1230, 1240, and 1250 Series Access Points Locally
64
Connecting to the 1300 Series Access Point/Bridge Locally
65
Default Radio Settings
65
Assigning Basic Settings
66
Default Settings on the Express Setup Page
72
Configuring Basic Security Settings
74
Understanding Express Security Settings
76
Using Vlans
76
Express Security Types
77
Express Security Limitations
79
Using the Express Security Page
79
CLI Configuration Examples
80
Configuring System Power Settings for 1130 and 1240 Series Access Points
85
Assigning an IP Address Using the CLI
86
Using a Telnet Session to Access the CLI
86
Configuring the 802.1X Supplicant
87
Creating a Credentials Profile
87
Applying the Credentials to an Interface or SSID
88
Applying the Credentials Profile to the Wired Port
88
Applying the Credentials Profile to an SSID Used for the Uplink
89
Creating and Applying EAP Method Profiles
90
Administering the Access Pointwireless Device Access
91
Disabling the Mode Button
92
Preventing Unauthorized Access to Your Access Point
93
Protecting Access to Privileged EXEC Commands
93
Default Password and Privilege Level Configuration
94
Setting or Changing a Static Enable Password
94
Protecting Enable and Enable Secret Passwords with Encryption
96
Configuring Username and Password Pairs
97
Configuring Multiple Privilege Levels
98
Setting the Privilege Level for a Command
98
Logging into and Exiting a Privilege Level
99
Controlling Access Point Access with RADIUS
99
Default RADIUS Configuration
100
Configuring RADIUS Login Authentication
100
Defining AAA Server Groups
102
Configuring RADIUS Authorization for User Privileged Access and Network Services
104
Displaying the RADIUS Configuration
105
Controlling Access Point Access with TACACS
105
Default TACACS+ Configuration
105
Configuring TACACS+ Login Authentication
105
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
107
Displaying the TACACS+ Configuration
107
Configuring Ethernet Speed and Duplex Settings
108
Configuring the Access Point for Wireless Network Management
108
Configuring the Access Point for Local Authentication and Authorization
109
Configuring the Authentication Cache and Profile
110
Configuring the Access Point to Provide DHCP Service
112
Setting up the DHCP Server
112
Monitoring and Maintaining the DHCP Server Access Point
114
Show Commands
114
Clear Commands
115
Debug Command
115
Configuring the Access Point for Secure Shell
115
Understanding SSH
115
Configuring SSH
116
Configuring Client ARP Caching
116
Understanding Client ARP Caching
116
Optional ARP Caching
116
Configuring ARP Caching
117
Managing the System Time and Date
117
Understanding Simple Network Time Protocol
117
Configuring SNTP
118
Configuring Time and Date Manually
118
Setting the System Clock
118
Displaying the Time and Date Configuration
119
Configuring the Time Zone
119
Configuring Summer Time (Daylight Saving Time)
120
Defining HTTP Access
122
Configuring a System Name and Prompt
122
Default System Name and Prompt Configuration
122
Configuring a System Name
122
Understanding DNS
123
Default DNS Configuration
123
Setting up DNS
124
Displaying the DNS Configuration
125
Creating a Banner
125
Default Banner Configuration
125
Configuring a Message-Of-The-Day Login Banner
125
Configuring a Login Banner
127
Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode
127
Migrating to Japan W52 Domain
127
Verifying the Migration
129
Configuring Multiple VLAN and Rate Limiting for Point-To-Multipoint Bridging
129
CLI Command
130
Configuring Radio Settings
131
Enabling the Radio Interface
132
Configuring the Role in Radio Network
132
Universal Workgroup Bridge Mode
135
Configuring Dual-Radio Fallback
135
Radio Tracking
136
Fast Ethernet Tracking
136
MAC-Address Tracking
136
Bridge Features Not Supported
137
Configuring Radio Data Rates
137
Access Points Send Multicast and Management Frames at Highest Basic Rate
138
Configuring MCS Rates
140
Configuring Radio Transmit Power
141
Limiting the Power Level for Associated Client Devices
143
Configuring Radio Channel Settings
144
802.11N Channel Widths
145
Dynamic Frequency Selection
146
CLI Commands
148
Confirming that DFS Is Enabled
148
Configuring a Channel
149
Blocking Channels from DFS Selection
149
Setting the 802.11N Guard Interval
150
Configuring Location-Based Services
151
Understanding Location-Based Services
151
Configuring LBS on Access Points
151
Enabling and Disabling World Mode
152
Disabling and Enabling Short Radio Preambles
153
Configuring Transmit and Receive Antennas
154
Enabling and Disabling Gratuitous Probe Response
155
Disabling and Enabling Aironet Extensions
156
Configuring the Ethernet Encapsulation Transformation Method
157
Enabling and Disabling Reliable Multicast to Workgroup Bridges
158
Enabling and Disabling Public Secure Packet Forwarding
159
Configuring Protected Ports
160
Configuring the Beacon Period and the DTIM
160
Configure RTS Threshold and Retries
161
Configuring the Maximum Data Retries
162
Configuring the Fragmentation Threshold
162
Enabling Short Slot Time for 802.11G Radios
163
Performing a Carrier Busy Test
163
Configuring Voip Packet Handling
163
Viewing Vowlan Metrics
164
Viewing Voice Reports
164
Viewing Wireless Client Reports
167
Viewing Voice Fault Summary
168
Configuring Voice Qos Settings
168
Configuring Voice Fault Settings
169
Configuring Multiple Ssids
171
Understanding Multiple Ssids
172
Effect of Software Versions on Ssids
172
Configuring Multiple Ssids
174
Default SSID Configuration
174
Creating an SSID Globally
174
Viewing Ssids Configured Globally
176
Using Spaces in Ssids
176
Using a RADIUS Server to Restrict Ssids
177
Configuring Multiple Basic Ssids
178
Requirements for Configuring Multiple Bssids
178
Guidelines for Using Multiple Bssids
178
Configuring Multiple Bssids
178
CLI Configuration Example
180
Displaying Configured Bssids
180
Assigning IP Redirection for an SSID
181
Guidelines for Using IP Redirection
182
Configuring IP Redirection
182
Including an SSID in an SSIDL IE
183
NAC Support for MBSSID
183
Configuring NAC for MBSSID
186
Configuring Spanning Tree Protocol
189
Understanding Spanning Tree Protocol
190
STP Overview
190
1300 And 350 Series Bridge Interoperability
191
Access Point/Bridge Protocol Data Units
191
Election of the Spanning-Tree Root
192
Spanning-Tree Timers
193
Creating the Spanning-Tree Topology
193
Spanning-Tree Interface States
193
Blocking State
195
Listening State
195
Learning State
195
Forwarding State
196
Disabled State
196
Configuring STP Features
196
Default STP Configuration
196
Configuring STP Settings
197
STP Configuration Examples
198
Root Bridge Without Vlans
198
Non-Root Bridge Without Vlans
199
Root Bridge with Vlans
199
Non-Root Bridge with Vlans
201
Displaying Spanning-Tree Status
202
Configuring an Access Point as a Local Authenticator
203
Understanding Local Authentication
204
Configuring a Local Authenticator
204
Guidelines for Local Authenticators
205
Configuration Overview
205
Configuring the Local Authenticator Access Point
205
Configuring Other Access Points to Use the Local Authenticator
208
Configuring EAP-FAST Settings
209
Configuring PAC Settings
209
Configuring an Authority ID
210
Configuring Server Keys
210
Possible PAC Failures Caused by Access Point Clock
210
Limiting the Local Authenticator to One Authentication Type
211
Unblocking Locked Usernames
211
Viewing Local Authenticator Statistics
211
Using Debug Messages
213
Configuring Cipher Suites and WEP
215
Understanding Cipher Suites and WEP
216
Configuring Cipher Suites and WEP
217
Creating WEP Keys
217
WEP Key Restrictions
219
Example WEP Key Setup
219
Enabling Cipher Suites and WEP
220
Matching Cipher Suites with WPA and CCKM
221
Enabling and Disabling Broadcast Key Rotation
221
Configuring Authentication Types
223
Understanding Authentication Types
224
Open Authentication to the Access Point
224
Shared Key Authentication to the Access Point
225
EAP Authentication to the Network
226
MAC Address Authentication to the Network
227
Combining MAC-Based, EAP, and Open Authentication
228
Using CCKM for Authenticated Clients
228
Using WPA Key Management
229
Software and Firmware Requirements for WPA, CCKM, CKIP, and WPA-TKIP
230
Configuring Authentication Types
232
Assigning Authentication Types to an SSID
232
Configuring WPA Migration Mode
235
Configuring Additional WPA Settings
236
Configuring MAC Authentication Caching
237
Configuring Authentication Holdoffs, Timeouts, and Intervals
238
Creating and Applying EAP Method Profiles for the 802.1X Supplicant
239
Creating an EAP Method Profile
240
Applying an EAP Profile to the Fast Ethernet Interface
240
Applying an EAP Profile to an Uplink SSID
241
Matching Access Point and Client Device Authentication Types
241
Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection
245
Services
245
Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services
245
Understanding WDS
246
Role of the WDS Device
246
Role of Access Points Using the WDS Device
247
Understanding Fast Secure Roaming
247
Understanding Layer 3 Mobility
249
Understanding Radio Management
249
Understanding Wireless Intrusion Detection Services
250
Configuring WDS
251
Guidelines for WDS
252
Requirements for WDS
252
Configuration Overview
252
Configuring Access Points as Potential WDS Devices
253
CLI Configuration Example
257
Configuring Access Points to Use the WDS Device
258
CLI Configuration Example
259
Configuring the Authentication Server to Support WDS
259
Configuring WDS Only Mode
263
Viewing WDS Information
264
Using Debug Messages
265
Configuring Fast Secure Roaming
265
Requirements for Fast Secure Roaming
265
Configuring Access Points to Support Fast Secure Roaming
266
CLI Configuration Example
268
Configuring Management Frame Protection
268
Management Frame Protection
268
Overview
269
Protection of Unicast Management Frames
269
Protection of Broadcast Management Frames
269
Client MFP for Access Points in Root Mode
269
Configuring Client MFP
270
Configuring Radio Management
272
CLI Configuration Example
273
Configuring Access Points to Participate in WIDS
274
Configuring the Access Point for Scanner Mode
274
Configuring the Access Point for Monitor Mode
274
Displaying Monitor Mode Statistics
275
Configuring Monitor Mode Limits
276
Configuring an Authentication Failure Limit
276
Configuring WLSM Failover
276
Resilient Tunnel Recovery
276
Active/Standby WLSM Failover
277
Configuring RADIUS and TACACS+ Servers
279
Configuring and Enabling RADIUS
279
Understanding RADIUS
280
RADIUS Operation
280
Configuring RADIUS
281
Default RADIUS Configuration
282
Identifying the RADIUS Server Host
282
Configuring RADIUS Login Authentication
285
Defining AAA Server Groups
287
Configuring RADIUS Authorization for User Privileged Access and Network Services
289
Configuring Packet of Disconnect
290
Starting RADIUS Accounting M
291
Selecting the CSID Format
292
Configuring Settings for All RADIUS Servers
293
Configuring the Access Point to Use Vendor-Specific RADIUS Attributes
294
Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication
295
Configuring Wispr RADIUS Attributes
296
Displaying the RADIUS Configuration
297
RADIUS Attributes Sent by the Access Point
298
Configuring and Enabling TACACS
301
Understanding TACACS
301
TACACS+ Operation
302
Configuring TACACS
302
Default TACACS+ Configuration
303
Identifying the TACACS+ Server Host and Setting the Authentication Key
303
Configuring TACACS+ Login Authentication
304
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
305
Starting TACACS+ Accounting
306
Displaying the TACACS+ Configuration
307
Configuring Vlans
309
Understanding Vlans
310
Related Documents
311
Incorporating Wireless Devices into Vlans
312
Configuring Vlans
312
Configuring a VLAN
313
Assigning Names to Vlans
315
Guidelines for Using VLAN Names
315
Creating a VLAN Name
316
Using a RADIUS Server to Assign Users to Vlans
316
Using a RADIUS Server for Dynamic Mobility Group Assignment
317
Viewing Vlans Configured on the Access Point
317
VLAN Configuration Example
318
Configuring Qos
321
Understanding Qos for Wireless Lans
322
Qos for Wireless Lans Versus Qos on Wired Lans
322
Impact of Qos on a Wireless LAN
322
Precedence of Qos Settings
323
Using Wi-Fi Multimedia Mode
324
Configuring Qos
325
Configuration Guidelines
325
Configuring Qos Using the Web-Browser Interface
325
The Qos Policies Advanced Page
329
Qos Element for Wireless Phones
329
IGMP Snooping
330
AVVID Priority Mapping
330
Wifi Multimedia (WMM)
330
Adjusting Radio Access Categories
330
Configuring Nominal Rates
332
Optimized Voice Settings
332
Configuring Call Admission Control
332
Qos Configuration Examples
334
Giving Priority to Voice Traffic
334
Giving Priority to Video Traffic
335
Configuring Filters
345
Understanding Filters
346
Configuring Filters Using the CLI
346
Configuring Filters Using the Web-Browser Interface
347
Configuring and Enabling MAC Address Filters
347
Creating a MAC Address Filter
348
Using MAC Address Acls to Block or Allow Client Association to the Access Point
350
Creating a Time-Based ACL
352
ACL Logging
353
CLI Configuration Example
353
Configuring and Enabling IP Filters
353
Creating an IP Filter
355
Configuring and Enabling Ethertype Filters
356
Creating an Ethertype Filter
357
Configuring SNMP
359
Understanding SNMP
360
SNMP Versions
360
SNMP Manager Functions
361
SNMP Agent Functions
362
SNMP Community Strings
362
Using SNMP to Access MIB Variables
362
Configuring SNMP
362
Default SNMP Configuration
363
Enabling the SNMP Agent
363
Configuring Community Strings
364
Specifying SNMP-Server Group Names
365
Configuring SNMP-Server Hosts
366
Configuring SNMP-Server Users
366
Configuring Trap Managers and Enabling Traps
366
Setting the Agent Contact and Location Information
368
Using the Snmp-Server View Command
368
SNMP Examples
368
Displaying SNMP Status
370
Configuring Repeater and Standby Access Points and Workgroup Bridge Mode
371
Understanding Repeater Access Points
372
Configuring a Repeater Access Point
373
Default Configuration
374
Guidelines for Repeaters
374
Setting up a Repeater
375
Aligning Antennas
376
Verifying Repeater Operation
376
Setting up a Repeater as a LEAP Client
377
Setting up a Repeater as a WPA Client
378
Understanding Hot Standby
379
Configuring a Hot Standby Access Point
379
Verifying Standby Operation
382
Understanding Workgroup Bridge Mode
383
Treating Workgroup Bridges as Infrastructure Devices or as Client Devices
384
Configuring a Workgroup Bridge for Roaming
385
Configuring a Workgroup Bridge for Limited Channel Scanning
385
Configuring the Limited Channel Set
385
Ignoring the CCX Neighbor List
386
Configuring a Client VLAN
386
Configuring Workgroup Bridge Mode
386
The Workgroup Bridge in a Lightweight Environment
388
Guidelines for Using Workgroup Bridges in a Lightweight Environment
388
Sample Workgroup Bridge Configuration
390
Managing Firmware and Configurations
391
Working with the Flash File System
392
Displaying Available File Systems
392
Setting the Default File System
393
Displaying Information about Files on a File System
393
Changing Directories and Displaying the Working Directory
393
Creating and Removing Directories
394
Copying Files
394
Deleting Files
395
Creating, Displaying, and Extracting Tar Files
395
Creating a Tar File
395
Displaying the Contents of a Tar File
396
Extracting a Tar File
397
Displaying the Contents of a File
397
Working with Configuration Files
397
Guidelines for Creating and Using Configuration Files
398
Configuration File Types and Location
399
Creating a Configuration File by Using a Text Editor
399
Copying Configuration Files by Using TFTP
399
Preparing to Download or Upload a Configuration File by Using TFTP
399
Downloading the Configuration File by Using TFTP
399
Uploading the Configuration File by Using TFTP
399
Copying Configuration Files by Using FTP
401
Preparing to Download or Upload a Configuration File by Using FTP
402
Downloading a Configuration File by Using FTP
402
Uploading a Configuration File by Using FTP
402
Copying Configuration Files by Using RCP
404
Preparing to Download or Upload a Configuration File by Using RCP
405
Downloading a Configuration File by Using RCP
405
Uploading a Configuration File by Using RCP
405
Clearing Configuration Information
407
Deleting a Stored Configuration File
408
Working with Software Images
408
Image Location on the Access Point
408
Tar File Format of Images on a Server or Cisco.com
409
Copying Image Files by Using TFTP
409
Preparing to Download or Upload an Image File by Using TFTP
409
Uploading an Image File by Using TFTP
409
Downloading an Image File by Using TFTP
410
Copying Image Files by Using FTP
412
Preparing to Download or Upload an Image File by Using FTP
412
Downloading an Image File by Using FTP
413
Uploading an Image File by Using FTP
413
Copying Image Files by Using RCP
417
Preparing to Download or Upload an Image File by Using RCP
417
Downloading an Image File by Using RCP
417
Uploading an Image File by Using RCP
417
Reloading the Image Using the Web Browser Interface
422
Browser HTTP Interface
422
Browser TFTP Interface
423
Configuring System Message Logging
425
Understanding System Message Logging
425
Configuring System Message Logging
426
System Log Message Format
426
Default System Message Logging Configuration
427
Disabling and Enabling Message Logging
428
Setting the Message Display Destination Device
429
Enabling and Disabling Timestamps on Log Messages
430
Enabling and Disabling Sequence Numbers in Log Messages
430
Defining the Message Severity Level
431
Limiting Syslog Messages Sent to the History Table and to SNMP
432
Setting a Logging Rate Limit
433
Configuring UNIX Syslog Servers
434
Logging Messages to a UNIX Syslog Daemon
434
Configuring the UNIX System Logging Facility
434
Displaying the Logging Configuration
436
Wireless Device Troubleshooting
437
Checking the Top Panel Indicators
438
Indicators on 1130 Series Access Points
442
Indicators on 1240 Series Access Points
445
Indicators on 1250 Access Points
447
Indicators on 1300 Outdoor Access Point/Bridges
450
Normal Mode LED Indications
450
Power Injector
452
Checking Power
453
Low Power Condition
453
Checking Basic Settings
454
Ssid
454
WEP Keys
454
Security Settings
454
Resetting to the Default Configuration
455
Using the MODE Button
455
Using the Web Browser Interface
456
Using the CLI
456
Reloading the Access Point Image
457
Using the MODE Button
458
Using the Web Browser Interface
458
Browser HTTP Interface
459
Browser TFTP Interface
459
Using the CLI
460
Obtaining the Access Point Image File
461
Obtaining TFTP Server Software
462
Appendix
463
Protocol Filters
463
Appendix A Protocol Filter
465
Appendix
469
Supported Mibs
469
MIB List
469
Appendix B Supported MIB
470
Using FTP to Access the MIB Files
470
Appendix
471
Error and Event Messages
471
Conventions
472
Appendix C Error and Event Message
473
Software Auto Upgrade Messages
473
Association Management Messages
475
Unzip Messages
476
802.11 Subsystem Messages
477
Inter-Access Point Protocol Messages
490
Local Authenticator Messages
491
WDS Messages
493
Mini IOS Messages
494
Access Point/Bridge Messages
495
Cisco Discovery Protocol Messages
495
External Radius Server Error Messages
496
LWAPP Error Messages
496
Sensor Messages
497
SNMP Error Messages
498
SSH Error Messages
499
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Cisco M10-RM and is the answer not in the manual?
Ask a question
Cisco M10-RM Specifications
General
Brand
Cisco
Model
M10-RM
Category
Wireless Access Point
Language
English
Related product manuals
Cisco Meraki
2 pages
Cisco Meraki MR36
18 pages
Cisco Meraki MR18
2 pages
Cisco Meraki MR46
17 pages
Cisco Meraki MR42
17 pages
Cisco Meraki MR76
26 pages
Cisco MERAKI MR34
14 pages
Cisco MERAKI MR72
19 pages
Cisco Meraki MR28
12 pages
Cisco Meraki MR33
13 pages
Cisco Meraki MR56
19 pages
Cisco Meraki MR46E
18 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
