Specifications

5-21
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-5260-01
Chapter 5 Administering the Access Point
Configuring Client ARP Caching
SSH provides more security for remote connections than Telnet by providing strong encryption when a
device is authenticated. The SSH feature has an SSH server and an SSH integrated client. The client
supports these user authentication methods:
• RADIUS (for more information, see the “Controlling Access Point Access with RADIUS” section
on page 5-7)
• Local authentication and authorization (for more information, see the “Configuring the Access Point
for Local Authentication and Authorization” section on page 5-16)
For more information about SSH, refer to the “Configuring Secure Shell” section in the Cisco IOS
Security Configuration Guide for Release 12.2.
Note The SSH feature in this software release does not support IP Security (IPSec).
Configuring SSH
Before configuring SSH, download the crypto software image from Cisco.com. For more information,
refer to the release notes for this release.
For information about configuring SSH and displaying SSH settings, refer to the “Configuring Secure
Shell” section in the Cisco IOS Security Configuration Guide for Release 12.2.
Configuring Client ARP Caching
You can configure the access point to maintain an ARP cache for associated client devices. Maintaining
an ARP cache on the access point reduces the trafic load on your wireless LAN. ARP caching is disabled
by default.
This section contains this information:
• Understanding Client ARP Caching, page 5-21
• Configuring ARP Caching, page 5-22
Understanding Client ARP Caching
ARP caching on the access point reduces the traffic on your wireless LAN by stopping ARP requests for
client devices at the access point. Instead of forwarding ARP requests to client devices, the access point
responds to requests on behalf of associated client devices.
When ARP caching is disabled, the access point forwards all ARP requests through the radio port to
associated clients, and the client to which the ARP request is directed responds. When ARP caching is
enabled, the access point responds to ARP requests for associated clients and does not forward requests
to clients. When the access point receives an ARP request for an IP address not in the cache, the access
point drops the request and does not forward it. In its beacon, the access point includes an information
element to alert client devices that they can safely ignore broadcast messages to increase battery life.