Cisco Systems 102073 Cisco Aironet 802.11n Dual Band Access Point User Manual

Cisco Systems Inc Cisco Aironet 802.11n Dual Band Access Point

UserManual.wiki >

Cisco Systems >

102073 User Manual >

Updated User Manual

Contents

1. User Manual
2. Updated User Manual

Updated User Manual

GETTING STARTED GUIDE Cisco Aironet 3500 Series Lightweight Access Point1About this Guide2Safety Instructions3Unpacking4Overview5Configuring the Access Point6Mounting the Access Point7Securing the Access Point8Deploying the Access Point on the Wireless Network9Troubleshooting10 Declarations of Conformity and Regulatory Information11 Configuring DHCP Option 43 and DHCP Option 6012 Access Point Specificationsap3500getstart.fm Page 1 Wednesday, October 28, 2009 4:42 PM

2 1 About this GuideThis Guide provides instructions on how to install and configure your Cisco Aironet 3500 Series Access Point. This guide also provides mounting instructions and limited troubleshooting procedures.2 Safety InstructionsTranslated versions of the following safety warnings are provided in the translated safety warnings document that is shipped with your access point. The translated warnings are also in the Translated Safety Warnings for Cisco Aironet Access Points, which is available on your documentation CD and cisco.com.WarningIMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071 SAVE THESE INSTRUCTIONSWarningRead the installation instructions before you connect the system to its power source. Statement 1004WarningThis product must be connected to a Power-over-Ethernet (PoE) IEEE 802.3af compliant power source or an IEC60950 compliant limited power source. Statement 353WarningInstallation of the equipment must comply with local and national electrical codes. Statement 1074ap3500getstart.fm Page 2 Wednesday, October 28, 2009 4:42 PM

4 3 UnpackingFollow these steps:Step 1 Unpack and remove the access point and the accessory kit from the shipping box.Step 2 Return any packing material to the shipping container and save it for future use.Step 3 Verify that you have received the items shown in Figure 1. If any item is missing or damaged, contact your Cisco representative or reseller for instructions.ap3500getstart.fm Page 4 Wednesday, October 28, 2009 4:42 PM

7 5 Configuring the Access PointThis section describes how to connect the access point to a wireless LAN controller. Because the configuration process takes place on the controller, see the Cisco Wireless LAN Controller Configuration Guide for additional information. This guide is available on cisco.com.The Controller Discovery ProcessThe 3500 series access point uses the IETF standard Control and Provisioning of Wireless Access Points Protocol (CAPWAP) to communicate between the controller and other wireless access points on the network. CAPWAP is a standard, interoperable protocol which enables an access controller to manage a collection of wireless termination points. The discovery process using CAPWAP is identical to the Lightweight Access Point Protocol (LWAPP) used with previous Cisco Aironet access points. LWAPP-enabled access points are compatible with CAPWAP and conversion to a CAPWAP controller is seamless. Deployments can combine CAPWAP and LWAPP software on the controllers. The functionality provided by the controller does not change except for customers who have Layer 2 deployments, which CAPWAP does not support.In a CAPWAP environment, a wireless access point discovers a controller by using CAPWAP discovery mechanisms and then sends it a CAPWAP join request. The controller sends the access point a CAPWAP join response allowing the access point to join the controller. When the access point joins the controller, the controller manages its configuration, firmware, control transactions, and data transactions.Note For additional information about the discovery process and CAPWAP, see the Cisco Wireless LAN Controller Software Configuration Guide. This document is available on cisco.com.Note CAPWAP support is provided in controller software release 5.2 or later. Your controller must be running release 5.2 or later.Note You cannot edit or query any access point using the controller CLI if the name of the access point contains a space.Note Make sure that the controller is set to the current time. If the controller is set to a time that has already occurred, the access point might not join the controller because its certificate may not be valid for that time.ap3500getstart.fm Page 7 Wednesday, October 28, 2009 4:42 PM

8 Access points must be discovered by a controller before they can become an active part of the network. The 3500 series access point supports these controller discovery processes: • Layer 3 CAPWAP discovery—Can occur on different subnets than the access point and uses IP addresses and UDP packets rather than MAC addresses used by Layer 2 discovery. • Over-the-air provisioning (OTAP)—This feature is supported by Cisco 4400 series controllers. If this feature is enabled on the controller, all joined access points transmit wireless CAPWAP neighbor messages, and new access points receive the controller IP address from these messages. This feature is disabled by default and should remain disabled when all access points are installed.Additional information about OTAP is available on cisco.com at the following link:http://www.ciscosystems.com/en/US/products/ps6366/products_tech_note09186a008093d74a.shtml • Locally stored controller IP address discovery—If the access point was previously joined to a controller, the IP addresses of the primary, secondary, and tertiary controllers are stored in the access point’s non-volatile memory. This process of storing controller IP addresses on an access point for later deployment is called priming the access point. For more information about priming, see the “Performing a Pre-Installation Configuration” section on page 9. • DHCP server discovery—This feature uses DHCP option 43 to provide controller IP addresses to the access points. Cisco switches support a DHCP server option that is typically used for this capability. For more information about DHCP option 43, see the “Configuring DHCP Option 43 and DHCP Option 60” section on page 43. • DNS discovery—The access point can discover controllers through your domain name server (DNS). For the access point to do so, you must configure your DNS to return controller IP addresses in response to CISCO-LWAPP-CONTROLLER.localdomain, where localdomain is the access point domain name. Configuring the CISCO-LWAPP-CONTROLLER provides backwards compatibility in an existing customer deployment. When an access point receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-LWAPP-CONTROLLER.localdomain. When the DNS sends a list of controller IP addresses, the access point sends discovery requests to the controllers.Preparing the Access PointBefore you mount and deploy your access point, we recommend that you perform a site survey (or use the site planning tool) to determine the best location to install your access point.You should have the following information about your wireless network available: • Access point locations. • Access point mounting options: below a suspended ceiling, on a flat horizontal surface, or on a desktop.ap3500getstart.fm Page 8 Wednesday, October 28, 2009 4:42 PM

9 Note You can mount the access point above a suspended ceiling but you must purchase additional mounting hardware: See “Mounting the Access Point” section on page 13 for additional information. • Access point power options: power supplied by a DC power supply, PoE from a network device, or a PoE power injector/hub (usually located in a wiring closet).Note Access points mounted in a building’s environmental airspace must be powered using PoE to comply with safety regulations.Cisco recommends that you make a site map showing access point locations so that you can record the device MAC addresses from each location and return them to the person who is planning or managing your wireless network.Installation SummaryInstalling the access point involves these operations: • Performing a pre-installation configuration (optional) • Mounting the access point • Grounding the access point • Deploying the access point on the wireless networkPerforming a Pre-Installation ConfigurationThe following procedures ensure that your access point installation and initial operation go as expected. A pre-installation configuration is also known as priming the access point. This procedure is optional.Note Performing a pre-installation configuration is an optional procedure. If your network controller is properly configured, you can install your access point in its final location and connect it to the network from there. See the “Deploying the Access Point on the Wireless Network” section on page 24 for details.ap3500getstart.fm Page 9 Wednesday, October 28, 2009 4:42 PM

10 Pre-Installation Configuration SetupFigure 3 shows the pre-installation configuration setup.Figure 3 Pre-Installation Configuration Setup Follow these steps to perform the pre-installation configuration.Step 1 Make sure that the Cisco wireless LAN controller DS port is connected to the network. Use the CLI, web-browser interface, or Cisco WCS procedures as described in the appropriate Cisco wireless LAN controller guide.a. Make sure that access points have Layer 3 connectivity to the Cisco wireless LAN controller Management and AP-Manager Interface.b. Configure the switch to which your access point is to attach. See the Cisco Unified Wireless Network WLAN Controller Guide: Cisco 440x Series WLAN Controllers for additional information.c. Set the Cisco wireless LAN controller as the master so that new access points always join with it.d. Make sure DHCP is enabled on the network. The access point must receive its IP address through DHCP.ControllerLayer 3devicesCisco Aironetaccess points272488ap3500getstart.fm Page 10 Wednesday, October 28, 2009 4:42 PM

11 e. CAPWAP UDP ports must not be blocked in the network.f. The access point must be able to find the IP address of the controller. This can be accomplished using DHCP, DNS, or IP subnet broadcast. This guide describes the DHCP method to convey the controller IP address. For other methods, refer to the product documentation. See also the “Using DHCP Option 43” section on page 26 for more information.Step 2 Apply power to the access point:a. The access point is 802.3af (15.4 W) compliant and can be powered by any of the following 802.3af compliant devices: –2106 controller –WS-C3550, WS-C3560, and WS-C3750 switches –C1880 switch –2600, 2610, 2611, 2621, 2650, and 2651 multiservice platforms –2610XM, 2611XM, 2621XM, 2650XM, 2651XM, and 2691 multiservice platforms –2811, 2821, and 2851 integrated services routers –3620, 3631-telco, 3640, and 3660 multiservice platforms –3725 and 3745 multiservice access routers –3825 and 3845 integrated services routersThe access point can also be powered by any of the following optional external power sources: –Any 802.3af compliant power injectorNote The 3500 series access point requires a Gigibit Ethernet link to prevent the Ethernet port from becoming a bottleneck for traffic because wireless traffic speeds exceed transmit speeds of a 10/100 Ethernet port. –1250 series access point power injector (AIR-PWRINJ4) –1100/1200 series access point DC power supply (AIR-PWR-SPLY)b. As the access point attempts to connect to the controller, the LEDs cycle through a green, red, and amber sequence, which can take up to 5 minutes.Note If the access point remains in this mode for more than five minutes, the access point is unable to find the Master Cisco wireless LAN controller. Check the connection between the access point and the Cisco wireless LAN controller and be sure that they are on the same subnet. ap3500getstart.fm Page 11 Wednesday, October 28, 2009 4:42 PM

12 c. If the access point shuts down, check the power source.d. After the access point finds the Cisco wireless LAN controller, it attempts to download the new operating system code if the access point code version differs from the Cisco wireless LAN controller code version. While this is happening, the Status LED blinks dark blue.e. If the operating system download is successful, the access point reboots.Step 3 Configure the access point if required. Use the controller CLI, controller GUI, or Cisco WCS to customize the access-point-specific 802.11n network settings.Step 4 If the pre-installation configuration is successful, the Status LED is green indicating normal operation. Disconnect the access point and mount it at the location at which you intend to deploy it on the wireless network.Step 5 If your access point does not indicate normal operation, turn it off and repeat the pre-installation configuration.Note When you are installing a Layer 3 access point on a different subnet than the Cisco wireless LAN controller, be sure that a DHCP server is reachable from the subnet on which you will be installing the access point, and that the subnet has a route back to the Cisco wireless LAN controller. Also be sure that the route back to the Cisco wireless LAN controller has destination UDP ports 5246 and 5247 open for CAPWAP communications. Ensure that the route back to the primary, secondary, and tertiary wireless LAN controller allows IP packet fragments. Finally, be sure that if address translation is used, that the access point and the Cisco wireless LAN controller have a static 1-to-1 NAT to an outside address. (Port Address Translation is not supported.)ap3500getstart.fm Page 12 Wednesday, October 28, 2009 4:42 PM

22 7 Securing the Access PointThere are two ways to secure your access point: • Attach it to an immovable object with a security cable. • Lock it to the mounting plate with a padlock.Using a Security CableYou can secure the access point by installing a standard security cable (such as the Kensington Notebook MicroSaver, model number 64068) into the access point security cable slot as shown in Figure 11.Figure 11 Security Cable DetailsThe security cable can be used with any of the mounting methods described in this guide. Follow these steps to install the security cable.Step 1 Loop the security cable around a nearby immovable object. Step 2 Insert the key into the security cable lock. Step 3 Insert the security cable latch into the security cable slot on the access point. 272379ap3500getstart.fm Page 22 Wednesday, October 28, 2009 4:42 PM

24 Step 4 Rotate the padlock into the padlock area. See Figure 13.Figure 13 Rotating the Padlock into the Padlock Area8 Deploying the Access Point on the Wireless NetworkAfter you have mounted the access point, follow these steps to deploy it on the wireless network.Step 1 Connect and power up the access point.Step 2 Observe the access point LED.a. When you power up the access point, it begins a power-up sequence that you can verify by observing the access point LED. If the power-up sequence is successful, the discovery and join process begins. During this process, the LED blinks sequentially through its available colors (red, amber, and green). When the access point has joined a controller, the LED is green if no clients are associated or blue if one or more clients are associated.b. If the LED is not on, the access point is most likely not receiving power.272383ap3500getstart.fm Page 24 Wednesday, October 28, 2009 4:42 PM

25 c. If the LED blinks sequentially for more than 5 minutes, the access point is unable to find its primary, secondary, and tertiary Cisco wireless LAN controller. Check the connection between the access point and the Cisco wireless LAN controller, and be sure the access point and the Cisco wireless LAN controller are either on the same subnet or that the access point has a route back to its primary, secondary, and tertiary Cisco wireless LAN controller. Also, if the access point is not on the same subnet as the Cisco wireless LAN controller, be sure that there is a properly configured DHCP server on the same subnet as the access point. See the “Configuring DHCP Option 43 and DHCP Option 60” section on page 43 for additional information.Step 3 Reconfigure the Cisco wireless LAN controller so that it is not the Master. Note A Master Cisco wireless LAN controller should be used only for configuring access points and not in a working network. 9 TroubleshootingIf you follow the instructions in previous sections of this guide, you should have no trouble getting your access point installed and running. If you do experience difficulty, before contacting Cisco, look for a solution to your problem in this guide or the troubleshooting chapter of the hardware installation guide for the access point you are using. These, and other documents, are available on Cisco.com. Follow these steps to access and download these documents:Step 1 Open your web browser and go to http://www.cisco.com.Step 2 Click Products & Services. A pop-up window appears.Step 3 Click Wireless. The Wireless Introduction page appears.Step 4 Scroll down to the Product Portfolio section.Step 5 Under Access Points, click Cisco Aironet 3500 Series. The Cisco Aironet 3500 Series Introduction page appears.Step 6 Scroll down to the Support window and click Install and Upgrade. The Cisco Aironet 3500 Series Install and Upgrade page appears.Step 7 Click Install and Upgrade Guides. The Cisco Aironet 3500 Series Install and Upgrade Guides page appears.Step 8 Select the section that best suits your troubleshooting needs.ap3500getstart.fm Page 25 Wednesday, October 28, 2009 4:42 PM

26 Guidelines for Using Cisco Aironet Lightweight Access PointsKeep these guidelines in mind when you use an 3500 series lightweight access point: • The access point can only communicate with Cisco controllers, such as the 2106 series wireless LAN controllers or 4400 series controllers. • The access point does not support Wireless Domain Services (WDS) and cannot communicate with WDS devices. However, the controller provides functionality equivalent to WDS when the access point joins to it. • CAPWAP does not support Layer 2. The access point must get an IP address and discover the controller using Layer 3, DHCP, DNS, or IP subnet broadcast. • The access point console port is enabled for monitoring and debug purposes (all configuration commands are disabled when the access point is connected to a controller). Using DHCP Option 43You can use DHCP Option 43 to provide a list of controller IP addresses to the access points, enabling them to find and join a controller. For additional information, refer to the “Configuring DHCP Option 43 and DHCP Option 60” section on page 43.Checking the Access Point LEDFigure 14 shows the location of the access point Status LED.Figure 14 Access Point LED Location1Status LED2723781ap3500getstart.fm Page 26 Wednesday, October 28, 2009 4:42 PM

27 Table 1 shows the access point Status LED indications for various conditions.Table 1 LED Status Indications Message Type Status LED MessageMeaningBoot loader status sequence Blinking green DRAM memory test in progressDRAM memory test OKBoard initialization in progressInitializing FLASH file systemFLASH memory test OKInitializing EthernetEthernet OKStarting Cisco IOSInitialization successfulAssociation status Green Normal operating condition, but no wireless client associatedBlue Normal operating condition, at least one wireless client associationOperating status Blinking blue Software upgrade in progressCycling through green, red, and amber Discovery/join process in progressRapidly cycling through blue, green, red, and whiteAccess point location command invokedBlinking red Ethernet link not operationalBoot loader warnings Blinking blue Configuration recovery in progress (MODE button pushed for 2 to 3 seconds)Red Ethernet failure or image recovery (MODE button pushed for 20 to 30 seconds)Blinking green Image recovery in progress (MODE button released)ap3500getstart.fm Page 27 Wednesday, October 28, 2009 4:42 PM

28 Troubleshooting the Access Point Join ProcessAccess points can fail to join a controller for many reasons: a RADIUS authorization is pending; self-signed certificates are not enabled on the controller; the access point’s and controller’s regulatory domains don’t match, and so on. Controller software enables you to configure the access points to send all CAPWAP-related errors to a syslog server. You do not need to enable any debug commands on the controller because all of the CAPWAP error messages can be viewed from the syslog server itself.The state of the access point is not maintained on the controller until it receives a CAPWAP join request from the access point. Therefore, it can be difficult to determine why the CAPWAP discovery request from a certain access point was rejected. In order to troubleshoot such joining problems without enabling CAPWAP debug commands on the controller, the controller collects information for all access points that send a discovery message to it and maintains information for any access points that have successfully joined it.The controller collects all join-related information for each access point that sends a CAPWAP discovery request to the controller. Collection begins with the first discovery message received from the access point and ends with the last configuration payload sent from the controller to the access point.Boot loader errors Red DRAM memory test failureBlinking red and blue FLASH file system failureBlinking red and off Environment variable failureBad MAC addressEthernet failure during image recoveryBoot environment failureNo Cisco image fileBoot failureCisco IOS errors Red Software failure; try disconnecting and reconnecting unit powerCycling through blue, green, red, and off General warning; insufficient inline powerTable 1 LED Status Indications (continued)Message Type Status LED MessageMeaningap3500getstart.fm Page 28 Wednesday, October 28, 2009 4:42 PM

29 You can view join-related information for the following numbers of access points: • Up to 300 access points for 4400 series controllers, the Cisco WiSM, and the Catalyst 3750G Integrated Wireless LAN Controller Switch • Up to three times the maximum number of access points supported by the platform for the 2100 series controllers and the Controller Network Module within the Cisco 28/37/38xx Series Integrated Services RoutersWhen the controller is maintaining join-related information for the maximum number of access points, it does not collect information for any more access points.An access point sends all syslog messages to IP address 255.255.255.255 by default when any of the following conditions are met: • An access point running software release 5.2 or later has been newly deployed. • An existing access point running software release 5.2 or later has been reset after clearing the configuration.If any of these conditions are met and the access point has not yet joined a controller, you can also configure a DHCP server to return a syslog server IP address to the access point using option 7 on the server. The access point then starts sending all syslog messages to this IP address. When the access point joins a controller for the first time, the controller sends the global syslog server IP address (the default is 255.255.255.255) to the access point. After that, the access point sends all syslog messages to this IP address until it is overridden by one of the following scenarios: • The access point is still connected to the same controller, and the global syslog server IP address configuration on the controller has been changed using the config ap syslog host global syslog_server_IP_address command. In this case, the controller sends the new global syslog server IP address to the access point. • The access point is still connected to the same controller, and a specific syslog server IP address has been configured for the access point on the controller using the config ap syslog host specific Cisco_AP syslog_server_IP_address command. In this case, the controller sends the new specific syslog server IP address to the access point. • The access point is disconnected from the controller and joins another controller. In this case, the new controller sends its global syslog server IP address to the access point. • Whenever a new syslog server IP address overrides the existing syslog server IP address, the old address is erased from persistent storage, and the new address is stored in its place. The access point also starts sending all syslog messages to the new IP address provided the access point can reach the syslog server IP address.You can configure the syslog server for access points and view the access point join information only from the controller CLI.A detailed explanation of the join process is on cisco.com at the following URL:http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00808f8599.shtmlap3500getstart.fm Page 29 Wednesday, October 28, 2009 4:42 PM

30 10 Declarations of Conformity and Regulatory InformationThis section provides declarations of conformity and regulatory information for the Cisco Aironet 3500 Series Access Point.Manufacturers Federal Communication Commission Declaration of Conformity StatementManufacturer:Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USAThis device complies with Part 15 rules. Operation is subject to the following two conditions:1. This device may not cause harmful interference, andModels Certification NumbersAIR-SAP3501E-A-K9 AIR-SAP3501I-A-K9 AIR-CAP3501E-A-K9 AIR-CAP3501I-A-K9 AIR-AP1261N-A-K9 AIR-LAP1261N-A-K9LDK102072AIR-SAP3502I-A-K9 AIR-SAP3502E-A-K9 AIR-CAP3502I-A-K9 AIR-CAP3502E-A-K9 AIR-AP1262N-A-K9 AIR-LAP1262N-A-K9LDK102073Tested To ComplyWith FCC StandardsFOR HOME OR OFFICE USEap3500getstart.fm Page 30 Wednesday, October 28, 2009 4:42 PM

31 2. This device must accept any interference received, including interference that may cause undesired operation.This device operates in the 5150-5250MHz and 5470-5725MHz bands and is therefore restricted to indoor operation only per FCC guidance. This equipment has been tested and found to comply with the limits of a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential environment. This equipment generates, uses, and radiates radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference. However, there is no guarantee that interference will not occur. If this equipment does cause interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to correct the interference by one of the following measures: • Reorient or relocate the receiving antenna. • Increase separation between the equipment and receiver. • Connect the equipment to an outlet on a circuit different from which the receiver is connected. • Consult the dealer or an experienced radio/TV technician.Caution The Part 15 radio device operates on a non-interference basis with other devices operating at this frequency when using the integrated antennas. Any changes or modification to the product not expressly approved by Cisco could void the user’s authority to operate this device.Caution Within the 5.15 to 5.25 GHz and 5.47-5.725 GHz bands, this device is restricted to indoor operations to reduce any potential for harmful interference to co-channel Mobile Satellite System (MSS) operations.ap3500getstart.fm Page 31 Wednesday, October 28, 2009 4:42 PM

32 VCCI Statement for JapanGuidelines for Operating Cisco Aironet Access Points in JapanThis section provides guidelines for avoiding interference when operating Cisco Aironet access points in Japan. These guidelines are provided in both Japanese and English.WarningThis is a Class B product based on the standard of the Voluntary Control Council for Interference from Information Technology Equipment (VCCI). If this is used near a radio or television receiver in a domestic environment, it may cause radio interference. Install and use the equipment according to the instruction manual.ap3500getstart.fm Page 32 Wednesday, October 28, 2009 4:42 PM

33 Japanese TranslationEnglish TranslationThis equipment operates in the same frequency bandwidth as industrial, scientific, and medical devices such as microwave ovens and mobile object identification (RF-ID) systems (licensed premises radio stations and unlicensed specified low-power radio stations) used in factory production lines.1. Before using this equipment, make sure that no premises radio stations or specified low-power radio stations of RF-ID are used in the vicinity.2. If this equipment causes RF interference to a premises radio station of RF-ID, promptly change the frequency or stop using the device; contact the number below and ask for recommendations on avoiding radio interference, such as setting partitions.3. If this equipment causes RF interference to a specified low-power radio station of RF-ID, contact the number below.Contact Number: 03-6434-650003-6434-650043768ap3500getstart.fm Page 33 Wednesday, October 28, 2009 4:42 PM

34 Statement 371—Power Cable and AC AdapterEnglish TranslationWhen installing the product, please use the provided or designated connection cables/power cables/AC adaptors. Using any other cables/adaptors could cause a malfunction or a fire. Electrical Appliance and Material Safety Law prohibits the use of UL-certified cables (that have the “UL” shown on the code) for any other electrical devices than products designated by CISCO. The use of cables that are certified by Electrical Appliance and Material Safety Law (that have “PSE” shown on the code) is not limited to CISCO-designated products.Industry CanadaCanadian Compliance StatementThis Class B Digital apparatus meets all the requirements of the Canadian Interference-Causing Equipment Regulations.AIR-SAP3501E-A-K9 AIR-SAP3501I-A-K9 AIR-CAP3501E-A-K9 AIR-CAP3501I-A-K9 AIR-AP1261N-A-K9 AIR-LAP1261N-A-K92461B-102072AIR-SAP3502E-B-K9 AIR-SAP3502I-B-K9 AIR-CAP3502E-B-K9 AIR-CAP3502I-B-K9 AIR-AP1262N-B-K9 AIR-LAP1262N-B-K92461B-102073ap3500getstart.fm Page 34 Wednesday, October 28, 2009 4:42 PM

35 Cet appareil numerique de la classe B respecte les exigences du Reglement sur le material broilleur du Canada.This device complies with Class B Limits of Industry Canada. Operation is subject to the following two conditions:1. This device may not cause harmful interference, and2. This device must accept any interference received, including interference that may cause undesired operation.Cisco Aironet Access Points are certified to the requirements of RSS-210. The use of this device in a system operating either partially or completely outdoors may require the user to obtain a license for the system according to the Canadian regulations. For further information, contact your local Industry Canada office.This device has been designed to operate with antennas having a maximum gain of 6 dBi. Antennas having a gain greater than 6 dBi are strictly prohibited for use with this device. The required antenna impedance is 50 ohms.To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (EIRP) is not more than that permitted for successful communication.European Community, Switzerland, Norway, Iceland, and LiechtensteinModels:AIR-SAP3501E-E-K9 AIR-SAP3502E-E-K9 AIR-CAP3501E-E-K9 AIR-CAP3502E-E-K9AIR-SAP3501I-E-K9 AIR-SAP3502I-E-K9 AIR-CAP3501I-E-K9 AIR-CAP3502I-E-K9AIR-AP1261N-E-K9 AIR-LAP1261N-E-K9ap3500getstart.fm Page 35 Wednesday, October 28, 2009 4:42 PM

36 Declaration of Conformity with Regard to the R&TTE Directive 1999/5/ECap3500getstart.fm Page 36 Wednesday, October 28, 2009 4:42 PM

37 The following standards were applied: • Radio—EN 300.328-1, EN 300.328-2, EN 301.893 • EMC—EN 301.489-1, EN 301.489-17 • Safety—EN 60950-1ap3500getstart.fm Page 37 Wednesday, October 28, 2009 4:42 PM

38 Note This equipment is intended to be used in all EU and EFTA countries. Outdoor use may be restricted to certain frequencies and/or may require a license for operation. For more details, contact Cisco Corporate Compliance.The following CE mark is affixed to the access point with a 2.4-GHz radio and a 54-Mb/s, 5-GHz radio:Declaration of Conformity for RF ExposureUnited StatesThis system has been evaluated for RF exposure for Humans in reference to ANSI C 95.1 (American National Standards Institute) limits. The evaluation was based on ANSI C 95.1 and FCC OET Bulletin 65C rev 01.01. The minimum separation distance from the antenna to general bystander is 7.9 inches (20cm) to maintain compliance. Canada This system has been evaluated for RF exposure for Humans in reference to ANSI C 95.1 (American National Standards Institute) limits. The evaluation was based on RSS-102 Rev 2. The minimum separation distance from the antenna to general bystander is 7.9 inches (20cm) to maintain compliance. European UnionThis system has been evaluated for RF exposure for Humans in reference to the ICNIRP (International Commission on Non-Ionizing Radiation Protection) limits. The evaluation was based on the EN 50385 Product Standard to Demonstrate Compliance of Radio Base stations and Fixed Terminals for Wireless Telecommunications Systems with basic restrictions or reference levels related to Human Exposure to Radio Frequency Electromagnetic Fields from 300 MHz to 40 GHz. The minimum separation distance from the antenna to general bystander is 20cm (7.9 inches). ap3500getstart.fm Page 38 Wednesday, October 28, 2009 4:42 PM

39 AustraliaThis system has been evaluated for RF exposure for Humans as referenced in the Australian Radiation Protection standard and has been evaluated to the ICNIRP (International Commission on Non-Ionizing Radiation Protection) limits. The minimum separation distance from the antenna to general bystander is 20cm (7.9 inches). Administrative Rules for Cisco Aironet Access Points in TaiwanThis section provides administrative rules for operating Cisco Aironet access points in Taiwan. The rules for all access points are provided in both Chinese and English.Chinese Translationap3500getstart.fm Page 39 Wednesday, October 28, 2009 4:42 PM

40 English TranslationAdministrative Rules for Low-power Radio-Frequency DevicesArticle 12For those low-power radio-frequency devices that have already received a type-approval, companies, business units or users should not change its frequencies, increase its power or change its original features and functions.Article 14The operation of the low-power radio-frequency devices is subject to the conditions that no harmful interference is caused to aviation safety and authorized radio station; and if interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear.The authorized radio station means a radio-communication service operating in accordance with the Communication Act. The operation of the low-power radio-frequency devices is subject to the interference caused by the operation of an authorized radio station, by another intentional or unintentional radiator, by industrial, scientific and medical (ISM) equipment, or by an incidental radiator. Chinese Translationap3500getstart.fm Page 40 Wednesday, October 28, 2009 4:42 PM

41 English TranslationLow-power Radio-frequency Devices Technical SpecificationsOperation of Cisco Aironet Access Points in BrazilThis section contains special information for operation of Cisco Aironet access points in Brazil.Access Point ModelsAIR-SAP3501E-A-K9 AIR-SAP3501I-A-K9 AIR-CAP3501E-A-K9 AIR-CAP3501I-A-K9 AIR-SAP3502E-T-K9 AIR-SAP3502I-T-K9 AIR-CAP3502E-T-K9 AIR-CAP3502I-T-K94.7 Unlicensed National Information Infrastructure4.7.5 Within the 5.25-5.35 GHz band, U-NII devices will be restricted to indoor operations to reduce any potential for harmful interference to co-channel MSS operations.4.7.6 The U-NII devices shall accept any interference from legal communications and shall not interfere the legal communications. If interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear.4.7.7 Manufacturers of U-NII devices are responsible for ensuring frequency stability such that an emission is maintained within the band of operation under all conditions of normal operation as specified in the user manual.ap3500getstart.fm Page 41 Wednesday, October 28, 2009 4:42 PM

42 Regulatory InformationFigure 15 contains Brazil regulatory information for the access point models identified in the previous section.Figure 15 Brazil Regulatory InformationPortuguese TranslationEste equipamento opera em caráter secundário, isto é, não tem direito a proteção contra interferência prejudicial, mesmo de estações do mesmo tipo, e não pode causar interferência a sistemas operando em caráter primário.English TranslationThis equipment operates on a secondary basis and consequently must accept harmful interference, including interference from stations of the same kind. This equipment may not cause harmful interference to systems operating on a primary basis. Declaration of Conformity StatementsAll the Declaration of Conformity statements related to this product can be found at the following location: http://www.ciscofax.comap3500getstart.fm Page 42 Wednesday, October 28, 2009 4:42 PM

43 11 Configuring DHCP Option 43 and DHCP Option 60This section contains a DHCP Option 43 configuration example on a Windows 2003 Enterprise DHCP server for use with Cisco Aironet lightweight access points. For other DHCP server implementations, consult product documentation for configuring DHCP Option 43. In Option 43, you should use the IP address of the controller management interface.Note DHCP Option 43 is limited to one access point type per DHCP pool. You must configure a separate DHCP pool for each access point type.The 3500 series access point uses the type-length-value (TLV) format for DHCP Option 43. DHCP servers must be programmed to return the option based on the access point’s DHCP Vendor Class Identifier (VCI) string (DHCP Option 60). The VCI string for the 3500 series access point is:Cisco AP c3500The format of the TLV block is listed below: • Type: 0xf1 (decimal 241) • Length: Number of controller IP addresses * 4 • Value: List of WLC management interfaces To configure DHCP Option 43 in the embedded Cisco IOS DHCP server, follow these steps: Step 1 Enter configuration mode at the Cisco IOS CLI. Step 2 Create the DHCP pool, including the necessary parameters such as default router and name server. A DHCP scope example is as follows: ip dhcp pool <pool name> network <IP Network> <Netmask> default-router <Default router> dns-server <DNS Server> Where:<pool name> is the name of the DHCP pool, such as AP3500<IP Network> is the network IP address where the controller resides, such as 10.0.15.1<Netmask> is the subnet mask, such as 255.255.255.0<Default router> is the IP address of the default router, such as 10.0.0.1<DNS Server> is the IP address of the DNS server, such as 10.0.10.2ap3500getstart.fm Page 43 Wednesday, October 28, 2009 4:42 PM

44 Step 3 Add the option 60 line using the following syntax: option 60 ascii “VCI string” For the VCI string, “Cisco AP c3500”. The quotation marks must be included. Step 4 Add the option 43 line using the following syntax: option 43 hex <hex string> The hex string is assembled by concatenating the TLV values shown below: Type + Length + Value Type is always f1(hex). Length is the number of controller management IP addresses times 4 in hex. Value is the IP address of the controller listed sequentially in hex. For example, suppose that there are two controllers with management interface IP addresses, 10.126.126.2 and 10.127.127.2. The type is f1(hex). The length is 2 * 4 = 8 = 08 (hex). The IP addresses translate to 0a7e7e02 and 0a7f7f02. Assembling the string then yields f1080a7e7e020a7f7f02. The resulting Cisco IOS command added to the DHCP scope is option 43 hex f1080a7e7e020a7f7f02.ap3500getstart.fm Page 44 Wednesday, October 28, 2009 4:42 PM

45 12 Access Point SpecificationsTable 2 lists the technical specifications for the 3500 series access point.Table 2 Access Point Specifications Category SpecificationDimensions (LxWxD) 8.68 x 8.68 x 1.84 in. (22.04 x 22.04 x 4.67 cm) Weight 1.9 lbs (0.86 kg)Operating temperature 32 to 104 degrees F (0 to –40 degrees C)Storage temperature –22 to 185 degrees F (–30 to 85 degrees C)Humidity 10% to 90% (noncondensing)Antenna IntegratedCompliance The 3500 series access point complies with UL 2043 for products installed in a building’s environmental air handling spaces, such as above suspended ceilings.Safety UL 60950-1 CAN/CSA C22.2 No. 60950-1 IEC 60950-1 with all national deviations EN 60950-1 UL 2043EMI and Susceptibility FCC Part 15.107 and 15.109 Class B ICES-003 Class B (Canada) EN 301.489 EN 55022 Class B, 2000 version EN 55024 AS/NZS 3548 Class B VCCI Class BRadio FCC Part 15.247, 15.407 Canada RSS-210 Japan Telec 33, 66, T71 EN 330.328, EN 301.893 FCC Bulletin OET-65C Industry Canada RSS-102Maximum power and channel settings Maximum power and the channels allowed in your regulatory domain, refer to Channels and Maximum Power Settings for Cisco Aironet Lightweight Access Points. This document is available on cisco.com.ap3500getstart.fm Page 45 Wednesday, October 28, 2009 4:42 PM

46 ap3500getstart.fm Page 46 Wednesday, October 28, 2009 4:42 PM

47 ap3500getstart.fm Page 47 Wednesday, October 28, 2009 4:42 PM

Navigation menu