Table Of Contents
Configuring Devices
Using the Templates
Template Choices
Naming the Template
Using Express Template
Setting Up Association
Configuring the Ethernet Port
Configuring the 11b Radio
Configuring the 11a Radio
Defining the Security Settings
Configuring Services
Configuring Events
Configuring Custom Values
Previewing the Template
Finishing the Template
Creating a Template
Copying a Template
Editing a Template
Deleting a Template
Importing a Template
Exporting a Template
Managing Configuration Jobs
Job Choices
Naming the Job
Selecting Devices
Selecting a Template
Scheduling a Job
Finishing the Job
Creating a Configuration Job
Viewing Configuration Job Status
Viewing the Job
Filtering a Job
Editing a Job
Deleting a Job
Copying a Job
Viewing Job Run Details
Automating Configurations
Assigning a Startup Configuration
Creating a Startup Configuration Template
Assigning an Auto-Managed Configuration
Assigning Auto-Managed Configurations
Using Auto-Managed Options
Configuring Devices
The Configure tab allows you to view, create, copy, edit, and delete configuration templates and apply them to large numbers of devices at a time.It also allows you to schedule a configuration job and to check on the job's status.
Following are the subtabs under Configure:
Note 
Some of the subtabs may not be visible to some users.
•Templates—See Using the Templates.
•Jobs—See Managing Configuration Jobs.
•Auto Update—See Automating Configurations.
Using the Templates
This is window allows you to create, modify, and delete configuration templates.
The topics covered in this section are:
•Creating a Template
•Copying a Template
•Editing a Template
•Deleting a Template
•Importing a Template
•Exporting a Template
Related Topic
Managing Configuration Jobs
Template Choices
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
When you create or edit a configuration template, the following choices appear in the left pane of the Templates window:
1. Template Name—See Naming the Template.
2. Template Categories
Note Any or all of the template categories can be completed in any order.
–Express Template—See Using Express Template.
–Association—See Setting Up Association.
–Ethernet—See Configuring the Ethernet Port.
–11b Radio—See Configuring the 11b Radio.
–11a Radio—See Configuring the 11a Radio.
–Security—See Defining the Security Settings.
–Services—See Configuring Services.
–Events—See Configuring Events.
–Custom Values—See Configuring Custom Values.
3. Preview—See Previewing the Template.
4. Finish—See Finishing the Template.
Naming the Template
This option enables to you to name the template.
Procedure
Note Clicking Clear removes all the entries you have made.
Step 1 Select Template Name. The Template Name dialog box appears:
Step 2 Select a template category. (For additional information, see Template Categories.)
Using Express Template
Use this option if you need to set up an access point quickly with a simple configuration. This will allow you to enter all the access point's essential settings for basic operation.
Procedure
Step 1 Select Express Template. The Express dialog box displays in the right pane:
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
Table 3-1 Express Template Settings
Field
|
Description
|
Reboot Device
|
From the list, select Yes if you want to allow device reboots.
|
SysName
|
Enter a system name.
The system name appears in the titles of the management system pages and in the access point's Association Table page.
This is not an essential setting, but it helps identify the access point on your network.
|
SysLocation
|
Enter the system's location.
This is not an essential setting, but it helps identify the access point on your network.
|
SysContact
|
Enter a contact name.
This is not an essential setting but it helps identify the person responsible for the access point on your network.
|
Configuration Server Protocol
|
Set this entry to match the network's method of IP address assignment.
From the list, select one of the following options:
•None-Static IP—Use this if your network does not have an automatic system for IP address assignment.
•BOOTP—Use this if your network uses Bootstrap Protocol, in which IP addresses are hard-coded based on MAC addresses.
•DHCP—Use this if your network uses Dynamic Host Configuration Protocol, in which IP addresses are "leased" for predetermined periods of time.
|
Default Subnet Mask
|
Enter an IP subnet mask to identify the subnetwork so the IP address can be recognized on the LAN.
If DHCP or BOOTP is not enabled, this field is the subnet mask.
If DHCP or BOOTP is enabled, this field provides the subnet mask only if no server responds to the access point's DHCP or BOOTP request.
|
Default Gateway
|
Enter the IP address of your default Internet gateway.
The entry 255.255.255.255 indicates no gateway.
|
Radio Service Set ID (SSID)
|
Enter any alphanumeric, case-sensitive string, from 2 to 32 characters long.
The SSID is a unique identifier that client devices use to associate with the access point. The SSID helps client devices distinguish between multiple wireless networks in the same vicinity and provides access to VLANs by wireless client devices.
Several access points on a network or subnetwork can share an SSID.
|
Role in Network
|
From the list, select one of the following:
•Access Point—Use this setting if the access point is connected to the wired LAN.
•Repeater—Use this setting for access points not connected to the wired LAN.
•Survey Client—Use this setting when performing a site survey for a repeater access point. When you select this setting, clients are not allowed to associate and the bridge's STP function is disabled.
•Root Bridge—Use this setting to set a bridge as the root bridge. (One bridge in each group of bridges must be set as the root bridge). The root bridge cannot associate with another root bridge.
•Non-Root Bridge w/ Client—Use this setting for non-root bridges that accept associations from client devices and for bridges acting as repeaters. A non-root bridge will only associate to another bridge (root or non-root).
•Non-Root Bridge w/o Client—Use this setting for non-root bridges that should not accept associations from client devices. A non-root bridge (without clients) can connect to a wired LAN and only associates to another bridge (root or non-root).
|
Ensure Compatibility with Cisco
|
From the list, select one of the following:
•Enable—Use this setting to automatically configure the device to be compatible with other Cisco devices on your wireless LAN.
•Disable—Use this setting to not automatically configure the device to be compatible with other Cisco devices on your wireless LAN.
|
Ensure Compatibility with 2MB/sec Clients
|
From the list, select one of the following:
•Enable— Use this setting to operate at a maximum speed of two megabits per second.
•Disable—Use this setting if you do not want devices to operate at a maximum speed of two megabits per second.
|
Step 2 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Setting Up Association
Use this option to set up spanning tree protocol (STP) on bridges and to set up filtering to control the flow of data through the access point.
Procedure
Step 1 Select Association. The menu expands and the Association dialog box displays in the right pane.
Step 2 Select one of the following from the Association menu:
•Spanning Tree—See Defining Spanning Tree Protocol.
•Address Filters—See Defining Address Filters.
•Ethertype Filters—See Defining Ethertype Filters.
•IP Protocol Filters—See Defining IP Protocol Filters.
•IP Port Filters—See Defining IP Port Filters.
•Policy Groups—See Configuring Policy Groups.
•VLANs—See Configuring VLANs.
•Quality of Service—See Configuring Quality of Service.
•Service Sets—See Configuring Service Sets.
•Advanced—See Defining Advanced Associations.
•Port Assignments—See Configuring Port Assignments.
•DSCP to CoS—See Configuring DSCP to CoS.
Defining Spanning Tree Protocol
This option is used for only bridges.
Procedure
Step 1 Select Association > Spanning Tree. The Association: Spanning Tree Protocol dialog box appears.
Step 2 Click see details for information on which bridges this configuration is valid.
Step 3 Complete the following:
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
Table 3-2 Spanning Tree Protocol Settings
Field
|
Description
|
Spanning Tree Protocol (STP)
|
From the list, select one of the following:
•Enable—Use this setting to enable STP on the bridge.
•Disable—If you do not want STP enabled the bridge.
|
Always Unblock Ethernet when STP is disabled
|
From the list, select one of the following:
•Yes—Use this setting to maintain a bridge link when STP is disabled
•No—Use this setting to not maintain a bridge link when STP is disabled.
Click see details to see which versions this setting is valid for.
|
Root Configuration
|
Priority (0-65535)
|
Enter a number to influence which bridge is designated the root bridge in the spanning tree.
When bridges have the same priority setting, STP uses the MAC addresses as a tiebreaker.
The bridge with the lowest priority setting is likely to be designated the root bridge in the tree.
|
Max Age (6-40 Seconds)
|
Enter the number of seconds to define how long the bridge waits before deciding the network has changed and the spanning tree needs to be rebuilt.
For example, with Max Age set to 20, the bridge attempts to rebuild the spanning tree if it does not receive a hello BDPU from the root bridge in the spanning tree within 20 seconds.
|
Hello Time (1-10 Seconds)
|
Enter the number of seconds to define how often the root bridge in the spanning tree sends out a hello BPDU telling the other bridges that the network topology has not changed and that the spanning tree should remain the same.
|
Forward Delay (4-30 Seconds)
|
Enter the number of seconds to define how long the bridge's ports should stay in the listening and learning transition states if there is a change in the spanning tree.
|
Port Configuration
|
Path Cost (1-65535)
|
Enter a number to indicates the relative efficiency of a port's network link.
A port with a high path cost is less likely to become a bridge's root port.
|
Priority (0-255)
|
Enter a number to influence whether STP designates a port as a bridge's root port.
A port with a low priority setting is more likely to become a bridge's root port.
|
Enable
|
From the list, select one of the following for each port configured:
•Enable—Use this setting to indicate whether the port participates in STP. (This determines whether the port blocks or forwards traffic.)
•Disable—Use this setting to indicate that the port does not participate in STP.
|
Step 4 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Defining Address Filters
Using this option, you can:
•Create a MAC address filter
•Remove a MAC address filter
Procedure
Step 1 Select Association > Address Filters. The Association: Address Filters dialog box appears.
Step 2 To add a new MAC address filter complete the following fields:
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
Field
|
Description
|
Lookup MAC address on Authentication Server if not in an Existing Filter List?
|
Click one of the following:
•Yes—Use this setting to allow looking up a MAC address on the authentication server.
•No—Use this setting to disallow looking up a MAC address.
|
Is MAC Authentication alone sufficient for a client to be fully authenticated?
|
From the list, select one of the following:
•Yes—Use this setting to specify that client devices that associate to the access point using 802.11 open authentication, first attempt MAC authentication.
•No—Use this setting to specify that MAC authentication alone is not sufficient.
Click see details to see which versions this setting is valid for.
|
New Destination MAC Address
|
Enter a destination MAC address by entering the address in one of the following ways:
•With colons separating the character pairs (00:40:96:12:34:56, for example)
•Without any intervening characters (004096123456, for example)
|
Allowed
|
Click to pass traffic to the MAC address.
|
Disallowed
|
Click to discard traffic to the MAC address.
|
Step 3 Click Add to add the MAC address to the Current MAC Address Filters list.
Step 4 To remove a MAC Address, select it from the Current MAC Address Filters list, then click Remove.
Step 5 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Defining Ethertype Filters
Procedure
Step 1 Select Association > Ethertype Filters. The Association: Ethertype Filters dialog box appears.
Step 2 Using this option:
•Create new filters—See Creating New Ethertype Filters.
•Delete the Filters—See Deleting Ethertype Filters.
Using this option you can also:
•Create Special Cases—See Creating Special Cases.
•Delete Special Cases—See Deleting Special Cases.
Creating New Ethertype Filters
Procedure
Step 1 To create and enable protocol filters for the access point's Ethernet port, enter the following:
Note Refer to the following URL for a list of Ethertype protocols: /en/US/docs/wireless/access_point/350/configuration/guide/ap350axb.html#85314
Table 3-3 Creating New Ethertype Filters Settings
Field
|
Description
|
Add New Ethertype Filter
|
Set ID
|
Enter an identification number for the filter set.
|
Set Name
|
Enter a descriptive filter set name.
See Naming Guidelines.
|
Default Disposition
|
From the list, select one of the following:
•Forward—Use this setting to forward protocol traffic.
•Block—Use this setting to block protocol traffic.
|
Default Time to Live (msec)
|
unicast
|
Enter the number of milliseconds unicast packets should stay in the access point's buffer before they are discarded.
|
multicast
|
Enter the number of milliseconds multicast packets should stay in the access point's buffer before they are discarded.
|
Step 2 Click Add. The new name is added to the Ethertype Filters list.
Step 3 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting Ethertype Filters
Procedure
Step 1 To delete protocol filters for the access point's Ethernet port, select the set name from the Current Ethertype Filters list, then click Delete.
Step 2 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Creating Special Cases
Procedure
Step 1 Select the default filter for which you want to define a special case.
Step 2 Enter the following:
Table 3-4 Ethertype Filter Special Cases Settings
Field
|
Description
|
Special Cases
|
Ethertype
|
Enter the Ethertype filter name.
|
Disposition
|
From the list, select one of the following:
•Default—Use the disposition you set for the Ethertype filter.
•Forward—Use this setting to forward protocol traffic.
•Block—Use this setting to block protocol traffic.
|
Priority
|
From the list, select one of the following:
•Default—This setting is the same as best effort, which applies to normal LAN traffic.
•Background—Use this setting for bulk transfers and other activities that are allowed on the network but should not impact network use by other users and applications.
•Excellent Effort—Use this setting for a network's most important users.
•Controlled Load—Use this setting for important business applications that are subject to some form of admission control.
•Interactive Video—Use this setting for traffic with less than 100 ms delay.
•Interactive Voice—Use this setting for traffic with less than 10 ms delay.
•Network Control—Use this setting for traffic that must get through to maintain and support the network infrastructure.
|
Time to Live (msec)
|
unicast
|
Enter the number of milliseconds unicast packets should stay in the access point's buffer before they are discarded.
|
multicast
|
Enter the number of milliseconds multicast packets should stay in the access point's buffer before they are discarded.
|
Alert
|
From the list, select one of the following:
•yes—Use this setting to send an alert to the event log when a user transmits or receives the protocol through the access point.
•no—Use this setting to not send an alert to the event log.
|
Step 3 Click Add. The new name is added to the list box.
Step 4 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting Special Cases
Procedure
Step 1 To delete special cases for the access point's Ethernet port, select the Ethertype name from the list box, then click Delete.
Step 2 Select one of the following:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Defining IP Protocol Filters
Procedure
Step 1 Select Association > IP Protocol Filters. The Association: IP Protocol Filters dialog box appears.
Step 2 With this option you can:
•Create new filters—See Creating New IP Protocol Filters.
•Delete the filters—See Deleting IP Protocol Filters.
Using this option you can also:
•Create Special Cases —See Creating Special Cases.
•Delete Special Cases—See Deleting Special Cases.
Creating New IP Protocol Filters
Procedure
Step 1 To create and enable IP protocol filters, enter the following:
Note Refer to the following URL for a list of IP protocols: /en/US/docs/wireless/access_point/350/configuration/guide/ap350axb.html#85314
Field
|
Description
|
Add New Protocol Filter
|
Set ID
|
Enter an identification number for the filter set.
|
Set Name
|
Enter a descriptive filter set name.
See Naming Guidelines.
|
Default Disposition
|
From the list, select one of the following:
•Forward—Use this setting to forward protocol traffic.
•Block—Use this setting to block protocol traffic.
|
Default Time to Live (msec)
|
unicast
|
Enter the number of milliseconds unicast packets should stay in the access point's buffer before they are discarded.
|
multicast
|
Enter the number of milliseconds multicast packets should stay in the access point's buffer before they are discarded.
|
Step 2 Click Add. The new name is added to the Current Protocol Filters list.
Step 3 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting IP Protocol Filters
Procedure
Step 1 To delete an IP protocol filter, select the name from the Current Protocol Filters list, then click Delete.
Step 2 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Creating Special Cases
Procedure
Step 1 Select the default filter for which you want to define a special case.
Step 2 Enter the following:
Table 3-5 IP Protocol Filters Special Cases Settings
Field
|
Description
|
Special Cases
|
Protocol
|
Enter the IP protocol name.
|
Disposition
|
From the list, select one of the following:
•Default—Use the disposition you set for the protocol filter.
•Forward—Use this setting to forward traffic.
•Block—Use this setting to block traffic.
|
Priority
|
From the list, select one of the following:
•Default—This setting is the same as best effort, which applies to normal LAN traffic.
•Background—Use this setting for bulk transfers and other activities that are allowed on the network but should not impact network use by other users and applications.
•Excellent Effort—Use this setting for a network's most important users.
•Controlled Load—Use this setting for important business applications that are subject to some form of admission control.
•Interactive Video—Use this setting for traffic with less than 100 ms delay.
•Interactive Voice—Use this setting for traffic with less than 10 ms delay.
•Network Control—Use this setting for traffic that must get through to maintain and support the network infrastructure.
|
Time to Live (msec)
|
unicast
|
Enter the number of milliseconds unicast packets should stay in the access point's buffer before they are discarded.
|
multicast
|
Enter the number of milliseconds multicast packets should stay in the access point's buffer before they are discarded.
|
Alert
|
From the list, select one of the following:
•yes—Use this setting to send an alert to the event log when a user transmits or receives the protocol through the access point.
•no—Use this setting to not send an alert to the event log.
|
Step 3 Click Add. The new name is added to the list box.
Step 4 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting Special Cases
Procedure
Step 1 To delete special cases, select the protocol name from the list box, then click Delete.
Step 2 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Defining IP Port Filters
Procedure
Step 1 Select Association > IP Port Filters. The Association: IP Port Filters dialog box appears.
Step 2 With this option you can:
•Create new filters—See Creating New Port Filters.
•Delete the filters—See Deleting Port Filters.
Using this option you can also:
•Create Special Cases —See Creating Special Cases.
•Delete Special Cases—See Deleting Special Cases.
Creating New Port Filters
Procedure
Step 1 To create and enable port filters, enter the following:
Note Refer to the following URL for a list of IP port protocols: /en/US/docs/wireless/access_point/350/configuration/guide/ap350axb.html#85314
Field
|
Description
|
Add New Protocol Filter
|
Set ID
|
Enter an identification number for the filter set.
|
Set Name
|
Enter a descriptive filter set name.
See Naming Guidelines.
|
Default Disposition
|
From the list, select one of the following:
•Forward—Use this setting to forward traffic.
•Block—Use this setting to block traffic.
|
Default Time to Live (msec)
|
unicast
|
Enter the number of milliseconds unicast packets should stay in the access point's buffer before they are discarded.
|
multicast
|
Enter the number of milliseconds multicast packets should stay in the access point's buffer before they are discarded.
|
Step 2 Click Add. The new name is added to the Current Port Filters list.
Step 3 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting Port Filters
Procedure
Step 1 To delete a protocol filter, select the name from the Current Port Filters list, then click Delete.
Step 2 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Creating Special Cases
Procedure
Step 1 Select the default filter for which you want to define a special case.
Step 2 Enter the following:
Table 3-6 IP Port Filters Special Cases Settings
Field
|
Description
|
Special Cases
|
Port
|
Enter the IP Port filter name.
|
Disposition
|
From the list, select one of the following:
•Default—Use the disposition you set for the port filter.
•Forward—Use this setting to forward protocol traffic.
•Block—Use this setting to block protocol traffic.
|
Priority
|
From the list, select one of the following:
•Default—This setting is the same as best effort, which applies to normal LAN traffic.
•Background—Use this setting for bulk transfers and other activities that are allowed on the network but should not impact network use by other users and applications.
•Excellent Effort—Use this setting for a network's most important users.
•Controlled Load—Use this setting for important business applications that are subject to some form of admission control.
•Interactive Video—Use this setting for traffic with less than 100 ms delay.
•Interactive Voice—Use this setting for traffic with less than 10 ms delay.
•Network Control—Use this setting for traffic that must get through to maintain and support the network infrastructure.
|
Time to Live (msec)
|
unicast
|
Enter the number of milliseconds unicast packets should stay in the buffer before they are discarded.
|
multicast
|
Enter the number of milliseconds multicast packets should stay in the buffer before they are discarded.
|
Alert
|
From the list, select one of the following:
•yes—Use this setting to send an alert to the event log when a user transmits or receives the protocol through the access point.
•no—Use this setting to not send an alert to the event log.
|
Step 3 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting Special Cases
Procedure
Step 1 To delete special cases, select the port name from the list box, then click Delete.
Step 2 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Configuring Policy Groups
Policy groups are used to configure access parameters to a logical group of stations in a consistent manner from a single place. For example, protocol filters can be applied to frames for a selected group of stations.
Procedure
Step 1 Select Association > Policy Group. The Association: Policy Group dialog box appears.
Step 2 Click see details to see which versions this option is valid for.
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
Step 3 Using this option you can:
•Add and delete a policy group—See Adding or Deleting a New Policy Group.
•Delete an exiting Policy Group From a Device—See Deleting an Existing Policy Group from a Device.
Adding or Deleting a New Policy Group
Step 1 To add a new policy group, enter the following:
Field
|
Description
|
GroupID
|
Enter an identification number for the policy group.
|
Group Name
|
Enter a name for the policy group.
|
Ethertype
|
Receive
|
Enter the ID of a defined Ethertype filter, or select one of the filters you created using Association > Ethertype Filters.
|
Transmit
|
Enter the ID of a defined Ethertype filter, or select one of the filters you created using Association > Ethertype Filters.
|
IP Protocol
|
Receive
|
Enter the ID of a defined IP protocol filter, or select one of the filters you created using Association > IP Protocol Filters.
|
Transmit
|
Enter the ID of a defined IP protocol filter, or select one of the filters you created using Association > IP Protocol Filters.
|
IP Port
|
Receive
|
Enter the ID of a defined IP port filter, or select one of the filters you created using Association > IP Port Filters.
|
Transmit
|
Enter the ID of a defined IP port filter, or select one of the filters you created using Association > IP Port Filters.
|
Step 2 Click Add to add the group to the Policy Groups to Add list.
Step 3 To delete a group from the Policy Groups to Add list, select the group name, then click Delete.
Step 4 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting an Existing Policy Group from a Device
Step 1 Enter the group identification number in the Group ID text box, then click Add to add it to the Policy Groups to Delete list.
Step 2 To delete an identification number from the Policy Groups to Delete list, select it, then click Delete.
Step 3 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Configuring VLANs
Access points and bridges in a VLAN network, which are running specific software versions, can provide a wireless VLAN trunk link between two wired segments of the network.
Using this option, you can configure VLANs on the access point.
Procedure
Step 1 Select Association > VLANs. The Association: VLAN dialog box appears.
Step 2 Click see details to see which versions this option is valid for.
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
Step 3 Enter the following information:
Field
|
Description
|
VLAN (802.1Q) Tagging
|
From the list, select one of the following:
•Enabled—Use this setting to allow IEEE 802.1Q protocol tagging on VLAN packets.
The IEEE 802.1Q protocol is used to interconnect multiple switches and routers, and for defining VLAN topologies.
•Disabled—Use this setting to not allow tagging.
|
Native VLAN ID
|
Enter identification number of the access point's native VLAN.
Note This setting must agree with the native VLAN ID setting on the switch.
|
Single VLAN ID which allows unencrypted packets
|
Enter an identification number to allow unencrypted packets. An entry with a value of 0 (zero) requires the use of encryption.
|
Optionally allow Point-to-point Packet Encryption
|
From the list, select one of the following:
•Yes—Use this setting to allow point-to-point encryption.
•No—Use this setting to not allow point-to-point encryption.
|
Step 4 Using this option you can:
•Add a new VLAN—See Adding a New VLAN.
•Delete an exiting VLAN from a Device—See Deleting an Existing VLAN.
Adding a New VLAN
Step 1 To add a new VLAN, enter the following:
Table 3-7 Adding a New VLAN Settings
Field
|
Description
|
VLAN ID
|
Enter the identification number of the VLAN.
Note This setting must match the setting on the switch.
|
VLAN Name
|
Enter the a unique name for the VLAN configured on the access point.
|
VLAN Enable
|
From the list, select one of the following:
•Enabled—Use this setting to enable the VLAN.
•Disabled—Use this setting to disable the VLAN.
|
Default Priority
|
From the list, select one of the following:
•Background—Use this setting for bulk transfers and other activities that are allowed on the network but should not impact network use by other users and applications.
•Default—Use this setting for normal LAN traffic.
•Excellent Effort—Use this setting for the network's most important users.
•Controlled Load—Use this setting for important business applications that are subject to some form of admission control.
•Interactive Video—Use this setting for traffic with less than 100 ms delay.
•Interactive Voice—Use this setting for traffic with less than 10ms delay.
•Network Control—Use this setting for traffic that must get through to maintain and support the network infrastructure.
|
Default Policy Group
|
Enter the default policy group number, or select one you created using Association > Policy Groups.
|
Enhanced MIC verify WEP
|
From the list, select one of the following:
•None—Use this setting if you do not want Message Integrity Check (MIC) enabled.
•MMH—Use this setting if you want MIC enabled to protect WEP keys.
Note When you enable MIC, only MIC-capable client devices can communicate with the access point.
|
Temp Key Integrity Protocol
|
From the list, select one of the following:
•None—Use this setting if you do not want to enable the temporal key integrity protocol (TKIP, or WEP key hashing.)
•Cisco—Use this setting to enable TKIP.
Note When TKIP is enabled, all WEP-enabled client devices associated to the access point must support WEP key hashing, or they will not be able to communicate with the access point.
|
WEP Key Rotation Interval
|
Use this setting to enable or disable broadcast key rotation.
•To enable it, enter the rotation interval in seconds.
If you enter 900, for example, the access point sends a new broadcast WEP key to all associated client devices every 15 minutes.
Note When you enable broadcast key rotation, only wireless client devices using LEAP or EAP-TLS authentication can use the access point. Client devices using static WEP (with open, shared key, or EAP-MD5) cannot use the access point when you enable broadcast key rotation.
•To disable it, enter 0 (zero).
|
Alert
|
From the list, select one of the following:
•Yes—Use this setting if you are not adding an encrypted VLAN.
•No—Use this setting if you are adding an encrypted VLAN.
|
WEP Keys 1 through 4
|
Enter the encryption keys used: 40 bit or 128 bit hexadecimal digits.
|
Size
|
For each WEP key, select one of the following: Not set, 40 bit, or 128 bit.
|
Step 2 Click Add to add the VLAN to the VLANs to Add list.
Step 3 To delete a group from the VLANs to Add list, select the name, then click Delete.
Step 4 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Deleting an Existing VLAN
Procedure
Step 1 Enter the VLAN identification number in the VLAN ID text box, then click Add to add it to the VLANs to Delete list.
Step 2 To delete an identification number from the VLANs to Delete list, select it, then click Delete.
Step 3 Select one of the following in the left pane:
•Preview to see your changes before you apply them. (See Previewing the Template.)
•Finish to save the template. (See Finishing the Template.)
•Another template category to configure more options. (See Template Categories.)
Configuring Quality of Service
This option is used to configure the access point's Quality of Service feature.
Procedure
Step 1 Select Association > Quality of Service. The Association: Quality of Service dialog box appears.
Note Clicking Clear removes all the current entries in the window and any entries you have made in other Template windows up until that point.
Step 2 Click see details to see which version
