Table Of Contents
Numerics - A - B - C - D - E - F - G - H - I - K - L - M - N - O - P - Q - R - S - T - U - V - W -
Index
Numerics
350 series bridge interoperability 8-3
802.11g 6-16
802.11 subsystem error and event messages 23-3
A
abbreviating commands 4-3
access point security settings, matching client devices 10-15
accounting
with RADIUS 12-12
with TACACS+ 12-21, 12-26
accounting command 7-5
AES-CCMP 9-2
Aironet Client Utility (ACU) 21-6
antenna gains A-3
setting 6-11
Apply button 3-4
ARP
caching 5-21
association management error and event messages 23-2
associations, limiting by MAC address 15-5
attributes, RADIUS
sent by the access point 12-18
vendor-proprietary 12-15
vendor-specific 12-14
authentication
local mode with AAA 5-17
NTP associations 5-25
RADIUS
key 12-5
login 5-9, 12-7
SSID 7-2
TACACS+
defined 12-21
key 12-23
login 5-14, 12-24
authentication client command 7-4
authentication server
EAP 10-4, 12-3
authentication types
Network-EAP 10-4
open 10-2
shared key 10-3
authoritative time source, described 5-23
authorization
with RADIUS 5-12, 12-11
with TACACS+ 5-15, 12-21, 12-25
AVVID priority mapping 14-11
B
Back button 3-4
backoff 6-16
bandwidth 6-7
banners
configuring
login 5-39
message-of-the-day login 5-39
default configuration 5-38
when displayed 5-38
basic settings, checking 21-5
beacon dtim-period command 6-16
blocking communication between clients 6-14
BR350 interoperability 8-3
broadcast key rotation 9-1, 9-3
BSSIDs 7-7
C
Called-Station-ID
See CSID
Cancel button 3-4
carrier busy test 6-19
CCKM 10-6
authenticated clients 10-6
CCK modulation 6-6
CDP
disabling for routing device 16-4
enabling and disabling
on an interface 16-4
monitoring 16-5
Cisco TAC 21-1
CiscoWorks 2000 17-4
CLI
abbreviating commands 4-3
command modes 4-2
editing features
enabling and disabling 4-6
keystroke editing 4-6
wrapped lines 4-7
error messages 4-4
filtering command output 4-8
getting help 4-3
history
changing the buffer size 4-4
described 4-4
disabling 4-5
recalling commands 4-5
no and default forms of commands 4-3
using Telnet to access 2-19
client ARP caching 5-21
client communication, blocking 6-14
clock
See system clock
command-line interface
See CLI
command modes 4-2
commands
abbreviating 4-3
accounting 7-5
authentication client 7-4
beacon dtim-period 6-16
encryption 9-4
guest-mode 7-5
infrastructure-ssid 7-5
ip redirect 7-13
no and default 4-3
permit tcp-port 7-13
power client 6-7
setting privilege levels 5-7
show dot11 associations 7-6
slot-time-short 6-16
ssid 7-4
vlan 7-5
community strings
configuring 17-5
overview 17-4
configuration files
creating using a text editor 18-10
deleting a stored configuration 18-18
downloading
preparing 18-10, 18-13, 18-16
reasons for 18-8
using FTP 18-13
using RCP 18-17
using TFTP 18-11
guidelines for creating and using 18-9
invalid combinations when copying 18-5
system contact and location information 17-10
types and location 18-10
uploading
preparing 18-10, 18-13, 18-16
reasons for 18-8
using FTP 18-14
using RCP 18-18
using TFTP 18-12
connections, secure remote 5-21
crypto software image 5-21
CSID format, selecting 12-13
D
Data Beacon Rate 6-16
daylight saving time 5-34
default commands 4-3
default configuration
banners 5-38
DNS 5-37
NTP 5-25
password and privilege level 5-3
RADIUS 5-8, 12-4
resetting 2-19, 21-6
SNMP 17-5
system message logging 19-3
system name and prompt 5-36
TACACS+ 5-14, 12-23
delivery traffic indication message (DTIM) 6-16
DHCP server
configuring access point as 5-18
directories
changing 18-4
creating and removing 18-4
displaying the working 18-4
disable web-based management 3-14
distance setting 6-13
DNS
default configuration 5-37
displaying the configuration 5-38
overview 5-36
setting up 5-37
domain names
DNS 5-36
Domain Name System
See DNS
downloading
configuration files
preparing 18-10, 18-13, 18-16
reasons for 18-8
using FTP 18-13
using RCP 18-17
using TFTP 18-11
image files
deleting old image 18-22
preparing 18-20, 18-24, 18-28
reasons for 18-19
using FTP 18-25
using RCP 18-30
using TFTP 18-21
DTIM 6-16
E
EAP authentication
overview 10-4
EAP-TLS authentication
setting on client and access point 10-16
editing features
enabling and disabling 4-6
keystrokes used 4-6
wrapped lines 4-7
EIRP, maximum A-3 to ??
enable password 5-4
enable secret password 5-4
encrypted software image 5-21
encryption command 9-4
encryption for passwords 5-4
error and event messages 23-1
802.11 23-3
error messages
during command entry 4-4
setting the display destination device 19-5
severity levels 19-7
system message format 19-2
Ethernet and duplex settings
configuring 5-16
event messages 23-1
Express Security page 2-10
F
Fast Secure Roaming
configuring 11-4
fast secure roaming 11-1
files
copying 18-5
deleting 18-5
displaying the contents of 18-8
tar
creating 18-6
displaying the contents of 18-7
extracting 18-7
image file format 18-20
file system
displaying available file systems 18-2
displaying file information 18-3
local file system names 18-2
network file system names 18-5
setting the default 18-3
filtering
show and more command output 4-8
Flash device, number of 18-2
forward-delay time
STP 8-7
fragmentation threshold 6-18
frequencies A-2
FTP
accessing MIB files C-2
configuration files
downloading 18-13
overview 18-12
preparing the server 18-13
uploading 18-14
image files
deleting old image 18-27
downloading 18-25
preparing the server 18-24
uploading 18-27
G
get-bulk-request operation 17-3
get-next-request operation 17-3, 17-4
get-request operation 17-3, 17-4
get-response operation 17-3
global configuration mode 4-2
group key updates 10-13
guest mode 7-2
guest-mode command 7-5
guest SSID 7-2
H
help, for the command line 4-3
history
changing the buffer size 4-4
described 4-4
disabling 4-5
recalling commands 4-5
history table, level and number of syslog messages 19-8
Home button 3-3
hot standby
configuring 20-7
verifying operation 20-10
HTTPS 3-4
I
IGMP snooping helper 14-11
infrastructure device 7-5
infrastructure-ssid command 7-5
Inter-Access Point Protocol error and event messages 23-7
inter-client communication, blocking 6-14
interface configuration mode 4-2
IP address, finding and setting 2-18
ip redirect command 7-13
IP redirection 7-11, 7-12
IPSU 2-17
ISO designators for protocols B-1
K
key features 1-2
L
LEAP
described 1-2
LEAP authentication
setting on client and access point 10-16
Light Extensible Authentication Protocol
See LEAP
limiting client associations by MAC address 15-5
login authentication
with RADIUS 5-9, 12-7
with TACACS+ 5-14, 12-24
login banners 5-38
log messages
See system message logging
M
MAC 2-18
MAC address
ACLs, blocking association with 15-5
troubleshooting 21-6
management options
CLI 4-1
Message Integrity Check (MIC) 1-2, 9-1, 21-6
messages
to users through banners 5-38
MIBs
accessing files with FTP C-2
location of files C-2
overview 17-2
SNMP interaction with 17-4
MIC 9-1
Microsoft IAS servers 10-2
migration mode, WPA 10-12
mobile station command 6-4
monitoring
CDP 16-5
multiple basic SSIDs 7-7
N
names, VLAN 13-7
Network-EAP 10-4
Network Time Protocol
See NTP
no commands 4-3
NTP
associations
authenticating 5-25
defined 5-24
enabling broadcast messages 5-28
peer 5-27
server 5-27
default configuration 5-25
displaying the configuration 5-32
overview 5-23
restricting access
creating an access group 5-30
disabling NTP services per interface 5-31
source IP address, configuring 5-31
stratum 5-23
synchronizing devices 5-27
time
services 5-24
synchronizing 5-23
O
OFDM modulation 6-6
OK button 3-4
optional ARP caching 5-22
P
passwords
default configuration 5-3
encrypting 5-4
overview 5-2
setting
enable 5-3
enable secret 5-4
with usernames 5-6
PEAP authentication
setting on client and access point 10-17
permit tcp-port command 7-13
per-VLAN Spanning Tree (PVST) 8-2
ports, protected 6-15
power client command 6-7
power level, maximum A-3
power-save client device 6-16
preferential treatment of traffic
See QoS
pre-shared key 10-13
preventing unauthorized access 5-2
privileged EXEC mode 4-2
privilege levels
exiting 5-8
logging into 5-8
overview 5-2, 5-6
setting a command with 5-7
Public Secure Packet Forwarding 6-14
Q
QoS
configuration guidelines 14-5
described 1-2
overview 14-2
quality of service
See QoS
R
radio
congestion 6-8
distance setting 6-13
enabling 6-2
role in radio network 6-2
radio diagnostic error and event messages 23-8
radio management 11-1
cofiguring 11-12
RADIUS
attributes
CSID format, selecting 12-13
sent by the access point 12-18
vendor-proprietary 12-15
vendor-specific 12-14
WISPr 12-16
configuring
accounting 12-12
authentication 5-9, 12-7
authorization 5-12, 12-11
communication, global 12-5, 12-13
communication, per-server 12-5
multiple UDP ports 12-5
default configuration 5-8, 12-4
defining AAA server groups 5-10, 12-9
displaying the configuration 5-13, 12-17
identifying the server 12-5
limiting the services to the user 5-12, 12-11
method list, defined 12-4
operation of 12-3
overview 12-2
SSID 7-2
suggested network environments 12-2
tracking services accessed by user 12-12
rate limit, logging 19-9
RCP
configuration files
downloading 18-17
overview 18-15
preparing the server 18-16
uploading 18-18
image files
deleting old image 18-31
downloading 18-30
preparing the server 18-28
uploading 18-32
reauthentication requests 10-2
redirection, IP 7-11
regulatory domains A-2
reloading bridge image 21-9
Remote Authentication Dial-In User Service
See RADIUS
Remote Copy Protocol
See RCP
repeater
as a LEAP client 20-5
as a WPA client 20-6
chain of access points 20-2
restricting access
NTP services 5-29
overview 5-2
passwords and privilege levels 5-2
RADIUS 5-8, 12-1
TACACS+ 5-13
RFC
1157, SNMPv1 17-2
1305, NTP 5-23
1901, SNMPv2C 17-2
1902 to 1907, SNMPv2 17-2
roaming
fast secure roaming using CCKM 11-1
rotation, broadcast key 9-1
RTS threshold 6-16
S
secure remote connections 5-21
Secure Shell
See SSH
security
troubleshooting 21-6
security features 1-2
synchronizing 10-15
security settings, Express Security page 2-10
self-healing wireless LAN 11-4
sequence numbers in log messages 19-6
serial
serial port connector 2-3, 4-9, 21-4
service set identifiers (SSIDs)
See SSID
service-type attribute 10-2
set-request operation 17-4
severity levels, defining in system messages 19-7
shared key 10-6
short slot time 6-16
show cdp traffic command 16-5
show dot11 associations command 7-6
Simple Network Management Protocol
See SNMP
slot time, short 6-16
slot-time-short command 6-16
SNMP
accessing MIB variables with 17-4
agent
described 17-3
disabling 17-5
community strings
configuring 17-5
overview 17-4
configuration examples 17-10
default configuration 17-5
limiting system log messages to NMS 19-8
manager functions 17-3
overview 17-2, 17-4
snmp-server view 17-10
status, displaying 17-11
system contact and location 17-10
trap manager, configuring 17-9
traps
described 17-3
enabling 17-7
overview 17-2, 17-4
types of 17-7
versions supported 17-2
SNMP, FTP MIB files C-2
snooping helper, IGMP 14-11
software images
location in Flash 18-19
tar file format, described 18-20
software upgrade
error and event messages 23-1
spaces in an SSID 7-6
SSH 4-9
configuring 5-21
crypto software image 5-21
described 5-21
displaying settings 5-21
SSH Communications Security, Ltd. 4-9
SSID 7-2
guest mode 7-2
multiple SSIDs 7-1
support 1-2
troubleshooting 21-5
using spaces in 7-6
VLAN 7-2
SSID, troubleshooting 21-5
ssid command 7-4
SSL 3-4
static WEP
with open authentication, setting on client and access point 10-15
with shared key authentication, setting on client and access point 10-15
statistics
CDP 16-5
SNMP input and output 17-11
STP
BPDU message exchange 8-3
designated port, defined 8-4
designated switch, defined 8-4
displaying status 8-14
inferior BPDU 8-4
interface states
blocking 8-7
disabled 8-8
forwarding 8-7, 8-8
learning 8-8
listening 8-7
overview 8-6
overview 8-2
root port, defined 8-4
superior BPDU 8-4
timers, described 8-5
stratum, NTP 5-23
summer time 5-34
switchport protected command 6-15
syslog
See system message logging
system clock
configuring
daylight saving time 5-34
manually 5-32
summer time 5-34
time zones 5-33
displaying the time and date 5-33
overview 5-23
See also NTP
system message logging
default configuration 19-3
defining error message severity levels 19-7
disabling 19-4
displaying the configuration 19-12
enabling 19-4
facility keywords, described 19-11
level keywords, described 19-8
limiting messages 19-8
message format 19-2
overview 19-2
rate limit 19-9
sequence numbers, enabling and disabling 19-6
setting the display destination device 19-5
timestamps, enabling and disabling 19-6
UNIX syslog servers
configuring the daemon 19-10
configuring the logging facility 19-10
facilities supported 19-11
system name
default configuration 5-36
manual configuration 5-36
See also DNS
system prompt
default setting 5-35, 5-36
T
TAC 21-1
TACACS+
accounting, defined 12-21
authentication, defined 12-21
authorization, defined 12-21
configuring
accounting 12-26
authentication key 12-23
authorization 5-15, 12-25
login authentication 5-14, 12-24
default configuration 5-14, 12-23
described 1-2
displaying the configuration 5-16, 12-27
identifying the server 12-23
limiting the services to the user 5-15, 12-25
operation of 12-22
overview 12-21
tracking services accessed by user 12-26
tar files
creating 18-6
displaying the contents of 18-7
extracting 18-7
image file format 18-20
Telnet 2-19
Temporal Key Integrity Protocol (TKIP) 9-1
Terminal Access Controller Access Control System Plus
See TACACS+
TFTP
configuration files
downloading 18-11
preparing the server 18-10
uploading 18-12
image files
deleting 18-22
downloading 18-21
preparing the server 18-20
uploading 18-23
time
See NTP and system clock
timestamps in log messages 19-6
time zones 5-33
TKIP 9-1, 9-2
traps
configuring managers 17-7
defined 17-3
enabling 17-7
notification types 17-7
overview 17-2, 17-4
troubleshooting 21-1
with CiscoWorks 17-4
with system message logging 19-2
U
UNIX syslog servers
daemon configuration 19-10
facilities supported 19-11
message logging configuration 19-10
unzip error and event messages 23-3
upgrading software images
See downloading
uploading
configuration files
preparing 18-10, 18-13, 18-16
reasons for 18-8
using FTP 18-14
using RCP 18-18
using TFTP 18-12
image files
preparing 18-20, 18-24, 18-28
reasons for 18-19
using FTP 18-27
using RCP 18-32
using TFTP 18-23
user EXEC mode 4-2
username-based authentication 5-6
V
VLAN
configuration example 13-9
configuring 13-4
creating a VLAN name 13-8
guidelines for names 13-7
incorporating access points into 13-4
names 13-7
SSID 7-2
using RADIUS server to assign users 13-8
viewing on access point/bridge 13-7
vlan command 7-5
W
WDS 11-1
cofiguring 11-4
requirements for 11-5
Web-based interface
common buttons 3-3
web site
Cisco Software Center 2-17
WEP
key example 9-5
key hashing 1-2
with EAP 10-4
WEP key 21-6
troubleshooting 21-6
Wi-Fi Multimedia 14-4
Wi-Fi Protected Access
See WPA
WISPr RADIUS attributes 12-16
WMM 14-4
workgroup bridge
configuring 20-13
configuring client VLAN 20-13
configuring for roaming 20-13
treating as infrastructure or client devices 20-12
understanding 20-11
world mode 1-2
world-mode
802.11d standard 6-8
Cisco legacy 6-8
WPA 10-7
WPA migration mode 10-12