FCC ID: LDK102100 Cisco Aironet 802.11ac Dual Band Access Points

GETTING STARTED GUIDE Cisco Aironet 2800I and 2800E Series Access Points First Published: February 22, 2016 1 About this Guide 2 About the Access Point 3 Safety Instructions 4 Unpacking 5 AP Views, Ports, and Connectors 6 Preparing the AP for Installation 7 Installation Overview 8 Performing a Pre-Installation Configuration 9 Mounting and Grounding the Access Point 10 Powering the Access Point 11 Configuring and Deploying the Access Point 12 Checking the Access Point LEDs 13 Miscellaneous Usage and Configuration Guidelines 14 Related Documentation 15 Declarations of Conformity and Regulatory Information 16 Obtaining Documentation and Submitting a Service Request 2 1 About this Guide This guide provides instructions on how to install your Cisco Aironet 2800I and 2800E series access points and provides links to resources which can help you configure the access point. This guide provides mounting instructions and limited troubleshooting procedures. The 2800 series access point is referred to as access point or AP in this document. 2 About the Access Point The Cisco Aironet 2800 Series Wi-Fi access points provide 802.11ac Wave 2 with Multi User MIMO

(MU MIMO). This AP series offers dual-band radios (2.4 GHz and 5 GHz) with integrated and external antenna options. The series supports high-performing Spectrum Intelligence which sustains three spatial stream rates over a deployable distance with high reliability when serving clients. The access points support full inter-interoperability with leading 802.11ac clients, and support a mixed deployment with other access points and controllers. A full listing of the access point's features and specification are provided in the Cisco Aironet 2800 Series Access Point Data Sheet, at the following URL:

(URL will be added when available, before FCS) Access Point Features The 2800 series access point is a wireless controller-based product and supports:

Simultaneous dual-band (2.4-GHz and 5-GHz) radios

Integrated antennas on the 2802I access point model (AIR-AP2802I-x-K9)

External antennas on the 2802E access point models (AIR-AP2802E-x-K9) Note The x in the model numbers represents the regulatory domain. For information on supported regulatory domains, see theAP Model Numbers and Regulatory Domains section on page 4. The other features of the 2800 series APs are:

Multi-Gigabit Ethernet (mGig) Support, providing multiple gigabit uplink speeds of 2.5G and 5G in addition to 100M and 1G speeds. 3

Radio Role Flexibility, allowing for either manual configuration or for the APs to intelligently determine the operating role of the integrated radios based on the available RF environment. The AP can operate in the following modes:

2.4GHz and 5GHz role, where one radio serves clients in 2.4GHz mode, while the other serves clients in 5GHz mode. Dual 5GHz role, with both radios operating in the 5GHz band, actively serving client devices to maximize the benefits of 802.11ac wave 2 and to increase client device capacity. Wireless Security Monitoring and 5GHz role, where one radio serves 5GHz clients, while the other radio scans both 2.4GHz and 5GHz for wIPS attackers, CleanAir interferers, and rogue devices.

Cross-AP Noise Reduction, a Cisco innovation that enables APs to intelligently collaborate in real time about RF conditions so that users connect with optimized signal quality and performance.

Optimized AP Roaming for ensuring that client devices associate with the AP in their coverage range that offers the fastest data rate available.

Cisco ClientLink 3.0 technology for improved downlink performance to all mobile devices, including one-, two-, and three-spatial-stream devices up to 802.11ac Wave 1 and Wave 2. The technology also improves battery life on mobile devices.

Cisco CleanAir technology enhanced with 160MHz channel support. CleanAir delivers proactive, high-speed spectrum intelligence across 20-, 40-, and 80-, and 160-MHz-wide channels to combat performance problems arising from wireless interference.

MIMO equalization capabilities, which optimize uplink performance and reliability by reducing the impact of signal fade. AP Model Numbers and Regulatory Domains AP Type Access Point for indoor environments, with internal antennas Access Point for indoor environments, with external antennas Model Number AIR-AP2802I-x-K9 AIR-AP2802E-x-K9 Details Dual-band, controller-based 802.11a/g/n/ac 4 You need to verify whether the AP model you have is approved for use in your country. To verify approval and to identify the regulatory domain that corresponds to a particular country, visit http://www.cisco.com/go/aironet/compliance. Not all regulatory domains have been approved. As and when they are approved, this compliance list will be updated. Antennas and Radios The 2800 series access point contains two simultaneous dual-band radios, the 2.4GHz and 5GHz MU-MIMO radio, and the 5-GHz 802.11ac MU-MIMO radio. The 2800 series access point configurations are:

AIR-CAP2802I-x-K9two 2.4-GHz/5-GHz dual-band radios, with integrated dual-band inverted-F antennas.

AIR-AP2802E-x-K9two 2.4-GHz/5-GHz dual-band radios, up to 4 external dual-band dipole antennas. Internal Antennas The 2802I model access point is configured with four dual-band inverted-F antennas, and two 2.4-GHz/5-GHz dual-band radios. There are four antennas deployed inside the access point with one deployed on each corner of the 2802I access point top housing. Each antenna covers both the 2.4 GHz and the 5 GHz bands with a single feed line. The basic features are as follows:

Dual-band inverted-F antenna for use in both the 2.4-GHz and 5-GHz bands.

Antenna unit integrated into the 2802I model access point.

Peak gain is approximately 4 dBi in both the 2.4-GHz and 5-GHz bands. External Antennas The 2802E model is configured with up to four external dual-band dipole antennas, and two 2.4-GHz/

5-GHz dual-band radios. The radio and antennas support frequency bands 24002500 MHz and 51805865 MHz through a common dual-band RF interface. Features of the external dual-band dipole antennas are:

Four RTNC antenna connectors on the top of the access point

Four TX/RX antennas 5 Supported External Antennas Part Number Frequency 2.4GHz and 5GHz AIR-ANT2524DB-R AIR-ANT2524DW-R AIR-ANT2524DG-R AIR-ANT2524V4C-R Dual-resonant ceiling mount omni (4-pack) AIR-ANT2535SDW-R Dual-resonant "stubby" monopole AIR-ANT2544V4M-R Dual-resonant omni (4-pack) AIR-ANT2566P4W-R Dual-resonant "directional" antenna (4-pack) Antenna Type Dual-resonant black dipole Dual-resonant white dipole Dual-resonant gray dipole For additional details on the supported antennas, such as antenna gain, and information such as channels and maximum power settings, see the Channels and Maximum Power Settings for Cisco 2800 Series Access Points sheet at the following URL:

(To be added when available, before FCS) 6 3 Safety Instructions Translated versions of the following safety warnings are provided in the translated safety warnings document that is shipped with your access point. The translated warnings are also in the Translated Safety Warnings for Cisco Aironet Access Points, which is available on Cisco.com. Warning IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071 SAVE THESE INSTRUCTIONS Warning Read the installation instructions before you connect the system to its power source. Statement 1004 Warning Installation of the equipment must comply with local and national electrical codes. Statement 1074 Warning This product relies on the buildings installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than:

20A. Statement 1005 Warning Do not operate your wireless network device near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use. Statement 245B Warning In order to comply with FCC radio frequency (RF) exposure limits, antennas should be located at a minimum of 7.9 inches (20 cm) or more from the body of all persons. Statement 332 7 Caution Caution The fasteners you use to mount an access point on a ceiling must be capable of maintaining a minimum pullout force of 20 lbs (9 kg) and must use all 4 indented holes on the mounting bracket. This product and all interconnected equipment must be installed indoors within the same building, including the associated LAN connections as defined by Environment A of the IEEE 802.af Standard. Note The access point is suitable for use in environmental air space in accordance with section 300.22.C of the National Electrical Code and sections 2-128, 12-010(3), and 12-100 of the Canadian Electrical Code, Part 1, C22.1. You should not install the power supply or power injector in air handling spaces. Note Use only with listed ITE equipment. 4 Unpacking To unpack the access point, follow these steps:

Step 1 Unpack and remove the access point and the accessory kit from the shipping box. Step 2 Return any packing material to the shipping container and save it for future use. Step 3 Verify that you have received the items listed below. If any item is missing or damaged, contact your Cisco representative or reseller for instructions. The access point Mounting bracket (selected when you ordered the access point) Adjustable ceiling-rail clip (selected when you ordered the access point) 8 5 AP Views, Ports, and Connectors Figure 1 Face of the 2802I Model 1 2 Status LED 3 Location of the module connector port on the base of the AP. Location of the ports and connectors on the head of the AP. 9 Figure 2 Face of the 2802E Model 1 Dual-band antenna connector A. 2 Dual-band antenna connector B. 3 Dual-band antenna connector C. 4 Dual-band antenna connector D. 5 6 7 Location of the ports and connectors on the head of the AP. Status LED. Location of the module connector port on the base of the AP. The ports and connections on the bottom of the access point are shown in Figure 3. 10 Figure 3 Access Point Ports and Connections on the Head - 2802E and 2802I Models 1 Kensington lock slot. 2 Mode button. 3 Gigabit Ethernet port. 4 USB port. 5 6 7 DC power port. 11 Figure 4 AP Module Connector Port on the Base 12 6 Preparing the AP for Installation Before you mount and deploy your access point, we recommend that you perform a site survey (or use the site planning tool) to determine the best location to install your access point. You should have the following information about your wireless network available:

Access point locations.

Access point mounting options: below a suspended ceiling, on a flat horizontal surface, or on a desktop. Note You can mount the access point above a suspended ceiling but you must purchase additional mounting hardware: See Mounting and Grounding the Access Point section on page 18 for additional information.

Access point power options: power supplied by the recommended external power supply (Cisco AIR-PWR-C), a DC power supply, PoE from a network device, or a PoE power injector/hub

(usually located in a wiring closet). Note Access points mounted in a buildings environmental airspace must be powered using PoE to comply with safety regulations. Cisco recommends that you make a site map showing access point locations so that you can record the device MAC addresses from each location and return them to the person who is planning or managing your wireless network. 7 Installation Overview Installing the access point involves these operations:

Performing a Pre-Installation Configuration, page 14 (optional) Step 1 Step 2 Mounting and Grounding the Access Point, page 18 Step 3 Step 4 Powering the Access Point, page 19 Preparing the AP for Installation, page 13 13 8 Performing a Pre-Installation Configuration For a Cisco Mobility Express deployment, see the Cisco Mobility Express User Guide at this URL:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/1/user_guide/b_ME_User_Guid e.html The following procedures ensure that your access point installation and initial operation go as expected. This procedure is optional. Note Performing a pre-installation configuration is an optional procedure. If your network controller is properly configured, you can install your access point in its final location and connect it to the network from there. See the Deploying the Access Point on the Wireless Network section on page 23 for details. The following Pre-Installation Configuration procedure given does not include configuring Link Aggregation. For information on configuring Link Aggregation, see the Cisco Wireless LAN Controller Configuration Guide, Release 8.1, at this URL:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81.html The pre-installation configuration setup is illustrated in Figure 5. 14 Figure 5 Pre-Installation Configuration Setup Controller Layer 3 devices Link Aggregation Link Aggregation Cisco Aironet access points 6 6 0 4 5 3 To perform pre-installation configuration, perform the following steps:

Step 1 Make sure that the Cisco wireless LAN controller DS port is connected to the network. Use the CLI, web-browser interface, or Cisco WCS procedures as described in the appropriate Cisco wireless LAN controller guide. a. Make sure that access points have Layer 3 connectivity to the Cisco wireless LAN controller Management and AP-Manager Interface. b. Configure the switch to which your access point is to attach. See the Cisco Wireless LAN Controller Configuration Guide for the release you are using, for additional information. c. Set the Cisco wireless LAN controller as the master so that new access points always join with it. d. Make sure DHCP is enabled on the network. The access point must receive its IP address through DHCP. e. CAPWAP UDP ports must not be blocked in the network. f. The access point must be able to find the IP address of the controller. This can be accomplished using DHCP, DNS, or IP subnet broadcast. This guide describes the DHCP method to convey the controller IP address. For other methods, refer to the product 15 documentation. See also the Configuring DHCP Option 43 section on page 29 for more information. Note The access point requires a gigabit Ethernet (GbE) link to prevent the Ethernet port from becoming a bottleneck for traffic because wireless traffic speeds exceed transmit speeds of a 10/100 Ethernet port. Step 2 Apply power to the access point. See Powering the Access Point, page 19. a. As the access point attempts to connect to the controller, the LEDs cycle through a green, red, and amber sequence, which can take up to 5 minutes. Note If the access point remains in this mode for more than five minutes, the access point is unable to find the Master Cisco wireless LAN controller. Check the connection between the access point and the Cisco wireless LAN controller and be sure that they are on the same subnet. If the access point shuts down, check the power source. b. c. After the access point finds the Cisco wireless LAN controller, it attempts to download the new operating system code if the access point code version differs from the Cisco wireless LAN controller code version. While this is happening, the Status LED blinks amber. If the operating system download is successful, the access point reboots. d. Step 3 Configure the access point if required. Use the controller CLI, controller GUI, or Cisco Prime Step 4 Step 5 Infrastructure to customize the access-point-specific 802.11ac network settings. If the pre-installation configuration is successful, the Status LED is green indicating normal operation. Disconnect the access point and mount it at the location at which you intend to deploy it on the wireless network. If your access point does not indicate normal operation, turn it off and repeat the pre-installation configuration. 16 Note When you are installing a Layer 3 access point on a different subnet than the Cisco wireless LAN controller, be sure that a DHCP server is reachable from the subnet on which you will be installing the access point, and that the subnet has a route back to the Cisco wireless LAN controller. Also be sure that the route back to the Cisco wireless LAN controller has destination UDP ports 5246 and 5247 open for CAPWAP communications. Ensure that the route back to the primary, secondary, and tertiary wireless LAN controller allows IP packet fragments. Finally, be sure that if address translation is used, that the access point and the Cisco wireless LAN controller have a static 1-to-1 NAT to an outside address. (Port Address Translation is not supported.) 17 9 Mounting and Grounding the Access Point Cisco Aironet 2800 series access points can be mounted in several configurations on a suspended ceiling, on a hard ceiling or wall, on an electrical or network box, and above a suspended ceiling. Go to the following URL for access point mounting instructions:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mounting/guide/apmount.html The standard mounting hardware supported by the AP is listed in Table 1. Table 1 Brackets and Clips for Mounting the AP Part Number Brackets AIR-AP-BRACKET-1 AIR-AP-BRACKET-2 AIR-AP-T-RAIL-R Clips AIR-AP-T-RAIL-F AIR-CHNL-ADAPTER Description Low-profile bracket

(This is the default option) Universal bracket Ceiling Grid Clip (Recessed mounting)

(This is the default option) Ceiling Grid Clip (Flush mounting) Optional adapter for channel-rail ceiling grid profile. 18 10 Powering the Access Point The AP can be powered using:

48 V DC power via the 48VDC port, using Cisco Power Adapter AC DC AIR-PWR-C=. Ensure that the power cable is routed through the strain relief retention clips cast into the enclosure. See Figure 6.

Power-over-Ethernet (PoE) from the Ethernet cable, from an external power source such as the Cisco Power Injector AIR-PWRINJ4=.You can also use the AIR-PWRINJ5 Cisco Power Injector but with reduced functionality.

Any 802.3at (25.5 W) or 802.3af (15.4 W) compliant power injector. However, when powered by an 802.3af powering source, the following operations are supported:

For 2802I the AUX and USB ports are disabled. Both radios operate at full operation. For 2802E the AUX and USB ports are disabled. The 2.4GHz radio will shift to 2x3:2SS operation and the 5GHz radio will remain at full operation. With an 802.3at or the AIR-PWR-C= as the power source, the AP2802I/E provides full operation including the AUX and USB ports. 19 Figure 6 Routing the DC Power Cable 2 3 1 4 5 9 5 8 3 5 3 1 Kensington lock slot 4 DC power cable plugged into the 48VDC port 2 Power cable routed through the strain relief retention clips 5 AP secured using a padlock 3 DC power cable 20 11 Configuring and Deploying the Access Point This section describes how to connect the access point to a wireless LAN controller. Because the configuration process takes place on the controller, see the Cisco Wireless LAN Controller Configuration Guide for additional information. For a Cisco Mobility Express deployment, see the Cisco Mobility Express User Guide at this URL:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/1/user_guide/b_ME_User_Guid e.html The information in this section does not include configuring Link Aggregation. For information on configuring Link Aggregation, see the Cisco Wireless LAN Controller Configuration Guide, Release 8.1, at the following URL:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81.html The Controller Discovery Process The access point uses standard Control and Provisioning of Wireless Access Points Protocol

(CAPWAP) to communicate between the controller and other wireless access points on the network. CAPWAP is a standard, inter-operable protocol which enables an access controller to manage a collection of wireless termination points. The discovery process using CAPWAP is identical to the Lightweight Access Point Protocol (LWAPP) used with previous Cisco Aironet access points. LWAPP-enabled access points are compatible with CAPWAP, and conversion to a CAPWAP controller is seamless. Deployments can combine CAPWAP and LWAPP software on the controllers. The functionality provided by the controller does not change except for customers who have Layer 2 deployments, which CAPWAP does not support. In a CAPWAP environment, a wireless access point discovers a controller by using CAPWAP discovery mechanisms and then sends it a CAPWAP join request. The controller sends the access point a CAPWAP join response allowing the access point to join the controller. When the access point joins the controller, the controller manages its configuration, firmware, control transactions, and data transactions. Note For additional information about the discovery process and CAPWAP, see the Cisco Wireless LAN Controller Software Configuration Guide. This document is available on Cisco.com. 21 Note CAPWAP support is provided in controller software release 5.2 or later. However, your controller must be running the release that supports 2800 series access points, as specified in the access points data sheet. Note You cannot edit or query any access point using the controller CLI if the name of the access point contains a space. Note Make sure that the controller is set to the current time. If the controller is set to a time that has already occurred, the access point might not join the controller because its certificate may not be valid for that time. Access points must be discovered by a controller before they can become an active part of the network. The access point supports these controller discovery processes:

Layer 3 CAPWAP discoveryCan occur on different subnets than the access point and uses IP addresses and UDP packets rather than MAC addresses used by Layer 2 discovery.

Locally stored controller IP address discoveryIf the access point was previously joined to a controller, the IP addresses of the primary, secondary, and tertiary controllers are stored in the access points non-volatile memory. This process of storing controller IP addresses on an access point for later deployment is called priming the access point. For more information about priming, see the Performing a Pre-Installation Configuration section on page 14.

DHCP server discoveryThis feature uses DHCP option 43 to provide controller IP addresses to the access points. Cisco switches support a DHCP server option that is typically used for this capability. For more information about DHCP option 43, see the Configuring DHCP Option 43 section on page 29.

DNS discoveryThe access point can discover controllers through your domain name server

(DNS). For the access point to do so, you must configure your DNS to return controller IP addresses in response to CISCO-CAPWAP-CONTROLLER.localdomain, where localdomain is the access point domain name. Configuring the CISCO-CAPWAP-CONTROLLER provides backwards compatibility in an existing customer deployment. When an access point receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-CAPWAP-CONTROLLER.localdomain. When the DNS sends a list of controller IP addresses, the access point sends discovery requests to the controllers. 22 Deploying the Access Point on the Wireless Network After you have mounted the access point, follow these steps to deploy it on the wireless network:

Step 1 Connect and power up the access point. Step 2 Observe the access point LED (for LED descriptions, see Checking the Access Point LEDs b. c. section on page 24). a. When you power up the access point, it begins a power-up sequence that you can verify by observing the access point LED. If the power-up sequence is successful, the discovery and join process begins. During this process, the LED blinks sequentially green, red, and off. When the access point has joined a controller, the LED is chirping green if no clients are associated or green if one or more clients are associated. If the LED is not on, the access point is most likely not receiving power. If the LED blinks sequentially for more than 5 minutes, the access point is unable to find its primary, secondary, and tertiary Cisco wireless LAN controller. Check the connection between the access point and the Cisco wireless LAN controller, and be sure the access point and the Cisco wireless LAN controller are either on the same subnet or that the access point has a route back to its primary, secondary, and tertiary Cisco wireless LAN controller. Also, if the access point is not on the same subnet as the Cisco wireless LAN controller, be sure that there is a properly configured DHCP server on the same subnet as the access point. See the Configuring DHCP Option 43 section on page 29 for additional information. Step 3 Reconfigure the Cisco wireless LAN controller so that it is not the Master. Note A Master Cisco wireless LAN controller should be used only for configuring access points and not in a working network. 23 12 Checking the Access Point LEDs Access Point Status LEDs The location of the access point status LED is shown in Figure 2. Note Regarding LED status colors, it is expected that there will be small variations in color intensity and hue from unit to unit. This is within the normal range of the LED manufacturers specifications and is not a defect. The access point status LED indicates various conditions and are described in Table 2. Table 2 LED Status Indications Message Type Association status LED State Chirping Green Boot loader status Boot loader error Operating status Access point operating system errors Green Green Red Blinking amber Cycling through green, red, and amber Rapidly cycling through red, green, amber, and off. Cycling through red, green, amber, and off Message Meaning Normal operating condition, but no wireless client associated Normal operating condition, at least one wireless client association Executing boot loader Boot loader signing verification failure Software upgrade in progress Discovery/join process in progress Access point location command invoked from controller web interface. General warning; insufficient inline power 24 Ethernet Port LEDs Each Ethernet port has two LEDs for showing Link (Green) and Activity (Amber) statuses. They are integrated on the RJ45 connector. For a description of the statuses they indicate, see the following table. Link (Green) LED State Activity (Amber) LED State 10M Link Off On 100M 10M Link Active Off Off Blinking On 1000M 100M Link Active Off On Blinking On 1000M Active On Blinking 25 13 Miscellaneous Usage and Configuration Guidelines Using the Mode Button Using the Mode button (see Figure 3) you can:

Reset the AP to its default factory-shipped configuration.

Clear the APs internal storage, including all configuration files. To use the mode button, press, and keep pressed, the mode button on the access point during the AP's boot cycle. Wait until the AP's status LED changes to Amber. During this, the AP console shows a seconds counter, counting the number of seconds the mode button is pressed. Then:

To reset the AP to its default factory-shipped configuration, keep the mode button pressed for less than 20 seconds. The AP's configuration files are cleared. This resets all configuration settings to factory defaults, including passwords, WEP keys, the IP address, and the SSID.

To clear the APs internal storage, including all configuration files and the regulatory domain configuration, keep the mode button pressed for more than 20 seconds, but less than 60 seconds. The AP's status LED changes from Amber to Red, and all the files in the AP's storage directory are cleared. If you keep the mode button pressed for more than 60 seconds, the mode button is assumed faulty and no changes are made. 26 Troubleshooting the Access Point to Cisco Controller Join Process Note Ensure that your controller is running the latest Cisco Wireless Controller Software Release as specified in the access points data sheet. Access points can fail to join a controller for many reasons: a RADIUS authorization is pending;

self-signed certificates are not enabled on the controller; the access points and controllers regulatory domains dont match, and so on. Controller software enables you to configure the access points to send all CAPWAP-related errors to a syslog server. You do not need to enable any debug commands on the controller because all of the CAPWAP error messages can be viewed from the syslog server itself. The state of the access point is not maintained on the controller until it receives a CAPWAP join request from the access point. Therefore, it can be difficult to determine why the CAPWAP discovery request from a certain access point was rejected. In order to troubleshoot such joining problems without enabling CAPWAP debug commands on the controller, the controller collects information for all access points that send a discovery message to it and maintains information for any access points that have successfully joined it. The controller collects all join-related information for each access point that sends a CAPWAP discovery request to the controller. Collection begins with the first discovery message received from the access point and ends with the last configuration payload sent from the controller to the access point. You can view join-related information for up to three times the maximum number of access points supported by the platform for the 2500 series controllers and the Controller Network Module within the Cisco 28/37/28xx Series Integrated Services Routers. Note The maximum number of access points varies for the Cisco WiSM2, depending on which controller software release is being used. When the controller is maintaining join-related information for the maximum number of access points, it does not collect information for any more access points. An access point sends all syslog messages to IP address 255.255.255.255 by default when any of the following conditions are met:

An access point running software release 8.0.x.x or later has been newly deployed. 27

An existing access point running software release 8.0.x.x or later has been reset after clearing the configuration. If any of these conditions are met and the access point has not yet joined a controller, you can also configure a DHCP server to return a syslog server IP address to the access point using option 7 on the server. The access point then starts sending all syslog messages to this IP address. When the access point joins a controller for the first time, the controller sends the global syslog server IP address (the default is 255.255.255.255) to the access point. After that, the access point sends all syslog messages to this IP address until it is overridden by one of the following scenarios:

The access point is still connected to the same controller, and the global syslog server IP address configuration on the controller has been changed using the config ap syslog host global syslog_server_IP_address command. In this case, the controller sends the new global syslog server IP address to the access point.

The access point is still connected to the same controller, and a specific syslog server IP address has been configured for the access point on the controller using the config ap syslog host specific Cisco_AP syslog_server_IP_address command. In this case, the controller sends the new specific syslog server IP address to the access point.

The access point is disconnected from the controller and joins another controller. In this case, the new controller sends its global syslog server IP address to the access point.

Whenever a new syslog server IP address overrides the existing syslog server IP address, the old address is erased from persistent storage, and the new address is stored in its place. The access point also starts sending all syslog messages to the new IP address provided the access point can reach the syslog server IP address. You can configure the syslog server for access points and view the access point join information only from the controller CLI. Important Information for Controller-based Deployments Keep these guidelines in mind when you use 2802 series access points:

The access point can only communicate with Cisco wireless LAN controllers.

The access point does not support Wireless Domain Services (WDS) and cannot communicate with WDS devices. However, the controller provides functionality equivalent to WDS when the access point joins it.

CAPWAP does not support Layer 2. The access point must get an IP address and discover the controller using Layer 3, DHCP, DNS, or IP subnet broadcast.

The access point console port is enabled for monitoring and debug purposes. All configuration commands are disabled when the access point is connected to a controller. 28 Configuring DHCP Option 43 You can use DHCP Option 43 to provide a list of controller IP addresses to the access points, enabling them to find and join a controller. The following is a DHCP Option 43 configuration example on a Windows 2003 Enterprise DHCP server for use with Cisco Aironet lightweight access points. For other DHCP server implementations, consult product documentation for configuring DHCP Option 43. In Option 43, you should use the IP address of the controller management interface. Note DHCP Option 43 is limited to one access point type per DHCP pool. You must configure a separate DHCP pool for each access point type. The 2800 series access point uses the type-length-value (TLV) format for DHCP Option 43. DHCP servers must be programmed to return the option based on the access points DHCP Vendor Class Identifier (VCI) string (DHCP Option 43). The VCI string for the 2800 series access point is:

Cisco AP c2800 The format of the TLV block is listed below:

Type: 0xf1 (decimal 241)

Length: Number of controller IP addresses * 4

Value: List of WLC management interfaces To configure DHCP Option 43 in the embedded Cisco IOS DHCP server, follow these steps:

Enter configuration mode at the Cisco IOS CLI. Step 1 Step 2 Create the DHCP pool, including the necessary parameters such as default router and name server. A DHCP scope example is as follows:

ip dhcp pool <pool name>

network <IP Network> <Netmask>

default-router <Default router>

dns-server <DNS Server>

Where:

<pool name> is the name of the DHCP pool, such as AP2802

<IP Network> is the network IP address where the controller resides, such as 10.0.15.1 29

<Netmask> is the subnet mask, such as 255.255.255.0

<Default router> is the IP address of the default router, such as 10.0.0.1

<DNS Server> is the IP address of the DNS server, such as 10.0.10.2 Step 3 Add the option 43 line using the following syntax:

option 43 hex <hex string>

The hex string is assembled by concatenating the TLV values shown below:

Type + Length + Value Type is always f1(hex). Length is the number of controller management IP addresses times 4 in hex. Value is the IP address of the controller listed sequentially in hex. For example, suppose that there are two controllers with management interface IP addresses, 10.126.126.2 and 10.127.127.2. The type is f1(hex). The length is 2 * 4 = 8 = 08 (hex). The IP addresses translate to 0a7e7e02 and 0a7f7f02. Assembling the string then yields f1080a7e7e020a7f7f02. The resulting Cisco IOS command added to the DHCP scope is option 43 hex f1080a7e7e020a7f7f02. 14 Related Documentation All user documentation for the Cisco Aironet 2800 series access point is available at the following URL:

(URL to be added at FCS) For detailed information and guidelines for configuring and deploying your access point in a wireless network, see the following documentation:

Cisco Wireless LAN Controller Configuration Guide, Release 8.3, at the following URL:

(URL to be added at FCS)

Cisco Aironet 2800 Series Access Point Deployment Guide, at the following URL:

(URL to be added when available) 30 15 Declarations of Conformity and Regulatory Information This section provides declarations of conformity and regulatory information for the Cisco Aironet 2800 Series Access Points. You can find additional information at this URL:

www.cisco.com/go/aironet/compliance Manufacturers Federal Communication Commission Declaration of Conformity Statement Tested To Comply With FCC Standards FOR HOME OR OFFICE USE Access Point Models AIR-AP2802I-B-K9 AIR-AP2802E-B-K9 Manufacturer:

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA Certification Number LDK102100 LDK102099 This device complies with Part 15 rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference, and 2. This device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits of a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential environment. This equipment generates, uses, and radiates radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference. However, there is no guarantee that 31 interference will not occur. If this equipment does cause interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna.

Connect the equipment to an outlet on a circuit different from which the receiver is connected.

Consult the dealer or an experienced radio/TV technician. Increase separation between the equipment and receiver. Caution The Part 15 radio device operates on a non-interference basis with other devices operating at this frequency when using the integrated antennas. Any changes or modification to the product not expressly approved by Cisco could void the users authority to operate this device. VCCI Statement for Japan Warning This is a Class B product based on the standard of the Voluntary Control Council for Interference from Information Technology Equipment (VCCI). If this is used near a radio or television receiver in a domestic environment, it may cause radio interference. Install and use the equipment according to the instruction manual. 32 Guidelines for Operating Cisco Aironet Access Points in Japan This section provides guidelines for avoiding interference when operating Cisco Aironet access points in Japan. These guidelines are provided in both Japanese and English. Japanese Translation 03-6434-6500 7 9 6 8 0 2 English Translation This equipment operates in the same frequency bandwidth as industrial, scientific, and medical devices such as microwave ovens and mobile object identification (RF-ID) systems (licensed premises radio stations and unlicensed specified low-power radio stations) used in factory production lines. 1. Before using this equipment, make sure that no premises radio stations or specified low-power 2. 3. radio stations of RF-ID are used in the vicinity. If this equipment causes RF interference to a premises radio station of RF-ID, promptly change the frequency or stop using the device; contact the number below and ask for recommendations on avoiding radio interference, such as setting partitions. If this equipment causes RF interference to a specified low-power radio station of RF-ID, contact the number below. Contact Number: 03-6434-6500 33 Statement 371Power Cable and AC Adapter English Translation When installing the product, please use the provided or designated connection cables/power cables/AC adaptors. Using any other cables/adaptors could cause a malfunction or a fire. Electrical Appliance and Material Safety Law prohibits the use of UL-certified cables (that have the UL shown on the code) for any other electrical devices than products designated by CISCO. The use of cables that are certified by Electrical Appliance and Material Safety Law (that have PSE shown on the code) is not limited to CISCO-designated products. Industry Canada Access Point Models AIR-AP2802I-A-K9 AIR-AP2802E-A-K9 Certification Number 2461B-102100 2461B-102099 Canadian Compliance Statement This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. Under Industry Canada regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by Industry Canada. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication. Conformment la rglementation d'Industrie Canada, le prsent metteur radio peut fonctionner avec une antenne d'un type et d'un gain maximal (ou infrieur) approuv pour l'metteur par Industrie Canada. Dans le but de rduire les risques de brouillage radiolectrique l'intention des autres utilisateurs, il faut choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonne quivalente (p.i.r.e.) ne dpasse pas l'intensit ncessaire l'tablissement d'une communication satisfaisante. This radio transmitter has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Le prsent metteur radio a t approuv par Industrie Canada pour fonctionner avec les types d'antenne numrs ci-dessous et ayant un gain admissible maximal et l'impdance requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est suprieur au gain maximal indiqu, sont strictement interdits pour l'exploitation de l'metteur. 35 Antenna Type Dual-band Omni Dual-band Dipole Dual-Band Directional Antenna Gain 2/4 dBi 2/4 dBi 6/6 dBi Antenna Impedance 50 ohms 50 ohms 50 ohms Operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems. La bande 5 150-5 250 MHz est rservs uniquement pour une utilisation l'intrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux. Users are advised that high-power radars are allocated as primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Les utilisateurs tes aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., qu'ils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. European Community, Switzerland, Norway, Iceland, and Liechtenstein Access Point Models:

AIR-AP2802I-E-K9 AIR-AP2802E-E-K9 36 Declaration of Conformity with regard to the R&TTE Directive 1999/5/EC & Medical Directive 93/42/EEC 37 The following standards were applied:

EMCEN 301.489-1 v1.9.2; EN 301.489-17 v2.2.1 Health & SafetyEN60950-1: 2006; EN 50285: 2002 RadioEN 300 328 v 1.8.1; EN 301.893 v 1.7.1 The conformity assessment procedure referred to in Article 10.4 and Annex III of Directive 1999/5/EC has been followed. 38 This device also conforms to the EMC requirements of the Medical Devices Directive 93/42/EEC. Note This equipment is intended to be used in all EU and EFTA countries. Outdoor use may be restricted to certain frequencies and/or may require a license for operation. For more details, contact Cisco Corporate Compliance. The product carries the CE Mark:

Declaration of Conformity for RF Exposure This section contains information on compliance with guidelines related to RF exposure. Generic Discussion on RF Exposure The Cisco products are designed to comply with the following national and international standards on Human Exposure to Radio Frequencies:

US 47 Code of Federal Regulations Part 2 Subpart J

American National Standards Institute (ANSI) / Institute of Electrical and Electronic Engineers /

IEEE C 95.1 (99) International Commission on Non Ionizing Radiation Protection (ICNIRP) 98

Ministry of Health (Canada) Safety Code 6. Limits on Human Exposure to Radio Frequency Fields in the range from 3kHz to 300 GHz

Australia Radiation Protection Standard To ensure compliance with various national and international Electromagnetic Field (EMF) standards, the system should only be operated with Cisco approved antennas and accessories. This Device Meets International Guidelines for Exposure to Radio Waves The 2800 series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) recommended by international guidelines. The guidelines were developed by an independent scientific organization (ICNIRP) and include a substantial safety margin designed to ensure the safety of all persons, regardless of age and health. 39 As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. MPE 0.6 mW/cm2 Separation Distance Distance 30 cm (12 inches) Limit 1.00 mW/cm2 The World Health Organization has stated that present scientific information does not indicate the need for any special precautions for the use of wireless devices. They recommend that if you are interested in further reducing your exposure then you can easily do so by reorienting antennas away from the user or placing he antennas at a greater separation distance then recommended. This Device Meets FCC Guidelines for Exposure to Radio Waves The 2800 series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) as referenced in FCC Part 1.1310. The guidelines are based on IEEE ANSI C 95.1 (92) and include a substantial safety margin designed to ensure the safety of all persons, regardless of age and health. As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. The device has been tested and found compliant with the applicable regulations as part of the radio certification process. MPE 0.6 mW/cm2 Separation Distance Distance 30 cm (12 inches) Limit 1.00 mW/cm2 The US Food and Drug Administration has stated that present scientific information does not indicate the need for any special precautions for the use of wireless devices. The FCC recommends that if you are interested in further reducing your exposure then you can easily do so by reorienting antennas away from the user or placing the antennas at a greater separation distance then recommended or lowering the transmitter power output. This Device Meets the Industry Canada Guidelines for Exposure to Radio Waves The 2800 series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) as referenced in Health Canada Safety Code 6. The guidelines include a substantial safety margin designed into the limit to ensure the safety of all persons, regardless of age and health. As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. Frequency 2.4 GHz 5 GHz MPE 2.9 W/m2 3.8 W/m2 Separation Distance Distance 20 cm (7.87 inches) Limit 5.4 W/m2 9.2 W/m2 Health Canada states that present scientific information does not indicate the need for any special precautions for the use of wireless devices. They recommend that if you are interested in further reducing your exposure you can easily do so by reorienting antennas away from the user, placing the antennas at a greater separation distance than recommended, or lowering the transmitter power output. Cet appareil est conforme aux directives internationales en matire d'exposition aux frquences radiolectriques Cet appareil de la gamme 2800 comprend un metteur-rcepteur radio. Il a t conu de manire respecter les limites en matire d'exposition aux frquences radiolectriques (champs lectromagntiques de frquence radio), recommandes dans le code de scurit 6 de Sant Canada. Ces directives intgrent une marge de scurit importante destine assurer la scurit de tous, indpendamment de l'ge et de la sant. Par consquent, les systmes sont conus pour tre exploits en vitant que l'utilisateur n'entre en contact avec les antennes. Il est recommand de poser le systme l o les antennes sont une distance minimale telle que prcise par l'utilisateur conformment aux directives rglementaires qui sont conues pour rduire l'exposition gnrale de l'utilisateur ou de l'oprateur. Frquence 2.4 GHz 5 GHz MPE 2.9 W/m2 3.8 W/m2 Distance d'loignement Distance 20 cm (7.87 inches) Limite 5.4 W/m2 9.2 W/m2 Sant Canada affirme que la littrature scientifique actuelle n'indique pas qu'il faille prendre des prcautions particulires lors de l'utilisation d'un appareil sans fil. Si vous voulez rduire votre exposition encore davantage, selon l'agence, vous pouvez facilement le faire en rorientant les antennes afin qu'elles soient diriges l'cart de l'utilisateur, en les plaant une distance d'loignement suprieure celle recommande ou en rduisant la puissance de sortie de l'metteur. Additional Information on RF Exposure You can find additional information on the subject at the following links:

Cisco Systems Spread Spectrum Radios and RF Safety white paper at this URL:

http://www.cisco.com/warp/public/cc/pd/witc/ao340ap/prodlit/rfhr_wi.htm

FCC Bulletin 56: Questions and Answers about Biological Effects and Potential Hazards of Radio Frequency Electromagnetic Fields

FCC Bulletin 65: Evaluating Compliance with the FCC guidelines for Human Exposure to Radio Frequency Electromagnetic Fields You can obtain additional information from the following organizations:

World Health Organization Internal Commission on Non-Ionizing Radiation Protection at this URL: www.who.int/emf

United Kingdom, National Radiological Protection Board at this URL: www.nrpb.org.uk

Cellular Telecommunications Association at this URL: www.wow-com.com

The Mobile Manufacturers Forum at this URL: www.mmfai.org Administrative Rules for Cisco Aironet Access Points in Taiwan This section provides administrative rules for operating Cisco Aironet access points in Taiwan. The rules for all access points are provided in both Chinese and English. Chinese Translation 43 English Translation Administrative Rules for Low-power Radio-Frequency Devices Article 12 For those low-power radio-frequency devices that have already received a type-approval, companies, business units or users should not change its frequencies, increase its power or change its original features and functions. Article 14 The operation of the low-power radio-frequency devices is subject to the conditions that no harmful interference is caused to aviation safety and authorized radio station; and if interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear. The authorized radio station means a radio-communication service operating in accordance with the Communication Act. The operation of the low-power radio-frequency devices is subject to the interference caused by the operation of an authorized radio station, by another intentional or unintentional radiator, by industrial, scientific and medical (ISM) equipment, or by an incidental radiator. Chinese Translation 44 English Translation Low-power Radio-frequency Devices Technical Specifications 4.7 Unlicensed National Information Infrastructure 4.7.5 4.7.6 4.7.7 Within the 5.25-5.35 GHz band, U-NII devices will be restricted to indoor operations to reduce any potential for harmful interference to co-channel MSS operations. The U-NII devices shall accept any interference from legal communications and shall not interfere the legal communications. If interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear. Manufacturers of U-NII devices are responsible for ensuring frequency stability such that an emission is maintained within the band of operation under all conditions of normal operation as specified in the user manual. Operation of Cisco Aironet Access Points in Brazil This section contains special information for operation of Cisco Aironet access points in Brazil. Access Point Models:

AIR-AP2802I-Z-K9 AIR-AP2802E-Z-K9 45 Figure 7 Brazil Regulatory Information Portuguese Translation Este equipamento opera em carter secundrio, isto , no tem direito a proteo contra interferncia prejudicial, mesmo de estaes do mesmo tipo, e no pode causar interferncia a sistemas operando em carter primrio. English Translation This equipment operates on a secondary basis and consequently must accept harmful interference, including interference from stations of the same kind. This equipment may not cause harmful interference to systems operating on a primary basis. Declaration of Conformity Statements All the Declaration of Conformity statements related to this product can be found at the following location: http://www.ciscofax.com 46 16 Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see Whats New in Cisco Product Documentation at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html. Subscribe to Whats New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation as an RSS feed and delivers content directly to your desktop using a reader application. The RSS feeds are a free service. 2016 Cisco Systems, Inc. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) 47 48

GETTING STARTED GUIDE Cisco Aironet 3800I and 3800E Series Access Points First Published: February 22, 2016 1 About this Guide 2 About the Access Point 3 Safety Instructions 4 Unpacking 5 AP Views, Ports, and Connectors 6 Preparing the AP for Installation 7 Installation Overview 8 Performing a Pre-Installation Configuration 9 Mounting and Grounding the Access Point 10 Powering the Access Point 11 Configuring and Deploying the Access Point 12 Checking the Access Point LEDs 13 Miscellaneous Usage and Configuration Guidelines 14 Related Documentation 15 Declarations of Conformity and Regulatory Information 16 Obtaining Documentation and Submitting a Service Request 2 1 About this Guide This guide provides instructions on how to install your Cisco Aironet 3800I and 3800E series access points and provides links to resources which can help you configure the access point. This guide provides mounting instructions and limited troubleshooting procedures. The 3800 series access point is referred to as access point or AP in this document. 2 About the Access Point The Cisco Aironet 3800 Series Wi-Fi access points provide 802.11ac Wave 2 with Multi User MIMO

(MU MIMO). This AP series offers dual-band radios (2.4 GHz and 5 GHz) with integrated and external antenna options. The series supports high-performing Spectrum Intelligence which sustains three spatial stream rates over a deployable distance with high reliability when serving clients. The access points support full inter-interoperability with leading 802.11ac clients, and support a mixed deployment with other access points and controllers. A full listing of the access point's features and specification are provided in the Cisco Aironet 3800 Series Access Point Data Sheet, at the following URL:

(URL will be added when available, before FCS) Access Point Features The 3800 series access point is a wireless controller-based product and supports:

Simultaneous dual-band (2.4-GHz and 5-GHz) radios

External antennas on the 3802E and 3802P access point models (AIR-AP3802E-x-K9, Integrated antennas on the 3802I access point model (AIR-AP3802I-x-K9) AIR-AP3802P-x-K9) Note The x in the model numbers represents the regulatory domain. For information on supported regulatory domains, see theAP Model Numbers and Regulatory Domains section on page 4. Note The 3800P series access point model is covered in the Cisco Aironet 3800P Series Access Point Getting Started Guide, at this URL:

3 The other features of the 3800 series APs are:

Multi-Gigabit Ethernet (mGig) Support, providing multiple gigabit uplink speeds of 2.5G and 5G in addition to 100M and 1G speeds.

Radio Role Flexibility, allowing for either manual configuration or for the APs to intelligently determine the operating role of the integrated radios based on the available RF environment. The AP can operate in the following modes:

2.4GHz and 5GHz role, where one radio serves clients in 2.4GHz mode, while the other serves clients in 5GHz mode. Dual 5GHz role, with both radios operating in the 5GHz band, actively serving client devices to maximize the benefits of 802.11ac wave 2 and to increase client device capacity. Wireless Security Monitoring and 5GHz role, where one radio serves 5GHz clients, while the other radio scans both 2.4GHz and 5GHz for wIPS attackers, CleanAir interferers, and rogue devices.

Cross-AP Noise Reduction, a Cisco innovation that enables APs to intelligently collaborate in real time about RF conditions so that users connect with optimized signal quality and performance.

Optimized AP Roaming for ensuring that client devices associate with the AP in their coverage range that offers the fastest data rate available.

Cisco ClientLink 4.0 technology for improved downlink performance to all mobile devices, including one-, two-, and three-spatial-stream devices up to 802.11ac Wave 1 and Wave 2. The technology also improves battery life on mobile devices.

Cisco CleanAir technology enhanced with 160MHz channel support. CleanAir delivers proactive, high-speed spectrum intelligence across 20-, 40-, and 80-, and 160-MHz-wide channels to combat performance problems arising from wireless interference.

MIMO equalization capabilities, which optimize uplink performance and reliability by reducing the impact of signal fade. AP Model Numbers and Regulatory Domains AP Type Access Point for indoor environments, with internal antennas Access Point for indoor environments, with external antennas Model Number AIR-AP3802I-x-K9 AIR-AP3802E-x-K9 4 Details Dual-band, controller-based 802.11a/g/n/ac You need to verify whether the AP model you have is approved for use in your country. To verify approval and to identify the regulatory domain that corresponds to a particular country, visit http://www.cisco.com/go/aironet/compliance. Not all regulatory domains have been approved. As and when they are approved, this compliance list will be updated. Antennas and Radios The 3800 series access point contains two simultaneous dual-band radios, the 2.4GHz and 5GHz MU-MIMO radio, and the 5-GHz 802.11ac MU-MIMO radio. The 3800 series access point configurations are:

AIR-CAP3802I-x-K9two 2.4-GHz/5-GHz dual-band radios, with integrated dual-band inverted-F antennas.

AIR-AP3802E-x-K9two 2.4-GHz/5-GHz dual-band radios, up to 4 external dual-band dipole antennas. Internal Antennas The 3802I model access point is configured with four dual-band inverted-F antennas, and two 2.4-GHz/5-GHz dual-band radios. There are four antennas deployed inside the access point with one deployed on each corner of the 3802I access point top housing. Each antenna covers both the 2.4 GHz and the 5 GHz bands with a single feed line. The basic features are as follows:

Dual-band inverted-F antenna for use in both the 2.4-GHz and 5-GHz bands.

Antenna unit integrated into the 3802I model access point.

Peak gain is approximately 4 dBi in both the 2.4-GHz and 5-GHz bands. External Antennas The 3802E model is configured with up to four external dual-band dipole antennas, and two 2.4-GHz/

5-GHz dual-band radios. The radio and antennas support frequency bands 24002500 MHz and 51805865 MHz through a common dual-band RF interface. Features of the external dual-band dipole antennas are:

Four RTNC antenna connectors on the top of the access point

Four TX/RX antennas 5 Supported External Antennas Frequency 2.4GHz 5GHz Part Number AIR-ANT24020V-R AIR-ANT2452V-R AIR-ANT2430V-R AIR-ANT2440NV-R AIR-ANT2460NP-R AIR-ANT5140V-R AIR-ANT5140NV-R AIR-ANT5145V-R AIR-ANT5160NP-R Antenna Type Omni Diversity Omni-directional MIMO 3-Element Omni MIMO Wall-Mount Omni Antenna MIMO 3-Element Patch MIMO 3-Element Omni MIMO Wall-Mount Omni Antenna Diversity Omni-directional MIMO 3-Element Patch 2.4GHz and 5GHz AIR-ANT2451V-R AIR-ANT2451NV-R AIR-ANT2524DB-R AIR-ANT2524DW-R AIR-ANT2524DG-R AIR-ANT2524V4C-R AIR-ANT2535SDW-R AIR-ANT2544V4M-R AIR-ANT2566P4W-R AIR-ANT2566D4M-R AIR-ANT2513P4M-N Omni Omni Dual-resonant black dipole Dual-resonant white dipole Dual-resonant gray dipole Dual-resonant ceiling mount omni (4-pack) Dual-resonant "stubby" monopole Dual-resonant omni (4-pack) Dual-resonant "directional" antenna

(4-pack) Dual-Band Polarization-Diverse Directional Array Dual-resonant cross-pol "directional"

antenna (4-pack) For additional details on the supported antennas, such as antenna gain, and information such as channels and maximum power settings, see the Channels and Maximum Power Settings for Cisco 3800 Series Access Points sheet at the following URL:

(To be added when available, before FCS) 6 3 Safety Instructions Translated versions of the following safety warnings are provided in the translated safety warnings document that is shipped with your access point. The translated warnings are also in the Translated Safety Warnings for Cisco Aironet Access Points, which is available on Cisco.com. Warning IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071 SAVE THESE INSTRUCTIONS Warning Read the installation instructions before you connect the system to its power source. Statement 1004 Warning Installation of the equipment must comply with local and national electrical codes. Statement 1074 Warning This product relies on the buildings installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than:

20A. Statement 1005 Warning Do not operate your wireless network device near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use. Statement 245B Warning In order to comply with FCC radio frequency (RF) exposure limits, antennas should be located at a minimum of 7.9 inches (20 cm) or more from the body of all persons. Statement 332 7 Caution Caution The fasteners you use to mount an access point on a ceiling must be capable of maintaining a minimum pullout force of 20 lbs (9 kg) and must use all 4 indented holes on the mounting bracket. This product and all interconnected equipment must be installed indoors within the same building, including the associated LAN connections as defined by Environment A of the IEEE 802.af Standard. Note The access point is suitable for use in environmental air space in accordance with section 300.22.C of the National Electrical Code and sections 2-128, 12-010(3), and 12-100 of the Canadian Electrical Code, Part 1, C22.1. You should not install the power supply or power injector in air handling spaces. Note Use only with listed ITE equipment. 4 Unpacking To unpack the access point, follow these steps:

Step 1 Unpack and remove the access point and the accessory kit from the shipping box. Step 2 Return any packing material to the shipping container and save it for future use. Step 3 Verify that you have received the items listed below. If any item is missing or damaged, contact your Cisco representative or reseller for instructions. The access point Mounting bracket (selected when you ordered the access point) Adjustable ceiling-rail clip (selected when you ordered the access point) 8 5 AP Views, Ports, and Connectors Figure 1 Face of the 3802I Model 1 2 Status LED 3 Location of the module connector port on the base of the AP. Location of the ports and connectors on the head of the AP. 9 Figure 2 Face of the 3802E Model 1 Dual-band antenna connector A. 2 Dual-band antenna connector B. 3 Dual-band antenna connector C. 4 Dual-band antenna connector D. 5 6 7 Location of the ports and connectors on the head of the AP. Status LED. Location of the module connector port on the base of the AP. The ports and connections on the bottom of the access point are shown in Figure 3. 10 Figure 3 Access Point Ports and Connections on the Head - 3802E and 3802I Models 1 Kensington lock slot. 2 Mode button. 3 Gigabit Ethernet port. 4 USB port. 5 6 7 DC power port. 11 Figure 4 AP Module Connector Port on the Base 12 6 Preparing the AP for Installation Before you mount and deploy your access point, we recommend that you perform a site survey (or use the site planning tool) to determine the best location to install your access point. You should have the following information about your wireless network available:

Access point locations.

Access point mounting options: below a suspended ceiling, on a flat horizontal surface, or on a desktop. Note You can mount the access point above a suspended ceiling but you must purchase additional mounting hardware: See Mounting and Grounding the Access Point section on page 18 for additional information.

Access point power options: power supplied by the recommended external power supply (Cisco AIR-PWR-C), a DC power supply, PoE from a network device, or a PoE power injector/hub

(usually located in a wiring closet). Note Access points mounted in a buildings environmental airspace must be powered using PoE to comply with safety regulations. Cisco recommends that you make a site map showing access point locations so that you can record the device MAC addresses from each location and return them to the person who is planning or managing your wireless network. 7 Installation Overview Installing the access point involves these operations:

Performing a Pre-Installation Configuration, page 14 (optional) Step 1 Step 2 Mounting and Grounding the Access Point, page 18 Step 3 Step 4 Powering the Access Point, page 19 Preparing the AP for Installation, page 13 13 8 Performing a Pre-Installation Configuration For a Cisco Mobility Express deployment, see the Cisco Mobility Express User Guide at this URL:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/1/user_guide/b_ME_User_Guid e.html The following procedures ensure that your access point installation and initial operation go as expected. This procedure is optional. Note Performing a pre-installation configuration is an optional procedure. If your network controller is properly configured, you can install your access point in its final location and connect it to the network from there. See the Deploying the Access Point on the Wireless Network section on page 23 for details. The following Pre-Installation Configuration procedure given does not include configuring Link Aggregation. For information on configuring Link Aggregation, see the Cisco Wireless LAN Controller Configuration Guide, Release 8.1, at this URL:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81.html The pre-installation configuration setup is illustrated in Figure 5. 14 Figure 5 Pre-Installation Configuration Setup Controller Layer 3 devices Link Aggregation Link Aggregation Cisco Aironet access points 6 6 0 4 5 3 To perform pre-installation configuration, perform the following steps:

Step 1 Make sure that the Cisco wireless LAN controller DS port is connected to the network. Use the CLI, web-browser interface, or Cisco WCS procedures as described in the appropriate Cisco wireless LAN controller guide. a. Make sure that access points have Layer 3 connectivity to the Cisco wireless LAN controller Management and AP-Manager Interface. b. Configure the switch to which your access point is to attach. See the Cisco Wireless LAN Controller Configuration Guide for the release you are using, for additional information. c. Set the Cisco wireless LAN controller as the master so that new access points always join with it. d. Make sure DHCP is enabled on the network. The access point must receive its IP address through DHCP. e. CAPWAP UDP ports must not be blocked in the network. f. The access point must be able to find the IP address of the controller. This can be accomplished using DHCP, DNS, or IP subnet broadcast. This guide describes the DHCP method to convey the controller IP address. For other methods, refer to the product 15 documentation. See also the Configuring DHCP Option 43 section on page 29 for more information. Note The access point requires a gigabit Ethernet (GbE) link to prevent the Ethernet port from becoming a bottleneck for traffic because wireless traffic speeds exceed transmit speeds of a 10/100 Ethernet port. Step 2 Apply power to the access point. See Powering the Access Point, page 19. a. As the access point attempts to connect to the controller, the LEDs cycle through a green, red, and amber sequence, which can take up to 5 minutes. Note If the access point remains in this mode for more than five minutes, the access point is unable to find the Master Cisco wireless LAN controller. Check the connection between the access point and the Cisco wireless LAN controller and be sure that they are on the same subnet. If the access point shuts down, check the power source. b. c. After the access point finds the Cisco wireless LAN controller, it attempts to download the new operating system code if the access point code version differs from the Cisco wireless LAN controller code version. While this is happening, the Status LED blinks amber. If the operating system download is successful, the access point reboots. d. Step 3 Configure the access point if required. Use the controller CLI, controller GUI, or Cisco Prime Step 4 Step 5 Infrastructure to customize the access-point-specific 802.11ac network settings. If the pre-installation configuration is successful, the Status LED is green indicating normal operation. Disconnect the access point and mount it at the location at which you intend to deploy it on the wireless network. If your access point does not indicate normal operation, turn it off and repeat the pre-installation configuration. 16 Note When you are installing a Layer 3 access point on a different subnet than the Cisco wireless LAN controller, be sure that a DHCP server is reachable from the subnet on which you will be installing the access point, and that the subnet has a route back to the Cisco wireless LAN controller. Also be sure that the route back to the Cisco wireless LAN controller has destination UDP ports 5246 and 5247 open for CAPWAP communications. Ensure that the route back to the primary, secondary, and tertiary wireless LAN controller allows IP packet fragments. Finally, be sure that if address translation is used, that the access point and the Cisco wireless LAN controller have a static 1-to-1 NAT to an outside address. (Port Address Translation is not supported.) 17 9 Mounting and Grounding the Access Point Cisco Aironet 3800 series access points can be mounted in several configurations on a suspended ceiling, on a hard ceiling or wall, on an electrical or network box, and above a suspended ceiling. Go to the following URL for access point mounting instructions:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mounting/guide/apmount.html The standard mounting hardware supported by the AP is listed in Table 1. Table 1 Brackets and Clips for Mounting the AP Part Number Brackets AIR-AP-BRACKET-1 AIR-AP-BRACKET-2 AIR-AP-T-RAIL-R Clips AIR-AP-T-RAIL-F AIR-CHNL-ADAPTER Description Low-profile bracket

(This is the default option) Universal bracket Ceiling Grid Clip (Recessed mounting)

(This is the default option) Ceiling Grid Clip (Flush mounting) Optional adapter for channel-rail ceiling grid profile. 18 10 Powering the Access Point The AP can be powered using:

48 V DC power via the 48VDC port, using Cisco Power Adapter AC DC AIR-PWR-C=. Ensure that the power cable is routed through the strain relief retention clips cast into the enclosure. See Figure 6.

Power-over-Ethernet (PoE) from the Ethernet cable, from an external power source such as the Cisco Power Injector AIR-PWRINJ4=.You can also use the AIR-PWRINJ5 Cisco Power Injector but with reduced functionality.

Any 802.3at (25.5 W) or 802.3af (15.4 W) compliant power injector. However, when powered by an 802.3af powering source, the following operations are supported:

For 3802I the AUX and USB ports are disabled. Both radios operate at full operation. For 3802E the AUX and USB ports are disabled. The 2.4GHz radio will shift to 2x3:2SS operation and the 5GHz radio will remain at full operation. With an 802.3at or the AIR-PWR-C= as the power source, the AP3802I/E provides full operation including the AUX and USB ports. 19 Figure 6 Routing the DC Power Cable 2 3 1 4 5 9 5 8 3 5 3 1 Kensington lock slot 4 DC power cable plugged into the 48VDC port 2 Power cable routed through the strain relief retention clips 5 AP secured using a padlock 3 DC power cable 20 11 Configuring and Deploying the Access Point This section describes how to connect the access point to a wireless LAN controller. Because the configuration process takes place on the controller, see the Cisco Wireless LAN Controller Configuration Guide for additional information. For a Cisco Mobility Express deployment, see the Cisco Mobility Express User Guide at this URL:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/1/user_guide/b_ME_User_Guid e.html The information in this section does not include configuring Link Aggregation. For information on configuring Link Aggregation, see the Cisco Wireless LAN Controller Configuration Guide, Release 8.1, at the following URL:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81.html The Controller Discovery Process The access point uses standard Control and Provisioning of Wireless Access Points Protocol

(CAPWAP) to communicate between the controller and other wireless access points on the network. CAPWAP is a standard, inter-operable protocol which enables an access controller to manage a collection of wireless termination points. The discovery process using CAPWAP is identical to the Lightweight Access Point Protocol (LWAPP) used with previous Cisco Aironet access points. LWAPP-enabled access points are compatible with CAPWAP, and conversion to a CAPWAP controller is seamless. Deployments can combine CAPWAP and LWAPP software on the controllers. The functionality provided by the controller does not change except for customers who have Layer 2 deployments, which CAPWAP does not support. In a CAPWAP environment, a wireless access point discovers a controller by using CAPWAP discovery mechanisms and then sends it a CAPWAP join request. The controller sends the access point a CAPWAP join response allowing the access point to join the controller. When the access point joins the controller, the controller manages its configuration, firmware, control transactions, and data transactions. Note For additional information about the discovery process and CAPWAP, see the Cisco Wireless LAN Controller Software Configuration Guide. This document is available on Cisco.com. 21 Note CAPWAP support is provided in controller software release 5.2 or later. However, your controller must be running the release that supports 3800 series access points, as specified in the access points data sheet. Note You cannot edit or query any access point using the controller CLI if the name of the access point contains a space. Note Make sure that the controller is set to the current time. If the controller is set to a time that has already occurred, the access point might not join the controller because its certificate may not be valid for that time. Access points must be discovered by a controller before they can become an active part of the network. The access point supports these controller discovery processes:

Layer 3 CAPWAP discoveryCan occur on different subnets than the access point and uses IP addresses and UDP packets rather than MAC addresses used by Layer 2 discovery.

Locally stored controller IP address discoveryIf the access point was previously joined to a controller, the IP addresses of the primary, secondary, and tertiary controllers are stored in the access points non-volatile memory. This process of storing controller IP addresses on an access point for later deployment is called priming the access point. For more information about priming, see the Performing a Pre-Installation Configuration section on page 14.

DHCP server discoveryThis feature uses DHCP option 43 to provide controller IP addresses to the access points. Cisco switches support a DHCP server option that is typically used for this capability. For more information about DHCP option 43, see the Configuring DHCP Option 43 section on page 29.

DNS discoveryThe access point can discover controllers through your domain name server

(DNS). For the access point to do so, you must configure your DNS to return controller IP addresses in response to CISCO-CAPWAP-CONTROLLER.localdomain, where localdomain is the access point domain name. Configuring the CISCO-CAPWAP-CONTROLLER provides backwards compatibility in an existing customer deployment. When an access point receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-CAPWAP-CONTROLLER.localdomain. When the DNS sends a list of controller IP addresses, the access point sends discovery requests to the controllers. 22 Deploying the Access Point on the Wireless Network After you have mounted the access point, follow these steps to deploy it on the wireless network:

Step 1 Connect and power up the access point. Step 2 Observe the access point LED (for LED descriptions, see Checking the Access Point LEDs b. c. section on page 24). a. When you power up the access point, it begins a power-up sequence that you can verify by observing the access point LED. If the power-up sequence is successful, the discovery and join process begins. During this process, the LED blinks sequentially green, red, and off. When the access point has joined a controller, the LED is chirping green if no clients are associated or green if one or more clients are associated. If the LED is not on, the access point is most likely not receiving power. If the LED blinks sequentially for more than 5 minutes, the access point is unable to find its primary, secondary, and tertiary Cisco wireless LAN controller. Check the connection between the access point and the Cisco wireless LAN controller, and be sure the access point and the Cisco wireless LAN controller are either on the same subnet or that the access point has a route back to its primary, secondary, and tertiary Cisco wireless LAN controller. Also, if the access point is not on the same subnet as the Cisco wireless LAN controller, be sure that there is a properly configured DHCP server on the same subnet as the access point. See the Configuring DHCP Option 43 section on page 29 for additional information. Step 3 Reconfigure the Cisco wireless LAN controller so that it is not the Master. Note A Master Cisco wireless LAN controller should be used only for configuring access points and not in a working network. 23 12 Checking the Access Point LEDs Access Point Status LEDs The location of the access point status LED is shown in Figure 2. Note Regarding LED status colors, it is expected that there will be small variations in color intensity and hue from unit to unit. This is within the normal range of the LED manufacturers specifications and is not a defect. The access point status LED indicates various conditions and are described in Table 2. Table 2 LED Status Indications Message Type Association status LED State Chirping Green Boot loader status Boot loader error Operating status Access point operating system errors Green Green Red Blinking amber Cycling through green, red, and amber Rapidly cycling through red, green, amber, and off. Cycling through red, green, amber, and off Message Meaning Normal operating condition, but no wireless client associated Normal operating condition, at least one wireless client association Executing boot loader Boot loader signing verification failure Software upgrade in progress Discovery/join process in progress Access point location command invoked from controller web interface. General warning; insufficient inline power 24 Ethernet Port LEDs Each Ethernet port has two LEDs for showing Link (Green) and Activity (Amber) statuses. They are integrated on the RJ45 connector. For a description of the statuses they indicate, see the following table. Link (Green) LED State Activity (Amber) LED State 10M Link Off On 100M 10M Link Active Off Off Blinking On 1000M 100M Link Active Off On Blinking On 1000M Active On Blinking 25 13 Miscellaneous Usage and Configuration Guidelines Using the Mode Button Using the Mode button (see Figure 3) you can:

Reset the AP to its default factory-shipped configuration.

Clear the APs internal storage, including all configuration files. To use the mode button, press, and keep pressed, the mode button on the access point during the AP's boot cycle. Wait until the AP's status LED changes to Amber. During this, the AP console shows a seconds counter, counting the number of seconds the mode button is pressed. Then:

To reset the AP to its default factory-shipped configuration, keep the mode button pressed for less than 20 seconds. The AP's configuration files are cleared. This resets all configuration settings to factory defaults, including passwords, WEP keys, the IP address, and the SSID.

To clear the APs internal storage, including all configuration files and the regulatory domain configuration, keep the mode button pressed for more than 20 seconds, but less than 60 seconds. The AP's status LED changes from Amber to Red, and all the files in the AP's storage directory are cleared. If you keep the mode button pressed for more than 60 seconds, the mode button is assumed faulty and no changes are made. 26 Troubleshooting the Access Point to Cisco Controller Join Process Note Ensure that your controller is running the latest Cisco Wireless Controller Software Release as specified in the access points data sheet. Access points can fail to join a controller for many reasons: a RADIUS authorization is pending;

self-signed certificates are not enabled on the controller; the access points and controllers regulatory domains dont match, and so on. Controller software enables you to configure the access points to send all CAPWAP-related errors to a syslog server. You do not need to enable any debug commands on the controller because all of the CAPWAP error messages can be viewed from the syslog server itself. The state of the access point is not maintained on the controller until it receives a CAPWAP join request from the access point. Therefore, it can be difficult to determine why the CAPWAP discovery request from a certain access point was rejected. In order to troubleshoot such joining problems without enabling CAPWAP debug commands on the controller, the controller collects information for all access points that send a discovery message to it and maintains information for any access points that have successfully joined it. The controller collects all join-related information for each access point that sends a CAPWAP discovery request to the controller. Collection begins with the first discovery message received from the access point and ends with the last configuration payload sent from the controller to the access point. You can view join-related information for up to three times the maximum number of access points supported by the platform for the 2500 series controllers and the Controller Network Module within the Cisco 28/37/38xx Series Integrated Services Routers. Note The maximum number of access points varies for the Cisco WiSM2, depending on which controller software release is being used. When the controller is maintaining join-related information for the maximum number of access points, it does not collect information for any more access points. An access point sends all syslog messages to IP address 255.255.255.255 by default when any of the following conditions are met:

An access point running software release 8.0.x.x or later has been newly deployed. 27

An existing access point running software release 8.0.x.x or later has been reset after clearing the configuration. If any of these conditions are met and the access point has not yet joined a controller, you can also configure a DHCP server to return a syslog server IP address to the access point using option 7 on the server. The access point then starts sending all syslog messages to this IP address. When the access point joins a controller for the first time, the controller sends the global syslog server IP address (the default is 255.255.255.255) to the access point. After that, the access point sends all syslog messages to this IP address until it is overridden by one of the following scenarios:

The access point is still connected to the same controller, and the global syslog server IP address configuration on the controller has been changed using the config ap syslog host global syslog_server_IP_address command. In this case, the controller sends the new global syslog server IP address to the access point.

The access point is still connected to the same controller, and a specific syslog server IP address has been configured for the access point on the controller using the config ap syslog host specific Cisco_AP syslog_server_IP_address command. In this case, the controller sends the new specific syslog server IP address to the access point.

The access point is disconnected from the controller and joins another controller. In this case, the new controller sends its global syslog server IP address to the access point.

Whenever a new syslog server IP address overrides the existing syslog server IP address, the old address is erased from persistent storage, and the new address is stored in its place. The access point also starts sending all syslog messages to the new IP address provided the access point can reach the syslog server IP address. You can configure the syslog server for access points and view the access point join information only from the controller CLI. Important Information for Controller-based Deployments Keep these guidelines in mind when you use 3802 series access points:

The access point can only communicate with Cisco wireless LAN controllers.

The access point does not support Wireless Domain Services (WDS) and cannot communicate with WDS devices. However, the controller provides functionality equivalent to WDS when the access point joins it.

CAPWAP does not support Layer 2. The access point must get an IP address and discover the controller using Layer 3, DHCP, DNS, or IP subnet broadcast.

The access point console port is enabled for monitoring and debug purposes. All configuration commands are disabled when the access point is connected to a controller. 28 Configuring DHCP Option 43 You can use DHCP Option 43 to provide a list of controller IP addresses to the access points, enabling them to find and join a controller. The following is a DHCP Option 43 configuration example on a Windows 2003 Enterprise DHCP server for use with Cisco Aironet lightweight access points. For other DHCP server implementations, consult product documentation for configuring DHCP Option 43. In Option 43, you should use the IP address of the controller management interface. Note DHCP Option 43 is limited to one access point type per DHCP pool. You must configure a separate DHCP pool for each access point type. The 3800 series access point uses the type-length-value (TLV) format for DHCP Option 43. DHCP servers must be programmed to return the option based on the access points DHCP Vendor Class Identifier (VCI) string (DHCP Option 43). The VCI string for the 3800 series access point is:

Cisco AP c3800 The format of the TLV block is listed below:

Type: 0xf1 (decimal 241)

Length: Number of controller IP addresses * 4

Value: List of WLC management interfaces To configure DHCP Option 43 in the embedded Cisco IOS DHCP server, follow these steps:

Enter configuration mode at the Cisco IOS CLI. Step 1 Step 2 Create the DHCP pool, including the necessary parameters such as default router and name server. A DHCP scope example is as follows:

ip dhcp pool <pool name>

network <IP Network> <Netmask>

default-router <Default router>

dns-server <DNS Server>

Where:

<pool name> is the name of the DHCP pool, such as AP3802

<IP Network> is the network IP address where the controller resides, such as 10.0.15.1 29

<Netmask> is the subnet mask, such as 255.255.255.0

<Default router> is the IP address of the default router, such as 10.0.0.1

<DNS Server> is the IP address of the DNS server, such as 10.0.10.2 Step 3 Add the option 43 line using the following syntax:

option 43 hex <hex string>

The hex string is assembled by concatenating the TLV values shown below:

Type + Length + Value Type is always f1(hex). Length is the number of controller management IP addresses times 4 in hex. Value is the IP address of the controller listed sequentially in hex. For example, suppose that there are two controllers with management interface IP addresses, 10.126.126.2 and 10.127.127.2. The type is f1(hex). The length is 2 * 4 = 8 = 08 (hex). The IP addresses translate to 0a7e7e02 and 0a7f7f02. Assembling the string then yields f1080a7e7e020a7f7f02. The resulting Cisco IOS command added to the DHCP scope is option 43 hex f1080a7e7e020a7f7f02. 14 Related Documentation All user documentation for the Cisco Aironet 3800 series access point is available at the following URL:

(URL to be added at FCS) For detailed information and guidelines for configuring and deploying your access point in a wireless network, see the following documentation:

Cisco Wireless LAN Controller Configuration Guide, Release 8.3, at the following URL:

(URL to be added at FCS)

Cisco Aironet 3800 Series Access Point Deployment Guide, at the following URL:

(URL to be added when available) 30 15 Declarations of Conformity and Regulatory Information This section provides declarations of conformity and regulatory information for the Cisco Aironet 3800 Series Access Points. You can find additional information at this URL:

www.cisco.com/go/aironet/compliance Manufacturers Federal Communication Commission Declaration of Conformity Statement Tested To Comply With FCC Standards FOR HOME OR OFFICE USE Access Point Models AIR-AP3802I-B-K9 AIR-AP3802E-B-K9 Manufacturer:

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA Certification Number LDK102100 LDK102099 This device complies with Part 15 rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference, and 2. This device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits of a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential environment. This equipment generates, uses, and radiates radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference. However, there is no guarantee that 31 interference will not occur. If this equipment does cause interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna.

Connect the equipment to an outlet on a circuit different from which the receiver is connected.

Consult the dealer or an experienced radio/TV technician. Increase separation between the equipment and receiver. Caution The Part 15 radio device operates on a non-interference basis with other devices operating at this frequency when using the integrated antennas. Any changes or modification to the product not expressly approved by Cisco could void the users authority to operate this device. VCCI Statement for Japan Warning This is a Class B product based on the standard of the Voluntary Control Council for Interference from Information Technology Equipment (VCCI). If this is used near a radio or television receiver in a domestic environment, it may cause radio interference. Install and use the equipment according to the instruction manual. 32 Guidelines for Operating Cisco Aironet Access Points in Japan This section provides guidelines for avoiding interference when operating Cisco Aironet access points in Japan. These guidelines are provided in both Japanese and English. Japanese Translation 03-6434-6500 7 9 6 8 0 2 English Translation This equipment operates in the same frequency bandwidth as industrial, scientific, and medical devices such as microwave ovens and mobile object identification (RF-ID) systems (licensed premises radio stations and unlicensed specified low-power radio stations) used in factory production lines. 1. Before using this equipment, make sure that no premises radio stations or specified low-power 2. 3. radio stations of RF-ID are used in the vicinity. If this equipment causes RF interference to a premises radio station of RF-ID, promptly change the frequency or stop using the device; contact the number below and ask for recommendations on avoiding radio interference, such as setting partitions. If this equipment causes RF interference to a specified low-power radio station of RF-ID, contact the number below. Contact Number: 03-6434-6500 33 Statement 371Power Cable and AC Adapter English Translation When installing the product, please use the provided or designated connection cables/power cables/AC adaptors. Using any other cables/adaptors could cause a malfunction or a fire. Electrical Appliance and Material Safety Law prohibits the use of UL-certified cables (that have the UL shown on the code) for any other electrical devices than products designated by CISCO. The use of cables that are certified by Electrical Appliance and Material Safety Law (that have PSE shown on the code) is not limited to CISCO-designated products. Industry Canada Access Point Models AIR-AP3802I-A-K9 AIR-AP3802E-A-K9 Certification Number 2461B-102100 2461B-102099 Canadian Compliance Statement This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. Under Industry Canada regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by Industry Canada. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication. Conformment la rglementation d'Industrie Canada, le prsent metteur radio peut fonctionner avec une antenne d'un type et d'un gain maximal (ou infrieur) approuv pour l'metteur par Industrie Canada. Dans le but de rduire les risques de brouillage radiolectrique l'intention des autres utilisateurs, il faut choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonne quivalente (p.i.r.e.) ne dpasse pas l'intensit ncessaire l'tablissement d'une communication satisfaisante. This radio transmitter has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Le prsent metteur radio a t approuv par Industrie Canada pour fonctionner avec les types d'antenne numrs ci-dessous et ayant un gain admissible maximal et l'impdance requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est suprieur au gain maximal indiqu, sont strictement interdits pour l'exploitation de l'metteur. 35 Antenna Type Dual-band Omni Dual-band Dipole Dual-Band Directional Antenna Gain 2/4 dBi 2/4 dBi 6/6 dBi Antenna Impedance 50 ohms 50 ohms 50 ohms Operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems. La bande 5 150-5 250 MHz est rservs uniquement pour une utilisation l'intrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux. Users are advised that high-power radars are allocated as primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Les utilisateurs tes aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., qu'ils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. European Community, Switzerland, Norway, Iceland, and Liechtenstein Access Point Models:

AIR-AP3802I-E-K9 AIR-AP3802E-E-K9 36 Declaration of Conformity with regard to the R&TTE Directive 1999/5/EC & Medical Directive 93/42/EEC 37 The following standards were applied:

EMCEN 301.489-1 v1.9.2; EN 301.489-17 v2.2.1 Health & SafetyEN60950-1: 2006; EN 50385: 2002 RadioEN 300 328 v 1.8.1; EN 301.893 v 1.7.1 The conformity assessment procedure referred to in Article 10.4 and Annex III of Directive 1999/5/EC has been followed. 38 This device also conforms to the EMC requirements of the Medical Devices Directive 93/42/EEC. Note This equipment is intended to be used in all EU and EFTA countries. Outdoor use may be restricted to certain frequencies and/or may require a license for operation. For more details, contact Cisco Corporate Compliance. The product carries the CE Mark:

Declaration of Conformity for RF Exposure This section contains information on compliance with guidelines related to RF exposure. Generic Discussion on RF Exposure The Cisco products are designed to comply with the following national and international standards on Human Exposure to Radio Frequencies:

US 47 Code of Federal Regulations Part 2 Subpart J

American National Standards Institute (ANSI) / Institute of Electrical and Electronic Engineers /

IEEE C 95.1 (99) International Commission on Non Ionizing Radiation Protection (ICNIRP) 98

Ministry of Health (Canada) Safety Code 6. Limits on Human Exposure to Radio Frequency Fields in the range from 3kHz to 300 GHz

Australia Radiation Protection Standard To ensure compliance with various national and international Electromagnetic Field (EMF) standards, the system should only be operated with Cisco approved antennas and accessories. This Device Meets International Guidelines for Exposure to Radio Waves The 3800 series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) recommended by international guidelines. The guidelines were developed by an independent scientific organization (ICNIRP) and include a substantial safety margin designed to ensure the safety of all persons, regardless of age and health. 39 As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. MPE 0.6 mW/cm2 Separation Distance Distance 30 cm (12 inches) Limit 1.00 mW/cm2 The World Health Organization has stated that present scientific information does not indicate the need for any special precautions for the use of wireless devices. They recommend that if you are interested in further reducing your exposure then you can easily do so by reorienting antennas away from the user or placing he antennas at a greater separation distance then recommended. This Device Meets FCC Guidelines for Exposure to Radio Waves The 3800 series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) as referenced in FCC Part 1.1310. The guidelines are based on IEEE ANSI C 95.1 (92) and include a substantial safety margin designed to ensure the safety of all persons, regardless of age and health. As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. The device has been tested and found compliant with the applicable regulations as part of the radio certification process. MPE 0.6 mW/cm2 Separation Distance Distance 30 cm (12 inches) Limit 1.00 mW/cm2 The US Food and Drug Administration has stated that present scientific information does not indicate the need for any special precautions for the use of wireless devices. The FCC recommends that if you are interested in further reducing your exposure then you can easily do so by reorienting antennas away from the user or placing the antennas at a greater separation distance then recommended or lowering the transmitter power output. This Device Meets the Industry Canada Guidelines for Exposure to Radio Waves The 3800 series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) as referenced in Health Canada Safety Code 6. The guidelines include a substantial safety margin designed into the limit to ensure the safety of all persons, regardless of age and health. As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. Frequency 2.4 GHz 5 GHz MPE 2.9 W/m2 3.8 W/m2 Separation Distance Distance 20 cm (7.87 inches) Limit 5.4 W/m2 9.2 W/m2 Health Canada states that present scientific information does not indicate the need for any special precautions for the use of wireless devices. They recommend that if you are interested in further reducing your exposure you can easily do so by reorienting antennas away from the user, placing the antennas at a greater separation distance than recommended, or lowering the transmitter power output. Cet appareil est conforme aux directives internationales en matire d'exposition aux frquences radiolectriques Cet appareil de la gamme 3800 comprend un metteur-rcepteur radio. Il a t conu de manire respecter les limites en matire d'exposition aux frquences radiolectriques (champs lectromagntiques de frquence radio), recommandes dans le code de scurit 6 de Sant Canada. Ces directives intgrent une marge de scurit importante destine assurer la scurit de tous, indpendamment de l'ge et de la sant. Par consquent, les systmes sont conus pour tre exploits en vitant que l'utilisateur n'entre en contact avec les antennes. Il est recommand de poser le systme l o les antennes sont une distance minimale telle que prcise par l'utilisateur conformment aux directives rglementaires qui sont conues pour rduire l'exposition gnrale de l'utilisateur ou de l'oprateur. Frquence 2.4 GHz 5 GHz MPE 2.9 W/m2 3.8 W/m2 Distance d'loignement Distance 20 cm (7.87 inches) Limite 5.4 W/m2 9.2 W/m2 Sant Canada affirme que la littrature scientifique actuelle n'indique pas qu'il faille prendre des prcautions particulires lors de l'utilisation d'un appareil sans fil. Si vous voulez rduire votre exposition encore davantage, selon l'agence, vous pouvez facilement le faire en rorientant les antennes afin qu'elles soient diriges l'cart de l'utilisateur, en les plaant une distance d'loignement suprieure celle recommande ou en rduisant la puissance de sortie de l'metteur. Additional Information on RF Exposure You can find additional information on the subject at the following links:

Cisco Systems Spread Spectrum Radios and RF Safety white paper at this URL:

http://www.cisco.com/warp/public/cc/pd/witc/ao340ap/prodlit/rfhr_wi.htm

FCC Bulletin 56: Questions and Answers about Biological Effects and Potential Hazards of Radio Frequency Electromagnetic Fields

FCC Bulletin 65: Evaluating Compliance with the FCC guidelines for Human Exposure to Radio Frequency Electromagnetic Fields You can obtain additional information from the following organizations:

World Health Organization Internal Commission on Non-Ionizing Radiation Protection at this URL: www.who.int/emf

United Kingdom, National Radiological Protection Board at this URL: www.nrpb.org.uk

Cellular Telecommunications Association at this URL: www.wow-com.com

The Mobile Manufacturers Forum at this URL: www.mmfai.org Administrative Rules for Cisco Aironet Access Points in Taiwan This section provides administrative rules for operating Cisco Aironet access points in Taiwan. The rules for all access points are provided in both Chinese and English. Chinese Translation 43 English Translation Administrative Rules for Low-power Radio-Frequency Devices Article 12 For those low-power radio-frequency devices that have already received a type-approval, companies, business units or users should not change its frequencies, increase its power or change its original features and functions. Article 14 The operation of the low-power radio-frequency devices is subject to the conditions that no harmful interference is caused to aviation safety and authorized radio station; and if interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear. The authorized radio station means a radio-communication service operating in accordance with the Communication Act. The operation of the low-power radio-frequency devices is subject to the interference caused by the operation of an authorized radio station, by another intentional or unintentional radiator, by industrial, scientific and medical (ISM) equipment, or by an incidental radiator. Chinese Translation 44 English Translation Low-power Radio-frequency Devices Technical Specifications 4.7 Unlicensed National Information Infrastructure 4.7.5 4.7.6 4.7.7 Within the 5.25-5.35 GHz band, U-NII devices will be restricted to indoor operations to reduce any potential for harmful interference to co-channel MSS operations. The U-NII devices shall accept any interference from legal communications and shall not interfere the legal communications. If interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear. Manufacturers of U-NII devices are responsible for ensuring frequency stability such that an emission is maintained within the band of operation under all conditions of normal operation as specified in the user manual. Operation of Cisco Aironet Access Points in Brazil This section contains special information for operation of Cisco Aironet access points in Brazil. Access Point Models:

AIR-AP3802I-Z-K9 AIR-AP3802E-Z-K9 45 Figure 7 Brazil Regulatory Information Portuguese Translation Este equipamento opera em carter secundrio, isto , no tem direito a proteo contra interferncia prejudicial, mesmo de estaes do mesmo tipo, e no pode causar interferncia a sistemas operando em carter primrio. English Translation This equipment operates on a secondary basis and consequently must accept harmful interference, including interference from stations of the same kind. This equipment may not cause harmful interference to systems operating on a primary basis. Declaration of Conformity Statements All the Declaration of Conformity statements related to this product can be found at the following location: http://www.ciscofax.com 46 16 Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see Whats New in Cisco Product Documentation at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html. Subscribe to Whats New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation as an RSS feed and delivers content directly to your desktop using a reader application. The RSS feeds are a free service. 2016 Cisco Systems, Inc. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) 47 48