Table Of Contents
Release Notes for 1100 Series Access Points for Cisco IOS Release 12.2(4)JA
Determining the Software Version
Upgrading to a New Software Release
Support for 802.11 Wireless Standards
Configurable Radio Transmit Power
Key Hashing (Temporal Key Integrity Protocol)
Installation in Environmental Air Space
Radio MAC Address Appears in ACU
Cisco IOS Software Documentation Set
Obtaining Technical Assistance
Release Notes for 1100 Series Access Points for Cisco IOS Release 12.2(4)JA
October 7, 2002
These release notes describe features, enhancements, and caveats for Cisco IOS Release 12.2(4)JA. They also provide important information about 1100 series access points.
Contents
These release notes contain the following sections:
•
Obtaining Technical Assistance
Introduction
Cisco Aironet Access Points are wireless LAN transceivers that can act as the connection point between wireless and wired networks or as the center point of a standalone wireless network. In large installations, the roaming functionality provided by multiple access points enables wireless users to move freely throughout the facility while maintaining uninterrupted access to the network.
You can configure and monitor the 1100 series access point using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP).
System Requirements
You must have an 1100 series access point to install Cisco IOS Release 12.2(4)JA.
Note
Determining the Software Version
To determine the version of Cisco IOS running on your access point, use a Telnet session to log into the access point and enter the show version EXEC command. This example shows command output from an access point running Cisco IOS Release 12.2(4)JA:
ap1100>show versionCisco Internetwork Operating System SoftwareIOS (tm) C1100 Software (C1100-K9W7-M), Version 12.2(4)JACopyright (c) 1986-2002 by Cisco Systems, Inc.You can also find the software version on the System Software Version page in the access point's web-browser interface.
Upgrading to a New Software Release
For instructions on installing access point software:
1.
http://www.cisco.com/univercd/cc/td/doc/product/wireless/index.htm
2.
Aironet 1100 Series Wireless LAN Products > Cisco Aironet 1100 Series Access Points >
Aironet 1100 Series Access Points, Cisco IOS Release 12.2(4)JA > Cisco Aironet 1100 Series Access Point Installation and Configuration Guide > Managing Firmware and Configurations > Working with Software Images3.
http://www.cisco.com/public/sw-center/sw-wireless.shtml
Select the Cisco Aironet 1100 Series link to download Cisco IOS version 12.2(4)JA.
New Features
This section lists new features in Cisco IOS Release 12.2(4)JA.
Support for 802.11 Wireless Standards
Cisco IOS Release 12.2(4)JA supports IEEE 802.11 standards for wireless networking. This support enables interoperability under 802.11 specifications for network architecture, wireless association, and radio management. Support for 802.11 standards allows you to set the access point mode of operation (root or repeater), Service Set Identifier (SSID), authentication type, channel selection, transmission rates, power-save mode, and security based on wired equivalent privacy (WEP), and other configurable fields.
Inter-Access Point Roaming
Clients who roam from one access point to another are supported with pre-standard services for seamless hand-off as defined under IEEE 802.11f Inter-Access Point Protocol (IAPP). When a client roams from one access point to another, the second access point sends a message to the first to update its association table, establishing a learning path to the client for the switch. This feature provides backward compatibility with the Cisco Aironet Data Delivery Protocol for inter-access point hand-off as implemented on 340, 350, and 1200 series access points.
Note
Multiple SSIDs
Access points can support up to 16 SSIDs, enabling flexible service deployment. You can configure each SSID for several parameters, creating up to 16 unique sets of services. Configurable parameters include mode for guest clients (enabling a broadcast SSID), client authentication method, maximum number of client associations, VLAN identifier, proxy mobile IP, and Remote Access Dial-In User Service (RADIUS) accounting list identifier. You can also designate an SSID as an infrastructure SSID that is used only by repeater access points.
World Mode
Each country regulates usage of the 2.4-GHz spectrum in its domain with respect to channel availability and allowable transmit power. The world mode feature automates client configuration of channel and transmit power settings by allowing world-mode-enabled access points to configure the settings on world-mode-enabled clients. For example, a user with a client device used primarily in Japan could rely on world mode to adjust its channel and power settings automatically when the user travels to Italy and joins a network there.
Configurable Radio Transmit Power
The transmit power of the access point radio can be configured from 1 mW up to 100 mW. You can manipulate the coverage area provided by the access point to meet your needs.
Note
Link Diagnostics
This feature provides testing and diagnosis capabilities for the wireless interface's connectivity status and throughput performance. You can examine radio configuration information such as the operating channel, transmit power, supported data rates, and regulatory settings; run a link test; determine signal strength and quality; diagnose the client association and authentication process; and examine data packets sent over the radio interface.
Transparent Bridging
The access point bridges the network between the wired infrastructure and wireless devices, switching traffic between the radio and Ethernet interfaces. This feature provides transparent bridging and forwarding logic between these interfaces.
VLAN over Wireless
You use VLANs to partition your network into logical subnets that are independent of physical location. This allows you to differentiate services, such as network access, for network users. This feature defines 802.1q VLANs for wireless LANs, using a VLAN identifier in the Ethernet frame. Up to 16 VLANs, one per SSID, are supported in this release.
QoS over Wireless
This feature enables the access point to provide traffic prioritization services over the wireless interface for standards-based quality of service (QoS). This feature prioritizes traffic based on the 802.1p tag in the Ethernet header or the IP type of service/Differentiated Services Code Point (TOS/DSCP) bits in the IP header.
Proxy Mobile IP
This release supports the Proxy Mobile IP protocol for seamless inter-subnet roaming. When you enable Proxy Mobile IP on your access points, client devices that roam from one subnet to the next maintain their IP address and session. The access point acts as a mobile IP proxy for clients devices that do not have mobile IP software installed. The access point informs the foreign agent router that the client has roamed to another subnet, while the foreign agent directs the home agent to reroute packets to it.
Hot Standby
This features enables you to add redundant reliability to your wireless LAN by installing a standby access point as a backup for a primary device and configuring it for hot standby. When installed on the same Ethernet LAN and configured consistently as a primary device, the standby device associates to the primary device as a client and monitors the primary device with periodic link test request packets sent over both the Ethernet and wireless interfaces. The standby device assumes the role of access point by activating its Ethernet port and accepting radio client associations if the primary device fails to respond with a link test response packet.
Load Balancing
The load-balancing feature optimizes aggregate bandwidth with intelligent user associations, resulting in a better load distribution. At initialization, the client polls all access points within range for the device load information, and selects the one with the lightest load. The access point interprets the request and provides loading information to the client.
HTTP Server
This feature enables Web-based graphical user interface (GUI) management by providing support for HTML Web pages and Common Gateway Interface (CGI) scripts using common Web browsers. You must use Microsoft Internet Explorer (version 5.x or later) or Netscape Navigator (version 4.x) to open the web-browser interface.
MIBs
This release provides support for standard and Cisco Enterprise MIB I and MIB II. For a complete list of supported MIBs, refer to Appendix F, "Supported MIBs" in the Cisco Aironet 1100 Series Access Point Installation and Configuration Guide.
Access Control Lists
Access control lists allow filtering of traffic based on identifiable attributes within an Ethernet frame. You can filter data based on source or destination addresses, protocol used, protocol-specific options (Telnet, FTP, HTTP, and SNMP), and Media Access Control (MAC) address.
802.1X, EAP
This Cisco Wireless Security Suite feature supports the 802.1X standard port-based authentication framework including EAP Cisco Wireless (LEAP), Protected Extensible Authentication Protocol (PEAP), Extensible Authentication Protocol Transport Layer Security (EAP-TLS), and EAP-Tunneled TLS (EAP-TTLS).
Key Hashing (Temporal Key Integrity Protocol)
With this pre-standard implementation of the key hashing technique, the base key and packet-unique initialization vector are hashed together to create a new, per-packet key. This procedure mitigates passive attacks that attempt to determine the base key by accumulating weak initialization vectors. Key hashing is a component of the Cisco Wireless Security Suite pre-standard Temporal Key Integrity Protocol (TKIP), which is part of the draft for IEEE 802.11i enhanced wireless security.
Message Integrity Check
This feature supports a pre-standard implementation of the MIC protocol. With this feature, the access point validates that packets received from the client have not been tampered with by calculating the packet checksum and comparing it to the checksum calculated and sent by the client. This feature prevents active attacks such as bit-flipping attacks. MIC is also a component of the Cisco Wireless Security Suite pre-standard TKIP.
Broadcast Key Rotation
You use this Cisco Wireless Security Suite feature to set a timeout for the shared broadcast key, causing a new broadcast key to be generated. This feature mitigates passive attacks that attempt to determine the broadcast key from weak initialization vectors.
Installation Notes
This section lists information you should keep in mind when installing 1100 series access points.
Installation in Environmental Air Space
The 1100 series access point provides adequate fire resistance and low smoke-producing characteristics suitable for operation in a building's environmental air space, such as above suspended ceilings, in accordance with Section 300-22(C) of the National Electrical Code (NEC) and Sections 2-128, 12-010(3) and 12-100 of the Canadian Electrical Code, Part 1, C22.1.
Caution
Power Considerations
Caution
Caution
Important Notes
This section describes important information about the access point.
Radio MAC Address Appears in ACU
When a Cisco Aironet client device associates to an 1100 series access point, the access point MAC address that appears on the Status page in the Aironet Client Utility (ACU) is the MAC address for the access point radio. The MAC address for the access point Ethernet port is printed on the label on the back of the access point.
Caveats
This section lists open caveats in Cisco IOS Release 12.2(4)JA.
Open Caveats
These caveats are open in Cisco IOS Release 12.2(4)JA:
•
•
•
•
ap1100# configure terminalap1100(config)# interface dot11radio0.<vlan id>ap1100(config-subif)# bridge-group <vlan id> port-protected•
•
•
•
•
•
Troubleshooting
For the most up-to-date, detailed troubleshooting information, refer to the Cisco TAC website at http://www.cisco.com/tac. Select Wireless LAN under Top Issues.
Related Documentation
This section lists documents related to Cisco IOS Release 12.2(4)JA and to 1100 series access points.
Platform-Specific Documents
These documents describe installation and configuration of 1100 series access points:
•
•
•
•
Cisco IOS Software Documentation Set
Table 1 lists the contents of the Cisco IOS Release 12.2 software documentation set. These documents are available in electronic form, and you can order them in printed form.
You can find the most current Cisco IOS documentation on Cisco.com. Follow this link path to find the documentation for Cisco IOS Release 12.2:
Technical Documents: Documentation Home Page: Cisco IOS Software Configuration: Cisco IOS Release 12.2
Obtaining Documentation
These sections explain how to obtain documentation from Cisco Systems.
World Wide Web
You can access the most current Cisco documentation on the World Wide Web at this URL:
Translated documentation is available at this URL:
http://www.cisco.com/public/countries_languages.shtml
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package. The Documentation CD-ROM is updated monthly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual subscription.
Ordering Documentation
You can order Cisco documentation in these ways:
•
http://www.cisco.com/public/ordsum.html
•
http://www.cisco.com/go/subscription
•
Documentation Feedback
You can submit comments electronically on Cisco.com. In the Cisco Documentation home page, click the Fax or Email option in the "Leave Feedback" section at the bottom of the page.
You can e-mail your comments to bug-doc@cisco.com.
You can submit your comments by mail by using the response card behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from online tools by using the Cisco Technical Assistance Center (TAC) Web Site. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC Web Site.
Cisco.com
Cisco.com is the foundation of a suite of interactive, networked services that provides immediate, open access to Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.
Cisco.com is a highly integrated Internet application and a powerful, easy-to-use tool that provides a broad range of features and services to help you with these tasks:
•
•
•
•
•
If you want to obtain customized information and service, you can self-register on Cisco.com. To access Cisco.com, go to this URL:
Technical Assistance Center
The Cisco Technical Assistance Center (TAC) is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two levels of support are available: the Cisco TAC Web Site and the Cisco TAC Escalation Center.
Cisco TAC inquiries are categorized according to the urgency of the issue:
•
•
•
•
The Cisco TAC resource that you choose is based on the priority of the problem and the conditions of service contracts, when applicable.
Cisco TAC Web Site
You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving both cost and time. The site provides around-the-clock access to online tools, knowledge bases, and software. To access the Cisco TAC Web Site, go to this URL:
All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC Web Site. The Cisco TAC Web Site requires a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:
http://www.cisco.com/register/
If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC Web Site, you can open a case online by using the TAC Case Open tool at this URL:
http://www.cisco.com/tac/caseopen
If you have Internet access, we recommend that you open P3 and P4 cases through the Cisco TAC Web Site.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.
To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
Before calling, please check with your network operations center to determine the level of Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
Copyright © 2002, Cisco Systems, Inc.
All rights reserved.
Guest
