User Guide
Table Of Contents
- Cisco Wireless ISR and HWIC Access Point Configuration Guide
- Contents
- Preface
- Overview
- Configuring Radio Settings
- Enabling the Radio Interface
- Roles in Radio Network
- Configuring Network or Fallback Role
- Universal Client Mode
- Configuring Universal Client Mode
- Configuring Radio Data Rates
- Configuring Radio Transmit Power
- Configuring Radio Channel Settings
- Enabling and Disabling World Mode
- Enabling and Disabling Short Radio Preambles
- Configuring Transmit and Receive Antennas
- Disabling and Enabling Access Point Extensions
- Configuring the Ethernet Encapsulation Transformation Method
- Enabling and Disabling Reliable Multicast to Workgroup Bridges
- Enabling and Disabling Public Secure Packet Forwarding
- Configuring Beacon Period and DTIM
- Configuring RTS Threshold and Retries
- Configuring Maximum Data Retries
- Configuring Fragmentation Threshold
- Enabling Short Slot Time for 802.11g Radios
- Performing a Carrier Busy Test
- Configuring Multiple SSIDs
- Configuring an Access Point as a Local Authenticator
- Understand Local Authentication
- Configure a Local Authenticator
- Guidelines for Local Authenticators
- Configuration Overview
- Configuring the Local Authenticator Access Point
- Configuring Other Access Points to Use the Local Authenticator
- Configuring EAP-FAST Settings
- Limiting the Local Authenticator to One Authentication Type
- Unblocking Locked Usernames
- Viewing Local Authenticator Statistics
- Using Debug Messages
- Configuring Encryption Types
- Configuring Authentication Types
- Configuring RADIUS Servers
- Configuring and Enabling RADIUS
- Understanding RADIUS
- RADIUS Operation
- Configuring RADIUS
- Default RADIUS Configuration
- Identifying the RADIUS Server Host
- Configuring RADIUS Login Authentication
- Defining AAA Server Groups
- Configuring RADIUS Authorization for User Privileged Access and Network Services
- Starting RADIUS Accounting
- Selecting the CSID Format
- Configuring Settings for All RADIUS Servers
- Configuring the Access Point to Use Vendor-Specific RADIUS Attributes
- Configuring the Access Point for Vendor-Proprietary RADIUS Server Communication
- Configuring WISPr RADIUS Attributes
- Displaying the RADIUS Configuration
- RADIUS Attributes Sent by the Access Point
- Configuring and Enabling RADIUS
- Configuring VLANs
- Configuring QoS
- Channel Settings
- Protocol Filters
- Supported MIBs
- Error and Event Messages
- Glossary
- Index
5-10
Cisco Wireless ISR and HWIC Access Point Configuration Guide
OL-6415-04
Chapter 5 Configuring Encryption Types
Configure Encryption Types
Debugging
To determine if the universal client has associated to the access point, the user can issue the 'show dot11
association all' command for a detailed output of which access point it was associating to and how it has
associated to the access point.
The "show dot11 association" command will have the following output:
c2801_uc#
c2801_uc#sh dot11 ass all
Address : 0015.2b06.17d0 Name : ap
IP Address : 200.1.1.1 Interface : Dot11Radio0/1/0
Device : ap1200-Parent Software Version : 12.3
CCX Version : NONE
State : Assoc Parent : Our Parent
SSID : test10 VLAN : 0
Hops to Infra : 0 Association Id : 1
Tunnel Address : 0.0.0.0
Key Mgmt type : NONE Encryption : Off
Current Rate : 54.0 Capability : WMM ShortHdr ShortSlot
Supported Rates : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Signal Strength : -14 dBm Connected for : 236 seconds
Signal Quality : N/A Activity Timeout : 15 seconds
Power-save : Off Last Activity : 0 seconds ago
Packets Input : 2449 Packets Output : 15
Bytes Input : 451711 Bytes Output : 4664
Duplicates Rcvd : 3 Data Retries : 1
Decrypt Failed : 0 RTS Retries : 0
MIC Failed : 0 MIC Missing : 0
Packets Redirected: 0 Redirect Filtered: 0
c2801_uc#
Caveats
When the Cisco dot11radio is in the universal client mode and associates to a 3rd party access point,
there are some additional caveats. The first is on the "show dot11 association" output. The "Device" area
shows a result of "unknown" when associated to a 3rd party access point (non-Cisco). In the example
below, a Cisco 876W universal client is associated to a Symbol 4131 Access Point. The "Software
Ver si on " a nd "N am e" f i el ds al so re su lt in "N ONE ". This is because the Cisco Aironet messages between
Cisco devices carry this information and not between 3rd party and Cisco devices.
Example:
c876#sh dot11 assoc
802.11 Client Stations on Dot11Radio0:
SSID [symbol] :
MAC Address IP address Device Name Parent State
00a0.f8dc.133a 192.168.1.4 unknown - - Assoc
c876#sh dot11 ass all
Address : 00a0.f8dc.133a Name : NONE
IP Address : 192.168.1.4 Interface : Dot11Radio0
Device : unknown Software Version : NONE
CCX Version : NONE
State : Assoc Parent : Our Parent










