Blogs Page Banner Blogs Page Banner
Ask Our Experts
Project Solutions & Tech.
Request Quotes: Live Chat | +852-63593631

What is the Default Account and Password for Cisco AP? | Cisco WAP & Aironet Login Guide

IT Hardwares Distributor | Cisco • Huawei • H3C etc. | Switches • Firewalls • Routers • Wireless • Fiber Optics & Cables

Introduction: Why Default Cisco AP Credentials Matter

Cisco access points span multiple WAP, Business Wireless, Aironet, Catalyst, and controller-managed product families. First-login behavior must be matched to the exact model and software workflow.

Cisco AP first-login behavior varies by product family. For example, the WAP150 Quick Start Guide documents cisco/cisco with DHCP and a 192.168.1.245 fallback address, while current Cisco Business Wireless setup creates an administrator account and controller-managed AP credentials are assigned through the controller workflow.

cisco default credentials

Default Cisco AP Login Credentials

Different Cisco AP models ship with different default logins and management IPs. Use the tables below to identify your device’s factory credentials.

Common Default Credentials

Cisco AP Series / Model Default Username Default Password Default IP Address
Cisco WAP100 / WAP300 / WAP500 Series cisco cisco 192.168.1.245
Cisco Business 140AC / 240AC / 340AP cisco cisco 192.168.1.245 or DHCP
Cisco Aironet 1815t / 1830 / 1850 admin admin 10.0.0.1
Cisco Aironet 2800 / 3800 / 9100 Series Cisco Cisco DHCP-assigned
Cisco IOS-Based APs (After Reset) Cisco Cisco DHCP or Controller-assigned

Notes:

  • Case sensitivity: “Cisco/Cisco” ≠ “cisco/cisco”.
  • Standalone WAP models typically default to 192.168.1.245, while Aironet and controller-based APs receive an address from DHCP.
  • Newer APs (e.g., Catalyst 9100) use Cisco/Cisco after factory reset when operating in autonomous mode.

How to Access the Cisco AP Web Interface

Accessing the AP GUI (Graphical User Interface) allows configuration of SSIDs, VLANs, security, and firmware updates.

Step-by-Step Instructions

  1. Connect Your PC to the APUse an Ethernet cable from your PC to the AP’s LAN port. If the AP uses a PoE switch, ensure it’s powered via PoE or PSU. Set your PC’s static IP to 192.168.1.x (e.g., 192.168.1.10).
  2. Open the Web UtilityLaunch a browser and enter the AP’s IP address: http://192.168.1.245 (WAP) http://10.0.0.1 (Aironet 1815t) Use HTTPS (https://) for secure login if supported.
  3. Enter Default CredentialsWhen prompted, enter the default username and password (e.g., cisco / cisco). The GUI opens the setup wizard for initial configuration.
  4. If IP is UnknownUse the ipconfig command (Windows) or arp -a to check the gateway address. Alternatively, connect to the AP console or reset it to factory defaults.

Logging In via CLI (Console or SSH)

For managed or IOS-based APs, administrators often prefer command-line access.

Access Procedure

  1. Connect via console cable or SSH.
  2. Open terminal software (PuTTY, Tera Term, or SecureCRT).
  3. Enter privileged EXEC mode and configure login credentials.
login access procedure - CLI

Verification

verification

Tip: On controller-based APs, login credentials are managed from the WLC or Cisco Catalyst 9800 workflow rather than directly on the AP. Review the controller-based AP mode before deployment.

How to Change Default Credentials

Changing the default username and password is the most important step post-deployment.

Using the Web GUI

  1. Log in using default credentials.
  2. Navigate to Administration > User Accounts or System > Management.
  3. Create a new username and strong password.
  4. Save the configuration and reboot if prompted.

Using the CLI (IOS / Aironet APs)

change default credential - CLI

Best Practice: Use passwords with at least 12 characters, including uppercase, lowercase, numbers, and symbols.

Resetting a Cisco AP to Factory Defaults

If credentials are lost or login fails, resetting the device restores its default configuration.

Method 1 — Physical Reset Button

  1. Power on the AP.
  2. Press and hold the "Mode" button for 20–30 seconds until LEDs flash amber.
  3. Release the button. The AP reboots with factory settings (e.g., cisco/cisco login).

Method 2 — CLI Reset

reset cisco ap - CLI Set

or

reset cisco ap - CLI Set-2

After reboot, connect via console or web interface using default credentials.

Warning: Resetting erases all SSIDs, VLANs, and wireless configurations. Always back up configs before proceeding.

Post-Login Security Hardening

Changing credentials is only the first step. Review the wireless access point deployment guide for the broader role, coverage, and management context.

Security Task Recommendation / Command
Enable HTTPS and SSH Only ip http secure-server and no ip http server
Restrict Access by IP Use ACLs or management VLANs for admin access
Set Role-Based Accounts username helpdesk privilege 5 secret ...
Enable 802.1X / RADIUS Authentication Integrate AP with Cisco ISE or RADIUS
Keep Firmware Updated Regularly update via GUI or archive download-sw command
Backup Configurations copy run tftp: or use dashboard automation
Disable Unused Services Disable Telnet, CDP if not needed (no cdp run)

Troubleshooting Common Login Issues

Issue Possible Cause Resolution
Cannot access 192.168.1.245 Incorrect IP or subnet mismatch Assign static IP to PC (192.168.1.x) and retry
“Invalid credentials” Wrong case (Cisco vs cisco) Retry with case-sensitive credentials
Web page not loading HTTP disabled Use HTTPS (https://192.168.1.245)
AP not visible on network No DHCP or wrong VLAN Connect directly via console
Lost password Forgotten or expired Perform factory reset
Login loop Browser cache issue Clear cache or use another browser

Pro Tip: Always document device credentials in a secured password manager for IT maintenance.

Frequently Asked Questions (FAQ)

Q1: What is the default IP address for Cisco WAP access points?
A: It varies by model. Cisco documents DHCP with a 192.168.1.245 fallback address for WAP150; verify the exact model in the official WAP150 Quick Start Guide or the applicable product guide.

A: Most WAP models use 192.168.1.245. Aironet 1815t and newer may use 10.0.0.1 or receive IP from DHCP.

Q2What if I forget my Cisco AP login credentials?

A: Follow the model-specific recovery procedure. A factory reset erases configuration and returns that product to its documented setup state; it does not guarantee cisco/cisco for every Cisco AP family.

Q3Are default credentials the same for all Cisco Aironet APs?

A: No. They vary by model and IOS version. Check your AP label or model-specific guide.

Q4Can I configure AP credentials from a Cisco switch or controller?

A: On controller-managed deployments, AP management credentials are defined through the applicable controller and AP join profile. Cisco documents this behavior for Catalyst 9800; see the official best-practices guide.

Q5Why is it important to change default passwords?

A: Default logins are publicly known; leaving them unchanged poses serious security risks.

Real Case: Accessing and Securing a Cisco WAP150

Scenario:
An SMB administrator sets up a new Cisco WAP150 in standalone mode.

Steps:

  1. Connect the AP’s PoE port to a Cisco Catalyst 9200 switch.
  2. Access via browser → http://192.168.1.245.
  3. Login with cisco / cisco.
  4. Navigate to Administration > User Accounts → Create a new admin user netadmin.
  5. Enable HTTPS access and disable HTTP.
  6. Save configuration and reboot.

Result:
The AP is now secured with a unique password, HTTPS-only management, and stable connectivity for wireless users.

Advanced Tip - Configure Login via Cisco Controller (WLC/Catalyst 9800)

In a controller-based deployment, credentials are managed globally.

On the Wireless Controller:

configure login via WLC - CLI

In Cisco Catalyst 9800 GUI:

  • Go to Configuration > Wireless > Access Points.
  • Under General, set Management Username/Password.
  • Click Apply to propagate credentials to all joined APs.

Benefit: Simplifies credential management across hundreds of APs from one console.

Security Best Practices Checklist

Task Priority Recommendation
Change default password Critical Immediately post-setup
Update firmware High Check Cisco.com for updates quarterly
Use HTTPS/SSH High Disable HTTP/Telnet
Restrict VLAN access Medium Assign management VLAN
Backup configuration Medium Regular TFTP or dashboard export
Enable syslog & SNMP Optional Monitor for login attempts
Implement 802.1X/RADIUS Advanced For enterprise authentication

Expert Recommendations

For enterprise or campus networks using multiple Cisco APs:

  • Integrate APs with Cisco Catalyst 9300/9400 switches using PoE+.
  • Centralize management via Cisco Business Dashboard or Cisco DNA Center.
  • Use role-based accounts for IT staff.
  • Schedule quarterly security audits.

Conclusion

Cisco Access Points, whether from the WAP or Aironet series, are built for enterprise-grade wireless performance. To configure them, administrators often rely on the default login credentials (e.g., cisco/cisco or admin/admin). These allow first-time access via GUI or CLI for setup.

However, default credentials are public knowledge - changing them immediately and securing the AP with HTTPS, SSH, and unique passwords is essential.
With proper configuration and security hygiene, your Cisco AP can deliver reliable Wi-Fi connectivity and robust network protection.

Did this article help you or not? Tell us on Facebook and LinkedIn . We’d love to hear from you!

Related post

Make Inquiry Today