Table Of Contents

Numerics - A - B - C - D - E - F - G - H - I - K - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

Numerics

350 series bridge interoperability 8-3

802.11g 6-15

802.11 subsystem error and event messages D-3

A

abbreviating commands 4-3

access point security settings, matching client devices 10-18

accounting

with RADIUS 12-12

with TACACS+ 12-21, 12-26

accounting command 7-4

AES-CCMP 9-2

Aironet Client Utility (ACU) 21-6

antenna gains A-3

Apply button 3-4

ARP

caching 5-21

association management error and event messages D-2

associations, limiting by MAC address 15-5

attributes, RADIUS

sent by the access point 12-18

vendor-proprietary 12-15

vendor-specific 12-14

authentication

local mode with AAA 5-17

NTP associations 5-25

RADIUS

key 12-5

login 5-9, 12-7

SSID 7-2

TACACS+

defined 12-21

key 12-23

login 5-14, 12-24

authentication client command 7-4

authentication server

EAP 10-4, 12-3

authentication types

Network-EAP 10-4

open 10-2

shared key 10-3

authoritative time source, described 5-23

authorization

with RADIUS 5-12, 12-11

with TACACS+ 5-15, 12-21, 12-25

AVVID priority mapping 14-11

B

Back button 3-4

backoff 6-15

bandwidth 6-7

banners

configuring

login 5-39

message-of-the-day login 5-38

default configuration 5-38

when displayed 5-38

basic settings, checking 21-5

beacon dtim-period command 6-16

blocking communication between clients 6-14

BR350 interoperability 8-3

broadcast key rotation 9-1, 9-3

BSSIDs 7-7

C

caching MAC authentications 10-16

Called-Station-ID

See CSID

Cancel button 3-4

carrier busy test 6-19

CCKM 10-6

authenticated clients 10-6, 10-7

CCK modulation 6-6

CDP

disabling for routing device 16-4

enabling and disabling

on an interface 16-4

monitoring 16-4

Cisco TAC 21-1

CiscoWorks 2000 17-4

CLI

abbreviating commands 4-3

command modes 4-2

editing features

enabling and disabling 4-5

keystroke editing 4-6

wrapped lines 4-7

error messages 4-4

filtering command output 4-8

getting help 4-3

history

changing the buffer size 4-4

described 4-4

disabling 4-5

recalling commands 4-5

no and default forms of commands 4-3

using Telnet to access 2-19

client ARP caching 5-21

client communication, blocking 6-14

clock

See system clock

command-line interface

See CLI

command modes 4-2

commands

abbreviating 4-3

accounting 7-4

authentication client 7-4

beacon dtim-period 6-16

dot11 aaa mac-authen filter-cache 10-16

encryption 9-4

guest-mode 7-5

infrastructure-ssid 7-5

ip redirect 7-13

no and default 4-3

permit tcp-port 7-13

power client 6-7

setting privilege levels 5-7

show dot11 associations 7-6

slot-time-short 6-16

ssid 7-4

vlan 7-4

community strings

configuring 17-5

overview 17-4

configuration files

creating using a text editor 18-10

deleting a stored configuration 18-18

downloading

preparing 18-10, 18-13, 18-16

reasons for 18-8

using FTP 18-13

using RCP 18-17

using TFTP 18-11

guidelines for creating and using 18-9

invalid combinations when copying 18-5

system contact and location information 17-10

types and location 18-9

uploading

preparing 18-10, 18-13, 18-16

reasons for 18-8

using FTP 18-14

using RCP 18-18

using TFTP 18-12

connections, secure remote 5-21

crypto software image 5-21

CSID format, selecting 12-13

D

Data Beacon Rate 6-16

daylight saving time 5-34

default commands 4-3

default configuration

banners 5-38

DNS 5-37

NTP 5-25

password and privilege level 5-3

RADIUS 5-8, 12-4

resetting 2-19, 21-6

SNMP 17-5

system message logging 19-3

system name and prompt 5-36

TACACS+ 5-14, 12-23

delivery traffic indication message (DTIM) 6-16

DHCP server

configuring access point as 5-18

directories

changing 18-4

creating and removing 18-4

displaying the working 18-4

disable web-based management 3-14

distance setting 6-13

DNS

default configuration 5-37

displaying the configuration 5-38

overview 5-36

setting up 5-37

domain names

DNS 5-36

Domain Name System

See DNS

dot11 aaa mac-authen filter-cache command 10-16

downloading

configuration files

preparing 18-10, 18-13, 18-16

reasons for 18-8

using FTP 18-13

using RCP 18-17

using TFTP 18-11

image files

deleting old image 18-22

preparing 18-20, 18-23, 18-28

reasons for 18-19

using FTP 18-24

using RCP 18-30

using TFTP 18-21

DTIM 6-16

E

EAP authentication

overview 10-4

EAP-FAST authentication 10-18

EAP-MD5 authentication

setting on client and access point 10-20

EAP-SIM authentication

setting on client and access point 10-20

EAP-TLS authentication

setting on client and access point 10-19

editing features

enabling and disabling 4-5

keystrokes used 4-6

wrapped lines 4-7

EIRP, maximumA-3to ??

enable password 5-4

enable secret password 5-4

encrypted software image 5-21

encryption command 9-4

encryption for passwords 5-4

error and event messages D-1

802.11 D-3

error messages

during command entry 4-4

setting the display destination device 19-4

severity levels 19-7

system message format 19-2

Ethernet and duplex settings

configuring 5-16

event messages D-1

Express Security page 2-10

F

Fast Secure Roaming

configuring 11-4

fast secure roaming 11-1

files

copying 18-5

deleting 18-5

displaying the contents of 18-8

tar

creating 18-6

displaying the contents of 18-6

extracting 18-7

image file format 18-20

file system

displaying available file systems 18-2

displaying file information 18-3

local file system names 18-2

network file system names 18-5

setting the default 18-3

filtering

show and more command output 4-8

Flash device, number of 18-2

forward-delay time

STP 8-7

fragmentation threshold 6-17

frequencies A-2

FTP

accessing MIB files C-2

configuration files

downloading 18-13

overview 18-12

preparing the server 18-13

uploading 18-14

image files

deleting old image 18-27

downloading 18-24

preparing the server 18-23

uploading 18-27

G

get-bulk-request operation 17-3

get-next-request operation 17-3, 17-4

get-request operation 17-3, 17-4

get-response operation 17-3

global configuration mode 4-2

group key updates 10-15

guest mode 7-2

guest-mode command 7-5

guest SSID 7-2

H

help, for the command line 4-3

history

changing the buffer size 4-4

described 4-4

disabling 4-5

recalling commands 4-5

history table, level and number of syslog messages 19-8

Home button 3-3

hot standby

configuring 20-7

verifying operation 20-10

HTTPS 3-4

I

IGMP snooping helper 14-11

infrastructure device 7-5

infrastructure-ssid command 7-5

Inter-Access Point Protocol error and event messages D-7

inter-client communication, blocking 6-14

interface configuration mode 4-2

IP address, finding and setting 2-18

ip redirect command 7-13

IP redirection 7-11, 7-12

IPSU 2-17

ISO designators for protocols B-1

K

key features 1-2

L

LEAP

described 1-2

LEAP authentication

setting on client and access point 10-18

Light Extensible Authentication Protocol

See LEAP

limiting client associations by MAC address 15-5

login authentication

with RADIUS 5-9, 12-7

with TACACS+ 5-14, 12-24

login banners 5-38

log messages

See system message logging

M

MAC 2-18

MAC address

ACLs, blocking association with 15-5

troubleshooting 21-6

MAC authentication caching 10-16

management options

CLI 4-1

Message Integrity Check (MIC) 1-2, 9-1, 21-6

messages

to users through banners 5-38

MIBs

accessing files with FTP C-2

location of files C-2

overview 17-2

SNMP interaction with 17-4

MIC 9-1

Microsoft IAS servers 10-2

migration mode, WPA 10-14

mobile station command 6-4

monitoring

CDP 16-4

multiple basic SSIDs 7-7

N

names, VLAN 13-7

Network-EAP 10-4

Network Time Protocol

See NTP

no commands 4-3

NTP

associations

authenticating 5-25

defined 5-24

enabling broadcast messages 5-27

peer 5-26

server 5-26

default configuration 5-25

displaying the configuration 5-32

overview 5-23

restricting access

creating an access group 5-29

disabling NTP services per interface 5-31

source IP address, configuring 5-31

stratum 5-23

synchronizing devices 5-26

time

services 5-24

synchronizing 5-23

O

OFDM modulation 6-6

OK button 3-4

optional ARP caching 5-22

P

passwords

default configuration 5-3

encrypting 5-4

overview 5-2

setting

enable 5-3

enable secret 5-4

with usernames 5-6

PEAP authentication

setting on client and access point 10-20

permit tcp-port command 7-13

per-VLAN Spanning Tree (PVST) 8-2

ports, protected 6-15

power client command 6-7

power level, maximum A-3

power-save client device 6-16

preferential treatment of traffic

See QoS

pre-shared key 10-15

preventing unauthorized access 5-2

privileged EXEC mode 4-2

privilege levels

exiting 5-8

logging into 5-8

overview 5-2, 5-6

setting a command with 5-7

Public Secure Packet Forwarding 6-14

Q

QoS

configuration guidelines 14-5

described 1-2

overview 14-2

quality of service

See QoS

R

radio

congestion 6-8

distance setting 6-13

enabling 6-2

role in radio network 6-2

radio diagnostic error and event messages D-8

radio management 11-1

cofiguring 11-12

RADIUS

attributes

CSID format, selecting 12-13

sent by the access point 12-18

vendor-proprietary 12-15

vendor-specific 12-14

WISPr 12-16

configuring

accounting 12-12

authentication 5-9, 12-7

authorization 5-12, 12-11

communication, global 12-5, 12-13

communication, per-server 12-4, 12-5

multiple UDP ports 12-5

default configuration 5-8, 12-4

defining AAA server groups 5-10, 12-9

displaying the configuration 5-13, 12-17

identifying the server 12-4

limiting the services to the user 5-12, 12-11

method list, defined 12-4

operation of 12-3

overview 12-2

SSID 7-2

suggested network environments 12-2

tracking services accessed by user 12-12

rate limit, logging 19-9

RCP

configuration files

downloading 18-17

overview 18-15

preparing the server 18-16

uploading 18-18

image files

deleting old image 18-32

downloading 18-30

preparing the server 18-28

uploading 18-32

reauthentication requests 10-2

redirection, IP 7-11

regulatory domains A-2

reloading bridge image 21-9

Remote Authentication Dial-In User Service

See RADIUS

Remote Copy Protocol

See RCP

repeater

as a LEAP client 20-6

as a WPA client 20-7

chain of access points 20-2

restricting access

NTP services 5-29

overview 5-2

passwords and privilege levels 5-2

RADIUS 5-8, 12-1

TACACS+ 5-13

RFC

1157, SNMPv1 17-2

1305, NTP 5-23

1901, SNMPv2C 17-2

1902 to 1907, SNMPv2 17-2

roaming

fast secure roaming using CCKM 11-1

rotation, broadcast key 9-1

RTS threshold 6-16

S

secure remote connections 5-21

Secure Shell

See SSH

security

troubleshooting 21-6

security features 1-2

security settings, Express Security page 2-10

self-healing wireless LAN 11-4

sequence numbers in log messages 19-6

serial

serial port connector 2-3, 4-9, 21-4

service set identifiers (SSIDs)

See SSID

service-type attribute 10-2

set-request operation 17-4

severity levels, defining in system messages 19-7

shared key 10-6

short slot time 6-15

show cdp traffic command 16-5

show dot11 associations command 7-6

Simple Network Management Protocol

See SNMP

slot time, short 6-15

slot-time-short command 6-16

SNMP

accessing MIB variables with 17-4

agent

described 17-3

disabling 17-5

community strings

configuring 17-5

overview 17-4

configuration examples 17-10

default configuration 17-5

limiting system log messages to NMS 19-8

manager functions 17-3

overview 17-2, 17-4

snmp-server view 17-10

status, displaying 17-11

system contact and location 17-10

trap manager, configuring 17-9

traps

described 17-3

enabling 17-7

overview 17-2, 17-4

types of 17-7

versions supported 17-2

SNMP, FTP MIB files C-2

snooping helper, IGMP 14-11

software images

location in Flash 18-19

tar file format, described 18-20

software upgrade

error and event messages D-1

spaces in an SSID 7-6

SSH 4-9

configuring 5-21

crypto software image 5-21

described 5-21

displaying settings 5-21

SSID 7-2

guest mode 7-2

multiple SSIDs 7-1

support 1-2

troubleshooting 21-5

using spaces in 7-6

VLAN 7-2

SSID, troubleshooting 21-5

ssid command 7-4

SSL 3-4

static WEP

with open authentication, setting on client and access point 10-18

with shared key authentication, setting on client and access point 10-18

statistics

CDP 16-4

SNMP input and output 17-11

STP

BPDU message exchange 8-3

designated port, defined 8-4

designated switch, defined 8-4

displaying status 8-14

inferior BPDU 8-4

interface states

blocking 8-7

disabled 8-8

forwarding 8-7, 8-8

learning 8-8

listening 8-7

overview 8-6

overview 8-2

root port, defined 8-4

superior BPDU 8-4

timers, described 8-5

stratum, NTP 5-23

summer time 5-34

switchport protected command 6-15

syslog

See system message logging

system clock

configuring

daylight saving time 5-34

manually 5-32

summer time 5-34

time zones 5-33

displaying the time and date 5-33

overview 5-23

See also NTP

system message logging

default configuration 19-3

defining error message severity levels 19-7

disabling 19-4

displaying the configuration 19-12

enabling 19-4

facility keywords, described 19-11

level keywords, described 19-8

limiting messages 19-8

message format 19-2

overview 19-2

rate limit 19-9

sequence numbers, enabling and disabling 19-6

setting the display destination device 19-4

timestamps, enabling and disabling 19-5

UNIX syslog servers

configuring the daemon 19-10

configuring the logging facility 19-10

facilities supported 19-11

system name

default configuration 5-36

manual configuration 5-36

See also DNS

system prompt

default setting 5-35, 5-36

T

TAC 21-1

TACACS+

accounting, defined 12-21

authentication, defined 12-21

authorization, defined 12-21

configuring

accounting 12-26

authentication key 12-23

authorization 5-15, 12-25

login authentication 5-14, 12-24

default configuration 5-14, 12-23

described 1-2

displaying the configuration 5-16, 12-27

identifying the server 12-23

limiting the services to the user 5-15, 12-25

operation of 12-22

overview 12-21

tracking services accessed by user 12-26

tar files

creating 18-6

displaying the contents of 18-6

extracting 18-7

image file format 18-20

Telnet 2-19

Temporal Key Integrity Protocol (TKIP) 9-1

Terminal Access Controller Access Control System Plus

See TACACS+

TFTP

configuration files

downloading 18-11

preparing the server 18-10

uploading 18-12

image files

deleting 18-22

downloading 18-21

preparing the server 18-20

uploading 18-23

time

See NTP and system clock

timestamps in log messages 19-5

time zones 5-33

TKIP 9-1, 9-2

traps

configuring managers 17-7

defined 17-3

enabling 17-7

notification types 17-7

overview 17-2, 17-4

troubleshooting 21-1

with CiscoWorks 17-4

with system message logging 19-2

U

UNIX syslog servers

daemon configuration 19-10

facilities supported 19-11

message logging configuration 19-10

unzip error and event messages D-3

upgrading software images

See downloading

uploading

configuration files

preparing 18-10, 18-13, 18-16

reasons for 18-8

using FTP 18-14

using RCP 18-18

using TFTP 18-12

image files

preparing 18-20, 18-23, 18-28

reasons for 18-19

using FTP 18-27

using RCP 18-32

using TFTP 18-23

user EXEC mode 4-2

username-based authentication 5-6

V

VLAN

configuration example 13-9

configuring 13-4

creating a VLAN name 13-8

guidelines for names 13-7

incorporating access points into 13-4

names 13-7

SSID 7-2

using RADIUS server to assign users 13-8

viewing on access point/bridge 13-7

vlan command 7-4

W

WDS 11-1

cofiguring 11-4

requirements for 11-5

Web-based interface

common buttons 3-3

web site

Cisco Software Center 2-17

WEP

key example 9-5

key hashing 1-2

with EAP 10-4

WEP key 21-6

troubleshooting 21-6

Wi-Fi Multimedia 14-4

Wi-Fi Protected Access

See WPA

WISPr RADIUS attributes 12-16

WMM 14-4

workgroup bridge

configuring 20-14

configuring client VLAN 20-13

configuring for roaming 20-13

treating as infrastructure or client devices 20-13

understanding 20-11

world mode 1-2

world-mode

802.11d standard 6-9

Cisco legacy 6-9

WPA 10-8

WPA migration mode 10-14