Proxim ORiNOCO AP-2500 Podręcznik Użytkownika

ORiNOCO AP-600 Access Point User Guide

10ContentsProxy ARP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171IP ARP Filteri

98Performing Advanced ConfigurationWirelessEach SSID/VLAN can have its own Security Profile that defines its security mode, authentication mechanism,

99Performing Advanced Configuration Figure 4-32 SSID/VLAN Edit Entries Screen (VLAN Protocol Disabled)4. Enter a unique Network Name (SSID), between

100Performing Advanced ConfigurationFigure 4-33 SSID, VLAN, and Security Data Configuration (VLAN Protocol Disabled)8. Enable or disable RADIUS accou

101Performing Advanced Configuration13. Define the RADIUS Server Profile Configuration for the VLAN/SSID:• RADIUS MAC Authentication Profile• RADIUS E

102Performing Advanced ConfigurationThe Add Entry or Edit Entry screen appears. See Figure 4-33 below and Figure 4-34 on page 98. Figure 4-35 SSID/VL

103Performing Advanced Configuration Figure 4-36 SSID/VLAN Edit Entries Screen (VLAN Protocol Enabled)4. Enter a unique Network Name (SSID), between

104Performing Advanced ConfigurationNOTEIf you have two or more SSIDs per interface using a security Profile with a security mode of Non Secure, be aw

1005Monitoring the AP-600• Logging into the HTTP Interface• Version: Provides version information for the Access Point’s system components.• ICMP: Dis

101Monitoring the AP-600Figure 5-1 Enter Network Password Screen5. Click the Monitor button located on the left-hand side of the screen.Figure 5-2 M

102Monitoring the AP-600VersionFrom the HTTP interface, click the Monitor button and select the Version tab. The list displayed provides you with info

11Electrical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185Environmental Spe

103Monitoring the AP-600ICMPThis tab provides statistical information for both received and transmitted messages directed to the AP. Not all ICMP traf

104Monitoring the AP-600Learn TableThis tab displays information relating to network bridging. It reports the MAC address for each node that the devic

105Monitoring the AP-600RADIUSThis tab provides RADIUS authentication, EAP/802.1x authentication, and accounting information for both the Primary and

106Monitoring the AP-600InterfacesThis tab displays statistics for the Ethernet and wireless interfaces. The Operational Status can be up, down, or te

107Monitoring the AP-600Station StatisticsThis tab displays information on wireless clients attached to the AP and on Wireless Distribution System lin

108Monitoring the AP-600• Interface to which the Station is connected: The interface number on which the client is connected with the AP. For WDS link

1096Performing Commands• Logging into the HTTP Interface• Introduction to File Transfer via TFTP or HTTP: Describes the available file transfer method

110Performing CommandsFigure 6-1 Enter Network Password Screen5. Click the Commands button located on the left-hand side of the screen.Figure 6-2 Co

111Performing CommandsIntroduction to File Transfer via TFTP or HTTPThere are two methods of transferring files to or from the AP, TFTP or HTTP (or HT

112Performing CommandsUpdate AP via TFTPUse the Update AP via TFTP tab to download Configuration, AP Image, Bootloader files, and Certificate and Priv

121Introduction• Document Conventions• Introduction to Wireless Networking• IEEE 802.11 Specifications• Management and Monitoring Capabilities Documen

113Performing CommandsUpdate AP via HTTPUse the Update AP via HTTP tab to download Configuration, AP Image, Bootloader files, and Certificate and Priv

114Performing CommandsFigure 6-5 Warning MessageClick OK to continue with the operation or Cancel to abort the operation.NOTEAn HTTP file transfer us

115Performing CommandsRetrieve File via TFTPUse the Retrieve File via TFTP tab to upload files from the AP to the TFTP server. The TFTP server must be

116Performing CommandsRetrieve File via HTTPUse the Retrieve File via HTTP tab to retrieve configuration files, CLI Batch Files, or CLI Batch Logs fro

117Performing CommandsFigure 6-11 File Download Dialog BoxOn clicking the Save button the following Save As window displays, where the user is prompt

118Performing CommandsRebootUse the Reboot tab to save configuration changes (if any) and reset the AP. Entering a value of 0 (zero) seconds causes an

119Performing CommandsResetUse the Reset tab to restore the AP to factory default conditions. The AP may also be reset from the RESET button located o

120Performing CommandsHelp LinkTo open Help, click the Help button on any display screen.During initialization, the AP on-line help files are download

1217Troubleshooting the AP-600• Troubleshooting Concepts• Symptoms and Solutions• Recovery Procedures• Related ApplicationsNOTEThis section helps you

122Troubleshooting the AP-600Symptoms and SolutionsConnectivity IssuesConnectivity issues include any problem that prevents you from powering up or co

13IntroductionFigure 1-1 Typical wireless network access infrastructureOnce initialized, the network administrator can configure each unit according

123Troubleshooting the AP-6002. The AP only contacts a DHCP server during boot-up. If your network’s DHCP server is not available while the AP is boot

124Troubleshooting the AP-600Client Connection ProblemsClient Software Finds No ConnectionMake sure you have configured your client software with the

125Troubleshooting the AP-600I have just configured the Management ID and now I can't manage the AP?– Check to ensure your password is correct. I

126Troubleshooting the AP-600Reset to Factory Default ProcedureUse this procedure to reset the network configuration values, including the Access Poin

127Troubleshooting the AP-600For this procedure, you will first erase the AP Image currently installed on the unit and then use either ScanTool or the

128Troubleshooting the AP-60011. Click OK.– Result: The Access Point will reboot and the download will begin automatically. You should see downloading

129Troubleshooting the AP-6007. Enter only the following statements:[Device name]> set ipaddrtype static[Device name]> set ipaddr <Access Poi

130Troubleshooting the AP-600Follow these steps to assign the AP an IP address:1. Open your terminal emulation program (like HyperTerminal) and set th

131Troubleshooting the AP-600Related ApplicationsRADIUS Authentication ServerIf you enabled RADIUS Authentication on the AP, make sure that your netwo

132AUsing the Command Line Interface (CLI)This section describes the AP’s Command Line (CLI) Interface. CLI commands can be used to initialize, config

14IntroductionIEEE 802.11 SpecificationsIn 1997, the Institute of Electrical and Electronics Engineers (IEEE) adopted the 802.11 standard for wireless

133Using the Command Line Interface (CLI)• Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer files from the Access

134Using the Command Line Interface (CLI)Bootloader CLIThe Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration

135Using the Command Line Interface (CLI)CLI Command TypesThis guide divides CLI Commands into two categories: Operational and Parameter Controls.Oper

136Using the Command Line Interface (CLI)Figure A-4 Result of “s?” CLI commandExample 3. Display parameters for set and showExample 3a allows you to

137Using the Command Line Interface (CLI)Example 4. Display Prompts for Successive ParametersEnter the command, a space, and then ?. Then, when the pa

138Using the Command Line Interface (CLI)Figure A-8 Results of “help” CLI command2. Complete command description and command usage can be provided by

139Using the Command Line Interface (CLI)uploadUploads a text-based configuration file from the AP to the TFTP Server. Executing upload with the aster

140Using the Command Line Interface (CLI)Configuring Objects that Require RebootCertain objects supported by the Access Point require a device reboot

141Using the Command Line Interface (CLI)Example 3 - Modify a table entry or rowUse the index to be modified and the table elements you would like to

142Using the Command Line Interface (CLI)Example 6 - Show Individual and Table Parameters1. View a single parameter.Syntax:[Device-Name]>show <p

15IntroductionSNMP ManagementIn addition to the HTTP and the CLI interfaces, you can also manage and configure an AP using the Simple Network Manageme

143Using the Command Line Interface (CLI)Using StringsSince there are several string objects supported by the AP, a string delimiter is required for t

144Using the Command Line Interface (CLI)NOTEProxim recommends changing your default passwords immediately. To perform this operation using CLI comman

145Using the Command Line Interface (CLI)[Device-Name]>set snmprwpasswd <New Password> (SNMP read/write)[Device-Name]>set snmpv3authpasswd

146Using the Command Line Interface (CLI)Enable 802.11d Support and Set the Country CodePerform the following commands to enable IEEE 802.11d support

147Using the Command Line Interface (CLI)Download an AP Configuration File from your TFTP ServerBegin by starting your TFTP program. It must be runnin

148Using the Command Line Interface (CLI)NOTERefer to Performing Advanced Configuration for more information on these settings.Configure the AP as a D

149Using the Command Line Interface (CLI)Operational Mode[Device-Name]>set wif <index> mode <see table>Autochannel Select (ACS)ACS is e

150Using the Command Line Interface (CLI)Set the Multicast Rate (802.11b Only)[Device-Name]>set wif <index> multrate <1,2,5.5,11 (Mbits/se

151Using the Command Line Interface (CLI)Configure Secure Socket Layer (HTTPS)Enabling SSL and configuring a passphrase allows encrypted Secure Socket

152Using the Command Line Interface (CLI)Configure MAC Access ControlSetup MAC (Address) Access Control[Device-Name]>set macaclstatus enable [Devic

162Getting Started• Prerequisites• Product Package• System Requirements• Hardware Installation• Initialization• Download the Latest Software• Addition

153Using the Command Line Interface (CLI)Set RADIUS ParametersConfigure RADIUS Authentication serversPerform the following command to configure a RADI

154Using the Command Line Interface (CLI)Index : 2Primary/Backup : PrimaryProfile Name :

155Using the Command Line Interface (CLI)Accounting Update Interval : 0Accounting Inactivity Timer : 5Index : 4Prim

156Using the Command Line Interface (CLI)Set Hardware Configuration Reset ParametersThe Hardware Configuration Reset commands allows you to enable or

157Using the Command Line Interface (CLI)— Access = access type, R = Read Only (show), RW = Read-Write (can be “set”), W = Write Only— CLI Parameter -

158Using the Command Line Interface (CLI)– Hardware Configuration Reset - Disable or enable hardware configuration reset and configure a configuration

159Using the Command Line Interface (CLI)Inventory Management InformationNOTEThe inventory management commands display advanced information about the

160Using the Command Line Interface (CLI)DHCP Server ParametersNOTEThe DHCP Server (dhcpstatus) can only be enabled after a DHCP IP Pool table entry h

161Using the Command Line Interface (CLI)Link Integrity ParametersLink Integrity IP Target TableName Type Values Access CLI ParameterLink Integrity Gr

162Using the Command Line Interface (CLI)Interface ParametersWireless Interface ParametersThe wireless interface group parameter is wif. For Single-ra

17Getting StartedProduct PackageEach Single-radio AP comes with the following:• One metal base for ceiling or desktop mounting (includes two screws)•

163Using the Command Line Interface (CLI)802.11b Only ParametersNOTEThere is an inter-dependent relationship between the Distance between APs and the

164Using the Command Line Interface (CLI)802.11b/g Only ParametersNote 1: Super Mode must be enabled first on the wireless interface before Turbo Mode

165Using the Command Line Interface (CLI)Wireless Interface SSID/VLAN/Profile ParametersThe Wireless Interface SSID table manages the SSID/VLAN pairs,

166Using the Command Line Interface (CLI)Ethernet Interface ParametersManagement ParametersSecure Management ParametersSNMP ParametersHTTP (web browse

167Using the Command Line Interface (CLI)NOTEThe default path for the Help files is C:/Program Files/ORiNOCO/AP/HTML/index.htm. (Use the forward slash

168Using the Command Line Interface (CLI)RADIUS Based Management Access ParametersThe RADIUS Based Management Access parameters allow you to enable HT

169Using the Command Line Interface (CLI)Auto Configuration ParametersThese parameters relate to the Auto Configuration feature which allows an AP to

170Using the Command Line Interface (CLI)Filtering ParametersEthernet Protocol Filtering ParametersEthernet Protocol Filtering TableIdentify the diffe

171Using the Command Line Interface (CLI)Proxy ARP ParametersIP ARP Filtering ParametersBroadcast Filtering TableTCP/UDP Port FilteringThe following p

172Using the Command Line Interface (CLI)Alarms ParametersSNMP Table Host Table ParametersWhen creating table entries, you may either specifying the a

18Getting Started Hardware InstallationFollow these steps to install a Single-radio AP:1. Unpack the Access Point and accessories from the shipping bo

173Using the Command Line Interface (CLI)NOTEThe Heartbeat parameters are advanced settings not available via the HTTP interface. When Heartbeat is en

174Using the Command Line Interface (CLI)Storm Threshold ParametersStorm Threshold TableIntra BSS Subscriber BlockingThe following parameters control

175Using the Command Line Interface (CLI)NOTEThe Wireless Distribution System (WDS) feature is not available for 802.11a or 802.11b/g APs at this time

176Using the Command Line Interface (CLI)Rogue Access Point Detection (RAD) ParametersHardware Configuration ResetThe Hardware Configuration Reset com

177Using the Command Line Interface (CLI)Security Profile TableThe Security Profile Table allows you to configure security profiiles. A maximum of 16

178Using the Command Line Interface (CLI)Configuring a Security Profile with WPA-PSK Security Modeset secprofiletbl <index> secmode wpa-psk pass

179Using the Command Line Interface (CLI)CLI Batch FileA CLI Batch file is a user-editable configuration file that provides a user-friendly way to cha

180Using the Command Line Interface (CLI)Reboot BehaviorWhen a CLI Batch file contains a reboot command, the reboot will occur only after the entire C

181BASCII Character ChartYou can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sen

182CSpecifications• Software Features• Hardware Specifications• Radio SpecificationsSoftware FeaturesThe tables below compare the software features av

19Getting StartedFigure 2-3 Remove Cable Cover5. Remove the front cover (the side with the LED indicators) from the unit.Figure 2-4 Remove the Front

183SpecificationsAdvanced Bridging FunctionsMedium Access Control (MAC) Functions Note 1: A user cannot manually select a channel for products sold in

184SpecificationsNetwork Functions Note 1: Includes Fallback to Primary RADIUS Server, RADIUS Session Timeout, RADIUS Multiple MAC Address Formats, RA

185SpecificationsUsing Active EthernetInput Voltage = 42 to 60 VDCOutput Current = 200mA at 48VPower Consumption = 10 Watts

186SpecificationsEnvironmental SpecificationsAP-600 UnitOperating Temperature = 0° to +55°C ambient temperature (without plastic cabinet)Operating Hum

187SpecificationsSome countries restrict 802.11a operation to specific frequency bands. The Web interface and CLI display the available channels for a

188Specifications802.11b Channel FrequenciesThe available 802.11b channels vary by regulatory domain and/or country. 802.11b radio certification is av

189SpecificationsNote 1: France is restricted to these channels.Note 2: Channel 14 is only available when using 802.11b only mode.Wireless Communicati

190SpecificationsAP-600b/g Table C-3 AP-600b/g: 802.11b/g Wireless communication rangesRange 54 Mbits/s48 Mbits/s36 Mbits/s24 Mbits/s18 Mbits/s12 Mb

191DTechnical SupportIf you are having a problem using an AP and cannot resolve it with the information in Troubleshooting the AP-2000, gather the fol

192ORiNOCO AP-600 User GuideEStatement of WarrantyWarranty Coverage Proxim Corporation warrants that its Products are manufactured solely from new par

2Copyright© 2003-2004 Proxim Corporation. All rights reserved. Covered by one or more of the following U.S. patents: 5,231,634; 5,875,179; 6,006,090;

20Getting StartedFigure 2-5 Remove the Back Cover7. Connect one end of an Ethernet cable to the Access Point’s Ethernet port. The other end of the ca

193Statement of WarrantyCalls to the Customer Service Center for reasons other than Product failure will not be accepted unless Buyer has purchased a

194ORiNOCO AP-600 User GuideFRegulatory InformationThis regulatory flyer contains the following sections:• Information to the UserRead this document p

195Regulatory InformationInformation to the UserThis document provides regulatory information for the following products:• Wireless Client products su

196Regulatory InformationWireless LAN and your HealthWireless LAN products, like other radio devices, emit radio frequency electromagnetic energy. The

197Regulatory InformationInformations pour l’utilisateurCe document fournit des informations sur les réglementations concernant les produits suivants

198Regulatory InformationRéseaux sans fil et votre santéLes produits pour un réseau sans fil, comme d’autres dispositifs radio, émettent de l’énergie

199Regulatory InformationInformazioni per l’utenteQuesto documento contiene informazioni legali relative ai seguenti prodotti:• Prodotti client wirele

200Regulatory InformationWireless LAN e la saluteI prodotti LAN wireless, così come altri dispositivi radio, emettono energia elettromagnetica in radi

201Regulatory InformationInformationen für den BenutzerDieses Dokument enthält wichtige Informationen über folgende Produkte:• Funk-Client-Produkte wi

202Regulatory InformationFunk-LAN und gesundheitliche SicherheitFunk-LAN-Produkte geben wie alle Hochfrequenzgeräte elektromagnetische Hochfrequenzen

21Getting StartedNOTEOnce attached, the power cable locks into place. To disconnect the power cable, slide back the black plastic fitting and gently p

203Regulatory InformationInformación para el usuarioEste documento incluye información sobre normativas acerca de los siguientes productos:• Productos

204Regulatory InformationLAN inalámbrica y su saludLos productos de LAN inalámbrica, al igual que otros dispositivos de radiotecnología, emiten energí

205Regulatory Informationユーザー情報このマニュアルでは、次の製品に関する規制情報について説明します。･ PC Card などの無線クライアント製品･ AP-200, AP-700, AP-1000, AP-4000, AP-4000 11a Upgrade Kit, AP-

206Regulatory Information無線 LAN と人体への影響無線 LAN 製品は、他の無線装置と同様に、無線周波数電磁エネルギーを放出します。ただし、無線 LAN 装置が放出するエネルギーのレベルは、携帯電話などの無線装置が放出する電磁エネルギーより、はるかに低く抑えられています。

207Regulatory InformationUnited States FCC InformationFederal Communications Commission (FCC)Declaration of ConformityProducts marked with the FCC log

208Regulatory InformationCanada IC InformationIndustry Canada (IC)This device complies with the limits for a class B digital device and conforms to In

209Regulatory InformationEurope Information• Products labeled with the CE mark comply with EMC Directive 89/336/EEC and the Low Voltage Directive • 73

210Regulatory Information• Proxim 802.11a Base Station products sold in Europe use a technique called Dynamic Frequency Selection (DFS) to automatical

211Regulatory InformationJapan Information日本の通達 Association of Radio Industries and Businesses (ARIB)電波産業会 (ARIB) STD-T71) 通達このセクションは、5.15 ~ 5.25 GHz

212Regulatory InformationSouth Korea InformationFor Class (A) products:For Class (B) products:(Product Name)(Model Name) (Trade Name/Manufacturer) (Ce

22Getting StartedInitializationProxim provides two tools to simplify the initialization and configuration of an AP:• ScanTool• Setup WizardScanTool is

213Regulatory InformationRadio ApprovalsTo determine whether you are allowed to use your device in the countries listed below, please check the “conta

214Regulatory InformationAustralia Alpha-1: A13QBF • For indoor use only. AustriaÖsterreichPC24E-H-FC CE 0122 !PC24E-H-ET-L R0167 SRD3aPC24E-H-ETPC24E

215Regulatory InformationBelgiumBelgieBelgiquePC24E-H-FC CE 0122 ! • For outdoor usage you may only use channels 10 and 11 (2457 and 2462 MHz). • Priv

216Regulatory InformationBelgium Alpha-1: C38WCW CE 0560 ! • Only indoor with integral or approved Range Extender Antenna.• Alleen voor gebruik binnen

217Regulatory InformationBelgiumBelgieBelgiqueAlpha-1: A04LAE CE 0336 !Alpha-1:A08NAE CE 0336 !Brazil PC24E-H-FC • This equipment operates in secondar

218Regulatory InformationCanada Alpha-1: B11FNF IC: 1856B-B11FNF • Only with integral, approved Range Extender Antenna.• Pour usage avec une antenne i

219Regulatory InformationCzech RepublicPC24E-H-ET-L 45314454PC24E-H-ETDenmarkDanmarkPC24E-H-FC CE 0122 !PC24E-H-ET-L R0167 SRD3aPC24E-H-ET CE 0122 !PC

220Regulatory InformationFinlandSuomiPC24E-H-FC CE 0122 !PC24E-H-ET-L R0167 SRD3aPC24E-H-ETPC24E-11-FC/R CE 0336 ! • Only indoor with integral or appr

221Regulatory InformationFrance PC24E-H-FC CE 0122 ! • Restricted frequency band: On French territory PC24E-H-FC devices may only use channels 10 and

222Regulatory InformationFrance Alpha-1: B13ENE CE 0336 ! • Restricted frequency band: On French territory B13ENE devices may only use channels 10, 11

23Getting StartedNOTEIf your computer has more than one network adapter installed, you will be prompted to select the adapter that you want ScanTool t

223Regulatory InformationGermanyDeutschlandG11FNF-PC CE 0336 ! • Only indoor with integral or approved Range Extender Antenna.• Nur zum Einsatz innerh

224Regulatory InformationHong Kong PC24E-H-FC LP400096PC24E-H-ET LP400095PC24E-11-FC/RHong Kong Alpha-1: B13ENE HKTA-1039Hong Kong Alpha-1: A09SBS

225Regulatory InformationIcelandÍslandPC50E-4-ET/A CE 0336 ! • For indoor use only.• Fyrir inni- nota einiPC50E-8-ET/A CE 0336!A19PCE-PC CE 0560 !Icel

226Regulatory InformationIsrael G05INI-PC MoC pending • Restricted frequency band: only channels 4 through 8 (2418.0-2457.0 MHz) may be used in Israel

227Regulatory InformationJapan日本PC24E-H-FC TELEC: NYCA0010 JATE: D99-1057JPPC24E-H-JP TELEC: NYCA0008 TELEC: GZCA0007PC24E-H-ET-L TELEC: NYCA00024PC24

228Regulatory InformationKorea A04VBA-PC MIC: R-LARN-03-0248Certification date: 2003.06-04Product name: PC CardManufacturer: Proxim CorporationMade in

229Regulatory InformationLiechtenstein AP-700: AP-AG-AT-01CE 0560! • Only indoor with integral or approved Range Extender Antenna.• Nur zum Einsatz in

230Regulatory InformationLuxemburgLuxembourgPC50E-4-ET/A CE 0336 ! • For indoor use only.• Pour usage intérieur uniquement.PC50E-8-ET/A CE 0336 !A19PC

231Regulatory InformationMexicoMéxicoAlpha-1: B11FNF COFETEL: PCPPRAL03-095• On Mexican territory wireless devices may only use channel 11 (2450.0-248

232Regulatory InformationNetherlandsNederlandPC24E-H-FC CE 0122 ! No 67 • License required for outdoor installations. Check with reseller for proce

24Getting StartedFigure 2-9 Scan Tool Change Screen3. Set IP Address Type to Static.4. Enter a static IP Address for the AP in the field provided. Yo

233Regulatory InformationNew Zealand PC24E-H-FC RFSPC24E-11-FC/R ENG 3/2/RFS29PC24E-H-ET-L RFSPC24E-H-ETPC24E-11-ET/R ENG 3/2/RFS29NorwayNorskPC24E-H-

234Regulatory InformationPoland PC24E-H-FC 688/2000PC24E-H-FC/R 072/2002PC24E-H-ET-LPC24E-H-ETPC24E-H-ET/R 072/2002Portugal PC24E-H-FC CE 0122 !PC24E-

235Regulatory InformationSaudi Arabia PC24E-H-FC Reference 10/36 of 18-3-2002PC24E-11-FC/R Reference 10/36 of 18-3-2002PC24E-H-ET Reference 10/36 of 1

236Regulatory InformationSouth Africa PC24E-H-FCPC24E-H-ET-LPC24E-H-ETSouth Africa G11FNF-PC ICASA: TA-2003/93G13ENE-PC ICASA: TA-2003/93SpainEspañaPC

237Regulatory InformationSwedenSverigeG11FNF-PC CE 0336 ! • Only indoor with integral or approved Range Extender Antenna.• Endast inomhus med integrer

238Regulatory InformationSwitzerlandSuisseSchweizSvizzeraG11FNF-PC CE 0336 ! • Only indoor with integral or approved Range Extender Antenna.• Pour usa

239Regulatory InformationSwitzerlandSuisseSchweizSvizzeraAP-700: AP-AG-AT-01CE 0560 ! • For indoor use only.• Pour usage intérieur uniquement.• Nur fü

240Regulatory InformationUnited KingdomPC24E-H-FC CE 0122 ! PC24E-H-ET-L R0167 SRD3aPC24E-H-ET CE 0122 !PC24E-11-FC/R CE 0336 ! • Only indoor with int

241Regulatory InformationFor Radio Type Numbers with the format PCxxE-y-zz:xx =24 identifies a IEEE 802.11b compliant WLAN radio product for the 2.4 G

242Regulatory Information4 ou 8 indique le nombre de canaux.zz =FC ou FC/R identifie un carte universelle à 11 canaux, conforme aux normes FCC, qui op

25Getting StartedFigure 2-10 Enter Network PasswordFigure 2-11 Setup Wizard5. Click Setup Wizard to begin. If you want to configure the AP without u

243Regulatory InformationE =wahlweise freigestellte Kennung, zum anzuzeigen, daß der Übermittler eine integrale Antenne hat.y =H oder 11 kennzeichnet

244Regulatory InformationGNJ / LEJ = Japan VBA = Asia (China, South Korea)INI = Is

26Getting Started8. Assign the AP new passwords to prevent unauthorized access and click Save & Next. Each management interface has its own passwo

27Getting Started• The following options are available for an 802.11b/g AP:— Operational Mode: An 802.11b/g wireless interface can be configured to op

28Getting StartedSetup your TFTP ServerA Trivial File Transfer Protocol (TFTP) server allows you to transfer files across a network. You can upload fi

29Getting StartedDownload Updates from your TFTP Server using the CLI Interface1. Download the latest software from http://www.proxim.com.2. Copy the

3Contents1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12Document Conventions

30Getting StartedFigure 2-12 Attach the Back Cover to the Wall13. Attach Ethernet and power cables to the AP unit, if necessary.14. Snap the unit int

31Getting Started15. Replace the front cover.16. Replace the cable cover.17. Turn on the AP.Ceiling MountFollow these steps to mount the AP to a ceili

32Getting StartedThe AP has been certified under UL Standard 2043 and can be installed in the plenum only when the following conditions apply:• The un

33Getting StartedActive EthernetAn Active Ethernet-enabled AP is equipped with an 802.3af-compliant Active Ethernet module. Active Ethernet (AE) deliv

34Getting StartedFigure 2-16 LED Indicators IllustratedPower LEDWireless Activity LEDEthernet Activity LEDEthernet Link LED

35Getting StartedRelated TopicsThe Setup Wizard helps you configure the basic AP settings required to get the unit up and running. The AP supports man

343Viewing Status Information• Logging into the HTTP Interface• System StatusLogging into the HTTP InterfaceOnce the AP has a valid IP Address and an

35Viewing Status InformationSystem StatusSystem Status is the first screen to appear each time you connect to the HTTP interface. You can also return

364Performing Advanced Configuration• Configuring the AP Using the HTTP/HTTPS Interface• System: Configure specific system information such as system

37Performing Advanced ConfigurationFigure 4-1 Enter Network Password Screen5. Click the Configure button located on the left-hand side of the screen.

4ContentsLED Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323

38Performing Advanced ConfigurationSystemYou can configure and view the following parameters within the System Configuration screen:• Name: The name a

39Performing Advanced ConfigurationNetworkThe Network tab contains three sub-tabs.– IP Configuration– DHCP Server– Link IntegrityIP ConfigurationYou c

40Performing Advanced ConfigurationDHCP ServerIf your network does not have a DHCP Server, you can configure the AP as a DHCP server to assign dynamic

41Performing Advanced ConfigurationYou can configure and view the following parameters within the DHCP Server Configuration screen:• Enable DHCP Serve

42Performing Advanced ConfigurationFigure 4-4 Link Integrity Configuration ScreenInterfacesThe Interfaces tab contains the following sub-tabs:– Opera

43Performing Advanced ConfigurationOperational ModeOperational Mode SelectionYou can configure and view the following parameters within the Operationa

44Performing Advanced ConfigurationConfiguring TX Power Control1. Click Configure > Interfaces > Operational Mode.2. Select Enable Transmit Powe

45Performing Advanced ConfigurationAbbildung 4-6 Wireless Interface Sub-tabNOTEYou must reboot the Access Point before any changes to these parameter

46Performing Advanced ConfigurationNOTEYou cannot disable Auto Channel Select for 802.11a products in Europe (see Dynamic Frequency Selection (DFS) fo

47Performing Advanced Configurationare the specified size or greater. You should not need to enable this parameter for most networks unless you suspec

5ContentsProcedure to Reset Configuration via the Serial Interface . . . . . . . . . . . . . . . . . . . . . . . . . 63Filtering . . . . . . . . . .

48Performing Advanced Configuration• Regulatory Domain: Reports the regulatory domain for which the AP is certified. Not all features or channels are

49Performing Advanced Configuration• Medium Density Distribution: When enabled, the Access Point automatically notifies wireless clients of its Distan

50Performing Advanced ConfigurationCAUTION!The distance between APs should not be approximated. It is calculated by means of a manual Site Survey, in

51Performing Advanced ConfigurationThe Distance Between APs must be set before the Multicast Rate, because when you select the Distance Between APs, t

52Performing Advanced Configuration• RTS/CTS Medium Reservation: This parameter affects message flow control and should not be changed under normal ci

53Performing Advanced Configuration• Auto Channel Select: The AP scans the area for other Access Points and selects a free or relatively unused commun

54Performing Advanced ConfigurationFigure 4-9 WDS ExampleBridging WDSEach WDS link is mapped to a logical WDS port on the AP. WDS ports behave like E

55Performing Advanced Configuration2. Write down the MAC Address of the radio that you wish to include in the Wireless Distribution System.3. Click on

56Performing Advanced Configuration8. Click OK. 9. Enter the MAC Address that you wrote down in Step 2 in one of the Partner MAC Address field of the

57Performing Advanced ConfigurationManagementThe Management tab contains five sub-tabs.– Passwords– IP Access Table– Services– Automatic Configuration

6ContentsConfiguring MAC Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86Security Profil

58Performing Advanced ConfigurationServicesYou can configure the following management services:NOTEYou must reboot the Access Point if you change the

59Performing Advanced ConfigurationFigure 4-12 Management Services Configuration Screen

60Performing Advanced ConfigurationTelnet Configuration Settings • Telnet Interface Bitmask: Select the interface (Ethernet, Wireless, All Interfaces)

61Performing Advanced ConfigurationTo manually generate or delete host keys on the AP:•Select Create to generate a new pair of host keys. •Select Dele

62Performing Advanced ConfigurationSerial Configuration SettingsThe serial port interface on the AP is enabled at all times. See Setting IP Address us

63Performing Advanced ConfigurationAutomatic Configuration (AutoConfig)The Automatic Configuration feature which allows an AP to be automatically conf

64Performing Advanced ConfigurationFigure 4-14 Automatic Configuration ScreenSet up Automatic Configuration for Dynamic IPPerform the following proce

65Performing Advanced ConfigurationFigure 4-15 DHCP Options: Setting the Boot Server Host Name4. Add the Boot Server Host Name and Boot Filename para

66Performing Advanced ConfigurationHardware Configuration Reset (CHRP)Hardware Configuration Reset Status is a parameter that defines the hardware con

67Performing Advanced ConfigurationConfiguring Hardware Configuration ResetPerform the following procedure to configure Hardware Configuration Reset a

7ContentsHelp Link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1207 Trouble

68Performing Advanced ConfigurationFilteringThe Access Point’s Packet Filtering features help control the amount of traffic exchanged between the wire

69Performing Advanced ConfigurationTaken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP will look for

70Performing Advanced ConfigurationStatic MAC Filter ExamplesConsider a network that contains a wired server and three wireless clients. The MAC addre

71Performing Advanced Configuration• Wired Mask: FF:FF:FF:FF:FF:FF• Wireless MAC Address: 00:00:00:00:00:00• Wireless Mask: 00:00:00:00:00:00Result: T

72Performing Advanced Configuration• All Interfaces7. Click OK.Editing TCP/UDP Port Filters1. Click Edit under the TCP/UDP Port Filter Table heading.2

73Performing Advanced ConfigurationAlarmsThis tab has three sub-tabs.– Groups– Alarm Host Table– Syslog– Rogue Access Point Detection (RAD)GroupsThe A

74Performing Advanced Configuration• Security Trap Group• Wireless Interface/Card Trap Group• Operational Trap Group• Flash Memory Trap GroupTrap Name

75Performing Advanced Configuration• TFTP Trap Group• Image Trap GroupIn addition, the AP supports these standard traps, which are always enabled:• RF

76Performing Advanced ConfigurationSeverity LevelsThere are three severity levels for system alarms:–Critical–Major– InformationalCritical alarms will

77Performing Advanced Configuration• Syslog Heartbeat Status: Enables or disables the sending of heartbeat messages from the AP to the configured Sys

8ContentsA Using the Command Line Interface (CLI). . . . . . . . . . . . . . . . . . . . . . . . . . . .132General Notes . . . . . . . . . . . . . . .

78Performing Advanced ConfigurationRogue Access Point Detection (RAD)The Rogue AP Detection (RAD) feature provides an additional security level for wi

79Performing Advanced ConfigurationExample Rogue AP Detection DeploymentFigure 4-20 Example Rogue AP Detection DeploymentAdditionally, the RAD scan r

80Performing Advanced ConfigurationFigure 4-21 Rogue Access Point Detection Screen

81Performing Advanced ConfigurationBridgeThe AP is a bridge between your wired and wireless networking devices. As a bridge, the functions performed b

82Performing Advanced ConfigurationTo block Intra BSS traffic, set Intra BSS Traffic Operation to Block. To allow Intra BSS traffic, set Intra BSS Tra

83Performing Advanced ConfigurationRADIUS ProfilesConfiguring RADIUS Profiles on the AP define a profile for RADIUS Servers used by the system or by a

84Performing Advanced Configurationserver used depends on whether the authentication is done for an 802.1x client or non-802.1x client. The clients in

85Performing Advanced ConfigurationAdding or Modifying a RADIUS Server ProfilePerform the following procedure to add a RADIUS server profile and to co

86Performing Advanced Configuration• Server Name/IP Address: Enter the server’s name or IP address.• Destination Port: Enter the port number which the

87Performing Advanced ConfigurationRADIUS AccountingUsing an external RADIUS server, the AP can track and record the length of client sessions on the

9ContentsSet up Auto Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147Other Network

88Performing Advanced ConfigurationSSID/VLAN/SecurityThe AP provides several security features to protect your network from unauthorized access. Virtu

89Performing Advanced ConfigurationFigure 4-25 Components of a typical VLANVLAN Workgroups and Traffic ManagementAccess Points that are not VLAN-capa

90Performing Advanced ConfigurationThe three primary scenarios for using VLAN workgroups are as follows:1. VLAN disabled: Your network does not use VL

91Performing Advanced ConfigurationMAC AccessThe MAC Access sub-tab allows you to build a list of stations, identified by their MAC addresses, authori

92Performing Advanced ConfigurationSecurity ProfilesThe AP supports the following Security features:• WEP Encryption: The original encryption techniqu

93Performing Advanced ConfigurationAuthentication ProcessThere are three main components in the authentication process. The standard refers to them as

94Performing Advanced Configuration– Each client uses a different key to encrypt and decrypt unicast packets exchanged with the AP– A client's ke

95Performing Advanced ConfigurationConfiguring Security ProfilesSecurity policies can be configured and applied on the AP as a whole, or on a per VLAN

96Performing Advanced Configuration• Authentication Mode: 802.1x• Cipher: WEP• Encryption Key Length: 64 or 128 Bits. • If 802.1x is enabled simultane

97Performing Advanced ConfigurationFigure 4-29 Security Profile Table - Add Entries