Idle Users on Autonomous Access Points

Is there a way to set an idle timeout value on Autonomous Access Points? I have been researching and I see it is possible to do this on a WLC using Lightweights but the only timeouts I can find regarding Autonomous are Session/Holdoff and Re-authentication timeouts.
I would like to set an idle timeout so that only inactive clients will be disassociated however if I set a Re-authentication timeout for say 15 minutes, then someone who is genuinely using the wireless network for that period of time or longer would have to re-authentication also - which is something I would like to avoid.
Thanks.

timeout settings in Autonomous AP
https://supportforums.cisco.com/discussion/12302606/how-configure-session-time-out-cisco-autonomous-ap

Similar Messages

Convertion from Lightweight to Autonomous access points

Is it possible to convert AIR-LAP1121G-E-K9 Lightweight access point to autonomous access point.

Hi tm,
You can convert AIR-LAP1121G-K-E9 to autonamus access point,pls do follow the procedur
Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
Step 3 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, and c1240-k9w7-tar.default for a 1240 series access point.
Step 4
Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
Step 5
Disconnect power from the access point.
Step 6
Press and hold MODE while you reconnect power to the access point.
Step 7
Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
Step 8
Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
Step 9
After the access point reboots, reconfigure it using the GUI or the CLI.
Thankx&Regds
Saji k.s

Types of Autonomous Access Point in the Cisco Market.

Hi All,
I am quite new to the wireless technologies. I need some help in understanding the basic models of Cisco wireless Hardware available in the market (Enterprise Level).
From my initial studies in past 24 hours what i understand is that Autonomous AP are the wireless AP which does not require Controllers. they needs to be configured on their on. So far i could find Cisco Aironet C1130 AG models which can be used as Autonomous Access Point.
Can anyone suggest any other Cisco AP which can be used as Autonomous Access Point?
Can 800 Series wireless routers be used as Autonomous Access Point?
Do we have any ISR Modules which can be inserted on a router to have a Autonomous Access Point?
Thanks.

I have short listed the routers in 800 series: 891W, 892W, 892F-W, C887VA-V-W, 861WDoes the command you have mentioned make these routers as Autonomous?
Of the 800 series (I have no knowledge about the 1900W), there are only five sub-models that have built-in wireless.
850W & 870W both have autonomous-only AP. These two models are already end-of-sale. So we scratch those two out of your list.
860W, 880W and 890W both have builti-in AP. The APs can operate EITHER in autonomous or controller-based. You can easily convert the AP from either controller-based to autonomous (and vice versa) by using the router command I've posted in my previous response.
A simple guide when dealing with the 800-series router. Notice that we end our models with a "0"? This basically is the sub-model. The one's that you've listed ends with different digit, like a 1, 2, 7. This is the "flavours". 7, for example. are xDSL WAN interface. If it ends in a 1, the WAN interface is Fast/GigabitEthernet. If I remembered correctly, the 2 has a fibre optic port as a WAN interface. The 887VA means it's a xDSL with Annex "M", I think, and it's geared up for voice.
It would be great if you could point out some models or PID of AP which will work in ISR G2 2900 3900 routers.
Go here. I'd recommend the 2600 access point. There are two sub-models: one with internal antenna (ends with an "I") and one with an external antenna (ends wth an "E"). If you want the "E", be aware that you need to purchase the appropriate antennas separately. If the APs are to be used indoors, use the "I".
Go through this other document: Wireless LAN Compliance Status
Make sure you get the appropriate AP with the correct regulatory domain of the country where the AP is going to be installed. For example, if the AP will be installed in USA, then get the one with the regulatory domain of "SAP2602I-A-K9" where "-A" is the regulatory domain of the USA.

Logging devices connected to autonomous access points

Is there a way to log the devices that connect to a particular SSID of an autonomous access point? If yes, will you please show me a configuration example that will allow me to send that data to a logging server? If possible I will need to do this on 1250, 1240 and 1140 series access points.
Thanks!

I suppose this all depends on "what" excatly you are wanting to log. I haven't tried this, but you should be able to send SNMP traps to a remote SNMP receiver (client associations or failures, interfaces status, etc). Take a look at the AP IOS Configuration Guide, see what you think, and whether or not the SNMP traps you can send are of value to you. I have anchored this to the Configuring System Message Logging section: http://www.cisco.com/en/US/docs/wireless/access_point/12.4.25d.JA/Configuration/guide/scg12.4.25d.JA-chap21-msg-logging.html#wp1002608
If you are wanting to capture more granular information, such as session lengths, data traffic, internet usage, etc; for monitoring or reporting, that would probably require an appliance of a higher level.

Chromecast with Autonomous Access Points

I have a client that has a Chromecast, with a 1010 and a 1130 Autonomous access points. I can not get the Chromecast to work. Can someone tell me how to enable mDNS, or Multicast on these access points?

Hi Abhishek,
On which software code of Autonomous AP, you can run above command ?
We prefer you to check these commands & make sure they works in the products mentioned in this thread before responding.
Otherwise your/Cisco credibility lost based on the responses you make, if they are not related to the question asked.
As per below, this command is applicable for IOS based controllers & not applicable to Autonomous AP.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/5700/software/release/ios_xe_33/service_discovery_gateway_DG/b_service_discovery_gateway_DG/b_service_discovery_gateway_DG_chapter_010.html
HTH
Rasika

Cisco autonomous access points and WCS

Hi, I'm trying to add my autonomous access points to WCS which I have done but I'm not getting any performance data or errors etc.
Does anyone know if WCS support autonomous access points or do I have to use WLSE to get this info
Thanks

Greetings the WLSE will be needed to manage autonomous access points. The WCS application is geared towards LWAPP and Controller based implementations.
For a comparison please see the following document.
http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html#http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html?linkpos=4#number_4
Regards

Migration from autonomous access point mode to lightweight mode on 1530

1500 series is not mentioned on:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html
Can it actually be upgraded just by changing IOS from APto CAP?

The 1530 should have the image k9w8 alreadyin flash:
Autonomous Mode Configuration
The 1530 Series allows the Unified (controller-based) and Autonomous mode software to be loaded at the factory on the same hardware part number. This eliminates the need for separate part numbers for controller-based units and autonomous mode units.
At boot-up, the default mode is controller-based. The 1530 will power up and begin searching for a controller. Once it joins the controller, it will download the active Unified image from the controller. This is the same operation as other Cisco controller-based APs.
For Autonomous mode, the user should take the following steps:
Step 1 Power the AP and connect to the console.
Step 2 From the Command Line, enter:
AP # capwap ap autonomous (# means privileged EXEC mode)
Step 3 The system will respond with "Convert to Autonomous image. Proceed? (yes/[No]):"
Step 4 Type "yes" to confirm.
Step 5 The AP will then re-boot and load the Autonomous image. The unified image is erased.
Step 6 Once the 1530 has booted in autonomous mode, configuration of the AP can done by following the procedure outlined here:
http://www.cisco.com/en/US/partner/docs/wireless/access_point/12.4_10b_JA/configuration/guide/scg12410b.html
You can probably issue a dir or show flash: and then if the image is there, you can boot to it.
Example:
config t
boot system flash:/ap3g2-k9w8-mx.v152_4_jb/ap3g2-k9w8-mx.v152_4_jb
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****

Autonomous access point IP redirection

Hi!
I have a captive portal and autonoumous AP and I need to redirect tthe traffic of one SSID to this portal.
I'm using ip redirection but it doesn't work. I need to redirect dns and I configured an acl.
This is my configuration:
ip access-list extended redirect_acl
permit udp any any eq domain
permit tcp any any eq domain
permit tcp any any eq www
permit tcp any any eq 443
permit icmp any any
dot11 ssid PROVA
ip redirection host 10.3.0.2 access-group redirect_acl in
The routes are ok. The traffic knows how to go and return to the captive portal.
Thank you,
Regards.

Refer the document :
http://www.cisco.com/c/en/us/td/docs/wireless/technology/ip-redirect/technical/reference/ipredir.html#wp36517

Configuring ssid and vlans on autonomous access point ?

here is an a demonstration of how to configure vlans and ssid on a auto-ap , what i dont understand is when i configure the ssid under (interface dot11radio0) and the vlan under that command , why do i need to configure sub-interfaces for the "fastethernet" and the "dot11radio0" if i already configured it under the "interface dot11radio0" , why do i need the "encapsulation dotq x" ? and what is bridge-group ?

If you want to use multiple SSID with multiple vlan, then you have to configure subinterfaces on Radio interfaces (in both Radio 0 & Radio 1 if you want to use both 2.4GHz & 5GHz band) & Ethernet interfaces.
AP simply bridge wireless traffic to wired interface using these sub-interfaces. To specify which radio sub-interface traffic to map to ethernet sub-interface, a Bridge-Group number (1-255) is used.
Bridge-Group 1 always used for native vlan traffic & usually used for AP management.
HTH
Rasika
**** Pls rate all useful responses ****

Getting error message with 1230 autonomous access point

When try to add a new WLAN, i get an error
This 'VLAN ID' is already in use. Choose an unique VLAN ID
I am using an old image 12.3(2)JA2
can somebody guide me on the same
Thanks in advance
Nikhil

Go ahead and post your config as it is, as well as the commands you're trying to enter. It sounds like the VLAN you're wanting to use is already in use by another SSID, or at least the AP thinks it is.
Keep in mind that you can only have one SSID per VLAN.

Is AIR-OPT60-DHCP available on autonomous AIR-SAP2602I access point?

Hello Wireless Experts,
I was able to order AIR-OPT60-DHCP on controller based AP AIR-CAP2602I-E-K9 using CCW, but this option is not available on autonomous AIR-SAP2602I access points.
Is AIR-OPT60-DHCP available on autonomous AIR-SAP2602I access point?
Thanks.
George

That is a feature and only used in lightweight access points. The standalone autonomous access points don't use that. Just follow the configuration guide for your access point to get you started.
Sent from Cisco Technical Support iPhone App

Access point determination

I have a Cisco-LAP.I feel it is converted to Cisco Auto-AP.Is there any way if i can determine that it has been converted.Here is the sh version output.Thanks.ap#sh ver
Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Sun 07-Jun-09 03:50 by prod_rel_teamROM: Bootstrap program is C1250 boot loader
BOOTLDR: C1250 Boot Loader (C1250-BOOT-M) Version 12.4(10b)JA, RELEASE SOFTWARE (fc2)ap uptime is 6 hours, 8 minutes
System returned to ROM by power-on
System image file is "flash:/c1250-k9w7-mx.124-10b.JDA3/c1250-k9w7-mx.124-10b.JDA3"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
ap#sh ver
Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Sun 07-Jun-09 03:50 by prod_rel_teamROM: Bootstrap program is C1250 boot loader
BOOTLDR: C1250 Boot Loader (C1250-BOOT-M) Version 12.4(10b)JA, RELEASE SOFTWARE (fc2)ap uptime is 6 hours, 9 minutes
System returned to ROM by power-on
System image file is "flash:/c1250-k9w7-mx.124-10b.JDA3/c1250-k9w7-mx.124-10b.JDA3"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email to
[email protected].
cisco AIR-LAP1252AG-A-K9   (PowerPC 8349) processor (revision A0) with 49142K/16384K bytes of memory.
Processor board ID FCW1223Z00B
PowerPC 8349 CPU at 533Mhz, revision number 0x0031
Last reset from power-on
1 Gigabit Ethernet interface
2 802.11 Radio(s)
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:1D:70:FA:45:82
Part Number                          : 73-10425-05
PCA Assembly Number                  : 800-27630-05
PCA Revision Number                  : A0
PCB Serial Number                    : FOC1222231T
Top Assembly Part Number             : 800-29536-02
Top Assembly Serial Number           : FCW1223Z00B
Top Revision Number                  : A0
Product/Model Number                 : AIR-LAP1252AG-A-K9Configuration register is 0xF

Hello,
FYI
Here is the installation and Troubleshooting guide for 1250 Series Autonomous Access Points:
http://www.cisco.com/en/US/docs/wireless/access_point/1250/installation/guide/125h_c3.html#wp1015872

Dynamic VLAN Assignment with RADIUS Server and Aironet Access Points

Hi Guys,
I would like to go for "Dynamic VLAN Assignment with RADIUS Server and Aironet Access Points 1300". I want the AP to broadcast only 1 SSID. The client find the SSID ->put in his user credential->Raudius athentication->assign him to an specific vlan based on his groupship.
The problem here is that I don't have a AP controller but only configurable Aironet Access Points 1300. I can connect to the radius server, but I am not sure how to confirgure the AP's port, radio port, vlan and SSID.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#switch
I go through some references:
3.5 RADIUS-Based VLAN Access Control
As discussed earlier, each SSID is mapped to a default VLAN-ID on the wired side. The IT administrator may wish to impose back end (such as RADIUS)-based VLAN access control using 802.1X or MAC address authentication mechanisms. For example, if the WLAN is set up such that all VLANs use 802.1X and similar encryption mechanisms for WLAN user access, then a user can "hop" from one VLAN to another by simply changing the SSID and successfully authenticating to the access point (using 802.1X). This may not be preferred if the WLAN user is confined to a particular VLAN.
There are two different ways to implement RADIUS-based VLAN access control features:
1. RADIUS-based SSID access control: Upon successful 802.1X or MAC address authentication, the RADIUS server passes back the allowed SSID list for the WLAN user to the access point or bridge. If the user used an SSID on the allowed SSID list, then the user is allowed to associate to the WLAN. Otherwise, the user is disassociated from the access point or bridge.
2. RADIUS-based VLAN assignment: Upon successful 802.1X or MAC address authentication, the RADIUS server assigns the user to a predetermined VLAN-ID on the wired side. The SSID used for WLAN access doesn't matter because the user is always assigned to this predetermined VLAN-ID.
extract from: Wireless Virtual LAN Deployment Guide
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00801444a1.html
==============================================================
Dynamic VLAN Assignment with RADIUS Server and Wireless LAN Controller Configuration Example
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#switch
==============================================================
Controller: Wireless Domain Services Configuration
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c951f.shtml
Any help on this issue is appreicated.
Thanks.

I'm not sure if the Autonomous APs have the option for AAA Override. On the WLC, I can go into the BSSID, Security, Advanced, and there's a checkbox that I would check to allow a Radius server to send back the VLAN.
I did a little research and it looks like the 1300 may give this option but instead is defined as "VLAN Override". I've found the release notes for 12.3(7)JA5 (not sure what version you're running) that give mention and a link to configuring EAP on page 4: http://www.ciscosystems.ch/en/US/docs/wireless/access_point/1300/release/notes/o37ja5rn.pdf
Hope this helps

Silly doubt abt access-points and bridges

hi all i have read cisco doc wherein clients connecting to access-points and also where the cisco access-point is working like a bridge and still clients can connect to it .
then any specific reason why people generally connect clients to access-points.
i mean is there any benefit of either method over the other.
any help and guidance would be really helpful.
regards
sushil

In short, it is preferred to have users connect to access points.... 99% of the time. You can use a wireless bridge (that is associated to an AP) that is connected to a switch/hub to supply network connectivity to wired users off the switch/hub. There are also access points that can be used as a bridge for building point to point connectivity.
Look at the home users with wireless.... it allows then to move from place to place (as long as there is coverage) without having to be wired in.

Finding the manufacture date on an access point via software

I'd like to determine the manufacture date of our access points because we plan on converting to LWAPP? Can someone tell me the what CLI command to use and which field has the answer. thanks.

Hi Thomas,
Not sure about finding the Manufacture date (maybe you are trying to find out about the presence of a MIC certificate) but we did go through this coversion from Autonomous to Lightweight on our infrastructure last summer.In this process we did convert about 70 1121's and 1231's to LWAPP and it worked very well. Here are some relevant docs;
Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode
From this excellent doc;
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html
The following Cisco Aironet access points have the ability to operate as autonomous access points or lightweight access points:
Cisco Aironet 1240 AG Series Access Points
Cisco Aironet 1230 AG Series Access Points
Cisco Aironet 1200 Series Access Points that contain 802.11g (AIR-MP21G-x-K9) and/or second-generation 802.11a radios (AIR-RM21A-x-K9 or AIR-RM22A-x-K9)
Cisco Aironet 1130 AG Series Access Points
Cisco Aironet 1100 Series Access Points that contain 802.11g radios (AIR-AP1121G-x-K9)
Cisco Aironet 1300 Series Access Points/Bridges (AIR-BR1310G-x-K9 or AIR-BR1310G-x-K9-R).
From this doc;
http://www.cisco.com/en/US/products/ps6521/prod_bulletin0900aecd80321a2c.html
Guidelines and Tools for Migrating to the Cisco Unified Wireless Network
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns337/networking_solutions_white_paper0900aecd804f1a23.shtml
Self-Signed Certificate Manual Addition to the Controller for LWAPP-Converted APs
LWAPP secures the control communication between the AP and the WLC by means of a secure key distribution. The secure key distribution requires already provisioned X.509 digital certificates on both the LAP and the WLC. Factory-installed certificates are referenced with the term "MIC", which is an acronym for Manufacturing Installed Certificate. Aironet APs that shipped before July 18, 2005, do not have MICs. So these APs create an SSC when they are converted to operate in lightweight mode. Controllers are programmed to accept SSCs for the authentication of specific APs.
http://www.cisco.com/en/US/products/ps6521/products_configuration_example09186a00806a426c.shtml
LWAPP Upgrade Tool Troubleshoot Tips
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a008072d9a1.shtml
Also, 5 points for Eric! For all your great work here lately.
Hope this helps!
Rob

Idle Users on Autonomous Access Points

Similar Messages

Maybe you are looking for