bintec elmeg W2022ac, Manual

Page 1: ...Manual W2022ac W2022ac ext Copyright Version 2 21 SVN 8932 10 2019 bintec elmeg GmbH bintec elmeg GmbH Manual W2022ac W2022ac ext 1 ...

Page 2: ...u al bintec elmeg GmbH is not liable for any direct indirect collateral consequential or any other damage connected to the delivery supply or use of this manual Copyright bintec elmeg GmbH All rights to the data included in particular the right to copy and propagate are reserved by bintec elmeg GmbH Manual bintec elmeg GmbH 2 W2022ac W2022ac ext ...

Page 3: ...n Assignments 7 1 3 1 Ethernet interface 7 1 4 Frequencies and channels 8 1 5 Support information 8 Chapter 2 Basic configuration 9 2 1 Presettings 9 2 1 1 Preconfigured data 9 2 1 2 Software update 10 2 2 System requirements 10 2 3 Preparation 10 2 3 1 Gathering data 11 2 3 2 Configuring a PC 12 2 4 IP configuration 13 2 5 Modify system password 14 2 6 Software Update 15 bintec elmeg GmbH Table o...

Page 4: ...N Bridge Groups 25 4 1 1 Port Configuration 25 4 2 IP Configuration 26 4 2 1 Interfaces 26 Chapter 5 Wireless LAN 29 5 1 WLAN 29 5 1 1 Radio Settings 29 5 1 2 Wireless Networks VSS 34 Chapter 6 Networking 44 6 1 Routes 44 6 1 1 IPv4 Route Configuration 44 Chapter 7 Local Services 46 7 1 DNS 46 7 1 1 DNS Servers 46 7 1 2 Static Hosts 46 Table of Contents bintec elmeg GmbH ii W2022ac W2022ac ext ...

Page 5: ... 2 1 Options 49 8 3 Reboot 52 8 3 1 System Reboot 52 8 4 Factory Reset 52 Chapter 9 External Reporting 53 9 1 SIA 53 9 1 1 SIA 53 Chapter 10 Monitoring 54 10 1 Interfaces 54 10 1 1 Statistics 54 10 1 2 Network Status 55 10 2 WLAN 55 10 2 1 VSS 55 10 2 2 Neighbor APs 56 Index 58 bintec elmeg GmbH Table of Contents W2022ac W2022ac ext iii ...

Page 6: ...Table of Contents bintec elmeg GmbH iv W2022ac W2022ac ext ...

Page 7: ...sequence 1 Antennas For W2022ac ext screw the provided standard antennas on to the connectors provided for this purpose 2 LAN For the standard configuration of your device via Ethernet connect port LAN1 of your device to your PC The device automatically detects whether it is connected to a switch or directly to a PC Select here only one of the connections LAN1 or LAN2 the second connection is used...

Page 8: ...g mount is available as an accessory to mount the device on the ceiling article number 5520000163 The ceiling mount allows mounting on suspended system ceilings without drilling and dowels Warning Before drilling make sure that there are no building installations where you are drilling If gas electricity water or waste water lines are damaged you may endanger your life or damage property Use the b...

Page 9: ...1 1 2 Connectors The connections are located on the underside of the device Underside 1 POWER Socket for power supply 2 LAN1 PoE und LAN2 10 100 1000 Base T Ethernet interfaces 1 1 3 LEDs The LEDs show radio status and radio activity of your device Note Note that the number of active WLAN LEDs depends on the number of existing radio modules bintec elmeg GmbH 1 Installation W2022ac W2022ac ext 3 ...

Page 10: ...een on flashing 1000 Mbit s data traffic WLAN 1 2 off Radio module and or SSIDs inactive green on slowly blinking SSID active no client is authenticated green on fast blink ing SSID active one or more clients authenticated green on flashing SSiD active one or more clients authenticated and data traffic You can choose from three different operation modes of the LEDs in the System Manage ment Global...

Page 11: ...wing table General Product Features Property Value Dimensions and weights Equipment dimensions without cable W x D x H ca 190 x 190 x 38 mm Weight approx 505 g LEDs 5 1x Power 2x WLAN 2x Ethernet Power consumption of the device max 8 95 W Voltage supply 12 V 1 5 A The power adapter with the part number 5500002091 is available as an accessory PoE an Ethernet 1 Class 0 according to 802 3af max 12 4 ...

Page 12: ...50 1 EN 62311 EN 301489 1 EN301489 17 EN 300 328 EN 301893 EN 50581 EN 60601 1 2 Medical devices part 1 2 Buttons Reset button for restart or reset 1 1 6 Reset If the configuration is incorrect or if your device cannot be accessed you can reset the device to the ex works standard settings using the reset button You can reset the access point to the ex works state in either of two ways 1 In the men...

Page 13: ...tronic faults Make sure that no moisture can enter the device and cause damage 1 3 Pin Assignments 1 3 1 Ethernet interface The devices W2022ac and W2022ac ext have two 10 100 1000 Ethernet interfaces The connection is made via an RJ45 socket The pin assignment for the Ethernet 10 100 1000 Base T interface RJ45 socket is as fol lows RJ45 socet for LAN connection Pin Function 1 Pair 0 2 Pair 0 3 Pa...

Page 14: ... notes in the RED Compliance Information 1 5 Support information If you have any questions about your new product please contact a local certified retailer for prompt technical support Resellers have been trained by us and receive privileged sup port Further information on our support and service offers can be found on our web site 1 Installation bintec elmeg GmbH 8 W2022ac W2022ac ext ...

Page 15: ...state your device is set to DHCP client mode which means that when it is connected to the network it is automatically assigned an IP address if a DHCP server is run You can then access your device for configuration purposes using the IP ad dress assigned by the DHCP server For information on determining the dynamically assigned IP address please see your DHCP server documentation b Fallback IP add...

Page 16: ...h the GUI using the Maintenance Software Configuration menu For a description of the update procedure see Software Update on page 15 2 2 System requirements For configuration your PC must meet the following system requirements Suitable operating system Windows Linux MAC OS A web browser Internet Explorer Firefox Chrome in the current version Installed network card Ethernet High colour display to s...

Page 17: ...n refer to these values later when needed If you configure a new network you can use the given example values for IP addresses and netmasks In cases of doubt ask your system administrator Basic configuration For a basic configuration of your gateway you need information that relates to your net work environment IP configuration of the access point Access data Example value Your values IP address o...

Page 18: ...tus window 4 Look for the Internet Protocol TCP IP entry in the list of network components Installing the Windows TCP IP protocol If you cannot find the Internet Protocol TCP IP entry install the TCP IP protocol as fol lows 1 First click Properties then Install in the status window of the LAN Connection 2 Select the Protocol entry 3 Click Add 4 Select Internet Protocol TCP IP and click on OK 5 Fol...

Page 19: ...instructions and explanations on the separate pages of the Wizard Cloud NetManager With the Cloud NetManagerhas you can manage the access points A valid license for each access point is needed Note Cloud NetMAnager is currently in preparation Note If you have previously implemented configurations on your device using the Wireless LAN Controller you must set your device to delivery status before us...

Page 20: ...ion to the configuration PC the fallback IP address b Enter in the User field and in the Password field c Click LOGIN in order to get to the configuration interface 2 5 Modify system password All bintec elmeg devices are delivered with the same username and password As long as the password remains unchanged they are therefore not protected against unauthorised use Make sure you change the password...

Page 21: ...y with the GUI An existing internet connection is needed for an automatic update Proceed as follows 1 Go to the Maintenance Software Configuration menu 2 Under Action select and under Source Location 3 Confirm with Start The device will now connect to the bintec elmeg GmbH download server and check wheth er an updated version of the system software is available If so your device will be updated au...

Page 22: ...ys the time past since the device was rebooted System Date Displays the current system date and system time Firmware Version Displays the currently loaded version of the system software Serial Number Displays the device serial number Last configuration stored Displays day date and time of the last saved configuration boot configuration in flash Fields in the Resource Information menu Field Value M...

Page 23: ...ers are managed in the Global Settings menu 3 2 1 System Your device s basic system data is entered in the System Management Global Settings System menu The System Management Global Settings System menu consists of the following fields Fields in the menu Basic Settings Field Value System Name Enter the system name of your device This is also used as the DHCP host name A character string with a max...

Page 24: ...ess Instead of e g is dis played if this option is enabled Fields in the menu Remote Configuration Field Value NetManager commu nication Select whether communication the access point is to be allowed via NetManager The function is activated by selecting The function is enabled by default NetManager address Enter the NetManager IP address Allow configuration via WLAN Controller Select whether confi...

Page 25: ...e same username and password As long as the pass word remains unchanged they are not protected against unauthorised use Make sure you change the passwords to prevent unauthorised access to the device The System Management Global Settings Passwords menu consists of the following fields Fields in the System Password menu Field Value System Admin Pass word Enter the password for the user name The pre...

Page 26: ...e last Sunday in March by switching from 2 a m to 3 a m The calendar related or schedule related switches that are scheduled for the missing hour are then carried out Winter time starts on the last Sunday in October by switching from 3 a m to 2 a m The calendar related or schedule related switches that are scheduled for the additional hour are then carried out If a value other than Universal Time ...

Page 27: ...ent Local Time The current date and current system time are shown here The entry cannot be changed Fields in the menu Manual Time Settings Field Description Set Date Clicking into the field for adding a date brings up a standard cal ender Clicking the desired date will enter it into the configura tion interface Set Time Enter a new time Format Hour hh Minute mm Fields in the menu Automatic Time Se...

Page 28: ...nnection data RADIUS can be used for Authentication Accounting Exchange of configuration data For an incoming connection your device sends a request with user name and password to the RADIUS server which then searches its database If the user is found and can be au thenticated the RADIUS server sends corresponding confirmation to your device This con firmation also contains parameters called RADIU...

Page 29: ...ver it sends an ACCESS_REJECT to reject the connection ACCOUNTING_START Client Server If a RADIUS server is used for accounting your device sends an accounting message to the RADIUS server at the start of each connection ACCOUNTING_STOP Client Server If a RADIUS server is used for accounting your device sends an accounting message to the RADIUS server at the end of each connection A list of all en...

Page 30: ...ative RADIUS server eg FREERADIUS the password must not contain any special characters The menu Advanced Settings consists of the following fields Fields in the Server Options menu Field Description Auth Port Enter the port to be used for authentification The default value according to RFC 2138 is Acct Port Enter the port to be used for accounting The default value according to RFC 2138 is Account...

Page 31: ...figuration menu consists of the follow ing fields Fields in the Configure Port menu Feld Beschreibung VLAN ID Enter the whole number that identifies the VLAN Possible values to 6 You can use the Add button to add more VLANs Description First under VLAN ID 7 enter a name for the Ethernet in the field Description In all other lines enter a unique name for the VLAN A character string of up to 32 char...

Page 32: ...ons are listed below Change the status of the interface by clicking the or the button in the Action column Press the button to display the details of an existing interface Note For IPv4 note that If your device has obtained an IP address dynamically from a DHCP server operated in your network for the basic configuration the default IP address is deleted automatic ally and your device will no longe...

Page 33: ...ode of the 88 9 7 interface is displayed You use this option to assign the interface to a VLAN This is done using the VLAN ID which is displayed in this mode and can be configured The definition of a MAC Address is optional in this mode VLAN ID Only for Interface Mode 88 9 7 This option only applies for routing interfaces Assign the inter face to a VLAN by entering the VLAN ID of the relevant VLAN...

Page 34: ...face in IP Address Netmask 01 An IP address is assigned to the interface dynamically via DHCP IP Address Netmask Only for Address Mode With Add add a new address entry and enter the IP Address and the corresponding Netmask of the virtual interface You can add several address entries If you want to configure your device via this interface you have to assign an IP address to the interface 4 LAN bint...

Page 35: ...d the correspondingly supported transmission speeds are e g avilable at Wiki pedia Pay attention to the security and conformity information provided with your product 5 1 WLAN In the Wireless LAN WLAN menu you can configure all WLAN modules of your device Your devices W2022ac and W2022ac ext have two WLAN modules WLAN 1 Operation Band 2 4 GHz and WLAN 2 Operation Band 5 GHz 5 1 1 Radio Settings In...

Page 36: ...nel selection please make sure first that the clients actually support these channels Possible values For Operation Band 6 1 Possible values are default value and to For Operation Band 1 Possible values default value and 6 66 6 For Operation Band 1 or 1 Possible value Transmit Power Select the maximum value for the radiated antenna power The actually radiated antenna power may be lower than the ma...

Page 37: ...ate according to or 8 have access 85 default value Devices which operate according to 8 or have access Your device operates only according to 802 11n Your device operates only in accordance with 802 11b and forces all clients to adapt to it 8 Your device operates only according to 802 11g 802 11g 802 11b clients have no access For Operation Band 1 Possible values 5 5 default value Devices which op...

Page 38: ... Two channels each with 20 MHz bandwidth are used In the case one channel acts as a main channels and the other as an expansion channel 1 Vour channels each with 20 MHz bandwidth are used Thus a bandwidth of 80 MHz is available Cyclic Background Scanning You can enable the Cyclic Background Scanning function so that a search is run at regular intervals for neighbouring or rogue access points in th...

Page 39: ...c channel selection uses only the non overlapping channels for Operation Band 6 1 Automatic channel selection uses only the non overlapping channels 7 2 2 for Operation Band 1 default value The weather radar channels are excluded from channel selection Possible values 6 66 6 6 6 6 7 0 5 These channels can be used inside buildings DFS Dynamic Frequency Selection and TPC Transmitter Power Control ar...

Page 40: ...nt this every radio net work has a parameter that uniquely identifies the network and is comparable with a domain name Only clients with a network configuration that matches that of your device can com municate in this WLAN The corresponding parameter is called the network name In the network environment it is sometimes also referred to as the SSID Protection of wireless networks As data can be tr...

Page 41: ...ter the MAC addresses of the clients that may access your wireless LAN All other clients have no access Security measures To protect the data transferred over the WLAN the following configuration steps should be carried out in the Wireless LAN WLAN Wireless Networks VSS New menu where necessary Change the access passwords for your device Set Visible This will exclude all WLAN clients that attempt ...

Page 42: ... The network name is displayed by selecting It is visible by default Intra cell Repeating Select whether communication between the WLAN clients is to be permitted within a radio cell The function is activated by selecting The function is enabled by default WMM Select whether voice and video prioritization via WMM Wireless Multimedia is to be activated for the wireless network so that optimum trans...

Page 43: ...ting this base network under Base Network SSID This connects these networks The security mode of the open OWE transition network can not be changed After deleting or changing the security mode of the base network or selecting another base network you can change the se curity mode of the OWE transition network again If the open basic network is deleted an OWE network remains instead of the OWE tran...

Page 44: ...an connect WLAN clients that support WPA2 can connect Only WLAN clients that support WPA3 can connect WLAN clients that support WPA1 or WPA2 can connect default value WLAN clients that support WPA2 or WPA3 can connect Base Network SSID For Security Mode Specify which network is to be used as a basis for an OWE transition network Select the SSID of a network configured with Security Mode see note u...

Page 45: ...inst unau thorised access RADIUS Server Only for Security Mode You can control access to a wireless network via a RADIUS server You can select from the RADIUS servers configured under Sys tem Management Remote Authentication RADIUS New Fields in the menu Client load balancing Field Description Max number of clients hard limit Enter the maximum number of clients that can be connected to this wirele...

Page 46: ...query the connection is accepted Queries are only definit ively rejected when the Max number of clients hard limit is reached The value of the Max number of clients soft limit must be the same as or less than that of the Max number of clients hard limit The default value is You can disable this function if you set Max number of clients soft limit and Max number of clients hard limit to identical v...

Page 47: ...DTIM field is a data field in transmitted beacons that in forms clients about the window to the next broadcast or multic ast transmission If clients operate in power save mode they come alive at the right time and receive the data Possible values are to The default value is Group Rekeying The Group Key encrypts data which is to be sent to all connec ted clients broadcast Rekeying Intervall Only fo...

Page 48: ...f 6 MBit s are allowed to connect to the access point 5 see above for clients with a minimum supported rate of 12 Mbit s 6 5 see above for clients with a minimum supported rate of 24 Mbit s Fields in the menu SNR Threshold Management Field Description SNR Threshold Man agement Activate this option to define the minimum need signal quality required for setting up the wireless connection The functio...

Page 49: ...the connection to the client will be disconnected only at long distances High SNR thresholds indicate that the connection is already disconnected at a smaller distance to the client A practicable value is an SNR of 40 dB Grace time Only for SNR Threshold Management Enter the time in seconds during which the data transfer rate may drop below the SNR threshold without the client having to calculate ...

Page 50: ...f you enter several default routes you should thus note differing values for Distance 6 1 1 IPv4 Route Configuration A list of all configured routes is displayed in the Network Routes IPv4 Route Configur ation menu 6 1 1 1 Edit or New Choose the icon to edit existing entries Choose the New button to create additional routes The Network Routes IPv4 Route Configuration New menu consists of the follo...

Page 51: ...estination net work Also enter the relevant netmask in the second field Gateway IP Address Enter the IP address of the gateway to which your device should forward the IP packets Distance Select the distance of the route The lower the value the higher the priority of the route Value range from to The default value is bintec elmeg GmbH 6 Networking W2022ac W2022ac ext 45 ...

Page 52: ... DNS servers is displayed in the Local Services DNS DNS Serv ers menu 7 1 1 1 Add Select the Add button to add the IP address of the DNS server 7 1 2 Static Hosts A list of all configured static hosts is displayed in the Local Services DNS Static Hosts menu 7 1 2 1 New Choose the New button to set up new static hosts The menu Local Services DNS Static Hosts New consists of the following fields Fie...

Page 53: ...you enter a name with the struc ture of a FQDN i e character sequences separated by the entry is interpreted as a FQDN and is not expanded The clos ing which is mandatory for a complete FQDN is automatically appended if required Entries with spaces are not allowed IP Address Enter the IP address assigned to DNS Hostname Short Name Enter a short name with Add bintec elmeg GmbH 7 Local Services W202...

Page 54: ...n routes 8 1 1 Ping Test You can use the ping test to check whether a certain host in the LAN or an internet address can be reached Pressing the Go button starts the ping test The Output field displays the ping test mes sages 8 1 2 DNS Test The DNS test is used to check whether the domain name of a particular host is correctly re solved The Output field displays the DSN test messages The ping test...

Page 55: ...nterrupted update e g power failure during the update could be that your gateway no longer boots Do not turn your device off during the update Flash Flash memories provide nonvolatile data storage that is data remains stored in the flash even when your device is switched off They are a type of EEPROM Electrically Erasable Programmable Read Only Memory RAM The current configuration and all changes ...

Page 56: ...iguration Options menu Field Description Action Select the action you wish to execute After each task a window is displayed showing the other steps that are required Possible values 7 default value 4 8 The configuration file Current File Name in Flash is transferred to your local host If you click the Go button a dialog box is displayed in which you can select the storage location on your PC and e...

Page 57: ...y Select file Only for Action 0 8 Select the configuration to be deleted Allow Software Down grade Only for Action Enable or disable the option Allow Software Downgrade The function is enabled with The function is enabled by default Source Location Only for Action Select the source of the update Possible values default value The system software file is stored locally on your PC 4 The file is store...

Page 58: ... Before a reboot make sure you confirm your configuration changes by clicking the Save configuration button so that these are not lost when you reboot If you wish to restart your device click the OK button The device will reboot 8 4 Factory Reset In the menu Maintenance Factory Reset you can reset your device via GUI to the ex works state Note Note that resetting the device to the ex works state a...

Page 59: ...xternal Reporting SIA SIA you can create and download a file that provides extensive support information about the status of your device like e g the current configuration available memory uptime etc bintec elmeg GmbH 9 External Reporting W2022ac W2022ac ext 53 ...

Page 60: ... packets sent Tx Bytes Displays the total number of octets sent Tx Errors Shows the total number of errors sent Rx Packets Shows the total number of packets received Rx Bytes Displays the total number of bytes received Rx Errors Shows the total number of errors received Status Shows the operating status of the selected interface Unchanged for Shows the length of time for which the operating status...

Page 61: ...al Port Displays the local port of the IP address for an active TCP con nection Remote Address Displays the IP address to which an active TCP connection ex ists Remote Port Displays the port to which an active TCP connection exists 10 1 2 Network Status The menu Monitoring Interfaces Network Status provides an overview of all IP inter faces currently configured on the device You can find informati...

Page 62: ...ows the MAC address of the associated client IP Address Shows the IP address of the client Uptime Shows the time in hours minutes and seconds for which the cli ent is logged in Tx Packets Shows the number of sent packets for the data rate Rx Packets Shows the number of received packets for the data rate Transmit Power Shows the strength of the received signal in dBm Noise dBm Shows the received no...

Page 63: ...e with the strongest sig nal You see the following parameters for each AP SSID MAC Address Channel Secur ity The entries are displayed in alphabetical order by SSID Security shows the security set tings of the AP bintec elmeg GmbH 10 Monitoring W2022ac W2022ac ext 57 ...

Page 64: ... 41 Route Type 44 Security Mode 37 Selected Channels 33 Server IP Address 24 Short Guard Interval 33 Short Name 46 SNR Threshold 42 SNR Threshold Management 42 Transmit Power 29 VLAN ID 25 27 Wireless Mode 31 WMM 36 WPA Cipher 37 WPA Mode 37 WPA2 3 Cipher 37 ACCESS_ACCEPT 23 ACCESS_REJECT 23 ACCESS_REQUEST 23 ACCOUNTING_START 23 ACCOUNTING_STOP 23 Action 50 54 Confirm Admin Password 19 Contact 17 ...

Page 65: ...55 Options 49 Passwords 19 Ping Test 48 Port Configuration 25 Radio Settings 29 RADIUS 22 Serial Number 16 Static Hosts 46 Statistics 54 System 17 System Date 16 System Reboot 52 Traceroute Test 48 Uptime 16 VSS 55 Wireless Networks VSS 34 Diagnostics 48 DNS 46 Factory Reset 52 Global Settings 17 Interfaces 54 IP Configuration 26 Reboot 52 Remote Authentication 22 Routes 44 SIA 53 Software Configu...

Page 66: ... Intra cell Repeating 36 IP Address Netmask 27 O Obtain WLAN Controller IP Address 18 S Source Location 50 T Transmit Power 55 U URL 50 V VLAN Bridge Groups 25 Index bintec elmeg GmbH 60 W2022ac W2022ac ext ...