用户手册目录Contents5Chapter 1 Introduction171.1 New Features181.1.1 Adaptive AP181.1.2 Rogue AP Enhancements191.1.3 Bandwidth Management Enhancements191.1.4 Radius Time-Based Authentication191.1.5 QBSS Support191.2 Feature Overview201.2.1 Single or Dual Mode Radio Options211.2.2 Separate LAN and WAN Ports211.2.3 Multiple Mounting Options221.2.4 Antenna Support for 2.4 GHz and 5.2 GHz Radios221.2.5 Sixteen Configurable WLANs221.2.6 Support for 4 BSSIDs per Radio221.2.7 Quality of Service (QoS) Support231.2.8 Industry Leading Data Security231.2.8.1 Kerberos Authentication241.2.8.2 EAP Authentication251.2.8.3 WEP Encryption251.2.8.4 KeyGuard Encryption261.2.8.5 Wi-Fi Protected Access (WPA) Using TKIP Encryption261.2.8.6 WPA2-CCMP (802.11i) Encryption271.2.8.7 Firewall Security271.2.8.8 VPN Tunnels271.2.8.9 Content Filtering271.2.9 VLAN Support281.2.10 Multiple Management Accessibility Options281.2.11 Updatable Firmware281.2.12 Programmable SNMP v1/v2/v3 Trap Support291.2.13 Power-over-Ethernet Support291.2.14 MU-MU Transmission Disallow301.2.15 Voice Prioritization301.2.16 Support for CAM and PSP MUs311.2.17 Statistical Displays311.2.18 Transmit Power Control311.2.19 Advanced Event Logging Capability321.2.20 Configuration File Import/Export Functionality321.2.21 Default Configuration Restoration321.2.22 DHCP Support321.2.23 Multi-Function LEDs331.2.24 Mesh Networking331.2.25 Additional LAN Subnet341.2.26 On-board Radius Server Authentication341.2.27 Hotspot Support351.2.28 Routing Information Protocol (RIP)351.2.29 Manual Date and Time Settings361.2.30 Dynamic DNS361.2.31 Auto Negotiation361.3 Theory of Operations361.3.1 Cellular Coverage371.3.2 MAC Layer Bridging381.3.3 Media Types381.3.4 Direct-Sequence Spread Spectrum391.3.5 MU Association Process391.3.6 Operating Modes401.3.7 Management Access Options411.3.8 AP-51xx MAC Address Assignment43Chapter 2 Hardware Installation452.1 Precautions462.2 Available Product Configurations462.2.1 AP-5131 Configurations462.2.2 AP-5181 Configurations482.3 Requirements492.4 Access Point Placement492.4.1 Site Surveys502.4.2 Antenna Options502.4.2.1 AP-5131 Antenna Options502.4.2.2 AP-5181 Antenna Options522.5 Power Options532.5.1 AP-5131 Power Options532.5.2 AP-5181 Power Options542.6 Power Injector and Power Tap Systems542.6.1 Installing the Power Injector or Power Tap552.6.1.1 Preparing for Site Installation552.6.1.2 Cabling the Power Injector and Power Tap552.6.1.3 Power Injector LED Indicators562.7 Mounting an AP-5131572.7.1 Desk Mounted Installations572.7.2 Wall Mounted Installations592.7.3 Suspended Ceiling T-Bar Installations612.7.4 Above the Ceiling (Plenum) Installations642.8 AP-5131 LED Indicators672.9 Mounting an AP-5181682.9.1 AP-5181 Pole Mounted Installations682.9.2 AP-5181 Wall Mounted Installations712.10 AP-5181 LED Indicators732.11 Setting Up MUs75Chapter 3 Getting Started773.1 Installing the Access Point773.2 Configuration Options783.3 Default Configuration Changes for the Access Point793.4 Initially Connecting to the Access Point803.4.1 Connecting to the Access Point using the WAN Port803.4.2 Connecting to the Access Point using the LAN Port803.5 Basic Device Configuration813.5.1 Configuring Device Settings833.5.1.1 Configuring WLAN Security Settings883.5.2 Testing Connectivity903.5.3 Where to Go from Here?91Chapter 4 System Configuration934.1 Configuring System Settings944.2 Adaptive AP Setup984.3 Configuring Data Access1014.4 Managing Certificate Authority (CA) Certificates1064.4.1 Importing a CA Certificate1064.4.2 Creating Self Certificates for Accessing the VPN1084.4.3 Creating a Certificate for Onboard Radius Authentication1124.5 Configuring SNMP Settings1154.5.1 Configuring SNMP Access Control1214.5.2 Enabling SNMP Traps1234.5.3 Configuring Specific SNMP Traps1264.5.4 Configuring SNMP RF Trap Thresholds1294.6 Configuring Network Time Protocol (NTP)1314.7 Logging Configuration1344.8 Importing/Exporting Configurations1364.9 Updating Device Firmware1414.9.1 Upgrade/Downgrade Considerations147Chapter 5 Network Management1495.1 Configuring the LAN Interface1495.1.1 Configuring VLAN Support1535.1.2 Configuring LAN1 and LAN2 Settings1575.1.2.1 Configuring Advanced DHCP Server Settings1605.1.2.2 Setting the Type Filter Configuration1625.2 Configuring WAN Settings1645.2.1 Configuring Network Address Translation (NAT) Settings1695.2.1.1 Configuring Port Forwarding1715.2.2 Configuring Dynamic DNS1735.3 Enabling Wireless LANs (WLANs)1755.3.1 Creating/Editing Individual WLANs1785.3.1.1 Configuring WLAN Security Policies1825.3.1.2 Configuring a WLAN Access Control List (ACL)1845.3.1.3 Setting the WLAN Quality of Service (QoS) Policy1875.3.1.4 Configuring WLAN Hotspot Support1935.3.2 Setting the WLAN’s Radio Configuration1995.3.2.1 Configuring the 802.11a or 802.11b/g Radio2035.3.3 Configuring Bandwidth Management Settings2115.4 Configuring Router Settings2145.4.1 Setting the RIP Configuration215Chapter 6 Configuring Access Point Security2196.1 Configuring Security Options2206.2 Setting Passwords2216.2.1 Resetting the Access Point Password2226.3 Enabling Authentication and Encryption Schemes2236.4 Configuring Kerberos Authentication2266.5 Configuring 802.1x EAP Authentication2296.6 Configuring WEP Encryption2346.7 Configuring KeyGuard Encryption2366.8 Configuring WPA/WPA2 Using TKIP2396.9 Configuring WPA2-CCMP (802.11i)2426.10 Configuring Firewall Settings2456.10.1 Configuring LAN to WAN Access2486.10.1.1 Available Protocols2516.10.2 Configuring Advanced Subnet Access2526.11 Configuring VPN Tunnels2546.11.1 Configuring Manual Key Settings2586.11.2 Configuring Auto Key Settings2626.11.3 Configuring IKE Key Settings2656.11.4 Viewing VPN Status2686.12 Configuring Content Filtering Settings2706.13 Configuring Rogue AP Detection2736.13.1 Moving Rogue APs to the Allowed AP List2776.13.1.1 Displaying Rogue AP Details2786.13.2 Using MUs to Detect Rogue Devices2806.14 Configuring User Authentication2826.14.1 Configuring the Radius Server2826.14.2 Configuring LDAP Authentication2856.14.3 Configuring a Proxy Radius Server2886.14.4 Managing the Local User Database2906.14.4.1 Mapping Users to Groups2926.14.5 Defining User Access Permissions by Group2946.14.5.1 Editing Group Access Permissions296Chapter 7 Monitoring Statistics2997.1 Viewing WAN Statistics3007.2 Viewing LAN Statistics3047.2.1 Viewing a LAN’s STP Statistics3077.3 Viewing Wireless Statistics3107.3.1 Viewing WLAN Statistics3137.4 Viewing Radio Statistics Summary3167.4.1 Viewing Radio Statistics3187.4.1.1 Retry Histogram3227.5 Viewing MU Statistics Summary3237.5.1 Viewing MU Details3257.5.2 Pinging Individual MUs3287.5.3 MU Authentication Statistics3297.6 Viewing the Mesh Statistics Summary3307.7 Viewing Known Access Point Statistics331Chapter 8 CLI Reference3358.1 Connecting to the CLI3368.1.1 Accessing the CLI through the Serial Port3368.1.2 Accessing the CLI via Telnet3368.4.10 Firmware Update Commands568Chapter 9 Configuring Mesh Networking5899.1 Mesh Networking Overview5899.1.1 The AP-51xx Client Bridge Association Process5919.1.1.1 Client Bridge Configuration Process Example5929.1.2 Spanning Tree Protocol (STP)5929.1.3 Defining the Mesh Topology5939.1.4 Mesh Networking and the AP-51xx’s Two Subnets5939.1.5 Normal Operation5949.1.6 Impact of Importing/Exporting Configurations to a Mesh Network5949.2 Configuring Mesh Networking Support5949.2.1 Setting the LAN Configuration for Mesh Networking Support5949.2.2 Configuring a WLAN for Mesh Networking Support5979.2.3 Configuring the Access Point Radio for Mesh Support6019.3 Mesh Network Deployment - Quick Setup6089.3.1 Scenario 1 - Two Base Bridges and One Client Bridge6089.3.1.1 Configuring AP#1:6099.3.1.2 Configuring AP#26149.3.1.3 Configuring AP#36159.3.1.4 Verifying Mesh Network Functionality for Scenario #16189.3.2 Scenario 2 - Two Hop Mesh Network with a Base Bridge Repeater and a Client Bridge6199.3.2.1 Configuring AP#16209.3.2.2 Configuring AP#26209.3.2.3 Configuring AP#36219.3.2.4 Verifying Mesh Network Functionality for Scenario #26249.4 Mesh Networking Frequently Asked Questions625Chapter 10 Adaptive AP62910.1 Adaptive AP Overview62910.1.1 Where to Go From Here63010.1.2 Adaptive AP Management63110.1.3 Types of Adaptive APs63110.1.4 Licensing63210.1.5 Switch Discovery63210.1.5.1 Auto Discovery using DHCP63210.1.5.2 Manual Adoption Configuration63310.1.6 Securing a Configuration Channel Between Switch and AP63410.1.7 Adaptive AP WLAN Topology63410.1.8 Configuration Updates63410.1.9 Securing Data Tunnels between the Switch and AAP63410.1.10 Adaptive AP Switch Failure63510.1.11 Remote Site Survivability (RSS)63510.1.12 Adaptive Mesh Support63510.2 Supported Adaptive AP Topologies63710.2.1 Topology Deployment Considerations63710.2.2 Extended WLANs Only63810.2.3 Independent WLANs Only63810.2.4 Extended WLANs with Independent WLANs63810.2.5 Extended WLAN with Mesh Networking63910.3 How the AP Receives its Adaptive Configuration63910.4 Establishing Basic Adaptive AP Connectivity64110.4.1 Adaptive AP Configuration64110.4.1.1 Adopting an Adaptive AP Manually64110.4.1.2 Adopting an Adaptive AP Using a Configuration File64310.4.1.3 Adopting an Adaptive AP Using DHCP Options64310.4.2 Switch Configuration64410.4.3 Adaptive AP Deployment Considerations64710.4.4 Sample Switch Configuration File for IPSec and Independent WLAN648Appendix A Technical Specifications655A.1 Physical Characteristics655A.1.1 AP-5131 Physical Characteristics656A.1.2 AP-5181 Physical Characteristics657A.2 Electrical Characteristics658A.3 Radio Characteristics658A.4 Antenna Specifications659A.4.1 AP-5131 Antenna Specifications659A.4.1.1 2.4 GHz Antenna Matrix659A.4.1.2 5.2 GHz Antenna Matrix660A.4.1.3 AP-5131 Additional Antenna Components660A.4.1.4 AP-5131 Antenna Accessory Connectors, Cable Type and Length660A.4.2 AP-5181 Antenna Specifications661A.5 Country Codes663Appendix B Usage Scenarios667B.1 Configuring Automatic Updates using a DHCP or Linux BootP Server667B.1.1 Windows - DHCP Server Configuration668B.1.1.1 Embedded Options - Using Option 43668B.1.1.2 Global Options - Using Extended/Standard Options670B.1.1.3 DHCP Priorities671B.1.2 Linux - BootP Server Configuration672B.1.2.1 BootP Options673B.1.2.2 BootP Priorities675B.2 Configuring an IPSEC Tunnel and VPN FAQs675B.2.1 Configuring a VPN Tunnel Between Two Access Points676B.2.2 Configuring a Cisco VPN Device679B.2.3 Frequently Asked VPN Questions680B.3 Replacing an AP-4131 with an AP-5131 or AP-5181686Appendix C Customer Support687Index691文件大小: 6.4 MB页数: 698Language: English打开用户手册