Name: Cisco M10-RM
Brand: Cisco
Rating: 4 (1 reviews)

To Next Page

To Previous Page

12-22

Cisco IOS Software Configuration Guide for Cisco Aironet Access Points

OL-14209-01

Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection

Configuring Fast Secure Roaming

Configuring Access Points to Support Fast Secure Roaming

To support fast, secure roaming, the access points on your wireless LAN must be configured to

participate in WDS and they must allow CCKM authenticated key management for at least one SSID.

Follow these steps to configure CCKM for an SSID:

Step 1 Browse to the Encryption Manager page on the access point GUI. Figure 12-14 shows the top section of

the Encryption Manager page.

Figure 12-14 Encryption Manager Page

Step 2

Click the Cipher button.

Step 3 Select CKIP + CMIC from the Cipher drop-down menu.

Step 4 Click Apply.

Step 5 Browse to the Global SSID Manager page. Figure 12-15 shows the top sections of the Global SSID

Manager page.

Default Chapter3
- Table of Contents3
- Related Publications25
- Overview27
- Features28
  - Features Introduced in this Release28
- Management Options28
- Roaming Client Devices29
- Network Configuration Examples29
Using the Web-Browser Interface33
- Using the Web-Browser Interface for the First Time35
- Using the Management Pages in the Web-Browser Interface35
  - Using Action Buttons36
  - Character Restrictions in Entry Fields37
- Enabling HTTPS for Secure Browsing37
  - CLI Configuration Example45
  - Deleting an HTTPS Certificate45
- Using Online Help46
  - Changing the Location of Help Files46
- Disabling the Web-Browser Interface47
Using the Command-Line Interface49
- Cisco IOS Command Modes50
- Getting Help51
- Abbreviating Commands51
- Using no and Default Forms of Commands52
- Understanding CLI Messages52
- Using Command History52
- Using Editing Features54
- Searching and Filtering Output of Show and more Commands56
- Accessing the CLI57
  - Opening the CLI with Telnet57
  - Opening the CLI with Secure Shell57
Configuring the Access Point for the First Time59
- Before You Start60
  - Resetting the Device to Default Settings60
- Obtaining and Assigning an IP Address62
  - Default IP Address Behavior62
- Connecting to the 1100 Series Access Point Locally63
- Connecting to the 1130 Series Access Point Locally64
- Connecting to the 1200, 1230, 1240, and 1250 Series Access Points Locally64
- Connecting to the 1300 Series Access Point/Bridge Locally65
- Default Radio Settings65
- Assigning Basic Settings66
  - Default Settings on the Express Setup Page72
- Configuring Basic Security Settings74
  - Understanding Express Security Settings76
- Configuring System Power Settings for 1130 and 1240 Series Access Points85
- Assigning an IP Address Using the CLI86
- Using a Telnet Session to Access the CLI86
- Configuring the 802.1X Supplicant87
  - Creating a Credentials Profile87
  - Applying the Credentials to an Interface or SSID88
Administering the Access Pointwireless Device Access91
- Disabling the Mode Button92
- Preventing Unauthorized Access to Your Access Point93
- Protecting Access to Privileged EXEC Commands93
- Controlling Access Point Access with RADIUS99
- Controlling Access Point Access with TACACS105
  - Default TACACS+ Configuration105
- Configuring TACACS+ Login Authentication105
- Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services107
- Displaying the TACACS+ Configuration107
- Configuring Ethernet Speed and Duplex Settings108
- Configuring the Access Point for Wireless Network Management108
- Configuring the Access Point for Local Authentication and Authorization109
- Configuring the Authentication Cache and Profile110
- Configuring the Access Point to Provide DHCP Service112
  - Setting up the DHCP Server112
  - Monitoring and Maintaining the DHCP Server Access Point114
- Configuring the Access Point for Secure Shell115
  - Understanding SSH115
  - Configuring SSH116
- Configuring Client ARP Caching116
  - Understanding Client ARP Caching116
    - Optional ARP Caching116
  - Configuring ARP Caching117
- Managing the System Time and Date117
- Defining HTTP Access122
- Configuring a System Name and Prompt122
- Creating a Banner125
Configuring Radio Settings131
- Enabling the Radio Interface132
- Configuring the Role in Radio Network132
  - Universal Workgroup Bridge Mode135
- Configuring Dual-Radio Fallback135
  - Radio Tracking136
  - Fast Ethernet Tracking136
  - MAC-Address Tracking136
  - Bridge Features Not Supported137
- Configuring Radio Data Rates137
  - Access Points Send Multicast and Management Frames at Highest Basic Rate138
- Configuring MCS Rates140
- Configuring Radio Transmit Power141
  - Limiting the Power Level for Associated Client Devices143
- Configuring Radio Channel Settings144
  - 802.11N Channel Widths145
  - Dynamic Frequency Selection146
  - CLI Commands148
  - Setting the 802.11N Guard Interval150
- Configuring Location-Based Services151
  - Understanding Location-Based Services151
  - Configuring LBS on Access Points151
- Enabling and Disabling World Mode152
- Disabling and Enabling Short Radio Preambles153
- Configuring Transmit and Receive Antennas154
- Enabling and Disabling Gratuitous Probe Response155
- Disabling and Enabling Aironet Extensions156
- Configuring the Ethernet Encapsulation Transformation Method157
- Enabling and Disabling Reliable Multicast to Workgroup Bridges158
- Enabling and Disabling Public Secure Packet Forwarding159
  - Configuring Protected Ports160
- Configuring the Beacon Period and the DTIM160
- Configure RTS Threshold and Retries161
- Configuring the Maximum Data Retries162
- Configuring the Fragmentation Threshold162
- Enabling Short Slot Time for 802.11G Radios163
- Performing a Carrier Busy Test163
- Configuring Voip Packet Handling163
- Viewing Vowlan Metrics164
  - Viewing Voice Reports164
  - Viewing Wireless Client Reports167
  - Viewing Voice Fault Summary168
  - Configuring Voice Qos Settings168
  - Configuring Voice Fault Settings169
Configuring Multiple Ssids171
- Understanding Multiple Ssids172
  - Effect of Software Versions on Ssids172
- Configuring Multiple Ssids174
- Configuring Multiple Basic Ssids178
- Assigning IP Redirection for an SSID181
  - Guidelines for Using IP Redirection182
  - Configuring IP Redirection182
- Including an SSID in an SSIDL IE183
- NAC Support for MBSSID183
  - Configuring NAC for MBSSID186
Configuring Spanning Tree Protocol189
- Understanding Spanning Tree Protocol190
- Configuring STP Features196
- Displaying Spanning-Tree Status202
Configuring an Access Point as a Local Authenticator203
- Understanding Local Authentication204
- Configuring a Local Authenticator204
Configuring Cipher Suites and WEP215
- Understanding Cipher Suites and WEP216
- Configuring Cipher Suites and WEP217
Configuring Authentication Types223
- Understanding Authentication Types224
- Configuring Authentication Types232
- Matching Access Point and Client Device Authentication Types241
Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection245
Services245
- Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services245
- Understanding WDS246
  - Role of the WDS Device246
  - Role of Access Points Using the WDS Device247
- Understanding Fast Secure Roaming247
- Understanding Layer 3 Mobility249
- Understanding Radio Management249
- Understanding Wireless Intrusion Detection Services250
- Configuring WDS251
- Configuring Fast Secure Roaming265
- Configuring Management Frame Protection268
- Management Frame Protection268
- Configuring Radio Management272
  - CLI Configuration Example273
- Configuring Access Points to Participate in WIDS274
- Configuring WLSM Failover276
  - Resilient Tunnel Recovery276
  - Active/Standby WLSM Failover277
Configuring RADIUS and TACACS+ Servers279
- Configuring and Enabling RADIUS279
- Configuring and Enabling TACACS301
Configuring Vlans309
- Understanding Vlans310
  - Related Documents311
  - Incorporating Wireless Devices into Vlans312
- Configuring Vlans312
- VLAN Configuration Example318
Configuring Qos321
- Understanding Qos for Wireless Lans322
- Configuring Qos325
- Qos Configuration Examples334
  - Giving Priority to Voice Traffic334
  - Giving Priority to Video Traffic335
Configuring Filters345
- Understanding Filters346
- Configuring Filters Using the CLI346
- Configuring Filters Using the Web-Browser Interface347
Configuring SNMP359
- Understanding SNMP360
- Configuring SNMP362
- Displaying SNMP Status370
Configuring Repeater and Standby Access Points and Workgroup Bridge Mode371
- Understanding Repeater Access Points372
- Configuring a Repeater Access Point373
- Aligning Antennas376
- Understanding Hot Standby379
- Configuring a Hot Standby Access Point379
  - Verifying Standby Operation382
- Understanding Workgroup Bridge Mode383
- Configuring Workgroup Bridge Mode386
- The Workgroup Bridge in a Lightweight Environment388
  - Guidelines for Using Workgroup Bridges in a Lightweight Environment388
    - Sample Workgroup Bridge Configuration390
Managing Firmware and Configurations391
- Working with the Flash File System392
- Working with Configuration Files397
- Working with Software Images408
Configuring System Message Logging425
- Understanding System Message Logging425
- Configuring System Message Logging426
- Displaying the Logging Configuration436
Wireless Device Troubleshooting437
- Checking the Top Panel Indicators438
- Checking Power453
- Low Power Condition453
- Checking Basic Settings454
- Resetting to the Default Configuration455
- Reloading the Access Point Image457
Appendix463
Protocol Filters463
Appendix A Protocol Filter465
Appendix469
Supported Mibs469
- MIB List469
Appendix B Supported MIB470
- Using FTP to Access the MIB Files470
Appendix471
Error and Event Messages471
- Conventions472
Appendix C Error and Event Message473
- Software Auto Upgrade Messages473
- Association Management Messages475
- Unzip Messages476
- 802.11 Subsystem Messages477
- Inter-Access Point Protocol Messages490
- Local Authenticator Messages491
- WDS Messages493
- Mini IOS Messages494
- Access Point/Bridge Messages495
- Cisco Discovery Protocol Messages495
- External Radius Server Error Messages496
- LWAPP Error Messages496
- Sensor Messages497
- SNMP Error Messages498
- SSH Error Messages499

Brand	Cisco
Model	M10-RM
Category	Wireless Access Point
Language	English

Cisco M10-RM User Manual

Table of Contents

Questions and Answers:

Cisco M10-RM Specifications

Related product manuals