The GUI must be used on a PC
running Windows 7, Windows XP SP1 (or later releases), or Windows 2000 SP4 (or
GUI is compatible with Microsoft Internet Explorer version 10.x, Mozilla
Firefox 20.x, or Google Chrome 26.x.
Using The Web GUI
A web browser, or
graphical user interface (GUI), is built into each
You can use either the
service port interface or the management interface to access the GUI. We
recommend that you use the service-port interface. Click Help at the top of any
page in the GUI to display online help. You might need to disable your
browser’s pop-up blocker to view the online help.
The Configuration Wizard—After initial configuration of the IP address
and the local username/password or auth via the authentication server
(privilege 15 needed), the wizard provides a method to complete the initial
wireless configuration. Start the wizard through Configuration -> Wizard and
follow the nine-step process to configure the following:
SNMP System Summary
RF Mobility and Country code
The Monitor tab:
Displays summary details of
clients, and access points.
Displays all radio and AP
Displays air quality on
Displays list of all Cisco
Discovery Protocol (CDP) neighbors on all interfaces and the CDP traffic
Displays all rogue access
points based on their classification-friendly, malicious, ad hoc, classified,
The Configuration tab:
Enables you to configure the
for all initial operation using the web Configuration Wizard. The wizard allows
you to configure user details, management interface, and so on.
Enables you to configure the
system, internal DHCP server, management, and mobility management parameters.
Enables you to configure the
WLAN, and radios.
Enables you to configure and
set security policies on your
Enables you to access the
operating system software management commands.
The Administration tab enables you to configure system logs.
Console Port of the
Before You Begin
Before you can
switch for basic operations, you need to
connect it to a PC that uses a VT-100 terminal emulation program (such as
HyperTerminal, ProComm, Minicom, or Tip).
Connect one end
of a null-modem serial cable to the
switch's RJ-45 console port and the other end
to your PC's serial port.
Plug the AC
power cord into the
switch and a grounded 100 to 240 VAC,
50/60-Hz electrical outlet. Turn on the power supply. The bootup script
displays operating system software initialization (code download and power-on
self-test verification) and basic configuration. If the
switch passes the power-on self-test, the
bootup script runs the configuration wizard, which prompts you for basic
with basic initial setup configuration parameters in the CLI setup wizard.
Specify the IP address for the service port which is the gigabitethernet 0/0
the configuration parameters in the configuration wizard, you can access the
Web GUI. Now, the
switch is configured with the IP address for
Logging On to the Web GUI
switch IP address in your browser’s address
line. For a secure connection, enter https://ip-address. For a less secure connection, enter http://ip-address.
To enable web
mode, which allows users to access the
switch GUI using “http://ip-address,” choose
Enabled from the HTTP Access drop-down list. Otherwise, choose Disabled. Web
mode (HTTP) is not a secure connection.
To enable secure
web mode, which allows users to access the
switch GUI using “https://ip-address,” choose
Enabled from the HTTPS Access drop-down list. Otherwise, choose Disabled.
Secure web mode (HTTPS) is a secure connection.
Choose to track
the device in the IP Device Tracking check box.
Choose to enable
the trust point in the Enable check box.
trustpoints from the Trustpoints drop-down list.
Enter the amount
of time, in seconds, before the web session times out due to inactivity in the
HTTP Timeout-policy (1 to 600 sec) text box.
The valid range
is from 1 to 600 seconds.
Enter the server
life time in the Server Life Time (1 to 86400 sec) text box.
The valid range
is from1 to 86400 seconds.
maximum number of connection requests that the server can accept in the Maximum
number of Requests (1 to 86400) text box.
The valid range
is from 1 to 86400 connections.
Switch Web GUI
The configuration wizard
enables you to configure basic settings on the
switch. You can run the wizard after you
switch from the factory or after the
switch has been reset to factory defaults.
The configuration wizard is available in both GUI and CLI formats.
Connect your PC
to the service port and configure an IPv4 address to use the same subnet as the
switch is loaded with IOS XE image and the
service port interface is configured as gigabitethernet 0/0.
Explorer 10 (or later), Firefox 220.127.116.11 (or later), or Google Chrome on your
PC and enter the management interface IP address on the browser window. The
management interface IP address is same as the gigabitethernet 0/0 (also known
as service port interface). When you log in for the first time, you need to
enter HTTP username and password. By default, the username is
admin and the
You can use both
HTTP and HTTPS when using the service port interface. HTTPS is enabled by
default and HTTP can also be enabled.
When you log in
for the first time, the
<Model Number> <Hostname> page appears.
page, click the
Web GUI link to access
switch web GUI
Configuration > Wizard to perform all steps that you
need to configure the
Users page appears.
Users page, enter the administrative username to be assigned to
switch in the User Name text box and the
administrative password to be assigned to this
switch in the Password and Confirm Password
text boxes. Click
admin and the
default password is
cisco. You can
also create a new administrator user for the
switch. You can enter up to 24 ASCII
characters for username and password.
System Summary page appears.
System Summary page, enter the following SNMP system parameters for
switch, and click
switch location in the Location text box.
Customer-definable contact details such as phone number with
names in the Contact text box.
enabled to send SNMP notifications for various SNMP
disabled not to send SNMP notifications for various
SNMP traps from the SNMP Global Trap drop-down list.
enabled to send system log messages or
disabled not to send system log messages from the
SNMP Logging drop-down list.
trap server, must be reachable through the distribution ports (and not through
the gigabitethernet0/0 service or management interface).
Management Port page appears.
Management Port page, enter the following parameters
for the management port interface (gigabitethernet 0/0) and click
IP address that you assigned for the service port in the IP Address text box.
mask address of the management port interface in the Netmask text box.
Dynamic Host Configuration Protocol (DHCP) address for the selected port in the
IPv4 DHCP Server text box.
Wireless Management page appears.
Management page, enter the following wireless interface management
details, and click
interface—VLAN, or Ten Gigabit Ethernet from the Select Interface drop-down
identifier, or 0 for no VLAN tag in the VLAN id text box.
of wireless management interface where access points are connected in the IP
Address text box.
mask address of the wireless management interface in the Netmask text box.
IP address in the IPv4 DHCP Server text box.
VLAN as interface, you can specify the ports as –Trunk or Access ports from the
selected list displayed in the Switch Port Configuration text box.
Mobility and Country Code page appears.
Mobility and Country Code page, enter the RF mobility domain name
in the RF Mobility text box, choose current country code from the Country Code
drop-down list, and click
Next. From the GUI, you can select only one country
configuring RF grouping parameters and mobility configuration, ensure that you
refer to the relevant conceptual content and then proceed with the
Mobility Configuration page with mobility global
configuration settings appears.
Mobility Configuration page, view and enter the
following mobility global configuration settings, and click
Mobility Controller or
Mobility Agent from the Mobility Role drop-down
Mobility Agent is chosen, enter the mobility controller IP address in the
Mobility Controller IP Address text box and mobility controller IP address in
the Mobility Controller Public IP Address text box.
Mobility Controller is chosen, then the mobility controller IP address and
mobility controller public IP address are displayed in the respective text
mobility protocol port number in the Mobility Protocol Port text box.
the mobility switch peer group name in the Mobility Switch Peer Group Name text
whether DTLS is enabled in the DTLS Mode text box.
DTLS is a
standards-track Internet Engineering Task Force (IETF) protocol based on TLS.
mobility domain identifier for 802.11 radios in the Mobility Domain ID for
802.11 radios text box.
of time (in seconds) between each ping request sent to an peer
switch in the Mobility Keepalive Interval
(1-30)sec text box.
range is from 1 to 30 seconds, and the default value is 10 seconds.
times a ping request is sent to an peer
switch before the peer is considered to be
unreachable in the Mobility Keepalive Count (3-20) text box.
range is from 3 to 20, and the default value is 3.
value that you can set for the mobility
switch in the Mobility Control Message DSCP
Value (0-63) text box.
range is 0 to 63, and the default value is 0.
the number of mobility switch peer group member configured in the Switch Peer
Group Members Configured text box.
WLANs page appears.
WLANs page, enter the following WLAN configuration
parameters, and click
identifier in the WLAN ID text box.
the WLAN that the client is associated with in the SSID text box.
the WLAN used by the client in the Profile Name text box.
Configuration page appears.
Configuration page, check either one or both 802.11a/n/ac and
802.11b/g/n check boxes to enable the 802.11 radios, and click
Time page appears.
Time page, you can configure the time and date on the
switch based on the following parameters,
current timestamp on the
switch in the Current Time text box.
either Manual or NTP from the Mode drop-down list.
the NTP server, all access points connected to the
switch, synchronizes its time based on the
NTP server settings available.
date on the
switch from the Year, Month, and Day
time from the Hours, Minutes, and Seconds drop-down list.
time zone in the Zone text box and select the off setting required when
compared to the current time configured on the
switch from the Offset drop-down list.
Wizard page appears.
Wizard page, you can review the configuration settings performed on
switch using these steps, and if you wish
to change any configuration value, click
Previous and navigate to that page.
You can save the
switch configuration created using the
wizard only if a success message is displayed for all the wizards. If the
Wizard page displays errors, you must recreate the wizard for
initial configuration of the