SkyPilot SkyExtender DualBand, Installation And Setup Manual

Page 1: ...SkyPilot SkyExtender DualBand Installation and Setup Guide...

Page 2: ...equipment or unshielded cables is likely to result in interference to radio and TV reception The user is cautioned that changes and modifications made to the equipment without the approval of manufact...

Page 3: ...DualBand kit 9 3 Installing SkyExtender DualBand 11 4 Configuring SkyExtender DualBand 15 5 Configuration Tool Reference 45 A Connecting to the Access Point Command Line Interface 73 B Manually Updat...

Page 4: ......

Page 5: ...talling and setting up a SkyPilot SkyExtender DualBand which can provide access point services for users of 802 1x wireless Wi Fi networks This guide assumes administrator level knowledge of IP networ...

Page 6: ...SkyPilot SkyExtender DualBand Installation and Setup Guide 6...

Page 7: ...pport several business models with a single service installation SkyExtender DualBand provides a unique opportunity for WISPs looking to combine scalable Wi Fi capacity with the seamless coverage of a...

Page 8: ...ers attempting to connect to the SkyPilotDualBand WLAN must provide a password publicpublic by default The default configuration is provided for initial management and configuration of the SkyExtender...

Page 9: ...r with a high powered Wi Fi 802 11b g access point o A pair of 2 4 GHz antennas o A PoE Power over Ethernet adapter for powering the SkyExtender DualBand o A custom console cable RJ 45 to DB 9 for mak...

Page 10: ...sent numbers 10 15 For example if the MAC address of the SkyExtender DualBand is 00 0A DB 01 31 9F the reserved addresses start with the MAC address 00 0A DB 01 31 80 o Setup information for the acces...

Page 11: ...and can deteriorate over time as structures appear or are relocated Plan on testing potential sites to determine the suitability of the link topology for target applications Interference on your desi...

Page 12: ...ation Guide Make sure that you allow enough clearance for the 2 4 GHz antennas you ll attach to the bottom of the SkyExtender 2 Connect the 2 4 GHz antennas The access point requires attachment of the...

Page 13: ...xtender DualBand NOTE The external Ethernet port on the SkyExtender DualBand is limited to providing power to the device it cannot handle data traffic Do not attempt to connect the power injector to a...

Page 14: ...nder DualBand is initialized and listening for hello signals from other devices When both LEDs are steady the SkyExtender DualBand is successfully connected to the wireless network The sequence takes...

Page 15: ...tionally make sure the EMS software is installed both on a central server and a client and set up for configuring SkyPilot devices After getting a configuration from the provisioning server the SkyExt...

Page 16: ...or more information on provisioning modes see Getting Started with the SkyPilot Network provided on the SkyPilot Network Software CD Choosing a WLAN configuration Before starting configuration decide...

Page 17: ...he remaining sections of this chapter For information related to manual configuration turn to Chapter 5 Using the Access Point Configuration Tool Before you use the EMS software to set up automatic co...

Page 18: ...ouble click the startsemsclient bat application icon 3 At the prompt enter the user name and password The default user name is admin the default password is admin The application starts displaying the...

Page 19: ...ouble click SkyProvision Software Software Maintenance that is click the expansion icon next to SkyProvision to view all the application options click the expansion icon next to the Software option an...

Page 20: ...step 2 to add additional software images Specifying a domain After adding any software images as necessary you need to specify a domain for the SkyExtender DualBand that s consistent with the domain...

Page 21: ...igure 6 Domain list 2 Add a domain Click the Add button below the Domain list to open the Add Domain dialog box Figure 7 Add Domain dialog box Enter a domain name and number and then click OK The Comm...

Page 22: ...profile for the SkyExtender DualBand 1 Open the Node Profile pane In the taskbar double click SkyProvision Node Profile The Node Profile pane appears listing existing node profiles Figure 8 Node Prof...

Page 23: ...new node profile now appears in the Node Profile list Creating a node After creating the node profile you can specify the SkyExtender DualBand as a new node on the wireless mesh network When you crea...

Page 24: ...der DualBand Installation and Setup Guide 24 Figure 10 Node Maintenance list 2 Add a new node Click the Add button below the Node Maintenance list to display the Add Node dialog box Asterisks identify...

Page 25: ...address which is printed on a label affixed to the base of the device From the Node Type pull down menu choose SkyExtender DualBand From the Node Profile pull down menu choose a node profile Add any...

Page 26: ...the EMS application to configure SkyExtender DualBand for network operations on a SkyPilot wireless mesh network Creating an access point security profile Now you can start creating profiles for the a...

Page 27: ...Figure 13 Access Point Security Profile list If the pane lists a profile that you want to use go to step 3 If you need to create a profile go to step 2 2 Add a new access point security profile Click...

Page 28: ...step depends on the type of Wi Fi access you want to provide with the 1SkyExtender DualBand o If you re configuring the WLAN for WPA Wi Fi protected access go to the next section o If you re configuri...

Page 29: ...ar double click SkyProvision DualBand Access Point Access Point Radius Profile The information pane displays any existing access point Radius profiles Figure 15 shows an example Figure 15 Access Point...

Page 30: ...pply the shared secret string specified in the Radius server s client configuration Modify the Primary Authentication Port and Primary Accounting Port assignments if they re different from the standar...

Page 31: ...cerns for an open configuration The network is more vulnerable to unauthorized access and malicious actions including denial of service attacks than WPA secured networks For more information about ope...

Page 32: ...profile list to display the Add Access Point WLAN SSID Profile dialog box Asterisks identify required fields Figure 18 Add Access Point WLAN SSID Profile dialog box top half Enter a unique name for t...

Page 33: ...clients to associate with the WLAN Make the WLAN an open network by choosing None from the Security Policy pull down menu Figure 19 Add Access Point WLAN SSID Profile dialog box bottom half Choose No...

Page 34: ...r the SkyExtender DualBand authenticates Wi Fi network users via a Radius server WPA uses the IEEE 802 1x and IETF EAP protocols to give users a secure connection with both the access point and the Ra...

Page 35: ...ample Figure 21 Access Point WLAN SSID Profile list If the pane lists an access point WLAN SSID profile that you can use to configure a protected access Wi Fi network skip to the next section If you n...

Page 36: ...re setting up multiple WLAN SSIDs with different security policies or multiple IP address spaces the use of VLANs is highly recommended To make the WLAN visible to users searching for wireless networ...

Page 37: ...Equivalent Privacy use Radius based WPA instead of WPA PSK Figure 23 Add Access Point WLAN SSID Profile dialog box bottom half Choose None from the DHCP Server Type menu unless you plan to use the ac...

Page 38: ...dd additional WLAN SSID profiles Creating an access point profile Complete the access point configuration by creating an access point profile 1 Open the Access Point Profile pane In the taskbar double...

Page 39: ...igure 25 Access Point Profile list empty 2 Add a new access point profile Click the Add button below the Access Point Profile list to display the Add Access Point Profile dialog box Asterisks identify...

Page 40: ...OK to save the settings The new profile now appears in the Access Point Profile list Figure 27 Access Point Profile list with new profile Viewing the access point nodes SkyProvision automatically cre...

Page 41: ...igured as a network node use the SkyControl application to view a graphical representation of the device as part of the domain to which you assigned it 1 View the node in the domain map In the taskbar...

Page 42: ...view 2 View the device details Double click the SkyExtender DualBand icon to display a Device Details window for the device The window displays current settings for the device including its MAC addres...

Page 43: ...Band The access point configuration you created in SkyProvision is automatically sent to the SkyExtender DualBand the next time the device is polled by the network For more information on using SkyCon...

Page 44: ......

Page 45: ...d buttons you can use to modify and monitor the configuration Setting up your connection Before using the configuration tool to create a manual configuration for the SkyExtender DualBand access point...

Page 46: ...er is connected to the SkyGateway and is set up to distribute IP addresses across the wireless mesh network To connect to the access point from a host computer on the SkyPilot wireless mesh network 1...

Page 47: ...ppendix A Connecting to the Access Point Command Line Interface to connect to the access point via a serial console and then confirm the IP address assignment from the console If a management VLAN ope...

Page 48: ...the SSID from your computer 2 Set an IP address for your computer s 802 11b g interface If the SkyExtender DualBand is not connected to a DHCP server via the SkyPilot mesh network enter the IP address...

Page 49: ...DHCP server uses to populate devices For more information on getting an IP address assigned by DHCP see the previous section To start the configuration tool 1 Open a Web browser and enter the URL of...

Page 50: ...ains the information displayed The configuration tool provides a navigation bar on the left side To navigate to a page click the corresponding item in the bar You create and modify configurations by u...

Page 51: ...date and time as set by NTP or if not set by NTP January 1 1970 plus the amount of time since the access point was last booted Up Time Number of WLANs The number of WLANs configured and enabled Count...

Page 52: ...ms the change in configuration o Click Save to flash and activate to save your changes to flash nonvolatile memory and instantly update the SkyExtender DualBand access point s active configuration You...

Page 53: ...Check From DHCP if the IP address is provided by a DHCP server If From DHCP is checked the other IP address fields are unavailable for editing otherwise you must enter static IP addresses in the empty...

Page 54: ...ea of the Access Point Configuration page to enable security services provide passwords and set up remote access of the access point Figure 37 Security Setting area of Access Point Configuration page...

Page 55: ...the Ethernet or VLAN level A private enterprise network may want to disable Peer to Peer to permit shared LAN services such as file sharing Management from Wireless Clients Check to allow management...

Page 56: ...gured for accounting Click the Default AcctPort button to reset the value to the standard port number Secondary Host An IP address of the optional secondary Radius server for authenticating users of a...

Page 57: ...ccess point each with a unique SSID and independent authentication security policies By default the access point includes one predefined SSID SkyPilotDualBand that uses a WPA PSK configuration also kn...

Page 58: ...emory For more information see the section Configuration Management Commands page on page 72 Figure 41 WLAN Details page WLAN SSID Required Use this field to supply the SSID that s announced for this...

Page 59: ...options to 802 1p user priority is Gold 6 Silver 3 and Bronze 0 Figure 42 WLAN Details page showing QoS choices Admin Status Check to activate this WLAN If the box is not checked the WLAN will be conf...

Page 60: ...pears in an area labeled DHCP Relay Parameters Use this field to supply the IP address of the authoritative DHCP server for the network Figure 44 DHCP Relay Parameters area of WLAN Details page If you...

Page 61: ...top Range An end address for the IP address pool for example 192 168 10 254 Subnet Mask A subnet mask for this network segment for example 255 255 255 0 Broadcast Address An IP address for IP broadcas...

Page 62: ...essary Security Policy menu Use the Security Policy menu on the WLAN Details page to specify the types of encryption and authentication you want the WLAN to use Figure 46 WLAN Details page showing Sec...

Page 63: ...st one Radius server on the Access Point Configuration page If 802 1X is selected two additional fields become available as shown in Figure 47 Figure 47 802 1X Parameters area of WLAN Details page WEP...

Page 64: ...the Access Point Configuration page When WPA is selected a Pre Shared Key checkbox and Passphrase entry field appear o WPA AES CCMP The complete 802 11i WPA2 standard replacing WEP DES and TKIP with...

Page 65: ...tings page After modifying the SNMP server settings click Save to save your changes to volatile RAM on the access point or Save to flash and activate to save them to flash memory and instantly update...

Page 66: ...IP Address Along with the IP Mask field specifies which IP addresses can access the SNMPv1 v2 agent with this community name An IP address of 192 168 2 0 with an IP mask of 255 255 255 0 specifies th...

Page 67: ...Pv3 agent Authentication Protocol A choice of None HMAC MD5 or HMAC SHA If HMAC MD5 or HMAC SHA is chosen two new fields appear that require you to fill in the password used to authenticate the user n...

Page 68: ...ser to have read only or read write access Status Enabled or disables this SNMPv3 user Web Admin Management page Clicking Web Admin Settings in the configuration tool navigation bar takes you to the W...

Page 69: ...click Save to save your changes to volatile RAM on the access point or Save to flash and activate to save them to flash memory and instantly update the access point s active configuration You can als...

Page 70: ...gn a new password for Web access to the configuration tool When this option is selected password entry and confirmation fields appear Figure 56 Change Admin Password Disable Enable Web Administration...

Page 71: ...the configuration tool navigation bar takes you to the Message Log page Use this page to display a log of recent events a snapshot of the most recent syslog output The page is updated each time you cl...

Page 72: ...osen a Proceed button appears When you click Proceed the configuration tool prompts you for confirmation before completing the operation Save Current Configuration to Flash Saves changes in the config...

Page 73: ...xternal Ethernet port on the SkyExtender is available for power transmission only and is unable to handle data traffic After logging in to the access point component by supplying a password you can en...

Page 74: ...gged in you can use the command line interface to set configuration parameters or retrieve the IP address of the access point 4 Get the IP address of the access point Because there are two radios insi...

Page 75: ...for the access point is distinct from the binary version of the image file used by the SkyExtender component which uses a different prefix for example SkyExt 2 0 16 bin 2 After downloading the binary...

Page 76: ...img local firmware img remote firmware img 500 Syntax error 227 Entering Passive Mode 192 168 2 18 4 1 150 Opening data connection 100 3862 KB 544 05 KB s 00 07 226 Transfer complete 3955338 bytes sen...

Page 77: ...captive portal forces all HTTP traffic from an unauthenticated user to a login Web page and blocks the traffic until the user successfully logs in to the Web page See http en wikipedia org wiki Capti...

Page 78: ...IEEE 802 1x and IETF EAP protocols to allow a client to bootstrap a secure connection with the access point and the Radius server to exchange credentials userName domain password and keys for encrypti...

Page 79: ...lot SkyExtender DualBand Installation and Setup Guide 79 NOTE The configuration of a Radius server for authenticating Wi Fi users depends on third party solutions and is outside the scope of this docu...