1240AG Setup

From Help
Jump to: navigation, search

This is about various tasks that are to be carried out on the Cisco 1240AG WAP.

Return to Main Page


Resetting

  • Disconnect all power from the AP.
    • Disconnect the power jack for external power or the Ethernet cable for inline power.
  • Press and hold the MODE button while you reconnect power to the AP.
  • Hold the MODE button until the Status LED turns amber, and then release the button.
  • The Status LED turns amber in approximately 1 to 2 seconds.
  • After the AP reboots, reconfigure the AP and use the web browser interface, the Telnet interface, or Cisco IOS Software commands.

Note: The AP is configured with the factory default values that include:

  • The IP address, which is set to receive an IP address with DHCP
  • The default username and password, "Cisco"

Return to Top

Initial Settings

All of these must be done from the "enabled" level (privileged EXEC).

Setting the hostname and domain

  • config t
  • hostname your hostname here
  • ip domain-name your domain name here
  • end
  • write memory

Return to Top

Change IP

  • config t
  • interface bvi1
  • ip address new.IP new.subnet
  • ip default-gateway new.gateway

Return to Top

Saving changes

  • enable
  • write memory

If you don't write memory, the new settings will be lost after a reboot.

Return to Top

Enabling Encryption

To properly get the WEP key enabled, you will need to first enable the encryption properly.

GUI

  • Click on Security, Encryption Manager
  • First will be the RADIO0-802.11G.
    • WEP Encryption: Mandatory
    • http://www.andrewscompanies.com/tools/wep.asp to get a hexdecimal key
    • put generated key in Encryption Key 1
    • Broadcast Key Rotation Interval: Disable Rotation
    • Click Apply-all to set this on both radios

Return to Top

CLI:

dot1radio 0 is the 2.4 GHz, 1 is the 5GHz

config t
int dot11radio 0
dot11 extension aironet
encryption mode ciphers tkip wep128
encryption vlan 1 mode ciphers tkip wep128

Return to Top

VLAN setup

CLI

Set VLAN 1 as native on wired

enable
config t
int fastethernet 0.1
encapsulation dot1q 1 native

Return to Top

Set VLAN 1 as native on 2.4

enable
config t
int dot11radio 0.1
encapsulation dot1q 1 native

Return to Top

Creating a new SSID

GUI

  • Click on Security, SSID Management
  • In SSID Properties:
    • SSID: Enter the name
    • VLAN: If applicable
    • Interface: Checkbox the correct radios
  • Client Authentication Settings:
    • Checkbox Open Authentication, < NO ADDITION >
  • Client Authenticated Key Management
    • Key Management: < NONE >
    • Checkbox: WPA
    • WPA Pre-shared Key: (minimum of 8 letters, numbers, or symbols)
  • Hit Apply
  • Guest Mode/Infrastructure SSID Settings:
    • Radio0-802.11G:
    • Single BSSID: Choose the new SSID you just defined from this dropdown
  • Hit Apply

Return to Top

CLI

The following will create the SSID of LD, on VLAN 1 with open authentication and set the passphrase to 12111973.

conf t int dot11radio 0 ssid LD vlan 1 authentication open wpa-psk ascii 12111973 end

conf t int fastethernet 0.1 encapsulation dot1Q 1 bridge-group 1 exit

int dot11radio 0.1 encapsulation dot1Q 1 bridge-group 1 exit end write memory </pre>


Changing Wireless Channels

  • Click on Network Interfaces, Radio0-802.11G and Radio1-802.11A
  • Settings
    • Enable Radio: Enable
    • Role in Radio Network: Access Point
    • Data Rates: Best Range so 802.11B will still work
    • Default Radio Channel: DFS, or best channel per wireless survey
  • Hit Apply
  • Repeat for other radio

Return to Top

Useful CLI commands

  • Discover OS version:
    • router#show version

Return to Top

References

Return to Top