Proxim AP-700 manual

ORiNOCO AP-700 Access Point User Guide[...]

AP-700 User Guide 2 Copyright © 2005 Proxim Corporation. All rights reserved. Covered by one or more of the fo llowing U.S. p atents: 5, 231,634; 5,875,1 79; 6,0 0 6,090; 5,809,060; 6, 075,812; 5,077 ,753. This user’s guid e and the s oftware desc ribed in it are copyright ed with all ri ghts reserved . N o p art of this publication may be repro[...]

AP-700 User Guide 3 Content s 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Introduction to Wi[...]

Content s AP-700 User Guide 4 IP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

Content s AP-700 User Guide 5 Management VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Security Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

Content s AP-700 User Guide 6 Forced Reload Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142 Setting IP Address using Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145 Rel[...]

Content s AP-700 User Guide 7 CLI Batch File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201 Auto Configuration and the CLI Batch File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202 CLI Bat[...]

AP-700 User Guide 8 Caution: Exposure to Radio Frequenc y Radiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218 Modifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218 Industry Can[...]

9 AP-700 User Guide 1 Introduction This chapter contains in formation on the following: • Document Conventions • Introduction to Wireless Networking • Guidelines for Roaming • IEEE 802.1 1 Specifica tions • Management and Monitoring Capabilities Document Conventions • AP refers to an AP-700 Access Point. • 802.1 1 is used to describe [...]

Introduction AP-700 User Guide Guidelines for Roaming 10 Figure 1- 1 T ypical Wireless Network Access Infrastructure Guidelines for Roaming • T ypical voice network cell coverages vary based on enviro nment. Proxim r ecommends having a site surve y done professionally to ensure optimal performa nce. For professi onal site su rveyors, Ekahau™ Si[...]

Introduction AP-700 User Guide Management and Monitoring Capabilities 11 802.1 1 direct sequence devices (that operate at 1 or 2 Mbits/sec). A vailab le Frequency Channels va ry by regulatory domain and/or cou ntry . See Available Chan nels for details. Also in 1999, the IEEE modified the 802.1 1 standard to su pport devices opera ting in t he 5 GH[...]

Introduction AP-700 User Guide Management and Monitoring Capabilities 12 SNMP Management In addition to the HTTP and the CLI interfaces, you can also manage and configu re an AP using the Simple Network Management Protocol (SNM P). Note that this requires an SN MP manager progra m, like HP Openview or Castlerock’ s SNMPc. The AP support s several[...]

Introduction AP-700 User Guide Management and Monitoring Capabilities 13 The SSH server (AP) has host keys - a p air of asymmetric keys - a priv ate key that resi des on the AP and a pub lic key that is distributed to clients th at need to connect to the AP . As the client has knowl edge of the server host keys, the client can verify that it is com[...]

14 AP-700 User Guide 2 Inst allation and Initialization This chapter contains in formation on the following: • AP-700 Hardware Description – Overview – Antennas – Active Ethernet – LED Indicator s • Prerequisites • Product Package • System Requirements • Hardware Installation • Initialization – Using ScanT ool – Logging In ?[...]

Inst allation and Initializ ation AP-700 User Guide AP-700 Hardware Description 15 Figure 2-1 Rear Panel The AP-700 has been designed to rest horizontally on a flat surface, but ca n be wall- or ceiling- mounted with the long axis vertical. The unit inc ludes screw slots in the bottom plastic for mounting to a flat w all or ceiling. Antennas The AP[...]

Inst allation and Initializ ation AP-700 User Guide AP-700 Hardware Description 16 vertically polarize d internal antenna, and co nnector 2 correspo nds to the horizo ntally pola riz ed intern al antenna. Plugging an external antenna in to the antenna connector disa bles the corresponding internal antenna . The AP continues to support an tenna dive[...]

Inst allation and Initializ ation AP-700 User Guide Prerequisites 17 The LED indicators exhi bit the following behavio r: Prerequisites Before installing an AP-700, yo u need to gather certain netw ork information. The following t able identifies the information you need. Indication Power Wireless Interface (802.1 1a/b/g radi o) Ethernet Solid Gree[...]

Inst allation and Initializ ation AP-700 User Guide Prerequisites 18 Client IP Address Pool Allocation Scheme The Access Point can automatically provide IP add resses to clients as they sign on. The network administrator typically pr ovides the IP Pool range. DNS Server IP Address The network administra tor typically provides this IP Address. Gatew[...]

Inst allation and Initializ ation AP-700 User Guide Product Package 19 Product Package Each AP-700 comes with the following: • AP-700 unit (with in tegrated 802.1 1a/b/g radio and Active Ethernet) • Power adapter • One ceiling or wall mounting plate • Security cover • One Installation CD-ROM th at co ntains the following: – Software Ins[...]

Inst allation and Initializ ation AP-700 User Guide Hardware Installation 20 Hardware Inst allation Required Materials • AP-700 unit • Mounting br acket with screws • Power adapter • Security cover • Quick St art Flyer Perform the fo llowing procedures to install the AP hardware: • Cabling the AP-700 • Installing the Security Cover ?[...]

Inst allation and Initializ ation AP-700 User Guide Hardware Installation 21 2. Attach one end of an Ethernet cable to the AP's LAN port (the center por t, labeled “LAN”) and the ot her end to a network hub or switch. 3. Option ally , co nnect an RS-2 32 cable to the RS-2 32 console port (the right port, labele d “RS-232”). NOTE: Y ou [...]

Inst allation and Initializ ation AP-700 User Guide Hardware Installation 22 Figure 2-5 AP-700 Mounting Pla te Mounting the AP-700 t o a W all 1. Put the mounting plate up to the wall. 2. Screw through the mounting plate. 3. Place the AP up against the mounting plat e. Orient the AP with the long acce ss vertical, with the connector s facing to the[...]

Inst allation and Initializ ation AP-700 User Guide Hardware Installation 23 Figure 2-6 Opening the Anten na Comp artment 2. There are two antenn a connectors in the AP-700 , labeled 1 and 2. Connect the antenna cable to connector 1 (the connector closer to the LED p anel in the comp artment). Figure 2-7 AP-700 Anten na Connectors 3. If installing [...]

Inst allation and Initializ ation AP-700 User Guide Initialization 24 Initialization The following sections detail how to initialize the AP using ScanT ool, log in to the HTTP interface, perform an initial configuration of the AP using the Setup Wizard, and downl oad the required AP sof tware. • Using ScanT ool • Logging In • Using the Setup [...]

Inst allation and Initializ ation AP-700 User Guide Initialization 25 change your adapter setting at a ny time by clicking the Select Adapter button on the Scan List screen. Note that the ScanToo l Network Adapter Se lection screen will not appear if your computer only has one network adapter inst alled. Figure 2-8 Scan List 7. Locate the MAC addre[...]

Inst allation and Initializ ation AP-700 User Guide Initialization 26 d. Ente r a static IP Address for the AP in the field provided. Y ou must assign the unit a unique address that is valid on your IP subnet. Con tact your networ k administra tor if you need assist ance selecting an IP addr ess for the unit. e. Ente r your network’s Subnet Mask [...]

Inst allation and Initializ ation AP-700 User Guide Initialization 27 4. Enter the HTTP password in th e Password field. Leave th e User Name field blank. For new units, the default HTTP password is public . If you are logging on for the first time the Setup W izard will launch automatically . NOTE: T o prevent the Setup W izard from launch ing upo[...]

Inst allation and Initializ ation AP-700 User Guide Initialization 28 Figure 2-12 Setup W izard Setup Wizard Instructions 1. Click Setup Wizard to begin. The Setup Wizard suppor ts the following navigation options: • Save & Next Button: Each Setup Wiza rd screen has a Save & Next button. Click this bu tton to submit any changes you made t[...]

Inst allation and Initializ ation AP-700 User Guide Initialization 29 — 802.1 1g-wifi: 802.1 1g-wifi has been defined for Wi-Fi test in g purporses. It is no t recommended for use in your wireless network environment. NOTE: In countries in which 802.1 1a (5 GHz) is not available for us e, the AirSPEED AP541 provides dual-band (802.1 1b and 802.1 [...]

Inst allation and Initializ ation AP-700 User Guide Initialization 30 Download the Sof t ware 1. In your web browser , go to http://support. proxim.com. 2. If prompted, create an account to gain access. NOTE: The Knowledgebase is available to all website visitors. First-time users will be asked to create an account to gain access. 3. Click Search K[...]

Inst allation and Initializ ation AP-700 User Guide Initialization 31 Figure 2-14 W arning Message 5. Click OK to continue with the operation or Cancel to abor t the operation. 6. If the operation is unsuccessful, you will rece ive an error message. If this oc curs, see the T rouble shooting chapter or attempt installing the software with a TFTP se[...]

Inst allation and Initializ ation AP-700 User Guide Related T opics 32 Install Updates from yo ur TFTP Server using the CLI 1. Download the latest software to http://support.proxim.com (Knowledgebase Answer ID 1686). See Download th e Software for instructions) . 1. Copy the latest sof tware updates to your TFTP server . 2. Open the CLI interface v[...]

33 AP-700 User Guide 3 System S t atus The first screen displayed af ter Logging In is the System S tatus screen. Y ou can always return to this screen by clicking the Stat us button. Figure 3-1 System S t atus Screen The System Status screen provides the following info rmation: • System St atus: This area provides system-level information, incl [...]

34 AP-700 User Guide 4 Advanced Configuration This chapter contain s information on configuring settings in the following ca tegories: • System : Configure specific system information such as syste m name and con tact inform ation. • Network: Configure IP , DNS client, DHCP server , DHCP Relay Agen t, DHCP Relay Servers, Link Integrity , and SN[...]

Advanced Configuration AP-700 User Guide 35 Figure 4-1 Configure Main Scre en 2. Click the tab that corresponds to the paramete r you want to configure. For example, click Network to config ure the Access Point’s TCP/IP settings. Each Configure tab is d escribed in the remai nder of this chapter .[...]

Advanced Configuration AP-700 User Guide System 36 System Y ou can configure and view the following para meters within the System Con figuration screen: • Name: The name as signed to the AP . See the Dynamic DNS Support and Access Point System Naming Convention sections for rules on naming the AP . • Location: Th e location where th e AP is ins[...]

Advanced Configuration AP-700 User Guide System 37 Access Point System Naming Co nvention The Access Point's system name is used as it s host name. In order to preven t Access Point s with default configurations from regist ering similar host names in DNS, the default system name of the Acce ss Point is uniquely generate d. Access Points gene [...]

Advanced Configuration AP-700 User Guide Network 38 Network The Network tab con tains the followin g sub-t abs: • IP Configuration • DHCP Server • DHCP Relay Agent • Link Integrity • SNTP (Simple Network T ime Protocol) IP Configuration This tab is use d to configure the internet (TCP/IP) settings for the access point. These settings can [...]

Advanced Configuration AP-700 User Guide Network 39 Basic IP Parameters • IP Address Assignment T ype: Set this parameter to Dynamic to configure the Access Point as a Dynamic Host Configuration Protocol (DHCP) client ; the Access Point will obtain IP sett ings from a network DHCP server automatically during boot-up. If you do not have a DHCP se [...]

Advanced Configuration AP-700 User Guide Network 40 Figure 4-4 DHCP Server Configuration Screen Y ou can configure and view the following para meters within the DHCP Server Configuration screen: NOTE: Y ou must reboot the Access Point before changes to any of these DHCP serve r parameter s take effect. • Enable DHCP Server: Place a check mark in [...]

Advanced Configuration AP-700 User Guide Network 41 – Stat us: IP Pools are enabled upon entry in the table . Y ou can also disable or delete entries by changing this field’ s value. NOTE: Y ou must reboot the Access Point before changes to any of these DHCP server p arameters t ake effect. DHCP Relay Agent When enabled, the DHCP relay agent fo[...]

Advanced Configuration AP-700 User Guide Network 42 Figure 4-6 DHCP Server IP Address T able - Edit Entries T o add an entry , enter the IP Address of the DHCP Server and a comment (optional), a nd click OK. T o edit an entry , make changes to the appropriate entry . Enab le or disable the entry by choosing Enable or Disable from the S t atus drop-[...]

Advanced Configuration AP-700 User Guide Network 43 Figure 4-7 Link Integrity Configuration Screen SNTP (Simple Network Time Protocol) SNTP allows a network entity to communic ate w ith time servers in th e network/internet to retr ieve and synchronize time of day information. When this feature is enabled, t he AP will attempt to retrieve the ti me[...]

Advanced Configuration AP-700 User Guide Network 44 Figure 4-8 SNTP Configuration Scre en Y ou can configure and view the followin g pa rameters within the SNTP screen: • SNTP St a tus : Select Enable or Disable from the drop-down menu. The selected st atus will determine which of the paramete rs on the SNTP screen are configurable. NOTE: When SN[...]

Advanced Configuration AP-700 User Guide Network 45 – Y ear: Enter the current year . – Month: Enter the month in digits (1-12). – Day : Enter the day in digit s (1-31). – Hour: Enter the hour in digits (0-23). – Minutes: Enter the minutes in digits (0-59). – Seconds: En ter the seconds in digits (0-59).[...]

Advanced Configuration AP-700 User Guide Interfaces 46 Interfaces From the Int erfaces t ab, you configure the Access Point’ s operatio nal mode settings, power control se ttings, wireless interface settings and Ethernet settings. Y o u may also configure a Wireless Distribution System for AP-to-AP communications. The Interfaces t ab cont ains th[...]

Advanced Configuration AP-700 User Guide Interfaces 47 • 802.1 1g-wifi mode: The 802.1 1g-wifi mode has been defined for Wi-Fi testing purpor ses. It is not recommended for use in your wireless network environment. NOTE: In countries in which 802.1 1a (5 GHz) is not availabl e for use, the AP-700 prov ides dual-ban d (802.1 1b and 802.1 1g) suppo[...]

Advanced Configuration AP-700 User Guide Interfaces 48 3. Select the Country Code from the ISO/IEC 3166 -1 CountryCode drop-down menu. 4. Click OK . 5. Configur e T ransmit Power Control an d transmit power level if required. TX Power Control /T ransmit Power Leve l T ransmit Power Control uses st andard 802.1 1 d frames to control transmit po wer [...]

Advanced Configuration AP-700 User Guide Interfaces 49 Wireless (802.1 1a/b/g Radio) Figure 4-10 Wi reless Interface[...]

Advanced Configuration AP-700 User Guide Interfaces 50 Y ou can view and configure the following pa rameters for the Wi reless interface: NOTE: Y ou m ust reboot the Ac cess Point before any changes to these parameters take effe ct. • Physical Interfa ce T ype: Depending on the Operational Mode, this field reports: – For 802.1 1 a mo de: “802[...]

Advanced Configuration AP-700 User Guide Interfaces 51 NOTE: T urbo mode is supported in 802.1 1a and 802.1 1g mode. If turbo mode is enabled, then this is displayed in the web UI and the transmit speeds and cha nnels pull-down me nus are up dated with the valid values. • DTIM Period: The Deferred T raffic Indicator Map (DTIM) Period d etermines [...]

Advanced Configuration AP-700 User Guide Interfaces 52 RTS/CTS Medium Reservat ion The 802.1 1 standard suppo rts option al R TS/CTS communica tion based on packet size. Without RTS/CTS, a sending radio listens to see if another radio is already using the medi um before transmitting a dat a packe t. If the medium is free, the sending radio transmit[...]

Advanced Configuration AP-700 User Guide Interfaces 53 Trap s Generated Durin g Wireless Se rvice Shutdown ( and Resume) The following trap s are generated du ring wireless service s hut down and re sume, and are also sent to any configured Syslog serv er . When the wireless service is shut down on a wi reless interface, the AP generates a trap cal[...]

Advanced Configuration AP-700 User Guide Interfaces 54 Figure 4-12 Channel Blacklist T able - Edit Screen Wireless Distr ibution System (WDS) A Wireless Distribution System (WDS) crea tes a link betwee n two 802.1 1a, 802.1 1 b, or 80 2.1 1b/g APs over their radio interfaces. This link relays traf fic from one AP that doe s not have Ethernet connec[...]

Advanced Configuration AP-700 User Guide Interfaces 55 • There are sep arate securi ty settings for client s and WDS lin ks. The same WDS link security mode must be configured (currently we only support none or WEP) on each Access Point in the WDS and the same W EP key must be configured . • The WDS link shares the communication bandwid th with[...]

Advanced Configuration AP-700 User Guide Interfaces 56 Figure 4-15 Adding WDS Links 6. Select whether to use encryp tion in the WDS by checking the Enable WD S Securi ty Mode checkbox. 7. If you enabled WDS Security Mode, ente r the Encryption Key 0 used for encryption between the WDS links. 8. Enter the MAC Address that you wrote down in S tep 2 i[...]

Advanced Configuration AP-700 User Guide Interfaces 57 Figure 4-16 Ethern et Sub-t ab For best results, Proxim reco mmends that you configure th e Ethernet setting to match th e speed and transmission mod e of the device the Access Point is connected to (such as a hu b or switch). If in doubt, leave th is setting at its default, auto-speed -auto-du[...]

Advanced Configuration AP-700 User Guide Management 58 Management The Management t ab conta ins the following sub-t abs: • Passwords • IP Access T able • Services • Automatic Configuration (AutoC onfig) • Hardware Configur ation Reset (CH RD) Passwords Y ou can configure the following p asswords: • SNMP Read Community Password: The pass[...]

Advanced Configuration AP-700 User Guide Management 59 IP Access T able The Management IP Access table limits in-ba nd management ac cess to th e IP addresses or range of IP addresse s specified in the table. This feat ure applies to all m anagement services (SNMP , HTTP , and CLI) except for CLI management over the serial port. T o configure this [...]

Advanced Configuration AP-700 User Guide Management 60 • Secure Management S t atus: Enables the further configuration of HTTPS Access, SNMPv3, and Secure Shell (SSH). After enab ling Secure Management, you can choose to configure HTTPS (SSL) and Secure Shell access on the Services tab, and to configure SNMPv3 passwords on the Passwor ds tab. SNM[...]

Advanced Configuration AP-700 User Guide Management 61 Figure 4-17 Manag ement Services Config uration Screen[...]

Advanced Configuration AP-700 User Guide Management 62 T elnet Configuration Settings • T elnet Interfa ce Bitmask: Select the interface ( Ethernet , Wireless , All Interfaces ) from which you can manage the AP via telnet. This parame ter can also be used to Disab le telnet man agement. • T elnet Port Nu mber: The default port number for T elne[...]

Advanced Configuration AP-700 User Guide Management 63 NOTE: When Secure Management is enabled on the AP , SSH will be enable d by default and cannot be disabled. Host keys must eithe r be generated ex ternally and uploaded to the AP (see Uploading Externall y Generated Host Keys ), generated manually , or auto-generated at the time o f SSH in itia[...]

Advanced Configuration AP-700 User Guide Management 64 Serial Configuration Set tings The serial port interface on the AP is enabled at all times. See Setting IP Address using Serial Port for information o n how to access the CLI interface via the serial port. Y ou can configure and view the following p arameters: • Serial Baud Rate: Select the s[...]

Advanced Configuration AP-700 User Guide Management 65 • RADIUS Profile for Management Ac cess Control : S pecifies the RAD IUS Profile to be used for RAD IUS Based Management Access. • Local User S t atus : Enab les or disables the local user when RA DIUS Based Managem ent is enabled. The default local user ID is root. • Local User Password [...]

Advanced Configuration AP-700 User Guide Management 66 Figure 4-19 Automatic Configuration Screen Set up Automatic Configuration for Dynamic IP Perform the following procedur e to enable and set up Automatic Configuration when you have a dynam ic IP address for the TFTP serve r via DHCP . The Configuration filena me and the TFTP server IP address a[...]

Advanced Configuration AP-700 User Guide Management 67 Figure 4-20 DHCP Options : Setting the Boot Ser ver Host Name 4. Add the Boot Server Hostname and Boo t Filename para meters to the Active Options list. 5. Set the value of the Boot Server Hostname Parameter to th e hostname or IP Address of the TFTP server . For example: 1 1.0.0.7. Figure 4-21[...]

Advanced Configuration AP-700 User Guide Management 68 AP is not protected, an unauthorized person could reset the AP to factory default s and thus gain control of the AP . The user can disable the hardwa re configuration re set functionality to prev ent unauthorize d access. The hardware configuration reset feature operates as follows: • When ha[...]

Advanced Configuration AP-700 User Guide Management 69 2. Check (enable) or uncheck ( disable) the Enable Hardware Configura tion Reset checkbox. 3. Change the default Configuration Reset Pa ssword in th e “Configurati on Reset Password” and “C onfirm” fields. 4. Click OK. 5. Reboot the AP . NOTE: It is important to saf ely store the config[...]

Advanced Configuration AP-700 User Guide Filtering 70 Filtering The Access Point’ s Packet Filtering features help control th e amount of traf fic exchanged be tween the wired and wireless networks. There are fo ur sub-ta bs under the Filtering headin g: • Ethernet Pr otocol • St a t i c M A C • Advanced • TCP/UDP Port Ethernet Protocol T[...]

Advanced Configuration AP-700 User Guide Filtering 71 Each MAC Address or Mask is comprised of 12 hexadecim al digits (0-9, A-F) t hat correspond to a 48-bit identifier . (Each hexadecimal digit represen ts 4 bit s (0 or 1).) T aken together , a MAC Address /Mask pair specifies an address or a range of MAC addresses that the AP will look for when e[...]

Advanced Configuration AP-700 User Guide Filtering 72 • Wireless Client 2: 00:02:2D:5 1:32:12 • Wireless Client 3: 00:20:A6:12:4E:38 Prevent T wo Specific Device s from Communicating Configure the following settings to prevent the Wired Serv er and Wi reless Client 1 from communicating: • Wired MAC Address: 00:40:F4:1C:DB:6A • Wired Mask : [...]

Advanced Configuration AP-700 User Guide Filtering 73 • Wired MAC Address: 01:00:5E:00:32:4B • Wired Mask : FF:FF:FF:FF:F F:FF • Wireless MAC Address: 00:00:00 :00:00:00 • Wireless Mask: 00:00 :00:00:00:00 Result: The Access Point does not forward any p acket s that have a destina tion address of 01 :00:5E:00:32:4B to the wireless networ k.[...]

Advanced Configuration AP-700 User Guide Filtering 74 4. Set the destination Port Number (a value between 1 and 65535) to filter . See the IANA Web site at http://www .iana.org/assignments/port-numbers for a list of assigned port numbers an d their descriptions. 5. Set the Port T ype for the protocol: TCP , UDP , or both ( TCP/UDP ). 6. Set the Int[...]

Advanced Configuration AP-700 User Guide Alarms 75 Alarms The Alarms ta b has the following sub- tabs: • Group s • Alarm Host T able • Syslog • Rogue Scan Group s Alarm group s can be enabled or disab led via the Web interf ace. Place a check mark in the box provided to enable a specific group. Remove the check mark from the box to disable [...]

Advanced Configuration AP-700 User Guide Alarms 76 Security T rap Group Wireless Int erface/Card T rap Group Operational T rap Group T rap Name Description Severity Level oriTrapInvalidEncryptionKey Invalid encryption key has bee n detected. Critical oriTrapAuthenticat ionFailure Client authentica tion failure has occurred. Authenticatio n failures[...]

Advanced Configuration AP-700 User Guide Alarms 77 Flash Memory T rap Group oriTrapDHCPFailed Response to the DHCP client request not received; device not dyna mically assign ed an IP address Major oriTrapDNSClientLookupFailure DNS client attempts to resolve a specified hostname (DNS lookup) and a failur e occurs because eith er the DNS server is u[...]

Advanced Configuration AP-700 User Guide Alarms 78 TFTP T rap Group Image T rap Group SNTP T rap Group In addition, the AP support s these st andard trap s, which are always enable d: RFC 1215-T rap Bridge MIB (RFC 1493) Alarms All these alarm groups cor respond to System Alarms that are displayed in the System S tatus Screen , including the trap s[...]

Advanced Configuration AP-700 User Guide Alarms 79 NOTE: Up to 10 entries are possible in th e Alarm Host t able. • IP Address: Enter the T rap Host IP Address. • Password: Enter the password in the Password field and the Confirm field. • Comment: Enter an optiona l comment, such as the alarm (trap) host st ation name. T o edit or delete an e[...]

Advanced Configuration AP-700 User Guide Alarms 80 Syslog The Syslog messaging system enables the AP to transmit event messa ges to a central server for monitorin g and troubleshooting. The access point lo gs “Session S tart (Log-i n)” and “Session S top (Log-out)” event s for each wirele ss client as an alternativ e to RADIUS accounting. S[...]

Advanced Configuration AP-700 User Guide Alarms 81 • Syslog Lowest Priorit y Logged: The AP will send event messages to the S yslog server that c orrespond to the selected priority number a nd any priority numbers below it. For ex ample, if set to 6, the AP will transmit event messages labeled priori ty 0 to 6 to the Syslog server . Th is paramet[...]

Advanced Configuration AP-700 User Guide Alarms 82 Client Login Authentication Status 6 Informational Client logs in/a uthenticate s. Message includes : • Client MAC Addres s • Authentication T ype = None, ACL, RADIUS MAC, 802.1X • Cipher T ype = None, WEP , TKIP , AES • S t atus = Allow , Deny • SSID to which client is connecting Sample [...]

Advanced Configuration AP-700 User Guide Alarms 83 Rogue Scan The Rogue Scan feature pr ovides an additional security le vel for wireless LAN deploymen ts. Rogue Sca n uses the selected wireless interface(s) fo r scanning its coverage are a for Access Points and client s. A centralized Network Mana ger receives MAC address information from the AP o[...]

Advanced Configuration AP-700 User Guide Alarms 84 The figure above shows Client 1 connected to a T rus ted AP and Client 2 conn ected to a Rogue AP . The Tr usted AP scans the networks, detects Clie nt 2, and notifies the Netw ork Manager . The Network Manager uses SN MP/CLI to query the wired s witch to find the in bound switch po rt of Client 2?[...]

Advanced Configuration AP-700 User Guide Alarms 85 • Channel: the working channel of the detecte d station • SNR: the SNR value of the last frame from the st ation as received by the AP • BSSID: the BSSID field stores the: – MAC address of the associated Access Point in the case of a client. – Zero MAC add ress or MAC addr ess of the part[...]

Advanced Configuration AP-700 User Guide Alarms 86 Figure 4-26 Rogue Sc an Screen[...]

Advanced Configuration AP-700 User Guide Bridge 87 Bridge The AP is a bridge be tween your wired and wirele ss networking d evices. As a bridge, the functions performed b y the AP include: • MAC addres s learning • Forward and filtering decision making • S panning T ree protoc ol used for loop avoidance Once the AP is connected to your networ[...]

Advanced Configuration AP-700 User Guide Bridge 88 Figure 4-27 S p anning T ree Sub-T ab Storm Threshold S torm Threshold is a n advanced Bridge setup option th at you can use t o protect the n etwork against d ata overload by: • S pecifying a maximum number of frames per second as re ceived from a single network device ( identified by its MAC ad[...]

Advanced Configuration AP-700 User Guide Bridge 89 • Wireless Thresh old: Enter the maximu m allowed number of p ackets per second. Intra BSS The wireless client s (or subscribers ) that associate with a cert ain AP form the Basic Service Set (BSS) of a network infrastructure. By default, wireless su bscribers in the same BSS can communicate with[...]

Advanced Configuration AP-700 User Guide QoS 90 QoS Wireless Multimedia Extensions (WME)/Quality of Service (QoS) The AP supports Wireless Mult imedia Enhancements which defines an interm ediate solution for QoS functionality until the IEEE 802.1 1e specification is formally approved. WME is based on a subset of the 802.1 1e st andard, and defines [...]

Advanced Configuration AP-700 User Guide QoS 91 4. T o add a QoS Policy , click the Add button in the “QoS Policies T able” box. The Add Entries box appe ars. Figure 4-29 Add QoS Policy 5. Enter the Policy Name . 6. Select the Policy T ype : • inlayer2 : inbound traf fic direction, Layer 2 traf fic type • inlayer3 : inbound traf fic directi[...]

Advanced Configuration AP-700 User Guide QoS 92 Priority Mapping Use this page to con figure QoS 802.1p to 802.1d priorit y mappings (for layer 2 policies) a nd IP DSCP to 802. 1d priority mappings (for layer 3 policies). The first entry in e ach tab le cont ains the recommen ded priority mapp ings. Custom entries can be added to each table with di[...]

Advanced Configuration AP-700 User Guide QoS 93 Figure 4-31 Add Priority Mapping Entry 3. Select the 802.1p Priority (from 0-7) for 802.1d Priorities 0-7. 4. Click OK . 5. Click Add in the IP Precedence/DSCP rang es and 802.1d Pr iority t able. 6. Select the IP DSCP Range for each 802.1d Priority . 7. Click OK . NOTE: Changes to Priority Mapping re[...]

Advanced Configuration AP-700 User Guide QoS 94 1. Click Configure > QoS > EDCA . Figure 4-32 EDCA T ables 2. Click Edit and configure the following parameters in each table: NOTE: Changes to EDCA parameters re quire a reboot of the AP to take effect. • Index : read-only . Indicates the index of the Access Categor y (1-4) being defined. •[...]

Advanced Configuration AP-700 User Guide QoS 95 • Tx OP Limit : The T ransmission Oppo rtunity Limit. The Tx OP is an interval of time during which a particular QoS enhanced clien t has the right to initiate a fram e exch ange sequence o nto the wireless medium. Th e Tx OP Limit defines the upper limit placed on the value of Tx OP a wirel ess ent[...]

Advanced Configuration AP-700 User Guide Radius Profiles 96 Radius Profiles Configuring Radius Profiles on the AP allows the administrato r to define a pr ofile for RADIUS Servers used by th e system or by a VLAN. The network administrato r can define RADIUS Servers per Auth entication Mode and p er VLAN . The AP communicates with the RADIUS server[...]

Advanced Configuration AP-700 User Guide Radius Profiles 97 Figure 4-33 RADIUS Servers per VLAN This figure shows a network with sep arate authentication se rvers for each authentication type and for each VLAN. The clients in VLAN 1 are au thenticated using the auth entication servers configur ed fo r VLAN 1. The type of authen tication server used[...]

Advanced Configuration AP-700 User Guide Radius Profiles 98 Figure 4-34 RADIUS Server Profiles Adding or Modifying a RADIUS Server Profile Perform the following procedur e to add a RADIUS server profile and to configu re its p arameters. 1. Click Add to create a new profile. T o Modify an existing profile, select the profile and click Edit. T o del[...]

Advanced Configuration AP-700 User Guide Radius Profiles 99 Figure 4-35 Add RADIUS Server Profile • Server Profile Name : the profile name. This is the name used to associat ed a VLAN to the profile. See Configuring Security Profiles . The Server Profile Name is also used in the Configure > Managemen t > Services page to sp ecify the RADIUS[...]

Advanced Configuration AP-700 User Guide Radius Profiles 100 • Destination Port: Enter the port number which th e AP and the server will use to communicate. By default, RADIUS servers communicate on port 181 2. • Server VLAN ID : Indicates the VLAN that uses this RADIUS server profile. If VLAN is disabled, this field will be grayed o ut. • Sh[...]

Advanced Configuration AP-700 User Guide Radius Profiles 101 NOTE: This feature requ ires RADIUS authentication using MAC Access Control or 802 .1 x. Wireless clients configured in the Access Point’s static MAC A ccess Control list are no t tracked. Authentication and Accounting Attribute s Additionally , the AP supports a number of Authentica ti[...]

Advanced Configuration AP-700 User Guide Radius Profiles 102 – Number of octets (bytes) rece ived by subscriber . • Acct-Output-Octets – Number of octets (bytes) sent by subs criber . • Acct-Input-Packets – Number of packets rece ived by subscriber . • Acct-Output-Packets – Number of packets sent by subscriber . • Acct-T erminate Ca[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 103 SSID/VLAN/Security The AP prov ides several security features to pro tect your network from unauthorized a ccess. This section gi ves an overview of VLANs and then discusses the SSID/V LAN/Security configur ation options in the AP: • VLAN Overview • Management VLAN • Security Pr[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 104 Figure 4-36 Component s of a T ypical VLAN VLAN Workgro up s and T raffic Management Access Points that are no t VLAN-capable typ ically transmit broadcast and multicast traf fic to all wireless Ne twork Interface Cards (NICs). This process wastes wirel ess bandwidth and degr ades thr[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 105 T ypical User VLAN Configura tions VLANs segment network traf fic into workgroup s, which enable you to limit broad cast and multicas t traffic. W orkgroups enable client s from dif ferent VLANs to access d if ferent res ources using the sa me network infrastr ucture. Clients usin g t[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 106 3. Place a check mark in the Enable VLAN T agging box. Provide Access to a Wireless Host in the Same Workgroup The VLAN featu re can allow wireless clients to manage th e AP . If the VLAN Managem ent ID matches a VLAN User ID, then those wireless clients who are members of that VLAN w[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 107 • EAP-T unneled T ransport Layer Security (TTLS): Certificate-based authentication (a certific ate is required on the server; a c lient’s username/password is tu nneled to the server ov er a secure connection) ; supports automatic key distribution • PEAP - Protected EAP with MS-[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 108 WP A is a replacement for Wired Equivalent Privac y (WEP), t he encryption techniqu e specif ied by the or iginal 802.1 1 standard. WEP has several vulnerabilitie s that have been widely publicized. WP A addresses these weaknesses and provides a stronger security syst em to protect wi[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 109 VLANs and Security Profiles The AP-700 allows you to segment wirele ss networks into multiple sub-networks based on Network Name (SSID) and VLAN membership. A Network Name (SSI D) identifies a wireless netw ork. Clie nts associate with Access Points that share an SSID. During insta ll[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 110 3. Configure one or more types of wireless stations (sec urity mo des) that are allowed access to the AP under the security profile. The WEP/PSK parameters are sepa rately conf igurable for each security mo de. T o enable a security mode in the profile (Non Secure S t atio n, WEP S ta[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 111 • Cipher: CCMP based on AES • PSK Passphrase: an 8- 63 character user-defined phra se. It is recommended a pass phrase of at least 13 characters, including both letters and num bers, and up per and lower case character s, to ensure that the generated key cann ot be easily deci phe[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 112 Figure 4-40 Security Profile T able - Add Entries[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 113 MAC Access The MAC Access sub-tab allows you to bu ild a list of stations, identified by thei r MAC ad dresses, author ized to access the network through th e AP . The list is stored inside each AP within your network. Note that you must reboot the AP for any changes to the M AC Acce [...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 114 the same system separated per VLAN. See th e Security Profile section for more inform atio n. Each SSID can support a unique VLANs. I n order for the AP to support multiple SSID/VLANs, VLAN T agging mu st be enabled. Thes e parameters are configurable on the Wireless sub-tab. Configur[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 115 6. Enter the Security Profile used by the VL AN in the Se curity Profile field. See the Security Profile section for more information. 7. Define the RADIUS Server Profile Configuration for the VLAN/SS ID: • RADIUS MAC Authentication Profile • RADIUS EAP Authentication Profile • [...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 116 11 . S p e c i f y a QoS profile . See the Enabling QoS and Adding QoS policies section for more information. 12.If editing an entry , enable or disable the p arameters on this page by electing Enab le or Disable from the Statu s drop-down menu. If adding a new entry , this drop-down [...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 117 Figure 4-45 SSID/VLAN Edit Entrie s Screen (VLAN T agging Enabled) 4. Enter a unique Network Name (SSID) between 1 and 32 characters. This p arameter is mandatory . NOTE: Do not use quotation marks (single or double) in the Network Name; this will cause the AP to misinterpret the name[...]

Advanced Configuration AP-700 User Guide SSID/VLAN/Secu rity 118 7. Enable or disable RADIUS acc ounting on the VLAN/SSID under the Accountin g St atus drop -down menu. 8. Enable or disable RADIUS MAC authentication st atus on the VLAN/SSID under the RADIUS Auth entication Status drop-down men u. 9. Enable or disable MAC Access Control List st atus[...]

119 AP-700 User Guide 5 Monitoring This chapter discusses the followin g monitoring optio ns: • Ve r s i o n : Provides version information for th e Access Point’s system components. • ICMP: Displays statistics for Internet Contro l Message Protocol packet s sent and received by the AP . • IP/ARP T able: Displays the AP’s IP Address Resol[...]

Monitoring AP-700 User Guide Ve r s i o n 120 Ve r s i o n From the HTTP interface, click the Monitor button and select the Ve r s i o n tab. The list displayed provides you with information that may be pertinent when calling T echnical Su pport. With this informati on, your T echnical Support representative can verify comp atibility i ssues and ma[...]

Monitoring AP-700 User Guide ICMP 121 ICMP This tab pr ovides statistical information fo r both received and transmitted messa ges directed to the AP . Not all ICMP traffic on the network is count ed in the ICMP (Internet Contro l Message Protocol) st atistics. Figure 5-3 ICMP Monitoring T ab IP/ARP T able This tab pr ovides information based on th[...]

Monitoring AP-700 User Guide Learn T able 122 Learn T able This tab displays information relating to network bridging . It report s the MAC address for each node that the device has learned is on the netwo rk and the interface on wh ich the node was d etected. There can be up 10,000 entries in the L earn Ta b l e . Figure 5-5 Learn T able Monitorin[...]

Monitoring AP-700 User Guide RADIUS 123 RADIUS This tab provides RADIUS au thentication, EAP/802.1x authen tication, and accounting info rmation for both the Primary and Backup RADIUS servers for each RADIUS Server Profile. NOTE: Separate RADIUS servers can be config ured f or each RADIUS Serv er Profile. Select the RADIUS Server Profile to view st[...]

Monitoring AP-700 User Guide Interfaces 124 Interfaces This ta b displays st atistics for the Ethe rnet and wireless interfaces. Figure 5-8 Interfa ce Monitoring T ab (Ethernet) Description of Interface St atistics The following statistics are displayed for th e Ethernet inte rface only , the wireless interface only , or for both the Ethernet and w[...]

Monitoring AP-700 User Guide Interfaces 125 • Duplicate Frame Count (Wireless) : The number of duplicate frames received. • Ethernet Chipset (Ethernet) : Identifies the chipset used to realize the interface. • Excessive Collisions ( Ethernet) : The number of frames for which transmi ssion fails due to excessive collisions. • Failed ACK Coun[...]

Monitoring AP-700 User Guide Interfaces 126 • Out Discards (Ethernet/Wireless) : The number of error-free outbound p ackets ch osen to be discarded to prevent their being transmitted. One possible rea son for discar ding such a p acket could be to free up bu ffer space. • Out Errors (Ethernet/Wir eless) : The number of outbound packet s that co[...]

Monitoring AP-700 User Guide S t ation S tatistics 127 S t ation S t atistics This tab displays information on wir eless clients att ached to the AP and on Wireless Distrib ution System links. Enable the Monitoring S tation S t atistics feature (S tation S t atistics are disabled by default) by checking Enable Monitoring S t ation S t atis tics and[...]

Monitoring AP-700 User Guide S t ation S tatistics 128 • Number of Client s : The number of st ations and WDS links monitored . The following sta tions statistics are available thr ough SNMP: • Octet s Receiv ed : The number of octet s received from the associated wire less station ( or WDS link p artner) b y the AP . • Unicast Frames Receive[...]

129 AP-700 User Guide 6 Commands This chapter contain s information on the following Command functions: • Introduction to File T ransfer via TFTP or HT TP : Describes the available file tra nsfer methods. • Update AP via TFTP: Download files from a TFTP server to the AP . • Update AP via HTTP: Download files to the AP from HTTP . • Retrieve[...]

Commands AP-700 User Guide Introduction to File T ransfer via TFTP or HTTP 130 • Uploading files (Configura tion, CLI Batch F ile) from the AP is called “Retrieving Files.” TFTP File T ransfer Guidelines A TFTP server must be running and configure d to point to the directory containing the file. If you do not have a TFTP server inst alled on [...]

Commands AP-700 User Guide Update AP 131 Up date AP Up date AP via TFTP Use the Update AP via TFTP tab to download Co nfiguration, AP Image, Bootloader files, Certif icate and Private Key files, and CLI Batch File to the AP . A TFTP server must be running a nd configured to point to the directory cont aining the file. Figure 6-2 Up date AP via TFTP[...]

Commands AP-700 User Guide Update AP via HTTP 132 – CLI Batch File : a CLI Batch file that contains CLI commands to configure the AP . This file will be executed by the AP immediately af ter being uploa ded. See CLI Batch File for more in formation. • File Operation: Select either Up date AP or Up date AP & Reboot . Y ou should re boot the [...]

Commands AP-700 User Guide Retrieve File 133 A warning message gets displayed that advises the user that a reboot of the device will be required for changes to take ef fect. Figure 6-4 W arning Mess age 4. Click OK to continue with the operation or Cancel to abor t the operation. NOTE: An HTTP file transfer using SSL may take extra time. If the ope[...]

Commands AP-700 User Guide Retrieve File 134 – Double-click the TFTP server icon on your desktop an d locate the IP address assigne d to the TFTP server . • File Name: Enter the name of the file to be upload ed. • File T ype : Select the type of file to be uploaded: Config file, CLI Batch File, or CL I Batch (Error) Log. Use the followin g pr[...]

Commands AP-700 User Guide Retrieve File 135 Click on the Retrieve File button to initiate th e operation. Figure 6-8 Retrieve File via HTTP Comma nd Screen A confirmation message is displayed, asking if t he user want s to proceed with retrieving the file. Figure 6-9 Retrieve File Confirma tion Dialog Click OK to continue with the oper atio n or C[...]

Commands AP-700 User Guide Reboot 136 On clicking the Save button the Save As window displays, wh ere the user is p rompted to choo se the filename an d location where the file is to be downloaded. Sele ct an appropriate filena me and location and click OK . Reboot Use the Reboot t ab to save configuration changes (if an y) and reset the AP . Enter[...]

Commands AP-700 User Guide Help Link 137 Help Link Use the Help tab to configure the location of the AP Help files. During initialization, the AP on-line help files are downloaded to the de fault location: C:/Program Files/ORiNOC O/AP700/HTML/index.htm . T o enable the Help button on each p age of the W eb inte rface to access the help files, ho we[...]

138 AP-700 User Guide 7 T roubleshooting This chapter prov ides in formation on the following: • T roubleshooting Concept s • Symptoms and Solutions • Recovery Procedures • Related Applications NOTE: This section helps you locate problems related to the AP device setup. For details about RADIUS, TFTP , serial communication program s (such a[...]

T r oubleshooting AP-700 User Guide Symptoms and Solutions 139 Serial Link Does Not W ork 1. Make sure you are using a st and ard, straight-throu gh, 9-pin serial cable. 2. Double-check the physical network connections. 3. Make su re your PC termin al program (suc h as HyperT erminal) is active and config ured to the follow ing values: – Com Port[...]

T r oubleshooting AP-700 User Guide Symptoms and Solutions 140 6. Perfor m the Reset to Factory De fault Procedure in this guide. This will reset th e unit to “DHCP” mode. If there is a DHCP Server on the network, the DHCP Serv er will assign an IP Address to the AP . HTTP Interface or T e lnet Interface Does N ot Work 1. Make sure you are usin[...]

T r oubleshooting AP-700 User Guide Symptoms and Solutions 141 Client PC Card Does Not Work 1. Make sure you are using the latest PC Card driver softwa re. 2. Download and install the latest ORiNOCO client softwa re from http://support.proxim.com . Intermittent Loss of Connect ion 1. Make sure you are within range of an active AP . 2. Y ou can chec[...]

T r oubleshooting AP-700 User Guide Recovery Procedures 142 4. T ry using a dif ferent Ethernet cable – if it works, there is probably a faulty connection over the long cable, or a bad RJ-45 connec tion. 5. Check power plug and hub. 6. If the Ethernet link goes down, check the cable, cable type, switch, a nd hub. There Is No Dat a Link 1. V erify[...]

T r oubleshooting AP-700 User Guide Recovery Procedures 143 1. While the unit is running, press the RESET button. NOTE: Y ou need to use a pin or the end of a paperclip to press a button. The AP reboot s and the indicators begin to flash . CAUTION: By completing Step 2, the firmware in the AP will be erased. Y ou will need an Ethe rnet connection, [...]

T r oubleshooting AP-700 User Guide Recovery Procedures 144 1 1. Click OK when prompted that the device has been updated successfully to return to the Scan List screen. 12. Click Cancel to close the ScanT ool. 13.When the download process is complete, configure th e AP as described in Installation a nd Initialization an d Advanced Configuration . D[...]

T r oubleshooting AP-700 User Guide Recovery Procedures 145 [Device name]> show [Device name]> set ipaddrtype static [Device name]> set ipaddr 10.0.0.12 [Device name]> set ipsubmask 255.255.255.0 [Device name]> set tftpipaddr 10.0.0.20 [Device name]> set tftpfilename MyImage.bin [Device name]> set ipgw 10.0.0.30 [Device name]&g[...]

T r oubleshooting AP-700 User Guide Related Applications 146 [Device name]> Please enter password: 4. Enter the C LI p assword (def ault is public ). The terminal displays a welcome message and then the CLI Prompt: [Device name] > 5. Enter show ip . Network parameters appear: Figure 7-1 Result of “show ip” CLI Command 6. Change the IP add[...]

T r oubleshooting AP-700 User Guide Related Applications 147 If a TFTP server is not configured and runnin g, you will no t be able to download and up load images and configuration files to/from the AP . Remember that th e TFTP server does not have to be local, so long as you have a valid TFTP IP address. Note that you do not need a TFTP server run[...]

148 AP-700 User Guide A Command Line Interface (CLI) This section discusses the following: • General Notes • Command Line Interface (CLI) V ariations • CLI Command T ypes • Using T ables and S tring s • Configuring the AP using CLI commands • Set Basic Configuration Parame ters using CLI Commands • Other Network Settings • CLI Monit[...]

Command Line Interface (CLI) AP-700 User Guide General Notes 149 • Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer file s from the Access Point. The TFTP server performs file tr ansfers in both directions. • Group - A logical collection of network p arameter infor mation. For example, the System Gro up is co[...]

Command Line Interface (CLI) AP-700 User Guide Command Line Interface (CLI) V ariations 150 Command Line Interface (CLI) V ariations Administrators use the CL I to control Access Point operatio n and monitor ne twork statistics. The AP support s two types of CLI: the Bootloader CLI and the no rmal CLI. The Bootload er CLI provides a limited comman [...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 151 Figure A-2 Result s of “show” bootloader CLI command CLI Command T ypes This guide divides CLI Comman ds into two categories: Operational and Para meter Controls. Operational CLI Commands These commands af fect Access Point behavior , such as downloading, rebooting, and so on[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 152 [Device-Name]> ? Figure A-3 Result of “?” CLI command Example 2. Display specifi c Commands T o show all commands that start with specifie d letters, enter one or more letters, then ? with no sp ace between letters and ? . [ Device-Name]> s? Figure A-4 Result of “s??[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 153 Example 3b. Display parame ters based o n letter sequen ce This example shows entries fo r parame ters that sta rt with the letter “i”. The more letters you enter , the fewer the results returned. Notice that ther e is no space be tween the letter s and the question m ark. [D[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 154 Example: [Device-Name]> download 192.168.1.100 APImage2 img 2. Syntax to display he lp and usage information: [Device-Name]> download 3. Syntax to execut e the download Comma nd using previously set (sto red) TFTP Paramet ers: [ Device-Name]> download * help Displays ins[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 155 reboot Reboots Access Point af ter specified num ber of seconds . S pecify a value of 0 (zero) for immediate reboot. [Device-Name]> reboot 0 [Device-Name]> reboot 30 search Lists th e parameters suppo rted by the specified table . This list corresponds to the table informat[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 156 Syntax: [Device-Name]> show <parameter> [Device-Name]> show <group> [Device-Name]> show <table> Examples: [Device-Name]> show ipaddr [Device-Name]> show network [Device-Name]> show mgmtipaccesstbl “set” CLI Command Sets (modifies) the value[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 157 Example 1 - Set the Access Point IP Addres s Parameter Syntax: [Device-Name]> set <parameter name> <parameter value> Example: [Device-Name]> set ipaddr 10.0.0.12 IP Address will be changed when you reboot the Acces s Poin t. The CLI reminds you when rebooting is[...]

Command Line Interface (CLI) AP-700 User Guide CLI Command T ypes 158 Example 5 - Show the Group Para meters This example illustrates how to view all elements of a group or table. Syntax: [Device-Name]> show <group name> Example: [Device-Name]> show network The CLI displays network gro up param eters. Note show network and show ip retu [...]

Command Line Interface (CLI) AP-700 User Guide Using T ables and S trings 159 Using T ables and S trings Working with T ables Each table element (or paramete r) must be specified, as in the example below . [Device-Name]> set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0 Below are the rules for creating, modifying, enabling/disabling, and[...]

Command Line Interface (CLI) AP-700 User Guide Configuring the AP using CLI commands 160 The string delimiter does no t have to be used for every string object. The single qu ote or double quote only has to be used for string object s that cont ain blank sp ace characte rs. If the string ob ject being used does not contain blank spaces, then the st[...]

Command Line Interface (CLI) AP-700 User Guide Set Basic Configuration Parameters using CLI Commands 161 • Download an AP Configuration F ile from your TFTP Server • Backup your AP Configuration File Set System Name, Location and Cont act Information [Device-Name]> set sysname <system name> sysloc <Unit Location> [Device-Name]>[...]

Command Line Interface (CLI) AP-700 User Guide Set Basic Configuration Parameters using CLI Commands 162 Figure A-13 Result s of “s how wif” CLI command for an AP Enable 802.1 1d Support and Set the Country Code Perform the following command to enable 802.1 1d IEEE 802.1 1d support for additional regulatory domains. [Device-Name]>set wif 3 d[...]

Command Line Interface (CLI) AP-700 User Guide Set Basic Configuration Parameters using CLI Commands 163 Enable and Configure TX Power Contr ol for the Wireless Inte rface(s) The TX Power Control feature let s the user configure the transmi t power level of the card in the AP at one of fo ur levels: • 100% of the maximum transmit power level of t[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 164 Example: [Device-Name]> set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication" radacctprofile "Accounting" radmacauthstatus enable aclsta[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 165 • Configure the AP as a DHCP Server • Configure the DNS Client • Configure DHCP Relay and Configure DHCP Relay Servers • Maintain Client Connection s using Link Integrity • Change your Wireless Interface Settings • Set Ethernet S peed and T ransmission Mode • Se[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 166 Configure DHCP Relay Perform the following command to enable or disable DHCP Relay Agent S tatus. NOTE: Y ou must have at least one entry in the DHCP Relay Server T able before yo u can set the DHCP Relay Status to Enable. [Device-Name]> set dhcprelaystatus enable Configur[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 167 Shutdown/Resume Wire less Service [Device-Name]> set wif <index> wssstatus <1 (resume)/2 (shutdown)> Set Load Balancing Maximum Number of Client s [Device-Name]> set wif <index> lbmaxclients <1–63> Set the Multicast Ra te (802.1 1a) [Device-Nam[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 168 Set Ethernet S peed and T ransmission Mode [Device-Name]> set etherspeed <value> (see below) [Device-Name]> reboot 0 Set Interface Ma nagement Service s Edit Management IP Access Ta ble [Device-Name]> set mgmtipaccesstbl <index> ipaddr <IP address> [...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 169 Configure Secure Socket Layer (HTTPS) Enabling SSL and configuring a passphrase allows encrypted Secure Socket Layer communications to the AP through the HTTPS interface. [Device-Name]> set sslstatus <enable/disable> The user must change the SSL passphrase when uploa[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 170 Configure Intra BSS [Device-Name]> set intrabssoptype <passthru (default)/block)> Configure Wire less Distribution System Create/Enable WDS [Device-Name]> set wdstbl <Index> partnermacaddr <MAC Address> status enable Enable/Disable WDS [Device-Name]>[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 171 [Device-Name] set radiustbl 1.2 profname "MAC Authentication" seraddrfmt 1 sernameorip 20.0.0.30 port 1812 ssecret public responsetm 3 maxretx 3 acctupdtintrvl 0 macaddrfmt 1 authlifetm 900 radaccinactivetmr 5 vlanid 33 status enable [Device-Name]> show radiustbl[...]

Command Line Interface (CLI) AP-700 User Guide Other Network Settings 172 Set Rogue Scan Parameters Perform the following command to enable or disable Rogue Scan on a wireless interface and configure the scanning parame ters. The cycletime parameter is only co nfigured for backgrou nd scanning mode. [Device-Name]> set rscantbl <3, 4> mode [...]

Command Line Interface (CLI) AP-700 User Guide CLI Monitoring Parameters 173 Set Security Profile Parameters Configure a Security Profile wi th Non Secure Security Mode [Device-Name]> set secprofiletbl <index> secmode nonsecure status enable Example: [Device-Name]>set secprofiletbl 2 secmode nonsecure status enable Configure a Security [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 174 • st atiapp: Displays the IAPP statistics. • st atradius: Displays the RADIUS Authentication statistics. • st atif: Displays in formation an d statistics a bout the Ethernet and wire less interfaces. • stat802.1 1 : Displays additional statistics for the wireless interface[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 175 – IP Access T able Parameters - Configure range of IP addresses that can acce ss the AP – Auto Configuratio n Parameters - Configur e the Auto Configuration featur e which allows an AP to be automatically configured by downloading a co nfiguration file from a TF TP server duri[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 176 System Parameters Inventory Management Inf ormation NOTE: The inventory manage ment commands display advance d information about the AP’ s inst alled component s. Y ou may be asked to report this in fo rmation to a representative if you co nt act customer support. Name T ype V a[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 177 Network Parameters IP Configuration Parameters NOTE: The IP Address Assignment T ype (ipaddrtyp e) must be set to static be fore the IP Address (ipadd r), IP Mask (ipmask) or Default Gateway IP Address ( ipgw) values can be entered. DNS Client for RADIUS N ame Resolution DHCP Serv[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 178 DHCP Server table f or IP pools NOTE: Set either End IP Address or Wid th (b ut not both) when creating an IP address pool. DHCP Relay Group The DHCP Relay Group allows you to enab le or disable DHCP Relay Agent St atus. DHCP Relay Server T able The DHCP Relay Server T able contai[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 179 SNTP Parameters Link Integrity Parameters Link Integrity IP T arget T able Name T ype V alue Access CLI Parameter SNTP Group Group N/A R sntp SNTP Status Integer en able disable RW sntpstatus Primary Server Name or IP Address DisplayString 0 - 255 charac ters RW sn tpprisvr Second[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 180 Interface Parameters Wireless Interf ace Parameters The wireless interface gr oup para meter is wif . For Single -radio APs, the wirele ss interface uses t able index 3. Common Parameters to 80 2.1 1a/b/g * For 802.1 1a APs certified in the ETSI regulatory domain and operating in [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 181 802.1 1a Only Parameters * Super mode must be enabled on the wireless interface before Turbo mode can be enabled. Name T ype V alue Access CLI Parameter Operating Frequency Channel Integer Varies by regulatory domain and country. See Availa ble Channels RW channel Supported Data R[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 182 802.1 1b Only Parameters 802.1 1b/g Only Parameters Name T ype V alue Access CLI Parameter Operating Frequency Channel Integer 1 - 14; available channels vary by regulatory domain/country; see Availa ble Channels RW channel Multicast Rate Intege r 1 Mbits/sec (1) 2 Mbits/sec (2) ([...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 183 * Also for 802.1 1g-wifi mod e. 802.1 1g-wifi has been defined for Wi-Fi testing purposes; it is not recommended for use in your wi reless netw ork environment. † Super mode must be enabled on the wireless interface before Turbo mode can be enabled. Transmit Ra te Integer32 For [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 184 Channel Blackli st Parameters Wireless Distribution System (WDS) Parameters Wireless Int erface SSID/V LAN/Profile Parameters The Wireless Interface SSID t able manages the SSIDs, VLAN s, Security Profiles, and RA DIUS Profiles associated to each SSID. For configuration examples, [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 185 Wireless Distr ibution System (WDS) Secur ity T able Parameters The WDS Security T able manages WDS related security object s. Ethernet Interface Parameters Management Parameters Secure Management Parameters SNMP Parameters RADIUS MAC Profile DisplayStri ng User defined RW radmacp[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 186 Read/Write Password DisplayString User Defined public (default) 6 - 32 characters W snmprwpas swd SNMPv3 Authentication Password DisplayString User Define d public (default) 6 - 32 characters W snmpv3aut hpasswd SNMPv3 Privacy Password DisplayString User Define d public (default) [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 187 HTTP Parameters * The help link must be set to an HTTP address. Use the for ward sl ash character ("/") rather than the backslash character ("") when configur- ing the Help Link location. T e lnet Parameters Name T ype V alue Access CLI Parameter HTTP Group N/[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 188 Serial Port Parameters RADIUS Based Manageme nt Access Parameters The RADIUS Based Managem ent Access pa rameters allow yo u to enable HTTP or T elnet Radius Management Access, enable or disable loca l user access, and configure the local user password. The default local user ID i[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 189 Auto Configurat ion Parameters These par ameters relate to the Auto Co nfiguration featur e which allows an AP to be automatically configured by downloading a specific configur ation file fr om a TFTP ser ver during the boot up process . TFTP Server Parameters These par ameters re[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 190 Filtering Parameters Ethernet Protocol Filtering Parame ters Ethernet Filtering T able Identify the dif ferent filters by using the t able index. NOTE: The filter Oper ation T ype (passthru or block) applies only to the p rotocol filters th at are enabled in this table. St atic MA[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 191 Proxy ARP Parameters IP ARP Filtering Parameters Broadcast Filtering T able TCP/UDP Port Filtering The following pa rameters are used to en able/disable the Po rt filter feature. TCP/UDP Port Filtering T able The following para meters are used to configure TCP/UDP Po rt filters. N[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 192 Alarms Parameters SNMP T able Host T able Parameters When creating table entries, you may e ither specifying the argument nam e followed by argument value. CL I applies default valu es to the omitte d arguments. Due to the nature of the information, the only argum ent that can be [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 193 NOTE: When Heartbeat is en abled, the AP periodically send s a message to the Syslog serv er to indicate that it is active. The frequency with which the heartbeat messa ge is sent dep ends upon the setting of the He artbeat Interval. Syslog Host T able The table described below co[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 194 Bridge Parameters Sp anning T ree Parameters Spanning T ree Priority and Path Cost T able Storm Threshold Parameters Name T ype V alue Access CLI Parameter Spanning Tree Group N/A R stp Spanning Tree Status Integer enable (default) disable RW stpstat us Bridge Priority Inte ger 0 [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 195 S torm Threshold T able Intra BSS Subscriber Blocking The following parameter s control the Intra BSS traffic feature, w hich prevent wireless clients that ar e associated with the same AP from communicating with each oth er: Packet Forwarding Parameters The following parame ters [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 196 RADIUS Parameters General RADIUS Parameters RADIUS Server Configuration Paramete rs NOTE: Use a server name only if you have enabl ed the DNS Client functionality . See DNS Client for RADIUS Name Resolution . Name T ype V alue Access CLI Parameter RADIUS Group N/A R radius Client [...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 197 Security P arameters MAC Access Control Parameters MAC Access Control Ta ble Rogue Scan Configuration T able The Rogue Scan Configuration T able allows you to enab le or d isable Rogue Scan a nd configure th e scanning parame ters. Hardware Configurat ion Reset The Hardwa re Confi[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 198 VLAN/SSID Parameters Security Profile T able The Security Profile T able allows you to configure security profiles. A maximum of 16 security profiles are suppor ted per wireless interface. Each security profile can be enable and configur e one or more security modes (None Secure S[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 199 Other Parameters IAPP Parameters NOTE: These parameters conf igure the Inter Access Point Protocol (IAPP) for roaming. Leave these settings at their default value unless a technical re pres ent ative asks you to chang e them. Wireless Multimedia Enhancement s (WME )/Quality of Ser[...]

Command Line Interface (CLI) AP-700 User Guide Parameter T ables 200 * QoS must be enabled on the wireless interface before spectralink can b e enabled. † A priority mapping needs to be specified for a QoS Policy . The priority mapping depends on the type of policy configured. For Layer 2 policy types (inbound or outbound) a mapping index from th[...]

Command Line Interface (CLI) AP-700 User Guide CLI Batch File 201 QoS Enhanced Distri buted Channel Access (EDCA) Parameters The following commands configur e the client (ST A) and AP Enhanced Distributed Chan nel Access (EDCA) para meters. The EDCA parameter set provides information need ed by the client st ations for proper QoS operation dur ing [...]

Command Line Interface (CLI) AP-700 User Guide CLI Batch File 202 executes the CLI commands. Comma nds that do not require a reboot take ef fect immediately , while commands that require a reboot (typically comma nds affecting a wireless interface) will take effect af ter reboot. Auto Configuration a nd the CLI Batch File The Auto Configuration fea[...]

Command Line Interface (CLI) AP-700 User Guide CLI Batch File 203 • Upload and reboot (this option is to be u sed for a CLI Batc h file containing the configuration paramete rs that require a reboot) CLI Batch File Error Log If there is any error during the executio n of the CLI Batch file, the AP will stop ex ecuting the file. The AP generates t[...]

204 AP-700 User Guide B ASCII Character Chart Y ou can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digit s are 0-9 and A-F (not case s ensitive). ASCII ch aracters are 0- 9, A-F , a-f (c ase sensitive), and punctuation marks. Each ASCII character correspond s to two hexade cimal digits. The table below lists the[...]

205 AP-700 User Guide C Specifications • Software Features • Hardware S pecifications • Availab le Channels • RF Performance Sof tware Features The tabl es below list the softwar e features available on the AP-70 0. • Number of St ations per BSS • Management Functions • Advanced Bridging Functions • Medium Access Control (MAC) Funct[...]

Specifications AP-700 User Guide Software Features 206 Advanced Brid ging Functions Medium Access Contro l (MAC) Functions * DFS is required for 802.1 1a APs certified in the ETSI r egulatory domain and operating in the middle frequency band. When ACS i s disa bled, available channels are li mited to those in the lower f requency band. See Dynamic [...]

Specifications AP-700 User Guide Software Features 207 ‡ Support is provided for a primary and backup RADIUS authenticat ion server for both MAC -based authentication and 802.1x authent ication per VLAN. § Use in conjunction with WP A o r 802.1x Authentication. Network Functions * Includes Fallback to Primary RADIUS Server , RADI US Session T im[...]

Specifications AP-700 User Guide Hardware S pecifications 208 Hardware Specifications Physical Specifications Dimensions (H x W x L) = 6.5 x 18.5 x 26 cm (2.5 x 7.25 x 10.25 in.) Weight = 1.75 Kg (3.5 lb.) Electrical Specifications V oltage = 100 to 240 V AC (50-60 Hz) Current = 0.2 amp Power Consumption = <9 W atts (power supply) Environment al[...]

Specifications AP-700 User Guide Available Channels 209 A vailable Channels Availa ble channels vary based on o perational mode and co untr y . T o verify which channels are available for you r product: 1. Locate the product SKU on the underside of your AP unit or on the unit’s box. 2. Note the alphanumeric code following the number 8675. (e.g., [...]

Specifications AP-700 User Guide RF Performance 210 RF Performance The following tables show typical AP-7 00 RF perform ance values. 802.1 1a RF Performance * V alues are for FCC-certified products. They may dif fer for products certified in other regulatory domains. 802.1 1b/g RF Performance * V alues are for FCC-certified products. They may dif f[...]

211 AP-700 User Guide D T echnical Support If you are having a prob lem using an AP and cannot resolve it with the information in T roubleshooting , gather the following information and co ntact your local reseller: • List of ORiNOCO products installed o n your network; include the following: – Product names and quantity – Part numbers (P/N) [...]

T echnical Support AP-700 User Guide T elephone Support 212 Submit a Knowledgebase question or open an issue at: <http://support.proxim.com/cgi-bin/p roxim.cfg/php/enduser/ask.php>. Our technical support staf f will reply to you by email. NOTE: The Knowledgebase is available to all website visitors. First-time us ers will be asked to create a[...]

213 AP-700 User Guide E St atement of W arranty W arranty Coverage Proxim Corpor ation warrant s that it s Product s are manu fa ctured so lely from new par ts, conform subst antially to specifications, and will be free of defects in material and workm anship for a W arranty Period of 1 year from the date of purchase. Rep air or Replacement In the [...]

St atement of W arranty AP-700 User Guide Other Information 214 Calls to the Customer Servic e Center for reasons other t han Product failure will not be accepted unless Buyer has purchased a Proxim Service Contract or th e call is made within the first thirty (30) days of the Product’ s invoice date. Calls that are outside of the 30-day free sup[...]

215 AP-700 User Guide F Regulatory Compliance NOTE: Please read this sectio n before installing and us ing your product, and sa ve these instructions. Visit http://support.proxim.com for the latest regulato ry complianc e information. This section contains impo rtant reg ulatory compliance information and det ails for the following product s: Pleas[...]

Regulatory Compliance AP-700 User Guide Safety Information (USA, Canada, & European Union) 216 Safety Information (USA, Ca nada, & European Union) This product has b een evaluated to, and complies with, the Safety requirement s of UL60 95 0:2000, and IEC60950:1999; the S t andard s for the Safety of Inform ation T echnology Eq uipment. When[...]

Regulatory Compliance AP-700 User Guide Federal Communications Commission (FCC) 217 Federal Communication s Commission (FCC)[...]

Regulatory Compliance AP-700 User Guide Federal Communications Commission (FCC) 218 W arnings This equipment gene rates, uses, and can radiate ra dio freque ncy energy; and, if not installed an d used in accordance with the instructions, may cause harm ful interference to ra dio commu nications. However , there is no guarantee that interference wil[...]

Regulatory Compliance AP-700 User Guide Industry Canada (IC) 219 Industry Canada (IC)[...]

Regulatory Compliance AP-700 User Guide European Union 220 European Union NOTE: European Union includes th e following countries: Austria, Belgium, Cyprus, Czech Re public, Denmark, Estonia, Finland, France, Ger many , Greece, Hungary , Ireland, Italy , Latvia, Lithuania, L uxembourg, Malt a, Netherlands, Poland, Portugal, Slovakia, Slovenia, Sp ai[...]

Regulatory Compliance AP-700 User Guide Regulatory Compliance Certifications Summary 221 Regulatory Compliance Certifications Summary * European Union includes the following countries: Austria, Belgiu m, Cyprus, Czech Republic, Denmar k, Estonia, Finland, France, Germany , Greece, Hungary , Ireland, Italy , Latvia, Li thuania, Luxembourg, Malta, Ne[...]