hit counter script
Cisco WAP571 Administration Manual
  1. Manuals
  2. Brands
  3. Cisco Manuals
  4. Wireless Access Point
  5. WAP571
  6. Administration manual

Cisco WAP571 Administration Manual

Wireless-ac/n premium dual radio access point with poe
Hide thumbs Also See for WAP571:
Table of Contents

Advertisement

Quick Links

ADMINISTRATION
GUIDE
Cisco WAP571 Wireless-AC/N Premium Dual Radio Access
Point with PoE
Cisco WAP571E Wireless-AC/N Premium Dual Radio Out-
door Access Point

Advertisement

Table of Contents
loading

Related Manuals for Cisco WAP571

Summary of Contents for Cisco WAP571

  • Page 1 ADMINISTRATION GUIDE Cisco WAP571 Wireless-AC/N Premium Dual Radio Access Point with PoE Cisco WAP571E Wireless-AC/N Premium Dual Radio Out- door Access Point...

  • Page 3: Table Of Contents

    TSPEC Status and Statistics TSPEC AP Statistics Radio Statistics Email Alert Status Chapter 3: Administration System Settings User Accounts Adding a User Changing a User Password Time Settings Log Settings Configuring the Persistent Log Remote Log Server Cisco WAP571/E Administration Guide...
  • Page 4 Downloading a Configuration File Configuration Files Properties Copy/Save Configuration Reboot Discovery—Bonjour Packet Capture Local Packet Capture Remote Packet Capture Packet Capture File Download Support Information Spanning Tree Settings Chapter 4: LAN Port Settings VLAN Configuration IPv4 Setting IPv6 Setting Cisco WAP571/E Administration Guide...
  • Page 5 Scope of Scheduler Rules Scheduler Association MAC Filtering Configuring a MAC Filter List Locally on the WAP Device Configuring MAC Authentication on the RADIUS Server Bridge WEP on WDS Links WPA/PSK on WDS Links Workgroup Bridge Quality of Service Cisco WAP571/E Administration Guide...
  • Page 6 Client QoS Global Settings Class Map Adding a Class Map Policy Map Client QoS Association QoS Status Chapter 9: ACL ACL Rule ACL Association ACL Status Chapter 10: SNMP SNMP Overview General SNMP Settings Views Groups Users Targets Cisco WAP571/E Administration Guide...
  • Page 7 Viewing Channel Assignments and Setting Locks Configuring Advanced Settings Wireless Neighborhood Viewing Details for a Single Point Setup Member Cluster Firmware Upgrade Appendix A: Deauthentication Message Reason Codes Deauthentication Reason Code Table Appendix B: Where to Go From Here Cisco WAP571/E Administration Guide...
  • Page 8 Contents Cisco WAP571/E Administration Guide...

  • Page 9: Chapter 1: Getting Started

    IPv6 address. • When using Internet Explorer 8, you can configure security settings from Internet Explorer. Select Tools > Internet Options and then select the Security tab. Select Local Intranet and select Sites. Select Advanced and Cisco WAP571/E Administration Guide...

  • Page 10: Logging Out

    To create a new Single Point Setup of WAP devices, select Create a New Cluster STEP 4 and specify a New Cluster Name. When you configure your devices with the same cluster name and enable Single Point Setup mode on other WAP devices, they automatically join the group. Cisco WAP571/E Administration Guide...
  • Page 11 System Security. Click Next. The Wizard displays the Enable Security- Assign the VLAN ID For Your STEP 13 Wireless Network window. Enter a VLAN ID for traffic received on the wireless network. STEP 14 Cisco WAP571/E Administration Guide...
  • Page 12 If you click Yes, the Wizard displays the Enable Captive Portal - Name Your Guest Network window. Specify a Guest Network Name for Radio 1. For the WAP571/E device, select STEP 18 whether the guest network uses Radio 1 or Radio 2.

  • Page 13: Getting Started

    Configure LAN Settings Configure Single Point Setup Single Point Setup Overview Device System Summary System Summary Status Wireless Status Network Interfaces Quick Change Account Password User Accounts Access Upgrade Device Firmware Manage Firmware Backup/Restore Configuration Download/Backup Configuration File Cisco WAP571/E Administration Guide...

  • Page 14: Window Navigation

    Button Name Description (User) The account name (Administrator or Guest) of the user logged into the AP. The factory default user name is cisco. Log Out Click to log out of the web-based AP configuration utility. Language Hover the mouse pointer over the button, and select your language.
  • Page 15 Deletes an entry in a table. Select an entry first. Edit Edits or modifies an existing entry. Select an entry first. Refresh Redisplays the current page with the latest data. Save Saves the settings or configuration. Update Updates the new information to the startup configuration. Cisco WAP571/E Administration Guide...
  • Page 16 Getting Started Window Navigation Cisco WAP571/E Administration Guide...

  • Page 17: Chapter 2: Status And Statistics

    • Traffic Statistics • Wireless Multicast Forwarding Statistics • WorkGroup Bridge Transmit/Receive • Associated Clients • TSPEC Client Associations • TSPEC Status and Statistics • TSPEC AP Statistics • Radio Statistics • Email Alert Status • Cisco WAP571/E Administration Guide...

  • Page 18: System Summary

    The System Summary page shows this information: • PID VID—The WAP hardware model and version. • Serial Number—The serial number of the Cisco WAP device. • Base MAC Address—The WAP MAC address. • Firmware Version (Active Image)—The firmware version number of the active image.

  • Page 19: Network Interfaces

    IP Address—The IP address of the WAP device. Subnet Mask—The subnet mask of the WAP device. Default Gateway—The default gateway of the WAP device. Domain Name Server-1—The IP address of the domain name server 1 used by the WAP device. Cisco WAP571/E Administration Guide...
  • Page 20 Eth—The interface is a tagged or untagged member of the VLAN Click the Edit link to change any of these settings. You will be redirected to the VLAN Configuration page. • Radio Status—Displays information for the wireless radio interfaces, including: Cisco WAP571/E Administration Guide...

  • Page 21: Traffic Statistics

    WAP was last started. If you reboot the WAP, these figures indicate transmit and receive totals since the reboot. To show the Traffic Statistics page, select Status and Statistics > Traffic Statistics. Cisco WAP571/E Administration Guide...

  • Page 22: Wireless Multicast Forwarding Statistics

    Transmit and Receive Statistics • Network Interface—Name of the Ethernet interface and each VAP and WDS interface. WLAN0 and WLAN1 precede the VAP interface name to indicate the radio interface (WLAN0 represents radio 1 and WLAN1 represents radio 2). Cisco WAP571/E Administration Guide...
  • Page 23 (WLAN0 represents radio 1 and WLAN1 represents radio 2). • Multicast-Group—Shows Multicast group IP address. • Stations—Shows Multicast group Station MAC address. • Packets—Shows Multicast group stations packets received. You can click Refresh to refresh the screen and show the most current information. Cisco WAP571/E Administration Guide...

  • Page 24: Workgroup Bridge Transmit/Receive

    You can click Refresh to refresh the screen and show the most current information. Associated Clients You can use the Associated Clients page to view the client stations associated with a particular access point. To show the Associated Clients page, select Status and Statistics > Associated Clients. Cisco WAP571/E Administration Guide...
  • Page 25 Drop Packets—Number of packets dropped after being received (transmitted). Drop Bytes—Number of bytes that dropped after being received (transmitted). TS Violate Packets (From Station)—Number of packets sent from a client STA to the WAP device in excess of its active Traffic Stream (TS) Cisco WAP571/E Administration Guide...

  • Page 26: Tspec Client Associations

    Network Interface—Radio interface used by the client. WLAN0 represents radio 1 and WLAN1 represents radio 2. • SSID—Service set identifier associated with this TS client. • Station—Client station MAC address. • TS Identifier—TSPEC Traffic Session Identifier (range 0 to 7). Cisco WAP571/E Administration Guide...
  • Page 27 Direction—The traffic direction for this TS. Direction can be one of these options: uplink—From client to device. downlink—From device to client. bidirectional • From Station—Shows the number of packets and bytes received from the wireless client. Packets—Number of packets in excess of an admitted TSPEC. Cisco WAP571/E Administration Guide...

  • Page 28: Tspec Status And Statistics

    Access Category—Current Access Category associated with this Traffic Stream (voice or video). • Status—Whether the TSPEC session is enabled (up) or not (down) for the corresponding Access Category. Status is a configuration status (it does not necessarily represent the current NOTE session activity). Cisco WAP571/E Administration Guide...
  • Page 29 Total Video Bytes—Total TS video bytes sent (in Transmit table) or received (in Received table) by this WAP device for this VAP. You can click Refresh to refresh the screen and show the most current information. Cisco WAP571/E Administration Guide...

  • Page 30: Tspec Ap Statistics

    To view the Radio Statistics page, select Status and Statistics > Radio Statistics in the navigation pane. For the WAP571/E device, select the Radio for which you want to view statistics. • Packets Received—Total packets received by the WAP device.
  • Page 31 Multiple Retry Count—Number of times an MSDU is successfully transmitted after more than one retry. • Frames Transmitted Count—Count of each successfully transmitted MSDU. You can click Refresh to refresh the screen and show the most current information. Cisco WAP571/E Administration Guide...

  • Page 32: Email Alert Status

    Service—The software component associated with the event. • Description—A description of the event. You can click Refresh to refresh the screen and show the most current information. You can click Clear All to clear all entries from the log. Cisco WAP571/E Administration Guide...

  • Page 33: Chapter 3: Administration

    LED Display • Management Access ControlManagement Access Control • Manage Firmware • Download/Backup Configuration File • Configuration Files Properties • Copy/Save Configuration • Reboot • Discovery—Bonjour • Packet Capture • Support Information • Spanning Tree Settings Cisco WAP571/E Administration Guide...

  • Page 34: System Settings

    One management user is configured on the WAP device by default: • User Name: cisco • Password: cisco You can use the User Accounts page to configure up to four additional users and to change a user password. Cisco WAP571/E Administration Guide...

  • Page 35: Adding A User

    Select Administration > User Accounts in the navigation pane. STEP 1 The User Account Table shows the currently configured users. The user cisco is preconfigured in the system to have Read/Write privileges. All other users can have Read Only Access, but not Read/Write access.

  • Page 36: Time Settings

    Select Administration > User Accounts in the navigation pane. STEP 1 The User Account Table shows the currently configured users. The user cisco is preconfigured in the system to have Read/Write privileges. The password for the user cisco can be changed.
  • Page 37 There is an arrow next to System Time to set time from current computer if NOTE you want to use the time and date of your computer. • Time Zone—Select the time zone for your location. Cisco WAP571/E Administration Guide...

  • Page 38: Log Settings

    Only enable persistent logging to debug a problem. Make sure that you disable persistent logging after you finish debugging the problem. To configure persistent logging: Select Administration > Log Settings in the navigation pane. STEP 1 Configure the parameters: STEP 2 Cisco WAP571/E Administration Guide...

  • Page 39: Remote Log Server

    Triggers scripted management operations and alerts To specify a host on your network to serve as a remote log server: Select Administration > Log Settings in the navigation pane. STEP 1 Configure the parameters: STEP 2 Cisco WAP571/E Administration Guide...

  • Page 40: Email Alert

    Do not use your personal email address, which would unnecessarily expose your personal email login credentials. Use a separate email account instead. Also be aware that many email accounts keep a copy of all sent messages by default. Cisco WAP571/E Administration Guide...
  • Page 41 A hostname can consist of one or more labels, which are sets of up to 63 alphanumeric characters. If a hostname includes multiple labels, each is separated by a period (.). The entire series of labels and periods can be up to 253 characters long. Cisco WAP571/E Administration Guide...

  • Page 42: Email Alert Examples

    Username = Your full email address you can use to login to your email account associated with the above server Password = xxxxxxxx is a valid password of your valid email account To Email Address 1 = myemail@gmail.com Windows Live Hotmail Windows Live Hotmail recommends the following settings: Cisco WAP571/E Administration Guide...

  • Page 43: Led Display

    When enabled, the LED indicates corresponding status and activity of the WAP device. To change the LED display: Select Administration > LED Display in the navigation pane. STEP 1 Select Enable/ Disable/ Associate Scheduler from the drop-down selection. STEP 2 Cisco WAP571/E Administration Guide...

  • Page 44: Http/Https Service

    WAP device configuration utility. When the configured timeout is reached, the user is automatically logged off. The range is from 1 to 60 minutes. The default is 10 minutes. Configure HTTP and HTTPS services: STEP 3 Cisco WAP571/E Administration Guide...

  • Page 45: Managing Ssl Certificates

    In the Certificate File Status area, you can view whether a certificate currently exists on the WAP device, and view this information about it: • Certificate File Present • Certificate Expiration Date • Certificate Issuer Common Name Cisco WAP571/E Administration Guide...

  • Page 46: Management Access Control

    Verify any IP address that you enter. If you enter an IP address that does not match CAUTION your Administrative computer, you will lose access to the configuration interface. It is highly recommend to give the Administrative computer a static IP address, so the address does not change over time. Cisco WAP571/E Administration Guide...

  • Page 47: Manage Firmware

    When you upgrade the firmware, the access point retains the existing configuration NOTE information. Swapping the Firmware Image To swap the firmware image running on the AP: Select Administration > Manage Firmware in the navigation pane. STEP 1 Click Swap Active Image. STEP 2 Cisco WAP571/E Administration Guide...

  • Page 48: Tftp Upgrade

    When the process is complete the access point restarts and resumes normal operation. To verify that the firmware upgrade completed successfully, log into the user STEP 5 interface and display the Upgrade Firmware page and view the active firmware version. Cisco WAP571/E Administration Guide...

  • Page 49: Http Upgrade

    24 hours, it is automatically saved to a Mirror Configuration file. The Mirror Configuration file is a snapshot of a past Startup Configuration. The Mirror Configuration is preserved across factory resets, so it can be used to Cisco WAP571/E Administration Guide...

  • Page 50: Backing Up A Configuration File

    Mirror Configuration to the Startup Configuration. Click Save to begin the backup. For HTTP backups, a window appears to enable STEP 7 you to browse to the desired location for saving the file. Cisco WAP571/E Administration Guide...

  • Page 51: Downloading A Configuration File

    Ensure that power to the AP remains uninterrupted while the configuration file is CAUTION downloading. If a power failure occurs while downloading the configuration file, the file is lost and the process must be restarted. Cisco WAP571/E Administration Guide...

  • Page 52: Configuration Files Properties

    Startup Configuration—Configuration file type used when the WAP device last booted. This does not include any configuration changes applied but not yet saved to the WAP device. • Backup Configuration—Backup configuration file type saved on the WAP device. Cisco WAP571/E Administration Guide...

  • Page 53: Reboot

    Reboot to Factory Default—Reboots the WAP using the factory default configuration file. Any customized settings are lost. A window appears to enable you to confirm or cancel the reboot. The current management session might be terminated. Click OK to reboot. STEP 3 Cisco WAP571/E Administration Guide...

  • Page 54: Discovery-Bonjour

    The AP advertises these service types: • Cisco-specific device description (csco-sb)—This service enables clients to discover Cisco WAP devices and other products deployed in business networks. • Management user interfaces—This service identifies the management interfaces available on the WAP device (HTTP, HTTPS and SNMP).
  • Page 55 In promiscuous mode, the radio receives all traffic on the channel, including traffic that is not destined to this WAP device. While the radio is operating in promiscuous mode, it continues serving associated clients. Packets not destined to the WAP device are not forwarded. Cisco WAP571/E Administration Guide...

  • Page 56: Local Packet Capture

    STEP 2 • Capture Interface—Enter a capture interface type for packet capture: radio1—802.11 traffic on the radio interface Radio 1. radio2—802.11 traffic on Radio 2. eth0—802.3 traffic on the Ethernet port. wlan0—VAP0 traffic on Radio 1. Cisco WAP571/E Administration Guide...
  • Page 57 • Packet Capture Time—Elapsed capture time. • Packet Capture File Size—The current capture file size. Click Refresh to show the latest data from the WAP device. To stop a packet file capture, click Stop Capture. NOTE Cisco WAP571/E Administration Guide...

  • Page 58: Remote Packet Capture

    Wireshark to the WAP device. The port range is from 1025 to 65530. If you want to save the settings for use at another time, click Save. STEP 5 Click Start Capture. STEP 6 To initiate the Wireshark network analyzer tool for Microsoft Windows: Cisco WAP571/E Administration Guide...
  • Page 59 VAP0 traffic on radio 1 -- rpcap://[192.168.1.220]:2002/wlan0 802.11 traffic -- rpcap://[192.168.1.220]:2002/radio1 At WAP571/E, VAP1 ~ VAP7 traffic for radio 1 -- rpcap://[192.168.1.220]:2002/wlan0vap1 ~ wlan0vap7 At WAP571/E, VAP1 ~ VAP7 traffic for radio 2 -- rpcap://[192.168.1.220]:2002/wlan1vap1 ~ wlan1vap7 You can trace up to four interfaces on the WAP device at the same time. However, you must start a separate Wireshark session for each interface.
  • Page 60 WAP device from forwarding captured beacon packets to the Wireshark tool. To reduce the performance impact of capturing the 802.11 beacons, disable the capture beacons mode. Cisco WAP571/E Administration Guide...

  • Page 61: Packet Capture File Download

    MAC and IP addresses, the administrative and operational status of features, user-configured settings, traffic statistics, and more. You can provide the text file to technical support personnel to assist them in troubleshooting problems. Cisco WAP571/E Administration Guide...

  • Page 62: Spanning Tree Settings

    Spanning Tree Settings Use the Spanning Tree Settings page to configure the STP settings on the Cisco WAP571/E. To configure the STP settings on the Cisco WAP571/E: Select Administration >...

  • Page 63: Chapter 4: Lan

    Port Speed—In review mode, it shows the current port speed. In edit mode, if Auto Negotiation is disabled, select a port speed such as 100 Mbps or 10 Mbps. 1000 Mbps speed is only supported through Auto-Negotiation enabled). Cisco WAP571/E Administration Guide...

  • Page 64: Vlan Configuration

    Click Save. The changes are saved to the Startup Configuration. STEP 3 The WAP571/E always bundled the two Eth0 and Eth1 to be link aggregation mode. NOTE The link partner must also support link aggregation. Eth1 will always follows Eth0 configurations.

  • Page 65: Ipv4 Setting

    IPv4 Setting Use the IPv4 Setting page to configure the static or dynamic IPv4 address assignment. To configure the IPv4 address settings: Select LAN > IPv4 Setting. STEP 1 Configure these IPv4 settings: STEP 2 Cisco WAP571/E Administration Guide...

  • Page 66: Ipv6 Setting

    IPv6 Setting Use the IPv6 Setting page to configure the WAP device to use IPv6 address. To configure IPv6 address settings: Select LAN > IPv6 Setting. STEP 1 Configure these parameters: STEP 2 Cisco WAP571/E Administration Guide...
  • Page 67 Blank (no value)—No IP address is assigned or the assigned address is not operational. • IPv6 Autoconfigured Global Addresses—If the WAP device has been assigned one or more IPv6 addresses automatically, the addresses are listed. Cisco WAP571/E Administration Guide...

  • Page 68: Ipv6 Tunnel

    IPv6 Tunnel The WAP571/E device supports the Intra-Site Automatic Tunnel Addressing Protocol (ISATAP). ISATAP enables the WAP device to transmit IPv6 packets encapsulated within IPv4 packets over the LAN. The protocol enables the WAP device to communicate with remote IPv6-capable hosts even when the LAN that connects them does not support IPv6.

  • Page 69: Lldp

    LAN. The AP also supports the Link Layer Discovery Protocol for Media Endpoint Devices (LLDP- MED), which standardizes additional information elements that devices can pass to each other to improve network management. To configure LLDP settings: Cisco WAP571/E Administration Guide...
  • Page 70 PSE does not have enough capacity to supply power to all connected devices. The PoE priority can be one of the following: Critical High Unknown Click Save. The settings are saved to the system. STEP 3 Cisco WAP571/E Administration Guide...

  • Page 71: Chapter 5: Wireless

    In the Global Settings area, configure the TSPEC Violation Interval, which is the STEP 2 time interval in seconds for the WAP device to report associated clients that do not adhere to mandatory admission control procedures. The reporting occurs Cisco WAP571/E Administration Guide...
  • Page 72 802.11b/g—802.11b and 802.11g clients can connect to the WAP device. 802.11b/g/n (default)—802.11b, 802.11g, and 802.11n clients operating in the 2.4-GHz frequency can connect to the WAP device. 802.11n 2.4-GHz—Only 802.11n clients operating in the 2.4-GHz frequency can connect to the WAP device. Cisco WAP571/E Administration Guide...
  • Page 73 Dedicated Spectrum Analyzer or Disable. The default is Disable. In the Advanced Settings area, configure these settings: STEP 5 • DFS Support—This field is available only if the selected radio mode operates in the 5-GHz frequency. Cisco WAP571/E Administration Guide...
  • Page 74 800 nanoseconds to 400 nanoseconds. Reducing the guard interval can yield a 10-percent improvement in data throughput. The client with which the WAP device is communicating must also support the short guard interval. Select one of these options: Cisco WAP571/E Administration Guide...
  • Page 75 WAP device at every beacon. If you set this field to 10, clients check on every 10th beacon. • Fragmentation Threshold—The frame size threshold in bytes. The valid integer must be even and in the range of 256 to 2346. The default is 2346. Cisco WAP571/E Administration Guide...
  • Page 76 RTS threshold is used only for legacy 802.11 data frames (i.e. not for 802.11n or 802.11ac). In the case of 802.11n and 802.11ac, AMPDU transmissions are protected by an RTS/CTS exchange, regardless of the frame lengths. Cisco WAP571/E Administration Guide...
  • Page 77 WAP device at any one time. You can enter an integer between 0 and 200. The default is 200 stations. The dual-radio WAP571/E device can support up to 400 clients total. • Transmit Power—A percentage value for the transmit power level for this WAP device.
  • Page 78 TSPEC to give QoS-capable devices priority for time-sensitive traffic. • TSPEC Voice ACM Mode—Regulates mandatory admission control (ACM) for the voice access category. By default, TSPEC Voice ACM mode is off. The options are: Cisco WAP571/E Administration Guide...
  • Page 79 256QAM VHT rates not specified by the 802.11ac Draft. The rates are all VHT LDPC mode, MCS 9 Nss 1 20Mhz, MCS 9 Nss 2 20Mhz, MCS 6 Nss 3 80Mhz. The VHT feature is supported for 802.11ac PHY. Cisco WAP571/E Administration Guide...

  • Page 80: Rogue Ap Detection

    APs, click Enable next to AP Detection for Radio 1 or Radio 2 and then click Save. Rogue AP detection does not have a refresh method and the SSID are retained in the database once detected. Cisco WAP571/E Administration Guide...
  • Page 81 Privacy—Indicates whether there is any security on the rogue device: Off indicates that the Security mode on the rogue device is set to None (no security). On indicates that the rogue device has some security in place. Cisco WAP571/E Administration Guide...
  • Page 82 (dB) appears. • Beacons—The total number of beacons received from the rogue AP since it was first discovered. • Last Beacon—The date and time of the last beacon received from the rogue AP. Cisco WAP571/E Administration Guide...

  • Page 83: Creating And Saving A Trusted Ap List

    Trusted AP List, it is not detected as a rogue. To import an AP list from a file, use these steps: In the Download/Backup Trusted AP List area, select Download (PC to AP). STEP 1 Click Browse and choose the file to import. STEP 2 Cisco WAP571/E Administration Guide...

  • Page 84: Networks

    SSID name. The SSIDs for all VAPs can be configured to other values. The SSID can be any alphanumeric, case-sensitive entry from 2 to 32 characters. The printable characters plus the space (ASCII 0x20) are allowed. The allowable characters are: Cisco WAP571/E Administration Guide...

  • Page 85: Vlan Ids

    Each VAP is associated with a VLAN, which is identified by a VLAN ID (VID). A VID can be any value from 1 to 4094, inclusive. The WAP571/E device supports 33 active VLANs (32 for WLAN plus one management VLAN).
  • Page 86 • Security—The type of authentication required for access to the VAP: None Static WEP Dynamic WEP WPA Personal WPA Enterprise Cisco WAP571/E Administration Guide...
  • Page 87 Even if the 5-GHz radio happens to be using 20-MHz bandwidth, once bandsteering is configured, the AP tries to steer clients to the 5-GHz radio. Click Save. The changes are saved to the Startup Configuration. STEP 5 Cisco WAP571/E Administration Guide...

  • Page 88: Configuring Security Settings

    WEP encrypts data moving across the wireless network based on a static key. (The encryption algorithm is a stream cipher called RC4.) These parameters configure Static WEP: • Transfer Key Index—A key index list. Key indexes 1 through 4 are available. The default is1. Cisco WAP571/E Administration Guide...
  • Page 89 WAP device whether that client station has the correct WEP key or not. This algorithm is also used in plaintext, IEEE 802.1X, and WPA modes. When the authentication algorithm is set to Open System, any client can associate with the WAP device. Cisco WAP571/E Administration Guide...
  • Page 90 This ensures that neighboring access points cannot decode other access point transmissions. • You cannot mix 64-bit and 128-bit WEP keys between the access point and its client stations. Cisco WAP571/E Administration Guide...
  • Page 91 RADIUS address settings, but the WAP device contacts only the RADIUS server or servers for the address type you select in this field. • Server IP Address 1 or Server IPv6 Address 1—The address for the primary RADIUS server for this VAP. Cisco WAP571/E Administration Guide...
  • Page 92 The default is 300. The valid range is from 0 to 86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. • Session Key Refresh Rate—The interval at which the WAP device refreshes session (unicast) keys for each client associated with the VAP. Cisco WAP571/E Administration Guide...
  • Page 93 @ and #. • Key Strength Meter—The WAP device checks the key against complexity criteria such as how many different types of characters (uppercase and Cisco WAP571/E Administration Guide...
  • Page 94 The default is Capable. Not Required Capable Required • Enable pre-authentication—If for WPA Versions you select only WPA2 or both WPA and WPA2, you can enable pre-authentication for WPA2 clients. Cisco WAP571/E Administration Guide...
  • Page 95 Server IP Address 2 to 4 or Server IPv6 Address 2 to 4—Up to three IPv4 and/or IPv6 addresses to use as the backup RADIUS servers for this VAP. If authentication fails with the primary server, each configured backup server is tried in sequence. Cisco WAP571/E Administration Guide...

  • Page 96: Wireless Multicast Forwarding

    WLAN using the repeated unicast of multicast frames. It uses IGMP frames to keep track of participating group members and multicast packets are transmitted only to the interested members after unicast MAC conversion. Cisco WAP571/E Administration Guide...

  • Page 97: Scheduler

    STEP 2 • Wireless Multicast Forwarding—Enables or disables wireless multicast forwarding globally on the Cisco WAP571/E. After new settings are saved, the corresponding processes may be stopped and NOTE restarted. When this happens, the WAP device may lose connectivity. We recommend that you change WAP device settings when a loss of connectivity will least affect your wireless clients.

  • Page 98: Adding Scheduler Profiles

    Rules cannot conflict; for example, you can configure one rule to start on each weekday and another to start on each weekend day, but you cannot configure one rule to begin daily and another rule to begin on weekends. To configure a rule for a profile: Cisco WAP571/E Administration Guide...

  • Page 99: Scope Of Scheduler Rules

    • The design of the scheduler feature is such that each rule sets a boundary on when a radio or VAP is enabled. Cisco WAP571/E Administration Guide...

  • Page 100: Scheduler Association

    VAP. A single profile can be associated with multiple VAPs. If the Scheduler profile associated with a VAP or the WLAN interface is deleted, then the association is removed. To associate a Scheduler profile with the WLAN interface or a VAP: Cisco WAP571/E Administration Guide...

  • Page 101: Mac Filtering

    WAP device. • Block all stations in list—Only the stations that appear in the list are denied access to the network through the WAP device. All other stations are permitted access. Cisco WAP571/E Administration Guide...

  • Page 102: Configuring Mac Authentication On The Radius Server

    MAC address of the client station. Valid Ethernet MAC address. User-Password (2) A fixed global password used to NOPASSWORD look up a client MAC entry. Bridge This section describes the two types of bridges. It includes the following topics: WDS Bridge Cisco WAP571/E Administration Guide...
  • Page 103 For pure bridging mode that does not allow client associations, we recommend using obscure WPA key for VAP0 or disabling the SSID broadcast. • All Cisco WAP devices participating in a WDS link must have the following identical settings: Radio IEEE 802.11 Mode...
  • Page 104 Static WEP and WPA Personal. In WPA Personal mode, the WAP device uses WPA2-PSK with CCMP (AES) encryption over the WDS link. See WEP on WDS Links or WPA/PSK on WDS Links following this procedure for more information about encryption options. Cisco WAP571/E Administration Guide...

  • Page 105: Wep On Wds Links

    Note that the required number of characters is indicated to the right of the field and changes based on your selections in the Key Type and Key Length fields. WPA/PSK on WDS Links These additional fields appear when you select WPA/PSK as the encryption type. Cisco WAP571/E Administration Guide...

  • Page 106: Workgroup Bridge

    AP. WDS is a better solution and is preferred over the WorkGroup Bridge solution. Use WDS if you are bridging Cisco WAP571/E devices. If you are not, then consider WorkGroup Bridge. When the WorkGroup Bridge feature is enabled, the VAP configurations are not applied;...
  • Page 107 AP Detection is enabled in Rogue AP Detection (which is also disabled by default). • Security—The type of security to use for authenticating as a client station on the upstream WAP device. Choices are: None Static WEP WPA Personal Cisco WAP571/E Administration Guide...

  • Page 108: Quality Of Service

    Station EDCA parameters affect traffic flowing from the client station to the WAP device. In normal use, the default values for the WAP device and station EDCA should not need to be changed. Changing these values affects the QoS provided. To configure WAP device and Station EDCA parameters: Cisco WAP571/E Administration Guide...
  • Page 109 This value is the upper limit (in milliseconds) of a range from which the initial random backoff wait time is determined. The first random number generated is a number between 0 and the number specified here. Cisco WAP571/E Administration Guide...
  • Page 110 Transmission Opportunity (TXOP) is an interval of time, in milliseconds, when a WME client station has the right to initiate transmissions onto the wireless medium (WM) towards the WAP device. The TXOP Limit maximum value is 65535. Cisco WAP571/E Administration Guide...
  • Page 111 After new settings are saved, the corresponding processes may be stopped and CAUTION restarted. When this happens, the WAP device may lose connectivity. We recommend that you change WAP device settings when a loss of connectivity will least affect your wireless clients. Cisco WAP571/E Administration Guide...
  • Page 112 Wireless Quality of Service Cisco WAP571/E Administration Guide...

  • Page 113: Chapter 6: Spectrum Analyzer

    NOTE Click Set. The changes are saved to the Startup Configuration. STEP 3 Press View Spectrum Data button to launch spectrum viewer. STEP 4 The Spectrum Viewer can only be accessed through an IPv4 address. NOTE Cisco WAP571/E Administration Guide...
  • Page 114 Spectrum Analyzer Cisco WAP571/E Administration Guide...

  • Page 115: Chapter 7: System Security

    In addition to using the global RADIUS servers, you can also configure each VAP to NOTE use a specific set of RADIUS servers. See the Networks page. To configure global RADIUS servers: Cisco WAP571/E Administration Guide...
  • Page 116 If you enable RADIUS accounting, it is enabled for the primary RADIUS server and all backup servers. Click Save. The changes are saved to the Startup Configuration. STEP 3 Cisco WAP571/E Administration Guide...

  • Page 117: 802.1X Supplicant

    Username—The WAP device uses this username when responding to requests from an 802.1X authenticator. The username can be 1 to 64 characters long. ASCII-printable characters are allowed, which includes uppercase and lowercase alphabetic letters, numeric digits, and all special characters except quotation marks. Cisco WAP571/E Administration Guide...
  • Page 118 If you selected TFTP, enter the Filename and the TFTP Server IPv4 Address. The filename cannot contain the following characters: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more successive periods. Click Upload. STEP 3 Cisco WAP571/E Administration Guide...

  • Page 119: Password Complexity

    • Password Aging Time—The number of days before a newly created password expires, from 1 to 365. The default is 180 days. Click Save. The changes are saved to the Startup Configuration. STEP 4 Cisco WAP571/E Administration Guide...

  • Page 120: Wpa-Psk Complexity

    Minimum WPA-PSK Length—The minimum key length in number of characters is from 8 to 16. The default is 8. Check the box to make the field editable and to activate this requirement. Click Save. The changes are saved to the Startup Configuration. STEP 4 Cisco WAP571/E Administration Guide...

  • Page 121: Chapter 8: Client Quality Of Service

    If you disable Client QoS, rate limiting, and DiffServ configurations are globally disabled. If you enable this mode, you can also enable or disable Client QoS mode on particular VAPs or Ethernet. See the Client QoS Mode setting on the Client QoS Association page. Cisco WAP571/E Administration Guide...

  • Page 122: Class Map

    Protocol—Uses a Layer 3 or Layer 4 protocol match condition based on the value of the IP Protocol field in IPv4 packets or the Next Header field in IPv6 packets. Choose the protocol to match by keyword or enter a protocol ID: Cisco WAP571/E Administration Guide...
  • Page 123 1 means the bit matters and 0 means that we should ignore this bit. • Destination IP—Requires a packet's destination IPv4 address to match the IPv4 address defined in the appropriate fields. Destination IP Address—Enter the IPv4 address to apply this criteria. Cisco WAP571/E Administration Guide...
  • Page 124 IP ToS Bits—Uses the packet's type of service (ToS) bits in the IP header as the match criteria. The IP ToS bit value ranges between (00 to FF). The high-order three bits represent the IP precedence value. The high-order six bits represent the IP DSCP value. Cisco WAP571/E Administration Guide...
  • Page 125 IP Protocol field in IPv4 packets or the Next Header field in IPv6 packets. Choose the protocol to match by keyword or enter a protocol ID: Select From List—Matches the selected protocol: IPv6, ICMPv6, TCP, UDP. Cisco WAP571/E Administration Guide...
  • Page 126 The destination port is identified in the datagram header. Select From List—Matches the destination port in the datagram header with the selected keyword: ftp, ftpdata, http, smtp, snmp, telnet, tftp, www. Each of these keywords translates into its equivalent port number. Cisco WAP571/E Administration Guide...

  • Page 127: Adding A Class Map

    Choose MAC as the type of class map from the Class Map Type list. The MAC STEP 3 class map applies to Layer 2 criteria. In the Match Criteria Configuration area, configure these parameters to match the STEP 4 packets to a class: Cisco WAP571/E Administration Guide...
  • Page 128 Destination MAC Address—Enter the destination MAC address to compare against an Ethernet frame. Destination MAC Mask—Enter the destination MAC address mask specifying which bits in the destination MAC address to compare against an Ethernet frame. Cisco WAP571/E Administration Guide...

  • Page 129: Policy Map

    Police Simple—Establishes the traffic policing style for the class. The simple form of the policing style uses a single data rate and burst size, resulting in two outcomes: conform and nonconform. If you enable this feature, configure one of these fields: Cisco WAP571/E Administration Guide...
  • Page 130 A policy map can only be deleted when it is not associated to any VAP. NOTE The policy marking parameters such as Mark Class of Service, Mark IP DSCP and NOTE Mark IP Precedence are not supported for IPV6 Class Map. Cisco WAP571/E Administration Guide...

  • Page 131: Client Qos Association

    WAP device in bits per second (bps). The valid range is from 0 to 1300 Mbps. • DiffServ Policy—Choose a DiffServ policy applied to traffic sent to the WAP device for the selected interface. Click Save. The changes are saved to the Startup Configuration. STEP 5 Cisco WAP571/E Administration Guide...

  • Page 132: Qos Status

    Class Map Name—Lists the class maps that this policy map contains. Policy—Shows the policy details of this class map. See Policy Map for more information. You can click Refresh to refresh the screen and show the most current information. Cisco WAP571/E Administration Guide...

  • Page 133: Chapter 9: Acl

    There is an implicit deny at the end of every rule created. To avoid deny all, we NOTE strongly recommend that you add a permit rule within the ACL to allow traffic. MAC ACLs Cisco WAP571/E Administration Guide...
  • Page 134 Layer 3 and Layer 4 criteria. Click Add ACL. STEP 4 In the ACL Rule Configuration area, configure these ACL rule parameters: STEP 5 • ACL Name - ACL Type—Choose the ACL to configure with the new rule. Cisco WAP571/E Administration Guide...
  • Page 135 255. Choose this method to identify a protocol not listed by name in the Select From List. • Source IP—Requires the packet's source IP address to match the address defined in the appropriate fields. Source IP Address—Enter the IP address to apply this criteria. Cisco WAP571/E Administration Guide...
  • Page 136 A wildcard mask is basically the inverse of a subnet mask. For example, to match the criteria to a single host address, use a wildcard mask of 0.0.0.0. To match the criteria to a 24-bit subnet (for example, 192.168.10.0/24), use a wildcard mask of 0.0.0.255. Cisco WAP571/E Administration Guide...
  • Page 137 Type octet in the IP header. The IP ToS Bits value is a two-digit hexadecimal number from 00 to ff. The high-order three bits represent the IP precedence value. The high-order six bits represent the IP Differentiated Services Code Point (DSCP) value. Cisco WAP571/E Administration Guide...
  • Page 138 Action—Choose whether the ACL rule permits or denies an action. • When you choose Permit, the rule allows all traffic that meets the rule criteria to enter the WAP device. Traffic that does not meet the criteria is dropped. Cisco WAP571/E Administration Guide...
  • Page 139 Destination IPv6—Requires a packet's destination IPv6 address to match the IPv6 address defined in the appropriate fields. Destination IPv6 Address—Enter an IPv6 address to apply this criteria. Destination IPv6 Prefix Length—Enter the prefix length of the destination IPv6 address. Cisco WAP571/E Administration Guide...
  • Page 140 To delete an ACL, ensure that it is selected in the ACL Name-ACL Type list, check NOTE Delete ACL, and click Save. Configure MAC ACLs To configure a MAC ACL: Select ACL > ACL Rule. STEP 1 In the ACL Name field, enter the name to identify the ACL. STEP 2 Cisco WAP571/E Administration Guide...
  • Page 141 0600 to FFFF. • Class of Service—Enter an 802.1p user priority to compare against an Ethernet frame. The valid range is from 0 to 7. This field is located in the first/ only 802.1Q VLAN tag. Cisco WAP571/E Administration Guide...

  • Page 142: Acl Association

    The ACL Association page provides the ACL list bound to the wireless and Ethernet interfaces. To control general categories of traffic, such as HTTP traffic or traffic from a specific subnet, you can configure ACLs and assign them to one or more interfaces. Cisco WAP571/E Administration Guide...

  • Page 143: Acl Status

    Interface Bound—The interface to which the ACL has been associated. • Rule No.—The number of the rule that the ACL contains. • Action—The action to be taken by the ACL. • Match All—Shows whether or not the ACL rule matches all packets. Cisco WAP571/E Administration Guide...
  • Page 144 ACL Status Rule Field—Shows the detailed settings for the ACL. See ACL Rule for more information. You can click Refresh to refresh the screen and show the most current information. Cisco WAP571/E Administration Guide...

  • Page 145: Chapter 10: Snmp

    Information Bases (MIBs) and return this data to the SNMP manager when requested. Managed devices can be network nodes such as WAP devices, routers, switches, bridges, hubs, servers, or printers. The WAP device can function as an SNMP managed device for seamless integration into network management systems. Cisco WAP571/E Administration Guide...

  • Page 146: General Snmp Settings

    Management Station—Determines which stations can access the WAP device through SNMP. Select one of these options: All—The set of stations that can access the WAP device through SNMP is not restricted. User Defined—The set of permitted SNMP requests is restricted to those specified. Cisco WAP571/E Administration Guide...
  • Page 147 If a hostname includes multiple labels, each is separated by a period (.). The entire series of labels and periods can be up to 253 characters long. Configure the SNMPv2 trap settings: STEP 5 Cisco WAP571/E Administration Guide...

  • Page 148: Views

    A MIB view called all is created by default in the system. This view contains all NOTE management objects supported by the system. By default, view-all and view-none SNMPv3 views are created on the WAP device. NOTE These views cannot be deleted or modified. Cisco WAP571/E Administration Guide...

  • Page 149: Groups

    To remove a view, select the view in the list and click Delete. NOTE Groups SNMPv3 groups allow you to combine users into groups of different authorization and access privileges. Each group is associated with one of three security levels: • noAuthNoPriv Cisco WAP571/E Administration Guide...
  • Page 150 RO and RW. Group names can contain up to 32 alphanumeric characters. • Security Level—Sets the security level for the group, which can be one of these options: noAuthentication-noPrivacy—No authentication and no data encryption (no security). Cisco WAP571/E Administration Guide...

  • Page 151: Users

    For authentication, only the MD5 type is supported. For encryption, only the DES type is supported. There are no default SNMPv3 users on the AP, and you can add up to eight users. To add SNMP users: Cisco WAP571/E Administration Guide...
  • Page 152 Click Save. The user is added to the SNMPv3 Users list and your changes are STEP 5 saved to the Startup Configuration. To remove a user, select the user in the list and click Delete. NOTE Cisco WAP571/E Administration Guide...

  • Page 153: Targets

    Click Save. The user is added to the SNMPv3 Targets list and your changes are STEP 5 saved to the Startup Configuration. To remove an SNMP target, select the user in the list and click Delete. NOTE Cisco WAP571/E Administration Guide...
  • Page 154 SNMP Targets Cisco WAP571/E Administration Guide...

  • Page 155: Chapter 11: Captive Portal

    WAP device or on a RADIUS server. Captive Portal consists of two CP instances. Each instance can be configured independently, with different verification methods for each VAP or SSID. The Cisco WAP571/E devices operate concurrently with some VAPs configured for CP authentication and other VAPs configured for normal wireless authentication methods, such as WPA or WPA Enterprise.
  • Page 156 • User Count—The number of CP users currently configured on the WAP device. Up to 128 users can be configured. Click Save. The changes are saved to the Startup Configuration. STEP 4 Cisco WAP571/E Administration Guide...

  • Page 157: Local Groups/Users

    In the Local Groups Settings area, choose the group that you want to delete. STEP 2 Check the Delete Group option. STEP 3 Click Delete Group. The changes are saved to the Startup Configuration. STEP 4 Cisco WAP571/E Administration Guide...

  • Page 158: Local Users

    0. When set to 0, the timeout value configured for the CP instance is used. • Group Name—Choose the assigned user group. Each CP instance is configured to support a particular group of users. Cisco WAP571/E Administration Guide...

  • Page 159: Instance Configuration

    VAP. Do you need to add a new group or new user? If yes, go to Local Groups/Users page to add a group or user. To create a CP instance and configure its settings: Cisco WAP571/E Administration Guide...
  • Page 160 If the time specified in this field expires before the client attempts to reauthenticate, the client entry is removed from the authenticated client list. The range is from 0 to 1440 minutes. The default value is 60 minutes. Cisco WAP571/E Administration Guide...
  • Page 161 Server IP Address 1 or Server IPv6 Address 1—Enter the IPv4 or IPv6 address for the primary RADIUS server for this VAP. The IPv4 address should be in a form similar to xxx.xxx.xxx.xxx (192.0.2.10). The IPv6 address should be in a form similar to xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx (2001:DB8::CAD5:7D91). Cisco WAP571/E Administration Guide...

  • Page 162: Instance Association

    VAP. The associated CP instance settings applies to users who attempt to authenticate on the VAP. To associate an instance to a VAP: Select Captive Portal > Instance Association. STEP 1 Choose the radio that you want to configure. STEP 2 Cisco WAP571/E Administration Guide...

  • Page 163: Web Portal Customization

    STEP 4 The Captive Portal Web Locale Parameters area reappears the additional options STEP 5 for modifying the locale. The Locale ID and Instance Name fields cannot be edited. The editable fields are populated with default values. Cisco WAP571/E Administration Guide...
  • Page 164 1 to 64 characters. • Button Label—The label on the button that users click to submit their user name and password for authentication. The range is from 2 to 32 characters. The default is Connect. Cisco WAP571/E Administration Guide...
  • Page 165 The range is from 1 to 256 characters. • Delete Locale—Deletes the current locale. Click Save. Your changes are saved to the Startup Configuration. STEP 7 Click Preview to view the updated page. STEP 8 Cisco WAP571/E Administration Guide...

  • Page 166: Uploading And Deleting Images

    Click Browse to choose the image. STEP 2 Click Upload. STEP 3 Click Back to return to the Web Portal Custom Image page. STEP 4 Choose the Captive Portal Web Locale that you want to configure. STEP 5 Cisco WAP571/E Administration Guide...

  • Page 167: Authenticated Clients

    Local—The WAP device uses a local database to authenticate the users. RADIUS—The WAP device uses a database on a remote RADIUS server to authenticate the users. • VAP ID—The VAP with which the user is associated. • Radio ID—The radio ID. Cisco WAP571/E Administration Guide...
  • Page 168 • Failure Time—The time that the authentication failure occurred. A timestamp is included that shows the time of the failure. You can click Refresh to show the latest data from the WAP device. Cisco WAP571/E Administration Guide...

  • Page 169: Chapter 12: Single Point Setup

    When you first set up your WAP device, you can use the Setup Wizard to configure Single Point Setup or join an existing Single Point Setup. If you prefer not to use the Setup Wizard, you can use the web-based configuration utility. Cisco WAP571/E Administration Guide...

  • Page 170: Managing Single Point Setup Across Access Points

    Plan your Single Point Setup cluster. Be sure the two or more WAP devices you STEP 1 want to cluster are compatible with each other. For example, Cisco WAP571/E devices can only cluster with other Cisco WAP571/E devices. It is strongly recommended to run the latest firmware version on all clustered NOTE WAP devices.

  • Page 171: Single Point Setup Negotiation

    WAP2 has the most recent change, then WAP2 is selected.) Operation of a Device Dropped From a Single Point Setup When a WAP device that was previously a member of a cluster becomes disconnected from the cluster, the following guidelines apply: Cisco WAP571/E Administration Guide...

  • Page 172: Configuration Parameters Propagated And Not Propagated To Single Point Setup Access Points

    Client QoS User Accounts Email Alert HTTP/HTTPs Service (Except SSL Certificate Radio Settings Including Configuration) TSpec Settings (Some exceptions) Log Settings Rogue AP Detection MAC Filtering Scheduler Management Access Control SNMP General and SNMPv3 Networks WPA-PSK Complexity Cisco WAP571/E Administration Guide...
  • Page 173 Fixed Multicast Rate Broadcast or Multicast Rate Limiting Channel Bandwidth Short Guard Interval Supported Radio Configuration Settings and Parameters that are Not Propagated in Single Point Setup Channel Beacon Interval DTIM Period Maximum Stations Transmit Power Cisco WAP571/E Administration Guide...

  • Page 174: Access Points

    Location—Enter a description of where the access point is physically located, for example, Reception. The location field is optional. • Cluster Name—Enter the name of the cluster for the WAP device to join, for example Reception_Cluster. Cisco WAP571/E Administration Guide...
  • Page 175 MAC Address—Media Access Control (MAC) address of the access point. The address is the MAC address for the bridge (br0), and is the address by which the WAP device is known externally to other networks. • IP Address—The IP address for the access point. Cisco WAP571/E Administration Guide...
  • Page 176 IP address in the table on the Access Points page to show the web-based configuration utility for the particular access point. Navigating to a Device Using its IP Address in a URL Cisco WAP571/E Administration Guide...

  • Page 177: Sessions

    The following data shows for each WLAN client session with a Single Point Setup. • AP Location—The location of the access point. The location is derived from the location specified on the Administration > System Settings page. • User MAC—The MAC address of the wireless client. Cisco WAP571/E Administration Guide...
  • Page 178 To sort the information shown in the tables by a particular indicator, click the column label you want to sort by. For example, if you want to see the table rows ordered by signal strength, click the Signal column label. Cisco WAP571/E Administration Guide...

  • Page 179: Channel Management

    To start automatic channel assignment, click Start. STEP 2 Cisco WAP571/E Administration Guide...

  • Page 180: Viewing Channel Assignments And Setting Locks

    Wireless Radio—The MAC address of the radio. • Band—The band on which the access point is broadcasting. • Channel—The radio channel on which this access point is currently broadcasting. • Locked—Forces the access point to remain on the current channel. Cisco WAP571/E Administration Guide...

  • Page 181: Configuring Advanced Settings

    Change channels if interference is reduced by at least—The minimum percentage of interference reduction a proposed plan must achieve in order to be applied. The default is 75 percent. Use the drop-down menu to choose percentages ranging from 5 percent to 75 percent. Using this Cisco WAP571/E Administration Guide...

  • Page 182: Wireless Neighborhood

    • Detect faults. Unexpected changes in the coverage pattern are evident at a glance in the color coded table. Cisco WAP571/E Administration Guide...
  • Page 183 WAP devices, as detected by the cluster member whose IP address is shown at the top of the column. If you hover the mouse pointer over the bars, a number representing the strength in decibels (dB) appears Cisco WAP571/E Administration Guide...

  • Page 184: Viewing Details For A Single Point Setup Member

    The address is the MAC address for the bridge (br0), and is the address by which the WAP device is known externally to other networks. • Current Firmware Version—The current running firmware version for the access point. Cisco WAP571/E Administration Guide...
  • Page 185 The filename cannot contain the following items: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more successive periods. Enter the TFTP Server IPv4 Address and click Start-Upgrade. STEP 3 Upgrading Using HTTP To upgrade using HTTP: Cisco WAP571/E Administration Guide...
  • Page 186 Click Start-Upgrade to apply the new firmware image. STEP 3 Overall upgrade status shows the combined upgrade status (Not Initialized/In NOTE Progress/ Completed/Fail/Abort_admin/ None) of all the cluster members. To stop the cluster member upgrade from Dominant AP: Click Stop-Upgrade. Cisco WAP571/E Administration Guide...

  • Page 187: Appendix A: Deauthentication Message Reason Codes

    Class 2 frame received from nonauthenticated STA Class 3 frame received from nonassociated STA Disassociated because sending STA is leaving or has left Basic Service Set (BSS) STA requesting (re)association is not authenticated with responding STA Cisco WAP571/E Administration Guide...
  • Page 188 Element in 4-Way Handshake different from (Re)Association Request/Probe Response/Beacon frame Invalid group cipher Invalid pairwise cipher Invalid AKMP Unsupported RSNE version Invalid RSNE capabilities IEEE 802.1X authentication failed Cipher suite rejected because of the security policy Cisco WAP571/E Administration Guide...

  • Page 189: Appendix B: Where To Go From Here

    Where to Go From Here Cisco provides a wide range of resources to help you and your customer obtain the full benefits of the WAP571/E. Support Cisco Support www.cisco.com/go/smallbizsupport Community Support Center (SBSC) www.cisco.com/go/sbsc Phone Support Contacts Business Support and www.cisco.com/go/smallbizhelp...
  • Page 190 Where to Go From Here Cisco Partner Central www.cisco.com/web/partners/sell/smb (Partner Login Required) Product Documentation Cisco WAP571/E http://www.cisco.com/go/500_wap_resources Wireless-AC/N Premium Dual Radio Access Point with PoE Quick Start Guide and Administration Guide Cisco WAP571/E Administration Guide...
  • Page 191 Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.
  • Page 192 © 2015 Cisco Systems, Inc. All rights reserved. OL-31792-01...

Table of Contents