The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter provides details on how to configure the WiFi interface on the Cisco 1000 Series Connected Grid Routers ( hereafter referred to as the router). The WiFi interface helps to provide remote wireless connectivity to a router for diagnostics by field personnel. Information about wireless LANs (WLANs) as it relates to the configuration of the WiFi interface is also provided.
Note : The WiFi interface can be configured on a Cisco 1000 Series Connected Grid router running a Cisco CG-OS or Cisco IOS operating system.
This chapter includes the following sections:
■Information about the WiFi Interface
■Configuring the WiFi Interface
■Configuration Requirements for Remote Client Devices (CG-OS)
■WiFi Role in Connected Grid Mesh
■SSID
Cisco 1000 Series Connected Grid Router WiFi supports IPV4 for routed interfaces.
The router’s 2.4GHz WiFi radio interface can function as an access point that provides connectivity to 802.11 b/g/n devices. This WiFi connectivity allows remote access and diagnostics of the router in the field. The router WiFi interface can associate up to five 802.11 b/g/n devices concurrently.
Note : WiFi access point functionality is supported on Cisco CG-OS and Cisco IOS routers.
Note : WiFi access point does not function as a local bridge. It provides access point functionality.
The Cisco 1000 Series Connected Grid Router WiFi hardware is assigned module 2 and this cannot be changed.
For CGRs running the Cisco CG-OS operating system the WiFi interface is identified as ‘wifi 2/1’ and for routers running Cisco IOS the WiFi interface is identified as ‘dot11Radio 2/1’.
The essential configuration elements are:
■Service set identifier (SSID).
■Authentication type for enabling the router’s WiFi functionality.
■Configuring a passphrase if WPA/WPA2 authentication is selected.
For more information, see the SSID and Security sections as well as the Configuring the WiFi Interface section.
The WLAN associates a service set identifier (SSID) to the WiFi interface. An SSID must be assigned to the WiFi interface for it to be active in the network.
The SSID can be suppressed such that it is not advertised in the 802.11 beacons. Two SSIDs can be configured but the WiFi interface supports only one SSID—only one active SSID can be assigned at a time to the WiFi Interface (wifi 2/1) of a Cisco CG-OS operating system or the WiFi interface (dot11Radio 2/1) of a Cisco IOS router.
Note : SSID broadcast is always disabled on routers running Cisco CG-OS.
BSSID is a unique identifier (generally the MAC address) for an access point in a Basic Service Set (BSS) network. When a WLAN is operating in infrastructure mode, each access point and its connected devices are called the Basic Service Set.
The WiFi interface is 802.11i compliant. The 802.11i standard includes improved encryption for networks operating with 802.11 b/g/n clients and incorporates two new encryption key protocols: Temporal Key Integrity Protocol (TKIP) and Advanced Encryption Standard (AES). The WiFi interface employs the AES encryption algorithm using Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP).
The WiFi interface supports WiFi Protected Access (WPA)-Pre-shared key (PSK), WPA2, and WPA/WPA2 Mixed-mode.
This section contains information about:
■WPA
■WPA2
WPA represents the first implementation of the IEEE 802.11i standard for WLANs that provides data protection and access control for wireless LAN systems.
WPA provides support for the TKIP encryption key protocol and PSK for authentication. PSK requires the user to configure a pre-shared key (or passphrase) that can be used as the pairwise master key (PMK) between the clients and the Cisco 1000 Series Connected Grid router.
WPA2 provides full implementation of the IEEE 802.11i standard for WLANs and supports the enhanced AES-CCMP encryption algorithm.
WPA/WPA2 Mixed-mode allows support of WPA/TKIP and WPA2/AES-CCMP clients on a common SSID. The access point advertises the available encryption methods (TKIP, AES-CCMP) on the network, and the WiFi client then selects which security method it wants to employ.
Each time you enter commands in global configuration mode the running configuration file is changed. For these changes to take permanent effect, you must save the running configuration file to the startup configuration file. To save the running configuration to the startup configuration, use the copy running-config startup-config command in user EXEC mode.
Each time you make a change to the WiFi interface configuration of a Cisco CG-OS or Cisco IOS router, you must execute the shutdown and no shutdown commands sequentially in interface configuration mode to complete the change.
■Configuring the WiFi Interface for Cisco CG-OS
■Configuring the WiFi Interface for Cisco IOS
■Configuring the WiFi Interface for Cisco CG-OS
■Creating an SSID for Cisco CG-OS
The service set identifier (SSID) is a unique identifier of the wireless network that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSID. An SSID name is case sensitive and can contain up to 32 alphanumeric characters. Do not include spaces in your SSID name.
You must define an SSID for the WiFi interface to activate the interface within the network.
Note : Only one active SSID can be associated with the interface.
This example shows how to create an SSID on the WiFi interface.
Note : Only one SSID can be applied to the dot11radio 2/1 interface.
Create a service set identifier (SSID) for assignment to the interface and enable the interface. For more information, see Creating an SSID for Cisco CG-OS.
|
|
|
---|---|---|
Assigns the SSID to the interface. Note: A laptop used for remote diagnostics must be a member of this SSID as well. For more information, see the Configuration Requirements for Remote Client Devices (CG-OS). |
||
Prevents SSID from being advertised in the 802.11 beacons. Use ‘no’ with the same command to undo suppressing the SSID. |
||
This example shows how to assign an SSID to the WiFi interface.
Configure the channel on which the WiFi onboard access point communicates. Channel Number Frequencies for the USA lists the channel number frequencies for the United States of America (USA).
Note : Only the 20 MHz channel bandwidth is supported. The 2.4GHz/40MHz mode is not supported.
|
|
---|---|
Create a service set identifier (SSID) for assignment to the interface and enable the interface. For more information, see the Creating an SSID for Cisco CG-OS.
|
|
|
---|---|---|
Defines the frequency or channel index on which the WiFi onboard access point communicates. |
||
This example shows how to configure the channel on which the WiFi onboard access point communicates.
Create a service set identifier (SSID) for assignment to the interface and enable the interface. For more information, see the Creating an SSID for Cisco CG-OS.
|
|
|
---|---|---|
Defines the power value (measured in dBm) of the WiFi interface: value_in_dBm —Any value, 1 to 15. |
||
This example shows how to configure a power value of 15 dBm on the WiFi interface.
■Creating an SSID for Cisco IOS
■Assigning an SSID and IP Address to the WiFi Interface for Cisco IOS
The service set identifier (SSID) is a unique identifier of the wireless network that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSID. An SSID name is case sensitive and can contain up to 32 alphanumeric characters. Do not include spaces in your SSID name.
You must define an SSID for the WiFi interface to activate the interface within the network.
Note : Only one active SSID can be associated with the interface.
This example shows how to create an SSID on the WiFi interface.
Note : Only one active SSID can be associated with the interface.
Create a service set identifier (SSID) for assignment to the interface and enable the interface. For more information, see the Creating an SSID for Cisco IOS.
|
|
|
---|---|---|
Assigns the SSID to the interface. A laptop used for remote diagnostics must be a member of this SSID as well. For more information, see Configuration Requirements for Remote Client Devices (CG-OS). |
||
Enables automatic configuration of IPv6 addresses using stateless autoconfiguration on the interface |
||
Prevents SSID from being advertised in the 802.11 beacons. Use ‘no’ with the same command to undo suppressing the SSID. |
||
Copies the running configuration to the startup configuration. The do keyword allows you to run the command without returning to user EXEC mode. |
This example shows how to assign an SSID to the WiFi interface.
Configure the channel on which the WiFi onboard access point communicates. Channel Number Frequencies for the USA lists the channel number frequencies for the United States of America (USA).
Note : Only the 20 MHz channel bandwidth is supported. The 2.4GHz/40MHz mode is not supported.
|
|
---|---|
Create a service set identifier (SSID) for assignment to the interface and enable the interface. For more information, see the Creating an SSID for Cisco IOS.
|
|
|
---|---|---|
Defines the frequency or channel index on which the WiFi onboard access point communicates. |
||
This example shows how to configure the channel on which the WiFi onboard access point communicates.
The steps described configure the power level for the WiFi interface.
Create a service set identifier (SSID) for assignment to the interface and enable the interface. For more information, see the Creating an SSID for Cisco IOS.
|
|
|
---|---|---|
Defines the power value (measured in dBm) of the WiFi interface: value_in_dBm —Any value, 0 to 15. |
||
This example shows how to configure a power value of 15 dBm on the WiFi interface.
■Displaying Cisco CG-OS Configuration Information
■Displaying Cisco IOS Configuration Information
To display Cisco CG-OS WiFi configuration information, enter any or all of the commands in Cisco CG-OS WiFi show Commands.
To display Cisco IOS WiFi configuration information, enter any or all of the commands in Cisco IOS WiFi show Commands.
To perform diagnostics on the WiFi interface, use the debug wifi [all | error | pss | trace] command in user EXEC command mode.
You can also see the debug wifi details when you enter show log command in user EXEC command mode.
To perform diagnostics on the WiFi interface, use the debug dot11 [all | error | trace] command in user EXEC command mode.
■Example: Configuring a WiFi Interface for WPA2 Authentication (CG-OS)
■Example: Displaying the WiFi Clients Associated with a Router in Access Point Mode (Cisco IOS)
■Example: Displaying Controller Information for the WiFi Interface (Cisco IOS)
■Example: Displaying Status Information for the WiFi Interface (Cisco IOS)
■Example: Displaying WiFi Interface IPv6 Address and Status Information (Cisco IOS)
■Example: Displaying WiFi Interface Status Before and After a WiFi Client Interface Associates With An Access Point (Cisco IOS)
The following example shows how to configure a WiFi interface for WPA2 authentication. The WiFi interface is on a router running the Cisco CG-OS.
The following example shows the WiFi clients associated with the WiFi interface (dot11radio 2/1) of a Cisco IOS router in access point mode. The sample output indicates the presence of a bug because the IP address of the single WiFi client is unknown.
The example displays controller information for the WiFi interface. The sample output is for the WiFi interface (dot11Radio 2/1) of a router running the Cisco IOS operating system.
router# show controller dot11Radio 2/1
The example displays status information for the WiFi interface. The sample output is for the WiFi interface (dot11Radio 1/2) of a router running the Cisco IOS operating system.
router# show interface dot11Radio 2/1
The example displays the IPv6 address and detailed status information concerning the WiFi interface. The sample output is for the WiFi interface (dot11Radio 1/2) of a router running the Cisco IOS operating system.
Before a WiFi interface (dot11radio 2/1) configured as a WiFi client links to an access point with its SSID, the WiFi interface status and protocol are both in a down state. After the WiFi client links to an access point and its acquired IP address, then the WiFi interface (dot11radio 2/1) status and protocol change to an up state. This is demonstrated at the command line interface in this section.
This example shows the status of a WiFi interface configured as a WiFi client before linking to an access point—the status and protocol are both in a down state:
router# show ip interface brief
This example shows the status of a WiFi interface configured as a WiFi client after linking to an access point—the status and protocol are both in an up state:
The show interface dot11radio 2/1 command can be used to show the status of a WiFi interface configured as a WiFi client after linking to an access point as well. The status and protocol are both in an up state in the command output:
To ensure connectivity between the WiFi interface on the Cisco CG-OS router and the wireless client of the remote client device, note the following requirements:
■The WiFi interface for both the Cisco CG-OS router and remote client device must be active.
■The remote client device SSID must match the SSID configured for the WiFi interface.
■The remote client device authentication credentials must match the router’s WiFi interface security credentials, if configured.