Management and Untagged VLAN IDs Configuration on WAP121 and WAP321 Access Points

Available Languages

Download Options

  • PDF     (29.8 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (72.3 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (111.4 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:December 11, 2018
Document ID:SMB2171

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Management and Untagged VLAN IDs Configuration on WAP121 and WAP321 Access Points

Objective

The management VLAN is configured so that only the users configured on the management VLAN can access the device. The untagged VLAN is enabled to send traffic without the VLAN tag. Configuration of the management VLAN is necessary to add more security to the network. An attack on the management VLAN can breach the network security, so it is advised to change the management VLAN and untagged VLAN to something other than the default.

Both the managed and untagged VLAN IDs on WAP121 and WAP321 access points are configured to VLAN 1 by default. The objective of this article is to configure management and untagged VLAN IDs on the WAP121 and WAP321 access points.

Applicable Devices

• WAP121
• WAP321

Software Version

• 1.0.3.4

Global Settings

Step 1. Log in to the Access Point Configuration Utility and choose LAN > VLAN and IPv4 Address. The VLAN and IPv4 Address page opens:

Note: The MAC Address field displays the MAC address of the Ethernet port on the WAP121 and WAP321 access points. These access points have only one Ethernet port. 

Step 2. (Optional) To allow the device to receive traffic that is not tagged for a VLAN, check the Enable check box in the Untagged VLAN field. This function is used when there is a LAN port connected to a switch port that has a VLAN marked as untagged.

Timesaver: If you did not enable an untagged VLAN, skip to Step 4.

Step 3. Enter the VLAN ID (between 1 and 4094) for the untagged VLAN in the Untagged VLAN ID field. The default ID is 1. The traffic that goes through this VLAN is not tagged and is forwarded to the network. This should be the same VLAN that is marked as untagged on the switch port.

Step 4. Enter the VLAN ID (between 1 and 4094) for the management VLAN in the Management VLAN ID field. The Management VLAN needs to be the same as the one on the switch to which the WAP is connected. For security purposes, the management VLAN ID should be changed from the default of 1 to something else.

Step 5. Click Save to save the settings.

Note: To know how to configure IPv4 Settings refer to the article IPv4 Settings Configuration on WAP121 and WAP321 Access Points.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco