IFIP-UNU ADVANCED COURSE ON NETWORKING AND SECURITY Module II-Wireless Communications Section 5 Access Points

Overview This module covers basic access point (AP) installation and configuration. An access point acts as a communication hub for wireless network users. An access point can link wired and wireless networks together. The goal of this module is to get the AP configured and communicating with clients and other APs. It is important to keep the configuration simple until connectivity is achieved. Later in this module, more detailed port configurations and services will be covered

Learning Objectives Demonstrate the proper AP setup and connection Properly connect to the AP Demonstrate Configuration proficiency via IOS GUI Demonstrate Configuration proficiency via IOS CLI

Key terms VxWorks IOS Express Setup Home Page Power over Ethernet IPSU

Access Point Connection

Current AP Models 1100 Series AP 1200 Series AP 802.11b only Plastic housing 2.4 GHz antenna: Integrated 2 dBi gain omni antenna Outstanding value 1200 Series AP Dual-band capable (802.11a+b) Rugged metal enclosure 2.4 GHz antenna: Choose among a variety of antennas that connect to AP’s external antenna connectors 5 GHz antenna: Integrated 6 dBi gain combo omni/patch antenna Outstanding performance Common to both the 1100 & 1200 Line Power-over-Ethernet IOS feature set Field-upgradable to .11g Plenum-rated Lockable mounting brackets Both can be ordered with IOS

AP Power Options

Power Brick for 1100/1200

Inline Power Module for 350/1100/1200

Catalyst Powered Switch Options Powered Switches 35xx-PWR Powered Blades 6500 Series 4006 Series Inline Power Patch Panel

Connecting the 1200 Console Port Ethernet Port with or w/o power Link Traffic DC Power

Connecting the 1100 No Console Port DC Power Ethernet Port w/wo power

LED Indicators Status Lights Ethernet Status Radio Activity Ethernet Activity Status Radio Activity

Connecting to the AP Console port Telnet Web Browser Requires roll-over cable Telnet Requires an IP address Web Browser To set an IP address: Use the default Use DHCP Use IPSU Set using Console port Console Port Telnet Web Browser

Using IPSU

Initial Web Browser Configuration For initial configuration: Connect Ethernet crossover between PC and AP. Configure PC with IP address 10.0.0.2/24 Browse to 10.0.0.1 (AP default IP) Username/Password: Cisco/Cisco

Basic Configuration

Cisco Access Point GUI Comparison VxWorks GUI AP 1200 AP 340/350 BR350 IOS GUI AP 1200 AP 1100 AP 350 * ** Available Q3 2003

Cisco Access Point CLI Comparison VxWorks “CLI” AP 1200 AP 340/350 BR350 IOS CLI AP 1200 AP 1100 AP 350* Available Q3 2003

Assigning IP Address Using IOS CLI Connect a console cable between PC and AP. (Use “typical” serial settings.) Enter enabled mode: enable (Default password: Cisco) Enter global configuration mode: config t Enter interface configuration mode: interface bvi1 Assign IP address: ip address <address> <mask> End and save configuration: copy run start

Main Menu (HOME Page)

Express Setup Menu

Express Setup Menu

Association Table

Network Interfaces

IP Address

Ethernet Port Configuration

FastEthernet Status

FastEthernet Settings

AP Radio Port Configuration

Radio Status

Radio Detailed Status

Radio Settings

Radio Settings (cont)

Radio Settings (cont)

Radio Settings (cont)

Radio Link Test

Configure Services

Services Page

Hot Standby

CDP

SNMP

SNMP

Configure Filters

Filters

MAC Address Filters

IP Filters

IP Filters

EtherType Filters

Proxy Mobile IP

Proxy Mobile IP Devices A visiting client device that can associate to an AP. It does not need any special proxy Mobile IP software. An AP with proxy Mobile IP enabled. An authoritative AP on your network supporting proxy Mobile IP. The authoritative AP uses a subnet map to keep track of the home agent information for all visiting client devices. A home agent. The home agent is a router on the visiting client’s home network that serves as the anchor point for communication with the AP and the visiting client. The home agent tunnels packets from a correspondent node on the Internet to the visiting client device. A foreign agent. The foreign agent is a router on your network that serves as the point of attachment for the visiting client device when it is on your network, delivering packets from the home agent to the visiting client

Proxy Mobile IP

Proxy Mobile IP SA Bindings

Proxy Mobile IP Caveats You can enable proxy Mobile IP only on root APs. APs should be configured with gateway addresses. The foreign and home agents must reside on the network gateways where you want to support proxy Mobile IP. If your authoritative APs receive their IP addresses through DHCP, use the access point host names to specify the AAPs in the proxy Mobile IP configuration. Proxy Mobile IP does not support broadcast and multicast traffic for visiting clients. To use Proxy Mobile IP with DHCP clients, disable Media Sense on the client. Does not support VLANs.

Proxy Mobile IP Statistics

QoS

QoS Configuration WLAN QoS differs from QoS on other Cisco devices: Does not classify packets Do not match packets using ACLs Do not support ISL Difference is most notable on busy networks. You should be familiar with your network traffic before configuring QoS. QoS does not create additional bandwidth.

QoS Policies

Apply QoS to Interface/VLANs

Traffic Class Definition

System Software

System Software

Software Upgrade

System Configuration

Summary A variety of tools are available to configure an AP. The Web browser is usually the easiest way to configure an AP. The 1100 and 1200 also can be configured via Cisco IOS. Future APs will also support Cisco IOS.

Labs

Labs of Section 5 Lab 5.2.2 Configuring Basic AP Settings Lab 5.2.4 Using features of the Internetworking Operating System (IOS) command line interface (CLI) Lab 5.2.5 Manage AP Configuration and Image Files Lab 5.3.5 Configure Ethernet/FastEthernet Interface Lab 5.4.4 Configure Radio Interfaces via GUI Lab 5.4.5 Configure Radio Interface via IOS CLI Lab 5.4.8 Configure an AP as a repeater via IOS CLI