Accton Technology BAP120 802.11 abg AP User Manual WA6102X 38
Accton Technology Corp 802.11 abg AP WA6102X 38
Users Manual
Powered by Accton
BAP120
User Guide
*+]*+]:LUHOHVV$FFHVV3RLQW
,(((JDQGD'XDOEDQG$FFHVV3RLQW
ZLWK%$6(7;5-3RUW
BAP120
! "
#
i
COMPLIANCES
Federal Communication Commission Interference
Statement
This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential
installation. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this
equipment does cause harmful interference to radio or television reception, which
can be determined by turning the equipment off and on, the user is encouraged to
try to correct the interference by one of the following measures:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected
• Consult the dealer or an experienced radio/TV technician for help
FCC Caution: Any changes or modifications not expressly approved by the party
responsible for compliance could void the user's authority to operate this
equipment. This device complies with Part 15 of the FCC Rules. Operation is
subject to the following two conditions: (1) This device may not cause harmful
interference, and (2) this device must accept any interference received, including
interference that may cause undesired operation.
IMPORTANT NOTE:
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and operated with a
minimum distance of 20 centimeters (8 inches) between the radiator and your
body. This transmitter must not be co-located or operating in conjunction with any
other antenna or transmitter.
Wireless 5 GHz Band Statements:
As the Access Point can operate in the 5150-5250 MHz frequency band it is
limited by the FCC, Industry Canada and some other countries to indoor use only
so as to reduce the potential for harmful interference to co-channel Mobile
Satellite systems.
COMPLIANCES
ii
High power radars are allocated as primary users (meaning they have priority) of
the 5250-5350 MHz and 5650-5850 MHz bands. These radars could cause
interference and /or damage to the access point when used in Canada.
The term “IC” before the radio certification number only signifies that Industry
Canada technical specifications were met.
Industry Canada - Class B
This digital apparatus does not exceed the Class B limits for radio noise emissions
from digital apparatus as set out in the interference-causing equipment standard
entitled “Digital Apparatus,” ICES-003 of Industry Canada.
Cet appareil numérique respecte les limites de bruits radioélectriques applicables
aux appareils numériques de Classe B prescrites dans la norme sur le matérial
brouilleur: “Appareils Numériques,” NMB-003 édictée par l’Industrie.
Japan VCCI Class B
Australia/New Zealand AS/NZS 4771
ACN 066 352010
C
OMPLIANCES
iii
EC Conformance Declaration
Marking by the above symbol indicates compliance with the Essential
Requirements of the R&TTE Directive of the European Union (1999/5/
EC). This equipment meets the following conformance standards:
• EN 60950-1 (IEC 60950-1) - Product Safety
• EN 301 893 - Technical requirements for 5 GHz radio equipment
• EN 300 328 - Technical requirements for 2.4 GHz radio equipment
• EN 301 489-1 / EN 301 489-17 - EMC requirements for radio equipment
Countries of Operation & Conditions of Use in the European
Community
This device is intended to be operated in all countries of the European
Community. Requirements for indoor vs. outdoor operation, license
requirements and allowed channels of operation apply in some countries
as described below:
Note: The user must use the configuration utility provided with this
product to ensure the channels of operation are in conformance
with the spectrum usage rules for European Community countries
as described below.
• This device requires that the user or installer properly enter the current
country of operation in the command line interface as described in the
user guide, before operating this device.
• This device will automatically limit the allowable channels determined
by the current country of operation. Incorrectly entering the country of
operation may result in illegal operation and may cause harmful
interference to other systems. The user is obligated to ensure the
device is operating according to the channel limitations, indoor/outdoor
restrictions and license requirements for each European Community
country as described in this document.
• This device employs a radar detection feature required for European
Community operation in the 5 GHz band. This feature is automatically
enabled when the country of operation is correctly configured for any
European Community country. The presence of nearby radar operation
may result in temporary interruption of operation of this device. The
radar detection feature will automatically restart operation on a channel
free of radar.
COMPLIANCES
iv
• The 5 GHz Turbo Mode feature is not allowed for operation in any
European Community country. The current setting for this feature is
found in the 5 GHz 802.11a Radio Settings Window as described in the
user guide.
• The 5 GHz radio's Auto Channel Select setting described in the user
guide must always remain enabled to ensure that automatic 5 GHz
channel selection complies with European requirements. The current
setting for this feature is found in the 5 GHz 802.11a Radio Settings
Window as described in the user guide.
• This device is restricted to indoor use when operated in the European
Community using the 5.15 - 5.35 GHz band: Channels 36, 40, 44, 48,
52, 56, 60, 64. See table below for allowed 5 GHz channels by country.
• This device may be operated indoors or outdoors in all countries of the
European Community using the 2.4 GHz band: Channels 1 - 13, except
where noted below.
- In Italy the end-user must apply for a license from the national
spectrum authority to operate this device outdoors.
- In Belgium outdoor operation is only permitted using the 2.46 -
2.4835 GHz band: Channel 13.
- In France outdoor operation is only permitted using the 2.4 - 2.454
GHz band: Channels 1 - 7.
C
OMPLIANCES
v
Operation Using 5 GHz Channels in the European
Community
The user/installer must use the provided configuration utility to check the
current channel of operation and make necessary configuration changes
to ensure operation occurs in conformance with European National
spectrum usage laws as described below and elsewhere in this
document.
Allowed 5GHz Channels in Each European Community Country
Allowed Frequency Bands Allowed Channel Numbers Countries
5.15 - 5.25 GHz* 36, 40, 44, 48 Austria, Belgium
5.15 - 5.35 GHz* 36, 40, 44, 48, 52, 56, 60, 64 France,
Switzerland,
Liechtenstein
5.15 - 5.35* & 5.470 - 5.725
GHz 36, 40, 44, 48, 52, 56, 60, 64,
100, 104, 108, 112, 116, 120,
124, 128, 132, 136, 140
Denmark, Finland,
Germany, Iceland,
Ireland, Italy,
Luxembourg,
Netherlands,
Norway, Portugal,
Spain, Sweden,
U.K.
5 GHz Operation Not
Allowed None Greece
* Outdoor operation is not allowed using 5.15-5.35 GHz bands (Channels 36 -
64).
COMPLIANCES
vi
Declaration of Conformity in Languages of the European
Community
English Hereby, Edgecore, declares that this Radio LAN device is in
compliance with the essential requirements and other relevant
provisions of Directive 1999/5/EC.
Finnish Valmistaja Edgecore vakuuttaa täten että Radio LAN device
tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja
sitä koskevien direktiivin muiden ehtojen mukainen.
Dutch Hierbij verklaart Edgecore dat het toestel Radio LAN device in
overeenstemming is met de essentiële eisen en de andere
relevante bepalingen van richtlijn 1999/5/EG
Bij deze Edgecore dat deze Radio LAN device voldoet aan de
essentiële eisen en aan de overige relevante bepalingen van
Richtlijn 1999/5/EC.
French Par la présente Edgecore déclare que l'appareil Radio LAN
device est conforme aux exigences essentielles et aux autres
dispositions pertinentes de la directive 1999/5/CE
Swedish Härmed intygar Edgecore att denna Radio LAN device står I
överensstämmelse med de väsentliga egenskapskrav och övriga
relevanta bestämmelser som framgår av direktiv 1999/5/EG.
Danish Undertegnede Edgecore erklærer herved, at følgende udstyr
Radio LAN device overholder de væsentlige krav og øvrige
relevante krav i direktiv 1999/5/EF
German Hiermit erklärt Edgecore, dass sich dieser/diese/dieses Radio
LAN device in Übereinstimmung mit den grundlegenden
Anforderungen und den anderen relevanten Vorschriften der
Richtlinie 1999/5/EG befindet". (BMWi)
Hiermit erklärt Edgecore die Übereinstimmung des Gerätes
Radio LAN device mit den grundlegenden Anforderungen und
den anderen relevanten Festlegungen der Richtlinie 1999/5/EG.
(Wien)
Greek ȂǼȉǾȃȆ ǹȇȅȊȈ ǹEdgecoreǻǾȁȍ ȃǼǿȅȉǿ $LAN %
ȈȊȂȂȅȇ ĭȍ ȃǼȉǹ ǿ ȆȇȅȈȉǿ Ȉ ȅȊȈ ǿ ȍ ǻǼǿ Ȉ ǹȆǹǿȉǾȈǼǿȈȀǹ ǿ ȉǿ Ȉ ȁȅǿ Ȇ ǼȈ
Ȉ ȋ Ǽȉǿ ȀǼȈ ǻǿ ǹȉǹȄǼǿȈ ȉǾȈ ȅǻ Ǿī ǿ ǹ Ȉ ###ǼȀ
Italian Con la presente Edgecore dichiara che questo Radio LAN device
è conforme ai requisiti essenziali ed alle altre disposizioni
pertinenti stabilite dalla direttiva 1999/5/CE.
C
OMPLIANCES
vii
Safety Compliance
Power Cord Safety
Please read the following safety information carefully before installing the access
point:
WARNING: Installation and removal of the unit must be carried out by qualified
personnel only.
• The unit must be connected to an earthed (grounded) outlet to comply with
international safety standards.
• Do not connect the unit to an A.C. outlet (power supply) without an earth
(ground) connection.
• The appliance coupler (the connector to the unit and not the wall plug) must have
a configuration for mating with an EN 60320/IEC 320 appliance inlet.
• The socket outlet must be near to the unit and easily accessible. You can only
remove power from the unit by disconnecting the power cord from the outlet.
• This unit operates under SELV (Safety Extra Low Voltage) conditions according
to IEC 60950. The conditions are only maintained if the equipment to which it is
connected also operates under SELV conditions.
• The PoE (Power over Ethernet), which is to be interconnected with other
equipment that must be contained within the same building including the
interconnected equipment’s associated LAN connections.
France and Peru only
This unit cannot be powered from IT† supplies. If your supplies are of IT type, this
unit must be powered by 230 V (2P+T) via an isolation transformer ratio 1:1, with
the secondary connection point labelled Neutral, connected directly to earth
(ground).
† Impédance à la terre
Spanish Por medio de la presente Manufacturer declara que el Radio LAN
device cumple con los requisitos esenciales y cualesquiera otras
disposiciones aplicables o exigibles de la Directiva 1999/5/CE
Portuguese Manufacturer declara que este Radio LAN device está conforme
com os requisitos essenciais e outras disposições da Directiva
1999/5/CE.
COMPLIANCES
viii
Important! Before making connections, make sure you have the correct cord set.
Check it (read the label on the cable) against the following:
Power Cord Set
U.S.A. and
Canada The cord set must be UL-approved and CSA certified.
The minimum specifications for the flexible cord are:
- No. 18 AWG - not longer than 2 meters, or 16 AWG.
- Type SV or SJ
- 3-conductor
The cord set must have a rated current capacity of at least
10 A
The attachment plug must be an earth-grounding type with
NEMA 5-15P (15 A, 125 V) or NEMA 6-15P (15 A, 250 V)
configuration.
Denmark The supply plug must comply with Section 107-2-D1,
Standard DK2-1a or DK2-5a.
Switzerland The supply plug must comply with SEV/ASE 1011.
U.K. The supply plug must comply with BS1363 (3-pin 13 A) and
be fitted with a 5 A fuse which complies with BS1362.
The mains cord must be <HAR> or <BASEC> marked and
be of type HO3VVF3GO.75 (minimum).
Europe The supply plug must comply with CEE7/7 (“SCHUKO”).
The mains cord must be <HAR> or <BASEC> marked and
be of type HO3VVF3GO.75 (minimum).
IEC-320 receptacle.
C
OMPLIANCES
ix
Veuillez lire à fond l'information de la sécurité suivante avant
d'installer le access point:
AVERTISSEMENT: L’installation et la dépose de ce groupe doivent être confiés à un
personnel qualifié.
• Ne branchez pas votre appareil sur une prise secteur (alimentation électrique)
lorsqu'il n'y a pas de connexion de mise à la terre (mise à la masse).
• Vous devez raccorder ce groupe à une sortie mise à la terre (mise à la masse) afin
de respecter les normes internationales de sécurité.
• Le coupleur d’appareil (le connecteur du groupe et non pas la prise murale) doit
respecter une configuration qui permet un branchement sur une entrée d’appareil
EN 60320/IEC 320.
• La prise secteur doit se trouver à proximité de l’appareil et son accès doit être
facile. Vous ne pouvez mettre l’appareil hors circuit qu’en débranchant son cordon
électrique au niveau de cette prise.
• L’appareil fonctionne à une tension extrêmement basse de sécurité qui est
conforme à la norme IEC 60950. Ces conditions ne sont maintenues que si
l’équipement auquel il est raccordé fonctionne dans les mêmes conditions.
France et Pérou uniquement:
Ce groupe ne peut pas être alimenté par un dispositif à impédance à la terre. Si vos
alimentations sont du type impédance à la terre, ce groupe doit être alimenté par
une tension de 230 V (2 P+T) par le biais d’un transformateur d’isolement à rapport
1:1, avec un point secondaire de connexion portant l’appellation Neutre et avec
raccordement direct à la terre (masse).
&RUGRQpOHFWULTXH &'$())$*$+,$
Etats-Unis et
Canada: Le cordon doit avoir reçu l’homologation des UL et un
certificat de la CSA.
Les spécifications minimales pour un cable flexible sont
AWG No. 18, ou AWG No. 16 pour un cable de longueur
inférieure à 2 mètres.
- type SV ou SJ
- 3 conducteurs
Le cordon doit être en mesure d’acheminer un courant
nominal d’au moins 10 A.
La prise femelle de branchement doit être du type à mise à
la terre (mise à la masse) et respecter la configuration NEMA
5-15P (15 A, 125 V) ou NEMA 6-15P (15 A, 250 V).
Danemark: La prise mâle d’alimentation doit respecter la section 107-2
D1 de la norme DK2 1a ou DK2 5a.
COMPLIANCES
x
Bitte unbedingt vor dem Einbauen des Access Point die folgenden
Sicherheitsanweisungen durchlesen (Germany):
WARNUNG: Die Installation und der Ausbau des Geräts darf nur durch
Fachpersonal erfolgen.
• Das Gerät sollte nicht an eine ungeerdete Wechselstromsteckdose
angeschlossen werden.
• Das Gerät muß an eine geerdete Steckdose angeschlossen werden, welche die
internationalen Sicherheitsnormen erfüllt.
• Der Gerätestecker (der Anschluß an das Gerät, nicht der
Wandsteckdosenstecker) muß einen gemäß EN 60320/IEC 320 konfigurierten
Geräteeingang haben.
• Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich sein. Die
Stromversorgung des Geräts kann nur durch Herausziehen des
Gerätenetzkabels aus der Netzsteckdose unterbrochen werden.
• Der Betrieb dieses Geräts erfolgt unter den SELV-Bedingungen
(Sicherheitskleinstspannung) gemäß IEC 60950. Diese Bedingungen sind nur
gegeben, wenn auch die an das Gerät angeschlossenen Geräte unter
SELV-Bedingungen betrieben werden.
•
Suisse: La prise mâle d’alimentation doit respecter la norme SEV/
ASE 1011.
Europe La prise secteur doit être conforme aux normes CEE 7/7
(“SCHUKO”)
LE cordon secteur doit porter la mention <HAR> ou
<BASEC> et doit être de type HO3VVF3GO.75 (minimum).
&RUGRQpOHFWULTXH &'$())$*$+,$
C
OMPLIANCES
xi
Stromkabel. Dies muss von dem Land, in dem es benutzt wird geprüft werden:
U.S.A und
Kanada Der Cord muß das UL gepruft und war das CSA
beglaubigt.
Das Minimum spezifikation fur der Cord sind:
- Nu. 18 AWG - nicht mehr als 2 meter, oder 16 AWG.
- Der typ SV oder SJ
- 3-Leiter
Der Cord muß haben eine strombelastbarkeit aus
wenigstens 10 A
Dieser Stromstecker muß hat einer erdschluss mit der typ
NEMA 5-15P (15A, 125V) oder NEMA 6-15P (15A, 250V)
konfiguration.
Danemark Dieser Stromstecker muß die ebene 107-2-D1, der
standard DK2-1a oder DK2-5a Bestimmungen einhalten.
Schweiz Dieser Stromstecker muß die SEV/ASE
1011Bestimmungen einhalten.
Europe Das Netzkabel muß vom Typ HO3VVF3GO.75
(Mindestanforderung) sein und die Aufschrift <HAR> oder
<BASEC> tragen.
Der Netzstecker muß die Norm CEE 7/7 erfüllen
(”SCHUKO”).
COMPLIANCES
xii
-
Table of Contents
&KDSWHU,QWURGXFWLRQ
$.$(/3.
$4$5*
/6*5*
$$78
9+658$
&KDSWHU+DUGZDUH,QVWDOODWLRQ
&KDSWHU([WHUQDO$QWHQQDV
&$$
&KDSWHU1HWZRUN&RQILJXUDWLRQ
:4.;*(
<:=>
&8$<:
&8$<:8"$6(/
&8$7(
&8$"*$
&KDSWHU,QLWLDO&RQILJXUDWLRQ
&$9*3(33/<&
"?/
&$/8($9*
<(((&
&KDSWHU6\VWHP&RQILJXUDWLRQ
%$/8($
9+6&8$
;/&9(
"5&9 @
999(
3$
/ @
-%
&RQWHQWV
C<:
599(
D$$(6 E
6$ #
9+6<(
9:D E
/8((9:D$;$*D$($$6 #
/8((9:D%
/8((9:D%;$*
/8((9:D%;$( E
"$&8$
"$9(=E$>
"$9(=E(>
9+ #
9$&86$ E
9$ E
9$9$ E#
%<( #
9;9$ #
&KDSWHU&RPPDQG/LQH,QWHUIDFH
(3/66$<&8$ @
(3/<& @
// @
;/ @
(/66$ @
!+4$(6 @
D66FF%$ @
/66$/6* @
(*/66$ @
$$!+4<.* @
:($(3888/66$ @
(/66$+ @
$(/66$D @
-/66$ @
/8($/66$ @
/66$<( @
/66$* @
$/66$ @ @
8( @ E
@ E
- @ E
*( @ #
@
-%
&RQWHQWV
343+ @
34 @
9+6D$$(6/66$ @
+ @
*6* @
+6$6 @
$6 @
*$4 @
*3 %$F @
*3 %* @
* %$F @ @
*3** @ @
*3*% @ E
*3* 6 @ E
*3** @ #
*3*% @ #
4F @
6(6& @
6(6& @
34$*6$$(6 @
34+6 @
34% @
348( @
343$4$ @ #
9+6<(((/66$ @ #
((( @
(((3 @
((( @
(((% @
(((8$+ +* @
((($ @
34((( @
34% ( @
9+6/./66$ @
* %* @
* %$F @
* %$ 6 @
* %$+(3 $%( @ @
* %6 @ @
34* @ E
5/"$+/66$ @ #
3* $+$F @ #
3* $+ @
343* $+ @
9:D/66$ @
-%
&RQWHQWV
6* %66+ @
6* %$ @
6* %$ @
6* %$F% @
6* %3 @
6* %$* @
6* %( @
6* % @ @
6* %$( @ #
6* %8 @
6* %8 $(6 @
346*(* @
346* @
346*(* $(6 @
346*$( @
346*8 @
346*8 $(6 @
346* @
$3/66$ @
F8 @
*+ @ @
@ E
@ #
34F8 @ #
"5&9/ @
$ %$ @
$ %* @
$ %.+ @
$ %$6 @
$ %6 @
$ %* $( @
$ %6 6 @
$ %$ 6$ 86$ @
$ %%$ 86$ @
34$ @
EG3$ @
E- @
E-F$$ .+ 83 $ @ @
E- .+ 83 $ @ E
E- 6 @ E
E- **$$F @ #
E- **$ @ #
34$3$ @ @
D/3$ @ @
$88$ @ @
-%
&RQWHQWV
$8+ @ @
$8 @ @
6$ $3$% @ @
6$ $3$ 6 @ @
(/66$ @ @
8$ F( @ @
8$* 6$$( @ @
8*.$F @ @
8*. @ @
83 +*$F @ @
83 +** @ @@
348 @ @E
597(/66$ @ @E
F(=59> @ @#
F(3$ $ + @ E
F( .*$ @ E
F( .3 @ E
F(+$6 +$( 6 @ E
34F($(( 6 @ E
34F(8 + @ E
34F(. @ E
9*$(;/66$ @ E
F(*$F @ E
F(*84$( $+ @ E
F(*3 6 @ E
F(*6$- $( @ E
F(**+ @ E
F( .*$3 @ E@
F( .* *+ @ E@
34F(* @ EE
3&8$/66$ @ #
8$3 @ #
% @ #
*$ @ #
*3* @ #
* *- @ #
34 @ #
348$3 @ #
&8$/66$ @ #
8$4 @ #@
%$* @ #@
* @ #E
F @ #E
6$ $$ $ @ ##
3$ @
-%
&RQWHQWV
$6 *4 @
$ 6 @
*$6F @
$$ @
$$ @
$$$ @
F$ %$ @
6 * @
8$(6$ (3 @
33 @
* $ @ @
* ( @ E
* @ E
@ #
+6 @ #
6$- $$ @
$ 6 %$ @
$3 6 %$ @
34 @
348$4 @
34$ @
"(5/66$ @
( $*$F @
( $*$3$ @
( $*$ @ @
( $*%$ @ @
( $*$ @ E
34( $* @ #
9+/66$ @ #
$3 @
+* @
.+ @
$6 .+ @
*3 @
6H6 @
4*$ * 3$ .+ @ @
*6.$ 86 @ @
* $3$ @ E
<.&(+/66$ @ #
. (+*( @
. (+*( 3 @
. (+*( %$ @
. (+*( 8$ + @
. (+3 @
34. (+ @
--
&RQWHQWV
&/66$ @
$** @
C<:/66$ @
%$ @
6$$(6 %$ @
%$ @
DD/66$ @
466 @ @
466 $.4( *+ @ @
466*$$6 @ E
$SSHQGL[$7URXEOHVKRRWLQJ $
$SSHQGL[%&DEOHVDQG3LQRXWV %
;4 $/$F(6 7
79 ;G(6 7
9$(3 ;3(3( 7
/%( 7
/(6 7
(D$*89$/$F 7
$SSHQGL[&6SHFLILFDWLRQV &
$9*8$ /
9%+ /
;$64 /
I*$("$( /
*ORVVDU\
,QGH[
--
&RQWHQWV
Chapter 1: Introduction
;3$&E$($*3$
*%$*$J43(3 *$$66$F434
<:$8-6F%?**43$E$JEFJE(
4$$*
;3888$J$F4%+43$F$%(
%4<:=433( 66$$%3$8$F(>(
E$$E(3(+J3$*$$+*$$ DF*
3$6+($$DF*3<:
;3$****8C$**3+$$
8$J3$83E$$$83E($;3$4
$88F*$$888(*($$*3$%
$$$3CJ88+(JC<:$(6J$3
*$$6$F$**
$3$8$3$*$*$886K
L$FFHVV3RLQWM%(%+43%$$
L5HSHDWHUM%($-.$6$*8634
<:&36J3$*3$%$$F34
3<:
L%ULGJHM%(.$**$(N7(ON"7(O
6$3F+(34<:(6
L5RRW%ULGJHM%(.3$**$(N7(O6
$3F+(34<:(6I+34
F(4.$FN"7(O6
&$J3$*8884.6$$(6$*$F3(3$
$+8(4F8$J$66$8$8$8($
$F3(J$**896*:4.D$$(6
5DGLR&KDUDFWHULVWLFVM;3&E$($$$$6$
3?.4$I3($?+5%D*-(=I5D>J$$
3$6$=/9D/>&*$$3:$$
&86$&8$=:&&>F$8E$J$$
8E(
&E(F$.4$6*$F+433&EF$$
&EF$*$$JF59?9*$
9*6=5999>$/6*6$+/!+(=//!>6$3(+
$3%$66$$8*DF*
;3$***$DF*3$8 *-34.
8$3$%3$=*EDF*43(F63E$
8$>
,QWURGXFWLRQ
Package Checklist
;3*$.$(K
L I
L I/$(+4.$F
L I"9 $F
L I/*4$$*$*4
L FF8
L /5
&86+$83$$+J6($6$(*$&8*FJ
$3$J(3($*$.(6$$36$($*$.
3*$3$
Hardware Description
7RS3DQHO
PWR Link 11a 11g
<5
&$
$
+DUGZDUH'HVFULSWLRQ
5HDU3DQHO
&RPSRQHQW'HVFULSWLRQ
$QWHQQDV
;3$*$3$F%+$$84
66$%+$$+64$$$%
$$6($J3*($%6*$38$(883%(J3
$*3.F3$$$3433(($
3$6(J43$$*%+8
%(;3$*%$686F3$$$3$66
;3$$$63((($$$$*3=(33$*>J
433%$(-(6$**$3$$;3
$$3F$Q$$(3$*%3$***$%$(8
3%$$8386$JN(3$O
;3$$$F*$F+3-$$$3$88
-$($*8$%$(*$8386$J
3$*JR-$$R
/(',QGLFDWRUV
;3$*8$<5
$J$F384(
8($$F
Lock ConsolePOE In ResetDC 5V
9+9 /
"S J
/
"
7
C5/
49.
PWR Link 11a 11g
4 E$
<.%+
3
<.%+ EF(
<.%+
,QWURGXFWLRQ
6HFXULW\6ORW
;3$*$!(+3$*$T$
*%$36%$83$*F+4$**(3!(
+$F=*%>$$6%$FFQJ(3.3
J$(3.+
&RQVROH3RUW
;3*$%3$*3(3$$
$F;3FN/(6O*$(
7 ;3%$F$/4.$($C; 6$
6$J$C; 6$
(WKHUQHW3RUW
;3$*3$79 ;79 ;G"S *3$$F$$3
+79 ;79 ;G<:(6;3(6686
3&EE*8$
;3***$6$D5&D5& G*$J+$$(3 3(3
$F8$4./J43J3F
;3$*$**$$$3$*86$F((8F+
6%(*$.8634<:64.$34
8$
/(' 6WDWXV 'HVFULSWLRQ
3:5 2Q ,QGLFDWHVWKDWWKHV\VWHPLVZRUNLQJQRUPDOO\
)ODVKLQJ ,QGLFDWHVUXQQLQJDVHOIWHVWRUORDGLQJWKHVRIWZDUHSURJUDP
)ODVKLQJ3URORQJHG ,QGLFDWHVV\VWHPHUURUV
/LQN 2Q ,QGLFDWHVDYDOLG0ESV(WKHUQHWFDEOHOLQN
)ODVKLQJ ,QGLFDWHVWKDWWKHDFFHVVSRLQWLVWUDQVPLWWLQJRUUHFHLYLQJGDWD
RQD 0ESV(WKHUQHW/$1)ODVKLQJUDWHLVSURSRUWLRQDO
WRQHWZRUNDFWLYLW\
D 2Q ,QGLFDWHVWKDWWKHDUDGLRLVHQDEOHG
)ODVKLQJ ,QGLFDWHVWKDWWKHDFFHVVSRLQWLVWUDQVPLWWLQJRUUHFHLYLQJGDWD
WKURXJKZLUHOHVVOLQNV)ODVKLQJUDWHLVSURSRUWLRQDOWRQHWZRUN
DFWLYLW\
2II ,QGLFDWHVWKDWWKHDUDGLRLVGLVDEOHG
J 2Q ,QGLFDWHVWKDWWKHEJUDGLRLVHQDEOHG
)ODVKLQJ ,QGLFDWHVWKDWWKHDFFHVVSRLQWLVWUDQVPLWWLQJRUUHFHLYLQJGDWD
WKURXJKZLUHOHVVOLQNV)ODVKLQJUDWHLVSURSRUWLRQDOWRQHWZRUN
DFWLYLW\
2II ,QGLFDWHVWKDWWKHEJUDGLRLVGLVDEOHG
)HDWXUHVDQG%HQHILWV
1RWH ;3"S *$**4%3=>F$3&
E$8$$"83*83N4/O8
86$**+(*43$*,4.*86$4.
%J3$$43J3$*%4%3=>
5HVHW%XWWRQ
;3F3$*38$+8$
8($&8+343F83$J3$*
4*86$3$4$&8+343F86J
$+8($3$(+6$+3$%6$$6%J$38$+8$
8($3$*
3RZHU&RQQHFWRU
;3$*3$%$*443&*443
3/*4$$*J$3*4$$*$*4;3
*4$$*$6$$+$Q$+%$(F4 %$
:%$($(($?
;3$*6$+$%4%3=>86$43
34.%3$***4%34.$FF$3&
E$8$$
:3$83$*$%$$
$$*43(33/*4$$*J/*44F
$F
Features and Benefits
L <$4.%$DF*3*DF*4
8$=**(*E6F>
L &E$JEFJ$E(6*$
L &*$F436*%F$3& E8*
L %$+3(3E F?%$=>
+*J&EG$3$%$$"5&9%J
=>J$D/$8(8$*+%$$
$$3$+$3+4.
L %$6$6(433&E$JEF$E(<:
%6
L 9$$$%$$F3$$3F3$8$3F$
3($ $
L 43+8*$F6$3($+?6=8
839$>
,QWURGXFWLRQ
System Defaults
;384($F683$*,F$+68$;
3$*8$J3/<&66$N8($O863-
%*6*
7DEOH 6\VWHP'HIDXOWV
)HDWXUH 3DUDPHWHU 'HIDXOW
,GHQWLILFDWLRQ 6\VWHP1DPH (QWHUSULVH:LUHOHVV$3
$GPLQLVWUDWLRQ 8VHU1DPH DGPLQ
3DVVZRUG 1XOOQRSDVVRZUG
*HQHUDO +7736HUYHU (QDEOHG
+7736HUYHU3RUW
+77366HUYHU (QDEOHG
+77366HUYHU3RUW
:HE5HGLUHFW 'LVDEOHG
7&3,3 '+&3 (QDEOHG
,3$GGUHVV
6XEQHW0DVN
'HIDXOW*DWHZD\
3ULPDU\'16,3
6HFRQGDU\'16,3
5$',863ULPDU\DQG
6HFRQGDU\
,3$GGUHVV
3RUW
.H\ '()$8/7
7LPHRXW VHFRQGV
5HWUDQVPLWDWWHPSWV
$FFRXQWLQJ3RUW 'LVDEOHG
,QWHULP8SGDWH7LPHRXW VHFRQGV
66+ 6HUYHU6WDWXV (QDEOHG
6HUYHU3RUW
333R( 333R(6WDWXV 'LVDEOHG
6\VWHP'HIDXOWV
0$&$XWKHQWLFDWLRQ 0$& 'LVDEOHG
$XWKHQWLFDWLRQ6HVVLRQ7LPHRXW PLQXWHVGLVDEOHG
/RFDO0$&6\VWHP 'HIDXOW $OORZHG
/RFDO0$&3HUPLVVLRQ $OORZHG
;$XWKHQWLFDWLRQ 6WDWXV 'LVDEOHG
%URDGFDVW.H\5HIUHVK PLQXWHVGLVDEOHG
6HVVLRQ.H\5HIUHVK PLQXWHVGLVDEOHG
5HDXWKHQWLFDWLRQ5HIUHVK5DWH VHFRQGVGLVDEOHG
6XSSOLFDQW 'LVDEOHG
9/$1 0DQDJHPHQW9/$1,'
9/$1,'9$3,QWHUIDFH
9/$17DJ6XSSRUW 'LVDEOHG
4R6 4R60RGH 2II
6936SHFWUD/LQN9RLFH3ULRULW\ 'LVDEOHG
)LOWHU&RQWURO /RFDO%ULGJH 'LVDEOHG
$30DQDJHPHQW (QDEOHG
(WKHUQHW7\SH 'LVDEOHG
6103 6WDWXV (QDEOHG
/RFDWLRQ QXOO
&RQWDFW QXOO
&RPPXQLW\5HDG 2QO\ 3XEOLF
&RPPXQLW\
5HDG:ULWH
3ULYDWH
7UDSV (QDEOHG
7UDS'HVWLQDWLRQ 'LVDEOHG
7UDS'HVWLQDWLRQ,3 $GGUHVV QXOO
7UDS'HVWLQDWLRQ&RPPXQLW\
1DPH
3XEOLF
6103Y*URXSV 52
5:$XWK
5:3ULY
6103Y8VHUV QRQH
7DEOH 6\VWHP'HIDXOWV
)HDWXUH 3DUDPHWHU 'HIDXOW
,QWURGXFWLRQ
6\VWHP/RJJLQJ 6\VORJ 'LVDEOHG
/RJJLQJ+RVW 'LVDEOHG
/RJJLQJ&RQVROH 'LVDEOHG
,3$GGUHVV+RVW1DPH
/RJJLQJ/HYHO ,QIRUPDWLRQDO
/RJJLQJ)DFLOLW\7\SH
6\VWHP&ORFN 61736HUYHU6WDWXV (QDEOHG
61736HUYHU,3
61736HUYHU,3
'DWHDQG7LPH -DQZKHQWKHUHLVQRWLPH
VHUYHU
'D\OLJKW6DYLQJ7LPH 'LVDEOHG
7LPH=RQH *07(DVWHUQ7LPH86DQG&DQDGD
(WKHUQHW,QWHUIDFH 6SHHGDQG'XSOH[ $XWR
7DEOH 6\VWHP'HIDXOWV
)HDWXUH 3DUDPHWHU 'HIDXOW
6\VWHP'HIDXOWV
:LUHOHVV,QWHUIDFH
D
,$33 (QDEOHG
66,' 9$3B7(67B$>@
7XUER0RGH 'LVDEOHG
6WDWXV 'LVDEOHG
$XWR&KDQQHO6HOHFW (QDEOHG
&ORVHG6\VWHP 'LVDEOHG
7UDQVPLW3RZHU )XOO
0D[6WDWLRQ'DWD5DWH 0ESV
0XOWLFDVW'DWD5DWH 0ESV
%HDFRQ,QWHUYDO 78V
'DWD%HDFRQ5DWH'7,0,QWHUYDO EHDFRQ
5767KUHVKROG E\WHV
$VVRFLDWLRQ7LPHRXW,QWHUYDO PLQXWHV
$XWKHQWLFDWLRQ7LPHRXW,QWHUYDO PLQXWHV
5RJXH$3'HWHFWLRQ 'LVDEOHG
$QWHQQD&RQWURO0HWKRG 'LYHUVLW\
$QWHQQD,' [
$QWHQQD/RFDWLRQ ,QGRRU
:LUHOHVV6HFXULW\
D
$XWKHQWLFDWLRQ7\SH 2SHQ6\VWHP
'DWD(QFU\SWLRQ 'LVDEOHG
:(3.H\/HQJWK ELWV
:(3.H\7\SH +H[DGHFLPDO
:(37UDQVPLW.H\1XPEHU
:(3.H\V QXOO
:3$&RQILJXUDWLRQ0RGH :(32QO\'LVDEOHG
:3$.H\0DQDJHPHQW :3$3UHVKDUHG.H\
:3$36.7\SH $OSKDQXPHULF
0XOWLFDVW&LSKHU :(3
7DEOH 6\VWHP'HIDXOWV
)HDWXUH 3DUDPHWHU 'HIDXOW
,QWURGXFWLRQ
:LUHOHVV,QWHUIDFH
EJ
,$33 (QDEOHG
66,' 9$3B7(67B*>@
5DGLR0RGH EJ
6WDWXV 'LVDEOHG
$XWR&KDQQHO6HOHFW (QDEOHG
&ORVHG6\VWHP 'LVDEOHG
7UDQVPLW3RZHU )XOO
0D[6WDWLRQ'DWD5DWH 0ESV
0XOWLFDVW'DWD5DWH 0ESV
3UHDPEOH/HQJWK /RQJ
%HDFRQ,QWHUYDO 78V
'DWD%HDFRQ5DWH'7,0,QWHUYDO EHDFRQ
5767KUHVKROG E\WHV
$VVRFLDWLRQ7LPHRXW,QWHUYDO PLQXWHV
$XWKHQWLFDWLRQ7LPHRXW,QWHUYDO PLQXWHV
5RJXH$3'HWHFWLRQ 'LVDEOHG
$QWHQQD&RQWURO0HWKRG 'LYHUVLW\
$QWHQQD,' [
$QWHQQD/RFDWLRQ ,QGRRU
:LUHOHVV6HFXULW\
EJ
$XWKHQWLFDWLRQ7\SH 2SHQ6\VWHP
'DWD(QFU\SWLRQ 'LVDEOHG
:(3.H\/HQJWK ELWV
:(3.H\7\SH +H[DGHFLPDO
:(37UDQVPLW.H\1XPEHU
:(3.H\V QXOO
:3$&RQILJXUDWLRQ0RGH :(32QO\'LVDEOHG
:3$.H\0DQDJHPHQW :3$3UHVKDUHG.H\
:3$36.7\SH $OSKDQXPHULF
0XOWLFDVW&LSKHU :(3
7DEOH 6\VWHP'HIDXOWV
)HDWXUH 3DUDPHWHU 'HIDXOW
6\VWHP'HIDXOWV
/LQN,QWHJULW\ 6WDWXV 'LVDEOHG
3LQJ,QWHUYDO VHFRQGV
)DLO5HWU\&RXQW
7DEOH 6\VWHP'HIDXOWV
)HDWXUH 3DUDPHWHU 'HIDXOW
,QWURGXFWLRQ
Chapter 2: Hardware Installation
6HOHFWD6LWH±&KRRVHDSURSHUSODFHIRUWKHDFFHVVSRLQW,QJHQHUDOWKHEHVW
ORFDWLRQLVDWWKHFHQWHURI\RXUZLUHOHVVFRYHUDJHDUHDZLWKLQOLQHRIVLJKWRIDOO
ZLUHOHVVGHYLFHV7U\WRSODFHWKHDFFHVVSRLQWLQDSRVLWLRQWKDWFDQEHVWFRYHU
LWV%DVLF6HUYLFH6HWUHIHUWR³,QIUDVWUXFWXUH:LUHOHVV/$1´RQSDJH)RU
RSWLPXPSHUIRUPDQFHFRQVLGHUWKHVHSRLQWV
0RXQWWKHDFFHVVSRLQWDVKLJKDVSRVVLEOHDERYHDQ\REVWUXFWLRQVLQWKH
FRYHUDJHDUHD
$YRLGPRXQWLQJQH[WWRRUQHDUEXLOGLQJVXSSRUWFROXPQVRURWKHUREVWUXFWLRQV
WKDWPD\FDXVHUHGXFHGVLJQDORUQXOO]RQHVLQSDUWVRIWKHFRYHUDJHDUHD
0RXQWDZD\IURPDQ\VLJQDODEVRUELQJRUUHIOHFWLQJVWUXFWXUHVVXFKDVWKRVH
FRQWDLQLQJPHWDO
0RXQWWKH$FFHVV3RLQW±7KHDFFHVVSRLQWFDQEHPRXQWHGRQDQ\
KRUL]RQWDOVXUIDFH
0RXQWLQJRQDKRUL]RQWDOVXUIDFH±7RNHHSWKHDFFHVVSRLQWIURPVOLGLQJRQWKH
VXUIDFHDWWDFKWKHIRXUUXEEHUIHHWSURYLGHGLQWKHDFFHVVRU\NLWWRWKHPDUNHG
FLUFOHVRQWKHERWWRPRIWKHDFFHVVSRLQW
/RFNWKH$FFHVV3RLQWLQ3ODFH±7RSUHYHQWXQDXWKRUL]HGUHPRYDORIWKH
DFFHVVSRLQW\RXFDQXVHD.HQVLQJWRQ6OLP0LFUR6DYHUVHFXULW\FDEOHQRW
LQFOXGHGWRDWWDFKWKHDFFHVVSRLQWWRDIL[HGREMHFW
&RQQHFWWKH3RZHU&RUG±&RQQHFWWKHSRZHUDGDSWHUWRWKHDFFHVVSRLQW
DQGWKHSRZHUFRUGWRDQ$&SRZHURXWOHW
2WKHUZLVHWKHDFFHVVSRLQWFDQGHULYHLWVRSHUDWLQJSRZHUGLUHFWO\IURPWKH
5-SRUWZKHQFRQQHFWHGWRDGHYLFHWKDWSURYLGHV,(((DIFRPSOLDQW
3RZHURYHU(WKHUQHW3R(
1RWH ,IWKHDFFHVVSRLQWLVFRQQHFWHGWRERWKD3R(VRXUFHGHYLFHDQGDQ$&SRZHU
VRXUFH$&SRZHUZLOOEHGLVDEOHG
&DXWLRQ 8VH21/<WKHSRZHUDGDSWHUVXSSOLHGZLWKWKLVDFFHVVSRLQW2WKHUZLVHWKH
SURGXFWPD\EHGDPDJHG
+DUGZDUH,QVWDOODWLRQ
2EVHUYHWKH6HOI7HVW±:KHQ\RXSRZHURQWKHDFFHVVSRLQWYHULI\WKDWWKH
3:5LQGLFDWRUVWRSVIODVKLQJDQGUHPDLQVRQDQGWKDWWKHRWKHULQGLFDWRUVVWDUW
IXQFWLRQLQJDVGHVFULEHGXQGHU³/(',QGLFDWRUV´RQSDJH,IWKH3:5/('
GRHVQRWVWRSIODVKLQJWKHVHOIWHVWKDVQRWFRPSOHWHGFRUUHFWO\5HIHUWR
³7URXEOHVKRRWLQJ´RQSDJH$
&RQQHFWWKH(WKHUQHW&DEOH±7KHDFFHVVSRLQWFDQEHZLUHGWRD
0ESV(WKHUQHWWKURXJKDQHWZRUNGHYLFHVXFKDVDKXERUDVZLWFK&RQQHFW
\RXUQHWZRUNWRWKH5-SRUWRQWKHEDFNSDQHOZLWKFDWHJRU\RU873
(WKHUQHWFDEOH:KHQWKHDFFHVVSRLQWDQGWKHFRQQHFWHGGHYLFHDUHSRZHUHG
RQWKH(WKHUQHW/LQN/('VKRXOGOLJKWLQGLFDWLQJDYDOLGQHWZRUNFRQQHFWLRQ,I
WKLV/('IDLOVWRWXUQRQUHIHUWR³7URXEOHVKRRWLQJ´RQSDJH$
1RWH 7KH5-SRUWRQWKHDFFHVVSRLQWVXSSRUWVDXWR 0',0',;RSHUDWLRQVR\RX
FDQXVHHLWKHUVWUDLJKWWKURXJKRUFURVVRYHUFDEOHWRFRQQHFWWRVZLWFKHVRU3&V
3RVLWLRQWKH$QWHQQDV±(DFKDQWHQQDHPLWVDUDGLDWLRQSDWWHUQWKDWLV
WRURLGDOGRXJKQXWVKDSHGZLWKWKHFRYHUDJHH[WHQGLQJPRVWLQWKHGLUHFWLRQ
SHUSHQGLFXODUWRWKHDQWHQQD7KHUHIRUHWKHDQWHQQDVVKRXOGEHRULHQWHGVR
WKDWWKHUDGLRFRYHUDJHSDWWHUQILOOVWKHLQWHQGHGKRUL]RQWDOVSDFH$OVRWKH
GLYHUVLW\DQWHQQDVVKRXOGERWKEHSRVLWLRQHGDORQJWKHVDPHD[HVSURYLGLQJ
WKHVDPHFRYHUDJHDUHD)RUH[DPSOHLIWKHDFFHVVSRLQWLVPRXQWHGRQD
KRUL]RQWDOVXUIDFHERWKDQWHQQDVVKRXOGEHSRVLWLRQHGSRLQWLQJYHUWLFDOO\XSWR
SURYLGHRSWLPXPFRYHUDJH
&RQQHFWWKH&RQVROH3RUW±&RQQHFWWKHFRQVROHFDEOHLQFOXGHGWRWKH
56FRQVROHSRUWIRUDFFHVVLQJWKHFRPPDQGOLQHLQWHUIDFH<RXFDQ
PDQDJHWKHDFFHVVSRLQWXVLQJWKHFRQVROHSRUW&KDSWHUWKHZHELQWHUIDFH
&KDSWHURU6103PDQDJHPHQWVRIWZDUH
Chapter 3: External Antennas
7KHDFFHVVSRLQWSURYLGHVDYDULHW\RIH[WHUQDODQWHQQDRSWLRQVIRUH[WHQGLQJWKH
UDGLRUDQJHDQGVKDSLQJWKHFRYHUJHDUHD7KHVHDQWHQQDVRIIHUDQXPEHURI
GLIIHUHQWPRXQWLQJORFDWLRQVLQFOXGLQJLQGRRURURXWGRRUZDOOFHLOLQJRUUDGLRPDVW
7KLVFKDSWHUVKRZV\RXKRZWRLQVWDOODQH[WHUQDODQWHQQDIRU\RXUDFFHVWSRLQW
1RWH 7KHXVHRIH[WHUQDODQWHQQDVZLWKWKHDFFHVVSRLQWUHTXLUHVSURIHVVLRQDO
SHUVRQQHOWKDWDUHWUDLQHGLQWKHLQVWDOODWLRQRIUDGLRWUDQVPLWWLQJHTXLSPHQW7KH
XVHULVUHVSRQVLEOHIRUFRPSOLDQFHZLWKORFDOUHJXODWLRQVFRQFHUQLQJLWHPVVXFKDV
DQWHQQDJDLQFDEOHVOLJKWQLQJDUUHVWRUVDQGWUDQVPLWSRZHU7KHUHIRUH\RXPXVW
FRQVXOWDSURIHVVLRQDOFRQWUDFWRUNQRZOHGJHDEOHLQORFDOUDGLRUHJXODWLRQVSULRUWR
HTXLSPHQWLQVWDOODWLRQ
Installation Procedures
)ROORZWKHVHVWHSVWRLQVWDOODQH[WHUQDODQWHQQDDQGFRQQHFWLWWRWKHDFFHVVSRLQW
&DXWLRQ1HYHUPRXQWWKHDFFHVVSRLQWRXWGRRUVWREHQHDUDQH[WHUQDODQWHQQD7KH
DFFHVVSRLQWPXVWDOZD\VEHLQVWDOOHGLQGRRUV
3ODQWKH,QVWDOODWLRQ
3LJWDLO&DEOHV8VHWKHFRD[SLJWDLOFDEOHDWWDFKHGWRWKHDQWHQQDWRFRQQHFW
WRWKHDFFHVVSRLQW%HFDXVHPRVWSLJWDLOFDEOHVDUHDUHODWLYHO\VKRUWOHQJWK
FPRULQFKHVEHVXUHWRILQGDVXLWDEOHPRXQWLQJSRVLWLRQIRUWKH
DQWHQQDWKDWLVQRWWRRIDUIURPWKHDFFHVVSRLQW,IDQH[WHQVLRQFDEOHLV
UHTXLUHGSOHDVHFRQWDFWDSURIHVVLRQDOLQVWDOOHUZKRLVWUDLQHGLQ5)
LQVWDOODWLRQDQGNQRZOHGJHDEOHLQWKHORFDOUHJXODWLRQV
,QVWDOODWLRQ/RFDWLRQ3ODQWKHDQWHQQD¶VSRVLWLRQDQGRULHQWDWLRQ
:DUQLQJ 7KHUDGLDWHGRXWSXWSRZHURIWKLVGHYLFHLVEHORZWKH)&&UDGLR
H[SRVXUHOLPLWV1HYHUWKHOHVVWKHGHYLFHVKRXOGEHXVHGLQVXFKD
PDQQHUWKDWWKHSRWHQWLDOIRUKXPDQFRQWDFWGXULQJQRUPDORSHUDWLRQ
LVPLQLPL]HG7RDYRLGWKHSRVVLELOLW\RIH[FHHGLQJWKH)&&UDGLR
IUHTXHQF\H[SRVXUHOLPLWVKXPDQSUR[LPLW\WRWKHDQWHQQDVVKRXOG
QRWEHOHVVWKDQFPLQFKHVGXULQJQRUPDORSHUDWLRQ
&RQVLGHUWKHVHSRLQWV
8VHWKHDQWHQQD¶VPRXQWLQJEUDFNHWRURWKHUKDUGZDUHLILQFOXGHG
)RURSWLPXPSHUIRUPDQFHPRXQWDQWHQQDVDVKLJKDVSRVVLEOHDERYHDQ\
REVWUXFWLRQVDQGDZD\IURPDQ\VLJQDODEVRUELQJRUUHIOHFWLQJVWUXFWXUHV
VXFKDVWKRVHFRQWDLQLQJPHWDO
%HVXUHWKHUHDUHQRRWKHUUDGLRDQWHQQDVPRXQWHGZLWKLQPIW
&RQVLGHUWKHDQWHQQD¶VUDGLRFRYHUDJHSDWWHUQVRWKDWLWFDQSURSHUO\FRYHU
WKHLQWHQGHGVHUYLFHDUHD
([WHUQDO$QWHQQDV
2PQLGLUHFWLRQDO$QWHQQDV&RQVLGHUWKHVHIDFWRUVZKHQVHOHFWLQJD
ORFDWLRQIRUWKHVHDQWHQQDV
$OZD\VPRXQWWKHDQWHQQDLQDYHUWLFDORULHQWDWLRQVRWKDWWKHUDGLR
FRYHUDJHSDWWHUQILOOVWKHLQWHQGHGKRUL]RQWDOVSDFH
)RURSWLPXPFRYHUDJHPRXQWWKHDQWHQQDDWWKHFHQWHURIWKHDUHDZLWKD
OLQHRIVLJKWSDWKWRDOOSRLQWVZLWKLQWKHDUHD
$YRLGPRXQWLQJQH[WWRRUQHDUEXLOGLQJVXSSRUWFROXPQVRURWKHU
REVWUXFWLRQVWKDWPD\FDXVHUHGXFHGVLJQDORUQXOO]RQHVLQSDUWVRIWKH
FRYHUDJHDUHD
:KHQPRXQWLQJRXWGRRUVXVLQJDPDVWPDNHVXUHWKDWWKHDQWHQQDH[WHQGV
EH\RQGWKHWRSRIWKHPDVW
'LUHFWLRQDO$QWHQQDV&RQVLGHUWKHVHIDFWRUVZKHQVHOHFWLQJDORFDWLRQIRU
WKHVHDQWHQQDV
)RURSWLPXPFRYHUDJHPRXQWWKHDQWHQQDDERYHDQ\REVWUXFWLRQV
GLUHFWHGDWWKHFHQWHURIWKHFRYHUDJHDUHDVHFWRU
+LJKJDLQGLUHFWLRQDODQWHQQDVSURYLGHDIODWWHQHGUDGLRFRYHUDJHSDWWHUQ
LQWKHKRUL]RQWDOSODQH8VHWKHWLOWLQJRUDUWLFXODWHGPRXQWVWRSRLQWWKH
DQWHQQDVWRZDUGVWKHFRYHUDJHDUHD
2XWGRRU,QVWDOODWLRQ:KHQLQVWDOOLQJDQDQWHQQDRXWGRRUVEHVXUHWR
FRQVLGHUWKHVHDGGLWLRQDOIDFWRUV
$OZD\VSODFHWKHDQWHQQDDZD\IURPSRZHUDQGWHOHSKRQHOLQHV
0DNHVXUHWKDWWKHDQWHQQDDQ\VXSSRUWLQJVWUXFWXUHDQGFDEOHVDUHDOO
SURSHUO\JURXQGHG
)RUOLJKWQLQJSURWHFWLRQFRQVLGHUXVLQJDOLJKWQLQJDUUHVWRULPPHGLDWHO\
EHIRUHWKHFDEOHHQWHUVWKHEXLOGLQJ
:DUQLQJ 1HYHULQVWDOODQDQWHQQDRUFRQVWUXFWDUDGLRPDVWQHDURYHUKHDG
SRZHUOLQHV
0RXQWWKH$QWHQQD
,QVWDOOWKHDQWHQQDLQLWVSODQQHGORFDWLRQXVLQJWKHEUDFNHWVFOLSVRURWKHUKDUGZDUH
LQFOXGHGLQWKHDQWHQQDSDFNDJH
5HIHUWRGRFXPHQWDWLRQLQFOXGHGZLWKWKHDQWHQQDIRUVSHFLILFLQIRUPDWLRQDQG
LQVWDOODWLRQLQVWUXFWLRQV
&RQQHFW3LJWDLO&DEOHVWRWKH$FFHVV3RLQW
8VHWKHSLJWDLOFDEOHVWKDWDUHDWWDFKHGWRWKHDQWHQQDRUDUHLQFOXGHGLQWKH
DQWHQQDSDFNDJH,IDQH[WHQVLRQFDEOHLVUHTXLUHGSOHDVHFRQWDFWDSURIHVVLRQDO
LQVWDOOHUZKRLVWUDLQHGLQ5)LQVWDOODWLRQDQGNQRZOHGJHDEOHLQWKHORFDOUHJXODWLRQV
1RWHWKDWGLYHUVLW\DQWHQQDVKDYHWZRSLJWDLOFDEOHV$GLYHUVLW\DQWHQQDLQFOXGHV
WZRLQWHUQDODQWHQQDHOHPHQWVWKDWDUHLGHQWLFDO%RWKDQWHQQDSLJWDLOFDEOHVPXVWEH
FRQQHFWHGWRWKHDFFHVVSRLQWIRUFRUUHFWRSHUDWLRQ
2WKHUQRQGLYHUVLW\DQWHQQDVFDQEHFRQQHFWHGWRHLWKHUDQWHQQDFRQQHFWRUDQG
WKHQFRQILJXUHGIRUXVDJHXVLQJWKHDQWHQQDRSWLRQVLQWKHXVHULQWHUIDFH
,QVWDOODWLRQ3URFHGXUHV
7RFRQQHFWSLJWDLOFDEOHVWRWKHDFFHVVSRLQWIROORZWKHVHVWHSV
'LVDEOHWKHDFFHVVSRLQWUDGLRXVLQJWKHZHEEURZVHULQWHUIDFH&/,RU6103
5HPRYHSRZHUWRWKHDFFHVVSRLQW
5HPRYHERWKRIWKHDFFHVVSRLQW¶VDQWHQQDVE\XQVFUHZLQJWKHPDWWKHLUEDVH
)RUGLYHUVLW\DQWHQQDVFRQQHFWWKHDQWHQQDSLJWDLOFDEOHVWRWKHH[SRVHG
5HYHUVH60$FRQQHFWRUVRQERWKVLGHVRIWKHDFFHVVSRLQW
)RUQRQGLYHUVLW\DQWHQQDVEHVXUHWRFRQQHFWWKHVLQJOHSLJWDLOFDEOHWRWKH
5HYHUVH60$FRQQHFWRURQWKHDFFHVVSRLQW¶VVLGHDFWLYDWHGWKURXJKWKH
VRIWZDUHLQWHUIDFH
5HFRQQHFWSRZHUWRWKHDFFHVVSRLQW
Unscrew antenna
to remove
Antenna pigtail cable
Screw onto access point’s Reverse SMA connector
([WHUQDO$QWHQQDV
1RWH %HIRUHHQDEOLQJWKHUDGLRZLWKDQH[WHUQDODQWHQQDDWWDFKHGEHVXUHWRILUVW
FRQILJXUHWKHDFFHVVSRLQW¶VDQWHQQDPRGH
Chapter 4: Network Configuration
:LUHOHVVQHWZRUNVVXSSRUWDVWDQGDORQHFRQILJXUDWLRQDVZHOODVDQLQWHJUDWHG
FRQILJXUDWLRQZLWK 0ESV(WKHUQHW/$1V7KH*+]*+]:LUHOHVV
$FFHVV3RLQWDOVRSURYLGHVUHSHDWHUDQGEULGJLQJVHUYLFHVWKDWFDQEHFRQILJXUHG
LQGHSHQGHQWO\RQHLWKHUWKH*+]RU*+]UDGLRLQWHUIDFHV
$FFHVVSRLQWVFDQEHGHSOR\HGWRVXSSRUWZLUHOHVVFOLHQWVDQGFRQQHFWZLUHG/$1V
LQWKHIROORZLQJFRQILJXUDWLRQV
$GKRFIRUGHSDUWPHQWDO62+2RUHQWHUSULVH/$1V
,QIUDVWUXFWXUHIRUZLUHOHVV/$1V
,QIUDVWUXFWXUHZLUHOHVV/$1IRUURDPLQJZLUHOHVV3&V
,QIUDVWUXFWXUHZLUHOHVVEULGJHWRFRQQHFWZLUHG/$1V
,QIUDVWUXFWXUHZLUHOHVVUHSHDWHUIRUH[WHQGHGUDQJH
7KHEDQGJIUHTXHQF\EDQGZKLFKRSHUDWHVDW *+]FDQHDVLO\
HQFRXQWHULQWHUIHUHQFHIURPRWKHU*+]GHYLFHVVXFKDVRWKHUERUJ
ZLUHOHVVGHYLFHVFRUGOHVVSKRQHVDQGPLFURZDYHRYHQV,I\RXH[SHULHQFHSRRU
ZLUHOHVV/$1SHUIRUPDQFHWU\WKHIROORZLQJPHDVXUHV
/LPLWDQ\SRVVLEOHVRXUFHVRIUDGLRLQWHUIHUHQFHZLWKLQWKHVHUYLFHDUHD
,QFUHDVHWKHGLVWDQFHEHWZHHQQHLJKERULQJDFFHVVSRLQWV
'HFUHDVHWKHVLJQDOVWUHQJWKRIQHLJKERULQJDFFHVVSRLQWV
,QFUHDVHWKHFKDQQHOVHSDUDWLRQRIQHLJKERULQJDFFHVVSRLQWVHJXSWR
FKDQQHOVRIVHSDUDWLRQIRUEDQGJ
1HWZRUN&RQILJXUDWLRQ
Network Topologies
$G+RF:LUHOHVV/$1QR$FFHVV3RLQW
$QDGKRFZLUHOHVV/$1FRQVLVWVRIDJURXSRIFRPSXWHUVHDFKHTXLSSHGZLWKD
ZLUHOHVVDGDSWHUFRQQHFWHGYLDUDGLRVLJQDOVDVDQLQGHSHQGHQWZLUHOHVV/$1
&RPSXWHUVLQDVSHFLILFDGKRFZLUHOHVV/$1PXVWWKHUHIRUHEHFRQILJXUHGWRWKH
VDPHUDGLRFKDQQHO$QDGKRFZLUHOHVV/$1FDQEHXVHGIRUDEUDQFKRIILFHRU
62+2RSHUDWLRQ
Ad Hoc Wireless LAN
Notebook with
Wireless USB Adapter
Notebook with
Wireless PC Card
PC with Wireless
PCI Ada
p
ter
1HWZRUN7RSRORJLHV
,QIUDVWUXFWXUH:LUHOHVV/$1
7KHDFFHVVSRLQWDOVRSURYLGHVDFFHVVWRDZLUHG/$1IRUZLUHOHVVZRUNVWDWLRQV$Q
LQWHJUDWHGZLUHGZLUHOHVV/$1LVFDOOHGDQ,QIUDVWUXFWXUHFRQILJXUDWLRQ$%DVLF
6HUYLFH6HW%66FRQVLVWVRIDJURXSRIZLUHOHVV3&XVHUVDQGDQDFFHVVSRLQW
WKDWLVGLUHFWO\FRQQHFWHGWRWKHZLUHG/$1(DFKZLUHOHVV3&LQWKLV%66FDQWDONWR
DQ\FRPSXWHULQLWVZLUHOHVVJURXSYLDDUDGLROLQNRUDFFHVVRWKHUFRPSXWHUVRU
QHWZRUNUHVRXUFHVLQWKHZLUHG/$1LQIUDVWUXFWXUHYLDWKHDFFHVVSRLQW
7KHLQIUDVWUXFWXUHFRQILJXUDWLRQQRWRQO\H[WHQGVWKHDFFHVVLELOLW\RIZLUHOHVV3&VWR
WKHZLUHG/$1EXWDOVRLQFUHDVHVWKHHIIHFWLYHZLUHOHVVWUDQVPLVVLRQUDQJHIRU
ZLUHOHVV3&VE\SDVVLQJWKHLUVLJQDOWKURXJKRQHRUPRUHDFFHVVSRLQWV
$ZLUHOHVVLQIUDVWUXFWXUHFDQEHXVHGIRUDFFHVVWRDFHQWUDOGDWDEDVHRUIRU
FRQQHFWLRQEHWZHHQPRELOHZRUNHUVDVVKRZQLQWKHIROORZLQJILJXUH
Server
Switch
Desktop PC
Access Point
Wired LAN Extension
to Wireless Clients
Desktop PC
Notebook PC
1HWZRUN&RQILJXUDWLRQ
,QIUDVWUXFWXUH:LUHOHVV/$1IRU5RDPLQJ:LUHOHVV3&V
7KH%DVLF6HUYLFH6HW%66GHILQHVWKHFRPPXQLFDWLRQVGRPDLQIRUHDFKDFFHVV
SRLQWDQGLWVDVVRFLDWHGZLUHOHVVFOLHQWV7KH%66,'LVDELWELQDU\QXPEHU
EDVHGRQWKHDFFHVVSRLQW¶VZLUHOHVV0$&DGGUHVVDQGLVVHWDXWRPDWLFDOO\DQG
WUDQVSDUHQWO\DVFOLHQWVDVVRFLDWHZLWKWKHDFFHVVSRLQW7KH%66,'LVXVHGLQ
IUDPHVVHQWEHWZHHQWKHDFFHVVSRLQWDQGLWVFOLHQWVWRLGHQWLI\WUDIILFLQWKHVHUYLFH
DUHD
7KH%66,'LVRQO\VHWE\WKHDFFHVVSRLQWQHYHUE\LWVFOLHQWV7KHFOLHQWVRQO\
QHHGWRVHWWKH6HUYLFH6HW,GHQWLILHU66,'WKDWLGHQWLILHVWKHVHUYLFHVHWSURYLGHG
E\RQHRUPRUHDFFHVVSRLQWV7KH66,'FDQEHPDQXDOO\FRQILJXUHGE\WKHFOLHQWV
FDQEHGHWHFWHGLQDQDFFHVVSRLQW¶VEHDFRQRUFDQEHREWDLQHGE\TXHU\LQJIRUWKH
LGHQWLW\RIWKHQHDUHVWDFFHVVSRLQW)RUFOLHQWVWKDWGRQRWQHHGWRURDPVHWWKH
66,'IRUWKHZLUHOHVVFDUGWRWKDWXVHGE\WKHDFFHVVSRLQWWRZKLFK\RXZDQWWR
FRQQHFW
$ZLUHOHVVLQIUDVWUXFWXUHFDQDOVRVXSSRUWURDPLQJIRUPRELOHZRUNHUV0RUHWKDQ
RQHDFFHVVSRLQWFDQEHFRQILJXUHGWRFUHDWHDQ([WHQGHG6HUYLFH6HW(66%\
SODFLQJWKHDFFHVVSRLQWVVRWKDWDFRQWLQXRXVFRYHUDJHDUHDLVFUHDWHGZLUHOHVV
XVHUVZLWKLQWKLV(66FDQURDPIUHHO\$OOZLUHOHVVQHWZRUNFDUGVDQGDGDSWHUVDQG
ZLUHOHVVDFFHVVSRLQWVZLWKLQDVSHFLILF(66PXVWEHFRQILJXUHGZLWKWKHVDPH
66,'
<BSS 2>
<ESS>
<BSS 1>
Server
Switch
Desktop PC
Access Point
Seamless Roaming
Between Access Points
Desktop PC
Notebook PC
Access Point
Notebook PC
Switch
1HWZRUN7RSRORJLHV
,QIUDVWUXFWXUH:LUHOHVV%ULGJH
7KH,(((VWDQGDUGGHILQHVD:,UHOHVV'LVWULEXWLRQ6\VWHP:'6IRUEULGJH
FRQQHFWLRQVEHWZHHQ%66DUHDVDFFHVVSRLQWV7KHDFFHVVSRLQWXVHV:'6WR
IRUZDUGWUDIILFRQOLQNVEHWZHHQXQLWV
7KHDFFHVVSRLQWVXSSRUWV:'6EULGJHOLQNVRQHLWKHUWKH*+]DRU
*+]EJEDQGVDQGFDQEHXVHGZLWKYDULRXVH[WHUQDODQWHQQDVWRRIIHU
IOH[LEOHGHSOR\PHQWRSWLRQV
8SWRVL[:'6EULGJHOLQNVFDQEHVSHFLILHGIRUHDFKXQLWLQWKHZLUHOHVVEULGJH
QHWZRUN2QHXQLWRQO\PXVWEHFRQILJXUHGDVWKH³URRWEULGJH´LQWKHZLUHOHVV
QHWZRUN7KHURRWEULGJHVKRXOGEHWKHXQLWFRQQHFWHGWRWKHPDLQFRUHRIWKHZLUHG
/$12WKHUEULGJHVPXVWFRQILJXUHRQH³SDUHQW´OLQNWRWKHURRWEULGJHRUWRDEULGJH
FRQQHFWHGWRWKHURRWEULGJH7KHRWKHUILYHDYDLODEOH:'6OLQNVFDQEHVSHFLILHGDV
³FKLOG´OLQNVWRRWKHUEULGJHV7KLVIRUPVDWLHUHGVWDUWRSRORJ\IRUWKHZLUHOHVVEULGJH
QHWZRUN
:KHQXVLQJ:'6RQDUDGLREDQGRQO\ZLUHOHVVEULGJHXQLWVFDQDVVRFLDWHWRHDFK
RWKHU:LUHOHVVFOLHQWVFDQRQO\DVVRFLDWHZLWKWKHDFFHVVSRLQWXVLQJDUDGLREDQG
VHWWRDFFHVVSRLQWRUUHSHDWHUPRGH
Wireless Bridge Links
Between Access Points
802.11a Radio
Bridge Link
802.11g Radio
AP Link 802.11a Radio
Bridge Link
802.11g Radio
AP Link
802.11g Radio
AP Link
Root Bridge
Bridge
802.11a Radio
Bridge Link
802.11g Radio
AP Link Bridge
Bridge
Network
Core
1HWZRUN&RQILJXUDWLRQ
,QIUDVWUXFWXUH:LUHOHVV5HSHDWHU
7KHDFFHVVSRLQWFDQDOVRRSHUDWHLQDEULGJH³UHSHDWHU´PRGHWRH[WHQGWKHUDQJH
RIOLQNVWRZLUHOHVVFOLHQWV7KHDFFHVVSRLQWXVHV:'6WRIRUZDUGWUDIILFEHWZHHQ
WKHUHSHDWHUEULGJHDQGWKHURRWEULGJH7KHDFFHVVSRLQWVXSSRUWVXSWRVL[:'6
UHSHDWHUOLQNV
,QUHSHDWHUPRGHWKHDFFHVVSRLQWGRHVQRWVXSSRUWDQ(WKHUQHWOLQNWRDZLUHG/$1
1RWHWKDWZKHQWKHDFFHVVSRLQWRSHUDWHVLQWKLVPRGHRQO\KDOIWKHQRUPDO
WKURXJKSXWLVSRVVLEOH7KLVLVEHFDXVHWKHDFFHVVSRLQWKDVWRUHFHLYHDQGWKHQ
UHWUDQVPLWDOOGDWDRQWKHVDPHFKDQQHO
Wireless Repeater Links
Between Access Points
802.11g Radio
Repeater Link
802.11g Radio
Repeater Link
802.11g Radio
AP Link
802.11g Radio
AP Link
Root Bridge
Repeater
Network
Core
Repeater
Chapter 5: Initial Configuration
7KH*+]*+]:LUHOHVV$FFHVV3RLQWRIIHUVDYDULHW\RIPDQDJHPHQWRSWLRQV
LQFOXGLQJDZHEEDVHGLQWHUIDFHDGLUHFWFRQQHFWLRQWRWKHFRQVROHSRUW7HOQHW
6HFXUH6KHOO66+RUXVLQJ6103VRIWZDUH
7KHLQLWLDOFRQILJXUDWLRQVWHSVFDQEHPDGHWKURXJKWKHZHEEURZVHULQWHUIDFHRU
&/,7KHDFFHVVSRLQWUHTXHVWVDQ,3DGGUHVVYLD'+&3E\GHIDXOW,IQRUHVSRQVHLV
UHFHLYHGIURPWKH'+&3VHUYHUWKHQWKHDFFHVVSRLQWXVHVWKHGHIDXOWDGGUHVV
,IWKLVDGGUHVVLVQRWFRPSDWLEOHZLWK\RXUQHWZRUN\RXFDQILUVWXVHWKH
FRPPDQGOLQHLQWHUIDFH&/,DVGHVFULEHGEHORZWRFRQILJXUHDYDOLGDGGUHVV
Initial Setup through the CLI
5HTXLUHG&RQQHFWLRQV
7KHDFFHVVSRLQWSURYLGHVDQ56VHULDOSRUWWKDWHQDEOHVDFRQQHFWLRQWRD3&
RUWHUPLQDOIRUPRQLWRULQJDQGFRQILJXUDWLRQ$WWDFKD97FRPSDWLEOHWHUPLQDORU
D3&UXQQLQJDWHUPLQDOHPXODWLRQSURJUDPWRWKHDFFHVVSRLQW<RXFDQXVHWKH
FRQVROHFDEOHSURYLGHGZLWKWKLVSDFNDJHRUXVHDFDEOHWKDWFRPSOLHVZLWKWKH
ZLULQJDVVLJQPHQWVVKRZQRQSDJH%
7RFRQQHFWWRWKHFRQVROHSRUWFRPSOHWHWKHIROORZLQJVWHSV
&RQQHFWWKHFRQVROHFDEOHWRWKHVHULDOSRUWRQDWHUPLQDORUD3&UXQQLQJ
WHUPLQDOHPXODWLRQVRIWZDUHDQGWLJKWHQWKHFDSWLYHUHWDLQLQJVFUHZVRQWKH
'%FRQQHFWRU
&RQQHFWWKHRWKHUHQGRIWKHFDEOHWRWKH56VHULDOSRUWRQWKHDFFHVV
SRLQW
0DNHVXUHWKHWHUPLQDOHPXODWLRQVRIWZDUHLVVHWDVIROORZV
6HOHFWWKHDSSURSULDWHVHULDOSRUW&20SRUWRU
6HWWKHGDWDUDWHWREDXG
6HWWKHGDWDIRUPDWWRGDWDELWVVWRSELWDQGQRSDULW\
6HWIORZFRQWUROWRQRQH
6HWWKHHPXODWLRQPRGHWR97
:KHQXVLQJ+\SHU7HUPLQDOVHOHFW7HUPLQDONH\VQRW:LQGRZVNH\V
,QLWLDO&RQILJXUDWLRQ
2QFH\RXKDYHVHWXSWKHWHUPLQDOFRUUHFWO\SUHVVWKH>(QWHU@NH\WRLQLWLDWHWKH
FRQVROHFRQQHFWLRQ7KHFRQVROHORJLQVFUHHQZLOOEHGLVSOD\HG
)RUDGHVFULSWLRQRIKRZWRXVHWKH&/,VHH³8VLQJWKH&RPPDQG/LQH,QWHUIDFH´RQ
SDJH)RUDOLVWRIDOOWKH&/,FRPPDQGVDQGGHWDLOHGLQIRUPDWLRQRQXVLQJWKH
&/,UHIHUWR³&RPPDQG*URXSV´RQSDJH
,QLWLDO&RQILJXUDWLRQ6WHSV
/RJJLQJ,Q±(QWHU³DGPLQ´IRUWKHXVHUQDPH7KHUHLVQRGHIDXOWSDVVZRUG7KH
&/,SURPSWDSSHDUVGLVSOD\LQJWKHDFFHVVSRLQW¶VQDPH
6HWWLQJWKH,3$GGUHVV±%\GHIDXOWWKHDFFHVVSRLQWLVFRQILJXUHGWRREWDLQ,3
DGGUHVVVHWWLQJVIURPD'+&3VHUYHU,ID'+&3VHUYHULVQRWDYDLODEOHWKH,3
DGGUHVVGHIDXOWVWRZKLFKPD\QRWEHFRPSDWLEOHZLWK\RXUQHWZRUN
<RXZLOOWKHUHIRUHKDYHWRXVHWKHFRPPDQGOLQHLQWHUIDFH&/,WRDVVLJQDQ,3
DGGUHVVWKDWLVFRPSDWLEOHZLWK\RXUQHWZRUN
7\SH³FRQILJXUH´WRHQWHUFRQILJXUDWLRQPRGHWKHQW\SH³LQWHUIDFHHWKHUQHW´WR
DFFHVVWKH(WKHUQHWLQWHUIDFHFRQILJXUDWLRQPRGH
)LUVWW\SH³QRLSGKFS´WRGLVDEOH'+&3FOLHQWPRGH7KHQW\SH³LSDGGUHVV
LSDGGUHVVQHWPDVNJDWHZD\´ZKHUH³LSDGGUHVV´LVWKHDFFHVVSRLQW¶V,3DGGUHVV
³QHWPDVN´LVWKHQHWZRUNPDVNIRUWKHQHWZRUNDQG³JDWHZD\´LVWKHGHIDXOWJDWHZD\
URXWHU&KHFNZLWK\RXUV\VWHPDGPLQLVWUDWRUWRREWDLQDQ,3DGGUHVVWKDWLV
FRPSDWLEOHZLWK\RXUQHWZRUN
$IWHUFRQILJXULQJWKHDFFHVVSRLQW¶V,3SDUDPHWHUV\RXFDQDFFHVVWKHPDQDJHPHQW
LQWHUIDFHIURPDQ\ZKHUHZLWKLQWKHDWWDFKHGQHWZRUN7KHFRPPDQGOLQHLQWHUIDFH
FDQDOVREHDFFHVVHGXVLQJ7HOQHWIURPDQ\FRPSXWHUDWWDFKHGWRWKHQHWZRUN
Username: admin
Password:
Enterprise AP#
Enterprise AP#configure
Enterprise AP(config)#interface ethernet
Enterprise AP(config-if)#
Enterprise AP(if-ethernet)#no ip dhcp
Enterprise AP(if-ethernet)#ip address 192.168.1.1
255.255.255.0 192.168.2.254
Enterprise AP(if-ethernet)#
7KHKRPHSDJHGLVSOD\VWKH0DLQ0HQX
Chapter 6: System Configuration
%HIRUHFRQWLQXLQJZLWKDGYDQFHGFRQILJXUDWLRQILUVWFRPSOHWHWKHLQLWLDOFRQILJXUDWLRQ
VWHSVGHVFULEHGLQ&KDSWHUWRVHWXSDQ,3DGGUHVVIRUWKHDFFHVVSRLQW
7KHDFFHVVSRLQWFDQEHPDQDJHGE\DQ\FRPSXWHUXVLQJDZHEEURZVHU,QWHUQHW
([SORUHURUDERYHRU1HWVFDSHRUDERYH(QWHUWKHFRQILJXUHG,3DGGUHVVRI
WKHDFFHVVSRLQWRUXVHWKHGHIDXOWDGGUHVVKWWS
7RORJLQWRWKHDFFHVVSRLQWHQWHUWKHGHIDXOWXVHUQDPH³DGPLQ´DQGWKHQSUHVV
³/2*,1´:KHQWKHKRPHSDJHGLVSOD\VFOLFNRQ$GYDQFHG6HWXS7KHIROORZLQJ
SDJHZLOOGLVSOD\
7KHLQIRUPDWLRQLQWKLVFKDSWHULVRUJDQL]HGWRUHIOHFWWKHVWUXFWXUHRIWKHZHE
VFUHHQVIRUHDV\UHIHUHQFH+RZHYHULWLVUHFRPPHQGHGWKDW\RXFRQILJXUHDXVHU
QDPHDQGSDVVZRUGDVWKHILUVWVWHSXQGHU$GPLQLVWUDWLRQWRFRQWUROPDQDJHPHQW
DFFHVVWRWKLVGHYLFHSDJH
Advanced Configuration
7KH$GYDQFHG&RQILJXUDWLRQSDJHVLQFOXGHWKHIROORZLQJRSWLRQV
7DEOH 0HQX
0HQX 'HVFULSWLRQ 3DJH
6\VWHP,GHQWLILFDWLRQ
7KHV\VWHPQDPHIRUWKHDFFHVVSRLQWFDQEHOHIWDWLWVGHIDXOWVHWWLQJ+RZHYHU
PRGLI\LQJWKLVSDUDPHWHUFDQKHOS\RXWRPRUHHDVLO\GLVWLQJXLVKGLIIHUHQWGHYLFHVLQ
\RXUQHWZRUN
6\VWHP1DPH±$QDOLDVIRUWKHDFFHVVSRLQWHQDEOLQJWKHGHYLFHWREHXQLTXHO\
LGHQWLILHGRQWKHQHWZRUN'HIDXOW(QWHUSULVH:LUHOHVV$35DQJHFKDUDFWHUV
7DEOH 0HQX
0HQX 'HVFULSWLRQ 3DJH
&/,&RPPDQGVIRU6\VWHP,GHQWLILFDWLRQ±(QWHUWKHJOREDOFRQILJXUDWLRQPRGHDQG
XVHWKHV\VWHPQDPHFRPPDQGWRVSHFLI\DQHZV\VWHPQDPH7KHQUHWXUQWRWKH
([HFPRGHDQGXVHWKHVKRZV\VWHPFRPPDQGWRGLVSOD\WKHFKDQJHVWRWKH
V\VWHPLGHQWLILFDWLRQVHWWLQJV
Enterprise AP#config 7-8
Enter configuration commands, one per line.
Enterprise AP(config)#system name R&D 7-14
Enterprise AP(config)#end 7-90
Enterprise AP#show system 7-24
System Information
==============================================================
Serial Number :
System Up time : 0 days, 0 hours, 32 minutes, 22 seconds
System Name : Enterprise Wireless AP
System Location :
System Contact : Contact
System Country Code : US - UNITED STATES
MAC Address : 00-12-CF-12-34-60
Radio A MAC Address : 00-12-CF-12-34-61
Radio G MAC Address : 00-12-CF-12-34-65
IP Address : 192.168.1.1
Subnet Mask : 255.255.255.0
Default Gateway : 0.0.0.0
VLAN State : DISABLED
Management VLAN ID(AP): 1
IAPP State : ENABLED
DHCP Client : ENABLED
HTTP Server : ENABLED
HTTP Server Port : 80
HTTP Session Timeout : 300 sec(s)
HTTPS Server : ENABLED
HTTPS Server Port : 443
Slot Status : Dual band(a/g)
Boot Rom Version : v1.1.6
Software Version : v4.3.3.1b05
SSH Server : ENABLED
SSH Server Port : 22
Telnet Server : ENABLED
DHCP Relay : DISABLED
==============================================================
Enterprise AP#
7&3,36HWWLQJV
&RQILJXULQJWKHDFFHVVSRLQWZLWKDQ,3DGGUHVVH[SDQGV\RXUDELOLW\WRPDQDJHWKH
DFFHVVSRLQW$QXPEHURIDFFHVVSRLQWIHDWXUHVGHSHQGRQ,3DGGUHVVLQJWR
RSHUDWH
1RWH <RXFDQXVHWKHZHEEURZVHULQWHUIDFHWRDFFHVV,3DGGUHVVLQJRQO\LIWKHDFFHVV
SRLQWDOUHDG\KDVDQ,3DGGUHVVWKDWLVUHDFKDEOHWKURXJK\RXUQHWZRUN
%\GHIDXOWWKHDFFHVVSRLQWZLOOEHDXWRPDWLFDOO\FRQILJXUHGZLWK,3VHWWLQJVIURPD
'\QDPLF+RVW&RQILJXUDWLRQ3URWRFRO'+&3VHUYHU+RZHYHULI\RXDUHQRWXVLQJ
D'+&3VHUYHUWRFRQILJXUH,3DGGUHVVLQJXVHWKH&/,WRPDQXDOO\FRQILJXUHWKH
LQLWLDO,3YDOXHVVHHSDJH$IWHU\RXKDYHQHWZRUNDFFHVVWRWKHDFFHVVSRLQW
\RXFDQXVHWKHZHEEURZVHULQWHUIDFHWRPRGLI\WKHLQLWLDO,3FRQILJXUDWLRQLI
QHHGHG
1RWH ,IWKHUHLVQR'+&3VHUYHURQ\RXUQHWZRUNRU'+&3IDLOVWKHDFFHVVSRLQWZLOO
DXWRPDWLFDOO\VWDUWXSZLWKDGHIDXOW,3DGGUHVVRI
'+&3&OLHQW(QDEOH±6HOHFWWKLVRSWLRQWRREWDLQWKH,3VHWWLQJVIRUWKHDFFHVV
SRLQWIURPD'+&3'\QDPLF+RVW&RQILJXUDWLRQ3URWRFROVHUYHU7KH,3DGGUHVV
VXEQHWPDVNGHIDXOWJDWHZD\DQG'RPDLQ1DPH6HUYHU'16DGGUHVVDUH
G\QDPLFDOO\DVVLJQHGWRWKHDFFHVVSRLQWE\WKHQHWZRUN'+&3VHUYHU
'HIDXOW (QDEOHG
'+&3&OLHQW'LVDEOH±6HOHFWWKLVRSWLRQWRPDQXDOO\FRQILJXUHDVWDWLFDGGUHVVIRU
WKHDFFHVVSRLQW
,3$GGUHVV7KH,3DGGUHVVRIWKHDFFHVVSRLQW9DOLG,3DGGUHVVHVFRQVLVWRIIRXU
GHFLPDOQXPEHUVWRVHSDUDWHGE\SHULRGV
6XEQHW0DVN7KHPDVNWKDWLGHQWLILHVWKHKRVWDGGUHVVELWVXVHGIRUURXWLQJWR
VSHFLILFVXEQHWV
'HIDXOW*DWHZD\7KHGHIDXOWJDWHZD\LVWKH,3DGGUHVVRIWKHURXWHUIRUWKHDFFHVV
SRLQWZKLFKLVXVHGLIWKHUHTXHVWHGGHVWLQDWLRQDGGUHVVLVQRWRQWKHORFDOVXEQHW
,I\RXKDYHPDQDJHPHQWVWDWLRQV'165$',86RURWKHUQHWZRUNVHUYHUV
ORFDWHGRQDQRWKHUVXEQHWW\SHWKH,3DGGUHVVRIWKHGHIDXOWJDWHZD\URXWHULQWKH
WH[WILHOGSURYLGHG2WKHUZLVHOHDYHWKHDGGUHVVDVDOO]HURV
3ULPDU\DQG6HFRQGDU\'16$GGUHVV7KH,3DGGUHVVRI'RPDLQ1DPH6HUYHUV
RQWKHQHWZRUN$'16PDSVQXPHULFDO,3DGGUHVVHVWRGRPDLQQDPHVDQGFDQ
EHXVHGWRLGHQWLI\QHWZRUNKRVWVE\IDPLOLDUQDPHVLQVWHDGRIWKH,3DGGUHVVHV
,I\RXKDYHRQHRUPRUH'16VHUYHUVORFDWHGRQWKHORFDOQHWZRUNW\SHWKH,3
DGGUHVVHVLQWKHWH[WILHOGVSURYLGHG2WKHUZLVHOHDYHWKHDGGUHVVHVDVDOO]HURV
&/,&RPPDQGVIRU7&3,36HWWLQJV±)URPWKHJOREDOFRQILJXUDWLRQPRGHHQWHUWKH
LQWHUIDFHFRQILJXUDWLRQPRGHZLWKWKHLQWHUIDFHHWKHUQHWFRPPDQG8VHWKHLS
GKFSFRPPDQGWRHQDEOHWKH'+&3FOLHQWRUQRLSGKFSWRGLVDEOHLW7RPDQXDOO\
FRQILJXUHDQDGGUHVVVSHFLI\WKHQHZ,3DGGUHVVVXEQHWPDVNDQGGHIDXOW
JDWHZD\XVLQJWKHLSDGGUHVVFRPPDQG7RVSHFLI\'16VHUYHUDGGUHVVHVXVHWKH
GQVVHUYHUFRPPDQG7KHQXVHWKHVKRZLQWHUIDFHHWKHUQHWFRPPDQGIURPWKH
([HFPRGHWRGLVSOD\WKHFXUUHQW,3VHWWLQJV
Enterprise AP(config)#interface ethernet 7-90
Enter Ethernet configuration commands, one per line.
Enterprise AP(if-ethernet)#no ip dhcp 7-92
Enterprise AP(if-ethernet)#ip address 192.168.1.2
255.255.255.0 192.168.1.253 7-91
Enterprise AP(if-ethernet)#dns primary-server 192.168.1.55 7-91
Enterprise AP(if-ethernet)#dns secondary-server 10.1.0.55 7-91
Enterprise AP(config)#end 7-8
Enterprise AP#show interface ethernet 7-94
Ethernet Interface Information
========================================
IP Address : 192.168.1.2
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.1.253
Primary DNS : 192.168.1.55
Secondary DNS : 10.1.0.55
Admin status : Up
Operational status : Up
========================================
Enterprise AP#
5$',86
5HPRWH$XWKHQWLFDWLRQ'LDOLQ8VHU6HUYLFH5$',86LVDQDXWKHQWLFDWLRQSURWRFRO
WKDWXVHVVRIWZDUHUXQQLQJRQDFHQWUDOVHUYHUWRFRQWURODFFHVVWR5$',86DZDUH
GHYLFHVRQWKHQHWZRUN$QDXWKHQWLFDWLRQVHUYHUFRQWDLQVDGDWDEDVHRIXVHU
FUHGHQWLDOVIRUHDFKXVHUWKDWUHTXLUHVDFFHVVWRWKHQHWZRUN
$SULPDU\5$',86VHUYHUPXVWEHVSHFLILHGIRUWKHDFFHVVSRLQWWRLPSOHPHQW,(((
;QHWZRUNDFFHVVFRQWURODQG:L)L3URWHFWHG$FFHVV:3$ZLUHOHVVVHFXULW\
$VHFRQGDU\5$',86VHUYHUPD\DOVREHVSHFLILHGDVDEDFNXSVKRXOGWKHSULPDU\
VHUYHUIDLORUEHFRPHLQDFFHVVLEOH
,QDGGLWLRQWKHFRQILJXUHG5$',86VHUYHUFDQDOVRDFWDVD5$',86$FFRXQWLQJ
VHUYHUDQGUHFHLYHXVHUVHVVLRQDFFRXQWLQJLQIRUPDWLRQIURPWKHDFFHVVSRLQW
5$',86$FFRXQWLQJFDQEHXVHGWRSURYLGHYDOXDEOHLQIRUPDWLRQRQXVHUDFWLYLW\LQ
WKHQHWZRUN
1RWH 7KLVJXLGHDVVXPHVWKDW\RXKDYHDOUHDG\FRQILJXUHG5$',86VHUYHUVWR
VXSSRUWWKHDFFHVVSRLQW&RQILJXUDWLRQRI5$',86VHUYHUVRIWZDUHLVEH\RQGWKH
VFRSHRIWKLVJXLGHUHIHUWRWKHGRFXPHQWDWLRQSURYLGHGZLWKWKH5$',86VHUYHU
VRIWZDUH
0$&$GGUHVV)RUPDW±0$&DGGUHVVHVFDQEHVSHFLILHGLQRQHRIIRXUIRUPDWV
XVLQJQRGHOLPHWHUZLWKDVLQJOHGDVKGHOLPHWHUZLWKPXOWLSOHGDVKGHOLPHWHUVDQG
ZLWKPXOWLSOHFRORQGHOLPHWHUV
9/$1,')RUPDW±$9/$1,'DQXPEHUEHWZHHQDQGFDQEHDVVLJQHGWR
HDFKFOLHQWDIWHUVXFFHVVIXODXWKHQWLFDWLRQXVLQJ,(((;DQGDFHQWUDO5$',86
VHUYHU7KHXVHU9/$1,'VPXVWEHFRQILJXUHGRQWKH5$',86VHUYHUIRUHDFKXVHU
DXWKRUL]HGWRDFFHVVWKHQHWZRUN9/$1,'VFDQEHHQWHUHGDVKH[DGHFLPDO
QXPEHUVRUDV$6&,,VWULQJV
3ULPDU\5DGLXV6HUYHU6HWXS±&RQILJXUHWKHIROORZLQJVHWWLQJVWRXVH5$',86
DXWKHQWLFDWLRQRQWKHDFFHVVSRLQW
5DGLXV6WDWXV(QDEOLQJ5DGLXV6WDWXVDOORZVWKHVHWWLQJVRI5$',86
DXWKHQWLFDWLRQ'HIDXOW(QDEOH
,3$GGUHVV6SHFLILHVWKH,3DGGUHVVRUKRVWQDPHRIWKH5$',86VHUYHU
3RUW7KH8'3SRUWQXPEHUXVHGE\WKH5$',86VHUYHUIRUDXWKHQWLFDWLRQ
PHVVDJHV5DQJH'HIDXOW
.H\$VKDUHGWH[WVWULQJXVHGWRHQFU\SWPHVVDJHVEHWZHHQWKHDFFHVVSRLQWDQG
WKH5$',86VHUYHU%HVXUHWKDWWKHVDPHWH[WVWULQJLVVSHFLILHGRQWKH5$',86
VHUYHU'RQRWXVHEODQNVSDFHVLQWKHVWULQJ0D[LPXPOHQJWKFKDUDFWHUV
7LPHRXW1XPEHURIVHFRQGVWKHDFFHVVSRLQWZDLWVIRUDUHSO\IURPWKH5$',86
VHUYHUEHIRUHUHVHQGLQJDUHTXHVW5DQJH VHFRQGV'HIDXOW
5HWUDQVPLWDWWHPSWV7KHQXPEHURIWLPHVWKHDFFHVVSRLQWWULHVWRUHVHQGD
UHTXHVWWRWKH5$',86VHUYHUEHIRUHDXWKHQWLFDWLRQIDLOV5DQJH'HIDXOW
$FFRXQWLQJ3RUW7KH5$',86$FFRXQWLQJVHUYHU8'3SRUWXVHGIRUDFFRXQWLQJ
PHVVDJHV5DQJHRU'HIDXOWGLVDEOHG
,QWHULP8SGDWH7LPHRXW7KHLQWHUYDOEHWZHHQWUDQVPLWWLQJDFFRXQWLQJXSGDWHVWR
WKH5$',86VHUYHU5DQJH'HIDXOWVHFRQGV
1RWH )RUWKH7LPHRXWDQG5HWUDQVPLWDWWHPSWVILHOGVDFFHSWWKHGHIDXOWYDOXHVXQOHVV
\RXH[SHULHQFHSUREOHPVFRQQHFWLQJWRWKH5$',86VHUYHURYHUWKHQHWZRUN
6HFRQGDU\5DGLXV6HUYHU6HWXS±&RQILJXUHDVHFRQGDU\5$',86VHUYHUWRSURYLGH
DEDFNXSLQFDVHWKHSULPDU\VHUYHUIDLOV7KHDFFHVVSRLQWXVHVWKHVHFRQGDU\
VHUYHULIWKHSULPDU\VHUYHUIDLOVRUEHFRPHVLQDFFHVVLEOH2QFHWKHDFFHVVSRLQW
VZLWFKHVRYHUWRWKHVHFRQGDU\VHUYHULWSHULRGLFDOO\DWWHPSWVWRHVWDEOLVK
FRPPXQLFDWLRQDJDLQZLWKSULPDU\VHUYHU,IFRPPXQLFDWLRQZLWKWKHSULPDU\VHUYHU
LVUHHVWDEOLVKHGWKHVHFRQGDU\VHUYHUUHYHUWVWRDEDFNXSUROH
&/,&RPPDQGVIRU5$',86±)URPWKHJOREDOFRQILJXUDWLRQPRGHXVHWKH
UDGLXVVHUYHUDGGUHVVFRPPDQGWRVSHFLI\WKHDGGUHVVRIWKHSULPDU\RU
VHFRQGDU\5$',86VHUYHUV7KHIROORZLQJH[DPSOHFRQILJXUHVWKHVHWWLQJVIRUWKH
SULPDU\5$',86VHUYHU&RQILJXUHWKHRWKHUSDUDPHWHUVIRUWKH5$',86VHUYHU
7KHQXVHWKHVKRZVKRZUDGLXVFRPPDQGIURPWKH([HFPRGHWRGLVSOD\WKH
FXUUHQWVHWWLQJVIRUWKHSULPDU\DQGVHFRQGDU\5$',86VHUYHUV
Enterprise AP(config)#radius-server address 192.168.1.25 7-60
Enterprise AP(config)#radius-server port 181 7-61
Enterprise AP(config)#radius-server key green 7-61
Enterprise AP(config)#radius-server timeout 10 7-62
Enterprise AP(config)#radius-server retransmit 5 7-62
Enterprise AP(config)#radius-server port-accounting 1813 7-63
Enterprise AP(config)#radius-server timeout-interim 500 7-63
Enterprise AP(config)#exit
Enterprise AP#show radius 7-65
Radius Server Information
========================================
IP : 192.168.1.25
Port : 181
Key : *****
Retransmit : 5
Timeout : 10
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Radius Secondary Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Enterprise AP#
66+6HWWLQJV
7HOQHWLVDUHPRWHPDQDJHPHQWWRROWKDWFDQEHXVHGWRFRQILJXUHWKHDFFHVVSRLQW
IURPDQ\ZKHUHLQWKHQHWZRUN+RZHYHU7HOQHWLVQRWVHFXUHIURPKRVWLOHDWWDFNV
7KH6HFXUH6KHOO66+FDQDFWDVDVHFXUHUHSODFHPHQWIRU7HOQHW7KH66+
SURWRFROXVHVJHQHUDWHGSXEOLFNH\VWRHQFU\SWDOOGDWDWUDQVIHUVSDVVLQJEHWZHHQ
WKHDFFHVVSRLQWDQG66+HQDEOHGPDQDJHPHQWVWDWLRQFOLHQWVDQGHQVXUHVWKDW
GDWDWUDYHOLQJRYHUWKHQHWZRUNDUULYHVXQDOWHUHG&OLHQWVFDQWKHQVHFXUHO\XVHWKH
ORFDOXVHUQDPHDQGSDVVZRUGIRUDFFHVVDXWKHQWLFDWLRQ
1RWHWKDW66+FOLHQWVRIWZDUHQHHGVWREHLQVWDOOHGRQWKHPDQDJHPHQWVWDWLRQWR
DFFHVVWKHDFFHVVSRLQWIRUPDQDJHPHQWYLDWKH66+SURWRFRO
1RWHV 7KHDFFHVVSRLQWVXSSRUWVRQO\66+YHUVLRQ
$IWHUERRWXSWKH66+VHUYHUQHHGVDERXWWZRPLQXWHVWRJHQHUDWHKRVW
HQFU\SWLRQNH\V7KH66+VHUYHULVGLVDEOHGZKLOHWKHNH\VDUHEHLQJ
JHQHUDWHG
66+6HWWLQJV
7HOQHW6HUYHU6WDWXV±(QDEOHVRUGLVDEOHVWKH7HOQHWVHUYHU'HIDXOW(QDEOHG
66+6HUYHU6WDWXV±(QDEOHVRUGLVDEOHVWKH66+VHUYHU'HIDXOW(QDEOHG
66+6HUYHU3RUW±6HWVWKH8'3SRUWIRUWKH66+VHUYHU5DQJH
'HIDXOW
&/,&RPPDQGVIRU66+±7RHQDEOHWKH66+VHUYHUXVHWKHLSVVKVHUYHUHQDEOH
FRPPDQGIURPWKH&/,(WKHUQHWLQWHUIDFHFRQILJXUDWLRQPRGH7RVHWWKH66+
VHUYHU8'3SRUWXVHWKHLSVVKVHUYHUSRUWFRPPDQG7RYLHZWKHFXUUHQWVHWWLQJV
XVHWKHVKRZV\VWHPFRPPDQGIURPWKH&/,([HFPRGHQRWVKRZQLQWKH
IROORZLQJH[DPSOH
$XWKHQWLFDWLRQ
:LUHOHVVFOLHQWVFDQEHDXWKHQWLFDWHGIRUQHWZRUNDFFHVVE\FKHFNLQJWKHLU0$&
DGGUHVVDJDLQVWWKHORFDOGDWDEDVHFRQILJXUHGRQWKHDFFHVVSRLQWRUE\XVLQJD
GDWDEDVHFRQILJXUHGRQDFHQWUDO5$',86VHUYHU$OWHUQDWLYHO\DXWKHQWLFDWLRQFDQ
EHLPSOHPHQWHGXVLQJWKH,(((;QHWZRUNDFFHVVFRQWUROSURWRFRO
$FOLHQW¶V0$&DGGUHVVSURYLGHVUHODWLYHO\ZHDNXVHUDXWKHQWLFDWLRQVLQFH0$&
DGGUHVVHVFDQEHHDVLO\FDSWXUHGDQGXVHGE\DQRWKHUVWDWLRQWREUHDNLQWRWKH
QHWZRUN8VLQJ;SURYLGHVPRUHUREXVWXVHUDXWKHQWLFDWLRQXVLQJXVHUQDPHV
DQGSDVVZRUGVRUGLJLWDOFHUWLILFDWHV<RXFDQFRQILJXUHWKHDFFHVVSRLQWWRXVHERWK
0$&DGGUHVVDQG;DXWKHQWLFDWLRQZLWKFOLHQWVWDWLRQ0$&DXWKHQWLFDWLRQ
RFFXUULQJSULRUWR,(((;DXWKHQWLFDWLRQ+RZHYHULWLVEHWWHUWRFKRRVHRQHRU
WKHRWKHUDVDSSURSULDWH
7DNHQRWHRIWKHIROORZLQJSRLQWVEHIRUHFRQILJXULQJ0$&DGGUHVVRU;
DXWKHQWLFDWLRQ
8VH0$&DGGUHVVDXWKHQWLFDWLRQIRUDVPDOOQHWZRUNZLWKDOLPLWHGQXPEHURI
XVHUV0$&DGGUHVVHVFDQEHPDQXDOO\FRQILJXUHGRQWKHDFFHVVSRLQWLWVHOI
ZLWKRXWWKHQHHGWRVHWXSD5$',86VHUYHUEXWPDQDJLQJDODUJHQXPEHURI0$&
DGGUHVVHVDFURVVPDQ\DFFHVVSRLQWVLVYHU\FXPEHUVRPH$5$',86VHUYHUFDQ
EHXVHGWRFHQWUDOO\PDQDJHDODUJHUGDWDEDVHRIXVHU0$&DGGUHVVHV
8VH,(((;DXWKHQWLFDWLRQIRUQHWZRUNVZLWKDODUJHUQXPEHURIXVHUVDQG
ZKHUHVHFXULW\LVWKHPRVWLPSRUWDQWLVVXH:KHQXVLQJ;DXWKHQWLFDWLRQD
5$',86VHUYHULVUHTXLUHGLQWKHZLUHGQHWZRUNWRFHQWUDOO\PDQDJHWKHFUHGHQWLDOV
RIWKHZLUHOHVVFOLHQWV,WDOVRSURYLGHVDPHFKDQLVPIRUHQKDQFHGQHWZRUNVHFXULW\
XVLQJG\QDPLFHQFU\SWLRQNH\URWDWLRQRU:)L3URWHFWHG$FFHVV:3$
1RWH ,I\RXFRQILJXUH5$',860$&DXWKHQWLFDWLRQWRJHWKHUZLWK;5$',860$&
DGGUHVVDXWKHQWLFDWLRQLVSHUIRUPHGSULRUWR;DXWKHQWLFDWLRQ,I5$',86
0$&DXWKHQWLFDWLRQVXFFHHGVWKHQ;DXWKHQWLFDWLRQLVSHUIRUPHG,I
5$',860$&DXWKHQWLFDWLRQIDLOV;DXWKHQWLFDWLRQLVQRWSHUIRUPHG
7KHDFFHVVSRLQWFDQDOVRRSHUDWHLQD;VXSSOLFDQWPRGH7KLVHQDEOHVWKH
DFFHVVSRLQWLWVHOIWREHDXWKHQWLFDWHGZLWKD5$',86VHUYHUXVLQJDFRQILJXUHG
0'XVHUQDPHDQGSDVVZRUG7KLVSUHYHQWVURJXHDFFHVVSRLQWVIURPJDLQLQJ
DFFHVVWRWKHQHWZRUN
Enterprise AP(if-ethernet)#no ip telnet-server 7-17
Enterprise AP(if-ethernet)#ip ssh-server enable 7-16
Enterprise AP(if-ethernet)#ip ssh-server port 1124 7-16
Enterprise AP(if-ethernet)#exit
Enterprise AP(if-ethernet)#configure
0$&$XWKHQWLFDWLRQ±<RXFDQFRQILJXUHDOLVWRIWKH0$&DGGUHVVHVIRUZLUHOHVV
FOLHQWVWKDWDUHDXWKRUL]HGWRDFFHVVWKHQHWZRUN7KLVSURYLGHVDEDVLFOHYHORI
DXWKHQWLFDWLRQIRUZLUHOHVVFOLHQWVDWWHPSWLQJWRJDLQDFFHVVWRWKHQHWZRUN$
GDWDEDVHRIDXWKRUL]HG0$&DGGUHVVHVFDQEHVWRUHGORFDOO\RQWKHDFFHVVSRLQWRU
UHPRWHO\RQDFHQWUDO5$',86VHUYHU
'HIDXOW'LVDEOHG
'LVDEOHG1RFKHFNVDUHSHUIRUPHGRQDQDVVRFLDWLQJVWDWLRQ¶V0$&DGGUHVV
/RFDO0$&7KH0$&DGGUHVVRIWKHDVVRFLDWLQJVWDWLRQLVFRPSDUHGDJDLQVWWKH
ORFDOGDWDEDVHVWRUHGRQWKHDFFHVVSRLQW8VHWKH/RFDO0$&$XWKHQWLFDWLRQ
VHFWLRQRIWKLVZHESDJHWRVHWXSWKHORFDOGDWDEDVHDQGFRQILJXUHDOODFFHVV
SRLQWVLQWKHZLUHOHVVQHWZRUNVHUYLFHDUHDZLWKWKHVDPH0$&DGGUHVVGDWDEDVH
5DGLXV0$&7KH0$&DGGUHVVRIWKHDVVRFLDWLQJVWDWLRQLVVHQWWRDFRQILJXUHG
5$',86VHUYHUIRUDXWKHQWLFDWLRQ:KHQXVLQJD5$',86DXWKHQWLFDWLRQVHUYHUIRU
0$&DGGUHVVDXWKHQWLFDWLRQWKHVHUYHUPXVWILUVWEHFRQILJXUHGLQWKH5DGLXV
ZLQGRZVHH³5$',86´RQSDJH7KHGDWDEDVHRI0$&DGGUHVVHVDQG
ILOWHULQJSROLF\PXVWEHGHILQHGLQWKH5$',86VHUYHU
1RWH 0$&DGGUHVVHVRQWKH5$',86VHUYHUFDQEHHQWHUHGLQIRXUGLIIHUHQWIRUPDWV
VHH³5$',86´RQSDJH
;6XSSOLFDQW±7KHDFFHVVSRLQWFDQDOVRRSHUDWHLQD;VXSSOLFDQW
PRGH7KLVHQDEOHVWKHDFFHVVSRLQWLWVHOIWREHDXWKHQWLFDWHGZLWKD5$',86VHUYHU
XVLQJDFRQILJXUHG0'XVHUQDPHDQGSDVVZRUG7KLVSUHYHQWVURJXHDFFHVV
SRLQWVIURPJDLQLQJDFFHVVWRWKHQHWZRUN
/RFDO0$&$XWKHQWLFDWLRQ±&RQILJXUHVWKHORFDO0$&DXWKHQWLFDWLRQGDWDEDVH7KH
0$&GDWDEDVHSURYLGHVDPHFKDQLVPWRWDNHFHUWDLQDFWLRQVEDVHGRQDZLUHOHVV
FOLHQW¶V0$&DGGUHVV7KH0$&OLVWFDQEHFRQILJXUHGWRDOORZRUGHQ\QHWZRUN
DFFHVVWRVSHFLILFFOLHQWV
6\VWHP'HIDXOW6SHFLILHVDGHIDXOWDFWLRQIRUDOOXQNQRZQ0$&DGGUHVVHVWKDWLV
WKRVHQRWOLVWHGLQWKHORFDO0$&GDWDEDVH
'HQ\%ORFNVDFFHVVIRUDOO0$&DGGUHVVHVH[FHSWWKRVHOLVWHGLQWKHORFDO
GDWDEDVHDV³$OORZ´
$OORZ3HUPLWVDFFHVVIRUDOO0$&DGGUHVVHVH[FHSWWKRVHOLVWHGLQWKHORFDO
GDWDEDVHDV³'HQ\´
0$&$XWKHQWLFDWLRQ6HWWLQJV(QWHUVVSHFLILHG0$&DGGUHVVHVDQGSHUPLVVLRQV
LQWRWKHORFDO0$&GDWDEDVH
0$&$GGUHVV3K\VLFDODGGUHVVRIDFOLHQW(QWHUVL[SDLUVRIKH[DGHFLPDOGLJLWV
VHSDUDWHGE\K\SKHQVIRUH[DPSOH'$%
3HUPLVVLRQ6HOHFW$OORZWRSHUPLWDFFHVVRU'HQ\WREORFNDFFHVV,I'HOHWHLV
VHOHFWHGWKHVSHFLILHG0$&DGGUHVVHQWU\LVUHPRYHGIURPWKHGDWDEDVH
8SGDWH(QWHUVWKHVSHFLILHG0$&DGGUHVVDQGSHUPLVVLRQVHWWLQJLQWRWKHORFDO
GDWDEDVH
0$&$XWKHQWLFDWLRQ7DEOH'LVSOD\VFXUUHQWHQWULHVLQWKHORFDO0$&GDWDEDVH
&/,&RPPDQGVIRU/RFDO0$&$XWKHQWLFDWLRQ±8VHWKHPDFDXWKHQWLFDWLRQ
VHUYHUFRPPDQGIURPWKHJOREDOFRQILJXUDWLRQPRGHWRHQDEOHORFDO0$&
DXWKHQWLFDWLRQ8VHWKHPDFDXWKHQWLFDWLRQVHVVLRQWLPHRXWFRPPDQGWRVHWWKH
DXWKHQWLFDWLRQLQWHUYDODQGZHEUHGLUHFWFRPPDQGWRHQDEOHZHEEDVHG
DXWKHQWLFDWLRQIRUVHUYLFHELOOLQJ6HWWKHGHIDXOWDFWLRQIRU0$&DGGUHVVHVQRWLQWKH
ORFDOWDEOHXVLQJWKHDGGUHVVILOWHUGHIDXOWFRPPDQGWKHQHQWHU0$&DGGUHVVHVLQ
WKHORFDOWDEOHXVLQJWKHDGGUHVVILOWHUHQWU\FRPPDQG7RUHPRYHDQHQWU\IURP
WKHWDEOHXVHWKHDGGUHVVILOWHUGHOHWHFRPPDQG7RGLVSOD\WKHFXUUHQWVHWWLQJV
XVHWKHVKRZDXWKHQWLFDWLRQFRPPDQGIURPWKH([HFPRGH
Enterprise AP(config)#mac-authentication server local 7-73
Enterprise AP(config)#mac-authentication session-timeout 5 7-73
Enterprise AP(config)#web-redirect 7-20
Enterprise AP(config)#address filter default denied 7-71
Enterprise AP(config)#address filter entry
00-70-50-cc-99-1a denied 7-72
Enterprise AP(config)#address filter entry
00-70-50-cc-99-1b allowed
Enterprise AP(config)#address filter entry
00-70-50-cc-99-1c allowed
Enterprise AP(config)#address filter delete
00-70-50-cc-99-1c 7-72
Enterprise AP(config)#exit
Enterprise AP#show authentication 7-69
Authentication Information
===========================================================
MAC Authentication Server : LOCAL
MAC Auth Session Timeout Value : 0 min
802.1x supplicant : DISABLED
802.1x supplicant user : EMPTY
802.1x supplicant password : EMPTY
Address Filtering : DENIED
System Default : ALLOW addresses not found in filter table.
Filter Table
MAC Address Status
----------------- ----------
00-70-50-cc-99-1a DENIED
00-70-50-cc-99-1b ALLOWED
=========================================================
Enterprise AP#
&/,&RPPDQGVIRU5$',860$&$XWKHQWLFDWLRQ±8VHWKHPDFDXWKHQWLFDWLRQ
VHUYHUFRPPDQGIURPWKHJOREDOFRQILJXUDWLRQPRGHWRHQDEOHUHPRWH0$&
DXWKHQWLFDWLRQ6HWWKHWLPHRXWYDOXHIRUUHDXWKHQWLFDWLRQXVLQJWKHPDF
DXWKHQWLFDWLRQVHVVLRQWLPHRXWFRPPDQG%HVXUHWRDOVRFRQILJXUHFRQQHFWLRQ
VHWWLQJVIRUWKH5$',86VHUYHUQRWVKRZQLQWKHIROORZLQJH[DPSOH7RGLVSOD\WKH
FXUUHQWVHWWLQJVXVHWKHVKRZDXWKHQWLFDWLRQFRPPDQGIURPWKH([HFPRGH
&/,&RPPDQGIRU[6XSSOLFDQW±7RFRQILJXUHWKHDFFHVVSRLQWWRRSHUDWHDVD
;VXSSOLFDQWILUVWXVHWKH;VXSSOLFDQWXVHUFRPPDQGWRVHWDXVHU
QDPHDQGSDVVZRUGIRUWKHDFFHVVSRLQWWKHQXVHWKH;VXSSOLFDQWFRPPDQG
WRHQDEOHWKHIHDWXUH7RGLVSOD\WKHFXUUHQWVHWWLQJVXVHWKHVKRZDXWKHQWLFDWLRQ
FRPPDQGIURPWKH([HFPRGHQRWVKRZQLQWKHIROORZLQJH[DPSOH
Enterprise AP(config)#mac-authentication server remote 7-73
Enterprise AP(config)#mac-authentication
session-timeout 300 7-73
Enterprise AP(config)#exit
Enterprise AP#show authentication 7-69
Authentication Information
===========================================================
MAC Authentication Server : REMOTE
MAC Auth Session Timeout Value : 300 min
802.1x supplicant : DISABLED
802.1x supplicant user : EMPTY
802.1x supplicant password : EMPTY
Address Filtering : DENIED
System Default : DENY addresses not found in filter table.
Filter Table
MAC Address Status
----------------- ----------
00-70-50-cc-99-1a DENIED
00-70-50-cc-99-1b ALLOWED
=========================================================
Enterprise AP#
Enterprise AP(config)#802.1X supplicant user secureAP dot1xpass 7-69
Enterprise AP(config)#802.1X supplicant 7-69
Enterprise AP(config)#
)LOWHU&RQWURO
7KHDFFHVVSRLQWFDQHPSOR\QHWZRUNWUDIILFIUDPHILOWHULQJWRFRQWURODFFHVVWR
QHWZRUNUHVRXUFHVDQGLQFUHDVHVHFXULW\<RXFDQSUHYHQWFRPPXQLFDWLRQVEHWZHHQ
ZLUHOHVVFOLHQWVDQGSUHYHQWDFFHVVSRLQWPDQDJHPHQWIURPZLUHOHVVFOLHQWV$OVR
\RXFDQEORFNVSHFLILF(WKHUQHWWUDIILFIURPEHLQJIRUZDUGHGE\WKHDFFHVVSRLQW
,QWHU&OLHQW67$V&RPPXQLFDWLRQ)LOWHU±6HWVWKHJOREDOPRGHIRU
ZLUHOHVVWRZLUHOHVVFRPPXQLFDWLRQVEHWZHHQFOLHQWVDVVRFLDWHGWR9LUWXDO$39$3
LQWHUIDFHVRQWKHDFFHVVSRLQW'HIDXOW3UHYHQW,QWHUDQG,QWUD9$3FOLHQW
&RPPXQLFDWLRQ
'LVDEOHG$OOFOLHQWVFDQFRPPXQLFDWHZLWKHDFKRWKHUWKURXJKWKHDFFHVVSRLQW
3UHYHQW,QWUD9$3FOLHQWFRPPXQLFDWLRQ:KHQHQDEOHGFOLHQWVDVVRFLDWHGZLWKD
VSHFLILF9$3LQWHUIDFHFDQQRWHVWDEOLVKZLUHOHVVFRPPXQLFDWLRQVZLWKHDFKRWKHU
&OLHQWVFDQFRPPXQLFDWHZLWKFOLHQWVDVVRFLDWHGWRRWKHU9$3LQWHUIDFHV
3UHYHQW,QWHUDQG,QWUD9$3FOLHQWFRPPXQLFDWLRQ:KHQHQDEOHGFOLHQWVFDQQRW
HVWDEOLVKZLUHOHVVFRPPXQLFDWLRQVZLWKDQ\RWKHUFOLHQWHLWKHUWKRVHDVVRFLDWHGWR
WKHVDPH9$3LQWHUIDFHRUDQ\RWKHU9$3LQWHUIDFH
$30DQDJHPHQW)LOWHU±&RQWUROVPDQDJHPHQWDFFHVVWRWKHDFFHVVSRLQWIURP
ZLUHOHVVFOLHQWV0DQDJHPHQWLQWHUIDFHVLQFOXGHWKHZHE7HOQHWRU6103
'HIDXOW 'LVDEOHG
'LVDEOHG$OORZVPDQDJHPHQWDFFHVVIURPZLUHOHVVFOLHQWV
(QDEOHG%ORFNVPDQDJHPHQWDFFHVVIURPZLUHOHVVFOLHQWV
8SOLQN3RUW0$&$GGUHVV)LOWHULQJ6WDWXV±3UHYHQWVWUDIILFZLWKVSHFLILHGVRXUFH
0$&DGGUHVVHVIURPEHLQJIRUZDUGHGWRZLUHOHVVFOLHQWVWKURXJKWKHDFFHVVSRLQW
<RXFDQDGGDPD[LPXPRIIRXU0$&DGGUHVVHVWRWKHILOWHUWDEOH'HIDXOW
'LVDEOHG
0$&$GGUHVV6SHFYLILHVD0$&DGGUHVVWRILOWHULQWKHIRUP[[[[[[[[[[[[
3HUPLVVLRQ$GGVRUGHOHWHVD0$&DGGUHVVIURPWKHILOWHULQJWDEOH
(WKHUQHW7\SH)LOWHU±&RQWUROVFKHFNVRQWKH(WKHUQHWW\SHRIDOOLQFRPLQJDQG
RXWJRLQJ(WKHUQHWSDFNHWVDJDLQVWWKHSURWRFROILOWHULQJWDEOH'HIDXOW 'LVDEOHG
'LVDEOHG$FFHVVSRLQWGRHVQRWILOWHU(WKHUQHWSURWRFROW\SHV
(QDEOHG$FFHVVSRLQWILOWHUV(WKHUQHWSURWRFROW\SHVEDVHGRQWKHFRQILJXUDWLRQRI
SURWRFROW\SHVLQWKHILOWHUWDEOH,IWKHVWDWXVRIDSURWRFROLVVHWWR³21´WKHSURWRFRO
LVILOWHUHGIURPWKHDFFHVVSRLQW
1RWH (WKHUQHWSURWRFROW\SHVQRWOLVWHGLQWKHILOWHULQJWDEOHDUHDOZD\VIRUZDUGHGE\WKH
DFFHVVSRLQW
(WKHUQHW7\SH)LOWHU±(QDEOHVRUGLVDEOHV(WKHUQHWILOWHULQJRQWKHSRUW'HIDXOW
'LVDEOHG
&/,&RPPDQGVIRU%ULGJH)LOWHULQJ±8VHWKHILOWHUORFDOEULGJHFRPPDQGIURPWKH
JOREDOFRQILJXUDWLRQPRGHWRSUHYHQWZLUHOHVVWRZLUHOHVVFRPPXQLFDWLRQVWKURXJK
WKHDFFHVVSRLQW8VHWKHILOWHUDSPDQDJHFRPPDQGWRUHVWULFWPDQDJHPHQW
DFFHVVIURPZLUHOHVVFOLHQWV7RFRQILJXUH(WKHUQHWSURWRFROILOWHULQJXVHWKHILOWHU
HWKHUQHWW\SHHQDEOHFRPPDQGWRHQDEOHILOWHULQJDQGWKHILOWHUHWKHUQHWW\SH
SURWRFROFRPPDQGWRGHILQHWKHSURWRFROVWKDW\RXZDQWWRILOWHU7RUHPRYHDQHQWU\
IURPWKHWDEOHXVHWKHDGGUHVVILOWHUGHOHWHFRPPDQG7RGLVSOD\WKHFXUUHQW
VHWWLQJVXVHWKHVKRZILOWHUVFRPPDQGIURPWKH([HFPRGH
Enterprise AP(config)#filter local-bridge 7-75
Enterprise AP(config)#filter ap-manage 7-75
Enterprise AP(config)#filter uplink enable 7-76
Enterprise AP(config)#filter uplink add 00-12-34-56-78-9a 7-76
Enterprise AP(config)#filter ethernet-type enable 7-76
Enterprise AP(config)#filter ethernet-type protocol ARP 7-77
Enterprise AP(config)#exit
Enterprise AP#show filters 7-78
Protocol Filter Information
=========================================================
Local Bridge :ENABLED
AP Management :ENABLED
Ethernet Type Filter :ENABLED
Enabled Protocol Filters
---------------------------------------------------------
Protocol: ARP ISO: 0x0806
=========================================================
Enterprise AP#
9/$1
7KHDFFHVVSRLQWFDQHPSOR\9/$1WDJJLQJVXSSRUWWRFRQWURODFFHVVWRQHWZRUN
UHVRXUFHVDQGLQFUHDVHVHFXULW\9/$1VVHSDUDWHWUDIILFSDVVLQJEHWZHHQWKH
DFFHVVSRLQWDVVRFLDWHGFOLHQWVDQGWKHZLUHGQHWZRUN7KHUHFDQEHD9/$1
DVVLJQHGWRHDFKDVVRFLDWHGFOLHQWDGHIDXOW9/$1IRUHDFK9$39LUWXDO$FFHVV
3RLQWLQWHUIDFHDQGDPDQDJHPHQW9/$1IRUWKHDFFHVVSRLQW
1RWHWKHIROORZLQJSRLQWVDERXWWKHDFFHVVSRLQW¶V9/$1VXSSRUW
7KHPDQDJHPHQW9/$1LVIRUPDQDJLQJWKHDFFHVVSRLQWWKURXJKUHPRWH
PDQDJHPHQWWRROVVXFKDVWKHZHELQWHUIDFH66+6103RU7HOQHW7KHDFFHVV
SRLQWRQO\DFFHSWVPDQDJHPHQWWUDIILFWKDWLVWDJJHGZLWKWKHVSHFLILHG
PDQDJHPHQW9/$1,'
$OOZLUHOHVVFOLHQWVDVVRFLDWHGWRWKHDFFHVVSRLQWDUHDVVLJQHGWRD9/$1,I,(((
;LVEHLQJXVHGWRDXWKHQWLFDWHZLUHOHVVFOLHQWVVSHFLILF9/$1,'VFDQEH
FRQILJXUHGRQWKH5$',86VHUYHUWREHDVVLJQHGWRHDFKFOLHQW,IDFOLHQWLVQRW
DVVLJQHGWRDVSHFLILF9/$1RULI;LVQRWXVHGWKHFOLHQWLVDVVLJQHGWRWKH
GHIDXOW9/$1IRUWKH9$3LQWHUIDFHZLWKZKLFKLWLVDVVRFLDWHG7KHDFFHVVSRLQW
RQO\DOORZVWUDIILFWDJJHGZLWKDVVLJQHG9/$1,'VRUGHIDXOW9/$1,'VWRDFFHVV
FOLHQWVDVVRFLDWHGRQHDFK9$3LQWHUIDFH
:KHQ9/$1VXSSRUWLVHQDEOHGRQWKHDFFHVVSRLQWWUDIILFSDVVHGWRWKHZLUHG
QHWZRUNLVWDJJHGZLWKWKHDSSURSULDWH9/$1,'HLWKHUDQDVVLJQHGFOLHQW9/$1
,'GHIDXOW9/$1,'RUWKHPDQDJHPHQW9/$1,'7UDIILFUHFHLYHGIURPWKHZLUHG
QHWZRUNPXVWDOVREHWDJJHGZLWKRQHRIWKHVHNQRZQ9/$1,'V5HFHLYHGWUDIILF
WKDWKDVDQXQNQRZQ9/$1,'RUQR9/$1WDJLVGURSSHG
:KHQ9/$1VXSSRUWLVGLVDEOHGWKHDFFHVVSRLQWGRHVQRWWDJWUDIILFSDVVHGWRWKH
ZLUHGQHWZRUNDQGLJQRUHVWKH9/$1WDJVRQDQ\UHFHLYHGIUDPHV
1RWH %HIRUHHQDEOLQJ9/$1WDJJLQJRQWKHDFFHVVSRLQWEHVXUHWRFRQILJXUHWKH
DWWDFKHGQHWZRUNVZLWFKSRUWWRVXSSRUWWDJJHG9/$1IUDPHVIURPWKHDFFHVV
SRLQW¶VPDQDJHPHQW9/$1,'GHIDXOW9/$1,'VDQGRWKHUFOLHQW9/$1,'V
2WKHUZLVHFRQQHFWLYLW\WRWKHDFFHVVSRLQWZLOOEHORVWZKHQ\RXHQDEOHWKH9/$1
IHDWXUH
8VLQJ,(((;DQGDFHQWUDO5$',86VHUYHUXSWR9/$1,'VFDQEH
PDSSHGWRVSHFLILFZLUHOHVVFOLHQWVDOORZLQJXVHUVWRUHPDLQZLWKLQWKHVDPH9/$1
DVWKH\PRYHDURXQGDFDPSXVVLWH7KLVIHDWXUHFDQDOVREHXVHGWRFRQWURODFFHVV
WRQHWZRUNUHVRXUFHVIURPFOLHQWVWKHUHE\LPSURYLQJVHFXULW\
$9/$1,'FDQEHDVVLJQHGWRDFOLHQWDIWHUVXFFHVVIXO,(((;
DXWKHQWLFDWLRQ7KHFOLHQW9/$1,'VPXVWEHFRQILJXUHGRQWKH5$',86VHUYHUIRU
HDFKXVHUDXWKRUL]HGWRDFFHVVWKHQHWZRUN,IDFOLHQWGRHVQRWKDYHDFRQILJXUHG
9/$1,'RQWKH5$',86VHUYHUWKHDFFHVVSRLQWDVVLJQVWKHFOLHQWWRWKH
FRQILJXUHGGHIDXOW9/$1,'IRUWKH9$3LQWHUIDFH
1RWH :KHQXVLQJ,(((;WRG\QDPLFDOO\DVVLJQ9/$1,'VWKHDFFHVVSRLQWPXVW
KDYH;DXWKHQWLFDWLRQHQDEOHGDQGD5$',86VHUYHUFRQILJXUHG:LUHOHVV
FOLHQWVPXVWDOVRVXSSRUW;FOLHQWVRIWZDUH
:KHQVHWWLQJXS9/$1,'VIRUHDFKXVHURQWKH5$',86VHUYHUEHVXUHWRXVHWKH
5$',86DWWULEXWHVDQGYDOXHVDVLQGLFDWHGLQWKHIROORZLQJWDEOH
9/$1,'VRQWKH5$',86VHUYHUFDQEHHQWHUHGDVKH[DGHFLPDOGLJLWVRUDVWULQJ
VHH³UDGLXVVHUYHUYODQIRUPDW´RQSDJH
1RWH 7KHVSHFLILFFRQILJXUDWLRQRI5$',86VHUYHUVRIWZDUHLVEH\RQGWKHVFRSHRIWKLV
JXLGH5HIHUWRWKHGRFXPHQWDWLRQSURYLGHGZLWKWKH5$',86VHUYHUVRIWZDUH
9/$1&ODVVLILFDWLRQ±(QDEOHVRUGLVDEOHV9/$1WDJJLQJVXSSRUWRQWKHDFFHVV
SRLQW
1DWLYH9/$1,'±7KH9/$1,'WKDWWUDIILFPXVWKDYHWREHDEOHWRPDQDJHWKH
DFFHVVSRLQW5DQJH'HIDXOW
1XPEHU 5$',86$WWULEXWH 9DOXH
:'66HWWLQJV
(DFKDFFHVVSRLQWUDGLRLQWHUIDFHFDQEHFRQILJXUHGWRRSHUDWHLQDEULGJHRU
UHSHDWHUPRGHZKLFKDOORZVLWWRIRUZDUGWUDIILFGLUHFWO\WRRWKHUDFFHVVSRLQWXQLWV
7RVHWXSEULGJHOLQNVEHWZHHQDFFHVVSRLQWXQLWV\RXPXVWFRQILJXUHWKHZLUHOHVV
'LVWULEXWLRQ6\VWHP:'6IRUZDUGLQJWDEOHE\VSHFLI\LQJWKHZLUHOHVV0$&DGGUHVV
RIDOOXQLWVWRZKLFK\RXZDQWWRIRUZDUGWUDIILF8SWRVL[:'6EULGJHRUUHSHDWHU
OLQNVFDQEHVSHFLILHGIRUHDFKXQLWLQWKHZLUHOHVVEULGJHQHWZRUN
7KH6SDQQLQJ7UHH3URWRFRO673FDQEHXVHGWRGHWHFWDQGGLVDEOHQHWZRUNORRSV
DQGWRSURYLGHEDFNXSOLQNVEHWZHHQEULGJHV7KLVDOORZVDZLUHOHVVEULGJHWR
LQWHUDFWZLWKRWKHUEULGJLQJGHYLFHVWKDWLVDQ673FRPSOLDQWVZLWFKEULGJHRU
URXWHULQ\RXUQHWZRUNWRHQVXUHWKDWRQO\RQHURXWHH[LVWVEHWZHHQDQ\WZRVWDWLRQV
RQWKHQHWZRUNDQGSURYLGHEDFNXSOLQNVZKLFKDXWRPDWLFDOO\WDNHRYHUZKHQD
SULPDU\OLQNJRHVGRZQ
:'6%ULGJH±8SWRVL[:'6EULGJHRUUHSHDWHUOLQNV0$&DGGUHVVHVSHUUDGLR
LQWHUIDFHFDQEHVSHFLILHGIRUHDFKXQLWLQWKHZLUHOHVVEULGJHQHWZRUN2QHXQLWRQO\
PXVWEHFRQILJXUHGDVWKH³URRWEULGJH´LQWKHZLUHOHVVQHWZRUN7KHURRWEULGJHLV
WKHXQLWFRQQHFWHGWRWKHPDLQFRUHRIWKHZLUHG/$12WKHUEULGJHVQHHGWRVSHFLI\
RQH³3DUHQW´OLQNWRWKHURRWEULGJHRUWRDEULGJHFRQQHFWHGWRWKHURRWEULGJH7KH
RWKHUILYH:'6OLQNVDUHDYDLODEOHDV³&KLOG´OLQNVWRRWKHUEULGJHV
%ULGJH5ROH±(DFKUDGLRLQWHUIDFHFDQEHVHWWRRSHUDWHLQRQHRIWKHIROORZLQJIRXU
PRGHV'HIDXOW$3
$3$FFHVV3RLQW2SHUDWHVDVDQDFFHVVSRLQWIRUZLUHOHVVFOLHQWVSURYLGLQJ
FRQQHFWLYLW\WRDZLUHG/$1
%ULGJH2SHUDWHVDVDEULGJHWRRWKHUDFFHVVSRLQWV7KH³3DUHQW´OLQNWRWKHURRW
EULGJHPXVWEHFRQILJXUHG8SWRILYHRWKHU´&KLOG´OLQNVDUHDYDLODEOHWRRWKHU
EULGJHV
5HSHDWHU2SHUDWHVDVDZLUHOHVVUHSHDWHUH[WHQGLQJWKHUDQJHIRUUHPRWH
ZLUHOHVVFOLHQWVDQGFRQQHFWLQJWKHPWRWKHURRWEULGJH7KH³3DUHQW´OLQNWRWKH
URRWEULGJHPXVWEHFRQILJXUHG,QWKLVPRGHWUDIILFLVQRWIRUZDUGHGWRWKH
(WKHUQHWSRUWIURPWKHUDGLRLQWHUIDFH
5RRW%ULGJH2SHUDWHVDVWKHURRWEULGJHLQWKHZLUHOHVVEULGJHQHWZRUN8SWR
VL[´&KLOG´OLQNVDUHDYDLODEOHWRRWKHUEULGJHVLQWKHQHWZRUN
%ULGJH3DUHQW±7KHSK\VLFDOOD\HUDGGUHVVRIWKHURRWEULGJHXQLWRUWKHEULGJHXQLW
FRQQHFWHGWRWKHURRWEULGJH KH[DGHFLPDOGLJLWVLQWKHIRUP
³[[[[[[[[[[[[´
&KDQQHO$XWR6\QF±$OORZVD%ULGJH&KLOGWRDXWRPDWLFDOO\ILQGWKHRSHUDWLQJ
FKDQQHOXVHGE\LWV%ULGJH3DUHQW
%ULGJH&KLOG±7KHSK\VLFDOOD\HUDGGUHVVRIRWKHUEULGJHXQLWVIRUZKLFKWKLVXQLW
VHUYHVDVWKHEULGJHSDUHQWRUWKHURRWEULGJH1RWHWKDWWKHILUVWHQWU\XQGHUWKHOLVW
RIFKLOGQRGHVLVUHVHUYHGIRUWKHURRWEULGJHDQGFDQRQO\EHFRQILJXUHGLIWKHUROH
LVVHWWR³5RRW%ULGJH´ KH[DGHFLPDOGLJLWVLQWKHIRUP³[[[[[[[[[[[[´
6SDQQLQJ7UHH3URWRFRO±673XVHVDGLVWULEXWHGDOJRULWKPWRVHOHFWDEULGJLQJ
GHYLFH673FRPSOLDQWVZLWFKEULGJHRUURXWHUWKDWVHUYHVDVWKHURRWRIWKH
VSDQQLQJWUHHQHWZRUN,WVHOHFWVDURRWSRUWRQHDFKEULGJLQJGHYLFHH[FHSWIRUWKH
URRWGHYLFHZKLFKLQFXUVWKHORZHVWSDWKFRVWZKHQIRUZDUGLQJDSDFNHWIURPWKDW
GHYLFHWRWKHURRWGHYLFH7KHQLWVHOHFWVDGHVLJQDWHGEULGJLQJGHYLFHIURPHDFK
/$1ZKLFKLQFXUVWKHORZHVWSDWKFRVWZKHQIRUZDUGLQJDSDFNHWIURPWKDW/$1WR
WKHURRWGHYLFH$OOSRUWVFRQQHFWHGWRGHVLJQDWHGEULGJLQJGHYLFHVDUHDVVLJQHGDV
GHVLJQDWHGSRUWV$IWHUGHWHUPLQLQJWKHORZHVWFRVWVSDQQLQJWUHHLWHQDEOHVDOOURRW
SRUWVDQGGHVLJQDWHGSRUWVDQGGLVDEOHVDOORWKHUSRUWV1HWZRUNSDFNHWVDUH
WKHUHIRUHRQO\IRUZDUGHGEHWZHHQURRWSRUWVDQGGHVLJQDWHGSRUWVHOLPLQDWLQJDQ\
SRVVLEOHQHWZRUNORRSV
2QFHDVWDEOHQHWZRUNWRSRORJ\KDVEHHQHVWDEOLVKHGDOOEULGJHVOLVWHQIRU+HOOR
%3'8V%ULGJH3URWRFRO'DWD8QLWVWUDQVPLWWHGIURPWKHURRWEULGJH,IDEULGJH
GRHVQRWJHWD+HOOR%3'8DIWHUDSUHGHILQHGLQWHUYDO0D[LPXP$JHWKHEULGJH
DVVXPHVWKDWWKHOLQNWRWKHURRWEULGJHLVGRZQ7KLVEULGJHZLOOWKHQLQLWLDWH
QHJRWLDWLRQVZLWKRWKHUEULGJHVWRUHFRQILJXUHWKHQHWZRUNWRUHHVWDEOLVKDYDOLG
QHWZRUNWRSRORJ\
%ULGJH±(QDEOHVGLVDEOHV673RQWKHZLUHOHVVEULGJHRUUHSHDWHU
'HIDXOW 'LVDEOHG
%ULGJH3ULRULW\±8VHGLQVHOHFWLQJWKHURRWGHYLFHURRWSRUWDQGGHVLJQDWHGSRUW
7KHGHYLFHZLWKWKHKLJKHVWSULRULW\EHFRPHVWKH673URRWGHYLFH+RZHYHULIDOO
GHYLFHVKDYHWKHVDPHSULRULW\WKHGHYLFHZLWKWKHORZHVW0$&DGGUHVVZLOOWKHQ
EHFRPHWKHURRWGHYLFH1RWHWKDWORZHUQXPHULFYDOXHVLQGLFDWHKLJKHUSULRULW\
5DQJH
'HIDXOW
%ULGJH0D[$JH±7KHPD[LPXPWLPHLQVHFRQGVDGHYLFHFDQZDLWZLWKRXW
UHFHLYLQJDFRQILJXUDWLRQPHVVDJHEHIRUHDWWHPSWLQJWRUHFRQILJXUH$OOGHYLFH
SRUWVH[FHSWIRUGHVLJQDWHGSRUWVVKRXOGUHFHLYHFRQILJXUDWLRQPHVVDJHVDW
UHJXODULQWHUYDOV$Q\SRUWWKDWDJHVRXW673LQIRUPDWLRQSURYLGHGLQWKHODVW
FRQILJXUDWLRQPHVVDJHEHFRPHVWKHGHVLJQDWHGSRUWIRUWKHDWWDFKHG/$1,ILWLV
DURRWSRUWDQHZURRWSRUWLVVHOHFWHGIURPDPRQJWKHGHYLFHSRUWVDWWDFKHGWRWKH
QHWZRUN5DQJHVHFRQGV
'HIDXOW
0LQLPXP7KHKLJKHURIRU>[+HOOR7LPH@
0D[LPXP7KHORZHURIRU>[)RUZDUG'HOD\@
%ULGJH+HOOR7LPH±,QWHUYDOLQVHFRQGVDWZKLFKWKHURRWGHYLFHWUDQVPLWVD
FRQILJXUDWLRQPHVVDJH5DQJHVHFRQGV
'HIDXOW
0LQLPXP
0D[LPXP7KHORZHURIRU>0D[0HVVDJH$JH@
%ULGJH)RUZDUGLQJ'HOD\±7KHPD[LPXPWLPHLQVHFRQGVWKLVGHYLFHZDLWV
EHIRUHFKDQJLQJVWDWHVLHGLVFDUGLQJWROHDUQLQJWRIRUZDUGLQJ7KLVGHOD\LV
UHTXLUHGEHFDXVHHYHU\GHYLFHPXVWUHFHLYHLQIRUPDWLRQDERXWWRSRORJ\FKDQJHV
EHIRUHLWVWDUWVWRIRUZDUGIUDPHV,QDGGLWLRQHDFKSRUWQHHGVWLPHWROLVWHQIRU
FRQIOLFWLQJLQIRUPDWLRQWKDWZRXOGPDNHLWUHWXUQWRDGLVFDUGLQJVWDWHRWKHUZLVH
WHPSRUDU\GDWDORRSVPLJKWUHVXOW5DQJHVHFRQGV
'HIDXOW
0LQLPXP7KHKLJKHURIRU>0D[0HVVDJH$JH@
0D[LPXP
/LQN3DWK&RVW±7KLVSDUDPHWHULVXVHGE\WKH673WRGHWHUPLQHWKHEHVWSDWK
EHWZHHQGHYLFHV7KHUHIRUHORZHUYDOXHVVKRXOGEHDVVLJQHGWRSRUWVDWWDFKHGWR
IDVWHUPHGLDDQGKLJKHUYDOXHVDVVLJQHGWRSRUWVZLWKVORZHUPHGLD3DWKFRVW
WDNHVSUHFHGHQFHRYHUSRUWSULRULW\
5DQJH
'HIDXOW(WKHUQHWLQWHUIDFH:LUHOHVVLQWHUIDFH
/LQN3RUW3ULRULW\±'HILQHVWKHSULRULW\XVHGIRUWKLVSRUWLQWKH6SDQQLQJ7UHH
3URWRFRO,IWKHSDWKFRVWIRUDOOSRUWVRQDVZLWFKDUHWKHVDPHWKHSRUWZLWKWKH
KLJKHVWSULRULW\LHORZHVWYDOXHZLOOEHFRQILJXUHGDVDQDFWLYHOLQNLQWKH
VSDQQLQJWUHH7KLVPDNHVDSRUWZLWKKLJKHUSULRULW\OHVVOLNHO\WREHEORFNHGLIWKH
6SDQQLQJ7UHH3URWRFROLVGHWHFWLQJQHWZRUNORRSV:KHUHPRUHWKDQRQHSRUWLV
DVVLJQHGWKHKLJKHVWSULRULW\WKHSRUWZLWKORZHVWQXPHULFLGHQWLILHUZLOOEHHQDEOHG
'HIDXOW
5DQJHLQVWHSVRI
&/,&RPPDQGVIRU:'66HWWLQJV±7RVHWWKHUROHRIWKHDFFHVVSRLQWUDGLR
LQWHUIDFHXVHWKHEULGJHUROHFRPPDQGIURPWKH&/,ZLUHOHVVLQWHUIDFH
FRQILJXUDWLRQPRGH,IWKHUROHRIWKHUDGLRLQWHUIDFHLVVHWWR³%ULGJH´RU³5HSHDWHU´
WKH0$&DGGUHVVRIWKHSDUHQWQRGHPXVWDOVREHFRQILJXUHGXVLQJWKHEULGJHOLQN
SDUHQWFRPPDQG,IWKHUROHLVVHWWRDQ\WKLQJRWKHUWKDQ³$FFHVV3RLQW´WKHQ\RX
VKRXOGDOVRFRQILJXUHWKH0$&DGGUHVVHVRIWKHFKLOGQRGHVXVLQJWKHEULGJHOLQN
FKLOGFRPPDQG7RYLHZWKHFXUUHQWEULGJHOLQNVHWWLQJVXVHWKHVKRZEULGJHOLQN
FRPPDQG
Enterprise AP(if-wireless a)#bridge role bridge 7-79
Enterprise AP(if-wireless a)#bridge channel-auto-sync enable 7-80
Enterprise AP(if-wireless a)#bridge-link child 2
00-08-3e-84-bc-6d 7-81
Enterprise AP(if-wireless a)#bridge-link child 3
00-08-3e-85-13-f2
Enterprise AP(if-wireless a)#bridge-link child 4
00-08-3e-84-79-31
Enterprise AP(if-wireless a)#bridge-link parent
00-08-2d-69-3a-51 7-80
Enterprise AP(if-wireless a)#exit
Enterprise AP#show bridge link wireless a 7-83
Interface Wireless A WDS Information
====================================
AP Role: Bridge
Channel Auto Sync: Enable
Parent: 00-08-2d-69-3a-51
Child:
Child 2: 00-08-3e-84-bc-6d
Child 3: 00-08-3e-85-13-f2
Child 4: 00-08-3e-84-79-31
Child 5: 00-00-00-00-00-00
Child 6: 00-00-00-00-00-00
STAs:
No WDS Stations.
Enterprise AP#
&/,&RPPDQGVIRU6736HWWLQJV±,IWKHUROHRIDUDGLRLQWHUIDFHLVVHWWR5HSHDWHU
%ULGJHRU5RRW%ULGJH673FDQEHHQDEOHGRQWKHDFFHVVSRLQWWRPDLQWDLQDYDOLG
QHWZRUNWRSRORJ\7RJOREDOO\HQDEOH673XVHWKHEULGJHVWSHQDEOHFRPPDQG
IURPWKH&/,FRQILJXUDWLRQPRGH7KHQFRQILJXUHWKHRWKHUJOREDO673SDUDPHWHUV
IRUWKHEULGJH7KHSDWKFRVWDQGSULRULW\IRUHDFKEULGJHOLQNFDQEHVHWXVLQJWKH
EULGJHOLQNSDWKFRVWDQGEULGJHOLQNSRUWSULRULW\FRPPDQGIURPWKH:LUHOHVV
,QWHUIDFHFRQILJXUDWLRQPRGH7KHSDWKFRVWDQGSULRULW\FDQDOVREHVHWIRUWKH
(WKHUQHWSRUWIURPWKH(WKHUQHW,QWHUIDFHFRQILJXUDWLRQPRGH7RYLHZWKHFXUUHQW
673VHWWLQJVXVHWKHVKRZEULGJHVWSFRPPDQG
Enterprise AP(config)#bridge stp enable 6-104
Enterprise AP(config)#bridge stp forwarding-delay 2500 6-105
Enterprise AP(config)#bridge stp hello-time 500 6-106
Enterprise AP(config)#bridge stp max-age 4000 6-107
Enterprise AP(config)#bridge stp priority 40000 6-108
Enterprise AP(config)#interface wireless a
Enterprise AP(if-wireless a)#bridge-link path-cost 2 40 6-109
Enterprise AP(if-wireless a)#bridge-link port-priority 2 64 6-110
Enterprise AP(if-wireless a)#exit
Enterprise AP#show bridge stp 6-111
Bridge MAC : 00:30:F1:F0:9A:9C
Status : Disabled
priority : 32768
desiginated-root : priority = 0, MAC = 00:00:00:00:00:00
root-path-cost : 0
root-Port-no : 0
Hold Time : 0 Seconds
Hello Time : 0 Seconds
Maximum Age : 0 Seconds
Forward Delay : 0 Seconds
bridge Hello Time : 2 Seconds
bridge Maximum Age : 20 Seconds
bridge Forward Delay : 5 Seconds
time-since-top-change: 3168 Seconds
topology-change-count: 0
Enterprise AP#
$30DQDJHPHQW
7KH:HE7HOQHWDQG6103PDQDJHPHQWLQWHUIDFHVDUHHQDEOHGDQGRSHQWRDOO,3
DGGUHVVHVE\GHIDXOW7RSURYLGHPRUHVHFXULW\IRUPDQDJHPHQWDFFHVVWRWKH
DFFHVVSRLQWVSHFLILFLQWHUIDFHVFDQEHGLVDEOHGDQGPDQDJHPHQWUHVWULFWHGWRD
VLQJOH,3DGGUHVVRUDOLPLWHGUDQJHRI,3DGGUHVVHV
2QFH\RXVSHFLI\DQ,3DGGUHVVRUUDQJHRIDGGUHVVHVDFFHVVWRPDQDJHPHQW
LQWHUIDFHVLVUHVWULFWHGWRWKHVSHFLILHGDGGUHVVHV,IDQ\RQHWULHVWRDFFHVVD
PDQDJHPHQWLQWHUIDFHIURPDQXQDXWKRUL]HGDGGUHVVWKHDFFHVVSRLQWZLOOUHMHFWWKH
FRQQHFWLRQ
8,0DQDJHPHQW±(QDEOHVRUGLVDEOHVPDQDJHPHQWDFFHVVWKURXJK7HOQHWWKH:HE
+773RU6103LQWHUIDFHV'HIDXOW(QDEOHG
1RWH 6HFXUH:HE+7736FRQQHFWLRQVDUHQRWDIIHFWHGE\WKH8,0DQDJHPHQWRU,3
0DQDJHPHQWVHWWLQJV
,30DQDJHPHQW±5HVWULFWVPDQDJHPHQWDFFHVVWR7HOQHW:HEDQG6103
LQWHUIDFHVWRVSHFLILHG,3DGGUHVVHV'HIDXOW$Q\,3
$Q\,3,QGLFDWHVWKDWDQ\,3DGGUHVVLVDOORZHGPDQDJHPHQWDFFHVV
6LQJOH,36SHFLILHVDVLQJOH,3DGGUHVVWKDWLVDOORZHGPDQDJHPHQWDFFHVV
0XOWLSOH,36SHFLILHVDQDGGUHVVUDQJHDVGHILQHGE\WKHHQWHUHG,3DGGUHVVDQG
VXEQHWPDVN)RUH[DPSOH,3DGGUHVVDQGVXEQHWPDVN
GHILQHVDOO,3DGGUHVVHVIURPWR
&/,&RPPDQGVIRU$30DQDJHPHQWIHDWXUHV
$GPLQLVWUDWLRQ
&KDQJLQJWKH3DVVZRUG
0DQDJHPHQWDFFHVVWRWKHZHEDQG&/,LQWHUIDFHRQWKHDFFHVVSRLQWLVFRQWUROOHG
WKURXJKDVLQJOHXVHUQDPHDQGSDVVZRUG<RXFDQDOVRJDLQDGGLWLRQDODFFHVV
VHFXULW\E\XVLQJFRQWUROILOWHUVVHH³)LOWHU&RQWURO´RQSDJH
7RSURWHFWDFFHVVWRWKHPDQDJHPHQWLQWHUIDFH\RXQHHGWRFRQILJXUHDQ
$GPLQLVWUDWRU¶VXVHUQDPHDQGSDVVZRUGDVVRRQDVSRVVLEOH,IWKHXVHUQDPHDQG
SDVVZRUGDUHQRWFRQILJXUHGWKHQDQ\RQHKDYLQJDFFHVVWRWKHDFFHVVSRLQWPD\
EHDEOHWRFRPSURPLVHDFFHVVSRLQWDQGQHWZRUNVHFXULW\2QFHDQHZ$GPLQLVWUDWRU
KDVEHHQFRQILJXUHG\RXFDQGHOHWHWKHGHIDXOW³DGPLQ´XVHUQDPHIURPWKHV\VWHP
1RWH 3UHVVLQJWKH5HVHWEXWWRQRQWKHEDFNRIWKHDFFHVVSRLQWIRUPRUHWKDQILYH
VHFRQGVUHVHWVWKHXVHUQDPHDQGSDVVZRUGWRWKHIDFWRU\GHIDXOWV)RUWKLV
UHDVRQZHUHFRPPHQGWKDW\RXSURWHFWWKHDFFHVVSRLQWIURPSK\VLFDODFFHVVE\
XQDXWKRUL]HGSHUVRQV
8VHUQDPH±7KHQDPHRIWKHXVHU7KHGHIDXOWQDPHLV³DGPLQ´/HQJWK
FKDUDFWHUVFDVHVHQVLWLYH
1HZ3DVVZRUG±7KHSDVVZRUGIRUPDQDJHPHQWDFFHVV/HQJWKFKDUDFWHUV
FDVHVHQVLWLYH
&RQILUP1HZ3DVVZRUG±(QWHUWKHSDVVZRUGDJDLQIRUYHULILFDWLRQ
&/,&RPPDQGVIRUWKH$GPLQLVWUDWRU¶V8VHU1DPHDQG3DVVZRUG±8VHWKH
XVHUQDPHDQGSDVVZRUGFRPPDQGVIURPWKH&/,FRQILJXUDWLRQPRGH
Enterprise AP(config)#apmgmtip multiple 192.168.1.50 255.255.255.0 7-21
Enterprise AP(config)#apmgmtui SNMP enable 7-22
Enterprise AP(config)#username bob 7-15
Enterprise AP(config)#password admin 7-15
Enterprise AP#
6HWWLQJWKH7LPHRXW,QWHUYDO
<RXFDQVHWWKHWLPHRXWLQWHUYDOIRUZHEDFFHVVWRWKHXQLWDIWHUZKLFKWKHXVHUZLOO
KDYHWRUHHQWHUWKHXVHUQDPHDQGSDVVZRUG
6HVVLRQ7LPHRXWIRU:(%±6HWVWKHWLPHOLPLWIRUDQLGOHZHELQWHUIDFHVHVVLRQ
5DQJHVHFRQGV'HIDXOWVHFRQGVLVGLVDEOHG
&/,&RPPDQGIRUWKH:HE6HVVLRQ7LPHRXW±8VHWKHLSKWWSVHVVLRQWLPHRXW
FRPPDQGIURPWKH&/,FRQILJXUDWLRQPRGH
8SJUDGLQJ)LUPZDUH
<RXFDQXSJUDGHQHZDFFHVVSRLQWVRIWZDUHIURPDORFDOILOHRQWKHPDQDJHPHQW
ZRUNVWDWLRQRUIURPDQ)73RU7)73VHUYHU1HZVRIWZDUHPD\EHSURYLGHG
SHULRGLFDOO\IURP\RXUGLVWULEXWRU
$IWHUXSJUDGLQJQHZVRIWZDUH\RXPXVWUHERRWWKHDFFHVVSRLQWWRLPSOHPHQWWKH
QHZFRGH8QWLODUHERRWRFFXUVWKHDFFHVVSRLQWZLOOFRQWLQXHWRUXQWKHVRIWZDUHLW
ZDVXVLQJEHIRUHWKHXSJUDGHVWDUWHG$OVRQRWHWKDWQHZVRIWZDUHWKDWLV
LQFRPSDWLEOHZLWKWKHFXUUHQWFRQILJXUDWLRQDXWRPDWLFDOO\UHVWRUHVWKHDFFHVVSRLQWWR
WKHIDFWRU\GHIDXOWVHWWLQJVZKHQILUVWDFWLYDWHGDIWHUDUHERRW
Enterprise AP(config)#ip http session-timeout 0 7-18
Enterprise AP(config)#
%HIRUHXSJUDGLQJQHZVRIWZDUHYHULI\WKDWWKHDFFHVVSRLQWLVFRQQHFWHGWRWKH
QHWZRUNDQGKDVEHHQFRQILJXUHGZLWKDFRPSDWLEOH,3DGGUHVVDQGVXEQHWPDVN
,I\RXQHHGWRGRZQORDGIURPDQ)73RU7)73VHUYHUWDNHWKHIROORZLQJDGGLWLRQDO
VWHSV
2EWDLQWKH,3DGGUHVVRIWKH)73RU7)73VHUYHUZKHUHWKHDFFHVVSRLQWVRIWZDUH
LVVWRUHG
,IXSJUDGLQJIURPDQ)73VHUYHUEHVXUHWKDW\RXKDYHDQDFFRXQWFRQILJXUHGRQ
WKHVHUYHUZLWKDXVHUQDPHDQGSDVVZRUG
,I9/$1VDUHFRQILJXUHGRQWKHDFFHVVSRLQWGHWHUPLQHWKH9/$1,'ZLWKZKLFK
WKH)73RU7)73VHUYHULVDVVRFLDWHGDQGWKHQFRQILJXUHWKHPDQDJHPHQWVWDWLRQ
RUWKHQHWZRUNSRUWWRZKLFKLWLVDWWDFKHGZLWKWKHVDPH9/$1,',I\RXDUH
PDQDJLQJWKHDFFHVVSRLQWIURPDZLUHOHVVFOLHQWWKH9/$1,'IRUWKHZLUHOHVV
FOLHQWPXVWEHFRQILJXUHGRQD5$',86VHUYHU
&XUUHQWYHUVLRQ±9HUVLRQQXPEHURIUXQWLPHFRGH
)LUPZDUH8SJUDGH/RFDO±'RZQORDGVDQRSHUDWLRQFRGHLPDJHILOHIURPWKHZHE
PDQDJHPHQWVWDWLRQWRWKHDFFHVVSRLQWXVLQJ+7738VHWKH%URZVHEXWWRQWR
ORFDWHWKHLPDJHILOHORFDOO\RQWKHPDQDJHPHQWVWDWLRQDQGFOLFN6WDUW8SJUDGHWR
SURFHHG
1HZILUPZDUHILOH6SHFLILHVWKHQDPHRIWKHFRGHILOHRQWKHVHUYHU7KHQHZ
ILUPZDUHILOHQDPHVKRXOGQRWFRQWDLQVODVKHV?RUWKHOHDGLQJOHWWHURIWKHILOH
QDPHVKRXOGQRWEHDSHULRGDQGWKHPD[LPXPOHQJWKIRUILOHQDPHVLV
FKDUDFWHUVIRUILOHVRQWKHDFFHVVSRLQW9DOLGFKDUDFWHUV$=D]³´³´³B´
)LUPZDUH8SJUDGH5HPRWH±'RZQORDGVDQRSHUDWLRQFRGHLPDJHILOHIURPD
VSHFLILHGUHPRWH)73RU7)73VHUYHU$IWHUILOOLQJLQWKHIROORZLQJILHOGVFOLFN6WDUW
8SJUDGHWRSURFHHG
1HZILUPZDUHILOH6SHFLILHVWKHQDPHRIWKHFRGHILOHRQWKHVHUYHU
7KHQHZ
ILUPZDUHILOHQDPHVKRXOGQRWFRQWDLQVODVKHV?RU
WKHOHDGLQJOHWWHURIWKHILOH
QDPHVKRXOGQRWEHDSHULRGDQGWKHPD[LPXPOHQJWKIRUILOHQDPHVRQWKH
)737)73VHUYHULVFKDUDFWHUVRUFKDUDFWHUVIRUILOHVRQWKHDFFHVVSRLQW
9DOLGFKDUDFWHUV$=D]³´³´³B´
,3$GGUHVV,3DGGUHVVRUKRVWQDPHRI)73RU7)73VHUYHU
8VHUQDPH7KHXVHU,'XVHGIRUORJLQRQDQ)73VHUYHU
3DVVZRUG7KHSDVVZRUGXVHGIRUORJLQRQDQ)73VHUYHU
&RQILJXUDWLRQ)LOH%DFNXS5HVWRUH±8SORDGVWKHFXUUHQWDFFHVVSRLQWFRQILJXUDWLRQ
ILOHWRDVSHFLILHGUHPRWH)73RU7)73VHUYHU$FRQILJXUDWLRQILOHFDQDOVREH
GRZQORDGHGWRWKHDFFHVVSRLQWWRUHVWRUHDVSHFLILFFRQILJXUDWLRQ
([SRUW,PSRUW6HOHFW([SRUWWRXSORDGDILOHWRDQ)737)73VHUYHU6HOHFW,PSRUW
WRGRZQORDGDILOHIURPDQ)737)73VHUYHU
&RQILJILOH6SHFLILHVWKHQDPHRIWKHFRQILJXUDWLRQILOHZKLFKPXVWDOZD\VEH
V\VFIJ$SDWKRQWKHVHUYHUFDQEHVSHFLILHGXVLQJ³´LQWKHQDPHSURYLGLQJWKH
SDWKDOUHDG\H[LVWVIRUH[DPSOH³P\IROGHUV\VFIJ´2WKHUWKDQWRLQGLFDWHDSDWK
WKHILOHQDPHPXVWQRWFRQWDLQDQ\VODVKHV?RUWKHOHDGLQJOHWWHUFDQQRWEHD
SHULRGDQGWKHPD[LPXPOHQJWKIRUILOHQDPHVRQWKH)737)73VHUYHULV
FKDUDFWHUV9DOLGFKDUDFWHUV$=D]³´³´³B´
,3$GGUHVV,3DGGUHVVRUKRVWQDPHRI)73RU7)73VHUYHU
8VHUQDPH7KHXVHU,'XVHGIRUORJLQRQDQ)73VHUYHU
3DVVZRUG7KHSDVVZRUGXVHGIRUORJLQRQDQ)73VHUYHU
5HVWRUH)DFWRU\6HWWLQJV±&OLFNWKH5HVWRUHEXWWRQWRUHVHWWKHFRQILJXUDWLRQ
VHWWLQJVIRUWKHDFFHVVSRLQWWRWKHIDFWRU\GHIDXOWVDQGUHERRWWKHV\VWHP1RWHWKDW
DOOXVHUFRQILJXUHGLQIRUPDWLRQZLOOEHORVW<RXZLOOKDYHWRUHHQWHUWKHGHIDXOWXVHU
QDPHDGPLQWRUHJDLQPDQDJHPHQWDFFHVVWRWKLVGHYLFH
5HERRW$FFHVV3RLQW±&OLFNWKH5HVHWEXWWRQWRUHERRWWKHV\VWHP
1RWH ,I\RXKDYHXSJUDGHGV\VWHPVRIWZDUHWKHQ\RXPXVWUHERRWWKHDFFHVVSRLQWWR
LPSOHPHQWWKHQHZRSHUDWLRQFRGH1HZVRIWZDUHWKDWLVLQFRPSDWLEOHZLWKWKH
FXUUHQWFRQILJXUDWLRQDXWRPDWLFDOO\UHVWRUHVWKHDFFHVVSRLQWWRGHIDXOWYDOXHV
ZKHQILUVWDFWLYDWHGDIWHUDUHERRW
8SRQXSORDGLQJDQHZFRQILJXUDWLRQILOH\RXZLOOEHSURPSWHGWRHLWKHUUHVWRUH
IDFWRU\VHWWLQJVRUUHERRWWKHXQLW
&/,&RPPDQGVIRU'RZQORDGLQJ6RIWZDUHIURPD7)736HUYHU±8VHWKHFRS\WIWS
ILOHFRPPDQGIURPWKH([HFPRGHDQGWKHQVSHFLI\WKHILOHW\SHQDPHDQG,3
DGGUHVVRIWKH7)73VHUYHU:KHQWKHGRZQORDGLVFRPSOHWHWKHGLUFRPPDQGFDQ
EHXVHGWRFKHFNWKDWWKHQHZILOHLVSUHVHQWLQWKHDFFHVVSRLQWILOHV\VWHP7RUXQ
WKHQHZVRIWZDUHXVHWKHUHVHWERDUGFRPPDQGWRUHERRWWKHDFFHVVSRLQW
Enterprise AP#copy tftp file 7-57
1. Application image
2. Config file
3. Boot block image
Select the type of download<1,2,3>: [1]:1
TFTP Source file name:img.bin
TFTP Server IP:192.168.1.19
Enterprise AP#dir 7-59
File Name Type File Size
-------------------------- ---- -----------
dflt-img.bin 2 1319939
img.bin 2 1629577
syscfg 5 17776
syscfg_bak 5 17776
262144 byte(s) available
Enterprise AP#reset board 7-10
Reboot system now? <y/n>: y
6\VWHP/RJ
7KHDFFHVVSRLQWFDQEHFRQILJXUHGWRVHQGHYHQWDQGHUURUPHVVDJHVWRD6\VWHP
/RJ6HUYHU7KHV\VWHPFORFNFDQDOVREHV\QFKURQL]HGZLWKDWLPHVHUYHUVRWKDW
DOOWKHPHVVDJHVVHQWWRWKH6\VORJVHUYHUDUHVWDPSHGZLWKWKHFRUUHFWWLPHDQG
GDWH
(QDEOLQJ6\VWHP/RJJLQJ
7KHDFFHVVSRLQWVXSSRUWVDORJJLQJSURFHVVWKDWFDQFRQWUROHUURUPHVVDJHVVDYHG
WRPHPRU\RUVHQWWRD6\VORJVHUYHU7KHORJJHGPHVVDJHVVHUYHDVDYDOXDEOHWRRO
IRULVRODWLQJDFFHVVSRLQWDQGQHWZRUNSUREOHPV
6\VWHP/RJ6HWXS±(QDEOHVWKHORJJLQJRIHUURUPHVVDJHV'HIDXOW'LVDEOH
6HUYHU±(QDEOHVWKHVHQGLQJRIORJPHVVDJHVWRD6\VORJVHUYHUKRVW8SWR
IRXU6\VORJVHUYHUVDUHVXSSRUWHGRQWKHDFFHVVSRLQW'HIDXOW'LVDEOH
6HUYHU1DPH,3±7KH,3DGGUHVVRUQDPHRID6\VORJVHUYHU'HIDXOW
8'33RUW±7KH8'3SRUWXVHGE\D6\VORJVHUYHU5DQJHRU
'HIDXOW
/RJJLQJ&RQVROH±(QDEOHVWKHORJJLQJRIHUURUPHVVDJHVWRWKHFRQVROH
'HIDXOW 'LVDEOH
/RJJLQJ/HYHO±6HWVWKHPLQLPXPVHYHULW\OHYHOIRUHYHQWORJJLQJ
'HIDXOW ,QIRUPDWLRQDO
7KHV\VWHPDOORZV\RXWROLPLWWKHPHVVDJHVWKDWDUHORJJHGE\VSHFLI\LQJD
PLQLPXPVHYHULW\OHYHO7KHIROORZLQJWDEOHOLVWVWKHHUURUPHVVDJHOHYHOVIURPWKH
PRVWVHYHUH(PHUJHQF\WROHDVWVHYHUH'HEXJ7KHPHVVDJHOHYHOVWKDWDUH
ORJJHGLQFOXGHWKHVSHFLILHGPLQLPXPOHYHOXSWRWKH(PHUJHQF\OHYHO
1RWH 7KHDFFHVVSRLQWHUURUORJFDQEHYLHZHGXVLQJWKH(YHQW/RJVZLQGRZLQWKH
6WDWXVVHFWLRQSDJH7KH(YHQW/RJVZLQGRZGLVSOD\VWKHODVW
PHVVDJHVORJJHGLQFKURQRORJLFDORUGHUIURPWKHQHZHVWWRWKHROGHVW/RJ
PHVVDJHVVDYHGLQWKHDFFHVVSRLQW¶VPHPRU\DUHHUDVHGZKHQWKHGHYLFHLV
UHERRWHG
/RJJLQJ)DFLOLW\7\SH±6HWVWKHIDFLOLW\W\SHIRUUHPRWHORJJLQJRIV\VORJPHVVDJHV
7KHFRPPDQGVSHFLILHVWKHIDFLOLW\W\SHWDJVHQWLQV\VORJPHVVDJHV6HH5)&
7KLVW\SHKDVQRHIIHFWRQWKHNLQGRIPHVVDJHVUHSRUWHGE\WKHVZLWFK
+RZHYHULWPD\EHXVHGE\WKHV\VORJVHUYHUWRVRUWPHVVDJHVRUWRVWRUH
PHVVDJHVLQWKHFRUUHVSRQGLQJGDWDEDVH5DQJH'HIDXOW
(UURU/HYHO 'HVFULSWLRQ
&/,&RPPDQGVIRU6\VWHP/RJJLQJ±7RHQDEOHORJJLQJRQWKHDFFHVVSRLQWXVH
WKHORJJLQJRQFRPPDQGIURPWKHJOREDOFRQILJXUDWLRQPRGH7KHORJJLQJOHYHO
FRPPDQGVHWVWKHPLQLPXPOHYHORIPHVVDJHWRORJ8VHWKHORJJLQJFRQVROH
FRPPDQGWRHQDEOHORJJLQJWRWKHFRQVROH8VHWKHORJJLQJKRVWFRPPDQGWR
VSHFLI\XSWRIRXU6\VORJVHUYHUV7KH&/,DOVRDOORZVWKHORJJLQJIDFLOLW\W\SH
FRPPDQGWRVHWWKHIDFLOLW\W\SHQXPEHUWRXVHRQWKH6\VORJVHUYHU7RYLHZWKH
FXUUHQWORJJLQJVHWWLQJVXVHWKHVKRZORJJLQJFRPPDQG
&RQILJXULQJ6173
6LPSOH1HWZRUN7LPH3URWRFRO6173DOORZVWKHDFFHVVSRLQWWRVHWLWVLQWHUQDO
FORFNEDVHGRQSHULRGLFXSGDWHVIURPDWLPHVHUYHU6173RU1730DLQWDLQLQJDQ
DFFXUDWHWLPHRQWKHDFFHVVSRLQWHQDEOHVWKHV\VWHPORJWRUHFRUGPHDQLQJIXO
GDWHVDQGWLPHVIRUHYHQWHQWULHV,IWKHFORFNLVQRWVHWWKHDFFHVVSRLQWZLOORQO\
UHFRUGWKHWLPHIURPWKHIDFWRU\GHIDXOWVHWDWWKHODVWERRWXS
7KHDFFHVVSRLQWDFWVDVDQ6173FOLHQWSHULRGLFDOO\VHQGLQJWLPHV\QFKURQL]DWLRQ
UHTXHVWVWRVSHFLILFWLPHVHUYHUV<RXFDQFRQILJXUHXSWRWZRWLPHVHUYHU,3
DGGUHVVHV7KHDFFHVVSRLQWZLOODWWHPSWWRSROOHDFKVHUYHULQWKHFRQILJXUHG
VHTXHQFH
61736HUYHU±&RQILJXUHVWKHDFFHVVSRLQWWRRSHUDWHDVDQ6173FOLHQW:KHQ
HQDEOHGDWOHDVWRQHWLPHVHUYHU,3DGGUHVVPXVWEHVSHFLILHG
3ULPDU\6HUYHU7KH,3DGGUHVVRIDQ6173RU173WLPHVHUYHUWKDWWKHDFFHVV
SRLQWDWWHPSWVWRSROOIRUDWLPHXSGDWH
6HFRQGDU\6HUYHU7KH,3DGGUHVVRIDVHFRQGDU\6173RU173WLPHVHUYHU7KH
DFFHVVSRLQWILUVWDWWHPSWVWRXSGDWHWKHWLPHIURPWKHSULPDU\VHUYHULIWKLVIDLOVLW
DWWHPSWVDQXSGDWHIURPWKHVHFRQGDU\VHUYHU
Enterprise AP(config)#logging on 7-30
Enterprise AP(config)#logging level alert 7-31
Enterprise AP(config)#logging console 7-31
Enterprise AP(config)#logging host 1 IP 10.1.0.3 514 7-30
Enterprise AP(config)#logging host 1 Port 514 7-30
Enterprise AP(config)#logging facility-type 19 7-32
Enterprise AP(config)#exit
Enterprise AP#show logging 7-33
Logging Information
============================================
Syslog State : Enabled
Logging Console State : Enabled
Logging Level : Alert
Logging Facility Type : 19
Servers
1: 10.1.0.3, UDP Port: 514, State: Enabled
2: 0.0.0.0, UDP Port: 514, State: Disabled
3: 0.0.0.0, UDP Port: 514, State: Disabled
4: 0.0.0.0, UDP Port: 514, State: Disabled
=============================================
Enterprise AP#
1RWH 7KHDFFHVVSRLQWDOVRDOORZV\RXWRGLVDEOH6173DQGVHWWKHV\VWHPFORFN
PDQXDOO\
6HW7LPH=RQH±6173XVHV&RRUGLQDWHG8QLYHUVDO7LPHRU87&IRUPHUO\
*UHHQZLFK0HDQ7LPHRU*07EDVHGRQWKHWLPHDWWKH(DUWK¶VSULPHPHULGLDQ
]HURGHJUHHVORQJLWXGH7RGLVSOD\DWLPHFRUUHVSRQGLQJWR\RXUORFDOWLPH\RXPXVW
LQGLFDWHWKHQXPEHURIKRXUV\RXUWLPH]RQHLVORFDWHGEHIRUHHDVWRUDIWHUZHVW
87&
(QDEOH'D\OLJKW6DYLQJ±7KHDFFHVVSRLQWSURYLGHVDZD\WRDXWRPDWLFDOO\DGMXVW
WKHV\VWHPFORFNIRU'D\OLJKW6DYLQJV7LPHFKDQJHV7RXVHWKLVIHDWXUH\RXPXVW
GHILQHWKHPRQWKDQGGDWHWREHJLQDQGWRHQGWKHFKDQJHIURPVWDQGDUGWLPH
'XULQJWKLVSHULRGWKHV\VWHPFORFNLVVHWEDFNE\RQHKRXU
&/,&RPPDQGVIRU6173±7RHQDEOH6173VXSSRUWRQWKHDFFHVVSRLQWIURPWKH
JOREDOFRQILJXUDWLRQPRGHVSHFLI\6173VHUYHU,3DGGUHVVHVXVLQJWKHVQWSVHUYHU
LSFRPPDQGWKHQXVHWKHVQWSVHUYHUHQDEOHFRPPDQGWRHQDEOHWKHVHUYLFH8VH
WKHVQWSVHUYHUWLPH]RQHFRPPDQGWRVHWWKHWLPH]RQHIRU\RXUORFDWLRQDQGWKH
VQWSVHUYHUGD\OLJKWVDYLQJFRPPDQGWRVHWGD\OLJKWVDYLQJV7RYLHZWKHFXUUHQW
6173VHWWLQJVXVHWKHVKRZVQWSFRPPDQG
Enterprise AP(config)#sntp-server ip 1 10.1.0.19 7-35
Enterprise AP(config)#sntp-server enable 7-35
Enterprise AP(config)#sntp-server timezone +8 7-37
Enterprise AP(config)#sntp-server daylight-saving 7-37
Enter Daylight saving from which month<1-12>: 3
and which day<1-31>: 31
Enter Daylight saving end to which month<1-12>: 10
and which day<1-31>: 31
Enterprise AP(config)#exit
Enterprise AP#show sntp 7-38
SNTP Information
=========================================================
Service State : Enabled
SNTP (server 1) IP : 10.1.10.19
SNTP (server 2) IP : 192.43.244.18
Current Time : 19 : 35, Oct 10th, 2003
Time Zone : +8 (TAIPEI, BEIJING)
Daylight Saving : Enabled, from Mar, 31st to Oct, 31st
=========================================================
Enterprise AP#
&/,&RPPDQGVIRUWKH6\VWHP&ORFN±7KHIROORZLQJH[DPSOHVKRZVKRZWR
PDQXDOO\VHWWKHV\VWHPWLPHZKHQ6173VHUYHUVXSSRUWLVGLVDEOHGRQWKHDFFHVV
SRLQW
SNMP
6LPSOH1HWZRUN0DQDJHPHQW3URWRFRO6103LVDFRPPXQLFDWLRQSURWRFRO
GHVLJQHGVSHFLILFDOO\IRUPDQDJLQJGHYLFHVRQDQHWZRUN(TXLSPHQWFRPPRQO\
PDQDJHGZLWK6103LQFOXGHVVZLWFKHVURXWHUVDQGKRVWFRPSXWHUV6103LV
W\SLFDOO\XVHGWRFRQILJXUHWKHVHGHYLFHVIRUSURSHURSHUDWLRQLQDQHWZRUN
HQYLURQPHQWDVZHOODVWRPRQLWRUWKHPWRHYDOXDWHSHUIRUPDQFHRUGHWHFWSRWHQWLDO
SUREOHPV
0DQDJHGGHYLFHVVXSSRUWLQJ6103FRQWDLQVRIWZDUHZKLFKUXQVORFDOO\RQWKH
GHYLFHDQGLVUHIHUUHGWRDVDQDJHQW$GHILQHGVHWRIYDULDEOHVNQRZQDVPDQDJHG
REMHFWVLVPDLQWDLQHGE\WKH6103DJHQWDQGXVHGWRPDQDJHWKHGHYLFH7KHVH
REMHFWVDUHGHILQHGLQD0DQDJHPHQW,QIRUPDWLRQ%DVH0,%WKDWSURYLGHVD
VWDQGDUGSUHVHQWDWLRQRIWKHLQIRUPDWLRQFRQWUROOHGE\WKHDJHQW6103GHILQHVERWK
WKHIRUPDWRIWKH0,%VSHFLILFDWLRQVDQGWKHSURWRFROXVHGWRDFFHVVWKLVLQIRUPDWLRQ
RYHUWKHQHWZRUN
7KHDFFHVVSRLQWLQFOXGHVDQRQERDUGDJHQWWKDWVXSSRUWV6103YHUVLRQVF
DQGFOLHQWV7KLVDJHQWFRQWLQXRXVO\PRQLWRUVWKHVWDWXVRIWKHDFFHVVSRLQWDV
ZHOODVWKHWUDIILFSDVVLQJWRDQGIURPZLUHOHVVFOLHQWV$QHWZRUNPDQDJHPHQW
VWDWLRQFDQDFFHVVWKLVLQIRUPDWLRQXVLQJ6103PDQDJHPHQWVRIWZDUHWKDWLV
FRPSOLDQWZLWK0,%,,7RLPSOHPHQW6103PDQDJHPHQWWKHDFFHVVSRLQWPXVWILUVW
KDYHDQ,3DGGUHVVDQGVXEQHWPDVNFRQILJXUHGHLWKHUPDQXDOO\RUG\QDPLFDOO\
$FFHVVWRWKHRQERDUGDJHQWXVLQJ6103YDQGYFLVFRQWUROOHGE\FRPPXQLW\
VWULQJV7RFRPPXQLFDWHZLWKWKHDFFHVVSRLQWWKHPDQDJHPHQWVWDWLRQPXVWILUVW
VXEPLWDYDOLGFRPPXQLW\VWULQJIRUDXWKHQWLFDWLRQ
$FFHVVWRWKHDFFHVVSRLQWXVLQJ6103YSURYLGHVDGGLWLRQDOVHFXULW\IHDWXUHVWKDW
FRYHUPHVVDJHLQWHJULW\DXWKHQWLFDWLRQDQGHQFU\SWLRQDVZHOODVFRQWUROOLQJ
QRWLILFDWLRQVWKDWDUHVHQWWRVSHFLILHGXVHUWDUJHWV
Enterprise AP(config)#no sntp-server enable 7-35
Enterprise AP(config)#sntp-server date-time 7-36
Enter Year<1970-2100>: 2003
Enter Month<1-12>: 10
Enter Day<1-31>: 10
Enter Hour<0-23>: 18
Enter Min<0-59>: 35
Enterprise AP(config)#
&RQILJXULQJ6103DQG7UDS0HVVDJH3DUDPHWHUV
7KHDFFHVVSRLQW6103DJHQWPXVWEHHQDEOHGWRIXQFWLRQIRUYHUVLRQVFDQG
FOLHQWV0DQDJHPHQWDFFHVVXVLQJ6103YDQGYFDOVRUHTXLUHVFRPPXQLW\
VWULQJVWREHFRQILJXUHGIRUDXWKHQWLFDWLRQ7UDSQRWLILFDWLRQVFDQEHHQDEOHGDQG
VHQWWRXSWRIRXUPDQDJHPHQWVWDWLRQV
6103±(QDEOHVRUGLVDEOHV6103PDQDJHPHQWDFFHVVDQGDOVRHQDEOHVWKH
DFFHVVSRLQWWRVHQG6103WUDSVQRWLILFDWLRQV'HIDXOW'LVDEOH
/RFDWLRQ±$WH[WVWULQJWKDWGHVFULEHVWKHV\VWHPORFDWLRQ0D[LPXPOHQJWK
FKDUDFWHUV
&RQWDFW±$WH[WVWULQJWKDWGHVFULEHVWKHV\VWHPFRQWDFW0D[LPXPOHQJWK
FKDUDFWHUV
&RPPXQLW\1DPH5HDG2QO\±'HILQHVWKH6103FRPPXQLW\DFFHVVVWULQJWKDW
KDVUHDGRQO\DFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHRQO\DEOHWRUHWULHYH
0,%REMHFWV0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH'HIDXOWSXEOLF
&RPPXQLW\1DPH5HDG:ULWH±'HILQHVWKH6103FRPPXQLW\DFFHVVVWULQJWKDW
KDVUHDGZULWHDFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHDEOHWRERWKUHWULHYH
DQGPRGLI\0,%REMHFWV0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH
'HIDXOW SULYDWH
7UDS'HVWLQDWLRQWR±(QDEOHVUHFLSLHQWVXSWRIRXURI6103QRWLILFDWLRQV
7UDS'HVWLQDWLRQ,3$GGUHVV±6SHFLILHVWKHUHFLSLHQWRI6103QRWLILFDWLRQV(QWHU
WKH,3DGGUHVVRUWKHKRVWQDPH+RVW1DPHWRFKDUDFWHUVFDVHVHQVLWLYH
7UDS'HVWLQDWLRQ&RPPXQLW\1DPH±7KHFRPPXQLW\VWULQJVHQWZLWKWKH
QRWLILFDWLRQRSHUDWLRQ0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH
'HIDXOW SXEOLF
(QJLQH,'±6HWVWKHHQJLQHLGHQWLILHUIRUWKH6103YDJHQWWKDWUHVLGHVRQWKH
DFFHVVSRLQW7KLVHQJLQHSURWHFWVDJDLQVWPHVVDJHUHSOD\GHOD\DQGUHGLUHFWLRQ
7KHHQJLQH,'LVDOVRXVHGLQFRPELQDWLRQZLWKXVHUSDVVZRUGVWRJHQHUDWHWKH
VHFXULW\NH\VIRUDXWKHQWLFDWLQJDQGHQFU\SWLQJ6103YSDFNHWV$GHIDXOWHQJLQH
,'LVDXWRPDWLFDOO\JHQHUDWHGWKDWLVXQLTXHWRWKHDFFHVVSRLQW5DQJHWR
KH[DGHFLPDOFKDUDFWHUV
1RWH ,IWKHORFDOHQJLQH,'LVGHOHWHGRUFKDQJHGDOO6103XVHUVZLOOEHFOHDUHG$OO
H[LVWLQJXVHUVZLOOQHHGWREHUHFRQILJXUHG,I\RXZDQWWRFKDQJHWKHGHIDXOW
HQJLQH,'FKDQJHLWILUVWEHIRUHFRQILJXULQJRWKHU6103YSDUDPHWHUV
7UDS&RQILJXUDWLRQ±$OORZVVHOHFWLRQRIVSHFLILF6103QRWLILFDWLRQVWRVHQG7KH
IROORZLQJLWHPVDUHDYDLODEOH
V\V6\VWHP8S7KHDFFHVVSRLQWLVXSDQGUXQQLQJ
V\V6\VWHP'RZQ7KHDFFHVVSRLQWLVDERXWWRVKXWGRZQDQGUHERRW
V\V5DGLXV6HUYHU&KDQJHG7KHDFFHVVSRLQWKDVFKDQJHGIURPWKHSULPDU\
5$',86VHUYHUWRWKHVHFRQGDU\RUIURPWKHVHFRQGDU\WRWKHSULPDU\
V\V&RQILJ)LOH9HUVLRQ&KDQJHG7KHDFFHVVSRLQW¶VFRQILJXUDWLRQILOHKDVEHHQ
FKDQJHG
GRW6WDWLRQ$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DVVRFLDWHGZLWKWKH
DFFHVVSRLQW
GRW6WDWLRQ5H$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\UHDVVRFLDWHGZLWK
WKHDFFHVVSRLQW
GRW6WDWLRQ$XWKHQWLFDWLRQ$FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\DXWKHQWLFDWHG
GRW6WDWLRQ5HTXHVW)DLO$FOLHQWVWDWLRQKDVIDLOHGDVVRFLDWLRQUHDVVRFLDWLRQRU
DXWKHQWLFDWLRQ
GRW,QWHUIDFH%)DLO7KHELQWHUIDFHKDVIDLOHG
GRW,QWHUIDFH$)DLO7KHDRUJLQWHUIDFHKDVIDLOHG
GRW[0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DXWKHQWLFDWHGLWV
0$&DGGUHVVZLWKWKH5$',86VHUYHU
GRW[0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHG0$&DGGUHVVDXWKHQWLFDWLRQ
ZLWKWKH5$',86VHUYHU
GRW[$XWK1RW,QLWLDWHG$FOLHQWVWDWLRQGLGQRWLQLWLDWH;DXWKHQWLFDWLRQ
GRW[$XWK6XFFHVV$;FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\DXWKHQWLFDWHG
E\WKH5$',86VHUYHU
GRW[$XWK)DLO$;FOLHQWVWDWLRQKDVIDLOHG5$',86DXWKHQWLFDWLRQ
GRW[6XSS$XWKHQWLFDWHG$VXSSOLFDQWVWDWLRQKDVEHHQVXFFHVVIXOO\
DXWKHQWLFDWHGE\WKH5$',86VHUYHU
ORFDO0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DXWKHQWLFDWHGLWV
0$&DGGUHVVZLWKWKHORFDOGDWDEDVHRQWKHDFFHVVSRLQW
ORFDO0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHGDXWKHQWLFDWLRQZLWKWKHORFDO0$&
DGGUHVVGDWDEDVHRQWKHDFFHVVSRLQW
LDSS6WDWLRQ5RDPHG)URP$FOLHQWVWDWLRQKDVURDPHGIURPDQRWKHUDFFHVVSRLQW
LGHQWLILHGE\LWV,3DGGUHVV
LDSS6WDWLRQ5RDPHG7R$FOLHQWVWDWLRQKDVURDPHGWRDQRWKHUDFFHVVSRLQW
LGHQWLILHGE\LWV,3DGGUHVV
LDSS&RQWH[W'DWD6HQW$FOLHQWVWDWLRQ¶V&RQWH[W'DWDKDVEHHQVHQWWRDQRWKHU
DFFHVVSRLQWZLWKZKLFKWKHVWDWLRQKDVDVVRFLDWHG
VQWS6HUYHU)DLO7KHDFFHVVSRLQWKDVIDLOHGWRVHWWKHWLPHIURPWKHFRQILJXUHG
6173VHUYHU
ZLUHOHVV([WHUQDO$QWHQQD$QH[WHUQDODQWHQQDKDVEHHQHQDEOHG
GRW:LUHOHVV6WDWLRQ'HDXWKHQWLFDWH$FOLHQWVWDWLRQKDVGHDXWKHQWLFDWHGIURP
WKHQHWZRUN
GRW6WDWLRQ'LVDVVRFLDWH$FOLHQWVWDWLRQQRORQJHUDVVRFLDWHVZLWKWKHQHWZRUN
GRW6WDWLRQ$XWKHQWLFDWH)DLO$FOLHQWVWDWLRQKDVWULHGDQGIDLOHGWRDXWKHQWLFDWH
WRWKHQHWZRUN
(QDEOH$OO7UDSV&OLFNWKHEXWWRQWRHQDEOHDOOWKHDYDLODEOHWUDSV
'LVDEOH$OO7UDSV&OLFNWKHEXWWRQWRGLVDEOHDOOWKHDYDLODEOHWUDSV
&/,&RPPDQGVIRU6103DQG7UDS&RQILJXUDWLRQ±8VHWKHVQPSVHUYHUHQDEOH
VHUYHUFRPPDQGIURPWKHJOREDOFRQILJXUDWLRQPRGHWRHQDEOHWKH6103DJHQW
8VHWKHVQPSVHUYHUORFDWLRQDQGVQPSVHUYHUFRQWDFWFRPPDQGVWRLQGLFDWH
WKHSK\VLFDOORFDWLRQRIWKHDFFHVVSRLQWDQGGHILQHDV\VWHPFRQWDFW7RVHWWKH
UHDGRQO\DQGUHDGZULWHFRPPXQLW\QDPHVXVHWKHVQPSVHUYHUFRPPXQLW\
FRPPDQG8VHWKHVQPSVHUYHUKRVWFRPPDQGWRGHILQHDWUDSUHFHLYHUKRVWDQG
WKHVQPSVHUYHUWUDSFRPPDQGWRHQDEOHRUGLVDEOHVSHFLILFWUDSV
Enterprise AP(config)#snmp-server enable server 7-43
Enterprise AP(config)#snmp-server community alpha rw 7-42
Enterprise AP(config)#snmp-server community beta ro
Enterprise AP(config)#snmp-server location WC-19 7-43
Enterprise AP(config)#snmp-server contact Paul 7-42
Enterprise AP(config)#snmp-server host 192.168.1.9 alpha 7-44
Enterprise AP(config)#snmp-server trap dot11StationAssociation 7-45
Enterprise AP(config)#
7RYLHZWKHFXUUHQW6103VHWWLQJVXVHWKHVKRZVQPSFRPPDQG
Enterprise AP#show snmp 7-55
SNMP Information
==============================================
Service State : Enable
Community (ro) : *****
Community (rw) : *****
Location : WC-19
Contact : Paul
EngineId :80:00:07:e5:80:00:00:2e:62:00:00:00:18
EngineBoots:1
Trap Destinations:
1: 192.168.1.9, Community: *****, State: Enabled
2: 0.0.0.0, Community: *****, State: Disabled
3: 0.0.0.0, Community: *****, State: Disabled
4: 0.0.0.0, Community: *****, State: Disabled
dot11InterfaceAGFail Enabled dot11InterfaceBFail Enabled
dot11StationAssociation Enabled dot11StationAuthentication Enabled
dot11StationReAssociation Enabled dot11StationRequestFail Enabled
dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled
dot1xAuthSuccess Enabled dot1xMacAddrAuthFail Enabled
dot1xMacAddrAuthSuccess Enabled iappContextDataSent Enabled
iappStationRoamedFrom Enabled iappStationRoamedTo Enabled
localMacAddrAuthFail Enabled localMacAddrAuthSuccess Enabled
iappContextDataSent Enabled dot1XSuppAuthenticated Enabled
wirelessExternalAntenna Enabled dot11InterfaceAFail Enabled
dot11InterfaceGFail Enabled
pppLogonFail Enabled sntpServerFail Enabled
configFileVersionChanged Enabled radiusServerChanged Enabled
systemDown Enabled systemUp Enabled
=============================================
Enterprise AP#
&RQILJXULQJ6103Y8VHUV
7KHDFFHVVSRLQWDOORZVXSWR6103YXVHUVWREHFRQILJXUHG(DFKXVHUPXVW
EHGHILQHGE\DXQLTXHQDPHDVVLJQHGWRRQHRIWKUHHSUHGHILQHGVHFXULW\JURXSV
DQGFRQILJXUHGZLWKVSHFLILFDXWKHQWLFDWLRQDQGHQFU\SWLRQVHWWLQJV
8VHU±7KH6103YXVHUQDPHFKDUDFWHUVPD[LPXP
*URXS±7KH6103YJURXSQDPH2SWLRQV525:$XWKRU5:3ULY'HIDXOW52
52±5HDGRQO\DFFHVV
5:$XWK±5HDGZULWHDFFHVVZLWKXVHUDXWKHQWLFDWLRQ
5:3ULY±5HDGZULWHDFFHVVZLWKERWKXVHUDXWKHQWLFDWLRQDQGGDWDHQFU\SWLRQ
$XWK7\SH±7KHDXWKHQWLFDWLRQW\SHXVHGIRUWKH6103XVHUHLWKHU0'RUQRQH
:KHQ0'LVVHOHFWHGHQWHUDSDVVZRUGLQWKHFRUUHVSRQGLQJ3DVVSKUDVHILHOG
3ULY7\SH±7KHGDWDHQFU\SWLRQW\SHXVHGIRUWKH6103XVHUHLWKHU'(6RUQRQH
:KHQ'(6LVVHOHFWHGHQWHUDNH\LQWKHFRUUHVSRQGLQJ3DVVSKUDVHILHOG
3DVVSKUDVH±7KHSDVVZRUGRUNH\DVVRFLDWHGZLWKWKHDXWKHQWLFDWLRQDQGSULYDF\
VHWWLQJV$PLQLPXPRIHLJKWSODLQWH[WFKDUDFWHUVLVUHTXLUHG
$FWLRQ±&OLFNWKH$GGEXWWRQWRDGGDQHZXVHUWRWKHOLVW&OLFNWKHHGLWEXWWRQWR
FKDQJHGHWDLOVRIDQH[LVWLQJXVHU&OLFNWKH'HOEXWWRQWRUHPRYHDXVHUIURPWKHOLVW
1RWH 8VHUVPXVWEHDVVLJQHGWRJURXSVWKDWKDYHWKHVDPHVHFXULW\OHYHOV)RU
H[DPSOHDXVHUZKRKDV³$XWK7\SH´DQG³3ULY7\SH´FRQILJXUHGWR0'DQG
'(6UHVSHFWLYHO\WKDWLWXVHVERWKDXWKHQWLFDWLRQDQGGDWDHQFU\SWLRQPXVWEH
DVVLJQHGWRWKH5:3ULYJURXS,IWKLVVDPHXVHUZHUHLQVWHDGDVVLJQHGWRWKH
UHDGRQO\52JURXSWKHXVHUZRXOGQRWEHDEOHWRDFFHVVWKHGDWDEDVH
&/,&RPPDQGVIRU&RQILJXULQJ6103Y8VHUV±8VHWKHVQPSVHUYHUHQJLQHLG
FRPPDQGWRGHILQHWKH6103YHQJLQHEHIRUHDVVLJQLQJXVHUVWRJURXSV8VHWKH
VQPSVHUYHUXVHUFRPPDQGWRDVVLJQXVHUVWRRQHRIWKHWKUHHJURXSVDQGVHWWKH
DSSURSULDWHDXWKHQWLFDWLRQDQGHQFU\SWLRQW\SHVWREHXVHG7RYLHZWKHFXUUHQW
6103YHQJLQH,'XVHWKHVKRZVQPSFRPPDQG7RYLHZ6103XVHUVDQG
JURXSVHWWLQJVXVHWKHVKRZVQPSXVHUVRUVKRZVQPSJURXSDVVLJQPHQWV
FRPPDQGV
Enterprise AP(config)#snmp-server engine-id 1a:2b:3c:4d:00:ff 7-46
Enterprise AP(config)#snmp-server user 7-47
User Name<1-32> :chris
Group Name<1-32> :RWPriv
Authtype(md5,<cr>none):md5
Passphrase<8-32>:a good secret
Privacy(des,<cr>none) :des
Passphrase<8-32>:a very good secret
Enterprise AP(config)#exit
Enterprise AP#show snmp users 7-52
=============================================
UserName :chris
GroupName :RWPriv
AuthType :MD5
Passphrase:****************
PrivType :DES
Passphrase:****************
=============================================
Enterprise AP#show snmp group-assignments 7-52
GroupName :RWPriv
UserName :chris
Enterprise AP#
&RQILJXULQJ6103Y7UDS)LOWHUV
6103YXVHUVFDQEHFRQILJXUHGWRUHFHLYHQRWLILFDWLRQPHVVDJHVIURPWKHDFFHVV
SRLQW$Q61037DUJHW,'LVFUHDWHGWKDWVSHFLILHVWKH6103YXVHU,3DGGUHVV
DQG8'3SRUW$XVHUGHILQHGQRWLILFDWLRQILOWHUFDQEHFUHDWHGVRWKDWVSHFLILF
QRWLILFDWLRQVFDQEHSUHYHQWHGIURPEHLQJVHQWWRSDUWLFXODUWDUJHWV
7KHDFFHVVSRLQWDOORZVXSWRQRWLILFDWLRQILOWHUVWREHFUHDWHG(DFKILOWHUFDQEH
GHILQHGE\XSWR0,%VXEWUHH,'HQWULHV
7RFRQILJXUHDQHZQRWLILFDWLRQILOWHUFOLFNWKH1HZEXWWRQ$QHZSDJHRSHQVWR
FRQILJXUHWKHILOWHUVHHEHORZ7RHGLWDQH[LVWLQJILOWHUVHOHFWWKHUDGLREXWWRQQH[W
WRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH(GLWEXWWRQ7RGHOHWHDILOWHUVHOHFWWKH
UDGLREXWWRQQH[WWRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH'HOHWHEXWWRQ
:KHQ\RXFOLFNRQWKH1HZEXWWRQLQWKH61037UDS)LOWHUVSDJHDQHZSDJH
RSHQVZKHUHWKHILOWHUSDUDPHWHUVDUHFRQILJXUHG'HILQHDILOWHUQDPHDQGVXEWUHH
,'WREHILOWHUHG6HOHFWWKHILOWHUW\SHLQFOXGHRUH[FOXGHIURPWKHGURSGRZQOLVW
&OLFN$SSO\WRFUHDWHWKHILOWHU
7RDGGPRUHVXEWUHH,'VWRWKHILOWHUUHWXUQWRWKH61037UDS)LOWHUVSDJHDQGFOLFN
WKH(GLWEXWWRQ,QWKH(GLWSDJHFOLFNWKH1HZEXWWRQWRDFFHVVWKH$GG6103
1RWLILFDWLRQ6XEWUHHSDJHDQGFRQILJXUHDQHZVXEWUHH,'WREHILOWHUHG
1RWH 2QO\WKH1HZ)LOWHUSDJHDOORZVWKH)LOWHU,'WREHFRQILJXUHG
)LOWHU,'±$XVHUGHILQHGQDPHWKDWLGHQWLILHVWKHILOWHU0D[LPXPOHQJWK
FKDUDFWHUV
6XEWUHH2,'±6SHFLILHV0,%VXEWUHHWREHILOWHUHG7KH0,%VXEWUHHPXVWEH
GHILQHGLQWKHIRUP³´DQGDOZD\VVWDUWZLWKD³´
)LOWHU7\SH±,QGLFDWHVLIWKHILOWHULVWR³LQFOXGH´RU³H[FOXGH´WKH0,%VXEWUHHREMHFWV
IURPWKHILOWHU1RWHWKDW0,%REMHFWVLQFOXGHGLQWKHILOWHUDUHQRWVHQWWRWKHUHFHLYLQJ
WDUJHWDQGREMHFWVH[FOXGHGDUHVHQW%\GHIDXOWDOOWUDSVDUHVHQWVR\RXFDQILUVW
XVHDQ³LQFOXGH´ILOWHUHQWU\IRUDOOWUDSREMHFWV7KHQXVH³H[FOXGH´HQWULHVIRUWKH
UHTXLUHGWUDSREMHFWVWRVHQGWRWKHWDUJHW1RWHWKDWWKHILOWHUHQWULHVDUHDSSOLHGLQ
WKHVHTXHQFHWKDWWKH\DUHGHILQHG
&/,&RPPDQGVIRU&RQILJXULQJ6103Y7UDS)LOWHUV±7RFUHDWHDQRWLILFDWLRQILOWHU
XVHWKHVQPSVHUYHUILOWHUFRPPDQGIURPWKH&/,FRQILJXUDWLRQPRGH8VHWKH
FRPPDQGPRUHWKDQRQFHZLWKWKHVDPHILOWHU,'WREXLOGDILOWHUWKDWLQFOXGHVRU
H[FOXGHVPXOWLSOH0,%REMHFWV7RYLHZWKHFXUUHQW6103ILOWHUVXVHWKHVKRZ
VQPSILOWHUFRPPDQGIURPWKH&/,([HFPRGH
Enterprise AP(config)#snmp-server filter trapfilter
include .1 7-50
Enterprise AP(config)#snmp-server filter trapfilter
exclude .1.3.6.1.2.1.2.2.1.1.23
Enterprise AP(config)#exit
Enterprise AP#show snmp filter 7-53
Filter: trapfilter
Type: include
Subtree: iso
Type: exclude
Subtree: iso.3.6.1.2.1.2.2.1.1.23
=============================
Enterprise AP#
&RQILJXULQJ6103Y7DUJHWV
$Q6103YQRWLILFDWLRQ7DUJHW,'LVVSHFLILHGE\WKH6103YXVHU,3DGGUHVV
DQG8'3SRUW$XVHUGHILQHGILOWHUFDQDOVREHDVVLJQHGWRVSHFLILFWDUJHWVWROLPLW
WKHQRWLILFDWLRQVUHFHLYHGWRVSHFLILF0,%REMHFWV1RWHWKDWWKHILOWHUPXVWILUVWEH
FRQILJXUHGVHH³&RQILJXULQJ6103Y7UDS)LOWHUV´RQSDJH
7RFRQILJXUHDQHZQRWLILFDWLRQUHFHLYHUWDUJHWFOLFNWKH1HZEXWWRQ$QHZSDJH
RSHQVWRFRQILJXUHWKHVHWWLQJVVHHEHORZ7RHGLWDQH[LVWLQJWDUJHWVHOHFWWKH
UDGLREXWWRQQH[WWRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH(GLWEXWWRQ7RGHOHWH
WDUJHWVVHOHFWWKHUDGLREXWWRQQH[WWRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH'HOHWH
EXWWRQ
:KHQ\RXFOLFNRQWKH1HZRU(GLWEXWWRQLQWKH61037DUJHWVSDJHDQHZSDJH
RSHQVZKHUHWKHWDUJHWSDUDPHWHUVDUHFRQILJXUHG'HILQHWKHSDUDPHWHUVDQG
VHOHFWDILOWHULIUHTXLUHG1RWHWKDWWKH6103YXVHUQDPHPXVWILUVWEHGHILQHG
VHH³&RQILJXULQJ6103Y8VHUV´RQSDJH &OLFN$SSO\
1RWH 7KH7DUJHW,'FDQQRWEHFKDQJHGLQWKH(GLW7DUJHWSDJH2QO\WKH1HZ7DUJHW
SDJHDOORZVWKH7DUJHW,'WREHFRQILJXUHG
7DUJHW,'±$XVHUGHILQHGQDPHWKDWLGHQWLILHVDUHFHLYHURIQRWLILFDWLRQV7KH
DFFHVVSRLQWVXSSRUWVXSWRWDUJHW,'V0D[LPXPOHQJWKFKDUDFWHUV
,3$GGUHVV±6SHFLILHVWKH,3DGGUHVVRIWKHUHFHLYLQJPDQDJHPHQWVWDWLRQ
8'33RUW±7KH8'3SRUWWKDWLVXVHGRQWKHUHFHLYLQJPDQDJHPHQWVWDWLRQIRU
QRWLILFDWLRQPHVVDJHV
61038VHU±7KHGHILQHG6103YXVHUWKDWLVWRUHFHLYHQRWLILFDWLRQPHVVDJHV
$VVLJQHG)LOWHU±7KHQDPHRIDXVHUGHILQHGQRWLILFDWLRQILOWHUWKDWLVDSSOLHGWRWKH
WDUJHW
&/,&RPPDQGVIRU&RQILJXULQJ6103Y7DUJHWV±7RFUHDWHDQRWLILFDWLRQWDUJHW
XVHWKHVQPSVHUYHUWDUJHWVFRPPDQGIURPWKH&/,FRQILJXUDWLRQPRGH7RDVVLJQ
DILOWHUWRDWDUJHWXVHWKHVQPSVHUYHUILOWHUDVVLJQPHQWFRPPDQG7RYLHZWKH
FXUUHQW6103WDUJHWVXVHWKHVKRZVQPSWDUJHWFRPPDQGIURPWKH&/,([HF
PRGH7RYLHZILOWHUDVVLJQPHQWWRWDUJHWVXVHWKHVKRZVQPSILOWHUDVVLJQPHQWV
FRPPDQG
Radio Interface
7KH,(((DDQGJLQWHUIDFHVLQFOXGHFRQILJXUDWLRQRSWLRQVIRUUDGLR
VLJQDOFKDUDFWHULVWLFVDQGZLUHOHVVVHFXULW\IHDWXUHV7KHFRQILJXUDWLRQRSWLRQVDUH
QHDUO\LGHQWLFDODQGDUHWKHUHIRUHERWKFRYHUHGLQWKLVVHFWLRQRIWKHPDQXDO
7KHDFFHVVSRLQWFDQRSHUDWHLQWKUHHPRGHV,(((DRQO\EJRQO\RU
DPL[HGDEJPRGH$OVRQRWHWKDWJLVEDFNZDUGFRPSDWLEOHZLWK
E7KHVHLQWHUIDFHVDUHFRQILJXUHGLQGHSHQGHQWO\XQGHUWKHIROORZLQJZHE
SDJHV
5DGLR,QWHUIDFH$D
5DGLR,QWHUIDFH*EJ
(DFKUDGLRVXSSRUWVXSWRIRXUYLUWXDODFFHVVSRLQW9$3LQWHUIDFHVQXPEHUHGWR
(DFK9$3IXQFWLRQVDVDVHSDUDWHDFFHVVSRLQWDQGFDQEHFRQILJXUHGZLWKLWV
RZQ6HUYLFH6HW,GHQWLILFDWLRQ66,'DQGVHFXULW\VHWWLQJV+RZHYHUPRVWUDGLR
VLJQDOSDUDPHWHUVDSSO\WRDOOIRXU9$3LQWHUIDFHV
7KH9$3VIXQFWLRQVLPLODUWRD9/$1ZLWKHDFK9$3PDSSHGWRLWVRZQ9/$1,'
7UDIILFWRVSHFLILF9$3VFDQEHVHJUHJDWHGEDVHGRQXVHUJURXSVRUDSSOLFDWLRQ
WUDIILF(DFK9$3FDQKDYHXSWRZLUHOHVVFOLHQWVZKHUHE\WKHFOLHQWVDVVRFLDWH
ZLWKWKHVH9$3VWKHVDPHDVWKH\ZRXOGZLWKDSK\VLFDODFFHVVSRLQW
1RWH 7KHUDGLRFKDQQHOVHWWLQJVIRUWKHDFFHVVSRLQWDUHOLPLWHGE\ORFDOUHJXODWLRQV
ZKLFKGHWHUPLQHWKHQXPEHURIFKDQQHOVWKDWDUHDYDLODEOH5HIHUWR³*HQHUDO
6SHFLILFDWLRQV´RQSDJH&IRUDGGLWLRQDOLQIRUPDWLRQRQWKHPD[LPXPQXPEHU
FKDQQHOVDYDLODEOH
Enterprise AP(config)#snmp-server targets mytraps
192.168.1.33 chris 7-49
Enterprise AP(config)#snmp-server filter-assignment
mytraps trapfilter 7-51
Enterprise AP(config)#exit
Enterprise AP#show snmp target 7-53
Host ID : mytraps
User : chris
IP Address : 192.168.1.33
UDP Port : 162
=============================
Enterprise AP#show snmp filter-assignments 7-54
HostID FilterID
mytraps trapfilter
Enterprise AP#
5DGLR6HWWLQJV$D
7KH,(((DLQWHUIDFHRSHUDWHVZLWKLQWKH*+]EDQGDWXSWR0ESVLQ
QRUPDOPRGHRUXSWR0ESVLQ7XUERPRGH
)LUVWFRQILJXUHWKHUDGLRVHWWLQJVWKDWDSSO\WRWKHLQGLYLGXDO9$3V9LUWXDO$FFHVV
3RLQWDQGWKHFRPPRQUDGLRVHWWLQJVWKDWDSSO\WRWKHRYHUDOOV\VWHP$IWHU\RX
KDYHFRQILJXUHGWKHUDGLRVHWWLQJVJRWRWKH6HFXULW\SDJHXQGHUWKHD,QWHUIDFH
VHH³6HFXULW\´RQSDJH HQDEOHWKHUDGLRVHUYLFHIRUDQ\RIWKH9$3LQWHUIDFHV
DQGWKHQVHWDQ66,'WRLGHQWLI\WKHZLUHOHVVQHWZRUNVHUYLFHSURYLGHGE\HDFK9$3
5HPHPEHUWKDWRQO\FOLHQWVZLWKWKHVDPH66,'FDQDVVRFLDWHZLWKD9$3
1RWH <RXPXVWILUVWHQDEOH9$3LQWHUIDFHEHIRUHWKHRWKHULQWHUIDFHVFDQEHHQDEOHG
&RQILJXULQJ9$35DGLR6HWWLQJV
7RFRQILJXUH9$3UDGLRVHWWLQJVVHOHFWWKH5DGLR6HWWLQJVSDJH
'HIDXOW9/$1,'±7KH9/$1,'DVVLJQHGWRZLUHOHVVFOLHQWVDVVRFLDWHGWRWKH9$3
LQWHUIDFHWKDWDUHQRWDVVLJQHGWRDVSHFLILF9/$1E\5$',86VHUYHUFRQILJXUDWLRQ
'HIDXOW
&ORVHG6\VWHP±:KHQHQDEOHGWKH9$3LQWHUIDFHGRHVQRWLQFOXGHLWV66,'LQ
EHDFRQPHVVDJHV1RUGRHVLWUHVSRQGWRSUREHUHTXHVWVIURPFOLHQWVWKDWGRQRW
LQFOXGHDIL[HG66,''HIDXOW'LVDEOH
$XWKHQWLFDWLRQ7LPHRXW,QWHUYDO±7KHWLPHZLWKLQZKLFKWKHFOLHQWVKRXOGILQLVK
DXWKHQWLFDWLRQEHIRUHDXWKHQWLFDWLRQWLPHVRXW5DQJHPLQXWHV'HIDXOW
PLQXWHV
$VVRFLDWLRQ7LPHRXW,QWHUYDO±7KHLGOHWLPHLQWHUYDOZKHQQRIUDPHVDUHVHQWDIWHU
ZKLFKDFOLHQWLVGLVDVVRFLDWHGIURPWKH9$3LQWHUIDFH5DQJHPLQXWHV
'HIDXOWPLQXWHV
:3$30.6$/LIH7LPH±:3$SURYLGHVIDVWURDPLQJIRUDXWKHQWLFDWHGFOLHQWVE\
UHWDLQLQJNH\VDQGRWKHUVHFXULW\VHWWLQJVLQDFDFKHIRUHDFK9$3,QWKLVZD\ZKHQ
FOLHQWVURDPEDFNLQWRD9$3WKH\KDGSUHYLRXVO\EHHQXVLQJUHDXWKHQWLFDWLRQLV
QRWUHTXLUHG:KHQD:3$FOLHQWLVILUVWDXWKHQWLFDWHGLWUHFHLYHVD3DLUZLVH
0DVWHU.H\30.WKDWLVXVHGWRJHQHUDWHWKHRWKHUNH\VXVHGIRUXQLFDVWGDWD
HQFU\SWLRQ7KLVNH\DQGRWKHUFOLHQWLQIRUPDWLRQIRUPDFOLHQW6HFXULW\$VVRFLDWLRQ
6$WKDWWKH9$3KROGVLQDFDFKH:KHQWKHOLIHWLPHH[SLUHVWKHVHFXULW\
DVVRFLDWLRQDQGNH\VDUHGHOHWHGIURPWKHFDFKH,IWKHFOLHQWUHWXUQVWRDQDFFHVV
SRLQWDIWHUWKHDVVRFLDWLRQKDVEHHQGHOHWHGLWZLOOUHTXLUHIXOOUHDXWKHQWLFDWLRQ
5DQJHPLQXWHV'HIDXOW PLQXWHV
&/,&RPPDQGVIRUWKH&RQILJXULQJWKH9$3V±)URPWKHJOREDOFRQILJXUDWLRQPRGH
HQWHUWKHLQWHUIDFHZLUHOHVVDFRPPDQGWRDFFHVVWKHDUDGLRLQWHUIDFH
)URPWKHDLQWHUIDFHPRGH\RXFDQDFFHVVUDGLRVHWWLQJVWKDWDSSO\WRDOO
9$3LQWHUIDFHV7RDFFHVVDVSHFLILF9$3LQWHUIDFHQXPEHUHGWRXVHWKHYDS
FRPPDQG<RXFDQFRQILJXUHDQDPHIRUHDFKLQWHUIDFHXVLQJWKHGHVFULSWLRQ
FRPPDQG<RXFDQDOVRXVHWKHFORVHGV\VWHPFRPPDQGWRVWRSVHQGLQJWKH
66,'LQEHDFRQPHVVDJHV6HWDQ\RWKHU9$3SDUDPHWHUVDQGUDGLRVHWWLQJDV
UHTXLUHGEHIRUHHQDEOLQJWKH9$3LQWHUIDFHZLWKWKHQRVKXWGRZQFRPPDQG7R
YLHZWKHFXUUHQWDUDGLRVHWWLQJVIRUWKH9$3LQWHUIDFHXVHWKHVKRZ
LQWHUIDFHZLUHOHVVD>@FRPPDQGDVVKRZQRQ
&RQILJXULQJ5RJXH$3'HWHFWLRQ
7RFRQILJXUH5RXJH$3GHWHFWLRQVHOHFWWKH5DGLR6HWWLQJVSDJHDQGVFUROOGRZQWR
WKH³5RXJH$3´VHFWLRQ
5RJXH$3±$³URJXH$3´LVHLWKHUDQDFFHVVSRLQWWKDWLVQRWDXWKRUL]HGWR
SDUWLFLSDWHLQWKHZLUHOHVVQHWZRUNRUDQDFFHVVSRLQWWKDWGRHVQRWKDYHWKHFRUUHFW
VHFXULW\FRQILJXUDWLRQ5RJXH$3VFDQDOORZXQDXWKRUL]HGDFFHVVWRWKHQHWZRUNRU
IRROFOLHQWVWDWLRQVLQWRPLVWDNHQO\DVVRFLDWLQJZLWKWKHPDQGWKHUHE\EORFNLQJ
DFFHVVWRQHWZRUNUHVRXUFHV
Enterprise AP(if-wireless a)#vap 0 7-97
Enterprise AP(if-wireless a: VAP[0])#description RD-AP#3 7-108
Enterprise AP(if-wireless a: VAP[0])#vlan-id 1 7-135
Enterprise AP(if-wireless a: VAP[0])#closed-system 7-109
Enterprise AP(if-wireless a: VAP[0])#authentication-timeout-
interval 30 7-110
Enterprise AP(if-wireless a: VAP[0])#association-timeout-
interval 20 7-110
Enterprise AP(if-wireless a: VAP[0])#max-association 32 7-110
Enterprise AP(if-wireless a: VAP[0])#pmksa-lifetime 900 7-127
Enterprise AP(if-wireless a: VAP[0])#
7KHDFFHVVSRLQWFDQEHFRQILJXUHGWRSHULRGLFDOO\VFDQDOOUDGLRFKDQQHOVDQGILQG
RWKHUDFFHVVSRLQWVZLWKLQUDQJH$GDWDEDVHRIQHDUE\DFFHVVSRLQWVLVPDLQWDLQHG
ZKHUHDQ\URJXH$3VFDQEHLGHQWLILHG'XULQJDVFDQ6\VORJPHVVDJHVVHH
³(QDEOLQJ6\VWHP/RJJLQJ´RQSDJHDUHVHQWIRUHDFKDFFHVVSRLQWGHWHFWHG
5RJXHDFFHVVSRLQWVFDQEHLGHQWLILHGE\XQNQRZQ%66,'0$&DGGUHVVRU66,'
FRQILJXUDWLRQ
$3'HWHFWLRQ±(QDEOHVWKHSHULRGLFVFDQQLQJIRURWKHUDFFHVVSRLQWV
'HIDXOW 'LVDEOH
$36FDQ,QWHUYDO±6HWVWKHWLPHEHWZHHQHDFKURJXH$3VFDQ5DQJH
PLQXWHV'HIDXOWPLQXWHV
$36FDQ'XUDWLRQ±6HWVWKHOHQJWKRIWLPHIRUHDFKURJXH$3VFDQ$ORQJVFDQ
GXUDWLRQWLPHZLOOGHWHFWPRUHDFFHVVSRLQWVLQWKHDUHDEXWFDXVHVPRUHGLVUXSWLRQ
WRFOLHQWDFFHVV5DQJHPLOOLVHFRQGV'HIDXOWPLOOLVHFRQGV
5RJXH$3$XWKHQWLFDWH±(QDEOHVRUGLVDEOHV5$',86DXWKHQWLFDWLRQ(QDEOLQJ
5$',86$XWKHQWLFDWLRQDOORZVWKHDFFHVVSRLQWWRGLVFRYHUURJXHDFFHVVSRLQWV
:LWK5$',86DXWKHQWLFDWLRQHQDEOHGWKHDFFHVVSRLQWFKHFNVWKH0$&DGGUHVV
%DVLF6HUYLFH6HW,GHQWLILHU%66,'RIHDFKDFFHVVSRLQWWKDWLWILQGVDJDLQVWD
5$',86VHUYHUWRGHWHUPLQHZKHWKHUWKHDFFHVVSRLQWLVDOORZHG:LWK5$',86
DXWKHQWLFDWLRQGLVDEOHGWKHDFFHVVSRLQWFDQGHWHFWLWVQHLJKERULQJDFFHVVSRLQWV
RQO\LWFDQQRWLGHQWLI\ZKHWKHUWKHDFFHVVSRLQWVDUHDOORZHGRUDUHURJXHV,I\RX
HQDEOH5$',86DXWKHQWLFDWLRQ\RXPXVWFRQILJXUHD5$',86VHUYHUIRUWKLV
DFFHVVSRLQWVHH³5$',86´RQSDJH
6FDQ$31RZ±6WDUWVDQLPPHGLDWHURJXH$3VFDQRQWKHUDGLRLQWHUIDFH
'HIDXOW'LVDEOH
1RWH :KLOHWKHDFFHVVSRLQWVFDQVDFKDQQHOIRUURJXH$3VZLUHOHVVFOLHQWVZLOOQRWEH
DEOHWRFRQQHFWWRWKHDFFHVVSRLQW7KHUHIRUHDYRLGIUHTXHQWVFDQQLQJRUVFDQV
RIDORQJGXUDWLRQXQOHVVWKHUHLVDUHDVRQWREHOLHYHWKDWPRUHLQWHQVLYHVFDQQLQJ
LVUHTXLUHGWRILQGDURJXH$3
&/,&RPPDQGVIRU5RJXH$3'HWHFWLRQ±)URPWKHJOREDOFRQILJXUDWLRQPRGH
HQWHUWKHLQWHUIDFHZLUHOHVVFRPPDQGWRDFFHVVWKHDRUJUDGLR
LQWHUIDFH)URPWKHZLUHOHVVLQWHUIDFHPRGHXVHWKHURJXHDSHQDEOHFRPPDQGWR
HQDEOHURJXH$3GHWHFWLRQ6HWWKHGXUDWLRQDQGLQWHUYDOWLPHVZLWKWKHURJXHDS
GXUDWLRQDQGURJXHDSLQWHUYDOFRPPDQGV,IUHTXLUHGVWDUWDQLPPHGLDWHVFDQ
XVLQJWKHURJXHDSVFDQFRPPDQG7RYLHZWKHGDWDEDVHRIGHWHFWHGDFFHVV
SRLQWVXVHWKHVKRZURJXHDSFRPPDQGIURPWKH([HFOHYHO
Enterprise AP(config)#interface wireless g 7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#rogue-ap enable 7-115
configure either syslog or trap or both to receive the rogue APs detected.
Enterprise AP(if-wireless g)#rogue-ap duration 200 7-117
Enterprise AP(if-wireless g)#rogue-ap interval 120 7-117
Enterprise AP(if-wireless g)#rogue-ap scan 7-118
Enterprise AP(if-wireless g)#rogueApDetect Completed (Radio G) : 5 APs
detected
rogueAPDetect (Radio G): refreshing ap database now
Enterprise AP(if-wireless g)#exit
Enterprise AP#show rogue-ap 7-119
802.11a Channel : Rogue AP Status
AP Address(BSSID) SSID Channel(MHz) RSSI
=======================================================
802.11g Channel : Rogue AP Status
AP Address(BSSID) SSID Channel(MHz) RSSI
=======================================================
00-04-e2-2a-37-23 WLAN1AP 11(2462 MHz) 17
00-04-e2-2a-37-3d ANY 7(2442 MHz) 42
00-04-e2-2a-37-49 WLAN1AP 9(2452 MHz) 42
00-90-d1-08-9d-a7 WLAN1AP 1(2412 MHz) 12
00-30-f1-fb-31-f4 WLAN 6(2437 MHz) 16
Enterprise AP#
&RQILJXULQJ&RPPRQ5DGLR6HWWLQJV
7RFRQILJXUHFRPPRQUDGLRVHWWLQJVVHOHFWWKH5DGLR6HWWLQJVSDJHDQGVFUROOGRZQ
WREHORZWKH9$3UDGLRVHWWLQJV
7XUER0RGH±7KHQRUPDODZLUHOHVVRSHUDWLRQPRGHSURYLGHVFRQQHFWLRQV
XSWR0ESV7XUER0RGHLVDQHQKDQFHGPRGHQRWUHJXODWHGLQ,(((D
WKDWSURYLGHVDKLJKHUGDWDUDWHRIXSWR0ESV(QDEOLQJ7XUER0RGHDOORZVWKH
DFFHVVSRLQWWRSURYLGHFRQQHFWLRQVXSWR0ESV'HIDXOW'LVDEOHG
1RWH ,QQRUPDOPRGHWKHDFFHVVSRLQWSURYLGHVDFKDQQHOEDQGZLGWKRI0+]DQG
VXSSRUWVWKHPD[LPXPQXPEHURIFKDQQHOVSHUPLWWHGE\ORFDOUHJXODWLRQVHJ
FKDQQHOVIRUWKH8QLWHG6WDWHV,Q7XUER0RGHWKHFKDQQHOEDQGZLGWKLV
LQFUHDVHGWR0+]WRVXSSRUWWKHLQFUHDVHGGDWDUDWH+RZHYHUWKLVUHGXFHV
WKHQXPEHURIFKDQQHOVVXSSRUWHGHJFKDQQHOVIRUWKH8QLWHG6WDWHV
1RWH &KHFN\RXUFRXQWU\¶VUHJXODWLRQVWRVHHLI7XUER0RGHLVDOORZHG
5DGLR&KDQQHO±7KHUDGLRFKDQQHOWKDWWKHDFFHVVSRLQWXVHV
WRFRPPXQLFDWHZLWKZLUHOHVVFOLHQWV:KHQPXOWLSOHDFFHVV
SRLQWVDUHGHSOR\HGLQWKHVDPHDUHDVHWWKHFKDQQHORQ
QHLJKERULQJDFFHVVSRLQWVDWOHDVWIRXUFKDQQHOVDSDUWWRDYRLG
LQWHUIHUHQFHZLWKHDFKRWKHU)RUH[DPSOHLQWKH8QLWHG6WDWHV
\RXFDQGHSOR\XSWRIRXUDFFHVVSRLQWVLQWKHVDPHDUHDHJ
FKDQQHOV$OVRQRWHWKDWWKHFKDQQHOIRU
ZLUHOHVVFOLHQWVLVDXWRPDWLFDOO\VHWWRWKHVDPHDVWKDWXVHG
E\WKHDFFHVVSRLQWWRZKLFKLWLVOLQNHG'HIDXOW&KDQQHO
IRUQRUPDOPRGHDQGFKDQQHOIRU7XUERPRGH
$XWR&KDQQHO6HOHFW±(QDEOHVWKHDFFHVVSRLQWWR
DXWRPDWLFDOO\VHOHFWDQXQRFFXSLHGUDGLRFKDQQHO
'HIDXOW (QDEOHG
1RWH &KHFN\RXUFRXQWU\¶VUHJXODWLRQVWRVHHLI$XWR
&KDQQHO FDQEHGLVDEOHG
7UDQVPLW3RZHU±$GMXVWVWKHSRZHURIWKHUDGLRVLJQDOV
WUDQVPLWWHGIURPWKHDFFHVVSRLQW7KHKLJKHUWKHWUDQVPLVVLRQ
SRZHUWKHIDUWKHUWKHWUDQVPLVVLRQUDQJH3RZHUVHOHFWLRQLV
QRWMXVWDWUDGHRIIEHWZHHQFRYHUDJHDUHDDQGPD[LPXP
VXSSRUWHGFOLHQWV<RXDOVRKDYHWRHQVXUHWKDWKLJKSRZHUVLJQDOVGRQRWLQWHUIHUH
ZLWKWKHRSHUDWLRQRIRWKHUUDGLRGHYLFHVLQWKHVHUYLFHDUHD2SWLRQV
PLQLPXP'HIDXOW
1RWH :KHQRSHUDWLQJWKHDFFHVVSRLQWXVLQJ*+]FKDQQHOVLQD(XURSHDQ
&RPPXQLW\FRXQWU\WKHHQGXVHUDQGLQVWDOOHUDUHREOLJDWHGWRRSHUDWHWKHGHYLFH
LQDFFRUGDQFHZLWK(XURSHDQUHJXODWRU\UHTXLUHPHQWVIRU7UDQVPLW3RZHU&RQWURO
73&
0D[LPXP6XSSRUWHG5DWH±7KHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVVSRLQW
WUDQVPLWVXQLFDVWSDFNHWVRQWKHZLUHOHVVLQWHUIDFH7KHPD[LPXPWUDQVPLVVLRQ
GLVWDQFHLVDIIHFWHGE\WKHGDWDUDWH7KHORZHUWKHGDWDUDWHWKHORQJHUWKH
WUDQVPLVVLRQGLVWDQFH2SWLRQV0ESV'HIDXOW0ESV
0D[LPXP$VVRFLDWHG&OLHQWV±6HWVWKHPD[LPXPQXPEHURIFOLHQWVWKDWFDQEH
DVVRFLDWHGZLWKD9$3LQWHUIDFHDWWKHVDPHWLPH5DQJHSHU9$3LQWHUIDFH
'HIDXOW
$QWHQQD,'±6HOHFWVWKHDQWHQQDWREHXVHGE\WKHDFFHVVSRLQWHLWKHUWKH
LQWHJUDWHGGLYHUVLW\DQWHQQDVWKH'HIDXOW$QWHQQDRUDQRSWLRQDOH[WHUQDO
DQWHQQD7KHRSWLRQDOH[WHUQDODQWHQQDVLIDQ\WKDWDUHFHUWLILHGIRUXVHZLWKWKH
DFFHVVSRLQWDUHOLVWHGLQWKHGURSGRZQPHQX6HOHFWLQJWKHFRUUHFWDQWHQQD,'
HQVXUHVWKDWWKHDFFHVVSRLQWVUDGLRWUDQVPLVVLRQVDUHZLWKLQUHJXODWRU\SRZHU
OLPLWVIRUWKHFRXQWU\RIRSHUDWLRQ'HIDXOW'HIDXOW$QWHQQD
1RWH 7KH$QWHQQD,'PXVWEHVHOHFWHGLQFRQMXQFWLRQZLWKWKH$QWHQQD&RQWURO0HWKRG
WRFRQILJXUHSURSHUXVHRIDQ\RIWKHDQWHQQDRSWLRQV
Normal Mode
Turbo Mode
$QWHQQD&RQWURO0HWKRG6HOHFWVWKHXVHRIERWKIL[HGDQWHQQDVRSHUDWLQJLQ
GLYHUVLW\PRGHRUDVLQJOHDQWHQQD'HIDXOW'LYHUVLW\
'LYHUVLW\7KHUDGLRXVHVERWKDQWHQQDVLQDGLYHUVLW\V\VWHP6HOHFWWKLVPHWKRG
ZKHQWKH$QWHQQD,'LVVHWWR'HIDXOW$QWHQQDWRXVHWKHDFFHVVSRLQWV
LQWHJUDWHGDQWHQQDV
5LJKW7KHUDGLRRQO\XVHVWKHDQWHQQDRQWKHULJKWVLGHWKHVLGHFORVHVWWRWKH
DFFHVVSRLQW/('V6HOHFWWKLVPHWKRGZKHQXVLQJDQRSWLRQDOH[WHUQDODQWHQQD
WKDWLVFRQQHFWHGWRWKHULJKWDQWHQQDFRQQHFWRU
/HIW7KHUDGLRRQO\XVHVWKHDQWHQQDRQWKHOHIWVLGHWKHVLGHIDUWKHVWIURPWKH
DFFHVVSRLQW/('V6HOHFWWKLVPHWKRGZKHQXVLQJDQRSWLRQDOH[WHUQDODQWHQQD
WKDWLVFRQQHFWHGWRWKHOHIWDQWHQQDFRQQHFWRU
$QWHQQD/RFDWLRQ±6HOHFWVWKHPRXQWLQJORFDWLRQRIWKHDQWHQQDLQXVHHLWKHU
³,QGRRU´RU³2XWGRRU´6HOHFWLQJWKHFRUUHFWORFDWLRQHQVXUHVWKDWWKHDFFHVVSRLQW
RQO\XVHVUDGLRFKDQQHOVWKDWDUHSHUPLWWHGLQWKHFRXQWU\RIRSHUDWLRQ
'HIDXOW ,QGRRU
0,&0RGH±7KH0LFKDHO,QWHJULW\&KHFN0,&LVSDUWRIWKH7HPSRUDO.H\,QWHJULW\
3URWRFRO7.,3HQFU\SWLRQXVHGLQ:L)L3URWHFWHG$FFHVV:3$VHFXULW\7KH0,&
FDOFXODWLRQLVSHUIRUPHGLQWKHDFFHVVSRLQWIRUHDFKWUDQVPLWWHGSDFNHWDQGWKLVFDQ
LPSDFWWKURXJKSXWDQGSHUIRUPDQFH7KHDFFHVVSRLQWVXSSRUWVDFKRLFHRIVRIWZDUH
RUKDUGZDUH0,&FDOFXODWLRQ7KHSHUIRUPDQFHRIWKHDFFHVVSRLQWFDQEHLPSURYHG
E\VHOHFWLQJWKHEHVWPHWKRGIRUWKHVSHFLILFGHSOR\PHQW'HIDXOW6RIWZDUH
+DUGZDUH3URYLGHVEHVWSHUIRUPDQFHZKHQWKHQXPEHURIVXSSRUWHGFOLHQWVLV
OHVVWKDQ
6RIWZDUH3URYLGHVWKHEHVWSHUIRUPDQFHIRUDODUJHQXPEHURIFOLHQWVRQRQHUDGLR
LQWHUIDFH7KURXJKSXWPD\EHUHGXFHGZKHQERWKDDQGJLQWHUIDFHV
DUHVXSSRUWLQJDKLJKQXPEHURIFOLHQWVVLPXOWDQHRXVO\
6XSHU$±7KH$WKHURVSURSULHWDU\6XSHU$SHUIRUPDQFHHQKDQFHPHQWVDUH
VXSSRUWHGE\WKHDFFHVVSRLQW7KHVHHQKDQFHPHQWVLQFOXGHEXUVWLQJFRPSUHVVLRQ
DQGIDVWIUDPHV0D[LPXPWKURXJKSXWUDQJHVEHWZHHQWR0ESVIRU
FRQQHFWLRQVWR$WKHURVFRPSDWLEOHFOLHQWV'HIDXOW 'LVDEOHG
%HDFRQ,QWHUYDO±7KHUDWHDWZKLFKEHDFRQVLJQDOVDUHWUDQVPLWWHGIURPWKHDFFHVV
SRLQW7KHEHDFRQVLJQDOVDOORZZLUHOHVVFOLHQWVWRPDLQWDLQFRQWDFWZLWKWKHDFFHVV
SRLQW7KH\PD\DOVRFDUU\SRZHUPDQDJHPHQWLQIRUPDWLRQ
5DQJH78V'HIDXOW78V
'DWD%HDFRQ5DWH±7KHUDWHDWZKLFKVWDWLRQVLQVOHHSPRGHPXVWZDNHXSWR
UHFHLYHEURDGFDVWPXOWLFDVWWUDQVPLVVLRQV
.QRZQDOVRDVWKH'HOLYHU\7UDIILF,QGLFDWLRQ0DS'7,0LQWHUYDOLWLQGLFDWHVKRZ
RIWHQWKH0$&OD\HUIRUZDUGVEURDGFDVWPXOWLFDVWWUDIILFZKLFKLVQHFHVVDU\WRZDNH
XSVWDWLRQVWKDWDUHXVLQJ3RZHU6DYHPRGH7KHGHIDXOWYDOXHRILQGLFDWHVWKDW
WKHDFFHVVSRLQWZLOOVDYHDOOEURDGFDVWPXOWLFDVWIUDPHVIRUWKH%DVLF6HUYLFH6HW
%66DQGIRUZDUGWKHPDIWHUHYHU\VHFRQGEHDFRQ8VLQJVPDOOHU'7,0LQWHUYDOV
GHOLYHUVEURDGFDVWPXOWLFDVWIUDPHVLQDPRUHWLPHO\PDQQHUFDXVLQJVWDWLRQVLQ
3RZHU6DYHPRGHWRZDNHXSPRUHRIWHQDQGGUDLQSRZHUIDVWHU8VLQJKLJKHU'7,0
YDOXHVUHGXFHVWKHSRZHUXVHGE\VWDWLRQVLQ3RZHU6DYHPRGHEXWGHOD\VWKH
WUDQVPLVVLRQRIEURDGFDVWPXOWLFDVWIUDPHV
5DQJHEHDFRQV'HIDXOWEHDFRQ
0XOWLFDVW'DWD5DWH±7KHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVVSRLQWWUDQVPLWV
PXOWLFDVWDQGEURDGFDVWSDFNHWVRQWKHZLUHOHVVLQWHUIDFH2SWLRQV
0ESV'HIDXOW0ESV
)UDJPHQWDWLRQ/HQJWK±&RQILJXUHVWKHPLQLPXPSDFNHWVL]HWKDWFDQEH
IUDJPHQWHGZKHQSDVVLQJWKURXJKWKHDFFHVVSRLQW)UDJPHQWDWLRQRIWKH3'8V
3DFNDJH'DWD8QLWFDQLQFUHDVHWKHUHOLDELOLW\RIWUDQVPLVVLRQVEHFDXVHLW
LQFUHDVHVWKHSUREDELOLW\RIDVXFFHVVIXOWUDQVPLVVLRQGXHWRVPDOOHUIUDPHVL]H,I
WKHUHLVVLJQLILFDQWLQWHUIHUHQFHSUHVHQWRUFROOLVLRQVGXHWRKLJKQHWZRUNXWLOL]DWLRQ
WU\VHWWLQJWKHIUDJPHQWVL]HWRVHQGVPDOOHUIUDJPHQWV7KLVZLOOVSHHGXSWKH
UHWUDQVPLVVLRQRIVPDOOHUIUDPHV+RZHYHULWLVPRUHHIILFLHQWWRVHWWKHIUDJPHQW
VL]HODUJHULIYHU\OLWWOHRUQRLQWHUIHUHQFHLVSUHVHQWEHFDXVHLWUHTXLUHVRYHUKHDGWR
VHQGPXOWLSOHIUDPHV5DQJH E\WHV'HIDXOWE\WHV
5767KUHVKROG±6HWVWKHSDFNHWVL]HWKUHVKROGDWZKLFKD5HTXHVWWR6HQG576
VLJQDOPXVWEHVHQWWRDUHFHLYLQJVWDWLRQSULRUWRWKHVHQGLQJVWDWLRQVWDUWLQJ
FRPPXQLFDWLRQV7KHDFFHVVSRLQWVHQGV576IUDPHVWRDUHFHLYLQJVWDWLRQWR
QHJRWLDWHWKHVHQGLQJRIDGDWDIUDPH$IWHUUHFHLYLQJDQ576IUDPHWKHVWDWLRQ
VHQGVD&76FOHDUWRVHQGIUDPHWRQRWLI\WKHVHQGLQJVWDWLRQWKDWLWFDQVWDUW
VHQGLQJGDWD
,IWKH576WKUHVKROGLVVHWWRWKHDFFHVVSRLQWDOZD\VVHQGV576VLJQDOV,IVHWWR
WKHDFFHVVSRLQWQHYHUVHQGV576VLJQDOV,IVHWWRDQ\RWKHUYDOXHDQGWKH
SDFNHWVL]HHTXDOVRUH[FHHGVWKH576WKUHVKROGWKH576&765HTXHVWWR6HQG
&OHDUWR6HQGPHFKDQLVPZLOOEHHQDEOHG
7KHDFFHVVSRLQWVFRQWHQGLQJIRUWKHPHGLXPPD\QRWEHDZDUHRIHDFKRWKHU7KH
576&76PHFKDQLVPFDQVROYHWKLV³+LGGHQ1RGH3UREOHP´5DQJHE\WHV
'HIDXOWE\WHV
&/,&RPPDQGVIRUWKH&RPPRQ5DGLR6HWWLQJV±)URPWKHJOREDOFRQILJXUDWLRQ
PRGHHQWHUWKHLQWHUIDFHZLUHOHVVDFRPPDQGWRDFFHVVWKHDUDGLR
LQWHUIDFH)URPWKHDLQWHUIDFHPRGH\RXFDQDFFHVVUDGLRVHWWLQJVWKDWDSSO\
WRDOO9$3LQWHUIDFHV8VHWKHWXUERFRPPDQGWRHQDEOHWKLVIHDWXUHEHIRUHVHWWLQJ
WKHUDGLRFKDQQHOZLWKWKHFKDQQHOFRPPDQG6HWDQ\RWKHUUDGLRVHWWLQJDV
UHTXLUHGEHIRUHHQDEOLQJWKH9$3LQWHUIDFHZLWKWKHQRVKXWGRZQFRPPDQG7R
YLHZWKHFXUUHQWDUDGLRVHWWLQJVIRUWKH9$3LQWHUIDFHXVHWKHVKRZ
LQWHUIDFHZLUHOHVVD>a@FRPPDQGDVVKRZQRQ
&RQILJXULQJ:L)L0XOWLPHGLD
:LUHOHVVQHWZRUNVRIIHUDQHTXDORSSRUWXQLW\IRUDOOGHYLFHVWRWUDQVPLWGDWDIURP
DQ\W\SHRIDSSOLFDWLRQ$OWKRXJKWKLVLVDFFHSWDEOHIRUPRVWDSSOLFDWLRQVPXOWLPHGLD
DSSOLFDWLRQVZLWKDXGLRDQGYLGHRDUHSDUWLFXODUO\VHQVLWLYHWRWKHGHOD\DQG
WKURXJKSXWYDULDWLRQVWKDWUHVXOWIURPWKLV³HTXDORSSRUWXQLW\´ZLUHOHVVDFFHVV
PHWKRG)RUPXOWLPHGLDDSSOLFDWLRQVWRUXQZHOORYHUDZLUHOHVVQHWZRUND4XDOLW\RI
6HUYLFH4R6PHFKDQLVPLVUHTXLUHGWRSULRULWL]HWUDIILFW\SHVDQGSURYLGHDQ
³HQKDQFHGRSSRUWXQLW\´ZLUHOHVVDFFHVVPHWKRG
7KHDFFHVVSRLQWLPSOHPHQWV4R6XVLQJWKH:L)L0XOWLPHGLD:00VWDQGDUG
8VLQJ:00WKHDFFHVVSRLQWLVDEOHWRSULRULWL]HWUDIILFDQGRSWLPL]HSHUIRUPDQFH
ZKHQPXOWLSOHDSSOLFDWLRQVFRPSHWHIRUZLUHOHVVQHWZRUNEDQGZLGWKDWWKHVDPH
WLPH:00HPSOR\VWHFKQLTXHVWKDWDUHDVXEVHWRIWKHGHYHORSLQJ,(((H
4R6VWDQGDUGDQGLWHQDEOHVWKHDFFHVVSRLQWWRLQWHURSHUDWHZLWKERWK:00
HQDEOHGFOLHQWVDQGRWKHUGHYLFHVWKDWPD\ODFNDQ\:00IXQFWLRQDOLW\
$FFHVV&DWHJRULHV²:00GHILQHVIRXUDFFHVVFDWHJRULHV$&VYRLFHYLGHR
EHVWHIIRUWDQGEDFNJURXQG7KHVHFDWHJRULHVFRUUHVSRQGWRWUDIILFSULRULW\OHYHOV
DQGDUHPDSSHGWR,((('SULRULW\WDJVVHH7DEOH 7KHGLUHFWPDSSLQJRI
WKHIRXU$&VWR'SULRULWLHVLVVSHFLILFDOO\LQWHQGHGWRIDFLOLWDWHLQWHURSHUDELOLW\
ZLWKRWKHUZLUHGQHWZRUN4R6SROLFLHV:KLOHWKHIRXU$&VDUHVSHFLILHGIRUVSHFLILF
Enterprise AP(config)#interface wireless a 7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless a)#turbo 7-98
Enterprise AP(if-wireless a)#channel 42 7-100
Enterprise AP(if-wireless a)#transmit-power full 7-100
Enterprise AP(if-wireless a)#speed 9 7-98
Enterprise AP(if-wireless a)#antenna id 0000 7-103
Enterprise AP(if-wireless a)#antenna control right 7-102
Enterprise AP(if-wireless a)#antenna location indoor 7-104
Enterprise AP(if-wireless a)#mic_mode hardware 7-126
Enterprise AP(if-wireless a)#super-a 7-107
Enterprise AP(if-wireless a)#beacon-interval 150 7-104
Enterprise AP(if-wireless a)#beacon-interval 150 7-104
Enterprise AP(if-wireless a)#dtim-period 5 7-105
Enterprise AP(if-wireless a)#multicast-data-rate 6 7-99
Enterprise AP(if-wireless a)#fragmentation-length 512 7-106
Enterprise AP(if-wireless a)#rts-threshold 256 7-106
Enterprise AP(if-wireless a)#
W\SHVRIWUDIILF:00DOORZVWKHSULRULW\OHYHOVWREHFRQILJXUHGWRPDWFKDQ\
QHWZRUNZLGH4R6SROLF\:00DOVRVSHFLILHVDSURWRFROWKDWDFFHVVSRLQWVFDQXVH
WRFRPPXQLFDWHWKHFRQILJXUHGWUDIILFSULRULW\OHYHOVWR4R6HQDEOHGZLUHOHVVFOLHQWV
:002SHUDWLRQ²:00XVHVWUDIILFSULRULW\EDVHGRQWKHIRXU$&V9RLFH9LGHR
%HVW(IIRUWDQG%DFNJURXQG7KHKLJKHUWKH$&SULRULW\WKHKLJKHUWKHSUREDELOLW\
WKDWGDWDLVWUDQVPLWWHG
:KHQWKHDFFHVVSRLQWIRUZDUGVWUDIILF:00DGGVGDWDSDFNHWVWRIRXULQGHSHQGHQW
WUDQVPLWTXHXHVRQHIRUHDFK$&GHSHQGLQJRQWKH'SULRULW\WDJRIWKH
SDFNHW'DWDSDFNHWVZLWKRXWDSULRULW\WDJDUHDOZD\VDGGHGWRWKH%HVW(IIRUW$&
TXHXH)URPWKHIRXUTXHXHVDQLQWHUQDO³YLUWXDO´FROOLVLRQUHVROXWLRQPHFKDQLVP
ILUVWVHOHFWVGDWDZLWKWKHKLJKHVWSULRULW\WREHJUDQWHGDWUDQVPLWRSSRUWXQLW\7KHQ
WKHVDPHFROOLVLRQUHVROXWLRQPHFKDQLVPLVXVHGH[WHUQDOO\WRGHWHUPLQHZKLFK
GHYLFHKDVDFFHVVWRWKHZLUHOHVVPHGLXP
)RUHDFK$&TXHXHWKHFROOLVLRQUHVROXWLRQPHFKDQLVPLVGHSHQGHQWRQWZRWLPLQJ
SDUDPHWHUV
$,)61$UELWUDWLRQ,QWHU)UDPH6SDFH1XPEHUDQXPEHUXVHGWRFDOFXODWHWKH
PLQLPXPWLPHEHWZHHQGDWDIUDPHV
&:&RQWHQWLRQ:LQGRZDQXPEHUXVHGWRFDOFXODWHDUDQGRPEDFNRIIWLPH
$IWHUDFROOLVLRQGHWHFWLRQDEDFNRIIZDLWWLPHLVFDOFXODWHG7KHWRWDOZDLWWLPHLVWKH
VXPRIDPLQLPXPZDLWWLPH$UELWUDWLRQ,QWHU)UDPH6SDFHRU$,)6GHWHUPLQHG
IURPWKH$,)61DQGDUDQGRPEDFNRIIWLPHFDOFXODWHGIURPDYDOXHVHOHFWHGIURP
]HURWRWKH&:7KH&:YDOXHYDULHVZLWKLQDFRQILJXUDEOHUDQJH,WVWDUWVDW&:0LQ
DQGGRXEOHVDIWHUHYHU\FROOLVLRQXSWRDPD[LPXPYDOXH&:0D[$IWHUD
VXFFHVVIXOWUDQVPLVVLRQWKH&:YDOXHLVUHVHWWRLWV&:0LQYDOXH
7DEOH :00$FFHVV&DWHJRULHV
$FFHVV&DWHJRU\ :00'HVLJQDWLRQ 'HVFULSWLRQ '7DJV
)LJXUH :00%DFNRII:DLW7LPHV
)RUKLJKSULRULW\WUDIILFWKH$,)61DQG&:YDOXHVDUHVPDOOHU7KHVPDOOHUYDOXHV
HTXDWHWROHVVEDFNRIIDQGZDLWWLPHDQGWKHUHIRUHPRUHWUDQVPLWRSSRUWXQLWLHV
7RFRQILJXUH:00VHOHFWWKH5DGLR6HWWLQJVSDJHDQGVFUROOGRZQWRWKH:00
FRQILJXUDWLRQVHWWLQJV
AIFS Random Backoff
AIFS Random Backoff
CWMin CWMax
CWMin
C
Ti
m
r
iority
r
iority
Minimum Wait Time Random Wait Time
Minimum Wait Time Random Wait Time
:00±6HWVWKH:00RSHUDWLRQDOPRGHRQWKHDFFHVVSRLQW:KHQHQDEOHGWKH
SDUDPHWHUVIRUHDFK$&TXHXHZLOOEHHPSOR\HGRQWKHDFFHVVSRLQWDQG4R6
FDSDELOLWLHVDUHDGYHUWLVHGWR:00HQDEOHGFOLHQWV'HIDXOW6XSSRUW
'LVDEOH:00LVGLVDEOHG
6XSSRUW:00ZLOOEHXVHGIRUDQ\DVVRFLDWHGGHYLFHWKDWVXSSRUWVWKLVIHDWXUH
'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHPD\VWLOODVVRFLDWHZLWKWKHDFFHVVSRLQW
5HTXLUHG:00PXVWEHVXSSRUWHGRQDQ\GHYLFHWU\LQJWRDVVRFLDWHGZLWKWKH
DFFHVVSRLQW'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHZLOOQRWEHDOORZHGWR
DVVRFLDWHZLWKWKHDFFHVVSRLQW
:00$FNQRZOHGJH3ROLF\±%\GHIDXOWDOOZLUHOHVVGDWDWUDQVPLVVLRQVUHTXLUHWKH
VHQGHUWRZDLWIRUDQDFNQRZOHGJHPHQWIURPWKHUHFHLYHU:00DOORZVWKH
DFNQRZOHGJHPHQWZDLWWLPHWREHWXUQHGRIIIRUHDFK$FFHVV&DWHJRU\$&
$OWKRXJKWKLVLQFUHDVHVGDWDWKURXJKSXWLWFDQDOVRUHVXOWLQDKLJKQXPEHURIHUURUV
ZKHQWUDIILFOHYHOVDUHKHDY\'HIDXOW$FNQRZOHGJH
:00%663DUDPHWHUV±7KHVHSDUDPHWHUVDSSO\WRWKHZLUHOHVVFOLHQWV
:00$33DUDPHWHUV±7KHVHSDUDPHWHUVDSSO\WRWKHDFFHVVSRLQW
ORJ&:0LQ0LQLPXP&RQWHQWLRQ:LQGRZ±7KHLQLWLDOXSSHUOLPLWRIWKHUDQGRP
EDFNRIIZDLWWLPHEHIRUHZLUHOHVVPHGLXPDFFHVVFDQEHDWWHPSWHG7KHLQLWLDOZDLW
WLPHLVDUDQGRPYDOXHEHWZHHQ]HURDQGWKH&:0LQYDOXH6SHFLI\WKH&:0LQ
YDOXHLQWKHUDQJHPLFURVHFRQGV1RWHWKDWWKH&:0LQYDOXHPXVWEHHTXDO
RUOHVVWKDQWKH&:0D[YDOXH
ORJ&:0D[0D[LPXP&RQWHQWLRQ:LQGRZ±7KHPD[LPXPXSSHUOLPLWRIWKH
UDQGRPEDFNRIIZDLWWLPHEHIRUHZLUHOHVVPHGLXPDFFHVVFDQEHDWWHPSWHG7KH
FRQWHQWLRQZLQGRZLVGRXEOHGDIWHUHDFKGHWHFWHGFROOLVLRQXSWRWKH&:0D[YDOXH
6SHFLI\WKH&:0D[YDOXHLQWKHUDQJHPLFURVHFRQGV1RWHWKDWWKH&:0D[
YDOXHPXVWEHJUHDWHURUHTXDOWRWKH&:0LQYDOXH
$,)6$UELWUDWLRQ,QWHU)UDPH6SDFH±7KHPLQLPXPDPRXQWRIZDLWWLPHEHIRUH
WKHQH[WGDWDWUDQVPLVVLRQDWWHPSW6SHFLI\WKH$,)6YDOXHLQWKHUDQJH
PLFURVHFRQGV
7;23/LPLW7UDQVPLW2SSRUWXQLW\/LPLW±7KHPD[LPXPWLPHDQ$&WUDQVPLW
TXHXHKDVDFFHVVWRWKHZLUHOHVVPHGLXP:KHQDQ$&TXHXHLVJUDQWHGD
WUDQVPLWRSSRUWXQLW\LWFDQWUDQVPLWGDWDIRUDWLPHXSWRWKH7[2S/LPLW7KLVGDWD
EXUVWLQJJUHDWO\LPSURYHVWKHHIILFLHQF\IRUKLJKGDWDUDWHWUDIILF6SHFLI\DYDOXHLQ
WKHUDQJHPLFURVHFRQGV
$GPLVVLRQ&RQWURO±7KHDGPLVVLRQFRQWUROPRGHIRUWKHDFFHVVFDWHJRU\:KHQ
HQDEOHGFOLHQWVDUHEORFNHGIURPXVLQJWKHDFFHVVFDWHJRU\'HIDXOW'LVDEOHG
.H\7\SH±6HH³:LUHG(TXLYDOHQW3ULYDF\:(3´RQSDJH
&/,&RPPDQGVIRU:00±(QWHULQWHUIDFHZLUHOHVVPRGHDQGW\SHZPPUHTXLUHG
IRUFOLHQWVWKDWZDQWWRDVVRFLDWHZLWKWKHDFFHVVSRLQW7KH
ZPPDFNQRZOHGJHSROLF\FRPPDQGLVXVHGWRHQDEOHRUGLVDEOHDSROLF\IRUHDFK
DFFHVVFDWHJRU\7KHZPPSDUPVFRPPDQGGHILQHVGHWDLOHG:00SDUDPHWHUV
Enterprise AP(if-wireless a)#wmm required
7-137
Enterprise AP(if-wireless a)#wmm-acknowledge-policy 0 noack
7-137
Enterprise AP(if-wireless a)#wmmparams ap 0 4 6 3 1 1
7-138
7RYLHZWKHFXUUHQWDUDGLRVHWWLQJVIRUWKH9$3LQWHUIDFHXVHWKHVKRZ
LQWHUIDFHZLUHOHVVD>@FRPPDQG
Enterprise AP#show interface wireless a 0 7-112
Wireless Interface Information
=============================================================
--------------------Identification---------------------------
Description : Enterprise 802.11a Access Point
SSID : VAP_TEST_11A 0
Turbo Mode : DISABLED
Channel : 36 (AUTO)
Status : DISABLED
MAC Address : 00:12:cf:05:95:0c
----------------802.11 Parameters---------------------------
Transmit Power : FULL (16 dBm)
Max Station Data Rate : 54Mbps
Multicast Data Rate : 6Mbps
Fragmentation Threshold : 2346 bytes
RTS Threshold : 2347 bytes
Beacon Interval : 100 TUs
Authentication Timeout Interval : 60 Mins
Association Timeout Interval : 30 Mins
DTIM Interval : 1 beacon
Maximum Association : 64 stations
MIC Mode : Software
Super A : Disabled
VLAN ID : 1
----------------Security-------------------------------------
Closed System : Disabled
Multicast cipher : WEP
WPA clients : TKIP and AES
WPA Key Mgmt Mode : PRE SHARED KEY
WPA PSK Key Type : PASSPHRASE
Encryption : DISABLED
Default Transmit Key : 1
Common Static Keys : Key 1: EMPTY Key 2: EMPTY
Key 3: EMPTY Key 4: EMPTY
Authentication Type : OPEN
----------------802.1x---------------------------------------
802.1x :
Broadcast Key Refresh Rate : 30 min
Session Key Refresh Rate : 30 min
802.1x Session Timeout Value : 0 min
----------------Antenna--------------------------------------
Antenna Control method : Diversity
Antenna ID : 0x0000(Default Antenna)
Antenna Location : Indoor
5DGLR6HWWLQJV*J
7KH,(((JVWDQGDUGRSHUDWHVZLWKLQWKH*+]EDQGDWXSWR0ESV
$OVRQRWHWKDWEHFDXVHWKH,(((JVWDQGDUGLVDQH[WHQVLRQRIWKH,(((
EVWDQGDUGLWDOORZVFOLHQWVZLWKEZLUHOHVVQHWZRUNFDUGVWRDVVRFLDWH
WRDQJDFFHVVSRLQW
)LUVWFRQILJXUHWKHUDGLRVHWWLQJVWKDWDSSO\WRWKHLQGLYLGXDO9$3V9LUWXDO$FFHVV
3RLQWDQGWKHFRPPRQUDGLRVHWWLQJVWKDWDSSO\WRDOORIWKHJLQWHUIDFHV$IWHU
\RXKDYHFRQILJXUHGWKHUDGLRVHWWLQJVJRWRWKH6HFXULW\SDJHXQGHUWKHJ
,QWHUIDFHVHH³6HFXULW\´RQSDJH HQDEOHWKHUDGLRVHUYLFHIRUDQ\RIWKH9$3
LQWHUIDFHVDQGWKHQVHWDQ66,'WRLGHQWLI\WKHZLUHOHVVQHWZRUNVHUYLFHSURYLGHGE\
HDFK9$35HPHPEHUWKDWRQO\FOLHQWVZLWKWKHVDPH66,'FDQDVVRFLDWHZLWKD
9$3
1RWH <RXPXVWILUVWHQDEOH9$3LQWHUIDFHEHIRUHWKHRWKHULQWHUIDFHVFDQEHHQDEOHG
----------------Quality of Service---------------------------
WMM Mode : SUPPORTED
WMM Acknowledge Policy
AC0(Best Effort) : Ack
AC1(Background) : Acknowledge
AC2(Video) : Acknowledge
AC3(Voice) : Acknowledge
WMM BSS Parameters
AC0(Best Effort) : logCwMin: 4 logCwMax: 10 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video) : logCwMin: 3 logCwMax: 4 AIFSN: 2
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice) : logCwMin: 2 logCwMax: 3 AIFSN: 2
Admission Control: No
TXOP Limit: 1.504 ms
WMM AP Parameters
AC0(Best Effort) : logCwMin: 4 logCwMax: 6 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video) : logCwMin: 3 logCwMax: 4 AIFSN: 1
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice) : logCwMin: 2 logCwMax: 3 AIFSN: 1
Admission Control: No
TXOP Limit: 1.504 ms
=============================================================
Enterprise AP#
0RVWRIWKHJFRPPDQGVDUHLGHQWLFDOWRWKRVHXVHGE\WKHDLQWHUIDFH
)RULQIRUPDWLRQRQWKHWKHVHFRPPDQGVUHIHUWRWKHIROORZLQJVHFWLRQV
³&RQILJXULQJ9$35DGLR6HWWLQJV´RQSDJH
³&RQILJXULQJ5RJXH$3'HWHFWLRQ´RQSDJH
³&RQILJXULQJ&RPPRQ5DGLR6HWWLQJV´RQSDJH
³&RQILJXULQJ:L)L0XOWLPHGLD´RQSDJH
2QO\WKHUDGLRVHWWLQJVVSHFLILFWRWKHJLQWHUIDFHDUHLQFOXGHGLQWKLVVHFWLRQ
7RFRQILJXUHWKHJUDGLRVHWWLQJVVHOHFWWKH5DGLR6HWWLQJVSDJH
5DGLR0RGH±6HOHFWVWKHRSHUDWLQJPRGHIRUWKHJZLUHOHVVLQWHUIDFH
'HIDXOWEJ
EJ%RWKEDQGJFOLHQWVFDQFRPPXQLFDWHZLWKWKHDFFHVV
SRLQWXSWR0ESV
ERQO\%RWKEDQGJFOLHQWVFDQFRPPXQLFDWHZLWKWKHDFFHVV
SRLQWEXWJFOLHQWVFDQRQO\WUDQVIHUGDWDDWEVWDQGDUGUDWHVXSWR
0ESV
JRQO\2QO\JFOLHQWVFDQFRPPXQLFDWHZLWKWKHDFFHVVSRLQWXSWR
0ESV
5DGLR&KDQQHO±7KHUDGLRFKDQQHOWKDWWKHDFFHVVSRLQWXVHVWRFRPPXQLFDWHZLWK
ZLUHOHVVFOLHQWV:KHQPXOWLSOHDFFHVVSRLQWVDUHGHSOR\HGLQWKHVDPHDUHDVHWWKH
FKDQQHORQQHLJKERULQJDFFHVVSRLQWVDWOHDVWILYHFKDQQHOVDSDUWWRDYRLG
LQWHUIHUHQFHZLWKHDFKRWKHU)RUH[DPSOHLQWKH8QLWHG6WDWHV\RXFDQGHSOR\XSWR
WKUHHDFFHVVSRLQWVLQWKHVDPHDUHDHJFKDQQHOV$OVRQRWHWKDWWKH
FKDQQHOIRUZLUHOHVVFOLHQWVLVDXWRPDWLFDOO\VHWWRWKHVDPHDVWKDWXVHGE\WKH
DFFHVVSRLQWWRZKLFKLWLVOLQNHG5DQJH'HIDXOW
$XWR&KDQQHO6HOHFW±(QDEOHVWKHDFFHVVSRLQWWRDXWRPDWLFDOO\VHOHFWDQ
XQRFFXSLHGUDGLRFKDQQHO'HIDXOW(QDEOHG
0D[LPXP6WDWLRQ'DWD5DWH±7KHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVV
SRLQWWUDQVPLWVXQLFDVWSDFNHWVRQWKHZLUHOHVVLQWHUIDFH7KHPD[LPXP
WUDQVPLVVLRQGLVWDQFHLVDIIHFWHGE\WKHGDWDUDWH7KHORZHUWKHGDWDUDWH
WKHORQJHUWKHWUDQVPLVVLRQGLVWDQFH'HIDXOW0ESV
6XSHU*±7KH$WKHURVSURSULHWDU\6XSHU*SHUIRUPDQFHHQKDQFHPHQWV
DUH VXSSRUWHGE\WKHDFFHVVSRLQW7KHVHHQKDQFHPHQWVLQFOXGHEXUVWLQJ
FRPSUHVVLRQIDVWIUDPHVDQGG\QDPLFWXUER0D[LPXPWKURXJKSXWUDQJHV
EHWZHHQWR0ESVIRUFRQQHFWLRQVWR$WKHURVFRPSDWLEOHFOLHQWV
'HIDXOW 'LVDEOHG
3UHDPEOH±6HWVWKHOHQJWKRIWKHVLJQDOSUHDPEOHWKDWLVXVHGDWWKHVWDUWRI
DGDWDWUDQVPLVVLRQ'HIDXOW /RQJ
/RQJ6HWVWKHSUHDPEOHWRORQJPLFURVHFRQGV8VLQJDORQJSUHDPEOH
HQVXUHVWKHDFFHVVSRLQWFDQVXSSRUWDOOEDQGJFOLHQWV
6KRUWRU/RQJ6HWVWKHSUHDPEOHDFFRUGLQJWRWKHFDSDELOLW\RIFOLHQWVWKDWDUH
FXUUHQWO\DVVFRFLDWHG8VHVDVKRUWSUHDPEOHPLFURVHFRQGVLIDOODVVRFLDWHG
FOLHQWVFDQVXSSRUWLWRWKHUZLVHDORQJSUHDPEOHLVXVHG7KHDFFHVVSRLQWFDQ
LQFUHDVHGDWDWKURXJKSXWZKHQXVLQJDVKRUWSUHDPEOHEXWZLOORQO\XVHDVKRUW
SUHDPEOHLILWGHWHUPLQHVWKDWDOODVVRFLDWHGFOLHQWVVXSSRUWLW
&/,&RPPDQGVIRUWKHJ:LUHOHVV,QWHUIDFH±)URPWKHJOREDOFRQILJXUDWLRQ
PRGHHQWHUWKHLQWHUIDFHZLUHOHVVJFRPPDQGWRDFFHVVWKHJUDGLR
LQWHUIDFH7KHJUDGLRFDQEHIRUFHGWRDQJRQO\ERQO\RU
PL[HGEJRSHUDWLQJPRGHXVLQJWKHUDGLRPRGHFRPPDQG<RXVKRXOGVHW
WKHGHVLUHGRSHUDWLQJPRGHEHIRUHFRQILJXULQJFKDQQHOVHWWLQJVWKHGHIDXOWLVPL[HG
EJRSHUDWLRQ6HOHFWDUDGLRFKDQQHORUVHWVHOHFWLRQWR$XWRXVLQJWKH
FKDQQHOFRPPDQG6HWDQ\RWKHU UDGLRVHWWLQJVDVUHTXLUHGEHIRUHHQDEOLQJWKH
9$3LQWHUIDFHZLWKWKHQRVKXWGRZQFRPPDQG7RYLHZWKHFXUUHQWJUDGLR
VHWWLQJVIRUWKH9$3LQWHUIDFHXVHWKHVKRZLQWHUIDFHZLUHOHVVJ>a@FRPPDQG
DVVKRZQRQ
6HFXULW\
7KHDFFHVVSRLQWLVFRQILJXUHGE\GHIDXOWDVDQ³RSHQV\VWHP´ZKLFKEURDGFDVWVD
EHDFRQVLJQDOLQFOXGLQJWKHFRQILJXUHG66,':LUHOHVVFOLHQWVZLWKDQ66,'VHWWLQJ
RI³DQ\´FDQUHDGWKH66,'IURPWKHEHDFRQDQGDXWRPDWLFDOO\VHWWKHLU66,'WR
DOORZLPPHGLDWHFRQQHFWLRQWRWKHQHDUHVWDFFHVVSRLQW
7RLPSURYHZLUHOHVVQHWZRUNVHFXULW\\RXKDYHWRLPSOHPHQWWZRPDLQIXQFWLRQV
$XWKHQWLFDWLRQ,WPXVWEHYHULILHGWKDWFOLHQWVDWWHPSWLQJWRFRQQHFWWRWKHQHWZRUN
DUHDXWKRUL]HGXVHUV
7UDIILF(QFU\SWLRQ'DWDSDVVLQJEHWZHHQWKHDFFHVVSRLQWDQGFOLHQWVPXVWEH
SURWHFWHGIURPLQWHUFHSWLRQDQGHDYHVGURSSLQJ
)RUDPRUHVHFXUHQHWZRUNWKHDFFHVVSRLQWFDQLPSOHPHQWRQHRUDFRPELQDWLRQRI
WKHIROORZLQJVHFXULW\PHFKDQLVPV
:LUHG(TXLYDOHQW3ULYDF\:(3 SDJH
,(((; SDJH
:LUHOHVV0$&DGGUHVVILOWHULQJ SDJH
:L)L3URWHFWHG$FFHVV:3$RU:3$ SDJH
%RWK:(3DQG:3$VHFXULW\VHWWLQJVDUHFRQILJXUDEOHVHSDUDWHO\IRUHDFKYLUWXDO
DFFHVVSRLQW9$3LQWHUIDFH0$&DGGUHVVILOWHULQJDQG5$',86VHUYHUVHWWLQJV
DUHJOREDODQGDSSO\WRDOO9$3LQWHUIDFHV
7KHVHFXULW\PHFKDQLVPVWKDWPD\EHHPSOR\HGGHSHQGRQWKHOHYHORIVHFXULW\
UHTXLUHGWKHQHWZRUNDQGPDQDJHPHQWUHVRXUFHVDYDLODEOHDQGWKHVRIWZDUH
VXSSRUWSURYLGHGRQZLUHOHVVFOLHQWV
Enterprise AP(config)#interface wireless g 7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#radio-mode g 7-101
Enterprise AP(if-wireless g)#channel auto 7-100
Enterprise AP(if-wireless a)#transmit-power full 7-100
Enterprise AP(if-wireless a)#super-g 7-108
Enterprise AP(if-wireless g)#preamble short 7-102
Enterprise AP(if-wireless g)#
$VXPPDU\RIZLUHOHVVVHFXULW\FRQVLGHUDWLRQVLVOLVWHGLQWKHIROORZLQJWDEOH
1RWH <RXPXVWHQDEOHGDWDHQFU\SWLRQWKURXJKWKHZHERU&/,LQRUGHUWRHQDEOHDOO
W\SHVRIHQFU\SWLRQ:(37.,3RU$(6LQWKHDFFHVVSRLQW
7DEOH :LUHOHVV6HFXULW\&RQVLGHUDWLRQV
6HFXULW\
0HFKDQLVP
&OLHQW6XSSRUW ,PSOHPHQWDWLRQ&RQVLGHUDWLRQV
7KHDFFHVVSRLQWFDQVLPXOWDQHRXVO\VXSSRUWFOLHQWVXVLQJYDULRXVGLIIHUHQWVHFXULW\
PHFKDQLVPV7KHFRQILJXUDWLRQIRUWKHVHVHFXULW\FRPELQDWLRQVDUHRXWOLQHGLQWKH
IROORZLQJWDEOH1RWHWKDW0$&DGGUHVVDXWKHQWLFDWLRQFDQEHFRQILJXUHG
LQGHSHQGHQWO\WRZRUNZLWKDOOVHFXULW\PHFKDQLVPVDQGLVLQGLFDWHGVHSDUDWHO\LQ
WKHWDEOH5HTXLUHG5$',86VHUYHUVXSSRUWLVDOVROLVWHG
7DEOH 6HFXULW\&RPELQDWLRQV
&OLHQW6HFXULW\
&RPELQDWLRQ &RQILJXUDWLRQ6XPPDU\D0$&
$XWKHQWLFDWLRQE
5$',86
6HUYHU
7DEOH 6HFXULW\&RPELQDWLRQV
&OLHQW6HFXULW\
&RPELQDWLRQ &RQILJXUDWLRQ6XPPDU\D0$&
$XWKHQWLFDWLRQE
5$',86
6HUYHU
1RWH ,I\RXFKRRVHWRFRQILJXUH5$',860$&DXWKHQWLFDWLRQWRJHWKHUZLWK;WKH
5$',860$&DGGUHVVDXWKHQWLFDWLRQRFFXUVSULRUWR;DXWKHQWLFDWLRQ2QO\
ZKHQ5$',860$&DXWKHQWLFDWLRQVXFFHHGVLV;DXWKHQWLFDWLRQSHUIRUPHG
:KHQ5$',860$&DXWKHQWLFDWLRQIDLOV;DXWKHQWLFDWLRQLVQRWSHUIRUPHG
(QDEOLQJWKH9$3V
%HIRUHHQDEOLQJWKH9LUWXDO$FFHVV3RLQW9$3UDGLRLQWHUIDFHVILUVWFRQILJXUHDOORI
WKHUHOHYDQWUDLGRVHWWLQJVVHH³5DGLR6HWWLQJV$D´RQSDJHRU³5DGLR
6HWWLQJV*J´RQSDJH
$IWHU\RXKDYHFRQILJXUHGWKHUDGLRVHWWLQJVVHOHFW6HFXULW\XQGHU5DGLR$RU5DGLR
*VHWDQ66,'WRLGHQWLI\WKHZLUHOHVVQHWZRUNVHUYLFHSURYLGHGE\HDFK9$3\RX
ZDQWWRXVHDQGWKHQFOLFN$SSO\WRVDYH\RXUVHWWLQJV
%HIRUHHQDEOLQJWKHUDGLRVHUYLFHIRUDQ\9$3ILUVWFRQILJXUHWKH:(3:3$DQG
;VHFXULW\VHWWLQJVGHVFULEHGLQWKHIROORZLQJVHFWLRQV$IWHU\RXKDYHILQLVKHG
FRQILJXULQJWKHVHFXULW\VHWWLQJVUHWXUQWRWKHPDLQ6HFXULW\SDJHVKRZQEHORZVWDUW
WKHUHTXLUHG9$3LQWHUIDFHVE\FOLFNLQJWKH(QDEOHFKHFNER[DQGWKHQFOLFN$SSO\
D7KHFRQILJXUDWLRQVXPPDU\GRHVQRWLQFOXGHWKHVHWXSIRU0$&DXWKHQWLFDWLRQ
VHHSDJHRU5$',86VHUYHUVHHSDJH
E7KHFRQILJXUDWLRQRI5$',860$&DXWKHQWLFDWLRQWRJHWKHUZLWK[:3$RU
:3$3UHVKDUHG.H\LVQRWVXSSRUWHG
F5$',86VHUYHUUHTXLUHGRQO\ZKHQ5$',860$&DXWKHQWLFDWLRQLVFRQILJXUHG
(QDEOH±(QDEOHVUDGLRFRPPXQLFDWLRQVRQWKH9$3LQWHUIDFH'HIDXOW'LVDEOHG
1RWH <RXPXVWILUVWHQDEOH9$3LQWHUIDFHEHIRUH\RXFDQHQDEOHRWKHU9$3
LQWHUIDFHV
66,'±7KHQDPHRIWKHEDVLFVHUYLFHVHWSURYLGHGE\D9$3LQWHUIDFH&OLHQWVWKDW
ZDQWWRFRQQHFWWRWKHQHWZRUNWKURXJKWKHDFFHVVSRLQWPXVWVHWWKHLU66,'WRWKH
VDPHDVWKDWRIDQDFFHVVSRLQW9$3LQWHUIDFH'HIDXOW9$3B7(67B$
5DQJHFKDUDFWHUV
:LUHG(TXLYDOHQW3ULYDF\:(3
:(3SURYLGHVDEDVLFOHYHORIVHFXULW\SUHYHQWLQJXQDXWKRUL]HGDFFHVVWRWKH
QHWZRUNDQGHQFU\SWLQJGDWDWUDQVPLWWHGEHWZHHQZLUHOHVVFOLHQWVDQGWKHDFFHVV
SRLQW:(3XVHVVWDWLFVKDUHGNH\VIL[HGOHQJWKKH[DGHFLPDORUDOSKDQXPHULF
VWULQJVWKDWDUHPDQXDOO\GLVWULEXWHGWRDOOFOLHQWVWKDWZDQWWRXVHWKHQHWZRUN
:(3LVWKHVHFXULW\SURWRFROLQLWLDOO\VSHFLILHGLQWKH,(((VWDQGDUGIRU
ZLUHOHVVFRPPXQLFDWLRQV8QIRUWXQDWHO\:(3KDVEHHQIRXQGWREHVHULRXVO\
IODZHGDQGFDQQRWEHUHFRPPHQGHGIRUDKLJKOHYHORIQHWZRUNVHFXULW\)RUPRUH
UREXVWZLUHOHVVVHFXULW\WKHDFFHVVSRLQWSURYLGHV:L)L3URWHFWHG$FFHVV:3$
IRULPSURYHGGDWDHQFU\SWLRQDQGXVHUDXWKHQWLFDWLRQ
6HWWLQJXSVKDUHGNH\VHQDEOHVWKHEDVLF,(((:LUHG(TXLYDOHQW3ULYDF\
:(3RQWKHDFFHVVSRLQWWRSUHYHQWXQDXWKRUL]HGDFFHVVWRWKHQHWZRUN
,I\RXFKRRVHWRXVH:(3VKDUHGNH\VLQVWHDGRIDQRSHQV\VWHPEHVXUHWRGHILQH
DWOHDVWRQHVWDWLF:(3NH\IRUXVHUDXWKHQWLFDWLRQDQGGDWDHQFU\SWLRQ$OVREH
VXUHWKDWWKH:(3VKDUHGNH\VDUHWKHVDPHIRUHDFKFOLHQWLQWKHZLUHOHVVQHWZRUN
1RWHWKDWDOOFOLHQWVVKDUHWKHVDPHNH\VZKLFKDUHXVHGIRUXVHUDXWKHQWLFDWLRQDQG
GDWDHQFU\SWLRQ8SWRIRXUNH\VFDQEHVSHFLILHG7KHVHIRXUNH\VDUHXVHGIRUDOO
9$3LQWHUIDFHVRQWKHVDPHUDGLR
7RVHWXS:(3VKDUHGNH\VFOLFN5DGLR6HWWLQJVXQGHU5DGLR$RU5DGLR*
.H\7\SH±6HOHFWWKHSUHIHUUHGPHWKRGRIHQWHULQJ:(3HQFU\SWLRQNH\VRQWKH
DFFHVVSRLQWDQGHQWHUXSWRIRXUNH\V
+H[DGHFLPDO(QWHUNH\VDVKH[DGHFLPDOGLJLWVDQG$)IRUELWNH\V
KH[DGHFLPDOGLJLWVIRUELWNH\VRUKH[DGHFLPDOGLJLWVIRUELWNH\V
DUDGLRRQO\7KLVLVWKHGHIDXOWVHWWLQJ
$OSKDQXPHULF(QWHUNH\VDVDOSKDQXPHULFFKDUDFWHUVIRUELWNH\V
DOSKDQXPHULFFKDUDFWHUVIRUELWNH\VRUDOSKDQXPHULFFKDUDFWHUVIRU
ELWNH\VDUDGLRRQO\
.H\1XPEHU±6HOHFWVWKHNH\QXPEHUWRXVHIRUHQFU\SWLRQIRUHDFK9$3LQWHUIDFH
,IWKHFOLHQWVKDYHDOOIRXUNH\VFRQILJXUHGWRWKHVDPHYDOXHV\RXFDQFKDQJHWKH
HQFU\SWLRQNH\WRDQ\RIWKHIRXUVHWWLQJVZLWKRXWKDYLQJWRXSGDWHWKHFOLHQWNH\V
'HIDXOW.H\
6KDUHG.H\6HWXS±6HOHFW%LW%LWRU%LWNH\OHQJWK1RWHWKDWWKHVDPH
VL]HRIHQFU\SWLRQNH\PXVWEHVXSSRUWHGRQDOOZLUHOHVVFOLHQWV'HIDXOW1RQH
1RWH .H\LQGH[DQGW\SHPXVWPDWFKWKDWFRQILJXUHGRQWKHFOLHQWV
1RWH ,QDPL[HGPRGHHQYLURQPHQWZLWKFOLHQWVXVLQJVWDWLF:(3NH\VDQG:3$VHOHFW
:(3WUDQVPLWNH\LQGH[RU7KHDFFHVVSRLQWXVHVWUDQVPLWNH\LQGH[IRU
WKHJHQHUDWLRQRIG\QDPLFNH\V
7RHQDEOH:(3VKDUHGNH\VIRUD9$3LQWHUIDFHFOLFN6HFXULW\XQGHU5DGLR$RU
5DGLR*7KHQVHOHFWWKH9$3LQWHUIDFHWKDWZLOOXVH:(3NH\VE\FOLFNLQJ0RUH
DQGFRQILJXUHWKH$XWKHQWLFDWLRQ7\SH6HWXSDQG(QFU\SWLRQILHOGV
$XWKHQWLFDWLRQ7\SH6HWXS±6HWVWKHDFFHVVSRLQWWRFRPPXQLFDWHDVDQRSHQ
V\VWHPWKDWDFFHSWVQHWZRUNDFFHVVDWWHPSWVIURPDQ\FOLHQWRUZLWKFOLHQWVXVLQJ
SUHFRQILJXUHGVWDWLFVKDUHGNH\V'HIDXOW2SHQ6\VWHP
2SHQ6\VWHP,I\RXGRQ¶WVHWXSDQ\RWKHUVHFXULW\PHFKDQLVPRQWKHDFFHVV
SRLQWWKHQHWZRUNKDVQRSURWHFWLRQDQGLVRSHQWRDOOXVHUV7KLVLVWKHGHIDXOW
VHWWLQJ
6KDUHG.H\6HWVWKHDFFHVVSRLQWWRXVH:(3VKDUHGNH\V,IWKLVRSWLRQLV
VHOHFWHG\RXPXVWFRQILJXUHDWOHDVWRQHNH\RQWKHDFFHVVSRLQWDQGDOOFOLHQWV
1RWH 7RXVH;RQZLUHOHVVFOLHQWVUHTXLUHVDQHWZRUNFDUGGULYHUDQG;
FOLHQWVRIWZDUHWKDWVXSSRUWVWKH($3DXWKHQWLFDWLRQW\SHWKDW\RXZDQWWRXVH
:LQGRZV63RUODWHUDQG:LQGRZV;3SURYLGH;FOLHQWVXSSRUW
:LQGRZV;3DOVRSURYLGHVQDWLYH:3$VXSSRUW2WKHUV\VWHPVUHTXLUHDGGLWLRQDO
FOLHQWVRIWZDUHWRVXSSRUW;DQG:3$
(QFU\SWLRQ±(QDEOHRUGLVDEOHWKHDFFHVVSRLQWWRXVHGDWDHQFU\SWLRQ:(37.,3
RU$(6,IWKLVRSWLRQLVVHOHFWHGZKHQXVLQJVWDWLF:(3NH\V\RXPXVWFRQILJXUHDW
OHDVWRQHNH\RQWKHDFFHVVSRLQWDQGDOOFOLHQWV'HIDXOW'LVDEOHG
1RWH <RXPXVWHQDEOHGDWDHQFU\SWLRQWKURXJKWKHZHERU&/,LQRUGHUWRHQDEOHDOO
W\SHVRIHQFU\SWLRQ:(37.,3RU$(6LQWKHDFFHVVSRLQW
&/,&RPPDQGVIRU:(36KDUHG.H\6HFXULW\±7RHQDEOH:(3VKDUHGNH\VHFXULW\
IRUWKHJLQWHUIDFHXVHWKHLQWHUIDFHZLUHOHVVJFRPPDQGIURPWKH&/,
FRQILJXUDWLRQPRGHWRDFFHVVWKHLQWHUIDFHPRGHIRUWKHJUDGLR)LUVWXVHWKH
NH\FRPPDQGWRGHILQHXSWRIRXU:(3NH\VWKDWFDQEHXVHGIRUDOO9$3LQWHUIDFHV
RQWKHUDGLR7KHQXVHWKHYDSFRPPDQGWRDFFHVVHDFK9$3LQWHUIDFHWRFRQILJXUH
RWKHUVHFXULW\VHWWLQJV
)URPWKH9$3LQWHUIDFHFRQILJXUDWLRQPRGHXVHWKHDXWKFRPPDQGWRHQDEOH:(3
VKDUHGNH\DXWKHQWLFDWLRQZKLFKHQDEOHVHQFU\SWLRQDXWRPDWLFDOO\7KHQVHWRQH
NH\DVWKHWUDQVPLWNH\IRUWKH9$3LQWHUIDFHXVLQJWKHWUDQVPLWNH\FRPPDQG7R
YLHZWKHFXUUHQWVHFXULW\VHWWLQJVXVHWKHVKRZLQWHUIDFHZLUHOHVVJ>@
FRPPDQGIURPWKH([HFPRGH
Enterprise AP(config)#interface wireless g 7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#key 1 128 ascii abcdeabcdeabc 7-123
Enterprise AP(if-wireless g)#vap 0 7-97
Enterprise AP(if-wireless g: VAP[0])#auth shared-key 7-123
Data Encryption is set to enabled.
Remember to set the share key using "key" command.
Enterprise AP(if-wireless g: VAP[0])#transmit-key 1 7-124
Enterprise AP(if-wireless g: VAP[0])#exit
Enterprise AP#show interface wireless g 0 7-112
Wireless Interface Information
========================================================================
----------------Identification------------------------------------------
Description : Enterprise 802.11g Access Point
SSID : VAP_TEST_11G 0
Channel : 11 (AUTO)
Status : DISABLED
MAC Address : 00:12:cf:05:95:08
----------------802.11 Parameters----------------------------------------
Radio Mode : b & g mixed mode
Transmit Power : FULL (5 dBm)
Max Station Data Rate : 54Mbps
Multicast Data Rate : 5.5Mbps
Fragmentation Threshold : 2346 bytes
RTS Threshold : 2347 bytes
Beacon Interval : 100 TUs
Authentication Timeout Interval : 60 Mins
Association Timeout Interval : 30 Mins
DTIM Interval : 1 beacon
Preamble Length : SHORT-OR-LONG
Maximum Association : 64 stations
MIC Mode : Software
Super G : Disabled
VLAN ID : 1
----------------Security------------------------------------------------
Closed System : Disabled
Multicast cipher : WEP
Unicast cipher : TKIP and AES
WPA clients : DISABLED
WPA Key Mgmt Mode : PRE SHARED KEY
WPA PSK Key Type : PASSPHRASE
WPA PSK Key : EMPTY
PMKSA Lifetime : 720 minutes
Encryption : ENABLED
Default Transmit Key : 1
Common Static Keys : Key 1: EMPTY Key 2: EMPTY
Key 3: EMPTY Key 4: EMPTY
Pre-Authentication : DISABLED
Authentication Type : SHARED
----------------802.1x--------------------------------------------------
802.1x : DISABLED
Broadcast Key Refresh Rate : 30 min
Session Key Refresh Rate : 30 min
802.1x Session Timeout Value : 0 min
&/,&RPPDQGVIRU:(3RYHU;6HFXULW\±8VHWKHYDSFRPPDQGWRDFFHVV
HDFK9$3LQWHUIDFHWRFRQILJXUHWKHVHFXULW\VHWWLQJV)LUVWVHW;WRUHTXLUHG
XVLQJWKH[FRPPDQGDQGVHWWKH;NH\UHIUHVKUDWHV7KHQXVHWKH
DXWKFRPPDQGWRVHOHFWRSHQV\VWHPDXWKHQWLFDWLRQDQGWKHHQFU\SWLRQFRPPDQG
----------------Antenna-------------------------------------------------
Antenna Control method : Diversity
Antenna ID : 0x0000(Default Antenna)
Antenna Location : Indoor
----------------Quality of Service---------------------------------------
WMM Mode : SUPPORTED
WMM Acknowledge Policy
AC0(Best Effort) : Acknowledge
AC1(Background) : Acknowledge
AC2(Video) : Acknowledge
AC3(Voice) : Acknowledge
WMM BSS Parameters
AC0(Best Effort) : logCwMin: 4 logCwMax: 10 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video) : logCwMin: 3 logCwMax: 4 AIFSN: 2
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice) : logCwMin: 2 logCwMax: 3 AIFSN: 2
Admission Control: No
TXOP Limit: 1.504 ms
WMM AP Parameters
AC0(Best Effort) : logCwMin: 4 logCwMax: 6 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video) : logCwMin: 3 logCwMax: 4 AIFSN: 1
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice) : logCwMin: 2 logCwMax: 3 AIFSN: 1
Admission Control: No
TXOP Limit: 1.504 ms
========================================================================
Enterprise AP#
WRHQDEOHGDWDHQFU\SWLRQ7RYLHZWKHFXUUHQWVHFXULW\VHWWLQJVXVHWKHVKRZ
LQWHUIDFHZLUHOHVVD>@RUVKRZLQWHUIDFHZLUHOHVVJ>@FRPPDQGQRW
VKRZQLQH[DPSOH
:L)L3URWHFWHG$FFHVV:3$
:3$HPSOR\VDFRPELQDWLRQRIVHYHUDOWHFKQRORJLHVWRSURYLGHDQHQKDQFHG
VHFXULW\VROXWLRQIRUZLUHOHVVQHWZRUNV
7KHDFFHVVSRLQWVXSSRUWVWKHIROORZLQJ:3$FRPSRQHQWVDQGIHDWXUHV
,(((;DQGWKH([WHQVLEOH$XWKHQWLFDWLRQ3URWRFRO
($3
:3$HPSOR\V
;DVLWVEDVLFIUDPHZRUNIRUXVHUDXWKHQWLFDWLRQDQGG\QDPLFNH\
PDQDJHPHQW7KH;FOLHQWDQG5$',86VHUYHUVKRXOGXVHDQDSSURSULDWH($3
W\SH²VXFKDV($37/67UDQVSRUW/D\HU6HFXULW\($377/67XQQHOHG7/6RU
3($33URWHFWHG($3²IRUVWURQJHVWDXWKHQWLFDWLRQ:RUNLQJWRJHWKHUWKHVH
SURWRFROVSURYLGH³PXWXDODXWKHQWLFDWLRQ´EHWZHHQDFOLHQWWKHDFFHVVSRLQWDQGD
5$',86VHUYHUWKDWSUHYHQWVXVHUVIURPDFFLGHQWDOO\MRLQLQJDURJXHQHWZRUN2QO\
ZKHQD5$',86VHUYHUKDVDXWKHQWLFDWHGDXVHU¶VFUHGHQWLDOVZLOOHQFU\SWLRQNH\V
EHVHQWWRWKHDFFHVVSRLQWDQGFOLHQW
1RWH 7RLPSOHPHQW:3$RQZLUHOHVVFOLHQWVUHTXLUHVD:3$HQDEOHGQHWZRUNFDUG
GULYHUDQG;FOLHQWVRIWZDUHWKDWVXSSRUWVWKH($3DXWKHQWLFDWLRQW\SHWKDW
\RXZDQWWRXVH:LQGRZV;3SURYLGHVQDWLYH:3$VXSSRUWRWKHUV\VWHPV
UHTXLUHDGGLWLRQDOVRIWZDUH
7HPSRUDO.H\,QWHJULW\3URWRFRO7.,3:3$VSHFLILHV7.,3DVWKHGDWD
HQFU\SWLRQPHWKRGWRUHSODFH:(37.,3DYRLGVWKHSUREOHPVRI:(3VWDWLFNH\VE\
G\QDPLFDOO\FKDQJLQJGDWDHQFU\SWLRQNH\V%DVLFDOO\7.,3VWDUWVZLWKDPDVWHU
WHPSRUDONH\IRUHDFKXVHUVHVVLRQDQGWKHQPDWKHPDWLFDOO\JHQHUDWHVRWKHUNH\V
WRHQFU\SWHDFKGDWDSDFNHW7.,3SURYLGHVIXUWKHUGDWDHQFU\SWLRQHQKDQFHPHQWV
E\LQFOXGLQJDPHVVDJHLQWHJULW\FKHFNIRUHDFKSDFNHWDQGDUHNH\LQJPHFKDQLVP
ZKLFKSHULRGLFDOO\FKDQJHVWKHPDVWHUNH\
:3$3UH6KDUHG.H\0RGH:3$36.:3$36.)RUHQWHUSULVHGHSOR\PHQW
:3$UHTXLUHVD5$',86DXWKHQWLFDWLRQVHUYHUWREHFRQILJXUHGRQWKHZLUHG
QHWZRUN+RZHYHUIRUVPDOORIILFHQHWZRUNVWKDWPD\QRWKDYHWKHUHVRXUFHVWR
FRQILJXUHDQGPDLQWDLQD5$',86VHUYHU:3$SURYLGHVDVLPSOHRSHUDWLQJPRGH
WKDWXVHVMXVWDSUHVKDUHGSDVVZRUGIRUQHWZRUNDFFHVV7KH3UH6KDUHG.H\
PRGHXVHVDFRPPRQSDVVZRUGIRUXVHUDXWKHQWLFDWLRQWKDWLVPDQXDOO\HQWHUHGRQ
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#802.1X required 7-66
Enterprise AP(if-wireless g: VAP[0])#802.1X
broadcast-key-refresh-rate 5 7-67
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-key-refresh-rate 5 7-68
Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300 7-68
Enterprise AP(if-wireless g: VAP[0])#auth open-system 7-123
Enterprise AP(if-wireless g: VAP[0])#encryption 7-122
Enterprise AP(if-wireless g: VAP[0])#
WKHDFFHVVSRLQWDQGDOOZLUHOHVVFOLHQWV7KH36.PRGHXVHVWKHVDPH7.,3SDFNHW
HQFU\SWLRQDQGNH\PDQDJHPHQWDV:3$LQWKHHQWHUSULVHSURYLGLQJDUREXVWDQG
PDQDJHDEOHDOWHUQDWLYHIRUVPDOOQHWZRUNV
0L[HG:3$DQG:(3&OLHQW6XSSRUW:3$HQDEOHVWKHDFFHVVSRLQWWRLQGLFDWHLWV
VXSSRUWHGHQFU\SWLRQDQGDXWKHQWLFDWLRQPHFKDQLVPVWRFOLHQWVXVLQJLWVEHDFRQ
VLJQDO:3$FRPSDWLEOHFOLHQWVFDQOLNHZLVHUHVSRQGWRLQGLFDWHWKHLU:3$VXSSRUW
7KLVHQDEOHVWKHDFFHVVSRLQWWRGHWHUPLQHZKLFKFOLHQWVDUHXVLQJ:3$VHFXULW\
DQGZKLFKDUHXVLQJOHJDF\:(37KHDFFHVVSRLQWXVHV7.,3XQLFDVWGDWD
HQFU\SWLRQNH\VIRU:3$FOLHQWVDQG:(3XQLFDVWNH\VIRU:(3FOLHQWV7KHJOREDO
HQFU\SWLRQNH\IRUPXOWLFDVWDQGEURDGFDVWWUDIILFPXVWEHWKHVDPHIRUDOOFOLHQWV
WKHUHIRUHLWUHVWULFWVHQFU\SWLRQWRD:(3NH\
:KHQDFFHVVLVRSHQHGWRERWK:3$DQG:(3FOLHQWVQRDXWKHQWLFDWLRQLVSURYLGHG
IRUWKH:(3FOLHQWVWKURXJKVKDUHGNH\V7RVXSSRUWDXWKHQWLFDWLRQIRU:(3FOLHQWV
LQWKLVPL[HGPRGHFRQILJXUDWLRQ\RXFDQXVHHLWKHU0$&DXWKHQWLFDWLRQRU;
DXWKHQWLFDWLRQ
:3$±:3$ZDVLQWURGXFHGDVDQLQWHULPVROXWLRQIRUWKHYXOQHUDELOLW\RI:(3
SHQGLQJWKHUDWLILFDWLRQRIWKH,(((LZLUHOHVVVHFXULW\VWDQGDUG,QHIIHFWWKH
:3$VHFXULW\IHDWXUHVDUHDVXEVHWRIWKHLVWDQGDUG:3$LQFOXGHVWKHQRZ
UDWLILHGLVWDQGDUGEXWDOVRRIIHUVEDFNZDUGFRPSDWLELOLW\ZLWK:3$
7KHUHIRUH:3$LQFOXGHVWKHVDPH;DQG36.PRGHVRIRSHUDWLRQDQG
VXSSRUWIRU7.,3HQFU\SWLRQ7KHPDLQGLIIHUHQFHVDQGHQKDQFHPHQWVLQ:3$FDQ
EHVXPPDUL]HGDVIROORZV
$GYDQFHG(QFU\SWLRQ6WDQGDUG$(6:3$XVHV$(6&RXQWHU0RGH
HQFU\SWLRQZLWK&LSKHU%ORFN&KDLQLQJ0HVVDJH$XWKHQWLFDWLRQ&RGH&%&0$&
IRUPHVVDJHLQWHJULW\7KH$(6&RXQWHU0RGH&%&0$&3URWRFRO$(6&&03
SURYLGHVH[WUHPHO\UREXVWGDWDFRQILGHQWLDOLW\XVLQJDELWNH\7KH$(6&&03
HQFU\SWLRQFLSKHULVVSHFLILHGDVDVWDQGDUGUHTXLUHPHQWIRU:3$+RZHYHUWKH
FRPSXWDWLRQDOLQWHQVLYHRSHUDWLRQVRI$(6&&03UHTXLUHVKDUGZDUHVXSSRUWRQ
FOLHQWGHYLFHV7KHUHIRUHWRLPSOHPHQW:3$LQWKHQHWZRUNZLUHOHVVFOLHQWVPXVW
EHXSJUDGHGWR:3$FRPSOLDQWKDUGZDUH
:3$0L[HG0RGH:3$GHILQHVDWUDQVLWLRQDOPRGHRIRSHUDWLRQIRUQHWZRUNV
PRYLQJIURP:3$VHFXULW\WR:3$:3$0L[HG0RGHDOORZVERWK:3$DQG
:3$FOLHQWVWRDVVRFLDWHWRDFRPPRQ66,'LQWHUIDFH,QPL[HGPRGHWKHXQLFDVW
HQFU\SWLRQFLSKHU7.,3RU$(6&&03LVQHJRWLDWHGIRUHDFKFOLHQW7KHDFFHVV
SRLQWDGYHUWLVHVLWVVXSSRUWHGHQFU\SWLRQFLSKHUVLQEHDFRQIUDPHVDQGSUREH
UHVSRQVHV:3$DQG:3$FOLHQWVVHOHFWWKHFLSKHUWKH\VXSSRUWDQGUHWXUQWKH
FKRLFHLQWKHDVVRFLDWLRQUHTXHVWWRWKHDFFHVVSRLQW)RUPL[HGPRGHRSHUDWLRQ
WKHFLSKHUXVHGIRUEURDGFDVWIUDPHVLVDOZD\V7.,3:(3HQFU\SWLRQLVQRW
DOORZHG
.H\&DFKLQJ:3$SURYLGHVIDVWURDPLQJIRUDXWKHQWLFDWHGFOLHQWVE\UHWDLQLQJ
NH\VDQGRWKHUVHFXULW\LQIRUPDWLRQLQDFDFKHVRWKDWLIDFOLHQWURDPVDZD\IURP
DQDFFHVVSRLQWDQGWKHQUHWXUQVUHDXWKHQWLFDWLRQLVQRWUHTXLUHG:KHQD:3$
FOLHQWLVILUVWDXWKHQWLFDWHGLWUHFHLYHVD3DLUZLVH0DVWHU.H\30.WKDWLVXVHGWR
JHQHUDWHRWKHUNH\VIRUXQLFDVWGDWDHQFU\SWLRQ7KLVNH\DQGRWKHUFOLHQW
LQIRUPDWLRQIRUPD6HFXULW\$VVRFLDWLRQWKDWWKHDFFHVVSRLQWQDPHVDQGKROGVLQ
DFDFKH
3UHDXWKHQWLFDWLRQ(DFKWLPHDFOLHQWURDPVWRDQRWKHUDFFHVVSRLQWLWKDVWREH
IXOO\UHDXWKHQWLFDWHG7KLVDXWKHQWLFDWLRQSURFHVVLVWLPHFRQVXPLQJDQGFDQ
GLVUXSWDSSOLFDWLRQVUXQQLQJRYHUWKHQHWZRUN:3$LQFOXGHVDPHFKDQLVP
NQRZQDVSUHDXWKHQWLFDWLRQWKDWDOORZVFOLHQWVWRURDPWRDQHZDFFHVVSRLQWDQG
EHTXLFNO\DVVRFLDWHG7KHILUVWWLPHDFOLHQWLVDXWKHQWLFDWHGWRDZLUHOHVVQHWZRUN
LWKDVWREHIXOO\DXWKHQWLFDWHG:KHQWKHFOLHQWLVDERXWWRURDPWRDQRWKHUDFFHVV
SRLQWLQWKHQHWZRUNWKHDFFHVVSRLQWVHQGVSUHDXWKHQWLFDWLRQPHVVDJHVWRWKH
QHZDFFHVVSRLQWWKDWLQFOXGHWKHFOLHQW¶VVHFXULW\DVVRFLDWLRQLQIRUPDWLRQ7KHQ
ZKHQWKHFOLHQWVHQGVDQDVVRFLDWLRQUHTXHVWWRWKHQHZDFFHVVSRLQWWKHFOLHQWLV
NQRZQWREHDOUHDG\DXWKHQWLFDWHGVRLWSURFHHGVGLUHFWO\WRNH\H[FKDQJHDQG
DVVRFLDWLRQ
7RFRQILJXUH:3$FOLFN6HFXULW\XQGHU5DGLR$RU5DGLR*6HOHFWRQHRIWKH9$3
LQWHUIDFHVE\FOLFNLQJ0RUH6HOHFWRQHRIWKH:3$RSWLRQVLQWKH$XWKHQWLFDWLRQ
6HWXSWDEOHDQGWKHQFRQILJXUHWKHSDUDPHWHUVGLVSOD\HGEHQHDWKWKHWDEOH
7KH:3$FRQILJXUDWLRQSDUDPHWHUVDUHGHVFULEHGEHORZ
(QFU\SWLRQ±<RXPXVWHQDEOHGDWDHQFU\SWLRQLQRUGHUWRHQDEOHDOOW\SHVRI
HQFU\SWLRQ:(37.,3RU$(6LQWKHDFFHVVSRLQW
3UH$XWKHQWLFDWLRQ±:KHQXVLQJ:3$RYHU;SUHDXWKHQWLFDWLRQFDQEH
HQDEOHGZKLFKDOORZVFOLHQWVWRURDPWRDQHZDFFHVVSRLQWDQGEHTXLFNO\
DVVRFLDWHGZLWKRXWSHUIRUPLQJIXOO;DXWKHQWLFDWLRQ'HIDXOW'LVDEOHG
$XWKHQWLFDWLRQ6HWXS±7RXVH:3$RU:3$VHWWKHDFFHVVSRLQWWRRQHRIWKH
IROORZLQJRSWLRQV,ID:3$:3$PRGHWKDWRSHUDWHVRYHU;LVVHOHFWHG
:3$:3$RU:3$:3$PL[HGWKH;VHWWLQJVDQG5$',86VHUYHU
GHWDLOVQHHGWREHFRQILJXUHG%HVXUH\RXKDYHDOVRFRQILJXUHGD5$',86VHUYHU
RQWKHQHWZRUNEHIRUHHQDEOLQJDXWKHQWLFDWLRQ,ID:3$:3$3UHVKDUHG.H\
PRGHLVVHOHFWHG:3$36.:3$36.RU:3$:3$36.0L[HGEHVXUHWR
VSHFLI\WKHNH\VWULQJ
:3$&OLHQWVXVLQJ:3$RYHU;DUHDFFHSWHGIRUDXWKHQWLFDWLRQ
:3$36.&OLHQWVXVLQJ:3$ZLWKD3UHVKDUHG.H\DUHDFFHSWHGIRU
DXWKHQWLFDWLRQ
:3$&OLHQWVXVLQJ:3$RYHU;DUHDFFHSWHGIRUDXWKHQWLFDWLRQ
:3$36.&OLHQWVXVLQJ:3$ZLWKD3UHVKDUHG.H\DUHDFFHSWHGIRU
DXWKHQWLFDWLRQ
:3$:3$PL[HG&OLHQWVXVLQJ:3$RU:3$RYHU;DUHDFFHSWHGIRU
DXWKHQWLFDWLRQ
:3$:3$36.PL[HG&OLHQWVXVLQJ:3$RU:3$ZLWKD3UHVKDUHG.H\DUH
DFFHSWHGIRUDXWKHQWLFDWLRQ
:3$&RQILJXUDWLRQ±(DFK9$3LQWHUIDFHFDQEHFRQILJXUHGWRDOORZRQO\
:3$HQDEOHGFOLHQWVWRDFFHVVWKHQHWZRUN5HTXLUHGRUWRDOORZDFFHVVWRERWK
:3$DQG:(3FOLHQWV6XSSRUWHG'HIDXOW5HTXLUHG
&LSKHU6XLWH±6HOHFWVDQHQFU\SWLRQPHWKRGIRUWKHJOREDONH\XVHGIRUPXOWLFDVW
DQGEURDGFDVWWUDIILFZKLFKLVVXSSRUWHGE\DOOZLUHOHVVFOLHQWV
:(3:(3LVXVHGDVWKHPXOWLFDVWHQFU\SWLRQFLSKHU<RXVKRXOGVHOHFW:(3RQO\
ZKHQERWK:3$DQG:(3FOLHQWVDUHVXSSRUWHG
7.,37.,3LVXVHGDVWKHPXOWLFDVWHQFU\SWLRQFLSKHU
$(6&&03$(6&&03LVXVHGDVWKHPXOWLFDVWHQFU\SWLRQFLSKHU$(6&&03
LVWKHVWDQGDUGHQFU\SWLRQFLSKHUUHTXLUHGIRU:3$
:3$3UH6KDUHG.H\7\SH±,IWKH:3$RU:3$SUHVKDUHGNH\PRGHLVXVHGDOO
ZLUHOHVVFOLHQWVPXVWEHFRQILJXUHGZLWKWKHVDPHNH\WRFRPPXQLFDWHZLWKWKH
DFFHVVSRLQW
+H[DGHFLPDO±(QWHUDNH\DVDVWULQJRIKH[DGHFLPDOQXPEHUV
$OSKDQXPHULF±(QWHUDNH\DVDQHDV\WRUHPHPEHUIRUPRIOHWWHUVDQGQXPEHUV
7KHVWULQJPXVWEHIURPWRFKDUDFWHUVZKLFKFDQLQFOXGHVSDFHV
7KHFRQILJXUDWLRQVHWWLQJVIRU:3$DUHVXPPDUL]HGEHORZ
&/,&RPPDQGVIRU:3$8VLQJ3UHVKDUHG.H\6HFXULW\±)URPWKH9$3LQWHUIDFH
FRQILJXUDWLRQPRGHXVHWKHDXWKZSDSVNUHTXLUHGFRPPDQGWRHQDEOH:3$
3UHVKDUHG.H\VHFXULW\7RHQWHUDNH\YDOXHXVHWKHZSDSUHVKDUHGNH\
FRPPDQGWRVSHFLI\DKH[DGHFLPDORUDOSKDQXPHULFNH\7RYLHZWKHFXUUHQW
VHFXULW\VHWWLQJVXVHWKHVKRZLQWHUIDFHZLUHOHVVD>@RUVKRZLQWHUIDFH
ZLUHOHVVJ>@FRPPDQGQRWVKRZQLQH[DPSOH
7DEOH :3$&RQILJXUDWLRQ6HWWLQJV
:3$DQG:3$SUHVKDUHGNH\RQO\ :3$DQG:3$RYHU;
Enterprise AP(config)#interface wireless g 7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key
passphrase-key agoodsecret 7-127
Enterprise AP(if-wireless g: VAP[0])#auth wpa-psk required
Data Encryption is set to Enabled.
WPA2 Clients Mode is set to Disabled.
WPA Clients Mode is set to Required.
WPA Multicast Cipher is set to TKIP.
WPA Unicast Cipher can accept TKIP only.
WPA Authentication is set to Pre-Shared Key.
Enterprise AP(if-wireless g: VAP[0])#
&/,&RPPDQGVIRU:3$2YHU;6HFXULW\±)URPWKH9$3LQWHUIDFH
FRQILJXUDWLRQPRGHXVHWKHDXWKZSDUHTXLUHGFRPPDQGWRVHOHFW:3$RYHU
;VHFXULW\7KHQVHWWKH;NH\UHIUHVKUDWHV7RYLHZWKHFXUUHQWVHFXULW\
VHWWLQJVXVHWKHVKRZLQWHUIDFHZLUHOHVVD>@RUVKRZLQWHUIDFHZLUHOHVVJ
>@FRPPDQGQRWVKRZQLQH[DPSOH
&RQILJXULQJ;
,(((;LVDVWDQGDUGIUDPHZRUNIRUQHWZRUNDFFHVVFRQWUROWKDWXVHVDFHQWUDO
5$',86VHUYHUIRUXVHUDXWKHQWLFDWLRQ7KLVFRQWUROIHDWXUHSUHYHQWVXQDXWKRUL]HG
DFFHVVWRWKHQHWZRUNE\UHTXLULQJDQ;FOLHQWDSSOLFDWLRQWRVXEPLWXVHU
FUHGHQWLDOVIRUDXWKHQWLFDWLRQ7KH;VWDQGDUGXVHVWKH([WHQVLEOH
$XWKHQWLFDWLRQ3URWRFRO($3WRSDVVXVHUFUHGHQWLDOVHLWKHUGLJLWDOFHUWLILFDWHV
XVHUQDPHVDQGSDVVZRUGVRURWKHUIURPWKHFOLHQWWRWKH5$',86VHUYHU&OLHQW
DXWKHQWLFDWLRQLVWKHQYHULILHGRQWKH5$',86VHUYHUEHIRUHWKHDFFHVVSRLQWJUDQWV
FOLHQWDFFHVVWRWKHQHWZRUN
7KH;($3SDFNHWVDUHDOVRXVHGWRSDVVG\QDPLFXQLFDVWVHVVLRQNH\VDQG
VWDWLFEURDGFDVWNH\VWRZLUHOHVVFOLHQWV6HVVLRQNH\VDUHXQLTXHWRHDFKFOLHQWDQG
DUHXVHGWRHQFU\SWDQGFRUUHODWHWUDIILFSDVVLQJEHWZHHQDVSHFLILFFOLHQWDQGWKH
DFFHVVSRLQW<RXFDQDOVRHQDEOHEURDGFDVWNH\URWDWLRQVRWKHDFFHVVSRLQW
SURYLGHVDG\QDPLFEURDGFDVWNH\DQGFKDQJHVLWDWDVSHFLILHGLQWHUYDO
Enterprise AP(config)#interface wireless g 7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#auth wpa required
Data Encryption is set to Enabled.
WPA2 Clients mode is set to Disabled.
WPA Clients Mode is set to Required.
WPA Multicast Cipher is set to TKIP.
WPA Unicast Cipher can accept TKIP only.
WPA Authentication is set to 802.1X Required.
Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-key-refresh-rate 5 7-67
Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300 7-68
Enterprise AP(if-wireless g: VAP[0])#
2SHQWKH6HFXULW\SDJHDQGFOLFN0RUHIRURQHRIWKH9$3LQWHUIDFHV
<RXFDQHQDEOH;DVRSWLRQDOO\VXSSRUWHGRUDVUHTXLUHGWRHQKDQFHWKH
VHFXULW\RIWKHZLUHOHVVQHWZRUN'HIDXOW'LVDEOH
'LVDEOH7KHDFFHVVSRLQWGRHVQRWVXSSRUW;DXWKHQWLFDWLRQIRUDQ\ZLUHOHVV
FOLHQW$IWHUVXFFHVVIXOZLUHOHVVDVVRFLDWLRQZLWKWKHDFFHVVSRLQWHDFKFOLHQWLV
DOORZHGWRDFFHVVWKHQHWZRUN
6XSSRUWHG7KHDFFHVVSRLQWVXSSRUWV;DXWKHQWLFDWLRQRQO\IRUFOLHQWV
LQLWLDWLQJWKH;DXWKHQWLFDWLRQSURFHVVLHWKHDFFHVVSRLQWGRHVQRWLQLWLDWH
;DXWKHQWLFDWLRQ)RUFOLHQWVLQLWLDWLQJ;RQO\WKRVHVXFFHVVIXOO\
DXWKHQWLFDWHGDUHDOORZHGWRDFFHVVWKHQHWZRUN)RUWKRVHFOLHQWVQRWLQLWLDWLQJ
;DFFHVVWRWKHQHWZRUNLVDOORZHGDIWHUVXFFHVVIXOZLUHOHVVDVVRFLDWLRQZLWK
WKHDFFHVVSRLQW7KH;VXSSRUWHGPRGHDOORZVDFFHVVIRUFOLHQWVQRWXVLQJ
:3$RU:3$VHFXULW\
5HTXLUHG7KHDFFHVVSRLQWHQIRUFHV;DXWKHQWLFDWLRQIRUDOODVVRFLDWHG
ZLUHOHVVFOLHQWV,I;DXWKHQWLFDWLRQLVQRWLQLWLDWHGE\DFOLHQWWKHDFFHVVSRLQW
ZLOOLQLWLDWHDXWKHQWLFDWLRQ2QO\WKRVHFOLHQWVVXFFHVVIXOO\DXWKHQWLFDWHGZLWK
;DUHDOORZHGWRDFFHVVWKHQHWZRUN
1RWH ,I;LVHQDEOHGRQWKHDFFHVVSRLQWWKHQ5$',86VHWXSPXVWEHFRPSOHWHG
VHH³5$',86´RQSDJH
:KHQ;LVHQDEOHGWKHEURDGFDVWDQGVHVVLRQNH\URWDWLRQLQWHUYDOVFDQDOVR
EHFRQILJXUHG
%URDGFDVW.H\5HIUHVK5DWH6HWVWKHLQWHUYDODWZKLFKWKHEURDGFDVWNH\VDUH
UHIUHVKHGIRUVWDWLRQVXVLQJ;G\QDPLFNH\LQJ5DQJHPLQXWHV
'HIDXOWPHDQVGLVDEOHG
6HVVLRQ.H\5HIUHVK5DWH7KHLQWHUYDODWZKLFKWKHDFFHVVSRLQWUHIUHVKHV
XQLFDVWVHVVLRQNH\VIRUDVVRFLDWHGFOLHQWV5DQJHPLQXWHV'HIDXOW
PHDQVGLVDEOHG
;5HDXWKHQWLFDWLRQ5HIUHVK5DWH7KHWLPHSHULRGDIWHUZKLFKDFRQQHFWHG
FOLHQWPXVWEHUHDXWKHQWLFDWHG'XULQJWKHUHDXWKHQWLFDWLRQSURFHVVRIYHULI\LQJ
WKHFOLHQW¶VFUHGHQWLDOVRQWKH5$',86VHUYHUWKHFOLHQWUHPDLQVFRQQHFWHGWKH
QHWZRUN2QO\LIUHDXWKHQWLFDWLRQIDLOVLVQHWZRUNDFFHVVEORFNHG5DQJH
VHFRQGV'HIDXOWPHDQVGLVDEOHG
&/,&RPPDQGVIRU;$XWKHQWLFDWLRQ±8VHWKH;VXSSRUWHGFRPPDQG
IURPWKH9$3LQWHUIDFHPRGHWRHQDEOH;DXWKHQWLFDWLRQ6HWWKHVHVVLRQDQG
EURDGFDVWNH\UHIUHVKUDWHDQGWKHUHDXWKHQWLFDWLRQWLPHRXW7RGLVSOD\WKHFXUUHQW
VHWWLQJVXVHWKHVKRZLQWHUIDFHZLUHOHVVFRPPDQGIURPWKH([HFPRGHQRW
VKRZQLQWKHH[DPSOH
Status Information
7KH6WDWXVSDJHLQFOXGHVLQIRUPDWLRQRQWKHIROORZLQJLWHPV
$FFHVV3RLQW6WDWXV
7KH$36WDWXVZLQGRZGLVSOD\VEDVLFV\VWHPFRQILJXUDWLRQVHWWLQJVDVZHOODVWKH
VHWWLQJVIRUWKHZLUHOHVVLQWHUIDFH
Enterprise AP(if-wireless g: VAP[0])#802.1X supported 7-66
Enterprise AP(if-wireless g: VAP[0])#802.1X
broadcast-key-refresh-rate 5 7-67
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-key-refresh-rate 5 7-68
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-timeout 300 7-68
Enterprise AP#
0HQX 'HVFULSWLRQ 3DJH
$36\VWHP&RQILJXUDWLRQ±7KH$36\VWHP&RQILJXUDWLRQWDEOHGLVSOD\VWKHEDVLF
V\VWHPFRQILJXUDWLRQVHWWLQJV
6\VWHP8S7LPH/HQJWKRIWLPHWKHPDQDJHPHQWDJHQWKDVEHHQXS
(WKHUQHW0$&7KHSK\VLFDOOD\HUDGGUHVVIRUWKH(WKHUQHWSRUW
5DGLR$0$&7KHSK\VLFDOOD\HUDGGUHVVIRUWKHDLQWHUIDFH
5DGLR*0$&7KHSK\VLFDOOD\HUDGGUHVVIRUWKHEJLQWHUIDFH
6\VWHP1DPH1DPHDVVLJQHGWRWKLVV\VWHP
6\VWHP&RQWDFW$GPLQLVWUDWRUUHVSRQVLEOHIRUWKHV\VWHP
,3$GGUHVV,3DGGUHVVRIWKHPDQDJHPHQWLQWHUIDFHIRUWKLVGHYLFH
,3'HIDXOW*DWHZD\,3DGGUHVVRIWKHJDWHZD\URXWHUEHWZHHQWKLVGHYLFHDQG
PDQDJHPHQWVWDWLRQVWKDWH[LVWRQRWKHUQHWZRUNVHJPHQWV
+7736HUYHU6KRZVLIPDQDJHPHQWDFFHVVYLD+773LVHQDEOHG
+7736HUYHU3RUW6KRZVWKH7&3SRUWXVHGE\WKH+773LQWHUIDFH
6RIWZDUH9HUVLRQ6KRZVWKHVRIWZDUHYHUVLRQQXPEHU
%RRWURP9HUVLRQ6KRZWKHERRWURPYHUVLRQQXPEHU
+DUGZDUH9HUVLRQ6KRZVWKHKDUGZDUHYHUVLRQQXPEHU
$3:LUHOHVV&RQILJXUDWLRQ±7KH$3:LUHOHVV&RQILJXUDWLRQWDEOHVGLVSOD\WKHUDGLR
DQG9$3LQWHUIDFHVHWWLQJVOLVWHGEHORZ1RWHWKDW,QWHUIDFH:LUHOHVV$UHIHUVWRWKH
DUDGLRDQG,QWHUIDFH:LUHOHVV*UHIHUVWKHEJUDGLR
66,'7KHVHUYLFHVHWLGHQWLILHUIRUWKH9$3LQWHUIDFH
5DGLR&KDQQHO7KHUDGLRFKDQQHOWKURXJKZKLFKWKHDFFHVVSRLQWFRPPXQLFDWHV
ZLWKZLUHOHVVFOLHQWV
(QFU\SWLRQ7KHNH\VL]HXVHGIRUGDWDHQFU\SWLRQ
$XWKHQWLFDWLRQ7\SH6KRZVWKHW\SHRIDXWKHQWLFDWLRQXVHG
;6KRZVLI,(((;DFFHVVFRQWUROIRUZLUHOHVVFOLHQWVLVHQDEOHG
&/,&RPPDQGVIRU'LVSOD\LQJ6\VWHP6HWWLQJV±7RYLHZWKHFXUUHQWDFFHVVSRLQW
V\VWHPVHWWLQJVXVHWKHVKRZV\VWHPFRPPDQGIURPWKH([HFPRGH7RYLHZWKH
FXUUHQWUDGLRLQWHUIDFHVHWWLQJVXVHWKHVKRZLQWHUIDFHZLUHOHVVDRUVKRZ
LQWHUIDFHZLUHOHVVJFRPPDQGVHHSDJH
Enterprise AP#show system 7-24
System Information
==========================================================
Serial Number : A123456789
System Up time : 0 days, 4 hours, 33 minutes, 29 seconds
System Name : Enterprise Wireless AP
System Location :
System Contact :
System Country Code : US - UNITED STATES
MAC Address : 00-30-F1-F0-9A-9C
IP Address : 192.168.1.1
Subnet Mask : 255.255.255.0
Default Gateway : 0.0.0.0
VLAN State : DISABLED
Management VLAN ID(AP): 1
IAPP State : ENABLED
DHCP Client : ENABLED
HTTP Server : ENABLED
HTTP Server Port : 80
HTTPS Server : ENABLED
HTTPS Server Port : 443
Slot Status : Dual band(a/g)
Boot Rom Version : v3.0.7
Software Version : v3.0.0.1
SSH Server : ENABLED
SSH Server Port : 22
Telnet Server : ENABLED
WEB Redirect : DISABLED
DHCP Relay : DISABLED
==========================================================
Enterprise AP#
6WDWLRQ6WDWXV
7KH6WDWLRQ6WDWXVZLQGRZVKRZVWKHZLUHOHVVFOLHQWVFXUUHQWO\DVVRFLDWHGZLWKWKH
DFFHVVSRLQW
7KH6WDWLRQ&RQILJXUDWLRQSDJHGLVSOD\VEDVLFFRQQHFWLRQLQIRUPDWLRQIRUDOO
DVVRFLDWHGVWDWLRQVDVGHVFULEHGEHORZ1RWHWKDWWKLVSDJHLVDXWRPDWLFDOO\
UHIUHVKHGHYHU\ILYHVHFRQGV
6WDWLRQ$GGUHVV7KH0$&DGGUHVVRIWKHZLUHOHVVFOLHQW
$XWKHQWLFDWHG6KRZVLIWKHVWDWLRQKDVEHHQDXWKHQWLFDWHG7KHWZREDVLF
PHWKRGVRIDXWKHQWLFDWLRQVXSSRUWHGIRUZLUHOHVVQHWZRUNVDUH³RSHQ
V\VWHP´DQG³VKDUHGNH\´2SHQV\VWHPDXWKHQWLFDWLRQDFFHSWVDQ\FOLHQW
DWWHPSWLQJWRFRQQHFWWRWKHDFFHVVSRLQWZLWKRXWYHULI\LQJLWVLGHQWLW\7KH
VKDUHGNH\DSSURDFKXVHV:LUHG(TXLYDOHQW3ULYDF\:(3WRYHULI\FOLHQWLGHQWLW\
E\GLVWULEXWLQJDVKDUHGNH\WRVWDWLRQVEHIRUHDWWHPSWLQJDXWKHQWLFDWLRQ
$VVRFLDWHG6KRZVLIWKHVWDWLRQKDVEHHQVXFFHVVIXOO\DVVRFLDWHGZLWKWKHDFFHVV
SRLQW2QFHDXWKHQWLFDWLRQLVFRPSOHWHGVWDWLRQVFDQDVVRFLDWHZLWKWKHFXUUHQW
DFFHVVSRLQWRUUHDVVRFLDWHZLWKDQHZDFFHVVSRLQW7KHDVVRFLDWLRQSURFHGXUH
DOORZVWKHZLUHOHVVV\VWHPWRWUDFNWKHORFDWLRQRIHDFKPRELOHFOLHQWDQGHQVXUH
WKDWIUDPHVGHVWLQHGIRUHDFKFOLHQWDUHIRUZDUGHGWRWKHDSSURSULDWHDFFHVVSRLQW
)RUZDUGLQJ$OORZHG6KRZVLIWKHVWDWLRQKDVSDVVHG;DXWKHQWLFDWLRQDQGLV
QRZDOORZHGWRIRUZDUGWUDIILFWRWKHDFFHVVSRLQW
.H\7\SH±'LVSOD\VRQHRIWKHIROORZLQJ
:(3'LVDEOHG±7KHFOLHQWLVQRWXVLQJ:LUHG(TXLYDOHQW3ULYDF\:(3
HQFU\SWLRQNH\V
'\QDPLF±7KHFOLHQWLVXVLQJ:L)L3URWHFWHG$FFHVV;RUSUHVKDUHG
NH\PRGHRUXVLQJ;DXWKHQWLFDWLRQZLWKG\QDPLFNH\LQJ
6WDWLF±7KHFOLHQWLVXVLQJVWDWLF:(3NH\VIRUHQFU\SWLRQ
&/,&RPPDQGVIRU'LVSOD\LQJ6WDWLRQ6WDWXV±7RYLHZVWDWXVRIFOLHQWVFXUUHQWO\
DVVRFLDWHGZLWKWKHDFFHVVSRLQWXVHWKHVKRZVWDWLRQFRPPDQGIURPWKH([HF
PRGH
Enterprise AP#show station 7-114
Station Table Information
===========================================================
if-wireless A VAP [0] :
802.11a Channel : Auto
No 802.11a Channel Stations.
if-wireless A VAP [1] :
802.11a Channel : Auto
No 802.11a Channel Stations.
....
No 802.11a Channel Stations.
if-wireless A VAP [3] :
802.11a Channel : Auto
No 802.11a Channel Stations.
if-wireless G VAP [0] :
802.11g Channel : Auto
No 802.11g Channel Stations.
if-wireless G VAP [1] :
802.11g Channel : Auto
No 802.11g Channel Stations.
....
No 802.11g Channel Stations.
if-wireless G VAP [3] :
802.11g Channel : Auto
No 802.11g Channel Stations.
===========================================================
Enterprise AP#
(YHQW/RJV
7KH(YHQW/RJVZLQGRZVKRZVWKHORJPHVVDJHVJHQHUDWHGE\WKHDFFHVVSRLQWDQG
VWRUHGLQPHPRU\
7KH(YHQW/RJVWDEOHGLVSOD\VWKHIROORZLQJLQIRUPDWLRQ
/RJ7LPH7KHWLPHWKHORJPHVVDJHZDVJHQHUDWHG
(YHQW/HYHO7KHORJJLQJOHYHODVVRFLDWHGZLWKWKLVPHVVDJH)RUDGHVFULSWLRQRI
WKHYDULRXVOHYHOVVHH³ORJJLQJOHYHO´RQSDJH
(YHQW0HVVDJH7KHFRQWHQWRIWKHORJPHVVDJH
(UURU0HVVDJHV±$QH[DPSOHRIDORJJHGHUURUPHVVDJHLV³6WDWLRQ)DLOHGWR
DXWKHQWLFDWHXQVXSSRUWHGDOJRULWKP´
7KLVPHVVDJHPD\EHFDXVHGE\DQ\RIWKHIROORZLQJFRQGLWLRQV
$FFHVVSRLQWZDVVHWWR³2SHQ$XWKHQWLFDWLRQ´EXWDFOLHQWVHQWDQDXWKHQWLFDWLRQ
UHTXHVWIUDPHZLWKD³6KDUHGNH\´
$FFHVVSRLQWZDVVHWWR³6KDUHG.H\$XWKHQWLFDWLRQ´EXWDFOLHQWVHQWDQ
DXWKHQWLFDWLRQIUDPHIRU³2SHQ6\VWHP´
:(3NH\VGRQRWPDWFK:KHQWKHDFFHVVSRLQWXVHV³6KDUHG.H\$XWKHQWLFDWLRQ´
EXWWKHNH\XVHGE\FOLHQWDQGDFFHVVSRLQWDUHQRWWKHVDPHWKHIUDPHZLOOEH
GHFU\SWHGLQFRUUHFWO\XVLQJWKHZURQJDOJRULWKPDQGVHTXHQFHQXPEHU
&/,&RPPDQGVIRU'LVSOD\LQJWKH/RJJLQJ6WDWXV±)URPWKHJOREDOFRQILJXUDWLRQ
PRGHXVHWKHVKRZORJJLQJFRPPDQG
&/,&RPPDQGVIRU'LVSOD\LQJ(YHQW/RJV±7RYLHZWKHDFFHVVSRLQWORJHQWULHV
XVHWKHVKRZHYHQWORJFRPPDQGIURPWKH([HFPRGH7RFOHDUDOOORJHQWULHVIURP
WKHDFFHVVSRLQWXVHWKHORJJLQJFOHDUFRPPDQGIURPWKH*OREDO&RQILJXUDWLRQ
PRGH
Enterprise AP#show loggging 7-33
Logging Information
============================================
Syslog State : Enabled
Logging Console State : Enabled
Logging Level : Alert
Logging Facility Type : 16
Servers
1: 192.168.1.19, UDP Port: 514, State: Enabled
2: 0.0.0.0, UDP Port: 514, State: Disabled
3: 0.0.0.0, UDP Port: 514, State: Disabled
4: 0.0.0.0, UDP Port: 514, State: Disabled
=============================================
Enterprise AP#
Enterprise AP#show event-log 7-34
Mar 09 11:57:55 Information: 802.11g:11g Radio Interface Enabled
Mar 09 11:57:55 Information: 802.11g:Radio channel updated to 8
Mar 09 11:57:34 Information: 802.11g:11g Radio Interface Enabled
Mar 09 11:57:18 Information: 802.11g:11g Radio Interface Enabled
Mar 09 11:56:35 Information: 802.11a:11a Radio Interface Enabled
Mar 09 11:55:52 Information: SSH task: Set SSH server port to 22
Mar 09 11:55:52 Information: SSH task: Enable SSH server.
Mar 09 11:55:52 Information: Enable Telnet.
Mar 09 11:55:40 Information: 802.11a:11a Radio Interface Disabled
Mar 09 11:55:40 Information: 802.11a:Transmit Power set to QUARTER
Press <n> next. <p> previous. <a> abort. <y> continue to end :
Enterprise AP#configure
Enter configuration commands, one per line. End with CTRL/Z
Enterprise AP(config)#logging clear 7-33
Enterprise AP#
6736WDWXV
7KH6736WDWXVZLQGRZVKRZVWKH673VWDWXVIRUHDFKSRUW
,''LVSOD\VWKHSRUW,'QXPEHU
3ULRULW\7KHSULRULW\GHVLJQDWHGWRWKHVSHFLILHGSRUW
3DWK&RVW'LVSOD\VWKHSDWKFRVWYDOXHIRUWKHVSHFLILHGSRUW
6WDWXV'LVSOD\VLI673LVHQDEOHGRUGLVDEOHGIRUWKHVSHFLILHGSRUW
6WDWH'LVSOD\WKH673VWDWHIRUWKHVSHFLILHGSRUW
Chapter 7:
Command Line Interface
Using the Command Line Interface
$FFHVVLQJWKH&/,
:KHQDFFHVVLQJWKHPDQDJHPHQWLQWHUIDFHIRUWKHRYHUDGLUHFWFRQQHFWLRQWRWKH
FRQVROHSRUWRUYLDD7HOQHWFRQQHFWLRQWKHDFFHVVSRLQWFDQEHPDQDJHGE\
HQWHULQJFRPPDQGNH\ZRUGVDQGSDUDPHWHUVDWWKHSURPSW8VLQJWKHDFFHVV
SRLQW¶VFRPPDQGOLQHLQWHUIDFH&/,LVYHU\VLPLODUWRHQWHULQJFRPPDQGVRQD
81,;V\VWHP
&RQVROH&RQQHFWLRQ
7RDFFHVVWKHDFFHVVSRLQWWKURXJKWKHFRQVROHSRUWSHUIRUPWKHVHVWHSV
$WWKHFRQVROHSURPSWHQWHUWKHXVHUQDPHDQGSDVVZRUG7KHGHIDXOWXVHU
QDPHLV³DGPLQ´DQGWKHGHIDXOWSDVVZRUGLV³VPFDGPLQ´:KHQWKHXVHUQDPH
LVHQWHUHGWKH&/,GLVSOD\VWKH³(QWHUSULVH$3´SURPSW
(QWHUWKHQHFHVVDU\FRPPDQGVWRFRPSOHWH\RXUGHVLUHGWDVNV
:KHQILQLVKHGH[LWWKHVHVVLRQZLWKWKH³H[LW´FRPPDQG
$IWHUFRQQHFWLQJWRWKHV\VWHPWKURXJKWKHFRQVROHSRUWWKHORJLQVFUHHQGLVSOD\V
&DXWLRQ&RPPDQGH[DPSOHVVKRZQODWHULQWKLVFKDSWHUDEEUHYLDWHWKHFRQVROHSURPSW
WR³$3´IRUVLPSOLFLW\
7HOQHW&RQQHFWLRQ
7HOQHWRSHUDWHVRYHUWKH,3WUDQVSRUWSURWRFRO,QWKLVHQYLURQPHQW\RXU
PDQDJHPHQWVWDWLRQDQGDQ\QHWZRUNGHYLFH\RXZDQWWRPDQDJHRYHUWKHQHWZRUN
PXVWKDYHDYDOLG,3DGGUHVV9DOLG,3DGGUHVVHVFRQVLVWRIIRXUQXPEHUVWR
VHSDUDWHGE\SHULRGV(DFKDGGUHVVFRQVLVWVRIDQHWZRUNSRUWLRQDQGKRVWSRUWLRQ
)RUH[DPSOHLIWKHDFFHVVSRLQWFDQQRWDFTXLUHDQ,3DGGUHVVIURPD'+&3VHUYHU
WKHGHIDXOW,3DGGUHVVXVHGE\WKHDFFHVVSRLQWFRQVLVWVRIDQHWZRUN
SRUWLRQDQGDKRVWSRUWLRQ
7RDFFHVVWKHDFFHVVSRLQWWKURXJKD7HOQHWVHVVLRQ\RXPXVWILUVWVHWWKH,3
DGGUHVVIRUWKHDFFHVVSRLQWDQGVHWWKHGHIDXOWJDWHZD\LI\RXDUHPDQDJLQJWKH
DFFHVVSRLQWIURPDGLIIHUHQW,3VXEQHW)RUH[DPSOH
Username: admin
Password:
Enterprise AP#
Enterprise AP#configure
Enterprise AP(config)#interface ethernet
Enterprise AP(if-ethernet)#ip address 10.1.0.1 255.255.255.0 10.1.0.254
Enterprise AP(if-ethernet)#
,I\RXUFRUSRUDWHQHWZRUNLVFRQQHFWHGWRDQRWKHUQHWZRUNRXWVLGH\RXURIILFHRUWR
WKH,QWHUQHW\RXQHHGWRDSSO\IRUDUHJLVWHUHG,3DGGUHVV+RZHYHULI\RXDUH
DWWDFKHGWRDQLVRODWHGQHWZRUNWKHQ\RXFDQXVHDQ\,3DGGUHVVWKDWPDWFKHVWKH
QHWZRUNVHJPHQWWRZKLFK\RXDUHDWWDFKHG
$IWHU\RXFRQILJXUHWKHDFFHVVSRLQWZLWKDQ,3DGGUHVV\RXFDQRSHQD7HOQHW
VHVVLRQE\SHUIRUPLQJWKHVHVWHSV
)URPWKHUHPRWHKRVWHQWHUWKH7HOQHWFRPPDQGDQGWKH,3DGGUHVVRIWKH
GHYLFH\RXZDQWWRDFFHVV
$WWKHSURPSWHQWHUWKHXVHUQDPHDQGV\VWHPSDVVZRUG7KH&/,ZLOOGLVSOD\
WKH³(QWHUSULVH$3´SURPSWWRVKRZWKDW\RXDUHXVLQJH[HFXWLYHDFFHVVPRGH
LH([HF
(QWHUWKHQHFHVVDU\FRPPDQGVWRFRPSOHWH\RXUGHVLUHGWDVNV
:KHQILQLVKHGH[LWWKHVHVVLRQZLWKWKH³TXLW´RU³H[LW´FRPPDQG
$IWHUHQWHULQJWKH7HOQHWFRPPDQGWKHORJLQVFUHHQGLVSOD\V
&DXWLRQ<RXFDQRSHQXSWRIRXUVHVVLRQVWRWKHGHYLFHYLD7HOQHW
Entering Commands
7KLVVHFWLRQGHVFULEHVKRZWRHQWHU&/,FRPPDQGV
.H\ZRUGVDQG$UJXPHQWV
$&/,FRPPDQGLVDVHULHVRINH\ZRUGVDQGDUJXPHQWV.H\ZRUGVLGHQWLI\D
FRPPDQGDQGDUJXPHQWVVSHFLI\FRQILJXUDWLRQSDUDPHWHUV)RUH[DPSOHLQWKH
FRPPDQG³VKRZLQWHUIDFHVHWKHUQHW´VKRZDQGLQWHUIDFHVDUHNH\ZRUGVDQG
HWKHUQHWLVDQDUJXPHQWWKDWVSHFLILHVWKHLQWHUIDFHW\SH
<RXFDQHQWHUFRPPDQGVDVIROORZV
7RHQWHUDVLPSOHFRPPDQGHQWHUWKHFRPPDQGNH\ZRUG
7RHQWHUFRPPDQGVWKDWUHTXLUHSDUDPHWHUVHQWHUWKHUHTXLUHGSDUDPHWHUVDIWHU
WKHFRPPDQGNH\ZRUG)RUH[DPSOHWRVHWDSDVVZRUGIRUWKHDGPLQLVWUDWRU
HQWHU
Enterprise AP(config)#username smith
0LQLPXP$EEUHYLDWLRQ
7KH&/,ZLOODFFHSWDPLQLPXPQXPEHURIFKDUDFWHUVWKDWXQLTXHO\LGHQWLI\D
FRPPDQG)RUH[DPSOHWKHFRPPDQG³FRQILJXUH´FDQEHHQWHUHGDVFRQ,IDQ
HQWU\LVDPELJXRXVWKHV\VWHPZLOOSURPSWIRUIXUWKHULQSXW
Username: admin
Password:
Enterprise AP#
&RPPDQG&RPSOHWLRQ
,I\RXWHUPLQDWHLQSXWZLWKD7DENH\WKH&/,ZLOOSULQWWKHUHPDLQLQJFKDUDFWHUVRID
SDUWLDONH\ZRUGXSWRWKHSRLQWRIDPELJXLW\,QWKH³FRQILJXUH´H[DPSOHW\SLQJFRQ
IROORZHGE\DWDEZLOOUHVXOWLQSULQWLQJWKHFRPPDQGXSWR³FRQILJXUH´
*HWWLQJ+HOSRQ&RPPDQGV
<RXFDQGLVSOD\DEULHIGHVFULSWLRQRIWKHKHOSV\VWHPE\HQWHULQJWKHKHOS
FRPPDQG<RXFDQDOVRGLVSOD\FRPPDQGV\QWD[E\IROORZLQJDFRPPDQGZLWKWKH
³"´FKDUDFWHUWROLVWNH\ZRUGVRUSDUDPHWHUV
6KRZLQJ&RPPDQGV
,I\RXHQWHUD³"´DWWKHFRPPDQGSURPSWWKHV\VWHPZLOOGLVSOD\WKHILUVWOHYHORI
NH\ZRUGVIRUWKHFXUUHQWFRQILJXUDWLRQPRGH([HF*OREDO&RQILJXUDWLRQRU
,QWHUIDFH<RXFDQDOVRGLVSOD\DOLVWRIYDOLGNH\ZRUGVIRUDVSHFLILFFRPPDQG)RU
H[DPSOHWKHFRPPDQG³VKRZ "´GLVSOD\VDOLVWRISRVVLEOHVKRZFRPPDQGV
7KHFRPPDQG³VKRZLQWHUIDFH"´ZLOOGLVSOD\WKHIROORZLQJLQIRUPDWLRQ
Enterprise AP#show ?
APmanagement Show management AP information.
authentication Show Authentication parameters
bootfile Show bootfile name
bridge Show bridge
config System snapshot for tech support
dhcp-relay Show DHCP Relay Configuration
event-log Show event log on console
filters Show filters
hardware Show hardware version
history Display the session history
interface Show interface information
line TTY line information
link-integrity Show link integrity information
logging Show the logging buffers
radius Show radius server
rogue-ap Show Rogue ap Stations
snmp Show snmp configuration
sntp Show sntp configuration
station Show 802.11 station table
system Show system information
version Show system version
Enterprise AP#show
Enterprise AP#show interface ?
ethernet Show Ethernet interface
wireless Show wireless interface
<cr>
Enterprise AP#show interface
3DUWLDO.H\ZRUG/RRNXS
,I\RXWHUPLQDWHDSDUWLDONH\ZRUGZLWKDTXHVWLRQPDUNDOWHUQDWLYHVWKDWPDWFKWKH
LQLWLDOOHWWHUVDUHSURYLGHG5HPHPEHUQRWWROHDYHDVSDFHEHWZHHQWKHFRPPDQG
DQGTXHVWLRQPDUN)RUH[DPSOH³V"´VKRZVDOOWKHNH\ZRUGVVWDUWLQJZLWK³V´
1HJDWLQJWKH(IIHFWRI&RPPDQGV
)RUPDQ\FRQILJXUDWLRQFRPPDQGV\RXFDQHQWHUWKHSUHIL[NH\ZRUG³QR´WRFDQFHO
WKHHIIHFWRIDFRPPDQGRUUHVHWWKHFRQILJXUDWLRQWRWKHGHIDXOWYDOXH)RUH[DPSOH
WKHORJJLQJFRPPDQGZLOOORJV\VWHPPHVVDJHVWRDKRVWVHUYHU7RGLVDEOH
ORJJLQJVSHFLI\WKHQRORJJLQJFRPPDQG7KLVJXLGHGHVFULEHVWKHQHJDWLRQHIIHFW
IRUDOODSSOLFDEOHFRPPDQGV
8VLQJ&RPPDQG+LVWRU\
7KH&/,PDLQWDLQVDKLVWRU\RIFRPPDQGVWKDWKDYHEHHQHQWHUHG<RXFDQVFUROO
EDFNWKURXJKWKHKLVWRU\RIFRPPDQGVE\SUHVVLQJWKHXSDUURZNH\$Q\FRPPDQG
GLVSOD\HGLQWKHKLVWRU\OLVWFDQEHH[HFXWHGDJDLQRUILUVWPRGLILHGDQGWKHQ
H[HFXWHG
8VLQJWKHVKRZKLVWRU\FRPPDQGGLVSOD\VDORQJHUOLVWRIUHFHQWO\H[HFXWHG
FRPPDQGV
8QGHUVWDQGLQJ&RPPDQG0RGHV
7KHFRPPDQGVHWLVGLYLGHGLQWR([HFDQG&RQILJXUDWLRQFODVVHV([HFFRPPDQGV
JHQHUDOO\GLVSOD\LQIRUPDWLRQRQV\VWHPVWDWXVRUFOHDUVWDWLVWLFDOFRXQWHUV
&RQILJXUDWLRQFRPPDQGVRQWKHRWKHUKDQGPRGLI\LQWHUIDFHSDUDPHWHUVRUHQDEOH
FHUWDLQIXQFWLRQV7KHVHFODVVHVDUHIXUWKHUGLYLGHGLQWRGLIIHUHQWPRGHV$YDLODEOH
FRPPDQGVGHSHQGRQWKHVHOHFWHGPRGH<RXFDQDOZD\VHQWHUDTXHVWLRQPDUN³"´
DWWKHSURPSWWRGLVSOD\DOLVWRIWKHFRPPDQGVDYDLODEOHIRUWKHFXUUHQWPRGH7KH
FRPPDQGFODVVHVDQGDVVRFLDWHGPRGHVDUHGLVSOD\HGLQWKHIROORZLQJWDEOH
Enterprise AP#show s?
snmp sntp station system
Enterprise AP#show s
([HF&RPPDQGV
:KHQ\RXRSHQDQHZFRQVROHVHVVLRQRQDQDFFHVVSRLQWWKHV\VWHPHQWHUV([HF
FRPPDQGPRGH2QO\DOLPLWHGQXPEHURIWKHFRPPDQGVDUHDYDLODEOHLQWKLVPRGH
<RXFDQDFFHVVDOORWKHUFRPPDQGVRQO\IURPWKHFRQILJXUDWLRQPRGH7RDFFHVV
([HFPRGHRSHQDQHZFRQVROHVHVVLRQZLWKWKHXVHUQDPH³DGPLQ´7KH
FRPPDQGSURPSWGLVSOD\VDV³(QWHUSULVH$3´IRU([HFPRGH
&RQILJXUDWLRQ&RPPDQGV
&RQILJXUDWLRQFRPPDQGVDUHXVHGWRPRGLI\DFFHVVSRLQWVHWWLQJV7KHVH
FRPPDQGVPRGLI\WKHUXQQLQJFRQILJXUDWLRQDQGDUHVDYHGLQPHPRU\
7KHFRQILJXUDWLRQFRPPDQGVDUHRUJDQL]HGLQWRIRXUGLIIHUHQWPRGHV
*OREDO&RQILJXUDWLRQ*&7KHVHFRPPDQGVPRGLI\WKHV\VWHPOHYHO
FRQILJXUDWLRQDQGLQFOXGHFRPPDQGVVXFKDVXVHUQDPHDQGSDVVZRUG
,QWHUIDFH(WKHUQHW&RQILJXUDWLRQ,&(7KHVHFRPPDQGVPRGLI\WKH(WKHUQHW
SRUWFRQILJXUDWLRQDQGLQFOXGHFRPPDQGVXFKDVGQVDQGLS
,QWHUIDFH:LUHOHVV&RQILJXUDWLRQ,&:7KHVHFRPPDQGVPRGLI\WKHZLUHOHVV
SRUWFRQILJXUDWLRQRIJOREDOSDUDPHWHUVIRUWKHUDGLRDQGLQFOXGHFRPPDQGVVXFK
DVFKDQQHODQGWUDQVPLWSRZHU
,QWHUIDFH:LUHOHVV9LUWXDO$FFHVV3RLQW&RQILJXUDWLRQ,&:9$37KHVH
FRPPDQGVPRGLI\WKHZLUHOHVVSRUWFRQILJXUDWLRQIRUHDFK9$3DQGLQFOXGH
FRPPDQGVVXFKDVVVLGDQGDXWKHQWLFDWLRQ
7RHQWHUWKH*OREDO&RQILJXUDWLRQPRGHHQWHUWKHFRPPDQGFRQILJXUHLQ([HF
PRGH7KHV\VWHPSURPSWZLOOFKDQJHWR³(QWHUSULVH$3FRQILJ´ZKLFKJLYHV\RX
DFFHVVSULYLOHJHWRDOO*OREDO&RQILJXUDWLRQFRPPDQGV
7RHQWHU,QWHUIDFHPRGH\RXPXVWHQWHUWKH³LQWHUIDFH HWKHUQHW´RU³LQWHUIDFH
ZLUHOHVVD´RU³LQWHUIDFHZLUHOHVVJ´FRPPDQGZKLOHLQ*OREDO&RQILJXUDWLRQ
PRGH7KHV\VWHPSURPSWZLOOFKDQJHWR³(QWHUSULVH$3LIHWKHUQHW´RU(QWHUSULVH
$3LIZLUHOHVV´LQGLFDWLQJWKDW\RXKDYHDFFHVVSULYLOHJHVWRWKHDVVRFLDWHG
FRPPDQGV<RXFDQXVHWKHHQGFRPPDQGWRUHWXUQWRWKH([HFPRGH
Username: admin
Password: [system login password]
Enterprise AP#
Enterprise AP#configure
Enterprise AP(config)#
Enterprise AP(config)#interface ethernet
Enterprise AP(if-ethernet)#
&RPPDQG/LQH3URFHVVLQJ
&RPPDQGVDUHQRWFDVHVHQVLWLYH<RXFDQDEEUHYLDWHFRPPDQGVDQGSDUDPHWHUV
DVORQJDVWKH\FRQWDLQHQRXJKOHWWHUVWRGLIIHUHQWLDWHWKHPIURPDQ\RWKHUFXUUHQWO\
DYDLODEOHFRPPDQGVRUSDUDPHWHUV<RXFDQXVHWKH7DENH\WRFRPSOHWHSDUWLDO
FRPPDQGVRUHQWHUDSDUWLDOFRPPDQGIROORZHGE\WKH³"´FKDUDFWHUWRGLVSOD\DOLVW
RISRVVLEOHPDWFKHV<RXFDQDOVRXVHWKHIROORZLQJHGLWLQJNH\VWURNHVIRU
FRPPDQGOLQHSURFHVVLQJ
Command Groups
7KHV\VWHPFRPPDQGVFDQEHEURNHQGRZQLQWRWKHIXQFWLRQDOJURXSVVKRZQEHORZ
7DEOH .H\VWURNH&RPPDQGV
.H\VWURNH )XQFWLRQ
7DEOH &RPPDQG*URXSV
&RPPDQG*URXS 'HVFULSWLRQ 3DJH
7KHDFFHVVPRGHVKRZQLQWKHIROORZLQJWDEOHVLVLQGLFDWHGE\WKHVHDEEUHYLDWLRQV
([HF([HFXWLYH0RGH*&*OREDO&RQILJXUDWLRQ,&(,QWHUIDFH(WKHUQHW
&RQILJXUDWLRQ,&:,QWHUIDFH:LUHOHVV&RQILJXUDWLRQDQG,&:9$3
,QWHUIDFH:LUHOHVV9$3&RQILJXUDWLRQ
General Commands
7DEOH *HQHUDO&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
7DEOH &RPPDQG*URXSV
&RPPDQG*URXS 'HVFULSWLRQ 3DJH
FRQILJXUH
7KLVFRPPDQGDFWLYDWHV*OREDO&RQILJXUDWLRQPRGH<RXPXVWHQWHUWKLVPRGHWR
PRGLI\PRVWRIWKHVHWWLQJVRQWKHDFFHVVSRLQW<RXPXVWDOVRHQWHU*OREDO
&RQILJXUDWLRQPRGHSULRUWRHQDEOLQJWKHFRQWH[WPRGHVIRU,QWHUIDFH&RQILJXUDWLRQ
6HH³8VLQJWKH&RPPDQG/LQH,QWHUIDFH´RQSDJH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
([DPSOH
5HODWHG&RPPDQGV
HQG
HQG
7KLVFRPPDQGUHWXUQVWRWKHSUHYLRXVFRQILJXUDWLRQPRGH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ,QWHUIDFH&RQILJXUDWLRQ
([DPSOH
7KLVH[DPSOHVKRZVKRZWRUHWXUQWRWKH&RQILJXUDWLRQPRGHIURPWKH,QWHUIDFH
&RQILJXUDWLRQPRGH
H[LW
7KLVFRPPDQGUHWXUQVWRWKH([HFPRGHRUH[LWVWKHFRQILJXUDWLRQSURJUDP
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
$Q\
Enterprise AP#configure
Enterprise AP(config)#
Enterprise AP(if-ethernet)#end
Enterprise AP(config)#
([DPSOH
7KLVH[DPSOHVKRZVKRZWRUHWXUQWRWKH([HFPRGHIURPWKH,QWHUIDFH
&RQILJXUDWLRQPRGHDQGWKHQTXLWWKH&/,VHVVLRQ
SLQJ
7KLVFRPPDQGVHQGV,&03HFKRUHTXHVWSDFNHWVWRDQRWKHUQRGHRQWKHQHWZRUN
6\QWD[
SLQJKRVWBQDPH_LSBDGGUHVV!
KRVWBQDPH$OLDVRIWKHKRVW
LSBDGGUHVV,3DGGUHVVRIWKHKRVW
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
&RPPDQG8VDJH
8VHWKHSLQJFRPPDQGWRVHHLIDQRWKHUVLWHRQWKHQHWZRUNFDQEH
UHDFKHG
7KHIROORZLQJDUHVRPHUHVXOWVRIWKHSLQJFRPPDQG
1RUPDOUHVSRQVH7KHQRUPDOUHVSRQVHRFFXUVLQRQHWRWHQVHFRQGV
GHSHQGLQJRQQHWZRUNWUDIILF
'HVWLQDWLRQGRHVQRWUHVSRQG,IWKHKRVWGRHVQRWUHVSRQGD³WLPHRXW´
DSSHDUVLQWHQVHFRQGV
'HVWLQDWLRQXQUHDFKDEOH7KHJDWHZD\IRUWKLVGHVWLQDWLRQLQGLFDWHVWKDW
WKHGHVWLQDWLRQLVXQUHDFKDEOH
1HWZRUNRUKRVWXQUHDFKDEOH7KHJDWHZD\IRXQGQRFRUUHVSRQGLQJ
HQWU\LQWKHURXWHWDEOH
3UHVV(VF!WRVWRSSLQJLQJ
([DPSOH
Enterprise AP(if-ethernet)#exit
Enterprise AP#exit
CLI session with the Access Point is now closed
Username:
Enterprise AP#ping 10.1.0.19
192.168.1.19 is alive
Enterprise AP#
UHVHW
7KLVFRPPDQGUHVWDUWVWKHV\VWHPRUUHVWRUHVWKHIDFWRU\GHIDXOWVHWWLQJV
6\QWD[
UHVHWERDUG_FRQILJXUDWLRQ!
ERDUG5HERRWVWKHV\VWHP
FRQILJXUDWLRQ5HVHWVWKHFRQILJXUDWLRQVHWWLQJVWRWKHIDFWRU\GHIDXOWV
DQGWKHQUHERRWVWKHV\VWHP
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
&RPPDQG8VDJH
:KHQWKHV\VWHPLVUHVWDUWHGLWZLOODOZD\VUXQWKH3RZHU2Q6HOI7HVW
([DPSOH
7KLVH[DPSOHVKRZVKRZWRUHVHWWKHV\VWHP
VKRZKLVWRU\
7KLVFRPPDQGVKRZVWKHFRQWHQWVRIWKHFRPPDQGKLVWRU\EXIIHU
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
&RPPDQG8VDJH
7KHKLVWRU\EXIIHUVL]HLVIL[HGDWFRPPDQGV
8VHWKHXSRUGRZQDUURZNH\VWRVFUROOWKURXJKWKHFRPPDQGVLQWKH
KLVWRU\EXIIHU
([DPSOH
,QWKLVH[DPSOHWKHVKRZKLVWRU\FRPPDQGOLVWVWKHFRQWHQWVRIWKHFRPPDQG
KLVWRU\EXIIHU
Enterprise AP#reset board
Reboot system now? <y/n>: y
Enterprise AP#show history
config
exit
show history
Enterprise AP#
VKRZOLQH
7KLVFRPPDQGGLVSOD\VWKHFRQVROHSRUW¶VFRQILJXUDWLRQVHWWLQJV
&RPPDQG0RGH
([HF
([DPSOH
7KHFRQVROHSRUWVHWWLQJVDUHIL[HGDWWKHYDOXHVVKRZQEHORZ
System Management Commands
7KHVHFRPPDQGVDUHXVHGWRFRQILJXUHWKHXVHUQDPHSDVVZRUGV\VWHPORJV
EURZVHUPDQDJHPHQWRSWLRQVFORFNVHWWLQJVDQGDYDULHW\RIRWKHUV\VWHP
LQIRUPDWLRQ
Enterprise AP#show line
Console Line Information
======================================================
databits : 8
parity : none
speed : 9600
stop bits : 1
======================================================
Enterprise AP#
7DEOH 6\VWHP0DQDJHPHQW&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
0DQDJHPHQW$FFHVV
2
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
XVHUQDPH
7KLVFRPPDQGFRQILJXUHVWKHXVHUQDPHIRUPDQDJHPHQWDFFHVV
6\QWD[
XVHUQDPHQDPH!
QDPH7KHQDPHRIWKHXVHU
/HQJWKFKDUDFWHUVFDVHVHQVLWLYH
'HIDXOW6HWWLQJ
DGPLQ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
SDVVZRUG
$IWHULQLWLDOO\ORJJLQJRQWRWKHV\VWHP\RXVKRXOGVHWWKHSDVVZRUG5HPHPEHUWR
UHFRUGLWLQDVDIHSODFH8VHWKHQRIRUPWRUHVHWWKHGHIDXOWSDVVZRUG
6\QWD[
SDVVZRUGSDVVZRUG!
QRSDVVZRUG
SDVVZRUG3DVVZRUGIRUPDQDJHPHQWDFFHVV
/HQJWKFKDUDFWHUVFDVHVHQVLWLYH
'HIDXOW6HWWLQJ
VPFDGPLQ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Enterprise AP(config)#system name AP
Enterprise AP(config)#
Enterprise AP(config)#username bob
Enterprise AP(config)#
Enterprise AP(config)#password
Enterprise AP(config)#
3
LSVVKVHUYHUHQDEOH
7KLVFRPPDQGHQDEOHVWKH6HFXUH6KHOOVHUYHU8VHWKHQRIRUPWRGLVDEOHWKH
VHUYHU
6\QWD[
LSVVKVHUYHUHQDEOH
QRLSVVKVHUYHU
'HIDXOW6HWWLQJ
,QWHUIDFHHQDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
&RPPDQG8VDJH
7KHDFFHVVSRLQWVXSSRUWV6HFXUH6KHOOYHUVLRQRQO\
$IWHUERRWXSWKH66+VHUYHUQHHGVDERXWWZRPLQXWHVWRJHQHUDWHKRVW
HQFU\SWLRQNH\V7KH66+VHUYHULVGLVDEOHGZKLOHWKHNH\VDUHEHLQJ
JHQHUDWHG7KHVKRZV\VWHPFRPPDQGGLVSOD\VWKHVWDWXVRIWKH66+
VHUYHU
([DPSOH
LSVVKVHUYHUSRUW
7KLVFRPPDQGVHWVWKH6HFXUH6KHOOVHUYHUSRUW8VHWKHQRIRUPWRGLVDEOHWKH
VHUYHU
6\QWD[
LSVVKVHUYHUSRUWSRUWQXPEHU!
SRUWQXPEHU7KH8'3SRUWXVHGE\WKH66+VHUYHU5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
([DPSOH
Enterprise AP(if-ethernet)#ip ssh-server enable
Enterprise AP(if-ethernet)#
Enterprise AP(if-ethernet)#ip ssh-server port 1124
Enterprise AP(if-ethernet)#
4
LSWHOQHWVHUYHUHQDEOH
7KLVFRPPDQGHQDEOHVWKH7HOQHWVHUYHU8VHWKHQRIRUPWRGLVDEOHWKHVHUYHU
6\QWD[
LSWHOQHWVHUYHUHQDEOH
QRLSWHOQHWVHUYHU
'HIDXOW6HWWLQJ
,QWHUIDFHHQDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
([DPSOH
LSKWWSSRUW
7KLVFRPPDQGVSHFLILHVWKH7&3SRUWQXPEHUXVHGE\WKHZHEEURZVHULQWHUIDFH
8VHWKHQRIRUPWRXVHWKHGHIDXOWSRUW
6\QWD[
LSKWWSSRUWSRUWQXPEHU!
QRLSKWWSSRUW
SRUWQXPEHU7KH7&3SRUWWREHXVHGE\WKHEURZVHULQWHUIDFH
5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
LSKWWSVHUYHU
Enterprise AP(if-ethernet)#ip telnet-server enable
Enterprise AP(if-ethernet)#
Enterprise AP(config)#ip http port 769
Enterprise AP(config)#
5
LSKWWSVHUYHU
7KLVFRPPDQGDOORZVWKLVGHYLFHWREHPRQLWRUHGRUFRQILJXUHGIURPDEURZVHU8VH
WKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ
6\QWD[
LSKWWSVHUYHU
QRLSKWWSVHUYHU
'HIDXOW6HWWLQJ
(QDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
LSKWWSSRUW
LSKWWSVHVVLRQWLPHRXW
7KLVFRPPDQGVHWVWKHWLPHOLPLWIRUDQLGOHZHELQWHUIDFHVHVVLRQ
6\QWD[
LSKWWSVHVVLRQWLPHRXWWLPH!
WLPH6HWVWKHZHELQWHUIDFHVHVVLRQWLPHRXW
5DQJHVHFRQGVPHDQVGLVDEOHG
'HIDXOW6HWWLQJ
VHFRQGV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
LSKWWSSRUW
Enterprise AP(config)#ip http server
Enterprise AP(config)#
Enterprise AP(config)#ip http session-timeout 0
Enterprise AP(config)#
6
LSKWWSVSRUW
8VHWKLVFRPPDQGWRVSHFLI\WKH8'3SRUWQXPEHUXVHGIRU+773666/FRQQHFWLRQ
WRWKHDFFHVVSRLQW¶V:HELQWHUIDFH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOWSRUW
6\QWD[
LSKWWSVSRUWSRUWBQXPEHU!
QRLSKWWSVSRUW
SRUWBQXPEHU±7KH8'3SRUWXVHGIRU+773666/
5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
<RXFDQQRWFRQILJXUHWKH+773DQG+7736VHUYHUVWRXVHWKHVDPHSRUW
7RDYRLGXVLQJFRPPRQUHVHUYHG7&3SRUWQXPEHUVEHORZWKH
FRQILJXUDEOHUDQJHLVUHVWULFWHGWRDQGEHWZHHQDQG
,I\RXFKDQJHWKH+7736SRUWQXPEHUFOLHQWVDWWHPSWLQJWRFRQQHFWWRWKH
+7736VHUYHUPXVWVSHFLI\WKHSRUWQXPEHULQWKH85/LQWKLVIRUPDW
KWWSVGHYLFHSRUWBQXPEHU
([DPSOH
LSKWWSVVHUYHU
8VHWKLVFRPPDQGWRHQDEOHWKHVHFXUHK\SHUWH[WWUDQVIHUSURWRFRO+7736RYHU
WKH6HFXUH6RFNHW/D\HU66/SURYLGLQJVHFXUHDFFHVVLHDQHQFU\SWHG
FRQQHFWLRQWRWKHDFFHVVSRLQW¶V:HELQWHUIDFH8VHWKHQRIRUPWRGLVDEOHWKLV
IXQFWLRQ
Enterprise AP(config)#ip https port 1234
Enterprise AP(config)#
17
6\QWD[
LSKWWSVVHUYHU
QRLSKWWSVVHUYHU
'HIDXOW6HWWLQJ
(QDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
%RWK+773DQG+7736VHUYLFHFDQEHHQDEOHGLQGHSHQGHQWO\
,I\RXHQDEOH+7736\RXPXVWLQGLFDWHWKLVLQWKH85/
KWWSVGHYLFHSRUWBQXPEHU@
:KHQ\RXVWDUW+7736WKHFRQQHFWLRQLVHVWDEOLVKHGLQWKLVZD\
7KHFOLHQWDXWKHQWLFDWHVWKHVHUYHUXVLQJWKHVHUYHU¶VGLJLWDOFHUWLILFDWH
7KHFOLHQWDQGVHUYHUQHJRWLDWHDVHWRIVHFXULW\SURWRFROVWRXVHIRUWKH
FRQQHFWLRQ
7KHFOLHQWDQGVHUYHUJHQHUDWHVHVVLRQNH\VIRUHQFU\SWLQJDQGGHFU\SWLQJ
GDWD
7KHFOLHQWDQGVHUYHUHVWDEOLVKDVHFXUHHQFU\SWHGFRQQHFWLRQ
$SDGORFNLFRQVKRXOGDSSHDULQWKHVWDWXVEDUIRU,QWHUQHW([SORUHU[
([DPSOH
ZHEUHGLUHFW
8VHWKLVFRPPDQGWRHQDEOHZHEEDVHGDXWKHQWLFDWLRQRIFOLHQWV8VHWKHQRIRUP
WRGLVDEOHWKLVIXQFWLRQ
6\QWD[
>QR@ZHEUHGLUHFW
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHZHEUHGLUHFWIHDWXUHLVXVHGWRVXSSRUWELOOLQJIRUDSXEOLFDFFHVV
ZLUHOHVVQHWZRUN$IWHUVXFFHVVIXODVVRFLDWLRQWRDQDFFHVVSRLQWDFOLHQWLV
³UHGLUHFWHG´WRDQDFFHVVSRLQWORJLQZHESDJHDVVRRQDV,QWHUQHWDFFHVVLV
Enterprise AP(config)#ip https server
Enterprise AP(config)#
18
DWWHPSWHG7KHFOLHQWLVWKHQDXWKHQWLFDWHGE\HQWHULQJDXVHUQDPHDQG
SDVVZRUGRQWKHZHESDJH7KLVSURFHVVDOORZVFRQWUROOHGDFFHVVIRUFOLHQWV
ZLWKRXWUHTXLULQJ;RU0$&DXWKHQWLFDWLRQ
:HEUHGLUHFWUHTXLUHVD5$',86VHUYHURQWKHZLUHGQHWZRUNZLWKFRQILJXUHG
XVHUQDPHVDQGSDVVZRUGVIRUDXWKHQWLFDWLRQ7KH5$',86VHUYHUGHWDLOV
PXVWDOVREHFRQILJXUHGRQWKHDFFHVVSRLQW6HH³VKRZERRWILOH´RQ
SDJH
8VHWKHVKRZV\VWHPFRPPDQGWRGLVSOD\WKHFXUUHQWZHEUHGLUHFWVWDWXV
([DPSOH
$3PJPW,3
7KLVFRPPDQGVSHFLILHVWKHFOLHQW,3DGGUHVVHVWKDWDUHDOORZHGPDQDJHPHQW
DFFHVVWRWKHDFFHVVSRLQWWKURXJKYDULRXVSURWRFROV
&DXWLRQ6HFXUH:HE+7736FRQQHFWLRQVDUHQRWDIIHFWHGE\WKH8,0DQDJHPHQWRU
,30DQDJHPHQWVHWWLQJV
6\QWD[
$3PJPW,3PXOWLSOH,3BDGGUHVVVXEQHWBPDVN_VLQJOH,3BDGGUHVV_DQ\!
PXOWLSOH$GGV,3DGGUHVVHVZLWKLQDVSHFLILDEOHUDQJHWRWKH6103ZHE
DQG7HOQHWJURXSV
VLQJOH$GGVDQ,3DGGUHVVWRWKH6103ZHEDQG7HOQHWJURXSV
DQ\$OORZVDQ\,3DGGUHVVDFFHVVWKURXJK6103ZHEDQG7HOQHW
JURXSV
,3BDGGUHVV$GGV,3DGGUHVVHVWRWKH6103ZHEDQG7HOQHWJURXSV
VXEQHWBPDVN6SHFLILHVDUDQJHRI,3DGGUHVVHVDOORZHGPDQDJHPHQW
DFFHVV
'HIDXOW6HWWLQJ
$OODGGUHVVHV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
,IDQ\RQHWULHVWRDFFHVVDPDQDJHPHQWLQWHUIDFHRQWKHDFFHVVSRLQWIURP
DQLQYDOLGDGGUHVVWKHXQLWZLOOUHMHFWWKHFRQQHFWLRQHQWHUDQHYHQW
PHVVDJHLQWKHV\VWHPORJDQGVHQGDWUDSPHVVDJHWRWKHWUDSPDQDJHU
,3DGGUHVVFDQEHFRQILJXUHGIRU6103ZHEDQG7HOQHWDFFHVV
UHVSHFWLYHO\(DFKRIWKHVHJURXSVFDQLQFOXGHXSWRILYHGLIIHUHQWVHWVRI
DGGUHVVHVHLWKHULQGLYLGXDODGGUHVVHVRUDGGUHVVUDQJHV
:KHQHQWHULQJDGGUHVVHVIRUWKHVDPHJURXSLH6103ZHERU7HOQHW
Enterprise AP(config)#web-redirect
Enterprise AP(config)#
19
WKHDFFHVVSRLQWZLOOQRWDFFHSWRYHUODSSLQJDGGUHVVUDQJHV:KHQHQWHULQJ
DGGUHVVHVIRUGLIIHUHQWJURXSVWKHDFFHVVSRLQWZLOODFFHSWRYHUODSSLQJ
DGGUHVVUDQJHV
<RXFDQQRWGHOHWHDQLQGLYLGXDODGGUHVVIURPDVSHFLILHGUDQJH<RXPXVW
GHOHWHWKHHQWLUHUDQJHDQGUHHQWHUWKHDGGUHVVHV
<RXFDQGHOHWHDQDGGUHVVUDQJHMXVWE\VSHFLI\LQJWKHVWDUWDGGUHVVRUE\
VSHFLI\LQJERWKWKHVWDUWDGGUHVVDQGHQGDGGUHVV
([DPSOH
7KLVH[DPSOHUHVWULFWVPDQDJHPHQWDFFHVVWRWKHLQGLFDWHGDGGUHVVHV
$3PJPW8,
7KLVFRPPDQGHQDEOHVDQGGLVDEOHVPDQDJHPHQWDFFHVVWRWKHDFFHVVSRLQW
WKURXJK61037HOQHWDQGZHELQWHUIDFHV
&DXWLRQ6HFXUH:HE+7736FRQQHFWLRQVDUHQRWDIIHFWHGE\WKH8,0DQDJHPHQWRU
,30DQDJHPHQWVHWWLQJV
6\QWD[
$3PJPW8,>6103_7H OQ HW _:HE@HQDEOH_GLVDEOH!
61036SHFLILHV6103PDQDJHPHQWDFFHVV
7HOQHW6SHFLILHV7HOQHWPDQDJHPHQWDFFHVV
:HE6SHFLILHVZHEEDVHGPDQDJHPHQWDFFHVV
HQDEOHGLVDEOH(QDEOHVRUGLVDEOHVWKHVHOHFWHGPDQDJHPHQWDFFHVV
PHWKRG
'HIDXOW6HWWLQJ
$OOHQDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
7KLVH[DPSOHUHVWULFWVPDQDJHPHQWDFFHVVWRWKHLQGLFDWHGDGGUHVVHV
VKRZDSPDQDJHPHQW
7KLVFRPPDQGVKRZVWKH$3PDQDJHPHQWFRQILJXUDWLRQLQFOXGLQJWKH,3
DGGUHVVHVRIPDQDJHPHQWVWDWLRQVDOORZHGWRDFFHVVWKHDFFHVVSRLQWDVZHOODV
WKHLQWHUIDFHSURWRFROVZKLFKDUHRSHQWRPDQDJHPHQWDFFHVV
Enterprise AP(config)#apmgmtip multiple 192.168.1.50 255.255.255.0
Enterprise AP(config)#
Enterprise AP(config)#apmgmtui SNMP enable
Enterprise AP(config)#
0
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show apmanagement
Management AP Information
=================================
AP Management IP Mode: Any IP
Telnet UI: Enable
WEB UI : Enable
SNMP UI : Enable
==================================
Enterprise AP#
1
VKRZV\VWHP
7KLVFRPPDQGGLVSOD\VEDVLFV\VWHPFRQILJXUDWLRQVHWWLQJV
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show system
System Information
==========================================================
Serial Number : A123456789
System Up time : 0 days, 4 hours, 33 minutes, 29 seconds
System Name : Enterprise Wireless AP
System Location :
System Contact :
System Country Code : US - UNITED STATES
MAC Address : 00-30-F1-F0-9A-9C
IP Address : 192.168.1.1
Subnet Mask : 255.255.255.0
Default Gateway : 0.0.0.0
VLAN State : DISABLED
Management VLAN ID(AP): 1
IAPP State : ENABLED
DHCP Client : ENABLED
HTTP Server : ENABLED
HTTP Server Port : 80
HTTPS Server : ENABLED
HTTPS Server Port : 443
Slot Status : Dual band(a/g)
Boot Rom Version : v3.0.3
Software Version : v4.3.1.9
SSH Server : ENABLED
SSH Server Port : 22
Telnet Server : ENABLED
WEB Redirect : DISABLED
DHCP Relay : DISABLED
Proxy ARP : DISABLED
==========================================================
Enterprise AP#
2
VKRZYHUVLRQ
7KLVFRPPDQGGLVSOD\VWKHVRIWZDUHYHUVLRQIRUWKHV\VWHP
&RPPDQG0RGH
([HF
([DPSOH
VKRZFRQILJ
7KLVFRPPDQGGLVSOD\VGHWDLOHGFRQILJXUDWLRQLQIRUPDWLRQIRUWKHV\VWHP
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show version
Version Information
=========================================
Version: v4.3.2.2
Date : Dec 20 2005, 18:38:12
=========================================
Enterprise AP#
Enterprise AP#show config
Authentication Information
===========================================================
MAC Authentication Server : DISABLED
MAC Auth Session Timeout Value : 0 min
802.1x supplicant : DISABLED
802.1x supplicant user : EMPTY
802.1x supplicant password : EMPTY
Address Filtering : ALLOWED
System Default : ALLOW addresses not found in filter table.
Filter Table
-----------------------------------------------------------
No Filter Entries.
Bootfile Information
===================================
Bootfile : ec-img.bin
===================================
Protocol Filter Information
===========================================================
Local Bridge :DISABLED
AP Management :ENABLED
Ethernet Type Filter :DISABLED
Enabled Protocol Filters
-----------------------------------------------------------
No protocol filters are enabled
===========================================================
3
Hardware Version Information
===========================================
Hardware version R01A
===========================================
Ethernet Interface Information
========================================
IP Address : 192.168.0.151
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.0.1
Primary DNS : 210.200.211.225
Secondary DNS : 210.200.211.193
Speed-duplex : 100Base-TX Full Duplex
Admin status : Up
Operational status : Up
========================================
Wireless Interface 802.11a Information
===========================================================
----------------Identification-----------------------------
Description : Enterprise 802.11a Access Point
SSID : VAP_TEST_11A 0
Channel : 0 (AUTO)
Status : Disable
----------------802.11 Parameters--------------------------
Transmit Power : 100% (5 dBm)
Data Rate : 54Mbps
Fragmentation Threshold : 2346 bytes
RTS Threshold : 2347 bytes
Beacon Interval : 100 TUs
DTIM Interval : 1 beacon
Maximum Association : 64 stations
Native VLAN ID : 1
----------------Security-----------------------------------
Closed System : DISABLED
Multicast cipher : WEP
Unicast cipher : TKIP and AES
WPA clients : REQUIRED
WPA Key Mgmt Mode : PRE SHARED KEY
WPA PSK Key Type : ALPHANUMERIC
Encryption : DISABLED
Default Transmit Key : 1
Static Keys :
Key 1: EMPTY Key 2: EMPTY Key 3: EMPTY Key 4: EMPTY
Key Length :
Key 1: ZERO Key 2: ZERO Key 3: ZERO Key 4: ZERO
Authentication Type : OPEN
Rogue AP Detection : Disabled
Rogue AP Scan Interval : 720 minutes
Rogue AP Scan Duration : 350 milliseconds
===========================================================
Console Line Information
===========================================================
databits : 8
parity : none
speed : 9600
stop bits : 1
===========================================================
4
Logging Information
=====================================================
Syslog State : Disabled
Logging Console State : Disabled
Logging Level : Informational
Logging Facility Type : 16
Servers
1: 0.0.0.0 , UDP Port: 514, State: Disabled
2: 0.0.0.0 , UDP Port: 514, State: Disabled
3: 0.0.0.0 , UDP Port: 514, State: Disabled
4: 0.0.0.0 , UDP Port: 514, State: Disabled
======================================================
Radius Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Radius Secondary Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
SNMP Information
==============================================
Service State : Disable
Community (ro) : ********
Community (rw) : ********
Location :
Contact : Contact
EngineId :80:00:07:e5:80:00:00:29:f6:00:00:00:0c
EngineBoots:2
Trap Destinations:
1: 0.0.0.0, Community: *****, State: Disabled
2: 0.0.0.0, Community: *****, State: Disabled
3: 0.0.0.0, Community: *****, State: Disabled
4: 0.0.0.0, Community: *****, State: Disabled
5
dot11InterfaceAGFail Enabled dot11InterfaceBFail Enabled
dot11StationAssociation Enabled dot11StationAuthentication Enabled
dot11StationReAssociation Enabled dot11StationRequestFail Enabled
dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled
dot1xAuthSuccess Enabled dot1xMacAddrAuthFail Enabled
dot1xMacAddrAuthSuccess Enabled iappContextDataSent Enabled
iappStationRoamedFrom Enabled iappStationRoamedTo Enabled
localMacAddrAuthFail Enabled localMacAddrAuthSuccess Enabled
pppLogonFail Enabled sntpServerFail Enabled
configFileVersionChanged Enabled radiusServerChanged Enabled
systemDown Enabled systemUp Enabled
=============================================
SNTP Information
===========================================================
Service State : Disabled
SNTP (server 1) IP : 137.92.140.80
SNTP (server 2) IP : 192.43.244.18
Current Time : 00 : 14, Jan 1st, 1970
Time Zone : -5 (BOGOTA, EASTERN, INDIANA)
Daylight Saving : Disabled
===========================================================
Station Table Information
===========================================================
if-wireless A VAP [0] :
802.11a Channel : Auto
No 802.11a Channel Stations.
.
.
.
if-wireless G VAP [0] :
802.11g Channel : Auto
No 802.11g Channel Stations.
.
.
.
System Information
==============================================================
Serial Number :
System Up time : 0 days, 0 hours, 16 minutes, 51 seconds
System Name : Enterprise Wireless AP
System Location :
System Contact : Contact
System Country Code : 99 - NO_COUNTRY_SET
MAC Address : 00-12-CF-05-B7-84
IP Address : 192.168.0.151
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.0.1
VLAN State : DISABLED
Management VLAN ID(AP): 1
IAPP State : ENABLED
DHCP Client : ENABLED
HTTP Server : ENABLED
HTTP Server Port : 80
HTTPS Server : ENABLED
HTTPS Server Port : 443
Slot Status : Dual band(a/g)
Boot Rom Version : v3.0.7
Software Version : v4.3.2.2
6
VKRZKDUGZDUH
7KLVFRPPDQGGLVSOD\VWKHKDUGZDUHYHUVLRQRIWKHV\VWHP
&RPPDQG0RGH
([HF
([DPSOH
System Logging Commands
7KHVHFRPPDQGVDUHXVHGWRFRQILJXUHV\VWHPORJJLQJRQWKHDFFHVVSRLQW
SSH Server : ENABLED
SSH Server Port : 22
Telnet Server : ENABLED
WEB Redirect : DISABLED
DHCP Relay : DISABLED
==============================================================
Version Information
=========================================
Version: v4.3.2.2
Date : Dec 20 2005, 18:38:12
=========================================
Enterprise AP#
Enterprise AP#show hardware
Hardware Version Information
===========================================
Hardware version R01
===========================================
Enterprise AP#
7DEOH 6\VWHP/RJJLQJ&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
27
ORJJLQJRQ
7KLVFRPPDQGFRQWUROVORJJLQJRIHUURUPHVVDJHVLHVHQGLQJGHEXJRUHUURU
PHVVDJHVWRPHPRU\7KHQRIRUPGLVDEOHVWKHORJJLQJSURFHVV
6\QWD[
>QR@ORJJLQJRQ
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHORJJLQJSURFHVVFRQWUROVHUURUPHVVDJHVVDYHGWRPHPRU\<RXFDQXVH
WKHORJJLQJOHYHOFRPPDQGWRFRQWUROWKHW\SHRIHUURUPHVVDJHVWKDWDUH
VWRUHGLQPHPRU\
([DPSOH
ORJJLQJKRVW
7KLVFRPPDQGVSHFLILHVV\VORJVHUYHUVKRVWWKDWZLOOUHFHLYHORJJLQJPHVVDJHV8VH
WKHQRIRUPWRUHPRYHV\VORJVHUYHUKRVW
6\QWD[
ORJJLQJKRVW___!KRVWBQDPH_KRVWBLSBDGGUHVV!>XGSBSRUW@
QRORJJLQJKRVW___!
)LUVWV\VORJVHUYHU
6HFRQGV\VORJVHUYHU
7KLUGV\VORJVHUYHU
)RXUWKV\VORJVHUYHU
KRVWBQDPH7KHQDPHRIDV\VORJVHUYHU5DQJHFKDUDFWHUV
KRVWBLSBDGGUHVV7KH,3DGGUHVVRIDV\VORJVHUYHU
XGSBSRUW7KH8'3SRUWXVHGE\WKHV\VORJVHUYHU
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
Enterprise AP(config)#logging on
Enterprise AP(config)#
28
([DPSOH
ORJJLQJFRQVROH
7KLVFRPPDQGLQLWLDWHVORJJLQJRIHUURUPHVVDJHVWRWKHFRQVROH8VHWKHQRIRUP
WRGLVDEOHORJJLQJWRWKHFRQVROH
6\QWD[
ORJJLQJFRQVROH
QRORJJLQJFRQVROH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
ORJJLQJOHYHO
7KLVFRPPDQGVHWVWKHPLQLPXPVHYHULW\OHYHOIRUHYHQWORJJLQJ
6\QWD[
ORJJLQJOHYHO(PHUJHQF\_$OHUW_&ULWLFDO_(UURU_:DUQLQJ_1RWLFH_
,QIRUPDWLRQDO_'HEXJ!
'HIDXOW6HWWLQJ
,QIRUPDWLRQDO
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
Enterprise AP(config)#logging host 1 10.1.0.3
Enterprise AP(config)#
Enterprise AP(config)#logging console
Enterprise AP(config)#
29
&RPPDQG8VDJH
0HVVDJHVVHQWLQFOXGHWKHVHOHFWHGOHYHOGRZQWR(PHUJHQF\OHYHO
([DPSOH
ORJJLQJIDFLOLW\W\SH
7KLVFRPPDQGVHWVWKHIDFLOLW\W\SHIRUUHPRWHORJJLQJRIV\VORJPHVVDJHV
6\QWD[
ORJJLQJIDFLOLW\W\SHW\SH!
W\SH$QXPEHUWKDWLQGLFDWHVWKHIDFLOLW\XVHGE\WKHV\VORJVHUYHUWR
GLVSDWFKORJPHVVDJHVWRDQDSSURSULDWHVHUYLFH5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
/HYHO$UJXPHQW 'HVFULSWLRQ
Enterprise AP(config)#logging level alert
Enterprise AP(config)#
0
&RPPDQG8VDJH
7KHFRPPDQGVSHFLILHVWKHIDFLOLW\W\SHWDJVHQWLQV\VORJPHVVDJHV6HH
5)&7KLVW\SHKDVQRHIIHFWRQWKHNLQGRIPHVVDJHVUHSRUWHGE\WKH
DFFHVVSRLQW+RZHYHULWPD\EHXVHGE\WKHV\VORJVHUYHUWRVRUWPHVVDJHV
RUWRVWRUHPHVVDJHVLQWKHFRUUHVSRQGLQJGDWDEDVH
([DPSOH
ORJJLQJFOHDU
7KLVFRPPDQGFOHDUVDOOORJPHVVDJHVVWRUHGLQWKHDFFHVVSRLQW¶VPHPRU\
6\QWD[
ORJJLQJFOHDU
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
VKRZORJJLQJ
7KLVFRPPDQGGLVSOD\VWKHORJJLQJFRQILJXUDWLRQ
6\QWD[
VKRZORJJLQJ
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP(config)#logging facility 19
Enterprise AP(config)#
Enterprise AP(config)#logging clear
Enterprise AP(config)#
Enterprise AP#show logging
Logging Information
============================================
Syslog State : Enabled
Logging Console State : Enabled
Logging Level : Alert
Logging Facility Type : 16
Servers
1: 192.168.1.19, UDP Port: 514, State: Enabled
2: 0.0.0.0, UDP Port: 514, State: Disabled
3: 0.0.0.0, UDP Port: 514, State: Disabled
4: 0.0.0.0, UDP Port: 514, State: Disabled
=============================================
Enterprise AP#
1
VKRZHYHQWORJ
7KLVFRPPDQGGLVSOD\VORJPHVVDJHVVWRUHGLQWKHDFFHVVSRLQW¶VPHPRU\
6\QWD[
VKRZHYHQWORJ
&RPPDQG0RGH
([HF
([DPSOH
System Clock Commands
7KHVHFRPPDQGVDUHXVHGWRFRQILJXUH6173DQGV\VWHPFORFNVHWWLQJVRQWKH
DFFHVVSRLQW
Enterprise AP#show event-log
Mar 09 11:57:55 Information: 802.11g:11g Radio Interface Enabled
Mar 09 11:57:55 Information: 802.11g:Radio channel updated to 8
Mar 09 11:57:34 Information: 802.11g:11g Radio Interface Enabled
Mar 09 11:57:18 Information: 802.11g:11g Radio Interface Enabled
Mar 09 11:56:35 Information: 802.11a:11a Radio Interface Enabled
Mar 09 11:55:52 Information: SSH task: Set SSH server port to 22
Mar 09 11:55:52 Information: SSH task: Enable SSH server.
Mar 09 11:55:52 Information: Enable Telnet.
Mar 09 11:55:40 Information: 802.11a:11a Radio Interface Disabled
Mar 09 11:55:40 Information: 802.11a:Transmit Power set to QUARTER
Press <n> next. <p> previous. <a> abort. <y> continue to end :
Enterprise AP#configure
Enter configuration commands, one per line. End with CTRL/Z
Enterprise AP(config)#logging clear
7DEOH 6\VWHP&ORFN&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
2
VQWSVHUYHULS
7KLVFRPPDQGVHWVWKH,3DGGUHVVRIWKHVHUYHUVWRZKLFK6173WLPHUHTXHVWVDUH
LVVXHG8VHWKHWKLVFRPPDQGZLWKQRDUJXPHQWVWRFOHDUDOOWLPHVHUYHUVIURPWKH
FXUUHQWOLVW
6\QWD[
VQWSVHUYHULS_!LS!
)LUVWWLPHVHUYHU
6HFRQGWLPHVHUYHU
LS,3DGGUHVVRIDQWLPHVHUYHU173RU6173
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
:KHQ6173FOLHQWPRGHLVHQDEOHGXVLQJWKHVQWSVHUYHUHQDEOHFRPPDQG
WKHVQWSVHUYHULSFRPPDQGVSHFLILHVWKHWLPHVHUYHUVIURPZKLFKWKHDFFHVV
SRLQWSROOVIRUWLPHXSGDWHV7KHDFFHVVSRLQWZLOOSROOWKHWLPHVHUYHUVLQWKH
RUGHUVSHFLILHGXQWLODUHVSRQVHLVUHFHLYHG
([DPSOH
5HODWHG&RPPDQGV
VQWSVHUYHUHQDEOH
VKRZVQWS
VQWSVHUYHUHQDEOH
7KLVFRPPDQGHQDEOHV6173FOLHQWUHTXHVWVIRUWLPHV\QFKURQL]DWLRQZLWK173RU
6173WLPHVHUYHUVVSHFLILHGE\WKHVQWSVHUYHULSFRPPDQG8VHWKHQRIRUPWR
GLVDEOH6173FOLHQWUHTXHVWV
6\QWD[
VQWSVHUYHUHQDEOH
QRVQWSVHUYHUHQDEOH
'HIDXOW6HWWLQJ
(QDEOHG
Enterprise AP(config)#sntp-server ip 10.1.0.19
Enterprise AP#
3
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHWLPHDFTXLUHGIURPWLPHVHUYHUVLVXVHGWRUHFRUGDFFXUDWHGDWHVDQG
WLPHVIRUORJHYHQWV:LWKRXW6173WKHDFFHVVSRLQWRQO\UHFRUGVWKHWLPH
VWDUWLQJIURPWKHIDFWRU\GHIDXOWVHWDWWKHODVWERRWXSLH-DQXDU\
([DPSOH
5HODWHG&RPPDQGV
VQWSVHUYHULS
VKRZVQWS
VQWSVHUYHUGDWHWLPH
7KLVFRPPDQGVHWVWKHV\VWHPFORFN
'HIDXOW6HWWLQJ
-DQXDU\
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
7KLVH[DPSOHVHWVWKHV\VWHPFORFNWR-XQH
5HODWHG&RPPDQGV
VQWSVHUYHUHQDEOH
Enterprise AP(config)#sntp-server enable
Enterprise AP(config)#
Enterprise AP#sntp-server date-time
Enter Year<1970-2100>: 2003
Enter Month<1-12>: 6
Enter Day<1-31>: 19
Enter Hour<0-23>: 17
Enter Min<0-59>: 37
Enterprise AP#
4
VQWSVHUYHUGD\OLJKWVDYLQJ
7KLVFRPPDQGVHWVWKHVWDUWDQGHQGGDWHVIRUGD\OLJKWVDYLQJVWLPH8VHWKHQR
IRUPWRGLVDEOHGD\OLJKWVDYLQJVWLPH
6\QWD[
VQWSVHUYHUGD\OLJKWVDYLQJ
QRVQWSVHUYHUGD\OLJKWVDYLQJ
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHFRPPDQGVHWVWKHV\VWHPFORFNEDFNRQHKRXUGXULQJWKHVSHFLILHG
SHULRG
([DPSOH
7KLVVHWVGD\OLJKWVDYLQJVWLPHWREHXVHGIURP-XO\VWWR6HSWHPEHUVW
VQWSVHUYHUWLPH]RQH
7KLVFRPPDQGVHWVWKHWLPH]RQHIRUWKHDFFHVVSRLQW¶VLQWHUQDOFORFN
6\QWD[
VQWSVHUYHUWLPH]RQHKRXUV!
KRXUV1XPEHURIKRXUVEHIRUHDIWHU87&
5DQJHWRKRXUV
'HIDXOW6HWWLQJ
%2*27$($67(51,1',$1$
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
Enterprise AP(config)#sntp-server daylight-saving
Enter Daylight saving from which month<1-12>: 6
and which day<1-31>: 1
Enter Daylight saving end to which month<1-12>: 9
and which day<1-31>: 1
Enterprise AP(config)#
5
&RPPDQG8VDJH
7KLVFRPPDQGVHWVWKHORFDOWLPH]RQHUHODWLYHWRWKH&RRUGLQDWHG8QLYHUVDO
7LPH87&IRUPHUO\*UHHQZLFK0HDQ7LPHRU*07EDVHGRQWKHHDUWK¶V
SULPHPHULGLDQ]HURGHJUHHVORQJLWXGH7RGLVSOD\DWLPHFRUUHVSRQGLQJWR
\RXUORFDOWLPH\RXPXVWLQGLFDWHWKHQXPEHURIKRXUVDQGPLQXWHV\RXUWLPH
]RQHLVHDVWEHIRUHRUZHVWDIWHURI87&
([DPSOH
VKRZVQWS
7KLVFRPPDQGGLVSOD\VWKHFXUUHQWWLPHDQGFRQILJXUDWLRQVHWWLQJVIRUWKH6173
FOLHQW
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP(config)#sntp-server timezone +8
Enterprise AP(config)#
Enterprise AP#show sntp
SNTP Information
=========================================================
Service State : Enabled
SNTP (server 1) IP : 137.92.140.80
SNTP (server 2) IP : 192.43.244.18
Current Time : 08 : 04, Jun 20th, 2003
Time Zone : +8 (TAIPEI, BEIJING)
Daylight Saving : Enabled, from Jun, 1st to Sep, 1st
=========================================================
Enterprise AP#
6
DHCP Relay Commands
'\QDPLF+RVW&RQILJXUDWLRQ3URWRFRO'+&3FDQG\QDPLFDOO\DOORFDWHDQ,3
DGGUHVVDQGRWKHUFRQILJXUDWLRQLQIRUPDWLRQWRQHWZRUNFOLHQWVWKDWEURDGFDVWD
UHTXHVW7RUHFHLYHWKHEURDGFDVWUHTXHVWWKH'+&3VHUYHUZRXOGQRUPDOO\KDYHWR
EHRQWKHVDPHVXEQHWDVWKHFOLHQW+RZHYHUZKHQWKHDFFHVVSRLQW¶V'+&3UHOD\
DJHQWLVHQDEOHGUHFHLYHGFOLHQWUHTXHVWVFDQEHIRUZDUGHGGLUHFWO\E\WKHDFFHVV
SRLQWWRDNQRZQ'+&3VHUYHURQDQRWKHUVXEQHW5HVSRQVHVIURPWKH'+&3
VHUYHUDUHUHWXUQHGWRWKHDFFHVVSRLQWZKLFKWKHQEURDGFDVWVWKHPEDFNWRFOLHQWV
GKFSUHOD\HQDEOH
7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQW¶V'+&3UHOD\DJHQW8VHWKHQRIRUPWR
GLVDEOHWKHDJHQW
6\QWD[
>QR@GKFSUHOD\HQDEOH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
)RUWKH'+&3UHOD\DJHQWWRIXQFWLRQWKHSULPDU\'+&3VHUYHUPXVWEH
FRQILJXUHGXVLQJWKHGKFSUHOD\SULPDU\FRPPDQG$VHFRQGDU\'+&3
VHUYHUGRHVQRWQHHGWREHFRQILJXUHGEXWLWLVUHFRPPHQGHG
,IWKHUHLVQRUHVSRQVHIURPWKHSULPDU\'+&3VHUYHUDQGDVHFRQGDU\
VHUYHUKDVEHHQFRQILJXUHGWKHDJHQWZLOOWKHQDWWHPSWWRVHQG'+&3
UHTXHVWVWRWKHVHFRQGDU\VHUYHU
([DPSOH
7DEOH '+&35HOD\&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
Enterprise AP(config)#dhcp-relay enable
Enterprise AP(config)#
37
GKFSUHOD\
7KLVFRPPDQGFRQILJXUHVWKHSULPDU\DQGVHFRQGDU\'+&3VHUYHUDGGUHVVHV
6\QWD[
GKFSUHOD\SULPDU\_VHFRQGDU\!LSBDGGUHVV!
SULPDU\7KHSULPDU\'+&3VHUYHU
VHFRQGDU\7KHVHFRQGDU\'+&3VHUYHU
LSBDGGUHVV,3DGGUHVVRIWKHVHUYHU
'HIDXOW6HWWLQJ
3ULPDU\DQGVHFRQGDU\
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
VKRZGKFSUHOD\
7KLVFRPPDQGGLVSOD\VWKHFXUUHQW'+&3UHOD\FRQILJXUDWLRQ
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP(config)#dhcp-relay primary 192.168.1.10
Enterprise AP(config)#
Enterprise AP#show dhcp-relay
DHCP Relay : ENABLED
Primary DHCP Server : 192.168.1.10
Secondary DHCP Server : 0.0.0.0
Enterprise AP#
38
SNMP Commands
&RQWUROVDFFHVVWRWKLVDFFHVVSRLQWIURPPDQDJHPHQWVWDWLRQVXVLQJWKH6LPSOH
1HWZRUN0DQDJHPHQW3URWRFRO6103DVZHOODVWKHKRVWVWKDWZLOOUHFHLYHWUDS
PHVVDJHV
7DEOH 6103&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
39
VQPSVHUYHUFRPPXQLW\
7KLVFRPPDQGGHILQHVWKHFRPPXQLW\DFFHVVVWULQJIRUWKH6LPSOH1HWZRUN
0DQDJHPHQW3URWRFRO8VHWKHQRIRUPWRUHPRYHWKHVSHFLILHGFRPPXQLW\VWULQJ
6\QWD[
VQPSVHUYHUFRPPXQLW\VWULQJ>UR_UZ@
QRVQPSVHUYHUFRPPXQLW\VWULQJ
VWULQJ&RPPXQLW\VWULQJWKDWDFWVOLNHDSDVVZRUGDQGSHUPLWVDFFHVVWR
WKH6103SURWRFRO0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH
UR6SHFLILHVUHDGRQO\DFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHRQO\
DEOHWRUHWULHYH0,%REMHFWV
UZ6SHFLILHVUHDGZULWHDFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHDEOH
WRERWKUHWULHYHDQGPRGLI\0,%REMHFWV
'HIDXOW6HWWLQJ
SXEOLF5HDGRQO\DFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHRQO\DEOH
WRUHWULHYH0,%REMHFWV
SULYDWH5HDGZULWHDFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHDEOHWR
ERWKUHWULHYHDQGPRGLI\0,%REMHFWV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
,I\RXHQWHUDFRPPXQLW\VWULQJZLWKRXWWKHURRUUZRSWLRQWKHGHIDXOWLVUHDG
RQO\
([DPSOH
VQPSVHUYHUFRQWDFW
7KLVFRPPDQGVHWVWKHV\VWHPFRQWDFWVWULQJ8VHWKHQRIRUPWRUHPRYHWKH
V\VWHPFRQWDFWLQIRUPDWLRQ
6\QWD[
VQPSVHUYHUFRQWDFWVWULQJ
QRVQPSVHUYHUFRQWDFW
VWULQJ6WULQJWKDWGHVFULEHVWKHV\VWHPFRQWDFW0D[LPXP OHQJWK
FKDUDFWHUV
'HIDXOW6HWWLQJ
1RQH
Enterprise AP(config)#snmp-server community alpha rw
Enterprise AP(config)#
0
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
VQPSVHUYHUORFDWLRQ
VQPSVHUYHUORFDWLRQ
7KLVFRPPDQGVHWVWKHV\VWHPORFDWLRQVWULQJ8VHWKHQRIRUPWRUHPRYHWKH
ORFDWLRQVWULQJ
6\QWD[
VQPSVHUYHUORFDWLRQWH[W!
QRVQPSVHUYHUORFDWLRQ
WH[W6WULQJWKDWGHVFULEHVWKHV\VWHPORFDWLRQ
0D[LPXP OHQJWK FKDUDFWHUV
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
VQPSVHUYHUFRQWDFW
VQPSVHUYHUHQDEOHVHUYHU
7KLVFRPPDQGHQDEOHV6103PDQDJHPHQWDFFHVVDQGDOVRHQDEOHVWKLVGHYLFHWR
VHQG6103WUDSVLHQRWLILFDWLRQV8VHWKHQRIRUPWRGLVDEOH6103VHUYLFHDQG
WUDSPHVVDJHV
6\QWD[
VQPSVHUYHUHQDEOHVHUYHU
QRVQPSVHUYHUHQDEOHVHUYHU
'HIDXOW6HWWLQJ
(QDEOHG
Enterprise AP(config)#snmp-server contact Paul
Enterprise AP(config)#
Enterprise AP(config)#snmp-server location WC-19
Enterprise AP(config)#
1
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGHQDEOHVERWKDXWKHQWLFDWLRQIDLOXUHQRWLILFDWLRQVDQG
OLQNXSGRZQQRWLILFDWLRQV
7KHVQPSVHUYHUKRVWFRPPDQGVSHFLILHVWKHKRVWGHYLFHWKDWZLOOUHFHLYH
6103QRWLILFDWLRQV
([DPSOH
5HODWHG&RPPDQGV
VQPSVHUYHUKRVW
VQPSVHUYHUKRVW
7KLVFRPPDQGVSHFLILHVWKHUHFLSLHQWRIDQ6103QRWLILFDWLRQ8VHWKHQRIRUPWR
UHPRYHWKHVSHFLILHGKRVW
6\QWD[
VQPSVHUYHUKRVW___!KRVWBLSBDGGUHVV_KRVWBQDPH!
FRPPXQLW\VWULQJ!
QRVQPSVHUYHUKRVW
)LUVW6103KRVW
6HFRQG6103KRVW
7KLUG6103KRVW
)RXUWK6103KRVW
KRVWBLSBDGGUHVV,3RIWKHKRVWWKHWDUJHWHGUHFLSLHQW
KRVWBQDPH1DPHRIWKHKRVW5DQJHFKDUDFWHUV
FRPPXQLW\VWULQJ3DVVZRUGOLNHFRPPXQLW\VWULQJVHQWZLWKWKH
QRWLILFDWLRQRSHUDWLRQ$OWKRXJK\RXFDQVHWWKLVVWULQJXVLQJWKH
VQPSVHUYHUKRVWFRPPDQGE\LWVHOIZHUHFRPPHQGWKDW\RXGHILQHWKLV
VWULQJXVLQJWKHVQPSVHUYHUFRPPXQLW\FRPPDQGSULRUWRXVLQJWKH
VQPSVHUYHUKRVWFRPPDQG0D[LPXPOHQJWKFKDUDFWHUV
'HIDXOW6HWWLQJ
+RVW$GGUHVV1RQH
&RPPXQLW\6WULQJSXEOLF
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
Enterprise AP(config)#snmp-server enable server
Enterprise AP(config)#
2
&RPPDQG8VDJH
7KHVQPSVHUYHUKRVWFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKH
VQPSVHUYHUHQDEOHVHUYHUFRPPDQGWRHQDEOH6103QRWLILFDWLRQV
([DPSOH
5HODWHG&RPPDQGV
VQPSVHUYHUHQDEOHVHUYHU
VQPSVHUYHUWUDS
7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQWWRVHQGVSHFLILF6103WUDSV
LH QRWLILFDWLRQV8VHWKHQRIRUPWRGLVDEOHVSHFLILFWUDSPHVVDJHV
6\QWD[
VQPSVHUYHUWUDSWUDS!
QRVQPSVHUYHUWUDSWUDS!
WUDS2QHRIWKHIROORZLQJ6103WUDSPHVVDJHV
GRW,QWHUIDFH$*)DLO7KHDRUJLQWHUIDFHKDVIDLOHG
GRW,QWHUIDFH%)DLO7KHELQWHUIDFHKDVIDLOHG
GRW6WDWLRQ$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DVVRFLDWHG
ZLWKWKHDFFHVVSRLQW
GRW6WDWLRQ$XWKHQWLFDWLRQ$FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\
DXWKHQWLFDWHG
GRW6WDWLRQ5H$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\
UHDVVRFLDWHGZLWKWKHDFFHVVSRLQW
GRW6WDWLRQ5HTXHVW)DLO$FOLHQWVWDWLRQKDVIDLOHGDVVRFLDWLRQ
UHDVVRFLDWLRQRUDXWKHQWLFDWLRQ
GRW[$XWK)DLO$;FOLHQWVWDWLRQKDVIDLOHG5$',86
DXWKHQWLFDWLRQ
GRW[$XWK1RW,QLWLDWHG$FOLHQWVWDWLRQGLGQRWLQLWLDWH;
DXWKHQWLFDWLRQ
GRW[$XWK6XFFHVV$;FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\
DXWKHQWLFDWHGE\WKH5$',86VHUYHU
GRW[0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHG0$&DGGUHVV
DXWKHQWLFDWLRQZLWKWKH5$',86VHUYHU
GRW[0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\
DXWKHQWLFDWHGLWV0$&DGGUHVVZLWKWKH5$',86VHUYHU
LDSS&RQWH[W'DWD6HQW$FOLHQWVWDWLRQ¶V&RQWH[W'DWDKDVEHHQVHQWWR
DQRWKHUDFFHVVSRLQWZLWKZKLFKWKHVWDWLRQKDVDVVRFLDWHG
LDSS6WDWLRQ5RDPHG)URP$FOLHQWVWDWLRQKDVURDPHGIURPDQRWKHU
DFFHVVSRLQWLGHQWLILHGE\LWV,3DGGUHVV
Enterprise AP(config)#snmp-server host 1 10.1.19.23 batman
Enterprise AP(config)#
3
LDSS6WDWLRQ5RDPHG7R$FOLHQWVWDWLRQKDVURDPHGWRDQRWKHUDFFHVV
SRLQWLGHQWLILHGE\LWV,3DGGUHVV
ORFDO0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHGDXWKHQWLFDWLRQZLWK
WKHORFDO0$&DGGUHVVGDWDEDVHRQWKHDFFHVVSRLQW
ORFDO0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\
DXWKHQWLFDWHGLWV0$&DGGUHVVZLWKWKHORFDOGDWDEDVHRQWKHDFFHVV
SRLQW
SSS/RJRQ)DLO7KHDFFHVVSRLQWKDVIDLOHGWRORJRQWRWKH333R(
VHUYHUXVLQJWKHFRQILJXUHGXVHUQDPHDQGSDVVZRUG
VQWS6HUYHU)DLO7KHDFFHVVSRLQWKDVIDLOHGWRVHWWKHWLPHIURPWKH
FRQILJXUHG6173VHUYHU
V\V&RQILJ)LOH9HUVLRQ&KDQJHG7KHDFFHVVSRLQW¶VFRQILJXUDWLRQILOH
KDVEHHQFKDQJHG
V\V5DGLXV6HUYHU&KDQJHG7KHDFFHVVSRLQWKDVFKDQJHGIURPWKH
SULPDU\5$',86VHUYHUWRWKHVHFRQGDU\RUIURPWKHVHFRQGDU\WRWKH
SULPDU\
V\V6\VWHP'RZQ7KHDFFHVVSRLQWLVDERXWWRVKXWGRZQDQGUHERRW
V\V6\VWHP8S7KHDFFHVVSRLQWLVXSDQGUXQQLQJ
'HIDXOW6HWWLQJ
$OOWUDSVHQDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKHVQPSVHUYHUKRVWDQG
VQPSVHUYHUHQDEOHVHUYHUFRPPDQGVWRHQDEOH6103QRWLILFDWLRQV
([DPSOH
VQPSVHUYHUHQJLQHLG
7KLVFRPPDQGLVXVHGIRU6103Y,WLVXVHGWRXQLTXHO\LGHQWLI\WKHDFFHVVSRLQW
DPRQJDOODFFHVVSRLQWVLQWKHQHWZRUN8VHWKHQRIRUPWRGHOHWHWKHHQJLQH,'
6\QWD[
VQPSVHUYHUHQJLQHLGHQJLQHLG!
QRVQPSVHUYHUHQJLQHLG
HQJLQHLG(QWHUHQJLQHLGLQKH[DGHFLPDOFKDUDFWHUV
'HIDXOW6HWWLQJ
(QDEOHG
Enterprise AP(config)#no snmp-server trap dot11StationAssociation
Enterprise AP(config)#
4
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKHVQPSVHUYHUXVHUFRPPDQG
(QWHULQJWKLVFRPPDQGLQYDOLGDWHVDOOHQJLQH,'VWKDWKDYHEHHQSUHYLRXVO\
FRQILJXUHG
,IWKHHQJLQH,'LVGHOHWHGRUFKDQJHGDOO6103XVHUVZLOOEHFOHDUHG<RX
ZLOOQHHGWRUHFRQILJXUHDOOH[LVWLQJXVHUV
([DPSOH
VQPSVHUYHUXVHU
7KLVFRPPDQGFRQILJXUHVWKH6103YXVHUVWKDWDUHDOORZHGWRPDQDJHWKH
DFFHVVSRLQW8VHWKHQRIRUPWRGHOHWHDQ6103YXVHU
6\QWD[
VQPSVHUYHUXVHUXVHUQDPH!
XVHUQDPH$XVHUGHILQHGVWULQJIRUWKH6103XVHUFKDUDFWHUV
PD[LPXP
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
8SWR6103YXVHUVFDQEHFRQILJXUHGRQWKHDFFHVVSRLQW
7KH6103HQJLQH,'LVXVHGWRFRPSXWHWKHDXWKHQWLFDWLRQSULYDF\GLJHVWV
IURPWKHSDVVSKUDVH<RXVKRXOGWKHUHIRUHFRQILJXUHWKHHQJLQH,'ZLWKWKH
VQPSVHUYHUHQJLQHLGFRPPDQGEHIRUHXVLQJWKLVFRQILJXUDWLRQ
FRPPDQG
7KHDFFHVVSRLQWHQDEOHV6103YXVHUVWREHDVVLJQHGWRWKUHH
SUHGHILQHGJURXSV2WKHUJURXSVFDQQRWEHGHILQHG7KHDYDLODEOHJURXSV
DUH
52$UHDGRQO\JURXSXVLQJQRDXWKHQWLFDWLRQDQGQRGDWDHQFU\SWLRQ
8VHUVLQWKLVJURXSXVHQRVHFXULW\HLWKHUDXWKHQWLFDWLRQRUHQFU\SWLRQLQ
6103PHVVDJHVWKH\VHQGWRWKHDJHQW7KLVLVWKHVDPHDV6103Y
RU6103YF
Enterprise AP(config)#snmp-server engine-id 1a:2b:3c:4d:00:ff
Enterprise AP(config)#
5
5:$XWK$UHDGZULWHJURXSXVLQJDXWKHQWLFDWLRQEXWQRGDWD
HQFU\SWLRQ8VHUVLQWKLVJURXSVHQG6103PHVVDJHVWKDWXVHDQ0'
NH\SDVVZRUGIRUDXWKHQWLFDWLRQEXWQRWD'(6NH\SDVVZRUGIRU
HQFU\SWLRQ
5:3ULY$UHDGZULWHJURXSXVLQJDXWKHQWLFDWLRQDQGGDWDHQFU\SWLRQ
8VHUVLQWKLVJURXSVHQG6103PHVVDJHVWKDWXVHDQ0'NH\
SDVVZRUGIRUDXWKHQWLFDWLRQDQGD'(6NH\SDVVZRUGIRUHQFU\SWLRQ
%RWKWKH0'DQG'(6NH\SDVVZRUGVPXVWEHGHILQHG
7KHFRPPDQGSURPSWVIRUWKHIROORZLQJLQIRUPDWLRQWRFRQILJXUHDQ6103
YXVHU
XVHUQDPH$XVHUGHILQHGVWULQJIRUWKH6103XVHUFKDUDFWHUV
PD[LPXP
JURXSQDPH7KHQDPHRIWKH6103JURXSWRZKLFKWKHXVHULV
DVVLJQHGFKDUDFWHUVPD[LPXP7KHUHDUHWKUHHSUHGHILQHGJURXSV
525:$XWKRU5:3ULY
DXWKSURWR7KHDXWKHQWLFDWLRQW\SHXVHGIRUXVHUDXWKHQWLFDWLRQPGRU
QRQH
DXWKSDVVSKUDVH7KHXVHUSDVVZRUGUHTXLUHGZKHQDXWKHQWLFDWLRQLV
XVHG±FKDUDFWHUV
SULYSURWR7KHHQFU\SWLRQW\SHXVHGIRU6103GDWDHQFU\SWLRQGHVRU
QRQH
SULYSDVVSKUDVH7KHXVHUSDVVZRUGUHTXLUHGZKHQGDWDHQFU\SWLRQLV
XVHG±FKDUDFWHUV
8VHUVPXVWEHDVVLJQHGWRJURXSVWKDWKDYHWKHVDPHVHFXULW\OHYHOV,ID
XVHUZKRKDV³$XWK3ULY´VHFXULW\XVHVDXWKHQWLFDWLRQDQGHQFU\SWLRQLV
DVVLJQHGWRDUHDGRQO\52JURXSWKHXVHUZLOOQRWEHDEOHWRDFFHVVWKH
GDWDEDVH$Q$XWK3ULYXVHUPXVWEHDVVLJQHGWRWKH5:3ULYJURXSZLWKWKH
$XWK3ULYVHFXULW\OHYHO
7RFRQILJXUHDXVHUIRUWKH5:$XWKJURXS\RXPXVWLQFOXGHWKHDXWKSURWR
DQGDXWKSDVVSKUDVHNH\ZRUGV
7RFRQILJXUHDXVHUIRUWKH5:3ULYJURXS\RXPXVWLQFOXGHWKHDXWKSURWR
DXWKSDVVSKUDVHSULYSURWRDQGSULYSDVVSKUDVHNH\ZRUGV
([DPSOH
Enterprise AP(config)#snmp-server user
User Name<1-32> :chris
Group Name<1-32> :RWPriv
Authtype(md5,<cr>none):md5
Passphrase<8-32>:a good secret
Privacy(des,<cr>none) :des
Passphrase<8-32>:a very good secret
Enterprise AP(config)#
6
VQPSVHUYHUWDUJHWV
7KLVFRPPDQGFRQILJXUHV6103YQRWLILFDWLRQWDUJHWV8VHWKHQRIRUPWRGHOHWH
DQ6103YWDUJHW
6\QWD[
VQPSVHUYHUWDUJHWVWDUJHWLG!LSDGGU!VHFQDPH!
>YHUVLRQ^`@>XGSSRUW^SRUWQXPEHU`@>QRWLILFDWLRQW\SH
^75$3`@
QRVQPSVHUYHUWDUJHWVWDUJHWLG!
WDUJHWLG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDUHFHLYHURI6103
QRWLILFDWLRQV0D[LPXPOHQJWKFKDUDFWHUV
LSDGGU6SHFLILHVWKH,3DGGUHVVRIWKHPDQDJHPHQWVWDWLRQWRUHFHLYH
QRWLILFDWLRQV
VHFQDPH7KHGHILQHG6103YXVHUQDPHWKDWLVWRUHFHLYH
QRWLILFDWLRQV
YHUVLRQ7KH6103YHUVLRQRIQRWLILFDWLRQV&XUUHQWO\RQO\YHUVLRQLV
VXSSRUWHGLQWKLVFRPPDQG
XGSSRUW7KH8'3SRUWWKDWLVXVHGRQWKHUHFHLYLQJPDQDJHPHQWVWDWLRQ
IRUQRWLILFDWLRQV
QRWLILFDWLRQW\SH7KHW\SHRIQRWLILFDWLRQWKDWLVVHQW&XUUHQWO\RQO\75$3
LVVXSSRUWHG
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHDFFHVVSRLQWVXSSRUWVXSWR6103YWDUJHW,'V
7KH6103YXVHUQDPHWKDWLVVSHFLILHGLQWKHWDUJHWPXVWILUVWEH
FRQILJXUHGXVLQJWKHVQPSVHUYHUXVHUFRPPDQG
([DPSOH
Enterprise AP(config)#snmp-server targets mytraps 192.168.1.33 chris
Enterprise AP(config)#
47
VQPSVHUYHUILOWHU
7KLVFRPPDQGFRQILJXUHV6103YQRWLILFDWLRQILOWHUV8VHWKHQRIRUPWRGHOHWHDQ
6103YILOWHURUUHPRYHDVXEWUHHIURPDILOWHU
6\QWD[
VQPSVHUYHUILOWHUILOWHULG!LQFOXGH_H[FOXGH!VXEWUHH!
>PDVN^PDVN`@
QRVQPSVHUYHUILOWHUILOWHULG!>VXEWUHH@
ILOWHULG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDQ6103YQRWLILFDWLRQILOWHU
0D[LPXPOHQJWKFKDUDFWHUV
LQFOXGH'HILQHVDILOWHUW\SHWKDWLQFOXGHVREMHFWVLQWKH0,%VXEWUHH
H[FOXGH'HILQHVDILOWHUW\SHWKDWH[FOXGHVREMHFWVLQWKH0,%VXEWUHH
VXEWUHH7KHSDUWRIWKH0,%VXEWUHHWKDWLVWREHILOWHUHG
PDVN$QRSWLRQDOKH[DGHFLPDOYDOXHELWPDVNWRGHILQHREMHFWVLQWKH0,%
VXEWUHH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHDFFHVVSRLQWDOORZVXSWRQRWLILFDWLRQILOWHUVWREHFUHDWHG(DFKILOWHU
FDQEHGHILQHGE\XSWR0,%VXEWUHH,'HQWULHV
8VHWKHFRPPDQGPRUHWKDQRQFHZLWKWKHVDPHILOWHU,'WREXLOGDILOWHUWKDW
LQFOXGHVRUH[FOXGHVPXOWLSOH0,%REMHFWV1RWHWKDWWKHILOWHUHQWULHVDUH
DSSOLHGLQWKHVHTXHQFHWKDWWKH\DUHGHILQHG
7KH0,%VXEWUHHPXVWEHGHILQHGLQWKHIRUP³´DQGDOZD\VVWDUWZLWK
D³´
7KHPDVNLVDKH[DGHFLPDOYDOXHZLWKHDFKELWPDVNLQJWKHFRUUHVSRQGLQJ
,'LQWKH0,%VXEWUHH$³´LQWKHPDVNLQGLFDWHVDQH[DFWPDWFKDQGD³´
LQGLFDWHVD³ZLOGFDUG´)RUH[DPSOHDPDVNYDOXHRI[))%)SURYLGHVDELW
PDVN³´,IDSSOLHGWRWKHVXEWUHH
WKH]HURFRUUHVSRQGVWRWKHWKVXEWUHH,':KHQ
WKHUHDUHPRUHVXEWUHH,'VWKDQELWVLQWKHPDVNWKHPDVNLVSDGGHGZLWK
RQHV
([DPSOH
Enterprise AP(config)#snmp-server filter trapfilter include .1
Enterprise AP(config)#snmp-server filter trapfilter exclude
.1.3.6.1.2.1.2.2.1.1.23
48
VQPSVHUYHUILOWHUDVVLJQPHQWV
7KLVFRPPDQGDVVLJQV6103YQRWLILFDWLRQILOWHUVWRWDUJHWV8VHWKHQRIRUPWR
UHPRYHDQ6103YILOWHUDVVLJQPHQW
6\QWD[
VQPSVHUYHUILOWHUDVVLJQPHQWVWDUJHWLG!ILOWHULG!
QRVQPSVHUYHUILOWHUDVVLJQPHQWVWDUJHWLG!
WDUJHWLG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDUHFHLYHURI6103
QRWLILFDWLRQV0D[LPXPOHQJWKFKDUDFWHUV
ILOWHULG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDQ6103YQRWLILFDWLRQILOWHU
0D[LPXPOHQJWKFKDUDFWHUV
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
VKRZVQPSJURXSV
7KLVFRPPDQGGLVSOD\VWKH6103YSUHGHILQHGJURXSV
6\QWD[
VKRZVQPSJURXSV
&RPPDQG0RGH
([HF
Enterprise AP(config)#snmp-server filter-assignments mytraps trapfilter
Enterprise AP(config)#exit
Enterprise AP#show snmp target
Host ID : mytraps
User : chris
IP Address : 192.168.1.33
UDP Port : 162
=============================
Enterprise AP#show snmp filter-assignments
HostID FilterID
mytraps trapfilter
Enterprise AP(config)#
49
([DPSOH
VKRZVQPSXVHUV
7KLVFRPPDQGGLVSOD\VWKH6103YXVHUVDQGVHWWLQJV
6\QWD[
VKRZVQPSXVHUV
&RPPDQG0RGH
([HF
([DPSOH
VKRZVQPSJURXSDVVLJQPHQWV
7KLVFRPPDQGGLVSOD\VWKH6103YXVHUJURXSDVVLJQPHQWV
6\QWD[
VKRZVQPSJURXSDVVLJQPHQWV
&RPPDQG0RGH
([HF
Enterprise AP#show snmp groups
GroupName :RO
SecurityModel :USM
SecurityLevel :NoAuthNoPriv
GroupName :RWAuth
SecurityModel :USM
SecurityLevel :AuthNoPriv
GroupName :RWPriv
SecurityModel :USM
SecurityLevel :AuthPriv
Enterprise AP#
Enterprise AP#show snmp users
=============================================
UserName :chris
GroupName :RWPriv
AuthType :MD5
Passphrase:****************
PrivType :DES
Passphrase:****************
=============================================
Enterprise AP#
0
([DPSOH
VKRZVQPSWDUJHW
7KLVFRPPDQGGLVSOD\VWKH6103YQRWLILFDWLRQWDUJHWVHWWLQJV
6\QWD[
VKRZVQPSWDUJHW
&RPPDQG0RGH
([HF
([DPSOH
VKRZVQPSILOWHU
7KLVFRPPDQGGLVSOD\VWKH6103YQRWLILFDWLRQILOWHUVHWWLQJV
6\QWD[
VKRZVQPSILOWHU>ILOWHULG@
ILOWHULG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDQ6103YQRWLILFDWLRQILOWHU
0D[LPXPOHQJWKFKDUDFWHUV
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show snmp group-assignments
GroupName :RWPriv
UserName :chris
Enterprise AP#
Enterprise AP#
Enterprise AP#show snmp target
Host ID : mytraps
User : chris
IP Address : 192.168.1.33
UDP Port : 162
=============================
Enterprise AP#
Enterprise AP#show snmp filter
Filter: trapfilter
Type: include
Subtree: iso.3.6.1.2.1.2.2.1
Type: exclude
Subtree: iso.3.6.1.2.1.2.2.1.1.23
=============================
Enterprise AP#
1
VKRZVQPSILOWHUDVVLJQPHQWV
7KLVFRPPDQGGLVSOD\VWKH6103YQRWLILFDWLRQILOWHUDVVLJQPHQWV
6\QWD[
VKRZVQPSILOWHUDVVLJQPHQWV
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show snmp filter-assignments
HostID FilterID
mytraps trapfilter
Enterprise AP#
2
VKRZVQPS
7KLVFRPPDQGGLVSOD\VWKH6103FRQILJXUDWLRQVHWWLQJV
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show snmp
SNMP Information
==============================================
Service State : Enable
Community (ro) : *****
Community (rw) : *****
Location : WC-19
Contact : Paul
EngineId :80:00:07:e5:80:00:00:2e:62:00:00:00:18
EngineBoots:1
Trap Destinations:
1: 192.168.1.9, Community: *****, State: Enabled
2: 0.0.0.0, Community: *****, State: Disabled
3: 0.0.0.0, Community: *****, State: Disabled
4: 0.0.0.0, Community: *****, State: Disabled
dot11InterfaceAGFail Enabled dot11InterfaceBFail Enabled
dot11StationAssociation Enabled dot11StationAuthentication
Enabled
dot11StationReAssociation Enabled dot11StationRequestFail
Enabled
dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled
dot1xAuthSuccess Enabled dot1xMacAddrAuthFail Enabled
dot1xMacAddrAuthSuccess Enabled iappContextDataSent
Enabled
iappStationRoamedFrom Enabled iappStationRoamedTo
Enabled
localMacAddrAuthFail Enabled localMacAddrAuthSuccess Enabled
pppLogonFail Enabled sntpServerFail Enabled
configFileVersionChanged Enabled radiusServerChanged
Enabled
systemDown Enabled systemUp Enabled
=============================================
Enterprise AP#
3
Flash/File Commands
7KHVHFRPPDQGVDUHXVHGWRPDQDJHWKHV\VWHPFRGHRUFRQILJXUDWLRQILOHV
ERRWILOH
7KLVFRPPDQGVSHFLILHVWKHLPDJHXVHGWRVWDUWXSWKHV\VWHP
6\QWD[
ERRWILOHILOHQDPH!
ILOHQDPH1DPHRIWKHLPDJHILOH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
&RPPDQG8VDJH
7KHILOHQDPHVKRXOGQRWFRQWDLQVODVKHV?RUWKHOHDGLQJOHWWHURIWKHILOH
QDPHVKRXOGQRWEHDSHULRGDQGWKHPD[LPXPOHQJWKIRUILOHQDPHVLV
FKDUDFWHUV9DOLGFKDUDFWHUV$=D]³´³´³B´
,IWKHILOHFRQWDLQVDQHUURULWFDQQRWEHVHWDVWKHGHIDXOWILOH
([DPSOH
7DEOH )ODVK)LOH&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
Enterprise AP#bootfile -img.bin
Enterprise AP#
4
FRS\
7KLVFRPPDQGFRSLHVDERRWILOHFRGHLPDJHRUFRQILJXUDWLRQILOHEHWZHHQWKH
DFFHVVSRLQW¶VIODVKPHPRU\DQGD)737)73VHUYHU:KHQ\RXVDYHWKH
FRQILJXUDWLRQVHWWLQJVWRDILOHRQD)737)73VHUYHUWKDWILOHFDQODWHUEH
GRZQORDGHGWRWKHDFFHVVSRLQWWRUHVWRUHV\VWHPRSHUDWLRQ7KHVXFFHVVRIWKHILOH
WUDQVIHUGHSHQGVRQWKHDFFHVVLELOLW\RIWKH)737)73VHUYHUDQGWKHTXDOLW\RIWKH
QHWZRUNFRQQHFWLRQ
6\QWD[
FRS\IWS_WIWS!ILOH
FRS\FRQILJIWS_WIWS!
IWS.H\ZRUGWKDWDOORZV\RXWRFRS\WRIURPDQ)73VHUYHU
WIWS.H\ZRUGWKDWDOORZV\RXWRFRS\WRIURPD7)73VHUYHU
ILOH.H\ZRUGWKDWDOORZV\RXWRFRS\WRIURPDIODVKPHPRU\ILOH
FRQILJ.H\ZRUGWKDWDOORZV\RXWRXSORDGWKHFRQILJXUDWLRQILOHIURPIODVK
PHPRU\
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
&RPPDQG8VDJH
7KHV\VWHPSURPSWVIRUGDWDUHTXLUHGWRFRPSOHWHWKHFRS\FRPPDQG
2QO\DFRQILJXUDWLRQILOHFDQEHXSORDGHGWRDQ)737)73VHUYHUEXWHYHU\
W\SHRIILOHFDQEHGRZQORDGHGWRWKHDFFHVVSRLQW
7KHGHVWLQDWLRQILOHQDPHVKRXOGQRWFRQWDLQVODVKHV?RU
WKHOHDGLQJ
OHWWHURIWKHILOHQDPHVKRXOGQRWEHDSHULRGDQGWKHPD[LPXPOHQJWK
IRUILOHQDPHVRQWKH)737)73VHUYHULVFKDUDFWHUVRUFKDUDFWHUV
IRUILOHVRQWKHDFFHVVSRLQW9DOLGFKDUDFWHUV$=D]³´³´³B´
'XHWRWKHVL]HOLPLWRIWKHIODVKPHPRU\WKHDFFHVVSRLQWVXSSRUWVRQO\WZR
RSHUDWLRQFRGHILOHV
7KHV\VWHPFRQILJXUDWLRQILOHPXVWEHQDPHG³V\VFIJ´LQDOOFRS\
FRPPDQGV
([DPSOH
7KHIROORZLQJH[DPSOHVKRZVKRZWRXSORDGWKHFRQILJXUDWLRQVHWWLQJVWRDILOHRQ
WKH7)73VHUYHU
Enterprise AP#copy config tftp
TFTP Source file name:syscfg
TFTP Server IP:192.168.1.19
Enterprise AP#
5
7KHIROORZLQJH[DPSOHVKRZVKRZWRGRZQORDGDFRQILJXUDWLRQILOH
GHOHWH
7KLVFRPPDQGGHOHWHVDILOHRULPDJH
6\QWD[
GHOHWHILOHQDPH!
ILOHQDPH1DPHRIWKHFRQILJXUDWLRQILOHRULPDJHQDPH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
&DXWLRQ%HZDUHRIGHOHWLQJDSSOLFDWLRQLPDJHVIURPIODVKPHPRU\$WOHDVWRQH
DSSOLFDWLRQLPDJHLVUHTXLUHGLQRUGHUWRERRWWKHDFFHVVSRLQW,IWKHUHDUH
PXOWLSOHLPDJHILOHVLQIODVKPHPRU\DQGWKHRQHXVHGWRERRWWKHDFFHVVSRLQW
LVGHOHWHGEHVXUH\RXILUVWXVHWKHERRWILOHFRPPDQGWRXSGDWHWKHDSSOLFDWLRQ
LPDJHILOHERRWHGDWVWDUWXSEHIRUH\RXUHERRWWKHDFFHVVSRLQW
([DPSOH
7KLVH[DPSOHVKRZVKRZWRGHOHWHWKHWHVWFIJFRQILJXUDWLRQILOHIURPIODVKPHPRU\
5HODWHG&RPPDQGV
ERRWILOH
GLU
Enterprise AP#copy tftp file
1. Application image
2. Config file
3. Boot block image
Select the type of download<1,2,3>: [1]:2
TFTP Source file name:syscfg
TFTP Server IP:192.168.1.19
Enterprise AP#
Enterprise AP#delete test.cfg
Are you sure you wish to delete this file? <y/n>:
Enterprise AP#
6
GLU
7KLVFRPPDQGGLVSOD\VDOLVWRIILOHVLQIODVKPHPRU\
&RPPDQG0RGH
([HF
&RPPDQG8VDJH
)LOHLQIRUPDWLRQLVVKRZQEHORZ
([DPSOH
7KHIROORZLQJH[DPSOHVKRZVKRZWRGLVSOD\DOOILOHLQIRUPDWLRQ
VKRZERRWILOH
7KLVFRPPDQGGLVSOD\VWKHQDPHRIWKHFXUUHQWRSHUDWLRQFRGHILOHWKDWERRWHGWKH
V\VWHP
6\QWD[
VKRZVQPSILOWHUDVVLJQPHQWV
&RPPDQG0RGH
([HF
([DPSOH
&ROXPQ+HDGLQJ 'HVFULSWLRQ
Enterprise AP#dir
File Name Type File Size
-------------------------- ---- -----------
dflt-img.bin 2 1044140
syscfg 5 16860
syscfg_bak 5 16860
zz-img.bin 2 1044140
1048576 byte(s) available
Enterprise AP#
Enterprise AP#show bootfile
Bootfile Information
===================================
Bootfile : ec-img.bin
===================================
Enterprise AP#
57
RADIUS Client
5HPRWH$XWKHQWLFDWLRQ'LDOLQ8VHU6HUYLFH5$',86LVDORJRQDXWKHQWLFDWLRQ
SURWRFROWKDWXVHVVRIWZDUHUXQQLQJRQDFHQWUDOVHUYHUWRFRQWURODFFHVVIRU
5$',86DZDUHGHYLFHVWRWKHQHWZRUN$QDXWKHQWLFDWLRQVHUYHUFRQWDLQVD
GDWDEDVHRIFUHGHQWLDOVVXFKDVXVHUVQDPHVDQGSDVVZRUGVIRUHDFKZLUHOHVV
FOLHQWWKDWUHTXLUHVDFFHVVWRWKHDFFHVVSRLQW
UDGLXVVHUYHUDGGUHVV
7KLVFRPPDQGVSHFLILHVWKHSULPDU\DQGVHFRQGDU\5$',86VHUYHUV
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@DGGUHVVKRVWBLSBDGGUHVV_KRVWBQDPH!
VHFRQGDU\6HFRQGDU\VHUYHU
KRVWBLSBDGGUHVV,3DGGUHVVRIVHUYHU
KRVWBQDPH+RVWQDPHRIVHUYHU5DQJHFKDUDFWHUV
'HIDXOW6HWWLQJ
1RQH
7DEOH 5$',86&OLHQW
&RPPDQG )XQFWLRQ 0RGH 3DJH
58
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
UDGLXVVHUYHUSRUW
7KLVFRPPDQGVHWVWKH5$',86VHUYHUQHWZRUNSRUW
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@SRUWSRUWBQXPEHU!
VHFRQGDU\6HFRQGDU\VHUYHU
SRUWBQXPEHU5$',86VHUYHU8'3SRUWXVHGIRUDXWKHQWLFDWLRQPHVVDJHV
5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
UDGLXVVHUYHUNH\
7KLVFRPPDQGVHWVWKH5$',86HQFU\SWLRQNH\
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@NH\NH\BVWULQJ!
VHFRQGDU\6HFRQGDU\VHUYHU
NH\BVWULQJ(QFU\SWLRQNH\XVHGWRDXWKHQWLFDWHORJRQDFFHVVIRUFOLHQW'R
QRWXVHEODQNVSDFHVLQWKHVWULQJ0D[LPXPOHQJWKFKDUDFWHUV
'HIDXOW6HWWLQJ
'()$8/7
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Enterprise AP(config)#radius-server address 192.168.1.25
Enterprise AP(config)#
Enterprise AP(config)#radius-server port 181
Enterprise AP(config)#
Enterprise AP(config)#radius-server key green
Enterprise AP(config)#
59
UDGLXVVHUYHUUHWUDQVPLW
7KLVFRPPDQGVHWVWKHQXPEHURIUHWULHV
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@UHWUDQVPLWQXPEHUBRIBUHWULHV
VHFRQGDU\6HFRQGDU\VHUYHU
QXPEHUBRIBUHWULHV1XPEHURIWLPHVWKHDFFHVVSRLQWZLOOWU\WR
DXWKHQWLFDWHORJRQDFFHVVYLDWKH5$',86VHUYHU5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
UDGLXVVHUYHUWLPHRXW
7KLVFRPPDQGVHWVWKHLQWHUYDOEHWZHHQWUDQVPLWWLQJDXWKHQWLFDWLRQUHTXHVWVWRWKH
5$',86VHUYHU
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@WLPHRXWQXPEHUBRIBVHFRQGV
VHFRQGDU\6HFRQGDU\VHUYHU
QXPEHUBRIBVHFRQGV1XPEHURIVHFRQGVWKHDFFHVVSRLQWZDLWVIRUDUHSO\
EHIRUHUHVHQGLQJDUHTXHVW5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Enterprise AP(config)#radius-server retransmit 5
Enterprise AP(config)#
Enterprise AP(config)#radius-server timeout 10
Enterprise AP(config)#
0
UDGLXVVHUYHUSRUWDFFRXQWLQJ
7KLVFRPPDQGVHWVWKH5$',86$FFRXQWLQJVHUYHUQHWZRUNSRUW
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@SRUWDFFRXQWLQJSRUWBQXPEHU!
VHFRQGDU\6HFRQGDU\VHUYHU,IVHFRQGDU\LVQRWVSHFLILHGWKHQWKH
DFFHVVSRLQWDVVXPHV\RXDUHFRQILJXULQJWKHSULPDU\5$',86VHUYHU
SRUWBQXPEHU5$',86$FFRXQWLQJVHUYHU8'3SRUWXVHGIRUDFFRXQWLQJ
PHVVDJHV
5DQJHRU
'HIDXOW6HWWLQJ
GLVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
:KHQWKH5$',86$FFRXQWLQJVHUYHU8'3SRUWLVVSHFLILHGD5$',86
DFFRXQWLQJVHVVLRQLVDXWRPDWLFDOO\VWDUWHGIRUHDFKXVHUWKDWLV
VXFFHVVIXOO\DXWKHQWLFDWHGWRWKHDFFHVVSRLQW
([DPSOH
UDGLXVVHUYHUWLPHRXWLQWHULP
7KLVFRPPDQGVHWVWKHLQWHUYDOEHWZHHQWUDQVPLWWLQJDFFRXQWLQJXSGDWHVWRWKH
5$',86VHUYHU
6\QWD[
UDGLXVVHUYHU>VHFRQGDU\@WLPHRXWLQWHULPQXPEHUBRIBVHFRQGV!
VHFRQGDU\6HFRQGDU\VHUYHU
QXPEHUBRIBVHFRQGV1XPEHURIVHFRQGVWKHDFFHVVSRLQWZDLWVEHWZHHQ
WUDQVPLWWLQJDFFRXQWLQJXSGDWHV5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHDFFHVVSRLQWVHQGVSHULRGLFDFFRXQWLQJXSGDWHVDIWHUHYHU\LQWHULP
SHULRGXQWLOWKHXVHUORJVRIIDQGD³VWRS´PHVVDJHLVVHQW
Enterprise AP(config)#radius-server port-accounting 1813
Enterprise AP(config)#
1
([DPSOH
UDGLXVVHUYHUUDGLXVPDFIRUPDW
7KLVFRPPDQGVHWVWKHIRUPDWIRUVSHFLI\LQJ0$&DGGUHVVHVRQWKH5$',86VHUYHU
6\QWD[
UDGLXVVHUYHUUDGLXVPDFIRUPDWPXOWLFRORQ_PXOWLGDVK_QRGHOLPLWHU_
VLQJOHGDVK!
PXOWLFRORQ(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[
PXOWLGDVK(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[
QRGHOLPLWHU(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[
VLQJOHGDVK(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[
'HIDXOW6HWWLQJ
1RGHOLPLWHU
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
UDGLXVVHUYHUYODQIRUPDW
7KLVFRPPDQGVHWVWKHIRUPDWIRUVSHFLI\LQJ9/$1,'VRQWKH5$',86VHUYHU
6\QWD[
UDGLXVVHUYHUYODQIRUPDWKH[_DVFLL!
KH[(QWHU9/$1,'VDVDKH[DGHFLPDOQXPEHU
DVFLL(QWHU9/$1,'VDVDQ$6&,,VWULQJ
'HIDXOW6HWWLQJ
+H[
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Enterprise AP(config)#radius-server timeout-interim 500
Enterprise AP(config)#
Enterprise AP(config)#radius-server radius-mac-format multi-dash
Enterprise AP(config)#
Enterprise AP(config)#radius-server vlan-format ascii
Enterprise AP(config)#
2
VKRZUDGLXV
7KLVFRPPDQGGLVSOD\VWKHFXUUHQWVHWWLQJVIRUWKH5$',86VHUYHU
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show radius
Radius Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Radius Secondary Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Enterprise AP#
3
802.1X Authentication
7KHDFFHVVSRLQWVXSSRUWV,(((;DFFHVVFRQWUROIRUZLUHOHVVFOLHQWV7KLV
FRQWUROIHDWXUHSUHYHQWVXQDXWKRUL]HGDFFHVVWRWKHQHWZRUNE\UHTXLULQJDQ;
FOLHQWDSSOLFDWLRQWRVXEPLWXVHUFUHGHQWLDOVIRUDXWKHQWLFDWLRQ&OLHQWDXWKHQWLFDWLRQ
LVWKHQYHULILHGE\D5$',86VHUYHUXVLQJ($3([WHQVLEOH$XWKHQWLFDWLRQ3URWRFRO
EHIRUHWKHDFFHVVSRLQWJUDQWVFOLHQWDFFHVVWRWKHQHWZRUN7KH;($3
SDFNHWVDUHDOVRXVHGWRSDVVG\QDPLFXQLFDVWVHVVLRQNH\VDQGVWDWLFEURDGFDVW
NH\VWRZLUHOHVVFOLHQWV
[
7KLVFRPPDQGFRQILJXUHV;DVRSWLRQDOO\VXSSRUWHGRUDVUHTXLUHGIRUZLUHOHVV
FOLHQWV8VH WKHQRIRUPWRGLVDEOH;VXSSRUW
6\QWD[
[VXSSRUWHG_UHTXLUHG!
QR[
VXSSRUWHG$XWKHQWLFDWHVFOLHQWVWKDWLQLWLDWHWKH;DXWKHQWLFDWLRQ
SURFHVV8VHVVWDQGDUGDXWKHQWLFDWLRQIRUDOORWKHUV
UHTXLUHG5HTXLUHV;DXWKHQWLFDWLRQIRUDOOFOLHQWV
'HIDXOW6HWWLQJ
'LVDEOHG
7DEOH ;$XWKHQWLFDWLRQ
&RPPDQG )XQFWLRQ 0RGH 3DJH
4
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
:KHQ;LVGLVDEOHGWKHDFFHVVSRLQWGRHVQRWVXSSRUW;
DXWKHQWLFDWLRQIRUDQ\VWDWLRQ$IWHUVXFFHVVIXODVVRFLDWLRQHDFK
FOLHQWLVDOORZHGWRDFFHVVWKHQHWZRUN
:KHQ;LVVXSSRUWHGWKHDFFHVVSRLQWVXSSRUWV;
DXWKHQWLFDWLRQRQO\IRUFOLHQWVLQLWLDWLQJWKH;DXWKHQWLFDWLRQSURFHVV
LHWKHDFFHVVSRLQWGRHV127LQLWLDWH;DXWKHQWLFDWLRQ)RUVWDWLRQV
LQLWLDWLQJ;RQO\WKRVHVWDWLRQVVXFFHVVIXOO\DXWKHQWLFDWHGDUHDOORZHG
WRDFFHVVWKHQHWZRUN)RUWKRVHVWDWLRQVQRWLQLWLDWLQJ;DFFHVVWR
WKHQHWZRUNLVDOORZHGDIWHUVXFFHVVIXODVVRFLDWLRQ
:KHQ;LVUHTXLUHGWKHDFFHVVSRLQWHQIRUFHV;DXWKHQWLFDWLRQ
IRUDOODVVRFLDWHGVWDWLRQV,I;DXWKHQWLFDWLRQLVQRWLQLWLDWHGE\
WKHVWDWLRQWKHDFFHVVSRLQWZLOOLQLWLDWHDXWKHQWLFDWLRQ2QO\WKRVHVWDWLRQV
VXFFHVVIXOO\DXWKHQWLFDWHGZLWK;DUHDOORZHGWRDFFHVVWKHQHWZRUN
;GRHVQRWDSSO\WRWKH%DVH7;SRUW
([DPSOH
[EURDGFDVWNH\UHIUHVKUDWH
7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKWKHEURDGFDVWNH\VDUHUHIUHVKHGIRU
VWDWLRQVXVLQJ;G\QDPLFNH\LQJ
6\QWD[
[EURDGFDVWNH\UHIUHVKUDWHUDWH!
UDWH7KHLQWHUYDODWZKLFKWKHDFFHVVSRLQWURWDWHVEURDGFDVWNH\V
5DQJHPLQXWHV
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHDFFHVVSRLQWXVHV(QWHUSULVH$32/([WHQVLEOH$XWKHQWLFDWLRQ
3URWRFRO2YHU/$1VSDFNHWVWRSDVVG\QDPLFXQLFDVWVHVVLRQDQG
EURDGFDVWNH\VWRZLUHOHVVFOLHQWV7KH[
EURDGFDVWNH\UHIUHVKUDWHFRPPDQGVSHFLILHVWKHLQWHUYDODIWHUZKLFK
WKHEURDGFDVWNH\VDUHFKDQJHG7KH[VHVVLRQNH\UHIUHVKUDWH
Enterprise AP(config)#802.1x supported
Enterprise AP(config)#
5
FRPPDQGVSHFLILHVWKHLQWHUYDODIWHUZKLFKXQLFDVWVHVVLRQNH\VDUH
FKDQJHG
'\QDPLFEURDGFDVWNH\URWDWLRQDOORZVWKHDFFHVVSRLQWWRJHQHUDWHD
UDQGRPJURXSNH\DQGSHULRGLFDOO\XSGDWHDOONH\PDQDJHPHQWFDSDEOH
ZLUHOHVVFOLHQWV
([DPSOH
[VHVVLRQNH\UHIUHVKUDWH
7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKXQLFDVWVHVVLRQNH\VDUHUHIUHVKHGIRU
DVVRFLDWHGVWDWLRQVXVLQJG\QDPLFNH\LQJ
6\QWD[
[VHVVLRQNH\UHIUHVKUDWHUDWH!
UDWH7KHLQWHUYDODWZKLFKWKHDFFHVVSRLQWUHIUHVKHVDVHVVLRQNH\
5DQJHPLQXWHV
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
6HVVLRQNH\VDUHXQLTXHWRHDFKFOLHQWDQGDUHXVHGWRDXWKHQWLFDWHDFOLHQW
FRQQHFWLRQDQGFRUUHODWHWUDIILFSDVVLQJEHWZHHQDVSHFLILFFOLHQWDQGWKH
DFFHVVSRLQW
([DPSOH
[VHVVLRQWLPHRXW
7KLVFRPPDQGVHWVWKHWLPHSHULRGDIWHUZKLFKDFRQQHFWHGFOLHQWPXVWEH
UHDXWKHQWLFDWHG8VHWKHQRIRUPWRGLVDEOH;UHDXWKHQWLFDWLRQ
6\QWD[
[VHVVLRQWLPHRXWVHFRQGV!
QR[VHVVLRQWLPHRXW
VHFRQGV7KHQXPEHURIVHFRQGV5DQJH
'HIDXOW
'LVDEOHG
Enterprise AP(config)#802.1X broadcast-key-refresh-rate 5
Enterprise AP(config)#
Enterprise AP(config)#802.1x session-key-refresh-rate 5
Enterprise AP(config)#
6
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
[VXSSOLFDQWHQDEOH
7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQWWRRSHUDWHDVDQ;VXSSOLFDQWIRU
DXWKHQWLFDWLRQ8VHWKHQRIRUPWRGLVDEOH;DXWKHQWLFDWLRQRIWKHDFFHVV
SRLQW
6\QWD[
[VXSSOLFDQWHQDEOH
QR[VXSSOLFDQW
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
$XVHUQDPHDQGSDVVZRUGPXVWEHFRQILJXUHGILUVWEHIRUHWKH;
VXSSOLFDQWIHDWXUHFDQEHHQDEOHG
([DPSOH
[VXSSOLFDQWXVHU
7KLVFRPPDQGVHWVWKHXVHUQDPHDQGSDVVZRUGXVHGIRUDXWKHQWLFDWLRQRIWKH
DFFHVVSRLQWZKHQRSHUDWLQJDVD;VXSSOLFDQW8VHWKHQRIRUPWRFOHDUWKH
VXSSOLFDQWXVHUQDPHDQGSDVVZRUG
6\QWD[
[VXSSOLFDQWXVHUXVHUQDPH!SDVVZRUG!
QR[VXSSOLFDQWXVHU
XVHUQDPH7KHDFFHVVSRLQWQDPHXVHGIRUDXWKHQWLFDWLRQWRWKHQHWZRUN
5DQJHDOSKDQXPHULFFKDUDFWHUV
SDVVZRUG7KH0'SDVVZRUGXVHGIRUDFFHVVSRLQWDXWKHQWLFDWLRQ
5DQJHDOSKDQXPHULFFKDUDFWHUV
'HIDXOW
1RQH
Enterprise AP(config)#802.1x session-timeout 300
Enterprise AP(config)#
Enterprise AP(config)#802.1x-supplicant enable
Enterprise AP(config)#
67
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHDFFHVVSRLQWFXUUHQWO\RQO\VXSSRUWV($30'&+$3IRU;
VXSSOLFDQWDXWKHQWLFDWLRQ
([DPSOH
VKRZDXWKHQWLFDWLRQ
7KLVFRPPDQGVKRZVDOO;DXWKHQWLFDWLRQVHWWLQJVDVZHOODVWKHDGGUHVVILOWHU
WDEOH
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP(config)#802.1x-supplicant user WA6102 dot1xpass
Enterprise AP(config)#
Enterprise AP#show authentication
Authentication Information
===========================================================
MAC Authentication Server : DISABLED
MAC Auth Session Timeout Value : 0 min
802.1x supplicant : DISABLED
802.1x supplicant user : EMPTY
802.1x supplicant password : EMPTY
Address Filtering : ALLOWED
System Default : ALLOW addresses not found in filter table.
Filter Table
MAC Address Status
----------------- ----------
00-70-50-cc-99-1a DENIED
00-70-50-cc-99-1b ALLOWED
=========================================================
Enterprise AP(config)#
68
MAC Address Authentication
8VHWKHVHFRPPDQGVWRGHILQH0$&DXWKHQWLFDWLRQRQWKHDFFHVVSRLQW)RUORFDO
0$&DXWKHQWLFDWLRQILUVWGHILQHWKHGHIDXOWILOWHULQJSROLF\XVLQJWKHDGGUHVVILOWHU
GHIDXOWFRPPDQG7KHQHQWHUWKH0$&DGGUHVVHVWREHILOWHUHGLQGLFDWLQJLIWKH\DUH
DOORZHGRUGHQLHG)RU5$',860$&DXWKHQWLFDWLRQWKH0$&DGGUHVVHVDQG
ILOWHULQJSROLF\PXVWEHFRQILJXUHGRQWKH5$',86VHUYHU
DGGUHVVILOWHUGHIDXOW
7KLVFRPPDQGVHWVILOWHULQJWRDOORZRUGHQ\OLVWHG0$&DGGUHVVHV
6\QWD[
DGGUHVVILOWHUGHIDXOWDOORZHG_GHQLHG!
DOORZHG2QO\0$&DGGUHVVHVHQWHUHGDV³GHQLHG´LQWKHDGGUHVVILOWHULQJ
WDEOHDUHGHQLHG
GHQLHG2QO\0$&DGGUHVVHVHQWHUHGDV³DOORZHG´LQWKHDGGUHVVILOWHULQJ
WDEOHDUHDOORZHG
'HIDXOW
DOORZHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
7DEOH 0$&$GGUHVV$XWKHQWLFDWLRQ
&RPPDQG )XQFWLRQ 0RGH 3DJH
Enterprise AP(config)#address filter default denied
Enterprise AP(config)#
69
5HODWHG&RPPDQGV
DGGUHVVILOWHUHQWU\
[VXSSOLFDQWXVHU
DGGUHVVILOWHUHQWU\
7KLVFRPPDQGHQWHUVD0$&DGGUHVVLQWKHILOWHUWDEOH
6\QWD[
DGGUHVVILOWHUHQWU\PDFDGGUHVV!DOORZHG_GHQLHG!
PDFDGGUHVV3K\VLFDODGGUHVVRIFOLHQW(QWHUVL[SDLUVRIKH[DGHFLPDO
GLJLWVVHSDUDWHGE\K\SKHQVHJ'$%
DOORZHG(QWU\LVDOORZHGDFFHVV
GHQLHG(QWU\LVGHQLHGDFFHVV
'HIDXOW
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG0RGH
7KHDFFHVVSRLQWVXSSRUWVXSWR0$&DGGUHVVHV
$QHQWU\LQWKHDGGUHVVWDEOHPD\EHDOORZHGRUGHQLHGDFFHVVGHSHQGLQJ
RQWKHJOREDOVHWWLQJFRQILJXUHGIRUWKHDGGUHVVHQWU\GHIDXOWFRPPDQG
([DPSOH
5HODWHG&RPPDQGV
DGGUHVVILOWHUGHIDXOW
[VXSSOLFDQWXVHU
DGGUHVVILOWHUGHOHWH
7KLVFRPPDQGGHOHWHVD0$&DGGUHVVIURPWKHILOWHUWDEOH
6\QWD[
DGGUHVVILOWHUGHOHWHPDFDGGUHVV!
PDFDGGUHVV3K\VLFDODGGUHVVRIFOLHQW(QWHUVL[SDLUVRIKH[DGHFLPDO
GLJLWVVHSDUDWHGE\K\SKHQV
'HIDXOW
1RQH
Enterprise AP(config)#address filter entry 00-70-50-cc-99-1a allowed
Enterprise AP(config)#
0
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
[VXSSOLFDQWXVHU
PDFDXWKHQWLFDWLRQVHUYHU
7KLVFRPPDQGVHWVDGGUHVVILOWHULQJWREHSHUIRUPHGZLWKORFDORUUHPRWHRSWLRQV
8VHWKHQRIRUPWRGLVDEOH0$&DGGUHVVDXWKHQWLFDWLRQ
6\QWD[
PDFDXWKHQWLFDWLRQVHUYHU>ORFDO_UHPRWH@
ORFDO$XWKHQWLFDWHWKH0$&DGGUHVVRIZLUHOHVVFOLHQWVZLWKWKHORFDO
DXWKHQWLFDWLRQGDWDEDVHGXULQJDVVRFLDWLRQ
UHPRWH$XWKHQWLFDWHWKH0$&DGGUHVVRIZLUHOHVVFOLHQWVZLWKWKH
5$',86VHUYHUGXULQJ;DXWKHQWLFDWLRQ
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
5HODWHG&RPPDQGV
DGGUHVVILOWHUHQWU\
UDGLXVVHUYHUDGGUHVV
[VXSSOLFDQWXVHU
PDFDXWKHQWLFDWLRQVHVVLRQWLPHRXW
7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKDVVRFLDWHGFOLHQWVZLOOEHUHDXWKHQWLFDWHG
ZLWKWKH5$',86VHUYHUDXWKHQWLFDWLRQGDWDEDVH8VHWKHQRIRUPWRGLVDEOH
UHDXWKHQWLFDWLRQ
6\QWD[
PDFDXWKHQWLFDWLRQVHVVLRQWLPHRXWPLQXWHV!
PLQXWHV5HDXWKHQWLFDWLRQLQWHUYDO5DQJH
Enterprise AP(config)#address filter delete 00-70-50-cc-99-1b
Enterprise AP(config)#
Enterprise AP(config)#mac-authentication server remote
Enterprise AP(config)#
1
'HIDXOW
GLVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Filtering Commands
7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQDUHXVHGWRILOWHUFRPPXQLFDWLRQVEHWZHHQ
ZLUHOHVVFOLHQWVFRQWURODFFHVVWRWKHPDQDJHPHQWLQWHUIDFHIURPZLUHOHVVFOLHQWV
DQGILOWHUWUDIILFXVLQJVSHFLILF(WKHUQHWSURWRFROW\SHV
Enterprise AP(config)#mac-authentication session-timeout 1
Enterprise AP(config)#
7DEOH )LOWHULQJ&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
2
ILOWHUORFDOEULGJH
7KLVFRPPDQGGLVDEOHVFRPPXQLFDWLRQEHWZHHQZLUHOHVVFOLHQWV8VHWKHQRIRUP
WRGLVDEOHWKLVILOWHULQJ
6\QWD[
ILOWHUORFDOEULGJHDOO9$3_LQWUD9$3!
QRILOWHUORFDOEULGJH
DOO9$3:KHQHQDEOHGFOLHQWVFDQQRWHVWDEOLVKZLUHOHVVFRPPXQLFDWLRQV
ZLWKDQ\RWKHUFOLHQWHLWKHUWKRVHDVVRFLDWHGWRWKHVDPH9$3LQWHUIDFHRU
DQ\RWKHU9$3LQWHUIDFH
LQWUD9$3:KHQHQDEOHGFOLHQWVDVVRFLDWHGZLWKDVSHFLILF9$3LQWHUIDFH
FDQQRWHVWDEOLVKZLUHOHVVFRPPXQLFDWLRQVZLWKHDFKRWKHU&OLHQWVFDQ
FRPPXQLFDWHZLWKFOLHQWVDVVRFLDWHGWRRWKHU9$3LQWHUIDFHV
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGFDQGLVDEOHZLUHOHVVWRZLUHOHVVFRPPXQLFDWLRQVEHWZHHQ
FOLHQWVYLDWKHDFFHVVSRLQW+RZHYHULWGRHVQRWDIIHFWFRPPXQLFDWLRQV
EHWZHHQZLUHOHVVFOLHQWVDQGWKHZLUHGQHWZRUN
([DPSOH
ILOWHUDSPDQDJH
7KLVFRPPDQGSUHYHQWVZLUHOHVVFOLHQWVIURPDFFHVVLQJWKHPDQDJHPHQWLQWHUIDFH
RQWKHDFFHVVSRLQW8VHWKHQRIRUPWRGLVDEOHWKLVILOWHULQJ
6\QWD[
ILOWHUDSPDQDJH
QRILOWHUDSPDQDJH
'HIDXOW
(QDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Enterprise AP(config)#filter local-bridge
Enterprise AP(config)#
Enterprise AP(config)#filter AP-manage
Enterprise AP(config)#
3
ILOWHUXSOLQNHQDEOH
7KLVFRPPDQGHQDEOHVILOWHULQJRI0$&DGGUHVVHVIURPWKH(WKHUQHWSRUW
6\QWD[
>QR@ILOWHUXSOLQNHQDEOH
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
ILOWHUXSOLQN
7KLVFRPPDQGDGGVRUGHOHWHV0$&DGGUHVVHVIURPWKHXSOLQNILOWHULQJWDEOH
6\QWD[
ILOWHUXSOLQNDGG_GHOHWH!0$&DGGUHVV
0$&DGGUHVV6SHFLILHVD0$&DGGUHVVLQWKHIRUP[[[[[[[[[[[[
$PD[LPXPRIIRXUDGGUHVVHVFDQEHDGGHGWRWKHILOWHULQJWDEOH
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
ILOWHUHWKHUQHWW\SHHQDEOH
7KLVFRPPDQGFKHFNVWKH(WKHUQHWW\SHRQDOOLQFRPLQJDQGRXWJRLQJ(WKHUQHW
SDFNHWVDJDLQVWWKHSURWRFROILOWHULQJWDEOH8VHWKHQRIRUPWRGLVDEOHWKLVIHDWXUH
6\QWD[
ILOWHUHWKHUQHWW\SHHQDEOH
QRILOWHUHWKHUQHWW\SHHQDEOH
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
Enterprise AP(config)#filter uplink enable
Enterprise AP(config)#
Enterprise AP(config)#filter uplink add 00-12-34-56-78-9a
Enterprise AP(config)#
4
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKHILOWHUHWKHUQHWW\SHSURWRFRO
FRPPDQGWRGHWHUPLQHZKLFK(WKHUQHWSURWRFROW\SHVDUHWREHILOWHUHG
([DPSOH
5HODWHG&RPPDQGV
ILOWHUHWKHUQHWW\SHSURWRFRO
ILOWHUHWKHUQHWW\SHSURWRFRO
7KLVFRPPDQGVHWVDILOWHUIRUDVSHFLILF(WKHUQHWW\SH8VHWKHQRIRUPWRGLVDEOH
ILOWHULQJIRUDVSHFLILF(WKHUQHWW\SH
6\QWD[
ILOWHUHWKHUQHWW\SHSURWRFROSURWRFRO!
QRILOWHUHWKHUQHWW\SHSURWRFROSURWRFRO!
SURWRFRO$Q(WKHUQHWSURWRFROW\SH2SWLRQV$535$53
%HUNHOH\7UDLOHU1HJRWLDWLRQ/$17HVW;/HYHO%DQ\DQ&'3'(&
;16'(&023'XPS/RDG'(&023'(&/$7(WKHUWDON
$SSOHWDON$531RYHOO,3;ROG1RYHOO,3;QHZ($32/7HO[RQ7;3
$LURQHW''3(QHW&RQILJ7HVW,3,3Y1HW%(8,333R(B'LVFRYHU\
333R(B333B6HVVLRQ
'HIDXOW
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
8VHWKHILOWHUHWKHUQHWW\SHHQDEOHFRPPDQGWRHQDEOHILOWHULQJIRU(WKHUQHW
W\SHVVSHFLILHGLQWKHILOWHULQJWDEOHRUWKHQRILOWHUHWKHUQHWW\SHHQDEOH
FRPPDQGWRGLVDEOHDOOILOWHULQJEDVHGRQWKHILOWHULQJWDEOH
([DPSOH
5HODWHG&RPPDQGV
ILOWHUHWKHUQHWW\SHHQDEOH
Enterprise AP(config)#filter ethernet-type enable
Enterprise AP(config)#
Enterprise AP(config)#filter ethernet-type protocol ARP
Enterprise AP(config)#
5
VKRZILOWHUV
7KLVFRPPDQGVKRZVWKHILOWHURSWLRQVDQGSURWRFROHQWULHVLQWKHILOWHUWDEOH
&RPPDQG0RGH
([HF
([DPSOH
WDS Bridge Commands
7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQDUHXVHGWRVHWWKHRSHUDWLRQPRGHIRU
HDFKDFFHVVSRLQWLQWHUIDFHDQGFRQILJXUH:,UHOHVV'LVWULEXWLRQ6\VWHP:'6
IRUZDUGLQJWDEOHVHWWLQJV
Enterprise AP#show filters
Protocol Filter Information
=======================================================================
Local Bridge :Traffic among all client STAs blocked
AP Management :ENABLED
Ethernet Type Filter :DISABLED
UPlink Access Table
-----------------------------------------------------------------------
UPlink access control:Enabled
UPlink MAC access control list :
00-12-34-56-78-9a
-----------------------------------------------------------------------
Enabled Protocol Filters
-----------------------------------------------------------------------
No protocol filters are enabled
=======================================================================
Enterprise AP#
&RPPDQG )XQFWLRQ 0RGH 3DJH
6
EULGJHUROH:'6
7KLVFRPPDQGVHOHFWVWKHEULGJHRSHUDWLRQPRGHIRUWKHUDGLRLQWHUIDFH
6\QWD[
EULGJHUROHDS_UHSHDWHU_EULGJH_URRWEULGJH!
DS2SHUDWHVRQO\DVDQDFFHVVSRLQWIRUZLUHOHVVFOLHQWV
UHSHDWHU2SHUDWHVDVDZLUHOHVVUHSHDWHUH[WHQGLQJWKHUDQJHIRUUHPRWH
ZLUHOHVVFOLHQWVDQGFRQQHFWLQJWKHPWRWKHURRWEULGJH7KH³3DUHQW´OLQNWR
WKHURRWEULGJHPXVWEHFRQILJXUHG,QWKLVPRGHWUDIILFLVQRWIRUZDUGHGWR
WKH(WKHUQHWSRUWIURPWKHUDGLRLQWHUIDFH
EULGJH2SHUDWHVDVDEULGJHWRRWKHUDFFHVVSRLQWVDOVRLQEULGJHPRGH
URRWEULGJH2SHUDWHVDVWKHURRWEULGJHLQWKHZLUHOHVVEULGJHQHWZRUN
'HIDXOW6HWWLQJ
$3
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
:KHQWKHEULGJHUROHLVVHWWR³UHSHDWHU´WKH³3DUHQW´OLQNWRWKHURRWEULGJH
PXVWEHFRQILJXUHGVHH³EULGJHOLQNSDUHQW´RQSDJH :KHQWKH
DFFHVVSRLQWLVRSHUDWLQJLQWKLVPRGHWUDIILFLVQRWIRUZDUGHGWRWKH
(WKHUQHWSRUWIURPWKHUDGLRLQWHUIDFH
8SWRIRXU:'6EULGJHOLQNV0$&DGGUHVVHVSHUUDGLRLQWHUIDFHFDQEH
VSHFLILHGIRUHDFKXQLWLQWKHZLUHOHVVEULGJHQHWZRUN2QHXQLWRQO\PXVWEH
FRQILJXUHGDVWKH³URRWEULGJH´LQWKHZLUHOHVVQHWZRUN7KHURRWEULGJHLV
WKHXQLWFRQQHFWHGWRWKHPDLQFRUHRIWKHZLUHG/$12WKHUEULGJHVQHHG
WRVSHFLI\RQH³3DUHQW´OLQNWRWKHURRWEULGJHRUWRDEULGJHFRQQHFWHGWRWKH
URRWEULGJH7KHRWKHUVHYHQ:'6OLQNVDUHDYDLODEOHDV³&KLOG´OLQNVWR
RWKHUEULGJHV
7KHEULGJHOLQNRQWKHUDGLRLQWHUIDFHDOZD\VXVHVWKHGHIDXOW9$3LQWHUIDFH
,QDQ\EULGJHPRGH9$3LQWHUIDFHVWRDUHQRWDYDLODEOHIRUXVH
([DPSOH
Enterprise AP(if-wireless a)#bridge role root-bridge
Enterprise AP(if-wireless a)#
77
EULGJHFKDQQHODXWRV\QF
7KLVFRPPDQGDOORZVDFKLOGEULGJHWRDXWRPDWLFDOO\ILQGWKHRSHUDWLQJFKDQQHORILWV
SDUHQWEULGJH
6\QWD[
EULGJHFKDQQHODXWRV\QFHQDEOH_GLVDEOH!
HQDEOH7KHEULGJHZLOODXWRPDWLFDOO\VHDUFKDQGILQGWKHRSHUDWLQJ
FKDQQHORILWVSDUHQW
GLVDEOH7KHEULGJHPXVWKDYHWKHRSHUDWLQJFKDQQHOPDQXDOO\VHWWRWKH
RSHUDWLQJFKDQQHORILWVSDUHQWEULGJH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
([DPSOH
EULGJHOLQNSDUHQW
7KLVFRPPDQGFRQILJXUHVWKH0$&DGGUHVVRIWKHSDUHQWEULGJHQRGH
6\QWD[
EULGJHOLQNSDUHQWPDFDGGUHVV!
PDFDGGUHVV7KHZLUHOHVV0$&DGGUHVVRIWKHSDUHQWEULGJHXQLW
KH[DGHFLPDOGLJLWVLQWKHIRUP³[[[[[[[[[[[[´
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
(YHU\EULGJHH[FHSWWKHURRWEULGJHLQWKHZLUHOHVVEULGJHQHWZRUNPXVW
VSHFLI\WKH0$&DGGUHVVRIWKHSDUHQWEULGJHWKDWLVOLQNHGWRWKHURRWEULGJH
RUWKHURRWEULGJHLWVHOI
([DPSOH
Enterprise AP(if-wireless a)#bridge channel-auto-sync enable
Enable channel auto sync!!
Enterprise AP(if-wireless a)#
Enterprise AP(if-wireless a)#bridge-link parent 00-08-2d-69-3a-51
Enterprise AP(if-wireless a)#
78
EULGJHOLQNFKLOG
7KLVFRPPDQGFRQILJXUHVWKH0$&DGGUHVVHVRIFKLOGEULGJHQRGHV
6\QWD[
EULGJHOLQNFKLOGLQGH[!PDFDGGUHVV!
LQGH[7KHOLQNLQGH[QXPEHURIWKHFKLOGQRGH5DQJH
PDFDGGUHVV7KHZLUHOHVV0$&DGGUHVVRIDFKLOGEULGJHXQLW
KH[DGHFLPDOGLJLWVLQWKHIRUP³[[[[[[[[[[[[´
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
,QURRWEULGJHPRGHXSWRVL[FKLOGEULGJHOLQNVFDQEHVSHFLILHGXVLQJOLQN
LQGH[QXPEHUVWR
,QEULGJHPRGHXSWRILYHFKLOGOLQNVFDQEHVSHFLILHGXVLQJOLQNLQGH[
QXPEHUVWR,QGH[QXPEHULVUHVHUYHGIRUWKHSDUHQWOLQNZKLFKPXVW
EHVHWXVLQJWKHEULGJHSDUHQWFRPPDQG
([DPSOH
EULGJHG\QDPLFHQWU\DJHWLPH
7KLVFRPPDQGVHWVWKHWLPHIRUDJLQJRXWG\QDPLFHQWULHVLQWKH:'6IRUZDUGLQJ
WDEOH
6\QWD[
EULGJHG\QDPLFHQWU\DJHWLPHVHFRQGV!
VHFRQGV7KHWLPHWRDJHRXWDQDGGUHVVHQWU\5DQJH
VHFRQGV
'HIDXOW6HWWLQJ
VHFRQGV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
Enterprise AP(if-wireless a)#bridge-link child 2 00-08-3e-84-bc-6d
Enterprise AP(if-wireless a)#bridge-link child 3 00-08-3e-85-13-f2
Enterprise AP(if-wireless a)#bridge-link child 4 00-08-3e-84-79-31
Enterprise AP(if-wireless a)#
79
&RPPDQG8VDJH
,IWKH0$&DGGUHVVRIDQHQWU\LQWKHDGGUHVVWDEOHLVQRWVHHQRQWKH
DVVRFLDWHGLQWHUIDFHIRUORQJHUWKDQWKHDJLQJWLPHWKHHQWU\LVGLVFDUGHG
([DPSOH
VKRZEULGJHDJLQJWLPH
7KLVFRPPDQGGLVSOD\VWKHFXUUHQW:'6IRUZDUGLQJWDEOHDJLQJWLPHVHWWLQJ
&RPPDQG0RGH
([HF
([DPSOH
VKRZEULGJHILOWHUHQWU\
7KLVFRPPDQGGLVSOD\VFXUUHQWHQWULHVLQWKH:'6IRUZDUGLQJWDEOH
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP(config)#bridge dynamic-entry age-time 100
Enterprise AP(config)#
Enterprise AP#show bridge aging-time
Aging time: 300
Enterprise AP#
Enterprise AP#show bridge filter-entry
max entry numbers =512
current entry nums =13
*****************************************************************************
*********************** Bridge MAC Addr Table *******************************
*****************************************************************************
| MAC | Port |Fwd_type| VlanID|origin life|remain Life| Type |
01 80 c2 00 00 00 0 5 4095 300 300 Static
01 80 c2 00 00 03 0 5 4095 300 300 Static
00 30 f1 f0 9b 20 1 0 1 300 300 Static
00 30 f1 f0 9b 21 1 0 1 300 300 Static
00 30 f1 f0 9b 22 1 0 1 300 300 Static
00 30 f1 f0 9b 23 1 0 1 300 300 Static
00 30 f1 f0 9b 24 1 0 1 300 300 Static
00 30 f1 f0 9b 25 1 0 1 300 300 Static
00 30 f1 f0 9b 26 1 0 1 300 300 Static
00 30 f1 f0 9b 27 1 0 1 300 300 Static
00 30 f1 2f be 30 1 3 0 300 175 Dynamic
00 30 f1 f0 9a 9c 1 0 1 300 300 Static
ff ff ff ff ff ff 0 4 4095 300 300 Static
Enterprise AP#
0
VKRZEULGJHOLQN
7KLVFRPPDQGGLVSOD\V:'6EULGJHOLQNDQGVSDQQLQJWUHHVHWWLQJVIRUVSHFLILHG
LQWHUIDFHV
6\QWD[
VKRZEULGJHOLQNHWKHUQHW_ZLUHOHVVD_J!>LQGH[@!
HWKHUQHW6SHFLILHVWKH(WKHUQHWLQWHUIDFH
ZLUHOHVV6SHFLILHVDZLUHOHVVLQWHUIDFH
D7KHDUDGLRLQWHUIDFH
J7KHJUDGLRLQWHUIDFH
LQGH[7KHLQGH[QXPEHURIDEULGJHOLQN5DQJH
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show bridge link wireless a
Interface Wireless A WDS Information
====================================
AP Role: Bridge
Channel Auto Sync: Disable
Parent: 00-12-34-56-78-9a
Child:
Child 2: 00-08-12-34-56-de
Child 3: 00-00-00-00-00-00
Child 4: 00-00-00-00-00-00
Child 5: 00-00-00-00-00-00
Child 6: 00-00-00-00-00-00
STAs:
No WDS Stations.
Enterprise AP#
Enterprise AP#show bridge link wireless a 2
Port-No : 11
status : Enabled
state : Disabled
priority : 0
path cost : 19
message age Timer : Inactive
message age : 4469
designated-root : priority = 32768, MAC = 00:30:F1:F0:9A:9C
designated-cost : 0
designated-bridge : priority = 32768, MAC = 00:30:F1:F0:9A:9C
designated-port : priority = 0, port No = 11
forward-transitions : 0
Enterprise AP#
1
Spanning Tree Commands
7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQDUHXVHGWRVHWWKH0$&DGGUHVVWDEOH
DJLQJWLPHDQGVSDQQLQJWUHHSDUDPHWHUVIRUERWKWKH(WKHUQHWDQGZLUHOHVV
LQWHUIDFHV
EULGJHVWSHQDEOH
7KLVFRPPDQGHQDEOHVWKH6SDQQLQJ7UHH3URWRFRO8VHWKHQRIRUPWRGLVDEOHWKH
6SDQQLQJ7UHH3URWRFRO
6\QWD[
EULGJHVWSHQDEOH
QREULGJHVWSHQDEOH
'HIDXOW6HWWLQJ
(QDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
Enterprise AP#show bridge link ethernet
status : Enabled
state : Forwarding
priority : 0
path cost : 19
message age Timer : Inactive
message age : 4346
designated-root : priority = 32768, MAC = 00:30:F1:F0:9A:9C
designated-cost : 0
designated-bridge : priority = 32768, MAC = 00:30:F1:F0:9A:9C
designated-port : priority = 0, port No = 1
forward-transitions : 1
Enterprise AP#
7DEOH %ULGJH&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
2
([DPSOH
7KLVH[DPSOHJOREDOO\HQDEOHVWKH6SDQQLQJ7UHH3URWRFRO
EULGJHVWSIRUZDUGLQJGHOD\
8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHEULGJHIRUZDUGWLPHJOREDOO\IRUWKH
ZLUHOHVVEULGJH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW
6\QWD[
EULGJHVWSIRUZDUGLQJGHOD\VHFRQGV!
QREULGJHVWSIRUZDUGLQJGHOD\
VHFRQGV7LPHLQVHFRQGV5DQJHVHFRQGV
7KHPLQLPXPYDOXHLVWKHKLJKHURIRU>PD[DJH@
'HIDXOW6HWWLQJ
VHFRQGV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGVHWVWKHPD[LPXPWLPHLQVHFRQGVWKHURRWGHYLFHZLOOZDLW
EHIRUHFKDQJLQJVWDWHVLHGLVFDUGLQJWROHDUQLQJWRIRUZDUGLQJ7KLVGHOD\LV
UHTXLUHGEHFDXVHHYHU\GHYLFHPXVWUHFHLYHLQIRUPDWLRQDERXWWRSRORJ\
FKDQJHVEHIRUHLWVWDUWVWRIRUZDUGIUDPHV,QDGGLWLRQHDFKSRUWQHHGVWLPHWR
OLVWHQIRUFRQIOLFWLQJLQIRUPDWLRQWKDWZRXOGPDNHLWUHWXUQWRWKHGLVFDUGLQJ
VWDWHRWKHUZLVHWHPSRUDU\GDWDORRSVPLJKWUHVXOW
([DPSOH
EULGJHVWSKHOORWLPH
8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHEULGJHKHOORWLPHJOREDOO\IRUWKH
ZLUHOHVVEULGJH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW
6\QWD[
EULGJHVWSKHOORWLPHWLPH!
QREULGJHVWSKHOORWLPH
WLPH7LPHLQVHFRQGV5DQJHVHFRQGV
7KHPD[LPXPYDOXHLVWKHORZHURIRU>PD[DJH@
'HIDXOW6HWWLQJ
VHFRQGV
Enterprise AP(config)bridge stp enable
Enterprise AP(config)
Enterprise AP(config)#bridge stp forwarding-delay 20
Enterprise AP(config)#
3
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGVHWVWKHWLPHLQWHUYDOLQVHFRQGVDWZKLFKWKHURRWGHYLFH
WUDQVPLWVDFRQILJXUDWLRQPHVVDJH
([DPSOH
EULGJHVWSPD[DJH
8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHEULGJHPD[LPXPDJHJOREDOO\IRU
WKHZLUHOHVVEULGJH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW
6\QWD[
EULGJHVWSPD[DJHVHFRQGV!
QREULGJHVWSPD[DJH
VHFRQGV7LPHLQVHFRQGV5DQJHVHFRQGV
7KHPLQLPXPYDOXHLVWKHKLJKHURIRU>[KHOORWLPH@
7KHPD[LPXPYDOXHLVWKHORZHURIRU>[IRUZDUGWLPH@
'HIDXOW6HWWLQJ
VHFRQGV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGVHWVWKHPD[LPXPWLPHLQVHFRQGVDGHYLFHFDQZDLWZLWKRXW
UHFHLYLQJDFRQILJXUDWLRQPHVVDJHEHIRUHDWWHPSWLQJWRUHFRQILJXUH$OOGHYLFH
SRUWVH[FHSWIRUGHVLJQDWHGSRUWVVKRXOGUHFHLYHFRQILJXUDWLRQPHVVDJHVDW
UHJXODULQWHUYDOV$Q\SRUWWKDWDJHVRXW673LQIRUPDWLRQSURYLGHGLQWKHODVW
FRQILJXUDWLRQPHVVDJHEHFRPHVWKHGHVLJQDWHGSRUWIRUWKHDWWDFKHG/$1,I
LWLVDURRWSRUWDQHZURRWSRUWLVVHOHFWHGIURPDPRQJWKHGHYLFHSRUWV
DWWDFKHGWRWKHQHWZRUN
([DPSOH
EULGJHVWSSULRULW\
8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHSULRULW\JOREDOO\IRUWKHZLUHOHVV
EULGJH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW
6\QWD[
EULGJHVWSSULRULW\SULRULW\!
Enterprise AP(config)#bridge stp hello-time 5
Enterprise AP(config)#
Enterprise AP(config)#bridge stp max-age 40
Enterprise AP(config)#
4
QREULGJHVWSSULRULW\
SULRULW\3ULRULW\RIWKHEULGJH5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
%ULGJHSULRULW\LVXVHGLQVHOHFWLQJWKHURRWGHYLFHURRWSRUWDQGGHVLJQDWHG
SRUW7KHGHYLFHZLWKWKHKLJKHVWSULRULW\EHFRPHVWKH673URRWGHYLFH
+RZHYHULIDOOGHYLFHVKDYHWKHVDPHSULRULW\WKHGHYLFHZLWKWKHORZHVW0$&
DGGUHVVZLOOWKHQEHFRPHWKHURRWGHYLFH
([DPSOH
EULGJHOLQNSDWKFRVW
8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHSDWKFRVWIRUWKHVSHFLILHGSRUW
6\QWD[
EULGJHOLQNSDWKFRVWLQGH[!FRVW!
LQGH[6SHFLILHVWKHEULGJHOLQNQXPEHURQWKHZLUHOHVVEULGJH5DQJH
UHTXLUHGRQZLUHOHVVLQWHUIDFHRQO\
FRVW7KHSDWKFRVWIRUWKHSRUW5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGLVXVHGE\WKH6SDQQLQJ7UHH3URWRFROWRGHWHUPLQHWKHEHVW
SDWKEHWZHHQGHYLFHV7KHUHIRUHORZHUYDOXHVVKRXOGEHDVVLJQHGWRSRUWV
DWWDFKHGWRIDVWHUPHGLDDQGKLJKHUYDOXHVDVVLJQHGWRSRUWVZLWKVORZHU
PHGLD
3DWKFRVWWDNHVSUHFHGHQFHRYHUSRUWSULRULW\
([DPSOH
EULGJHOLQNSRUWSULRULW\
8VHWKLVFRPPDQGWRFRQILJXUHWKHSULRULW\IRUWKHVSHFLILHGSRUW
Enterprise AP(config)#bridge stp-bridge priority 40000
Enterprise AP(config)#
Enterprise AP(if-wireless a)#bridge-link path-cost 1 50
Enterprise AP(if-wireless a)#
5
6\QWD[
EULGJHOLQNSRUWSULRULW\LQGH[!SULRULW\!
LQGH[6SHFLILHVWKHEULGJHOLQNQXPEHURQWKHZLUHOHVVEULGJH5DQJH
UHTXLUHGRQZLUHOHVVLQWHUIDFHRQO\
SULRULW\7KHSULRULW\IRUDSRUW5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ
&RPPDQG8VDJH
7KLVFRPPDQGGHILQHVWKHSULRULW\IRUWKHXVHRIDSRUWLQWKH6SDQQLQJ7UHH
3URWRFRO,IWKHSDWKFRVWIRUDOOSRUWVRQDZLUHOHVVEULGJHDUHWKHVDPHWKH
SRUWZLWKWKHKLJKHVWSULRULW\WKDWLVORZHVWYDOXHZLOOEHFRQILJXUHGDVDQ
DFWLYHOLQNLQWKHVSDQQLQJWUHH
:KHUHPRUHWKDQRQHSRUWLVDVVLJQHGWKHKLJKHVWSULRULW\WKHSRUWZLWKORZHVW
QXPHULFLGHQWLILHUZLOOEHHQDEOHG
([DPSOH
5HODWHG&RPPDQGV
EULGJHOLQNSDWKFRVW
VKRZEULGJHVWS
7KLVFRPPDQGGLVSOD\VDJLQJWLPHDQGVSDQQLQJWUHHVHWWLQJVIRUWKH(WKHUQHWDQG
ZLUHOHVVLQWHUIDFHV
6\QWD[
VKRZEULGJHVWS
&RPPDQG0RGH
([HF
Enterprise AP(if-wireless a)#bridge-link port-priority 1 64
Enterprise AP(if-wireless a)#
6
([DPSOH
Enterprise AP#show bridge stp
Bridge MAC : 00:12:CF:05:B7:84
Status : Disabled
priority : 0
designated-root : priority = 0, MAC = 00:00:00:00:00:00
root-path-cost : 0
root-Port-no : 0
Hold Time : 1 Seconds
Hello Time : 2 Seconds
Maximum Age : 20 Seconds
Forward Delay : 15 Seconds
bridge Hello Time : 2 Seconds
bridge Maximum Age : 20 Seconds
bridge Forward Delay : 15 Seconds
time-since-top-change: 89185 Seconds
topology-change-count: 0
Enterprise AP#
87
Ethernet Interface Commands
7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQFRQILJXUHFRQQHFWLRQSDUDPHWHUVIRUWKH
(WKHUQHWSRUWDQGZLUHOHVVLQWHUIDFH
LQWHUIDFHHWKHUQHW
7KLVFRPPDQGHQWHUV(WKHUQHWLQWHUIDFHFRQILJXUDWLRQPRGH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
7RVSHFLI\WKH%DVH7;QHWZRUNLQWHUIDFHHQWHUWKHIROORZLQJFRPPDQG
7DEOH (WKHUQHW,QWHUIDFH&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
Enterprise AP(config)#interface ethernet
Enterprise AP(if-ethernet)#
88
GQVVHUYHU
7KLVFRPPDQGVSHFLILHVWKHDGGUHVVIRUWKHSULPDU\RUVHFRQGDU\GRPDLQQDPH
VHUYHUWREHXVHGIRUQDPHWRDGGUHVVUHVROXWLRQ
6\QWD[
GQVSULPDU\VHUYHUVHUYHUDGGUHVV!
GQVVHFRQGDU\VHUYHUVHUYHUDGGUHVV!
SULPDU\VHUYHU3ULPDU\VHUYHUXVHGIRUQDPHUHVROXWLRQ
VHFRQGDU\VHUYHU6HFRQGDU\VHUYHUXVHGIRUQDPHUHVROXWLRQ
VHUYHUDGGUHVV,3DGGUHVVRIGRPDLQQDPHVHUYHU
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHSULPDU\DQGVHFRQGDU\QDPHVHUYHUVDUHTXHULHGLQVHTXHQFH
([DPSOH
7KLVH[DPSOHVSHFLILHVWZRGRPDLQQDPHVHUYHUV
5HODWHG&RPPDQGV
VKRZLQWHUIDFHHWKHUQHW
LSDGGUHVV
7KLVFRPPDQGVHWVWKH,3DGGUHVVIRUWKHDFFHVVSRLQW8VHWKHQRIRUPWRUHVWRUH
WKHGHIDXOW,3DGGUHVV
6\QWD[
LSDGGUHVVLSDGGUHVV!QHWPDVN!JDWHZD\!
QRLSDGGUHVV
LSDGGUHVV,3DGGUHVV
QHWPDVN1HWZRUNPDVNIRUWKHDVVRFLDWHG,3VXEQHW7KLVPDVNLGHQWLILHV
WKHKRVWDGGUHVVELWVXVHGIRUURXWLQJWRVSHFLILFVXEQHWV
JDWHZD\,3DGGUHVVRIWKHGHIDXOWJDWHZD\
'HIDXOW6HWWLQJ
,3DGGUHVV
1HWPDVN
Enterprise AP(if-ethernet)#dns primary-server 192.168.1.55
Enterprise AP(if-ethernet)#dns secondary-server 10.1.0.55
Enterprise AP(if-ethernet)#
89
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
&RPPDQG8VDJH
'+&3LVHQDEOHGE\GHIDXOW7RPDQXDOO\FRQILJXUHDQHZ,3DGGUHVV\RX
PXVWILUVWGLVDEOHWKH'+&3FOLHQWZLWKWKHQRLSGKFSFRPPDQG
<RXPXVWDVVLJQDQ,3DGGUHVVWRWKLVGHYLFHWRJDLQPDQDJHPHQWDFFHVV
RYHUWKHQHWZRUNRUWRFRQQHFWWKHDFFHVVSRLQWWRH[LVWLQJ,3VXEQHWV<RX
FDQPDQXDOO\FRQILJXUHDVSHFLILF,3DGGUHVVXVLQJWKLVFRPPDQGRUGLUHFW
WKHGHYLFHWRREWDLQDQDGGUHVVIURPD'+&3VHUYHUXVLQJWKHLSGKFS
FRPPDQG9DOLG,3DGGUHVVHVFRQVLVWRIIRXUQXPEHUVWRVHSDUDWHG
E\SHULRGV$Q\WKLQJRXWVLGHWKLVIRUPDWZLOOQRWEHDFFHSWHGE\WKH
FRQILJXUDWLRQSURJUDP
([DPSOH
5HODWHG&RPPDQGV
LSGKFS
LSGKFS
7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQWWRREWDLQDQ,3DGGUHVVIURPD'+&3
VHUYHU8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW,3DGGUHVV
6\QWD[
LSGKFS
QRLSGKFS
'HIDXOW6HWWLQJ
(QDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
&RPPDQG8VDJH
<RXPXVWDVVLJQDQ,3DGGUHVVWRWKLVGHYLFHWRJDLQPDQDJHPHQWDFFHVV
RYHUWKHQHWZRUNRUWRFRQQHFWWKHDFFHVVSRLQWWRH[LVWLQJ,3VXEQHWV<RX
FDQPDQXDOO\FRQILJXUHDVSHFLILF,3DGGUHVVXVLQJWKHLSDGGUHVV
FRPPDQGRUGLUHFWWKHGHYLFHWRREWDLQDQDGGUHVVIURPD'+&3VHUYHU
XVLQJWKLVFRPPDQG
Enterprise AP(config)#interface ethernet
Enter Ethernet configuration commands, one per line.
Enterprise AP(if-ethernet)#ip address 192.168.1.2 255.255.255.0
192.168.1.253
Enterprise AP(if-ethernet)#
0
:KHQ\RXXVHWKLVFRPPDQGWKHDFFHVVSRLQWZLOOEHJLQEURDGFDVWLQJ
'+&3FOLHQWUHTXHVWV7KHFXUUHQW,3DGGUHVVLHGHIDXOWRUPDQXDOO\
FRQILJXUHGDGGUHVVZLOOFRQWLQXHWREHHIIHFWLYHXQWLOD'+&3UHSO\LV
UHFHLYHG5HTXHVWVZLOOEHEURDGFDVWSHULRGLFDOO\E\WKLVGHYLFHLQDQHIIRUW
WROHDUQLWV,3DGGUHVV'+&3YDOXHVFDQLQFOXGHWKH,3DGGUHVVVXEQHW
PDVNDQGGHIDXOWJDWHZD\
([DPSOH
5HODWHG&RPPDQGV
LSDGGUHVV
VSHHGGXSOH[
7KLVFRPPDQGFRQILJXUHVWKHVSHHGDQGGXSOH[PRGHRIDJLYHQLQWHUIDFHZKHQ
DXWRQHJRWLDWLRQLVGLVDEOHG8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW
6\QWD[
VSHHGGXSOH[DXWR_0+_0)_0)_0+!
DXWRDXWRQHJRWLDWHVSHHGDQGGXSOH[PRGH
0+)RUFHV0ESVKDOIGXSOH[RSHUDWLRQ
0))RUFHV0ESVIXOOGXSOH[RSHUDWLRQ
0+)RUFHV0ESVKDOIGXSOH[RSHUDWLRQ
0))RUFHV0ESVIXOOGXSOH[RSHUDWLRQ
'HIDXOW6HWWLQJ
$XWRQHJRWLDWLRQLVHQDEOHGE\GHIDXOW
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
&RPPDQG8VDJH
,IDXWRQHJRWLDWLRQLVGLVDEOHGWKHVSHHGDQGGXSOH[PRGHPXVWEHFRQILJXUHG
WRPDWFKWKHVHWWLQJRIWKHDWWDFKHGGHYLFH
([DPSOH
7KHIROORZLQJH[DPSOHFRQILJXUHVWKH(WKHUQHWSRUWWR0ESVIXOOGXSOH[
RSHUDWLRQ
Enterprise AP(config)#interface ethernet
Enter Ethernet configuration commands, one per line.
Enterprise AP(if-ethernet)#ip dhcp
Enterprise AP(if-ethernet)#
Enterprise AP(if-ethernet)#speed-duplex 100mf
Enterprise AP(if-ethernet)#
1
VKXWGRZQ
7KLVFRPPDQGGLVDEOHVWKH(WKHUQHWLQWHUIDFH7RUHVWDUWDGLVDEOHGLQWHUIDFHXVH
WKHQRIRUP
6\QWD[
VKXWGRZQ
QRVKXWGRZQ
'HIDXOW6HWWLQJ
,QWHUIDFHHQDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ(WKHUQHW
&RPPDQG8VDJH
7KLVFRPPDQGDOORZV\RXWRGLVDEOHWKH(WKHUQHWSRUWGXHWRDEQRUPDO
EHKDYLRUHJ H[FHVVLYHFROOLVLRQVDQGUHHQDEOHLWDIWHUWKHSUREOHPKDV
EHHQUHVROYHG<RXPD\DOVRZDQWWRGLVDEOHWKH(WKHUQHWSRUWIRUVHFXULW\
UHDVRQV
([DPSOH
7KHIROORZLQJH[DPSOHGLVDEOHVWKH(WKHUQHWSRUW
VKRZLQWHUIDFHHWKHUQHW
7KLVFRPPDQGGLVSOD\VWKHVWDWXVIRUWKH(WKHUQHWLQWHUIDFH
6\QWD[
VKRZLQWHUIDFH>HWKHUQHW@
'HIDXOW6HWWLQJ
(WKHUQHWLQWHUIDFH
&RPPDQG0RGH
([HF
Enterprise AP(if-ethernet)#shutdown
Enterprise AP(if-ethernet)#
2
([DPSOH
Wireless Interface Commands
7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQFRQILJXUHFRQQHFWLRQSDUDPHWHUVIRUWKH
ZLUHOHVVLQWHUIDFHV
Enterprise AP#show interface ethernet
Ethernet Interface Information
========================================
IP Address : 192.168.1.1
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.1.253
Primary DNS : 192.168.1.55
Secondary DNS : 10.1.0.55
Speed-duplex : 100Base-TX Half Duplex
Admin status : Up
Operational status : Up
========================================
Enterprise AP#
7DEOH :LUHOHVV,QWHUIDFH&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
3
7DEOH :LUHOHVV,QWHUIDFH&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
4
LQWHUIDFHZLUHOHVV
7KLVFRPPDQGHQWHUVZLUHOHVVLQWHUIDFHFRQILJXUDWLRQPRGH
6\QWD[
LQWHUIDFHZLUHOHVVD_J!
DDUDGLRLQWHUIDFH
JJUDGLRLQWHUIDFH
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
7RVSHFLI\WKHDLQWHUIDFHHQWHUWKHIROORZLQJFRPPDQG
YDS
7KLVFRPPDQGSURYLGHVDFFHVVWRWKH9$39LUWXDO$FFHVV3RLQWLQWHUIDFH
FRQILJXUDWLRQPRGH
6\QWD[
YDSYDSLG!
YDSLG7KHQXPEHUWKDWLGHQWLILHVWKH9$3LQWHUIDFH2SWLRQV
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
([DPSOH
Enterprise AP(config)#interface wireless a
Enterprise AP(if-wireless a)#
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#
5
VSHHG
7KLVFRPPDQGFRQILJXUHVWKHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVVSRLQW
WUDQVPLWVXQLFDVWSDFNHWV
6\QWD[
VSHHGVSHHG!
VSHHG0D[LPXPDFFHVVVSHHGDOORZHGIRUZLUHOHVVFOLHQWV
2SWLRQV IRU D 0ESV
2SWLRQV IRU EJ 0ESV
'HIDXOW6HWWLQJ
0ESV
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KHPD[LPXPWUDQVPLVVLRQGLVWDQFHLVDIIHFWHGE\WKHGDWDUDWH7KHORZHU
WKHGDWDUDWHWKHORQJHUWKHWUDQVPLVVLRQGLVWDQFH3OHDVHUHIHUWRWKHWDEOH
IRUPD[LPXPGLVWDQFHVRQSDJH&
:KHQWXUERPRGHLVHQDEOHGSDJHIRUDWKHHIIHFWLYH
PD[LPXPVSHHGVSHFLILHGE\WKLVFRPPDQGLVGRXEOHWKHHQWHUHGYDOXH
HJVHWWLQJWKHVSHHGWR0ESVOLPLWVWKHHIIHFWLYHPD[LPXPVSHHGWR
0ESV
([DPSOH
WXUER
7KLVFRPPDQGVHWVWKHDFFHVVSRLQWWRDQHQKDQFHGSURSULHWDU\PRGXODWLRQPRGH
QRWUHJXODWHGLQ,(((DWKDWSURYLGHVDKLJKHUGDWDUDWHRIXSWR0ESV
6\QWD[
WXUERVWDWLF_G\QDPLF!
QRWXUER
VWDWLF$OZD\VXVHVWXUERPRGH
G\QDPLF:LOOXVHWXUERPRGHZKHQQRRWKHUQHDUE\DFFHVVSRLQWVDUH
GHWHFWHGRUDFWLYH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVVD
Enterprise AP(if-wireless g)#speed 6
Enterprise AP(if-wireless g)#
6
&RPPDQG8VDJH
7KHQRUPDODZLUHOHVVRSHUDWLRQPRGHSURYLGHVFRQQHFWLRQVXSWR
0ESV7XUER0RGHLVDQHQKDQFHGPRGHQRWUHJXODWHGLQ,(((
DWKDWSURYLGHVDKLJKHUGDWDUDWHRIXSWR0ESV(QDEOLQJ7XUER
0RGHDOORZVWKHDFFHVVSRLQWWRSURYLGHFRQQHFWLRQVXSWR0ESV
,QQRUPDOPRGHWKHDFFHVVSRLQWSURYLGHVDFKDQQHOEDQGZLGWKRI0+]
DQGVXSSRUWVWKHPD[LPXPQXPEHURIFKDQQHOVSHUPLWWHGE\ORFDO
UHJXODWLRQVHJFKDQQHOVIRUWKH8QLWHG6WDWHV,Q7XUER0RGHWKH
FKDQQHOEDQGZLGWKLVLQFUHDVHGWR0+]WRVXSSRUWWKHLQFUHDVHGGDWD
UDWH+RZHYHUWKLVUHGXFHVWKHQXPEHURIFKDQQHOVVXSSRUWHGHJ
FKDQQHOVIRUWKH8QLWHG6WDWHV
([DPSOH
PXOWLFDVWGDWDUDWH
7KLVFRPPDQGFRQILJXUHVWKHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVVSRLQW
WUDQVPLWVPXOWLFDVWDQGPDQDJHPHQWSDFNHWVH[FOXGLQJEHDFRQSDFNHWVRQWKH
ZLUHOHVVLQWHUIDFH
6\QWD[
PXOWLFDVWGDWDUDWHVSHHG!
VSHHG0D[LPXPWUDQVPLWVSHHGDOORZHGIRUPXOWLFDVWGDWD
2SWLRQV IRU D 0ESV
2SWLRQVIRUEJ 0ESV
'HIDXOW6HWWLQJ
0ESVIRUEJ
0ESVIRUD
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
([DPSOH
Enterprise AP(if-wireless a)#turbo
Enterprise AP(if-wireless a)#
Enterprise AP(if-wireless g)#multicast-data-rate 5.5
Enterprise AP(if-wireless g)#
97
FKDQQHO
7KLVFRPPDQGFRQILJXUHVWKHUDGLRFKDQQHOWKURXJKZKLFKWKHDFFHVVSRLQW
FRPPXQLFDWHVZLWKZLUHOHVVFOLHQWV
6\QWD[
FKDQQHOFKDQQHO_DXWR!
FKDQQHO0DQXDOO\VHWVWKHUDGLRFKDQQHOXVHGIRUFRPPXQLFDWLRQVZLWK
ZLUHOHVVFOLHQWV5DQJHIRUD
IRUQRUPDOPRGHDQGIRUWXUER
PRGH5DQJHIRUEJWR
DXWR$XWRPDWLFDOO\VHOHFWVDQXQRFFXSLHGFKDQQHOLIDYDLODEOH
2WKHUZLVHWKHORZHVWFKDQQHOLVVHOHFWHG
'HIDXOW6HWWLQJ
$XWRPDWLFFKDQQHOVHOHFWLRQ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KHDYDLODEOHFKDQQHOVHWWLQJVDUHOLPLWHGE\ORFDOUHJXODWLRQVZKLFK
GHWHUPLQHWKHQXPEHURIFKDQQHOVWKDWDUHDYDLODEOH
:KHQPXOWLSOHDFFHVVSRLQWVDUHGHSOR\HGLQWKHVDPHDUHDEHVXUHWR
FKRRVHDFKDQQHOVHSDUDWHGE\DWOHDVWWZRFKDQQHOVIRUDWRDYRLG
KDYLQJWKHFKDQQHOVLQWHUIHUHZLWKHDFKRWKHUDQGDWOHDVWILYHFKDQQHOVIRU
EJ<RXFDQGHSOR\XSWRIRXUDFFHVVSRLQWVLQWKHVDPHDUHDIRU
DHJFKDQQHOVDQGWKUHHDFFHVVSRLQWVIRU
EJHJFKDQQHOV
)RUPRVWZLUHOHVVDGDSWHUVWKHFKDQQHOIRUZLUHOHVVFOLHQWVLVDXWRPDWLFDOO\
VHWWRWKHVDPHDVWKDWXVHGE\WKHDFFHVVSRLQWWRZKLFKLWLVOLQNHG
([DPSOH
WUDQVPLWSRZHU
7KLVFRPPDQGDGMXVWVWKHSRZHURIWKHUDGLRVLJQDOVWUDQVPLWWHGIURPWKHDFFHVV
SRLQW
6\QWD[
WUDQVPLWSRZHUVLJQDOVWUHQJWK!
VLJQDOVWUHQJWK6LJQDOVWUHQJWKWUDQVPLWWHGIURPWKHDFFHVVSRLQW
2SWLRQVIXOOKDOITXDUWHUHLJKWKPLQ
Enterprise AP(if-wireless g)#channel 1
Enterprise AP(if-wireless g)#
98
'HIDXOW6HWWLQJ
IXOO
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KH³PLQ´NH\ZRUGLQGLFDWHVPLQLPXPSRZHU
7KHORQJHUWKHWUDQVPLVVLRQGLVWDQFHWKHKLJKHUWKHWUDQVPLVVLRQSRZHU
UHTXLUHG%XWWRVXSSRUWWKHPD[LPXPQXPEHURIXVHUVLQDQDUHD\RXPXVW
NHHSWKHSRZHUDVORZDVSRVVLEOH3RZHUVHOHFWLRQLVQRWMXVWDWUDGHRII
EHWZHHQFRYHUDJHDUHDDQGPD[LPXPVXSSRUWHGFOLHQWV<RXDOVRKDYHWR
HQVXUHWKDWKLJKVWUHQJWKVLJQDOVGRQRWLQWHUIHUHZLWKWKHRSHUDWLRQRIRWKHU
UDGLRGHYLFHVLQ\RXUDUHD
([DPSOH
UDGLRPRGH
7KLVFRPPDQGIRUFHVWKHRSHUDWLQJPRGHIRUWKHJZLUHOHVVLQWHUIDFH
6\QWD[
UDGLRPRGHE_J_EJ!
EERQO\PRGH%RWKEDQGJFOLHQWVFDQFRPPXQLFDWHZLWK
WKHDFFHVVSRLQWEXWJFOLHQWVFDQRQO\WUDQVIHUGDWDDWE
VWDQGDUGUDWHVXSWR0ESV
JJRQO\PRGH2QO\JFOLHQWVFDQFRPPXQLFDWHZLWKWKHDFFHVV
SRLQWXSWR0ESV
EJEJPL[HGPRGH%RWKEDQGJFOLHQWVFDQ
FRPPXQLFDWHZLWKWKHDFFHVVSRLQWXSWR0ESV
'HIDXOW6HWWLQJ
EJPRGH
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVVJ
&RPPDQG8VDJH
)RU-DSDQRQO\FKDQQHOVDUHDYDLODEOHZKHQVHWWRJRUEJPRGHV
:KHQVHWWREPRGHFKDQQHOVDUHDYDLODEOH
%RWKWKHJDQGEVWDQGDUGVRSHUDWHZLWKLQWKH*+]EDQG
,I\RXDUHRSHUDWLQJLQJPRGHDQ\EGHYLFHVLQWKHVHUYLFHDUHDZLOO
FRQWULEXWHWRWKHUDGLRIUHTXHQF\QRLVHDQGDIIHFWQHWZRUNSHUIRUPDQFH
Enterprise AP(if-wireless g)#transmit-power half
Enterprise AP(if-wireless g)#
99
([DPSOH
SUHDPEOH
7KLVFRPPDQGVHWVWKHOHQJWKRIWKHVLJQDOSUHDPEOHWKDWLVXVHGDWWKHVWDUWRID
EJGDWDWUDQVPLVVLRQ
6\QWD[
SUHDPEOH>ORQJ_VKRUWRUORQJ@
ORQJ6HWVWKHSUHDPEOHWRORQJPLFURVHFRQGV
VKRUWRUORQJ6HWVWKHSUHDPEOHWRVKRUWLIQREFOLHQWVDUH
GHWHFWHGPLFURVHFRQGV
'HIDXOW6HWWLQJ
6KRUWRU/RQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVVEJ
&RPPDQG8VDJH
8VLQJDVKRUWSUHDPEOHLQVWHDGRIDORQJSUHDPEOHFDQLQFUHDVHGDWD
WKURXJKSXWRQWKHDFFHVVSRLQWEXWUHTXLUHVWKDWDOOFOLHQWVFDQVXSSRUWD
VKRUWSUHDPEOH
6HWWKHSUHDPEOHWRORQJWRHQVXUHWKHDFFHVVSRLQWFDQVXSSRUWDOOE
DQGJFOLHQWV
([DPSOH
DQWHQQDFRQWURO
7KLVFRPPDQGVHOHFWVWKHXVHRIWZRGLYHUVLW\DQWHQQDVRUDVLQJOHDQWHQQDIRUWKH
UDGLRLQWHUIDFH
6\QWD[
DQWHQQDFRQWUROGLYHUVLW\_OHIW_ULJKW!
GLYHUVLW\7KHUDGLRXVHVERWKDQWHQQDVLQDGLYHUVLW\V\VWHP6HOHFWWKLV
PHWKRGZKHQWKH$QWHQQD,'LVVHWWR³'HIDXOW$QWHQQD´WRXVHWKHDFFHVV
SRLQWVLQWHJUDWHGDQWHQQDV7KHDFFHVVSRLQWGRHVQRWVXSSRUWH[WHUQDO
GLYHUVLW\DQWHQQDV
OHIW7KHUDGLRRQO\XVHVWKHDQWHQQDRQWKHOHIWVLGHWKHVLGHIDUWKHVWIURP
WKHDFFHVVSRLQW/('V7KHDFFHVVSRLQWGRHVQRWVXSSRUWDQH[WHUQDO
DQWHQQDFRQQHFWLRQRQLWVOHIWDQWHQQD7KHUHIRUHWKLVPHWKRGLVQRWYDOLG
IRUWKHDFFHVVSRLQW
Enterprise AP(if-wireless g)#radio-mode g
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g)#preamble short
Enterprise AP(if-wireless g)#
0
ULJKW7KHUDGLRRQO\XVHVWKHDQWHQQDRQWKHULJKWVLGHWKHVLGHFORVHVW
WRWKHDFFHVVSRLQW/('V6HOHFWWKLVPHWKRGZKHQXVLQJDQRSWLRQDO
H[WHUQDODQWHQQDWKDWLVFRQQHFWHGWRWKHULJKWDQWHQQDFRQQHFWRU
'HIDXOW6HWWLQJ
'LYHUVLW\
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KHDQWHQQD,'PXVWEHVHOHFWHGLQFRQMXQFWLRQZLWKWKHDQWHQQDFRQWURO
PHWKRGWRFRQILJXUHSURSHUXVHRIDQ\RIWKHDQWHQQDRSWLRQV
([DPSOH
DQWHQQDLG
7KLVFRPPDQGVSHFLILHVWKHDQWHQQDW\SHFRQQHFWHGWRWKHDFFHVVSRLQW
UHSUHVHQWHGE\DIRXUGLJLWKH[DGHFLPDO,'QXPEHUHLWKHUWKHLQWHJUDWHGGLYHUVLW\
DQWHQQDVWKH'HIDXOW$QWHQQDRUDQRSWLRQDOH[WHUQDODQWHQQD
6\QWD[
DQWHQQDLGDQWHQQDLG!
DQWHQQDLG6SHFLILHVWKH,'QXPEHURIDQDSSURYHGDQWHQQDWKDWLV
FRQQHFWHGWRWKHDFFHVVSRLQW
5DQJH[[))))
'HIDXOW6HWWLQJ
[EXLOWLQDQWHQQDV
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KHRSWLRQDOH[WHUQDODQWHQQDVLIDQ\WKDWDUHFHUWLILHGIRUXVHZLWKWKH
DFFHVVSRLQWDUHOLVWHGE\W\SLQJDQWHQQDFRQWUROLG"6HOHFWLQJWKH
FRUUHFWDQWHQQD,'HQVXUHVWKDWWKHDFFHVVSRLQWVUDGLRWUDQVPLVVLRQVDUH
ZLWKLQUHJXODWRU\SRZHUOLPLWVIRUWKHFRXQWU\RIRSHUDWLRQ
7KHDQWHQQD,'PXVWEHVHOHFWHGLQFRQMXQFWLRQZLWKWKHDQWHQQDFRQWURO
PHWKRGWRFRQILJXUHSURSHUXVHRIDQ\RIWKHDQWHQQDRSWLRQV
([DPSOH
Enterprise AP(if-wireless g)#antenna control right
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g)#antenna id 0000
Enterprise AP(if-wireless g)#
1
DQWHQQDORFDWLRQ
7KLVFRPPDQGVHOHFWVWKHDQWHQQDPRXQWLQJORFDWLRQIRUWKHUDGLRLQWHUIDFH
6\QWD[
DQWHQQDORFDWLRQLQGRRU_RXWGRRU!
LQGRRU7KHDQWHQQDLVPRXQWHGLQGRRUV
RXWGRRU7KHDQWHQQDLVPRXQWHGRXWGRRUV
'HIDXOW6HWWLQJ
,QGRRU
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
:KHQDQH[WHUQDODQWHQQDLVVHOHFWHGWKHDQWHQQDFRQWUROPXVWEHVHWWR
³ULJKW´
6HOHFWLQJWKHFRUUHFWORFDWLRQHQVXUHVWKDWWKHDFFHVVSRLQWRQO\XVHVUDGLR
FKDQQHOVWKDWDUHSHUPLWWHGLQWKHFRXQWU\RIRSHUDWLRQ
([DPSOH
EHDFRQLQWHUYDO
7KLVFRPPDQGFRQILJXUHVWKHUDWHDWZKLFKEHDFRQVLJQDOVDUHWUDQVPLWWHGIURPWKH
DFFHVVSRLQW
6\QWD[
EHDFRQLQWHUYDOLQWHUYDO!
LQWHUYDO7KHUDWHIRUWUDQVPLWWLQJEHDFRQVLJQDOV
5DQJH PLOOLVHFRQGV
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KHEHDFRQVLJQDOVDOORZZLUHOHVVFOLHQWVWRPDLQWDLQFRQWDFWZLWKWKHDFFHVV
SRLQW7KH\PD\DOVRFDUU\SRZHUPDQDJHPHQWLQIRUPDWLRQ
Enterprise AP(if-wireless g)#antenna location indoor
Enterprise AP(if-wireless g)#
2
([DPSOH
GWLPSHULRG
7KLVFRPPDQGFRQILJXUHVWKHUDWHDWZKLFKVWDWLRQVLQVOHHSPRGHPXVWZDNHXSWR
UHFHLYHEURDGFDVWPXOWLFDVWWUDQVPLVVLRQV
6\QWD[
GWLPSHULRGLQWHUYDO!
LQWHUYDO,QWHUYDOEHWZHHQWKHEHDFRQIUDPHVWKDWWUDQVPLWEURDGFDVWRU
PXOWLFDVWWUDIILF5DQJH EHDFRQIUDPHV
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KH'HOLYHU\7UDIILF,QGLFDWLRQ0DS'7,0SDFNHWLQWHUYDOYDOXHLQGLFDWHV
KRZRIWHQWKH0$&OD\HUIRUZDUGVEURDGFDVWPXOWLFDVWWUDIILF7KLV
SDUDPHWHULVQHFHVVDU\WRZDNHXSVWDWLRQVWKDWDUHXVLQJ3RZHU6DYH
PRGH
7KH'7,0LVWKHLQWHUYDOEHWZHHQWZRV\QFKURQRXVIUDPHVZLWKEURDGFDVW
PXOWLFDVWLQIRUPDWLRQ7KHGHIDXOWYDOXHRILQGLFDWHVWKDWWKHDFFHVVSRLQW
ZLOOVDYHDOOEURDGFDVWPXOWLFDVWIUDPHVIRUWKH%DVLF6HUYLFH6HW%66DQG
IRUZDUGWKHPDIWHUHYHU\VHFRQGEHDFRQ
8VLQJVPDOOHU'7,0LQWHUYDOVGHOLYHUVEURDGFDVWPXOWLFDVWIUDPHVLQDPRUH
WLPHO\PDQQHUFDXVLQJVWDWLRQVLQ3RZHU6DYHPRGHWRZDNHXSPRUH
RIWHQDQGGUDLQSRZHUIDVWHU8VLQJKLJKHU'7,0YDOXHVUHGXFHVWKHSRZHU
XVHGE\VWDWLRQVLQ3RZHU6DYHPRGHEXWGHOD\VWKHWUDQVPLVVLRQRI
EURDGFDVWPXOWLFDVWIUDPHV
([DPSOH
Enterprise AP(if-wireless g)#beacon-interval 150
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g)#dtim-period 100
Enterprise AP(if-wireless g)#
3
IUDJPHQWDWLRQOHQJWK
7KLVFRPPDQGFRQILJXUHVWKHPLQLPXPSDFNHWVL]HWKDWFDQEHIUDJPHQWHGZKHQ
SDVVLQJWKURXJKWKHDFFHVVSRLQW
6\QWD[
IUDJPHQWDWLRQOHQJWKOHQJWK!
OHQJWK0LQLPXPSDFNHWVL]HIRUZKLFKIUDJPHQWDWLRQLVDOORZHG
5DQJH E\WHV
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
,IWKHSDFNHWVL]HLVVPDOOHUWKDQWKHSUHVHW)UDJPHQWVL]HWKHSDFNHWZLOO
QRWEHVHJPHQWHG
)UDJPHQWDWLRQRIWKH3'8V3DFNDJH'DWD8QLWFDQLQFUHDVHWKHUHOLDELOLW\
RIWUDQVPLVVLRQVEHFDXVHLWLQFUHDVHVWKHSUREDELOLW\RIDVXFFHVVIXO
WUDQVPLVVLRQGXHWRVPDOOHUIUDPHVL]H,IWKHUHLVVLJQLILFDQWLQWHUIHUHQFH
SUHVHQWRUFROOLVLRQVGXHWRKLJKQHWZRUNXWLOL]DWLRQWU\VHWWLQJWKHIUDJPHQW
VL]HWRVHQGVPDOOHUIUDJPHQWV7KLVZLOOVSHHGXSWKHUHWUDQVPLVVLRQRI
VPDOOHUIUDPHV+RZHYHULWLVPRUHHIILFLHQWWRVHWWKHIUDJPHQWVL]HODUJHU
LIYHU\OLWWOHRUQRLQWHUIHUHQFHLVSUHVHQWEHFDXVHLWUHTXLUHVRYHUKHDGWR
VHQGPXOWLSOHIUDPHV
([DPSOH
UWVWKUHVKROG
7KLVFRPPDQGVHWVWKHSDFNHWVL]HWKUHVKROGDWZKLFKD5HTXHVWWR6HQG576
VLJQDOPXVWEHVHQWWRWKHUHFHLYLQJVWDWLRQSULRUWRWKHVHQGLQJVWDWLRQVWDUWLQJ
FRPPXQLFDWLRQV
6\QWD[
UWVWKUHVKROGWKUHVKROG!
WKUHVKROG7KUHVKROGSDFNHWVL]HIRUZKLFKWRVHQGDQ576
5DQJH E\WHV
Enterprise AP(if-wireless g)#fragmentation-length 512
Enterprise AP(if-wireless g)#
4
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
,IWKHWKUHVKROGLVVHWWRWKHDFFHVVSRLQWDOZD\VVHQGV576VLJQDOV,IVHW
WRWKHDFFHVVSRLQWQHYHUVHQGV576VLJQDOV,IVHWWRDQ\RWKHUYDOXH
DQGWKHSDFNHWVL]HHTXDOVRUH[FHHGVWKH576WKUHVKROGWKH576&76
5HTXHVWWR6HQG&OHDUWR6HQGPHFKDQLVPZLOOEHHQDEOHG
7KHDFFHVVSRLQWVHQGV576IUDPHVWRDUHFHLYLQJVWDWLRQWRQHJRWLDWHWKH
VHQGLQJRIDGDWDIUDPH$IWHUUHFHLYLQJDQ576IUDPHWKHVWDWLRQVHQGVD
&76IUDPHWRQRWLI\WKHVHQGLQJVWDWLRQWKDWLWFDQVWDUWVHQGLQJGDWD
$FFHVVSRLQWVFRQWHQGLQJIRUWKHZLUHOHVVPHGLXPPD\QRWEHDZDUHRI
HDFKRWKHU7KH576&76PHFKDQLVPFDQVROYHWKLV³+LGGHQ1RGH´
SUREOHP
([DPSOH
VXSHUD
7KLVFRPPDQGHQDEOHV$WKHURVSURSULHWDU\6XSHU$SHUIRUPDQFHHQKDQFHPHQWV
8VHWKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ
6\QWD[
>QR@VXSHUD
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVVD
&RPPDQG8VDJH
6XSHU$HQKDQFHPHQWVLQFOXGHEXUVWLQJFRPSUHVVLRQDQGIDVWIUDPHV
0D[LPXPWKURXJKSXWUDQJHVEHWZHHQWR0ESVIRUFRQQHFWLRQVWR
$WKHURVFRPSDWLEOHFOLHQWV
([DPSOH
Enterprise AP(if-wireless g)#rts-threshold 256
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless a)#super a
Enterprise AP(if-wireless a)#
5
VXSHUJ
7KLVFRPPDQGHQDEOHV$WKHURVSURSULHWDU\6XSHU*SHUIRUPDQFHHQKDQFHPHQWV
8VHWKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ
6\QWD[
>QR@VXSHUJ
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVVJ
&RPPDQG8VDJH
7KHVHHQKDQFHPHQWVLQFOXGHEXUVWLQJFRPSUHVVLRQIDVWIUDPHVDQGG\QDPLF
WXUER0D[LPXPWKURXJKSXWUDQJHVEHWZHHQWR0ESVIRUFRQQHFWLRQVWR
$WKHURVFRPSDWLEOHFOLHQWV
([DPSOH
GHVFULSWLRQ
7KLVFRPPDQGDGGVDGHVFULSWLRQWRDWKHZLUHOHVVLQWHUIDFH8VHWKHQRIRUPWR
UHPRYHWKHGHVFULSWLRQ
6\QWD[
GHVFULSWLRQVWULQJ!
QRGHVFULSWLRQ
VWULQJ&RPPHQWRUDGHVFULSWLRQIRUWKLVLQWHUIDFH
5DQJHFKDUDFWHUV
'HIDXOW6HWWLQJ
5DGLR$(QWHUSULVHD$FFHVV3RLQW
5DGLR*(QWHUSULVHJ$FFHVV3RLQW
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
([DPSOH
Enterprise AP(if-wireless a)#super g
Enterprise AP(if-wireless a)#
Enterprise AP(if-wireless g: VAP[0])#description RD-AP#3
Enterprise AP(if-wireless g: VAP[0])#
6
VVLG
7KLVFRPPDQGFRQILJXUHVWKHVHUYLFHVHWLGHQWLILHU66,'
6\QWD[
VVLGVWULQJ!
VWULQJ7KHQDPHRIDEDVLFVHUYLFHVHWVXSSRUWHGE\WKHDFFHVVSRLQW
5DQJH FKDUDFWHUV
'HIDXOW6HWWLQJ
D5DGLR9$3B7(67B$WR
J5DGLR9$3B7(67B*WR
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
&OLHQWVWKDWZDQWWRFRQQHFWWRWKHZLUHOHVVQHWZRUNYLDDQDFFHVVSRLQWPXVW
VHWWKHLU66,'VWRWKHVDPHDVWKDWRIWKHDFFHVVSRLQW
([DPSOH
FORVHGV\VWHP
7KLVFRPPDQGSURKLELWVDFFHVVWRFOLHQWVZLWKRXWDSUHFRQILJXUHG66,'8VHWKHQR
IRUPWRGLVDEOHWKLVIHDWXUH
6\QWD[
FORVHGV\VWHP
QRFORVHGV\VWHP
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
:KHQFORVHGV\VWHPLVHQDEOHGWKHDFFHVVSRLQWZLOOQRWLQFOXGHLWV66,'LQ
EHDFRQPHVVDJHV1RUZLOOLWUHVSRQGWRSUREHUHTXHVWVIURPFOLHQWVWKDWGR
QRWLQFOXGHDIL[HG66,'
([DPSOH
Enterprise AP(if-wireless g: VAP[0])#ssid RD-AP#3
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g: VAP[0])#closed-system
Enterprise AP(if-wireless g)#
07
PD[DVVRFLDWLRQ
7KLVFRPPDQGFRQILJXUHVWKHPD[LPXPQXPEHURIFOLHQWVWKDWFDQEHDVVRFLDWHG
ZLWKWKHDFFHVVSRLQWDWWKHVDPHWLPH
6\QWD[
PD[DVVRFLDWLRQFRXQW!
FRXQW0D[LPXPQXPEHURIDVVRFLDWHGVWDWLRQV5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
([DPSOH
DVVRFWLPHRXWLQWHUYDO
7KLVFRPPDQGFRQILJXUHVWKHLGOHWLPHLQWHUYDOZKHQQRIUDPHVDUHVHQWDIWHU
ZKLFKWKHFOLHQWLVGLVDVVRFLDWHGIURPWKH9$3LQWHUIDFH
6\QWD[
DVVRFWLPHRXWLQWHUYDOPLQXWHV!
PLQXWHV7KHQXPEHURIPLQXWHVRILQDFWLYLW\EHIRUHGLVDVVRFLDWLRQ
5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
([DPSOH
DXWKWLPHRXWYDOXH
7KLVFRPPDQGFRQILJXUHVWKHWLPHLQWHUYDOZLWKLQZKLFKFOLHQWVPXVWFRPSOHWH
DXWKHQWLFDWLRQWRWKH9$3LQWHUIDFH
6\QWD[
DXWKWLPHRXWYDOXHPLQXWHV!
PLQXWHV7KHQXPEHURIPLQXWHVEHIRUHUHDXWKHQWLFDWLRQ5DQJH
Enterprise AP(if-wireless g: VAP[0])#max-association 32
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g: VAP[0])#association-timeout-interval 20
Enterprise AP(if-wireless g: VAP[0])#
08
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
([DPSOH
VKXWGRZQ
7KLVFRPPDQGGLVDEOHVWKHZLUHOHVVLQWHUIDFH8VHWKHQRIRUPWRUHVWDUWWKH
LQWHUIDFH
6\QWD[
VKXWGRZQ
QRVKXWGRZQ
'HIDXOW6HWWLQJ
,QWHUIDFHHQDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
<RXPXVWILUVWHQDEOH9$3LQWHUIDFHEHIRUH\RXFDQHQDEOH9$3LQWHUIDFHV
RU
([DPSOH
Enterprise AP(if-wireless g: VAP[0])#auth-timeout-value 40
Enterprise AP(if-wireless g: VAP[0])#
Enterprise AP(if-wireless g: VAP[0])#shutdown
Enterprise AP(if-wireless g)#
09
VKRZLQWHUIDFHZLUHOHVV
7KLVFRPPDQGGLVSOD\VWKHVWDWXVIRUWKHZLUHOHVVLQWHUIDFH
6\QWD[
VKRZLQWHUIDFHZLUHOHVVD_J!YDSLG
DDUDGLRLQWHUIDFH
JJUDGLRLQWHUIDFH
YDSLG7KHQXPEHUWKDWLGHQWLILHVWKH9$3LQWHUIDFH2SWLRQVa
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show interface wireless g 0
Wireless Interface Information
=========================================================================
----------------Identification-------------------------------------------
Description : Enterprise 802.11g Access Point
SSID : VAP_TEST_11G 0
Channel : 1 (AUTO)
Status : ENABLED
MAC Address : 00:03:7f:fe:03:02
----------------802.11 Parameters----------------------------------------
Radio Mode : b & g mixed mode
Protection Method : CTS only
Transmit Power : FULL (16 dBm)
Max Station Data Rate : 54Mbps
Multicast Data Rate : 5.5Mbps
Fragmentation Threshold : 2346 bytes
RTS Threshold : 2347 bytes
Beacon Interval : 100 TUs
Authentication Timeout Interval : 60 Mins
Association Timeout Interval : 30 Mins
DTIM Interval : 1 beacon
Preamble Length : LONG
Maximum Association : 64 stations
MIC Mode : Software
Super G : Disabled
VLAN ID : 1
----------------Security-------------------------------------------------
Closed System : Disabled
Multicast cipher : WEP
Unicast cipher : TKIP and AES
WPA clients : DISABLED
WPA Key Mgmt Mode : PRE SHARED KEY
WPA PSK Key Type : PASSPHRASE
WPA PSK Key : EMPTY
PMKSA Lifetime : 720 minutes
Encryption : ENABLED
Default Transmit Key : 1
Common Static Keys : Key 1: EMPTY Key 2: EMPTY
Key 3: EMPTY Key 4: EMPTY
Pre-Authentication : DISABLED
Authentication Type : SHARED
10
----------------802.1x---------------------------------------------------
802.1x : DISABLED
Broadcast Key Refresh Rate : 30 min
Session Key Refresh Rate : 30 min
802.1x Session Timeout Value : 0 min
----------------Antenna--------------------------------------------------
Antenna Control method : Diversity
Antenna ID : 0x0000(Default Antenna)
Antenna Location : Indoor
----------------Quality of Service---------------------------------------
WMM Mode : SUPPORTED
WMM Acknowledge Policy
AC0(Best Effort) : Acknowledge
AC1(Background) : Acknowledge
AC2(Video) : Acknowledge
AC3(Voice) : Acknowledge
WMM BSS Parameters
AC0(Best Effort) : logCwMin: 4 logCwMax: 10 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video) : logCwMin: 3 logCwMax: 4 AIFSN: 2
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice) : logCwMin: 2 logCwMax: 3 AIFSN: 2
Admission Control: No
TXOP Limit: 1.504 ms
WMM AP Parameters
AC0(Best Effort) : logCwMin: 4 logCwMax: 6 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background) : logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video) : logCwMin: 3 logCwMax: 4 AIFSN: 1
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice) : logCwMin: 2 logCwMax: 3 AIFSN: 1
Admission Control: No
TXOP Limit: 1.504 ms
=========================================================================
Enterprise AP#
1
VKRZVWDWLRQ
7KLVFRPPDQGVKRZVWKHZLUHOHVVFOLHQWVDVVRFLDWHGZLWKWKHDFFHVVSRLQW
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP#show station
Station Table Information
========================================================
if-wireless A VAP [0] :
802.11a Channel : 60
No 802.11a Channel Stations.
.
.
.
if-wireless G VAP [0] :
802.11g Channel : 1
802.11g Channel Station Table
Station Address : 00-04-23-94-9A-9C VLAN ID: 0
Authenticated Associated Forwarding KeyType
TRUE FALSE FALSE NONE
Counters:pkts Tx / Rx bytes Tx / Rx
20/ 0 721/ 0
Time:Associated LastAssoc LastDisAssoc LastAuth
0 0 0 0
if-wireless G VAP [1] :
802.11g Channel : 1
No 802.11g Channel Stations.
.
.
.
Enterprise AP#
2
Rogue AP Detection Commands
$³URJXH$3´LVHLWKHUDQDFFHVVSRLQWWKDWLVQRWDXWKRUL]HGWRSDUWLFLSDWHLQWKH
ZLUHOHVVQHWZRUNRUDQDFFHVVSRLQWWKDWGRHVQRWKDYHWKHFRUUHFWVHFXULW\
FRQILJXUDWLRQ5RJXH$3VFDQSRWHQWLDOO\DOORZXQDXWKRUL]HGXVHUVDFFHVVWRWKH
QHWZRUN$OWHUQDWLYHO\FOLHQWVWDWLRQVPD\PLVWDNHQO\DVVRFLDWHWRDURJXH$3DQG
EHSUHYHQWHGIURPDFFHVVLQJQHWZRUNUHVRXUFHV5RJXH$3VPD\DOVRFDXVHUDGLR
LQWHUIHUHQFHDQGGHJUDGHWKHZLUHOHVV/$1SHUIRUPDQFH
7KHDFFHVVSRLQWFDQEHFRQILJXUHGWRSHULRGLFDOO\VFDQDOOUDGLRFKDQQHOVDQGILQG
RWKHUDFFHVVSRLQWVZLWKLQUDQJH$GDWDEDVHRIQHDUE\DFFHVVSRLQWVLVPDLQWDLQHG
ZKHUHDQ\URJXH$3VFDQEHLGHQWLILHG
URJXHDSHQDEOH
7KLVFRPPDQGHQDEOHVWKHSHULRGLFGHWHFWLRQRIQHDUE\DFFHVVSRLQWV8VHWKHQR
IRUPWRGLVDEOHSHULRGLFGHWHFWLRQ
6\QWD[
>QR@URJXHDSHQDEOH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
:KLOHWKHDFFHVVSRLQWVFDQVDFKDQQHOIRUURJXH$3VZLUHOHVVFOLHQWVZLOO
QRWEHDEOHWRFRQQHFWWRWKHDFFHVVSRLQW7KHUHIRUHDYRLGIUHTXHQW
VFDQQLQJRUVFDQVRIDORQJGXUDWLRQXQOHVVWKHUHLVDUHDVRQWREHOLHYHWKDW
PRUHLQWHQVLYHVFDQQLQJLVUHTXLUHGWRILQGDURJXH$3
7DEOH 5RJXH$3'HWHFWLRQ&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
3
$³URJXH$3´LVHLWKHUDQDFFHVVSRLQWWKDWLVQRWDXWKRUL]HGWRSDUWLFLSDWH
LQWKHZLUHOHVVQHWZRUNRUDQDFFHVVSRLQWWKDWGRHVQRWKDYHWKHFRUUHFW
VHFXULW\FRQILJXUDWLRQ5RJXHDFFHVVSRLQWVFDQEHLGHQWLILHGE\XQNQRZQ
%66,'0$&DGGUHVVRU66,'FRQILJXUDWLRQ$GDWDEDVHRIQHDUE\DFFHVV
SRLQWVVKRXOGWKHUHIRUHEHPDLQWDLQHGRQD5$',86VHUYHUDOORZLQJDQ\
URJXH$3VWREHLGHQWLILHGVHH³URJXHDSDXWKHQWLFDWH´RQSDJH
7KHURJXH$3GDWDEDVHFDQEHYLHZHGXVLQJWKHVKRZURJXHDS
FRPPDQG
7KHDFFHVVSRLQWVHQGV6\VORJPHVVDJHVIRUHDFKGHWHFWHGDFFHVVSRLQW
GXULQJDURJXH$3VFDQ
([DPSOH
URJXHDSDXWKHQWLFDWH
7KLVFRPPDQGIRUFHVWKHXQLWWRDXWKHQWLFDWHDOODFFHVVSRLQWVRQWKHQHWZRUN8VH
WKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ
6\QWD[
>QR@URJXHDSDXWKHQWLFDWH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
(QDEOLQJDXWKHQWLFDWLRQLQFRQMXQFWLRQZLWKDGDWDEDVHRIDSSURYHGDFFHVV
SRLQWVVWRUHGRQD5$',86VHUYHUDOORZVWKHDFFHVVSRLQWWRGLVFRYHUURJXH
$3V:LWKDXWKHQWLFDWLRQHQDEOHGDQGDFRQILJXUH5$',86VHUYHUWKHDFFHVV
SRLQWFKHFNVWKH0$&DGGUHVV%DVLF6HUYLFH6HW,GHQWLILHU%66,'RIHDFK
DFFHVVSRLQWWKDWLWILQGVDJDLQVWD5$',86VHUYHUWRGHWHUPLQHZKHWKHUWKH
DFFHVVSRLQWLVDOORZHG:LWKDXWKHQWLFDWLRQGLVDEOHGWKHDFFHVVSRLQWFDQ
LGHQWLI\LWVQHLJKERULQJDFFHVVSRLQWVRQO\LWFDQQRWLGHQWLI\ZKHWKHUWKH
DFFHVVSRLQWVDUHDOORZHGRUDUHURJXHV,I\RXHQDEOHDXWKHQWLFDWLRQ\RX
VKRXOGDOVRFRQILJXUHD5$',86VHUYHUIRUWKLVDFFHVVSRLQWVHH³5$',86´
RQSDJH
([DPSOH
Enterprise AP(if-wireless g)#rogue-ap enable
configure either syslog or trap or both to receive the rogue APs
detected.
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g)#rogue-ap authenticate
Enterprise AP(if-wireless g)#
4
URJXHDSGXUDWLRQ
7KLVFRPPDQGVHWVWKHVFDQGXUDWLRQIRUGHWHFWLQJDFFHVVSRLQWV
6\QWD[
URJXHDSGXUDWLRQPLOOLVHFRQGV!
PLOOLVHFRQGV7KHGXUDWLRQRIWKHVFDQ5DQJH PLOOLVHFRQGV
'HIDXOW6HWWLQJ
PLOOLVHFRQGV
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
'XULQJDVFDQFOLHQWDFFHVVPD\EHGLVUXSWHGDQGQHZFOLHQWVPD\QRWEH
DEOHWRDVVRFLDWHWRWKHDFFHVVSRLQW,IFOLHQWVH[SHULHQFHVHYHUH
GLVUXSWLRQUHGXFHWKHVFDQGXUDWLRQWLPH
$ORQJVFDQGXUDWLRQWLPHZLOOGHWHFWPRUHDFFHVVSRLQWVLQWKHDUHDEXW
FDXVHVPRUHGLVUXSWLRQWRFOLHQWDFFHVV
([DPSOH
5HODWHG&RPPDQGV
URJXHDSLQWHUYDO
URJXHDSLQWHUYDO
7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKWRVFDQIRUDFFHVVSRLQWV
6\QWD[
URJXHDSLQWHUYDOPLQXWHV!
PLQXWHV7KHLQWHUYDOEHWZHHQFRQVHFXWLYHVFDQV5DQJH
PLQXWHV
'HIDXOW6HWWLQJ
PLQXWHV
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKVFDQVRFFXU)UHTXHQWVFDQQLQJZLOO
PRUHUHDGLO\GHWHFWRWKHUDFFHVVSRLQWVEXWZLOOFDXVHPRUHGLVUXSWLRQWR
FOLHQWDFFHVV
Enterprise AP(if-wireless g)#rogue-ap duration 200
Enterprise AP(if-wireless g)#
5
([DPSOH
5HODWHG&RPPDQGV
URJXHDSGXUDWLRQ
URJXHDSVFDQ
7KLVFRPPDQGVWDUWVDQLPPHGLDWHVFDQIRUDFFHVVSRLQWVRQWKHUDGLRLQWHUIDFH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
:KLOHWKHDFFHVVSRLQWVFDQVDFKDQQHOIRUURJXH$3VZLUHOHVVFOLHQWVZLOOQRW
EHDEOHWRFRQQHFWWRWKHDFFHVVSRLQW7KHUHIRUHDYRLGIUHTXHQWVFDQQLQJRU
VFDQVRIDORQJGXUDWLRQXQOHVVWKHUHLVDUHDVRQWREHOLHYHWKDWPRUH
LQWHQVLYHVFDQQLQJLVUHTXLUHGWRILQGDURJXH$3
([DPSOH
Enterprise AP(if-wireless g)#rogue-ap interval 120
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g)#rogue-ap scan
Enterprise AP(if-wireless g)#rogueApDetect Completed (Radio G) : 9 APs
detected
rogueAPDetect (Radio G): refreshing ap database now
Enterprise AP(if-wireless g)#
6
VKRZURJXHDS
7KLVFRPPDQGGLVSOD\VWKHFXUUHQWURJXH$3GDWDEDVH
&RPPDQG0RGH
([HF
([DPSOH
Wireless Security Commands
7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQFRQILJXUHSDUDPHWHUVIRUZLUHOHVVVHFXULW\
RQWKHDDQGJLQWHUIDFHV
Enterprise AP#show rogue-ap
802.11a Channel : Rogue AP Status
AP Address(BSSID) SSID Channel(MHz) RSSI Type Privacy RSN
======================================================================
802.11g Channel : Rogue AP Status
AP Address(BSSID) SSID Channel(MHz) RSSI Type Privacy RSN
======================================================================
00-04-e2-2a-37-23 WLAN1AP 11(2462 MHz) 17 ESS 0 0
00-04-e2-2a-37-3d ANY 7(2442 MHz) 42 ESS 0 0
00-04-e2-2a-37-49 WLAN1AP 9(2452 MHz) 42 ESS 0 0
00-90-d1-08-9d-a7 WLAN1AP 1(2412 MHz) 12 ESS 0 0
00-30-f1-fb-31-f4 WLAN 6(2437 MHz) 16 ESS 0 0
Enterprise AP#
7DEOH :LUHOHVV6HFXULW\&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
17
DXWK
7KLVFRPPDQGFRQILJXUHVDXWKHQWLFDWLRQIRUWKH9$3LQWHUIDFH
6\QWD[
DXWKRSHQV\VWHP_VKDUHGNH\_ZSD_ZSDSVN_ZSD_ZSDSVN_
ZSDZSDPL[HG_ZSDZSDSVNPL[HG_!UHTXLUHG_VXSSRUWHG!
RSHQV\VWHP$FFHSWVWKHFOLHQWZLWKRXWYHULI\LQJLWVLGHQWLW\XVLQJD
VKDUHGNH\³2SHQ´DXWKHQWLFDWLRQPHDQVHLWKHUWKHUHLVQRHQFU\SWLRQLI
HQFU\SWLRQLVGLVDEOHGRU:(3RQO\HQFU\SWLRQLVXVHGLIHQFU\SWLRQLV
HQDEOHG
VKDUHGNH\$XWKHQWLFDWLRQLVEDVHGRQDVKDUHGNH\WKDWKDVEHHQ
GLVWULEXWHGWRDOOVWDWLRQV
ZSD&OLHQWVXVLQJ:3$DUHDFFHSWHGIRUDXWKHQWLFDWLRQ
ZSDSVN&OLHQWVXVLQJ:3$ZLWKD3UHVKDUHG.H\DUHDFFHSWHGIRU
DXWKHQWLFDWLRQ
ZSD&OLHQWVXVLQJ:3$DUHDFFHSWHGIRUDXWKHQWLFDWLRQ
ZSDSVN&OLHQWVXVLQJ:3$ZLWKD3UHVKDUHG.H\DUHDFFHSWHGIRU
DXWKHQWLFDWLRQ
ZSDZSDPL[HG&OLHQWVXVLQJ:3$RU:3$DUHDFFHSWHGIRU
DXWKHQWLFDWLRQ
ZSDZSDSVNPL[HG&OLHQWVXVLQJ:3$RU:3$ZLWKD3UHVKDUHG
.H\DUHDFFHSWHGIRUDXWKHQWLFDWLRQ
UHTXLUHG&OLHQWVDUHUHTXLUHGWRXVH:3$RU:3$
VXSSRUWHG&OLHQWVPD\XVH:3$RU:3$LIVXSSRUWHG
'HIDXOW6HWWLQJ
RSHQV\VWHP
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
7KHDXWKFRPPDQGDXWRPDWLFDOO\FRQILJXUHVVHWWLQJVIRUHDFK
DXWKHQWLFDWLRQW\SHLQFOXGLQJHQFU\SWLRQ;DQGFLSKHUVXLWH7KH
FRPPDQGDXWKRSHQV\VWHPGLVDEOHVHQFU\SWLRQDQG;
7DEOH :LUHOHVV6HFXULW\&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
18
7RXVH:(3VKDUHGNH\DXWKHQWLFDWLRQVHWWKHDXWKHQWLFDWLRQW\SHWR
³VKDUHGNH\´DQGGHILQHDWOHDVWRQHVWDWLF:(3NH\ZLWKWKHNH\FRPPDQG
(QFU\SWLRQLVDXWRPDWLFDOO\HQDEOHGE\WKHFRPPDQG
7RXVH:(3HQFU\SWLRQRQO\QRDXWKHQWLFDWLRQVHWWKHDXWKHQWLFDWLRQW\SH
WR³RSHQV\VWHP´7KHQHQDEOH:(3ZLWKWKHHQFU\SWLRQFRPPDQGDQG
GHILQHDWOHDVWRQHVWDWLF:(3NH\ZLWKWKHNH\FRPPDQG
:KHQDQ\:3$RU:3$RSWLRQLVVHOHFWHGFOLHQWVDUHDXWKHQWLFDWHGXVLQJ
;YLDD5$',86VHUYHU(DFKFOLHQWPXVWEH:3$HQDEOHGRUVXSSRUW
;FOLHQWVRIWZDUH7KH;VHWWLQJVVHH³;$XWKHQWLFDWLRQ´
RQSDJH DQG5$',86VHUYHUGHWDLOVVHH³5$',86&OLHQW´RQ
SDJH PXVWEHFRQILJXUHGRQWKHDFFHVVSRLQW$5$',86VHUYHUPXVW
DOVREHFRQILJXUHGDQGEHDYDLODEOHLQWKHZLUHGQHWZRUN
,ID:3$:3$PRGHWKDWRSHUDWHVRYHU;LVVHOHFWHG:3$:3$
:3$:3$PL[HGRU:3$:3$36.PL[HGWKH;VHWWLQJVVHH
³;$XWKHQWLFDWLRQ´RQSDJH DQG5$',86VHUYHUGHWDLOVVHH
³5$',86&OLHQW´RQSDJH PXVWEHFRQILJXUHG%HVXUH\RXKDYHDOVR
FRQILJXUHGD5$',86VHUYHURQWKHQHWZRUNEHIRUHHQDEOLQJDXWKHQWLFDWLRQ
$OVRQRWHWKDWHDFKFOLHQWKDVWREH:3$HQDEOHGRUVXSSRUW;FOLHQW
VRIWZDUH$5$',86VHUYHUPXVWDOVREHFRQILJXUHGDQGEHDYDLODEOHLQWKH
ZLUHGQHWZRUN
,ID:3$:3$3UHVKDUHG.H\PRGHLVVHOHFWHG:3$36.:3$36.
RU:3$:3$36.PL[HGWKHNH\PXVWILUVWEHJHQHUDWHGDQGGLVWULEXWHG
WRDOOZLUHOHVVFOLHQWVEHIRUHWKH\FDQVXFFHVVIXOO\DVVRFLDWHZLWKWKHDFFHVV
SRLQW8VHWKHZSDSUHVKDUHGNH\FRPPDQGWRFRQILJXUHWKHNH\VHH³NH\´
RQSDJH DQG³WUDQVPLWNH\´RQSDJH
:3$GHILQHVDWUDQVLWLRQDOPRGHRIRSHUDWLRQIRUQHWZRUNVPRYLQJIURP
:3$VHFXULW\WR:3$:3$0L[HG0RGHDOORZVERWK:3$DQG:3$
FOLHQWVWRDVVRFLDWHWRDFRPPRQ9$3LQWHUIDFH:KHQWKHHQFU\SWLRQ
FLSKHUVXLWHLVVHWWR7.,3WKHXQLFDVWHQFU\SWLRQFLSKHU7.,3RU
$(6&&03LVQHJRWLDWHGIRUHDFKFOLHQW7KHDFFHVVSRLQWDGYHUWLVHVLW¶V
VXSSRUWHGHQFU\SWLRQFLSKHUVLQEHDFRQIUDPHVDQGSUREHUHVSRQVHV:3$
DQG:3$FOLHQWVVHOHFWWKHFLSKHUWKH\VXSSRUWDQGUHWXUQWKHFKRLFHLQWKH
DVVRFLDWLRQUHTXHVWWRWKHDFFHVVSRLQW)RUPL[HGPRGHRSHUDWLRQWKH
FLSKHUXVHGIRUEURDGFDVWIUDPHVLVDOZD\V7.,3:(3HQFU\SWLRQLVQRW
DOORZHG
7KH³UHTXLUHG´RSWLRQSODFHVWKH9$3LQWR7.,3RQO\PRGH7KH³VXSSRUWHG´
RSWLRQSODFHVWKH9$3LQWR7.,3$(6:(3PRGH7KH³UHTXLUHG´PRGHLV
XVHGLQ:3$RQO\HQYLURQPHQWV
7KH³VXSSRUWHG´PRGHFDQEHXVHGIRUPL[HGHQYLURQPHQWVZLWKOHJDF\
:3$SURGXFWVVSHFLILFDOO\:(3)RUH[DPSOH:3$:(37KH
:3$:(3HQYLURQPHQWLVQRWDYDLODEOHEHFDXVH:3$GRHVQRWVXSSRUW
:(37RSODFHWKH9$3LQWR$(6RQO\PRGHXVH³UHTXLUHG´DQGWKHQ
VHOHFWWKH³FLSKHUFFPS´RSWLRQIRUWKHFLSKHUVXLWHFRPPDQG
19
([DPSOH
5HODWHG&RPPDQGV
HQFU\SWLRQ
NH\
HQFU\SWLRQ
7KLVFRPPDQGHQDEOHVGDWDHQFU\SWLRQIRUZLUHOHVVFRPPXQLFDWLRQV8VHWKHQR
IRUPWRGLVDEOHGDWDHQFU\SWLRQ
6\QWD[
HQFU\SWLRQ
QRHQFU\SWLRQ
'HIDXOW6HWWLQJ
GLVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
:LUHG(TXLYDOHQW3ULYDF\:(3LVLPSOHPHQWHGLQWKLVGHYLFHWRSUHYHQW
XQDXWKRUL]HGDFFHVVWR\RXUZLUHOHVVQHWZRUN)RUPRUHVHFXUHGDWD
WUDQVPLVVLRQVHQDEOHHQFU\SWLRQZLWKWKLVFRPPDQGDQGVHWDWOHDVWRQH
VWDWLF:(3NH\ZLWKWKHNH\FRPPDQG
7KH:(3VHWWLQJVPXVWEHWKHVDPHRQHDFKFOLHQWLQ\RXUZLUHOHVV
QHWZRUN
1RWHWKDW:(3SURWHFWVGDWDWUDQVPLWWHGEHWZHHQZLUHOHVVQRGHVEXWGRHV
QRWSURWHFWDQ\WUDQVPLVVLRQVRYHU\RXUZLUHGQHWZRUNRURYHUWKH,QWHUQHW
<RXPXVWHQDEOHGDWDHQFU\SWLRQLQRUGHUWRHQDEOHDOOW\SHVRIHQFU\SWLRQ
:(37.,3DQG$(6&&03LQWKHDFFHVVSRLQW
([DPSOH
5HODWHG&RPPDQGV
NH\
Enterprise AP(if-wireless g: VAP[0])#auth shared-key
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g: VAP[0])#encryption
Enterprise AP(if-wireless g)#
0
NH\
7KLVFRPPDQGVHWVWKHNH\VXVHGIRU:(3HQFU\SWLRQ8VHWKHQRIRUPWRGHOHWHD
FRQILJXUHGNH\
6\QWD[
NH\LQGH[!VL]H!W\SH!YDOXH!
QRNH\LQGH[
LQGH[.H\LQGH[5DQJH
VL]H.H\VL]H2SWLRQVRUELWV
W\SH,QSXWIRUPDW2SWLRQV$6&,,+(;
YDOXH7KHNH\VWULQJ
)RUELWNH\VXVHDOSKDQXPHULFFKDUDFWHUVRUKH[DGHFLPDOGLJLWV
)RUELWNH\VXVHDOSKDQXPHULFFKDUDFWHUVRUKH[DGHFLPDO
GLJLWV
)RUELWNH\VXVHDOSKDQXPHULFFKDUDFWHUVRUKH[DGHFLPDO
GLJLWV
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7RHQDEOH:LUHG(TXLYDOHQW3ULYDF\:(3XVHWKHDXWKVKDUHGNH\
FRPPDQGWRVHOHFWWKH³VKDUHGNH\´DXWKHQWLFDWLRQW\SHXVHWKHNH\
FRPPDQGWRFRQILJXUHDWOHDVWRQHNH\DQGXVHWKHWUDQVPLWNH\
FRPPDQGWRDVVLJQDNH\WRRQHRIWKH9$3LQWHUIDFHV
,I:(3RSWLRQLVHQDEOHGDOOZLUHOHVVFOLHQWVPXVWEHFRQILJXUHGZLWKWKH
VDPHVKDUHGNH\VWRFRPPXQLFDWHZLWKWKHDFFHVVSRLQW
7KHHQFU\SWLRQLQGH[OHQJWKDQGW\SHFRQILJXUHGLQWKHDFFHVVSRLQWPXVW
PDWFKWKRVHFRQILJXUHGLQWKHFOLHQWV
([DPSOH
5HODWHG&RPPDQGV
NH\
HQFU\SWLRQ
WUDQVPLWNH\
Enterprise AP(if-wireless g)#key 1 64 hex 1234512345
Enterprise AP(if-wireless g)#key 2 128 ascii asdeipadjsipd
Enterprise AP(if-wireless g)#key 3 64 hex 12345123451234512345123456
Enterprise AP(if-wireless g)#
1
WUDQVPLWNH\
7KLVFRPPDQGVHWVWKHLQGH[RIWKHNH\WREHXVHGIRUHQFU\SWLQJGDWDIUDPHVIRU
EURDGFDVWRUPXOWLFDVWWUDIILFWUDQVPLWWHGIURPWKH9$3WRZLUHOHVVFOLHQWV
6\QWD[
WUDQVPLWNH\LQGH[!
LQGH[.H\LQGH[5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
,I\RXXVH:(3NH\HQFU\SWLRQRSWLRQWKHDFFHVVSRLQWXVHVWKHWUDQVPLW
NH\WRHQFU\SWPXOWLFDVWDQGEURDGFDVWGDWDVLJQDOVWKDWLWVHQGVWRFOLHQW
GHYLFHV2WKHUNH\VFDQEHXVHGIRUGHFU\SWLRQRIGDWDIURPFOLHQWV
:KHQXVLQJ,(((;WKHDFFHVVSRLQWXVHVDG\QDPLFNH\WRHQFU\SW
XQLFDVWDQGEURDGFDVWPHVVDJHVWR;HQDEOHGFOLHQWV+RZHYHU
EHFDXVHWKHDFFHVVSRLQWVHQGVWKHNH\VGXULQJWKH;DXWKHQWLFDWLRQ
SURFHVVWKHVHNH\VGRQRWKDYHWRDSSHDULQWKHFOLHQW¶VNH\OLVW
,QDPL[HGPRGHHQYLURQPHQWZLWKFOLHQWVXVLQJVWDWLFDQGG\QDPLFNH\V
VHOHFWWUDQVPLWNH\LQGH[RU7KHDFFHVVSRLQWXVHVWUDQVPLWNH\
LQGH[IRUWKHJHQHUDWLRQRIG\QDPLFNH\V
([DPSOH
Enterprise AP(if-wireless g: VAP[0])#transmit-key 2
Enterprise AP(if-wireless g)#
2
FLSKHUVXLWH
7KLVFRPPDQGGHILQHVWKHFLSKHUDOJRULWKPXVHGWRHQFU\SWWKHJOREDONH\IRU
EURDGFDVWDQGPXOWLFDVWWUDIILFZKHQXVLQJ:L)L3URWHFWHG$FFHVV:3$VHFXULW\
6\QWD[
PXOWLFDVWFLSKHUDHVFFPS_WNLS_ZHS!
DHVFFPS8VH$(6&&03HQFU\SWLRQIRUWKHXQLFDVWDQGPXOWLFDVW
FLSKHU
WNLS8VH7.,3HQFU\SWLRQIRUWKHPXOWLFDVWFLSKHU7.,3RU$(6&&03FDQ
EHXVHGIRUWKHXQLFDVWFLSKHUGHSHQGLQJRQWKHFDSDELOLW\RIWKHFOLHQW
ZHS8VH:(3HQFU\SWLRQIRUWKHPXOWLFDVWFLSKHU7.,3RU$(6&&03
FDQEHXVHGIRUWKHXQLFDVWFLSKHUGHSHQGLQJRQWKHFDSDELOLW\RIWKHFOLHQW
'HIDXOW6HWWLQJ
ZHS
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
:3$HQDEOHVWKHDFFHVVSRLQWWRVXSSRUWGLIIHUHQWXQLFDVWHQFU\SWLRQNH\V
IRUHDFKFOLHQW+RZHYHUWKHJOREDOHQFU\SWLRQNH\IRUPXOWLFDVWDQG
EURDGFDVWWUDIILFPXVWEHWKHVDPHIRUDOOFOLHQWV
,IDQ\FOLHQWVVXSSRUWHGE\WKHDFFHVVSRLQWDUHQRW:3$HQDEOHGWKH
PXOWLFDVWFLSKHUDOJRULWKPPXVWEHVHWWR:(3
:(3LVWKHILUVWJHQHUDWLRQVHFXULW\SURWRFROXVHGWRHQFU\SWGDWDFURVVLQJ
WKHZLUHOHVVPHGLXPXVLQJDIDLUO\VKRUWNH\&RPPXQLFDWLQJGHYLFHVPXVW
XVHWKHVDPH:(3NH\WRHQFU\SWDQGGHFU\SWUDGLRVLJQDOV:(3KDV
PDQ\VHFXULW\IODZVDQGLVQRWUHFRPPHQGHGIRUWUDQVPLWWLQJKLJKO\
VHQVLWLYHGDWD
7.,3SURYLGHVGDWDHQFU\SWLRQHQKDQFHPHQWVLQFOXGLQJSHUSDFNHWNH\
KDVKLQJLHFKDQJLQJWKHHQFU\SWLRQNH\RQHDFKSDFNHWDPHVVDJH
LQWHJULW\FKHFNDQH[WHQGHGLQLWLDOL]DWLRQYHFWRUZLWKVHTXHQFLQJUXOHVDQG
DUHNH\LQJPHFKDQLVP6HOHFW7.,3LIWKHUHDUHFOLHQWVLQWKHQHWZRUNWKDW
DUHQRW:3$FRPSOLDQW
7.,3GHIHQGVDJDLQVWDWWDFNVRQ:(3LQZKLFKWKHXQHQFU\SWHG
LQLWLDOL]DWLRQYHFWRULQHQFU\SWHGSDFNHWVLVXVHGWRFDOFXODWHWKH:(3NH\
7.,3FKDQJHVWKHHQFU\SWLRQNH\RQHDFKSDFNHWDQGURWDWHVQRWMXVWWKH
XQLFDVWNH\VEXWWKHEURDGFDVWNH\VDVZHOO7.,3LVDUHSODFHPHQWIRU
:(3WKDWUHPRYHVWKHSUHGLFWDELOLW\WKDWLQWUXGHUVUHOLHGRQWRGHWHUPLQHWKH
:(3NH\
3
$(6&&03$GYDQFHG(QFU\SWLRQ6WDQGDUG&RXQWHU0RGH&%&0$&
3URWRFRO:3$LVEDFNZDUGFRPSDWLEOHZLWK:3$LQFOXGLQJWKHVDPH
;DQG36.PRGHVRIRSHUDWLRQDQGVXSSRUWIRU7.,3HQFU\SWLRQ7KH
PDLQHQKDQFHPHQWLVLWVXVHRI$(6&RXQWHU0RGHHQFU\SWLRQZLWK&LSKHU
%ORFN&KDLQLQJ0HVVDJH$XWKHQWLFDWLRQ&RGH&%&0$&IRUPHVVDJH
LQWHJULW\7KH$(6&RXQWHU0RGH&%&0$&3URWRFRO$(6&&03
SURYLGHVH[WUHPHO\UREXVWGDWDFRQILGHQWLDOLW\XVLQJDELWNH\7KH
$(6&&03HQFU\SWLRQFLSKHULVVSHFLILHGDVDVWDQGDUGUHTXLUHPHQWIRU
:3$+RZHYHUWKHFRPSXWDWLRQDOLQWHQVLYHRSHUDWLRQVRI$(6&&03
UHTXLUHVKDUGZDUHVXSSRUWRQFOLHQWGHYLFHV7KHUHIRUHWRLPSOHPHQW:3$
LQWKHQHWZRUNZLUHOHVVFOLHQWVPXVWEHXSJUDGHGWR:3$FRPSOLDQW
KDUGZDUH
([DPSOH
PLFBPRGH
7KLVFRPPDQGVSHFLILHVKRZWRFDOFXODWHWKH0HVVDJH,QWHJULW\&KHFN0,&
6\QWD[
PLFBPRGHKDUGZDUH_VRIWZDUH!
KDUGZDUH8VHVKDUGZDUHWRFDOFXODWHWKH0,&
VRIWZDUH8VHVVRIWZDUHWRFDOFXODWHWKH0,&
'HIDXOW6HWWLQJ
VRIWZDUH
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
7KH0LFKDHO,QWHJULW\&KHFN0,&LVSDUWRIWKH7HPSRUDO.H\,QWHJULW\
3URWRFRO7.,3HQFU\SWLRQXVHGLQ:L)L3URWHFWHG$FFHVV:3$VHFXULW\
7KH0,&FDOFXODWLRQLVSHUIRUPHGLQWKHDFFHVVSRLQWIRUHDFKWUDQVPLWWHG
SDFNHWDQGWKLVFDQLPSDFWWKURXJKSXWDQGSHUIRUPDQFH7KHDFFHVVSRLQW
VXSSRUWVDFKRLFHRIKDUGZDUHRUVRIWZDUHIRU0,&FDOFXODWLRQ7KH
SHUIRUPDQFHRIWKHDFFHVVSRLQWFDQEHLPSURYHGE\VHOHFWLQJWKHEHVW
PHWKRGIRUWKHVSHFLILFGHSOR\PHQW
8VLQJWKH³KDUGZDUH´RSWLRQSURYLGHVEHVWSHUIRUPDQFHZKHQWKHQXPEHU
RIVXSSRUWHGFOLHQWVLVOHVVWKDQ
8VLQJWKH³VRIWZDUH´RSWLRQSURYLGHVWKHEHVWSHUIRUPDQFHIRUDODUJH
QXPEHURIFOLHQWVRQRQHUDGLRLQWHUIDFH7KURXJKSXWPD\EHUHGXFHGZKHQ
ERWKDDQGJLQWHUIDFHVDUHVXSSRUWLQJDKLJKQXPEHURI
FOLHQWVVLPXOWDQHRXVO\
Enterprise AP(if-wireless g: VAP[0])#multicast-cipher TKIP
Enterprise AP(if-wireless g)#
4
([DPSOH
ZSDSUHVKDUHGNH\
7KLVFRPPDQGGHILQHVD:L)L3URWHFWHG$FFHVV:3$:3$3UHVKDUHGNH\
6\QWD[
ZSDSUHVKDUHGNH\KH[_SDVVSKUDVHNH\!YDOXH!
KH[6SHFLILHVKH[DGHFLPDOGLJLWVDVWKHNH\LQSXWIRUPDW
SDVVSKUDVHNH\6SHFLILHVDQ$6&,,SDVVSKUDVHVWULQJDVWKHNH\LQSXW
IRUPDW
YDOXH7KHNH\VWULQJ)RU$6&,,LQSXWVSHFLI\DVWULQJEHWZHHQDQG
FKDUDFWHUV)RU+(;LQSXWVSHFLI\H[DFWO\GLJLWV
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
7RVXSSRUW:3$RU:3$IRUFOLHQWDXWKHQWLFDWLRQXVHWKHDXWKFRPPDQG
WRVSHFLI\WKHDXWKHQWLFDWLRQW\SHDQGXVHWKHZSDSUHVKDUHGNH\
FRPPDQGWRVSHFLI\RQHVWDWLFNH\
,I:3$RU:3$LVXVHGZLWKSUHVKDUHGNH\PRGHDOOZLUHOHVVFOLHQWV
PXVWEHFRQILJXUHGZLWKWKHVDPHSUHVKDUHGNH\WRFRPPXQLFDWHZLWKWKH
DFFHVVSRLQW¶V9$3LQWHUIDFH
([DPSOH
5HODWHG&RPPDQGV
DXWK
SPNVDOLIHWLPH
7KLVFRPPDQGVHWVWKHWLPHIRUDJLQJRXWFDFKHG:3$3DLUZLVH0DVWHU.H\
6HFXULW\$VVRFLDWLRQ30.6$LQIRUPDWLRQIRUIDVWURDPLQJ
6\QWD[
SPNVDOLIHWLPHPLQXWHV!
PLQXWHV7KHWLPHIRUDJLQJRXW30.6$LQIRUPDWLRQ
5DQJH PLQXWHV
'HIDXOW6HWWLQJ
PLQXWHV
Enterprise AP(if-wireless a)#mic_mode hardware
Enterprise AP(if-wireless g)#
Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecret
Enterprise AP(if-wireless g)#
5
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
:3$SURYLGHVIDVWURDPLQJIRUDXWKHQWLFDWHGFOLHQWVE\UHWDLQLQJNH\VDQG
RWKHUVHFXULW\LQIRUPDWLRQLQDFDFKHVRWKDWLIDFOLHQWURDPVDZD\IURPDQ
DFFHVVSRLQWDQGWKHQUHWXUQVUHDXWKHQWLFDWLRQLVQRWUHTXLUHG
:KHQD:3$FOLHQWLVILUVWDXWKHQWLFDWHGLWUHFHLYHVD3DLUZLVH0DVWHU.H\
30.WKDWLVXVHGWRJHQHUDWHRWKHUNH\VIRUXQLFDVWGDWDHQFU\SWLRQ7KLV
NH\DQGRWKHUFOLHQWLQIRUPDWLRQIRUPD6HFXULW\$VVRFLDWLRQWKDWWKHDFFHVV
SRLQWQDPHVDQGKROGVLQDFDFKH7KHOLIHWLPHRIWKLVVHFXULW\DVVRFLDWLRQ
FDQEHFRQILJXUHGZLWKWKLVFRPPDQG:KHQWKHOLIHWLPHH[SLUHVWKHFOLHQW
VHFXULW\DVVRFLDWLRQDQGNH\VDUHGHOHWHGIURPWKHFDFKH,IWKHFOLHQW
UHWXUQVWRWKHDFFHVVSRLQWLWUHTXLUHVIXOOUHDXWKHQWLFDWLRQ
7KHDFFHVVSRLQWFDQVWRUHXSWRHQWULHVLQWKH30.6$FDFKH
([DPSOH
SUHDXWKHQWLFDWLRQ
7KLVFRPPDQGHQDEOHV:3$SUHDXWKHQWLFDWLRQIRUIDVWVHFXUHURDPLQJ
6\QWD[
SUHDXWKHQWLFDWLRQHQDEOH_GLVDEOH!
HQDEOH(QDEOHVSUHDXWKHQWLFDWLRQIRUWKH9$3LQWHUIDFH
GLVDEOH'LVDEOHVSUHDXWKHQWLFDWLRQIRUWKH9$3LQWHUIDFH
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
(DFKWLPHDFOLHQWURDPVWRDQRWKHUDFFHVVSRLQWLWKDVWREHIXOO\
UHDXWKHQWLFDWHG7KLVDXWKHQWLFDWLRQSURFHVVLVWLPHFRQVXPLQJDQGFDQ
GLVUXSWDSSOLFDWLRQVUXQQLQJRYHUWKHQHWZRUN:3$LQFOXGHVD
PHFKDQLVPNQRZQDVSUHDXWKHQWLFDWLRQWKDWDOORZVFOLHQWVWRURDPWRD
QHZDFFHVVSRLQWDQGEHTXLFNO\DVVRFLDWHG7KHILUVWWLPHDFOLHQWLV
DXWKHQWLFDWHGWRDZLUHOHVVQHWZRUNLWKDVWREHIXOO\DXWKHQWLFDWHG:KHQ
WKHFOLHQWLVDERXWWRURDPWRDQRWKHUDFFHVVSRLQWLQWKHQHWZRUNWKH
DFFHVVSRLQWVHQGVSUHDXWKHQWLFDWLRQPHVVDJHVWRWKHQHZDFFHVVSRLQW
WKDWLQFOXGHWKHFOLHQW¶VVHFXULW\DVVRFLDWLRQLQIRUPDWLRQ7KHQZKHQWKH
FOLHQWVHQGVDQDVVRFLDWLRQUHTXHVWWRWKHQHZDFFHVVSRLQWWKHFOLHQWLV
Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecret
Enterprise AP(if-wireless g: VAP[0])#
6
NQRZQWREHDOUHDG\DXWKHQWLFDWHGVRLWSURFHHGVGLUHFWO\WRNH\H[FKDQJH
DQGDVVRFLDWLRQ
7RVXSSRUWSUHDXWKHQWLFDWLRQERWKFOLHQWVDQGDFFHVVSRLQWVLQWKHQHWZRUN
PXVWEH:3$HQDEOHG
3UHDXWKHQWLFDWLRQUHTXLUHVDOODFFHVVSRLQWVLQWKHQHWZRUNWREHRQWKH
VDPH,3VXEQHW
([DPSOH
Link Integrity Commands
7KHDFFHVVSRLQWSURYLGHVDOLQNLQWHJULW\IHDWXUHWKDWFDQEHXVHGWRHQVXUHWKDW
ZLUHOHVVFOLHQWVDUHFRQQHFWHGWRUHVRXUFHVRQWKHZLUHGQHWZRUN7KHDFFHVVSRLQW
GRHVWKLVE\SHULRGLFDOO\VHQGLQJ3LQJPHVVDJHVWRDKRVWGHYLFHLQWKHZLUHG
(WKHUQHWQHWZRUN,IWKHDFFHVVSRLQWGHWHFWVWKDWWKHFRQQHFWLRQWRWKHKRVWKDV
IDLOHGLWGLVDEOHVWKHUDGLRLQWHUIDFHVIRUFLQJFOLHQWVWRILQGDQGDVVRFLDWHZLWK
DQRWKHUDFFHVVSRLQW:KHQWKHFRQQHFWLRQWRWKHKRVWLVUHVWRUHGWKHDFFHVVSRLQW
UHHQDEOHVWKHUDGLRLQWHUIDFHV
Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecret
Enterprise AP(if-wireless g: VAP[0])#
7DEOH /LQN,QWHJULW\&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
27
OLQNLQWHJULW\SLQJGHWHFW
7KLVFRPPDQGHQDEOHVOLQNLQWHJULW\GHWHFWLRQ8VHWKHQRIRUPWRGLVDEOHOLQN
LQWHJULW\GHWHFWLRQ
6\QWD[
>QR@OLQNLQWHJULW\SLQJGHWHFW
'HIDXOW6HWWLQJ
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
:KHQOLQNLQWHJULW\LVHQDEOHGWKH,3DGGUHVVRIDKRVWGHYLFHLQWKHZLUHG
QHWZRUNPXVWEHVSHFLILHG
7KHDFFHVVSRLQWSHULRGLFDOO\VHQGVDQ,&03HFKRUHTXHVW3LQJSDFNHWWR
WKHOLQNKRVW,3DGGUHVV:KHQWKHQXPEHURIIDLOHGUHVSRQVHVHLWKHUWKH
KRVWGRHVQRWUHVSRQGRULVXQUHDFKDEOHH[FHHGVWKHOLPLWVHWE\WKH
OLQNLQWHJULW\SLQJIDLOUHWU\FRPPDQGWKHOLQNLVGHWHUPLQHGDVORVW
([DPSOH
OLQNLQWHJULW\SLQJKRVW
7KLVFRPPDQGFRQILJXUHVWKHOLQNKRVWQDPHRU,3DGGUHVV8VHWKHQRIRUPWR
UHPRYHWKHKRVWVHWWLQJ
6\QWD[
OLQNLQWHJULW\SLQJKRVWKRVWBQDPH_LSBDGGUHVV!
QROLQNLQWHJULW\SLQJKRVW
KRVWBQDPH$OLDVRIWKHKRVW
LSBDGGUHVV,3DGGUHVVRIWKHKRVW
'HIDXOW6HWWLQJ
1RQH
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
Enterprise AP(config)#link-integrity ping-detect
Enterprise AP(config)#
Enterprise AP(config)#link-integrity ping-host 192.168.1.10
Enterprise AP(config)#
28
OLQNLQWHJULW\SLQJLQWHUYDO
7KLVFRPPDQGFRQILJXUHVWKHWLPHEHWZHHQHDFK3LQJVHQWWRWKHOLQNKRVW
6\QWD[
OLQNLQWHJULW\SLQJLQWHUYDOLQWHUYDO!
LQWHUYDO7KHWLPHEHWZHHQ3LQJV5DQJHVHFRQGV
'HIDXOW6HWWLQJ
VHFRQGV
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
OLQNLQWHJULW\SLQJIDLOUHWU\
7KLVFRPPDQGFRQILJXUHVWKHQXPEHURIFRQVHFXWLYHIDLOHG3LQJFRXQWVEHIRUHWKH
OLQNLVGHWHUPLQHGDVORVW
6\QWD[
OLQNLQWHJULW\SLQJIDLOUHWU\FRXQWV!
FRXQWV7KHQXPEHURIIDLOHG3LQJFRXQWVEHIRUHWKHOLQNLVGHWHUPLQHGDV
ORVW5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
OLQNLQWHJULW\HWKHUQHWGHWHFW
7KLVFRPPDQGHQDEOHVDQLQWHJULW\FKHFNWRGHWHUPLQHZKHWKHURUQRWWKHDFFHVV
SRLQWLVFRQQHFWHGWRWKHZLUHG(WKHUQHW
6\QWD[
>QR@OLQNLQWHJULW\HWKHUQHWGHWHFW
'HIDXOW6HWWLQJ
'LVDEOHG
Enterprise AP(config)#link-integrity ping-interval 20
Enterprise AP(config)#
Enterprise AP(config)#link-integrity ping-fail-retry 10
Enterprise AP(config)#
29
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
([DPSOH
VKRZOLQNLQWHJULW\
7KLVFRPPDQGGLVSOD\VWKHFXUUHQWOLQNLQWHJULW\FRQILJXUDWLRQ
&RPPDQG0RGH
([HF
([DPSOH
Enterprise AP(config)#link-integrity ethernet-detect
Notification : Ethernet Link Detect SUCCESS - RADIO(S) ENABLED
Enterprise AP(config)#
Enterprise AP#show link-integrity
Link Integrity Information
===========================================================
Ethernet Detect : Enabled
Ping Detect : Enabled
Target IP/Name : 192.168.0.140
Ping Fail Retry : 6
Ping Interval : 30
===========================================================
Enterprise AP#
30
IAPP Commands
7KHFRPPDQGGHVFULEHGLQWKLVVHFWLRQHQDEOHVWKHSURWRFROVLJQDOLQJUHTXLUHGWR
HQVXUHWKHVXFFHVVIXOKDQGRYHURIZLUHOHVVFOLHQWVURDPLQJEHWZHHQGLIIHUHQW
IFRPSOLDQWDFFHVVSRLQWV,QRWKHUZRUGVWKHISURWRFROFDQHQVXUH
VXFFHVVIXOURDPLQJEHWZHHQDFFHVVSRLQWVLQDPXOWLYHQGRUHQYLURQPHQW
LDSS
7KLVFRPPDQGHQDEOHVWKHSURWRFROVLJQDOLQJUHTXLUHGWRKDQGRYHUZLUHOHVVFOLHQWV
URDPLQJEHWZHHQGLIIHUHQWIFRPSOLDQWDFFHVVSRLQWV8VHWKHQRIRUPWR
GLVDEOHIVLJQDOLQJ
6\QWD[
>QR@LDSS
'HIDXOW
(QDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHFXUUHQWVWDQGDUGGRHVQRWVSHFLI\WKHVLJQDOLQJUHTXLUHGEHWZHHQ
DFFHVVSRLQWVLQRUGHUWRVXSSRUWFOLHQWVURDPLQJIURPRQHDFFHVVSRLQWWR
DQRWKHU,QSDUWLFXODUWKLVFDQFUHDWHDSUREOHPIRUFOLHQWVURDPLQJEHWZHHQ
DFFHVVSRLQWVIURPGLIIHUHQWYHQGRUV7KLVFRPPDQGLVXVHGWRHQDEOHRU
GLVDEOHIKDQGRYHUVLJQDOLQJEHWZHHQGLIIHUHQWDFFHVVSRLQWVHVSHFLDOO\
LQDPXOWLYHQGRUHQYLURQPHQW
([DPSOH
Enterprise AP(config)#iapp
Enterprise AP(config)#
1
VLAN Commands
7KHDFFHVVSRLQWFDQHQDEOHWKHVXSSRUWRI9/$1WDJJHGWUDIILFSDVVLQJEHWZHHQ
ZLUHOHVVFOLHQWVDQGWKHZLUHGQHWZRUN8SWR9/$1,'VFDQEHPDSSHGWR
VSHFLILFZLUHOHVVFOLHQWVDOORZLQJXVHUVWRUHPDLQZLWKLQWKHVDPH9/$1DVWKH\
PRYHDURXQGDFDPSXVVLWH
:KHQ9/$1LVHQDEOHGRQWKHDFFHVVSRLQWD9/$1,'DQXPEHUEHWZHHQDQG
FDQEHDVVLJQHGWRHDFKFOLHQWDIWHUVXFFHVVIXODXWKHQWLFDWLRQXVLQJ,(((
;DQGDFHQWUDO5$',86VHUYHU7KHXVHU9/$1,'VPXVWEHFRQILJXUHGRQWKH
5$',86VHUYHUIRUHDFKXVHUDXWKRUL]HGWRDFFHVVWKHQHWZRUN,IDXVHUGRHVQRW
KDYHDFRQILJXUHG9/$1,'WKHDFFHVVSRLQWDVVLJQVWKHXVHUWRLWVRZQFRQILJXUHG
QDWLYH9/$1,'
&DXWLRQ:KHQ9/$1VDUHHQDEOHGWKHDFFHVVSRLQW¶V(WKHUQHWSRUWGURSVDOOUHFHLYHG
WUDIILFWKDWGRHVQRWLQFOXGHD9/$1WDJ7RPDLQWDLQQHWZRUNFRQQHFWLYLW\WRWKH
DFFHVVSRLQWDQGZLUHOHVVFOLHQWVEHVXUHWKDWWKHDFFHVVSRLQWLVFRQQHFWHGWR
DGHYLFHSRUWRQDZLUHGQHWZRUNWKDWVXSSRUWV,(((49/$1WDJV
7KH9/$1FRPPDQGVVXSSRUWHGE\WKHDFFHVVSRLQWDUHOLVWHGEHORZ
YODQ
7KLVFRPPDQGHQDEOHV9/$1VIRUDOOWUDIILF8VHWKHQRIRUPWRGLVDEOH9/$1V
6\QWD[
>QR@YODQHQDEOH
'HIDXOW
'LVDEOHG
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG'HVFULSWLRQ
:KHQ9/$1VDUHHQDEOHGWKHDFFHVVSRLQWWDJVIUDPHVUHFHLYHGIURP
ZLUHOHVVFOLHQWVZLWKWKH9/$1,'FRQILJXUHGIRUHDFKFOLHQWRQWKH5$',86
VHUYHU,IWKH9/$1,'KDVQRWEHHQFRQILJXUHGIRUDFOLHQWRQWKH5$',86
VHUYHUWKHQWKHIUDPHVDUHWDJJHGZLWKWKHDFFHVVSRLQW¶VQDWLYH9/$1,'
7DEOH 9/$1&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
2
7UDIILFHQWHULQJWKH(WKHUQHWSRUWPXVWEHWDJJHGZLWKD9/$1,'WKDW
PDWFKHVWKHDFFHVVSRLQW¶VQDWLYH9/$1,'RUZLWKD9/$1WDJWKDW
PDWFKHVRQHRIWKHZLUHOHVVFOLHQWVFXUUHQWO\DVVRFLDWHGZLWKWKHDFFHVV
SRLQW
([DPSOH
5HODWHG&RPPDQGV
PDQDJHPHQWYODQLG
PDQDJHPHQWYODQLG
7KLVFRPPDQGFRQILJXUHVWKHPDQDJHPHQW9/$1,'IRUWKHDFFHVVSRLQW
6\QWD[
PDQDJHPHQWYODQLGYODQLG!
YODQLG0DQDJHPHQW9/$1,'5DQJH
'HIDXOW6HWWLQJ
&RPPDQG0RGH
*OREDO&RQILJXUDWLRQ
&RPPDQG8VDJH
7KHPDQDJHPHQW9/$1LVIRUPDQDJLQJWKHDFFHVVSRLQW)RUH[DPSOHWKH
DFFHVVSRLQWDOORZVWUDIILFWKDWLVWDJJHGZLWKWKHVSHFLILHG9/$1WRPDQDJH
WKHDFFHVVSRLQWYLDUHPRWHPDQDJHPHQW66+61037HOQHWHWF
([DPSOH
5HODWHG&RPPDQGV
YODQ
YODQLG
7KLVFRPPDQGFRQILJXUHVWKHGHIDXOW9/$1,'IRUWKH9$3LQWHUIDFH
6\QWD[
YODQLGYODQLG!
YODQLG1DWLYH9/$1,'5DQJH
Enterprise AP(config)#vlan enable
Reboot system now? <y/n>: y
Enterprise AP(config)#management-vlanid 3
Enterprise AP(config)#
3
'HIDXOW6HWWLQJ
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV9$3
&RPPDQG8VDJH
7RLPSOHPHQWWKHGHIDXOW9/$1,'VHWWLQJIRU9$3LQWHUIDFHWKHDFFHVV
SRLQWPXVWHQDEOH9/$1VXSSRUWXVLQJWKHYODQFRPPDQG
:KHQ9/$1VDUHHQDEOHGWKHDFFHVVSRLQWWDJVIUDPHVUHFHLYHGIURP
ZLUHOHVVFOLHQWVZLWKWKHGHIDXOW9/$1,'IRUWKH9$3LQWHUIDFH,I,(((
;LVEHLQJXVHGWRDXWKHQWLFDWHZLUHOHVVFOLHQWVVSHFLILF9/$1,'V
FDQEHFRQILJXUHGRQWKH5$',86VHUYHUWREHDVVLJQHGWRHDFKFOLHQW
8VLQJ,(((;DQGDFHQWUDO5$',86VHUYHUXSWR9/$1,'VFDQ
EHPDSSHGWRVSHFLILFZLUHOHVVFOLHQWV
,IWKH9/$1,'KDVQRWEHHQFRQILJXUHGIRUDFOLHQWRQWKH5$',86VHUYHU
WKHQWKHIUDPHVDUHWDJJHGZLWKWKHGHIDXOW9/$1,'RIWKH9$3LQWHUIDFH
([DPSOH
WMM Commands
7KHDFFHVVSRLQWLPSOHPHQWV4R6XVLQJWKH:L)L0XOWLPHGLD:00VWDQGDUG
8VLQJ:00WKHDFFHVVSRLQWLVDEOHWRSULRULWL]HWUDIILFDQGRSWLPL]HSHUIRUPDQFH
ZKHQPXOWLSOHDSSOLFDWLRQVFRPSHWHIRUZLUHOHVVQHWZRUNEDQGZLGWKDWWKHVDPH
WLPH:00HPSOR\VWHFKQLTXHVWKDWDUHDVXEVHWRIWKHGHYHORSLQJ,(((H
4R6VWDQGDUGDQGLWHQDEOHVWKHDFFHVVSRLQWWRLQWHURSHUDWHZLWKERWK:00
HQDEOHGFOLHQWVDQGRWKHUGHYLFHVWKDWPD\ODFNDQ\:00IXQFWLRQDOLW\
7KH:00FRPPDQGVVXSSRUWHGE\WKHDFFHVVSRLQWDUHOLVWHGEHORZ
Enterprise AP(if-wireless g: VAP[0])#vlan-id 3
Enterprise AP(if-wireless g: VAP[0])#
7DEOH :00&RPPDQGV
&RPPDQG )XQFWLRQ 0RGH 3DJH
4
ZPP
7KLVFRPPDQGVHWVWKH:00RSHUDWLRQDOPRGHRQWKHDFFHVVSRLQW8VHWKHQR
IRUPWRGLVDEOH:00
6\QWD[
>QR@ZPPVXSSRUWHG_UHTXLUHG!
VXSSRUWHG:00ZLOOEHXVHGIRUDQ\DVVRFLDWHGGHYLFHWKDWVXSSRUWVWKLV
IHDWXUH'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHPD\VWLOODVVRFLDWHZLWKWKH
DFFHVVSRLQW
UHTXLUHG:00PXVWEHVXSSRUWHGRQDQ\GHYLFHWU\LQJWRDVVRFLDWHGZLWK
WKHDFFHVVSRLQW'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHZLOOQRWEHDOORZHG
WRDVVRFLDWHZLWKWKHDFFHVVSRLQW
'HIDXOW
VXSSRUWHG
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
([DPSOH
ZPPDFNQRZOHGJHSROLF\
7KLVFRPPDQGDOORZVWKHDFNQRZOHGJHPHQWZDLWWLPHWREHHQDEOHGRUGLVDEOHGIRU
HDFK$FFHVV&DWHJRU\$&
6\QWD[
ZPPDFNQRZOHGJHSROLF\DFBQXPEHU!DFN_QRDFN!
DFBQXPEHU$FFHVVFDWHJRULHV5DQJH
DFN5HTXLUHWKHVHQGHUWRZDLWIRUDQDFNQRZOHGJHPHQWIURPWKHUHFHLYHU
QRDFN'RHVQRWUHTXLUHWKHVHQGHUWRZDLWIRUDQDFNQRZOHGJHPHQWIURP
WKHUHFHLYHU
'HIDXOW
DFN
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
&RPPDQG8VDJH
:00GHILQHVIRXUDFFHVVFDWHJRULHV$&V±YRLFHYLGHREHVWHIIRUWDQG
EDFNJURXQG7KHVHFDWHJRULHVFRUUHVSRQGWRWUDIILFSULRULW\OHYHOVDQGDUH
PDSSHGWR,((('SULRULW\WDJVVHH7DEOH 7KHGLUHFWPDSSLQJ
RIWKHIRXU$&VWR'SULRULWLHVLVVSHFLILFDOO\LQWHQGHGWRIDFLOLWDWH
Enterprise AP(if-wireless a)#wmm required
Enterprise AP(if-wireless a)#
5
LQWHUSUHWDELOLW\ZLWKRWKHUZLUHGQHWZRUN4R6SROLFLHV:KLOHWKHIRXU$&V
DUHVSHFLILHGIRUVSHFLILFW\SHVRIWUDIILF:00DOORZVWKHSULRULW\OHYHOVWR
EHFRQILJXUHGWRPDWFKDQ\QHWZRUNZLGH4R6SROLF\:00DOVRVSHFLILHV
DSURWRFROWKDWDFFHVVSRLQWVFDQXVHWRFRPPXQLFDWHWKHFRQILJXUHGWUDIILF
SULRULW\OHYHOVWR4R6HQDEOHGZLUHOHVVFOLHQWV
$OWKRXJKWXUQLQJRIIWKHUHTXLUHPHQWIRUWKHVHQGHUWRZDLWIRUDQ
DFNQRZOHGJHPHQWFDQLQFUHDVHVGDWDWKURXJKSXWLWFDQDOVRUHVXOWLQD
KLJKQXPEHURIHUURUVZKHQWUDIILFOHYHOVDUHKHDY\
([DPSOH
ZPPSDUDP
7KLVFRPPDQGFRQILJXUHVGHWDLOHG:00SDUDPHWHUVWKDWDSSO\WRWKHDFFHVVSRLQW
$3RUWKHZLUHOHVVFOLHQWV%66
6\QWD[
ZPPSDUDP$3_%66!DFBQXPEHU!/RJ&Z0LQ!/RJ&Z0D[!$,)6!
7[2S/LPLW!DGPLVVLRQBFRQWURO!
$3$FFHVV3RLQW
%66:LUHOHVVFOLHQW
DFBQXPEHU$FFHVVFDWHJRULHV$&V±YRLFHYLGHREHVWHIIRUWDQG
EDFNJURXQG7KHVHFDWHJRULHVFRUUHVSRQGWRWUDIILFSULRULW\OHYHOVDQGDUH
PDSSHGWR,((('SULRULW\WDJVDVVKRZQLQ7DEOH 5DQJH
/RJ&Z0LQ0LQLPXPORJYDOXHRIWKHFRQWHQWLRQZLQGRZ7KLVLVWKHLQLWLDO
XSSHUOLPLWRIWKHUDQGRPEDFNRIIZDLWWLPHEHIRUHZLUHOHVVPHGLXPDFFHVV
FDQEHDWWHPSWHG7KHLQLWLDOZDLWWLPHLVDUDQGRPYDOXHEHWZHHQ]HURDQG
WKH/RJ&Z0LQYDOXH6SHFLI\WKH/RJ&Z0LQYDOXH1RWHWKDWWKH/RJ&Z0LQ
YDOXHPXVWEHHTXDORUOHVVWKDQWKH/RJ&Z0D[YDOXH
5DQJH PLFURVHFRQGV
/RJ&Z0D[0D[LPXPORJYDOXHRIWKHFRQWHQWLRQZLQGRZ7KLVLVWKH
PD[LPXPXSSHUOLPLWRIWKHUDQGRPEDFNRIIZDLWWLPHEHIRUHZLUHOHVV
PHGLXPDFFHVVFDQEHDWWHPSWHG7KHFRQWHQWLRQZLQGRZLVGRXEOHGDIWHU
HDFKGHWHFWHGFROOLVLRQXSWRWKH/RJ&Z0D[YDOXH1RWHWKDWWKH&:0D[
YDOXHPXVWEHJUHDWHURUHTXDOWRWKH/RJ&Z0LQYDOXH
5DQJH PLFURVHFRQGV
$,)6$UELWUDU\,QWHU)UDPH6SDFHVSHFLILHVWKHPLQLPXPDPRXQWRIZDLW
WLPHEHIRUHWKHQH[WGDWDWUDQVPLVVLRQDWWHPSW
5DQJH PLFURVHFRQGV
7;23/LPLW7UDQVPLVVLRQ2SSRUWXQLW\/LPLWVSHFLILHVWKHPD[LPXPWLPH
DQ$&WUDQVPLWTXHXHKDVDFFHVVWRWKHZLUHOHVVPHGLXP:KHQDQ$&
TXHXHLVJUDQWHGDWUDQVPLWRSSRUWXQLW\LWFDQWUDQVPLWGDWDIRUDWLPHXSWR
WKH7[2S/LPLW7KLVGDWDEXUVWLQJJUHDWO\LPSURYHVWKHHIILFLHQF\IRUKLJK
GDWDUDWHWUDIILF5DQJH PLFURVHFRQGV
Enterprise AP(if-wireless a)#wmm-acknowledge-policy 0 noack
Enterprise AP(if-wireless a)#
6
DGPLVVLRQBFRQWURO7KHDGPLVVLRQFRQWUROPRGHIRUWKHDFFHVVFDWHJRU\
:KHQHQDEOHGFOLHQWVDUHEORFNHGIURPXVLQJWKHDFFHVVFDWHJRU\
2SWLRQV WR GLVDEOHWRHQDEOH
'HIDXOW
&RPPDQG0RGH
,QWHUIDFH&RQILJXUDWLRQ:LUHOHVV
([DPSOH
$33DUDPHWHUV
:003DUDPHWHUV $&%HVW(IIRUW $&%DFNJURXQG $&9LGHR $&9RLFH
%663DUDPHWHUV
:003DUDPHWHUV $&%HVW(IIRUW $&%DFNJURXQG $&9LGHR $&9RLFH
Enterprise AP(if-wireless a)#wmmparams ap 0 4 6 3 1 1
Enterprise AP(if-wireless a)#
37
Appendix A: Troubleshooting
&KHFNWKHIROORZLQJLWHPVEHIRUH\RXFRQWDFWORFDO7HFKQLFDO6XSSRUW
,IZLUHOHVVFOLHQWVFDQQRWDFFHVVWKHQHWZRUNFKHFNWKHIROORZLQJ
%HVXUHWKHDFFHVVSRLQWDQGWKHZLUHOHVVFOLHQWVDUHFRQILJXUHGZLWKWKHVDPH
6HUYLFH6HW,'66,'
,IDXWKHQWLFDWLRQRUHQFU\SWLRQDUHHQDEOHGHQVXUHWKDWWKHZLUHOHVVFOLHQWVDUH
SURSHUO\FRQILJXUHGZLWKWKHDSSURSULDWHDXWKHQWLFDWLRQRUHQFU\SWLRQNH\V
,IDXWKHQWLFDWLRQLVEHLQJSHUIRUPHGWKURXJKD5$',86VHUYHUHQVXUHWKDWWKH
FOLHQWVDUHSURSHUO\FRQILJXUHGRQWKH5$',86VHUYHU
,IDXWKHQWLFDWLRQLVEHLQJSHUIRUPHGWKURXJK,(((;EHVXUHWKH
ZLUHOHVVXVHUVKDYHLQVWDOOHGDQGSURSHUO\FRQILJXUHG;FOLHQWVRIWZDUH
,I0$&DGGUHVVILOWHULQJLVHQDEOHGEHVXUHWKHFOLHQW¶VDGGUHVVLVLQFOXGHGLQ
WKHORFDOILOWHULQJGDWDEDVHRURQWKH5$',86VHUYHUGDWDEDVH
,IWKHZLUHOHVVFOLHQWVDUHURDPLQJEHWZHHQDFFHVVSRLQWVPDNHVXUHWKDWDOO
WKHDFFHVVSRLQWVDQGZLUHOHVVGHYLFHVLQWKH([WHQGHG6HUYLFH6HW(66DUH
FRQILJXUHGWRWKHVDPH66,'DQGDXWKHQWLFDWLRQPHWKRG
,IWKHDFFHVVSRLQWFDQQRWEHFRQILJXUHGXVLQJWKH7HOQHWDZHEEURZVHURU
6103VRIWZDUH
%HVXUHWRKDYHFRQILJXUHGWKHDFFHVVSRLQWZLWKDYDOLG,3DGGUHVVVXEQHW
PDVNDQGGHIDXOWJDWHZD\
,I9/$1VDUHHQDEOHGRQWKHDFFHVVSRLQWWKHPDQDJHPHQWVWDWLRQVKRXOGEH
FRQILJXUHGWRVHQGWDJJHGIUDPHVZLWKD9/$1,'WKDWPDWFKHVWKHDFFHVV
SRLQW¶VPDQDJHPHQW9/$1GHIDXOW9/$1SDJH+RZHYHUWRPDQDJH
WKHDFFHVVSRLQWIURPDZLUHOHVVFOLHQWWKH$30DQDJHPHQW)LOWHUVKRXOGEH
GLVDEOHGSDJH
&KHFNWKDW\RXKDYHDYDOLGQHWZRUNFRQQHFWLRQWRWKHDFFHVVSRLQWDQGWKDW
WKH(WKHUQHWSRUWRUWKHZLUHOHVVLQWHUIDFHWKDW\RXDUHXVLQJKDVQRWEHHQ
GLVDEOHG
,I\RXDUHFRQQHFWLQJWRWKHDFFHVVSRLQWWKURXJKWKHZLUHG(WKHUQHWLQWHUIDFH
FKHFNWKHQHWZRUNFDEOLQJEHWZHHQWKHPDQDJHPHQWVWDWLRQDQGWKHDFFHVV
SRLQW,I\RXDUHFRQQHFWLQJWRDFFHVVSRLQWIURPDZLUHOHVVFOLHQWHQVXUHWKDW
\RXKDYHDYDOLGFRQQHFWLRQWRWKHDFFHVVSRLQW
,I\RXFDQQRWFRQQHFWXVLQJ7HOQHW\RXPD\KDYHH[FHHGHGWKHPD[LPXP
QXPEHURIFRQFXUUHQW7HOQHWVHVVLRQVSHUPLWWHGLHIRXUVHVVLRQV7U\
FRQQHFWLQJDJDLQDWDODWHUWLPH
$
,I\RXFDQQRWDFFHVVWKHRQERDUGFRQILJXUDWLRQSURJUDPYLDDVHULDOSRUW
FRQQHFWLRQ
%HVXUH\RXKDYHVHWWKHWHUPLQDOHPXODWRUSURJUDPWR97FRPSDWLEOH
GDWDELWVVWRSELWQRSDULW\DQGESV
&KHFNWKDWWKHQXOOPRGHPVHULDOFDEOHFRQIRUPVWRWKHSLQRXWFRQQHFWLRQV
SURYLGHGRQSDJH%
,I\RXIRUJRWRUORVWWKHSDVVZRUG
6HWWKHDFFHVVSRLQWWRLWVGHIDXOWFRQILJXUDWLRQE\SUHVVLQJWKHUHVHWEXWWRQ
RQWKHEDFNSDQHOIRUVHFRQGVRUPRUH7KHQXVHWKHGHIDXOWXVHUQDPH
³DGPLQ´WRDFFHVVWKHPDQDJHPHQWLQWHUIDFH
,IDOORWKHUUHFRYHU\PHDVXUHIDLODQGWKHDFFHVVSRLQWLVVWLOOQRWIXQFWLRQLQJ
SURSHUO\WDNHDQ\RIWKHVHVWHSV
5HVHWWKHDFFHVVSRLQW¶VKDUGZDUHXVLQJWKHFRQVROHLQWHUIDFHZHELQWHUIDFH
RUWKURXJKDSRZHUUHVHW
5HVHWWKHDFFHVVSRLQWWRLWVGHIDXOWFRQILJXUDWLRQE\SUHVVLQJWKHUHVHWEXWWRQ
RQWKHEDFNSDQHOIRUVHFRQGVRUPRUH7KHQXVHWKHGHIDXOWXVHUQDPH
³DGPLQ´DQGDQXOOSDVVZRUGWRDFFHVVWKHPDQDJHPHQWLQWHUIDFH
Appendix B: Cables and Pinouts
Twisted-Pair Cable Assignments
)RU%$6(7;FRQQHFWLRQVDWZLVWHGSDLUFDEOHPXVWKDYHWZRSDLUVRIZLUHV
(DFKZLUHSDLULVLGHQWLILHGE\WZRGLIIHUHQWFRORUV)RUH[DPSOHRQHZLUHPLJKWEH
JUHHQDQGWKHRWKHUJUHHQZLWKZKLWHVWULSHV$OVRDQ5-FRQQHFWRUPXVWEH
DWWDFKHGWRERWKHQGVRIWKHFDEOH
&DXWLRQ (DFKZLUHSDLUPXVWEHDWWDFKHGWRWKH5-FRQQHFWRUVLQDVSHFLILF
RULHQWDWLRQ6HH³6WUDLJKW7KURXJK:LULQJ´RQSDJH%DQG³&URVVRYHU
:LULQJ´RQSDJH%IRUDQH[SODQDWLRQ
&DXWLRQ '2127SOXJDSKRQHMDFNFRQQHFWRULQWRWKH5-SRUW8VHRQO\
WZLVWHGSDLUFDEOHVZLWK5-FRQQHFWRUVWKDWFRQIRUPZLWK)&&VWDQGDUGV
7KHIROORZLQJILJXUHLOOXVWUDWHVKRZWKHSLQVRQWKH5-FRQQHFWRUDUHQXPEHUHG
%HVXUHWRKROGWKHFRQQHFWRUVLQWKHVDPHRULHQWDWLRQZKHQDWWDFKLQJWKHZLUHVWR
WKHSLQV
%$6(7;3LQ$VVLJQPHQWV
8VHXQVKLHOGHGWZLVWHGSDLU873RUVKLHOGHGWZLVWHGSDLU673FDEOHIRU5-
FRQQHFWLRQVRKP&DWHJRU\RUEHWWHUFDEOHIRU0ESVFRQQHFWLRQVRU
RKP&DWHJRU\RUEHWWHUFDEOHIRU0ESVFRQQHFWLRQV$OVREHVXUH
WKDWWKH
OHQJWKRIDQ\WZLVWHGSDLUFRQQHFWLRQGRHVQRWH[FHHGPHWHUVIHHW
7KH5-SRUWRQWKHDFFHVVSRLQWLVZLUHGZLWK0',SLQRXWV7KLVPHDQVWKDW\RX
PXVWXVHFURVVRYHUFDEOHVIRUFRQQHFWLRQVWR3&VRUVHUYHUVDQGVWUDLJKWWKURXJK
FDEOHIRUFRQQHFWLRQVWRVZLWFKHVRUKXEV+RZHYHUZKHQFRQQHFWLQJWRGHYLFHV
WKDWVXSSRUWDXWRPDWLF0',0',;SLQRXWFRQILJXUDWLRQ\RXFDQXVHHLWKHU
VWUDLJKWWKURXJKRUFURVVRYHUFDEOH
1
88
1
%
6WUDLJKW7KURXJK:LULQJ
%HFDXVHWKH0ESVSRUWRQWKHDFFHVVSRLQWXVHVDQ0',SLQFRQILJXUDWLRQ
\RXPXVWXVH³VWUDLJKWWKURXJK´FDEOHIRUQHWZRUNFRQQHFWLRQVWRKXEVRUVZLWFKHV
WKDWRQO\KDYH0',;SRUWV+RZHYHULIWKHGHYLFHWRZKLFK\RXDUHFRQQHFWLQJ
VXSSRUWVDXWR0',;RSHUDWLRQ\RXFDQXVHHLWKHU³VWUDLJKWWKURXJK´RU³FURVVRYHU´
FDEOH
7DEOH %%$6(7;0',3RUW3LQRXWV
3LQ 0',6LJQDO1DPH
1RWH
White/Orange Stripe
Orange
White/Green Stripe
Green
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
EIA/TIA 568B RJ-45 Wiring Standard
10/100BASE-TX Straight-through Cable
End A End B
Blue
White/Blue Stripe
Brown
White/Brown Stripe
%
&URVVRYHU:LULQJ
%HFDXVHWKH0ESVSRUWRQWKHDFFHVVSRLQWXVHVDQ0',SLQFRQILJXUDWLRQ
\RXPXVWXVH³FURVVRYHU´FDEOHIRUQHWZRUNFRQQHFWLRQVWR3&VVHUYHUVRURWKHU
HQGQRGHVWKDWRQO\KDYH0',SRUWV+RZHYHULIWKHGHYLFHWRZKLFK\RXDUH
FRQQHFWLQJVXSSRUWVDXWR0',;RSHUDWLRQ\RXFDQXVHHLWKHU³VWUDLJKWWKURXJK´RU
³FURVVRYHU´FDEOH
Console Port Pin Assignments
7KH'%FRQVROHSRUWRQWKHIURQWSDQHORIWKHDFFHVVSRLQWLVXVHGWRFRQQHFWWR
WKHDFFHVVSRLQWIRURXWRIEDQGFRQVROHFRQILJXUDWLRQ7KHFRPPDQGOLQH
FRQILJXUDWLRQSURJUDPFDQEHDFFHVVHGIURPDWHUPLQDORUD3&UXQQLQJDWHUPLQDO
HPXODWLRQSURJUDP7KHSLQDVVLJQPHQWVDQGFDEOHZLULQJXVHGWRFRQQHFWWRWKH
FRQVROHSRUWDUHSURYLGHGLQWKHIROORZLQJWDEOH
White/Orange Stripe
Orange
White/Green Stripe
1
2
3
4
5
6
7
8
1
2
3
4
5
6
7
8
EIA
/
TIA 568B RJ-45 Wiring
S
tandard
10/100BASE-TX Crossover Cable
End A End B
Green
Blue
White/Blue Stripe
Brown
White/Brown Stripe
15
69
%
:LULQJ0DSIRU6HULDO&DEOH
7DEOH %:LULQJ0DSIRU6HULDO&DEOH
'%0DOH$3&RQVROH '%0DOH3&'7(
3LQ )XQFWLRQ 3LQ )XQFWLRQ
1RWH
Appendix C: Specifications
General Specifications
0D[LPXP&KDQQHOV
D
86&DQDGDQRUPDOPRGHWXUERPRGH
-DSDQQRUPDOPRGHWXUERPRGH
(76,FKDQQHOVQRUPDOPRGHWXUERPRGH
7DLZDQQRUPDOPRGHWXUERPRGH
EJ
)&&,&
(76,
)UDQFH
0..
7DLZD Q
0D[LPXP&OLHQWV
SHU9$3LQWHUIDFH
2SHUDWLQJ5DQJH
6HH³2SHUDWLQJ5DQJH´RQSDJH&
'DWD5DWH
D
1RUPDO0RGH0ESVSHUFKDQQHO
7XUER0RGH0ESVSHUFKDQQHO
J0ESVSHUFKDQQHO
E0ESVSHUFKDQQHO
0RGXODWLRQ7\SH
D%36.436.4$04$0
J&&.%36.436.2)'0
E&&.%36.436.
1HWZRUN&RQILJXUDWLRQ
,QIUDVWUXFWXUH
&
2SHUDWLQJ)UHTXHQF\
D
a*+]ORZHUEDQG86&DQDGD-DSDQ
a*+]PLGGOHEDQG86&DQDGD
a*+]XSSHUEDQG86&DQDGD
a*+](XURSH
a*+]PLGGOHEDQG7DLZDQ
a*+]KLJKEDQG7DLZDQ
E
a*+]86&DQDGD(76,
a*+]-DSDQ
a*+]7DLZDQ
$&3RZHU$GDSWHU
,QSXW$&+]
2XWSXW9'&$
3RZHUFRQVXPSWLRQZDWWV
8QLW3RZHU6XSSO\
'&,QSXW9'&$PD[LPXP
3R(LQSXW9'&$PD[LPXP
3RZHUFRQVXPSWLRQ:PD[LPXP
3R('&
,QSXWYROWDJHYROWV$ZDWWV
1RWH 3RZHUFDQDOVREHSURYLGHGWRWKHDFFHVVSRLQWWKURXJKWKH(WKHUQHWSRUWEDVHG
RQ,(((DI3RZHURYHU(WKHUQHW3R(VSHFLILFDWLRQV:KHQERWK3R(LV
SURYLGHGDQGWKHDGDSWHULVSOXJJHGLQ$&SRZHUZLOOEHWXUQHGRII
3K\VLFDO6L]H
[[FP[[LQ
:HLJKW
NJOEV
/(',QGLFDWRUV
3:53RZHU/LQN(WKHUQHW/LQN$FWLYLW\DDQGJ:LUHOHVV/LQN$FWLYLW\
1HWZRUN0DQDJHPHQW
:HEEURZVHU56FRQVROH7HOQHW66+6103
7HPSHUDWXUH
2SHUDWLQJWR&WR)
6WRUDJHWR&WR)
+XPLGLW\
WRQRQFRQGHQVLQJ
&
&RPSOLDQFHV
)&&&ODVV%86
,&(6&DQDGD
577('(&
9&&,-DSDQ
5&567'$
5DGLR6LJQDO&HUWLILFDWLRQ
)&&3DUW&*+]
)&&SDUW(*+]
566&DQDGD
(1(1(1(1
0375&5VWG'a&KDQQHO7&KDQQHO
6DIHW\
F&6$XV&6$1R8/
(17h9*6,(&&%
6WDQGDUGV
,(((%$6(7,(((X%$6(7;
,(((DEJ
&
Sensitivity
,(((D 6HQVLWLYLW\*+]G%P
0RGXODWLRQ5DWHV
,(((J
'DWD5DWH 6HQVLWLYLW\G%P
,(((E
'DWD5DWH 6HQVLWLYLW\G%P
&
Transmit Power
,(((D 0D[LPXP2XWSXW3RZHU*+]G%P
'DWD5DWH
,(((J 0D[LPXP2XWSXW3RZHU*+]G%P
'DWD5DWH a
,(((E 0D[LPXP2XWSXW3RZHU*+]G%P
'DWD5DWH a
&
2SHUDWLQJ5DQJH
,PSRUWDQW1RWLFH
7KHRSHUDWLQJUDQJHGLVWDQFHVOLVWHGLQWKHIROORZLQJWDEOHVDUHIRUW\SLFDO
HQYLURQPHQWVRQO\2SHUDWLQJUDQJHVFDQYDU\FRQVLGHUDEO\GHSHQGLQJRQIDFWRUV
VXFKDVORFDOLQWHUIHUHQFHDQGEDUULHUFRPSRVLWLRQ,WLVUHFRPPHQGHGWRGRDVLWH
VXUYH\WRGHWHUPLQHWKHPD[LPXPUDQJHVIRUVSHFLILFDFFHVVSRLQWORFDWLRQVLQ\RXU
HQYLURQPHQW
1RWHV 2XWGRRU(QYLURQPHQW$OLQHRIVLJKWHQYLURQPHQWZLWKQRLQWHUIHUHQFHRU
REVWUXFWLRQEHWZHHQWKHDFFHVVSRLQWDQGFOLHQWV
,QGRRU(QYLURQPHQW$W\SLFDORIILFHRUKRPHHQYLURQPHQWZLWKIORRUWRFHLOLQJ
REVWUXFWLRQVEHWZHHQWKHDFFHVVSRLQWDQGFOLHQWV
7DEOH&D:LUHOHVV'LVWDQFH7DEOH
6SHHGDQG'LVWDQFH5DQJHV
7DEOH&J:LUHOHVV'LVWDQFH7DEOH
6SHHGDQG'LVWDQFH5DQJHV
7DEOH&E:LUHOHVV'LVWDQFH7DEOH
6SHHGDQG'LVWDQFH5DQJHV
*ORVVDU\
Glossary
10BASE-T
,(((VSHFLILFDWLRQIRU0ESV(WKHUQHWRYHUWZRSDLUVRI&DWHJRU\RUEHWWHU873
FDEOH
100BASE-TX
Access Point
Ad Hoc
Advanced Encryption Standard (AES)
Authentication
Backbone
Basic Service Set (BSS)
Beacon
Broadcast Key
CSMA/CA
Dynamic Host Configuration Protocol (DHCP)
Encryption
Extended Service Set (ESS)
Extensible Authentication Protocol (EAP)
Ethernet
File Transfer Protocol (FTP)
Hypertext Transfer Protocol (HTTP)
IEEE 802.11a
IEEE 802.11b
IEEE 802.11g
IEEE 802.1X
Infrastructure
Inter Access Point Protocol (IAPP)
Local Area Network (LAN)
MAC Address
Network Time Protocol (NTP)
Open System
Orthogonal Frequency Division Multiplexing (ODFM)
Power over Ethernet (PoE)
RADIUS
Roaming
RTS Threshold
Service Set Identifier (SSID)
Session Key
Shared Key
Simple Network Management Protocol (SNMP)
Simple Network Time Protocol (SNTP)
Temporal Key Integrity Protocol (TKIP)
Trivial File Transfer Protocol (TFTP)
Virtual Access Point (VAP)
Virtual LAN (VLAN)
Wi-Fi Protected Access
Wired Equivalent Privacy (WEP)
WPA Pre-shared Key (PSK)
Numerics
802.11g 7-97
A
AES 6-80
antennas, positioning 2-2
authentication 6-12
cipher suite 6-82, 7-121
closed system 7-109
configuring 6-12
MAC address 6-13, 7-71, 7-72
type 6-69, 7-109
web redirect 6-14, 7-20
B
Basic Service Set See BSS
beacon
interval 6-58, 7-104
rate 6-58, 7-105
BOOTP 7-91, 7-92
BPDU 6-25
BSS 4-3
C
cable
assignments B-1
crossover B-3
straight-through B-2
CCK 1-1
channel 7-100
channels, maximum C-1
Clear To Send See CTS
CLI 7-1
command modes 7-4
clients, maximum C-1
closed system 6-52, 7-109
command line interface See CLI
community name, configuring 7-42
community string 6-40, 7-42
configuration settings, saving or
restoring 6-32, 7-57
configuration, initial setup 5-1
console port 1-4
connecting 2-2
pin assignments B-3
required settings 5-1
country code
configuring 5-3, 7-12
crossover cable B-3
CSMA/CA 1-1
CTS 6-59, 7-107
D
data rate
maximum distances C-6
data rate, options C-1
default settings 1-6
device status, displaying 6-86, 7-24
DHCP 6-5, 7-91, 7-92
distances, maximum C-6
DNS 6-6, 7-91
Domain Name Server See DNS
downloading software 6-30, 7-57
DSSS 1-1
DTIM 6-58, 7-105
Dynamic Host Configuration Protocol
See DHCP
E
EAP 6-79
encryption 6-69, 6-74, 6-79
Ethernet
cable 2-2
port 1-4
event logs 6-91, 6-93, 7-33
Extensible Authentication Protocol See
EAP
F
factory defaults
restoring 6-32, 7-10
Index
filter 6-17, 7-71
address 6-12, 7-71
between wireless clients 7-75
local bridge 7-75
local or remote 6-12, 7-73
management access 6-18, 7-75
protocol types 6-18, 7-76
VLANs 6-52, 7-134
firmware
displaying version 6-31, 7-25
upgrading 6-30, 6-32, 7-57
fragmentation 7-106
G
gateway address 5-2, 6-6, 7-1, 7-91
H
hardware version, displaying 7-25
HTTP, secure server 7-20
HTTPS 7-19
I
IAPP 7-133
IEEE 802.11a 1-1, 6-50, 7-97
configuring interface 6-51, 7-97
maximum data rate 7-99
radio channel 7-100
IEEE 802.11b 6-50
IEEE 802.11f 7-133
IEEE 802.11g 6-50
configuring interface 6-66, 7-97
maximum data rate 7-99
radio channel 6-68, 7-100
IEEE 802.1x 6-79, 7-66, 7-71
configuring 6-84, 7-66
infrastructure
wireless bridge 4-5
wireless repeater 4-6
initial setup 5-1
installation
hardware 2-1, 3-1
location considerations 3-1
mounting 2-1
IP address
BOOTP/DHCP 7-91, 7-92
configuring 5-2, 6-5, 7-91, 7-92
L
LED indicators 1-3
location for the access point,
considerations 3-1
lock, Kensington 2-1
log
messages 6-35, 6-91, 6-93, 7-30
server 6-34, 7-30
login
CLI 7-1
web 5-3
logon authentication
RADIUS client 6-14, 7-60
M
MAC address, authentication 6-13,
7-71, 7-72
maximum associated clients 6-57
maximum data rate 7-99
802.11a interface 7-99
802.11g interface 7-99
maximum distances C-6
mounting the access point 2-1
N
network topologies
infrastructure 4-3
infrastructure for roaming 4-4
O
OFDM 1-1
open system 6-69, 7-109
operating frequency C-2
P
package checklist 1-2
password
configuring 6-29, 6-30, 6-32, 7-15
management 6-29, 6-30, 6-32, 7-15
pin assignments
console port B-3
DB-9 port B-3
PoE 1-5
specifications C-2
port priority
STA 7-87
power connection 2-1
Power over Ethernet See PoE
power supply, specifications C-2
PSK 6-79
R
radio channel
802.11a interface 7-100
802.11g interface 6-68, 7-100
RADIUS 6-7, 6-79, 7-60
RADIUS, logon authentication 6-14,
7-60
Remote Authentication Dial-in User
Service See RADIUS
Request to Send See RTS
reset 6-32, 7-10
reset button 1-5, 6-32
resetting the access point 6-32, 7-10
restarting the system 6-32, 7-10
RJ-45 port
configuring duplex mode 7-93
configuring speed 7-93
RTS
threshold 6-59, 7-106
S
Secure Socket Layer See SSL
security, options 6-69
session key 6-84, 6-85, 7-68
shared key 6-75, 7-123
Simple Network Time Protocol See
SNTP
SNMP 6-39, 7-41
community name 7-42
community string 7-42
enabling traps 6-40, 7-43
trap destination 6-40, 7-44
trap manager 6-40, 7-44
SNTP 6-36, 7-35
enabling client 6-36, 7-35
server 6-36, 7-35
software
displaying version 6-30, 6-86, 7-25
downloading 6-32, 7-57
specifications C-1
SSH
server Status 6-11
SSID 6-74, 7-109
SSL 7-19
STA
interface settings 7-87–??
path cost 7-87
port priority 7-87
startup files, setting 7-56
station status 6-89, 7-114
status
displaying device status 6-86, 7-24
displaying station status 6-89, 7-114
straight-through cable B-2
system clock, setting 6-36, 7-36
system log
enabling 6-34, 7-30
server 6-34, 7-30
system software, downloading from
server 6-30, 7-57
T
Telnet
for managenet access 7-1
Temporal Key Integrity Protocol See
TKIP
time zone 6-37, 7-37
TKIP 6-79
transmit power, configuring 6-57, 7-100
trap destination 6-40, 7-44
trap manager 6-40, 7-44
troubleshooting A-1
U
upgrading software 6-30, 7-57
user name, manager 6-29, 7-15
user password 6-29, 7-15
V
VLAN
configuration 6-52, 7-134
native ID 6-52
W
WEP 6-74
configuring 6-74
shared key 6-75, 7-123
Wi-Fi Multimedia See WMM
Wi-Fi Protected Access See WPA
Wired Equivalent Protection See WEP
WPA 6-79
pre-shared key 6-82, 7-127
WPA, pre-shared key See PSK
BAP120