Accton Technology BAP120 802.11 abg AP User Manual WA6102X 38

Accton Technology Corp 802.11 abg AP WA6102X 38

Users Manual

Download: Accton Technology BAP120 802.11 abg AP User Manual WA6102X 38
Mirror Download [FCC.gov]Accton Technology BAP120 802.11 abg AP User Manual WA6102X 38
Document ID683002
Application IDpJmv+uRp/BbLgHYn4ttQbw==
Document DescriptionUsers Manual
Short Term ConfidentialNo
Permanent ConfidentialNo
SupercedeNo
Document TypeUser Manual
Display FormatAdobe Acrobat PDF - pdf
Filesize210.42kB (2630304 bits)
Date Submitted2006-07-19 00:00:00
Date Available2006-07-19 00:00:00
Creation Date2006-07-19 09:18:08
Producing SoftwareAcrobat Distiller 7.0 (Windows)
Document Lastmod2006-07-19 09:19:59
Document TitleWA6102X-38.book
Document CreatorPScript5.dll Version 5.2
Document Author: eunice_kuo

Powered by Accton
BAP120

  
 
User Guide
*+]*+]:LUHOHVV$FFHVV3RLQW
,(((JDQGD'XDOEDQG$FFHVV3RLQW
ZLWK%$6(7; 5- 3RUW
BAP120
     ! "
 #
COMPLIANCES
Federal Communication Commission Interference
Statement
This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential
installation. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this
equipment does cause harmful interference to radio or television reception, which
can be determined by turning the equipment off and on, the user is encouraged to
try to correct the interference by one of the following measures:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected
• Consult the dealer or an experienced radio/TV technician for help
FCC Caution: Any changes or modifications not expressly approved by the party
responsible for compliance could void the user's authority to operate this
equipment. This device complies with Part 15 of the FCC Rules. Operation is
subject to the following two conditions: (1) This device may not cause harmful
interference, and (2) this device must accept any interference received, including
interference that may cause undesired operation.
IMPORTANT NOTE:
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and operated with a
minimum distance of 20 centimeters (8 inches) between the radiator and your
body. This transmitter must not be co-located or operating in conjunction with any
other antenna or transmitter.
Wireless 5 GHz Band Statements:
As the Access Point can operate in the 5150-5250 MHz frequency band it is
limited by the FCC, Industry Canada and some other countries to indoor use only
so as to reduce the potential for harmful interference to co-channel Mobile
Satellite systems.
COMPLIANCES
High power radars are allocated as primary users (meaning they have priority) of
the 5250-5350 MHz and 5650-5850 MHz bands. These radars could cause
interference and /or damage to the access point when used in Canada.
The term “IC” before the radio certification number only signifies that Industry
Canada technical specifications were met.
Industry Canada - Class B
This digital apparatus does not exceed the Class B limits for radio noise emissions
from digital apparatus as set out in the interference-causing equipment standard
entitled “Digital Apparatus,” ICES-003 of Industry Canada.
Cet appareil numĂŠrique respecte les limites de bruits radioĂŠlectriques applicables
aux appareils numĂŠriques de Classe B prescrites dans la norme sur le matĂŠrial
brouilleur: “Appareils Numériques,” NMB-003 édictée par l’Industrie.
Japan VCCI Class B
Australia/New Zealand AS/NZS 4771
ACN 066 352010
ii
COMPLIANCES
EC Conformance Declaration
Marking by the above symbol indicates compliance with the Essential
Requirements of the R&TTE Directive of the European Union (1999/5/
EC). This equipment meets the following conformance standards:
•
•
•
•
EN 60950-1 (IEC 60950-1) - Product Safety
EN 301 893 - Technical requirements for 5 GHz radio equipment
EN 300 328 - Technical requirements for 2.4 GHz radio equipment
EN 301 489-1 / EN 301 489-17 - EMC requirements for radio equipment
Countries of Operation & Conditions of Use in the European
Community
This device is intended to be operated in all countries of the European
Community. Requirements for indoor vs. outdoor operation, license
requirements and allowed channels of operation apply in some countries
as described below:
Note: The user must use the configuration utility provided with this
product to ensure the channels of operation are in conformance
with the spectrum usage rules for European Community countries
as described below.
• This device requires that the user or installer properly enter the current
country of operation in the command line interface as described in the
user guide, before operating this device.
• This device will automatically limit the allowable channels determined
by the current country of operation. Incorrectly entering the country of
operation may result in illegal operation and may cause harmful
interference to other systems. The user is obligated to ensure the
device is operating according to the channel limitations, indoor/outdoor
restrictions and license requirements for each European Community
country as described in this document.
• This device employs a radar detection feature required for European
Community operation in the 5 GHz band. This feature is automatically
enabled when the country of operation is correctly configured for any
European Community country. The presence of nearby radar operation
may result in temporary interruption of operation of this device. The
radar detection feature will automatically restart operation on a channel
free of radar.
iii
COMPLIANCES
• The 5 GHz Turbo Mode feature is not allowed for operation in any
European Community country. The current setting for this feature is
found in the 5 GHz 802.11a Radio Settings Window as described in the
user guide.
• The 5 GHz radio's Auto Channel Select setting described in the user
guide must always remain enabled to ensure that automatic 5 GHz
channel selection complies with European requirements. The current
setting for this feature is found in the 5 GHz 802.11a Radio Settings
Window as described in the user guide.
• This device is restricted to indoor use when operated in the European
Community using the 5.15 - 5.35 GHz band: Channels 36, 40, 44, 48,
52, 56, 60, 64. See table below for allowed 5 GHz channels by country.
• This device may be operated indoors or outdoors in all countries of the
European Community using the 2.4 GHz band: Channels 1 - 13, except
where noted below.
- In Italy the end-user must apply for a license from the national
spectrum authority to operate this device outdoors.
- In Belgium outdoor operation is only permitted using the 2.46 2.4835 GHz band: Channel 13.
- In France outdoor operation is only permitted using the 2.4 - 2.454
GHz band: Channels 1 - 7.
iv
COMPLIANCES
Operation Using 5 GHz Channels in the European
Community
The user/installer must use the provided configuration utility to check the
current channel of operation and make necessary configuration changes
to ensure operation occurs in conformance with European National
spectrum usage laws as described below and elsewhere in this
document.
Allowed 5GHz Channels in Each European Community Country
Allowed Frequency Bands Allowed Channel Numbers Countries
5.15 - 5.25 GHz*
36, 40, 44, 48
Austria, Belgium
5.15 - 5.35 GHz*
36, 40, 44, 48, 52, 56, 60, 64 France,
Switzerland,
Liechtenstein
5.15 - 5.35* & 5.470 - 5.725
GHz
36, 40, 44, 48, 52, 56, 60, 64, Denmark, Finland,
100, 104, 108, 112, 116, 120, Germany, Iceland,
124, 128, 132, 136, 140
Ireland, Italy,
Luxembourg,
Netherlands,
Norway, Portugal,
Spain, Sweden,
U.K.
5 GHz Operation Not
Allowed
None
Greece
* Outdoor operation is not allowed using 5.15-5.35 GHz bands (Channels 36 64).
COMPLIANCES
Declaration of Conformity in Languages of the European
Community
English
Hereby, Edgecore, declares that this Radio LAN device is in
compliance with the essential requirements and other relevant
provisions of Directive 1999/5/EC.
Finnish
Valmistaja Edgecore vakuuttaa täten että Radio LAN device
tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja
sitä koskevien direktiivin muiden ehtojen mukainen.
Dutch
Hierbij verklaart Edgecore dat het toestel Radio LAN device in
overeenstemming is met de essentiĂŤle eisen en de andere
relevante bepalingen van richtlijn 1999/5/EG
Bij deze Edgecore dat deze Radio LAN device voldoet aan de
essentiĂŤle eisen en aan de overige relevante bepalingen van
Richtlijn 1999/5/EC.
French
Par la prĂŠsente Edgecore dĂŠclare que l'appareil Radio LAN
device est conforme aux exigences essentielles et aux autres
dispositions pertinentes de la directive 1999/5/CE
Swedish
Härmed intygar Edgecore att denna Radio LAN device stür I
Üverensstämmelse med de väsentliga egenskapskrav och Üvriga
relevanta bestämmelser som framgür av direktiv 1999/5/EG.
Danish
Undertegnede Edgecore erklÌrer herved, at følgende udstyr
Radio LAN device overholder de vÌsentlige krav og øvrige
relevante krav i direktiv 1999/5/EF
German
Hiermit erklärt Edgecore, dass sich dieser/diese/dieses Radio
LAN device in Übereinstimmung mit den grundlegenden
Anforderungen und den anderen relevanten Vorschriften der
Richtlinie 1999/5/EG befindet". (BMWi)
Hiermit erklärt Edgecore die Übereinstimmung des Gerätes
Radio LAN device mit den grundlegenden Anforderungen und
den anderen relevanten Festlegungen der Richtlinie 1999/5/EG.
(Wien)
vi
Greek
ȂǼȉǾȃȆǹȇȅȊȈǹEdgecoreǻǾȁȍȃǼǿȅȉǿ$ LAN % 
ȈȊȂȂȅȇĭȍȃǼȉǹǿȆȇȅȈȉǿȈȅȊȈǿȍǻǼǿȈǹȆǹǿȉǾȈǼǿȈȀǹǿȉǿȈȁȅǿȆǼȈ
ȈȋǼȉǿȀǼȈǻǿǹȉǹȄǼǿȈȉǾȈȅǻǾīǿǹȈ###ǼȀ
Italian
Con la presente Edgecore dichiara che questo Radio LAN device
è conforme ai requisiti essenziali ed alle altre disposizioni
pertinenti stabilite dalla direttiva 1999/5/CE.
COMPLIANCES
Spanish
Por medio de la presente Manufacturer declara que el Radio LAN
device cumple con los requisitos esenciales y cualesquiera otras
disposiciones aplicables o exigibles de la Directiva 1999/5/CE
Portuguese
Manufacturer declara que este Radio LAN device estĂĄ conforme
com os requisitos essenciais e outras disposiçþes da Directiva
1999/5/CE.
Safety Compliance
Power Cord Safety
Please read the following safety information carefully before installing the access
point:
WARNING: Installation and removal of the unit must be carried out by qualified
personnel only.
• The unit must be connected to an earthed (grounded) outlet to comply with
international safety standards.
• Do not connect the unit to an A.C. outlet (power supply) without an earth
(ground) connection.
• The appliance coupler (the connector to the unit and not the wall plug) must have
a configuration for mating with an EN 60320/IEC 320 appliance inlet.
• The socket outlet must be near to the unit and easily accessible. You can only
remove power from the unit by disconnecting the power cord from the outlet.
• This unit operates under SELV (Safety Extra Low Voltage) conditions according
to IEC 60950. The conditions are only maintained if the equipment to which it is
connected also operates under SELV conditions.
• The PoE (Power over Ethernet), which is to be interconnected with other
equipment that must be contained within the same building including the
interconnected equipment’s associated LAN connections.
France and Peru only
This unit cannot be powered from IT† supplies. If your supplies are of IT type, this
unit must be powered by 230 V (2P+T) via an isolation transformer ratio 1:1, with
the secondary connection point labelled Neutral, connected directly to earth
(ground).
†
ImpĂŠdance Ă  la terre
vii
COMPLIANCES
Important! Before making connections, make sure you have the correct cord set.
Check it (read the label on the cable) against the following:
Power Cord Set
U.S.A. and
Canada
The cord set must be UL-approved and CSA certified.
The minimum specifications for the flexible cord are:
- No. 18 AWG - not longer than 2 meters, or 16 AWG.
- Type SV or SJ
- 3-conductor
The cord set must have a rated current capacity of at least
10 A
The attachment plug must be an earth-grounding type with
NEMA 5-15P (15 A, 125 V) or NEMA 6-15P (15 A, 250 V)
configuration.
Denmark
The supply plug must comply with Section 107-2-D1,
Standard DK2-1a or DK2-5a.
Switzerland
The supply plug must comply with SEV/ASE 1011.
U.K.
The supply plug must comply with BS1363 (3-pin 13 A) and
be fitted with a 5 A fuse which complies with BS1362.
The mains cord must be  or  marked and
be of type HO3VVF3GO.75 (minimum).
Europe
The supply plug must comply with CEE7/7 (“SCHUKO”).
The mains cord must be  or  marked and
be of type HO3VVF3GO.75 (minimum).
IEC-320 receptacle.
viii
COMPLIANCES
Veuillez lire Ă  fond l'information de la sĂŠcuritĂŠ suivante avant
d'installer le access point:
AVERTISSEMENT: L’installation et la dépose de ce groupe doivent être confiés à un
personnel qualifiĂŠ.
• Ne branchez pas votre appareil sur une prise secteur (alimentation électrique)
lorsqu'il n'y a pas de connexion de mise Ă  la terre (mise Ă  la masse).
• Vous devez raccorder ce groupe à une sortie mise à la terre (mise à la masse) afin
de respecter les normes internationales de sĂŠcuritĂŠ.
• Le coupleur d’appareil (le connecteur du groupe et non pas la prise murale) doit
respecter une configuration qui permet un branchement sur une entrée d’appareil
EN 60320/IEC 320.
• La prise secteur doit se trouver à proximité de l’appareil et son accès doit être
facile. Vous ne pouvez mettre l’appareil hors circuit qu’en débranchant son cordon
ĂŠlectrique au niveau de cette prise.
• L’appareil fonctionne à une tension extrêmement basse de sécurité qui est
conforme Ă  la norme IEC 60950. Ces conditions ne sont maintenues que si
l’équipement auquel il est raccordé fonctionne dans les mêmes conditions.
France et PĂŠrou uniquement:
Ce groupe ne peut pas ĂŞtre alimentĂŠ par un dispositif Ă  impĂŠdance Ă  la terre. Si vos
alimentations sont du type impĂŠdance Ă  la terre, ce groupe doit ĂŞtre alimentĂŠ par
une tension de 230 V (2 P+T) par le biais d’un transformateur d’isolement à rapport
1:1, avec un point secondaire de connexion portant l’appellation Neutre et avec
raccordement direct Ă  la terre (masse).
&RUGRQpOHFWULTXH &  '$()) $*$+ ,  $ 
Etats-Unis et
Canada:
Le cordon doit avoir reçu l’homologation des UL et un
certificat de la CSA.
Les spĂŠcifications minimales pour un cable flexible sont
AWG No. 18, ou AWG No. 16 pour un cable de longueur
infÊrieure à 2 mètres.
- type SV ou SJ
- 3 conducteurs
Le cordon doit être en mesure d’acheminer un courant
nominal d’au moins 10 A.
La prise femelle de branchement doit ĂŞtre du type Ă  mise Ă 
la terre (mise Ă  la masse) et respecter la configuration NEMA
5-15P (15 A, 125 V) ou NEMA 6-15P (15 A, 250 V).
Danemark:
La prise mâle d’alimentation doit respecter la section 107-2
D1 de la norme DK2 1a ou DK2 5a.
ix
COMPLIANCES
&RUGRQpOHFWULTXH &  '$()) $*$+ ,  $ 
Suisse:
La prise mâle d’alimentation doit respecter la norme SEV/
ASE 1011.
Europe
La prise secteur doit ĂŞtre conforme aux normes CEE 7/7
(“SCHUKO”)
LE cordon secteur doit porter la mention  ou
 et doit ĂŞtre de type HO3VVF3GO.75 (minimum).
Bitte unbedingt vor dem Einbauen des Access Point die folgenden
Sicherheitsanweisungen durchlesen (Germany):
WARNUNG: Die Installation und der Ausbau des Geräts darf nur durch
Fachpersonal erfolgen.
• Das Gerät sollte nicht an eine ungeerdete Wechselstromsteckdose
angeschlossen werden.
• Das Gerät muß an eine geerdete Steckdose angeschlossen werden, welche die
internationalen Sicherheitsnormen erfĂźllt.
• Der Gerätestecker (der Anschluß an das Gerät, nicht der
Wandsteckdosenstecker) muß einen gemäß EN 60320/IEC 320 konfigurierten
Geräteeingang haben.
• Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich sein. Die
Stromversorgung des Geräts kann nur durch Herausziehen des
Gerätenetzkabels aus der Netzsteckdose unterbrochen werden.
• Der Betrieb dieses Geräts erfolgt unter den SELV-Bedingungen
(Sicherheitskleinstspannung) gemäß IEC 60950. Diese Bedingungen sind nur
gegeben, wenn auch die an das Gerät angeschlossenen Geräte unter
SELV-Bedingungen betrieben werden.
•
COMPLIANCES
Stromkabel. Dies muss von dem Land, in dem es benutzt wird geprĂźft werden:
U.S.A und
Kanada
Der Cord muß das UL gepruft und war das CSA
beglaubigt.
Das Minimum spezifikation fur der Cord sind:
- Nu. 18 AWG - nicht mehr als 2 meter, oder 16 AWG.
- Der typ SV oder SJ
- 3-Leiter
Der Cord muß haben eine strombelastbarkeit aus
wenigstens 10 A
Dieser Stromstecker muß hat einer erdschluss mit der typ
NEMA 5-15P (15A, 125V) oder NEMA 6-15P (15A, 250V)
konfiguration.
Danemark
Dieser Stromstecker muß die ebene 107-2-D1, der
standard DK2-1a oder DK2-5a Bestimmungen einhalten.
Schweiz
Dieser Stromstecker muß die SEV/ASE
1011Bestimmungen einhalten.
Europe
Das Netzkabel muß vom Typ HO3VVF3GO.75
(Mindestanforderung) sein und die Aufschrift  oder
 tragen.
Der Netzstecker muß die Norm CEE 7/7 erfüllen
(”SCHUKO”).
xi
COMPLIANCES
xii
Table of Contents
&KDSWHU,QWURGXFWLRQ
$.$(/3. 
$ 4$5 * 
/6*5 * 
$$ 78 
9+658$




&KDSWHU+DUGZDUH,QVWDOODWLRQ

&KDSWHU([WHUQDO$QWHQQDV

&$$  
&KDSWHU1HWZRUN&RQILJXUDWLRQ
:4.;*( 
  <:= >
&8$ <:
&8$ <:8"$6 ( /
&8$ 7 (
&8$ "*$


&KDSWHU,QLWLDO&RQILJXUDWLRQ

&  $9*3(33/<&
"?  / 
&  $/8 ($ 9*
<(( (&



&KDSWHU6\VWHP&RQILJXUDWLRQ
 %$ /8 ($ 
9+6&  8 $ 
;/&9 (
"5&9
999 (
3 $ 
 /



@
 

 @
&RQWHQWV
C<:
599 (
D$$(6
 6  $ 
9+6<(
9:D
/8 ( (9:D$ ;$*D$($$6
/8 ( (9:D%
/8 ( (9:D%;$* 
/8 ( (9:D%;$(
"$ &8$
"$ 9 (=E $>
"$ 9 (=E (>
9 +
9$&86$ 
 9$
9$ 9$
%<(
9;9$
&KDSWHU&RPPDQG/LQH,QWHUIDFH
 (3/66$ < &8$
 (3/<&
// 
;/ 
 (/66$ 
!+4 $ (6
D  66FF% $ 
/66$ /6* 
 (*/66$ 
$ $!+4 <.*
:($ (3888/66$ 
 (/66$  +
 $ (/66$ D 
-/66$ 
/8 ($ /66$ 
/66$ <  (
/66$ *
$/66$ 
8 (
 
- 
* (

-%
E
#



#
E
E
E#
#
#

@
@
@
@
@
@
@
@
@
@
@@
@E
@E
@E
@#
@ 
&RQWHQWV
343 +
34 
9+6D$$(6/66$ 
+
*6*
+6$6
$6
*$4 
*3 %$F
*3 %*
* %$F
*3**
*3*%
*3*   6
*3**
*3*%
4F  
6(6&
6(6&
34$*6$$(6
34+6
34% 
348 (
343$ 4$
9+6<(( (/66$ 
(( (
(( (3
(( (
(( (%
(( (8$  + +*
(( ($
34(( (
34% (
9+6/./66$ 
* % *
* %$F
* % $  6
* % $+ (3 $% (
* % 6
34*
5/"$+/66$ 
3* $+$F
3* $+
34 3* $+
9:D/66$ 







@
@
E
E
#
#









@
@
E
#
#
-%
&RQWHQWV
6* %66 +
6* %$
6* %$ 
6* %$F%
6* %3
6* %$*
6* %(  
6* %
6* %$(
6* %8 
6* %8  $ (6
346*(*
346*
346*(* $ (6
346*$(
346*8 
346*8  $ (6
346*
$3 /66$ 
F8 
*+


34F8 
"5&9/ 
$  %$ 
$  %*
$  %.+
$  %$6 
$  % 6
$  %* $ (
$  % 6  6
$  %$  6$ 86$
$  %%$ 86$
34$ 
E G3 $ 
E -
E -F$ $ .+ 83 $
E -  .+ 83 $
E -   6
E - ** $$F
E - ** $
34$3 $ 
D/ 3 $ 
$ 8  8$
-%








@
E
#
#









@
E
E
#
#
@
@
@
&RQWHQWV
$ 8 +
$ 8  
6$ $3 $ %
6$ $3 $    6
  (/66$ 
8 $ F (
8 $* 6$$(
8 * .$F
8 * .
8 3 +*$F
8 3 +**
348 
597 (/66$ 
F (=59>
F (3$ $ +
F (  .*$
F (  .3  
F ( +$6  +$(  6
34F ($( (  6
34F (8  +
34F ( .
9*$ (;/66$ 
F (*$F
F (*84$ ( $+
F (*3  6
F (*6$- $(
F (**  +
F (  .*$3 
F (  .* *  +
34F (*
3&8$/66$ 
8$3
%
*$ 
* 3*
* *-
3 4
34 8$3
 &8$/66$ 
8$4 
%$*
* 
F
6 $ $$ $
3$
@@
@@
@ @
@ @
@@
@ @
@ @
@ @
@ @
@ @
@ @@
@ @E
@ @E
@ @#
@ E
@ E
@ E
@ E
@E
@E
@ E
@E
@E
@ E
@ E
@ E
@ E
@ E@
@ E@
@ EE
@ #
@ #
@ #
@ #
@#
@ #
@#
@#
@ #
@ #@
@ #@
@ #E
@ #E
@ ##
@ 
-%
&RQWHQWV
$6  *4
$  6 
*$6F
$$
$$ 
$$$ 
F$ %$
 6 *  
8$(6$  (3
 33 
* $
* (
 * 
 
 +6
6$- $ $ 
$  6 %$
$3  6 %$
3 4
34 8$4 
34$ 
"(5 /66$ 
( $*$F
( $*$3 $
( $* $ 
( $* %$
( $*$
34( $*
 9 +/66$ 
$3
+* 
.+
$6  .+
 *3  
6 H6 
4*$ * 3$ .+
*6.$  8 6
* $3 $ 
< .&( +/66$ 
 . ( +* ( 
 . ( +* ( 3
 . ( +* ( %$
 . ( +* ( 8$  +
 . ( +3 
34 . ( +
-%










@
E
E
#
#









@
@
E
#
#
 
 
 
 
 @
 @
 E
 #






&RQWHQWV
&/66$ 
$**
C<:/66$ 
%$
6$$(6 %$ 
%$ 
DD/66$ 
466
466 $.4 ( * +
466*$$6







@
@
E
$SSHQGL[$7URXEOHVKRRWLQJ
$
$SSHQGL[%&DEOHVDQG3LQRXWV
%
;4  $ /$F (6
79 ;G  (6
9$ (3 ;3(3  (
/%  (
/  (6
  (D$*89 $/$F
$SSHQGL[&6SHFLILFDWLRQV
&
$9* 8 $ 
9  % +
;$6 4
I*$ ("$(
/
/
/
*ORVVDU\
,QGH[
--
&RQWHQWV
--
Chapter 1: Introduction
;3    $&E $($* 3$
*% $*$J4 3 (3 *  $$66 $ F434  
<:$ 8 - 6F  % ? ** 4 3$E $JE FJE (
4 $ $*
;3  888$J $F4  % +4 3 $F$% (
%4  <:=43 3  ( 66$ $%3$ 8$F (>  (
E $$ E (3(+J3 $* $$ +*$$ DF*
3 $6+ ($ $DF*3<:
;3$* ***8C $ **3+ $$ 
8$J3$ 83E $$ $ 83E ($  ;3 $4
$88 F*$$ 8 88(* ($$* 3$% 
$$ $3CJ 88 + (JC<:$ (6J$ 3
*$$6$F$** 
$3$  8$3$* $*$ 886 K
L $FFHVV3RLQWM% ( % +4   3% $$
L 5HSHDWHUM% ($-   .$6$* 8634  
<: &3 6 J3$*  3$%$$F 34  
3<:
L %ULGJHM% ( .$* *$ ( N7 (ON"7 (O
6 $ 3F+ (34  <:(6
L 5RRW%ULGJHM% ( .3$* *$ ( N7 (O6 
$ 3F+ (34  <:(6 I+  34 
F (4.$FN"7 (O6 
&$  J3$* 8884.6$$(6$*$F   3(3$
$+8 (4F 8$J$66$   8$8   $8 ($ 
$ F3 (J$ **89 6*:4.D$$(6
5DGLR&KDUDFWHULVWLFVM;3&E $($ $ $$ 6 $ 
3 ?.4$I3($?+5 %  D *- (=I5D>J$ $
3$    6$ =/9D/> &*$$3  :$ $
&86$ &8$=:&&>F$ 8 E $ J$ $ 
8 E ( 
&E (  F$.4$ 6*$ F  +4 33&E F$ $ 
&E F$*$$ JF5 9?9*$ 
9*6=5999>$ /6*6$+/ !+ (=//!>6 $ 3(+
$3 %$66 $ $8*DF* 
;3$* **$ DF*3$8 *- 34.
8$3$ %3$=*EDF*43 (F6 3E $
8$>


,QWURGXFWLRQ
Package Checklist
;3
  *$.$(  K
I   
I/$(+4.$F
I"9  $F
I/*4$ $*$ *4
FF8
 /5
&86+ $ 83$$+ J6  ( $6$( *$ &8* FJ
$ 3$J  (3 ( $*$. (6$ $ 36$($ *$.
3*  $3 $  
Hardware Description
7RS3DQHO
$
<5
& $
PWR

Link
11a
11g

+DUGZDUH'HVFULSWLRQ
5HDU3DQHO
Lock
9 +9
DC 5V
C5/
49.
POE In
Reset
Console
/

"
7
"S J
/
&RPSRQHQW'HVFULSWLRQ
$QWHQQDV
;3$*    $3$F % +$$84 
66 $   % +$$+64  $$$ %
$ $6  ($J3* ($% 6 *$38$ (88 3 % (J3
$* 3.F3$$$ 34 33( ($ 
3$6  (J 4  3$$*% + 8
 % ( ;3$* %$6 86F3$$$3$6 6
;3$$$6 3( ( ($$$ $*3= (33$* >J
4 33%$(- (6 $  ** $3$$ ;3
$$3 F$ Q $$(3$*% 3$*** $%$(8
3% $$ 83 86$ JN   (3$O
;3   $$$F*$ F+3-$$$3$88
-  $($ * 8 $ %$(*$ 83 86$ J
3$*JR-$$ R
/(',QGLFDWRUV
;3$*   8$<5
 $J$  F  384 (
8 ($ $F
PWR
4
Link
3
< . % +
11a
E $
 
< . % +
11g
E F(
 
< . % +


,QWURGXFWLRQ
/('
6WDWXV
'HVFULSWLRQ
3:5
2Q
,QGLFDWHVWKDWWKHV\VWHPLVZRUNLQJQRUPDOO\
/LQN
D
J
)ODVKLQJ
,QGLFDWHVUXQQLQJDVHOIWHVWRUORDGLQJWKHVRIWZDUHSURJUDP
)ODVKLQJ 3URORQJHG
,QGLFDWHVV\VWHPHUURUV
2Q
,QGLFDWHVDYDOLG0ESV(WKHUQHWFDEOHOLQN
)ODVKLQJ
,QGLFDWHVWKDWWKHDFFHVVSRLQWLVWUDQVPLWWLQJRUUHFHLYLQJGDWD
RQD 0ESV(WKHUQHW/$1)ODVKLQJUDWHLVSURSRUWLRQDO
WRQHWZRUNDFWLYLW\
2Q
,QGLFDWHVWKDWWKHDUDGLRLVHQDEOHG
)ODVKLQJ
,QGLFDWHVWKDWWKHDFFHVVSRLQWLVWUDQVPLWWLQJRUUHFHLYLQJGDWD
WKURXJKZLUHOHVVOLQNV)ODVKLQJUDWHLVSURSRUWLRQDOWRQHWZRUN
DFWLYLW\
2II
,QGLFDWHVWKDWWKHDUDGLRLVGLVDEOHG
2Q
,QGLFDWHVWKDWWKHEJUDGLRLVHQDEOHG
)ODVKLQJ
,QGLFDWHVWKDWWKHDFFHVVSRLQWLVWUDQVPLWWLQJRUUHFHLYLQJGDWD
WKURXJKZLUHOHVVOLQNV)ODVKLQJUDWHLVSURSRUWLRQDOWRQHWZRUN
DFWLYLW\
2II
,QGLFDWHVWKDWWKHEJUDGLRLVGLVDEOHG
6HFXULW\6ORW
;3$*   $! ( +3$*$ T$
*%$3  6%$83$* F+4$** (3! (
 +$F=*%  >$ $6%$FFQJ  (3. 3
J$  (3.+
&RQVROH3RUW
;3 *  $ % 3$* 3(3$ $
$F ;3     F  N/  (6O*$(
7  ;3 % $F$/4.$  ($C; 6 $
6$J$C; 6 $
(WKHUQHW3RUW
;3$* 3$79 ;79 ;G"S *3$$F$$3 
+79 ;79 ;G<:(6 ;3(6686
3&E E * 8 $  
;3 ***$6$ D5&D5& G*$ J+$$ (3 3(3
$F8$4. /J4 3J3F
;3$* $**$$$3 $ *86$F ( (8 F+
6% (*$.8634  <:64.$ 34 
8$

)HDWXUHVDQG%HQHILWV
1RWH ;3"S *$**4%3=>F$ 3&
E $8$ $ "83  * 83N4/O8
86$ **+ (*43$* ,4.*86$4.
% J3$$4 3J3$*% 4%3=>
5HVHW%XWWRQ
;3 F  3$* 38$+ 8$
8 ($  &8+3  43F83$ J3$* 
4 *86$3$ 4$ &8+3  43F8 6J
$+8 ($ 3$(+6$+3$%6$ $6% J$ 38$+ 8$
8 ($   3$*  
3RZHU&RQQHFWRU
;3$*  3$%$*44 3 & *4 43 
3/*4$ $*J$ 3*4$ $*  $*4 ;3
*4$ $*$6$ $+$ Q$+%$(F4 %$
 :%$($( ($? 
;3$* 6$+$ %4%3=>86$4 3
34. % 3$** *4%34.$FF$ 3&
E $8$ $
:3$ 83$*   $ % $ $
 $$*43(33/*4$ $*J/*44 F
$F
Features and Benefits
L <$4. % $DF*3* DF*4 
8$=** (* E6F >
L &E $JE FJ$ E (6* $
L &*$F4 36 *% F$ 3& E 8*
L  %$  +3(3  E F   ? %$ =>
+* J&E G$3 $ % $$"5&9%J   
=>J$ D/$ 8  (8$*+  % $$
$ $3 $+$3  +4.
L % $6$6 (4 3 3&E $JE F$ E (<:
% 6
L 9$$$%$ $F3$$ 3F3$8$3 F$ 
3 ($   $ 
L 43+8*$ F6$3($+? 6=8
  83  9$>


,QWURGXFWLRQ
System Defaults
;384 ($F 683$* ,F$ +6 8$ ;
3$*  8$J3/<&66$ N8 ($ O863-
%*6*
7DEOH 6\VWHP'HIDXOWV
)HDWXUH
3DUDPHWHU
'HIDXOW
,GHQWLILFDWLRQ
6\VWHP1DPH
(QWHUSULVH:LUHOHVV$3
$GPLQLVWUDWLRQ
8VHU1DPH
DGPLQ
3DVVZRUG
1XOO QRSDVVRZUG
+7736HUYHU
(QDEOHG
+7736HUYHU3RUW

+77366HUYHU
(QDEOHG
+77366HUYHU3RUW

*HQHUDO
7&3,3
:HE5HGLUHFW
'LVDEOHG
'+&3
(QDEOHG
,3$GGUHVV

6XEQHW0DVN

'HIDXOW*DWHZD\

3ULPDU\'16,3

6HFRQGDU\'16,3

5$',86 3ULPDU\DQG ,3$GGUHVV
6HFRQGDU\
3RUW
66+
333R(



.H\
'()$8/7
7LPHRXW
VHFRQGV
5HWUDQVPLWDWWHPSWV
$FFRXQWLQJ3RUW
 'LVDEOHG
,QWHULP8SGDWH7LPHRXW
VHFRQGV
6HUYHU6WDWXV
(QDEOHG
6HUYHU3RUW

333R(6WDWXV
'LVDEOHG
6\VWHP'HIDXOWV
7DEOH 6\VWHP'HIDXOWV
)HDWXUH
3DUDPHWHU
'HIDXOW
0$&$XWKHQWLFDWLRQ
0$&
'LVDEOHG
$XWKHQWLFDWLRQ6HVVLRQ7LPHRXW
PLQXWHV GLVDEOHG
/RFDO0$&6\VWHP 'HIDXOW
$OORZHG
;$XWKHQWLFDWLRQ
9/$1
4R6
)LOWHU&RQWURO
6103
/RFDO0$&3HUPLVVLRQ
$OORZHG
6WDWXV
'LVDEOHG
%URDGFDVW.H\5HIUHVK
PLQXWHV GLVDEOHG
6HVVLRQ.H\5HIUHVK
PLQXWHV GLVDEOHG
5HDXWKHQWLFDWLRQ5HIUHVK5DWH
VHFRQGV GLVDEOHG
6XSSOLFDQW
'LVDEOHG
0DQDJHPHQW9/$1,'
9/$1,' 9$3,QWHUIDFH
9/$17DJ6XSSRUW
'LVDEOHG
4R60RGH
2II
693 6SHFWUD/LQN9RLFH3ULRULW\
'LVDEOHG
/RFDO%ULGJH
'LVDEOHG
$30DQDJHPHQW
(QDEOHG
(WKHUQHW7\SH
'LVDEOHG
6WDWXV
(QDEOHG
/RFDWLRQ
QXOO
&RQWDFW
QXOO
&RPPXQLW\ 5HDG 2QO\
3XEOLF
&RPPXQLW\
5HDG:ULWH
3ULYDWH
7UDSV
(QDEOHG
7UDS'HVWLQDWLRQ 
'LVDEOHG
7UDS'HVWLQDWLRQ,3 $GGUHVV
QXOO
7UDS'HVWLQDWLRQ&RPPXQLW\
1DPH
3XEOLF
6103Y*URXSV
52
5:$XWK
5:3ULY
6103Y8VHUV
QRQH


,QWURGXFWLRQ
7DEOH 6\VWHP'HIDXOWV
)HDWXUH
3DUDPHWHU
'HIDXOW
6\VWHP/RJJLQJ
6\VORJ
'LVDEOHG
/RJJLQJ+RVW
'LVDEOHG
/RJJLQJ&RQVROH
'LVDEOHG
6\VWHP&ORFN
(WKHUQHW,QWHUIDFH

,3$GGUHVV+RVW1DPH

/RJJLQJ/HYHO
,QIRUPDWLRQDO
/RJJLQJ)DFLOLW\7\SH

61736HUYHU6WDWXV
(QDEOHG
61736HUYHU,3

61736HUYHU,3

'DWHDQG7LPH
-DQ ZKHQWKHUHLVQRWLPH
VHUYHU
'D\OLJKW6DYLQJ7LPH
'LVDEOHG
7LPH=RQH
*07 (DVWHUQ7LPH86DQG&DQDGD
6SHHGDQG'XSOH[
$XWR
6\VWHP'HIDXOWV
7DEOH 6\VWHP'HIDXOWV
)HDWXUH
3DUDPHWHU
'HIDXOW
:LUHOHVV,QWHUIDFH
D
,$33
(QDEOHG
66,'
9$3B7(67B$>@
7XUER0RGH
'LVDEOHG
:LUHOHVV6HFXULW\
D
6WDWXV
'LVDEOHG
$XWR&KDQQHO6HOHFW
(QDEOHG
&ORVHG6\VWHP
'LVDEOHG
7UDQVPLW3RZHU
)XOO
0D[6WDWLRQ'DWD5DWH
0ESV
0XOWLFDVW'DWD5DWH
0ESV
%HDFRQ,QWHUYDO
78V
'DWD%HDFRQ5DWH '7,0,QWHUYDO
EHDFRQ
5767KUHVKROG
E\WHV
$VVRFLDWLRQ7LPHRXW,QWHUYDO
PLQXWHV
$XWKHQWLFDWLRQ7LPHRXW,QWHUYDO
PLQXWHV
5RJXH$3'HWHFWLRQ
'LVDEOHG
$QWHQQD&RQWURO0HWKRG
'LYHUVLW\
$QWHQQD,'
[
$QWHQQD/RFDWLRQ
,QGRRU
$XWKHQWLFDWLRQ7\SH
2SHQ6\VWHP
'DWD(QFU\SWLRQ
'LVDEOHG
:(3.H\/HQJWK
ELWV
:(3.H\7\SH
+H[DGHFLPDO
:(37UDQVPLW.H\1XPEHU
:(3.H\V
QXOO
:3$&RQILJXUDWLRQ0RGH
:(32QO\ 'LVDEOHG
:3$.H\0DQDJHPHQW
:3$3UHVKDUHG.H\
:3$36.7\SH
$OSKDQXPHULF
0XOWLFDVW&LSKHU
:(3


,QWURGXFWLRQ
7DEOH 6\VWHP'HIDXOWV
)HDWXUH
3DUDPHWHU
'HIDXOW
:LUHOHVV,QWHUIDFH
EJ
,$33
(QDEOHG
66,'
9$3B7(67B*>@
5DGLR0RGH
EJ
:LUHOHVV6HFXULW\
EJ

6WDWXV
'LVDEOHG
$XWR&KDQQHO6HOHFW
(QDEOHG
&ORVHG6\VWHP
'LVDEOHG
7UDQVPLW3RZHU
)XOO
0D[6WDWLRQ'DWD5DWH
0ESV
0XOWLFDVW'DWD5DWH
0ESV
3UHDPEOH/HQJWK
/RQJ
%HDFRQ,QWHUYDO
78V
'DWD%HDFRQ5DWH '7,0,QWHUYDO
EHDFRQ
5767KUHVKROG
E\WHV
$VVRFLDWLRQ7LPHRXW,QWHUYDO
PLQXWHV
$XWKHQWLFDWLRQ7LPHRXW,QWHUYDO
PLQXWHV
5RJXH$3'HWHFWLRQ
'LVDEOHG
$QWHQQD&RQWURO0HWKRG
'LYHUVLW\
$QWHQQD,'
[
$QWHQQD/RFDWLRQ
,QGRRU
$XWKHQWLFDWLRQ7\SH
2SHQ6\VWHP
'DWD(QFU\SWLRQ
'LVDEOHG
:(3.H\/HQJWK
ELWV
:(3.H\7\SH
+H[DGHFLPDO
:(37UDQVPLW.H\1XPEHU
:(3.H\V
QXOO
:3$&RQILJXUDWLRQ0RGH
:(32QO\ 'LVDEOHG
:3$.H\0DQDJHPHQW
:3$3UHVKDUHG.H\
:3$36.7\SH
$OSKDQXPHULF
0XOWLFDVW&LSKHU
:(3
6\VWHP'HIDXOWV
7DEOH 6\VWHP'HIDXOWV
)HDWXUH
3DUDPHWHU
'HIDXOW
/LQN,QWHJULW\
6WDWXV
'LVDEOHG
3LQJ,QWHUYDO
VHFRQGV
)DLO5HWU\&RXQW


,QWURGXFWLRQ

Chapter 2: Hardware Installation

6HOHFWD6LWHÂą&KRRVHDSURSHUSODFHIRUWKHDFFHVVSRLQW,QJHQHUDOWKHEHVW
ORFDWLRQLVDWWKHFHQWHURI\RXUZLUHOHVVFRYHUDJHDUHDZLWKLQOLQHRIVLJKWRIDOO
ZLUHOHVVGHYLFHV7U\WRSODFHWKHDFFHVVSRLQWLQDSRVLWLRQWKDWFDQEHVWFRYHU
LWV%DVLF6HUYLFH6HW UHIHUWR³,QIUDVWUXFWXUH:LUHOHVV/$1´RQSDJH )RU
RSWLPXPSHUIRUPDQFHFRQVLGHUWKHVHSRLQWV
‡ 0RXQWWKHDFFHVVSRLQWDVKLJKDVSRVVLEOHDERYHDQ\REVWUXFWLRQVLQWKH
FRYHUDJHDUHD
‡ $YRLGPRXQWLQJQH[WWRRUQHDUEXLOGLQJVXSSRUWFROXPQVRURWKHUREVWUXFWLRQV
WKDWPD\FDXVHUHGXFHGVLJQDORUQXOO]RQHVLQSDUWVRIWKHFRYHUDJHDUHD
‡ 0RXQWDZD\IURPDQ\VLJQDODEVRUELQJRUUHIOHFWLQJVWUXFWXUHV VXFKDVWKRVH
FRQWDLQLQJPHWDO 

0RXQWWKH$FFHVV3RLQWÂą7KHDFFHVVSRLQWFDQEHPRXQWHGRQDQ\
KRUL]RQWDOVXUIDFH
0RXQWLQJRQDKRUL]RQWDOVXUIDFHÂą7RNHHSWKHDFFHVVSRLQWIURPVOLGLQJRQWKH
VXUIDFHDWWDFKWKHIRXUUXEEHUIHHWSURYLGHGLQWKHDFFHVVRU\NLWWRWKHPDUNHG
FLUFOHVRQWKHERWWRPRIWKHDFFHVVSRLQW
/RFNWKH$FFHVV3RLQWLQ3ODFHÂą7RSUHYHQWXQDXWKRUL]HGUHPRYDORIWKH
DFFHVVSRLQW\RXFDQXVHD.HQVLQJWRQ6OLP0LFUR6DYHUVHFXULW\FDEOH QRW
LQFOXGHG WRDWWDFKWKHDFFHVVSRLQWWRDIL[HGREMHFW

&RQQHFWWKH3RZHU&RUGÂą&RQQHFWWKHSRZHUDGDSWHUWRWKHDFFHVVSRLQW
DQGWKHSRZHUFRUGWRDQ$&SRZHURXWOHW
2WKHUZLVHWKHDFFHVVSRLQWFDQGHULYHLWVRSHUDWLQJSRZHUGLUHFWO\IURPWKH
5-SRUWZKHQFRQQHFWHGWRDGHYLFHWKDWSURYLGHV,(((DIFRPSOLDQW
3RZHURYHU(WKHUQHW 3R( 
1RWH ,IWKHDFFHVVSRLQWLVFRQQHFWHGWRERWKD3R(VRXUFHGHYLFHDQGDQ$&SRZHU
VRXUFH$&SRZHUZLOOEHGLVDEOHG
&DXWLRQ 8VH21/<WKHSRZHUDGDSWHUVXSSOLHGZLWKWKLVDFFHVVSRLQW2WKHUZLVHWKH
SURGXFWPD\EHGDPDJHG


+DUGZDUH,QVWDOODWLRQ

2EVHUYHWKH6HOI7HVWÂą:KHQ\RXSRZHURQWKHDFFHVVSRLQWYHULI\WKDWWKH
3:5LQGLFDWRUVWRSVIODVKLQJDQGUHPDLQVRQDQGWKDWWKHRWKHULQGLFDWRUVVWDUW
IXQFWLRQLQJDVGHVFULEHGXQGHU³/(',QGLFDWRUV´RQSDJH,IWKH3:5/('
GRHVQRWVWRSIODVKLQJWKHVHOIWHVWKDVQRWFRPSOHWHGFRUUHFWO\5HIHUWR
³7URXEOHVKRRWLQJ´RQSDJH$

&RQQHFWWKH(WKHUQHW&DEOHÂą7KHDFFHVVSRLQWFDQEHZLUHGWRD
0ESV(WKHUQHWWKURXJKDQHWZRUNGHYLFHVXFKDVDKXERUDVZLWFK&RQQHFW
\RXUQHWZRUNWRWKH5-SRUWRQWKHEDFNSDQHOZLWKFDWHJRU\RU873
(WKHUQHWFDEOH:KHQWKHDFFHVVSRLQWDQGWKHFRQQHFWHGGHYLFHDUHSRZHUHG
RQWKH(WKHUQHW/LQN/('VKRXOGOLJKWLQGLFDWLQJDYDOLGQHWZRUNFRQQHFWLRQ,I
WKLV/('IDLOVWRWXUQRQUHIHUWR³7URXEOHVKRRWLQJ´RQSDJH$
1RWH 7KH5-SRUWRQWKHDFFHVVSRLQWVXSSRUWVDXWR 0',0',;RSHUDWLRQVR\RX
FDQXVHHLWKHUVWUDLJKWWKURXJKRUFURVVRYHUFDEOHWRFRQQHFWWRVZLWFKHVRU3&V

3RVLWLRQWKH$QWHQQDVÂą(DFKDQWHQQDHPLWVDUDGLDWLRQSDWWHUQWKDWLV
WRURLGDO GRXJKQXWVKDSHG ZLWKWKHFRYHUDJHH[WHQGLQJPRVWLQWKHGLUHFWLRQ
SHUSHQGLFXODUWRWKHDQWHQQD7KHUHIRUHWKHDQWHQQDVVKRXOGEHRULHQWHGVR
WKDWWKHUDGLRFRYHUDJHSDWWHUQILOOVWKHLQWHQGHGKRUL]RQWDOVSDFH$OVRWKH
GLYHUVLW\DQWHQQDVVKRXOGERWKEHSRVLWLRQHGDORQJWKHVDPHD[HVSURYLGLQJ
WKHVDPHFRYHUDJHDUHD)RUH[DPSOHLIWKHDFFHVVSRLQWLVPRXQWHGRQD
KRUL]RQWDOVXUIDFHERWKDQWHQQDVVKRXOGEHSRVLWLRQHGSRLQWLQJYHUWLFDOO\XSWR
SURYLGHRSWLPXPFRYHUDJH

&RQQHFWWKH&RQVROH3RUWÂą&RQQHFWWKHFRQVROHFDEOH LQFOXGHG WRWKH
56FRQVROHSRUWIRUDFFHVVLQJWKHFRPPDQGOLQHLQWHUIDFH

Desktop PC



1HWZRUN7RSRORJLHV
,QIUDVWUXFWXUH:LUHOHVV%ULGJH
7KH,(((VWDQGDUGGHILQHVD:,UHOHVV'LVWULEXWLRQ6\VWHP :'6 IRUEULGJH
FRQQHFWLRQVEHWZHHQ%66DUHDV DFFHVVSRLQWV 7KHDFFHVVSRLQWXVHV:'6WR
IRUZDUGWUDIILFRQOLQNVEHWZHHQXQLWV
7KHDFFHVVSRLQWVXSSRUWV:'6EULGJHOLQNVRQHLWKHUWKH*+] D RU
 *+] EJ EDQGVDQGFDQEHXVHGZLWKYDULRXVH[WHUQDODQWHQQDVWRRIIHU
IOH[LEOHGHSOR\PHQWRSWLRQV
8SWRVL[:'6EULGJHOLQNVFDQEHVSHFLILHGIRUHDFKXQLWLQWKHZLUHOHVVEULGJH
QHWZRUN2QHXQLWRQO\PXVWEHFRQILJXUHGDVWKH³URRWEULGJH´LQWKHZLUHOHVV
QHWZRUN7KHURRWEULGJHVKRXOGEHWKHXQLWFRQQHFWHGWRWKHPDLQFRUHRIWKHZLUHG
/$12WKHUEULGJHVPXVWFRQILJXUHRQH³SDUHQW´OLQNWRWKHURRWEULGJHRUWRDEULGJH
FRQQHFWHGWRWKHURRWEULGJH7KHRWKHUILYHDYDLODEOH:'6OLQNVFDQEHVSHFLILHGDV
³FKLOG´OLQNVWRRWKHUEULGJHV7KLVIRUPVDWLHUHGVWDUWRSRORJ\IRUWKHZLUHOHVVEULGJH
QHWZRUN
:KHQXVLQJ:'6RQDUDGLREDQGRQO\ZLUHOHVVEULGJHXQLWVFDQDVVRFLDWHWRHDFK
RWKHU:LUHOHVVFOLHQWVFDQRQO\DVVRFLDWHZLWKWKHDFFHVVSRLQWXVLQJDUDGLREDQG
VHWWRDFFHVVSRLQWRUUHSHDWHUPRGH
Network
Core
802.11g Radio
AP Link
Root Bridge
802.11a Radio
Bridge Link
Wireless Bridge Links
Between Access Points
802.11a Radio
Bridge Link
802.11g Radio
AP Link
Bridge
802.11a Radio
Bridge Link
802.11g Radio
AP Link
Bridge
802.11g Radio
AP Link
Bridge


1HWZRUN&RQILJXUDWLRQ
,QIUDVWUXFWXUH:LUHOHVV5HSHDWHU
7KHDFFHVVSRLQWFDQDOVRRSHUDWHLQDEULGJH³UHSHDWHU´PRGHWRH[WHQGWKHUDQJH
RIOLQNVWRZLUHOHVVFOLHQWV7KHDFFHVVSRLQWXVHV:'6WRIRUZDUGWUDIILFEHWZHHQ
WKHUHSHDWHUEULGJHDQGWKHURRWEULGJH7KHDFFHVVSRLQWVXSSRUWVXSWRVL[:'6
UHSHDWHUOLQNV
,QUHSHDWHUPRGHWKHDFFHVVSRLQWGRHVQRWVXSSRUWDQ(WKHUQHWOLQNWRDZLUHG/$1
1RWHWKDWZKHQWKHDFFHVVSRLQWRSHUDWHVLQWKLVPRGHRQO\KDOIWKHQRUPDO
WKURXJKSXWLVSRVVLEOH7KLVLVEHFDXVHWKHDFFHVVSRLQWKDVWRUHFHLYHDQGWKHQ
UHWUDQVPLWDOOGDWDRQWKHVDPHFKDQQHO
Network
Core
Wireless Repeater Links
Between Access Points
Root Bridge
802.11g Radio
Repeater Link
802.11g Radio
Repeater Link
Repeater
802.11g Radio
AP Link
802.11g Radio
AP Link

Repeater
Chapter 5: Initial Configuration
7KH*+]*+]:LUHOHVV$FFHVV3RLQWRIIHUVDYDULHW\RIPDQDJHPHQWRSWLRQV
LQFOXGLQJDZHEEDVHGLQWHUIDFHDGLUHFWFRQQHFWLRQWRWKHFRQVROHSRUW7HOQHW
6HFXUH6KHOO 66+ RUXVLQJ6103VRIWZDUH
7KHLQLWLDOFRQILJXUDWLRQVWHSVFDQEHPDGHWKURXJKWKHZHEEURZVHULQWHUIDFHRU
&/,7KHDFFHVVSRLQWUHTXHVWVDQ,3DGGUHVVYLD'+&3E\GHIDXOW,IQRUHVSRQVHLV
UHFHLYHGIURPWKH'+&3VHUYHUWKHQWKHDFFHVVSRLQWXVHVWKHGHIDXOWDGGUHVV
,IWKLVDGGUHVVLVQRWFRPSDWLEOHZLWK\RXUQHWZRUN\RXFDQILUVWXVHWKH
FRPPDQGOLQHLQWHUIDFH &/, DVGHVFULEHGEHORZWRFRQILJXUHDYDOLGDGGUHVV
Initial Setup through the CLI
5HTXLUHG&RQQHFWLRQV
7KHDFFHVVSRLQWSURYLGHVDQ56VHULDOSRUWWKDWHQDEOHVDFRQQHFWLRQWRD3&
RUWHUPLQDOIRUPRQLWRULQJDQGFRQILJXUDWLRQ$WWDFKD97FRPSDWLEOHWHUPLQDORU
D3&UXQQLQJDWHUPLQDOHPXODWLRQSURJUDPWRWKHDFFHVVSRLQW(QWHU@NH\WRLQLWLDWHWKH
FRQVROHFRQQHFWLRQ7KHFRQVROHORJLQVFUHHQZLOOEHGLVSOD\HG
)RUDGHVFULSWLRQRIKRZWRXVHWKH&/,VHH³8VLQJWKH&RPPDQG/LQH,QWHUIDFH´RQ
SDJH)RUDOLVWRIDOOWKH&/,FRPPDQGVDQGGHWDLOHGLQIRUPDWLRQRQXVLQJWKH
&/,UHIHUWR³&RPPDQG*URXSV´RQSDJH
,QLWLDO&RQILJXUDWLRQ6WHSV
/RJJLQJ,Q¹(QWHU³DGPLQ´IRUWKHXVHUQDPH7KHUHLVQRGHIDXOWSDVVZRUG7KH
&/,SURPSWDSSHDUVGLVSOD\LQJWKHDFFHVVSRLQWÂśVQDPH
Username: admin
Password:
Enterprise AP#
6HWWLQJWKH,3$GGUHVVÂą%\GHIDXOWWKHDFFHVVSRLQWLVFRQILJXUHGWRREWDLQ,3
DGGUHVVVHWWLQJVIURPD'+&3VHUYHU,ID'+&3VHUYHULVQRWDYDLODEOHWKH,3
DGGUHVVGHIDXOWVWRZKLFKPD\QRWEHFRPSDWLEOHZLWK\RXUQHWZRUN
[ +HOOR7LPH @
‡ 0D[LPXP7KHORZHURIRU>[ )RUZDUG'HOD\ @
‡ %ULGJH+HOOR7LPH±,QWHUYDO LQVHFRQGV DWZKLFKWKHURRWGHYLFHWUDQVPLWVD
FRQILJXUDWLRQPHVVDJH 5DQJHVHFRQGV
‡ 'HIDXOW
‡ 0LQLPXP
‡ 0D[LPXP7KHORZHURIRU> 0D[0HVVDJH$JH @
‡ %ULGJH)RUZDUGLQJ'HOD\±7KHPD[LPXPWLPH LQVHFRQGV WKLVGHYLFHZDLWV
EHIRUHFKDQJLQJVWDWHV LHGLVFDUGLQJWROHDUQLQJWRIRUZDUGLQJ 7KLVGHOD\LV
UHTXLUHGEHFDXVHHYHU\GHYLFHPXVWUHFHLYHLQIRUPDWLRQDERXWWRSRORJ\FKDQJHV
EHIRUHLWVWDUWVWRIRUZDUGIUDPHV,QDGGLWLRQHDFKSRUWQHHGVWLPHWROLVWHQIRU
FRQIOLFWLQJLQIRUPDWLRQWKDWZRXOGPDNHLWUHWXUQWRDGLVFDUGLQJVWDWHRWKHUZLVH
WHPSRUDU\GDWDORRSVPLJKWUHVXOW 5DQJHVHFRQGV
‡ 'HIDXOW
‡ 0LQLPXP7KHKLJKHURIRU> 0D[0HVVDJH$JH @
‡ 0D[LPXP



   
‡ /LQN3DWK&RVW±7KLVSDUDPHWHULVXVHGE\WKH673WRGHWHUPLQHWKHEHVWSDWK
EHWZHHQGHYLFHV7KHUHIRUHORZHUYDOXHVVKRXOGEHDVVLJQHGWRSRUWVDWWDFKHGWR
IDVWHUPHGLDDQGKLJKHUYDOXHVDVVLJQHGWRSRUWVZLWKVORZHUPHGLD 3DWKFRVW
WDNHVSUHFHGHQFHRYHUSRUWSULRULW\ 
‡ 5DQJH
‡ 'HIDXOW(WKHUQHWLQWHUIDFH:LUHOHVVLQWHUIDFH
‡ /LQN3RUW3ULRULW\±'HILQHVWKHSULRULW\XVHGIRUWKLVSRUWLQWKH6SDQQLQJ7UHH
3URWRFRO,IWKHSDWKFRVWIRUDOOSRUWVRQDVZLWFKDUHWKHVDPHWKHSRUWZLWKWKH
KLJKHVWSULRULW\ LHORZHVWYDOXH ZLOOEHFRQILJXUHGDVDQDFWLYHOLQNLQWKH
VSDQQLQJWUHH7KLVPDNHVDSRUWZLWKKLJKHUSULRULW\OHVVOLNHO\WREHEORFNHGLIWKH
6SDQQLQJ7UHH3URWRFROLVGHWHFWLQJQHWZRUNORRSV:KHUHPRUHWKDQRQHSRUWLV
DVVLJQHGWKHKLJKHVWSULRULW\WKHSRUWZLWKORZHVWQXPHULFLGHQWLILHUZLOOEHHQDEOHG
‡ 'HIDXOW
‡ 5DQJHLQVWHSVRI
&/,&RPPDQGVIRU:'66HWWLQJVÂą7RVHWWKHUROHRIWKHDFFHVVSRLQWUDGLR
LQWHUIDFHXVHWKHEULGJHUROHFRPPDQGIURPWKH&/,ZLUHOHVVLQWHUIDFH
FRQILJXUDWLRQPRGH,IWKHUROHRIWKHUDGLRLQWHUIDFHLVVHWWR³%ULGJH´RU³5HSHDWHU´
WKH0$&DGGUHVVRIWKHSDUHQWQRGHPXVWDOVREHFRQILJXUHGXVLQJWKHEULGJHOLQN
SDUHQWFRPPDQG,IWKHUROHLVVHWWRDQ\WKLQJRWKHUWKDQ³$FFHVV3RLQW´WKHQ\RX
VKRXOGDOVRFRQILJXUHWKH0$&DGGUHVVHVRIWKHFKLOGQRGHVXVLQJWKHEULGJHOLQN
FKLOGFRPPDQG7RYLHZWKHFXUUHQWEULGJHOLQNVHWWLQJVXVHWKHVKRZEULGJHOLQN
FRPPDQG
Enterprise AP(if-wireless
Enterprise AP(if-wireless
Enterprise AP(if-wireless
00-08-3e-84-bc-6d
Enterprise AP(if-wireless
00-08-3e-85-13-f2
Enterprise AP(if-wireless
00-08-3e-84-79-31
Enterprise AP(if-wireless
00-08-2d-69-3a-51
Enterprise AP(if-wireless
Enterprise AP#show bridge
a)#bridge role bridge
a)#bridge channel-auto-sync enable
a)#bridge-link child 2
7-81
a)#bridge-link child 3
a)#bridge-link child 4
a)#bridge-link parent
7-80
a)#exit
link wireless a
Interface Wireless A WDS Information
====================================
AP Role:
Bridge
Channel Auto Sync:
Enable
Parent:
00-08-2d-69-3a-51
Child:
Child 2:
00-08-3e-84-bc-6d
Child 3:
00-08-3e-85-13-f2
Child 4:
00-08-3e-84-79-31
Child 5:
00-00-00-00-00-00
Child 6:
00-00-00-00-00-00
STAs:
No WDS Stations.
Enterprise AP#

7-79
7-80
7-83
(
   
&/,&RPPDQGVIRU6736HWWLQJVÂą,IWKHUROHRIDUDGLRLQWHUIDFHLVVHWWR5HSHDWHU
%ULGJHRU5RRW%ULGJH673FDQEHHQDEOHGRQWKHDFFHVVSRLQWWRPDLQWDLQDYDOLG
QHWZRUNWRSRORJ\7RJOREDOO\HQDEOH673XVHWKHEULGJHVWSHQDEOHFRPPDQG
IURPWKH&/,FRQILJXUDWLRQPRGH7KHQFRQILJXUHWKHRWKHUJOREDO673SDUDPHWHUV
IRUWKHEULGJH7KHSDWKFRVWDQGSULRULW\IRUHDFKEULGJHOLQNFDQEHVHWXVLQJWKH
EULGJHOLQNSDWKFRVWDQGEULGJHOLQNSRUWSULRULW\FRPPDQGIURPWKH:LUHOHVV
,QWHUIDFHFRQILJXUDWLRQPRGH7KHSDWKFRVWDQGSULRULW\FDQDOVREHVHWIRUWKH
(WKHUQHWSRUWIURPWKH(WKHUQHW,QWHUIDFHFRQILJXUDWLRQPRGH7RYLHZWKHFXUUHQW
673VHWWLQJVXVHWKHVKRZEULGJHVWSFRPPDQG
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
AP(config)#bridge stp enable
AP(config)#bridge stp forwarding-delay 2500
AP(config)#bridge stp hello-time 500
AP(config)#bridge stp max-age 4000
AP(config)#bridge stp priority 40000
AP(config)#interface wireless a
AP(if-wireless a)#bridge-link path-cost 2 40
AP(if-wireless a)#bridge-link port-priority 2 64
AP(if-wireless a)#exit
AP#show bridge stp
Bridge MAC
Status
priority
desiginated-root
root-path-cost
root-Port-no
Hold Time
Hello Time
Maximum Age
Forward Delay
bridge Hello Time
bridge Maximum Age
bridge Forward Delay :
time-since-top-change:
topology-change-count:
Enterprise AP#
6-104
6-105
6-106
6-107
6-108
6-109
6-110
6-111
00:30:F1:F0:9A:9C
Disabled
32768
priority = 0, MAC = 00:00:00:00:00:00
0 Seconds
0 Seconds
0 Seconds
0 Seconds
2 Seconds
20 Seconds
5 Seconds
3168 Seconds
+


   
$30DQDJHPHQW
7KH:HE7HOQHWDQG6103PDQDJHPHQWLQWHUIDFHVDUHHQDEOHGDQGRSHQWRDOO,3
DGGUHVVHVE\GHIDXOW7RSURYLGHPRUHVHFXULW\IRUPDQDJHPHQWDFFHVVWRWKH
DFFHVVSRLQWVSHFLILFLQWHUIDFHVFDQEHGLVDEOHGDQGPDQDJHPHQWUHVWULFWHGWRD
VLQJOH,3DGGUHVVRUDOLPLWHGUDQJHRI,3DGGUHVVHV
2QFH\RXVSHFLI\DQ,3DGGUHVVRUUDQJHRIDGGUHVVHVDFFHVVWRPDQDJHPHQW
LQWHUIDFHVLVUHVWULFWHGWRWKHVSHFLILHGDGGUHVVHV,IDQ\RQHWULHVWRDFFHVVD
PDQDJHPHQWLQWHUIDFHIURPDQXQDXWKRUL]HGDGGUHVVWKHDFFHVVSRLQWZLOOUHMHFWWKH
FRQQHFWLRQ
8,0DQDJHPHQWÂą(QDEOHVRUGLVDEOHVPDQDJHPHQWDFFHVVWKURXJK7HOQHWWKH:HE
+773 RU6103LQWHUIDFHV 'HIDXOW(QDEOHG
1RWH 6HFXUH:HE +7736 FRQQHFWLRQVDUHQRWDIIHFWHGE\WKH8,0DQDJHPHQWRU,3
0DQDJHPHQWVHWWLQJV
,30DQDJHPHQWÂą5HVWULFWVPDQDJHPHQWDFFHVVWR7HOQHW:HEDQG6103
LQWHUIDFHVWRVSHFLILHG,3DGGUHVVHV 'HIDXOW$Q\,3
‡ $Q\,3,QGLFDWHVWKDWDQ\,3DGGUHVVLVDOORZHGPDQDJHPHQWDFFHVV
‡ 6LQJOH,36SHFLILHVDVLQJOH,3DGGUHVVWKDWLVDOORZHGPDQDJHPHQWDFFHVV
‡ 0XOWLSOH,36SHFLILHVDQDGGUHVVUDQJHDVGHILQHGE\WKHHQWHUHG,3DGGUHVVDQG
VXEQHWPDVN)RUH[DPSOH,3DGGUHVVDQGVXEQHWPDVN
GHILQHVDOO,3DGGUHVVHVIURPWR
-
(
   
&/,&RPPDQGVIRU$30DQDJHPHQWIHDWXUHV
Enterprise AP(config)#apmgmtip multiple 192.168.1.50 255.255.255.0
Enterprise AP(config)#apmgmtui SNMP enable
7-21
7-22
$GPLQLVWUDWLRQ
&KDQJLQJWKH3DVVZRUG
0DQDJHPHQWDFFHVVWRWKHZHEDQG&/,LQWHUIDFHRQWKHDFFHVVSRLQWLVFRQWUROOHG
WKURXJKDVLQJOHXVHUQDPHDQGSDVVZRUG:
TFTP Source file name:img.bin
TFTP Server IP:192.168.1.19
Enterprise AP#dir
File Name
-------------------------dflt-img.bin
img.bin
syscfg
syscfg_bak
7-57
[1]:1
7-59
Type
---2
File Size
----------1319939
1629577
17776
17776
262144 byte(s) available
Enterprise AP#reset board
Reboot system now? : y
7-10



   
6\VWHP/RJ
7KHDFFHVVSRLQWFDQEHFRQILJXUHGWRVHQGHYHQWDQGHUURUPHVVDJHVWRD6\VWHP
/RJ6HUYHU7KHV\VWHPFORFNFDQDOVREHV\QFKURQL]HGZLWKDWLPHVHUYHUVRWKDW
DOOWKHPHVVDJHVVHQWWRWKH6\VORJVHUYHUDUHVWDPSHGZLWKWKHFRUUHFWWLPHDQG
GDWH
(QDEOLQJ6\VWHP/RJJLQJ
7KHDFFHVVSRLQWVXSSRUWVDORJJLQJSURFHVVWKDWFDQFRQWUROHUURUPHVVDJHVVDYHG
WRPHPRU\RUVHQWWRD6\VORJVHUYHU7KHORJJHGPHVVDJHVVHUYHDVDYDOXDEOHWRRO
IRULVRODWLQJDFFHVVSRLQWDQGQHWZRUNSUREOHPV
6\VWHP/RJ6HWXSÂą(QDEOHVWKHORJJLQJRIHUURUPHVVDJHV 'HIDXOW'LVDEOH
6HUYHU  Âą(QDEOHVWKHVHQGLQJRIORJPHVVDJHVWRD6\VORJVHUYHUKRVW8SWR
IRXU6\VORJVHUYHUVDUHVXSSRUWHGRQWKHDFFHVVSRLQW 'HIDXOW'LVDEOH
6HUYHU1DPH,3Âą7KH,3DGGUHVVRUQDPHRID6\VORJVHUYHU 'HIDXOW
8'33RUWÂą7KH8'3SRUWXVHGE\D6\VORJVHUYHU 5DQJHRU
'HIDXOW
/RJJLQJ&RQVROHÂą(QDEOHVWKHORJJLQJRIHUURUPHVVDJHVWRWKHFRQVROH
'HIDXOW 'LVDEOH

(
   
/RJJLQJ/HYHOÂą6HWVWKHPLQLPXPVHYHULW\OHYHOIRUHYHQWORJJLQJ
'HIDXOW ,QIRUPDWLRQDO
7KHV\VWHPDOORZV\RXWROLPLWWKHPHVVDJHVWKDWDUHORJJHGE\VSHFLI\LQJD
PLQLPXPVHYHULW\OHYHO7KHIROORZLQJWDEOHOLVWVWKHHUURUPHVVDJHOHYHOVIURPWKH
PRVWVHYHUH (PHUJHQF\ WROHDVWVHYHUH 'HEXJ 7KHPHVVDJHOHYHOVWKDWDUH
ORJJHGLQFOXGHWKHVSHFLILHGPLQLPXPOHYHOXSWRWKH(PHUJHQF\OHYHO
(UURU/HYHO
'HVFULSWLRQ
3 
  
(
 

  :/ /$   $     
=  ;
3 
3   :/ /$ $   ;
7
7   :/ /$  $ = ;
6 
6      $   
  
    
)
)
  
1RWH 7KHDFFHVVSRLQWHUURUORJFDQEHYLHZHGXVLQJWKH(YHQW/RJVZLQGRZLQWKH
6WDWXVVHFWLRQ SDJH 7KH(YHQW/RJVZLQGRZGLVSOD\VWKHODVW
PHVVDJHVORJJHGLQFKURQRORJLFDORUGHUIURPWKHQHZHVWWRWKHROGHVW/RJ
PHVVDJHVVDYHGLQWKHDFFHVVSRLQWÂśVPHPRU\DUHHUDVHGZKHQWKHGHYLFHLV
UHERRWHG
/RJJLQJ)DFLOLW\7\SHÂą6HWVWKHIDFLOLW\W\SHIRUUHPRWHORJJLQJRIV\VORJPHVVDJHV
7KHFRPPDQGVSHFLILHVWKHIDFLOLW\W\SHWDJVHQWLQV\VORJPHVVDJHV 6HH5)&
 7KLVW\SHKDVQRHIIHFWRQWKHNLQGRIPHVVDJHVUHSRUWHGE\WKHVZLWFK
+RZHYHULWPD\EHXVHGE\WKHV\VORJVHUYHUWRVRUWPHVVDJHVRUWRVWRUH
PHVVDJHVLQWKHFRUUHVSRQGLQJGDWDEDVH 5DQJH'HIDXOW



   
&/,&RPPDQGVIRU6\VWHP/RJJLQJÂą7RHQDEOHORJJLQJRQWKHDFFHVVSRLQWXVH
WKHORJJLQJRQFRPPDQGIURPWKHJOREDOFRQILJXUDWLRQPRGH7KHORJJLQJOHYHO
FRPPDQGVHWVWKHPLQLPXPOHYHORIPHVVDJHWRORJ8VHWKHORJJLQJFRQVROH
FRPPDQGWRHQDEOHORJJLQJWRWKHFRQVROH8VHWKHORJJLQJKRVWFRPPDQGWR
VSHFLI\XSWRIRXU6\VORJVHUYHUV7KH&/,DOVRDOORZVWKHORJJLQJIDFLOLW\W\SH
FRPPDQGWRVHWWKHIDFLOLW\W\SHQXPEHUWRXVHRQWKH6\VORJVHUYHU7RYLHZWKH
FXUUHQWORJJLQJVHWWLQJVXVHWKHVKRZORJJLQJFRPPDQG
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
AP(config)#logging
AP(config)#logging
AP(config)#logging
AP(config)#logging
AP(config)#logging
AP(config)#logging
AP(config)#exit
AP#show logging
on
level alert
console
host 1 IP 10.1.0.3 514
host 1 Port 514
facility-type 19
7-30
7-31
7-31
7-30
7-30
7-32
7-33
Logging Information
============================================
Syslog State
: Enabled
Logging Console State
: Enabled
Logging Level
: Alert
Logging Facility Type
: 19
Servers
1: 10.1.0.3, UDP Port: 514, State: Enabled
2: 0.0.0.0, UDP Port: 514, State: Disabled
3: 0.0.0.0, UDP Port: 514, State: Disabled
4: 0.0.0.0, UDP Port: 514, State: Disabled
=============================================
Enterprise AP#
&RQILJXULQJ6173
6LPSOH1HWZRUN7LPH3URWRFRO 6173 DOORZVWKHDFFHVVSRLQWWRVHWLWVLQWHUQDO
FORFNEDVHGRQSHULRGLFXSGDWHVIURPDWLPHVHUYHU 6173RU173 0DLQWDLQLQJDQ
DFFXUDWHWLPHRQWKHDFFHVVSRLQWHQDEOHVWKHV\VWHPORJWRUHFRUGPHDQLQJIXO
GDWHVDQGWLPHVIRUHYHQWHQWULHV,IWKHFORFNLVQRWVHWWKHDFFHVVSRLQWZLOORQO\
UHFRUGWKHWLPHIURPWKHIDFWRU\GHIDXOWVHWDWWKHODVWERRWXS
7KHDFFHVVSRLQWDFWVDVDQ6173FOLHQWSHULRGLFDOO\VHQGLQJWLPHV\QFKURQL]DWLRQ
UHTXHVWVWRVSHFLILFWLPHVHUYHUV: 3
and which day<1-31>: 31
Enter Daylight saving end to which month<1-12>: 10
and which day<1-31>: 31
Enterprise AP(config)#exit
Enterprise AP#show sntp
7-35
7-35
7-37
7-37
7-38
SNTP Information
=========================================================
Service State
: Enabled
SNTP (server 1) IP
: 10.1.10.19
SNTP (server 2) IP
: 192.43.244.18
Current Time
: 19 : 35, Oct 10th, 2003
Time Zone
: +8 (TAIPEI, BEIJING)
Daylight Saving
: Enabled, from Mar, 31st to Oct, 31st
=========================================================
Enterprise AP#
+


   
&/,&RPPDQGVIRUWKH6\VWHP&ORFNÂą7KHIROORZLQJH[DPSOHVKRZVKRZWR
PDQXDOO\VHWWKHV\VWHPWLPHZKHQ6173VHUYHUVXSSRUWLVGLVDEOHGRQWKHDFFHVV
SRLQW
Enterprise AP(config)#no sntp-server enable
Enterprise AP(config)#sntp-server date-time
Enter Year<1970-2100>: 2003
Enter Month<1-12>: 10
Enter Day<1-31>: 10
Enter Hour<0-23>: 18
Enter Min<0-59>: 35
Enterprise AP(config)#
7-35
7-36
SNMP
6LPSOH1HWZRUN0DQDJHPHQW3URWRFRO 6103 LVDFRPPXQLFDWLRQSURWRFRO
GHVLJQHGVSHFLILFDOO\IRUPDQDJLQJGHYLFHVRQDQHWZRUN(TXLSPHQWFRPPRQO\
PDQDJHGZLWK6103LQFOXGHVVZLWFKHVURXWHUVDQGKRVWFRPSXWHUV6103LV
W\SLFDOO\XVHGWRFRQILJXUHWKHVHGHYLFHVIRUSURSHURSHUDWLRQLQDQHWZRUN
HQYLURQPHQWDVZHOODVWRPRQLWRUWKHPWRHYDOXDWHSHUIRUPDQFHRUGHWHFWSRWHQWLDO
SUREOHPV
0DQDJHGGHYLFHVVXSSRUWLQJ6103FRQWDLQVRIWZDUHZKLFKUXQVORFDOO\RQWKH
GHYLFHDQGLVUHIHUUHGWRDVDQDJHQW$GHILQHGVHWRIYDULDEOHVNQRZQDVPDQDJHG
REMHFWVLVPDLQWDLQHGE\WKH6103DJHQWDQGXVHGWRPDQDJHWKHGHYLFH7KHVH
REMHFWVDUHGHILQHGLQD0DQDJHPHQW,QIRUPDWLRQ%DVH 0,% WKDWSURYLGHVD
VWDQGDUGSUHVHQWDWLRQRIWKHLQIRUPDWLRQFRQWUROOHGE\WKHDJHQW6103GHILQHVERWK
WKHIRUPDWRIWKH0,%VSHFLILFDWLRQVDQGWKHSURWRFROXVHGWRDFFHVVWKLVLQIRUPDWLRQ
RYHUWKHQHWZRUN
7KHDFFHVVSRLQWLQFOXGHVDQRQERDUGDJHQWWKDWVXSSRUWV6103YHUVLRQVF
DQGFOLHQWV7KLVDJHQWFRQWLQXRXVO\PRQLWRUVWKHVWDWXVRIWKHDFFHVVSRLQWDV
ZHOODVWKHWUDIILFSDVVLQJWRDQGIURPZLUHOHVVFOLHQWV$QHWZRUNPDQDJHPHQW
VWDWLRQFDQDFFHVVWKLVLQIRUPDWLRQXVLQJ6103PDQDJHPHQWVRIWZDUHWKDWLV
FRPSOLDQWZLWK0,%,,7RLPSOHPHQW6103PDQDJHPHQWWKHDFFHVVSRLQWPXVWILUVW
KDYHDQ,3DGGUHVVDQGVXEQHWPDVNFRQILJXUHGHLWKHUPDQXDOO\RUG\QDPLFDOO\
$FFHVVWRWKHRQERDUGDJHQWXVLQJ6103YDQGYFLVFRQWUROOHGE\FRPPXQLW\
VWULQJV7RFRPPXQLFDWHZLWKWKHDFFHVVSRLQWWKHPDQDJHPHQWVWDWLRQPXVWILUVW
VXEPLWDYDOLGFRPPXQLW\VWULQJIRUDXWKHQWLFDWLRQ
$FFHVVWRWKHDFFHVVSRLQWXVLQJ6103YSURYLGHVDGGLWLRQDOVHFXULW\IHDWXUHVWKDW
FRYHUPHVVDJHLQWHJULW\DXWKHQWLFDWLRQDQGHQFU\SWLRQDVZHOODVFRQWUROOLQJ
QRWLILFDWLRQVWKDWDUHVHQWWRVSHFLILHGXVHUWDUJHWV
-
61"
&RQILJXULQJ6103DQG7UDS0HVVDJH3DUDPHWHUV
7KHDFFHVVSRLQW6103DJHQWPXVWEHHQDEOHGWRIXQFWLRQ IRUYHUVLRQVFDQG
FOLHQWV 0DQDJHPHQWDFFHVVXVLQJ6103YDQGYFDOVRUHTXLUHVFRPPXQLW\
VWULQJVWREHFRQILJXUHGIRUDXWKHQWLFDWLRQ7UDSQRWLILFDWLRQVFDQEHHQDEOHGDQG
VHQWWRXSWRIRXUPDQDJHPHQWVWDWLRQV
6103Âą(QDEOHVRUGLVDEOHV6103PDQDJHPHQWDFFHVVDQGDOVRHQDEOHVWKH
DFFHVVSRLQWWRVHQG6103WUDSV QRWLILFDWLRQV  'HIDXOW'LVDEOH
/RFDWLRQÂą$WH[WVWULQJWKDWGHVFULEHVWKHV\VWHPORFDWLRQ 0D[LPXPOHQJWK
FKDUDFWHUV
&RQWDFWÂą$WH[WVWULQJWKDWGHVFULEHVWKHV\VWHPFRQWDFW 0D[LPXPOHQJWK
FKDUDFWHUV
&RPPXQLW\1DPH 5HDG2QO\ Âą'HILQHVWKH6103FRPPXQLW\DFFHVVVWULQJWKDW
KDVUHDGRQO\DFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHRQO\DEOHWRUHWULHYH
0,%REMHFWV 0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH'HIDXOWSXEOLF
9


   
&RPPXQLW\1DPH 5HDG:ULWH Âą'HILQHVWKH6103FRPPXQLW\DFFHVVVWULQJWKDW
KDVUHDGZULWHDFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHDEOHWRERWKUHWULHYH
DQGPRGLI\0,%REMHFWV 0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH
'HIDXOW SULYDWH
7UDS'HVWLQDWLRQ WR Âą(QDEOHVUHFLSLHQWV XSWRIRXU RI6103QRWLILFDWLRQV
‡ 7UDS'HVWLQDWLRQ,3$GGUHVV±6SHFLILHVWKHUHFLSLHQWRI6103QRWLILFDWLRQV(QWHU
WKH,3DGGUHVVRUWKHKRVWQDPH +RVW1DPHWRFKDUDFWHUVFDVHVHQVLWLYH
‡ 7UDS'HVWLQDWLRQ&RPPXQLW\1DPH±7KHFRPPXQLW\VWULQJVHQWZLWKWKH
QRWLILFDWLRQRSHUDWLRQ 0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH
'HIDXOW SXEOLF
(QJLQH,'Âą6HWVWKHHQJLQHLGHQWLILHUIRUWKH6103YDJHQWWKDWUHVLGHVRQWKH
DFFHVVSRLQW7KLVHQJLQHSURWHFWVDJDLQVWPHVVDJHUHSOD\GHOD\DQGUHGLUHFWLRQ
7KHHQJLQH,'LVDOVRXVHGLQFRPELQDWLRQZLWKXVHUSDVVZRUGVWRJHQHUDWHWKH
VHFXULW\NH\VIRUDXWKHQWLFDWLQJDQGHQFU\SWLQJ6103YSDFNHWV$GHIDXOWHQJLQH
,'LVDXWRPDWLFDOO\JHQHUDWHGWKDWLVXQLTXHWRWKHDFFHVVSRLQW 5DQJHWR
KH[DGHFLPDOFKDUDFWHUV
1RWH ,IWKHORFDOHQJLQH,'LVGHOHWHGRUFKDQJHGDOO6103XVHUVZLOOEHFOHDUHG$OO
H[LVWLQJXVHUVZLOOQHHGWREHUHFRQILJXUHG,I\RXZDQWWRFKDQJHWKHGHIDXOW
HQJLQH,'FKDQJHLWILUVWEHIRUHFRQILJXULQJRWKHU6103YSDUDPHWHUV
.
61"
7UDS&RQILJXUDWLRQÂą$OORZVVHOHFWLRQRIVSHFLILF6103QRWLILFDWLRQVWRVHQG7KH
IROORZLQJLWHPVDUHDYDLODEOH
‡ V\V6\VWHP8S7KHDFFHVVSRLQWLVXSDQGUXQQLQJ
‡ V\V6\VWHP'RZQ7KHDFFHVVSRLQWLVDERXWWRVKXWGRZQDQGUHERRW
‡ V\V5DGLXV6HUYHU&KDQJHG7KHDFFHVVSRLQWKDVFKDQJHGIURPWKHSULPDU\
5$',86VHUYHUWRWKHVHFRQGDU\RUIURPWKHVHFRQGDU\WRWKHSULPDU\
‡ V\V&RQILJ)LOH9HUVLRQ&KDQJHG7KHDFFHVVSRLQW¶VFRQILJXUDWLRQILOHKDVEHHQ
FKDQJHG
‡ GRW6WDWLRQ$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DVVRFLDWHGZLWKWKH
DFFHVVSRLQW
‡ GRW6WDWLRQ5H$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\UHDVVRFLDWHGZLWK
WKHDFFHVVSRLQW
‡ GRW6WDWLRQ$XWKHQWLFDWLRQ$FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\DXWKHQWLFDWHG
‡ GRW6WDWLRQ5HTXHVW)DLO$FOLHQWVWDWLRQKDVIDLOHGDVVRFLDWLRQUHDVVRFLDWLRQRU
DXWKHQWLFDWLRQ
‡ GRW,QWHUIDFH%)DLO7KHELQWHUIDFHKDVIDLOHG
‡ GRW,QWHUIDFH$)DLO7KHDRUJLQWHUIDFHKDVIDLOHG
‡ GRW[0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DXWKHQWLFDWHGLWV
0$&DGGUHVVZLWKWKH5$',86VHUYHU
‡ GRW[0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHG0$&DGGUHVVDXWKHQWLFDWLRQ
ZLWKWKH5$',86VHUYHU
‡ GRW[$XWK1RW,QLWLDWHG$FOLHQWVWDWLRQGLGQRWLQLWLDWH;DXWKHQWLFDWLRQ
‡ GRW[$XWK6XFFHVV$;FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\DXWKHQWLFDWHG
E\WKH5$',86VHUYHU
‡ GRW[$XWK)DLO$;FOLHQWVWDWLRQKDVIDLOHG5$',86DXWKHQWLFDWLRQ
‡ GRW[6XSS$XWKHQWLFDWHG$VXSSOLFDQWVWDWLRQKDVEHHQVXFFHVVIXOO\
DXWKHQWLFDWHGE\WKH5$',86VHUYHU
‡ ORFDO0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DXWKHQWLFDWHGLWV
0$&DGGUHVVZLWKWKHORFDOGDWDEDVHRQWKHDFFHVVSRLQW
‡ ORFDO0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHGDXWKHQWLFDWLRQZLWKWKHORFDO0$&
DGGUHVVGDWDEDVHRQWKHDFFHVVSRLQW
‡ LDSS6WDWLRQ5RDPHG)URP$FOLHQWVWDWLRQKDVURDPHGIURPDQRWKHUDFFHVVSRLQW
LGHQWLILHGE\LWV,3DGGUHVV 
‡ LDSS6WDWLRQ5RDPHG7R$FOLHQWVWDWLRQKDVURDPHGWRDQRWKHUDFFHVVSRLQW
LGHQWLILHGE\LWV,3DGGUHVV 
‡ LDSS&RQWH[W'DWD6HQW$FOLHQWVWDWLRQ¶V&RQWH[W'DWDKDVEHHQVHQWWRDQRWKHU
DFFHVVSRLQWZLWKZKLFKWKHVWDWLRQKDVDVVRFLDWHG
‡ VQWS6HUYHU)DLO7KHDFFHVVSRLQWKDVIDLOHGWRVHWWKHWLPHIURPWKHFRQILJXUHG
6173VHUYHU
‡ ZLUHOHVV([WHUQDO$QWHQQD$QH[WHUQDODQWHQQDKDVEHHQHQDEOHG
‡ GRW:LUHOHVV6WDWLRQ'HDXWKHQWLFDWH$FOLHQWVWDWLRQKDVGHDXWKHQWLFDWHGIURP
WKHQHWZRUN



   
‡ GRW6WDWLRQ'LVDVVRFLDWH$FOLHQWVWDWLRQQRORQJHUDVVRFLDWHVZLWKWKHQHWZRUN
‡ GRW6WDWLRQ$XWKHQWLFDWH)DLO$FOLHQWVWDWLRQKDVWULHGDQGIDLOHGWRDXWKHQWLFDWH
WRWKHQHWZRUN
‡ (QDEOH$OO7UDSV&OLFNWKHEXWWRQWRHQDEOHDOOWKHDYDLODEOHWUDSV
‡ 'LVDEOH$OO7UDSV&OLFNWKHEXWWRQWRGLVDEOHDOOWKHDYDLODEOHWUDSV
&/,&RPPDQGVIRU6103DQG7UDS&RQILJXUDWLRQÂą8VHWKHVQPSVHUYHUHQDEOH
VHUYHUFRPPDQGIURPWKHJOREDOFRQILJXUDWLRQPRGHWRHQDEOHWKH6103DJHQW
8VHWKHVQPSVHUYHUORFDWLRQDQGVQPSVHUYHUFRQWDFWFRPPDQGVWRLQGLFDWH
WKHSK\VLFDOORFDWLRQRIWKHDFFHVVSRLQWDQGGHILQHDV\VWHPFRQWDFW7RVHWWKH
UHDGRQO\DQGUHDGZULWHFRPPXQLW\QDPHVXVHWKHVQPSVHUYHUFRPPXQLW\
FRPPDQG8VHWKHVQPSVHUYHUKRVWFRPPDQGWRGHILQHDWUDSUHFHLYHUKRVWDQG
WKHVQPSVHUYHUWUDSFRPPDQGWRHQDEOHRUGLVDEOHVSHFLILFWUDSV
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise
Enterprise

AP(config)#snmp-server
AP(config)#snmp-server
AP(config)#snmp-server
AP(config)#snmp-server
AP(config)#snmp-server
AP(config)#snmp-server
AP(config)#snmp-server
AP(config)#
enable server
community alpha rw
community beta ro
location WC-19
contact Paul
host 192.168.1.9 alpha
trap dot11StationAssociation
7-43
7-42
7-43
7-42
7-44
7-45
61"
7RYLHZWKHFXUUHQW6103VHWWLQJVXVHWKHVKRZVQPSFRPPDQG
7-55
Enterprise AP#show snmp
SNMP Information
==============================================
Service State
: Enable
Community (ro)
: *****
Community (rw)
: *****
Location
: WC-19
Contact
: Paul
EngineId
:80:00:07:e5:80:00:00:2e:62:00:00:00:18
EngineBoots:1
Trap Destinations:
1:
192.168.1.9,
2:
0.0.0.0,
3:
0.0.0.0,
4:
0.0.0.0,
Community:
Community:
Community:
Community:
dot11InterfaceAGFail
dot11StationAssociation
dot11StationReAssociation
dot1xAuthFail
dot1xAuthSuccess
dot1xMacAddrAuthSuccess
iappStationRoamedFrom
localMacAddrAuthFail
iappContextDataSent
wirelessExternalAntenna
dot11InterfaceGFail
pppLogonFail
configFileVersionChanged
systemDown
*****,
*****,
*****,
*****,
State:
State:
State:
State:
Enabled
Disabled
Disabled
Disabled
Enabled
dot11InterfaceBFail
Enabled dot11StationAuthentication
Enabled
dot11StationRequestFail
Enabled
dot1xAuthNotInitiated
Enabled
dot1xMacAddrAuthFail
Enabled
iappContextDataSent
Enabled
iappStationRoamedTo
Enabled
localMacAddrAuthSuccess
Enabled
dot1XSuppAuthenticated
Enabled
dot11InterfaceAFail
Enabled
Enabled
sntpServerFail
Enabled
radiusServerChanged
Enabled
systemUp
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
=============================================
Enterprise AP#



   
&RQILJXULQJ6103Y8VHUV
7KHDFFHVVSRLQWDOORZVXSWR6103YXVHUVWREHFRQILJXUHG(DFKXVHUPXVW
EHGHILQHGE\DXQLTXHQDPHDVVLJQHGWRRQHRIWKUHHSUHGHILQHGVHFXULW\JURXSV
DQGFRQILJXUHGZLWKVSHFLILFDXWKHQWLFDWLRQDQGHQFU\SWLRQVHWWLQJV
8VHUÂą7KH6103YXVHUQDPH FKDUDFWHUVPD[LPXP
*URXSÂą7KH6103YJURXSQDPH 2SWLRQV525:$XWKRU5:3ULY'HIDXOW52
‡ 52±5HDGRQO\DFFHVV
‡ 5:$XWK±5HDGZULWHDFFHVVZLWKXVHUDXWKHQWLFDWLRQ
‡ 5:3ULY±5HDGZULWHDFFHVVZLWKERWKXVHUDXWKHQWLFDWLRQDQGGDWDHQFU\SWLRQ
$XWK7\SHÂą7KHDXWKHQWLFDWLRQW\SHXVHGIRUWKH6103XVHUHLWKHU0'RUQRQH
:KHQ0'LVVHOHFWHGHQWHUDSDVVZRUGLQWKHFRUUHVSRQGLQJ3DVVSKUDVHILHOG
3ULY7\SHÂą7KHGDWDHQFU\SWLRQW\SHXVHGIRUWKH6103XVHUHLWKHU'(6RUQRQH
:KHQ'(6LVVHOHFWHGHQWHUDNH\LQWKHFRUUHVSRQGLQJ3DVVSKUDVHILHOG
3DVVSKUDVHÂą7KHSDVVZRUGRUNH\DVVRFLDWHGZLWKWKHDXWKHQWLFDWLRQDQGSULYDF\
VHWWLQJV$PLQLPXPRIHLJKWSODLQWH[WFKDUDFWHUVLVUHTXLUHG
$FWLRQÂą&OLFNWKH$GGEXWWRQWRDGGDQHZXVHUWRWKHOLVW&OLFNWKHHGLWEXWWRQWR
FKDQJHGHWDLOVRIDQH[LVWLQJXVHU&OLFNWKH'HOEXWWRQWRUHPRYHDXVHUIURPWKHOLVW
1RWH 8VHUVPXVWEHDVVLJQHGWRJURXSVWKDWKDYHWKHVDPHVHFXULW\OHYHOV)RU
H[DPSOHDXVHUZKRKDV³$XWK7\SH´DQG³3ULY7\SH´FRQILJXUHGWR0'DQG
'(6UHVSHFWLYHO\ WKDWLWXVHVERWKDXWKHQWLFDWLRQDQGGDWDHQFU\SWLRQ PXVWEH
DVVLJQHGWRWKH5:3ULYJURXS,IWKLVVDPHXVHUZHUHLQVWHDGDVVLJQHGWRWKH
UHDGRQO\ 52 JURXSWKHXVHUZRXOGQRWEHDEOHWRDFFHVVWKHGDWDEDVH

61"
&/,&RPPDQGVIRU&RQILJXULQJ6103Y8VHUVÂą8VHWKHVQPSVHUYHUHQJLQHLG
FRPPDQGWRGHILQHWKH6103YHQJLQHEHIRUHDVVLJQLQJXVHUVWRJURXSV8VHWKH
VQPSVHUYHUXVHUFRPPDQGWRDVVLJQXVHUVWRRQHRIWKHWKUHHJURXSVDQGVHWWKH
DSSURSULDWHDXWKHQWLFDWLRQDQGHQFU\SWLRQW\SHVWREHXVHG7RYLHZWKHFXUUHQW
6103YHQJLQH,'XVHWKHVKRZVQPSFRPPDQG7RYLHZ6103XVHUVDQG
JURXSVHWWLQJVXVHWKHVKRZVQPSXVHUVRUVKRZVQPSJURXSDVVLJQPHQWV
FRPPDQGV
Enterprise AP(config)#snmp-server engine-id 1a:2b:3c:4d:00:ff
Enterprise AP(config)#snmp-server user
User Name<1-32> :chris
Group Name<1-32> :RWPriv
Authtype(md5,none):md5
Passphrase<8-32>:a good secret
Privacy(des,none) :des
Passphrase<8-32>:a very good secret
Enterprise AP(config)#exit
Enterprise AP#show snmp users
=============================================
UserName
:chris
GroupName
:RWPriv
AuthType
:MD5
Passphrase:****************
PrivType
:DES
Passphrase:****************
=============================================
Enterprise AP#show snmp group-assignments
7-46
7-47
7-52
7-52
GroupName
:RWPriv
UserName
:chris
Enterprise AP#



   
&RQILJXULQJ6103Y7UDS)LOWHUV
6103YXVHUVFDQEHFRQILJXUHGWRUHFHLYHQRWLILFDWLRQPHVVDJHVIURPWKHDFFHVV
SRLQW$Q61037DUJHW,'LVFUHDWHGWKDWVSHFLILHVWKH6103YXVHU,3DGGUHVV
DQG8'3SRUW$XVHUGHILQHGQRWLILFDWLRQILOWHUFDQEHFUHDWHGVRWKDWVSHFLILF
QRWLILFDWLRQVFDQEHSUHYHQWHGIURPEHLQJVHQWWRSDUWLFXODUWDUJHWV
7KHDFFHVVSRLQWDOORZVXSWRQRWLILFDWLRQILOWHUVWREHFUHDWHG(DFKILOWHUFDQEH
GHILQHGE\XSWR0,%VXEWUHH,'HQWULHV
7RFRQILJXUHDQHZQRWLILFDWLRQILOWHUFOLFNWKH1HZEXWWRQ$QHZSDJHRSHQVWR
FRQILJXUHWKHILOWHU VHHEHORZ 7RHGLWDQH[LVWLQJILOWHUVHOHFWWKHUDGLREXWWRQQH[W
WRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH(GLWEXWWRQ7RGHOHWHDILOWHUVHOHFWWKH
UDGLREXWWRQQH[WWRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH'HOHWHEXWWRQ
:KHQ\RXFOLFNRQWKH1HZEXWWRQLQWKH61037UDS)LOWHUVSDJHDQHZSDJH
RSHQVZKHUHWKHILOWHUSDUDPHWHUVDUHFRQILJXUHG'HILQHDILOWHUQDPHDQGVXEWUHH
,'WREHILOWHUHG6HOHFWWKHILOWHUW\SHLQFOXGHRUH[FOXGHIURPWKHGURSGRZQOLVW
&OLFN$SSO\WRFUHDWHWKHILOWHU
7RDGGPRUHVXEWUHH,'VWRWKHILOWHUUHWXUQWRWKH61037UDS)LOWHUVSDJHDQGFOLFN
WKH(GLWEXWWRQ,QWKH(GLWSDJHFOLFNWKH1HZEXWWRQWRDFFHVVWKH$GG6103
1RWLILFDWLRQ6XEWUHHSDJHDQGFRQILJXUHDQHZVXEWUHH,'WREHILOWHUHG

61"
1RWH 2QO\WKH1HZ)LOWHUSDJHDOORZVWKH)LOWHU,'WREHFRQILJXUHG
)LOWHU,'Âą$XVHUGHILQHGQDPHWKDWLGHQWLILHVWKHILOWHU 0D[LPXPOHQJWK
FKDUDFWHUV
6XEWUHH2,'Âą6SHFLILHV0,%VXEWUHHWREHILOWHUHG7KH0,%VXEWUHHPXVWEH
GHILQHGLQWKHIRUP³´DQGDOZD\VVWDUWZLWKD³´
)LOWHU7\SH¹,QGLFDWHVLIWKHILOWHULVWR³LQFOXGH´RU³H[FOXGH´WKH0,%VXEWUHHREMHFWV
IURPWKHILOWHU1RWHWKDW0,%REMHFWVLQFOXGHGLQWKHILOWHUDUHQRWVHQWWRWKHUHFHLYLQJ
WDUJHWDQGREMHFWVH[FOXGHGDUHVHQW%\GHIDXOWDOOWUDSVDUHVHQWVR\RXFDQILUVW
XVHDQ³LQFOXGH´ILOWHUHQWU\IRUDOOWUDSREMHFWV7KHQXVH³H[FOXGH´HQWULHVIRUWKH
UHTXLUHGWUDSREMHFWVWRVHQGWRWKHWDUJHW1RWHWKDWWKHILOWHUHQWULHVDUHDSSOLHGLQ
WKHVHTXHQFHWKDWWKH\DUHGHILQHG
&/,&RPPDQGVIRU&RQILJXULQJ6103Y7UDS)LOWHUVÂą7RFUHDWHDQRWLILFDWLRQILOWHU
XVHWKHVQPSVHUYHUILOWHUFRPPDQGIURPWKH&/,FRQILJXUDWLRQPRGH8VHWKH
FRPPDQGPRUHWKDQRQFHZLWKWKHVDPHILOWHU,'WREXLOGDILOWHUWKDWLQFOXGHVRU
H[FOXGHVPXOWLSOH0,%REMHFWV7RYLHZWKHFXUUHQW6103ILOWHUVXVHWKHVKRZ
VQPSILOWHUFRPPDQGIURPWKH&/,([HFPRGH
Enterprise
include
Enterprise
exclude
Enterprise
Enterprise
AP(config)#snmp-server filter trapfilter
.1
AP(config)#snmp-server filter trapfilter
.1.3.6.1.2.1.2.2.1.1.23
AP(config)#exit
AP#show snmp filter
7-50
7-53
Filter: trapfilter
Type: include
Subtree: iso
Type: exclude
Subtree: iso.3.6.1.2.1.2.2.1.1.23
=============================
Enterprise AP#
+


   
&RQILJXULQJ6103Y7DUJHWV
$Q6103YQRWLILFDWLRQ7DUJHW,'LVVSHFLILHGE\WKH6103YXVHU,3DGGUHVV
DQG8'3SRUW$XVHUGHILQHGILOWHUFDQDOVREHDVVLJQHGWRVSHFLILFWDUJHWVWROLPLW
WKHQRWLILFDWLRQVUHFHLYHGWRVSHFLILF0,%REMHFWV 1RWHWKDWWKHILOWHUPXVWILUVWEH
FRQILJXUHGVHH³&RQILJXULQJ6103Y7UDS)LOWHUV´RQSDJH 
7RFRQILJXUHDQHZQRWLILFDWLRQUHFHLYHUWDUJHWFOLFNWKH1HZEXWWRQ$QHZSDJH
RSHQVWRFRQILJXUHWKHVHWWLQJV VHHEHORZ 7RHGLWDQH[LVWLQJWDUJHWVHOHFWWKH
UDGLREXWWRQQH[WWRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH(GLWEXWWRQ7RGHOHWH
WDUJHWVVHOHFWWKHUDGLREXWWRQQH[WWRWKHHQWU\LQWKHWDEOHDQGWKHQFOLFNWKH'HOHWH
EXWWRQ
:KHQ\RXFOLFNRQWKH1HZRU(GLWEXWWRQLQWKH61037DUJHWVSDJHDQHZSDJH
RSHQVZKHUHWKHWDUJHWSDUDPHWHUVDUHFRQILJXUHG'HILQHWKHSDUDPHWHUVDQG
VHOHFWDILOWHULIUHTXLUHG1RWHWKDWWKH6103YXVHUQDPHPXVWILUVWEHGHILQHG
VHH³&RQILJXULQJ6103Y8VHUV´RQSDJH  &OLFN$SSO\
1RWH 7KH7DUJHW,'FDQQRWEHFKDQJHGLQWKH(GLW7DUJHWSDJH2QO\WKH1HZ7DUJHW
SDJHDOORZVWKH7DUJHW,'WREHFRQILJXUHG
-
61"
7DUJHW,'Âą$XVHUGHILQHGQDPHWKDWLGHQWLILHVDUHFHLYHURIQRWLILFDWLRQV7KH
DFFHVVSRLQWVXSSRUWVXSWRWDUJHW,'V 0D[LPXPOHQJWKFKDUDFWHUV
,3$GGUHVVÂą6SHFLILHVWKH,3DGGUHVVRIWKHUHFHLYLQJPDQDJHPHQWVWDWLRQ
8'33RUWÂą7KH8'3SRUWWKDWLVXVHGRQWKHUHFHLYLQJPDQDJHPHQWVWDWLRQIRU
QRWLILFDWLRQPHVVDJHV
61038VHUÂą7KHGHILQHG6103YXVHUWKDWLVWRUHFHLYHQRWLILFDWLRQPHVVDJHV
$VVLJQHG)LOWHUÂą7KHQDPHRIDXVHUGHILQHGQRWLILFDWLRQILOWHUWKDWLVDSSOLHGWRWKH
WDUJHW
&/,&RPPDQGVIRU&RQILJXULQJ6103Y7DUJHWVÂą7RFUHDWHDQRWLILFDWLRQWDUJHW
XVHWKHVQPSVHUYHUWDUJHWVFRPPDQGIURPWKH&/,FRQILJXUDWLRQPRGH7RDVVLJQ
DILOWHUWRDWDUJHWXVHWKHVQPSVHUYHUILOWHUDVVLJQPHQWFRPPDQG7RYLHZWKH
FXUUHQW6103WDUJHWVXVHWKHVKRZVQPSWDUJHWFRPPDQGIURPWKH&/,([HF
PRGH7RYLHZILOWHUDVVLJQPHQWWRWDUJHWVXVHWKHVKRZVQPSILOWHUDVVLJQPHQWV
FRPPDQG
9


   
Enterprise AP(config)#snmp-server targets mytraps
192.168.1.33 chris
Enterprise AP(config)#snmp-server filter-assignment
mytraps
trapfilter
Enterprise AP(config)#exit
Enterprise AP#show snmp target
Host ID
: mytraps
User
: chris
IP Address
: 192.168.1.33
UDP Port
: 162
=============================
Enterprise AP#show snmp filter-assignments
HostID
mytraps
7-49
7-51
7-53
7-54
FilterID
trapfilter
Enterprise AP#
Radio Interface
7KH,(((DDQGJLQWHUIDFHVLQFOXGHFRQILJXUDWLRQRSWLRQVIRUUDGLR
VLJQDOFKDUDFWHULVWLFVDQGZLUHOHVVVHFXULW\IHDWXUHV7KHFRQILJXUDWLRQRSWLRQVDUH
QHDUO\LGHQWLFDODQGDUHWKHUHIRUHERWKFRYHUHGLQWKLVVHFWLRQRIWKHPDQXDO
7KHDFFHVVSRLQWFDQRSHUDWHLQWKUHHPRGHV,(((DRQO\EJRQO\RU
DPL[HGDEJPRGH$OVRQRWHWKDWJLVEDFNZDUGFRPSDWLEOHZLWK
E7KHVHLQWHUIDFHVDUHFRQILJXUHGLQGHSHQGHQWO\XQGHUWKHIROORZLQJZHE
SDJHV
‡ 5DGLR,QWHUIDFH$D
‡ 5DGLR,QWHUIDFH*EJ
(DFKUDGLRVXSSRUWVXSWRIRXUYLUWXDODFFHVVSRLQW 9$3 LQWHUIDFHVQXPEHUHGWR
(DFK9$3IXQFWLRQVDVDVHSDUDWHDFFHVVSRLQWDQGFDQEHFRQILJXUHGZLWKLWV
RZQ6HUYLFH6HW,GHQWLILFDWLRQ 66,' DQGVHFXULW\VHWWLQJV+RZHYHUPRVWUDGLR
VLJQDOSDUDPHWHUVDSSO\WRDOOIRXU9$3LQWHUIDFHV
7KH9$3VIXQFWLRQVLPLODUWRD9/$1ZLWKHDFK9$3PDSSHGWRLWVRZQ9/$1,'
7UDIILFWRVSHFLILF9$3VFDQEHVHJUHJDWHGEDVHGRQXVHUJURXSVRUDSSOLFDWLRQ
WUDIILF(DFK9$3FDQKDYHXSWRZLUHOHVVFOLHQWVZKHUHE\WKHFOLHQWVDVVRFLDWH
ZLWKWKHVH9$3VWKHVDPHDVWKH\ZRXOGZLWKDSK\VLFDODFFHVVSRLQW
1RWH 7KHUDGLRFKDQQHOVHWWLQJVIRUWKHDFFHVVSRLQWDUHOLPLWHGE\ORFDOUHJXODWLRQV
ZKLFKGHWHUPLQHWKHQXPEHURIFKDQQHOVWKDWDUHDYDLODEOH5HIHUWRÂł*HQHUDO
6SHFLILFDWLRQV´RQSDJH&IRUDGGLWLRQDOLQIRUPDWLRQRQWKHPD[LPXPQXPEHU
FKDQQHOVDYDLODEOH
.
'  
5DGLR6HWWLQJV$ D
7KH,(((DLQWHUIDFHRSHUDWHVZLWKLQWKH*+]EDQGDWXSWR0ESVLQ
QRUPDOPRGHRUXSWR0ESVLQ7XUERPRGH
)LUVWFRQILJXUHWKHUDGLRVHWWLQJVWKDWDSSO\WRWKHLQGLYLGXDO9$3V 9LUWXDO$FFHVV
3RLQW DQGWKHFRPPRQUDGLRVHWWLQJVWKDWDSSO\WRWKHRYHUDOOV\VWHP$IWHU\RX
KDYHFRQILJXUHGWKHUDGLRVHWWLQJVJRWRWKH6HFXULW\SDJHXQGHUWKHD,QWHUIDFH
VHH³6HFXULW\´RQSDJH  HQDEOHWKHUDGLRVHUYLFHIRUDQ\RIWKH9$3LQWHUIDFHV
DQGWKHQVHWDQ66,'WRLGHQWLI\WKHZLUHOHVVQHWZRUNVHUYLFHSURYLGHGE\HDFK9$3
5HPHPEHUWKDWRQO\FOLHQWVZLWKWKHVDPH66,'FDQDVVRFLDWHZLWKD9$3
1RWH @FRPPDQGDVVKRZQRQ
Enterprise AP(if-wireless
Enterprise AP(if-wireless
Enterprise AP(if-wireless
Enterprise AP(if-wireless
Enterprise AP(if-wireless
interval 30
Enterprise AP(if-wireless
interval 20
Enterprise AP(if-wireless
Enterprise AP(if-wireless
Enterprise AP(if-wireless
a)#vap 0
a: VAP[0])#description RD-AP#3
a: VAP[0])#vlan-id 1
a: VAP[0])#closed-system
a: VAP[0])#authentication-timeout-
7-97
7-108
7-135
7-109
7-110
a: VAP[0])#association-timeouta: VAP[0])#max-association 32
a: VAP[0])#pmksa-lifetime 900
a: VAP[0])#
7-110
7-110
7-127
&RQILJXULQJ5RJXH$3'HWHFWLRQ
7RFRQILJXUH5RXJH$3GHWHFWLRQVHOHFWWKH5DGLR6HWWLQJVSDJHDQGVFUROOGRZQWR
WKH³5RXJH$3´VHFWLRQ
5RJXH$3¹$³URJXH$3´LVHLWKHUDQDFFHVVSRLQWWKDWLVQRWDXWKRUL]HGWR
SDUWLFLSDWHLQWKHZLUHOHVVQHWZRUNRUDQDFFHVVSRLQWWKDWGRHVQRWKDYHWKHFRUUHFW
VHFXULW\FRQILJXUDWLRQ5RJXH$3VFDQDOORZXQDXWKRUL]HGDFFHVVWRWKHQHWZRUNRU
IRROFOLHQWVWDWLRQVLQWRPLVWDNHQO\DVVRFLDWLQJZLWKWKHPDQGWKHUHE\EORFNLQJ
DFFHVVWRQHWZRUNUHVRXUFHV



   
7KHDFFHVVSRLQWFDQEHFRQILJXUHGWRSHULRGLFDOO\VFDQDOOUDGLRFKDQQHOVDQGILQG
RWKHUDFFHVVSRLQWVZLWKLQUDQJH$GDWDEDVHRIQHDUE\DFFHVVSRLQWVLVPDLQWDLQHG
ZKHUHDQ\URJXH$3VFDQEHLGHQWLILHG'XULQJDVFDQ6\VORJPHVVDJHV VHH
³(QDEOLQJ6\VWHP/RJJLQJ´RQSDJH DUHVHQWIRUHDFKDFFHVVSRLQWGHWHFWHG
5RJXHDFFHVVSRLQWVFDQEHLGHQWLILHGE\XQNQRZQ%66,' 0$&DGGUHVV RU66,'
FRQILJXUDWLRQ
‡ $3'HWHFWLRQ±(QDEOHVWKHSHULRGLFVFDQQLQJIRURWKHUDFFHVVSRLQWV
'HIDXOW 'LVDEOH
‡ $36FDQ,QWHUYDO±6HWVWKHWLPHEHWZHHQHDFKURJXH$3VFDQ 5DQJH
PLQXWHV'HIDXOWPLQXWHV
‡ $36FDQ'XUDWLRQ±6HWVWKHOHQJWKRIWLPHIRUHDFKURJXH$3VFDQ$ORQJVFDQ
GXUDWLRQWLPHZLOOGHWHFWPRUHDFFHVVSRLQWVLQWKHDUHDEXWFDXVHVPRUHGLVUXSWLRQ
WRFOLHQWDFFHVV 5DQJHPLOOLVHFRQGV'HIDXOWPLOOLVHFRQGV
‡ 5RJXH$3$XWKHQWLFDWH±(QDEOHVRUGLVDEOHV5$',86DXWKHQWLFDWLRQ(QDEOLQJ
5$',86$XWKHQWLFDWLRQDOORZVWKHDFFHVVSRLQWWRGLVFRYHUURJXHDFFHVVSRLQWV
:LWK5$',86DXWKHQWLFDWLRQHQDEOHGWKHDFFHVVSRLQWFKHFNVWKH0$&DGGUHVV
%DVLF6HUYLFH6HW,GHQWLILHU %66,' RIHDFKDFFHVVSRLQWWKDWLWILQGVDJDLQVWD
5$',86VHUYHUWRGHWHUPLQHZKHWKHUWKHDFFHVVSRLQWLVDOORZHG:LWK5$',86
DXWKHQWLFDWLRQGLVDEOHGWKHDFFHVVSRLQWFDQGHWHFWLWVQHLJKERULQJDFFHVVSRLQWV
RQO\LWFDQQRWLGHQWLI\ZKHWKHUWKHDFFHVVSRLQWVDUHDOORZHGRUDUHURJXHV,I\RX
HQDEOH5$',86DXWKHQWLFDWLRQ\RXPXVWFRQILJXUHD5$',86VHUYHUIRUWKLV
DFFHVVSRLQW VHH³5$',86´RQSDJH  
‡ 6FDQ$31RZ±6WDUWVDQLPPHGLDWHURJXH$3VFDQRQWKHUDGLRLQWHUIDFH
'HIDXOW'LVDEOH
1RWH :KLOHWKHDFFHVVSRLQWVFDQVDFKDQQHOIRUURJXH$3VZLUHOHVVFOLHQWVZLOOQRWEH
DEOHWRFRQQHFWWRWKHDFFHVVSRLQW7KHUHIRUHDYRLGIUHTXHQWVFDQQLQJRUVFDQV
RIDORQJGXUDWLRQXQOHVVWKHUHLVDUHDVRQWREHOLHYHWKDWPRUHLQWHQVLYHVFDQQLQJ
LVUHTXLUHGWRILQGDURJXH$3
&/,&RPPDQGVIRU5RJXH$3'HWHFWLRQÂą)URPWKHJOREDOFRQILJXUDWLRQPRGH
HQWHUWKHLQWHUIDFHZLUHOHVVFRPPDQGWRDFFHVVWKHDRUJUDGLR
LQWHUIDFH)URPWKHZLUHOHVVLQWHUIDFHPRGHXVHWKHURJXHDSHQDEOHFRPPDQGWR
HQDEOHURJXH$3GHWHFWLRQ6HWWKHGXUDWLRQDQGLQWHUYDOWLPHVZLWKWKHURJXHDS
GXUDWLRQDQGURJXHDSLQWHUYDOFRPPDQGV,IUHTXLUHGVWDUWDQLPPHGLDWHVFDQ

'  
XVLQJWKHURJXHDSVFDQFRPPDQG7RYLHZWKHGDWDEDVHRIGHWHFWHGDFFHVV
SRLQWVXVHWKHVKRZURJXHDSFRPPDQGIURPWKH([HFOHYHO
Enterprise AP(config)#interface wireless g
7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#rogue-ap enable
7-115
configure either syslog or trap or both to receive the rogue APs detected.
Enterprise AP(if-wireless g)#rogue-ap duration 200
7-117
Enterprise AP(if-wireless g)#rogue-ap interval 120
7-117
Enterprise AP(if-wireless g)#rogue-ap scan
7-118
Enterprise AP(if-wireless g)#rogueApDetect Completed (Radio G) : 5 APs
detected
rogueAPDetect (Radio G): refreshing ap database now
Enterprise AP(if-wireless g)#exit
Enterprise AP#show rogue-ap
7-119
802.11a Channel : Rogue AP Status
AP Address(BSSID)
SSID
Channel(MHz) RSSI
=======================================================
802.11g Channel : Rogue AP Status
AP Address(BSSID)
SSID
Channel(MHz) RSSI
=======================================================
00-04-e2-2a-37-23
WLAN1AP
11(2462 MHz)
17
00-04-e2-2a-37-3d
ANY
7(2442 MHz)
42
00-04-e2-2a-37-49
WLAN1AP
9(2452 MHz)
42
00-90-d1-08-9d-a7
WLAN1AP
1(2412 MHz)
12
00-30-f1-fb-31-f4
WLAN
6(2437 MHz)
16
Enterprise AP#



   
&RQILJXULQJ&RPPRQ5DGLR6HWWLQJV
7RFRQILJXUHFRPPRQUDGLRVHWWLQJVVHOHFWWKH5DGLR6HWWLQJVSDJHDQGVFUROOGRZQ
WREHORZWKH9$3UDGLRVHWWLQJV
7XUER0RGHÂą7KHQRUPDODZLUHOHVVRSHUDWLRQPRGHSURYLGHVFRQQHFWLRQV
XSWR0ESV7XUER0RGHLVDQHQKDQFHGPRGH QRWUHJXODWHGLQ,(((D 
WKDWSURYLGHVDKLJKHUGDWDUDWHRIXSWR0ESV(QDEOLQJ7XUER0RGHDOORZVWKH
DFFHVVSRLQWWRSURYLGHFRQQHFWLRQVXSWR0ESV 'HIDXOW'LVDEOHG
1RWH ,QQRUPDOPRGHWKHDFFHVVSRLQWSURYLGHVDFKDQQHOEDQGZLGWKRI0+]DQG
VXSSRUWVWKHPD[LPXPQXPEHURIFKDQQHOVSHUPLWWHGE\ORFDOUHJXODWLRQV HJ
FKDQQHOVIRUWKH8QLWHG6WDWHV ,Q7XUER0RGHWKHFKDQQHOEDQGZLGWKLV
LQFUHDVHGWR0+]WRVXSSRUWWKHLQFUHDVHGGDWDUDWH+RZHYHUWKLVUHGXFHV
WKHQXPEHURIFKDQQHOVVXSSRUWHG HJFKDQQHOVIRUWKH8QLWHG6WDWHV 
1RWH &KHFN\RXUFRXQWU\ÂśVUHJXODWLRQVWRVHHLI7XUER0RGHLVDOORZHG

'  
5DGLR&KDQQHOÂą7KHUDGLRFKDQQHOWKDWWKHDFFHVVSRLQWXVHV Normal Mode
WRFRPPXQLFDWHZLWKZLUHOHVVFOLHQWV:KHQPXOWLSOHDFFHVV
SRLQWVDUHGHSOR\HGLQWKHVDPHDUHDVHWWKHFKDQQHORQ
QHLJKERULQJDFFHVVSRLQWVDWOHDVWIRXUFKDQQHOVDSDUWWRDYRLG
LQWHUIHUHQFHZLWKHDFKRWKHU)RUH[DPSOHLQWKH8QLWHG6WDWHV
\RXFDQGHSOR\XSWRIRXUDFFHVVSRLQWVLQWKHVDPHDUHD HJ
FKDQQHOV $OVRQRWHWKDWWKHFKDQQHOIRU
ZLUHOHVVFOLHQWVLVDXWRPDWLFDOO\VHWWRWKHVDPHDVWKDWXVHG
E\WKHDFFHVVSRLQWWRZKLFKLWLVOLQNHG 'HIDXOW&KDQQHO
IRUQRUPDOPRGHDQGFKDQQHOIRU7XUERPRGH
$XWR&KDQQHO6HOHFWÂą(QDEOHVWKHDFFHVVSRLQWWR
DXWRPDWLFDOO\VHOHFWDQXQRFFXSLHGUDGLRFKDQQHO
'HIDXOW (QDEOHG
Turbo Mode
1RWH &KHFN\RXUFRXQWU\ÂśVUHJXODWLRQVWRVHHLI$XWR
&KDQQHO FDQEHGLVDEOHG
7UDQVPLW3RZHUÂą$GMXVWVWKHSRZHURIWKHUDGLRVLJQDOV
WUDQVPLWWHGIURPWKHDFFHVVSRLQW7KHKLJKHUWKHWUDQVPLVVLRQ
SRZHUWKHIDUWKHUWKHWUDQVPLVVLRQUDQJH3RZHUVHOHFWLRQLV
QRWMXVWDWUDGHRIIEHWZHHQFRYHUDJHDUHDDQGPD[LPXP
VXSSRUWHGFOLHQWVa@FRPPDQGDVVKRZQRQ
Enterprise AP(config)#interface wireless a
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless a)#turbo
Enterprise AP(if-wireless a)#channel 42
Enterprise AP(if-wireless a)#transmit-power full
Enterprise AP(if-wireless a)#speed 9
Enterprise AP(if-wireless a)#antenna id 0000
Enterprise AP(if-wireless a)#antenna control right
Enterprise AP(if-wireless a)#antenna location indoor
Enterprise AP(if-wireless a)#mic_mode hardware
Enterprise AP(if-wireless a)#super-a
Enterprise AP(if-wireless a)#beacon-interval 150
Enterprise AP(if-wireless a)#beacon-interval 150
Enterprise AP(if-wireless a)#dtim-period 5
Enterprise AP(if-wireless a)#multicast-data-rate 6
Enterprise AP(if-wireless a)#fragmentation-length 512
Enterprise AP(if-wireless a)#rts-threshold 256
Enterprise AP(if-wireless a)#
7-90
7-98
7-100
7-100
7-98
7-103
7-102
7-104
7-126
7-107
7-104
7-104
7-105
7-99
7-106
7-106
&RQILJXULQJ:L)L0XOWLPHGLD
:LUHOHVVQHWZRUNVRIIHUDQHTXDORSSRUWXQLW\IRUDOOGHYLFHVWRWUDQVPLWGDWDIURP
DQ\W\SHRIDSSOLFDWLRQ$OWKRXJKWKLVLVDFFHSWDEOHIRUPRVWDSSOLFDWLRQVPXOWLPHGLD
DSSOLFDWLRQV ZLWKDXGLRDQGYLGHR DUHSDUWLFXODUO\VHQVLWLYHWRWKHGHOD\DQG
WKURXJKSXWYDULDWLRQVWKDWUHVXOWIURPWKLV³HTXDORSSRUWXQLW\´ZLUHOHVVDFFHVV
PHWKRG)RUPXOWLPHGLDDSSOLFDWLRQVWRUXQZHOORYHUDZLUHOHVVQHWZRUND4XDOLW\RI
6HUYLFH 4R6 PHFKDQLVPLVUHTXLUHGWRSULRULWL]HWUDIILFW\SHVDQGSURYLGHDQ
³HQKDQFHGRSSRUWXQLW\´ZLUHOHVVDFFHVVPHWKRG
7KHDFFHVVSRLQWLPSOHPHQWV4R6XVLQJWKH:L)L0XOWLPHGLD :00 VWDQGDUG
8VLQJ:00WKHDFFHVVSRLQWLVDEOHWRSULRULWL]HWUDIILFDQGRSWLPL]HSHUIRUPDQFH
ZKHQPXOWLSOHDSSOLFDWLRQVFRPSHWHIRUZLUHOHVVQHWZRUNEDQGZLGWKDWWKHVDPH
WLPH:00HPSOR\VWHFKQLTXHVWKDWDUHDVXEVHWRIWKHGHYHORSLQJ,(((H
4R6VWDQGDUGDQGLWHQDEOHVWKHDFFHVVSRLQWWRLQWHURSHUDWHZLWKERWK:00
HQDEOHGFOLHQWVDQGRWKHUGHYLFHVWKDWPD\ODFNDQ\:00IXQFWLRQDOLW\
$FFHVV&DWHJRULHV²:00GHILQHVIRXUDFFHVVFDWHJRULHV $&V YRLFHYLGHR
EHVWHIIRUWDQGEDFNJURXQG7KHVHFDWHJRULHVFRUUHVSRQGWRWUDIILFSULRULW\OHYHOV
DQGDUHPDSSHGWR,((('SULRULW\WDJV VHH7DEOH  7KHGLUHFWPDSSLQJRI
WKHIRXU$&VWR'SULRULWLHVLVVSHFLILFDOO\LQWHQGHGWRIDFLOLWDWHLQWHURSHUDELOLW\
ZLWKRWKHUZLUHGQHWZRUN4R6SROLFLHV:KLOHWKHIRXU$&VDUHVSHFLILHGIRUVSHFLILF
.
'  
W\SHVRIWUDIILF:00DOORZVWKHSULRULW\OHYHOVWREHFRQILJXUHGWRPDWFKDQ\
QHWZRUNZLGH4R6SROLF\:00DOVRVSHFLILHVDSURWRFROWKDWDFFHVVSRLQWVFDQXVH
WRFRPPXQLFDWHWKHFRQILJXUHGWUDIILFSULRULW\OHYHOVWR4R6HQDEOHGZLUHOHVVFOLHQWV
7DEOH :00$FFHVV&DWHJRULHV
$FFHVV&DWHJRU\ :00'HVLJQDWLRQ 'HVFULSWLRQ
'7DJV
( >4?:( ;
4 
,  $ /! +$
  4 ":4  ";/
( >4:( ;
4
,  $ /! $
    /
( >@3:( .;
@3 
6  $  
 / .$
)    /)  
   %A /
( >@B:( ;
@%  
5 & /)&    
C $   % /
  $
:002SHUDWLRQ²:00XVHVWUDIILFSULRULW\EDVHGRQWKHIRXU$&V9RLFH9LGHR
%HVW(IIRUWDQG%DFNJURXQG7KHKLJKHUWKH$&SULRULW\WKHKLJKHUWKHSUREDELOLW\
WKDWGDWDLVWUDQVPLWWHG
:KHQWKHDFFHVVSRLQWIRUZDUGVWUDIILF:00DGGVGDWDSDFNHWVWRIRXULQGHSHQGHQW
WUDQVPLWTXHXHVRQHIRUHDFK$&GHSHQGLQJRQWKH'SULRULW\WDJRIWKH
SDFNHW'DWDSDFNHWVZLWKRXWDSULRULW\WDJDUHDOZD\VDGGHGWRWKH%HVW(IIRUW$&
TXHXH)URPWKHIRXUTXHXHVDQLQWHUQDO³YLUWXDO´FROOLVLRQUHVROXWLRQPHFKDQLVP
ILUVWVHOHFWVGDWDZLWKWKHKLJKHVWSULRULW\WREHJUDQWHGDWUDQVPLWRSSRUWXQLW\7KHQ
WKHVDPHFROOLVLRQUHVROXWLRQPHFKDQLVPLVXVHGH[WHUQDOO\WRGHWHUPLQHZKLFK
GHYLFHKDVDFFHVVWRWKHZLUHOHVVPHGLXP
)RUHDFK$&TXHXHWKHFROOLVLRQUHVROXWLRQPHFKDQLVPLVGHSHQGHQWRQWZRWLPLQJ
SDUDPHWHUV
‡ $,)61 $UELWUDWLRQ,QWHU)UDPH6SDFH1XPEHU DQXPEHUXVHGWRFDOFXODWHWKH
PLQLPXPWLPHEHWZHHQGDWDIUDPHV
‡ &: &RQWHQWLRQ:LQGRZ DQXPEHUXVHGWRFDOFXODWHDUDQGRPEDFNRIIWLPH
$IWHUDFROOLVLRQGHWHFWLRQDEDFNRIIZDLWWLPHLVFDOFXODWHG7KHWRWDOZDLWWLPHLVWKH
VXPRIDPLQLPXPZDLWWLPH $UELWUDWLRQ,QWHU)UDPH6SDFHRU$,)6 GHWHUPLQHG
IURPWKH$,)61DQGDUDQGRPEDFNRIIWLPHFDOFXODWHGIURPDYDOXHVHOHFWHGIURP
]HURWRWKH&:7KH&:YDOXHYDULHVZLWKLQDFRQILJXUDEOHUDQJH,WVWDUWVDW&:0LQ
DQGGRXEOHVDIWHUHYHU\FROOLVLRQXSWRDPD[LPXPYDOXH&:0D[$IWHUD
VXFFHVVIXOWUDQVPLVVLRQWKH&:YDOXHLVUHVHWWRLWV&:0LQYDOXH



   
Tim
CWMin
riority
CWMax
AIFS
Random Backoff
Minimum Wait Time
Random Wait Time
CWMin
riority
AIFS
Random Backoff
Minimum Wait Time
Random Wait Time
)LJXUH :00%DFNRII:DLW7LPHV
)RUKLJKSULRULW\WUDIILFWKH$,)61DQG&:YDOXHVDUHVPDOOHU7KHVPDOOHUYDOXHV
HTXDWHWROHVVEDFNRIIDQGZDLWWLPHDQGWKHUHIRUHPRUHWUDQVPLWRSSRUWXQLWLHV
7RFRQILJXUH:00VHOHFWWKH5DGLR6HWWLQJVSDJHDQGVFUROOGRZQWRWKH:00
FRQILJXUDWLRQVHWWLQJV

'  
:00Âą6HWVWKH:00RSHUDWLRQDOPRGHRQWKHDFFHVVSRLQW:KHQHQDEOHGWKH
SDUDPHWHUVIRUHDFK$&TXHXHZLOOEHHPSOR\HGRQWKHDFFHVVSRLQWDQG4R6
FDSDELOLWLHVDUHDGYHUWLVHGWR:00HQDEOHGFOLHQWV 'HIDXOW6XSSRUW
‡ 'LVDEOH:00LVGLVDEOHG
‡ 6XSSRUW:00ZLOOEHXVHGIRUDQ\DVVRFLDWHGGHYLFHWKDWVXSSRUWVWKLVIHDWXUH
'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHPD\VWLOODVVRFLDWHZLWKWKHDFFHVVSRLQW
‡ 5HTXLUHG:00PXVWEHVXSSRUWHGRQDQ\GHYLFHWU\LQJWRDVVRFLDWHGZLWKWKH
DFFHVVSRLQW'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHZLOOQRWEHDOORZHGWR
DVVRFLDWHZLWKWKHDFFHVVSRLQW
:00$FNQRZOHGJH3ROLF\Âą%\GHIDXOWDOOZLUHOHVVGDWDWUDQVPLVVLRQVUHTXLUHWKH
VHQGHUWRZDLWIRUDQDFNQRZOHGJHPHQWIURPWKHUHFHLYHU:00DOORZVWKH
DFNQRZOHGJHPHQWZDLWWLPHWREHWXUQHGRIIIRUHDFK$FFHVV&DWHJRU\ $& 
$OWKRXJKWKLVLQFUHDVHVGDWDWKURXJKSXWLWFDQDOVRUHVXOWLQDKLJKQXPEHURIHUURUV
ZKHQWUDIILFOHYHOVDUHKHDY\ 'HIDXOW$FNQRZOHGJH
:00%663DUDPHWHUVÂą7KHVHSDUDPHWHUVDSSO\WRWKHZLUHOHVVFOLHQWV
:00$33DUDPHWHUVÂą7KHVHSDUDPHWHUVDSSO\WRWKHDFFHVVSRLQW
‡ ORJ&:0LQ 0LQLPXP&RQWHQWLRQ:LQGRZ ±7KHLQLWLDOXSSHUOLPLWRIWKHUDQGRP
EDFNRIIZDLWWLPHEHIRUHZLUHOHVVPHGLXPDFFHVVFDQEHDWWHPSWHG7KHLQLWLDOZDLW
WLPHLVDUDQGRPYDOXHEHWZHHQ]HURDQGWKH&:0LQYDOXH6SHFLI\WKH&:0LQ
YDOXHLQWKHUDQJHPLFURVHFRQGV1RWHWKDWWKH&:0LQYDOXHPXVWEHHTXDO
RUOHVVWKDQWKH&:0D[YDOXH
‡ ORJ&:0D[ 0D[LPXP&RQWHQWLRQ:LQGRZ ±7KHPD[LPXPXSSHUOLPLWRIWKH
UDQGRPEDFNRIIZDLWWLPHEHIRUHZLUHOHVVPHGLXPDFFHVVFDQEHDWWHPSWHG7KH
FRQWHQWLRQZLQGRZLVGRXEOHGDIWHUHDFKGHWHFWHGFROOLVLRQXSWRWKH&:0D[YDOXH
6SHFLI\WKH&:0D[YDOXHLQWKHUDQJHPLFURVHFRQGV1RWHWKDWWKH&:0D[
YDOXHPXVWEHJUHDWHURUHTXDOWRWKH&:0LQYDOXH
‡ $,)6 $UELWUDWLRQ,QWHU)UDPH6SDFH ±7KHPLQLPXPDPRXQWRIZDLWWLPHEHIRUH
WKHQH[WGDWDWUDQVPLVVLRQDWWHPSW6SHFLI\WKH$,)6YDOXHLQWKHUDQJH
 PLFURVHFRQGV
‡ 7;23/LPLW 7UDQVPLW2SSRUWXQLW\/LPLW ±7KHPD[LPXPWLPHDQ$&WUDQVPLW
TXHXHKDVDFFHVVWRWKHZLUHOHVVPHGLXP:KHQDQ$&TXHXHLVJUDQWHGD
WUDQVPLWRSSRUWXQLW\LWFDQWUDQVPLWGDWDIRUDWLPHXSWRWKH7[2S/LPLW7KLVGDWD
EXUVWLQJJUHDWO\LPSURYHVWKHHIILFLHQF\IRUKLJKGDWDUDWHWUDIILF6SHFLI\DYDOXHLQ
WKHUDQJHPLFURVHFRQGV
‡ $GPLVVLRQ&RQWURO±7KHDGPLVVLRQFRQWUROPRGHIRUWKHDFFHVVFDWHJRU\:KHQ
HQDEOHGFOLHQWVDUHEORFNHGIURPXVLQJWKHDFFHVVFDWHJRU\ 'HIDXOW'LVDEOHG 
.H\7\SH±6HH³:LUHG(TXLYDOHQW3ULYDF\ :(3 ´RQSDJH



   
&/,&RPPDQGVIRU:00Âą(QWHULQWHUIDFHZLUHOHVVPRGHDQGW\SHZPPUHTXLUHG
IRUFOLHQWVWKDWZDQWWRDVVRFLDWHZLWKWKHDFFHVVSRLQW7KH
ZPPDFNQRZOHGJHSROLF\FRPPDQGLVXVHGWRHQDEOHRUGLVDEOHDSROLF\IRUHDFK
DFFHVVFDWHJRU\7KHZPPSDUPVFRPPDQGGHILQHVGHWDLOHG:00SDUDPHWHUV
Enterprise AP(if-wireless a)#wmm required
7-137
Enterprise AP(if-wireless a)#wmm-acknowledge-policy 0 noack
7-137
Enterprise AP(if-wireless a)#wmmparams ap 0 4 6 3 1 1
7-138

'  
7RYLHZWKHFXUUHQWDUDGLRVHWWLQJVIRUWKH9$3LQWHUIDFHXVHWKHVKRZ
LQWHUIDFHZLUHOHVVD>@FRPPDQG
Enterprise AP#show interface wireless a 0
7-112
Wireless Interface Information
=============================================================
--------------------Identification--------------------------Description
: Enterprise 802.11a Access Point
SSID
: VAP_TEST_11A 0
Turbo Mode
: DISABLED
Channel
: 36 (AUTO)
Status
: DISABLED
MAC Address
: 00:12:cf:05:95:0c
----------------802.11 Parameters--------------------------Transmit Power
: FULL (16 dBm)
Max Station Data Rate
: 54Mbps
Multicast Data Rate
: 6Mbps
Fragmentation Threshold
: 2346 bytes
RTS Threshold
: 2347 bytes
Beacon Interval
: 100 TUs
Authentication Timeout Interval : 60 Mins
Association Timeout Interval
: 30 Mins
DTIM Interval
: 1 beacon
Maximum Association
: 64 stations
MIC Mode
: Software
Super A
: Disabled
VLAN ID
: 1
----------------Security------------------------------------Closed System
: Disabled
Multicast cipher
: WEP
WPA clients
: TKIP and AES
WPA Key Mgmt Mode
: PRE SHARED KEY
WPA PSK Key Type
: PASSPHRASE
Encryption
: DISABLED
Default Transmit Key
: 1
Common Static Keys
: Key 1: EMPTY
Key 2: EMPTY
Key 3: EMPTY
Key 4: EMPTY
Authentication Type
: OPEN
----------------802.1x--------------------------------------802.1x
Broadcast Key Refresh Rate
: 30 min
Session Key Refresh Rate
: 30 min
802.1x Session Timeout Value
: 0 min
----------------Antenna-------------------------------------Antenna Control method
: Diversity
Antenna ID
: 0x0000(Default Antenna)
Antenna Location
: Indoor



   
----------------Quality of Service--------------------------WMM Mode
: SUPPORTED
WMM Acknowledge Policy
AC0(Best Effort)
: Ack
AC1(Background)
: Acknowledge
AC2(Video)
: Acknowledge
AC3(Voice)
: Acknowledge
WMM BSS Parameters
AC0(Best Effort)
: logCwMin: 4 logCwMax: 10 AIFSN:
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background)
: logCwMin: 4 logCwMax: 10 AIFSN:
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video)
: logCwMin: 3 logCwMax: 4 AIFSN:
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice)
: logCwMin: 2 logCwMax: 3 AIFSN:
Admission Control: No
TXOP Limit: 1.504 ms
WMM AP Parameters
AC0(Best Effort)
: logCwMin: 4 logCwMax: 6 AIFSN:
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background)
: logCwMin: 4 logCwMax: 10 AIFSN:
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video)
: logCwMin: 3 logCwMax: 4 AIFSN:
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice)
: logCwMin: 2 logCwMax: 3 AIFSN:
Admission Control: No
TXOP Limit: 1.504 ms
=============================================================
Enterprise AP#
5DGLR6HWWLQJV* J
7KH,(((JVWDQGDUGRSHUDWHVZLWKLQWKH*+]EDQGDWXSWR0ESV
$OVRQRWHWKDWEHFDXVHWKH,(((JVWDQGDUGLVDQH[WHQVLRQRIWKH,(((
EVWDQGDUGLWDOORZVFOLHQWVZLWKEZLUHOHVVQHWZRUNFDUGVWRDVVRFLDWH
WRDQJDFFHVVSRLQW
)LUVWFRQILJXUHWKHUDGLRVHWWLQJVWKDWDSSO\WRWKHLQGLYLGXDO9$3V 9LUWXDO$FFHVV
3RLQW DQGWKHFRPPRQUDGLRVHWWLQJVWKDWDSSO\WRDOORIWKHJLQWHUIDFHV$IWHU
\RXKDYHFRQILJXUHGWKHUDGLRVHWWLQJVJRWRWKH6HFXULW\SDJHXQGHUWKHJ
,QWHUIDFH VHH³6HFXULW\´RQSDJH  HQDEOHWKHUDGLRVHUYLFHIRUDQ\RIWKH9$3
LQWHUIDFHVDQGWKHQVHWDQ66,'WRLGHQWLI\WKHZLUHOHVVQHWZRUNVHUYLFHSURYLGHGE\
HDFK9$35HPHPEHUWKDWRQO\FOLHQWVZLWKWKHVDPH66,'FDQDVVRFLDWHZLWKD
9$3
1RWH a@FRPPDQG
DVVKRZQRQ
Enterprise AP(config)#interface wireless g
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#radio-mode g
Enterprise AP(if-wireless g)#channel auto
Enterprise AP(if-wireless a)#transmit-power full
Enterprise AP(if-wireless a)#super-g
Enterprise AP(if-wireless g)#preamble short
Enterprise AP(if-wireless g)#
7-90
7-101
7-100
7-100
7-108
7-102
6HFXULW\
7KHDFFHVVSRLQWLVFRQILJXUHGE\GHIDXOWDVDQ³RSHQV\VWHP´ZKLFKEURDGFDVWVD
EHDFRQVLJQDOLQFOXGLQJWKHFRQILJXUHG66,':LUHOHVVFOLHQWVZLWKDQ66,'VHWWLQJ
RI³DQ\´FDQUHDGWKH66,'IURPWKHEHDFRQDQGDXWRPDWLFDOO\VHWWKHLU66,'WR
DOORZLPPHGLDWHFRQQHFWLRQWRWKHQHDUHVWDFFHVVSRLQW
7RLPSURYHZLUHOHVVQHWZRUNVHFXULW\\RXKDYHWRLPSOHPHQWWZRPDLQIXQFWLRQV
‡ $XWKHQWLFDWLRQ,WPXVWEHYHULILHGWKDWFOLHQWVDWWHPSWLQJWRFRQQHFWWRWKHQHWZRUN
DUHDXWKRUL]HGXVHUV
‡ 7UDIILF(QFU\SWLRQ'DWDSDVVLQJEHWZHHQWKHDFFHVVSRLQWDQGFOLHQWVPXVWEH
SURWHFWHGIURPLQWHUFHSWLRQDQGHDYHVGURSSLQJ
)RUDPRUHVHFXUHQHWZRUNWKHDFFHVVSRLQWFDQLPSOHPHQWRQHRUDFRPELQDWLRQRI
WKHIROORZLQJVHFXULW\PHFKDQLVPV
‡
‡
‡
‡
:LUHG(TXLYDOHQW3ULYDF\ :(3
,(((;
:LUHOHVV0$&DGGUHVVILOWHULQJ
:L)L3URWHFWHG$FFHVV :3$RU:3$
SDJH
SDJH
SDJH
SDJH
%RWK:(3DQG:3$VHFXULW\VHWWLQJVDUHFRQILJXUDEOHVHSDUDWHO\IRUHDFKYLUWXDO
DFFHVVSRLQW 9$3 LQWHUIDFH0$&DGGUHVVILOWHULQJDQG5$',86VHUYHUVHWWLQJV
DUHJOREDODQGDSSO\WRDOO9$3LQWHUIDFHV
7KHVHFXULW\PHFKDQLVPVWKDWPD\EHHPSOR\HGGHSHQGRQWKHOHYHORIVHFXULW\
UHTXLUHGWKHQHWZRUNDQGPDQDJHPHQWUHVRXUFHVDYDLODEOHDQGWKHVRIWZDUH
VXSSRUWSURYLGHGRQZLUHOHVVFOLHQWV
9


   
$VXPPDU\RIZLUHOHVVVHFXULW\FRQVLGHUDWLRQVLVOLVWHGLQWKHIROORZLQJWDEOH
7DEOH :LUHOHVV6HFXULW\&RQVLGHUDWLRQV
6HFXULW\
0HFKDQLVP
&OLHQW6XSSRUW
,PSOHPHQWDWLRQ&RQVLGHUDWLRQV
73"
@    -./
-./ 
D "  &% 
D 'C  % 
73" -./0 'C -./0   D " %    73"
  &
 
:   7 & D 'C    '()*
..." 7 & D -./03("C   
0";
   
1( (
2
* 1(   D "  &%    
& %
D 1    E1( 
D  &      
 
D ?    '()*
7"( -./0 'C 7"( D "    7"(  
1 
& %
://$ 7"( ;
:   
D ?     73"$ & 
7 &0";
 %://$73"   
%;
D 'C    '()*
D -./03("C   
   
7"("B1 
'C 7"( D "   & %
& %
D 'C     %
:   
7 &0";
7"(& -./0 'C 7"( D "     7"( 
& %:
 
   7 &
D "    =  7"(
0";
7"(
D ?     
 
D 'C    '()*
D -./03("C   
   
D C  &   7"(
 
7"("B1  'C 7"( D "    & %
& %: D 'C     %
   7 &
D C  &   7"(
0";
 
1RWH @
FRPPDQGIURPWKH([HFPRGH
+
'  
Enterprise AP(config)#interface wireless g
7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#key 1 128 ascii abcdeabcdeabc
7-123
Enterprise AP(if-wireless g)#vap 0
7-97
Enterprise AP(if-wireless g: VAP[0])#auth shared-key
7-123
Data Encryption is set to enabled.
Remember to set the share key using "key" command.
Enterprise AP(if-wireless g: VAP[0])#transmit-key 1
7-124
Enterprise AP(if-wireless g: VAP[0])#exit
Enterprise AP#show interface wireless g 0
7-112
Wireless Interface Information
========================================================================
----------------Identification-----------------------------------------Description
: Enterprise 802.11g Access Point
SSID
: VAP_TEST_11G 0
Channel
: 11 (AUTO)
Status
: DISABLED
MAC Address
: 00:12:cf:05:95:08
----------------802.11 Parameters---------------------------------------Radio Mode
: b & g mixed mode
Transmit Power
: FULL (5 dBm)
Max Station Data Rate
: 54Mbps
Multicast Data Rate
: 5.5Mbps
Fragmentation Threshold
: 2346 bytes
RTS Threshold
: 2347 bytes
Beacon Interval
: 100 TUs
Authentication Timeout Interval : 60 Mins
Association Timeout Interval
: 30 Mins
DTIM Interval
: 1 beacon
Preamble Length
: SHORT-OR-LONG
Maximum Association
: 64 stations
MIC Mode
: Software
Super G
: Disabled
VLAN ID
: 1
----------------Security-----------------------------------------------Closed System
: Disabled
Multicast cipher
: WEP
Unicast cipher
: TKIP and AES
WPA clients
: DISABLED
WPA Key Mgmt Mode
: PRE SHARED KEY
WPA PSK Key Type
: PASSPHRASE
WPA PSK Key
: EMPTY
PMKSA Lifetime
: 720 minutes
Encryption
: ENABLED
Default Transmit Key
: 1
Common Static Keys
: Key 1: EMPTY
Key 2: EMPTY
Key 3: EMPTY
Key 4: EMPTY
Pre-Authentication
: DISABLED
Authentication Type
: SHARED
----------------802.1x-------------------------------------------------802.1x
: DISABLED
Broadcast Key Refresh Rate
: 30 min
Session Key Refresh Rate
: 30 min
802.1x Session Timeout Value
: 0 min
++


   
----------------Antenna------------------------------------------------Antenna Control method
: Diversity
Antenna ID
: 0x0000(Default Antenna)
Antenna Location
: Indoor
----------------Quality of Service--------------------------------------WMM Mode
: SUPPORTED
WMM Acknowledge Policy
AC0(Best Effort)
: Acknowledge
AC1(Background)
: Acknowledge
AC2(Video)
: Acknowledge
AC3(Voice)
: Acknowledge
WMM BSS Parameters
AC0(Best Effort)
: logCwMin: 4 logCwMax: 10 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background)
: logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video)
: logCwMin: 3 logCwMax: 4 AIFSN: 2
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice)
: logCwMin: 2 logCwMax: 3 AIFSN: 2
Admission Control: No
TXOP Limit: 1.504 ms
WMM AP Parameters
AC0(Best Effort)
: logCwMin: 4 logCwMax: 6 AIFSN: 3
Admission Control: No
TXOP Limit: 0.000 ms
AC1(Background)
: logCwMin: 4 logCwMax: 10 AIFSN: 7
Admission Control: No
TXOP Limit: 0.000 ms
AC2(Video)
: logCwMin: 3 logCwMax: 4 AIFSN: 1
Admission Control: No
TXOP Limit: 3.008 ms
AC3(Voice)
: logCwMin: 2 logCwMax: 3 AIFSN: 1
Admission Control: No
TXOP Limit: 1.504 ms
========================================================================
Enterprise AP#
&/,&RPPDQGVIRU:(3RYHU;6HFXULW\Âą8VHWKHYDSFRPPDQGWRDFFHVV
HDFK9$3LQWHUIDFHWRFRQILJXUHWKHVHFXULW\VHWWLQJV)LUVWVHW;WRUHTXLUHG
XVLQJWKH[FRPPDQGDQGVHWWKH;NH\UHIUHVKUDWHV7KHQXVHWKH
DXWKFRPPDQGWRVHOHFWRSHQV\VWHPDXWKHQWLFDWLRQDQGWKHHQFU\SWLRQFRPPDQG
+-
'  
WRHQDEOHGDWDHQFU\SWLRQ7RYLHZWKHFXUUHQWVHFXULW\VHWWLQJVXVHWKHVKRZ
LQWHUIDFHZLUHOHVVD>@RUVKRZLQWHUIDFHZLUHOHVVJ>@FRPPDQG QRW
VKRZQLQH[DPSOH 
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#802.1X required
Enterprise AP(if-wireless g: VAP[0])#802.1X
broadcast-key-refresh-rate 5
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-key-refresh-rate 5
Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300
Enterprise AP(if-wireless g: VAP[0])#auth open-system
Enterprise AP(if-wireless g: VAP[0])#encryption
Enterprise AP(if-wireless g: VAP[0])#
7-66
7-67
7-68
7-68
7-123
7-122
:L)L3URWHFWHG$FFHVV :3$
:3$HPSOR\VDFRPELQDWLRQRIVHYHUDOWHFKQRORJLHVWRSURYLGHDQHQKDQFHG
VHFXULW\VROXWLRQIRUZLUHOHVVQHWZRUNV
7KHDFFHVVSRLQWVXSSRUWVWKHIROORZLQJ:3$FRPSRQHQWVDQGIHDWXUHV
,(((;DQGWKH([WHQVLEOH$XWKHQWLFDWLRQ3URWRFRO ($3 :3$HPSOR\V
;DVLWVEDVLFIUDPHZRUNIRUXVHUDXWKHQWLFDWLRQDQGG\QDPLFNH\
PDQDJHPHQW7KH;FOLHQWDQG5$',86VHUYHUVKRXOGXVHDQDSSURSULDWH($3
W\SH²VXFKDV($37/6 7UDQVSRUW/D\HU6HFXULW\ ($377/6 7XQQHOHG7/6 RU
3($3 3URWHFWHG($3 ²IRUVWURQJHVWDXWKHQWLFDWLRQ:RUNLQJWRJHWKHUWKHVH
SURWRFROVSURYLGH³PXWXDODXWKHQWLFDWLRQ´EHWZHHQDFOLHQWWKHDFFHVVSRLQWDQGD
5$',86VHUYHUWKDWSUHYHQWVXVHUVIURPDFFLGHQWDOO\MRLQLQJDURJXHQHWZRUN2QO\
ZKHQD5$',86VHUYHUKDVDXWKHQWLFDWHGDXVHUÂśVFUHGHQWLDOVZLOOHQFU\SWLRQNH\V
EHVHQWWRWKHDFFHVVSRLQWDQGFOLHQW
1RWH 7RLPSOHPHQW:3$RQZLUHOHVVFOLHQWVUHTXLUHVD:3$HQDEOHGQHWZRUNFDUG
GULYHUDQG;FOLHQWVRIWZDUHWKDWVXSSRUWVWKH($3DXWKHQWLFDWLRQW\SHWKDW
\RXZDQWWRXVH:LQGRZV;3SURYLGHVQDWLYH:3$VXSSRUWRWKHUV\VWHPV
UHTXLUHDGGLWLRQDOVRIWZDUH
7HPSRUDO.H\,QWHJULW\3URWRFRO 7.,3 :3$VSHFLILHV7.,3DVWKHGDWD
HQFU\SWLRQPHWKRGWRUHSODFH:(37.,3DYRLGVWKHSUREOHPVRI:(3VWDWLFNH\VE\
G\QDPLFDOO\FKDQJLQJGDWDHQFU\SWLRQNH\V%DVLFDOO\7.,3VWDUWVZLWKDPDVWHU
WHPSRUDO NH\IRUHDFKXVHUVHVVLRQDQGWKHQPDWKHPDWLFDOO\JHQHUDWHVRWKHUNH\V
WRHQFU\SWHDFKGDWDSDFNHW7.,3SURYLGHVIXUWKHUGDWDHQFU\SWLRQHQKDQFHPHQWV
E\LQFOXGLQJDPHVVDJHLQWHJULW\FKHFNIRUHDFKSDFNHWDQGDUHNH\LQJPHFKDQLVP
ZKLFKSHULRGLFDOO\FKDQJHVWKHPDVWHUNH\
:3$3UH6KDUHG.H\0RGH :3$36.:3$36. )RUHQWHUSULVHGHSOR\PHQW
:3$UHTXLUHVD5$',86DXWKHQWLFDWLRQVHUYHUWREHFRQILJXUHGRQWKHZLUHG
QHWZRUN+RZHYHUIRUVPDOORIILFHQHWZRUNVWKDWPD\QRWKDYHWKHUHVRXUFHVWR
FRQILJXUHDQGPDLQWDLQD5$',86VHUYHU:3$SURYLGHVDVLPSOHRSHUDWLQJPRGH
WKDWXVHVMXVWDSUHVKDUHGSDVVZRUGIRUQHWZRUNDFFHVV7KH3UH6KDUHG.H\
PRGHXVHVDFRPPRQSDVVZRUGIRUXVHUDXWKHQWLFDWLRQWKDWLVPDQXDOO\HQWHUHGRQ
+9


   
WKHDFFHVVSRLQWDQGDOOZLUHOHVVFOLHQWV7KH36.PRGHXVHVWKHVDPH7.,3SDFNHW
HQFU\SWLRQDQGNH\PDQDJHPHQWDV:3$LQWKHHQWHUSULVHSURYLGLQJDUREXVWDQG
PDQDJHDEOHDOWHUQDWLYHIRUVPDOOQHWZRUNV
0L[HG:3$DQG:(3&OLHQW6XSSRUW:3$HQDEOHVWKHDFFHVVSRLQWWRLQGLFDWHLWV
VXSSRUWHGHQFU\SWLRQDQGDXWKHQWLFDWLRQPHFKDQLVPVWRFOLHQWVXVLQJLWVEHDFRQ
VLJQDO:3$FRPSDWLEOHFOLHQWVFDQOLNHZLVHUHVSRQGWRLQGLFDWHWKHLU:3$VXSSRUW
7KLVHQDEOHVWKHDFFHVVSRLQWWRGHWHUPLQHZKLFKFOLHQWVDUHXVLQJ:3$VHFXULW\
DQGZKLFKDUHXVLQJOHJDF\:(37KHDFFHVVSRLQWXVHV7.,3XQLFDVWGDWD
HQFU\SWLRQNH\VIRU:3$FOLHQWVDQG:(3XQLFDVWNH\VIRU:(3FOLHQWV7KHJOREDO
HQFU\SWLRQNH\IRUPXOWLFDVWDQGEURDGFDVWWUDIILFPXVWEHWKHVDPHIRUDOOFOLHQWV
WKHUHIRUHLWUHVWULFWVHQFU\SWLRQWRD:(3NH\
:KHQDFFHVVLVRSHQHGWRERWK:3$DQG:(3FOLHQWVQRDXWKHQWLFDWLRQLVSURYLGHG
IRUWKH:(3FOLHQWVWKURXJKVKDUHGNH\V7RVXSSRUWDXWKHQWLFDWLRQIRU:(3FOLHQWV
LQWKLVPL[HGPRGHFRQILJXUDWLRQ\RXFDQXVHHLWKHU0$&DXWKHQWLFDWLRQRU;
DXWKHQWLFDWLRQ
:3$Âą:3$ZDVLQWURGXFHGDVDQLQWHULPVROXWLRQIRUWKHYXOQHUDELOLW\RI:(3
SHQGLQJWKHUDWLILFDWLRQRIWKH,(((LZLUHOHVVVHFXULW\VWDQGDUG,QHIIHFWWKH
:3$VHFXULW\IHDWXUHVDUHDVXEVHWRIWKHLVWDQGDUG:3$LQFOXGHVWKHQRZ
UDWLILHGLVWDQGDUGEXWDOVRRIIHUVEDFNZDUGFRPSDWLELOLW\ZLWK:3$
7KHUHIRUH:3$LQFOXGHVWKHVDPH;DQG36.PRGHVRIRSHUDWLRQDQG
VXSSRUWIRU7.,3HQFU\SWLRQ7KHPDLQGLIIHUHQFHVDQGHQKDQFHPHQWVLQ:3$FDQ
EHVXPPDUL]HGDVIROORZV
‡ $GYDQFHG(QFU\SWLRQ6WDQGDUG $(6 :3$XVHV$(6&RXQWHU0RGH
HQFU\SWLRQZLWK&LSKHU%ORFN&KDLQLQJ0HVVDJH$XWKHQWLFDWLRQ&RGH &%&0$& 
IRUPHVVDJHLQWHJULW\7KH$(6&RXQWHU0RGH&%&0$&3URWRFRO $(6&&03 
SURYLGHVH[WUHPHO\UREXVWGDWDFRQILGHQWLDOLW\XVLQJDELWNH\7KH$(6&&03
HQFU\SWLRQFLSKHULVVSHFLILHGDVDVWDQGDUGUHTXLUHPHQWIRU:3$+RZHYHUWKH
FRPSXWDWLRQDOLQWHQVLYHRSHUDWLRQVRI$(6&&03UHTXLUHVKDUGZDUHVXSSRUWRQ
FOLHQWGHYLFHV7KHUHIRUHWRLPSOHPHQW:3$LQWKHQHWZRUNZLUHOHVVFOLHQWVPXVW
EHXSJUDGHGWR:3$FRPSOLDQWKDUGZDUH
‡ :3$0L[HG0RGH:3$GHILQHVDWUDQVLWLRQDOPRGHRIRSHUDWLRQIRUQHWZRUNV
PRYLQJIURP:3$VHFXULW\WR:3$:3$0L[HG0RGHDOORZVERWK:3$DQG
:3$FOLHQWVWRDVVRFLDWHWRDFRPPRQ66,'LQWHUIDFH,QPL[HGPRGHWKHXQLFDVW
HQFU\SWLRQFLSKHU 7.,3RU$(6&&03 LVQHJRWLDWHGIRUHDFKFOLHQW7KHDFFHVV
SRLQWDGYHUWLVHVLWVVXSSRUWHGHQFU\SWLRQFLSKHUVLQEHDFRQIUDPHVDQGSUREH
UHVSRQVHV:3$DQG:3$FOLHQWVVHOHFWWKHFLSKHUWKH\VXSSRUWDQGUHWXUQWKH
FKRLFHLQWKHDVVRFLDWLRQUHTXHVWWRWKHDFFHVVSRLQW)RUPL[HGPRGHRSHUDWLRQ
WKHFLSKHUXVHGIRUEURDGFDVWIUDPHVLVDOZD\V7.,3:(3HQFU\SWLRQLVQRW
DOORZHG
‡ .H\&DFKLQJ:3$SURYLGHVIDVWURDPLQJIRUDXWKHQWLFDWHGFOLHQWVE\UHWDLQLQJ
NH\VDQGRWKHUVHFXULW\LQIRUPDWLRQLQDFDFKHVRWKDWLIDFOLHQWURDPVDZD\IURP
DQDFFHVVSRLQWDQGWKHQUHWXUQVUHDXWKHQWLFDWLRQLVQRWUHTXLUHG:KHQD:3$
FOLHQWLVILUVWDXWKHQWLFDWHGLWUHFHLYHVD3DLUZLVH0DVWHU.H\ 30. WKDWLVXVHGWR
JHQHUDWHRWKHUNH\VIRUXQLFDVWGDWDHQFU\SWLRQ7KLVNH\DQGRWKHUFOLHQW
-.
'  
LQIRUPDWLRQIRUPD6HFXULW\$VVRFLDWLRQWKDWWKHDFFHVVSRLQWQDPHVDQGKROGVLQ
DFDFKH
‡ 3UHDXWKHQWLFDWLRQ(DFKWLPHDFOLHQWURDPVWRDQRWKHUDFFHVVSRLQWLWKDVWREH
IXOO\UHDXWKHQWLFDWHG7KLVDXWKHQWLFDWLRQSURFHVVLVWLPHFRQVXPLQJDQGFDQ
GLVUXSWDSSOLFDWLRQVUXQQLQJRYHUWKHQHWZRUN:3$LQFOXGHVDPHFKDQLVP
NQRZQDVSUHDXWKHQWLFDWLRQWKDWDOORZVFOLHQWVWRURDPWRDQHZDFFHVVSRLQWDQG
EHTXLFNO\DVVRFLDWHG7KHILUVWWLPHDFOLHQWLVDXWKHQWLFDWHGWRDZLUHOHVVQHWZRUN
LWKDVWREHIXOO\DXWKHQWLFDWHG:KHQWKHFOLHQWLVDERXWWRURDPWRDQRWKHUDFFHVV
SRLQWLQWKHQHWZRUNWKHDFFHVVSRLQWVHQGVSUHDXWKHQWLFDWLRQPHVVDJHVWRWKH
QHZDFFHVVSRLQWWKDWLQFOXGHWKHFOLHQWÂśVVHFXULW\DVVRFLDWLRQLQIRUPDWLRQ7KHQ
ZKHQWKHFOLHQWVHQGVDQDVVRFLDWLRQUHTXHVWWRWKHQHZDFFHVVSRLQWWKHFOLHQWLV
NQRZQWREHDOUHDG\DXWKHQWLFDWHGVRLWSURFHHGVGLUHFWO\WRNH\H[FKDQJHDQG
DVVRFLDWLRQ
7RFRQILJXUH:3$FOLFN6HFXULW\XQGHU5DGLR$RU5DGLR*6HOHFWRQHRIWKH9$3
LQWHUIDFHVE\FOLFNLQJ0RUH6HOHFWRQHRIWKH:3$RSWLRQVLQWKH$XWKHQWLFDWLRQ
6HWXSWDEOHDQGWKHQFRQILJXUHWKHSDUDPHWHUVGLVSOD\HGEHQHDWKWKHWDEOH
-


   
7KH:3$FRQILJXUDWLRQSDUDPHWHUVDUHGHVFULEHGEHORZ
(QFU\SWLRQÂą@RUVKRZLQWHUIDFH
ZLUHOHVVJ>@FRPPDQG QRWVKRZQLQH[DPSOH 
Enterprise AP(config)#interface wireless g
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key
passphrase-key agoodsecret
Enterprise AP(if-wireless g: VAP[0])#auth wpa-psk required
Data Encryption is set to Enabled.
WPA2 Clients Mode is set to Disabled.
WPA Clients Mode is set to Required.
WPA Multicast Cipher is set to TKIP.
WPA Unicast Cipher can accept TKIP only.
WPA Authentication is set to Pre-Shared Key.
Enterprise AP(if-wireless g: VAP[0])#
7-90
7-127
-


   
&/,&RPPDQGVIRU:3$2YHU;6HFXULW\Âą)URPWKH9$3LQWHUIDFH
FRQILJXUDWLRQPRGHXVHWKHDXWKZSDUHTXLUHGFRPPDQGWRVHOHFW:3$RYHU
;VHFXULW\7KHQVHWWKH;NH\UHIUHVKUDWHV7RYLHZWKHFXUUHQWVHFXULW\
VHWWLQJVXVHWKHVKRZLQWHUIDFHZLUHOHVVD>@RUVKRZLQWHUIDFHZLUHOHVVJ
>@FRPPDQG QRWVKRZQLQH[DPSOH 
Enterprise AP(config)#interface wireless g
7-90
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#auth wpa required
Data Encryption is set to Enabled.
WPA2 Clients mode is set to Disabled.
WPA Clients Mode is set to Required.
WPA Multicast Cipher is set to TKIP.
WPA Unicast Cipher can accept TKIP only.
WPA Authentication is set to 802.1X Required.
Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-key-refresh-rate 5
7-67
Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300
7-68
Enterprise AP(if-wireless g: VAP[0])#
&RQILJXULQJ;
,(((;LVDVWDQGDUGIUDPHZRUNIRUQHWZRUNDFFHVVFRQWUROWKDWXVHVDFHQWUDO
5$',86VHUYHUIRUXVHUDXWKHQWLFDWLRQ7KLVFRQWUROIHDWXUHSUHYHQWVXQDXWKRUL]HG
DFFHVVWRWKHQHWZRUNE\UHTXLULQJDQ;FOLHQWDSSOLFDWLRQWRVXEPLWXVHU
FUHGHQWLDOVIRUDXWKHQWLFDWLRQ7KH;VWDQGDUGXVHVWKH([WHQVLEOH
$XWKHQWLFDWLRQ3URWRFRO ($3 WRSDVVXVHUFUHGHQWLDOV HLWKHUGLJLWDOFHUWLILFDWHV
XVHUQDPHVDQGSDVVZRUGVRURWKHU IURPWKHFOLHQWWRWKH5$',86VHUYHU&OLHQW
DXWKHQWLFDWLRQLVWKHQYHULILHGRQWKH5$',86VHUYHUEHIRUHWKHDFFHVVSRLQWJUDQWV
FOLHQWDFFHVVWRWKHQHWZRUN
7KH;($3SDFNHWVDUHDOVRXVHGWRSDVVG\QDPLFXQLFDVWVHVVLRQNH\VDQG
VWDWLFEURDGFDVWNH\VWRZLUHOHVVFOLHQWV6HVVLRQNH\VDUHXQLTXHWRHDFKFOLHQWDQG
DUHXVHGWRHQFU\SWDQGFRUUHODWHWUDIILFSDVVLQJEHWZHHQDVSHFLILFFOLHQWDQGWKH
DFFHVVSRLQW next. 

previous. Enterprise AP#configure Enter configuration commands, Enterprise AP(config)#logging Enterprise AP# 9 7-34 802.11g:11g Radio Interface Enabled 802.11g:Radio channel updated to 8 802.11g:11g Radio Interface Enabled 802.11g:11g Radio Interface Enabled 802.11a:11a Radio Interface Enabled SSH task: Set SSH server port to 22 SSH task: Enable SSH server. Enable Telnet. 802.11a:11a Radio Interface Disabled 802.11a:Transmit Power set to QUARTER abort. continue to end : one per line. End with CTRL/Z clear 7-33     6736WDWXV 7KH6736WDWXVZLQGRZVKRZVWKH673VWDWXVIRUHDFKSRUW ‡ ‡ ‡ ‡ ‡ ,''LVSOD\VWKHSRUW,'QXPEHU 3ULRULW\7KHSULRULW\GHVLJQDWHGWRWKHVSHFLILHGSRUW 3DWK&RVW'LVSOD\VWKHSDWKFRVWYDOXHIRUWKHVSHFLILHGSRUW 6WDWXV'LVSOD\VLI673LVHQDEOHGRUGLVDEOHGIRUWKHVSHFLILHGSRUW 6WDWH'LVSOD\WKH673VWDWHIRUWKHVSHFLILHGSRUW 9   9     Chapter 7: Command Line Interface Using the Command Line Interface $FFHVVLQJWKH&/, :KHQDFFHVVLQJWKHPDQDJHPHQWLQWHUIDFHIRUWKHRYHUDGLUHFWFRQQHFWLRQWRWKH FRQVROHSRUWRUYLDD7HOQHWFRQQHFWLRQWKHDFFHVVSRLQWFDQEHPDQDJHGE\ HQWHULQJFRPPDQGNH\ZRUGVDQGSDUDPHWHUVDWWKHSURPSW8VLQJWKHDFFHVV SRLQW¶VFRPPDQGOLQHLQWHUIDFH &/, LVYHU\VLPLODUWRHQWHULQJFRPPDQGVRQD 81,;V\VWHP &RQVROH&RQQHFWLRQ 7RDFFHVVWKHDFFHVVSRLQWWKURXJKWKHFRQVROHSRUWSHUIRUPWKHVHVWHSV  $WWKHFRQVROHSURPSWHQWHUWKHXVHUQDPHDQGSDVVZRUG 7KHGHIDXOWXVHU QDPHLV³DGPLQ´DQGWKHGHIDXOWSDVVZRUGLV³VPFDGPLQ´ :KHQWKHXVHUQDPH LVHQWHUHGWKH&/,GLVSOD\VWKH³(QWHUSULVH$3´SURPSW  (QWHUWKHQHFHVVDU\FRPPDQGVWRFRPSOHWH\RXUGHVLUHGWDVNV  :KHQILQLVKHGH[LWWKHVHVVLRQZLWKWKH³H[LW´FRPPDQG $IWHUFRQQHFWLQJWRWKHV\VWHPWKURXJKWKHFRQVROHSRUWWKHORJLQVFUHHQGLVSOD\V Username: admin Password: Enterprise AP# &DXWLRQ&RPPDQGH[DPSOHVVKRZQODWHULQWKLVFKDSWHUDEEUHYLDWHWKHFRQVROHSURPSW WR³$3´IRUVLPSOLFLW\ 7HOQHW&RQQHFWLRQ 7HOQHWRSHUDWHVRYHUWKH,3WUDQVSRUWSURWRFRO,QWKLVHQYLURQPHQW\RXU PDQDJHPHQWVWDWLRQDQGDQ\QHWZRUNGHYLFH\RXZDQWWRPDQDJHRYHUWKHQHWZRUN PXVWKDYHDYDOLG,3DGGUHVV9DOLG,3DGGUHVVHVFRQVLVWRIIRXUQXPEHUVWR VHSDUDWHGE\SHULRGV(DFKDGGUHVVFRQVLVWVRIDQHWZRUNSRUWLRQDQGKRVWSRUWLRQ )RUH[DPSOHLIWKHDFFHVVSRLQWFDQQRWDFTXLUHDQ,3DGGUHVVIURPD'+&3VHUYHU WKHGHIDXOW,3DGGUHVVXVHGE\WKHDFFHVVSRLQWFRQVLVWVRIDQHWZRUN SRUWLRQ  DQGDKRVWSRUWLRQ   7RDFFHVVWKHDFFHVVSRLQWWKURXJKD7HOQHWVHVVLRQ\RXPXVWILUVWVHWWKH,3 DGGUHVVIRUWKHDFFHVVSRLQWDQGVHWWKHGHIDXOWJDWHZD\LI\RXDUHPDQDJLQJWKH DFFHVVSRLQWIURPDGLIIHUHQW,3VXEQHW)RUH[DPSOH Enterprise Enterprise Enterprise Enterprise AP#configure AP(config)#interface ethernet AP(if-ethernet)#ip address 10.1.0.1 255.255.255.0 10.1.0.254 AP(if-ethernet)# +  5  ,I\RXUFRUSRUDWHQHWZRUNLVFRQQHFWHGWRDQRWKHUQHWZRUNRXWVLGH\RXURIILFHRUWR WKH,QWHUQHW\RXQHHGWRDSSO\IRUDUHJLVWHUHG,3DGGUHVV+RZHYHULI\RXDUH DWWDFKHGWRDQLVRODWHGQHWZRUNWKHQ\RXFDQXVHDQ\,3DGGUHVVWKDWPDWFKHVWKH QHWZRUNVHJPHQWWRZKLFK\RXDUHDWWDFKHG $IWHU\RXFRQILJXUHWKHDFFHVVSRLQWZLWKDQ,3DGGUHVV\RXFDQRSHQD7HOQHW VHVVLRQE\SHUIRUPLQJWKHVHVWHSV  )URPWKHUHPRWHKRVWHQWHUWKH7HOQHWFRPPDQGDQGWKH,3DGGUHVVRIWKH GHYLFH\RXZDQWWRDFFHVV  $WWKHSURPSWHQWHUWKHXVHUQDPHDQGV\VWHPSDVVZRUG7KH&/,ZLOOGLVSOD\ WKH³(QWHUSULVH$3´SURPSWWRVKRZWKDW\RXDUHXVLQJH[HFXWLYHDFFHVVPRGH LH([HF   (QWHUWKHQHFHVVDU\FRPPDQGVWRFRPSOHWH\RXUGHVLUHGWDVNV  :KHQILQLVKHGH[LWWKHVHVVLRQZLWKWKH³TXLW´RU³H[LW´FRPPDQG $IWHUHQWHULQJWKH7HOQHWFRPPDQGWKHORJLQVFUHHQGLVSOD\V Username: admin Password: Enterprise AP# &DXWLRQ Enterprise AP#show interface +  5  3DUWLDO.H\ZRUG/RRNXS ,I\RXWHUPLQDWHDSDUWLDONH\ZRUGZLWKDTXHVWLRQPDUNDOWHUQDWLYHVWKDWPDWFKWKH LQLWLDOOHWWHUVDUHSURYLGHG 5HPHPEHUQRWWROHDYHDVSDFHEHWZHHQWKHFRPPDQG DQGTXHVWLRQPDUN )RUH[DPSOH³V"´VKRZVDOOWKHNH\ZRUGVVWDUWLQJZLWK³V´ Enterprise AP#show s? snmp sntp station Enterprise AP#show s system 1HJDWLQJWKH(IIHFWRI&RPPDQGV )RUPDQ\FRQILJXUDWLRQFRPPDQGV\RXFDQHQWHUWKHSUHIL[NH\ZRUG³QR´WRFDQFHO WKHHIIHFWRIDFRPPDQGRUUHVHWWKHFRQILJXUDWLRQWRWKHGHIDXOWYDOXH)RUH[DPSOH WKHORJJLQJFRPPDQGZLOOORJV\VWHPPHVVDJHVWRDKRVWVHUYHU7RGLVDEOH ORJJLQJVSHFLI\WKHQRORJJLQJFRPPDQG7KLVJXLGHGHVFULEHVWKHQHJDWLRQHIIHFW IRUDOODSSOLFDEOHFRPPDQGV 8VLQJ&RPPDQG+LVWRU\ 7KH&/,PDLQWDLQVDKLVWRU\RIFRPPDQGVWKDWKDYHEHHQHQWHUHG: y VKRZKLVWRU\ 7KLVFRPPDQGVKRZVWKHFRQWHQWVRIWKHFRPPDQGKLVWRU\EXIIHU 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ([HF &RPPDQG8VDJH ‡ 7KHKLVWRU\EXIIHUVL]HLVIL[HGDWFRPPDQGV ‡ 8VHWKHXSRUGRZQDUURZNH\VWRVFUROOWKURXJKWKHFRPPDQGVLQWKH KLVWRU\EXIIHU ([DPSOH ,QWKLVH[DPSOHWKHVKRZKLVWRU\FRPPDQGOLVWVWKHFRQWHQWVRIWKHFRPPDQG KLVWRU\EXIIHU Enterprise AP#show history config exit show history Enterprise AP# +. 1   VKRZOLQH 7KLVFRPPDQGGLVSOD\VWKHFRQVROHSRUW¶VFRQILJXUDWLRQVHWWLQJV &RPPDQG0RGH ([HF ([DPSOH 7KHFRQVROHSRUWVHWWLQJVDUHIL[HGDWWKHYDOXHVVKRZQEHORZ Enterprise AP#show line Console Line Information ====================================================== databits : 8 parity : none speed : 9600 stop bits : 1 ====================================================== Enterprise AP# System Management Commands 7KHVHFRPPDQGVDUHXVHGWRFRQILJXUHWKHXVHUQDPHSDVVZRUGV\VWHPORJV EURZVHUPDQDJHPHQWRSWLRQVFORFNVHWWLQJVDQGDYDULHW\RIRWKHUV\VWHP LQIRUPDWLRQ 7DEOH 6\VWHP0DQDJHPHQW&RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH    ))       E           + +      +         + + + 0DQDJHPHQW$FFHVV         &    &      3     3 +          3 +  3 !  3 ++ (" "  "    &      + (" * 3 61"$! &   + 3= +  &("   & ("      + 1   &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#system name AP Enterprise AP(config)# XVHUQDPH 7KLVFRPPDQGFRQILJXUHVWKHXVHUQDPHIRUPDQDJHPHQWDFFHVV 6\QWD[ XVHUQDPHQDPH! QDPH7KHQDPHRIWKHXVHU /HQJWKFKDUDFWHUVFDVHVHQVLWLYH 'HIDXOW6HWWLQJ DGPLQ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#username bob Enterprise AP(config)# SDVVZRUG $IWHULQLWLDOO\ORJJLQJRQWRWKHV\VWHP\RXVKRXOGVHWWKHSDVVZRUG5HPHPEHUWR UHFRUGLWLQDVDIHSODFH8VHWKHQRIRUPWRUHVHWWKHGHIDXOWSDVVZRUG 6\QWD[ SDVVZRUGSDVVZRUG! QRSDVVZRUG SDVVZRUG3DVVZRUGIRUPDQDJHPHQWDFFHVV /HQJWKFKDUDFWHUVFDVHVHQVLWLYH  'HIDXOW6HWWLQJ VPFDGPLQ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#password Enterprise AP(config)# +2  5  LSVVKVHUYHUHQDEOH 7KLVFRPPDQGHQDEOHVWKH6HFXUH6KHOOVHUYHU8VHWKHQRIRUPWRGLVDEOHWKH VHUYHU 6\QWD[ LSVVKVHUYHUHQDEOH QRLSVVKVHUYHU 'HIDXOW6HWWLQJ ,QWHUIDFHHQDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ (WKHUQHW &RPPDQG8VDJH ‡ 7KHDFFHVVSRLQWVXSSRUWV6HFXUH6KHOOYHUVLRQRQO\ ‡ $IWHUERRWXSWKH66+VHUYHUQHHGVDERXWWZRPLQXWHVWRJHQHUDWHKRVW HQFU\SWLRQNH\V7KH66+VHUYHULVGLVDEOHGZKLOHWKHNH\VDUHEHLQJ JHQHUDWHG7KHVKRZV\VWHPFRPPDQGGLVSOD\VWKHVWDWXVRIWKH66+ VHUYHU ([DPSOH Enterprise AP(if-ethernet)#ip ssh-server enable Enterprise AP(if-ethernet)# LSVVKVHUYHUSRUW 7KLVFRPPDQGVHWVWKH6HFXUH6KHOOVHUYHUSRUW8VHWKHQRIRUPWRGLVDEOHWKH VHUYHU 6\QWD[ LSVVKVHUYHUSRUWSRUWQXPEHU! ‡ SRUWQXPEHU7KH8'3SRUWXVHGE\WKH66+VHUYHU 5DQJH  'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ (WKHUQHW ([DPSOH Enterprise AP(if-ethernet)#ip ssh-server port 1124 Enterprise AP(if-ethernet)# +3 1   LSWHOQHWVHUYHUHQDEOH 7KLVFRPPDQGHQDEOHVWKH7HOQHWVHUYHU8VHWKHQRIRUPWRGLVDEOHWKHVHUYHU 6\QWD[ LSWHOQHWVHUYHUHQDEOH QRLSWHOQHWVHUYHU 'HIDXOW6HWWLQJ ,QWHUIDFHHQDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ (WKHUQHW ([DPSOH Enterprise AP(if-ethernet)#ip telnet-server enable Enterprise AP(if-ethernet)# LSKWWSSRUW 7KLVFRPPDQGVSHFLILHVWKH7&3SRUWQXPEHUXVHGE\WKHZHEEURZVHULQWHUIDFH 8VHWKHQRIRUPWRXVHWKHGHIDXOWSRUW 6\QWD[ LSKWWSSRUWSRUWQXPEHU! QRLSKWWSSRUW SRUWQXPEHU7KH7&3SRUWWREHXVHGE\WKHEURZVHULQWHUIDFH 5DQJH  'HIDXOW6HWWLQJ  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#ip http port 769 Enterprise AP(config)# 5HODWHG&RPPDQGV LSKWWSVHUYHU  +4  5  LSKWWSVHUYHU 7KLVFRPPDQGDOORZVWKLVGHYLFHWREHPRQLWRUHGRUFRQILJXUHGIURPDEURZVHU8VH WKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ 6\QWD[ LSKWWSVHUYHU QRLSKWWSVHUYHU 'HIDXOW6HWWLQJ (QDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#ip http server Enterprise AP(config)# 5HODWHG&RPPDQGV LSKWWSSRUW  LSKWWSVHVVLRQWLPHRXW 7KLVFRPPDQGVHWVWKHWLPHOLPLWIRUDQLGOHZHELQWHUIDFHVHVVLRQ 6\QWD[ LSKWWSVHVVLRQWLPHRXWWLPH! WLPH6HWVWKHZHELQWHUIDFHVHVVLRQWLPHRXW 5DQJHVHFRQGVPHDQVGLVDEOHG 'HIDXOW6HWWLQJ VHFRQGV &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#ip http session-timeout 0 Enterprise AP(config)# 5HODWHG&RPPDQGV LSKWWSSRUW  +5 1   LSKWWSVSRUW 8VHWKLVFRPPDQGWRVSHFLI\WKH8'3SRUWQXPEHUXVHGIRU+773666/FRQQHFWLRQ WRWKHDFFHVVSRLQW¶V:HELQWHUIDFH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOWSRUW 6\QWD[ LSKWWSVSRUWSRUWBQXPEHU! QRLSKWWSVSRUW SRUWBQXPEHU±7KH8'3SRUWXVHGIRU+773666/ 5DQJH 'HIDXOW6HWWLQJ  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ QR@ZHEUHGLUHFW 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KHZHEUHGLUHFWIHDWXUHLVXVHGWRVXSSRUWELOOLQJIRUDSXEOLFDFFHVV ZLUHOHVVQHWZRUN$IWHUVXFFHVVIXODVVRFLDWLRQWRDQDFFHVVSRLQWDFOLHQWLV ³UHGLUHFWHG´WRDQDFFHVVSRLQWORJLQZHESDJHDVVRRQDV,QWHUQHWDFFHVVLV +17 1   DWWHPSWHG7KHFOLHQWLVWKHQDXWKHQWLFDWHGE\HQWHULQJDXVHUQDPHDQG SDVVZRUGRQWKHZHESDJH7KLVSURFHVVDOORZVFRQWUROOHGDFFHVVIRUFOLHQWV ZLWKRXWUHTXLULQJ;RU0$&DXWKHQWLFDWLRQ ‡ :HEUHGLUHFWUHTXLUHVD5$',86VHUYHURQWKHZLUHGQHWZRUNZLWKFRQILJXUHG XVHUQDPHVDQGSDVVZRUGVIRUDXWKHQWLFDWLRQ7KH5$',86VHUYHUGHWDLOV PXVWDOVREHFRQILJXUHGRQWKHDFFHVVSRLQW 6HH³VKRZERRWILOH´RQ SDJH  ‡ 8VHWKHVKRZV\VWHPFRPPDQGWRGLVSOD\WKHFXUUHQWZHEUHGLUHFWVWDWXV ([DPSOH Enterprise AP(config)#web-redirect Enterprise AP(config)# $3PJPW,3 7KLVFRPPDQGVSHFLILHVWKHFOLHQW,3DGGUHVVHVWKDWDUHDOORZHGPDQDJHPHQW DFFHVVWRWKHDFFHVVSRLQWWKURXJKYDULRXVSURWRFROV &DXWLRQ6HFXUH:HE +7736 FRQQHFWLRQVDUHQRWDIIHFWHGE\WKH8,0DQDJHPHQWRU ,30DQDJHPHQWVHWWLQJV 6\QWD[ $3PJPW,3PXOWLSOH,3BDGGUHVVVXEQHWBPDVN_VLQJOH,3BDGGUHVV_DQ\! ‡ PXOWLSOH$GGV,3DGGUHVVHVZLWKLQDVSHFLILDEOHUDQJHWRWKH6103ZHE DQG7HOQHWJURXSV ‡ VLQJOH$GGVDQ,3DGGUHVVWRWKH6103ZHEDQG7HOQHWJURXSV ‡ DQ\$OORZVDQ\,3DGGUHVVDFFHVVWKURXJK6103ZHEDQG7HOQHW JURXSV ‡ ,3BDGGUHVV$GGV,3DGGUHVVHVWRWKH6103ZHEDQG7HOQHWJURXSV ‡ VXEQHWBPDVN6SHFLILHVDUDQJHRI,3DGGUHVVHVDOORZHGPDQDJHPHQW DFFHVV 'HIDXOW6HWWLQJ $OODGGUHVVHV &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ ,IDQ\RQHWULHVWRDFFHVVDPDQDJHPHQWLQWHUIDFHRQWKHDFFHVVSRLQWIURP DQLQYDOLGDGGUHVVWKHXQLWZLOOUHMHFWWKHFRQQHFWLRQHQWHUDQHYHQW PHVVDJHLQWKHV\VWHPORJDQGVHQGDWUDSPHVVDJHWRWKHWUDSPDQDJHU ‡ ,3DGGUHVVFDQEHFRQILJXUHGIRU6103ZHEDQG7HOQHWDFFHVV UHVSHFWLYHO\(DFKRIWKHVHJURXSVFDQLQFOXGHXSWRILYHGLIIHUHQWVHWVRI DGGUHVVHVHLWKHULQGLYLGXDODGGUHVVHVRUDGGUHVVUDQJHV ‡ :KHQHQWHULQJDGGUHVVHVIRUWKHVDPHJURXS LH6103ZHERU7HOQHW  +18  5  WKHDFFHVVSRLQWZLOOQRWDFFHSWRYHUODSSLQJDGGUHVVUDQJHV:KHQHQWHULQJ DGGUHVVHVIRUGLIIHUHQWJURXSVWKHDFFHVVSRLQWZLOODFFHSWRYHUODSSLQJ DGGUHVVUDQJHV ‡ 6103_7HOQHW_:HE@HQDEOH_GLVDEOH! ‡ 61036SHFLILHV6103PDQDJHPHQWDFFHVV ‡ 7HOQHW6SHFLILHV7HOQHWPDQDJHPHQWDFFHVV ‡ :HE6SHFLILHVZHEEDVHGPDQDJHPHQWDFFHVV  HQDEOHGLVDEOH(QDEOHVRUGLVDEOHVWKHVHOHFWHGPDQDJHPHQWDFFHVV PHWKRG 'HIDXOW6HWWLQJ $OOHQDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH 7KLVH[DPSOHUHVWULFWVPDQDJHPHQWDFFHVVWRWKHLQGLFDWHGDGGUHVVHV Enterprise AP(config)#apmgmtui SNMP enable Enterprise AP(config)# VKRZDSPDQDJHPHQW 7KLVFRPPDQGVKRZVWKH$3PDQDJHPHQWFRQILJXUDWLRQLQFOXGLQJWKH,3 DGGUHVVHVRIPDQDJHPHQWVWDWLRQVDOORZHGWRDFFHVVWKHDFFHVVSRLQWDVZHOODV WKHLQWHUIDFHSURWRFROVZKLFKDUHRSHQWRPDQDJHPHQWDFFHVV +19 1   &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show apmanagement Management AP Information ================================= AP Management IP Mode: Any IP Telnet UI: Enable WEB UI : Enable SNMP UI : Enable ================================== Enterprise AP# +0  5  VKRZV\VWHP 7KLVFRPPDQGGLVSOD\VEDVLFV\VWHPFRQILJXUDWLRQVHWWLQJV 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show system System Information ========================================================== Serial Number : A123456789 System Up time : 0 days, 4 hours, 33 minutes, 29 seconds System Name : Enterprise Wireless AP System Location System Contact System Country Code : US - UNITED STATES MAC Address : 00-30-F1-F0-9A-9C IP Address : 192.168.1.1 Subnet Mask : 255.255.255.0 Default Gateway : 0.0.0.0 VLAN State : DISABLED Management VLAN ID(AP): 1 IAPP State : ENABLED DHCP Client : ENABLED HTTP Server : ENABLED HTTP Server Port : 80 HTTPS Server : ENABLED HTTPS Server Port : 443 Slot Status : Dual band(a/g) Boot Rom Version : v3.0.3 Software Version : v4.3.1.9 SSH Server : ENABLED SSH Server Port : 22 Telnet Server : ENABLED WEB Redirect : DISABLED DHCP Relay : DISABLED Proxy ARP : DISABLED ========================================================== Enterprise AP# +1 1   VKRZYHUVLRQ 7KLVFRPPDQGGLVSOD\VWKHVRIWZDUHYHUVLRQIRUWKHV\VWHP &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show version Version Information ========================================= Version: v4.3.2.2 Date : Dec 20 2005, 18:38:12 ========================================= Enterprise AP# VKRZFRQILJ 7KLVFRPPDQGGLVSOD\VGHWDLOHGFRQILJXUDWLRQLQIRUPDWLRQIRUWKHV\VWHP &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show config Authentication Information =========================================================== MAC Authentication Server : DISABLED MAC Auth Session Timeout Value : 0 min 802.1x supplicant : DISABLED 802.1x supplicant user : EMPTY 802.1x supplicant password : EMPTY Address Filtering : ALLOWED System Default : ALLOW addresses not found in filter table. Filter Table ----------------------------------------------------------No Filter Entries. Bootfile Information =================================== Bootfile : ec-img.bin =================================== Protocol Filter Information =========================================================== Local Bridge :DISABLED AP Management :ENABLED Ethernet Type Filter :DISABLED Enabled Protocol Filters ----------------------------------------------------------No protocol filters are enabled =========================================================== +2  5  Hardware Version Information =========================================== Hardware version R01A =========================================== Ethernet Interface Information ======================================== IP Address : 192.168.0.151 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.0.1 Primary DNS : 210.200.211.225 Secondary DNS : 210.200.211.193 Speed-duplex : 100Base-TX Full Duplex Admin status : Up Operational status : Up ======================================== Wireless Interface 802.11a Information =========================================================== ----------------Identification----------------------------Description : Enterprise 802.11a Access Point SSID : VAP_TEST_11A 0 Channel : 0 (AUTO) Status : Disable ----------------802.11 Parameters-------------------------Transmit Power : 100% (5 dBm) Data Rate : 54Mbps Fragmentation Threshold : 2346 bytes RTS Threshold : 2347 bytes Beacon Interval : 100 TUs DTIM Interval : 1 beacon Maximum Association : 64 stations Native VLAN ID : 1 ----------------Security----------------------------------Closed System : DISABLED Multicast cipher : WEP Unicast cipher : TKIP and AES WPA clients : REQUIRED WPA Key Mgmt Mode : PRE SHARED KEY WPA PSK Key Type : ALPHANUMERIC Encryption : DISABLED Default Transmit Key : 1 Static Keys : Key 1: EMPTY Key 2: EMPTY Key 3: EMPTY Key 4: EMPTY Key Length : Key 1: ZERO Key 2: ZERO Key 3: ZERO Key 4: ZERO Authentication Type : OPEN Rogue AP Detection : Disabled Rogue AP Scan Interval : 720 minutes Rogue AP Scan Duration : 350 milliseconds =========================================================== Console Line Information =========================================================== databits : 8 parity : none speed : 9600 stop bits : 1 =========================================================== +3 1   Logging Information ===================================================== Syslog State : Disabled Logging Console State : Disabled Logging Level : Informational Logging Facility Type : 16 Servers 1: 0.0.0.0 , UDP Port: 514, State: Disabled 2: 0.0.0.0 , UDP Port: 514, State: Disabled 3: 0.0.0.0 , UDP Port: 514, State: Disabled 4: 0.0.0.0 , UDP Port: 514, State: Disabled ====================================================== Radius Server Information ======================================== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ======================================== Radius Secondary Server Information ======================================== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ======================================== SNMP Information ============================================== Service State : Disable Community (ro) : ******** Community (rw) : ******** Location Contact : Contact EngineId :80:00:07:e5:80:00:00:29:f6:00:00:00:0c EngineBoots:2 Trap Destinations: 1: 0.0.0.0, 2: 0.0.0.0, 3: 0.0.0.0, 4: 0.0.0.0, Community: Community: Community: Community: *****, *****, *****, *****, State: State: State: State: Disabled Disabled Disabled Disabled +4  5  dot11InterfaceAGFail dot11StationAssociation dot11StationReAssociation dot1xAuthFail dot1xAuthSuccess dot1xMacAddrAuthSuccess iappStationRoamedFrom localMacAddrAuthFail pppLogonFail configFileVersionChanged systemDown Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled dot11InterfaceBFail dot11StationAuthentication dot11StationRequestFail dot1xAuthNotInitiated dot1xMacAddrAuthFail iappContextDataSent iappStationRoamedTo localMacAddrAuthSuccess sntpServerFail radiusServerChanged systemUp ============================================= SNTP Information =========================================================== Service State : Disabled SNTP (server 1) IP : 137.92.140.80 SNTP (server 2) IP : 192.43.244.18 Current Time : 00 : 14, Jan 1st, 1970 Time Zone : -5 (BOGOTA, EASTERN, INDIANA) Daylight Saving : Disabled =========================================================== Station Table Information =========================================================== if-wireless A VAP [0] 802.11a Channel : Auto No 802.11a Channel Stations. if-wireless G VAP [0] 802.11g Channel : Auto No 802.11g Channel Stations. System Information ============================================================== Serial Number System Up time : 0 days, 0 hours, 16 minutes, 51 seconds System Name : Enterprise Wireless AP System Location System Contact : Contact System Country Code : 99 - NO_COUNTRY_SET MAC Address : 00-12-CF-05-B7-84 IP Address : 192.168.0.151 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.0.1 VLAN State : DISABLED Management VLAN ID(AP): 1 IAPP State : ENABLED DHCP Client : ENABLED HTTP Server : ENABLED HTTP Server Port : 80 HTTPS Server : ENABLED HTTPS Server Port : 443 Slot Status : Dual band(a/g) Boot Rom Version : v3.0.7 Software Version : v4.3.2.2 +5 Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled 5    SSH Server : ENABLED SSH Server Port : 22 Telnet Server : ENABLED WEB Redirect : DISABLED DHCP Relay : DISABLED ============================================================== Version Information ========================================= Version: v4.3.2.2 Date : Dec 20 2005, 18:38:12 ========================================= Enterprise AP# VKRZKDUGZDUH 7KLVFRPPDQGGLVSOD\VWKHKDUGZDUHYHUVLRQRIWKHV\VWHP &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show hardware Hardware Version Information =========================================== Hardware version R01 =========================================== Enterprise AP# System Logging Commands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‡ ‡ ‡ ‡ ‡ ‡ ‡ )LUVWV\VORJVHUYHU 6HFRQGV\VORJVHUYHU 7KLUGV\VORJVHUYHU )RXUWKV\VORJVHUYHU KRVWBQDPH7KHQDPHRIDV\VORJVHUYHU 5DQJHFKDUDFWHUV KRVWBLSBDGGUHVV7KH,3DGGUHVVRIDV\VORJVHUYHU XGSBSRUW7KH8'3SRUWXVHGE\WKHV\VORJVHUYHU 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ +27 5    ([DPSOH Enterprise AP(config)#logging host 1 10.1.0.3 Enterprise AP(config)# ORJJLQJFRQVROH 7KLVFRPPDQGLQLWLDWHVORJJLQJRIHUURUPHVVDJHVWRWKHFRQVROH8VHWKHQRIRUP WRGLVDEOHORJJLQJWRWKHFRQVROH 6\QWD[ ORJJLQJFRQVROH QRORJJLQJFRQVROH 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#logging console Enterprise AP(config)# ORJJLQJOHYHO 7KLVFRPPDQGVHWVWKHPLQLPXPVHYHULW\OHYHOIRUHYHQWORJJLQJ 6\QWD[ ORJJLQJOHYHO(PHUJHQF\_$OHUW_&ULWLFDO_(UURU_:DUQLQJ_1RWLFH_ ,QIRUPDWLRQDO_'HEXJ! 'HIDXOW6HWWLQJ ,QIRUPDWLRQDO &RPPDQG0RGH *OREDO&RQILJXUDWLRQ +28  5  &RPPDQG8VDJH 0HVVDJHVVHQWLQFOXGHWKHVHOHFWHGOHYHOGRZQWR(PHUJHQF\OHYHO /HYHO$UJXPHQW 'HVFULSWLRQ 3     (      :/ /$   $       =  ; 3  3   :/ /$ $   ; 7 7   :/ /$  $ = ; 6  6      $            ) )    ([DPSOH Enterprise AP(config)#logging level alert Enterprise AP(config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nterprise AP(config)#logging facility 19 Enterprise AP(config)# ORJJLQJFOHDU 7KLVFRPPDQGFOHDUVDOOORJPHVVDJHVVWRUHGLQWKHDFFHVVSRLQW¶VPHPRU\ 6\QWD[ ORJJLQJFOHDU &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#logging clear Enterprise AP(config)# VKRZORJJLQJ 7KLVFRPPDQGGLVSOD\VWKHORJJLQJFRQILJXUDWLRQ 6\QWD[ VKRZORJJLQJ &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show logging Logging Information ============================================ Syslog State : Enabled Logging Console State : Enabled Logging Level : Alert Logging Facility Type : 16 Servers 1: 192.168.1.19, UDP Port: 514, State: Enabled 2: 0.0.0.0, UDP Port: 514, State: Disabled 3: 0.0.0.0, UDP Port: 514, State: Disabled 4: 0.0.0.0, UDP Port: 514, State: Disabled ============================================= Enterprise AP# +0  5  VKRZHYHQWORJ 7KLVFRPPDQGGLVSOD\VORJPHVVDJHVVWRUHGLQWKHDFFHVVSRLQW¶VPHPRU\ 6\QWD[ VKRZHYHQWORJ &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show event-log Mar 09 11:57:55 Information: Mar 09 11:57:55 Information: Mar 09 11:57:34 Information: Mar 09 11:57:18 Information: Mar 09 11:56:35 Information: Mar 09 11:55:52 Information: Mar 09 11:55:52 Information: Mar 09 11:55:52 Information: Mar 09 11:55:40 Information: Mar 09 11:55:40 Information: Press next.

previous. Enterprise AP#configure Enter configuration commands, Enterprise AP(config)#logging 802.11g:11g Radio Interface Enabled 802.11g:Radio channel updated to 8 802.11g:11g Radio Interface Enabled 802.11g:11g Radio Interface Enabled 802.11a:11a Radio Interface Enabled SSH task: Set SSH server port to 22 SSH task: Enable SSH server. Enable Telnet. 802.11a:11a Radio Interface Disabled 802.11a:Transmit Power set to QUARTER abort. continue to end : one per line. End with CTRL/Z clear System Clock Commands 7KHVHFRPPDQGVDUHXVHGWRFRQILJXUH6173DQGV\VWHPFORFNVHWWLQJVRQWKH DFFHVVSRLQW 7DEOH 6\VWHP&ORFN&RPPDQGV &RPPDQG )XQFWLRQ 0RGH        (     +  1   +         ++ E   E    R % ++  &  & 6!"      3= +- +1 3DJH +   %  VQWSVHUYHULS 7KLVFRPPDQGVHWVWKH,3DGGUHVVRIWKHVHUYHUVWRZKLFK6173WLPHUHTXHVWVDUH LVVXHG8VHWKHWKLVFRPPDQGZLWKQRDUJXPHQWVWRFOHDUDOOWLPHVHUYHUVIURPWKH FXUUHQWOLVW 6\QWD[ VQWSVHUYHULS_!LS! ‡ )LUVWWLPHVHUYHU ‡ 6HFRQGWLPHVHUYHU ‡ LS,3DGGUHVVRIDQWLPHVHUYHU 173RU6173  'HIDXOW6HWWLQJ   &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH :KHQ6173FOLHQWPRGHLVHQDEOHGXVLQJWKHVQWSVHUYHUHQDEOHFRPPDQG WKHVQWSVHUYHULSFRPPDQGVSHFLILHVWKHWLPHVHUYHUVIURPZKLFKWKHDFFHVV SRLQWSROOVIRUWLPHXSGDWHV7KHDFFHVVSRLQWZLOOSROOWKHWLPHVHUYHUVLQWKH RUGHUVSHFLILHGXQWLODUHVSRQVHLVUHFHLYHG ([DPSOH Enterprise AP(config)#sntp-server ip 10.1.0.19 Enterprise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nterprise AP(config)#sntp-server enable Enterprise AP(config)# 5HODWHG&RPPDQGV VQWSVHUYHULS  VKRZVQWS  VQWSVHUYHUGDWHWLPH 7KLVFRPPDQGVHWVWKHV\VWHPFORFN 'HIDXOW6HWWLQJ -DQXDU\ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH 7KLVH[DPSOHVHWVWKHV\VWHPFORFNWR-XQH Enterprise AP#sntp-server date-time Enter Year<1970-2100>: 2003 Enter Month<1-12>: 6 Enter Day<1-31>: 19 Enter Hour<0-23>: 17 Enter Min<0-59>: 37 Enterprise AP# 5HODWHG&RPPDQGV VQWSVHUYHUHQDEOH  +3   %  VQWSVHUYHUGD\OLJKWVDYLQJ 7KLVFRPPDQGVHWVWKHVWDUWDQGHQGGDWHVIRUGD\OLJKWVDYLQJVWLPH8VHWKHQR IRUPWRGLVDEOHGD\OLJKWVDYLQJVWLPH 6\QWD[ VQWSVHUYHUGD\OLJKWVDYLQJ QRVQWSVHUYHUGD\OLJKWVDYLQJ 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KHFRPPDQGVHWVWKHV\VWHPFORFNEDFNRQHKRXUGXULQJWKHVSHFLILHG SHULRG ([DPSOH 7KLVVHWVGD\OLJKWVDYLQJVWLPHWREHXVHGIURP-XO\VWWR6HSWHPEHUVW Enterprise AP(config)#sntp-server daylight-saving Enter Daylight saving from which month<1-12>: 6 and which day<1-31>: 1 Enter Daylight saving end to which month<1-12>: 9 and which day<1-31>: 1 Enterprise AP(config)# VQWSVHUYHUWLPH]RQH 7KLVFRPPDQGVHWVWKHWLPH]RQHIRUWKHDFFHVVSRLQW¶VLQWHUQDOFORFN 6\QWD[ VQWSVHUYHUWLPH]RQHKRXUV! KRXUV1XPEHURIKRXUVEHIRUHDIWHU87& 5DQJHWRKRXUV 'HIDXOW6HWWLQJ  %2*27$($67(51,1',$1$ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ +4  5  &RPPDQG8VDJH 7KLVFRPPDQGVHWVWKHORFDOWLPH]RQHUHODWLYHWRWKH&RRUGLQDWHG8QLYHUVDO 7LPH 87&IRUPHUO\*UHHQZLFK0HDQ7LPHRU*07 EDVHGRQWKHHDUWK¶V SULPHPHULGLDQ]HURGHJUHHVORQJLWXGH7RGLVSOD\DWLPHFRUUHVSRQGLQJWR \RXUORFDOWLPH\RXPXVWLQGLFDWHWKHQXPEHURIKRXUVDQGPLQXWHV\RXUWLPH ]RQHLVHDVW EHIRUH RUZHVW DIWHU RI87& ([DPSOH Enterprise AP(config)#sntp-server timezone +8 Enterprise AP(config)# VKRZVQWS 7KLVFRPPDQGGLVSOD\VWKHFXUUHQWWLPHDQGFRQILJXUDWLRQVHWWLQJVIRUWKH6173 FOLHQW &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show sntp SNTP Information ========================================================= Service State : Enabled SNTP (server 1) IP : 137.92.140.80 SNTP (server 2) IP : 192.43.244.18 Current Time : 08 : 04, Jun 20th, 2003 Time Zone : +8 (TAIPEI, BEIJING) Daylight Saving : Enabled, from Jun, 1st to Sep, 1st ========================================================= Enterprise AP# +5 ), "'  DHCP Relay Commands '\QDPLF+RVW&RQILJXUDWLRQ3URWRFRO '+&3 FDQG\QDPLFDOO\DOORFDWHDQ,3 DGGUHVVDQGRWKHUFRQILJXUDWLRQLQIRUPDWLRQWRQHWZRUNFOLHQWVWKDWEURDGFDVWD UHTXHVW7RUHFHLYHWKHEURDGFDVWUHTXHVWWKH'+&3VHUYHUZRXOGQRUPDOO\KDYHWR EHRQWKHVDPHVXEQHWDVWKHFOLHQW+RZHYHUZKHQWKHDFFHVVSRLQW¶V'+&3UHOD\ DJHQWLVHQDEOHGUHFHLYHGFOLHQWUHTXHVWVFDQEHIRUZDUGHGGLUHFWO\E\WKHDFFHVV SRLQWWRDNQRZQ'+&3VHUYHURQDQRWKHUVXEQHW5HVSRQVHVIURPWKH'+&3 VHUYHUDUHUHWXUQHGWRWKHDFFHVVSRLQWZKLFKWKHQEURDGFDVWVWKHPEDFNWRFOLHQWV 7DEOH '+&35HOD\&RPPDQGV &RPPDQG )XQFWLRQ 0RGH   3 ), "  3DJH +9     ), "  +.  &   & ), "      3= +. GKFSUHOD\HQDEOH 7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQW¶V'+&3UHOD\DJHQW8VHWKHQRIRUPWR GLVDEOHWKHDJHQW 6\QWD[ >QR@GKFSUHOD\HQDEOH 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ )RUWKH'+&3UHOD\DJHQWWRIXQFWLRQWKHSULPDU\'+&3VHUYHUPXVWEH FRQILJXUHGXVLQJWKHGKFSUHOD\SULPDU\FRPPDQG$VHFRQGDU\'+&3 VHUYHUGRHVQRWQHHGWREHFRQILJXUHGEXWLWLVUHFRPPHQGHG ‡ ,IWKHUHLVQRUHVSRQVHIURPWKHSULPDU\'+&3VHUYHUDQGDVHFRQGDU\ VHUYHUKDVEHHQFRQILJXUHGWKHDJHQWZLOOWKHQDWWHPSWWRVHQG'+&3 UHTXHVWVWRWKHVHFRQGDU\VHUYHU ([DPSOH Enterprise AP(config)#dhcp-relay enable Enterprise AP(config)# +6  5  GKFSUHOD\ 7KLVFRPPDQGFRQILJXUHVWKHSULPDU\DQGVHFRQGDU\'+&3VHUYHUDGGUHVVHV 6\QWD[ GKFSUHOD\SULPDU\_VHFRQGDU\!LSBDGGUHVV! ‡ SULPDU\7KHSULPDU\'+&3VHUYHU ‡ VHFRQGDU\7KHVHFRQGDU\'+&3VHUYHU ‡ LSBDGGUHVV,3DGGUHVVRIWKHVHUYHU 'HIDXOW6HWWLQJ 3ULPDU\DQGVHFRQGDU\ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#dhcp-relay primary 192.168.1.10 Enterprise AP(config)# VKRZGKFSUHOD\ 7KLVFRPPDQGGLVSOD\VWKHFXUUHQW'+&3UHOD\FRQILJXUDWLRQ &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show dhcp-relay DHCP Relay : ENABLED Primary DHCP Server : 192.168.1.10 Secondary DHCP Server : 0.0.0.0 Enterprise AP# +37 61"  SNMP Commands &RQWUROVDFFHVVWRWKLVDFFHVVSRLQWIURPPDQDJHPHQWVWDWLRQVXVLQJWKH6LPSOH 1HWZRUN0DQDJHPHQW3URWRFRO 6103 DVZHOODVWKHKRVWVWKDWZLOOUHFHLYHWUDS PHVVDJHV 7DEOH 6103&RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH           <  61"  +      +         +  361" +      61"      +  3 61"    +     ) 61" +      61"  ++     61"     +9     61"     +.    ( 61"       +  &   )  61"   3= +  &  )61"   3= +  &    )     61"   3= +  &  ) 61"     3= +  &  ) 61"     3= +  &   ) 61"      3= +  & )   61"    3= + +38  5  VQPSVHUYHUFRPPXQLW\ 7KLVFRPPDQGGHILQHVWKHFRPPXQLW\DFFHVVVWULQJIRUWKH6LPSOH1HWZRUN 0DQDJHPHQW3URWRFRO8VHWKHQRIRUPWRUHPRYHWKHVSHFLILHGFRPPXQLW\VWULQJ 6\QWD[ VQPSVHUYHUFRPPXQLW\VWULQJ>UR_UZ@ QRVQPSVHUYHUFRPPXQLW\VWULQJ ‡ VWULQJ&RPPXQLW\VWULQJWKDWDFWVOLNHDSDVVZRUGDQGSHUPLWVDFFHVVWR WKH6103SURWRFRO 0D[LPXPOHQJWKFKDUDFWHUVFDVHVHQVLWLYH ‡ UR6SHFLILHVUHDGRQO\DFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHRQO\ DEOHWRUHWULHYH0,%REMHFWV ‡ UZ6SHFLILHVUHDGZULWHDFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHDEOH WRERWKUHWULHYHDQGPRGLI\0,%REMHFWV 'HIDXOW6HWWLQJ ‡ SXEOLF5HDGRQO\DFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHRQO\DEOH WRUHWULHYH0,%REMHFWV ‡ SULYDWH5HDGZULWHDFFHVV$XWKRUL]HGPDQDJHPHQWVWDWLRQVDUHDEOHWR ERWKUHWULHYHDQGPRGLI\0,%REMHFWV &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ,I\RXHQWHUDFRPPXQLW\VWULQJZLWKRXWWKHURRUUZRSWLRQWKHGHIDXOWLVUHDG RQO\ ([DPSOH Enterprise AP(config)#snmp-server community alpha rw Enterprise AP(config)# VQPSVHUYHUFRQWDFW 7KLVFRPPDQGVHWVWKHV\VWHPFRQWDFWVWULQJ8VHWKHQRIRUPWRUHPRYHWKH V\VWHPFRQWDFWLQIRUPDWLRQ 6\QWD[ VQPSVHUYHUFRQWDFWVWULQJ QRVQPSVHUYHUFRQWDFW VWULQJ6WULQJWKDWGHVFULEHVWKHV\VWHPFRQWDFW 0D[LPXP OHQJWK  FKDUDFWHUV 'HIDXOW6HWWLQJ 1RQH +39 61"  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#snmp-server contact Paul Enterprise AP(config)# 5HODWHG&RPPDQGV VQPSVHUYHUORFDWLRQ  VQPSVHUYHUORFDWLRQ 7KLVFRPPDQGVHWVWKHV\VWHPORFDWLRQVWULQJ8VHWKHQRIRUPWRUHPRYHWKH ORFDWLRQVWULQJ 6\QWD[ VQPSVHUYHUORFDWLRQWH[W! QRVQPSVHUYHUORFDWLRQ WH[W6WULQJWKDWGHVFULEHVWKHV\VWHPORFDWLRQ 0D[LPXP OHQJWK  FKDUDFWHUV 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#snmp-server location WC-19 Enterprise AP(config)# 5HODWHG&RPPDQGV VQPSVHUYHUFRQWDFW  VQPSVHUYHUHQDEOHVHUYHU 7KLVFRPPDQGHQDEOHV6103PDQDJHPHQWDFFHVVDQGDOVRHQDEOHVWKLVGHYLFHWR VHQG6103WUDSV LHQRWLILFDWLRQV 8VHWKHQRIRUPWRGLVDEOH6103VHUYLFHDQG WUDSPHVVDJHV 6\QWD[ VQPSVHUYHUHQDEOHVHUYHU QRVQPSVHUYHUHQDEOHVHUYHU 'HIDXOW6HWWLQJ (QDEOHG +0  5  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KLVFRPPDQGHQDEOHVERWKDXWKHQWLFDWLRQIDLOXUHQRWLILFDWLRQVDQG OLQNXSGRZQQRWLILFDWLRQV ‡ 7KHVQPSVHUYHUKRVWFRPPDQGVSHFLILHVWKHKRVWGHYLFHWKDWZLOOUHFHLYH 6103QRWLILFDWLRQV ([DPSOH Enterprise AP(config)#snmp-server enable server Enterprise AP(config)# 5HODWHG&RPPDQGV VQPSVHUYHUKRVW  VQPSVHUYHUKRVW 7KLVFRPPDQGVSHFLILHVWKHUHFLSLHQWRIDQ6103QRWLILFDWLRQ8VHWKHQRIRUPWR UHPRYHWKHVSHFLILHGKRVW 6\QWD[ VQPSVHUYHUKRVW___!KRVWBLSBDGGUHVV_KRVWBQDPH! FRPPXQLW\VWULQJ! QRVQPSVHUYHUKRVW ‡ ‡ ‡ ‡ ‡ ‡ ‡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nterprise AP(config)#snmp-server host 1 10.1.19.23 batman Enterprise AP(config)# 5HODWHG&RPPDQGV VQPSVHUYHUHQDEOHVHUYHU  VQPSVHUYHUWUDS 7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQWWRVHQGVSHFLILF6103WUDSV LH QRWLILFDWLRQV 8VHWKHQRIRUPWRGLVDEOHVSHFLILFWUDSPHVVDJHV 6\QWD[ VQPSVHUYHUWUDSWUDS! QRVQPSVHUYHUWUDSWUDS! ‡ WUDS2QHRIWKHIROORZLQJ6103WUDSPHVVDJHV  GRW,QWHUIDFH$*)DLO7KHDRUJLQWHUIDFHKDVIDLOHG  GRW,QWHUIDFH%)DLO7KHELQWHUIDFHKDVIDLOHG  GRW6WDWLRQ$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\DVVRFLDWHG ZLWKWKHDFFHVVSRLQW  GRW6WDWLRQ$XWKHQWLFDWLRQ$FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\ DXWKHQWLFDWHG  GRW6WDWLRQ5H$VVRFLDWLRQ$FOLHQWVWDWLRQKDVVXFFHVVIXOO\ UHDVVRFLDWHGZLWKWKHDFFHVVSRLQW  GRW6WDWLRQ5HTXHVW)DLO$FOLHQWVWDWLRQKDVIDLOHGDVVRFLDWLRQ UHDVVRFLDWLRQRUDXWKHQWLFDWLRQ  GRW[$XWK)DLO$;FOLHQWVWDWLRQKDVIDLOHG5$',86 DXWKHQWLFDWLRQ  GRW[$XWK1RW,QLWLDWHG$FOLHQWVWDWLRQGLGQRWLQLWLDWH; DXWKHQWLFDWLRQ  GRW[$XWK6XFFHVV$;FOLHQWVWDWLRQKDVEHHQVXFFHVVIXOO\ DXWKHQWLFDWHGE\WKH5$',86VHUYHU  GRW[0DF$GGU$XWK)DLO$FOLHQWVWDWLRQKDVIDLOHG0$&DGGUHVV DXWKHQWLFDWLRQZLWKWKH5$',86VHUYHU  GRW[0DF$GGU$XWK6XFFHVV$FOLHQWVWDWLRQKDVVXFFHVVIXOO\ DXWKHQWLFDWHGLWV0$&DGGUHVVZLWKWKH5$',86VHUYHU  LDSS&RQWH[W'DWD6HQW$FOLHQWVWDWLRQ¶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¶VFRQILJXUDWLRQILOH KDVEHHQFKDQJHG  V\V5DGLXV6HUYHU&KDQJHG7KHDFFHVVSRLQWKDVFKDQJHGIURPWKH SULPDU\5$',86VHUYHUWRWKHVHFRQGDU\RUIURPWKHVHFRQGDU\WRWKH SULPDU\  V\V6\VWHP'RZQ7KHDFFHVVSRLQWLVDERXWWRVKXWGRZQDQGUHERRW  V\V6\VWHP8S7KHDFFHVVSRLQWLVXSDQGUXQQLQJ 'HIDXOW6HWWLQJ $OOWUDSVHQDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KLVFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKHVQPSVHUYHUKRVWDQG VQPSVHUYHUHQDEOHVHUYHUFRPPDQGVWRHQDEOH6103QRWLILFDWLRQV ([DPSOH Enterprise AP(config)#no snmp-server trap dot11StationAssociation Enterprise AP(config)# VQPSVHUYHUHQJLQHLG 7KLVFRPPDQGLVXVHGIRU6103Y,WLVXVHGWRXQLTXHO\LGHQWLI\WKHDFFHVVSRLQW DPRQJDOODFFHVVSRLQWVLQWKHQHWZRUN8VHWKHQRIRUPWRGHOHWHWKHHQJLQH,' 6\QWD[ VQPSVHUYHUHQJLQHLGHQJLQHLG! QRVQPSVHUYHUHQJLQHLG HQJLQHLG(QWHUHQJLQHLGLQKH[DGHFLPDO FKDUDFWHUV  'HIDXOW6HWWLQJ (QDEOHG +3 61"  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KLVFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKHVQPSVHUYHUXVHUFRPPDQG ‡ (QWHULQJWKLVFRPPDQGLQYDOLGDWHVDOOHQJLQH,'VWKDWKDYHEHHQSUHYLRXVO\ FRQILJXUHG ‡ ,IWKHHQJLQH,'LVGHOHWHGRUFKDQJHGDOO6103XVHUVZLOOEHFOHDUHG :chris Group Name<1-32> :RWPriv Authtype(md5,none):md5 Passphrase<8-32>:a good secret Privacy(des,none) :des Passphrase<8-32>:a very good secret Enterprise AP(config)# +5 61"  VQPSVHUYHUWDUJHWV 7KLVFRPPDQGFRQILJXUHV6103YQRWLILFDWLRQWDUJHWV8VHWKHQRIRUPWRGHOHWH DQ6103YWDUJHW 6\QWD[ VQPSVHUYHUWDUJHWVWDUJHWLG!LSDGGU!VHFQDPH! >YHUVLRQ^`@>XGSSRUW^SRUWQXPEHU`@>QRWLILFDWLRQW\SH ^75$3`@ QRVQPSVHUYHUWDUJHWVWDUJHWLG! ‡ WDUJHWLG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDUHFHLYHURI6103 QRWLILFDWLRQV 0D[LPXPOHQJWKFKDUDFWHUV ‡ LSDGGU6SHFLILHVWKH,3DGGUHVVRIWKHPDQDJHPHQWVWDWLRQWRUHFHLYH QRWLILFDWLRQV ‡ VHFQDPH7KHGHILQHG6103YXVHUQDPHWKDWLVWRUHFHLYH QRWLILFDWLRQV ‡ YHUVLRQ7KH6103YHUVLRQRIQRWLILFDWLRQV&XUUHQWO\RQO\YHUVLRQLV VXSSRUWHGLQWKLVFRPPDQG ‡ XGSSRUW7KH8'3SRUWWKDWLVXVHGRQWKHUHFHLYLQJPDQDJHPHQWVWDWLRQ IRUQRWLILFDWLRQV ‡ QRWLILFDWLRQW\SH7KHW\SHRIQRWLILFDWLRQWKDWLVVHQW&XUUHQWO\RQO\75$3 LVVXSSRUWHG 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KHDFFHVVSRLQWVXSSRUWVXSWR6103YWDUJHW,'V ‡ 7KH6103YXVHUQDPHWKDWLVVSHFLILHGLQWKHWDUJHWPXVWILUVWEH FRQILJXUHGXVLQJWKHVQPSVHUYHUXVHUFRPPDQG ([DPSOH Enterprise AP(config)#snmp-server targets mytraps 192.168.1.33 chris Enterprise AP(config)# +6  5  VQPSVHUYHUILOWHU 7KLVFRPPDQGFRQILJXUHV6103YQRWLILFDWLRQILOWHUV8VHWKHQRIRUPWRGHOHWHDQ 6103YILOWHURUUHPRYHDVXEWUHHIURPDILOWHU 6\QWD[ VQPSVHUYHUILOWHUILOWHULG!LQFOXGH_H[FOXGH!VXEWUHH! >PDVN^PDVN`@ QRVQPSVHUYHUILOWHUILOWHULG!>VXEWUHH@ ‡ ILOWHULG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDQ6103YQRWLILFDWLRQILOWHU 0D[LPXPOHQJWKFKDUDFWHUV ‡ LQFOXGH'HILQHVDILOWHUW\SHWKDWLQFOXGHVREMHFWVLQWKH0,%VXEWUHH ‡ H[FOXGH'HILQHVDILOWHUW\SHWKDWH[FOXGHVREMHFWVLQWKH0,%VXEWUHH ‡ VXEWUHH7KHSDUWRIWKH0,%VXEWUHHWKDWLVWREHILOWHUHG ‡ PDVN$QRSWLRQDOKH[DGHFLPDOYDOXHELWPDVNWRGHILQHREMHFWVLQWKH0,% VXEWUHH 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KHDFFHVVSRLQWDOORZVXSWRQRWLILFDWLRQILOWHUVWREHFUHDWHG(DFKILOWHU FDQEHGHILQHGE\XSWR0,%VXEWUHH,'HQWULHV ‡ 8VHWKHFRPPDQGPRUHWKDQRQFHZLWKWKHVDPHILOWHU,'WREXLOGDILOWHUWKDW LQFOXGHVRUH[FOXGHVPXOWLSOH0,%REMHFWV1RWHWKDWWKHILOWHUHQWULHVDUH DSSOLHGLQWKHVHTXHQFHWKDWWKH\DUHGHILQHG ‡ 7KH0,%VXEWUHHPXVWEHGHILQHGLQWKHIRUP³´DQGDOZD\VVWDUWZLWK D³´ ‡ 7KHPDVNLVDKH[DGHFLPDOYDOXHZLWKHDFKELWPDVNLQJWKHFRUUHVSRQGLQJ ,'LQWKH0,%VXEWUHH$³´LQWKHPDVNLQGLFDWHVDQH[DFWPDWFKDQGD³´ LQGLFDWHVD³ZLOGFDUG´)RUH[DPSOHDPDVNYDOXHRI[))%)SURYLGHVDELW PDVN³´,IDSSOLHGWRWKHVXEWUHH WKH]HURFRUUHVSRQGVWRWKHWKVXEWUHH,':KHQ WKHUHDUHPRUHVXEWUHH,'VWKDQELWVLQWKHPDVNWKHPDVNLVSDGGHGZLWK RQHV ([DPSOH Enterprise AP(config)#snmp-server filter trapfilter include .1 Enterprise AP(config)#snmp-server filter trapfilter exclude .1.3.6.1.2.1.2.2.1.1.23 +47 61"  VQPSVHUYHUILOWHUDVVLJQPHQWV 7KLVFRPPDQGDVVLJQV6103YQRWLILFDWLRQILOWHUVWRWDUJHWV8VHWKHQRIRUPWR UHPRYHDQ6103YILOWHUDVVLJQPHQW 6\QWD[ VQPSVHUYHUILOWHUDVVLJQPHQWVWDUJHWLG!ILOWHULG! QRVQPSVHUYHUILOWHUDVVLJQPHQWVWDUJHWLG! ‡ WDUJHWLG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDUHFHLYHURI6103 QRWLILFDWLRQV 0D[LPXPOHQJWKFKDUDFWHUV ‡ ILOWHULG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDQ6103YQRWLILFDWLRQILOWHU 0D[LPXPOHQJWKFKDUDFWHUV 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#snmp-server filter-assignments mytraps trapfilter Enterprise AP(config)#exit Enterprise AP#show snmp target Host ID : mytraps User : chris IP Address : 192.168.1.33 UDP Port : 162 ============================= Enterprise AP#show snmp filter-assignments HostID mytraps FilterID trapfilter Enterprise AP(config)# VKRZVQPSJURXSV 7KLVFRPPDQGGLVSOD\VWKH6103YSUHGHILQHGJURXSV 6\QWD[ VKRZVQPSJURXSV &RPPDQG0RGH ([HF +48  5  ([DPSOH Enterprise AP#show snmp groups GroupName :RO SecurityModel :USM SecurityLevel :NoAuthNoPriv GroupName :RWAuth SecurityModel :USM SecurityLevel :AuthNoPriv GroupName :RWPriv SecurityModel :USM SecurityLevel :AuthPriv Enterprise AP# VKRZVQPSXVHUV 7KLVFRPPDQGGLVSOD\VWKH6103YXVHUVDQGVHWWLQJV 6\QWD[ VKRZVQPSXVHUV &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show snmp users ============================================= UserName :chris GroupName :RWPriv AuthType :MD5 Passphrase:**************** PrivType :DES Passphrase:**************** ============================================= Enterprise AP# VKRZVQPSJURXSDVVLJQPHQWV 7KLVFRPPDQGGLVSOD\VWKH6103YXVHUJURXSDVVLJQPHQWV 6\QWD[ VKRZVQPSJURXSDVVLJQPHQWV &RPPDQG0RGH ([HF +49 61"  ([DPSOH Enterprise AP#show snmp group-assignments GroupName :RWPriv UserName :chris Enterprise AP# Enterprise AP# VKRZVQPSWDUJHW 7KLVFRPPDQGGLVSOD\VWKH6103YQRWLILFDWLRQWDUJHWVHWWLQJV 6\QWD[ VKRZVQPSWDUJHW &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show snmp target Host ID : mytraps User : chris IP Address : 192.168.1.33 UDP Port : 162 ============================= Enterprise AP# VKRZVQPSILOWHU 7KLVFRPPDQGGLVSOD\VWKH6103YQRWLILFDWLRQILOWHUVHWWLQJV 6\QWD[ VKRZVQPSILOWHU>ILOWHULG@ ‡ ILOWHULG$XVHUGHILQHGQDPHWKDWLGHQWLILHVDQ6103YQRWLILFDWLRQILOWHU 0D[LPXPOHQJWKFKDUDFWHUV &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show snmp filter Filter: trapfilter Type: include Subtree: iso.3.6.1.2.1.2.2.1 Type: exclude Subtree: iso.3.6.1.2.1.2.2.1.1.23 ============================= Enterprise AP# +0  5  VKRZVQPSILOWHUDVVLJQPHQWV 7KLVFRPPDQGGLVSOD\VWKH6103YQRWLILFDWLRQILOWHUDVVLJQPHQWV 6\QWD[ VKRZVQPSILOWHUDVVLJQPHQWV &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show snmp filter-assignments HostID mytraps Enterprise AP# +1 FilterID trapfilter 61"  VKRZVQPS 7KLVFRPPDQGGLVSOD\VWKH6103FRQILJXUDWLRQVHWWLQJV &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show snmp SNMP Information ============================================== Service State : Enable Community (ro) : ***** Community (rw) : ***** Location : WC-19 Contact : Paul EngineId :80:00:07:e5:80:00:00:2e:62:00:00:00:18 EngineBoots:1 Trap Destinations: 1: 192.168.1.9, 2: 0.0.0.0, 3: 0.0.0.0, 4: 0.0.0.0, Community: Community: Community: Community: *****, *****, *****, *****, State: State: State: State: Enabled Disabled Disabled Disabled dot11InterfaceAGFail Enabled dot11InterfaceBFail Enabled dot11StationAssociation Enabled dot11StationAuthentication Enabled dot11StationReAssociation Enabled dot11StationRequestFail Enabled dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled dot1xAuthSuccess Enabled dot1xMacAddrAuthFail Enabled dot1xMacAddrAuthSuccess Enabled iappContextDataSent Enabled iappStationRoamedFrom Enabled iappStationRoamedTo Enabled localMacAddrAuthFail Enabled localMacAddrAuthSuccess Enabled pppLogonFail Enabled sntpServerFail Enabled configFileVersionChanged Enabled radiusServerChanged Enabled systemDown Enabled systemUp Enabled ============================================= Enterprise AP# +2  5  Flash/File Commands 7KHVHFRPPDQGVDUHXVHGWRPDQDJHWKHV\VWHPFRGHRUFRQILJXUDWLRQILOHV 7DEOH )ODVK)LOH&RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH              +          &    2!"#!2!" 3= ++  )     3= +-  )      3= +9  &   )          3=    +9 ERRWILOH 7KLVFRPPDQGVSHFLILHVWKHLPDJHXVHGWRVWDUWXSWKHV\VWHP 6\QWD[ ERRWILOHILOHQDPH! ILOHQDPH1DPHRIWKHLPDJHILOH 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ([HF &RPPDQG8VDJH ‡ 7KHILOHQDPHVKRXOGQRWFRQWDLQVODVKHV ?RU WKHOHDGLQJOHWWHURIWKHILOH QDPHVKRXOGQRWEHDSHULRG  DQGWKHPD[LPXPOHQJWKIRUILOHQDPHVLV FKDUDFWHUV 9DOLGFKDUDFWHUV$=D]³´³´³B´ ‡ ,IWKHILOHFRQWDLQVDQHUURULWFDQQRWEHVHWDVWKHGHIDXOWILOH ([DPSOH Enterprise AP#bootfile -img.bin Enterprise AP# +3 2 #2  FRS\ 7KLVFRPPDQGFRSLHVDERRWILOHFRGHLPDJHRUFRQILJXUDWLRQILOHEHWZHHQWKH DFFHVVSRLQW¶VIODVKPHPRU\DQGD)737)73VHUYHU:KHQ\RXVDYHWKH FRQILJXUDWLRQVHWWLQJVWRDILOHRQD)737)73VHUYHUWKDWILOHFDQODWHUEH GRZQORDGHGWRWKHDFFHVVSRLQWWRUHVWRUHV\VWHPRSHUDWLRQ7KHVXFFHVVRIWKHILOH WUDQVIHUGHSHQGVRQWKHDFFHVVLELOLW\RIWKH)737)73VHUYHUDQGWKHTXDOLW\RIWKH QHWZRUNFRQQHFWLRQ 6\QWD[ FRS\IWS_WIWS!ILOH FRS\FRQILJIWS_WIWS! ‡ ‡ ‡ ‡ IWS.H\ZRUGWKDWDOORZV\RXWRFRS\WRIURPDQ)73VHUYHU WIWS.H\ZRUGWKDWDOORZV\RXWRFRS\WRIURPD7)73VHUYHU ILOH.H\ZRUGWKDWDOORZV\RXWRFRS\WRIURPDIODVKPHPRU\ILOH FRQILJ.H\ZRUGWKDWDOORZV\RXWRXSORDGWKHFRQILJXUDWLRQILOHIURPIODVK PHPRU\ 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ([HF &RPPDQG8VDJH ‡ 7KHV\VWHPSURPSWVIRUGDWDUHTXLUHGWRFRPSOHWHWKHFRS\FRPPDQG ‡ 2QO\DFRQILJXUDWLRQILOHFDQEHXSORDGHGWRDQ)737)73VHUYHUEXWHYHU\ W\SHRIILOHFDQEHGRZQORDGHGWRWKHDFFHVVSRLQW ‡ 7KHGHVWLQDWLRQILOHQDPHVKRXOGQRWFRQWDLQVODVKHV ?RU WKHOHDGLQJ OHWWHURIWKHILOHQDPHVKRXOGQRWEHDSHULRG  DQGWKHPD[LPXPOHQJWK IRUILOHQDPHVRQWKH)737)73VHUYHULVFKDUDFWHUVRUFKDUDFWHUV IRUILOHVRQWKHDFFHVVSRLQW 9DOLGFKDUDFWHUV$=D]³´³´³B´ ‡ 'XHWRWKHVL]HOLPLWRIWKHIODVKPHPRU\WKHDFFHVVSRLQWVXSSRUWVRQO\WZR RSHUDWLRQFRGHILOHV ‡ 7KHV\VWHPFRQILJXUDWLRQILOHPXVWEHQDPHG³V\VFIJ´LQDOOFRS\ FRPPDQGV ([DPSOH 7KHIROORZLQJH[DPSOHVKRZVKRZWRXSORDGWKHFRQILJXUDWLRQVHWWLQJVWRDILOHRQ WKH7)73VHUYHU Enterprise AP#copy config tftp TFTP Source file name:syscfg TFTP Server IP:192.168.1.19 Enterprise AP# +4  5  7KHIROORZLQJH[DPSOHVKRZVKRZWRGRZQORDGDFRQILJXUDWLRQILOH Enterprise AP#copy tftp file 1. Application image 2. Config file 3. Boot block image Select the type of download<1,2,3>: TFTP Source file name:syscfg TFTP Server IP:192.168.1.19 Enterprise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nterprise AP#delete test.cfg Are you sure you wish to delete this file? : Enterprise AP# 5HODWHG&RPPDQGV ERRWILOH  GLU  +5 2 #2  GLU 7KLVFRPPDQGGLVSOD\VDOLVWRIILOHVLQIODVKPHPRU\ &RPPDQG0RGH ([HF &RPPDQG8VDJH )LOHLQIRUPDWLRQLVVKRZQEHORZ &ROXPQ+HDGLQJ 'HVFULSWLRQ 26 !    / ! :;?  2E !      / :;      ([DPSOH 7KHIROORZLQJH[DPSOHVKRZVKRZWRGLVSOD\DOOILOHLQIRUPDWLRQ Enterprise AP#dir File Name -------------------------dflt-img.bin syscfg syscfg_bak zz-img.bin Type ---2 File Size ----------1044140 16860 16860 1044140 1048576 byte(s) available Enterprise AP# VKRZERRWILOH 7KLVFRPPDQGGLVSOD\VWKHQDPHRIWKHFXUUHQWRSHUDWLRQFRGHILOHWKDWERRWHGWKH V\VWHP 6\QWD[ VKRZVQPSILOWHUDVVLJQPHQWV &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show bootfile Bootfile Information =================================== Bootfile : ec-img.bin =================================== Enterprise AP# +6  5  RADIUS Client 5HPRWH$XWKHQWLFDWLRQ'LDOLQ8VHU6HUYLFH 5$',86 LVDORJRQDXWKHQWLFDWLRQ SURWRFROWKDWXVHVVRIWZDUHUXQQLQJRQDFHQWUDOVHUYHUWRFRQWURODFFHVVIRU 5$',86DZDUHGHYLFHVWRWKHQHWZRUN$QDXWKHQWLFDWLRQVHUYHUFRQWDLQVD GDWDEDVHRIFUHGHQWLDOVVXFKDVXVHUVQDPHVDQGSDVVZRUGVIRUHDFKZLUHOHVV FOLHQWWKDWUHTXLUHVDFFHVVWRWKHDFFHVVSRLQW 7DEOH 5$',86&OLHQW &RPPDQG )XQFWLRQ 0RGH     '()* +.     '()*& %  +  %  '()* % +       +     &     C  +        '()*(  & %  +      &      '()* +           1(    < '()* +         45(6)   '()* +  &   &  '()*  3= + UDGLXVVHUYHUDGGUHVV 7KLVFRPPDQGVSHFLILHVWKHSULPDU\DQGVHFRQGDU\5$',86VHUYHUV 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@DGGUHVVKRVWBLSBDGGUHVV_KRVWBQDPH! ‡ VHFRQGDU\6HFRQGDU\VHUYHU ‡ KRVWBLSBDGGUHVV,3DGGUHVVRIVHUYHU ‡ KRVWBQDPH+RVWQDPHRIVHUYHU 5DQJHFKDUDFWHUV 'HIDXOW6HWWLQJ 1RQH +57 3DJH '()*  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server address 192.168.1.25 Enterprise AP(config)# UDGLXVVHUYHUSRUW 7KLVFRPPDQGVHWVWKH5$',86VHUYHUQHWZRUNSRUW 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@SRUWSRUWBQXPEHU! ‡ VHFRQGDU\6HFRQGDU\VHUYHU ‡ SRUWBQXPEHU5$',86VHUYHU8'3SRUWXVHGIRUDXWKHQWLFDWLRQPHVVDJHV 5DQJH  'HIDXOW6HWWLQJ  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server port 181 Enterprise AP(config)# UDGLXVVHUYHUNH\ 7KLVFRPPDQGVHWVWKH5$',86HQFU\SWLRQNH\ 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@NH\NH\BVWULQJ! ‡ VHFRQGDU\6HFRQGDU\VHUYHU ‡ NH\BVWULQJ(QFU\SWLRQNH\XVHGWRDXWKHQWLFDWHORJRQDFFHVVIRUFOLHQW'R QRWXVHEODQNVSDFHVLQWKHVWULQJ 0D[LPXPOHQJWKFKDUDFWHUV 'HIDXOW6HWWLQJ '()$8/7 &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server key green Enterprise AP(config)# +58  5  UDGLXVVHUYHUUHWUDQVPLW 7KLVFRPPDQGVHWVWKHQXPEHURIUHWULHV 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@UHWUDQVPLWQXPEHUBRIBUHWULHV ‡ VHFRQGDU\6HFRQGDU\VHUYHU ‡ QXPEHUBRIBUHWULHV1XPEHURIWLPHVWKHDFFHVVSRLQWZLOOWU\WR DXWKHQWLFDWHORJRQDFFHVVYLDWKH5$',86VHUYHU 5DQJH 'HIDXOW6HWWLQJ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server retransmit 5 Enterprise AP(config)# UDGLXVVHUYHUWLPHRXW 7KLVFRPPDQGVHWVWKHLQWHUYDOEHWZHHQWUDQVPLWWLQJDXWKHQWLFDWLRQUHTXHVWVWRWKH 5$',86VHUYHU 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@WLPHRXWQXPEHUBRIBVHFRQGV ‡ VHFRQGDU\6HFRQGDU\VHUYHU ‡ QXPEHUBRIBVHFRQGV1XPEHURIVHFRQGVWKHDFFHVVSRLQWZDLWVIRUDUHSO\ EHIRUHUHVHQGLQJDUHTXHVW 5DQJH 'HIDXOW6HWWLQJ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server timeout 10 Enterprise AP(config)# +59 '()*  UDGLXVVHUYHUSRUWDFFRXQWLQJ 7KLVFRPPDQGVHWVWKH5$',86$FFRXQWLQJVHUYHUQHWZRUNSRUW 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@SRUWDFFRXQWLQJSRUWBQXPEHU! ‡ VHFRQGDU\6HFRQGDU\VHUYHU,IVHFRQGDU\LVQRWVSHFLILHGWKHQWKH DFFHVVSRLQWDVVXPHV\RXDUHFRQILJXULQJWKHSULPDU\5$',86VHUYHU ‡ SRUWBQXPEHU5$',86$FFRXQWLQJVHUYHU8'3SRUWXVHGIRUDFFRXQWLQJ PHVVDJHV 5DQJHRU 'HIDXOW6HWWLQJ  GLVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ :KHQWKH5$',86$FFRXQWLQJVHUYHU8'3SRUWLVVSHFLILHGD5$',86 DFFRXQWLQJVHVVLRQLVDXWRPDWLFDOO\VWDUWHGIRUHDFKXVHUWKDWLV VXFFHVVIXOO\DXWKHQWLFDWHGWRWKHDFFHVVSRLQW ([DPSOH Enterprise AP(config)#radius-server port-accounting 1813 Enterprise AP(config)# UDGLXVVHUYHUWLPHRXWLQWHULP 7KLVFRPPDQGVHWVWKHLQWHUYDOEHWZHHQWUDQVPLWWLQJDFFRXQWLQJXSGDWHVWRWKH 5$',86VHUYHU 6\QWD[ UDGLXVVHUYHU>VHFRQGDU\@WLPHRXWLQWHULPQXPEHUBRIBVHFRQGV! ‡ VHFRQGDU\6HFRQGDU\VHUYHU ‡ QXPEHUBRIBVHFRQGV1XPEHURIVHFRQGVWKHDFFHVVSRLQWZDLWVEHWZHHQ WUDQVPLWWLQJDFFRXQWLQJXSGDWHV 5DQJH 'HIDXOW6HWWLQJ  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KHDFFHVVSRLQWVHQGVSHULRGLFDFFRXQWLQJXSGDWHVDIWHUHYHU\LQWHULP SHULRGXQWLOWKHXVHUORJVRIIDQGD³VWRS´PHVVDJHLVVHQW +0  5  ([DPSOH Enterprise AP(config)#radius-server timeout-interim 500 Enterprise AP(config)# UDGLXVVHUYHUUDGLXVPDFIRUPDW 7KLVFRPPDQGVHWVWKHIRUPDWIRUVSHFLI\LQJ0$&DGGUHVVHVRQWKH5$',86VHUYHU 6\QWD[ UDGLXVVHUYHUUDGLXVPDFIRUPDWPXOWLFRORQ_PXOWLGDVK_QRGHOLPLWHU_ VLQJOHGDVK! ‡ ‡ ‡ ‡ PXOWLFRORQ(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[ PXOWLGDVK(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[ QRGHOLPLWHU(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[ VLQJOHGDVK(QWHU0$&DGGUHVVHVLQWKHIRUP[[[[[[[[[[[[ 'HIDXOW6HWWLQJ 1RGHOLPLWHU &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server radius-mac-format multi-dash Enterprise AP(config)# UDGLXVVHUYHUYODQIRUPDW 7KLVFRPPDQGVHWVWKHIRUPDWIRUVSHFLI\LQJ9/$1,'VRQWKH5$',86VHUYHU 6\QWD[ UDGLXVVHUYHUYODQIRUPDWKH[_DVFLL! ‡ KH[(QWHU9/$1,'VDVDKH[DGHFLPDOQXPEHU ‡ DVFLL(QWHU9/$1,'VDVDQ$6&,,VWULQJ 'HIDXOW6HWWLQJ +H[ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#radius-server vlan-format ascii Enterprise AP(config)# +1 '()*  VKRZUDGLXV 7KLVFRPPDQGGLVSOD\VWKHFXUUHQWVHWWLQJVIRUWKH5$',86VHUYHU 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show radius Radius Server Information ======================================== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ======================================== Radius Secondary Server Information ======================================== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ======================================== Enterprise AP# +2  5  802.1X Authentication 7KHDFFHVVSRLQWVXSSRUWV,(((;DFFHVVFRQWUROIRUZLUHOHVVFOLHQWV7KLV FRQWUROIHDWXUHSUHYHQWVXQDXWKRUL]HGDFFHVVWRWKHQHWZRUNE\UHTXLULQJDQ; FOLHQWDSSOLFDWLRQWRVXEPLWXVHUFUHGHQWLDOVIRUDXWKHQWLFDWLRQ&OLHQWDXWKHQWLFDWLRQ LVWKHQYHULILHGE\D5$',86VHUYHUXVLQJ($3 ([WHQVLEOH$XWKHQWLFDWLRQ3URWRFRO  EHIRUHWKHDFFHVVSRLQWJUDQWVFOLHQWDFFHVVWRWKHQHWZRUN7KH;($3 SDFNHWVDUHDOVRXVHGWRSDVVG\QDPLFXQLFDVWVHVVLRQNH\VDQGVWDWLFEURDGFDVW NH\VWRZLUHOHVVFOLHQWV 7DEOH ;$XWKHQWLFDWLRQ &RPPDQG -./= )XQFWLRQ   -./0$  $ C  0RGH 3DJH  74(" + -./= %     &    %  74("       -./0% ++ -./= %     &    %        %  74(" +- -./=      &      74("    +- -./=  3    -./0   +9 -./=      &      +9  &     &-./0    $&  3=   +9 [ 7KLVFRPPDQGFRQILJXUHV;DVRSWLRQDOO\VXSSRUWHGRUDVUHTXLUHGIRUZLUHOHVV FOLHQWV8VH WKHQRIRUPWRGLVDEOH;VXSSRUW 6\QWD[ [VXSSRUWHG_UHTXLUHG! QR[ ‡ VXSSRUWHG$XWKHQWLFDWHVFOLHQWVWKDWLQLWLDWHWKH;DXWKHQWLFDWLRQ SURFHVV8VHVVWDQGDUGDXWKHQWLFDWLRQIRUDOORWKHUV ‡ UHTXLUHG5HTXLUHV;DXWKHQWLFDWLRQIRUDOOFOLHQWV 'HIDXOW6HWWLQJ 'LVDEOHG +3 -./0(    &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ :KHQ;LVGLVDEOHGWKHDFFHVVSRLQWGRHVQRWVXSSRUW; DXWKHQWLFDWLRQIRUDQ\VWDWLRQ$IWHUVXFFHVVIXODVVRFLDWLRQHDFK FOLHQWLVDOORZHGWRDFFHVVWKHQHWZRUN ‡ :KHQ;LVVXSSRUWHGWKHDFFHVVSRLQWVXSSRUWV; DXWKHQWLFDWLRQRQO\IRUFOLHQWVLQLWLDWLQJWKH;DXWKHQWLFDWLRQSURFHVV LHWKHDFFHVVSRLQWGRHV127LQLWLDWH;DXWKHQWLFDWLRQ )RUVWDWLRQV LQLWLDWLQJ;RQO\WKRVHVWDWLRQVVXFFHVVIXOO\DXWKHQWLFDWHGDUHDOORZHG WRDFFHVVWKHQHWZRUN)RUWKRVHVWDWLRQVQRWLQLWLDWLQJ;DFFHVVWR WKHQHWZRUNLVDOORZHGDIWHUVXFFHVVIXODVVRFLDWLRQ ‡ :KHQ;LVUHTXLUHGWKHDFFHVVSRLQWHQIRUFHV;DXWKHQWLFDWLRQ IRUDOODVVRFLDWHGVWDWLRQV,I;DXWKHQWLFDWLRQLVQRWLQLWLDWHGE\ WKHVWDWLRQWKHDFFHVVSRLQWZLOOLQLWLDWHDXWKHQWLFDWLRQ2QO\WKRVHVWDWLRQV VXFFHVVIXOO\DXWKHQWLFDWHGZLWK;DUHDOORZHGWRDFFHVVWKHQHWZRUN ‡ ;GRHVQRWDSSO\WRWKH%DVH7;SRUW ([DPSOH Enterprise AP(config)#802.1x supported Enterprise AP(config)# [EURDGFDVWNH\UHIUHVKUDWH 7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKWKHEURDGFDVWNH\VDUHUHIUHVKHGIRU VWDWLRQVXVLQJ;G\QDPLFNH\LQJ 6\QWD[ [EURDGFDVWNH\UHIUHVKUDWHUDWH! UDWH7KHLQWHUYDODWZKLFKWKHDFFHVVSRLQWURWDWHVEURDGFDVWNH\V 5DQJHPLQXWHV 'HIDXOW6HWWLQJ  'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KHDFFHVVSRLQWXVHV(QWHUSULVH$32/ ([WHQVLEOH$XWKHQWLFDWLRQ 3URWRFRO2YHU/$1V SDFNHWVWRSDVVG\QDPLFXQLFDVWVHVVLRQDQG EURDGFDVWNH\VWRZLUHOHVVFOLHQWV7KH[ EURDGFDVWNH\UHIUHVKUDWHFRPPDQGVSHFLILHVWKHLQWHUYDODIWHUZKLFK WKHEURDGFDVWNH\VDUHFKDQJHG7KH[VHVVLRQNH\UHIUHVKUDWH +4  5  FRPPDQGVSHFLILHVWKHLQWHUYDODIWHUZKLFKXQLFDVWVHVVLRQNH\VDUH FKDQJHG ‡ '\QDPLFEURDGFDVWNH\URWDWLRQDOORZVWKHDFFHVVSRLQWWRJHQHUDWHD UDQGRPJURXSNH\DQGSHULRGLFDOO\XSGDWHDOONH\PDQDJHPHQWFDSDEOH ZLUHOHVVFOLHQWV ([DPSOH Enterprise AP(config)#802.1X broadcast-key-refresh-rate 5 Enterprise AP(config)# [VHVVLRQNH\UHIUHVKUDWH 7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKXQLFDVWVHVVLRQNH\VDUHUHIUHVKHGIRU DVVRFLDWHGVWDWLRQVXVLQJG\QDPLFNH\LQJ 6\QWD[ [VHVVLRQNH\UHIUHVKUDWHUDWH! UDWH7KHLQWHUYDODWZKLFKWKHDFFHVVSRLQWUHIUHVKHVDVHVVLRQNH\ 5DQJHPLQXWHV 'HIDXOW6HWWLQJ  'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 6HVVLRQNH\VDUHXQLTXHWRHDFKFOLHQWDQGDUHXVHGWRDXWKHQWLFDWHDFOLHQW FRQQHFWLRQDQGFRUUHODWHWUDIILFSDVVLQJEHWZHHQDVSHFLILFFOLHQWDQGWKH DFFHVVSRLQW ([DPSOH Enterprise AP(config)#802.1x session-key-refresh-rate 5 Enterprise AP(config)# [VHVVLRQWLPHRXW 7KLVFRPPDQGVHWVWKHWLPHSHULRGDIWHUZKLFKDFRQQHFWHGFOLHQWPXVWEH UHDXWKHQWLFDWHG8VHWKHQRIRUPWRGLVDEOH;UHDXWKHQWLFDWLRQ 6\QWD[ [VHVVLRQWLPHRXWVHFRQGV! QR[VHVVLRQWLPHRXW VHFRQGV7KHQXPEHURIVHFRQGV 5DQJH 'HIDXOW  'LVDEOHG +5 -./0(    &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#802.1x session-timeout 300 Enterprise AP(config)# [VXSSOLFDQWHQDEOH 7KLVFRPPDQGHQDEOHVWKHDFFHVVSRLQWWRRSHUDWHDVDQ;VXSSOLFDQWIRU DXWKHQWLFDWLRQ8VHWKHQRIRUPWRGLVDEOH;DXWKHQWLFDWLRQRIWKHDFFHVV SRLQW 6\QWD[ [VXSSOLFDQWHQDEOH QR[VXSSOLFDQW 'HIDXOW 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH $XVHUQDPHDQGSDVVZRUGPXVWEHFRQILJXUHGILUVWEHIRUHWKH; VXSSOLFDQWIHDWXUHFDQEHHQDEOHG ([DPSOH Enterprise AP(config)#802.1x-supplicant enable Enterprise AP(config)# [VXSSOLFDQWXVHU 7KLVFRPPDQGVHWVWKHXVHUQDPHDQGSDVVZRUGXVHGIRUDXWKHQWLFDWLRQRIWKH DFFHVVSRLQWZKHQRSHUDWLQJDVD;VXSSOLFDQW8VHWKHQRIRUPWRFOHDUWKH VXSSOLFDQWXVHUQDPHDQGSDVVZRUG 6\QWD[ [VXSSOLFDQWXVHUXVHUQDPH!SDVVZRUG! QR[VXSSOLFDQWXVHU ‡ XVHUQDPH7KHDFFHVVSRLQWQDPHXVHGIRUDXWKHQWLFDWLRQWRWKHQHWZRUN 5DQJHDOSKDQXPHULFFKDUDFWHUV ‡ SDVVZRUG7KH0'SDVVZRUGXVHGIRUDFFHVVSRLQWDXWKHQWLFDWLRQ 5DQJHDOSKDQXPHULFFKDUDFWHUV 'HIDXOW 1RQH +6  5  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KHDFFHVVSRLQWFXUUHQWO\RQO\VXSSRUWV($30'&+$3IRU; VXSSOLFDQWDXWKHQWLFDWLRQ ([DPSOH Enterprise AP(config)#802.1x-supplicant user WA6102 dot1xpass Enterprise AP(config)# VKRZDXWKHQWLFDWLRQ 7KLVFRPPDQGVKRZVDOO;DXWKHQWLFDWLRQVHWWLQJVDVZHOODVWKHDGGUHVVILOWHU WDEOH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show authentication Authentication Information =========================================================== MAC Authentication Server : DISABLED MAC Auth Session Timeout Value : 0 min 802.1x supplicant : DISABLED 802.1x supplicant user : EMPTY 802.1x supplicant password : EMPTY Address Filtering : ALLOWED System Default : ALLOW addresses not found in filter table. Filter Table MAC Address Status -------------------------00-70-50-cc-99-1a DENIED 00-70-50-cc-99-1b ALLOWED ========================================================= Enterprise AP(config)# +67 1( ((    MAC Address Authentication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‡ DOORZHG2QO\0$&DGGUHVVHVHQWHUHGDV³GHQLHG´LQWKHDGGUHVVILOWHULQJ WDEOHDUHGHQLHG ‡ GHQLHG2QO\0$&DGGUHVVHVHQWHUHGDV³DOORZHG´LQWKHDGGUHVVILOWHULQJ WDEOHDUHDOORZHG 'HIDXOW DOORZHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#address filter default denied Enterprise AP(config)# +68  5  5HODWHG&RPPDQGV DGGUHVVILOWHUHQWU\  [VXSSOLFDQWXVHU  DGGUHVVILOWHUHQWU\ 7KLVFRPPDQGHQWHUVD0$&DGGUHVVLQWKHILOWHUWDEOH 6\QWD[ DGGUHVVILOWHUHQWU\PDFDGGUHVV!DOORZHG_GHQLHG! ‡ PDFDGGUHVV3K\VLFDODGGUHVVRIFOLHQW (QWHUVL[SDLUVRIKH[DGHFLPDO GLJLWVVHSDUDWHGE\K\SKHQVHJ'$% ‡ DOORZHG(QWU\LVDOORZHGDFFHVV ‡ GHQLHG(QWU\LVGHQLHGDFFHVV 'HIDXOW 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG0RGH ‡ 7KHDFFHVVSRLQWVXSSRUWVXSWR0$&DGGUHVVHV ‡ $QHQWU\LQWKHDGGUHVVWDEOHPD\EHDOORZHGRUGHQLHGDFFHVVGHSHQGLQJ RQWKHJOREDOVHWWLQJFRQILJXUHGIRUWKHDGGUHVVHQWU\GHIDXOWFRPPDQG ([DPSOH Enterprise AP(config)#address filter entry 00-70-50-cc-99-1a allowed Enterprise AP(config)# 5HODWHG&RPPDQGV DGGUHVVILOWHUGHIDXOW  [VXSSOLFDQWXVHU  DGGUHVVILOWHUGHOHWH 7KLVFRPPDQGGHOHWHVD0$&DGGUHVVIURPWKHILOWHUWDEOH 6\QWD[ DGGUHVVILOWHUGHOHWHPDFDGGUHVV! PDFDGGUHVV3K\VLFDODGGUHVVRIFOLHQW (QWHUVL[SDLUVRIKH[DGHFLPDO GLJLWVVHSDUDWHGE\K\SKHQV 'HIDXOW 1RQH +69 1( ((    &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#address filter delete 00-70-50-cc-99-1b Enterprise AP(config)# 5HODWHG&RPPDQGV [VXSSOLFDQWXVHU  PDFDXWKHQWLFDWLRQVHUYHU 7KLVFRPPDQGVHWVDGGUHVVILOWHULQJWREHSHUIRUPHGZLWKORFDORUUHPRWHRSWLRQV 8VHWKHQRIRUPWRGLVDEOH0$&DGGUHVVDXWKHQWLFDWLRQ 6\QWD[ PDFDXWKHQWLFDWLRQVHUYHU>ORFDO_UHPRWH@ ‡ ORFDO$XWKHQWLFDWHWKH0$&DGGUHVVRIZLUHOHVVFOLHQWVZLWKWKHORFDO DXWKHQWLFDWLRQGDWDEDVHGXULQJDVVRFLDWLRQ ‡ UHPRWH$XWKHQWLFDWHWKH0$&DGGUHVVRIZLUHOHVVFOLHQWVZLWKWKH 5$',86VHUYHUGXULQJ;DXWKHQWLFDWLRQ 'HIDXOW 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#mac-authentication server remote Enterprise AP(config)# 5HODWHG&RPPDQGV DGGUHVVILOWHUHQWU\  UDGLXVVHUYHUDGGUHVV  [VXSSOLFDQWXVHU  PDFDXWKHQWLFDWLRQVHVVLRQWLPHRXW 7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKDVVRFLDWHGFOLHQWVZLOOEHUHDXWKHQWLFDWHG ZLWKWKH5$',86VHUYHUDXWKHQWLFDWLRQGDWDEDVH8VHWKHQRIRUPWRGLVDEOH UHDXWKHQWLFDWLRQ 6\QWD[ PDFDXWKHQWLFDWLRQVHVVLRQWLPHRXWPLQXWHV! PLQXWHV5HDXWKHQWLFDWLRQLQWHUYDO 5DQJH ++0  5  'HIDXOW  GLVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#mac-authentication session-timeout 1 Enterprise AP(config)# Filtering Commands 7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQDUHXVHGWRILOWHUFRPPXQLFDWLRQVEHWZHHQ ZLUHOHVVFOLHQWVFRQWURODFFHVVWRWKHPDQDJHPHQWLQWHUIDFHIURPZLUHOHVVFOLHQWV DQGILOWHUWUDIILFXVLQJVSHFLILF(WKHUQHWSURWRFROW\SHV 7DEOH )LOWHULQJ&RPPDQGV &RPPDQG )XQFWLRQ 0RGH    )   && ++   "&        ++  % 3  1(   ++  % ( 1(       ++   % 3        < 3 %        ++          3  +++  &   &       3= ++- ++1 3DJH 2   ILOWHUORFDOEULGJH 7KLVFRPPDQGGLVDEOHVFRPPXQLFDWLRQEHWZHHQZLUHOHVVFOLHQWV8VHWKHQRIRUP WRGLVDEOHWKLVILOWHULQJ 6\QWD[ ILOWHUORFDOEULGJHDOO9$3_LQWUD9$3! QRILOWHUORFDOEULGJH DOO9$3:KHQHQDEOHGFOLHQWVFDQQRWHVWDEOLVKZLUHOHVVFRPPXQLFDWLRQV ZLWKDQ\RWKHUFOLHQWHLWKHUWKRVHDVVRFLDWHGWRWKHVDPH9$3LQWHUIDFHRU DQ\RWKHU9$3LQWHUIDFH LQWUD9$3:KHQHQDEOHGFOLHQWVDVVRFLDWHGZLWKDVSHFLILF9$3LQWHUIDFH FDQQRWHVWDEOLVKZLUHOHVVFRPPXQLFDWLRQVZLWKHDFKRWKHU&OLHQWVFDQ FRPPXQLFDWHZLWKFOLHQWVDVVRFLDWHGWRRWKHU9$3LQWHUIDFHV 'HIDXOW 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KLVFRPPDQGFDQGLVDEOHZLUHOHVVWRZLUHOHVVFRPPXQLFDWLRQVEHWZHHQ FOLHQWVYLDWKHDFFHVVSRLQW+RZHYHULWGRHVQRWDIIHFWFRPPXQLFDWLRQV EHWZHHQZLUHOHVVFOLHQWVDQGWKHZLUHGQHWZRUN ([DPSOH Enterprise AP(config)#filter local-bridge Enterprise AP(config)# ILOWHUDSPDQDJH 7KLVFRPPDQGSUHYHQWVZLUHOHVVFOLHQWVIURPDFFHVVLQJWKHPDQDJHPHQWLQWHUIDFH RQWKHDFFHVVSRLQW8VHWKHQRIRUPWRGLVDEOHWKLVILOWHULQJ 6\QWD[ ILOWHUDSPDQDJH QRILOWHUDSPDQDJH 'HIDXOW (QDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#filter AP-manage Enterprise AP(config)# ++2  5  ILOWHUXSOLQNHQDEOH 7KLVFRPPDQGHQDEOHVILOWHULQJRI0$&DGGUHVVHVIURPWKH(WKHUQHWSRUW 6\QWD[ >QR@ILOWHUXSOLQNHQDEOH 'HIDXOW 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#filter uplink enable Enterprise AP(config)# ILOWHUXSOLQN 7KLVFRPPDQGDGGVRUGHOHWHV0$&DGGUHVVHVIURPWKHXSOLQNILOWHULQJWDEOH 6\QWD[ ILOWHUXSOLQNDGG_GHOHWH!0$&DGGUHVV 0$&DGGUHVV6SHFLILHVD0$&DGGUHVVLQWKHIRUP[[[[[[[[[[[[ $PD[LPXPRIIRXUDGGUHVVHVFDQEHDGGHGWRWKHILOWHULQJWDEOH 'HIDXOW 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#filter uplink add 00-12-34-56-78-9a Enterprise AP(config)# ILOWHUHWKHUQHWW\SHHQDEOH 7KLVFRPPDQGFKHFNVWKH(WKHUQHWW\SHRQDOOLQFRPLQJDQGRXWJRLQJ(WKHUQHW SDFNHWVDJDLQVWWKHSURWRFROILOWHULQJWDEOH8VHWKHQRIRUPWRGLVDEOHWKLVIHDWXUH 6\QWD[ ILOWHUHWKHUQHWW\SHHQDEOH QRILOWHUHWKHUQHWW\SHHQDEOH 'HIDXOW 'LVDEOHG &RPPDQG0RGH ++3 2   *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KLVFRPPDQGLVXVHGLQFRQMXQFWLRQZLWKWKHILOWHUHWKHUQHWW\SHSURWRFRO FRPPDQGWRGHWHUPLQHZKLFK(WKHUQHWSURWRFROW\SHVDUHWREHILOWHUHG ([DPSOH Enterprise AP(config)#filter ethernet-type enable Enterprise AP(config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nterprise AP(config)#filter ethernet-type protocol ARP Enterprise AP(config)# 5HODWHG&RPPDQGV ILOWHUHWKHUQHWW\SHHQDEOH  ++4  5  VKRZILOWHUV 7KLVFRPPDQGVKRZVWKHILOWHURSWLRQVDQGSURWRFROHQWULHVLQWKHILOWHUWDEOH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show filters Protocol Filter Information ======================================================================= Local Bridge :Traffic among all client STAs blocked AP Management :ENABLED Ethernet Type Filter :DISABLED UPlink Access Table ----------------------------------------------------------------------UPlink access control:Enabled UPlink MAC access control list 00-12-34-56-78-9a ----------------------------------------------------------------------Enabled Protocol Filters ----------------------------------------------------------------------No protocol filters are enabled ======================================================================= Enterprise AP# WDS Bridge Commands 7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQDUHXVHGWRVHWWKHRSHUDWLRQPRGHIRU HDFKDFFHVVSRLQWLQWHUIDFHDQGFRQILJXUH:,UHOHVV'LVWULEXWLRQ6\VWHP :'6  IRUZDUGLQJWDEOHVHWWLQJV &RPPDQG )XQFWLRQ              7 0RGH ++9      (           7 +-.  %    1(        7 +-.  %    1(       7   +-          7) &  +- 3DJH  &    )  7) &    3= +-  &   )   1(   3= +-  & % )       3= +- ++5 7)@   EULGJHUROH :'6 7KLVFRPPDQGVHOHFWVWKHEULGJHRSHUDWLRQPRGHIRUWKHUDGLRLQWHUIDFH 6\QWD[ EULGJHUROHDS_UHSHDWHU_EULGJH_URRWEULGJH! ‡ DS2SHUDWHVRQO\DVDQDFFHVVSRLQWIRUZLUHOHVVFOLHQWV ‡ UHSHDWHU2SHUDWHVDVDZLUHOHVVUHSHDWHUH[WHQGLQJWKHUDQJHIRUUHPRWH ZLUHOHVVFOLHQWVDQGFRQQHFWLQJWKHPWRWKHURRWEULGJH7KH³3DUHQW´OLQNWR WKHURRWEULGJHPXVWEHFRQILJXUHG,QWKLVPRGHWUDIILFLVQRWIRUZDUGHGWR WKH(WKHUQHWSRUWIURPWKHUDGLRLQWHUIDFH ‡ EULGJH2SHUDWHVDVDEULGJHWRRWKHUDFFHVVSRLQWVDOVRLQEULGJHPRGH ‡ URRWEULGJH2SHUDWHVDVWKHURRWEULGJHLQWKHZLUHOHVVEULGJHQHWZRUN 'HIDXOW6HWWLQJ $3 &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ :KHQWKHEULGJHUROHLVVHWWR³UHSHDWHU´WKH³3DUHQW´OLQNWRWKHURRWEULGJH PXVWEHFRQILJXUHG VHH³EULGJHOLQNSDUHQW´RQSDJH  :KHQWKH DFFHVVSRLQWLVRSHUDWLQJLQWKLVPRGHWUDIILFLVQRWIRUZDUGHGWRWKH (WKHUQHWSRUWIURPWKHUDGLRLQWHUIDFH ‡ 8SWRIRXU:'6EULGJHOLQNV 0$&DGGUHVVHV SHUUDGLRLQWHUIDFHFDQEH VSHFLILHGIRUHDFKXQLWLQWKHZLUHOHVVEULGJHQHWZRUN2QHXQLWRQO\PXVWEH FRQILJXUHGDVWKH³URRWEULGJH´LQWKHZLUHOHVVQHWZRUN7KHURRWEULGJHLV WKHXQLWFRQQHFWHGWRWKHPDLQFRUHRIWKHZLUHG/$12WKHUEULGJHVQHHG WRVSHFLI\RQH³3DUHQW´OLQNWRWKHURRWEULGJHRUWRDEULGJHFRQQHFWHGWRWKH URRWEULGJH7KHRWKHUVHYHQ:'6OLQNVDUHDYDLODEOHDV³&KLOG´OLQNVWR RWKHUEULGJHV ‡ 7KHEULGJHOLQNRQWKHUDGLRLQWHUIDFHDOZD\VXVHVWKHGHIDXOW9$3LQWHUIDFH ,QDQ\EULGJHPRGH9$3LQWHUIDFHVWRDUHQRWDYDLODEOHIRUXVH ([DPSOH Enterprise AP(if-wireless a)#bridge role root-bridge Enterprise AP(if-wireless a)# ++6  5  EULGJHFKDQQHODXWRV\QF 7KLVFRPPDQGDOORZVDFKLOGEULGJHWRDXWRPDWLFDOO\ILQGWKHRSHUDWLQJFKDQQHORILWV SDUHQWEULGJH 6\QWD[ EULGJHFKDQQHODXWRV\QFHQDEOH_GLVDEOH! ‡ HQDEOH7KHEULGJHZLOODXWRPDWLFDOO\VHDUFKDQGILQGWKHRSHUDWLQJ FKDQQHORILWVSDUHQW ‡ GLVDEOH7KHEULGJHPXVWKDYHWKHRSHUDWLQJFKDQQHOPDQXDOO\VHWWRWKH RSHUDWLQJFKDQQHORILWVSDUHQWEULGJH 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV ([DPSOH Enterprise AP(if-wireless a)#bridge channel-auto-sync enable Enable channel auto sync!! Enterprise AP(if-wireless a)# EULGJHOLQNSDUHQW 7KLVFRPPDQGFRQILJXUHVWKH0$&DGGUHVVRIWKHSDUHQWEULGJHQRGH 6\QWD[ EULGJHOLQNSDUHQWPDFDGGUHVV! PDFDGGUHVV7KHZLUHOHVV0$&DGGUHVVRIWKHSDUHQWEULGJHXQLW  KH[DGHFLPDOGLJLWVLQWKHIRUP³[[[[[[[[[[[[´  'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH (YHU\EULGJH H[FHSWWKHURRWEULGJH LQWKHZLUHOHVVEULGJHQHWZRUNPXVW VSHFLI\WKH0$&DGGUHVVRIWKHSDUHQWEULGJHWKDWLVOLQNHGWRWKHURRWEULGJH RUWKHURRWEULGJHLWVHOI ([DPSOH Enterprise AP(if-wireless a)#bridge-link parent 00-08-2d-69-3a-51 Enterprise AP(if-wireless a)# +77 7)@   EULGJHOLQNFKLOG 7KLVFRPPDQGFRQILJXUHVWKH0$&DGGUHVVHVRIFKLOGEULGJHQRGHV 6\QWD[ EULGJHOLQNFKLOGLQGH[!PDFDGGUHVV!  LQGH[7KHOLQNLQGH[QXPEHURIWKHFKLOGQRGH 5DQJH  PDFDGGUHVV7KHZLUHOHVV0$&DGGUHVVRIDFKLOGEULGJHXQLW  KH[DGHFLPDOGLJLWVLQWKHIRUP³[[[[[[[[[[[[´  'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ ,QURRWEULGJHPRGHXSWRVL[FKLOGEULGJHOLQNVFDQEHVSHFLILHGXVLQJOLQN LQGH[QXPEHUVWR ‡ ,QEULGJHPRGHXSWRILYHFKLOGOLQNVFDQEHVSHFLILHGXVLQJOLQNLQGH[ QXPEHUVWR,QGH[QXPEHULVUHVHUYHGIRUWKHSDUHQWOLQNZKLFKPXVW EHVHWXVLQJWKHEULGJHSDUHQWFRPPDQG ([DPSOH Enterprise Enterprise Enterprise Enterprise AP(if-wireless AP(if-wireless AP(if-wireless AP(if-wireless a)#bridge-link child 2 00-08-3e-84-bc-6d a)#bridge-link child 3 00-08-3e-85-13-f2 a)#bridge-link child 4 00-08-3e-84-79-31 a)# EULGJHG\QDPLFHQWU\DJHWLPH 7KLVFRPPDQGVHWVWKHWLPHIRUDJLQJRXWG\QDPLFHQWULHVLQWKH:'6IRUZDUGLQJ WDEOH 6\QWD[ EULGJHG\QDPLFHQWU\DJHWLPHVHFRQGV! VHFRQGV7KHWLPHWRDJHRXWDQDGGUHVVHQWU\ 5DQJH VHFRQGV  'HIDXOW6HWWLQJ VHFRQGV &RPPDQG0RGH *OREDO&RQILJXUDWLRQ +78  5  &RPPDQG8VDJH ,IWKH0$&DGGUHVVRIDQHQWU\LQWKHDGGUHVVWDEOHLVQRWVHHQRQWKH DVVRFLDWHGLQWHUIDFHIRUORQJHUWKDQWKHDJLQJWLPHWKHHQWU\LVGLVFDUGHG ([DPSOH Enterprise AP(config)#bridge dynamic-entry age-time 100 Enterprise AP(config)# VKRZEULGJHDJLQJWLPH 7KLVFRPPDQGGLVSOD\VWKHFXUUHQW:'6IRUZDUGLQJWDEOHDJLQJWLPHVHWWLQJ &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show bridge aging-time Aging time: 300 Enterprise AP# VKRZEULGJHILOWHUHQWU\ 7KLVFRPPDQGGLVSOD\VFXUUHQWHQWULHVLQWKH:'6IRUZDUGLQJWDEOH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show bridge filter-entry max entry numbers =512 current entry nums =13 ***************************************************************************** *********************** Bridge MAC Addr Table ******************************* ***************************************************************************** MAC | Port |Fwd_type| VlanID|origin life|remain Life| Type | 01 80 c2 00 00 00 4095 300 300 Static 01 80 c2 00 00 03 4095 300 300 Static 00 30 f1 f0 9b 20 300 300 Static 00 30 f1 f0 9b 21 300 300 Static 00 30 f1 f0 9b 22 300 300 Static 00 30 f1 f0 9b 23 300 300 Static 00 30 f1 f0 9b 24 300 300 Static 00 30 f1 f0 9b 25 300 300 Static 00 30 f1 f0 9b 26 300 300 Static 00 30 f1 f0 9b 27 300 300 Static 00 30 f1 2f be 30 300 175 Dynamic 00 30 f1 f0 9a 9c 300 300 Static ff ff ff ff ff ff 4095 300 300 Static Enterprise AP# +79 7)@   VKRZEULGJHOLQN 7KLVFRPPDQGGLVSOD\V:'6EULGJHOLQNDQGVSDQQLQJWUHHVHWWLQJVIRUVSHFLILHG LQWHUIDFHV 6\QWD[ VKRZEULGJHOLQNHWKHUQHW_ZLUHOHVVD_J!>LQGH[@! ‡ HWKHUQHW6SHFLILHVWKH(WKHUQHWLQWHUIDFH ‡ ZLUHOHVV6SHFLILHVDZLUHOHVVLQWHUIDFH  D7KHDUDGLRLQWHUIDFH  J7KHJUDGLRLQWHUIDFH  LQGH[7KHLQGH[QXPEHURIDEULGJHOLQN 5DQJH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show bridge link wireless a Interface Wireless A WDS Information ==================================== AP Role: Bridge Channel Auto Sync: Disable Parent: 00-12-34-56-78-9a Child: Child 2: 00-08-12-34-56-de Child 3: 00-00-00-00-00-00 Child 4: 00-00-00-00-00-00 Child 5: 00-00-00-00-00-00 Child 6: 00-00-00-00-00-00 STAs: No WDS Stations. Enterprise AP# Enterprise AP#show bridge link wireless a 2 Port-No : 11 status : Enabled state : Disabled priority : 0 path cost : 19 message age Timer : Inactive message age : 4469 designated-root : priority = 32768, MAC = 00:30:F1:F0:9A:9C designated-cost : 0 designated-bridge : priority = 32768, MAC = 00:30:F1:F0:9A:9C designated-port : priority = 0, port No = 11 forward-transitions : 0 Enterprise AP# +-0  5  Enterprise AP#show bridge link ethernet status : Enabled state : Forwarding priority : 0 path cost : 19 message age Timer : Inactive message age : 4346 designated-root : priority = 32768, MAC = 00:30:F1:F0:9A:9C designated-cost : 0 designated-bridge : priority = 32768, MAC = 00:30:F1:F0:9A:9C designated-port : priority = 0, port No = 1 forward-transitions : 1 Enterprise AP# Spanning Tree Commands 7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQDUHXVHGWRVHWWKH0$&DGGUHVVWDEOH DJLQJWLPHDQGVSDQQLQJWUHHSDUDPHWHUVIRUERWKWKH(WKHUQHWDQGZLUHOHVV LQWHUIDFHV 7DEOH %ULGJH&RPPDQGV &RPPDQG )XQFWLRQ 0RGH   3  !   3DJH +-   &        & +-             +-  =       =   +-           +-  %            +-+         +-+  %    &  )      3= +--  & % )       3= +- EULGJHVWSHQDEOH 7KLVFRPPDQGHQDEOHVWKH6SDQQLQJ7UHH3URWRFRO8VHWKHQRIRUPWRGLVDEOHWKH 6SDQQLQJ7UHH3URWRFRO 6\QWD[ EULGJHVWSHQDEOH QREULGJHVWSHQDEOH 'HIDXOW6HWWLQJ (QDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ +-1  !  ([DPSOH 7KLVH[DPSOHJOREDOO\HQDEOHVWKH6SDQQLQJ7UHH3URWRFRO Enterprise AP(config)bridge stp enable Enterprise AP(config) EULGJHVWSIRUZDUGLQJGHOD\ 8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHEULGJHIRUZDUGWLPHJOREDOO\IRUWKH ZLUHOHVVEULGJH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW 6\QWD[ EULGJHVWSIRUZDUGLQJGHOD\VHFRQGV! QREULGJHVWSIRUZDUGLQJGHOD\ VHFRQGV7LPHLQVHFRQGV 5DQJHVHFRQGV 7KHPLQLPXPYDOXHLVWKHKLJKHURIRU> PD[DJH @ 'HIDXOW6HWWLQJ VHFRQGV &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KLVFRPPDQGVHWVWKHPD[LPXPWLPH LQVHFRQGV WKHURRWGHYLFHZLOOZDLW EHIRUHFKDQJLQJVWDWHV LHGLVFDUGLQJWROHDUQLQJWRIRUZDUGLQJ 7KLVGHOD\LV UHTXLUHGEHFDXVHHYHU\GHYLFHPXVWUHFHLYHLQIRUPDWLRQDERXWWRSRORJ\ FKDQJHVEHIRUHLWVWDUWVWRIRUZDUGIUDPHV,QDGGLWLRQHDFKSRUWQHHGVWLPHWR OLVWHQIRUFRQIOLFWLQJLQIRUPDWLRQWKDWZRXOGPDNHLWUHWXUQWRWKHGLVFDUGLQJ VWDWHRWKHUZLVHWHPSRUDU\GDWDORRSVPLJKWUHVXOW ([DPSOH Enterprise AP(config)#bridge stp forwarding-delay 20 Enterprise AP(config)# EULGJHVWSKHOORWLPH 8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHEULGJHKHOORWLPHJOREDOO\IRUWKH ZLUHOHVVEULGJH8VHWKHQRIRUPWRUHVWRUHWKHGHIDXOW 6\QWD[ EULGJHVWSKHOORWLPHWLPH! QREULGJHVWSKHOORWLPH WLPH7LPHLQVHFRQGV 5DQJHVHFRQGV  7KHPD[LPXPYDOXHLVWKHORZHURIRU> PD[DJH @ 'HIDXOW6HWWLQJ VHFRQGV +-2  5  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KLVFRPPDQGVHWVWKHWLPHLQWHUYDO LQVHFRQGV DWZKLFKWKHURRWGHYLFH WUDQVPLWVDFRQILJXUDWLRQPHVVDJH ([DPSOH Enterprise AP(config)#bridge stp hello-time 5 Enterprise AP(config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nterprise AP(config)#bridge stp max-age 40 Enterprise AP(config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nterprise AP(config)#bridge stp-bridge priority 40000 Enterprise AP(config)# EULGJHOLQNSDWKFRVW 8VHWKLVFRPPDQGWRFRQILJXUHWKHVSDQQLQJWUHHSDWKFRVWIRUWKHVSHFLILHGSRUW 6\QWD[ EULGJHOLQNSDWKFRVWLQGH[!FRVW! ‡ LQGH[6SHFLILHVWKHEULGJHOLQNQXPEHURQWKHZLUHOHVVEULGJH 5DQJH UHTXLUHGRQZLUHOHVVLQWHUIDFHRQO\ ‡ FRVW7KHSDWKFRVWIRUWKHSRUW 5DQJH 'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KLVFRPPDQGLVXVHGE\WKH6SDQQLQJ7UHH3URWRFROWRGHWHUPLQHWKHEHVW SDWKEHWZHHQGHYLFHV7KHUHIRUHORZHUYDOXHVVKRXOGEHDVVLJQHGWRSRUWV DWWDFKHGWRIDVWHUPHGLDDQGKLJKHUYDOXHVDVVLJQHGWRSRUWVZLWKVORZHU PHGLD ‡ 3DWKFRVWWDNHVSUHFHGHQFHRYHUSRUWSULRULW\ ([DPSOH Enterprise AP(if-wireless a)#bridge-link path-cost 1 50 Enterprise AP(if-wireless a)# EULGJHOLQNSRUWSULRULW\ 8VHWKLVFRPPDQGWRFRQILJXUHWKHSULRULW\IRUWKHVSHFLILHGSRUW +-4  5  6\QWD[ EULGJHOLQNSRUWSULRULW\LQGH[!SULRULW\! ‡ LQGH[6SHFLILHVWKHEULGJHOLQNQXPEHURQWKHZLUHOHVVEULGJH 5DQJH UHTXLUHGRQZLUHOHVVLQWHUIDFHRQO\ ‡ SULRULW\7KHSULRULW\IRUDSRUW 5DQJH 'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ &RPPDQG8VDJH ‡ 7KLVFRPPDQGGHILQHVWKHSULRULW\IRUWKHXVHRIDSRUWLQWKH6SDQQLQJ7UHH 3URWRFRO,IWKHSDWKFRVWIRUDOOSRUWVRQDZLUHOHVVEULGJHDUHWKHVDPHWKH SRUWZLWKWKHKLJKHVWSULRULW\ WKDWLVORZHVWYDOXH ZLOOEHFRQILJXUHGDVDQ DFWLYHOLQNLQWKHVSDQQLQJWUHH ‡ :KHUHPRUHWKDQRQHSRUWLVDVVLJQHGWKHKLJKHVWSULRULW\WKHSRUWZLWKORZHVW QXPHULFLGHQWLILHUZLOOEHHQDEOHG ([DPSOH Enterprise AP(if-wireless a)#bridge-link port-priority 1 64 Enterprise AP(if-wireless a)# 5HODWHG&RPPDQGV EULGJHOLQNSDWKFRVW  VKRZEULGJHVWS 7KLVFRPPDQGGLVSOD\VDJLQJWLPHDQGVSDQQLQJWUHHVHWWLQJVIRUWKH(WKHUQHWDQG ZLUHOHVVLQWHUIDFHV 6\QWD[ VKRZEULGJHVWS &RPPDQG0RGH ([HF +-5  !  ([DPSOH Enterprise AP#show bridge stp Bridge MAC : 00:12:CF:05:B7:84 Status : Disabled priority : 0 designated-root : priority = 0, MAC = 00:00:00:00:00:00 root-path-cost : 0 root-Port-no : 0 Hold Time 1 Seconds Hello Time 2 Seconds Maximum Age 20 Seconds Forward Delay 15 Seconds bridge Hello Time 2 Seconds bridge Maximum Age 20 Seconds bridge Forward Delay : 15 Seconds time-since-top-change: 89185 Seconds topology-change-count: 0 Enterprise AP# +-6  5  Ethernet Interface Commands 7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQFRQILJXUHFRQQHFWLRQSDUDPHWHUVIRUWKH (WKHUQHWSRUWDQGZLUHOHVVLQWHUIDFH 7DEOH (WKHUQHW,QWHUIDFH&RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH    33        +9.      3 +9        3 +9   "  3    3 +9    ), "C  "  3 +9  =    =     3    3 +9   & ) 3    3 +9  &    &    3   3= +9 LQWHUIDFHHWKHUQHW 7KLVFRPPDQGHQWHUV(WKHUQHWLQWHUIDFHFRQILJXUDWLRQPRGH 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH 7RVSHFLI\WKH%DVH7;QHWZRUNLQWHUIDFHHQWHUWKHIROORZLQJFRPPDQG Enterprise AP(config)#interface ethernet Enterprise AP(if-ethernet)# +87 3    GQVVHUYHU 7KLVFRPPDQGVSHFLILHVWKHDGGUHVVIRUWKHSULPDU\RUVHFRQGDU\GRPDLQQDPH VHUYHUWREHXVHGIRUQDPHWRDGGUHVVUHVROXWLRQ 6\QWD[ GQVSULPDU\VHUYHUVHUYHUDGGUHVV! GQVVHFRQGDU\VHUYHUVHUYHUDGGUHVV! ‡ SULPDU\VHUYHU3ULPDU\VHUYHUXVHGIRUQDPHUHVROXWLRQ ‡ VHFRQGDU\VHUYHU6HFRQGDU\VHUYHUXVHGIRUQDPHUHVROXWLRQ ‡ VHUYHUDGGUHVV,3DGGUHVVRIGRPDLQQDPHVHUYHU 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KHSULPDU\DQGVHFRQGDU\QDPHVHUYHUVDUHTXHULHGLQVHTXHQFH ([DPSOH 7KLVH[DPSOHVSHFLILHVWZRGRPDLQQDPHVHUYHUV Enterprise AP(if-ethernet)#dns primary-server 192.168.1.55 Enterprise AP(if-ethernet)#dns secondary-server 10.1.0.55 Enterprise AP(if-ethernet)# 5HODWHG&RPPDQGV VKRZLQWHUIDFHHWKHUQHW  LSDGGUHVV 7KLVFRPPDQGVHWVWKH,3DGGUHVVIRUWKHDFFHVVSRLQW8VHWKHQRIRUPWRUHVWRUH WKHGHIDXOW,3DGGUHVV 6\QWD[ LSDGGUHVVLSDGGUHVV!QHWPDVN!JDWHZD\! QRLSDGGUHVV ‡ LSDGGUHVV,3DGGUHVV ‡ QHWPDVN1HWZRUNPDVNIRUWKHDVVRFLDWHG,3VXEQHW7KLVPDVNLGHQWLILHV WKHKRVWDGGUHVVELWVXVHGIRUURXWLQJWRVSHFLILFVXEQHWV ‡ JDWHZD\,3DGGUHVVRIWKHGHIDXOWJDWHZD\ 'HIDXOW6HWWLQJ ,3DGGUHVV 1HWPDVN +88  5  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ (WKHUQHW &RPPDQG8VDJH ‡ '+&3LVHQDEOHGE\GHIDXOW7RPDQXDOO\FRQILJXUHDQHZ,3DGGUHVV\RX PXVWILUVWGLVDEOHWKH'+&3FOLHQWZLWKWKHQRLSGKFSFRPPDQG ‡ HWKHUQHW@ 'HIDXOW6HWWLQJ (WKHUQHWLQWHUIDFH &RPPDQG0RGH ([HF +91 7   ([DPSOH Enterprise AP#show interface ethernet Ethernet Interface Information ======================================== IP Address : 192.168.1.1 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.1.253 Primary DNS : 192.168.1.55 Secondary DNS : 10.1.0.55 Speed-duplex : 100Base-TX Half Duplex Admin status : Up Operational status : Up ======================================== Enterprise AP# Wireless Interface Commands 7KHFRPPDQGVGHVFULEHGLQWKLVVHFWLRQFRQILJXUHFRQQHFWLRQSDUDPHWHUVIRUWKH ZLUHOHVVLQWHUIDFHV 7DEOH :LUHOHVV,QWHUIDFH&RPPDQGV &RPPDQG )XQFWLRQ 0RGH  & 3&       +9+  "   4("         7 +9+     = &      %  7 +9-  7:; +9-  7 +99  7 +..                   =     %  &        3DJH  & (S   &          7 +..    2       -./   7:# ; +.       -./    7:# ; +.               7 +.   )      7 +.           7 +. +92  5  7DEOH :LUHOHVV,QWHUIDFH&RPPDQGV &RPPDQG )XQFWLRQ 0RGH 3DJH      &           7 +.      &      &%   #     7 +.         %E     7 +.     %E  &  '!   7                +.   3(    (     7:; +.+   3(    <     7:# ; +.-   (   &   74(" +.-  74(" +.9         ? & )  74(" +.9 =      =      74("  &     +.       :&     74(" ; &       4("  +.          &        74(" +.   & ) &   74(" +  & &  &    &  3= +  &   & & &   3=   + +93     7   LQWHUIDFHZLUHOHVV 7KLVFRPPDQGHQWHUVZLUHOHVVLQWHUIDFHFRQILJXUDWLRQPRGH 6\QWD[ LQWHUIDFHZLUHOHVVD_J! ‡ DDUDGLRLQWHUIDFH ‡ JJUDGLRLQWHUIDFH 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH 7RVSHFLI\WKHDLQWHUIDFHHQWHUWKHIROORZLQJFRPPDQG Enterprise AP(config)#interface wireless a Enterprise AP(if-wireless a)# YDS 7KLVFRPPDQGSURYLGHVDFFHVVWRWKH9$3 9LUWXDO$FFHVV3RLQW LQWHUIDFH FRQILJXUDWLRQPRGH 6\QWD[ YDSYDSLG! YDSLG7KHQXPEHUWKDWLGHQWLILHVWKH9$3LQWHUIDFH 2SWLRQV 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV ([DPSOH Enterprise AP(if-wireless g)#vap 0 Enterprise AP(if-wireless g: VAP[0])# +94  5  VSHHG 7KLVFRPPDQGFRQILJXUHVWKHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVVSRLQW WUDQVPLWVXQLFDVWSDFNHWV 6\QWD[ VSHHGVSHHG! VSHHG0D[LPXPDFFHVVVSHHGDOORZHGIRUZLUHOHVVFOLHQWV 2SWLRQV IRU D 0ESV  2SWLRQV IRU EJ  0ESV 'HIDXOW6HWWLQJ 0ESV &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ 7KHPD[LPXPWUDQVPLVVLRQGLVWDQFHLVDIIHFWHGE\WKHGDWDUDWH7KHORZHU WKHGDWDUDWHWKHORQJHUWKHWUDQVPLVVLRQGLVWDQFH3OHDVHUHIHUWRWKHWDEOH IRUPD[LPXPGLVWDQFHVRQSDJH& ‡ :KHQWXUERPRGHLVHQDEOHG SDJH IRUDWKHHIIHFWLYH PD[LPXPVSHHGVSHFLILHGE\WKLVFRPPDQGLVGRXEOHWKHHQWHUHGYDOXH HJVHWWLQJWKHVSHHGWR0ESVOLPLWVWKHHIIHFWLYHPD[LPXPVSHHGWR 0ESV  ([DPSOH Enterprise AP(if-wireless g)#speed 6 Enterprise AP(if-wireless g)# WXUER 7KLVFRPPDQGVHWVWKHDFFHVVSRLQWWRDQHQKDQFHGSURSULHWDU\PRGXODWLRQPRGH QRWUHJXODWHGLQ,(((D WKDWSURYLGHVDKLJKHUGDWDUDWHRIXSWR0ESV 6\QWD[ WXUERVWDWLF_G\QDPLF! QRWXUER VWDWLF$OZD\VXVHVWXUERPRGH G\QDPLF:LOOXVHWXUERPRGHZKHQQRRWKHUQHDUE\DFFHVVSRLQWVDUH GHWHFWHGRUDFWLYH 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVVD +95 7   &RPPDQG8VDJH ‡ 7KHQRUPDODZLUHOHVVRSHUDWLRQPRGHSURYLGHVFRQQHFWLRQVXSWR 0ESV7XUER0RGHLVDQHQKDQFHGPRGH QRWUHJXODWHGLQ,((( D WKDWSURYLGHVDKLJKHUGDWDUDWHRIXSWR0ESV(QDEOLQJ7XUER 0RGHDOORZVWKHDFFHVVSRLQWWRSURYLGHFRQQHFWLRQVXSWR0ESV ‡ ,QQRUPDOPRGHWKHDFFHVVSRLQWSURYLGHVDFKDQQHOEDQGZLGWKRI0+] DQGVXSSRUWVWKHPD[LPXPQXPEHURIFKDQQHOVSHUPLWWHGE\ORFDO UHJXODWLRQV HJFKDQQHOVIRUWKH8QLWHG6WDWHV ,Q7XUER0RGHWKH FKDQQHOEDQGZLGWKLVLQFUHDVHGWR0+]WRVXSSRUWWKHLQFUHDVHGGDWD UDWH+RZHYHUWKLVUHGXFHVWKHQXPEHURIFKDQQHOVVXSSRUWHG HJ FKDQQHOVIRUWKH8QLWHG6WDWHV  ([DPSOH Enterprise AP(if-wireless a)#turbo Enterprise AP(if-wireless a)# PXOWLFDVWGDWDUDWH 7KLVFRPPDQGFRQILJXUHVWKHPD[LPXPGDWDUDWHDWZKLFKWKHDFFHVVSRLQW WUDQVPLWVPXOWLFDVWDQGPDQDJHPHQWSDFNHWV H[FOXGLQJEHDFRQSDFNHWV RQWKH ZLUHOHVVLQWHUIDFH 6\QWD[ PXOWLFDVWGDWDUDWHVSHHG! VSHHG0D[LPXPWUDQVPLWVSHHGDOORZHGIRUPXOWLFDVWGDWD 2SWLRQV IRU D 0ESV 2SWLRQVIRUEJ 0ESV 'HIDXOW6HWWLQJ 0ESVIRUEJ 0ESVIRUD &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV ([DPSOH Enterprise AP(if-wireless g)#multicast-data-rate 5.5 Enterprise AP(if-wireless g)# +96  5  FKDQQHO 7KLVFRPPDQGFRQILJXUHVWKHUDGLRFKDQQHOWKURXJKZKLFKWKHDFFHVVSRLQW FRPPXQLFDWHVZLWKZLUHOHVVFOLHQWV 6\QWD[ FKDQQHOFKDQQHO_DXWR! ‡ FKDQQHO0DQXDOO\VHWVWKHUDGLRFKDQQHOXVHGIRUFRPPXQLFDWLRQVZLWK ZLUHOHVVFOLHQWV 5DQJHIRUD IRUQRUPDOPRGHDQGIRUWXUER PRGH5DQJHIRUEJWR ‡ DXWR$XWRPDWLFDOO\VHOHFWVDQXQRFFXSLHGFKDQQHO LIDYDLODEOH  2WKHUZLVHWKHORZHVWFKDQQHOLVVHOHFWHG 'HIDXOW6HWWLQJ $XWRPDWLFFKDQQHOVHOHFWLRQ &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ 7KHDYDLODEOHFKDQQHOVHWWLQJVDUHOLPLWHGE\ORFDOUHJXODWLRQVZKLFK GHWHUPLQHWKHQXPEHURIFKDQQHOVWKDWDUHDYDLODEOH ‡ :KHQPXOWLSOHDFFHVVSRLQWVDUHGHSOR\HGLQWKHVDPHDUHDEHVXUHWR FKRRVHDFKDQQHOVHSDUDWHGE\DWOHDVWWZRFKDQQHOVIRUDWRDYRLG KDYLQJWKHFKDQQHOVLQWHUIHUHZLWKHDFKRWKHUDQGDWOHDVWILYHFKDQQHOVIRU EJORQJ_VKRUWRUORQJ@ ‡ ORQJ6HWVWKHSUHDPEOHWRORQJ PLFURVHFRQGV  ‡ VKRUWRUORQJ6HWVWKHSUHDPEOHWRVKRUWLIQREFOLHQWVDUH GHWHFWHG PLFURVHFRQGV  'HIDXOW6HWWLQJ 6KRUWRU/RQJ &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVVEJ &RPPDQG8VDJH ‡ 8VLQJDVKRUWSUHDPEOHLQVWHDGRIDORQJSUHDPEOHFDQLQFUHDVHGDWD WKURXJKSXWRQWKHDFFHVVSRLQWEXWUHTXLUHVWKDWDOOFOLHQWVFDQVXSSRUWD VKRUWSUHDPEOH ‡ 6HWWKHSUHDPEOHWRORQJWRHQVXUHWKHDFFHVVSRLQWFDQVXSSRUWDOOE DQGJFOLHQWV ([DPSOH Enterprise AP(if-wireless g)#preamble short Enterprise AP(if-wireless g)# DQWHQQDFRQWURO 7KLVFRPPDQGVHOHFWVWKHXVHRIWZRGLYHUVLW\DQWHQQDVRUDVLQJOHDQWHQQDIRUWKH UDGLRLQWHUIDFH 6\QWD[ DQWHQQDFRQWUROGLYHUVLW\_OHIW_ULJKW! ‡ GLYHUVLW\7KHUDGLRXVHVERWKDQWHQQDVLQDGLYHUVLW\V\VWHP6HOHFWWKLV PHWKRGZKHQWKH$QWHQQD,'LVVHWWR³'HIDXOW$QWHQQD´WRXVHWKHDFFHVV SRLQW VLQWHJUDWHGDQWHQQDV7KHDFFHVVSRLQWGRHVQRWVXSSRUWH[WHUQDO GLYHUVLW\DQWHQQDV ‡ OHIW7KHUDGLRRQO\XVHVWKHDQWHQQDRQWKHOHIWVLGH WKHVLGHIDUWKHVWIURP WKHDFFHVVSRLQW/('V 7KHDFFHVVSRLQWGRHVQRWVXSSRUWDQH[WHUQDO DQWHQQDFRQQHFWLRQRQLWVOHIWDQWHQQD7KHUHIRUHWKLVPHWKRGLVQRWYDOLG IRUWKHDFFHVVSRLQW +99 7   ‡ ULJKW7KHUDGLRRQO\XVHVWKHDQWHQQDRQWKHULJKWVLGH WKHVLGHFORVHVW WRWKHDFFHVVSRLQW/('V 6HOHFWWKLVPHWKRGZKHQXVLQJDQRSWLRQDO H[WHUQDODQWHQQDWKDWLVFRQQHFWHGWRWKHULJKWDQWHQQDFRQQHFWRU 'HIDXOW6HWWLQJ 'LYHUVLW\ &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH 7KHDQWHQQD,'PXVWEHVHOHFWHGLQFRQMXQFWLRQZLWKWKHDQWHQQDFRQWURO PHWKRGWRFRQILJXUHSURSHUXVHRIDQ\RIWKHDQWHQQDRSWLRQV ([DPSOH Enterprise AP(if-wireless g)#antenna control right Enterprise AP(if-wireless g)# DQWHQQDLG 7KLVFRPPDQGVSHFLILHVWKHDQWHQQDW\SHFRQQHFWHGWRWKHDFFHVVSRLQW UHSUHVHQWHGE\DIRXUGLJLWKH[DGHFLPDO,'QXPEHUHLWKHUWKHLQWHJUDWHGGLYHUVLW\ DQWHQQDV WKH'HIDXOW$QWHQQD RUDQRSWLRQDOH[WHUQDODQWHQQD 6\QWD[ DQWHQQDLGDQWHQQDLG! ‡ DQWHQQDLG6SHFLILHVWKH,'QXPEHURIDQDSSURYHGDQWHQQDWKDWLV FRQQHFWHGWRWKHDFFHVVSRLQW 5DQJH[[)))) 'HIDXOW6HWWLQJ [ EXLOWLQDQWHQQDV &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ 7KHRSWLRQDOH[WHUQDODQWHQQDV LIDQ\ WKDWDUHFHUWLILHGIRUXVHZLWKWKH DFFHVVSRLQWDUHOLVWHGE\W\SLQJDQWHQQDFRQWUROLG"6HOHFWLQJWKH FRUUHFWDQWHQQD,'HQVXUHVWKDWWKHDFFHVVSRLQW VUDGLRWUDQVPLVVLRQVDUH ZLWKLQUHJXODWRU\SRZHUOLPLWVIRUWKHFRXQWU\RIRSHUDWLRQ ‡ 7KHDQWHQQD,'PXVWEHVHOHFWHGLQFRQMXQFWLRQZLWKWKHDQWHQQDFRQWURO PHWKRGWRFRQILJXUHSURSHUXVHRIDQ\RIWKHDQWHQQDRSWLRQV ([DPSOH Enterprise AP(if-wireless g)#antenna id 0000 Enterprise AP(if-wireless g)# +.0  5  DQWHQQDORFDWLRQ 7KLVFRPPDQGVHOHFWVWKHDQWHQQDPRXQWLQJORFDWLRQIRUWKHUDGLRLQWHUIDFH 6\QWD[ DQWHQQDORFDWLRQLQGRRU_RXWGRRU! ‡ LQGRRU7KHDQWHQQDLVPRXQWHGLQGRRUV ‡ RXWGRRU7KHDQWHQQDLVPRXQWHGRXWGRRUV 'HIDXOW6HWWLQJ ,QGRRU &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ :KHQDQH[WHUQDODQWHQQDLVVHOHFWHGWKHDQWHQQDFRQWUROPXVWEHVHWWR ³ULJKW´ ‡ 6HOHFWLQJWKHFRUUHFWORFDWLRQHQVXUHVWKDWWKHDFFHVVSRLQWRQO\XVHVUDGLR FKDQQHOVWKDWDUHSHUPLWWHGLQWKHFRXQWU\RIRSHUDWLRQ ([DPSOH Enterprise AP(if-wireless g)#antenna location indoor Enterprise AP(if-wireless g)# EHDFRQLQWHUYDO 7KLVFRPPDQGFRQILJXUHVWKHUDWHDWZKLFKEHDFRQVLJQDOVDUHWUDQVPLWWHGIURPWKH DFFHVVSRLQW 6\QWD[ EHDFRQLQWHUYDOLQWHUYDO! LQWHUYDO7KHUDWHIRUWUDQVPLWWLQJEHDFRQVLJQDOV 5DQJH  PLOOLVHFRQGV 'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH 7KHEHDFRQVLJQDOVDOORZZLUHOHVVFOLHQWVWRPDLQWDLQFRQWDFWZLWKWKHDFFHVV SRLQW7KH\PD\DOVRFDUU\SRZHUPDQDJHPHQWLQIRUPDWLRQ +.1 7   ([DPSOH Enterprise AP(if-wireless g)#beacon-interval 150 Enterprise AP(if-wireless g)# GWLPSHULRG 7KLVFRPPDQGFRQILJXUHVWKHUDWHDWZKLFKVWDWLRQVLQVOHHSPRGHPXVWZDNHXSWR UHFHLYHEURDGFDVWPXOWLFDVWWUDQVPLVVLRQV 6\QWD[ GWLPSHULRGLQWHUYDO! LQWHUYDO,QWHUYDOEHWZHHQWKHEHDFRQIUDPHVWKDWWUDQVPLWEURDGFDVWRU PXOWLFDVWWUDIILF 5DQJH  EHDFRQIUDPHV 'HIDXOW6HWWLQJ &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ 7KH'HOLYHU\7UDIILF,QGLFDWLRQ0DS '7,0 SDFNHWLQWHUYDOYDOXHLQGLFDWHV KRZRIWHQWKH0$&OD\HUIRUZDUGVEURDGFDVWPXOWLFDVWWUDIILF7KLV SDUDPHWHULVQHFHVVDU\WRZDNHXSVWDWLRQVWKDWDUHXVLQJ3RZHU6DYH PRGH ‡ 7KH'7,0LVWKHLQWHUYDOEHWZHHQWZRV\QFKURQRXVIUDPHVZLWKEURDGFDVW PXOWLFDVWLQIRUPDWLRQ7KHGHIDXOWYDOXHRILQGLFDWHVWKDWWKHDFFHVVSRLQW ZLOOVDYHDOOEURDGFDVWPXOWLFDVWIUDPHVIRUWKH%DVLF6HUYLFH6HW %66 DQG IRUZDUGWKHPDIWHUHYHU\VHFRQGEHDFRQ ‡ 8VLQJVPDOOHU'7,0LQWHUYDOVGHOLYHUVEURDGFDVWPXOWLFDVWIUDPHVLQDPRUH WLPHO\PDQQHUFDXVLQJVWDWLRQVLQ3RZHU6DYHPRGHWRZDNHXSPRUH RIWHQDQGGUDLQSRZHUIDVWHU8VLQJKLJKHU'7,0YDOXHVUHGXFHVWKHSRZHU XVHGE\VWDWLRQVLQ3RZHU6DYHPRGHEXWGHOD\VWKHWUDQVPLVVLRQRI EURDGFDVWPXOWLFDVWIUDPHV ([DPSOH Enterprise AP(if-wireless g)#dtim-period 100 Enterprise AP(if-wireless g)# +.2  5  IUDJPHQWDWLRQOHQJWK 7KLVFRPPDQGFRQILJXUHVWKHPLQLPXPSDFNHWVL]HWKDWFDQEHIUDJPHQWHGZKHQ SDVVLQJWKURXJKWKHDFFHVVSRLQW 6\QWD[ IUDJPHQWDWLRQOHQJWKOHQJWK! OHQJWK0LQLPXPSDFNHWVL]HIRUZKLFKIUDJPHQWDWLRQLVDOORZHG 5DQJH  E\WHV 'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ ,IWKHSDFNHWVL]HLVVPDOOHUWKDQWKHSUHVHW)UDJPHQWVL]HWKHSDFNHWZLOO QRWEHVHJPHQWHG ‡ )UDJPHQWDWLRQRIWKH3'8V 3DFNDJH'DWD8QLW FDQLQFUHDVHWKHUHOLDELOLW\ RIWUDQVPLVVLRQVEHFDXVHLWLQFUHDVHVWKHSUREDELOLW\RIDVXFFHVVIXO WUDQVPLVVLRQGXHWRVPDOOHUIUDPHVL]H,IWKHUHLVVLJQLILFDQWLQWHUIHUHQFH SUHVHQWRUFROOLVLRQVGXHWRKLJKQHWZRUNXWLOL]DWLRQWU\VHWWLQJWKHIUDJPHQW VL]HWRVHQGVPDOOHUIUDJPHQWV7KLVZLOOVSHHGXSWKHUHWUDQVPLVVLRQRI VPDOOHUIUDPHV+RZHYHULWLVPRUHHIILFLHQWWRVHWWKHIUDJPHQWVL]HODUJHU LIYHU\OLWWOHRUQRLQWHUIHUHQFHLVSUHVHQWEHFDXVHLWUHTXLUHVRYHUKHDGWR VHQGPXOWLSOHIUDPHV ([DPSOH Enterprise AP(if-wireless g)#fragmentation-length 512 Enterprise AP(if-wireless g)# UWVWKUHVKROG 7KLVFRPPDQGVHWVWKHSDFNHWVL]HWKUHVKROGDWZKLFKD5HTXHVWWR6HQG 576  VLJQDOPXVWEHVHQWWRWKHUHFHLYLQJVWDWLRQSULRUWRWKHVHQGLQJVWDWLRQVWDUWLQJ FRPPXQLFDWLRQV 6\QWD[ UWVWKUHVKROGWKUHVKROG! WKUHVKROG7KUHVKROGSDFNHWVL]HIRUZKLFKWRVHQGDQ576 5DQJH  E\WHV +.3 7   'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ ,IWKHWKUHVKROGLVVHWWRWKHDFFHVVSRLQWDOZD\VVHQGV576VLJQDOV,IVHW WRWKHDFFHVVSRLQWQHYHUVHQGV576VLJQDOV,IVHWWRDQ\RWKHUYDOXH DQGWKHSDFNHWVL]HHTXDOVRUH[FHHGVWKH576WKUHVKROGWKH576&76 5HTXHVWWR6HQG&OHDUWR6HQG PHFKDQLVPZLOOEHHQDEOHG ‡ 7KHDFFHVVSRLQWVHQGV576IUDPHVWRDUHFHLYLQJVWDWLRQWRQHJRWLDWHWKH VHQGLQJRIDGDWDIUDPH$IWHUUHFHLYLQJDQ576IUDPHWKHVWDWLRQVHQGVD &76IUDPHWRQRWLI\WKHVHQGLQJVWDWLRQWKDWLWFDQVWDUWVHQGLQJGDWD ‡ $FFHVVSRLQWVFRQWHQGLQJIRUWKHZLUHOHVVPHGLXPPD\QRWEHDZDUHRI HDFKRWKHU7KH576&76PHFKDQLVPFDQVROYHWKLV³+LGGHQ1RGH´ SUREOHP ([DPSOH Enterprise AP(if-wireless g)#rts-threshold 256 Enterprise AP(if-wireless g)# VXSHUD 7KLVFRPPDQGHQDEOHV$WKHURVSURSULHWDU\6XSHU$SHUIRUPDQFHHQKDQFHPHQWV 8VHWKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ 6\QWD[ >QR@VXSHUD 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVVD &RPPDQG8VDJH 6XSHU$HQKDQFHPHQWVLQFOXGHEXUVWLQJFRPSUHVVLRQDQGIDVWIUDPHV 0D[LPXPWKURXJKSXWUDQJHVEHWZHHQWR0ESVIRUFRQQHFWLRQVWR $WKHURVFRPSDWLEOHFOLHQWV ([DPSOH Enterprise AP(if-wireless a)#super a Enterprise AP(if-wireless a)# +.4  5  VXSHUJ 7KLVFRPPDQGHQDEOHV$WKHURVSURSULHWDU\6XSHU*SHUIRUPDQFHHQKDQFHPHQWV 8VHWKHQRIRUPWRGLVDEOHWKLVIXQFWLRQ 6\QWD[ >QR@VXSHUJ 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVVJ &RPPDQG8VDJH 7KHVHHQKDQFHPHQWVLQFOXGHEXUVWLQJFRPSUHVVLRQIDVWIUDPHVDQGG\QDPLF WXUER0D[LPXPWKURXJKSXWUDQJHVEHWZHHQWR0ESVIRUFRQQHFWLRQVWR $WKHURVFRPSDWLEOHFOLHQWV ([DPSOH Enterprise AP(if-wireless a)#super g Enterprise AP(if-wireless a)# GHVFULSWLRQ 7KLVFRPPDQGDGGVDGHVFULSWLRQWRDWKHZLUHOHVVLQWHUIDFH8VHWKHQRIRUPWR UHPRYHWKHGHVFULSWLRQ 6\QWD[ GHVFULSWLRQVWULQJ! QRGHVFULSWLRQ VWULQJ&RPPHQWRUDGHVFULSWLRQIRUWKLVLQWHUIDFH 5DQJHFKDUDFWHUV 'HIDXOW6HWWLQJ 5DGLR$(QWHUSULVHD$FFHVV3RLQW 5DGLR*(QWHUSULVHJ$FFHVV3RLQW &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#description RD-AP#3 Enterprise AP(if-wireless g: VAP[0])# +.5 7   VVLG 7KLVFRPPDQGFRQILJXUHVWKHVHUYLFHVHWLGHQWLILHU 66,'  6\QWD[ VVLGVWULQJ! VWULQJ7KHQDPHRIDEDVLFVHUYLFHVHWVXSSRUWHGE\WKHDFFHVVSRLQW 5DQJH FKDUDFWHUV 'HIDXOW6HWWLQJ D5DGLR9$3B7(67B$ WR J5DGLR9$3B7(67B* WR &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 &RPPDQG8VDJH &OLHQWVWKDWZDQWWRFRQQHFWWRWKHZLUHOHVVQHWZRUNYLDDQDFFHVVSRLQWPXVW VHWWKHLU66,'VWRWKHVDPHDVWKDWRIWKHDFFHVVSRLQW ([DPSOH Enterprise AP(if-wireless g: VAP[0])#ssid RD-AP#3 Enterprise AP(if-wireless g)# FORVHGV\VWHP 7KLVFRPPDQGSURKLELWVDFFHVVWRFOLHQWVZLWKRXWDSUHFRQILJXUHG66,'8VHWKHQR IRUPWRGLVDEOHWKLVIHDWXUH 6\QWD[ FORVHGV\VWHP QRFORVHGV\VWHP 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 &RPPDQG8VDJH :KHQFORVHGV\VWHPLVHQDEOHGWKHDFFHVVSRLQWZLOOQRWLQFOXGHLWV66,'LQ EHDFRQPHVVDJHV1RUZLOOLWUHVSRQGWRSUREHUHTXHVWVIURPFOLHQWVWKDWGR QRWLQFOXGHDIL[HG66,' ([DPSOH Enterprise AP(if-wireless g: VAP[0])#closed-system Enterprise AP(if-wireless g)# +.6  5  PD[DVVRFLDWLRQ 7KLVFRPPDQGFRQILJXUHVWKHPD[LPXPQXPEHURIFOLHQWVWKDWFDQEHDVVRFLDWHG ZLWKWKHDFFHVVSRLQWDWWKHVDPHWLPH 6\QWD[ PD[DVVRFLDWLRQFRXQW! FRXQW0D[LPXPQXPEHURIDVVRFLDWHGVWDWLRQV 5DQJH  'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#max-association 32 Enterprise AP(if-wireless g)# DVVRFWLPHRXWLQWHUYDO 7KLVFRPPDQGFRQILJXUHVWKHLGOHWLPHLQWHUYDO ZKHQQRIUDPHVDUHVHQW DIWHU ZKLFKWKHFOLHQWLVGLVDVVRFLDWHGIURPWKH9$3LQWHUIDFH 6\QWD[ DVVRFWLPHRXWLQWHUYDOPLQXWHV! PLQXWHV7KHQXPEHURIPLQXWHVRILQDFWLYLW\EHIRUHGLVDVVRFLDWLRQ 5DQJH  'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#association-timeout-interval 20 Enterprise AP(if-wireless g: VAP[0])# DXWKWLPHRXWYDOXH 7KLVFRPPDQGFRQILJXUHVWKHWLPHLQWHUYDOZLWKLQZKLFKFOLHQWVPXVWFRPSOHWH DXWKHQWLFDWLRQWRWKH9$3LQWHUIDFH 6\QWD[ DXWKWLPHRXWYDOXHPLQXWHV! PLQXWHV7KHQXPEHURIPLQXWHVEHIRUHUHDXWKHQWLFDWLRQ 5DQJH  +07 7   'HIDXOW6HWWLQJ  &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 ([DPSOH Enterprise AP(if-wireless g: VAP[0])#auth-timeout-value 40 Enterprise AP(if-wireless g: VAP[0])# VKXWGRZQ 7KLVFRPPDQGGLVDEOHVWKHZLUHOHVVLQWHUIDFH8VHWKHQRIRUPWRUHVWDUWWKH LQWHUIDFH 6\QWD[ VKXWGRZQ QRVKXWGRZQ 'HIDXOW6HWWLQJ ,QWHUIDFHHQDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 &RPPDQG8VDJH QR@URJXHDSHQDEOH 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ :KLOHWKHDFFHVVSRLQWVFDQVDFKDQQHOIRUURJXH$3VZLUHOHVVFOLHQWVZLOO QRWEHDEOHWRFRQQHFWWRWKHDFFHVVSRLQW7KHUHIRUHDYRLGIUHTXHQW VFDQQLQJRUVFDQVRIDORQJGXUDWLRQXQOHVVWKHUHLVDUHDVRQWREHOLHYHWKDW PRUHLQWHQVLYHVFDQQLQJLVUHTXLUHGWRILQGDURJXH$3 +2  5  ‡ $³URJXH$3´LVHLWKHUDQDFFHVVSRLQWWKDWLVQRWDXWKRUL]HGWRSDUWLFLSDWH LQWKHZLUHOHVVQHWZRUNRUDQDFFHVVSRLQWWKDWGRHVQRWKDYHWKHFRUUHFW VHFXULW\FRQILJXUDWLRQ5RJXHDFFHVVSRLQWVFDQEHLGHQWLILHGE\XQNQRZQ %66,' 0$&DGGUHVV RU66,'FRQILJXUDWLRQ$GDWDEDVHRIQHDUE\DFFHVV SRLQWVVKRXOGWKHUHIRUHEHPDLQWDLQHGRQD5$',86VHUYHUDOORZLQJDQ\ URJXH$3VWREHLGHQWLILHG VHH³URJXHDSDXWKHQWLFDWH´RQSDJH   7KHURJXH$3GDWDEDVHFDQEHYLHZHGXVLQJWKHVKRZURJXHDS FRPPDQG ‡ 7KHDFFHVVSRLQWVHQGV6\VORJPHVVDJHVIRUHDFKGHWHFWHGDFFHVVSRLQW GXULQJDURJXH$3VFDQ ([DPSOH Enterprise AP(if-wireless g)#rogue-ap enable configure either syslog or trap or both to receive the rogue APs detected. Enterprise AP(if-wireless g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³5$',86´ RQSDJH   ([DPSOH Enterprise AP(if-wireless g)#rogue-ap authenticate Enterprise AP(if-wireless g)# +3 ' (")   URJXHDSGXUDWLRQ 7KLVFRPPDQGVHWVWKHVFDQGXUDWLRQIRUGHWHFWLQJDFFHVVSRLQWV 6\QWD[ URJXHDSGXUDWLRQPLOOLVHFRQGV! PLOOLVHFRQGV7KHGXUDWLRQRIWKHVFDQ 5DQJH PLOOLVHFRQGV 'HIDXOW6HWWLQJ PLOOLVHFRQGV &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ 'XULQJDVFDQFOLHQWDFFHVVPD\EHGLVUXSWHGDQGQHZFOLHQWVPD\QRWEH DEOHWRDVVRFLDWHWRWKHDFFHVVSRLQW,IFOLHQWVH[SHULHQFHVHYHUH GLVUXSWLRQUHGXFHWKHVFDQGXUDWLRQWLPH ‡ $ORQJVFDQGXUDWLRQWLPHZLOOGHWHFWPRUHDFFHVVSRLQWVLQWKHDUHDEXW FDXVHVPRUHGLVUXSWLRQWRFOLHQWDFFHVV ([DPSOH Enterprise AP(if-wireless g)#rogue-ap duration 200 Enterprise AP(if-wireless g)# 5HODWHG&RPPDQGV URJXHDSLQWHUYDO  URJXHDSLQWHUYDO 7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKWRVFDQIRUDFFHVVSRLQWV 6\QWD[ URJXHDSLQWHUYDOPLQXWHV! PLQXWHV7KHLQWHUYDOEHWZHHQFRQVHFXWLYHVFDQV 5DQJH  PLQXWHV 'HIDXOW6HWWLQJ PLQXWHV &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH 7KLVFRPPDQGVHWVWKHLQWHUYDODWZKLFKVFDQVRFFXU)UHTXHQWVFDQQLQJZLOO PRUHUHDGLO\GHWHFWRWKHUDFFHVVSRLQWVEXWZLOOFDXVHPRUHGLVUXSWLRQWR FOLHQWDFFHVV +4  5  ([DPSOH Enterprise AP(if-wireless g)#rogue-ap interval 120 Enterprise AP(if-wireless g)# 5HODWHG&RPPDQGV URJXHDSGXUDWLRQ  URJXHDSVFDQ 7KLVFRPPDQGVWDUWVDQLPPHGLDWHVFDQIRUDFFHVVSRLQWVRQWKHUDGLRLQWHUIDFH 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH :KLOHWKHDFFHVVSRLQWVFDQVDFKDQQHOIRUURJXH$3VZLUHOHVVFOLHQWVZLOOQRW EHDEOHWRFRQQHFWWRWKHDFFHVVSRLQW7KHUHIRUHDYRLGIUHTXHQWVFDQQLQJRU VFDQVRIDORQJGXUDWLRQXQOHVVWKHUHLVDUHDVRQWREHOLHYHWKDWPRUH LQWHQVLYHVFDQQLQJLVUHTXLUHGWRILQGDURJXH$3 ([DPSOH Enterprise AP(if-wireless g)#rogue-ap scan Enterprise AP(if-wireless g)#rogueApDetect Completed (Radio G) : 9 APs detected rogueAPDetect (Radio G): refreshing ap database now Enterprise AP(if-wireless g)# +5 7   VKRZURJXHDS 7KLVFRPPDQGGLVSOD\VWKHFXUUHQWURJXH$3GDWDEDVH &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show rogue-ap 802.11a Channel : Rogue AP Status AP Address(BSSID) SSID Channel(MHz) RSSI Type Privacy RSN ====================================================================== 802.11g Channel : Rogue AP Status AP Address(BSSID) SSID Channel(MHz) RSSI Type Privacy RSN ====================================================================== 00-04-e2-2a-37-23 WLAN1AP 11(2462 MHz) 17 ESS 00-04-e2-2a-37-3d ANY 7(2442 MHz) 42 ESS 00-04-e2-2a-37-49 WLAN1AP 9(2452 MHz) 42 ESS 00-90-d1-08-9d-a7 WLAN1AP 1(2412 MHz) 12 ESS 00-30-f1-fb-31-f4 WLAN 6(2437 MHz) 16 ESS Enterprise AP# Wireless Security Commands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‡ RSHQV\VWHP$FFHSWVWKHFOLHQWZLWKRXWYHULI\LQJLWVLGHQWLW\XVLQJD VKDUHGNH\³2SHQ´DXWKHQWLFDWLRQPHDQVHLWKHUWKHUHLVQRHQFU\SWLRQ LI HQFU\SWLRQLVGLVDEOHG RU:(3RQO\HQFU\SWLRQLVXVHG LIHQFU\SWLRQLV HQDEOHG  ‡ VKDUHGNH\$XWKHQWLFDWLRQLVEDVHGRQDVKDUHGNH\WKDWKDVEHHQ GLVWULEXWHGWRDOOVWDWLRQV ‡ ZSD&OLHQWVXVLQJ:3$DUHDFFHSWHGIRUDXWKHQWLFDWLRQ ‡ ZSDSVN&OLHQWVXVLQJ:3$ZLWKD3UHVKDUHG.H\DUHDFFHSWHGIRU DXWKHQWLFDWLRQ ‡ ZSD&OLHQWVXVLQJ:3$DUHDFFHSWHGIRUDXWKHQWLFDWLRQ ‡ ZSDSVN&OLHQWVXVLQJ:3$ZLWKD3UHVKDUHG.H\DUHDFFHSWHGIRU DXWKHQWLFDWLRQ ‡ ZSDZSDPL[HG&OLHQWVXVLQJ:3$RU:3$DUHDFFHSWHGIRU DXWKHQWLFDWLRQ ‡ ZSDZSDSVNPL[HG&OLHQWVXVLQJ:3$RU:3$ZLWKD3UHVKDUHG .H\DUHDFFHSWHGIRUDXWKHQWLFDWLRQ ‡ UHTXLUHG&OLHQWVDUHUHTXLUHGWRXVH:3$RU:3$ ‡ VXSSRUWHG&OLHQWVPD\XVH:3$RU:3$LIVXSSRUWHG 'HIDXOW6HWWLQJ RSHQV\VWHP &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 &RPPDQG8VDJH ‡ 7KHDXWKFRPPDQGDXWRPDWLFDOO\FRQILJXUHVVHWWLQJVIRUHDFK DXWKHQWLFDWLRQW\SHLQFOXGLQJHQFU\SWLRQ;DQGFLSKHUVXLWH7KH FRPPDQGDXWKRSHQV\VWHPGLVDEOHVHQFU\SWLRQDQG; +17 7   ‡ 7RXVH:(3VKDUHGNH\DXWKHQWLFDWLRQVHWWKHDXWKHQWLFDWLRQW\SHWR ³VKDUHGNH\´DQGGHILQHDWOHDVWRQHVWDWLF:(3NH\ZLWKWKHNH\FRPPDQG (QFU\SWLRQLVDXWRPDWLFDOO\HQDEOHGE\WKHFRPPDQG ‡ 7RXVH:(3HQFU\SWLRQRQO\ QRDXWKHQWLFDWLRQ VHWWKHDXWKHQWLFDWLRQW\SH WR³RSHQV\VWHP´7KHQHQDEOH:(3ZLWKWKHHQFU\SWLRQFRPPDQGDQG GHILQHDWOHDVWRQHVWDWLF:(3NH\ZLWKWKHNH\FRPPDQG ‡ :KHQDQ\:3$RU:3$RSWLRQLVVHOHFWHGFOLHQWVDUHDXWKHQWLFDWHGXVLQJ ;YLDD5$',86VHUYHU(DFKFOLHQWPXVWEH:3$HQDEOHGRUVXSSRUW ;FOLHQWVRIWZDUH7KH;VHWWLQJV VHH³;$XWKHQWLFDWLRQ´ RQSDJH  DQG5$',86VHUYHUGHWDLOV VHH³5$',86&OLHQW´RQ SDJH  PXVWEHFRQILJXUHGRQWKHDFFHVVSRLQW$5$',86VHUYHUPXVW DOVREHFRQILJXUHGDQGEHDYDLODEOHLQWKHZLUHGQHWZRUN ‡ ,ID:3$:3$PRGHWKDWRSHUDWHVRYHU;LVVHOHFWHG :3$:3$ :3$:3$PL[HGRU:3$:3$36.PL[HG WKH;VHWWLQJV VHH ³;$XWKHQWLFDWLRQ´RQSDJH  DQG5$',86VHUYHUGHWDLOV VHH ³5$',86&OLHQW´RQSDJH  PXVWEHFRQILJXUHG%HVXUH\RXKDYHDOVR FRQILJXUHGD5$',86VHUYHURQWKHQHWZRUNEHIRUHHQDEOLQJDXWKHQWLFDWLRQ $OVRQRWHWKDWHDFKFOLHQWKDVWREH:3$HQDEOHGRUVXSSRUW;FOLHQW VRIWZDUH$5$',86VHUYHUPXVWDOVREHFRQILJXUHGDQGEHDYDLODEOHLQWKH ZLUHGQHWZRUN ‡ ,ID:3$:3$3UHVKDUHG.H\PRGHLVVHOHFWHG :3$36.:3$36. RU:3$:3$36.PL[HG WKHNH\PXVWILUVWEHJHQHUDWHGDQGGLVWULEXWHG WRDOOZLUHOHVVFOLHQWVEHIRUHWKH\FDQVXFFHVVIXOO\DVVRFLDWHZLWKWKHDFFHVV SRLQW8VHWKHZSDSUHVKDUHGNH\FRPPDQGWRFRQILJXUHWKHNH\ VHH³NH\´ RQSDJH DQG³WUDQVPLWNH\´RQSDJH   ‡ :3$GHILQHVDWUDQVLWLRQDOPRGHRIRSHUDWLRQIRUQHWZRUNVPRYLQJIURP :3$VHFXULW\WR:3$:3$0L[HG0RGHDOORZVERWK:3$DQG:3$ FOLHQWVWRDVVRFLDWHWRDFRPPRQ9$3LQWHUIDFH:KHQWKHHQFU\SWLRQ FLSKHUVXLWHLVVHWWR7.,3WKHXQLFDVWHQFU\SWLRQFLSKHU 7.,3RU $(6&&03 LVQHJRWLDWHGIRUHDFKFOLHQW7KHDFFHVVSRLQWDGYHUWLVHVLW¶V VXSSRUWHGHQFU\SWLRQFLSKHUVLQEHDFRQIUDPHVDQGSUREHUHVSRQVHV:3$ DQG:3$FOLHQWVVHOHFWWKHFLSKHUWKH\VXSSRUWDQGUHWXUQWKHFKRLFHLQWKH DVVRFLDWLRQUHTXHVWWRWKHDFFHVVSRLQW)RUPL[HGPRGHRSHUDWLRQWKH FLSKHUXVHGIRUEURDGFDVWIUDPHVLVDOZD\V7.,3:(3HQFU\SWLRQLVQRW DOORZHG ‡ 7KH³UHTXLUHG´RSWLRQSODFHVWKH9$3LQWR7.,3RQO\PRGH7KH³VXSSRUWHG´ RSWLRQSODFHVWKH9$3LQWR7.,3$(6:(3PRGH7KH³UHTXLUHG´PRGHLV XVHGLQ:3$RQO\HQYLURQPHQWV ‡ 7KH³VXSSRUWHG´PRGHFDQEHXVHGIRUPL[HGHQYLURQPHQWVZLWKOHJDF\ :3$SURGXFWVVSHFLILFDOO\:(3 )RUH[DPSOH:3$:(37KH :3$:(3HQYLURQPHQWLVQRWDYDLODEOHEHFDXVH:3$GRHVQRWVXSSRUW :(3 7RSODFHWKH9$3LQWR$(6RQO\PRGHXVH³UHTXLUHG´DQGWKHQ VHOHFWWKH³FLSKHUFFPS´RSWLRQIRUWKHFLSKHUVXLWHFRPPDQG +18  5  ([DPSOH Enterprise AP(if-wireless g: VAP[0])#auth shared-key Enterprise AP(if-wireless g)# 5HODWHG&RPPDQGV HQFU\SWLRQ  NH\  HQFU\SWLRQ 7KLVFRPPDQGHQDEOHVGDWDHQFU\SWLRQIRUZLUHOHVVFRPPXQLFDWLRQV8VHWKHQR IRUPWRGLVDEOHGDWDHQFU\SWLRQ 6\QWD[ HQFU\SWLRQ QRHQFU\SWLRQ 'HIDXOW6HWWLQJ GLVDEOHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 &RPPDQG8VDJH ‡ :LUHG(TXLYDOHQW3ULYDF\ :(3 LVLPSOHPHQWHGLQWKLVGHYLFHWRSUHYHQW XQDXWKRUL]HGDFFHVVWR\RXUZLUHOHVVQHWZRUN)RUPRUHVHFXUHGDWD WUDQVPLVVLRQVHQDEOHHQFU\SWLRQZLWKWKLVFRPPDQGDQGVHWDWOHDVWRQH VWDWLF:(3NH\ZLWKWKHNH\FRPPDQG ‡ 7KH:(3VHWWLQJVPXVWEHWKHVDPHRQHDFKFOLHQWLQ\RXUZLUHOHVV QHWZRUN ‡ 1RWHWKDW:(3SURWHFWVGDWDWUDQVPLWWHGEHWZHHQZLUHOHVVQRGHVEXWGRHV QRWSURWHFWDQ\WUDQVPLVVLRQVRYHU\RXUZLUHGQHWZRUNRURYHUWKH,QWHUQHW ‡ QR@OLQNLQWHJULW\SLQJGHWHFW 'HIDXOW6HWWLQJ 'LVDEOHG &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH ‡ :KHQOLQNLQWHJULW\LVHQDEOHGWKH,3DGGUHVVRIDKRVWGHYLFHLQWKHZLUHG QHWZRUNPXVWEHVSHFLILHG ‡ 7KHDFFHVVSRLQWSHULRGLFDOO\VHQGVDQ,&03HFKRUHTXHVW 3LQJ SDFNHWWR WKHOLQNKRVW,3DGGUHVV:KHQWKHQXPEHURIIDLOHGUHVSRQVHV HLWKHUWKH KRVWGRHVQRWUHVSRQGRULVXQUHDFKDEOH H[FHHGVWKHOLPLWVHWE\WKH OLQNLQWHJULW\SLQJIDLOUHWU\FRPPDQGWKHOLQNLVGHWHUPLQHGDVORVW ([DPSOH Enterprise AP(config)#link-integrity ping-detect Enterprise AP(config)# OLQNLQWHJULW\SLQJKRVW 7KLVFRPPDQGFRQILJXUHVWKHOLQNKRVWQDPHRU,3DGGUHVV8VHWKHQRIRUPWR UHPRYHWKHKRVWVHWWLQJ 6\QWD[ OLQNLQWHJULW\SLQJKRVWKRVWBQDPH_LSBDGGUHVV! QROLQNLQWHJULW\SLQJKRVW ‡ KRVWBQDPH$OLDVRIWKHKRVW ‡ LSBDGGUHVV,3DGGUHVVRIWKHKRVW 'HIDXOW6HWWLQJ 1RQH &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#link-integrity ping-host 192.168.1.10 Enterprise AP(config)# +27 5%   OLQNLQWHJULW\SLQJLQWHUYDO 7KLVFRPPDQGFRQILJXUHVWKHWLPHEHWZHHQHDFK3LQJVHQWWRWKHOLQNKRVW 6\QWD[ OLQNLQWHJULW\SLQJLQWHUYDOLQWHUYDO! LQWHUYDO7KHWLPHEHWZHHQ3LQJV 5DQJHVHFRQGV 'HIDXOW6HWWLQJ VHFRQGV &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#link-integrity ping-interval 20 Enterprise AP(config)# OLQNLQWHJULW\SLQJIDLOUHWU\ 7KLVFRPPDQGFRQILJXUHVWKHQXPEHURIFRQVHFXWLYHIDLOHG3LQJFRXQWVEHIRUHWKH OLQNLVGHWHUPLQHGDVORVW 6\QWD[ OLQNLQWHJULW\SLQJIDLOUHWU\FRXQWV! FRXQWV7KHQXPEHURIIDLOHG3LQJFRXQWVEHIRUHWKHOLQNLVGHWHUPLQHGDV ORVW 5DQJH 'HIDXOW6HWWLQJ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#link-integrity ping-fail-retry 10 Enterprise AP(config)# OLQNLQWHJULW\HWKHUQHWGHWHFW 7KLVFRPPDQGHQDEOHVDQLQWHJULW\FKHFNWRGHWHUPLQHZKHWKHURUQRWWKHDFFHVV SRLQWLVFRQQHFWHGWRWKHZLUHG(WKHUQHW 6\QWD[ >QR@OLQNLQWHJULW\HWKHUQHWGHWHFW 'HIDXOW6HWWLQJ 'LVDEOHG +28  5  &RPPDQG0RGH *OREDO&RQILJXUDWLRQ ([DPSOH Enterprise AP(config)#link-integrity ethernet-detect Notification : Ethernet Link Detect SUCCESS - RADIO(S) ENABLED Enterprise AP(config)# VKRZOLQNLQWHJULW\ 7KLVFRPPDQGGLVSOD\VWKHFXUUHQWOLQNLQWHJULW\FRQILJXUDWLRQ &RPPDQG0RGH ([HF ([DPSOH Enterprise AP#show link-integrity Link Integrity Information =========================================================== Ethernet Detect : Enabled Ping Detect : Enabled Target IP/Name : 192.168.0.140 Ping Fail Retry : 6 Ping Interval : 30 =========================================================== Enterprise AP# +29 (""  IAPP Commands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nterprise AP(config)#iapp Enterprise AP(config)# +30  5  VLAN Commands 7KHDFFHVVSRLQWFDQHQDEOHWKHVXSSRUWRI9/$1WDJJHGWUDIILFSDVVLQJEHWZHHQ ZLUHOHVVFOLHQWVDQGWKHZLUHGQHWZRUN8SWR9/$1,'VFDQEHPDSSHGWR VSHFLILFZLUHOHVVFOLHQWVDOORZLQJXVHUVWRUHPDLQZLWKLQWKHVDPH9/$1DVWKH\ PRYHDURXQGDFDPSXVVLWH :KHQ9/$1LVHQDEOHGRQWKHDFFHVVSRLQWD9/$1,' DQXPEHUEHWZHHQDQG  FDQEHDVVLJQHGWRHDFKFOLHQWDIWHUVXFFHVVIXODXWKHQWLFDWLRQXVLQJ,((( ;DQGDFHQWUDO5$',86VHUYHU7KHXVHU9/$1,'VPXVWEHFRQILJXUHGRQWKH 5$',86VHUYHUIRUHDFKXVHUDXWKRUL]HGWRDFFHVVWKHQHWZRUN,IDXVHUGRHVQRW KDYHDFRQILJXUHG9/$1,'WKHDFFHVVSRLQWDVVLJQVWKHXVHUWRLWVRZQFRQILJXUHG QDWLYH9/$1,' &DXWLRQ:KHQ9/$1VDUHHQDEOHGWKHDFFHVVSRLQW¶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‡ :KHQ9/$1VDUHHQDEOHGWKHDFFHVVSRLQWWDJVIUDPHVUHFHLYHGIURP ZLUHOHVVFOLHQWVZLWKWKH9/$1,'FRQILJXUHGIRUHDFKFOLHQWRQWKH5$',86 VHUYHU,IWKH9/$1,'KDVQRWEHHQFRQILJXUHGIRUDFOLHQWRQWKH5$',86 VHUYHUWKHQWKHIUDPHVDUHWDJJHGZLWKWKHDFFHVVSRLQW¶VQDWLYH9/$1,' +1 45(6  ‡ 7UDIILFHQWHULQJWKH(WKHUQHWSRUWPXVWEHWDJJHGZLWKD9/$1,'WKDW PDWFKHVWKHDFFHVVSRLQW¶VQDWLYH9/$1,'RUZLWKD9/$1WDJWKDW PDWFKHVRQHRIWKHZLUHOHVVFOLHQWVFXUUHQWO\DVVRFLDWHGZLWKWKHDFFHVV SRLQW ([DPSOH Enterprise AP(config)#vlan enable Reboot system now? : y 5HODWHG&RPPDQGV PDQDJHPHQWYODQLG  PDQDJHPHQWYODQLG 7KLVFRPPDQGFRQILJXUHVWKHPDQDJHPHQW9/$1,'IRUWKHDFFHVVSRLQW 6\QWD[ PDQDJHPHQWYODQLGYODQLG! YODQLG0DQDJHPHQW9/$1,' 5DQJH 'HIDXOW6HWWLQJ &RPPDQG0RGH *OREDO&RQILJXUDWLRQ &RPPDQG8VDJH 7KHPDQDJHPHQW9/$1LVIRUPDQDJLQJWKHDFFHVVSRLQW)RUH[DPSOHWKH DFFHVVSRLQWDOORZVWUDIILFWKDWLVWDJJHGZLWKWKHVSHFLILHG9/$1WRPDQDJH WKHDFFHVVSRLQWYLDUHPRWHPDQDJHPHQW66+61037HOQHWHWF ([DPSOH Enterprise AP(config)#management-vlanid 3 Enterprise AP(config)# 5HODWHG&RPPDQGV YODQ  YODQLG 7KLVFRPPDQGFRQILJXUHVWKHGHIDXOW9/$1,'IRUWKH9$3LQWHUIDFH 6\QWD[ YODQLGYODQLG! YODQLG1DWLYH9/$1,' 5DQJH +2  5  'HIDXOW6HWWLQJ &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV9$3 &RPPDQG8VDJH ‡ 7RLPSOHPHQWWKHGHIDXOW9/$1,'VHWWLQJIRU9$3LQWHUIDFHWKHDFFHVV SRLQWPXVWHQDEOH9/$1VXSSRUWXVLQJWKHYODQFRPPDQG ‡ :KHQ9/$1VDUHHQDEOHGWKHDFFHVVSRLQWWDJVIUDPHVUHFHLYHGIURP ZLUHOHVVFOLHQWVZLWKWKHGHIDXOW9/$1,'IRUWKH9$3LQWHUIDFH,I,((( ;LVEHLQJXVHGWRDXWKHQWLFDWHZLUHOHVVFOLHQWVVSHFLILF9/$1,'V FDQEHFRQILJXUHGRQWKH5$',86VHUYHUWREHDVVLJQHGWRHDFKFOLHQW 8VLQJ,(((;DQGDFHQWUDO5$',86VHUYHUXSWR9/$1,'VFDQ EHPDSSHGWRVSHFLILFZLUHOHVVFOLHQWV ‡ ,IWKH9/$1,'KDVQRWEHHQFRQILJXUHGIRUDFOLHQWRQWKH5$',86VHUYHU WKHQWKHIUDPHVDUHWDJJHGZLWKWKHGHIDXOW9/$1,'RIWKH9$3LQWHUIDFH ([DPSOH Enterprise AP(if-wireless g: VAP[0])#vlan-id 3 Enterprise AP(if-wireless g: VAP[0])# WMM Commands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‡ VXSSRUWHG:00ZLOOEHXVHGIRUDQ\DVVRFLDWHGGHYLFHWKDWVXSSRUWVWKLV IHDWXUH'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHPD\VWLOODVVRFLDWHZLWKWKH DFFHVVSRLQW ‡ UHTXLUHG:00PXVWEHVXSSRUWHGRQDQ\GHYLFHWU\LQJWRDVVRFLDWHGZLWK WKHDFFHVVSRLQW'HYLFHVWKDWGRQRWVXSSRUWWKLVIHDWXUHZLOOQRWEHDOORZHG WRDVVRFLDWHZLWKWKHDFFHVVSRLQW 'HIDXOW VXSSRUWHG &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV ([DPSOH Enterprise AP(if-wireless a)#wmm required Enterprise AP(if-wireless a)# ZPPDFNQRZOHGJHSROLF\ 7KLVFRPPDQGDOORZVWKHDFNQRZOHGJHPHQWZDLWWLPHWREHHQDEOHGRUGLVDEOHGIRU HDFK$FFHVV&DWHJRU\ $&  6\QWD[ ZPPDFNQRZOHGJHSROLF\DFBQXPEHU!DFN_QRDFN! ‡ DFBQXPEHU$FFHVVFDWHJRULHV 5DQJH  ‡ DFN5HTXLUHWKHVHQGHUWRZDLWIRUDQDFNQRZOHGJHPHQWIURPWKHUHFHLYHU ‡ QRDFN'RHVQRWUHTXLUHWKHVHQGHUWRZDLWIRUDQDFNQRZOHGJHPHQWIURP WKHUHFHLYHU 'HIDXOW DFN &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV &RPPDQG8VDJH ‡ :00GHILQHVIRXUDFFHVVFDWHJRULHV $&V ±YRLFHYLGHREHVWHIIRUWDQG EDFNJURXQG7KHVHFDWHJRULHVFRUUHVSRQGWRWUDIILFSULRULW\OHYHOVDQGDUH PDSSHGWR,((('SULRULW\WDJV VHH7DEOH  7KHGLUHFWPDSSLQJ RIWKHIRXU$&VWR'SULRULWLHVLVVSHFLILFDOO\LQWHQGHGWRIDFLOLWDWH +4  5  LQWHUSUHWDELOLW\ZLWKRWKHUZLUHGQHWZRUN4R6SROLFLHV:KLOHWKHIRXU$&V DUHVSHFLILHGIRUVSHFLILFW\SHVRIWUDIILF:00DOORZVWKHSULRULW\OHYHOVWR EHFRQILJXUHGWRPDWFKDQ\QHWZRUNZLGH4R6SROLF\:00DOVRVSHFLILHV DSURWRFROWKDWDFFHVVSRLQWVFDQXVHWRFRPPXQLFDWHWKHFRQILJXUHGWUDIILF SULRULW\OHYHOVWR4R6HQDEOHGZLUHOHVVFOLHQWV ‡ $OWKRXJKWXUQLQJRIIWKHUHTXLUHPHQWIRUWKHVHQGHUWRZDLWIRUDQ DFNQRZOHGJHPHQWFDQLQFUHDVHVGDWDWKURXJKSXWLWFDQDOVRUHVXOWLQD KLJKQXPEHURIHUURUVZKHQWUDIILFOHYHOVDUHKHDY\ ([DPSOH Enterprise AP(if-wireless a)#wmm-acknowledge-policy 0 noack Enterprise AP(if-wireless a)# ZPPSDUDP 7KLVFRPPDQGFRQILJXUHVGHWDLOHG:00SDUDPHWHUVWKDWDSSO\WRWKHDFFHVVSRLQW $3 RUWKHZLUHOHVVFOLHQWV %66  6\QWD[ ZPPSDUDP$3_%66!DFBQXPEHU!/RJ&Z0LQ!/RJ&Z0D[!$,)6! 7[2S/LPLW!DGPLVVLRQBFRQWURO! ‡ $3$FFHVV3RLQW ‡ %66:LUHOHVVFOLHQW ‡ DFBQXPEHU$FFHVVFDWHJRULHV $&V ±YRLFHYLGHREHVWHIIRUWDQG EDFNJURXQG7KHVHFDWHJRULHVFRUUHVSRQGWRWUDIILFSULRULW\OHYHOVDQGDUH PDSSHGWR,((('SULRULW\WDJVDVVKRZQLQ7DEOH  5DQJH  ‡ /RJ&Z0LQ0LQLPXPORJYDOXHRIWKHFRQWHQWLRQZLQGRZ7KLVLVWKHLQLWLDO XSSHUOLPLWRIWKHUDQGRPEDFNRIIZDLWWLPHEHIRUHZLUHOHVVPHGLXPDFFHVV FDQEHDWWHPSWHG7KHLQLWLDOZDLWWLPHLVDUDQGRPYDOXHEHWZHHQ]HURDQG WKH/RJ&Z0LQYDOXH6SHFLI\WKH/RJ&Z0LQYDOXH1RWHWKDWWKH/RJ&Z0LQ YDOXHPXVWEHHTXDORUOHVVWKDQWKH/RJ&Z0D[YDOXH 5DQJH  PLFURVHFRQGV  ‡ /RJ&Z0D[0D[LPXPORJYDOXHRIWKHFRQWHQWLRQZLQGRZ7KLVLVWKH PD[LPXPXSSHUOLPLWRIWKHUDQGRPEDFNRIIZDLWWLPHEHIRUHZLUHOHVV PHGLXPDFFHVVFDQEHDWWHPSWHG7KHFRQWHQWLRQZLQGRZLVGRXEOHGDIWHU HDFKGHWHFWHGFROOLVLRQXSWRWKH/RJ&Z0D[YDOXH1RWHWKDWWKH&:0D[ YDOXHPXVWEHJUHDWHURUHTXDOWRWKH/RJ&Z0LQYDOXH 5DQJH  PLFURVHFRQGV  ‡ $,)6$UELWUDU\,QWHU)UDPH6SDFHVSHFLILHVWKHPLQLPXPDPRXQWRIZDLW WLPHEHIRUHWKHQH[WGDWDWUDQVPLVVLRQDWWHPSW 5DQJH  PLFURVHFRQGV  ‡ 7;23/LPLW7UDQVPLVVLRQ2SSRUWXQLW\/LPLWVSHFLILHVWKHPD[LPXPWLPH DQ$&WUDQVPLWTXHXHKDVDFFHVVWRWKHZLUHOHVVPHGLXP:KHQDQ$& TXHXHLVJUDQWHGDWUDQVPLWRSSRUWXQLW\LWFDQWUDQVPLWGDWDIRUDWLPHXSWR WKH7[2S/LPLW7KLVGDWDEXUVWLQJJUHDWO\LPSURYHVWKHHIILFLHQF\IRUKLJK GDWDUDWHWUDIILF 5DQJH PLFURVHFRQGV  +5 711  ‡ DGPLVVLRQBFRQWURO7KHDGPLVVLRQFRQWUROPRGHIRUWKHDFFHVVFDWHJRU\ :KHQHQDEOHGFOLHQWVDUHEORFNHGIURPXVLQJWKHDFFHVVFDWHJRU\ 2SWLRQV  WR GLVDEOHWRHQDEOH 'HIDXOW $33DUDPHWHUV :003DUDPHWHUV $& %HVW(IIRUW  $& %DFNJURXQG  $& 9LGHR  $& 9RLFH  &1 &1= . . (2 !0?"5 9 + ) ) ) ) :003DUDPHWHUV $& %HVW(IIRUW  $& %DFNJURXQG  $& 9LGHR  $& 9RLFH  &1 &1= . (2 !0?"5 9 + ) ) ) ) (    %663DUDPHWHUV (    &RPPDQG0RGH ,QWHUIDFH&RQILJXUDWLRQ :LUHOHVV ([DPSOH Enterprise AP(if-wireless a)#wmmparams ap 0 4 6 3 1 1 Enterprise AP(if-wireless a)# +6  +37 5  Appendix A: Troubleshooting &KHFNWKHIROORZLQJLWHPVEHIRUH\RXFRQWDFWORFDO7HFKQLFDO6XSSRUW  ,IZLUHOHVVFOLHQWVFDQQRWDFFHVVWKHQHWZRUNFKHFNWKHIROORZLQJ ‡ %HVXUHWKHDFFHVVSRLQWDQGWKHZLUHOHVVFOLHQWVDUHFRQILJXUHGZLWKWKHVDPH 6HUYLFH6HW,' 66,'  ‡ ,IDXWKHQWLFDWLRQRUHQFU\SWLRQDUHHQDEOHGHQVXUHWKDWWKHZLUHOHVVFOLHQWVDUH SURSHUO\FRQILJXUHGZLWKWKHDSSURSULDWHDXWKHQWLFDWLRQRUHQFU\SWLRQNH\V ‡ ,IDXWKHQWLFDWLRQLVEHLQJSHUIRUPHGWKURXJKD5$',86VHUYHUHQVXUHWKDWWKH FOLHQWVDUHSURSHUO\FRQILJXUHGRQWKH5$',86VHUYHU ‡ ,IDXWKHQWLFDWLRQLVEHLQJSHUIRUPHGWKURXJK,(((;EHVXUHWKH ZLUHOHVVXVHUVKDYHLQVWDOOHGDQGSURSHUO\FRQILJXUHG;FOLHQWVRIWZDUH ‡ ,I0$&DGGUHVVILOWHULQJLVHQDEOHGEHVXUHWKHFOLHQW¶VDGGUHVVLVLQFOXGHGLQ WKHORFDOILOWHULQJGDWDEDVHRURQWKH5$',86VHUYHUGDWDEDVH ‡ ,IWKHZLUHOHVVFOLHQWVDUHURDPLQJEHWZHHQDFFHVVSRLQWVPDNHVXUHWKDWDOO WKHDFFHVVSRLQWVDQGZLUHOHVVGHYLFHVLQWKH([WHQGHG6HUYLFH6HW (66 DUH FRQILJXUHGWRWKHVDPH66,'DQGDXWKHQWLFDWLRQPHWKRG  ,IWKHDFFHVVSRLQWFDQQRWEHFRQILJXUHGXVLQJWKH7HOQHWDZHEEURZVHURU 6103VRIWZDUH ‡ %HVXUHWRKDYHFRQILJXUHGWKHDFFHVVSRLQWZLWKDYDOLG,3DGGUHVVVXEQHW PDVNDQGGHIDXOWJDWHZD\ ‡ ,I9/$1VDUHHQDEOHGRQWKHDFFHVVSRLQWWKHPDQDJHPHQWVWDWLRQVKRXOGEH FRQILJXUHGWRVHQGWDJJHGIUDPHVZLWKD9/$1,'WKDWPDWFKHVWKHDFFHVV SRLQW¶VPDQDJHPHQW9/$1 GHIDXOW9/$1SDJH +RZHYHUWRPDQDJH WKHDFFHVVSRLQWIURPDZLUHOHVVFOLHQWWKH$30DQDJHPHQW)LOWHUVKRXOGEH GLVDEOHG SDJH  ‡ &KHFNWKDW\RXKDYHDYDOLGQHWZRUNFRQQHFWLRQWRWKHDFFHVVSRLQWDQGWKDW WKH(WKHUQHWSRUWRUWKHZLUHOHVVLQWHUIDFHWKDW\RXDUHXVLQJKDVQRWEHHQ GLVDEOHG ‡ ,I\RXDUHFRQQHFWLQJWRWKHDFFHVVSRLQWWKURXJKWKHZLUHG(WKHUQHWLQWHUIDFH FKHFNWKHQHWZRUNFDEOLQJEHWZHHQWKHPDQDJHPHQWVWDWLRQDQGWKHDFFHVV SRLQW,I\RXDUHFRQQHFWLQJWRDFFHVVSRLQWIURPDZLUHOHVVFOLHQWHQVXUHWKDW \RXKDYHDYDOLGFRQQHFWLRQWRWKHDFFHVVSRLQW ‡ ,I\RXFDQQRWFRQQHFWXVLQJ7HOQHW\RXPD\KDYHH[FHHGHGWKHPD[LPXP QXPEHURIFRQFXUUHQW7HOQHWVHVVLRQVSHUPLWWHG LHIRXUVHVVLRQV 7U\ FRQQHFWLQJDJDLQDWDODWHUWLPH ( $  !   ,I\RXFDQQRWDFFHVVWKHRQERDUGFRQILJXUDWLRQSURJUDPYLDDVHULDOSRUW FRQQHFWLRQ ‡ %HVXUH\RXKDYHVHWWKHWHUPLQDOHPXODWRUSURJUDPWR97FRPSDWLEOH GDWDELWVVWRSELWQRSDULW\DQGESV ‡ &KHFNWKDWWKHQXOOPRGHPVHULDOFDEOHFRQIRUPVWRWKHSLQRXWFRQQHFWLRQV SURYLGHGRQSDJH%  ,I\RXIRUJRWRUORVWWKHSDVVZRUG ‡ 6HWWKHDFFHVVSRLQWWRLWVGHIDXOWFRQILJXUDWLRQE\SUHVVLQJWKHUHVHWEXWWRQ RQWKHEDFNSDQHOIRUVHFRQGVRUPRUH7KHQXVHWKHGHIDXOWXVHUQDPH ³DGPLQ´WRDFFHVVWKHPDQDJHPHQWLQWHUIDFH  ,IDOORWKHUUHFRYHU\PHDVXUHIDLODQGWKHDFFHVVSRLQWLVVWLOOQRWIXQFWLRQLQJ SURSHUO\WDNHDQ\RIWKHVHVWHSV ‡ 5HVHWWKHDFFHVVSRLQW¶VKDUGZDUHXVLQJWKHFRQVROHLQWHUIDFHZHELQWHUIDFH RUWKURXJKDSRZHUUHVHW ‡ 5HVHWWKHDFFHVVSRLQWWRLWVGHIDXOWFRQILJXUDWLRQE\SUHVVLQJWKHUHVHWEXWWRQ RQWKHEDFNSDQHOIRUVHFRQGVRUPRUH7KHQXVHWKHGHIDXOWXVHUQDPH ³DGPLQ´DQGDQXOOSDVVZRUGWRDFFHVVWKHPDQDJHPHQWLQWHUIDFH ( Appendix B: Cables and Pinouts Twisted-Pair Cable Assignments )RU%$6(7;FRQQHFWLRQVDWZLVWHGSDLUFDEOHPXVWKDYHWZRSDLUVRIZLUHV (DFKZLUHSDLULVLGHQWLILHGE\WZRGLIIHUHQWFRORUV)RUH[DPSOHRQHZLUHPLJKWEH JUHHQDQGWKHRWKHUJUHHQZLWKZKLWHVWULSHV$OVRDQ5-FRQQHFWRUPXVWEH DWWDFKHGWRERWKHQGVRIWKHFDEOH &DXWLRQ (DFKZLUHSDLUPXVWEHDWWDFKHGWRWKH5-FRQQHFWRUVLQDVSHFLILF RULHQWDWLRQ 6HH³6WUDLJKW7KURXJK:LULQJ´RQSDJH%DQG³&URVVRYHU :LULQJ´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³VWUDLJKWWKURXJK´FDEOHIRUQHWZRUNFRQQHFWLRQVWRKXEVRUVZLWFKHV WKDWRQO\KDYH0',;SRUWV+RZHYHULIWKHGHYLFHWRZKLFK\RXDUHFRQQHFWLQJ VXSSRUWVDXWR0',;RSHUDWLRQ\RXFDQXVHHLWKHU³VWUDLJKWWKURXJK´RU³FURVVRYHU´ FDEOH EIA/TIA 568B RJ-45 Wiring Standard 10/100BASE-TX Straight-through Cable White/Orange Stripe Orange End A White/Green Stripe Blue White/Blue Stripe Green White/Brown Stripe Brown @ End B  " "(  &URVVRYHU:LULQJ %HFDXVHWKH0ESVSRUWRQWKHDFFHVVSRLQWXVHVDQ0',SLQFRQILJXUDWLRQ \RXPXVWXVH³FURVVRYHU´FDEOHIRUQHWZRUNFRQQHFWLRQVWR3&VVHUYHUVRURWKHU HQGQRGHVWKDWRQO\KDYH0',SRUWV+RZHYHULIWKHGHYLFHWRZKLFK\RXDUH FRQQHFWLQJVXSSRUWVDXWR0',;RSHUDWLRQ\RXFDQXVHHLWKHU³VWUDLJKWWKURXJK´RU ³FURVVRYHU´FDEOH EIA/TIA 568B RJ-45 Wiring Standard 10/100BASE-TX Crossover Cable White/Orange Stripe Orange End A White/Green Stripe Blue White/Blue Stripe Green White/Brown Stripe End B Brown Console Port Pin Assignments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ppendix C: Specifications General Specifications 0D[LPXP&KDQQHOV D 86 &DQDGD QRUPDOPRGH  WXUERPRGH -DSDQ QRUPDOPRGH  WXUERPRGH (76,FKDQQHOV QRUPDOPRGH  WXUERPRGH 7DLZDQ QRUPDOPRGH  WXUERPRGH EJ )&&,& (76, )UDQFH 0..  7DLZDQ 0D[LPXP&OLHQWV SHU9$3LQWHUIDFH 2SHUDWLQJ5DQJH 6HH³2SHUDWLQJ5DQJH´RQSDJH& 'DWD5DWH D 1RUPDO0RGH0ESVSHUFKDQQHO 7XUER0RGH0ESVSHUFKDQQHO J0ESVSHUFKDQQHO E0ESVSHUFKDQQHO 0RGXODWLRQ7\SH D%36.436.4$04$0 J&&.%36.436.2)'0 E&&.%36.436. 1HWZRUN&RQILJXUDWLRQ ,QIUDVWUXFWXUH  &    2SHUDWLQJ)UHTXHQF\ D a*+] ORZHUEDQG 86&DQDGD-DSDQ a*+] PLGGOHEDQG 86&DQDGD a*+] XSSHUEDQG 86&DQDGD a*+](XURSH a*+] PLGGOHEDQG 7DLZDQ a*+] KLJKEDQG 7DLZDQ E a*+] 86&DQDGD(76, a*+] -DSDQ a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ƒ& WRƒ) 6WRUDJHWRƒ& WRƒ) +XPLGLW\ WR QRQFRQGHQVLQJ  <   &RPSOLDQFHV )&&&ODVV% 86 ,&(6 &DQDGD 577('(& 9&&, -DSDQ 5&567'$ 5DGLR6LJQDO&HUWLILFDWLRQ )&&3DUW& *+] )&&SDUW( *+] 566 &DQDGD (1(1(1(1 0375&5VWG 'a&KDQQHO7&KDQQHO 6DIHW\ F&6$XV &6$1R 8/ (1 7h9*6 ,(& &% 6WDQGDUGV ,(((%$6(7,(((X%$6(7; ,(((DEJ  &    Sensitivity ,(((D 6HQVLWLYLW\ *+]G%P 0RGXODWLRQ5DWHV     @"B:1; -- -- -- -- @"B:91; -+ -+ -+ -+ A"B:1; - - - - A"B:-1; - - - - A(1:1; - - - - A(1:1; -. +9 +- +- A(1:-1; + + + + A(1:1; +. +. 9 + ,(((J 'DWD5DWH 6HQVLWLYLW\ G%P  1 -- 91 -+ 1 - +1 - 1 - 1 ++ -1 + 1 +. ,(((E 'DWD5DWH 6HQVLWLYLW\ G%P  1 9 1 9. /1 9. 1 -+  !" & Transmit Power ,(((D 0D[LPXP2XWSXW3RZHU *+]G%P 'DWD5DWH     1 + + + + 91 + + + + 1 + + + + -1 + + + + 1 + + + + 1 + + + + -1 + + + + 1  + +  ,(((J 0D[LPXP2XWSXW3RZHU *+]G%P 'DWD5DWH  a  1 . . - 91 . . - 1 . . - -1 . . - 1 . . - 1 - 9 + -1 +   1    ,(((E 0D[LPXP2XWSXW3RZHU *+]G%P 'DWD5DWH  a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lossary 10BASE-T ,(((VSHFLILFDWLRQIRU0ESV(WKHUQHWRYHUWZRSDLUVRI&DWHJRU\RUEHWWHU873 FDEOH 100BASE-TX      !"#$           Access Point %  &'   ($   ' ' &) (  $ $   '' $  & %   ( $ $ ' $$  $  Ad Hoc %  (     ' ' '  $  &)  Advanced Encryption Standard (AES) %  $(( $ (   (( &   %* '      ( $  $'    $("+#',# Authentication "     ' $   &  (   .    ('  '&   Backbone "       &"    &   ((  $$  $$    $' ' $$   ( Basic Service Set (BSS) % /( $  '  $  &      $$/  ' Beacon % $ '$$ ( '(     )'( $ $   ''     *ORVVDU\ <  Broadcast Key 1' &       2'(& 3('  &    '$$      '( & ' '$$ ' $$& /( (  $  $ $   CSMA/CA  *   $ $ % $$ %'  Dynamic Host Configuration Protocol (DHCP) #' ( &   (  "#4#  &35#  ' 1  #$6177"#8)''  $  ($$ $  &'' '''$    Encryption 3        '  '   '$       ( Extended Service Set (ESS)    $  $$   '  ( *  * '   $$($   (  '   $$  9 ' '*  *  Extensible Authentication Protocol (EAP) %   $ '    &$  %# ( ' 2   ':%3!*     ' ;(  $   <  $ )   )' :%3!*   Ethernet %  $$$ '((   &) (   ' ($    ( ( File Transfer Protocol (FTP) %"#4# $ '$    Hypertext Transfer Protocol (HTTP) 5""#  '' ' ('   $$'  ,$',' ,  IEEE 802.11a % $  ''  / '((    05='  7$ - 3  $ $ 96738"  ''  '  >))?)' ?  0$ / <  IEEE 802.11b % $  '' 3 * -  *  '*  )'    $ ((   ?05='   (63***8"  '' ' ' )) IEEE 802.11g % $  ''   $ ((   ?05='  7$ - 3  $ $ 96738"  '' '  ' >)@))))?) >)?) ?  $ &' ( $  IEEE 802.1X #%  $       -  3'  '        Infrastructure %  ' $ ' 'A%B $$ '      Inter Access Point Protocol (IAPP) % $    $  $ -  '       $ '  $ $  (  '  /( $    Local Area Network (LAN) %    '(  ' '  MAC Address "   $$ '' ' - $'  &'  Network Time Protocol (NTP) B"# '  (  (  = (    &" (        $/(  / $  '  = $$$&     '$(  ''  ' Open System %   '    $$ '   C    '**3, $ $   ' **3(  )' ($$  **3$$(( '        Orthogonal Frequency Division Multiplexing (ODFM) 734$$ ( $ $    ($$ '''' '' (''   0$ / <  Power over Ethernet (PoE) %  '  ''$/   &'    $     $ # '   $ 9$ $ C ' &'  )' $'   ' $$   RADIUS %$   $    &     $  $ Roaming % $ A%B($  (  '**'(          & RTS Threshold " (   ' ( ' ((    :"*4"* (  ( $  ;5'' B' #$ (<  &  =   ($$   :"*" $' = ) :"*4"*(  ($$B7"  $ ' Service Set Identifier (SSID) %'    ' &      $ A%B'     'D  $' $$E )1 *  * 61**8 Session Key &    -  $ )'  '   $  ) ' $      $ '    Shared Key %  '&   '    $  ' $  & * '+   (   '$ , $ - $  #$( Simple Network Management Protocol (SNMP) "  $ $    ( (      $    & Simple Network Time Protocol (SNTP) *B"#$$ '     $$& ' ' "( #$6B"#8  ! '    '(     ''   B"#    0$ /? ' (B & B"#  ) <  Temporal Key Integrity Protocol (TKIP) %'  ( ''  '  $ ( ,#"+#'   $ ( ,# &  '($$'  &   Trivial File Transfer Protocol (TFTP) %"#4# $(($ '  '$'  Virtual Access Point (VAP) F $%# $( $ $   ( % #    :   $   $ '  ,F $%# $),A%B    '  C       '      '   ' &  %$$    ' $  '  $ '  $) $F $%# $ (=   $( ',A%B'  ( Virtual LAN (VLAN) %F $A%B $$  &'     ( $$ '(  '$    $$    &%FA%B    $$&   $  )'$$     ( '     $ '  ( A%B Wi-Fi Protected Access ,#% ( $ 2   ( &   ''(&  ( (  '   '   $  $  &  Wired Equivalent Privacy (WEP) ,#  '    &  '   $:?  $( , $ '   $',#& $$  9$ ' '( & WPA Pre-shared Key (PSK) #*+  ' ($$  & (        '(:%3!*  ),#% '  ( $  ('  D   /  '  ' &  0$ / <  0$ /> Index Numerics 802.11g 7-97 AES 6-80 antennas, positioning 2-2 authentication 6-12 cipher suite 6-82, 7-121 closed system 7-109 configuring 6-12 MAC address 6-13, 7-71, 7-72 type 6-69, 7-109 web redirect 6-14, 7-20 Basic Service Set See BSS beacon interval 6-58, 7-104 rate 6-58, 7-105 BOOTP 7-91, 7-92 BPDU 6-25 BSS 4-3 cable assignments B-1 crossover B-3 straight-through B-2 CCK 1-1 channel 7-100 channels, maximum C-1 Clear To Send See CTS CLI 7-1 command modes 7-4 clients, maximum C-1 closed system 6-52, 7-109 command line interface See CLI community name, configuring 7-42 community string 6-40, 7-42 configuration settings, saving or restoring 6-32, 7-57 configuration, initial setup 5-1 console port 1-4 connecting 2-2 pin assignments B-3 required settings 5-1 country code configuring 5-3, 7-12 crossover cable B-3 CSMA/CA 1-1 CTS 6-59, 7-107 data rate maximum distances C-6 data rate, options C-1 default settings 1-6 device status, displaying 6-86, 7-24 DHCP 6-5, 7-91, 7-92 distances, maximum C-6 DNS 6-6, 7-91 Domain Name Server See DNS downloading software 6-30, 7-57 DSSS 1-1 DTIM 6-58, 7-105 Dynamic Host Configuration Protocol See DHCP EAP 6-79 encryption 6-69, 6-74, 6-79 Ethernet cable 2-2 port 1-4 event logs 6-91, 6-93, 7-33 Extensible Authentication Protocol See EAP factory defaults restoring 6-32, 7-10 ' 9/ = filter 6-17, 7-71 address 6-12, 7-71 between wireless clients 7-75 local bridge 7-75 local or remote 6-12, 7-73 management access 6-18, 7-75 protocol types 6-18, 7-76 VLANs 6-52, 7-134 firmware displaying version 6-31, 7-25 upgrading 6-30, 6-32, 7-57 fragmentation 7-106 gateway address 5-2, 6-6, 7-1, 7-91 hardware version, displaying 7-25 HTTP, secure server 7-20 HTTPS 7-19 IAPP 7-133 IEEE 802.11a 1-1, 6-50, 7-97 configuring interface 6-51, 7-97 maximum data rate 7-99 radio channel 7-100 IEEE 802.11b 6-50 IEEE 802.11f 7-133 IEEE 802.11g 6-50 configuring interface 6-66, 7-97 maximum data rate 7-99 radio channel 6-68, 7-100 IEEE 802.1x 6-79, 7-66, 7-71 configuring 6-84, 7-66 infrastructure wireless bridge 4-5 wireless repeater 4-6 initial setup 5-1 installation hardware 2-1, 3-1 location considerations 3-1 mounting 2-1 ' 9/ IP address BOOTP/DHCP 7-91, 7-92 configuring 5-2, 6-5, 7-91, 7-92 LED indicators 1-3 location for the access point, considerations 3-1 lock, Kensington 2-1 log messages 6-35, 6-91, 6-93, 7-30 server 6-34, 7-30 login CLI 7-1 web 5-3 logon authentication RADIUS client 6-14, 7-60 MAC address, authentication 6-13, 7-71, 7-72 maximum associated clients 6-57 maximum data rate 7-99 802.11a interface 7-99 802.11g interface 7-99 maximum distances C-6 mounting the access point 2-1 network topologies infrastructure 4-3 infrastructure for roaming 4-4 OFDM 1-1 open system 6-69, 7-109 operating frequency C-2 package checklist 1-2 password configuring 6-29, 6-30, 6-32, 7-15 management 6-29, 6-30, 6-32, 7-15 pin assignments console port B-3 DB-9 port B-3 = PoE 1-5 specifications C-2 port priority STA 7-87 power connection 2-1 Power over Ethernet See PoE power supply, specifications C-2 PSK 6-79 radio channel 802.11a interface 7-100 802.11g interface 6-68, 7-100 RADIUS 6-7, 6-79, 7-60 RADIUS, logon authentication 6-14, 7-60 Remote Authentication Dial-in User Service See RADIUS Request to Send See RTS reset 6-32, 7-10 reset button 1-5, 6-32 resetting the access point 6-32, 7-10 restarting the system 6-32, 7-10 RJ-45 port configuring duplex mode 7-93 configuring speed 7-93 RTS threshold 6-59, 7-106 Secure Socket Layer See SSL security, options 6-69 session key 6-84, 6-85, 7-68 shared key 6-75, 7-123 Simple Network Time Protocol See SNTP SNMP 6-39, 7-41 community name 7-42 community string 7-42 enabling traps 6-40, 7-43 trap destination 6-40, 7-44 trap manager 6-40, 7-44 SNTP 6-36, 7-35 enabling client 6-36, 7-35 server 6-36, 7-35 software displaying version 6-30, 6-86, 7-25 downloading 6-32, 7-57 specifications C-1 SSH server Status 6-11 SSID 6-74, 7-109 SSL 7-19 STA interface settings 7-87–?? path cost 7-87 port priority 7-87 startup files, setting 7-56 station status 6-89, 7-114 status displaying device status 6-86, 7-24 displaying station status 6-89, 7-114 straight-through cable B-2 system clock, setting 6-36, 7-36 system log enabling 6-34, 7-30 server 6-34, 7-30 system software, downloading from server 6-30, 7-57 Telnet for managenet access 7-1 Temporal Key Integrity Protocol See TKIP time zone 6-37, 7-37 TKIP 6-79 transmit power, configuring 6-57, 7-100 trap destination 6-40, 7-44 trap manager 6-40, 7-44 troubleshooting A-1 upgrading software 6-30, 7-57 user name, manager 6-29, 7-15 user password 6-29, 7-15 ' 9/ = VLAN configuration 6-52, 7-134 native ID 6-52 WEP 6-74 configuring 6-74 shared key 6-75, 7-123 ' 9/? Wi-Fi Multimedia See WMM Wi-Fi Protected Access See WPA Wired Equivalent Protection See WEP WPA 6-79 pre-shared key 6-82, 7-127 WPA, pre-shared key See PSK BAP120  >/+/: ?@ 


Source Exif Data:
File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.6
Linearized                      : No
Encryption                      : Standard V2.3 (128-bit)
User Access                     : Print, Extract, Print high-res
XMP Toolkit                     : 3.1-701
Producer                        : Acrobat Distiller 7.0 (Windows)
Create Date                     : 2006:07:19 09:18:08+08:00
Modify Date                     : 2006:07:19 09:19:59+08:00
Metadata Date                   : 2006:07:19 09:19:59+08:00
Creator Tool                    : PScript5.dll Version 5.2
Document ID                     : uuid:8440C66DC416DB11882A903659AB000D
Instance ID                     : uuid:00f18039-e217-4bed-882c-3626e8cd925b
Derived From Instance ID        : uuid:63609f8e-4746-4b02-a2e9-0626e5c65f84
Derived From Document ID        : uuid:82edc21a-9c38-4393-8aa3-30686a3fd7ff
Format                          : application/pdf
Title                           : WA6102X-38.book
Creator                         : eunice_kuo
Page Count                      : 306
Author                          : eunice_kuo
EXIF Metadata provided by
EXIF.tools
FCC ID Filing: HEDBAP120

Navigation menu