background image

Network trace configuration

55

Network trace configuration

Overview

Network administrators can perform network traces to capture and analyze network traffic. 
Network trace operates in two modes:

Packet file trace mode

: Captured packets are stored in a file on the HP 501. The 

HP 501 can transfer the file to a local PC or network location using HTTP or to a TFTP 
server. The file is formatted in pcap format and can be examined using tools such as 
Wireshark and OmniPeek.

Remote packet trace mode

: The captured packets are redirected in real time to an 

external PC running the Wireshark tool.

The HP 501can trace the following types of packets:

802.11 packets received and transmitted on radio interfaces. Packets captured on radio 
interfaces include the 802.11 header.

802.3 packets received and transmitted on the Ethernet interface.

To configure network trace settings and initiate packet captures, select 

Tools

 > 

Network 

trace

.

Packet trace configuration

Use this section to configure parameters that affect how packet trace functions on the radio 
interface.

Trace beacons

Enable to trace the 802.11 beacons detected by the radio. HP recommends that you also 
enable Promiscuous trace when performing a beacon trace.

Promiscuous trace

Enable to place the radio in promiscuous mode when the trace is active. 

In promiscuous mode, the radio receives all traffic on the channel, including traffic that is not 
destined to the HP 501. Packets not destined to the HP 501 are not forwarded. 

As soon as the trace is completed, the radio reverts to non-promiscuous mode operation.

Client filter enable

Enable to use the WLAN client filter to trace only frames that are transmitted to, or received 
from, a WLAN client with a specified MAC address.

Summary of Contents for Pavilion 501

Page 1: ...guration and Administration Guide Abstract This document describes how to configure and maintain an HP 501Wireless Client Bridge J9835A It is intended for system and network administrators HP Part Number 5998 4132 Published December 2013 Edition 1 ...

Page 2: ...tatements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Acknowledgments Microsoft and Windows are U S registered trademarks of Microsoft Corporation Warranty WARRANTY STATEMENT See the warranty information sheet provided in the product box and a...

Page 3: ...3 Wireless configuration 21 Wireless range 21 Configuring radio settings 22 Country 22 Basic settings 22 Advanced radio settings 23 Configuring work group bridge mode 26 Security methods 26 Configuring wireless bridging features 29 Configuring MAC address cloning 29 Redirecting unsupported traffic 30 Configuring frame processing settings 30 Viewing wireless information 31 Viewing nearby APs 31 Vie...

Page 4: ...ion 54 Sending a test message 54 Viewing email alert status 54 Network trace configuration 55 Overview 55 Packet trace configuration 55 Packet file trace 56 Remote packet trace 57 Packet trace status 59 Packet trace file download 60 Ping 61 7 Support and other resources 62 Online documentation 62 Contacting HP 62 HP websites 62 Conventions 63 A Resetting to factory defaults 64 Factory reset proced...

Page 5: ... switch that is connected to the HP 501 Ethernet port The HP 501 enables these computers to access a private network served by an upstream AP This configuration uses the work group bridge mode on the HP 501 In this mode the HP 501 is configured with an SSID for the upstream network Computers in the subnet 192 168 5 x are connected through a switch on the wired Ethernet interface The upstream AP pr...

Page 6: ...sing the MAC address so that they do not need to change any settings The MAC address cloning feature on the HP 501 is used to preserve the printer s network identity With MAC address cloning the HP 501 assigns the printer s MAC address to the HP 501 wireless port making the HP 501 appear to be the printer on the upstream wireless network For configuration instructions see Configuring MAC address c...

Page 7: ...t of sale terminal to exchange traffic with a remote host The point of sale terminal is connected to the serial port on the HP 501 To connect it to a wireless network the HP 501 converts traffic between the serial data format and TCP IP For configuration instructions see TCP serial on page 38 Point of sale terminal Host computer TCP client HP 501 Private network with DHCP server on subnet 192 168 ...

Page 8: ... HP 501 802 1 1ac Wireless Client Bridge Quickstart Configuring web server settings Select Management Management tool to open the Configure web server settings page You can configure the web server settings change the user login name or password and manage the certificate file required for secure HTTP communication Web server configuration Use this section to configure web access to the management...

Page 9: ...ports one administrator login Use this section to change the username and password Username The default username is admin The username can be from 1 to 32 alphanumeric characters including special characters Current password The default password is admin New password and Confirm password Specify a new password for the HP 501 administrator account The administrator password can be from 1 to 32 alph...

Page 10: ...ent on the HP 501 based on the default device IP address 192 168 1 1 If you change the HP 501 IP address you must update the certificate to reflect the new address otherwise a security warning will display at the start of each new management session A certificate can also expire requiring you to obtain a new one Viewing information about the current certificate You can view the following informati...

Page 11: ...is option if the file resides on a TFTP server Provide the following information and then click Upload HTTP SSL certificate file Specify the file path and file name on the server Server IP Enter the IP address of the TFTP server Generating or uploading a new SSL certificate restarts the secure web server disconnecting the current management session The next time you log in to the HP 501 you are pr...

Page 12: ... client by supplying the correct user name and password To enable the ACL feature 1 Select Management Management ACL to open the Management access control list configuration page 2 Under Management ACL control select Enabled 3 Under Allowed IPv4 addresses and Allowed IPv6 addresses enter an IPv4 address or IPv6 address and click Add You can add up to five addresses to each list 4 Click Save To rem...

Page 13: ...about their devices in management information bases MIBs and return this data to the SNMP manager when requested Managed devices can be network nodes such as APs routers switches bridges hubs servers or printers The HP 501 can function as an SNMP managed device for seamless integration into network management systems such as HP IMC Configuring SNMPv1 and SNMPv2 The HP 501 provides a robust SNMP v1...

Page 14: ...sm to restrict the devices on the network that can request data from the device The name functions as a password and the request is assumed to be authentic if the sender knows the password The valid range is 1 to 256 characters The community name can be in any alphanumeric format The default is public Port number By default the HP 501 listens to requests from port 161 only You can configure to ano...

Page 15: ...68 1 254 can execute SNMP commands on the HP 501 The address identified by the suffix 0 is reserved for the subnet address and the address identified by 255 is reserved for the broadcast address As another example if you enter a range of 10 10 1 128 25 machines with IP addresses from 10 10 1 129 through 10 10 1 254 can execute SNMP requests on managed devices In this example 10 10 1 128 is the net...

Page 16: ... Enter a Name User names can contain up to 32 alphanumeric characters 3 Select a Group level The built in group levels are read only RO and read write RW 4 Select the type of authentication to use on SNMP requests from the user MD5 Require MD5 authentication on SNMPv3 requests from the user None SNMPv3 requests from this user require no authentication 5 If you specified MD5 authentication enter a ...

Page 17: ...P address where the trap will be sent 3 In the Port box enter the logical UDP port number to associate with SNMP receiver messages 4 From the Users list select the user to associate with this IP address and port and then click Add You can add up to eight receivers 5 When you are finished adding receivers click Save To remove a configured SNMPv3 receiver select the name in the SNMPv3 receiver list ...

Page 18: ...3 dod 6 internet 1 private 4 enterprises 1 hp 1 1 nm 2 hpSystem 3 netElement 7 hpEtherSwitch 1 1 hpWlan 162 hpWlanClientBridge501 1 Setting the system time Correct system time is important for proper operation of the HP 501 especially when using the logs to troubleshoot Select Management System time to open the System time page This page enables you to configure time server and time zone informati...

Page 19: ...Setting the system time 19 ...

Page 20: ...NTP hostname or IP address although HP recommends that you not use the IP address as these are more likely to change If you specify a hostname note the following requirements The length must be from 1 to 63 characters Upper and lower case characters numbers and hyphens are accepted The first character must be a letter a to z or A to Z and the last character cannot be a hyphen An actual NTP server ...

Page 21: ... how they affect wireless coverage Interference Interference is caused by other APs or devices cordless phones microwaves that operate in the same 2 4 GHz frequency band as the HP 501 when it is set to a 2 4 GHz mode Such interference can substantially affect throughput A smaller but growing number of devices are potential sources of interference in the 5 GHz band Information provided by the manag...

Page 22: ...of the selected country and alters the available options in the Mode list Notice Selecting the incorrect country can result in illegal operation and can cause harmful interference to other systems Ensure that the HP 501 is operating in accordance with power indoor outdoor restrictions and license requirements for the country of use If you fail to heed this notice you can be held liable for violati...

Page 23: ... wireless channel currently in use The channel defines the portion of the radio spectrum the radio uses for transmitting and receiving Each mode offers a number of channels depending on how the spectrum is licensed by national and transnational authorities such as the Federal Communications Commission FCC or the International Telecommunication Union ITU R On the HP 501 the channel is determined by...

Page 24: ...e You can specify a Roam threshold value from 99 to 1 dBm The default is 75 dBm You can specify a Roam delta from 0 to 100 dBm The default is 10 dBm Tip HP recommends that network administrators experiment with these values to determine the optimum roaming performance in your specific environment Notice Setting the roam threshold too high can degrade performance Fragmentation threshold Specify a n...

Page 25: ...elp the network recover from interference or collisions that might occur on a busy network or on a network experiencing electromagnetic interference Antenna Select the antenna to use The following antennas are available HP 2dBi Dual Band Omni Antenna Default included with the HP 501 HP 6dBi 2 4 GHz Omni MIMO Antenna J9719A HP 8dBi 5 GHz Omni MIMO Antenna J9720A HP 10 13dBi Dual Band PTP MIMO Anten...

Page 26: ...lect the option that is required to authenticate with the upstream AP WPA WPA2 Personal The HP 501 authenticates using a preshared key PSK configured on the upstream AP WPA WPA2 Enterprise Select this option if the upstream AP uses a remote authentication server to handle authentication requests WEP The HP 501 authenticates using a WEP key configured on the HP 501 and the upstream AP This mode is ...

Page 27: ...edentials are provided to the upstream AP which forwards them to the authentication server for verification Specify the following Username From 1 to 64 alphanumeric characters Password From 1 to 64 alphanumeric characters TLS This method requires that a TLS certificate be present on the HP 501 The upstream AP provides the certificate along with the ID used when creating it and a public key used fo...

Page 28: ...h of the encryption key based on the settings on the upstream AP 64 bits The key can be 5 ASCII characters or 10 hexadecimal digits 128 bits The key can be 13 ASCII characters or 26 hexadecimal digits Key type Select the format used to specify the encryption key based on the settings on the upstream AP ASCII ASCII keys are much weaker than carefully chosen hexadecimal keys You can include ASCII ch...

Page 29: ...loning select Wireless Bridging In the Ethernet MAC cloning section of the Wireless bridging page configure the following settings Ethernet MAC cloning Enable or disable MAC cloning When enabled the HP 501 disassociates from the upstream AP and reassociates using the MAC address you configure instead of the default DHCP assigned IP address Ethernet MAC address to clone Specify the MAC address to c...

Page 30: ...click Save Configuring frame processing settings The following settings can be configured in the Frame processing section of the Wireless bridging page Act like a DHCP relay agent A device connected to the Ethernet port can acquire its IP address from a DHCP server that is accessed over the wireless network DHCP requests from the device and the replies from the DHCP server are handled by the upstr...

Page 31: ...ion The HP 501 provides several pages where you can view information related to wireless operation Viewing nearby APs To view information on all APs operating within range of the HP 501 select Wireless Neighborhood The following information is displayed for each detected AP Field Description MAC The MAC address of the AP also called the BSSID Beacon int APs periodically send out management frames ...

Page 32: ...ata for display Information for existing APs in the list is updated and newly discovered APs are added to the bottom of the list A single scan may not find all available APs If you suspect additional APs are available perform another scan Notice If the HP 501 is currently associated with an AP the scan disrupts the connection for up to about 8 seconds depending on how many channels are scanned whi...

Page 33: ...sfully received MPDU frames of type data or management Fragments transmitted Number of transmitted MPDU with an individual address or an MPDU with a multicast address of type data or management Multicast frames received Count of MSDU frames received with the multicast bit set in the destination MAC address Multicast frames transmitted Count of successfully transmitted MSDU frames where the multica...

Page 34: ...ransmitted MSDU WEP undecryptable count Count of encrypted frames received and the key configuration of the transmitter indicates that the frame should not have been encrypted or that frame was discarded due to the receiving station not implementing the privacy option Cloned MAC address If MAC address cloning is enabled for a device on the Ethernet port the MAC address displays here Field Descript...

Page 35: ...ype is set to DHCP and the HP 501 operates as a DHCP client This means that if the wired or wireless network has a DHCP server the HP 501 automatically receives a new IP address in place of its default IP address 192 168 1 1 upon connecting to the network Notice The HP 501 can receive an address from a DHCP server on either the wireless or wired network To avoid conflicts however a DHCP server sho...

Page 36: ... the IP address of the gateway on the network DNS nameservers Select Dynamic to have the DNS nameservers assigned through DHCP or select Manual to configure up to two static DNS nameserver addresses IPv6 configuration If the attached network uses the IPv6 protocol you can use the IPv6 configuration section of the page to enable IPv6 support on the HP 501 IPv6 functionality is enabled by default IP...

Page 37: ... be used to transmit or receive traffic except to exchange messages with other network nodes to verify the uniqueness of the address Blank no value No IP address is assigned or the assigned address is not operational IPv6 link local address The IPv6 link local address is the IPv6 address used by the local physical link The link local address is not configurable and is assigned by using the IPv6 Ne...

Page 38: ...ful for devices that do not have wireless or Ethernet functionality To configure a TCP over serial connection in the Management tool select Network TCP serial Ensure that the serial port is configured as required for communication with the attached device see Serial port settings on page 39 Then in the TCP connection section configure these settings TCP over serial Enables and disables this functi...

Page 39: ...0 to 30000 ms and the default is 100 ms Idle timeout The amount of time in seconds that the TCP connection can remain idle before it is disconnected by the HP 501 The range is 30 to 86400 seconds and the default is 30 seconds Statistics for the TCP serial feature are available on the Status TCP serial page Serial port settings Use the settings in this section to configure the communication setting...

Page 40: ...page to view information on the state of the TCP connection and transmit and receive statistics State The TCP connection state Possible values are Listen When the TCP Mode is set to Server this value indicates that the HP 501 is waiting for the remote TCP client to establish the connection Connecting When the TCP Mode is set to Client this value indicates that the HP 501 is attempting to establish...

Page 41: ...rtisements By default LLDP operation is enabled Transmit interval The number of seconds between LLDP message transmissions The default is 30 seconds Loop protection The HP 501 supports loop protection which prevents configuring both the wired and wireless interfaces to use the same subnet When enabled the software periodically sends loop protection packets to a reserved multicast address on the wi...

Page 42: ...oop protection feature are available on the Status Loop protection page Loop protection status Indicates whether the feature is enabled or disabled Number of packets sent received The number of loop protection packets sent and received since the last reboot Shut down interface If the Ethernet interface is currently in the shut down state eth0 appears in this field Remaining shutdown time If the Et...

Page 43: ...electing Maintenance Config file management Reset See Resetting to factory defaults on page 64 Save The Save feature enables you to back up your configuration settings so that they can be easily restored in case of failure Before you install new software HP recommends that you always back up your current configuration To start the process select a Download method and then click Download ...

Page 44: ...store For a TFTP restore specify the file path and file name on the TFTP server and enter the TFTP server address and then click Restore After restoring the configuration file the system automatically reboots Note The HP 501 automatically restarts when the upload is completed Reboot For maintenance purposes or as a troubleshooting measure you can reboot the HP 501 by clicking Reboot The process ca...

Page 45: ... the image switch is in progress When the image switch is complete the HP 501 restarts The HP 501 resumes normal operation with the same configuration settings it had before the upgrade Software upgrade When a software upgrade is available you can download the image to the HP 501 Notice Before updating be sure to read the Release Notes Even though configuration settings are preserved during softwa...

Page 46: ...The file contains configuration settings including those that have been customized by the user The file is named showtech rtf by default In the Save system information area you can download an encrypted binary file Although you cannot read this file you can provide it to customer support to assist in debugging efforts This file contains additional configuration and device information It is named s...

Page 47: ...ages from RAM select Tools System log System log configuration You can use the System log configuration section of the System log page to configure the size of the system log and specify which system events result in messages to store in the log based on their severity level You can configure the following log settings Persistence If the system unexpectedly reboots log messages can be useful to di...

Page 48: ...ge is overwritten by the new log message Remote syslog configuration You can view up to 512 messages stored in RAM in the Events section of the System log page To view a longer history of messages you must set up a remote syslog server that acts as a syslog log relay host on your network Then you can configure the HP 501 to send syslog messages to the remote server The Severity level setting confi...

Page 49: ...tem log page shows real time system events on the HP 501 such as DHCP address assignments to the HP 501 The log shows the date the event occurred its severity level the software program or process that caused the event message and the message text You can click Refresh to display the most recent data from the HP 501 or Clear All to remove all entries from the list RSSI log The HP 501 can determine...

Page 50: ...ged at a regular interval Enter the number of seconds between log entries from 1 to 3600 seconds Syslog mode Select Enabled to have RSSI log entries sent to the configured Syslog server when the detected RSSI value is below the threshold Select Remote syslog configuration to display the System log page RSSI log The RSSI log shows the date of each RSSI entry the MAC address of the remote AP the cha...

Page 51: ...m AP Notice TSB Connection established with TCP xx at IP xx port xx TCP serial connection established Informational TSB Disconnection from TCP xx xx port xx TCP serial connection terminated Informational TSB Idle timeout on TCP xx xx disconnected TCP serial connection disconnected due to idle timeout Informational TSB Closing incoming connection from TCP client at IP xx port xx A connection has al...

Page 52: ...can contain only printable characters By default no address is configured Urgent message severity This setting determines the severity level for log messages that are considered to be urgent Messages in this category are sent immediately upon being generated The security level you select and all higher levels are considered urgent Emergency indicates that the system is unusable It is the highest l...

Page 53: ...vels Non urgent log duration This setting determines how frequently the non urgent messages are sent to the email SMTP server The range is 30 to 1440 minutes The default is 30 minutes Non urgent messages are sent when the time duration is reached or the number of messages exceeds the configured Depth value on the System log page whichever is first Mail server configuration Mail server address Spec...

Page 54: ...llowing text shows an example of an email alert sent from the HP 501 to the network administrator Viewing email alert status You can select Status Email alert to view the status of the email alert feature and information about past activity Email alert status Indicates whether the Email alert feature is administratively enabled or disabled Number of emails sent The number of alert emails sent sinc...

Page 55: ...ader 802 3 packets received and transmitted on the Ethernet interface To configure network trace settings and initiate packet captures select Tools Network trace Packet trace configuration Use this section to configure parameters that affect how packet trace functions on the radio interface Trace beacons Enable to trace the 802 1 1 beacons detected by the radio HP recommends that you also enable P...

Page 56: ...occurs The trace time reaches the configured duration The trace file reaches its maximum size The administrator stops the trace During the trace you can monitor the trace status elapsed trace time and the current trace file size You can click Refresh to update this information while the trace is in progress Performing a packet file trace To perform a packet file trace 1 Select Tools Network trace ...

Page 57: ...ace is not standard on the Linux version of Wireshark The Linux version does not work with the HP 501 Setting up Wireshark sessions You can trace up to five interfaces on the HP 501 at the same time However you must start a separate Wireshark session for each interface You can configure the IP port number used for connecting Wireshark to the HP 501 The default port number is 2002 The system uses f...

Page 58: ...on For example if the Wireshark IP port is configured to be 58000 the following trace filter is automatically installed on the HP 501 not portrange 58000 58004 Enabling the packet trace feature impacts HP 501 performance even if there is no active Wireshark session Performance is negatively impacted to a greater extent when packet trace is in progress Due to performance and security issues the pac...

Page 59: ...s 1 to 65530 and the default port is 2002 If you change this value you must click Save prior to starting the remote trace 4 Click Start Remote Trace The trace session runs for the specified duration You can view the trace status in the Packet trace status section Click Refresh to see the updated trace time You can click Stop Trace to stop a trace before the specified duration has elapsed Packet tr...

Page 60: ...nd is triggered HTTP download Select HTTP to download to your PC or a network location After you click Download you can to browse to the desired location TFTP download Select TFTP to download to download to a TFTP server TFTP server filename Enter the TFTP server name and path where the file is to be saved Server IP Enter the IP address of the TFTP server After you click Download a progress bar di...

Page 61: ...fy the amount of time in seconds after which an unsuccessful ping will time out The range is 1 to 15 seconds and the default is 5 seconds Result The result window shows the size and number of each packet sent and if the host is reached the size and number of each packet received in response and its round trip time It also displays statistics about packet loss and if the host is reached the average...

Page 62: ...ormation see the HP Networking Support website www hp com networking support Before contacting HP collect the following information Product model names and numbers Technical support registration number if applicable Product serial numbers Error messages Operating system type and revision level Problem description and any detailed questions HP websites For additional information see the following H...

Page 63: ...terface See the following image for identification of key user interface elements and the table below for example directions Example directions in this guide What to do in the user interface Select Wireless Radio Click Wireless on the main menu and then click Radio on the sub menu Set Mode to 5 GHz IEEE 802 1 1n For the Mode setting select 5 GHz IEEE 802 1 1n from the list Main Sub menu ...

Page 64: ...DHCP client on the Ethernet port If no DHCP server assigns an address to the HP 501 its address defaults to 192 168 1 1 Using the reset button Insert a tool such as a paper clip into the Reset button hole and press and hold the reset button for a few seconds until the status LEDs flash three times Using the management tool To reset the HP 501 to factory defaults 1 Launch the management tool defaul...

Reviews: