Configuring the Bridge for the First Time
This chapter describes how to configure basic settings on your bridge for the first time. The contents of this chapter are similar to the instructions in the quick start guide that shipped with your bridge. You can configure all the settings described in this chapter using the command-line interface (CLI), but it might be simplest to browse to the bridge's web-browser interface to complete the initial configuration and then use the CLI to enter additional settings for a more detailed configuration.
This chapter contains these sections:
•Before You Start
•Obtaining and Assigning an IP Address
•Connecting to the Bridge Locally
•Assigning Basic Settings
•What To Do Next
•Using the IP Setup Utility
•Assigning an IP Address Using the CLI
•Using a Telnet Session to Access the CLI
Before You Start
Before you install the bridge, make sure you are using a computer connected to the same network as the bridge, and obtain the following information:
•From your network system administrator:
–A system name
–The case-sensitive wireless service set identifier (SSID) for your radio network
–If not connected to a DHCP server, a unique IP address for your bridge (such as 172.17.255.115)
–If the bridge is not on the same subnet as your PC, a default gateway address and subnet mask
–A Simple Network Management Protocol (SNMP) community name and the SNMP file attribute (if SNMP is in use)
•If you use IPSU to find or assign the bridge IP address, the MAC address from the label on the bottom of the bridge (such as 00164625854c)
Resetting the Bridge to Default Settings
If you need to start over during the initial setup process, follow these steps to reset the bridge to factory default settings using the power injector's Mode button:
Step 1 Disconnect the power jack from the power injector.
Step 2 Press and hold the power injector's MODE button while you reconnect the power jack.
Step 3 Hold the MODE button until the Status LED turns amber (approximately 1 to 3 seconds) and wait until the bridge boots up (Status LED turns green). All bridge settings return to factory defaults.
You can also use the web-browser interface to reset the bridge to defaults. Follow these steps to return to default settings using the web-browser interface:
Step 1 Open your Internet browser. You must use Microsoft Internet Explorer (version 5.x or later) or Netscape Navigator (version 4.x).
Step 2 Enter the bridge's IP address in the browser address line and press Enter. An Enter Network Password window appears.
Step 3 Enter your username in the User Name field. The default username is Cisco.
Step 4 Enter the bridge password in the Password field and press Enter. The default password is Cisco. The Summary Status page appears.
Step 5 Click System Software and the System Software screen appears.
Step 6 Click System Configuration and the System Configuration screen appears.
Step 7 Click Default.
Note If the bridge is configured with a static IP address, the IP address is not changed.
Obtaining and Assigning an IP Address
To browse to the bridge's Express Setup page, you must either obtain or assign the bridge's IP address using one of the following methods:
•Use default address 10.0.0.1 when you connect to the bridge locally. For detailed instructions, see the "Connecting to the Bridge Locally" section.
•Use a DHCP server (if available) to automatically assign an IP address. You can find the DHCP-assigned IP address using one of the following methods:
–Provide your organization's network administrator with your bridge's Media Access Control (MAC) address. Your network administrator will query the DHCP server using the MAC address to identify the IP address. The bridge's MAC address is on label attached to the bottom of the bridge.
–Use the Cisco IP Setup Utility (IPSU) to identify the assigned address. You can also use IPSU to assign an IP address to the bridge if it did not receive an IP address from the DHCP server. IPSU runs on most Microsoft Windows operating systems: Windows 9x, 2000, Me, NT, and XP.
You can download IPSU from the Software Center on Cisco.com. For additional information refer to the "Obtaining and Installing IPSU" section.
Connecting to the Bridge Locally
If you need to configure the bridge locally (without connecting the bridge's power injector to a wired LAN), you can connect a PC to the power injector's Ethernet port using a Category 5 Ethernet cable. You can use a local connection to the Ethernet port much as you would use a serial port connection.
Note You do not need a special crossover cable to connect your PC to the bridge's power injector; you can use either a straight-through cable or a crossover cable.
If the bridge is configured with default values and not connected to a DHCP server or cannot obtain an IP address, it defaults to IP address 10.0.0.1 and becomes a mini-DHCP server. In that capacity, the bridge provides up to twenty IP addresses between 10.0.0.11 and 10.0.0.30 to an Ethernet-capable PC connected to the power injector's Ethernet port.
The mini-DHCP server feature is disabled automatically when you assign a static IP address to the bridge.
When a bridge with default settings is connected on a wired LAN and does not receive an IP address from a DHCP server, the bridge provides an IP address to any DHCP requests it receives.
Follow these steps to connect to the bridge locally:
Step 1 Make sure that the PC you intend to use is configured to obtain an IP address automatically, or manually assign it an IP address from 10.0.0.31 to 10.0.0.40. Connect your PC to the power injector using a Category 5 Ethernet cable. You can use either a crossover cable or a straight-through cable.
Note When you connect your PC to the bridge's power injector or reconnect your PC to the wired LAN, you might need to release and renew the IP address on the PC. On most PCs, you can perform a release and renew by rebooting your PC or by entering ipconfig /release and ipconfig /renew commands in a command prompt window. Consult your PC operating instructions for detailed instructions.
Step 2 Power up the power injector.
Step 3 Follow the steps in the "Assigning Basic Settings" section. If you make a mistake and need to start over, follow the steps in the "Resetting the Bridge to Default Settings" section.
Step 4 After configuring the bridge, remove the Ethernet cable from your PC and connect the power injector to your wired LAN.
Assigning Basic Settings
After you determine or assign the bridge's IP address, you can browse to the bridge's Express Setup page and perform an initial configuration. Follow these steps:
Step 1 Open your Internet browser. You must use Microsoft Internet Explorer (version 5.x or later) or Netscape Navigator (version 4.x).
Step 2 Enter the bridge's IP address in the browser address line and press Enter. An Enter Network Password screen appears.
Step 3 Press Tab to bypass the Username field and advance to the Password field.
Step 4 Enter the case-sensitive password Cisco and press Enter. The Summary Status page appears. Figure 5-1 shows the Summary Status page.
Figure 5-1 Summary Status Page
Step 5 Click Express Setup. The Express Setup screen appears. Figure 5-2 shows the Express Setup page.
Figure 5-2 Express Setup Page
Step 6 Enter the configuration settings you obtained from your system administrator. The configurable settings include:
•System Name—The system name, while not an essential setting, helps identify the bridge on your network. The system name appears in the titles of the management system pages.
•Configuration Server Protocol—Click on the button that matches the network's method of IP address assignment.
–DHCP—IP addresses are automatically assigned by your network's DHCP server.
Note When DHCP is enabled, the IP Address, Subnet Mask, and Default Gateway fields indicate Negotiated by DHCP
–Static IP—The bridge uses a static IP address that you enter in the IP address field.
•IP Address—Use this setting to assign or change the bridge's IP address. If DHCP is enabled for your network, leave this field blank.
Note If the bridge's IP address changes while you are configuring the bridge using the web-browser interface or a Telnet session over the wired LAN, you lose your connection to the bridge. If you lose your connection, reconnect to the bridge using its new IP address. Follow the steps in the "Resetting the Bridge to Default Settings" section if you need to start over.
•IP Subnet Mask—Enter the IP subnet mask provided by your network administrator so the IP address can be recognized on the LAN. If DHCP is enabled, leave this field blank.
•Default Gateway—Enter the default gateway IP address provided by your network administrator. If DHCP is enabled, leave this field blank.
•SNMP Community—If your network is using SNMP, enter the SNMP Community name provided by your network administrator and select the attributes of the SNMP data (also provided by your network administrator).
–Read-Only—indicates the bridge allows only SNMP read accesses. Using this option, an SNMP user cannot change bridge configuration settings.
–Read-Write—indicates the bridge allows SNMP read and write accesses. This setting allows an SNMP user to change the bridge configuration.
•Radio Service Set ID (SSID)—Enter the case-sensitive SSID (32 alphanumeric characters maximum) provided by your network administrator. The SSID is a unique identifier that remote bridges use to associate with your bridge.
•Broadcast SSID in Beacon—Use this setting to allow devices that do not specify an SSID to associate with the bridge.
–Yes—This is the default setting; it allows a remote bridge that does not specify an SSID to associate with the bridge.
–No—Remote bridges must specify an SSID to associate with the bridge. With No selected, the SSID used by the remote bridge must match exactly the bridge's SSID.
•Role in Radio Network—Click on the check box and button that describes the role of the bridge on your network.
–Install Mode—Activates the bridge install and alignment mode. Specifies that the bridge automatically determines the network role. If the bridge is able to associate to another root bridge within 60 seconds, the bridge assumes a non-root bridge role. If the bridge is unable to associate with another root bridge within 60 seconds, the bridge assumes a root bridge role.
You can also pre-configure the bridge into root or non-root modes and avoid the 60 seconds automatic detection phase.
–Root—Specifies that the bridge connects directly to the main Ethernet LAN network and accepts associations from other bridges.
–Non-root—Specifies that the bridge connects to a remote LAN network and must associate with the root bridge using the wireless interface.
Note When initially powered up, the bridge is configured in Install mode with automatic detection activated.
•Optimize Radio Network for—Use this setting to select either preconfigured settings for the bridge radio or customized settings for the bridge radio.
–Throughput—Maximizes the data volume handled by the bridge but might reduce its range.
–Range—Maximizes the bridge's range but might reduce throughput.
–Default—The bridge retains default radio settings that are designed to provide good range and throughput for most bridges.
–Custom—The bridge uses settings you enter on the Network Interfaces: Radio-802.11a Settings page. Clicking Custom takes you to the Network Interfaces: Radio-802.11a Settings page.
Step 7 Click Apply to save your settings. If you changed the IP address, you lose your connection to the bridge. Browse to the new IP address to reconnect to the bridge.
Note You can restore the bridge to its factory defaults by unplugging the power injector's power jack and plugging it back in while holding down the Mode button for a few seconds, or until the Status LED turns amber.
Default Settings on the Express Setup Page
Table 5-1 lists the default settings for the settings on the Express Setup page.
Table 5-1 Default Settings on the Express Setup Page
Configuration Server Protocol
Assigned by DHCP (default setting); if DHCP is disabled, the default setting is 10.0.0.1
IP Subnet Mask
Assigned by DHCP (default setting); if DHCP is disabled, the default setting is 255.255.255.224
Assigned by DHCP (default setting); if DHCP is disabled, the default setting is 0.0.0.0
autoinstall1 or tsunami2
Broadcast SSID in Beacon
Role in Radio Network
Optimize Radio Network for
What To Do Next
After your bridge has basic settings, you need to complete your bridge's configuration. You might need to adjust the output power level and other network and security settings.
Output Power Level
Your bridge's output power level might require adjustment under the following conditions:
•The bridge's output power level must be reduced when using an external dish antenna or when using the integrated antenna in a multipoint configuration (refer to "Channels and Maximum Power Levels" section on page C-1).
•When bridges are installed less than 328 ft (100 m) apart, you should reduce their output power to avoid overloading the bridge's receivers.
To configure your bridge's output power level, refer to the Cisco Aironet 1400 Series Wireless Bridge Software Configuration Guide.
Protecting Your Wireless LAN
To prevent unauthorized access to your network, you must configure security settings. Because the bridge is a radio device, the bridge communicates beyond the physical boundaries of your building. Refer to the Cisco Aironet 1400 Series Wireless Bridge Software Configuration Guide to configure security features to protect your network from intruders:
•Unique SSIDs that are not broadcast in the bridge beacon
•WEP and additional WEP features, such as TKIP and broadcast key rotation
•Dynamic WEP and EAP authentication
Using the IP Setup Utility
IPSU enables you to find the bridge's IP address when it has been assigned by a DHCP server. You can also use IPSU to set the bridge's IP address and SSID if they have not been changed from the default settings.
Note IPSU can be used only on the following operating systems: Windows 95, 98, NT, 2000, ME, or XP.
The sections below explain how to install the utility, how to use it to find the bridge's IP address, and how to use it to set the IP address and the SSID.
Obtaining and Installing IPSU
IPSU is available on the Cisco web site. Follow these steps to obtain and install IPSU:
Step 1 Use your web browser to go to the Cisco Software Center at the following URL:
Step 2 Select Option #1: Aironet Wireless Software Selector.
Step 3 For the Product Type, select Wireless Bridge and click Submit.
Step 4 Select 1400 Series for the model number and click Submit.
Step 5 Select Current Release (Recommended) and click Submit.
Step 6 Under Utilities, select IPSUvxxxxxx.exe.
Step 7 On the Encryption Authorization Form, enter the requested information, read the encryption information, and check the boxes that apply. Click Submit.
Step 8 Read and accept the terms and conditions of the Software License Agreement.
Step 9 Select the IPSU file again to download it.
Step 10 Save the file to a temporary directory on your hard drive and then exit the Internet browser.
Step 11 Double-click IPSUvxxxxxx.exe in the temporary directory to expand the file.
Step 12 Double-click Setup.exe and follow the steps provided by the installation wizard to install IPSU.
The IPSU icon appears on your computer desktop.
Using IPSU to Find the Bridge's IP Address
If your bridge receives an IP address from a DHCP server, you can use IPSU to find its IP address. Because IPSU sends a reverse-ARP request based on the bridge MAC address, you must run IPSU from a computer on the same subnet as the bridge. Follow these steps to find the bridge's IP address:
Step 1 Double-click the IPSU icon on your computer desktop to start the utility. The IPSU screen appears (see Figure 5-3).
Figure 5-3 IPSU Get IP Address Screen
Step 2 When the utility window opens, make sure the Get IP address radio button in the Function box is selected.
Step 3 Enter the bridge's MAC address in the Device MAC ID field. The bridge's MAC address is printed on the label on the bottom of the unit. It should contain six pairs of hexadecimal digits. Your bridge's MAC address might look like the following example:
Note The MAC address field is not case sensitive.
Step 4 Click Get IP Address.
Step 5 When the bridge's IP address appears in the IP Address field, write it down.
If IPSU reports that the IP address is 10.0.0.1, the default IP address, the bridge did not receive a DHCP-assigned IP address. To change the bridge IP address from the default value using IPSU, refer to the "Using IPSU to Set the Bridge's IP Address and SSID" section.
Using IPSU to Set the Bridge's IP Address and SSID
You can use IPSU to change the default IP address (10.0.0.1) of the bridge. You can also set the bridge's SSID at the same time.
Note The computer you use to assign an IP address to the bridge must have an IP address in the same subnet as the bridge (10.0.0.x).
Note IPSU can change the bridge's IP address and SSID only from their default settings. After the IP address and SSID are changed, IPSU cannot change them again.
Follow these steps to assign an IP address and an SSID to the bridge:
Step 1 Double-click the IPSU icon on your computer desktop to start the utility.
Step 2 Click the Set Parameters radio button in the Function box (see Figure 5-4).
Figure 5-4 IPSU Set Parameters Screen
Step 3 Enter the bridge's MAC address in the Device MAC ID field. The bridge's MAC address is printed on the label on the bottom of the unit. It should contain six pairs of hexadecimal digits. Your bridge's MAC address might look like this example:
Note The MAC address field is not case sensitive.
Step 4 Enter the IP address you want to assign to the bridge in the IP Address field.
Step 5 Enter the SSID you want to assign to the bridge in the SSID field.
Note You cannot set the SSID without also setting the IP address. However, you can set the IP address without setting the SSID.
Step 6 Click Set Parameters to change the bridge's IP address and SSID settings.
Step 7 Click Exit to exit IPSU.
Assigning an IP Address Using the CLI
When you connect the bridge to the wired LAN, the bridge links to the network using a bridge virtual interface (BVI) that it creates automatically. Instead of tracking separate IP addresses for the bridge's Ethernet and radio ports, the network uses the BVI.
When you assign an IP address to the bridge using the CLI, you must assign the address to the BVI. Beginning in privileged EXEC mode, follow these steps to assign an IP address to the bridge's BVI:
Enter global configuration mode.
Enter interface configuration mode for the BVI.
ip address address
Assign an IP address and address mask to the BVI. This step automatically saves the running configuration to the startup configuration.
Note You lose your connection to the bridge when you assign a new IP address to the BVI. If you need to continue configuring the bridge, use the new IP address to open another Telnet session to the bridge.
Using a Telnet Session to Access the CLI
Follow these steps to access the CLI using a Telnet session. These steps are for a PC running Microsoft Windows with a Telnet terminal application. Check your PC operating instructions for detailed instructions for your operating system.
Step 1 Select Start > Programs > Accessories > Telnet.
If Telnet is not listed in your Accessories menu, select Start > Run, type Telnet in the entry field, and press Enter.
Step 2 When the Telnet window appears, click Connect and select Remote System.
Note In Windows 2000, the Telnet window does not contain drop-down menus. To start the Telnet session in Windows 2000, type open followed by the bridge's IP address.
Step 3 In the Host Name field, type the bridge's IP address and click Connect.