versa VX-AP310N, User Manual

Page 1: ...VX AP310N Wireless Access Point User s Guide V1 01 ...

Page 2: ......

Page 3: ...ng WEP 37 Using WPA PSK WPA2 PSK 38 Using WPA Enterprise 39 802 1x Server Setup Windows 2000 Server 40 802 1x Client Setup on Windows XP 50 Using 802 1x Mode without WPA 56 CHAPTER 5 OPERATION AND STATUS 57 Operation 57 Status Screen 57 CHAPTER 6 ACCESS POINT MANAGEMENT 64 Overview 64 AP Type Screen 64 Management 66 Auto Config 69 Config File 70 Ping Test 72 Auto Reboot 73 Firmware Upgrade 74 APPE...

Page 4: ...ccess Point User Guide ii Checking TCP IP Settings Windows Vista 88 APPENDIX D ABOUT WIRELESS LANS 90 Overview 90 Wireless LAN Terminology 90 APPENDIX E COMMAND LINE INTERFACE 93 Overview 93 Command Reference 93 ...

Page 5: ...y to use x Standards Compliant The Wireless Access Point complies with the IEEE802 11g and IEEE802 11n draft 2 0 specifications for Wireless LANs x Supports 11n Wireless Stations The 802 11n Draft standard provides for backward compatibility with the 802 11b standard so 802 11n 802 11b and 802 11g Wireless sta tions can be used simultaneously x Bridge Mode Support The Wireless Access Point can ope...

Page 6: ...nd AES encryption methods are supported x 802 1x Support Support for 802 1x mode is included providing for the industrial strength wireless security of 802 1x authentication and authorization x Radius Client Support The Wireless Access Point can login to your existing Radius Server as a Radius client x Radius MAC Authentication You can centralize the checking of Wireless Station MAC addresses by u...

Page 7: ...NMP Support SNMP Simple Network Management Protocol is supported allowing you to use a SNMP program to manage the Wireless Access Point Package Contents The following items should be included x Wireless Access Point x Power Adapter x 2Pcs Antenna If any of the above items are damaged or missing please contact your dealer immediately ...

Page 8: ...eing transmitted or received via the Wireless access point Data includes network traffic as well as user data Status On Error condition Off Normal operation Blinking During start up and when the Firmware is being upgraded Ethernet On The LAN Ethernet port is active Off No active connection on the LAN Ethernet port Flashing Data is being transmitted or received via the corresponding LAN Ethernet po...

Page 9: ... default values To Clear All Data and restore the factory default values 1 Hold the Reset Button until the Status Red LED blinks TWICE usually more than 5 seconds 2 Release the Reset Button The factory default configuration has now been restored and the Access Point is ready for use ETHERNET Use a standard LAN cable RJ45 connectors to connect this port to a 10 100 1000BaseT hub switch on your LAN ...

Page 10: ... To maximize reliability and performance follow these guidelines x Use an elevated location such as wall mounted or on the top of a cubicle x Place the Wireless Access Point near the center of your wireless coverage area x If possible ensure there are no thick walls or metal shielding between the Wireless Access Point and Wireless stations Under ideal conditions the Wireless Access Point has a ran...

Page 11: ...r Ethernet The Wireless Access Point supports PoE Power over Ethernet To use PoE 1 Do not connect the supplied power adapter to the Wireless Access Point 2 Connect one end of a standard category 5 LAN cable to the Ethernet port on the Wire less Access Point 3 Connect the other end of the LAN cable to the powered Ethernet port on a suitable PoE Adapter 48V DC 4 Connect the unpowered Ethernet port o...

Page 12: ...iew This chapter describes the setup procedure to make the Wireless Access Point a valid device on your LAN and to function as an Access Point for your Wireless Stations Wireless Stations may also require configuration For details see Chapter 4 PC and Server Configuration The Wireless Access Point can be configured using your Web Browser ...

Page 13: ...ing a Wireless connection to it may be not possible x If your LAN contains a Router or Routers ensure the PC used for configuration is on the same LAN segment as the Wireless Access Point 3 Start your Web browser 4 In the Address box enter HTTP and the IP Address of the 11N Wireless Access Point as in this example which uses the Wireless Access Point s default IP Address HTTP 192 168 0 228 5 You s...

Page 14: ...the Management menu 9 Use the Apply and Reboot buttons on the menu to apply your changes and restart the Wireless Access Point Setup is now complete Wireless stations must now be set to match the Wireless Access Point See Chapter 4 for details If you can t connect It is likely that your PC s IP address is incompatible with the Wireless Access Point s IP address This can happen if your LAN does not...

Page 15: ...N x Subnet Mask The Network Mask associated with the IP Address above Enter the value used by other devices on your LAN x Gateway The IP Address of your Gateway or Router Enter the value used by other devices on your LAN x DNS Enter the DNS Domain Name Server used by PCs on your LAN DHCP Server x If Enabled the Access Point will allocate IP Addresses to PCs DHCP clients on your LAN when they start...

Page 16: ...Wireless Access Point User Guide 12 NTP Server Name IP Ad dress Enter the server name or IP address of the NTP ...

Page 17: ... the wireless connection if the wired connect of AP is invalid Enable Bonjour Enable Bonjour If checked the Bonjour will enable applications to discover the devices and the services on IP networks Now this AP only publish http and https service LLTD Enable Link Layer Topology Discovery Enable this if you want to use Link Layer Topology Discovery protocol LLTD feature STP Enable Spanning tree Proto...

Page 18: ... The settings on this screen must match the settings used by Wireless Stations Click Basic Settings on the Wireless menu to view a screen like the following Figure 9 Wireless Basic Screen Data Wireless Basic Settings Screen Operation Turn Radio On Enable this to use the wireless feature Wireless Mode Select the desired option x Disable select this if for some reason you do not this AP to transmit ...

Page 19: ... and 802 11g this will allow connections by both 802 11b and 802 11g wireless stations x 802 11n and 802 11g this will allow connections by both 802 11n and 802 11g wireless stations x Mixed 802 11n 802 11g 802 11b this is the default and will allow connections by 802 11n 802 11b and 802 11g wireless sta tions Auto Channel Scan If Enable is selected the Access Point will select the best available ...

Page 20: ...eld In this mode all traffic is sent to the specified AP x Wireless Detection This mode will turn the access point into a wireless Monitor A Rouge AP is an Access Point which should not be in use and so can be considered to be providing unauthor ized access to your LAN x No Security If checked then any AP operating with security disabled is considered to be a Rogue AP x Not in Legal AP List If che...

Page 21: ...is indicates the VAP is currently enabled If not displayed the VAP is currently disabled x VAP Name The current VAP name is displayed x SSID The current SSID associated with this VAP x Security System The current security system e g WPA PSK is dis played Enable Button Enable the selected VAP Configure Button Change the settings for the selected VAP Disable Button Disable the selected VAP Isolation...

Page 22: ... no SSID is broadcast If enabled the SSID will then be broadcast to all Wireless Stations Stations which have no SSID or a null value can then adopt the correct SSID for connections to this Access Point Isolation within VAP If enabled then each Wireless station using the Access Point is invisible to other Wireless stations In most business stations this setting should be Disabled Security Settings...

Page 23: ...uires a Radius Server on your LAN to provide the client authentication according to the 802 1x standard Data transmissions are encrypted using the WPA2 standard If this option is selected x This Access Point must have a client login on the Radius Server x Each user must authenticate on the Radius Server This is usually done using digital certificates x Each user s wireless client must support 802 ...

Page 24: ...20 x Each user s wireless client must support 802 1x and provide the login data when re quired x All data transmission is encrypted using the WEP standard You only have to select the WEP key size the WEP key is automatically generated ...

Page 25: ... Figure 12 Wireless Security None No security is used Anyone using the correct SSID can connect to your network Security Settings WEP This is the 802 11b standard Data is encrypted before transmission but the encryption system is not very strong ...

Page 26: ...d Key If you wish to use a particular method select the appropriate value Open System or Shared Key All Wireless stations must then be set to use the same method Key Input Select Hex or ASCII depending on your input method All keys are converted to Hex ASCII input is only for convenience Key Value Enter the key values you wish to use The default key selected by the radio button is required The oth...

Page 27: ...lue Data is encrypted using a 256Bit key derived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Update This refers to the key used for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updat...

Page 28: ...erived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update Group key ...

Page 29: ...g this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP for WPA PSK and AES for WPA2 PSK Group Key Update This refers to the key used for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update Group key when any mem...

Page 30: ...ith Radius Screen WPA with Radius WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Update This refers to the key used for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update Group key when any membership terminates ...

Page 31: ...Radius Screen WPA2 with Radius WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update Group key when any membership terminates If en...

Page 32: ... Data WPA and WPA2 with Radius Screen WPA and WPA2 with Radius WPA Encryption The encryption method is TKIP for WPA and AES for WPA2 Group Key Update This refers to the key used for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update Group key when any membe...

Page 33: ...sed to authenticate each user See Chapter4 for details of user configuration x Each user s wireless client must support 802 1x x All data transmission is encrypted using the WEP standard You only have to select the WEP key size the WEP key is automatically generated Figure 20 802 1x Wireless Security Screen Data 802 1x Screen 802 1x WEP Key Size Select the desired option x 64 Bit Keys are 10 Hex 5...

Page 34: ...Exchange This setting if only available if using Dynamic WEP Keys If you want the Dynamic WEP keys to be updated regularly enable this and enter the desired lifetime in minutes Static WEP Key EAP MD5 Enable this if some wireless clients use a fixed static WEP key using EAP MD5 Note that both Dynamic and Static keys can be used simultane ously allowing clients using either method to use the Access ...

Page 35: ...ecret Enter the key value to match the Radius Server Secondary Authentica tion Server The Secondary Authentication Server will be used when the Primary Authentication Server is not available Accounting Server Primary Accounting Server Enter the IP address in the following fields if you want this Access Point to send accounting data to the Radius Server Port Number The port used by your Radius Serv...

Page 36: ...addresses x Radius The Access Point will use the MAC address table located on the external Radius server on the LAN for Access Control Warning Ensure your own PC is in the Trusted Wireless Stations list before enabling this feature Local Trusted Stations This table lists any Wireless Stations you have designated as Trust ed If you have not added any stations this table will be empty For each Wirel...

Page 37: ...ons To change the list of trusted wireless stations use the Modify List button on the Access Control screen You will see a screen like the sample below Figure 23 Trusted Wireless Stations Data Trusted Wireless Stations Trusted Wireless Stations This lists any Wireless Stations which you have designated as Trusted Other Wireless Stations This list any Wireless Stations detected by the Access Point ...

Page 38: ...All Select all of the Stations listed in the Other Stations list Select None De select any Stations currently selected in the Other Stations list Edit To change an existing entry in the Trusted Stations list select it and click this button 1 Select the Station in the Trusted Station list 2 Click the Edit button The address will be copied to the Address field and the Add button will change to Updat...

Page 39: ...s clients voice and multimedia traffic will be given a higher priority than other traffic No Acknowledgement If enabled then WMM acknowledgement is disabled Depend ing on the environment disabling acknowledgement may increase throughput slightly Parameters Disassociated Timeout This determines how quickly a Wireless Station will be consid ered Disassociated with this AP when no traffic is received...

Page 40: ...t the desired option The default is Long The Short setting takes less time when used in a good environment 802 11b Protection Mode The Protection system is intended to prevent older 802 11b devices from interfering with 802 11g transmissions Older 802 11b devices may not be able to detect that a 802 11g transmission is in progress Normally this should be left at Auto ...

Page 41: ...lso more complex Using WEP For each of the following items each Wireless Station must have the same settings as the Wireless Access Point Mode On each PC the mode must be set to Infrastructure SSID ESSID This must match the value used on the Wireless Access Point The default value is wireless Note The SSID is case sensitive Wireless Security x Each Wireless station must be set to use WEP data encr...

Page 42: ... be set to Infrastructure SSID ESSID This must match the value used on the Wireless Access Point The default value is wireless Note The SSID is case sensitive Wireless Security On each client Wireless security must be set to WPA PSK x The Pre shared Key entered on the Access Point must also be entered on each Wireless client x The Encryption method e g TKIP AES must be set to match the Access Poin...

Page 43: ... for the Radius Server 802 1x Encryption Typically EAP TLS is used This is a dynamic key system so keys do NOT have to be entered on each Wireless station However you can also use a static WEP key EAP MD5 the Wireless Access Point supports both methods simultaneously Radius Server Configuration If using WPA Enterprise mode the Radius Server on your network must be configured as follow x It must pr...

Page 44: ...of the default prompts ensure that DNS is installed and enabled during installa tion Services Installation 1 Select the Control Panel Add Remove Programs 2 Click Add Remove Windows Components from the left side 3 Ensure that the following components are activated selected x Certificate Services After enabling this you will see a warning that the computer cannot be renamed and joined after installi...

Page 45: ...erver Configuration 41 Figure 25 Components Screen 4 Click Next 5 Select the Enterprise root CA and click Next Figure 26 Certification Screen 6 Enter the information for the Certificate Authority and click Next ...

Page 46: ...d must be stopped before continuing Click Ok then Finish DHCP server configuration 1 Click on the Start Programs Administrative Tools DHCP 2 Right click on the server entry as shown and select New Scope Figure 28 DHCP Screen 3 Click Next when the New Scope Wizard Begins 4 Enter the name and description for the scope click Next 5 Define the IP address range Change the subnet mask if necessary Click...

Page 47: ...ter the router address for the current subnet The router address may be left blank if there is no router Click Next 10 For the Parent domain enter the domain you specified for the domain controller setup and enter the server s address for the IP address Click Next Figure 30 DNS Screen 11 If you don t want a WINS server just click Next 12 Select Yes I want to activate this scope now Click Next then...

Page 48: ...s and select New Certificate to Issue Figure 31 Certificate Authority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 32 Template Screen 4 Select Start Programs Administrative Tools Active Directory Users and Computers 5 Right click on your active directory domain and select Properties ...

Page 49: ...elect the Group Policy tab choose Default Domain Policy then click Edit Figure 34 Group Policy Tab 7 Select Computer Configuration Windows Settings Security Settings Public Key Policies right click Automatic Certificate Request Settings New Automatic Certificate Request ...

Page 50: ...ect Computer then click Next Figure 36 Certificate Template Screen 10 Ensure that your certificate authority is checked then click Next 11 Review the policy change information and click Finish 12 Click Start Run type cmd and press enter Enter secedit refreshpolicy machine_policy This command may take a few minutes to take effect ...

Page 51: ...less Access Point and set the shared secret as entered on the Security Settings of the Wireless Access Point 5 Click Finish 6 Right click on Remote Access Policies select New Remote Access Policy 7 Assuming you are using EAP TLS name the policy eap tls and click Next 8 Click Add If you don t want to set any restrictions and a condition is required select Day And Time Restrictions and click Add Fig...

Page 52: ...ect the Authentication tab Enable Extensible Authentication Protocol and select Smart Card or other Certificate Deselect other authentication meth ods listed Click OK Figure 39 Authentication Screen 12 Select No if you don t want to view the help for EAP Click Finish ...

Page 53: ... Access Login for Users 1 Select Start Programs Administrative Tools Active Directory Users and Computers 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow access Click OK Figure 40 Dial in Screen ...

Page 54: ... x You are using Windows XP x You are connecting to a Windows 2000 server for authentication x You already have a login User name and password on the Windows 2000 server Client Certificate Setup 1 Connect to a network which doesn t require port authentication 2 Start your Web Browser In the Address box enter the IP address of the Windows 2000 Server followed by certsrv e g http 192 168 0 2 certsrv...

Page 55: ...PC and Server Configuration 51 Figure 42 Wireless CA Screen 5 Select User certificate request and select User Certificate the click Next Figure 43 Request Type Screen 6 Click Submit ...

Page 56: ...2 Figure 44 Identifying Information Screen 7 A message will be displayed then the certificate will be returned to you Click Install this certificate Figure 45 Certificate Issued Screen 8 You will receive a confirmation message Click Yes ...

Page 57: ...ork Connection and select Properties 3 Select the Authentication Tab and ensure that Enable network access control using IEEE 802 1X is selected and Smart Card or other Certificate is selected from the EAP type Figure 47 Authentication Tab Encryption Settings The Encryption settings must match the APs Access Points on the Wireless network you wish to join x Windows XP will detect any available Wir...

Page 58: ... enable encryption for a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 48 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and click Configure 3 Select and enter the correct values as advised by your Network Administrator For example to use EAP TLS you would enable Data encryption and click the checkbox for the setting The...

Page 59: ...PC and Server Configuration 55 Figure 49 Properties Screen Setup for Windows XP and 802 1x client is now complete ...

Page 60: ...g The key is provid ed for me automatically Instead you must enter the WEP key manually ensuring it matches the WEP key used on the Access Point Figure 50 Properties Screen Note On some systems the 64 bit WEP key is shown as 40 bit and the 128 bit WEP key is shown as 104 bit This difference arises because the key input by the user is 24 bits less than the key size used for encryption ...

Page 61: ...c However you may need to perform the following operations on a regular basis x If using the Access Control feature update the Trusted PC database as required See Access Control in Chapter 3 for details x If using 802 1x mode update the User Login data on the Windows 2000 Server and configure the client PCs as required Status Screen Use the Status link on the main menu to view this screen Figure 5...

Page 62: ...rent IP address was obtained from a DHCP Server on your network It will display Enabled or Disabled DHCP Server Enabled or Disabled is displayed for the DHCP server status Ethernet Status The current Ethernet status is displayed Wireless Channel Frequency The Channel currently in use is displayed Wireless Mode The current mode e g 802 11g is displayed AP Mode The current Access Point mode is displ...

Page 63: ... Status 59 Statistics Screen This screen is displayed when the Statistics button on the Status screen is clicked It shows details of the traffic flowing through the Wireless Access Point Figure 52 Statistics Screen ...

Page 64: ...es a connection between the AP and the client Usually clients associ ate with only one 1 AP at any time Disassociation The number of Disassociation packets received Disassociation breaks the existing connection between the AP and the client Reassociation The number of Reassociation packets received Reassociation is the service that enables an established association between AP and client to be tra...

Page 65: ... if you didn t change the name the default name is used BSSIS The MAC address of the VAP SSID The SSID assigned to this VAP Broadcast SSID Indicates whether or not the SSID is broadcast Security The security method used by this VAP Status Indicates whether or not this VAP is enabled or currently used Clients The number of wireless stations currently using accessing this Access Point using this VAP...

Page 66: ...g Screen Data Activity Log Data Current Time The system date and time is displayed Log The Log shows details of the connections to the Wireless Access Point Buttons Refresh Update the data on screen Save to File Save the log to a file on your pc Clear Log This will delete all data currently in the Log This will make it easier to read new messages ...

Page 67: ...ta Station List Screen Station List MAC Address The MAC physical address of each Wireless Station is displayed Mode The mode of each Wireless Station SSID This displays the SSID used the Wireless station Because the Wire less Access Point supports multiple SSIDs different PCs could connect using different SSIDs Refresh Button Update the data on screen ...

Page 68: ...available on the Wireless Access Point s Man agement menu x AP Type x Management x Auto Config x Config File x Ping Test x Auto Reboot x Firmware Upgrade AP Type Screen The AP Type screen allows you to assign Fat AP mode or Fit AP mode The Wireless Access Point will work as general AP in Fat AP mode The Wireless Access Point must work with AC in Fit AP mode Figure 56 AP Type Screen 6 ...

Page 69: ... will work as general AP All of function on the AP need User to configure it everyone FIT AP FIT AP Select the mode The AP will work as thin AP mode The IP Address will change to DHCP Client It will ask one IP Address from DHCP Server on the LAN So User can config ure it by Web or AC ...

Page 70: ...Wireless Access Point User Guide 66 Management To reach this screen select Management in the Administrtion section of the menu ...

Page 71: ...e enter to Confirm Avoid the error Re enter the new password Method Enable Wireless Web Access If enabled the device will allow wireless client access the Device Web by wireless If disabled the device will only allow Ethernet client access the Device Web Enable HTTP Admin Connections HTTP Port Number If enabled The device will allow user via it by HTTP method If disabled The device will refuse use...

Page 72: ...agement Control On If enabled the device will limit user access it Not all of user can manger it so improve safety Allow Following IP Addresses to Manage the Device If enabled The device only allow the follows PCs access it The PC not in the list will not access it Deny Following IP Addresses to Manage the Device If enabled The device will refuse the follows PCs access it The PC not in the list wi...

Page 73: ...The device will auto load config file from server If disable The function is invalid FTP Server Input the FTP Server IP address User Name Input the user names for login FTP Server Password Input the password for login FTP Server Config file Input the config file path on the FTP Server Interval The device will as the interval time to check new config file on FTP Server If find new config file will ...

Page 74: ...copy of cur rent settings to a file Once you have the Access Point working properly you should back up the settings to a file on your computer You can later restore the Access Point s settings from this file if necessary To create a backup file of the current settings x Click Backup x If you don t have your browser set up to save downloaded files automatically locate where you want to save the fil...

Page 75: ...factory default settings click Set to Defaults button Note x This will terminate the current connection The Access Point will be unavailable until it has restarted x By default the Access Point will act as a DHCP client and automatically obtain an IP address You will need to deter mine its new IP address in order to re connect ...

Page 76: ...PING the IP address so the device will disable the wireless function To reach this screen select Ping Test in the Administration section of the menu Figure 60 SNMP Screen Data Ping Test Screen Ping Test Ping Test Mode Select enable or disable Ping IP Address If enable the function You must input one IP address and it is valid If the IP address is invalid that the device will disable wireless funct...

Page 77: ...boot Figure 61 Auto Reboot Screen Data Auto Reboot Screen Auto Reboot Mode Select enable or disable Reboot Interval If enable the function Please input the desired time The unit is hours The device will auto reboot as the time interval ...

Page 78: ...en like the following Figure 62 Firmware Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will appear in the Upgrade File field 3 Click the Upgrade button to commence the firmware upgrade The Wireless Access Point is unavailable during the upgrade process and must restart when the up grade i...

Page 79: ...DQPSK 2 Mbps DBPSK 1 Mbps Operating Frequencies 2 412 2 497 GHz Operating Channels 802 11g 11 for North America 13 for Europe ETSI 14 for Japan 802 11b 11 for North America 14 for Japan 13 for Europe ETSI 11n IEEE802 11n draft 2 0 compliant Rx Sensitivity 11 n 300Mbps 69dBm 11 g 54Mbps 73dBm 11 b 11Mbps 88dBm Antennae 2 x 2dbi detachable antenna Operating temperature 0q C to 40q C Storage temperat...

Page 80: ...ort x IEEE 802 11d x CTS only CTS RTS protect mechanism support x WMM support x WPS support x Wireless isolations Operation Mode x Common AP PTMP PTP x Thin AP mode x Wireless Router mode x Rogue AP Detection Security x Open shared WPA WPA PSK and WPA2 PSK authentication x 64bit 128bit WEP TKIP AES CCMP support x 802 1x support x EAP MD5 EAP TLS EAP TTLS PEAP x RADIUS based MAC authentication x Bl...

Page 81: ...v1 v2c v3 x LLTD x Only wired users to be able to control x Auto configuration Other Features x DHCP client x WINS client x Radius client x Enable Disable wireless x Network Integrality Check x FTP client Firmware Upgrade x HTTP FTP network protocol download ...

Page 82: ...an IP Address automatically DHCP client restart it x You can use the following method to determine the IP address of the Wireless Access Point and then try to connect using the IP address in stead of the name To Find the Access Point s IP Address 1 Open a MS DOS Prompt or Command Prompt Window 2 Use the Ping command to ping the Wireless Access Point Enter ping followed by the Default Name of the W...

Page 83: ...on the Wire less Access Point x On the PC the wireless mode is set to Infrastructure x If using the Access Control feature the PC s name and address is in the Trusted Stations list x If using 802 1x mode ensure the PC s 802 1x software is configured correctly See Chapter 4 for details of setup for the Windows XP 802 1x client If using a different client refer to the vendor s documentation ...

Page 84: ...s no need to change the TCP IP of each PC Just configure the Wireless Access Point to match your existing LAN The following sections provide details about checking the TCP IP settings for various types of Windows should that be necessary Checking TCP IP Settings Windows 9x ME 1 Select Control Panel Network You should see a screen like the following Figure 64 Network Configuration 2 Select the TCP ...

Page 85: ...an IP Address automatically This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specified IP address no changes are required The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs ...

Page 86: ... Settings Windows NT4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 66 Windows NT4 0 TCP IP 2 Click the Properties button to see a screen like the one below Figure 67 Windows NT4 0 IP Address ...

Page 87: ...IP address from a DHCP Server This is the default Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specified IP address no changes are required The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the P...

Page 88: ...tion 2 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 68 Network Configuration Win 2000 3 Select the TCP IP protocol for your network card 4 Click on the Properties button You should then see a screen like the following Figure 69 TCP IP Properties Win 2000 ...

Page 89: ...ndows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP address no changes are required The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs ...

Page 90: ... Right click the Local Area Connection and choose Properties You should see a screen like the following Figure 70 Network Configuration Windows XP 3 Select the TCP IP protocol for your network card 4 Click on the Properties button You should then see a screen like the following Figure 71 TCP IP Properties Windows XP ...

Page 91: ...s is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP address no changes are required The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs ...

Page 92: ...the Local Area Connection Status and choose Properties Click Continue to the User Account Control dialog box then you should see a screen like the following Figure 72 Network Configuration Windows Vista 3 Select the TCP IP protocol for your network card 4 Click on the Properties button You should then see a screen like the following ...

Page 93: ...ess automatically This is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP address no changes are required The Administrator should configure the Wireless Access Point with a fixed IP address from the same address range used on the PCs ...

Page 94: ...eless Stations e g Notebook PCs with wireless cards to a wired Ethernet LAN The Wireless Stations can then access all LAN resources Access Points can only function in Infrastructure mode and can communicate only with Wireless Stations which are set to Infrastructure mode SSID ESSID BSS SSID A group of Wireless Stations and a single Access Point all using the same ID SSID form a Basic Service Set B...

Page 95: ...n Access Point If more than one Access Point can be used the one with the strongest signal is used This can only happen within an ESS x If using Ad hoc mode no Access Point all Wireless stations should be set to use the same Channel However most Wireless stations will still scan all Channels to see if there is an existing Ad hoc group they can join WEP WEP Wired Equivalent Privacy is a standard fo...

Page 96: ...equired 802 1x This uses the 802 1x standard for client authentication and WEP for data encryption If possi ble you should use WPA Enterprise instead because WPA encryption is much stronger than WEP encryption If this option is used x The Access Point must have a client login on the Radius Server x Each user must have a user login on the Radius Server x Each user s wireless client must support 802...

Page 97: ...e Password 3 Once connected you can use any of the commands listed in the following Command Reference Command Reference The following commands are available config vap Config Virtual AP X Display CLI Command List help Display CLI Command List get 11nampdu Set 11n A MPDU Aggregation Mode get 11namsdu Set 11n A MSDU Aggregation Mode get 11nguardinterval Set 11n Guard Interval Mode get 11nsubchannel ...

Page 98: ... gateway Display Gateway IP Address get gtkupdate Display Group Key Update Mode get gtkupdateinterval Display Group Key Update Interval in Seconds get http Display HTTP Mode get httpport Display HTTP Port Number get https Display HTTPS Mode get httpsport Display HTTPS Port Number get ipaddr Display IP Address get ipmask Display IP Subnet Mask get isolation Display Isolate All Virtual APs State get...

Page 99: ...play Short Preamble Usage get snmpreadcommunity Display SNMP Read Community get snmpwritecommunity Display SNMP Write Community get snmpmode Display SNMP Mode get snmpmanagemode Display SNMP Manager Mode get snmptrapmode Display SNMP Trap Mode get snmptrapversion Display SNMP Trap Version get snmpv3username Display SNMP v3 User Name get snmpv3authproto Display SNMP v3 Authentication Protocol get s...

Page 100: ...et 11n A MPDU Aggregation Mode set 11namsdu Set 11n A MSDU Aggregation Mode set 11nguardinterval Set 11n Guard Interval Mode set 11nsubchannel Set 11n Extension Sub Channel set 11nradioband Set 11n Radio Band set 802 11d Set 802 11d Mode set acctserver Set Accounting Server set acctport Set Accounting Port set acctsecret Set Accounting Secret set acl Set Access Control set active Set Active up Mod...

Page 101: ...sk set isolation Set Isolate All Virtual APs State set key Set WEP Key Value set keylength Set WEP Key Length set lltd Set LLTD Mode set md5supplicant Set 802 1x MD5 Supplicant Mode set md5suppname Set 802 1x Supplicant MD5 Name set md5supppassword Set 802 1x Supplicant MD5 Password set md5supptype Set 802 1x MD5 Supplicant Type set nativevlanid Set Native VLAN ID set ntp Set NTP Server IP Address...

Page 102: ...3authproto Set SNMP v3 Authentication Protocol set snmpv3authkey Set SNMP v3 Authentication Key set snmpv3privproto Set SNMP v3 Private Protocol set snmpv3privkey Set SNMP v3 Private Key set ssid Set Service Set ID set ssidsuppress Set SSID Broadcast Mode set stp Set STP Mode set strictgtkupdate Set Group Key Update Strict Status set syslog Set Syslog Mode set syslogport Set Syslog Port set syslog...

Page 103: ...ppendix E Command Line Interface 99 set wmm Set WMM Mode set wmmnoack Set WMM No Acknowledge factoryrestore Restore to Default Factory Settings apply To make the changes take effect exit Quit the telnet ...