Traffic Statistics WorkGroup Bridge Transmit/Receive Associated Clients TSPEC Client Associations Rogue AP Detection TSPEC Status and Statistics TSPEC AP Statistics RADIO Statistics Email Alert Status Port Settings Time Settings Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 3
Usage Scenarios WPS Roles Enabling and disabling WPS on a VAP External and Internal Registration Client Enrollment Optional Use of Internal Registrar Lockdown Capability VAP Configuration Changes External Registration Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 4
Firmware Upgrade TFTP Upgrade HTTP Upgrade Packet Capture Packet Capture Configuration Local Packet Capture Remote Packet Capture Packet Capture File Download Log Settings Configuring the Persistent Log Remote Log Server Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 5
WPA-PSK Complexity Configuring Global Captive Portal Settings Configuring Instances Configuring VAPs Uploading Binary Files Customizing the Captive Portal Web Pages Web Customization Preview Local Groups Local Users Local User/Group Associations Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 6
Failed Authentication Clients ACLs IPv4 and IPv6 ACLs MAC ACLs Configuring ACLs Class Map Adding a Class Map Defining a Class Map Policy Map Client QoS Association Client QoS Status Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 7
• If you have multiple IPv6 interfaces on your management station, use the IPv6 global address instead of IPv6 link local address to access the AP from your browser. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
By default, the application logs out after five minutes of inactivity. See for instructions on changing the default timeout period. To logout, click in the top right corner of any page. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Review the settings you configured. If they are correct, click . Or, click to reconfigure one or more settings. If you click , all settings are returned to the previous values. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Quick Change Account Password User Accounts Access Upgrade Device Firmware Upgrade Firmware Backup/Restore Configuration Download/Backup Configuration File Other Support Cisco AP support site Resources Forums Cisco Support Community site Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
A navigation window is located on the left side of each page. Click a top-level category to display links to related pages. Links that are preceded by an arrow are subcategories that expand to display the related page links. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 12
Startup Configuration in nonvolatile memory. Click to save any configuration changes on part of a page to the Running Configuration in RAM and to the Startup Configuration in nonvolatile memory. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 13
REVIEW DRAFT Version 2—CISCO CONFIDENTIAL This chapter describes how to display WAP121/WAP321 statistics. It contains the following topics. • • • • • • • • • • • • Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
A value of All indicates that the service is available to all remote hosts that access the system. • —The logical port number of any remote device communicating with this service. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
802. 1 1 mode (a/b/g/n), and the channel used by the interface. To change the wireless settings, click the Edit link. After you click Edit, you are redirected to the Radio page. See for descriptions of these fields. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
(in Received table) by this AP that were dropped. • —The total number of bytes sent (in Transmit table) or received (in Received table) by this AP that were dropped. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
—The total number of bytes bridged between the wired clients in the workgroup bridge and the wireless network. You can click to refresh the screen and display the most current information. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Station, these counters indicate the number of packets and bytes transmitted from the AP to the wireless client. —Number of packets received (transmitted) from the wireless client. —Number of bytes received (transmitted) from the wireless client. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
To view TSPEC client association statistics, click in the navigation window. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 20
—Virtual Access Point MAC address. Statistics: • —Radio interface used by the client. • —Client station MAC address. • —TSPEC Traffic Session Identifier (range 0-7). • —TS Access Category (voice or video). Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
The AP does not have any control over the APs on the lists and cannot apply any security policies to APs detected through the RF scan. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 22
AP. Ad-hoc mode is an IEEE 802. 1 1 Wireless Networking Framework also referred to as peer-to-peer mode or an Independent Basic Service Set (IBSS). • —The Service Set Identifier (SSID) for the AP. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 23
(dB) displays. • —The total number of beacons received from this AP since it was first discovered. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 24
AP to accept the file, it must contain only MAC addresses. Click When the import is complete, the screen refreshes and the MAC addresses of the APs in the imported file appear in the Known AP List. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
—Time (in 32 microsecond per second units) of unused bandwidth for this Access Category. The following statistics display separately for the transmit and receive paths on the wireless radio interface: Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
• —The total number of accepted and the total number of rejected video traffic streams. You can click to refresh the screen and display the most current information. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
• —Number of times an MSDU is successfully transmitted after one or more retries. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
—The total number of email failures so far. The range is an unsigned integer of 32 bits. The default is 0. • —The day, date, and time time when the last email was sent. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
• —A description of the event. You can click to refresh the screen and display the most current information. You can click to clear all entries from the log. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
When disabled, you can manually configure the port speed and duplex mode. If autonegotiation is disabled, select a (10Mb/s or 100Mb/s) and the duplex mode (Half- or Full-duplex). Enable or disable Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
VLAN. If you want to segregate management traffic from the untagged VLAN traffic, set this value to a different value than the management VLAN ID. The valid VLAN ID range is 1 to 4094. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 32
Router Advertisements received on the LAN port. The AP can have multiple autoconfigured IPv6 addresses. • —The static IPv6 address. The AP can have a static IPv6 address even if addresses have already been configured automatically. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
The current system time displays at the top of the page, along with the System Clock Source option. To use NTP to have the AP automatically acquire its time settings: For the System Clock Source field, select Configure the following parameters: Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 34
• —Select which week, day, month, and time when daylight savings time ends. • Specify the number of minutes to move the clock forward when DST begins. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 35
Time Settings REVIEW DRAFT Version 2—CISCO CONFIDENTIAL Click . The changes are saved to the Running Configuration and to the Startup Configuration. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 36
Radio settings directly control the behavior of the radio in the AP and its interaction with the physical medium; that is, how and what type of electromagnetic waves the AP emits. To configure radio settings: Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
(802. 1 1n modes with 40 MHz bandwidth only)—A 40 MHz channel can be considered to consist of two 20 MHz channels that are contiguous in the frequency domain. These two 20 MHz channels are often Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 38
—The AP transmits data using a 400 ns guard Interval when communicating with clients that also support the short guard interval. —The AP transmits data using an 800 ns guard interval. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 39
802. 1 1 frames. If the packet being transmitted is equal to or less than the threshold, fragmentation is not used. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 40
APs. A lower transmit power setting can also keep your network more secure because weaker wireless signals are less likely to propagate outside of the physical location of your network. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 41
1, but less than 50 packets per second. Any traffic that falls below this rate limit will always conform and be transmitted to the appropriate destination. The default and maximum rate limit setting is 50 packets per second. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 42
TSPEC; the AP ignores video TSPEC requests from client stations. • —The upper limit on the amount of traffic the AP attempts to transmit on the wireless medium using a video AC to gain access. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
“Virtual Access Point x” where ‘x’ is the VAP number in the range of 1–4 for the WAP121 and 1–8 for the WAP321. The SSIDs for all VAPs can be configured to other values. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 44
AP. If needed, an access control list (ACL) can be created to disable administration from WLAN clients. To configure VAPs: Click > in the navigation window. Select the check box for the VAP you want to configure. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
AP. • —The URL where the Web browser is to be redirected after the wireless client associates with the AP and sends HTTP traffic. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 47
—A key index list. Key indexes 1 through 4 are available. The default is1. The Transfer Key Index indicates which WEP key the AP will use to encrypt the data it transmits. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 48
IEEE 802. 1 X, and WPA modes. When the authentication algorithm is set to Open System, any client can associate with the AP. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 49
This ensures that neighboring APs cannot decode each other’s transmissions. • You cannot mix 64-bit and 128-bit WEP keys between the access point and its client stations. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 50
If the primary server responds to the authentication request, the AP continues to use this RADIUS server as the primary server, and authentication requests are sent to the address you specify. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 51
802. 1 X as is used in the Enterprise WPA security mode. The PSK is used for an initial check of credentials only. WPA Personal is also referred to as WPA-PSK. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 52
If the WPA-PSK complexity check feature is enabled, the key will not be accepted unless it meets the minimum criteria. See for information on configuring the complexity check. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 53
This option does not apply if you selected WPA for WPA Versions because the original WPA does not support this feature. • —The cipher suite you want to use: TKIP Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 54
RADIUS IPv6 Address when the IPv6 RADIUS IP Address Type option is selected. If authentication fails with the primary server, each configured backup server is tried in sequence. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
You can also use the Scheduler to allow access to VAPs for wireless clients only during specific times of day. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 56
TimeNotSet—Time is set on the AP neither manually nor through NTP. To add a profile, enter a profile name in the text box and click The profile name can be up to 32 alphanumeric characters. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 57
A Scheduler profile must be associated with a radio interface or a VAP interface to be in effect. See the Scheduler Association page. To delete a rule, select the profile from the column and click Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
The default is 0, which means that all new associations will be allowed regardless of the utilization rate. Click . The changes are saved to the Running Configuration and to the Startup Configuration. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
: The filter setting also applies to the MAC filtering list stored on the RADIUS server, if one exists. In the field, enter the MAC address to allow or block and click Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
It can also simplify the network infrastructure by reducing the amount of cabling required. You can configure the AP in point-to-point or point-to-multipoint bridge mode based on the number of links to connect. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 61
To configure a WDS bridge: Click > in the navigation window. Select . When enabled, STP helps prevent switching loops. STP is recommended if you configure WDS links. Select Configure the remaining parameters: Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
BSS as an AP device. When Work Group Bridge mode is enabled, then the AP supports only one BSS for wireless clients that associate with it, and another BSS to which the AP associates as a wireless client. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 63
Configure the following parameters for the upstream interface and then the downstream interface: • —The SSID if the BSS • (downstream only)—Select if you want the downstream SSID to be broadcast. SSID Broadcast is off by default. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 64
—The VLAN associated with the BSS. Click . The changes are saved to the Running Configuration and to the Startup Configuration. The associated downstream clients will now have connectivity to the upstream network. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Data 1 (Video)—High priority queue, minimum delay. Time-sensitive video data is automatically sent to this queue. • Data 2 (Best Effort)—Medium priority queue, medium throughput and delay. Most traditional IP data is sent to this queue. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Page 66
A packet burst is a collection of multiple frames transmitted without header information. The decreased overhead results in higher throughput and better performance. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
AP settings when WLAN traffic is low. This section describes the Wi-Fi Protected Setup (WPS) protocol and its configuration on the switch. It contains the following subsections: • • Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
AP to an existing (wired or wireless) network. The administrator turns on the AP, and then accesses a network host that supports the WPS registration protocol. The administrator enters the AP device’s pin on the UI of this Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
VAP meets the following conditions: • The AP is configured to broadcast the VAP SSID. • MAC address filtering is disabled on the VAP. • WEP encryption is disabled on the VAP. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...
Either device can initiate the enrollment. However, if the software button on the AP is pressed, and no client attempts to enroll after 120 seconds, the AP terminates the pending WPS enrollment transaction. Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE...