Wireless LAN
Access Point WEP Setup
All rights re From the Security Setup screen, click on Radio Data Encryption (WEP) to launch the WEP configuration screen. 2003, Cisco Systems, Inc. All rights re 2003, Cisco Systems, Inc. All rights re To configure WEP, an encryption type must be chosen by checking the appropriate box. Open (default) Allows any device, regardless of its WEP settings, to authenticate and then attempt to communicate with the access point. Shared Key The access point sends a plain text,...
Cisco Aironet Structured Wireless Aware Network SWAN
Managing up to 2500 of APs is as easy as managing a few APs For medium to large enterprise campus, vertical (retail and healthcare) and branch office WLANs. Simplifies complex, time consuming, and expensive WLAN operations Interference detection and mitigation Enhances Security IEEE Local Authentication Service Effective troubleshooting and diagnostic tools Proactive performance and fault monitoring 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 3-47 The Cisco Structured Wireless...
SWAN Wireless LAN Solution Engine WLSE 1130 v 20 Management Server
Managing up to 2500 of APs is as easy as managing a few APs Rogue AP detection and location Fast roaming with secure authentication - < 150msec total latency (roaming latency plus LEAP re-authentication latency) - Designed for the demands of voice applications IEEE 802.1x local authentication service Wi-Fi Protected Access (WPA) support Extends the Security and Reliability of the Wired LAN to the Wireless LAN The Cisco Structured Wireless-Aware Network provides intuitive and comprehensive...
Antenna Concepts
This module is an overview of how antennas are designed and how they can affect the propagation of an RF signal. It also covers the Cisco Aironet Wireless antenna offerings. Cisco Aironet 1100 Series Access Point This section lists the module's objectives. Ml I I I I I I I I I I I I Upon completion of this module, you will be able to perform the following tasks Define how an antenna is used to propagate an RF signal. Define basic facts of EIRP. Define facts on FCC regulations for UNII-1 and...
Cisco Aironet 1200 Series Dual Band Access Point
Today 802.11b + 802.11a 4Q03 802.11 b g + 802.11a Field-upgradable radio and software Rugged design and plenum rated Multiple mounting options wall, ceiling, desktop Secure with cable lock or padlock Inline and local power High performance 2003, Cisco Systems, Inc. All rights reserved. Cisco Aironet 1200 Series Access Points set the standard for secure, manageable, and reliable wireless connectivity. With simultaneous support for both 2.4 GHz and 5 GHz radios, the Cisco Aironet 1200 Series...
IP Protocol and Port Filters
Rrr r Tr-.r mu i uw v roii iiK fp -va IP Protocol and Port Filters may be defined for the following categories IP Address- Configure Destination source address and disposition of filter to either block or forward traffic to specified IP address(es). IP Protocol- Configure IP Protocol and disposition of filter to either block or forward traffic to from specified IP port. UDP TCP Port- Configure UDP TCP port number and disposition of filter to either block or forward traffic to from specified UDP...
Windows 95 Version B
For Windows 95 Version B, follow these steps to install you client adapter card. Step 1 Insert the driver CD into your laptop. Step 2 Open the Windows 95 directory. Step 3 Copy the Win95Driver.exe file to a directory (other than the root directory) on your PC. Step 4 Remove the driver CD from your laptop. Step 5 Locate the Win95Driver.exe on your PC and double-click the file. This will start the extraction process. Step 6 You will be prompter for a location for the files. By default this is the...
AP Radio Module 5 GHz
Service Set ID (SSID) A unique identifier that stations must use to be able to communicate with an access point. The SSID can be any alphanumeric entry up to a maximum of 32 characters. Role in Radio Network Specifies what role the device will play in the WLAN. Settings available will be dependant upon whether the device is an access point or bridge. Optimize Radio Network For This field offers three choices for optimizing the performance of the network. Selecting either throughput or range...
Wireless Bridge Alternatives
All rights re Cisco Aironet Bridges offer many advantages over other more costly alternative connections. Some alternatives include T1 lines, cabling, and microwave connections. A T-1 line typically costs between 200 to over 1,000 per month. For a site with four buildings, that could cost anywhere from 10,000 to 36,000 per year. If such sites were connected via Cisco Aironet Bridges the payback for the hardware costs incurred could actually be realized in less than a...
VLAN Summary Status
Click the link to access the VLAN Summary Status page, which lists the VLANs created on VLAN (802.1Q) Tagging This setting determines whether the IEEE 802.1Q protocol is used to tag VLAN packets. IEEE 802.1Q protocol is used to connect multiple switches and routers and for defining VLAN topologies. 802.1Q Encapsulation Mode This setting indicates the presence of VLANs on the access point. When you create and enable a VLAN, this setting changes from Disabled to Hybrid Trunk. Maximum Number of...
Connecting to the Access Point
Requires roll-over cable Telnet Requires an IP address Web Browser Preferred connection To set an IP address 2003, Cisco Systems, Inc. All rights re As designed, manage Cisco Aironet Access Point using a Web browser. Telnet and Serial port menus are much more difficult to utilize. To set an IP address you can either use DHCP or the Cisco Aironet IP Setup utility (IPSU). 2003, Cisco Systems, Inc. All rights re Make sure that the IPSU is installed on your laptop. You must also have a wireless...
Air Snort Weak IV Attack
IffTITITTITITl II III III II III II III IIIII III II III II III III II III II III III II III II Hi Cisco.com Attack is based on Fluhrer Mantin Shamir paper Initialization vector (IV) is 24-bit field that changes with each packet RC4 Key Scheduling Algorithm creates IV from base key Flaw in WEP implementation of RC4 allows creation of weak IVs that give insight into base key More packets more weak IVs better chance to determine base key To break key, hacker needs 100,000-1,000,000 packets 2003,...
Cisco Aironet Access Point Quality of Service Feature
Same Class of Service (CoS) as Cisco routers Only downstream Quality of Service (QoS) With future 802.11e, QoS upstream and downstream Voice traffic Highest data priority 2003, Cisco Systems, Inc. All rights re Time critical data like voice and video benefit from Quality of Service (QoS) because the QoS feature can be configured to give voice and video higher priority. This allows for smooth voice communication, jitter free video and reliable delivery of E-Mail configured with a lower priority....
WEP Security Enhancements
IEEE 802.11 Task Group i is working on enhancements to mitigate WEP vulnerabilities Temporal Key Integrity Protocol (TKIP) Cisco supports an early implementation of IEEE 802.11 Task Group i recommendations (TKIP) Broadcast Key rotation for LEAP 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 9-57 The next generation of WLAN security is the responsibility of IEEE's 802.11 Task Group I. These enhancements are being added to mitigate WEP vulnerabilities. Once these enhancements are...
Access Point Radio Internal Advanced Cont
I J - Li L S bj-C J-iii L-. i- AJJT. < J1 j i hii l '.fij-i -. a-irh i i fvinv-m t r krts- S C n *a-tfi JQ -Vi- I - jll.rijj. f ' Jj ,-JC I LV Ii Li ni 11. K.ilv -JI-jc. Iiu.'i. U 'JT SL-JKL) O > ft v.vTffr Inrbr S h m n i y rt.'- Si.Tp O . iron ir hsnrriir-m O 1 jfrj.ug XT.J1ic JLIWV.' J J )2 I Eo f svljli > n TV _i c r.Yi rurihf < vejvjce vrtu V itiijb-. iih-i I . Ii f- ll -rrr _. Un i v-.i-r-1 r i m f.n .i Tft'fc v ir i 't i .1ir y fr.r ir. nihl .1 V. ' i v n J- Classify Workgroup...
Enabling Broadcast WEP Key Rotation
All rights re 2003, Cisco Systems, Inc. All rights re Broadcast WEP Key rotation interval (sec) Broadcast key rotation is an excellent alternative to WEP key hashing if the WLAN supports wireless client devices that are not Cisco devices or that cannot be upgraded to the latest firmware for Cisco client devices. Note When broadcast key rotation is enabled, only wireless client devices using LEAP or EAP- TLS authentication can use the access point. Client devices using...
Cisco Aironet Access Point Proxy Mobile IP
All rights re Layer 2 Roaming IAPP Network designers working with mobile users in a large area will often find it necessary to deploy more than one access point. The 802.11 standard does not define how access points track moving users or how to negotiate a handoff from one access point to the next, a process referred to as roaming. Several companies have introduced proprietary Inter-Access Point Protocols (IAPP) to support roaming. IAPP accomplishes roaming within a...
Aironet Client Utility and Drivers
This module explores the Aironet Client Utility and the drivers available for the Cisco Aironet products. Supported Operating Systems This section lists the module's objectives. Upon completion of this module, you will be able to perform the following tasks Identify which client operating systems are supported. Determine the status of a client card by observing the indicator lights. Install and configure a Cisco Aironet PC Card. 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 7-4 Upon...
Protocol Roaming Reassociation Process
Initial Connection to an Access Point 1. Client is currently associated to AP (A), but continually listens for beacons from all APs via RF packets. Client evaluates beacons and selects best AP 2. Client sends association request to selected AP (B) via RF packet. 3. AP (B) confirms association request via RF packet and registers client. 4. AP (B) informs AP (A) via Ethernet packet of the clients re-association with AP (B). As the client is moving out of range of his associated access point, the...
Role in Radio Network
Administratio 2 Bridges One 12 dBi omr One Yagi Illustrated in the slide above is a typical school environment based on a 2.4 GHz bridging solution faster speeds may be obtained using a 5 GHz bridging solution. The Internet line comes into the Administration building. At that site, the network spans in two directions. Assume 5.5 Mbps of throughput for the 11 Mbps bridges. Weaver, Lincoln, Bolich, and Dewitt schools all communicate to the administration building with channel 1, providing a...
Statistics Ethernet Port
L . -.l. 1 -1, k 1 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 8-61 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 8-61 This page presents key information on the access point's Ethernet port. The Ethernet port is the wired connection to the Ethernet network. The top four cells report the operational status, maximum data rate and the identifying addresses of the Ethernet port. See the Express Setup page for information on device and port...
Cisco Aironet 350 Series Mini PCI Adapter MPI350
Ml I I I I I I I I I I I I 2.4 GHz 802.11b embedded wireless for notebooks Must order through PC manufactures (not orderable directly through Cisco) 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 5-16 The Cisco Aironet MPI350 is a mini-PCI card with IEEE 802.11b high-rate standard compliance. The type Ilia Mini-PCI form factor will allow for standard compatibility in a variety of mobile devices (IBM, Toshiba, Dell). Some of the features of the MPI350 include Industry-leading range...
Multipath Distortion
Ml I I I I I I I I I I I I Occurs when an RF signal has more than one path between a receiver and a transmitter Multiple signals cause distortion of the signal Can cause high signal strength yet low signal quality 2003, Cisco Systems, Inc. All rights reserved. AWLF v3.1 2-34 Multipath interference occurs when an RF signal has more than one path between a receiver and a transmitter. Just as light and sound bounce off of objects, so does RF. This means there can be more than one path that RF...
Antenna Alignment Tool
All lights reserved. AWLF v3.1 4-57 2003, Cisco Systems, Inc. All lights reserved. AWLF v3.1 4-57 The Cisco Aironet Bridge also contains a utility to assist in the alignment of the antennas between two bridges. The antenna alignment utility will report back the following results This allows the installer to connect to a bridge, start the utility, and then make adjustments to the antenna to obtain the best results and the best link possible. The installer should be...
Server Manager and Local RADIUS
Local) RADIUS Server is configured on the AP configured for Local RADIUS operation as well as other AP's which will use this AP for backup RADIUS service from the Server Manager menu selection. Note that the Backup RADIUS Server is valid only for LEAP authentication. The Backup RADIUS Server is only used for LEAP authentication upon a non-responsive RADIUS request. Invalid username or password will not initiate use of Backup RADIUS. Note that UDP port 1812 is used for...
Association Process
While trying to connect to a WLAN, the client adapter card undergoes a two-step process, Authentication and Association. Authentication is the process of verifying the credentials of a client adapter card desiring to join a WLAN. Association is the process of associating a client adapter card with a given access point in the WLAN. Step 1 When a client adapter card comes on line, it will broadcast a Probe Request. Step 2 An access point that hears this will respond with details.