Cisco WAP125 Administrator's Guide

On the networks that use IEEE 802.1X port-based network access control, a supplicant cannot gain access to
the network until the 802.1X authenticator grants access. If your network uses 802.1X, you must configure
802.1X authentication information on the WAP device, so that it can supply it to the authenticator.
To configure the 802.1X supplicant settings follow these steps:
Step 1
Click Security > 802.1X Supplicant.
Step 2
In the 802.1x Supplicant area, check Enable to enable the administrative mode.
Step 3
Configure the 802.1X operational status and basic settings:
• EAP Method — Choose the algorithm to be used for encrypting authentication user names and passwords. The
options are:
◦ MD5 — A hash function defined in RFC 3748 that provides basic security.
◦ PEAP — Protected Extensible Authentication Protocol, which provides a higher level of security than MD5
by encapsulating it within a TLS tunnel.
◦ TLS — Transport Layer Security, as defined in RFC 5216, an open standard that provides a high level of
security.
• Username — Enter the username.
• Password — Enter the password.
Step 4
In the Certificate File Upload area, you can upload a certificate file to the WAP device:
a) Choose either HTTP or TFTP as the transfer method.
b) If you selected HTTP, click Browse to select the file. See Connect Session Settings/HTTP/HTTPS Service Task for
more information on configuring the HTTP server settings.
c) If you selected TFTP, enter the filename and the TFTP Server IPv4 Address.
d) Click Upload. A confirmation window appears, followed by a progress bar to indicate the status of the upload.
Step 5
Click Save.
Rogue AP Detection
A Rogue AP is an access point that has been installed on a secure network without explicit authorization from
a system administrator. The rogue AP poses a security threat because anyone with access to the premises can
unconsciously or maliciously install an inexpensive wireless WAP device that can potentially allow unauthorized
parties to access the network.
The WAP device performs a RF scan on all channels to detect all APs in the vicinity of the network. If rogue
APs are detected, they are shown on the Rogue AP Detection page. If an AP listed as a rogue is legitimate, it
can be added to the Known AP List.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
32
System Configuration
Rogue AP Detection

Cisco WAP125 Specifications

General

2.4 GHz	Yes
MIMO type	Multi User MIMO
Modulation	16-QAM, 64-QAM, 256-QAM, BPSK, CCK, QPSK
Number of users	64 user(s)
Networking standards	IEEE 802.3af, IEEE 802.11ac
Spread spectrum method	DSSS, OFDM
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Maximum data transfer rate	867 Mbit/s
Security algorithms	WPA, WPA2
Number of SSID supported	8
Supported network protocols	IPv6, NTP, HTTP, HTTPS
USB 2.0 ports quantity	0
Ethernet LAN (RJ-45) ports	1
Output current	1 A
Output voltage	12 V
Power plug type	Type C
AC input voltage	100 - 240 V
AC input frequency	50 Hz
Placement	Desk
Certification	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, IEC 60950-1, EN 60950-1, FCC 15.247, 15.407; RSS-210; EN 300.328, EN 301.893; AS/NZS 4268.2003; FCC 15.107 15.109, ICES-003, EN 301.489-1 -17
Product color	White
Recommended usage	Indoor
Cable lock slot type	Kensington
Antenna type	Internal
Antenna gain level (max)	5.63 dBi
Flash memory	128 MB
Internal memory	256 MB
Operating system installed	Linux
Storage temperature (T-T)	-20 - 70 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 90 %
Operating relative humidity (H-H)	10 - 85 %
Country of origin	China
Quantity per pack	1 pc(s)
Package depth	188.976 mm
Package width	168.91 mm
Package height	80.01 mm
Package weight	1133.98 g

Weight and Dimensions

Width	123.19 mm
Height	31.75 mm
Weight	303.91 g