Table Of Contents

Numerics - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

Numerics

802.11

subsystem error and event messagesD-3

802.11d6-12

802.11e14-2

802.11g6-20

802.11i6-14

802.1H6-15

802.1x authentication8-2

A

abbreviating commands4-3

access point security settings, matching client devices10-17

accounting

with RADIUS12-12

with TACACS+12-21, 12-26

accounting command7-3, 7-5

Address Resolution Protocol (ARP)6-16

AES-CCMP9-2

Aironet Client Utility (ACU)21-9

Aironet extensions6-9, 6-14

antenna

gainsA-5

selection6-14

antenna command6-14

Apply button3-5

ARP

caching5-21

description1-3

association management error and event messagesD-2

associations, limiting by MAC address15-5

attributes, RADIUS

sent by the access point12-18

vendor-proprietary12-15

vendor-specific12-14

authentication4-9

local mode with AAA5-17

NTP associations5-25

RADIUS

key12-5

login5-8, 12-7

SSID7-2

TACACS+

defined12-21

key12-23

login5-13, 12-24

authentication client command7-3, 7-5

authentication server

configuring access point as local server8-2

described1-3

EAP10-4, 12-3

authentication types

Network-EAP10-3

open10-2

shared key10-3

authenticator8-1

authoritative time source, described5-23

authorization

with RADIUS5-12, 12-11

with TACACS+5-15, 12-21, 12-25

AVVID priority mapping14-11

B

Back button3-5

backoff6-20

backup authenticator, local8-1

bandwidth6-10

banners

configuring

login5-42

message-of-the-day login5-40

default configuration5-40

when displayed5-40

basic settings

checking21-8

beacon dtim-period command6-18

beacon period command6-18

bit-flip attack6-14

blocking communication between clients6-17

bridge-group command6-17

bridge virtual interface (BVI)2-22

broadcast-key command10-15

broadcast key rotation9-1, 9-3

buttons

management pages3-4

web-browser3-2

C

caching MAC authentications10-15

Called-Station-ID

See CSID

Cancel button3-5

carrier busy test6-20

Catalyst 6500 Series11-1

CCKM10-6

authenticated clients10-6

described1-3

CCK modulation6-8

CDP

disabling for routing device16-4

enabling and disabling

on an interface16-4

monitoring16-4

cdp enable command16-4

cdp run command16-3

Cisco Centralized Key Management (CCKM)

See CCKM

Cisco Discovery Protocol (CDP)16-1

Cisco Key Integrity Protocol (CKIP)6-14

Cisco TAC21-1

CiscoWorks 200017-4

clear command4-2

CLI4-1

abbreviating commands4-3

command modes4-2

editing features

enabling and disabling4-6

keystroke editing4-6

wrapped lines4-7

error messages4-4

filtering command output4-8

getting help4-3

history4-4

changing the buffer size4-5

described4-4

disabling4-5

recalling commands4-5

no and default forms of commands4-4

Secure Shell (SSH)4-9

Telnet4-9

terminal emulator settings2-4, 2-6

client ARP caching5-21

client communication, blocking6-17

client power level, limiting6-8

clock

See system clock

command-line interface

See CLI

command modes4-2

commands

abbreviating4-3

accounting7-3, 7-5

antenna6-14

authentication client7-3, 7-5

beacon dtim-period6-18

beacon period6-18

bridge-group6-17

broadcast-key10-15

cdp enable16-4

cdp run16-3

clear4-2

countermeasure tkip hold-time10-17

debug20-2

default form4-4

del21-12

dot11 aaa mac-authen filter-cache10-15

dot11 extension aironet6-15

dot11 holdoff-time10-16

dot11 interface-number carrier busy6-20

dot1x client-timeout10-16

dot1x reauth-period10-16

edit4-6

encapsulation dot1q13-6

encryption9-4

fragment-threshold6-20

guest-mode7-4, 7-5

help4-3

infrastructure-client6-16

infrastructure-ssid7-4, 7-5

interface dot11radio6-2

ip domain-name5-39

ip redirect7-9

no and default4-4

no shutdown4-4

packet retries6-19

payload-encapsulation6-15

permit tcp-port7-9

power client6-9

power local6-7

recall4-5

rts retries6-19

rts threshold6-19

set21-15

set BOOT21-15

setting privilege levels5-6

show4-2

show dot11 associations7-6

show ip interface2-3

slot-time-short6-20

sort4-8

speed6-6

ssid7-3, 7-5, 13-5

switchport protected6-18

terminal history4-5

terminal width4-8

tftp_init21-15

vlan7-4, 7-5, 13-5

world-mode6-12

wpa-psk10-14

commands station role6-4

community strings

configuring17-5

overview17-3

Complementary Code Keying (CCK)

See CCK

configuration files

creating using a text editor19-10

deleting a stored configuration19-18

downloading

preparing19-10, 19-13, 19-16

reasons for19-8

using FTP19-13

using RCP19-16

using TFTP19-11

guidelines for creating and using19-9

invalid combinations when copying19-5

system contact and location information17-9

types and location19-9

uploading

preparing19-10, 19-13, 19-16

reasons for19-8

using FTP19-14

using RCP19-17

using TFTP19-11

connections, secure remote5-20

countermeasure tkip hold-time command10-17

crypto software image5-20

CSID format, selecting12-13

D

Data Beacon Rate6-18

data rate setting6-4

data retries6-19

data volume2-9

daylight saving time5-35

debug command20-2

default commands4-4

default configuration

banners5-40

DNS5-38

NTP5-25

password and privilege level5-2

RADIUS5-8, 12-4

resetting21-9

SNMP17-5

system message logging20-3

system name and prompt5-37

TACACS+5-13, 12-23

default gateway2-9

default SSID2-12

default username2-2

del command21-12

delivery traffic indication message (DTIM)6-18

DHCP server

configuring access point as5-18

receiving IP settings from2-9

directories

changing19-4

creating and removing19-4

displaying the working19-4

disable web-based management3-16

diversity6-13

DNS

default configuration5-38

displaying the configuration5-40

overview5-38

setting up5-39

domain names

DNS5-38

Domain Name System

See DNS

dot11 aaa mac-authen filter-cache command10-15

dot11 extension aironet command6-15

dot11 holdoff-time commands10-16

dot11 interface-number carrier busy command6-20

dot1x client-timeout command10-16

dot1x reauth-period command10-16

downloading

configuration files

preparing19-10, 19-13, 19-16

reasons for19-8

using FTP19-13

using RCP19-16

using TFTP19-11

image files

deleting old image19-22

preparing19-20, 19-23, 19-27

reasons for19-18

using FTP19-24

using RCP19-29

using TFTP19-21

DTIM6-18

duplex, Ethernet port5-16

E

EAP authentication, overview10-3

EAP-FAST8-1, 8-2

EAP-FAST authentication10-17

EAP-MD5 authentication

setting on client and access point10-19

EAP-SIM authentication

setting on client and access point10-20

EAP-TLS authentication

setting on client and access point10-19

edit CLI commands4-6

editing features

enabling and disabling4-6

keystrokes used4-6

wrapped lines4-7

EIRP, maximumA-5, A-6, A-7

enable password5-4

enable secret password5-4

encapsulation dot1q command13-6

encapsulation method6-15

encrypted software image5-20

encryption command9-4

encryption for passwords5-4

error and event messagesD-1

error messages

CLI4-4

during command entry4-4

setting the display destination device20-5

severity levels20-7

system message format20-2

Ethernet indicator21-4

Ethernet speed and duplex settings5-16

Ethertype filter15-1

event log3-5

event messagesD-1

Express Security page2-11, 3-4

Express Setup page3-4

F

fallback role6-3

fast secure roaming11-1

files

copying19-5

deleting19-5

displaying the contents of19-8

tar

creating19-6

displaying the contents of19-6

extracting19-7

image file format19-19

file system

displaying available file systems19-2

displaying file information19-3

local file system names19-2

network file system names19-5

setting the default19-3

filtering

Ethertype filters15-11

IP filters15-8

MAC address filters15-3

show and more command output4-8

filter output (CLI commands)4-8

firmware

upgrade3-1

version3-5

Flash19-1

Flash device, number of19-2

fragmentation threshold6-20

fragment-threshold command6-20

frequenciesA-2, A-3

FTP

accessing MIB filesC-2

configuration files

downloading19-13

overview19-12

preparing the server19-13

uploading19-14

image files

deleting old image19-26

downloading19-24

preparing the server19-23

uploading19-26

G

get-bulk-request operation17-3

get-next-request operation17-3, 17-4

get-request operation17-3, 17-4

get-response operation17-3

global configuration mode4-2

GRE tunnel11-13

group key updates10-14

guest mode7-2

guest-mode command7-4, 7-5

guest SSID7-2

H

help3-14

help, for the command line4-3

history

changing the buffer size4-5

described4-4

disabling4-5

recalling commands4-5

history (CLI)4-4

history table, level and number of syslog messages20-8

Home button3-4

HTTPS3-5

I

IGMP snooping helper14-11

image, operating system21-12

indicators21-2

infrastructure-client command6-16

infrastructure device7-4, 7-5

infrastructure-ssid command7-4, 7-5

Inter-Access Point Protocol error and event messagesD-7

inter-client communication, blocking6-17

interface

CLI4-1

web-browser3-1

interface configuration mode4-2

interface dot11radio command6-2

interfaces3-4

IP address, finding and setting2-21

ip domain-name command5-39

IP filters15-8

ip redirect command7-9

IP redirection7-7, 7-8

IPSU2-21

IP subnet mask2-9

ISO designators for protocolsB-1

J

jitter14-2

K

key features1-2

keystrokes (edit CLI commands)4-6

L

latency14-2

Layer 3 mobility11-4, 11-13

LEAP

described1-2

LEAP authentication

local authentication8-1

setting on client and access point10-17

LED indicators

Ethernet21-4

radio traffic21-4

status21-4

Light Extensible Authentication Protocol

See LEAP

limiting client associations by MAC address15-5

limiting client power level6-8

line configuration mode4-2

load balancing6-14

local authenticator, access point as8-1

login authentication

with RADIUS5-8, 12-7

with TACACS+5-13, 12-24

login banners5-40

log messages

See system message logging

M

MAC address2-22

ACLs, blocking association with15-5

filter15-1, 15-3

troubleshooting21-9

MAC authentication caching10-15

MAC-based authentication8-1, 8-2

management

CLI4-1

map,network3-4

maximum data retries6-19

Maximum RTS Retries6-19

Media Access Control (MAC) address2-3

Message Integrity Check (MIC)1-2, 6-14, 9-1, 21-9

message-of-the-day (MOTD)5-40

messages

to users through banners5-40

MIBs

accessing files with FTPC-2

location of filesC-2

overview17-2

SNMP interaction with17-4

MIC9-1

Microsoft IAS servers10-2

migration mode, WPA10-13

mobility, Layer 311-13

mode (role)6-4

Mode button21-12

modes

global configuration4-2

interface configuration4-2

line configuration4-2

privileged EXEC4-2

user EXEC4-2

monitoring

CDP16-4

move the cursor (CLI)4-6

multicast messages6-16

N

names, VLAN13-6

Network-EAP10-3

network map3-4

Network Time Protocol

See NTP

Network Time Protocol (NTP)5-23

no commands4-4

non-root2-9

no shutdown command4-4

notification3-5

NTP

associations

authenticating5-25

defined5-23

enabling broadcast messages5-28

peer5-27

server5-27

default configuration5-25

displaying the configuration5-32

overview5-23

restricting access

creating an access group5-30

disabling NTP services per interface5-31

source IP address, configuring5-31

stratum5-23

synchronizing devices5-27

time

services5-23

synchronizing5-23

O

OFDM6-8

OK button3-5

optional ARP caching5-22

Orthogonal Frequency Division Multiplexing (OFDM)

See OFDM

P

packet retries command6-19

packet size (fragment)6-20

password reset21-9

passwords

default configuration5-2

encrypting5-4

overview5-2

setting

enable5-3

enable secret5-4

with usernames5-5

payload-encapsulation command6-15

PEAP authentication

setting on client and access point10-19

permit tcp-port command7-9

ports, protected6-17

power client command6-9

power level

maximumA-5

on client devices6-8

radio6-14

power local command6-7

power-save client device6-18

preferential treatment of traffic

See QoS

pre-shared key10-14

preventing unauthorized access5-2

print3-14

prioritization14-2

privileged EXEC mode4-2

privilege levels

exiting5-7

logging into5-7

overview5-2, 5-6

setting a command with5-6

protected ports6-17

protocol filters15-2

Public Secure Packet Forwarding (PSPF)6-17

Q

QoS

configuration guidelines14-5

described1-2

overview14-2

quality of service

See QoS

R

radio

activity6-20

congestion6-10

indicator21-4

interface6-2

management1-3

preamble6-13

radio diagnostic error and event messagesD-8

radio management11-1

RADIUS

attributes

CSID format, selecting12-13

sent by the access point12-18

vendor-proprietary12-15

vendor-specific12-14

WISPr12-16

configuring

access point as local server8-2

accounting12-12

authentication5-8, 12-7

authorization5-12, 12-11

communication, global12-5, 12-13

communication, per-server12-5

multiple UDP ports12-5

default configuration5-8, 12-4

defining AAA server groups5-10, 12-9

displaying the configuration5-13, 12-17

identifying the server12-5

limiting the services to the user5-12, 12-11

local authentication8-2

method list, defined12-4

operation of12-3

overview12-2

SSID7-2

suggested network environments12-2

tracking services accessed by user12-12

RADIUS accounting1-2

range2-9

rate limit, logging20-9

RCP

configuration files

downloading19-16

overview19-15

preparing the server19-16

uploading19-17

image files

deleting old image19-31

downloading19-29

preparing the server19-27

uploading19-31

reauthentication requests10-2

recall commands4-5

redirection, IP7-7

regulatory

domainsA-2, A-3

reloading access point image21-12

Remote Authentication Dial-In User Service

See RADIUS

Remote Copy Protocol

See RCP

repeater1-2

(non-root) device6-3

as a LEAP client18-6

as a WPA client18-7

chain of access points18-2

request to send (RTS)6-19

restricting access

NTP services5-29

overview5-2

passwords and privilege levels5-2

RADIUS5-7, 12-1

TACACS+5-13

RFC

10426-15

1157, SNMPv117-2

1305, NTP5-23

1901, SNMPv2C17-2

1902 to 1907, SNMPv217-2

roaming1-5

fast secure roaming using CCKM11-1

rogue access point detection1-3

role (mode)6-4

role in radio network6-3

root2-9

root device6-3

rotation, broadcast key9-1

rts retries command6-19

RTS threshold6-19

rts threshold command6-19

S

secure remote connections5-20

Secure Shell

See SSH

security3-4

troubleshooting21-9

security features1-2

synchronizing10-17

security settings, Express Security page2-11

self-healing wireless LAN1-3, 11-4

sequence numbers in log messages20-6

service set identifiers (SSIDs)

See SSID

service-type attribute10-2

set BOOT command21-15

set command21-15

set-request operation17-4

severity levels, defining in system messages20-7

shared key10-6

short slot time6-20

show cdp traffic command16-5

show command4-2

show dot11 associations command7-6

show ip interface command2-3

Simple Network Management Protocol

See SNMP

slot-time-short command6-20

SNMP

accessing MIB variables with17-4

agent

described17-3

disabling17-5

community name2-9

community strings

configuring17-5

overview17-3

configuration examples17-9

default configuration17-5

limiting system log messages to NMS20-8

manager functions17-3

MIBs

location ofC-2

overview17-2, 17-4

snmp-server view17-9

status, displaying17-10

system contact and location17-9

trap manager, configuring17-8

traps

described17-3

enabling17-7

overview17-2, 17-4

types of17-7

versions supported17-2

snooping helper, IGMP14-11

software image21-12

upload and download19-1

software images

location in Flash19-19

tar file format, described19-19

software license agreement2-21

software upgrade

error and event messagesD-1

sort (CLI commands)4-8

spaces in an SSID7-6

speed, Ethernet port5-16

speed command6-6

SSH4-9

configuring5-21

crypto software image5-20

described5-20

displaying settings5-21

SSH Communications Security, Ltd.4-9

SSID7-2

default2-12

default (tsunami)21-8

guest mode7-2

multiple SSIDs7-1

support1-2

troubleshooting21-8

using spaces in7-6

VLAN7-2

ssid command7-3, 7-5, 13-5

SSL3-5

standby mode1-2

static WEP

with open authentication, setting on client and access point10-17

with shared key authentication, setting on client and access point10-17

station role command6-4

statistics

CDP16-4

SNMP input and output17-10

status indicators21-4

status page3-4

stratum, NTP5-23

summer time5-35

switchport protected command6-18

syslog

See system message logging

system clock5-23

configuring

daylight saving time5-35

manually5-33

summer time5-35

time zones5-34

displaying the time and date5-33

overview5-23

See also NTP

system management page3-2

system message logging

default configuration20-3

defining error message severity levels20-7

disabling20-4

displaying the configuration20-12

enabling20-4

facility keywords, described20-11

level keywords, described20-8

limiting messages20-8

message format20-2

overview20-2

rate limit20-9

sequence numbers, enabling and disabling20-6

setting the display destination device20-5

timestamps, enabling and disabling20-6

UNIX syslog servers

configuring the daemon20-10

configuring the logging facility20-10

facilities supported20-11

system name

default configuration5-37

manual configuration5-37

See also DNS

system prompt

default setting5-37

T

TAC21-1

TACACS+

accounting, defined12-21

authentication, defined12-21

authorization, defined12-21

configuring

accounting12-26

authentication key12-23

authorization5-15, 12-25

login authentication5-13, 12-24

default configuration5-13, 12-23

described1-2

displaying the configuration5-15, 12-27

identifying the server12-23

limiting the services to the user5-15, 12-25

operation of12-22

overview12-21

tracking services accessed by user12-26

tar files

creating19-6

displaying the contents of19-6

extracting19-7

image file format19-19

Telnet2-23, 4-9

Temporal Key Integrity Protocol (TKIP)9-1

See TKIP

Terminal Access Controller Access Control System Plus

See TACACS+

terminal emulator2-4

terminal history command4-5

terminal width command4-8

TFTP21-15

configuration files

downloading19-11

preparing the server19-10

uploading19-11

image files

deleting19-22

downloading19-21

preparing the server19-20

uploading19-22

password5-4

tftp_init command21-15

TFTP server21-12

throughput2-9

time

See NTP and system clock

timestamps in log messages20-6

time zones5-34

TKIP1-2, 6-14, 9-1, 9-2

traps3-5

configuring managers17-7

defined17-3

enabling17-7

notification types17-7

overview17-2, 17-4

Trivial File Transfer Protocol (TFTP)

See TFTP

troubleshooting21-1

error messages (CLI)4-4

system message logging20-2

with CiscoWorks17-4

U

unauthorized access5-2

Universal Time Coordinated (UTC)5-23

UNIX syslog servers

daemon configuration20-10

facilities supported20-11

message logging configuration20-10

unzip error and event messagesD-3

upgrading software images

See downloading

uploading

configuration files

preparing19-10, 19-13, 19-16

reasons for19-8

using FTP19-14

using RCP19-17

using TFTP19-11

image files

preparing19-20, 19-23, 19-27

reasons for19-18

using FTP19-26

using RCP19-31

using TFTP19-22

user EXEC mode4-2

username, default2-2

username-based authentication5-5

V

VLAN

local authentication8-2

names13-6

SSID1-2, 7-2

vlan command7-4, 7-5, 13-5

voice1-3

W

WDS11-1, 11-7

Web-based interface

common buttons3-4

compatible browsers3-1

web-browser buttons3-2

web-browser interface1-4, 3-1

web site

Cisco Software Center2-21, 21-16

WEP

key example9-5

key hashing1-2

with EAP10-3

WEP key21-9

troubleshooting21-9

Wi-Fi Multimedia14-4

Wi-Fi Protected Access

See WPA

Wi-Fi Protected Access (WPA)1-2, 2-13

wireless domain services (WDS)1-3

Wireless Internet Service Provider (WISP)1-3

Wireless LAN Services Module11-2

wireless repeater1-2

WISPr1-3

WISPr RADIUS attributes12-16

WMM14-4

workgroup bridge6-16

world mode1-2, 6-12, 6-14

world-mode command6-12

WPA10-7

WPA migration mode10-13

wpa-psk command10-14

wraparound (CLI commands)4-7