How to set a password for the Cisco Aironet

[BNg007]

We recently acquired a Comtrend AR-5220u modem/router from our ISP Global Capacity. We have two wireless networks: one private (pwd protected) for employees and another public (no pwd) for guests. The issue I'm having is setting the password for the public network through the access point. The Comtrend modem/router has one cable plugged into the dell firewall, another to the cisco PoE 2960 switch, another to the cisco slm 2008 switch, and another to the cisco aironet injector.

How do I go about setting a password for the guest network to limit usage?

Thanks

 

[bill001g]

To a point it depend which aironet device you have but all use the same basic IOS commands. I normally configure via the cmd line but there should be a web interface. It is just a matter of changing the network type for that SSID/network to WPA mode with a password. I will assume the dell firewall, the ap and the switches already have all the vlans set correctly.

If you had more than one AP they are generally configured from a central server software used to control them.

 

[BNg007]

To a point it depend which aironet device you have but all use the same basic IOS commands. I normally configure via the cmd line but there should be a web interface. It is just a matter of changing the network type for that SSID/network to WPA mode with a password. I will assume the dell firewall, the ap and the switches already have all the vlans set correctly.

If you had more than one AP they are generally configured from a central server software used to control them.

Hey Bill, I have a cisco aironet 1130ag. I know, it is not exactly the latest and greatest. I don't think we have VLANs setup. Both the wireless networks have 2 different internet service providers (cogent and global capacity) behind a firewall. We have do have like 5 aps. The meraki and another aironet for the private network through cogent. The other 3 are for our guest network. Somehow I get the feeling though that the access points are piggy backing off of each other. How would I find the central server software used to control them?

 

[bill001g]

With only 5 it is likely just loaded on a server. If you had the extremely expensive server appliance it says cisco on it pretty clearly but I think it is only a 1U server so if you have a lot of servers and other gear it can be easy to miss.

The AP should still have IP addresses even if they are server configured. Generally if you are running with a completely centrally managed system they use special DHCP parms so they know where to load the initial config from when they boot.

 

[BNg007]

With only 5 it is likely just loaded on a server. If you had the extremely expensive server appliance it says cisco on it pretty clearly but I think it is only a 1U server so if you have a lot of servers and other gear it can be easy to miss.

The AP should still have IP addresses even if they are server configured. Generally if you are running with a completely centrally managed system they use special DHCP parms so they know where to load the initial config from when they boot.

I see. I have one of the i.p. address for one of the Cisco Aironet 1130ag. Can I change the network type for the SSID/network to WPA mode with just this 1 i.p. address? To simplify things, if you were me, what would you do to get the pwd changed?

Thanks

 

[bill001g]

Unless you know who installed it there really is no way to tell for sure.

Each AP will have its own IP and you should be able to track them via arp table and mac table entries in the switches and routers. This is one of those basic network skills you end up learning to solve problems like this. You will likely have to change each device one at a time. If there was a central controller you should see its ip address and setting in one of the configuration screens when you do the first AP.

I would telnet/ssh into the box but you likely will need to use the web interface...unless they disabled it. It is pretty much that simple though. Find the screen that has the guest ssid settings and change it to WPA and put in a password.

This is always a problem with a network that has no documentation. This generally is why most companies require documents, what happens if you get hit by a truck is always the reason.

 

[BNg007]

Unless you know who installed it there really is no way to tell for sure.

Each AP will have its own IP and you should be able to track them via arp table and mac table entries in the switches and routers. This is one of those basic network skills you end up learning to solve problems like this. You will likely have to change each device one at a time. If there was a central controller you should see its ip address and setting in one of the configuration screens when you do the first AP.

I would telnet/ssh into the box but you likely will need to use the web interface...unless they disabled it. It is pretty much that simple though. Find the screen that has the guest ssid settings and change it to WPA and put in a password.

This is always a problem with a network that has no documentation. This generally is why most companies require documents, what happens if you get hit by a truck is always the reason.

Yeah, this is the problem I'm facing. Outdated documentations. Thanks though, your responses are very helpful.