Proxim ORINOCO AP-2000 Manuale Utente

ORiNOCO AP-2000 Access PointUser Guide

10ContentsProxy ARP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171IP ARP Filteri

1005Monitoring the AP-2000• Logging into the HTTP Interface• Version: Provides version information for the Access Point’s system components.• ICMP: Di

101Monitoring the AP-2000Figure 5-1 Enter Network Password Screen5. Click the Monitor button located on the left-hand side of the screen.Figure 5-2

102Monitoring the AP-2000VersionFrom the HTTP interface, click the Monitor button and select the Version tab. The list displayed provides you with inf

103Monitoring the AP-2000ICMPThis tab provides statistical information for both received and transmitted messages directed to the AP. Not all ICMP tra

104Monitoring the AP-2000Learn TableThis tab displays information relating to network bridging. It reports the MAC address for each node that the devi

105Monitoring the AP-2000RADIUSThis tab provides RADIUS authentication, EAP/802.1x authentication, and accounting information for both the Primary and

106Monitoring the AP-2000InterfacesThis tab displays statistics for the Ethernet and wireless interfaces. The Operational Status can be up, down, or t

107Monitoring the AP-2000Station StatisticsThis tab displays information on wireless clients attached to the AP and on Wireless Distribution System li

108Monitoring the AP-2000• Interface to which the Station is connected: The interface number on which the client is connected with the AP. For WDS lin

1096Performing Commands• Logging into the HTTP Interface• Introduction to File Transfer via TFTP or HTTP: Describes the available file transfer method

11Electrical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185Environmental Spe

110Performing CommandsFigure 6-1 Enter Network Password Screen5. Click the Commands button located on the left-hand side of the screen.Figure 6-2 Co

111Performing CommandsIntroduction to File Transfer via TFTP or HTTPThere are two methods of transferring files to or from the AP, TFTP or HTTP (or HT

112Performing CommandsUpdate AP via TFTPUse the Update AP via TFTP tab to download Configuration, AP Image, Bootloader files, and Certificate and Priv

113Performing CommandsUpdate AP via HTTPUse the Update AP via HTTP tab to download Configuration, AP Image, Bootloader files, and Certificate and Priv

114Performing CommandsFigure 6-5 Warning MessageClick OK to continue with the operation or Cancel to abort the operation.NOTEAn HTTP file transfer us

115Performing CommandsRetrieve File via TFTPUse the Retrieve File via TFTP tab to upload files from the AP to the TFTP server. The TFTP server must be

116Performing CommandsRetrieve File via HTTPUse the Retrieve File via HTTP tab to retrieve configuration files, CLI Batch Files, or CLI Batch Logs fro

117Performing CommandsFigure 6-11 File Download Dialog BoxOn clicking the Save button the following Save As window displays, where the user is prompt

118Performing CommandsRebootUse the Reboot tab to save configuration changes (if any) and reset the AP. Entering a value of 0 (zero) seconds causes an

119Performing CommandsResetUse the Reset tab to restore the AP to factory default conditions. The AP may also be reset from the RESET button located o

121Introduction• Document Conventions• Introduction to Wireless Networking• IEEE 802.11 Specifications• Management and Monitoring Capabilities Documen

120Performing CommandsHelp LinkTo open Help, click the Help button on any display screen.During initialization, the AP on-line help files are download

1217Troubleshooting the AP-2000• Troubleshooting Concepts• Symptoms and Solutions• Recovery Procedures• Related ApplicationsNOTEThis section helps you

122Troubleshooting the AP-2000Symptoms and SolutionsConnectivity IssuesConnectivity issues include any problem that prevents you from powering up or c

123Troubleshooting the AP-20002. The AP only contacts a DHCP server during boot-up. If your network’s DHCP server is not available while the AP is boo

124Troubleshooting the AP-2000Client Connection ProblemsClient Software Finds No ConnectionMake sure you have configured your client software with the

125Troubleshooting the AP-2000I have just configured the Management ID and now I can't manage the AP?– Check to ensure your password is correct.

126Troubleshooting the AP-2000Reset to Factory Default ProcedureUse this procedure to reset the network configuration values, including the Access Poi

127Troubleshooting the AP-2000For this procedure, you will first erase the AP Image currently installed on the unit and then use either ScanTool or th

128Troubleshooting the AP-200011. Click OK.– Result: The Access Point will reboot and the download will begin automatically. You should see downloadin

129Troubleshooting the AP-20007. Enter only the following statements:[Device name]> set ipaddrtype static[Device name]> set ipaddr <Access Po

13IntroductionFigure 1-1 Typical wireless network access infrastructureOnce initialized, the network administrator can configure each unit according

130Troubleshooting the AP-2000Follow these steps to assign the AP an IP address:1. Open your terminal emulation program (like HyperTerminal) and set t

131Troubleshooting the AP-2000Related ApplicationsRADIUS Authentication ServerIf you enabled RADIUS Authentication on the AP, make sure that your netw

132AUsing the Command Line Interface (CLI)This section describes the AP’s Command Line (CLI) Interface. CLI commands can be used to initialize, config

133Using the Command Line Interface (CLI)• Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer files from the Access

134Using the Command Line Interface (CLI)Bootloader CLIThe Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration

135Using the Command Line Interface (CLI)CLI Command TypesThis guide divides CLI Commands into two categories: Operational and Parameter Controls.Oper

136Using the Command Line Interface (CLI)Figure A-4 Result of “s?” CLI commandExample 3. Display parameters for set and showExample 3a allows you to

137Using the Command Line Interface (CLI)Example 4. Display Prompts for Successive ParametersEnter the command, a space, and then ?. Then, when the pa

138Using the Command Line Interface (CLI)Figure A-8 Results of “help” CLI command2. Complete command description and command usage can be provided by

139Using the Command Line Interface (CLI)uploadUploads a text-based configuration file from the AP to the TFTP Server. Executing upload with the aster

14IntroductionIEEE 802.11 SpecificationsIn 1997, the Institute of Electrical and Electronics Engineers (IEEE) adopted the 802.11 standard for wireless

140Using the Command Line Interface (CLI)Configuring Objects that Require RebootCertain objects supported by the Access Point require a device reboot

141Using the Command Line Interface (CLI)Example 3 - Modify a table entry or rowUse the index to be modified and the table elements you would like to

142Using the Command Line Interface (CLI)Example 6 - Show Individual and Table Parameters1. View a single parameter.Syntax:[Device-Name]>show <p

143Using the Command Line Interface (CLI)Using StringsSince there are several string objects supported by the AP, a string delimiter is required for t

144Using the Command Line Interface (CLI)NOTEProxim recommends changing your default passwords immediately. To perform this operation using CLI comman

145Using the Command Line Interface (CLI)[Device-Name]>set snmpv3privpasswd <New Password> (SNMPv3 privacy password)[Device-Name]>reboot 0

146Using the Command Line Interface (CLI)Examples:[Device-Name]>set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secpr

147Using the Command Line Interface (CLI)Download an AP Configuration File from your TFTP ServerBegin by starting your TFTP program. It must be runnin

148Using the Command Line Interface (CLI)NOTERefer to Performing Advanced Configuration for more information on these settings.Configure the AP as a D

149Using the Command Line Interface (CLI)Operational Mode[Device-Name]>set wif <index> mode <see table>Autochannel Select (ACS)ACS is e

15IntroductionSNMP ManagementIn addition to the HTTP and the CLI interfaces, you can also manage and configure an AP using the Simple Network Manageme

150Using the Command Line Interface (CLI)Set the Multicast Rate (802.11b Only)[Device-Name]>set wif <index> multrate <1,2,5.5,11 (Mbits/se

151Using the Command Line Interface (CLI)Configure Secure Socket Layer (HTTPS)Enabling SSL and configuring a passphrase allows encrypted Secure Socket

152Using the Command Line Interface (CLI)Configure MAC Access ControlSetup MAC (Address) Access Control[Device-Name]>set macaclstatus enable [Devic

153Using the Command Line Interface (CLI)Set RADIUS ParametersConfigure RADIUS Authentication serversPerform the following command to configure a RADI

154Using the Command Line Interface (CLI)Index : 2Primary/Backup : PrimaryProfile Name :

155Using the Command Line Interface (CLI)Accounting Update Interval : 0Accounting Inactivity Timer : 5Index : 4Prim

156Using the Command Line Interface (CLI)Set Hardware Configuration Reset ParametersThe Hardware Configuration Reset commands allows you to enable or

157Using the Command Line Interface (CLI)Access Point network objects are associated with Groups. The network objects are listed below and associated

158Using the Command Line Interface (CLI)– VLAN/SSID Parameters - Enable the configuration of multiple subnetworks based on VLAN ID and SSID pairs.– S

159Using the Command Line Interface (CLI)Inventory Management InformationNOTEThe inventory management commands display advanced information about the

162Getting Started• Prerequisites• Product Package• System Requirements• Hardware Installation• Initialization• Download the Latest Software• Addition

160Using the Command Line Interface (CLI)DHCP Server ParametersNOTEThe DHCP Server (dhcpstatus) can only be enabled after a DHCP IP Pool table entry h

161Using the Command Line Interface (CLI)Link Integrity ParametersLink Integrity IP Target TableName Type Values Access CLI ParameterLink Integrity Gr

162Using the Command Line Interface (CLI)Interface ParametersWireless Interface ParametersThe wireless interface group parameter is wif. For Dual-radi

163Using the Command Line Interface (CLI)802.11b Only ParametersNOTEThere is an inter-dependent relationship between the Distance between APs and the

164Using the Command Line Interface (CLI)802.11b/g Only ParametersNote 1: Super Mode must be enabled first on the wireless interface before Turbo Mode

165Using the Command Line Interface (CLI)Wireless Interface SSID/VLAN/Profile ParametersThe Wireless Interface SSID table manages the SSID/VLAN pairs,

166Using the Command Line Interface (CLI)Ethernet Interface ParametersManagement ParametersSecure Management ParametersSNMP ParametersHTTP (web browse

167Using the Command Line Interface (CLI)NOTEThe default path for the Help files is C:/Program Files/ORiNOCO/AP/HTML/index.htm. (Use the forward slash

168Using the Command Line Interface (CLI)RADIUS Based Management Access ParametersThe RADIUS Based Management Access parameters allow you to enable HT

169Using the Command Line Interface (CLI)Auto Configuration ParametersThese parameters relate to the Auto Configuration feature which allows an AP to

17Getting StartedProduct PackageEach Dual-radio AP comes with the following:• One ceiling or wall mounting plate• Mounting hardware• Metal faceplate f

170Using the Command Line Interface (CLI)Filtering ParametersEthernet Protocol Filtering ParametersEthernet Protocol Filtering TableIdentify the diffe

171Using the Command Line Interface (CLI)Proxy ARP ParametersIP ARP Filtering ParametersBroadcast Filtering TableTCP/UDP Port FilteringThe following p

172Using the Command Line Interface (CLI)Alarms ParametersSNMP Table Host Table ParametersWhen creating table entries, you may either specifying the a

173Using the Command Line Interface (CLI)NOTEThe Heartbeat parameters are advanced settings not available via the HTTP interface. When Heartbeat is en

174Using the Command Line Interface (CLI)Storm Threshold ParametersStorm Threshold TableIntra BSS Subscriber BlockingThe following parameters control

175Using the Command Line Interface (CLI)NOTEThe Wireless Distribution System (WDS) feature is not available for 802.11a or 802.11b/g APs at this time

176Using the Command Line Interface (CLI)Rogue Access Point Detection (RAD) ParametersHardware Configuration ResetThe Hardware Configuration Reset com

177Using the Command Line Interface (CLI)Security Profile TableThe Security Profile Table allows you to configure security profiiles. A maximum of 16

178Using the Command Line Interface (CLI)Configuring a Security Profile with WPA-PSK Security Modeset secprofiletbl <index> secmode wpa-psk pass

179Using the Command Line Interface (CLI)CLI Batch FileA CLI Batch file is a user-editable configuration file that provides a user-friendly way to cha

18Getting Started Hardware Installation• AP-2000 with Active Ethernet• AP-2000 with Power Supply• 5 GHz or AP-2000 11a Upgrade KitAP-2000 with Active

180Using the Command Line Interface (CLI)Reboot BehaviorWhen a CLI Batch file contains a reboot command, the reboot will occur only after the entire C

181BASCII Character ChartYou can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sen

182CSpecifications• Software Features• Hardware Specifications• Radio SpecificationsSoftware FeaturesThe tables below compare the software features av

183SpecificationsAdvanced Bridging FunctionsMedium Access Control (MAC) Functions Note 1: A user cannot manually select a channel for products sold in

184SpecificationsNetwork Functions Note 1: Includes Fallback to Primary RADIUS Server, RADIUS Session Timeout, RADIUS Multiple MAC Address Formats, RA

185SpecificationsElectrical SpecificationsWithout Active Ethernet ModuleVoltage = 100 to 240 VAC (50-60 Hz)Current = 0.2 ampPower Consumption = 20 Wat

186Specifications802.11a Channel FrequenciesThe available 802.11a Channels varies by regulatory domain and/or country. 802.11a radio certification is

187Specifications802.11b Channel FrequenciesThe available 802.11b channels vary by regulatory domain and/or country. 802.11b radio certification is av

188SpecificationsNote 1: France is restricted to these channels.Note 2: Channel 14 is only available when using 802.11b only mode.Wireless Communicati

189Specifications802.11a (5 GHz Upgrade Kit) Table C-2 802.11a (5 GHz Upgrade Kit) Wireless communication ranges802.11a (11a Upgrade Kit) Table C-3

19Getting StartedFigure 2-3 Connect an Ethernet cable from an AE hub to the AP6. Conduct a Site Survey to determine the best location for your device

190Specifications802.11b/g Table C-4 802.11b/g Wireless communication rangesRange 54 Mbits/s48 Mbits/s36 Mbits/s24 Mbits/s18 Mbits/s12 Mbits/s9 Mbi

191DTechnical SupportIf you are having a problem using an AP and cannot resolve it with the information in Troubleshooting the AP-2000, gather the fol

192ORiNOCO AP-4000 User GuideEStatement of WarrantyWarranty Coverage Proxim Corporation warrants that its Products are manufactured solely from new pa

193Statement of WarrantyCalls to the Customer Service Center for reasons other than Product failure will not be accepted unless Buyer has purchased a

194ORiNOCO AP-4000 User GuideFRegulatory InformationThis regulatory flyer contains the following sections:• Information to the UserRead this document

195Regulatory InformationInformation to the UserThis document provides regulatory information for the following products:• Wireless Client products su

196Regulatory InformationWireless LAN and your HealthWireless LAN products, like other radio devices, emit radio frequency electromagnetic energy. The

197Regulatory InformationInformations pour l’utilisateurCe document fournit des informations sur les réglementations concernant les produits suivants

198Regulatory InformationRéseaux sans fil et votre santéLes produits pour un réseau sans fil, comme d’autres dispositifs radio, émettent de l’énergie

199Regulatory InformationInformazioni per l’utenteQuesto documento contiene informazioni legali relative ai seguenti prodotti:• Prodotti client wirele

2Copyright© 2003-2004 Proxim Corporation. All rights reserved. Covered by one or more of the following U.S. patents: 5,231,634; 5,875,179; 6,006,090;

20Getting StartedFigure 2-5 Install the power supply3. Slide the AP module onto the mounting bracket. Make sure it is properly seated.4. Plug the DC

200Regulatory InformationWireless LAN e la saluteI prodotti LAN wireless, così come altri dispositivi radio, emettono energia elettromagnetica in radi

201Regulatory InformationInformationen für den BenutzerDieses Dokument enthält wichtige Informationen über folgende Produkte:• Funk-Client-Produkte wi

202Regulatory InformationFunk-LAN und gesundheitliche SicherheitFunk-LAN-Produkte geben wie alle Hochfrequenzgeräte elektromagnetische Hochfrequenzen

203Regulatory InformationInformación para el usuarioEste documento incluye información sobre normativas acerca de los siguientes productos:• Productos

204Regulatory InformationLAN inalámbrica y su saludLos productos de LAN inalámbrica, al igual que otros dispositivos de radiotecnología, emiten energí

205Regulatory Informationユーザー情報このマニュアルでは、次の製品に関する規制情報について説明します。･ PC Card などの無線クライアント製品･ AP-200, AP-700, AP-1000, AP-4000, AP-4000 11a Upgrade Kit, AP-

206Regulatory Information無線 LAN と人体への影響無線 LAN 製品は、他の無線装置と同様に、無線周波数電磁エネルギーを放出します。ただし、無線 LAN 装置が放出するエネルギーのレベルは、携帯電話などの無線装置が放出する電磁エネルギーより、はるかに低く抑えられています。

207Regulatory InformationUnited States FCC InformationFederal Communications Commission (FCC)Declaration of ConformityProducts marked with the FCC log

208Regulatory InformationCanada IC InformationIndustry Canada (IC)This device complies with the limits for a class B digital device and conforms to In

209Regulatory InformationEurope Information• Products labeled with the CE mark comply with EMC Directive 89/336/EEC and the Low Voltage Directive • 73

21Getting StartedFigure 2-7 Slide a PC Card into the AP5. Attach one end of an Ethernet cable to the AP's Ethernet port and the other end to a n

210Regulatory Information• Proxim 802.11a Base Station products sold in Europe use a technique called Dynamic Frequency Selection (DFS) to automatical

211Regulatory InformationJapan Information日本の通達 Association of Radio Industries and Businesses (ARIB)電波産業会 (ARIB) STD-T71) 通達このセクションは、5.15 ~ 5.25 GHz

212Regulatory InformationSouth Korea InformationFor Class (A) products:For Class (B) products:(Product Name)(Model Name) (Trade Name/Manufacturer) (Ce

213Regulatory InformationRadio ApprovalsTo determine whether you are allowed to use your device in the countries listed below, please check the “conta

214Regulatory InformationAustralia Alpha-1: A13QBF • For indoor use only. AustriaÖsterreichPC24E-H-FC CE 0122 !PC24E-H-ET-L R0167 SRD3aPC24E-H-ETPC24E

215Regulatory InformationBelgiumBelgieBelgiquePC24E-H-FC CE 0122 ! • For outdoor usage you may only use channels 10 and 11 (2457 and 2462 MHz). • Priv

216Regulatory InformationBelgium Alpha-1: C38WCW CE 0560 ! • Only indoor with integral or approved Range Extender Antenna.• Alleen voor gebruik binnen

217Regulatory InformationBelgiumBelgieBelgiqueAlpha-1: A04LAE CE 0336 !Alpha-1:A08NAE CE 0336 !Brazil PC24E-H-FC • This equipment operates in secondar

218Regulatory InformationCanada Alpha-1: B11FNF IC: 1856B-B11FNF • Only with integral, approved Range Extender Antenna.• Pour usage avec une antenne i

219Regulatory InformationCzech RepublicPC24E-H-ET-L 45314454PC24E-H-ETDenmarkDanmarkPC24E-H-FC CE 0122 !PC24E-H-ET-L R0167 SRD3aPC24E-H-ET CE 0122 !PC

22Getting Started5 GHz or AP-2000 11a Upgrade KitIf you are installing this kit on a new AP (one that has not been installed yet), skip to Step 4.1. R

220Regulatory InformationFinlandSuomiPC24E-H-FC CE 0122 !PC24E-H-ET-L R0167 SRD3aPC24E-H-ETPC24E-11-FC/R CE 0336 ! • Only indoor with integral or appr

221Regulatory InformationFrance PC24E-H-FC CE 0122 ! • Restricted frequency band: On French territory PC24E-H-FC devices may only use channels 10 and

222Regulatory InformationFrance Alpha-1: B13ENE CE 0336 ! • Restricted frequency band: On French territory B13ENE devices may only use channels 10, 11

223Regulatory InformationGermanyDeutschlandG11FNF-PC CE 0336 ! • Only indoor with integral or approved Range Extender Antenna.• Nur zum Einsatz innerh

224Regulatory InformationHong Kong PC24E-H-FC LP400096PC24E-H-ET LP400095PC24E-11-FC/RHong Kong Alpha-1: B13ENE HKTA-1039Hong Kong Alpha-1: A09SBS

225Regulatory InformationIcelandÍslandPC50E-4-ET/A CE 0336 ! • For indoor use only.• Fyrir inni- nota einiPC50E-8-ET/A CE 0336!A19PCE-PC CE 0560 !Icel

226Regulatory InformationIsrael G05INI-PC MoC pending • Restricted frequency band: only channels 4 through 8 (2418.0-2457.0 MHz) may be used in Israel

227Regulatory InformationJapan日本PC24E-H-FC TELEC: NYCA0010 JATE: D99-1057JPPC24E-H-JP TELEC: NYCA0008 TELEC: GZCA0007PC24E-H-ET-L TELEC: NYCA00024PC24

228Regulatory InformationKorea A04VBA-PC MIC: R-LARN-03-0248Certification date: 2003.06-04Product name: PC CardManufacturer: Proxim CorporationMade in

229Regulatory InformationLiechtenstein AP-700: AP-AG-AT-01CE 0560! • Only indoor with integral or approved Range Extender Antenna.• Nur zum Einsatz in

23Getting Started6. Angle the antenna adapter slightly upwards, pinch the end tabs inwards and carefully slide the antenna adapter onto the mounting b

230Regulatory InformationLuxemburgLuxembourgPC50E-4-ET/A CE 0336 ! • For indoor use only.• Pour usage intérieur uniquement.PC50E-8-ET/A CE 0336 !A19PC

231Regulatory InformationMexicoMéxicoAlpha-1: B11FNF COFETEL: PCPPRAL03-095• On Mexican territory wireless devices may only use channel 11 (2450.0-248

232Regulatory InformationNetherlandsNederlandPC24E-H-FC CE 0122 ! No 67 • License required for outdoor installations. Check with reseller for proce

233Regulatory InformationNew Zealand PC24E-H-FC RFSPC24E-11-FC/R ENG 3/2/RFS29PC24E-H-ET-L RFSPC24E-H-ETPC24E-11-ET/R ENG 3/2/RFS29NorwayNorskPC24E-H-

234Regulatory InformationPoland PC24E-H-FC 688/2000PC24E-H-FC/R 072/2002PC24E-H-ET-LPC24E-H-ETPC24E-H-ET/R 072/2002Portugal PC24E-H-FC CE 0122 !PC24E-

235Regulatory InformationSaudi Arabia PC24E-H-FC Reference 10/36 of 18-3-2002PC24E-11-FC/R Reference 10/36 of 18-3-2002PC24E-H-ET Reference 10/36 of 1

236Regulatory InformationSouth Africa PC24E-H-FCPC24E-H-ET-LPC24E-H-ETSouth Africa G11FNF-PC ICASA: TA-2003/93G13ENE-PC ICASA: TA-2003/93SpainEspañaPC

237Regulatory InformationSwedenSverigeG11FNF-PC CE 0336 ! • Only indoor with integral or approved Range Extender Antenna.• Endast inomhus med integrer

238Regulatory InformationSwitzerlandSuisseSchweizSvizzeraG11FNF-PC CE 0336 ! • Only indoor with integral or approved Range Extender Antenna.• Pour usa

239Regulatory InformationSwitzerlandSuisseSchweizSvizzeraAP-700: AP-AG-AT-01CE 0560 ! • For indoor use only.• Pour usage intérieur uniquement.• Nur fü

24Getting StartedInitializationProxim provides two tools to simplify the initialization and configuration of an AP:• ScanTool• Setup WizardScanTool is

240Regulatory InformationUnited KingdomPC24E-H-FC CE 0122 ! PC24E-H-ET-L R0167 SRD3aPC24E-H-ET CE 0122 !PC24E-11-FC/R CE 0336 ! • Only indoor with int

241Regulatory InformationFor Radio Type Numbers with the format PCxxE-y-zz:xx =24 identifies a IEEE 802.11b compliant WLAN radio product for the 2.4 G

242Regulatory Information4 ou 8 indique le nombre de canaux.zz =FC ou FC/R identifie un carte universelle à 11 canaux, conforme aux normes FCC, qui op

243Regulatory InformationE =wahlweise freigestellte Kennung, zum anzuzeigen, daß der Übermittler eine integrale Antenne hat.y =H oder 11 kennzeichnet

244Regulatory InformationGNJ / LEJ = Japan VBA = Asia (China, South Korea)INI = Is

25Getting StartedNOTEIf your computer has more than one network adapter installed, you will be prompted to select the adapter that you want ScanTool t

26Getting StartedFigure 2-14 Scan Tool Change Screen3. Set IP Address Type to Static.4. Enter a static IP Address for the AP in the field provided. Y

27Getting StartedFigure 2-15 Enter Network PasswordFigure 2-16 Setup Wizard5. Click Setup Wizard to begin. If you want to configure the AP without u

28Getting Started8. Assign the AP new passwords to prevent unauthorized access and click Save & Next. Each management interface has its own passwo

29Getting Started• The following options are available for an 802.11b/g AP:— Operational Mode: An 802.11b/g wireless interface can be configured to op

3Contents1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12Document Conventions

30Getting StartedSetup your TFTP ServerA Trivial File Transfer Protocol (TFTP) server allows you to transfer files across a network. You can upload fi

31Getting StartedDownload Updates from your TFTP Server using the CLI Interface1. Download the latest software from http://www.proxim.com.2. Copy the

32Getting StartedActive EthernetAn Active Ethernet-enabled AP is equipped with an 802.3af-compliant Active Ethernet module. Active Ethernet (AE) deliv

33Getting StartedRelated TopicsThe Setup Wizard helps you configure the basic AP settings required to get the unit up and running. The AP supports man

343Viewing Status Information• Logging into the HTTP Interface• System StatusLogging into the HTTP InterfaceOnce the AP has a valid IP Address and an

35Viewing Status InformationSystem StatusSystem Status is the first screen to appear each time you connect to the HTTP interface. You can also return

364Performing Advanced Configuration• Configuring the AP Using the HTTP/HTTPS Interface• System: Configure specific system information such as system

37Performing Advanced ConfigurationFigure 4-1 Enter Network Password Screen5. Click the Configure button located on the left-hand side of the screen.

38Performing Advanced ConfigurationSystemYou can configure and view the following parameters within the System Configuration screen:• Name: The name a

39Performing Advanced ConfigurationNetworkThe Network tab contains three sub-tabs.– IP Configuration– DHCP Server– Link IntegrityIP ConfigurationYou c

4ContentsLED Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323

40Performing Advanced ConfigurationDHCP ServerIf your network does not have a DHCP Server, you can configure the AP as a DHCP server to assign dynamic

41Performing Advanced ConfigurationYou can configure and view the following parameters within the DHCP Server Configuration screen:• Enable DHCP Serve

42Performing Advanced ConfigurationFigure 4-4 Link Integrity Configuration ScreenInterfacesThe Interfaces tab contains the following sub-tabs:– Opera

43Performing Advanced ConfigurationOperational ModeOperational Mode SelectionYou can configure and view the following parameters within the Operationa

44Performing Advanced Configuration• RTS/CTS Medium Reservation: This parameter affects message flow control and should not be changed under normal ci

45Performing Advanced ConfigurationIn shutdown state, AP will not transmit and receive frames from the wireless interface and will stop transmitting p

46Performing Advanced Configuration• Frequency Channel: When Auto Channel Select is enabled, this field is read-only and displays the Access Point’s c

47Performing Advanced ConfigurationNOTEThis feature is available only if you are using an Orinoco Classic Gold card.Cell capacities are compared in th

48Performing Advanced Configurationstations that may not be able to receive multicast packets at the higher rates; in this case, you should set Multic

49Performing Advanced Configuration– 802.11b/g mode: This is the default mode. Use this mode if you want to support a mix of 802.11b and 802.11g devic

5ContentsProcedure to Reset Configuration via the Serial Interface . . . . . . . . . . . . . . . . . . . . . . . . . 63Filtering . . . . . . . . . .

50Performing Advanced ConfigurationFigure 4-7 WDS ExampleBridging WDSEach WDS link is mapped to a logical WDS port on the AP. WDS ports behave like E

51Performing Advanced Configuration1. Confirm that Auto Channel Select is disabled.2. Write down the MAC Address of the radio that you wish to include

52Performing Advanced Configuration7. If security mode is enabled, enter a value for Encryption Key 0.8. Click OK. 9. Enter the MAC Address that you w

53Performing Advanced ConfigurationManagementThe Management tab contains five sub-tabs.– Passwords– IP Access Table– Services– Automatic Configuration

54Performing Advanced ConfigurationServicesYou can configure the following management services:NOTEYou must reboot the Access Point if you change the

55Performing Advanced ConfigurationFigure 4-10 Management Services Configuration Screen

56Performing Advanced ConfigurationTelnet Configuration Settings • Telnet Interface Bitmask: Select the interface (Ethernet, Wireless-Slot A, Wireless

57Performing Advanced ConfigurationTo manually generate or delete host keys on the AP:•Select Create to generate a new pair of host keys. •Select Dele

58Performing Advanced ConfigurationSerial Configuration SettingsThe serial port interface on the AP is enabled at all times. See Setting IP Address us

59Performing Advanced ConfigurationAutomatic Configuration (AutoConfig)The Automatic Configuration feature which allows an AP to be automatically conf

6ContentsConfiguring MAC Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86Security Profil

60Performing Advanced ConfigurationFigure 4-12 Automatic Configuration ScreenSet up Automatic Configuration for Dynamic IPPerform the following proce

61Performing Advanced ConfigurationFigure 4-13 DHCP Options: Setting the Boot Server Host Name4. Add the Boot Server Host Name and Boot Filename para

62Performing Advanced ConfigurationHardware Configuration Reset (CHRP)Hardware Configuration Reset Status is a parameter that defines the hardware con

63Performing Advanced ConfigurationConfiguring Hardware Configuration ResetPerform the following procedure to configure Hardware Configuration Reset a

64Performing Advanced ConfigurationFilteringThe Access Point’s Packet Filtering features help control the amount of traffic exchanged between the wire

65Performing Advanced ConfigurationEach MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier. (

66Performing Advanced ConfigurationStatic MAC Filter ExamplesConsider a network that contains a wired server and three wireless clients. The MAC addre

67Performing Advanced Configuration• Wired Mask: FF:FF:FF:FF:FF:FF• Wireless MAC Address: 00:00:00:00:00:00• Wireless Mask: 00:00:00:00:00:00Result: T

68Performing Advanced Configuration• Ethernet and Wireless Slot A• Wireless Slot B• Ethernet and Wireless Slot B• Wireless Slot A and B• All Interface

69Performing Advanced ConfigurationAlarmsThis tab has three sub-tabs.– Groups– Alarm Host Table– Syslog– Rogue Access Point Detection (RAD)GroupsThe A

7ContentsHelp Link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1207 Trouble

70Performing Advanced Configuration• Security Trap Group• Wireless Interface/Card Trap Group• Operational Trap Group• Flash Memory Trap GroupTrap Name

71Performing Advanced Configuration• TFTP Trap Group• Image Trap GroupIn addition, the AP supports these standard traps, which are always enabled:• RF

72Performing Advanced ConfigurationSeverity LevelsThere are three severity levels for system alarms:–Critical–Major– InformationalCritical alarms will

73Performing Advanced Configuration• Syslog Heartbeat Status: Enables or disables the sending of heartbeat messages from the AP to the configured Sys

74Performing Advanced ConfigurationRogue Access Point Detection (RAD)The Rogue AP Detection (RAD) feature provides an additional security level for wi

75Performing Advanced ConfigurationPoints to the IP address of the management station. The Access Points on detecting a new Access Point sends a RAD S

76Performing Advanced ConfigurationBridgeThe AP is a bridge between your wired and wireless networking devices. As a bridge, the functions performed b

77Performing Advanced ConfigurationTo block Intra BSS traffic, set Intra BSS Traffic Operation to Block. To allow Intra BSS traffic, set Intra BSS Tra

78Performing Advanced ConfigurationRADIUS ProfilesConfiguring RADIUS Profiles on the AP define a profile for RADIUS Servers used by the system or by a

79Performing Advanced Configurationserver used depends on whether the authentication is done for an 802.1x client or non-802.1x client. The clients in

8ContentsA Using the Command Line Interface (CLI). . . . . . . . . . . . . . . . . . . . . . . . . . . .132General Notes . . . . . . . . . . . . . . .

80Performing Advanced ConfigurationAdding or Modifying a RADIUS Server ProfilePerform the following procedure to add a RADIUS server profile and to co

81Performing Advanced Configuration• Server Name/IP Address: Enter the server’s name or IP address.• Destination Port: Enter the port number which the

82Performing Advanced ConfigurationRADIUS AccountingUsing an external RADIUS server, the AP can track and record the length of client sessions on the

83Performing Advanced ConfigurationSSID/VLAN/SecurityThe AP provides several security features to protect your network from unauthorized access. Virtu

84Performing Advanced ConfigurationFigure 4-23 Components of a typical VLANVLAN Workgroups and Traffic ManagementAccess Points that are not VLAN-capa

85Performing Advanced ConfigurationThe AP can segment users into a maximum of 16 different workgroups (32 if using two cards in a Dual-radio AP) based

86Performing Advanced ConfigurationMAC AccessThe MAC Access sub-tab allows you to build a list of stations, identified by their MAC addresses, authori

87Performing Advanced ConfigurationSecurity ProfilesThe AP supports the following Security features:• WEP Encryption: The original encryption techniqu

88Performing Advanced ConfigurationAuthentication ProcessThere are three main components in the authentication process. The standard refers to them as

89Performing Advanced Configuration• Dynamic Key distribution– The AP generates and maintains the keys for its clients– The AP securely delivers the a

9ContentsSet up Auto Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147Other Network

90Performing Advanced ConfigurationConfiguring Security ProfilesSecurity policies can be configured and applied on the AP as a whole, or on a per VLAN

91Performing Advanced Configuration• 802.1x Station:• Authentication Mode: 802.1x• Cipher: WEP• Encryption Key Length: 64 or 128 Bits. • If 802.1x is

92Performing Advanced ConfigurationFigure 4-27 Security Profile Table - Add Entries

93Performing Advanced ConfigurationWireless-A and Wireless-BEach SSID/VLAN can have its own Security Profile that defines its security mode, authentic

94Performing Advanced Configuration Figure 4-30 SSID/VLAN Edit Entries Screen (VLAN Protocol Disabled)4. Enter a unique Network Name (SSID), between

95Performing Advanced ConfigurationFigure 4-31 SSID, VLAN, and Security Data Configuration (VLAN Protocol Disabled)8. Enable or disable RADIUS accoun

96Performing Advanced Configuration13. Define the RADIUS Server Profile Configuration for the VLAN/SSID:• RADIUS MAC Authentication Profile• RADIUS EA

97Performing Advanced ConfigurationThe Add Entry or Edit Entry screen appears. See Figure 4-33 below and Figure 4-34 on page 98. Figure 4-33 SSID/VLA

98Performing Advanced Configuration Figure 4-34 SSID/VLAN Edit Entries Screen (VLAN Protocol Enabled)4. Enter a unique Network Name (SSID), between 1

99Performing Advanced ConfigurationNOTEIf you have two or more SSIDs per interface using a security Profile with a security mode of Non Secure, be awa