Aironet 1260 for LWAP?

Is Aironet 1260 good for indoor LWAP or CAPWAP environment? Do we need external antenna for the Aironet 1260 access point when using it indoor?

Is Aironet 1260 good for indoor LWAP or CAPWAP environment?
Yes.
Do we need external antenna for the Aironet 1260 access point when using it indoor?
it depends.
Antenna products for N APs:
http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/at_a_glance_c45-513837.pdf
Antenna Patterns and Their Meaning:
http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/prod_white_paper0900aecd806a1a3e.html

Similar Messages

Make SSID Hidden Aironet 1260

We have three Access Points, two Cisco Aironet 1260 and one 1240AG. Originally, the SSID was hidden on all three AP's and users had to go to Other Networks and type in the SSID and password to access the WAN. About a few months ago, the network started broadcasting to the public. I am trying to make the SSID hidden again, any suggestions? I have tried going to the Security tab, choosing the SSID Manager and setting single guest mode to none but it has not helped. Any suggestions? I have researched this a lot. If you are confused on my situation ask me questions.
Michael

Amjad,
The SSID is based on the company I work for so I think it is safe to rule out other people with the same SSID. We are in a building with a few companies.
I did not get a chance to try your method yet because the AP's are hanging from the ceiling and I think I need to download something to change the CLI. I manage at the AP configs off of their IP addresses all the time.
I got the SSID to remain hidden now which forces me to connect to it through other networks and knowing the SSID in advance. This what I was trying to figure out. Here's what I changed.
On the http AP interface I clicked Security, SSIA Manager, then I went down to Client Authentication Key Management and changed WPA to WPAv2.
I had the encryption set to WPA2 on two of the AP's but the third one is an older model and only can do WPA. Hopefully, I finally fixed this.

AIRONET 1260 with new radius cisco ACS 4.x

Hi, I have a new CISCO AIRONET 1260
I have CISCO ACS 5.1 radius for VPN on ASA and tried to configure an NDG on it for AIRONET 1260 too and worked fine with IEEE 802.1x CISCO EAP-FAST authentication
As I had some trouble to let users to authenticate only on VPN if are VPN users and only on CISCO AIRONET if need only WIFI AIRONET
I tried exception policies rules but something not working. VPN was ok but not WIFI access denied for rule policy access
I decided to install CISCO ACS 4.x on Windows 2003 that is on ACS 5 DVD
I created NDG as done on ACS 5 put a shared secret , put on AIRONET too as done for ACS 5 but I receive an error against ACS 4.x
To troubleshout it I tried
http://www.cisco.com/en/US/partner/tech/tk722/tk720/technologies_configuration_example09186a00807bf3c8.shtml
but not work ! I think to have done all fine owever on ACS 5 it worked in 5 minutes
I searched log inside ACS 4 and found "Invalid message authenticator in EAP request" and I found this:
https://supportforums.cisco.com/docs/DOC-3991
Changed shared secret more times but ever not workign with ACS 4
what's wrong?
I need to have user and password prompt on client trying to authentincate on AIRONET WIFI and I need ACS INTERNAL USER no active directory, no LDAP , no external user database

I have solved

Best way to secure Aironet 1200 for small office

We are getting ready to install 4 aironet 1200 AP's into an office that will only be used by 5 people with T43 Thinkpads (Intel 2200 built-in card).
What is the best method to secure the connection and prevent the outside world from accessing our internal network?
I don't feel WEP/WPA encryption is enough -- Would be interested in using the built in security that comes with the Aironet and not an external security server, yet.
Any info or push in the right direction is greatly appreciated.
Thanks

You could pretty easily use the "local" RADIUS built-in to the AP firmware and implement LEAP or EAP-FAST.
Both are pretty easy to set up, the AP can handle that small load without any real performance issues, and the Intel client software supports it (you'll want to make sure all the client software and drivers are the most recent, there were some issues in the past).
Both LEAP and EAP-FASt will support seamless roaming, You'd set one of the APs up for WDS and the others to point to it.
Admin (add/change/delete users) via the Web GUI is also pretty straight forward.
Good Luck
Scott

Aironet 1231G for home use

Hi all
I've been given an Aironet 1231G that I would like to set up for home use. Has anyone got any example configs for this type of setup that I could take a look at? Nothing too complicated is needed, just something simple and secure.
Thanks
Andy

Since you are new to this, just look at this link. You will need to register, but this will help:
http://downloads.techrepublic.com.com/download.aspx?&scname=Wireless+LAN&docid=277381

Configuring Cisco Aironet 1140 for Radius and setting up a Radius server

guys i need some help setting up my Radius to work with cisco aironet 1140, i am new at this however i was tasked with setting up a Radius server and setting our AP with WPA2- enterprise so users can log into our AP using AD credentials.
When i try to setup on the AP a new SSID i do not see the option for WPA2- enterprise?

Here are other links with examples:
https://supportforums.cisco.com/thread/331581
http://targetcisco.blogspot.com/2011/03/cisco-autonomous-access-point.html
http://downloads.avaya.com/css/P8/documents/100041614
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Setting up Cisco Aironet 1250 for home use

Hey everyone,
I'm rather new to the whole Enterprise Router lines. I've set up countless networks with Linksys routers in the past. However, this Aironet is giving me more trouble than I'd want it to. I was wondering if anyone could help. I've assigned it an IP Address and accessed that In-Browser interface and set up an SSID and activated the two extensions. I've been able to connect to the router with my computer and access the internet without restriction. However, when I attempt to connect a second PC or Laptop to the network, it won't allow network access to the second device. I've been stuck there forever. Is there any specific setup method I need to use to make sure more than one workstation/device? I want to use this router for home use, I often use laptops and move around the house a lot, so the advantage of better connection signal and speed is well worth it. Any help is highly apprieciated. If you need more information, don't hesitate to contact me.

Sorry for my late reply. Here is the config:
It wasn't connected to anything. This was a raw pull from a fresh cold boot.
IOS Bootloader - Starting system.
Xmodem file system is available.
flashfs[0]: 150 files, 7 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31868928
flashfs[0]: Bytes used: 6406144
flashfs[0]: Bytes available: 25462784
flashfs[0]: flashfs fsck took 16 seconds.
Reading cookie from flash parameter block...done.
Base Ethernet MAC address: 54:75:d0:dd:b5:12
Loading "flash:/c1250-k9w7-mx.124-10b.JDA3/c1250-k9w7-mx.124-10b.JDA3"...##################################################################################################################################################################################################################
File "flash:/c1250-k9w7-mx.124-10b.JDA3/c1250-k9w7-mx.124-10b.JDA3" uncompressed and installed, entry point: 0x3000
executing...
              Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Sun 07-Jun-09 03:50 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x01000000
Initializing flashfs...
flashfs[1]: 150 files, 7 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 31868928
flashfs[1]: Bytes used: 6406144
flashfs[1]: Bytes available: 25462784
flashfs[1]: flashfs fsck took 4 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.
Warning: the compile-time code checksum does not appear to be present.
Radio 1 A600 8000 0 0 A8030000 30
Radio 1 A600 8000 0 0 B8030000 13
tx_paks 1293
tx_paks 646
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html you require further assistance please contact us by sending email to
[email protected]. AIR-AP1252AG-A-K9    (PowerPC 8349) processor (revision C0) with 49142K/16384K bytes of memory.
Processor board ID FTX1423902R
PowerPC 8349 CPU at 533Mhz, revision number 0x0031
Last reset from power-on
1 Gigabit Ethernet interface
2 802.11 Radio(s)
If
cisco
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 54:75:D0:DD:B5:12
Part Number                          : 73-10425-06
PCA Assembly Number                  : 800-27630-06
PCA Revision Number                  : B0
PCB Serial Number                    : FOC142025F4
Top Assembly Part Number             : 800-29039-03
Top Assembly Serial Number           : FTX1423902R
Top Revision Number                  : A0
Product/Model Number                 : AIR-AP1252AG-A-K9
Press RETURN to get started!
*Mar 1 00:00:06.211: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar 1 00:00:07.039: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar 1 00:00:07.543: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
*Mar 1 00:00:09.587: %SYS-5-CONFIG_I: Configured from memory by console
*Mar 1 00:00:09.591: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Sun 07-Jun-09 03:50 by prod_rel_team
*Mar 1 00:00:09.591: %SNMP-5-COLDSTART: SNMP agent on host Cisco1250 is undergoing a cold start
*Mar 1 01:37:52.027: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 01:37:52.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 01:37:52.707: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar 1 01:37:53.467: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 01:37:53.467: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Mar 1 01:37:53.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Mar 1 01:37:54.467: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 01:37:54.695: %CDP_PD-4-POWER_OK: Full power - INJECTOR_DETECTED inline power source
*Mar 1 01:37:54.703: %DOT11-4-NO_HT: Interface Dot11Radio1, Mcs rates disabled on vlan 0 due to not using AES encryption or
*Mar 1 01:37:58.303: %DOT11-6-FREQ_USED: Interface Dot11Radio1, frequency 5180 selected
*Mar 1 01:37:58.307: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
*Mar 1 01:37:58.307: %DOT11-4-NO_HT: Interface Dot11Radio0, Mcs rates disabled on vlan 0 due to not using AES encryption or
*Mar 1 01:37:58.311: %DOT11-6-FREQ_SCAN: Interface Dot11Radio0, Scanning frequencies for 13 seconds
*Mar 1 01:37:59.307: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Mar 1 01:38:00.307: %LINK-3-UPDOWN: Interface BVI1, changed state to down
*Mar 1 01:38:02.931: %LINK-3-UPDOWN: Interface BVI1, changed state to up
*Mar 1 01:38:11.919: %DOT11-6-FREQ_USED: Interface Dot11Radio0, frequency 2462 selected
*Mar 1 01:38:11.923: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 01:38:12.923: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
Cisco1250>enable
Password:
Cisco1250#show running-config
Building configuration...
Current configuration : 1717 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname Cisco1250
enable secret 5 $1$jDeQ$cFdx0aHAd8wj8tk6CCmXq/
no aaa new-model
dot11 ssid Home Network
   authentication open
   guest-mode
power inline negotiation prestandard source
username Cisco password 7 05280F1C2243
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption key 1 size 128bit 7 23D0220D02AE7FA723492AA01E34 transmit-key
encryption mode wep mandatory
ssid Home Network
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
encryption key 1 size 128bit 7 0B4935657C801B3620154AB56630 transmit-key
encryption mode wep mandatory
ssid Home Network
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address 192.168.0.1 255.255.255.0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
snmp-server community Community RW
bridge 1 route ip
line con 0
line vty 0 4
login local
end
They way I connect it in the network is as follows:
BrightHouse Networks ISP Modem --> Cisco Aironet 1252 --> Incoming connections from computers and laptops.
Any ideas?

Two TNC connectors on Aironet 1310 for external antennas

Hi All,
I have been checking the "Cisco Systems Aironet 1310 Intallation" manuals, and have noticed that the external antenna model has connectors for two antennas.
My question is if this device could be used as repetitor (logically splitting the signal between the two antennas)?
I will appreciate any comments.
Best Regards,
Igor Sotelo.

Although you can't fit two antenna to service two connections you might be able to get it to work with a single omni on the "relay" station so it can "see" both the remote stations. I've used this setup before and sometimes you can route traffic end to end, sometimes not. A certain solution would be 2 x 1310 at the central point connected with a cross lead. That way you are running two separate bridge connections and everything will work just fine, needs another bridge though : (

Aironet 1260 as bridges

Is it possible to create a wireless site to site link using 1260 access points as bridges (like the 1300 series)?
Also if so, can you use 11n channel bonding on the bridge link?
I need to link 2 buildings together wirelessly approximately 70 metres apart. There is direct line of sight between them.

Are you using autonomous APs? or controller-based APs?
Never tested but I don't think there will be any issue connecting them as a bridge eitherway with or without channel bonding.
It all depends on your antennas gain and type.
If you have directional antennas with LOS cleared it will be very good. It still depends on the antenna's gain however.
You may try them wi h1260 APs. I don't unfortunately have 1260 APs to test with.

DHCP pools for LWAP's with multiple models

I have 2 different AP models (1130's & 1140's) for which I want to create a DHCP pool on a core layer 3 switch with an Option 43 pointing to the Wireless LAN Controller. In conjunction with the Option 43 entry however, I need to specify the AP type as an ASCII string in the Option 60 parameter. Problem is, how can this be done for multiple ASCII strings; ie. multiple AP models? The DHCP pool option 60 entry only allows for one string and you can only enter one option 60 command per DHCP pool. Surely it is common to have more than one AP model and that this can be done without having to resort to multiple DHCP pools (one for every model)?
Can anyone shed some light on this for me please? Would be much apprciated as I've come up blank on CCO documentation!

I usually just stage the AP first to join a WLC and to make sure it works prior to installing it. Pllace it on the same submnet as the management and let it join and then set the primary, secondary and or tertiary. Then you can move it to any vlan you want. If you want to use DHCP Option or DNS, then you should know that if for example it is an RCVK IOS previous to capwap it will only do LWAPP. Once it joins to the WLC in LWAPP it takes a new IOS the unit will do CAPWAP.
As an example 1140 have an RCVK IOS that only run CAPWAP, so it should only do CAPWAP:
CISCO-LWAPP-CONTROLLER and CISCO-CAPWAP-CONTROLLER
Create two A records both pointing to the same controller if you want to use DNS.
DHCP Option 43:
DHCP Option 43 is limited to one access point type per DHCP pool. You must configure a separate DHCP pool for each access point type.
http://www.cisco.com/en/US/docs/wireless/access_point/1140/quick/guide/ap1140getstart.html#wp37440

Ver 7.4 / Do we use the management I.P or Redundant I.P for LWAP?

I have a general question.
I've x-out some numbers for privacy reason.
On 7.3/7.4, I believe they share the same management I.P when SSO is enabled.
With that said, do the AP use that for the WLC or do they point to the Redundant Management I.P and use the Peer Management I.P as their secondary WLC?
Or should their only be one entry on the AP that points to the management I.P?
Hope that makes sense.
For example, our management is X.X.117.4 and our redundant is .5 and peer redundant is .9
How would the AP be setup in this case?
Thanks
(Cisco Controller) >show redundancy summary
Redundancy Mode = SSO ENABLED
     Local State = ACTIVE
      Peer State = STANDBY HOT
            Unit = Primary
         Unit ID = XXXXXXXX
Redundancy State = AP SSO
    Mobility MAC = XXXXXXXX
Average Redundancy Peer    Reachability Latency = 526 usecs
Average Management Gateway Reachability Latency = 5916 usecs
Redundancy Management IP Address................. X.X.117.5
Peer Redundancy Management IP Address............ X.X.117.9
Redundancy Port IP Address....................... 169.254.117.5
Peer Redundancy Port IP Address.................. 169.254.117.9
Peer Service Port IP Address..................... 0.0.0.0

With AP SSO, you only need the management address of the WLC configured on the AP. If the primary fails, the secondary takes up that address.
Think of it like HSRP, you use the standby address for your gw, not the individual one for the switch.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Aironet 1260 and external Antenna

I know you can put a minimum of 3 AIR-ANT-2422 antenna on the 1261 AP but my question is, can you mix and match antenna?
Currently there is an AIR-ANT-24120 used on an older 1200 model. Upgrading to a 1261. The 24120 is 12db and 2422 is 2.4db.
Environment is Manufacturing floor with 30' ceilings, worried about coverage. Can the 24120 work on the 1261 or am I stuck with the 2422s?
Thanks

You can't mix-and-match these two. AIR-ANT-24120 is a 12 dBi antenna. The 1260 will not support anything higher than 6 dBi because this model simply doesn't have enough power to do so.
The 1260, 3500e and 3600e doesn't have enough power because in the past people kept complaining that the 1250 needed 20.0w PoE power. Now the the 1250 doesn't have any limitation about the maximum (maybe it does but I haven't seen or heard of it) gain support. So Cisco cranked down the power requirement of the new WAPs and balanced it to the antenna gain.

Aironet 1260 AP

I wanted to ask if I was looking to deploy a 1260 access point, would I need to replace the 4400 WLC with a 5500 or will the access point work with a 4400?

Hi Marcus,
The AP 1260 is supported only after WLC software version 7.0 and it is supported on 4400 as well but we need t orun 7.0 and above software release..
http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps10980/data_sheet_c78-593663.html
Regards
Surendra

Best way for LWAPs to learn changed WLC IP address?

Hello!
I'm implementing subnets at a customer's network, and one of these changes is to give a unique subnet to the WLAN users.
Since the APs store the WLC's IP address in NVRAM, I'm wondering what the best way is to get them to know its changed IP addres. (I see that I can give the APs themselves new static IPs to use from within the WLC, but I don't see a clear way to tell them a new IP to contact for their controller. After a reboot, they still are trying to associate to the original IP address of the WLC.)
I know we can go onto the console of each one and change it that way, but since these are mounted high up, that is not a particularly desirable solution... ;^)
Thanks for any suggestions on the best way to go about making this change!
Deb

If you have two wlc in redundancy configuration, you could always change one wlc address and make changes to the mobility groups and then move AP's over to the new ip wlc. Then change the other one and modify the wlc address in the mobility group again.
If you have one wlc and you don't want to use option 43 or DNS, you can always set the AP's high availability primary wlc info reflecting the new IP address. Even though you haven't changed the wlc management up yet, the AP's are still joined and known of that ip. So when you change the wlc IP address, the APs will already know the new IP address. I have just done this about a month ago with around 300+ AP's with no issues. You can use WCS/NCS or Prime if you have it, I just script the commands and paste it I tot he wlc CLI to make all the changes.
Just another option.
Sent from Cisco Technical Support iPhone App

Configuration of cisco aironet 1260 series access point..??

i hv a cisco aironet 1262n access point and a normal router(without wlan) with a broadband connection
now i want to use my access point as a wifi hotspot
but i am not able to access it, through web browser
i dont know how i connect wires so that i am able to access " AP access page" and also i forgot its IP address too so can u pls tell me how do i reset it to default

Your AP is most likely loaded with a controller-based IOS. You can easily convert this to autonomous IOS.
Read this: Using a TFTP Server to Return to a Previous Release

Aironet 1260 for LWAP?

Similar Messages

Maybe you are looking for