Symbol Technologies AP-5131 manual

AP-5131 Access Point Product Reference Guide[...]

[...]

AP-5131 Access Point Product Reference Guide 72E-94168-01 Revision A November 2006[...]

[...]

© 2006 by Symbol T echnologies, Inc. All rights reserved. No part of this publication may be reproduced or used in any form, or by any electrical or mechanical means, without permission in writing from Symbol. This includes electronic or mechanical means, such a s photocopying, recording, or information storage and retrieval systems. The material [...]

[...]

Contents About This Guide Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii Notational Conventions . . . . . . . . . . . . . . . . . . . . . . . . .[...]

AP-5131 Access Poin t Product Referen ce Guide iv Single or Dual Mode Radio Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6 Separate LAN and WAN Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7 Multiple Mounting Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

v MU Association Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-22 Operating Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 Management Access Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 Chapter 2. Hardwar[...]

AP-5131 Access Poin t Product Referen ce Guide vi Testing Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13 Where to Go from Here? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14 Chapter 4. System Configuration Configuring System Settings . . . . . . . . . [...]

vii Setting the WLAN’s Radio Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-45 Configuring the 802.11a or 802.11b/g Radio . . . . . . . . . . . . . . . . . . . . . 5-48 Configuring Bandwidth Management Settings . . . . . . . . . . . . . . . . . . . . . . . . 5-55 Configuring Router Settings . . . . . . . . . . . . . . . .[...]

AP-5131 Access Poin t Product Referen ce Guide viii Mapping Users to Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-71 Defining the User Access Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-72 Chapter 7. Monitoring Statistics Viewing WAN Statistics . . . . . . . . . . . . . . . . . .[...]

ix Network ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-80 Network Radio Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . 8-85 Network Quality of Service (QoS) Commands . . . . . . . . . . . . . . . . . . . . 8-102 Network Bandwith Management Commands . . . . . . . . . . . . . . . . [...]

AP-5131 Access Poin t Product Referen ce Guide x Appendix A. Technical Specifications Physical Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2 Electrical Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2 Radio Characteristics [...]

About This Guide Introduction This guide pr ovides configuration a nd setup info rmation for the AP-5131 model ac cess point. Document Conventions The following document conv entions are used in this document: NOTE Indicate tips or special requirements. CAUTION Indicates conditions that can cause equipme nt damage or data loss. ![...]

AP-5131 Access Poin t Product Referen ce Guide viii Notational Conventions The following notational convention s are used in this document: • Italics are used to highlight specific items in the general text, and to identify chap ters and sections in this and rela ted documents. • Bullets (•) indicate: • action items • lists of alternative[...]

AP-5131 Introduction The Symbol AP-5131 Access Point (AP) provides a bridge between Ethe rnet wired LANs or W ANs and wireless networks. It provides conne ctivity be tween Etherne t wired networks and radio-equipped mobile units (MUs). MUs include th e full line of Symbol terminal s, bar -code scanners, adapters (PC cards, Compact Flash cards an d [...]

AP-5131 Access Poin t Product Referen ce Guide 1-2 1.1 New AP-5131 Features With this most recent 1.1 release of the AP-5131 firmware, the following new featu res have been introduced to the existing AP-5131 feature set: • Mesh Networking • Additional LAN Subnet • On-board Radius Server Authentication • Hotspot Support • Routing Informati[...]

AP-5131 Introduct ion 1-3 Once the AP-5131 (in client bridge mode) establis hes at least one wireless conn ection, it establishes other wireless connections in the bac kground as they become available. In this way , the AP-5131 is able to establish simultaneous redundant links. An AP-5131 (in client bridge mode) c an establish up to 3 simultaneous [...]

AP-5131 Access Poin t Product Referen ce Guide 1-4 1.1.3 On-board Radius Server Authentication The AP-5131 n ow has the ability to work as a Radius Server to pro vide user database information and user authentication. Sev eral new screens have been added to the AP-5131’ s menu tree to configure Radius server authentica tion and configure the lo c[...]

AP-5131 Introduct ion 1-5 1.1.5 Routing Information Protocol (RIP) With the release of the 1.1 version AP-5131, Routing Informatio n Protocol (RIP) fu nctionality has been added to the AP-5131 ’ s existing Router screen. RIP is an interior ga teway protocol that sp ecifies how routers exchange rou ting-table information. The pa rent Router screen[...]

AP-5131 Access Poin t Product Referen ce Guide 1-6 1.2 Feature Overview The Symbol AP-5131 has the followin g existing features carried forward from its initial 1.0 release: • Single or Dual Mode Radio Op tions • Separate LAN and WAN Ports • Multiple Mounting Options • Antenna Support for 2.4 GHz and 5.2 GHz Radios • Sixteen Configurable [...]

AP-5131 Introduct ion 1-7 If the AP-5131 is manufactured as a dual-radio access point, the AP-5131 enables you to configure one radio for 802.11a, and the othe r 802.11b/g. For detailed information on config uring your AP-5131, see Setting the WLAN’ s Radio Configuration on page 5-45 . 1.2.2 Separate LAN and WA N Ports The AP-5131 has one LAN por[...]

AP-5131 Access Poin t Product Referen ce Guide 1-8 For an overview of the Radio 1 (2.4 GHz) and Radio 2 (5.2 GHz) antennas supported on the AP-5131’ s Reverse SMA (RSM A) connectors, see Antenna Sp ecifications on page A-4 . 1.2.5 Sixteen Configurable WLANs A Wireless Local Area Network (WLAN) is a data-com munications system tha t flexibly exten[...]

AP-5131 Introduct ion 1-9 1.2.7 Quality of Serv ice (QoS) Support The AP-5131 QoS implementation provides applic ations running on different wireless devices a variety of priority levels to transmit data to and fro m the AP-5131. Equal data transmission prio rity is fine for data traffic from applications such as Web browsers, file transfers or ema[...]

AP-5131 Access Poin t Product Referen ce Guide 1-10 • Content Filtering For an overview on the encryption and authentication schemes available on the AP-5131, refer to Configuring Access Point Security on page 6-1 . 1.2.8.1 Kerberos Authentication Authentication is a means of verifying informat ion that is transmitted from a secure source. If inf[...]

AP-5131 Introduct ion 1-11 An MU is not able to acces s the network if not au thenticated. When config ured for EAP support, the access point displa ys the MU as an EAP station. EAP is only supported on mobile de vices running Windows XP , Windows 2000 (using Service Pack #4) and Windows Mobile 2003 . Refer to the s ystem administra tor for informa[...]

AP-5131 Access Poin t Product Referen ce Guide 1-12 1.2.8.4 KeyGuard Encryption Use KeyGuard to shield the master e ncryption keys from bein g discovered through hac king. KeyGuard negotiation takes place between the ac cess point and MU upon association. The ac cess point can use KeyGuard with Symbol MUs. KeyGuard is only supported on Symbol MUs m[...]

AP-5131 Introduct ion 1-13 For detailed information on WP A2-CCMP configurations, see Configuring WP A2-C CMP (802.11i) on page 6-22 . 1.2.8.7 Firewall Security A firewall keeps personal d ata in and hackers out. The AP-5131 firewall preve nts suspicio us Internet traffic from proliferating the AP-5 131 managed netwo rk. The AP-5131 performs networ[...]

AP-5131 Access Poin t Product Referen ce Guide 1-14 assignment. In addition to these 16 VLANs, the AP-51 31 supports dynamic, user-based, VLANs when using EAP au thentication . VLANs enable organizations to share netwo rk res ources in various network segments within larg e areas (airports, shopping malls, e tc.). A VLAN is a group of clients with [...]

AP-5131 Introduct ion 1-15 SNMP allows a network administrator to configure the AP -5131, manage network p erformance, find and solve network problems, and plan for network growth. Th e AP-5131 supports SNMP management functions for gatherin g information from its ne twork components. The AP-5131 CDROM and th e (AP- 5131 downloads site) contains th[...]

AP-5131 Access Poin t Product Referen ce Guide 1-16 1.2.15 V oice Prioritization Each AP-5131 WLAN has the capa bility of having its QoS policy conf igured to prioritize the network traffic requirements for associated MUs. A WLAN QoS page is available for each enabled WLAN on either the AP-5131 802.11a or 802.1 1b/g radio. Use the QoS page to enabl[...]

AP-5131 Introduct ion 1-17 For detailed information on available AP-5131 statistical displays and the values they represent, see Monitoring Statistics on page 7-1 . 1.2.18 T ransmit Power Control The AP-5131 has a configurable power level for each radio. This enable s the network administrator to define the antenna’ s transmission power level in [...]

AP-5131 Access Poin t Product Referen ce Guide 1-18 1.2.22 DHCP Support The AP-5131 can use Dynamic Host Config uration Protocol (DHCP) to obtain a leased IP address an d configuration in formation from a remote server . DH CP is based on the BOOTP proto col and can coexist or interoperate with BOOTP . Configure the AP-5131 to send out a DHCP reque[...]

AP-5131 Introduct ion 1-19 digital data signal is encoded onto the carriers using a DSSS chipping algori thm . The AP-5131 rad io signal propagates into the air as ele ctromagnetic waves. A receiving antenna (on th e MU) in the path of the waves absorbs the waves as electrical signals. The receiving MU interprets (demo dulates) the signal by reappl[...]

AP-5131 Access Poin t Product Referen ce Guide 1-20 different AP-5131. The roam occurs when the MU analy zes the reception quality at a location and determines a different AP-5131 provide s better signal strength and lower MU load distribution. If the MU does not find an AP-5131 with a workable signal, it can perform a scan to find any AP . As MUs [...]

AP-5131 Introduct ion 1-21 1.3.3 Media T ypes The AP-5131 radio interface conforms to IE EE 802.11a/b/g spec ifications. The interface op erates at a maximum 54Mbps (802.11a radio) using direct-s equence radio technology . The AP-5131 supports multiple-cell operatio ns with fast roaming between cells. Within a d irect-sequence system, each ce ll ca[...]

AP-5131 Access Poin t Product Referen ce Guide 1-22 1.3.5 MU Association Process An AP-5131 recognizes MUs as they begin the as sociation process with the AP-5131. An AP-5131 keeps a list of the MUs it services. MUs associate with an AP-5131 based on the following co nditions: • Signal strength between the AP-5131and MU • Number of MUs currentl[...]

AP-5131 Introduct ion 1-23 1.3.6 Operating Modes The AP-5131 ca n operate in a couple of con figurations. • Access Point - As an Access Point , the AP-5131 functions as a layer 2 bridge (similar to Symbol’ s existing AP-4131 access point). The wired uplink can operate as a trunk and support multiple VLANs. Up to 16 WLANs can be defined and mapp[...]

AP-5131 Access Poin t Product Referen ce Guide 1-24 • MIB (Management Information Base) access ing the AP -5131 SNMP function using a MIB Browser . The AP-5131 CDROM contains the follo wing 2 MIB files: • Symbol-CC-WS2000-MIB-2.0 (standa rd Symbol MIB file) • Symbol-AP-5131-MIB (AP-5131 specific MIB file) Make configuration changes to AP-5131[...]

Hardware Installation An AP-5131 installation includes mounting the AP-5131 on a table-top , wall, ceiling T -bar or above the ceiling (attic or plenum), connecting the AP-5 131 to the network (LAN or W AN port connection), connecting antennae and applying power . Installation procedu res vary for different environments. See the follow ing secti on[...]

AP-5131 Access Poin t Product Referen ce Guide 2-2 2.1 Precautions Before installing the AP-5131 verify the following: • Do not install in wet or dusty areas without additional protection . Contact a Symbol representative for more inform ation. • V erify the environment has a continuous temperature range betwe en -20° C to 50° C. 2.2 Package [...]

Hardware Installation 2-3 V erify the model indicated on the bottom of the AP-5131 is correct. Contact the Symbol Su pport Center to report missing or improperly functioning items. AP-5131-13 041-WWR AP-5131 802 .11a+g Dual Radi o Access Point AP-5131 Install Guide Power Inject or (Part No . AP-PSBIAS-1 P2-AFR) Software and Doc umentation CD -ROM A[...]

AP-5131 Access Poin t Product Referen ce Guide 2-4 The Symbol power injector (Part No. AP-PSBIAS-1P2-AFR) is inclu ded in certain orderable configurations, but can be added to any co nfiguration. For more information on the Symbol powe r injector , see Symbol Pow er Injector System on page 2-8 . For an overview on the optional ante nnae available f[...]

Hardware Installation 2-5 metal, concrete, walls or floors block transmission. Install the AP-5131 in open areas or add access points as needed to improve coverag e. Antenna coverage is analogous to lightin g. Users might find an area lit from far away to b e not bright enough. An area lit sharply might min imize coverage and create dark areas. Uni[...]

AP-5131 Access Poin t Product Referen ce Guide 2-6 suite supporting the 2.4 GHz band and another antenn a suite supporting the 5.2 GHz band. Select an antenna model best suited to the intended operational environme nt of your AP -5131. Antenna connectors for Radio 1 are locate d in a different location from the Ra dio 2 antenna connectors. On singl[...]

Hardware Installation 2-7 The 5.2 GHz antenna suite includes the follo wing models: For detailed specifications on the 2.4 GHz and 5.2 GHz antennae mentioned in this section, see section 2.4 GHz Antenna Matrix on page A-4 and section 5.2 GHz Antenn a Matrix on page A-4 . Symbol Part Number Antenna T ype Nominal Net Gain (dBi) ML-5299-WPNA 1-01R Pan[...]

AP-5131 Access Poin t Product Referen ce Guide 2-8 2.5 Power Options The power options for the AP -5131 include: • Symbol Power Injector (Part No. AP-PSBIAS-1P2-AFR) • Symbol 48-V olt Power Supply (Part No. 50-24000-050) • Any standard 802.3af complian t device. 2.6 Symbol Power Injector Sy stem The AP-5131 can receive power either directly f[...]

Hardware Installation 2-9 2.6.1 Installing the Power Injector Refer to the following sections for information on planning, installing , and validating the power injector installa tion: • Preparing for Site Installation • Cabling the Power Injector • Power Injector LED Indicators 2.6.1.1 Preparing for Site Installation The power injector can b[...]

AP-5131 Access Poin t Product Referen ce Guide 2-10 Ensure the cable length from the Ethernet source (h ost) to the power injector and AP-5131 does not exceed 100 meters (333 ft.) The power injector has no On/Off power switch. The pow er injector receives power and is ready for AP-5131 device connection and ope ration as soon as AC power is applied[...]

Hardware Installation 2-11 2.7 Mounting the AP-5131 The AP-5131 can rest on a flat surface, attach to a wall, mount under a suspended T -Bar or above a ceiling (plenum or attic). Choose one of the follo wing mounting options based on the physical environment of the cove rage area. Do not mount t he AP-5131 in a location that has not been approved i[...]

AP-5131 Access Poin t Product Referen ce Guide 2-12 4. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the power injector Data In connector . b. Connect a RJ-45 E the[...]

Hardware Installation 2-13 5. V erify the behavior of the AP-5131 LEDs. For more informa tion, see LED Indicators on page 2-20 . 6. Return the AP-5131 to an upright position and pl ac e it in the location you wish it to operate. Ensure the AP-5131 is sitting evenly on all four rubber feet. The AP-5131 is ready to co nfigure. For information on an A[...]

AP-5131 Access Poin t Product Referen ce Guide 2-14 8. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E th[...]

Hardware Installation 2-15 e. Plug the power adapter into an outlet. 9. V erify the behavior of the AP-5131 LEDs. For more informa tion, see LED Indicators on page 2-20 . The AP-5131 is ready to co nfigure. For information on an AP-5131 de fault configuration, see Getting Started on page 3-1 . For specific details on AP-5131 system configurat ions,[...]

AP-5131 Access Poin t Product Referen ce Guide 2-16 4. Cable the AP-5131 using either the Symbol powe r injector solution or an a pproved line cord and power supply . For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E th[...]

Hardware Installation 2-17 10. Rotate the AP-5131 cha ssis 45 degrees coun ter -clockwise. The clips click as they fasten to the T -bar . 11. The AP-5131 is ready to co nfigure. For information on an AP-5131 de fault configuration, see Getting Started on page 3-1 . For specific details on AP-5131 system configurat ions, see System Configuration on [...]

AP-5131 Access Poin t Product Referen ce Guide 2-18 The mounting hardware required to install the AP-5131 ab ove a ceiling consists of: • Light pipe • Badge for light pi pe • Decal for badge • Safety wire (strongly recommended) • Security cable (optional) T o install the AP-5131 above a ceiling: 1. If possible, remove the adjacent ceiling[...]

Hardware Installation 2-19 9. Snap the clips of the light pipe into the bottom of the AP-5131. 10. Fit the light pipe into hole in the tile from its unfinished side. 11. Place the decal on the back of the badge and slid e the badge onto the light pipe from the finished side of the tile. 12. Attach the radio antennae to their correct connectors. 13.[...]

AP-5131 Access Poin t Product Referen ce Guide 2-20 For Symbol power injector installations: a. Connect a RJ-45 Ethernet ca ble between th e network data supply (host) and the Power Injector Data In c onnector . b. Connect a RJ-45 E thernet cable betwe en the power in jector Data & Power Out connector and the AP-5131 LAN port. c. Ensure the cab[...]

Hardware Installation 2-21 The five LEDs on the top housing of the AP-5131 are clearly visible in table-top, wall and below ceiling installations. The five AP-5131 top hou sing LEDs have the following display and function ality: The LEDs on the rear of the AP-5131 are viewed using a single (customer installed) extended lightpipe, adjusted as requir[...]

AP-5131 Access Poin t Product Referen ce Guide 2-22 2.9 Setting Up MUs For a discussion of how to initially test the AP-5131 to ensure it can interoperate with the MUs intended for its operationa l environment, see Basic Device Configuration on page 3-5 and specifically T esting Connectivity on page 3-13 . Refer to the LA-5030 & LA-5033 Wireles[...]

Getting Started The AP-5131 should be installed in an area tested fo r radio coverage usin g one of the site survey too ls available to the Symbol field servic e technician. Once an installa tion site has been identifie d, the installer should carefully follow the hardw are prec autions, requirements, moun ting guidelines and power options outlined[...]

AP-5131 Access Poin t Product Referen ce Guide 3-2 • For instructions on installing the AP-5131 on a table top, see Desk Mounte d Installations on page 2-11 . • For instructions on AP-5131 wall mounting, see Wall Mounted Installations on page 2-13 . • For instructions on mounting an AP-5131 to a ceiling T -bar , see Suspended Ceiling T -Bar I[...]

Getting Start ed 3-3 3.3 Default Configuration Changes The following table illu strates the changes made to the AP -5131 version 1.1 con figuration as compared to the 1.0 version con figuration: 3.4 Initially Connecting to the Access Point 3.4.1 Connecting to the Access Point using the W AN Port T o initially connect to the AP-5131 using the access[...]

AP-5131 Access Poin t Product Referen ce Guide 3-4 3.4.2 Connecting to the Access Point using the LAN Port T o initially connect to the AP-5131 using the access po int’ s LAN port: 1. The LAN port de fault is set to DHCP . Connect the AP-5131 ’ s LAN port to a DHCP server . The AP-5131 will receive its IP address auto matically . 2. T o view th[...]

Getting Start ed 3-5 3.5 Basic Device Configuration For the basic setup described in this section, the Java-based Web UI will be used to configure the AP-5131. Use the AP-5131’ s LAN interface for establis hing a link with the AP-5131. Con figure the AP- 5131 as a DHCP clie nt. For optimal screen resolution, set your screen resolution to 1024 x 7[...]

AP-5131 Access Poin t Product Referen ce Guide 3-6 Enter the current password and a new admi n password in fields provided, and click Apply . Once the admin pass word has been updated, a wa rning message d isplays stating the AP- 5131 must be set to a country . The export function will always export the encrypted Admin User pas sword. The import fu[...]

Getting Start ed 3-7 2. Enter a Sy stem Name for the AP-5131. The System Name is useful if multiple Symbol de vices are being administered. 3. Select the Country for the AP-5131’ s country of operation from the drop-d own menu The AP-5131 prompts the user for the correct cou ntry code on the first login. A warning message also dis plays stating t[...]

AP-5131 Access Poin t Product Referen ce Guide 3-8 4. Optionally enter the IP address of the server used to provide system time to the AP-5131 within the T i me Server field. Once the IP address is entered, the AP-5131’ s Network T ime Proto col (NT P) functionality is engaged automatically . Refer to the AP-5131 Product Reference Guide for infor[...]

Getting Start ed 3-9 e. Define a Default Gateway address for the AP -5131’ s W AN connection. The ISP or a network administrator provides this address. f. Specify the address of a Primary DNS Server . The ISP or a network administrator provides this address. 6. Optionally , use the Enable PPP over Ethernet checkbox to enable Point-to-Point over E[...]

AP-5131 Access Poin t Product Referen ce Guide 3-10 c. If using the static or DHCP Server option, ente r the network-assigned IP Address of the AP-5131. d. The Subnet Mask defines the size of the subnet. The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network. These values help di[...]

Getting Start ed 3-11 a. Enter the Extended Services Set Identification (ESSID) and name asso ciated with the WLAN. For additional informatio n on creating and editing up to 16 WLANs pe r AP-5131, see Creating/Editing Indiv idual WLANs on page 5-24 . b. Use the Avail able On checkboxes to define whether the target WLAN is operating over the 802.11a[...]

AP-5131 Access Poin t Product Referen ce Guide 3-12 Multiple WLANs can share the same security policy , so be careful not to name security policies after specific WLANs or risk defining a WLAN to single policy . Symbol recommends naming the policy after the attributes of the au thentication or encryption type selected. 3. Select the WEP 1 28 (104 b[...]

Getting Start ed 3-13 5. Click the Apply button to save the security policy and return to the AP -5131 Quick Setup screen. At this point, you can test the AP-5131 for MU interoperability . 3.5.2 T esting Connectivity V erify the AP-5131’ s link with an MU by se nding Wireless Network Management Protocol (WNMP) ping packets to the associated MU. U[...]

AP-5131 Access Poin t Product Referen ce Guide 3-14 4. Click the Ping button to begin transmitting pack ets to the specified MU address. Refer to the Number of Responses va lue to asse ss the number of responses from the MU versus the number of ping packets trans mitted by the AP-5131. Use the ratio of packe ts sent versus the number of packets rec[...]

Sy stem Configuration The Symbol AP-5131 contains a built-in browser in terface for system configu ration and remote management using a stan dard Web browser such as Microsoft Internet Explore r , Netscape Navigator or Mozilla Firefox. The browser interface also allows for system monito ring of the AP-5131. Web management of the AP-5131 requires ei[...]

AP-5131 Access Poin t Product Referen ce Guide 4-2 . System configuration topics includ e: • Configuring System Settings • Configuring Data Access • Managing Certificate Authority (CA) Certificate s • Configuring SNMP Settings • Configuring Network T ime Protocol (NTP) • Logging Configuration • Importing/Exporting Configurations • U[...]

System Configurat ion 4-3 2. Configure the AP-5131 Sy stem Settings field to assign a system n ame and location, set the country of operation and view devic e version information. System Name Specify a device name for the AP-5131 . Symbol recommends selecting a name serving as a reminder of the user base the AP-5131 supports (engineering, retail, e[...]

AP-5131 Access Poin t Product Referen ce Guide 4-4 3. Refer to the Factory Defaults field to restore either a full o r partial defa ult configuration. Country The AP-5131 prompts the user for the correct country code after the first login. A warning message also displays stating that an incorrect country setting will lead to an illegal use of the A[...]

System Configurat ion 4-5 4. Use the Restart AP-5131 field to restart the AP (if necessa ry). 5. Click Apply to save any changes to the System Settings screen. Navigating away from the screen without clicking the Apply bu tton results in all changes to the screen being lost. 6. Click Undo Changes (if necessary) to undo any changes made. Undo Change[...]

AP-5131 Access Poin t Product Referen ce Guide 4-6 7. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed. 4.2 Configuring Data Access Use the AP-5131 Access screen to enable /disable data throughput to the AP-51 31’ s LAN1, LAN2 and/or W AN interfaces and dis[...]

System Configurat ion 4-7 3. Refer to the Applet T imeout field to set an HTTPS timeout interval. 4. Configure the Secure Shell field to set timeout values to reduce network inactivity . 5. Use the Admin Authentication buttons to specify the authentication server conn ection method. Applet HTTP (port 80) Select the L AN1, LAN2 and/or W AN checkboxe[...]

AP-5131 Access Poin t Product Referen ce Guide 4-8 6. Use the Radius Server if a Radius server has been selected as the authentication server , enter the required network addre ss information. 7. Update the Administrator Access field to change the administ rative password used to access the AP-5131 configuration se ttings. 8. Click Apply to save an[...]

System Configurat ion 4-9 4.3 Managing Certificate Aut hority (CA) Certificates Certificate management includes the follo wing sections: • Importing a CA Certificate • Creating Self Certificates for Accessing the VPN 4.3.1 Importing a CA Certificate A certificate authority (CA) is a network authority that issues and manages security credentials[...]

AP-5131 Access Poin t Product Referen ce Guide 4-10 2. Copy the content of the CA Certificate message (using a text editor such as notepad) and then click on Paste from Clipboard . The content of the certi ficate displays in the Import a root CA Certificate field. 3. Click the Import root CA Certificate button to import it into the CA Certificate l[...]

System Configurat ion 4-11 T o create a self certificate: 1. Select Sy stem Configuration -> Certificate Mgmt -> Self Certificates from the AP-5131 menu tree. 2. Click on the Add button to create the certificate request. The Certificate Request screen di splays. 3. Complete the request form with the pertinent informatio n. Only 4 values are r[...]

AP-5131 Access Poin t Product Referen ce Guide 4-12 4. When the form is completed, click the Generate button. The Certificate Reques t screen disappears and the ID of the generated certificate request displays in the drop-down list of certifi cates within the Self Certificates screen. 5. Click the Generate Request butt on. The generated certificate[...]

System Configurat ion 4-13 6. Click the Copy to Clipboard button. The content of certificate request is copied to the clipboard. Create an email to your CA, paste the content of the request into the body of the message and send it to the CA. The CA signs the certificate a nd will send it back. Once received, copy the content from the email into the[...]

AP-5131 Access Poin t Product Referen ce Guide 4-14 1. Select Sy stem Configuration -> Certificate Mgmt -> Self Certificates from the AP-5131 menu tree. 2. Click on the Add button to create the certificate request. The Certificate Request screen di splays. 3. Complete the request form with the pertinent information. Key ID (required) Enter a [...]

System Configurat ion 4-15 4. Complete as many of the optional va lues within the Certificate Request scree n as possible. 5. When the form is completed, click the Generate button from within the Certificate Request screen. The Certificate Reques t screen disappears and the ID of the generated certificate request displays in the drop-down list of c[...]

AP-5131 Access Poin t Product Referen ce Guide 4-16 7. Click the Copy to clipboard button. Save the certificate content to a secure location. 8. Connect to the Window s 2000 or 20 03 server used to sign th e certificate. 9. Select the Request a certificate option. Click Next to continue. 10. Select the Advanced request checkbox from within the Choo[...]

System Configurat ion 4-17 A File Download screen displays prompting the use r to select the download location for the certificate. 14. Click the Save button and save the certifi cate to a secure location. 15. Load the certificates on the AP-5131 . 16. Open the certificate file and c opy its contents in to the CA Certificates sc reen by clickin g t[...]

AP-5131 Access Poin t Product Referen ce Guide 4-18 If using the Symbol-CC-WS20 00-MIB-2.0 and/or Sy mbol-AP-5131-MIB to config ure the AP-5131, use the table below to locate the MIB wh ere the featu re can be configured. NOTE The Symbol-AP-5131-MIB contains the majority of the info rmation contained within the Symb ol-CC-WS200 0-MIB-2.0 file. This[...]

System Configurat ion 4-19 SNMP allows a network administrator to manage network performance, fin d and solve network problems, and plan for network growth. The AP-5131 suppo rts SNMP management functions for gathering information from its network compon ents, communicating that information to specified users and configuring the AP-5131. All the fi[...]

AP-5131 Access Poin t Product Referen ce Guide 4-20 community strings for read-only and read /write access. SNMP vers ion 3 (v3) further enhances protocol features, providing much improved security . SNMP v3 encrypts transmissions and provides authentication for users generating requ ests. T o configure SNMP v1/v2c community definitions and SNMP v3[...]

System Configurat ion 4-21 3. Configure the SNMP v3 User De finitions field (if SNMP v3 is used) to a dd and configure SNMP v3 us er definitio ns. SNMP v3 user definitions allow read-o nly or read/write access to ma nagement information as appropriate. Delete Select Delete to remove a SNMP v1/v2c community definition. Community Use the Communi ty f[...]

AP-5131 Access Poin t Product Referen ce Guide 4-22 4. Specify the users who can read and optionally modify the SNMP-ca pable client. 5. If configuring SNMP v3 user definitions, se t the SNMP v3 engine ID. 6. Click Apply to save any changes to the SNMP Access screen. Na vigating away fro m the screen without clicking the Appl y button results in al[...]

System Configurat ion 4-23 7. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the SNMP Access screen to the last sav ed configuration. 8. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. For additiona[...]

AP-5131 Access Poin t Product Referen ce Guide 4-24 2. Configure the SNMP Acces s Control screen to a dd the IP addresses of those users rece iving SNMP access. Access Control List Enter Start IP and End IP addresses (numerical addresses only , no DNS names supported) to specify a range of user that can access the AP-5131 SNMP interface. An SNMP-ca[...]

System Configurat ion 4-25 4.4.2 Enabling SNMP T raps SNMP provides the ability to send traps to notify the administra tor that trap cond itions are met. T raps are network packets containin g data relating to network devices, or SNMP agents, that send th e traps. SNMP management applications can receive and interpret these packets, and optio nally[...]

AP-5131 Access Poin t Product Referen ce Guide 4-26 2. Configure the SNMP v1/v2c T rap Config uration field (if SNMP v1/v2c T raps are used) to modify the following: 3. Configure the SNMP v3 T rap Configuration field (if SNMP v3 T raps are used) to modify the following: Add Click Add to create a new SNMP v1/v2c T rap Configuration entry . Delete Cl[...]

System Configurat ion 4-27 4. Click Apply to save any changes to the SNMP T rap Configur ation screen. Naviga ting away from the screen without clicking the Ap ply button results in all changes to the screen being lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings dis played on SNM P T rap Config[...]

AP-5131 Access Poin t Product Referen ce Guide 4-28 4.4.3 Configuring S pecific SNMP T raps Use the SNMP T raps screen to enable specific traps on the AP-5131. Symb ol recommends definin g traps to capture unauthorized devices ope rating within the AP-5131 coverage area. T rap configuration depends on the network machin e that receives the generate[...]

System Configurat ion 4-29 3. Configure the SNMP T raps field to generate traps when SNMP capable MUs are denied authentication privileges o r are subject of an ACL violation . When a trap is enabled, a tra p is sent every 5 seconds until the c ondition no lon ger exists. 4. Configure the Network T rap s field to generate traps when th e AP-5131’[...]

AP-5131 Access Poin t Product Referen ce Guide 4-30 6. Click Apply to save any changes to the SNMP T raps screen. Navigating away from the screen without clicking the Appl y button results in all changes to the screen being lost. 7. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed o n SNMP T r[...]

System Configurat ion 4-31 2. Configure the RF T rap Thresholds field to define device threshold valu es for SNMP traps. NOTE A verage Bit Speed,% of Non-Unicast, Average Signal, Average Retries,% Dropped and % Undecryptable are not AP-51 31 statistics. Pkts/s Enter a maximum threshold for the total throughput in Pps (Packets per second). Throughpu[...]

AP-5131 Access Poin t Product Referen ce Guide 4-32 3. Configure the Minimum Packets field to define a minimum packet throughput value for trap generation. 4. Click Apply to save any changes to the SNMP RF T raps screen. Na vigating away from th e screen without clicking the Appl y button results in all changes to the screen being lost. 5. Click Un[...]

System Configurat ion 4-33 T o manage clock synchronization on the AP-51 31: 1. Select Sy stem Configuration - > Date/T ime from the AP -5131 menu tree. 2. From within the Current T ime field, click the Refresh button to update the time since the screen was displayed by the user . The Current T i me field displays the current ti me based on the [...]

AP-5131 Access Poin t Product Referen ce Guide 4-34 This option is disabled when the Enable NTP on AP-51 31 checkbox has been selected, an d therefore should be vie wed as a second means to define the AP-5131 system time . 4. If using the Manual Date/T ime Setting screen to define the AP-5131’ s system time, re fer to the T ime Zone field to sele[...]

System Configurat ion 4-35 4.6 Logging Configuration The AP-5131 provides the capability for p eriodically logging syste m events that pr ove useful in assessing the throughput and performance of the AP-5131 or troubleshooting problems on the AP-5131 managed Local Area Network (LAN). Use the Logging Configuration screen to set the desired logging l[...]

AP-5131 Access Poin t Product Referen ce Guide 4-36 3. Click Apply to save any changes to the Logging C onfigura tion screen. Navigating away from the screen without clicking the Apply button resu lts in all changes to the screen being lo st. Vie w L og Click Vie w to save a log of events retained on the AP-5131 . The system displays a prompt reque[...]

System Configurat ion 4-37 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Loggin g Configuration screen to the last save d configuration. 5. Click Logout to securely exit the AP-5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. 4.7[...]

AP-5131 Access Poin t Product Referen ce Guide 4-38 T o create an importable/ex portable AP-5131 co nfiguration file: 1. Select Sy stem Configuration - > Config Import/Export from the AP-5131 menu tree. 2. Configure the F TP and TF TP Import/Export field to import/export configuration settings. Filename Specify the name of the configuration file[...]

System Configurat ion 4-39 3. Configure the HTTP Import/Export field to import/export AP-5131 configuration settings using HTTP . Username Specify a username to be used when logging in to the F TP server . A username is not required for TF TP server logins. Password Define a password allowing access to the F TP server for the import or export opera[...]

AP-5131 Access Poin t Product Referen ce Guide 4-40 4. Refer to the Status field to assess the comple tion of the import/export operation. Status After executing an operation (by clicking any of the buttons in the window), check the Status field for a progress indicator and messages about the success or errors in executing the Import/ Export operat[...]

System Configurat ion 4-41 5. Click Apply to save the filename and Server IP information. The App ly button does not execute the import or export operation , only saves the settings enter ed. 6. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on Config Import/E xport screen to the last saved c[...]

AP-5131 Access Poin t Product Referen ce Guide 4-42 For detailed update s cenarios involvin g both a Windows DHCP and a Linux BootP server configuration, see Configuring Automatic Updates usin g a DHCP or Linux BootP Serv er Configuration on page B-1 . If a firmware update is required, use the Firmware Update screen to specify a file name and defin[...]

System Configurat ion 4-43 3. Configure the DHCP Options field to enable automatic firmwa re and/or config uration file updates. DHCP options are used for out-of-the-box rapid dep loyment for Symbol wireless products. The following are the two DHCP options availa ble on the AP-5131: • Enable Automatic Firmware Update • Enable Automatic Configur[...]

AP-5131 Access Poin t Product Referen ce Guide 4-44 The DHCP Server needs to be configured with th e above mentio ned vendor specific options and vendor class identifie r . The update is conducted ov er the LAN or W AN port depending on which is the active port at the time the firmware update request is made. Configure the Update Firmware field as [...]

System Configurat ion 4-45 • Username - Specify a username for the F TP server login. • Password - Specify a password for F TP server login. Default is symbol. 9. Click the Perform Update button to initiate the update. Upon confirming the firmware update, the AP reboots and com pletes the update. 10. After the AP reboots, return to the Firmware[...]

AP-5131 Access Poin t Product Referen ce Guide 4-46 11. Confirm the AP-5131 configuration is the same as it was b efore the firmware upda te. If they are not, restore the settings. Refer to Importing/Exporting Configu rations on pa ge 4-37 for instructions on expo rting the configu ration back to the AP-5131. 12. Click Apply to save the filename an[...]

System Configurat ion 4-47 NOTE For a discussion on the implications of replacing an existing Symbol AP-4131 deployment with an AP -5131, see Replacing an AP-4131 with an AP-5131 on page B-1 9 .[...]

AP-5131 Access Poin t Product Referen ce Guide 4-48[...]

Network Management Configuring network managemen t includes confi guring network aspects in nume rous areas. See the following sections for more information on AP-5131 ne twork management: • Configuring the LAN Interface • Configuring W AN Settings • Enabling Wireless LANs (WLANs) • Configuring Router Settings 5.1 Configuring the LAN Interf[...]

AP-5131 Access Poin t Product Referen ce Guide 5-2 Use the LAN Configuration screen to enable one (or both) of an AP-5131’ s LAN interfaces, assign them names, define which L AN is currently active on the AP-5 131 Ethernet port and assign a timeout value to disable the LAN connection if no data traffic is detec ted within a defined interval. T o [...]

Network Manage ment 5-3 3. Click Apply to save any changes to the LAN Configuration sc reen. Navigating a way from the screen without clicking the Apply button results in all change s to the screen being lost if the prompts are ignored. 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed o n th[...]

AP-5131 Access Poin t Product Referen ce Guide 5-4 5. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed. 5.1.1 Configuring VLAN Support A V irtua l Local Area Ne twork (VLAN) is a means to electronically separate data on the same AP-5131 from a single broadcas[...]

Network Manage ment 5-5 AP-5131. The AP-5131 then maps the target WLAN for the assigne d VLAN and traffic passes normally , allowing for the completion of the DHCP request and further traffic. T o create new VLANs or edit the properties of an existing VLAN: 1. Select Network Configuration -> LAN from the AP-5131 menu tree. 2. Ensure the Enable 8[...]

AP-5131 Access Poin t Product Referen ce Guide 5-6 T o create a new VLAN, click the Create button, to edit the properties of an existing VLAN, click the Edit bu tton. 4. Assign a unique VLAN ID (from 1 to 4095) to each VLAN added or modified. The VLAN ID associates a frame with a specific VLAN and provides the info rmation the AP-5131 needs to proc[...]

Network Manage ment 5-7 8. Enter a Management VLAN T ag for LAN1 and LAN2. The Management VLAN uses a default tag value of 1. The Management VLAN is used to distinguish VLAN traffic flows for the LAN. The trunk port marks the frames with specia l tags as they pass between the AP-5131 and its destination, the se tags help distin guish data traffic. [...]

AP-5131 Access Poin t Product Referen ce Guide 5-8 arrives on the AP-5131, it queries the VMPS for the VLAN assignme nt based on the source MAC address of the arriving frame. If statically mapping VLANs, leave the Dynamic checkbox specific to the target WLAN and its intended VLAN unselected. The admin istrator is then re quired to configure VLAN me[...]

Network Manage ment 5-9 2. Configure the DHCP Configuration field to define the DHCP settings used for the LAN. NOTE Symbol recommends the WAN and LAN ports should no t both be configured as DHCP clients. This interface is a DHCP Client Select this button to enable DHCP to set AP-5131 network address information via this LAN1 or LAN2 connection. Th[...]

AP-5131 Access Poin t Product Referen ce Guide 5-10 This interface is a BOOTP Client Select this button to enable BOOTP to set AP-5131 network address information via this LAN1 or LAN2 connection. When selected, only BOOTP responses are accepted by the AP-5131 . If both DHCP and BOOTP services are required, do not select BOOTP Client. This interfac[...]

Network Manage ment 5-11 3. Click Apply to save any changes to the LAN1 or LAN2 scre en. Navigating away from the screen without clicking the Apply b utton results in all changes to the scre en being lost if the prompts are ignored. 4. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed o n the LA[...]

AP-5131 Access Poin t Product Referen ce Guide 5-12 available IP addresses. This is useful, for example, in education and custom er environments where MU users change frequently . Use longer leases if there are fewer users. T o generate a list of client MAC address to IP address mappings for the AP-513 1: 1. Select Network Configuration -> LAN -[...]

Network Manage ment 5-13 7. Click Cancel to undo any changes made. Undo Chang es reverts the settings displayed to the last saved configuration. 5.1.2.2 Setting the T ype Filter Configuration Each AP-5131 LAN (either LAN1 or LAN2) can keep a list of frame types that it forwards or discards. The T ype Filtering feature prevents specific (a pote ntia[...]

AP-5131 Access Poin t Product Referen ce Guide 5-14 3. T o add an Etherne t type, click the Add button. The Add Ethernet T ype screen displa ys. Use this sc reen to add one type filter option at a time, for a list of up to 16 entries. Packet types supported for the type filtering function include 16-bit DIX Ethernet types as well as Symbol propriet[...]

Network Manage ment 5-15 T o configure W AN settings for the AP-5 131: 1. Select Network Configuration -> WAN from the AP-5131 menu tree. 2. Refer to the WAN IP Configuration field to enable the WAN interface, and set network address information for the W AN connection. NOTE Symbol recommends that the W AN and LAN ports should not both be config[...]

AP-5131 Access Poin t Product Referen ce Guide 5-16 This interface is a DHCP Client This checkbox enables DHCP for the AP-5131 W AN connection. This is useful, if the larger corporate network or Internet Service Provider (ISP) uses DHCP . DHCP is a protocol that includes mechanisms for IP address allocation and delivery of host-spec ific config ura[...]

Network Manage ment 5-17 3. Configure the PPP over Ethernet field to enable high spe ed dial-up connections to the AP-5131 W AN port. More IP Addresses Click the More IP Addresses button to specify additional static IP addresses for the AP-5131 . Additional IP addresses are required when users within the W AN need dedicated IP addresses, or when se[...]

AP-5131 Access Poin t Product Referen ce Guide 5-18 4. Click Apply to save any changes to the W AN screen. Navigating away fro m the screen without clicking the Apply butt on results in all changes to the screen bein g lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the W AN scree[...]

Network Manage ment 5-19 5.2.1 Configuring Network Addr ess T ranslation (NA T) Settings Network Address T ranslatio n (NA T) conve rts an IP address in one netw ork to a different IP address or set of IP addresses in another network. The AP-5 131 router maps its local (inside) network addres ses to W AN (outside) IP addresses, and translate s the [...]

AP-5131 Access Poin t Product Referen ce Guide 5-20 2. Configure the Address Ma ppings field to generate a WAN IP address, define the NA T type and set outbound/inb ound NA T m appings. 3. Click Apply to save any changes to the NA T screen. Navigating away from the scre en without clicking the Apply butt on results in a ll changes to the screens be[...]

Network Manage ment 5-21 5. Click Logout to securely exit the AP -5131 Symbol Access Point applet. A prompt displays confirming the logout before the applet is closed. 5.2.1.1 Configuring Port Forwarding Use the Port Forwarding screen to configure port forwarding parameters fo r inbound traffic from the associated W AN IP address. T o configure por[...]

AP-5131 Access Poin t Product Referen ce Guide 5-22 5. Click Ok to return to the NA T screen. Within the NA T screen, click Apply to save any changes made on the Port Forwarding scree n. 6. Click Canc el to un do any changes made on Port Forwardin g screen. This reverts all settings for the Port Forwarding screen to the la st saved configuration. 5[...]

Network Manage ment 5-23 T o configure WLANs on the AP-5131: 1. Select Network Configuration -> Wireless from the AP-5131 menu tree. If a WLAN is defined, th at WLAN displays wi thin the Wireless Configuration screen. When the AP-5131 is first booted, WLAN1 exists as a default WLAN available immediately for connection. 2. Refer to the informatio[...]

AP-5131 Access Poin t Product Referen ce Guide 5-24 3. Click the Create button (if necessary) to launch the New WLAN screen. Use the New WLAN screen to defin e the properties of a new WLAN that would display an d be selectable within the Wireless Configuration screen. For additio nal information, see Creating/Editing Individual WLANs on page 5-24 .[...]

Network Manage ment 5-25 Use the New WLAN and Edit WLAN screens as re quired to create/modify a WLAN. T o create a n ew WLAN or edit the properties of an existing WL AN: 1. Select Network Configuration -> Wireless from the AP-5131 menu tree. The Wireless Co nfiguration screen disp lays. 2. Click the Create button to config ure a new WLAN, or hig[...]

AP-5131 Access Poin t Product Referen ce Guide 5-26 3. Set the parameters in the Configuration field as required for the WLAN. ESSID Enter the Extended Services Set Identification (ESSID) associated with the WLAN. The WLAN name is auto-generated using the ESSID until changed by the user . The maximum number of characters that can be used for the ES[...]

Network Manage ment 5-27 Name Define or revise the name for the WLAN. The name should be logical representation of WL AN coverage area (engineering, marketing etc.). The maximum number of characters that can be used for the name is 31. Available On Use the Available On checkboxes to define whether the WLAN you are creating or editing is available t[...]

AP-5131 Access Poin t Product Referen ce Guide 5-28 4. Configure the Security field as required to set the data protection requ irements for the WLAN. 5. Configure the Advanced field as required to set MU in teroperability permissions, secure beacon transmissions, broadca st ESSID acceptance and Quality of Servic e (QoS) policies. CAUTION A WLAN ca[...]

Network Manage ment 5-29 6. Click Apply to save any cha nges to the WLAN screen . Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 7. Click Cancel to securely exit the New WLAN or Edit WLAN screen and return to the Wireless Configuration scree n. 5.3.1.1 Configuring WLA N Security Policies As [...]

AP-5131 Access Poin t Product Referen ce Guide 5-30 security requirements of the WLAN. Once new policies are defined, they are available within the New WLAN or Edit WLAN scre ens and can be mapped to any WLAN. A s ingle security policy can be used by more than one WL AN if its logical to do so. For example, there m ay be two or more WLANs within cl[...]

Network Manage ment 5-31 2. Click Logout to exit the Security Configuration screen. 5.3.1.2 Configuring a WLAN Access Control List (ACL) An Access Control Lists (ACL) affords a system administrato r the ability to gra nt or restrict MU access by specifying a MU MAC address or range of MAC addresses to either include or exclude from AP-5131 connecti[...]

AP-5131 Access Poin t Product Referen ce Guide 5-32 The Mobile Unit Acce ss Control List Configura tion screen displays with existing ACL policies and their current WLAN (if mapped to a WLAN). 2. Click the Create button to configure a new ACL policy , or select a policy and click the Edit button to modify an existing ACL policy . The AP-5131 suppor[...]

Network Manage ment 5-33 Either the New MU ACL Policy or Edit MU ACL Policy screens display . 3. Assign a name to the new or edited ACL polic y that repres ents an inclusion or exclusion policy specific to a pa rticular type of MU traffic you may w ant to use with a single or gr oup of WLANs. More than one WLAN can use th e same ACL policy . 4. Con[...]

AP-5131 Access Poin t Product Referen ce Guide 5-34 5. Click Apply to save any cha nges to the New MU ACL P olicy or Edit MU ACL Policy screen and return to the Mobile Unit Access Control List Configuration scree n. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 6. Click Cancel to securely e[...]

Network Manage ment 5-35 2. Click the Create button to configure a new QoS policy , or select a policy and click the Edit button to modify an existing QoS policy . The AP-5131 suppo rts a maximum of 16 QoS policies.[...]

AP-5131 Access Poin t Product Referen ce Guide 5-36 3. Assign a name to the new or edited QoS policy that makes sense to the AP-513 1 traffic receiving priority . More than one WLAN can use the same QoS policy . 4. Select the Support V oice prioritization checkbox to allow legacy voice prioritization . Certain products may not rece ive priority ove[...]

Network Manage ment 5-37 5. Use the two Multicast Address fields to specify one o r two MAC addresses to be used for multicast applications. Some VoIP devices make use of multicast addresses. Using this mechanism ensures tha t the multicast pack ets for these de vices are not delayed by the packet queue. 6. Use the drop-down menu to select the radi[...]

AP-5131 Access Poin t Product Referen ce Guide 5-38 8. Configure the CW min and CW max (co ntention windows), AIFSN ( Arbitrary Inter- Frame Space Number ) and TXOPs T ime (opportunity to transmit) fo r each Ac cess Category . Their values are explained as follows. Background Backgrounds traffic is typically of a low priority (file transfers, print[...]

Network Manage ment 5-39 9. Click Apply to save any changes to the New QoS Policy or Edit QoS Policy scre en to return to the Quality of Service Configuration scr een. Navigating away from the sc reen without clicking Apply results in all changes to the screens b eing lost. 10. Click Cancel to securely exit th e New QoS Policy or Edit QoS Policy sc[...]

AP-5131 Access Poin t Product Referen ce Guide 5-40 5.3.1.4 Configuring WLAN Hotspot Support The AP-5131 enables hotspot operators to provide user au thentication and accounting without a special client ap plication. The AP-5 131 uses a tradi tional Internet b rowser as a secure authentication device. Rather than rely o n built-in 802.11 security f[...]

Network Manage ment 5-41 3. Refer to the HTTP Redirection field to specify how the Login, Welcome, and Fail pages are maintained for this specific WLAN. The pages can be hosted locally or remotely . . 4. Use the External URL field to specify the loca tion of the login page, welcome page and fail page used for hotspot access . Defining these setting[...]

AP-5131 Access Poin t Product Referen ce Guide 5-42 5. Click the White List Entries button (within the WhiteList Configuration field) to create a set of allowed destination IP addre sses. These allowed de stination IP addresses are c alled a White List. T en configurable IP addresses are allowed for ea ch WLAN. For more information, see Defining th[...]

Network Manage ment 5-43 8. Click OK to save any changes to the Hotspot Configuratio n screen. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 9. Click Cancel (if necessary) to undo an y changes made. Cancel rev erts the settings displayed on the Hotspot Configuration screen to the last save [...]

AP-5131 Access Poin t Product Referen ce Guide 5-44 When a client requests a URL from a Web server , the login handler retu rns an HTTP redire ction status code (for example, 301 Moved Permanently), which indicates to th e browser it should look for the page at another URL. This other URL can be a local or remote login page (b ased on the hotspot c[...]

Network Manage ment 5-45 5.3.2 Setting the WLAN’ s Radio Configuration Each AP-5131 WLAN can hav e a separate 802.11a or 8 02.11b/g radio configured and mapped to that WLAN. The first step is to enable the radio. One of two possible radio configurat ion pages are available on the AP -5131 depending on which model SKU is purchased. If the AP-5131 [...]

AP-5131 Access Poin t Product Referen ce Guide 5-46 2. Enable the radio(s) using the Enable checkbox(es). Refer to RF Band of Operation parameter to en sure you are enablin g the correct 8 02.11a or 802.11b/g radio. After the settings are applied within this Radio Configuration screen, the Radio Status and MUs connected values update. If this is an[...]

Network Manage ment 5-47 The maximum number of client bridge con nections per AP-513 1 radio is 12, with 24 representing the maximum for dual-radio models. Once the s ettings within the Radio Config uration screen are applied (for an initial deployment), the current number of client bridge connection s for this specific radio displays within the CB[...]

AP-5131 Access Poin t Product Referen ce Guide 5-48 within the BBs Connec ted field. If this is an existing r adio within a mesh network, the se values update in real-time. 6. Click the Advanced button to define a prioritized list of access points to define Mesh Connection links. Fo r a detailed overview on mesh ne tworking and how to configu re th[...]

Network Manage ment 5-49 On a single-radio AP-5131, Radio1 could ei ther be an 80 2.11a or 802.11b/g radio depending on which radio has been enabled. 2. Configure the Properties field to assign a name and plac ement designation for the radio. Placement Use the Placement drop-down menu to specify whether the radio is located outdoors or indoors. Def[...]

AP-5131 Access Poin t Product Referen ce Guide 5-50 3. Configure the Radio Settings field to assign a c hannel, ante nna diversity settin g, radio transmit power level and data rate. ERP Protection Extended Rate PHY (ERP) allows 802.11g MUs to interoperate with 802.11b only MUs. ERP Protection is managed automatically by the AP-5131 and informs use[...]

Network Manage ment 5-51 4. Refer to the Beacon Settings field to set th e radio beacon an d DTIM interv als. Set Rates Click the Set Rates button to display a window for selecting minimum and maximum data transmit rates for the radio. At least one Basic Rate must be selected as a minimum transmit rate value. Supported Rates define the data rate th[...]

AP-5131 Access Poin t Product Referen ce Guide 5-52 5. Configure the Performa nce field to set the preamble, thresholds values, data rates and QoS values for the radio. Beacon Interval The beacon interval controls the performance of power save stations. A small interval may make power save stations more responsive, but it will also caus e them to c[...]

Network Manage ment 5-53 6. Select the Advanced Settings tab to strategically map BSSIDs to WLANs in order to define them as primary WLANs. Set RF QoS Click the Set RF QoS button to display the Set RF QOS screen to set QoS parameters for the AP-5131 radio. Do no t confuse with the QoS configuration screen used for a WLAN. The Set RF QoS screen init[...]

AP-5131 Access Poin t Product Referen ce Guide 5-54 Defining Primary WLANs allows an administrator to dedicate BSSIDs (4 BSSIDs are available for mapping) to WLANs. From that initial BSSID assignment, Primary WLANs can be defined from within the WLANs assigned to BSSID group s 1 through 4. Each BSSID beacons only on the primary WLAN. The user shoul[...]

Network Manage ment 5-55 7. Use the Primary WLAN drop-down menu to select a WLAN from those WLANs sharing th e same BSSID. The selected WLAN is the primary WLAN for the specified BSSID. 8. Click Apply to save any changes to the Radio Settings an d Advanced Settin gs screens. Navigating away from the screen without clicki ng Apply resu lts in change[...]

AP-5131 Access Poin t Product Referen ce Guide 5-56 2. Use the Bandwidth Share Mod e drop-down menu to define the order enable d WLANs receive AP-5131 services. Selec t one of the following three options: 3. Configure the Bandwidth Sha re for Each WLAN field to set a raw weight (for WLANs using the Weighted Round-Robin option) for each WLAN. The we[...]

Network Manage ment 5-57 4. Click Apply to save any changes to the Bandwidth Management screen. Navigating away from the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Bandwidth Managemen t s creen to th[...]

AP-5131 Access Poin t Product Referen ce Guide 5-58 2. Refer to the AP-5131 Router T able field to view existing routes. The AP-5131 Router T ab le field displays a list of connected route s between an enabled subnet and the ro uter . These routes can be changed by modifying the IP address and subnet masks of the enabled subnets. The information in[...]

Network Manage ment 5-59 5. Use the User Defined Routes field to add or delete static routes. The User Defined Routes field allows the ad ministrator to view , add or delete internal static (dedicated) routes. a. Click the Add button to create a new table entry . b. Highlight an entry and click the Del (delete) button to r emove an entry . c. Speci[...]

AP-5131 Access Poin t Product Referen ce Guide 5-60 2. Select a routing direction from the RIP Direction drop-down menu. Both (for both directions), Rx only (receive only), and TX only (transmit only) are available options. 3. If RIP v2 or RIP v2 (v1 compa t) is the selected RIP type, the RIP v2 Authentication field becomes active. Select the type [...]

Network Manage ment 5-61 4. If the Simple au thenticati on method is selected, s pecify a password of up to 15 alphanumeric characte rs in the Password (Simple Authentication) area. 5. If the MD5 au thentication me thod is selected, fill in the Ke y #1 field (Key #2 is optional). Enter any numeric v alue between 0 and 256 into the MD5 ID area. Ente[...]

AP-5131 Access Poin t Product Referen ce Guide 5-62[...]

Configuring Access Point Security Security measures for the AP-5131 and its WLANs are critical. Use the available AP-5131 security options to protect the AP-5131 LAN from wireless vu lnerabilities, and safeg uard the transmission of RF packets between the AP-5131 and its associated MUs. WLAN security can be configured o n an ESS by ESS basis on the[...]

AP-5131 Access Poin t Product Referen ce Guide 6-2 6.1 Configuring Security Options T o configure the data prote ction options ava ilable on the AP-51 31, refer to the following: • T o set an administrative passwo rd for secure AP-5131 logins, see Setting Passwords on page 6-3 . •R e f e r t o Enabling Authentication and Encryption Sch emes on [...]

Configurin g Access Point Securit y 6-3 6.2 Setting Passwords Before setting the AP-5131 security parameters, ve rify an administrative password for the AP-5131 has been created to restrict access to the device before ad vanced device security is configured. T o password prote ct and restrict AP-5131 d evice access: 1. Connect a wired co mputer to [...]

AP-5131 Access Poin t Product Referen ce Guide 6-4 4. Log in using the “ ad min ” as the default User ID and “ sym bol ” as the default Password. If the default login is successful, the Change Admin Password window displays. Change the default login and password to significantly dec rease the likelihood of hacking. 5. Enter the previous p a[...]

Configurin g Access Point Securit y 6-5 4. Press <ESC> or <Enter> to access the AP-5131 CLI. A serial connection has now been establish ed and the user sho uld be able to view the serial connection window . 5. Reset the AP-5131. An AP-5131 can be reset by removing and re-inse rting the LAN cable or removing an d re- inserting the power [...]

AP-5131 Access Poin t Product Referen ce Guide 6-6 Each WLAN (16 WLANs available in total to an AP-5131 regard less of the model) can have a separa te security policy . However , more than one WLAN can use the same secu rity policy . Therefore, to avoid confusion, do not name security po licies the same name as WLANs. Once security policies ha ve b[...]

Configurin g Access Point Securit y 6-7 3. Use the Name field to define a logical security po licy name. Remember , multiple WLANs can share the same security policy , so be careful not to name security policies after specific WLANs or risk defining a WLAN to single polic y . Symbol recommends naming the policy after the a ttributes of the authenti[...]

AP-5131 Access Poin t Product Referen ce Guide 6-8 6. Click Apply to keep changes made within the New Security Polic y screen (if any). Configure encryption or authentication supported security policies by referring to the following: AP-5131 authentication: • T o create a security policy supporting Ke rberos, see, Configuring Kerberos Au thentica[...]

Configurin g Access Point Securit y 6-9 7. Click Ca ncel to return to the target WLAN screen without keeping any of the changes made within the New Securi ty Policy screen. 6.4 Configuring Kerberos Authentication Kerberos (designed and developed by MIT) prov ides strong authentication for clie nt/server applications using secret-key crypto graphy .[...]

AP-5131 Access Poin t Product Referen ce Guide 6-10 3. Select the Kerberos radio button. The Kerberos Config uration field displays within the New Security Policy screen. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy . 5. Set the Kerberos Configuration field as required to define the [...]

Configurin g Access Point Securit y 6-11 6. Click the Apply button to return to the WLAN screen to save any changes mad e within the Kerberos Configuration field of the New Security Policy screen. 7. Click the Cancel button to undo any changes made within the Kerberos Configuration field and return to the WLAN screen. T his reverts all settings fo [...]

AP-5131 Access Poin t Product Referen ce Guide 6-12 3. Select the 802.1x EAP ra dio button. The 802.1x EAP Settings field displays within the New Security Po licy screen. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy . 5. If using the AP-5131’ s Internal Radius server , leave th e R[...]

Configurin g Access Point Securit y 6-13 Radius Server Address If using an External Radius Server , specify the numerical (non-DNS) IP address of a primary Remote Dial-In User Service (Radius) server . Optionally , specify the IP address of a secondary server . The secondary server acts as a failover server if the primary server cannot be contacted[...]

AP-5131 Access Poin t Product Referen ce Guide 6-14 7. Select the Accounting tab as required to define a timeout pe riod and retry interval Syslog for MUs interoperating with the AP-5131 and EAP authentication server . The items within this tab could be enable d or disabled depending on whether in ternal or External has been selected from the Radiu[...]

Configurin g Access Point Securit y 6-15 9. Select the Advanced Settings tab as required to specify a MU quiet period, timeou t interval, transmit period, and re try period for MUs and the authentication server . The ite ms within this tab are identical re gardless of whet her Internal or Exte rnal is selected from the Radius Server drop-down menu.[...]

AP-5131 Access Poin t Product Referen ce Guide 6-16 11. Click the Cancel button to undo any changes m ade within the 802.1x EAP Setting s field and return to the WLAN screen. This reverts all settings fo r the 802.1x EAP Settings field to the last saved configuratio n. 6.6 Configuring WEP Encryption Wired Equivalent Privacy (WEP) is a security prot[...]

Configurin g Access Point Securit y 6-17 5. Configure the WEP 64 Settings or WEP 128 Settings field as required to defin e the Pass Key used to generate the WEP k eys. These keys must be the same betw een the AP-5131 and its MU to encrypt packets between the two devices. Default (hexadecimal) keys for WEP 64 include : Pass K ey Specify a 4 to 32 ch[...]

AP-5131 Access Poin t Product Referen ce Guide 6-18 Default (hexadecimal) keys for WEP 128 include: 6. Click the Apply button to save any changes ma de within the WEP 64 Setting or WEP 128 Setting field of the New Security Policy screen. 7. Click the Cancel button to undo any changes mad e within the WEP 64 Setting or WEP 128 Setting field and retu[...]

Configurin g Access Point Securit y 6-19 3. Select the Ke yGuard radio button . The KeyGuard Settings field displays within the New Security Policy screen. 4. Ensure the Name of the security policy entered suits the intended configuration or function of the policy . 5. Configure the KeyGuard Settings field as re quired to define the Pass Key used t[...]

AP-5131 Access Poin t Product Referen ce Guide 6-20 Default (hexadecimal) keys for KeyGuard include: 6. Select the Allow WEP128 Clients checkbox (from within the KeyGuard Mixed Mod e field) to enable WEP128 clients to associate with an AP-5131’ s KeyGuard supported WLAN. The WEP128 clients mus t use the same keys a s the KeyGuard clients to inter[...]

Configurin g Access Point Securit y 6-21 3. Select the WP A/TKIP radio button. The WP A/TKIP Setti ngs field displays within the New Security Policy scre en. 4. Ensure the Name of the secu rity policy entered suits the intended con figuration or function of the policy . 5. Configure the Key Rotation Settings area as needed to bro adcast encryption [...]

AP-5131 Access Poin t Product Referen ce Guide 6-22 Default (hexadecimal) 256-bit keys for WP A/TKIP include: 1011121314151617 18191A1B1C1D1E1F 2021222324252627 28292A2B2C2D2E2F 7. Click the Apply button to save any changes made within the WPA/TKIP Settings field of the New Security Policy screen. 8. Click the Cancel button to undo any change s mad[...]

Configurin g Access Point Securit y 6-23 If security policies supporting WP A2 -CCMP exist, they appear within the Security Configuration screen. These exis ting policies can be used as is, or the ir properties edited by clicking the Edit button. T o configure a new security policy supporting WP A2-CCMP , continue to step 2. 2. Click the Create but[...]

AP-5131 Access Poin t Product Referen ce Guide 6-24 6. Configure the Key Settings area as needed to set an ASCII Passphra se and 128-bit key . Default (hexadecimal) 256-bit keys for WP2A/CCMP include: 1011121314151617 18191A1B1C1D1E1F 2021222324252627 28292A2B2C2D2E2F 7. Configure the WP A2-C CMP Mixed M ode field as needed to allow TKIP and WP A2 [...]

Configurin g Access Point Securit y 6-25 8. Configure the Fast Roaming (802.1x only) field as requ ired to en able ad ditional AP-5131 roaming and key c aching options. This featur e is applicable only when using 802.1 x EAP authentication with WP A2/CCMP . 9. Click the Apply button to save any changes made within the WPA2/CCMP Settings field of th[...]

AP-5131 Access Poin t Product Referen ce Guide 6-26 2. Refer to the Global Firewall Disable field to enable or disable th e AP-5131 firewall. 3. Refer to the T imeout Configuration field to define a timeout interval to terminate IP address translations. 4. Refer to the Configurable Firewall Filters field to set the following firewall filters: Disab[...]

Configurin g Access Point Securit y 6-27 5. Click Apply to save any changes to the Firewall screen. Na vigating away fro m the screen without clicking the Apply button results in a ll changes to the screens being lost. 6. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the Firewall sc reen[...]

AP-5131 Access Poin t Product Referen ce Guide 6-28 6.10.1 Configuring LA N to W AN Access The AP-5131 LAN can be configured to communicate with the WAN side of the AP-5131. Use the Subnet Access screen to allow/deny access to the AP-5131 W AN protocols, specify names and properties for e xisting protocols a nd enable pre-co nfigured protoco ls (F [...]

Configurin g Access Point Securit y 6-29 3. Configure the Rules field as required to allow or deny access to selected (enabled) protocols. Allow or Deny all protocols, except Use the drop-down menu to select either Allow or Deny . The selected setting applies to all protocols except those with enabled checkboxes and any traffic that is added to the[...]

AP-5131 Access Poin t Product Referen ce Guide 6-30 Pre configured Rules The following protocols are preconfigured with the AP-5131 . T o enable a protocol, check the box next to the protocol name. • HTTP - Hypertext T ransfer Protocol is the protocol for transferring files on the Web. HTTP is an application protocol running on top of the TCP/IP [...]

Configurin g Access Point Securit y 6-31 4. Click Apply to save any changes to the Subnet Access s creen. Navigating away from the screen without clicking the Apply bu tton results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the Subnet Acces[...]

AP-5131 Access Poin t Product Referen ce Guide 6-32 between two end points. ESP can also be used in tunnel mod e, providing security like that of a Vi rtual Private Network (VPN). • GRE - General Routing Encapsulation supports VPNs acro ss the Internet. GRE is a mechanism for encapsulating netwo rk layer prot ocols over any other netw ork layer p[...]

Configurin g Access Point Securit y 6-33 2. Configure the Settings field as needed to override the settings in the Subnet Acces s screen and import firewall rules into the Advanced Su bnet Access screen. 3. Configure the Firewall Rules field as required a dd, insert or delete firewall rules into the list of advanced rules. Override Subnet Access se[...]

AP-5131 Access Poin t Product Referen ce Guide 6-34 4. Click Apply to save any changes to the Advanced Subnet Acce ss screen. Navigating awa y from the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any changes made. Undo Changes reverts the settings displayed on the Ad v[...]

Configurin g Access Point Securit y 6-35 Use the VPN screen to add and remove VPN tunnels. T o configure an existing VPN tun nel, select it from the list in the VPN T unnels field. The selected tunnel’ s configuration displays in a VPN T unnel Config field. T o configure a VPN tunn el on the AP -5131: 1. Select Network Configuration -> WAN -&g[...]

AP-5131 Access Poin t Product Referen ce Guide 6-36 If AP-5131 #1 has the following values : • W AN IP address: 20.1.1.2 • LAN IP address: 10.1.1.1 • Subnet Mask: 255.0.0.0 Then, the VPN values for AP-5131 #2 should be: • Remote subnet: 10.1.1.0 or 10.0.0.0 • Remote subnet mask: 255.0.0.0 • Remote gateway: 20.1.1.2 3. If a VPN tunnel h [...]

Configurin g Access Point Securit y 6-37 Subnet name Use the drop-down menu to specify the LAN1 or LAN2 connection used for routing VPN traffic. Remember , only one LAN connection can be active on the AP-5131 Ethernet port at a time. The LAN connection specified from the LAN screen to receive priority for Ethernet port connectivity may be the bette[...]

AP-5131 Access Poin t Product Referen ce Guide 6-38 4. Click Apply to save a ny changes to the VPN screen as well as changes made to the Auto Key Settings, IKE Settings and Man ual Key Settings screens. Naviga ting away from the screen without clicking the Appl y button results in all changes to the screen s being lost. 5. Click Undo Changes (if ne[...]

Configurin g Access Point Securit y 6-39 3. Configure the Manual Key Settings screen to modify the following: NOTE When entering Inbound o r Outbound encryption or authen tication keys, an error message could display stating the keys provide d are “weak”. Some WEP attack tools invoke a dictio nary to hack WEP keys based on commonly used words. [...]

AP-5131 Access Poin t Product Referen ce Guide 6-40 Inbound AH Authentication Key Configure a key for computing the integrity check on inbound traffic with the selected authentication algorithm. The key must be 32/40 (for MD5/SHA1) hexadecimal (0-9, A-F) characters in length. The key value must match the corresponding outbound key on the remote sec[...]

Configurin g Access Point Securit y 6-41 The Inbound and Ou tbound SPI settings are required to be in terpolated to function c orrectly . For example: AP1 Inbound SPI = 800 AP1 Outbound SPI = 801 Inbound ESP Encryption Key Enter a key for inbound traffic. The length of the key is determined by the selected encryption algorithm. The key must match t[...]

AP-5131 Access Poin t Product Referen ce Guide 6-42 AP2 Inbound SPI = 801 AP2 Outbound SPI = 800 4. Click Ok to return to the VPN screen. Click A pply to retain the s ettings made on the Manual Key Settings screen. 5. Click Cancel to return to the VPN screen without retaining the changes made to the Manual Key Settings screen. 6.11.2 Configuring Au[...]

Configurin g Access Point Securit y 6-43 3. Configure the Auto Key Settings screen to modify the following: Use Perfect Forward Secrecy Forward secrecy is a key-establishment protocol guaranteeing the discovery of a session key or long-term private k ey does not compromise the keys of other sessions. Select Ye s to enable Perfect Forward Secrecy . [...]

AP-5131 Access Poin t Product Referen ce Guide 6-44 4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the Auto Key Settings screen. 5. Click Canc el to return to the VPN screen without re tain ing the changes made to this screen. 6.11.3 Configuring IKE Key Settings The Internet Key E xchange (IKE) is a n IPsec stan[...]

Configurin g Access Point Securit y 6-45 3. Configure the IKE Key Settings screen to modify the following: Operation Mode The Phase I protocols of IKE are based on the ISAKMP identity- protection and aggressive exchanges. IKE main mode refers to the identity-protection exchange, and IKE aggressive mode refers to the aggressive exchange. • Main - [...]

AP-5131 Access Poin t Product Referen ce Guide 6-46 Local ID T ype Select the ty pe of ID to be used for the AP-5131 end of the SA. • IP - Select IP if the local ID type is the IP address specified as part of the tunnel. • FQDN - Use FQDN if the local ID is a fully qualified domain name (such as sj.symbol.com ). • UFQDN - Select UFQDN if the [...]

Configurin g Access Point Securit y 6-47 IKE Authentication Algorithm IKE provides data authentication and anti-replay services for the VPN tunnel. Select an authenticati on methods from the drop-down menu. • MD5 - Enables the Message Digest 5 algorithm. No keys are required to be manually provided. • SHA1 - Enables Secure Hash Algorithm. No ke[...]

AP-5131 Access Poin t Product Referen ce Guide 6-48 4. Click Ok to return to the VPN screen. Click Apply to retain the settings made on the IKE Settings screen. 5. Click Cancel to return to the VPN screen without retaining the changes made to the IKE Settings screen. 6.11.4 Vi ewing VPN Status Use the VPN Status screen to display the status of the [...]

Configurin g Access Point Securit y 6-49 2. Reference the Security Associations field to view the following: T unnel Name The T unnel Name column lists the names of all the tunnels configured on the AP-5131 . For information on configuring a tunnel, see Configuring VPN T unnels on page 6-34 . Status The Status column lists the status of each config[...]

AP-5131 Access Poin t Product Referen ce Guide 6-50 3. Click the Reset VPNs button to reset active VPNs. Selecting Reset VPNs forces renegotiation of all the Security Associations and keys. Users could notice a slight p ause in network performance. 4. Reference the IKE Summary field to view the following: 5. Click Logout to securely exit the AP-5 1[...]

Configurin g Access Point Securit y 6-51 T o configure content filte ring for the AP -5131: 1. Select Network Configuration -> WAN -> Content Filtering from the AP-5131 menu tree. 2. Configure the HTTP field to config ure block Web proxies and URL extensions. Block Outbound HTTP HyperT ext T ransport Protocol (HTTP) is the protocol used to tr[...]

AP-5131 Access Poin t Product Referen ce Guide 6-52 3. Configure the SMTP field to disable or restrict sp ecific kinds of network mail traffic. 4. Configure the FT P field to block or restrict vari ous F TP traffic on the network. Block Outbound SMTP Commands Simple Mail T ransport Protocol (SMTP) is the Internet standard for host-to-host mail tran[...]

Configurin g Access Point Securit y 6-53 5. Click Apply to save any changes to the Co ntent Filtering screen. Nav igating away from the screen without clicking the Apply bu tton results in all changes to the screens being lost. 6. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings dis played on the Co nte[...]

AP-5131 Access Poin t Product Referen ce Guide 6-54 The rogue detection interval is used in conjuncti on with Symb ol MUs that identify themselv es as rogue detection c apable to th e AP-5131. The detection interval defines how often the AP-5131 requests these MUs to scan for a rogue AP . A shorter interval can effect the perfo rmance of the MU, bu[...]

Configurin g Access Point Securit y 6-55 3. Use the Allowed AP List field to restrict Symbol AP’ s from Rogue AP detection and create a list of device MAC addresses and ESSID’ s approved for interoperability with the AP -5131. RF Scan by MU Select the RF Scan by MU checkbox to enable MUs to scan for potential rogue APs within the network. Defin[...]

AP-5131 Access Poin t Product Referen ce Guide 6-56 4. Click Apply to save any changes to the Rogue AP Detection scree n. Navigating away fro m the screen without clicking Apply results in all changes to the screens being lost. 5. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the Rogue A[...]

Configurin g Access Point Securit y 6-57 The Active APs screen displays with detecte d rogue devices displayed within the Rogue APs table. 2. Enter a value (in minutes) in the Allowed AP s Age Out T ime field to indicate the number of elapsed minutes before an AP will be remove d from the approv ed list and reevaluated. A zero (0) for this value (d[...]

AP-5131 Access Poin t Product Referen ce Guide 6-58 6. Highlight a rogue AP and click the Details butto n to display a screen with device and detection information specific to that rog ue device. This informatio n is helpful in determining if a rogue AP should be moved to the Allo wed APs table. For more information on the displaying information on[...]

Configurin g Access Point Securit y 6-59 3. Refer to the Rogue AP Detail field for the following in formation: 4. Refer to the Rogue Detector Det ail field for the follow ing informatio n: BSSID/MAC Displays the MAC address of the rogue AP . This information could be useful if the MAC address is determined to be a Symbol MAC address and the device [...]

AP-5131 Access Poin t Product Referen ce Guide 6-60 5. Click OK to securely exit the Detail screen and return to the Active APs screen. 6. Click Canc el (if necessary) to undo any chan ges made and return to the Active APs sc reen. 6.13.2 Using MUs to Detect Rogue Devices The AP-5131 can use an associa ted MU that has its rogue AP detection feature[...]

Configurin g Access Point Securit y 6-61 2. Highlig ht an MU from within the Rogue AP enabled MUs field and click the s can button. The target MU begins scannin g for rogue devices using the detection parameters defined within the Rogue AP Detection screen. T o modify th e detection parameters, see Configuring Rogue AP Detection on page 6-53 . Thos[...]

AP-5131 Access Poin t Product Referen ce Guide 6-62 6. Click Logout to return to the Rogue AP Detectio n screen. 6.14 Configuring User Authentication The AP-5131 can work with external RADIUS and LDAP Servers (AAA Servers) to provide user database informatio n and user authentication. 6.14.1 Configuring the Radius Server The Radius Server screen en[...]

Configurin g Access Point Securit y 6-63 3. Use the TTLS/PEAP Configuration field to specify the Radius Server defau lt EAP type, EAP authentication type and a Server or CA certificate (if used). LDAP If LDAP is selected, the switch w ill use the data in an LDAP server . Configure the LDAP server settings on the LDAP screen under RADIUS Server on t[...]

AP-5131 Access Poin t Product Referen ce Guide 6-64 Default Authentication Ty p e Specify a PEAP and/or TTLS Authentication T ype for EAP to use from the drop-down menu to the right of each checkbox item. PEAP options include: •G T C - EAP Generic T oken Card (GTC) is a challenge handshake authentication protocol using a hardware token card to pr[...]

Configurin g Access Point Securit y 6-65 4. Use the Radius Client Authenticat ion table to config ure multiple shared secrets based on the subnet or host attempting to authentic ate with the Radius server . Use the Add button to add entries to th e list. Modify the foll owing in formation as needed within the table. 5. Click Apply to save any chang[...]

AP-5131 Access Poin t Product Referen ce Guide 6-66 2. Enter the appropriate information within the LDAP Configuration field to allow the AP-513 1 to interoperate with the LDAP server . Consult with your LDAP server administrator for details on how to define the values in this screen. LDAP Server IP Enter the IP address of the external LDAP server [...]

Configurin g Access Point Securit y 6-67 3. Click Apply to save any changes to the L DAP screen. Navigating a way from the scre en without clicking Apply results in all changes to the screen b eing lost. 4. Click Undo Changes (if necessary) to undo any change s made. Undo Changes reverts the settings displayed on the LDAP s creen to the last saved [...]

AP-5131 Access Poin t Product Referen ce Guide 6-68 2. Refer to the Proxy Configuratio n field to define the proxy server’ s retry count and time out values. 3. Use the Add button to add a new proxy server . Define the following information for each entry : Retry Count Enter a value between 3 and 6 to indicate the number of times the AP-5131 atte[...]

Configurin g Access Point Securit y 6-69 4. T o remove a ro w , select the row a nd click the De l (Delete) button. 5. Click Apply to save any changes to the Proxy screen. Navigating away from th e screen without clicking Apply results in all changes to the screen b eing lost. 6. Click Undo Changes (if necessary) to undo any change s made. Undo Cha[...]

AP-5131 Access Poin t Product Referen ce Guide 6-70 Refer to the Groups field for a list of all groups in the local Rad ius database. The groups are listed in the order added . Although groups c an be added an d deleted, there is no ca pability to edit a group na me. 2. Click the Add button and enter the name of the group in the new blan k field in[...]

Configurin g Access Point Securit y 6-71 7. Click the List of Groups cell. A new screen displays enabling you to associa te groups with the user . For more information on mapping gro ups with a user , see Mapping Users to Groups on page 6-71 . 8. Click Apply to save a ny changes to the Users screen. Navigating away from the screen without clicking [...]

AP-5131 Access Poin t Product Referen ce Guide 6-72 3. T o add the user to a group, select the group in the Available list (on the right) and click the <-Add button. Assigned users will display within the Assigned table. Map one or more groups as needed for group authentication acce ss for this particular user . 4. T o remove the user from a gro[...]

Configurin g Access Point Securit y 6-73 WLAN or editing the properties of an existing WLAN, see Creating/Editing Individual WLANs on page 5-24 1. Select User Authentication -> Radius Server -> Access Policy from the AP-513 1 menu tree. 2. Click the WLANs button to the right o f a specific g roup name. A pop-up window displays with the name o[...]

AP-5131 Access Poin t Product Referen ce Guide 6-74 7. Click Logout to securely exit the AP-5 131 Symbol Access Point applet. A prompt display s confirming the logout before the applet is closed.[...]

Monitoring Statistics The AP-5131 has functionality to display robust transmit and receive statistics for its W AN and LAN port. Wireless Local Area Network (WLAN) stats can also be displayed collectively for each enabled WLAN as well as individually for up to 16 specific WLANs. T ransmit and receive s tatistics can also be displayed for th e AP-51[...]

AP-5131 Access Poin t Product Referen ce Guide 7-2 See the following section s for more details on viewing statistics for the AP-5131: • Viewing W AN Statistics • Viewing LAN Statistics • Viewing Wireless Statistics • Viewing Radio Statistics Summary • Viewing MU Statistics Summary • Viewing the Mesh Statistics Summary • Viewing Known[...]

Monitor ing Statisti cs 7-3 2. Refer to the Information field to reference the following AP-5131 W AN data: Status The Status field displays Enabled if the W AN interfac e is enabled on the WAN screen. If the W AN interface is disabled on the W AN screen, the W AN Stats sc reen displays no connection information and statistics. T o enable the W AN [...]

AP-5131 Access Poin t Product Referen ce Guide 7-4 3. Refer to the Received field to reference data received over the AP-5131 W AN port. 4. Refer to the T ransmitted field to reference data received over the AP-5131 WAN port. Link The Link field displays Up if the W AN connection is active between the AP-5131 and network, and Down if the WAN connec[...]

Monitor ing Statisti cs 7-5 5. Click the Clear WAN Stats button to reset each of the data collection counters to zero in order to begin new data collections. The RX/TX Pack ets and RX/TX Bytes totals remain at their present values and are not cleared. Do not clear the W AN stats if currently in an important data gathering activity or risk losing al[...]

AP-5131 Access Poin t Product Referen ce Guide 7-6 7.2 V iewing LAN Statistics Use the LAN Stats screen to monitor the activity of the AP-5131 LAN1 or LAN2 connection. The Information field of the LAN Stats screen displays network traffic information as monito red over the AP-5131 LAN1 or LAN2 port. The Received and T ransmitted fields of the scree[...]

Monitor ing Statisti cs 7-7 3. Refer to the Received field to view data received over the AP-5131 LAN port. 4. Refer to the T ransmitted field to view statistics transmitted over the AP-5131 LAN port. Network Mask The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network. These valu[...]

AP-5131 Access Poin t Product Referen ce Guide 7-8 5. Click the Clear LAN Stats button to reset each of the data collection counters to zero in order to begin new data collections. The RX/TX Pack ets and RX/TX Bytes totals remain at their present values and are not cleared. 6. Click the Logout button to securely exit the AP-5131 Symbol Access Point[...]

Monitor ing Statisti cs 7-9 7.2.1 V iewing a LAN’ s STP Statistics Each AP-5131 LAN has the ability to tra ck its own unique STP sta tistics. Refer to the LAN STP Stats page when assessing mesh networking function ality for each of the two AP-5131 LANs. AP-51 31s in bridge mode exchange config uration messages at regul ar intervals (typically 1 t[...]

AP-5131 Access Poin t Product Referen ce Guide 7-10 3. Refer to the Port Interface T able to assess the state of the traffic over the ports listed within the table for the root and bridge and designated bridges. Designated Root Displays the AP-5131 MAC address of the bridge defined as the root bridge in the Bridge STP Configuration screen. For info[...]

Monitor ing Statisti cs 7-11 4. Click the Logout button to securely exit the AP-5131 Symb ol Access Point applet. There will be a prompt confirming logout before the applet is closed. 7.3 V iewing Wireless Statistics Use the WLAN Statistics Summary screen to view overview statistics for active (en abled) WLANs on the AP-5131. The WLAN Summary field[...]

AP-5131 Access Poin t Product Referen ce Guide 7-12 2. Refer to the WLAN Summary field to reference high-level data for each enabled WLAN. Name Displays the names of all the enabled WLANs on the AP-5131 . For information on enabling a WLAN, see Enabling Wireless LANs (WLANs) on page 5-22 . MUs Displays the total number of MUs currently associated w[...]

Monitor ing Statisti cs 7-13 3. Refer to the T otal AP RF T raffic field to view throug hput information for the AP-5131 and WLAN. 4. Click the Clear RF Stats button to reset eac h of the data collec tion counters to zero in ord er to begin new data collections. 5. Click the Logout button to securely exit the AP-5131 Symbol Access Point ap plet. A [...]

AP-5131 Access Poin t Product Referen ce Guide 7-14 information. The T raffic field displays statistics on RF traffic and through put. The RF Status field displays information on RF signal averages from the as sociated MUs. The Error field display s RF traffic errors based on re tries, dropped pack ets, and undecry ptable packets. The WLAN Stats sc[...]

Monitor ing Statisti cs 7-15 3. Refer to the T raffic field to view performance and through put information for the WLAN selected from the AP-5131 menu tree. Encryption T ype Displays the encryption method defined for the WLAN. If the encryption type does not match the desired scheme for the WLAN or needs to be enabled, see Enabling Authentication [...]

AP-5131 Access Poin t Product Referen ce Guide 7-16 4. Refer to the RF Status field to view the following MU sign al, noise and perfo rmance information for the WLAN selected from the AP-5131 men u tree. 5. Refer to the Errors field to view MU association error s t atistics for the WLAN selected from the AP-5131 menu tree. Avg MU Signal Displays th[...]

Monitor ing Statisti cs 7-17 6. Click the Clear WLAN Stats button to rese t each of the data collection c ounters to zero in order to begin new data collectio ns. Do not clear the WLAN stats if currently in an important data gathering activity or risk losing all data calculations to that point. 7. Click the Logout button to securely exit the AP-513[...]

AP-5131 Access Poin t Product Referen ce Guide 7-18 3. Click the Clear All Radio Stats button to reset each of the da ta collection counters to zero in order to begin new data collection s. Do not clear the radio stats if currently in an important data gathering acti vity or risk losing all data calculations to that point. For information on viewin[...]

Monitor ing Statisti cs 7-19 dropped or could not decrypt. The info rmation within the 802.11 a Radio Statistics screen is view-only with no configurable data fields. T o view detailed radio statistics: 1. Select Status and Statistics -> Radio Stats -> Radio1(802.11b/g) Stats from th e AP-5131 menu tree. 2. Refer to the Information field to v[...]

AP-5131 Access Poin t Product Referen ce Guide 7-20 3. Refer to the T raffic field to view performan ce and through put information for the target AP-5131 802.11a or 802.1 1b/g radio. Placement Lists whether the AP-5131 radio is indoors or outdoors. T o change the placement setting, see Configuring the 802.11a or 802.11b/g Radio on page 5-48 . Curr[...]

Monitor ing Statisti cs 7-21 4. Refer to the RF Status field to view the following MU sign al, noise and perfo rmance information for the targe t AP-5131 802.11a or 802.11b/g radio. 5. Refer to the Errors field to reference retry information as well as data transmissions the target AP-5131 802.11a or 802.11 b/g radio eithe r gave up on could not de[...]

AP-5131 Access Poin t Product Referen ce Guide 7-22 7.4.1.1 Retry Histogram Refer to the Retry Histrogra m screen for an overview of the retries transmitted by an AP -5131 radio and whether those retries contained any data packe ts. Use this information in combination with the error fields within a Radio Stats screen to assess overall radio perform[...]

Monitor ing Statisti cs 7-23 2. Click Apply to save any changes to the Ra dio Histogram screen. Navigatin g away from the screen without clicking Apply results in chan ges to the screens being lost. 3. Click Un do Changes (if necessary) to undo any changes made to the s creen. Undo Changes reverts the settings to the last saved configur ation. 4. C[...]

AP-5131 Access Poin t Product Referen ce Guide 7-24 2. Refer to the MU List field to reference associated MU address, throughput and retry information. 3. Click the Refresh button to update the data collections displayed without resetting the data collections to zero. 4. Click the Echo T est button to display a screen for verifyin g the link with a[...]

Monitor ing Statisti cs 7-25 8. Click the Logout button to securely exit the AP-5131 Sym bol Access Point applet. A prom pt displays confirming the logout before the applet is closed. 7.5.1 Viewing MU Details Use the MU Details screen to displa y throughput, signal streng th and transmit error informatio n for a specific MU associated with the AP-5[...]

AP-5131 Access Poin t Product Referen ce Guide 7-26 5. Refer to the T raffic field to view individual MU RF throughput information. QoS Client T ype Displays the data type transmitted by the mobile unit. Possible types include Legacy , Voi c e , WMM Baseline and Power S ave . For more information, see Setting the WLAN Quality of Service (QoS) Polic[...]

Monitor ing Statisti cs 7-27 6. Refer to the RF Status field to view MU signal and signal disturbance information. 7. Refer to the Errors field to view MU retry information and statistics on packets not transmitted. 8. Click OK to exit the screen. 7.5.2 Pinging Individual MUs The AP-5131 can verify its link with an MU by sending WNMP ping packets t[...]

AP-5131 Access Poin t Product Referen ce Guide 7-28 T o ping a specific MU to assess its connectio n with an AP-5131: 1. Select Status and Statistics - > MU Stats from the AP-5131 menu tree. 2. Select the Echo T est button from within the MU Stats Summary screen 3. Specify the following ping test parameters . 4. Click the Ping button to begin tr[...]

Monitor ing Statisti cs 7-29 7.6 V iewing the Mesh Statistics Summary The AP-5131 has the capability of dete cting and disp laying the pro perties of other access points in mesh network (either bas e bridges or client bridges) mode . This info rm ation is used to c reate a list of known wireless bridges. T o view detected mesh network statistics: 1[...]

AP-5131 Access Poin t Product Referen ce Guide 7-30 2. Click the Refresh button to update the display of the Mesh Statistics Summary screen to the latest values. 3. Click the Details button to displa y address and radio information for those AP-5131s in a client bridge config uration with this detecting AP-5131. 4. Click the Logout button to secure[...]

Monitor ing Statisti cs 7-31 The Known AP Statistics screen displays the following info rmation: 2. Click the Clear Known AP Stats button to reset each of the data collection counters to zero in order to begin new data collection s. 3. Click the Details button to display AP-5131 addres s and radio information. IP Address The network-assigned Intern[...]

AP-5131 Access Poin t Product Referen ce Guide 7-32 The Known AP Details screen displays the ta r get AP’ s MAC address, IP address, radio channel, number o f associated MUs, packet th roughput per second, radio type(s), mode l, firmware version, ESS and client bridges currently connected to the AP radio. Use this information to determine whe the[...]

Monitor ing Statisti cs 7-33 5. Click the Send Cfg to APs button to send the your AP-5131’ s configuration to other AP- 5131’ s. Recipient AP-5131 must be the same single or dual-radio model as the AP-5131 sending the configuration. The sending and re cipient AP-5131’ s must also be running the same major firmware version (i.e., 1.1 to 1.1). [...]

AP-5131 Access Poin t Product Referen ce Guide 7-34[...]

Command Line Interface Reference The AP-5131 Command Line Interface (CLI) is access ed through the serial port or a T elnet sessio n. The AP-5131 CLI follows the same conventions as the Web-based user interface. The CLI do es, however , provide an “escape seq uence” to provide diagno st ics for problem identification and resolution. The AP-5131[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-2 8.1.2 Accessing the CLI via T elnet T o connect to the AP-5131 CLI through a T eln et connection: 1. T elnet into the AP-5131 using an IP address of 19 2.168.0.1 2. Enter the default usern ame of admin and the de fault password of symbol . If this is your first time logging into the AP-5131, you a[...]

Command Line Interfa ce Reference 8-3 8.2 Admin and Common Commands AP5131>admin> Description: Displays admin configuration options. The items available under this command are shown below . Syntax: help Displays general user interface help. passwd Changes the admin password. summary Shows a system summary . network Goes to the network submen [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-4 AP5131>admin>help Description: Displays general CLI user interface help. Syntax: Example: admin> help ? : display command help - Eg. ?, show ?, s? * Restriction of “?”: : “?” after a function argument is treated : as an argument : Eg. admin<network.lan> set lan enable? : (He[...]

Command Line Interfa ce Reference 8-5 AP5131>admin>passwd Description: Changes the password for the admin log in. Syntax: Example: admin> passwd Old Admin Password:****** New Admin Password:****** Verify Admin Password:****** Password successfully updated For information on configuring passwords using the applet (GUI), see Setting Pas swor[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-6 AP5131>admin>summary Description: Displays the AP-5131’ s system summary . Syntax: Example: admin> summary AP-5131 firmware version 1.1.0.0-xxx country code us serial number 00A0F8716A74 WLAN 1: WLAN Name WLAN1 ESS ID 101 Radio 11a, 11b/g VLAN VLAN1 Security Ploicy Default QoS Ploicy De[...]

Command Line Interfa ce Reference 8-7 AP5131>admin>.. Description: Displays the parent menu of the current men u. This command appea rs in all of th e submenus under admin. In each case, it ha s the same function, to move up on e level in the directory structure. Example: admin(network.lan)> .. admin(network)>[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-8 AP5131>admin> / Description: Displays the root menu, that is, the top-level CLI menu. This command appears in all of the submenu s under admin. In each case, it has the same function, to move up to the top level in the directory structure. Example: admin(network.lan)> / admin>[...]

Command Line Interfa ce Reference 8-9 AP5131>admin>save Description: Saves the configuration to system flash. The save command appears in all of the submenus under admin. In eac h case, it has the same function, to save the current configuration. Syntax: Example: admin> save admin> save Saves configuration settings. The sa ve command wo[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-10 AP5131>admin>quit Description: Exits the command line interface session and terminates the s ession. The quit command appears in all of the sub menus under admin. In each case, it has the same function, to exit out of the CLI. On ce the quit command is executed, the login promp t displays a[...]

Command Line Interfa ce Reference 8-11 8.3 Network Commands AP5131>admin(network)> Description: Displays the network submenu . The items available under this command are shown below . lan Goes to the LAN submenu. wan Goes to the W AN submenu. wireless Goes to the Wireless Configuration submen u. firewall Goes to the firewall submenu. router G[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-12 8.3.1 Network LAN Commands AP5131>admin(network.lan)> Description: Displays the LAN submenu. The items availa ble under this command are show n below . For an overview of the AP-5131’ s LAN config uration options using the applet (GUI), see Configuring the LAN In terface on page 5-1 . sho[...]

Command Line Interfa ce Reference 8-13 AP5131>admin(network.lan)> show Description: Displays the AP-5131 LAN settings. Syntax: Example: admin(network.lan)> show LAN On Ethernet Port : LAN1 LAN Ethernet Timeout : disable 802.1x Port Authentication: Username : admin Password : ******** ** LAN1 Information ** LAN Name : LAN1 LAN Interface : e[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-14 Primary DNS Server : 192.168.0.2 Secondary DNS Server : 192.168.0.3 WINS Server : 192.168.0.255 admin(network.lan)> For information on displaying LAN information using the applet (GUI), see Configuring the LAN Interface on page 5-1 .[...]

Command Line Interfa ce Reference 8-15 AP5131>admin(network.lan)> set Description: Sets the LAN paramete rs for the LAN port. Syntax: Example: admin(network.lan)> admin(network.lan)> set lan 1 enable admin(network.lan)> set name 1 engineering admin(network.lan)> set ethernet-port-lan 1 admin(network.lan)> set timeout 45 admin(n[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-16 8.3.1.1 Network LAN, Bridge Commands AP5131>admin(network.lan.bridge)> Description: Displays the AP-5131 Bridge subm enu. For an overview of the AP-5131’ s mesh netwo rking options using the applet (GUI), see Configuring Me sh Networking on page 9-1 . show Displays the mesh config uration[...]

Command Line Interfa ce Reference 8-17 AP5131>admin(network.lan.bridge)> show Description: Displays the mesh bridge co nfiguration parameters for the AP-5131’ s LANs. Syntax: Example: admin(network.lan.bridge)> show ** LAN1 Bridge Configuration ** Bridge Priority :32768 Hello Time (seconds) :2 Message Age Time (seconds) :20 Forward Delay[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-18 AP5131>admin(network.lan.bridge)> set Description: Sets the mesh co nfiguration para meters for the AP-5131’ s LANs. Syntax: Example: admin(network.lan.bridge)> set priority 2 32768 admin(network.lan.bridge)> set hello 2 2 admin(network.lan.bridge)> set msgage 2 20 admin(network.[...]

Command Line Interfa ce Reference 8-19 8.3.1.2 Network LAN, WLAN-Mapping Commands AP5131>admin(network.lan.wlan-mapping)> Description: Displays the WLAN/Lan/Vlan Map ping submenu. For an overview of the AP-5131’ s VLAN configuration options using the applet (GUI), see Configuring VLAN Support on page 5-4 . show Displays the VLAN list curren[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-20 AP5131>admin(network.lan .wlan-mapping)> show Description: Displays the VLAN list currently defined for the AP-5131.. These parameters are defined with the set command. Syntax: Example: admin(network.lan.wlan-mapping)> show name -----------------------------------------------------------[...]

Command Line Interfa ce Reference 8-21 admin(network.lan.wlan-mapping)> show wlan WLAN1: WLAN Name :WLAN1 ESSID :101 Radio : VLAN : Security Policy :Default QoS Policy :Default For information on displaying the AP-5131 VLAN screens using the ap plet (GUI), see Configuring VL AN Support on p age 5-4 .[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-22 AP5131>admin(network.lan.wlan-mapping)> set Description: Sets VLAN parameters for the AP-5131. Syntax: Example: admin(network.lan.wlan-mapping)> set mgmt-tag 1 admin(network.lan.wlan-mapping)> set native-tag 2 admin(network.lan.wlan-mapping)> set mode 1 static admin(network.lan.wla[...]

Command Line Interfa ce Reference 8-23 AP5131>admin(network.lan.wlan-mapping)> create Description: Creates a VLAN for the AP-5131. Syntax: Example: admin(network.lan.wlan-mapping)> admin(network.lan.wlan-mapping)> create 5 vlan-5 For information on creating VLANs using the ap plet (GUI), see Co nfiguring VLAN Support on page 5-4 . creat[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-24 AP5131>admin(network.lan.wlan-mapping)> edit Description: Modifies a VLAN’ s name and ID. Syntax: For information on editing VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 . edit name < n a m e > Modifies an exisiting VLAN name (1-31 characters in length) id [...]

Command Line Interfa ce Reference 8-25 AP5131>admin(network.lan .wlan-mapping)> delete Description: Deletes a specific VLAN or all VLANs. Syntax: For information on deleting VLANs using the app let (GUI), see Config uring VLAN Support on page 5-4 . delete < V L A N i d > Deletes a specific VLAN ID (1-16). all Deletes all defined VLANs.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-26 AP5131>admin(network.lan .wlan-mapping)> lan-map Description: Maps an AP-5131 VLAN to a WLAN. Syntax: .. admin(network.lan.wlan-mapping)> lan-map wlan1 lan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 . lan-map <wlan name> <l[...]

Command Line Interfa ce Reference 8-27 AP5131>admin(network.lan .wlan-mapping)> vlan-map Description: Maps an AP-5131 VLAN to a WLAN. Syntax: admin(network.lan.wlan-mapping)> vlan-map wlan1 vlan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4 . vlan-map <wlan name> <vlan name> [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-28 8.3.1.3 Network LAN, DHCP Commands AP5131>admin(network.lan.dhcp)> Description: Displays the AP-5131 DHCP submen u. The items available are displayed be low . show Displays DHCP parameters. set Sets DHCP parameters. add Adds static DHCP addre ss assignments. delete Deletes static DHCP a ddr[...]

Command Line Interfa ce Reference 8-29 AP5131>admin(network.lan.dhcp)> show Description: Shows DHCP parameter setting s. Syntax: Example: admin(network.lan.dhcp)> show **LAN1 DHCP Information** DHCP Address Assignment Range: Starting IP Address : 192.168.0.100 Ending IP Address : 192.168.0.254 Lease Time : 86400 **LAN2 DHCP Information** D[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-30 AP5131>admin(network.lan.dhcp)> set Description: Sets DHCP parameters for the LAN port. Syntax: Example: admin(network.lan.dhcp)> set range 1 192.168.0.100 192.168.0.254 admin(network.lan.dhcp)> set lease 1 86400 admin(network.lan.dhcp)> show **LAN1 DHCP Information** DHCP Address [...]

Command Line Interfa ce Reference 8-31 AP5131>admin(network.lan.dhcp)> add Description: Adds static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> add 1 00A0F8112233 192.160.24.6 admin(network.lan.dhcp)> add 1 00A0F1112234 192.169.24.7 admin(network.lan.dhcp)> list 1 ----------------------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-32 AP5131>admin(network.lan.dhcp)> delete Description: Deletes static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> list 1 ----------------------------------------------------------------------------- Index MAC Address IP Address ---------------------------------------[...]

Command Line Interfa ce Reference 8-33 AP5131>admin(network.lan.dhcp)> list Description: Lists static DHCP address assignments. Syntax: Example: admin(network.lan.dhcp)> list 1 ----------------------------------------------------------------------------- Index MAC Address IP Address ---------------------------------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-34 8.3.1.4 Network T ype Filter Commands AP5131>admin(network.lan.type-filter)> Description: Displays the AP-5131 T ype Filter submenu. The items available under this command include: e show Displays the current Ethernet T ype exception list. set Defines Ethernet T ype Filter parameters. add A[...]

Command Line Interfa ce Reference 8-35 AP5131>admin(network.lan.type-filter)> show Description: Displays the AP-5131’ s current Ethernet T ype Filter configuration. Syntax: Example: admin(network.lan.type-filter)> show 1 Ethernet Type Filter mode : allow ----------------------------------------------------------------------------- index [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-36 AP5131>admin(network.lan.type-filter)> set Description: Defines the AP-5131 Ethernet T ype Filter configuration. Syntax: Example: admin(network.lan.type-filter)> set mode 1 allow For information on configuring the AP-5131’ s type filter settings using the applet (GUI), see Setting the [...]

Command Line Interfa ce Reference 8-37 AP5131>admin(network.lan.type-filter)> add Description: Adds an Ethernet T ype Filter entry . Syntax: Example: admin(network.lan.type-filter)> admin(network.wireless.type-filter)> add 1 8137 admin(network.wireless.type-filter)> add 2 0806 admin(network.wireless.type-filter)> show 1 Ethernet T[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-38 AP5131>admin(network.l an.type-filter)> delete Description: Removes an Ethe rnet T ype Filter entry indiv idually or the e ntire T ype Filter lis t. Syntax: Example: admin(network.lan.type-filter)> delete 1 1 admin(network.lan.type-filter)> show 1 Ethernet Type Filter mode : allow ---[...]

Command Line Interfa ce Reference 8-39 8.3.2 Network WAN Commands AP5131>admin(network.wan)> Description: Displays the W AN submenu. The items available under this command are shown below . For an overview of the AP-5131’ s W AN con fig uration options using the applet (GUI), see Co nfiguring W AN Settings on page 5 -14 . show Displays the [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-40 AP5131>admin(network.wan)> show Description: Displays the AP-5131 W AN port parameters. Syntax: Example: admin(network.wan)> show Status : enable WAN DHCP Client Mode : disable IP address : 0.0.0.0 Network Mask : 0.0.0.0 Default Gateway : 10.10.1.1 Primary DNS Server : 0.0.0.0 Secondary [...]

Command Line Interfa ce Reference 8-41 AP5131>admin(network.wan)> set Description: Defines the configuration of the AP-5131 WAN port. Syntax: Example: admin(network.wan)> admin(network.wan)> set dhcp disable admin(network.wan)> set ipadr 157.169.22.5 admin(network.wan)> set dgw 157.169.22.1 admin(network.wan)> set dns 1 157.169[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-42 8.3.2.1 Network W AN NA T Commands AP5131>admin(network.wan.nat)> Description: Displays the NA T submenu . The items available under th is command are shown below . For an overview of the AP-5131 NA T configuration options available using the applet (GUI), s ee Configuring Network Add ress [...]

Command Line Interfa ce Reference 8-43 AP5131>admin(network.wan.nat)> show Description: Displays AP-5131 NA T parameters. Syntax: Example: admin(network.wan.nat)> show 2 WAN IP Mode : disable WAN IP Address : 157.235.91.2 NAT Type : 1-to-many One to many nat mapping : LAN1 LAN2 Inbound Mappings : Port Forwarding unspecified port forwarding[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-44 AP5131>admin(network.wan.nat)> set Description: Sets NA T inbound and outboun d parameters. Syntax: Example: admin(network.wan.nat)> set type 1-to-many admin(network.wan.nat)> set ip 157.235.91.2 admin(network.wan.nat)> set mode 2 disable admin(network.wan.nat)> set unspec-ip 2 [...]

Command Line Interfa ce Reference 8-45 AP5131>admin(network.wan.nat)> add Description: Adds NA T entries. Syntax: Example: admin(network.wan.nat)> add 1 indoors udp 20 29 10.10.2.2 admin(network.wan.nat)> list 1 ----------------------------------------------------------------------------- index name prot start port end port internal ip [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-46 AP5131>admin(network.wan.nat)> delete Description: Deletes NA T entries. Syntax: Example: admin(network.wan.nat)> list 1 ----------------------------------------------------------------------------- index name prot start port end port internal ip translation port ------------------------[...]

Command Line Interfa ce Reference 8-47 AP5131>admin(network.wan.nat)> list Description: Lists AP-5131 NA T entries for the spec ified index. Syntax: Example: admin(network.wan.nat)> list 1 ----------------------------------------------------------------------------- index name Transport start port end port internal ip translation port ----[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-48 8.3.2.2 Network W AN, VPN Commands AP5131>admin(network.wan.vpn)> Description: Displays the VPN submenu. The items availab le under this command include: For an overview of the AP-5131 VPN options ava ilable using th e applet (GUI), see Configuring VPN T unnels on page 6-34 . add Adds VPN t[...]

Command Line Interfa ce Reference 8-49 AP5131>admin(netwo rk.wan.vpn)> add Description: Adds a VPN tunnel entry . Syntax: Example: admin(network.wan.vpn)> add 2 SJSharkey 209.235.44.31 206.107.22.46 255.255.255.224 206.107.22.1 If tunnel type is Manual, proper SPI values and Keys must be configured after adding the tunnel admin(network.wan[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-50 AP5131>admin(netwo rk.wan.vpn)> set Description: Sets VPN entry parameters. Syntax: set type <name> <tunnel type> Sets the tunnel type <name> to Auto or Manual for the specified tunnel name. authalgo <name> <authalgo> Sets the authentication algorith m for <[...]

Command Line Interfa ce Reference 8-51 For information on configuring VPN using the applet (GUI), see Configuring VPN T unnels on page 6-34 . salife <name> <lifetime> Defines the name of the tunnne l <name> the Security Association Life T ime <300-65535> applies to in seconds. ike opmode <name> <opmode> Sets the [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-52 AP5131>admin(network .wan.vpn)> delete Description: Deletes VPN tunnel entries. Syntax: Example: admin(network.wan.vpn)> list -------------------------------------------------------------------------- Tunnel Name Type Remote IP/Mask Remote Gateway Local WAN IP ---------------------------[...]

Command Line Interfa ce Reference 8-53 AP5131>admin(network.wan.vpn)> list Description: Lists VPN tunnel entries. Syntax: Example: admin(network.wan.vpn)> list -------------------------------------------------------------------------- Tunnel Name Type Remote IP/Mask Remote Gateway Local WAN IP ----------------------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-54 AP5131>admin(network .wan.vpn)> reset Description: Resets all of the AP-5131’ s VPN tunnels. Syntax: Example: admin(network.wan.vpn)> reset VPN tunnels reset. admin(network.wan.vpn)> For information on configuring VPN using the applet (GUI), see Configuring VPN T unnels on page 6-34[...]

Command Line Interfa ce Reference 8-55 AP5131>admin(network.wan.vpn)> stats Description: Lists statistics for all active tunnels. Syntax: Example: admin(network.wan.vpn)> stats ----------------------------------------------------------------------------- Tunnel Name Status SPI(OUT/IN) Life Time Bytes(Tx/Rx) --------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-56 AP5131>admin(network .wan.vpn)> ikestate Description: Displays statistics for all active tunnels using Internet Key Exchange (IKE). Syntax: Example: admin(network.wan.vpn)> ikestate ---------------------------------------------------------------------- Tunnel Name IKE State Dest IP Remai[...]

Command Line Interfa ce Reference 8-57 8.3.3 Network Wireless Commands AP5131>admin(network.wireless) Description: Displays the AP-5131 wireless submen u. The items available under this command in clude: wlan Displays the WLAN submenu used to create and configure up to 16 WLANs per AP-5131. security Displays the security submen u used to create [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-58 8.3.3.1 Network WLAN Commands AP5131>admin(network.wireless.wlan)> Description: Displays the AP-5131 wireless LAN (WLAN) submenu . The items available under this command in clude: e For an overview of the Wireless configuration options av ailable to the AP-5131 using the apple t (GUI), see [...]

Command Line Interfa ce Reference 8-59 AP5131>admin(network.wireless.wlan)> show Description: Displays the AP-5131’ s current WLAN configuration. Syntax: Example: admin(network.wireless.wlan)> show summary WLAN1 WLAN Name : Lobby ESSID : 101 Radio : 11a, 11b/g VLAN : Security Policy : Default QoS Policy : Default admin(network.wireless.w[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-60 AP5131>admin(network.wireless.wlan)> create Description: Defines the parameters of a new AP -5131 WLAN. Syntax: sh Example: admin(network.wireless.wlan.create)> show wlan ESS Identifier : WLAN Name : 802.11a Radio : available 802.11b/g Radio : not available Client Bridge Mesh Backhaul : [...]

Command Line Interfa ce Reference 8-61 Accept Broadcast ESSID : disable QoS Policy : Default admin(network.wireless.wlan.create)> show security ---------------------------------------------------------------------- Secu Policy Name Authen Encryption Associated WLANs ---------------------------------------------------------------------- 1 Default[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-62 AP5131>admin(network.wireless.wlan)> edit Description: Edits the properties of an existing WLAN policy . Syntax: For information on editing a WLAN using the applet (GUI), see Creating/Editing Individual WLANs on page 5-24 . edit <index> Edits the properties of an ex isting WLAN policy[...]

Command Line Interfa ce Reference 8-63 AP5131>admin(network.wireless.wlan)> delete Description: Deletes an existing WLAN. Syntax: For information on deleting a WLAN using the applet (GUI), see Creating/Editing Ind ividual WLANs on page 5-24 . delete <wlan-name> Deletes a target WLAN by name supplied. all Deletes all WLANs defined.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-64 AP5131>admin(network.w ireless.wlan.hotspot)> Description: Displays the Hotspot submenu. The items av ailable under this command include: e For information on configuring the Hotspot option s av ailable to the AP-5131 using the applet (GUI), see Configuring WLAN Hotspot Support on pa ge 5-4[...]

Command Line Interfa ce Reference 8-65 AP5131>admin(network.wireless.wlan.hotspot)> show Description: Displays the current AP -5131 Rogue AP detection configura tion. Syntax: Example: admin(network.wireless.wlan.hotspot)> show hotspot 1 WLAN1 Hotspot Mode : enable Hotspot Page Location : default External Login URL : www.sjsharkey.com Exter[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-66 AP5131>admin(network.wireless. wlan.hotspot)> redirection Description: Goes to the hotspot redirection menu. Syntax: Example: admin(network.wireless.wlan.hotspot)> set page-loc 1 www.sjsharkey.com admin(network.wireless.wlan.hotspot)> set exturl 1 fail www.sjsharkey.com For informatio[...]

Command Line Interfa ce Reference 8-67 AP5131>admin(network.wirel ess.wlan.hotspot)> radius Description: Goes to the hotspot Radius menu. Syntax: For information on configuring the Hotspot option s av ailable to the AP-5131 using the applet (GUI), see Configuring WLAN Hotspot Support on page 5-40 . set Sets the Radius hotspot configuration. s[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-68 AP5131>admin(network.wireles s.wlan.hotspot.radius)> set Description: Sets the Radius hotspot configura tion. Syntax: Example: admin(network.wireless.wlan.hotspot.radius)> set server 1 primary 157.235.121.1 admin(network.wireless.wlan.hotspot.radius)> set port 1 primary 1812 admin(net[...]

Command Line Interfa ce Reference 8-69 AP5131>admin(network.wireles s.wlan.hotspot.radius)> show Description: Shows Radius hotspot server details. Syntax: Example: admin(network.wireless.wlan.hotspot.radius)> show radius 1 Primary Server Ip adr : 157.235.12.12 Primary Server Port : 1812 Primary Server Secret : ****** Secondary Server Ip ad[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-70 AP5131>admin(network.wireles s.wlan.hotspot)> white-list Description: Goes to the hotspot white-list menu. Syntax: Example: admin(network.wireless.wlan.hotspot.whitelist)> add rule 1 157.235.21.21 admin(network.wireless.wlan.hotspot.whitelist)> show white-rule 1 ----------------------[...]

Command Line Interfa ce Reference 8-71 8.3.3.2 Network Security Commands AP5131>admin(network.wireless.security)> Description: Displays the AP-5131 wireless security submenu. The items available unde r this command include: For information the security config uration options available to the AP -5131 using the applet (GUI), see Configuring Se[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-72 AP5131>admin(network.wir eless.security)> show Description: Displays the AP-5131’ s current security configuration. Syntax: Example: admin(network.wireless.security)> show summary ---------------------------------------------------------------------- Secu Policy Name Authen Encryption [...]

Command Line Interfa ce Reference 8-73 AP5131>admin(network.wir eless.security)> create Description: Defines the parameter of AP -5131 security policies.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-74 Syntax: create Defines the parameters of a security policy . show Displays new or existing security policy parameters. set sec-name <name> Sets the name of the security policy . auth <authtype> Sets the authentication type for WLAN <idx> to <type> ( none , eap , or kerbero[...]

Command Line Interfa ce Reference 8-75 retry <number> Sets the maximum numbe r of reauthentication retries <retry> ( 1 - 99 ). accounting mode <mode> Enable or disable Radius accoun ting. server <ip> Set external Radius server IP address. port <port> Set external Radius server port number . secret <secret> Set ex[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-76 wep- keyguard passkey <passkey> The passkey used as a text abbreviation for the entire key length ( 4-32 ). index <key index> Selects the WEP/KeyGuard key (from one of the four potential values of <key index> ( 1 - 4 ). hex-key <kidx> <key string> Sets the WEP/Key Gu[...]

Command Line Interfa ce Reference 8-77 For information on configuring the encryption and authentication options available to the AP-5131 usin g the applet (GUI), se e Configuring Security Options on page 6-2 . preauth <mode> Enables or disables preauthentication (fast roaming). add-policy Adds the policy and exits. .. Disregards the policy cr[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-78 AP5131>admin(network.wireless.security .edit)> Description: Edits the properties of a specific security policy . Syntax: Example: admin(network.wireless.security)> edit 1 admin(network.wireless.security.edit)> show Policy Name : Default Authentication : Manual Pre-shared key/No Authen[...]

Command Line Interfa ce Reference 8-79 AP5131>admin(network.wir eless.security)> delete Description: Deletes a specific security policy . Syntax: For information on configuring the encryption and authentication options available to the AP-5131 usin g the applet (GUI), se e Configuring Security Options on page 6-2 . delete <sec-name> Rem[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-80 8.3.3.3 Network ACL Commands AP5131>admin(network.wireless.acl)> Description: Displays the AP-5131 Mobile Unit Access Control List (ACL) submenu. The ite ms available under this command include: show Displays the AP-5131’ s current ACL configuration. create Creates an MU ACL policy . edit[...]

Command Line Interfa ce Reference 8-81 AP5131>admin(network.wireless.acl)> show Description: Displays the AP-5131’ s current ACL configuration. Syntax: Example: admin(network.wireless.acl)> show summary ---------------------------------------------------------------------- ACL Policy Name Associated WLANs --------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-82 AP5131>admin(network.wireless.acl)> create Description: Creates a n MU ACL po licy . Syntax: Example: admin(network.wireless.acl.create)> show Policy Name : Front Lobby Policy Mode : allow ----------------------------------------------------------------------------- index start mac end m[...]

Command Line Interfa ce Reference 8-83 AP5131>admin(network.wireless.acl.edit)> Description: Edits the properties of an existing MU ACL policy . Syntax: For information on configuring the ACL options avai lable to the AP-513 1 using the applet (GUI), see Configuring a WLAN Access Control List (ACL) on page 5-31 . show Displays MU ACL policy a[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-84 AP5131>admin(network.wireless.acl)> delete Description: Removes an MU ACL policy . Syntax: For information on configuring the ACL options avai lable to the AP-513 1 using the applet (GUI), see Configuring a WLAN Acce ss Control List (ACL) on page 5-31 . delete <acl name> Deletes a pa [...]

Command Line Interfa ce Reference 8-85 8.3.3.4 Network Radio Co nfiguration Commands AP5131>admin(network.wireless.radio)> Description: Displays the AP-5131 Radio subm enu. The items available und er this command include: e show Summarizes AP -5131 radio para meters at a high-l evel. set Defines the AP-5131 ra dio configuration. radio1 Displa[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-86 AP5131>admin(network.wireless.radio)> show Description: Displays the AP-5131’ s current radio configuration. Syntax: Example: admin(network.wireless.radio)> show Radio Configuration Radio 1 Name : Radio 1 Radio Mode : enable RF Band of Operation : 802.11b/g (2.4 GHz) Wireless AP Config[...]

Command Line Interfa ce Reference 8-87 AP5131>admin(network.wireless.radio)> set Description: Enables an AP-5131 Radio and defines the RF band of operation. Syntax: Example: admin(network.wireless.radio)> set 11a disable admin(network.wireless.radio)> set 11bg enable admin(network.wireless.radio)> set mesh-base enable admin(network.w[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-88 AP5131>admin(network.wireless.radio.radio1)> Description: Displays a specific 802.11b/g radio submenu. The items available under this command include: Syntax: For information on configuring Radio 1 Configuration opti o ns available to the AP-5131 usin g the applet (GUI), see Setting the WLA[...]

Command Line Interfa ce Reference 8-89 AP5131>admin(network.wirel ess.radio.radio1)> show Description: Displays specific 802.11b/g radio settings. Syntax: Example: admin(network.wireless.radio.radio1)> show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.11b/g ERP Protection : Off Channel Sett[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-90 admin(network.wireless.radio.radio1)> show qos Radio QOS Parameter Set 11g-default ----------------------------------------------------------------------------- Access Category CWMin CWMax AIFSN TXOPs (32 usec) TXOPs ms --------------------------------------------------------------------------[...]

Command Line Interfa ce Reference 8-91 AP5131>admin(network.wireless.radio.802-11bg)> set Description: Defines specific 802.11b/g radio param eters. Syntax: Example: admin(network.wireless.radio.802-11bg)> set placement indoor admin(network.wireless.radio.802-11bg)> set ch-mode user admin(network.wireless.radio.802-11bg)> set channel[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-92 AP5131>admin(network.wireless.radio.802-11bg.advanced)> Description: Displays the advanced sub menu for the 802.11b/g radio. The items av ailable under this command include: Syntax: show Displays advanced ra dio setting s for the 802. 11b/g radi o. set Defines advanced parameters fo r the 8[...]

Command Line Interfa ce Reference 8-93 AP5131>admin(network.wireless. radio.802-11bg.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802 .11b/g radio. Syntax: Example: admin(network.wireless.radio.802-11bg.advanced)> show advanced ----------------------------------------------------------------------------- WLAN BSS[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-94 AP5131>admin(network.wireless. radio.802-11bg.advanced)> set Description: Defines advanced parameters for the targe t 802.11b/g radio. Syntax: Example: admin(network.wireless.radio.802-11bg.advanced)> set wlan demoroom 1 admin(network.wireless.radio.802-11bg.advanced)> set bss 1 demor[...]

Command Line Interfa ce Reference 8-95 AP5131>admin(network.wireless.radio.radio2)> Description: Displays a specific 802.11a rad io submenu. The items available un der this command include: Syntax: show Displays 802.11a radio s ettings set Defines specific 802.11a radio parameters. advanced Displays the Advanced radio settings subme nu. mesh [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-96 AP5131>admin(network.wireless.radio.802-11a)> show Description: Displays specific 802.11a rad io settings. Syntax: Example: admin(network.wireless.radio.802-11a)> show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.11a Channel Setting : use[...]

Command Line Interfa ce Reference 8-97 admin(network.wireless.radio.802-11a)> show qos Radio QOS Parameter Set: 11a default ----------------------------------------------------------------------------- Access Category CWMin CWMax AIFSN TXOPs (32 sec) TXOPs ms ----------------------------------------------------------------------------- Backgroun[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-98 AP5131>admin(network.wirel ess.radio.802-11a)> set Description: Defines sp ecific 802.11 a radio para meters. Syntax: Example: admin(network.wireless.radio.802-11a)> admin(network.wireless.radio.802-11a)> set placement indoor admin(network.wireless.radio.802-11a)> set ch-mode user [...]

Command Line Interfa ce Reference 8-99 AP5131>admin(network.wirel ess.radio.802-11a.advanced)> Description: Displays the advanced sub menu for the 802-11a radio. The items available unde r this command include: Syntax: show Displays advanced radio settings for th e 802-11a radio. set Defines advanced parameters fo r the 802-11a radio. .. Goes[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-100 AP5131>admin(network.wireless. radio.802-11a.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802 .11a radio. Syntax: Example: admin(network.wireless.radio.802-11a.advanced)> show advanced ---------------------------------------------------------------------------[...]

Command Line Interfa ce Reference 8-101 AP5131>admin(network.wireless. radio.802-11a.advanced)> set Description: Defines advanced parameters for the targe t 802..11a radio. Syntax: Example: admin(network.wireless.radio.802-11a.advanced)> set wlan demoroom 1 admin(network.wireless.radio.802-11a.advanced)> set bss 1 demoroom For informati[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-102 8.3.3.5 Network Quality of Service (QoS) Commands AP5131>admin(network.wireless.qos)> Description: Displays the AP-5131 Quality of Service (QoS) submenu. The items available under this command inc lude: e show Displays AP-5131 QoS policy inform ation. create Defines the parameters of the Q[...]

Command Line Interfa ce Reference 8-103 AP5131>admin(network.wireless.qos)> show Description: Displays the AP-5131’ s current QoS policy by summary or individual policy . Syntax: Example: admin(network.wireless.qos)> show summary ---------------------------------------------------------------------- QOS Policy Name Associated WLANs -----[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-104 AP5131>admin(network.wireless.qos.create)> Description: Defines an AP-5131 QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 . show Displays QoS polic[...]

Command Line Interfa ce Reference 8-105 AP5131>admin(network.wireless.qos.edit)> Descripton: Edits the properties of an existing QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 . show Displays QoS polic[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-106 AP5131>admin(network.wireless.qos)> delete Description: Removes a QoS policy . Syntax: For information on configuring the WLAN QoS option s av ailable to the AP-5131 using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-34 . delete <qos-name> <all&[...]

Command Line Interfa ce Reference 8-107 8.3.3.6 Network Bandwith Management Commands AP5131>admin(network.wireless.bandwidth)> Description: Displays the AP-5131 Bandwidth Management submenu. The items available under this command include: e show Displays Bandwidth Management information for how data is processed by the AP-5131. set Defines Ba[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-108 AP5131>admin(network.wireless.bandwidth)> show Description: Displays the AP-5131’ s current Bandwidth Management configuratio n. Syntax: Example: admin(network.wireless.bandwidth)> show Bandwidth Share Mode : First In First Out For information on configuring the Bandwidth Manage ment [...]

Command Line Interfa ce Reference 8-109 AP5131>admin(network.wireless.bandwidth)> set Description: Defines the AP-5131 Bandwidth Management configuration. Syntax: For information on configuring the Bandwidth Manage ment opti ons available to the AP-5131 us ing the applet (GUI), see Configuring Bandwidth Manageme nt Settings on page 5-55 . set[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-110 8.3.3.7 Network Rogue-AP Commands AP5131>admin(network .wireless.rogue-ap)> Description: Displays the Rogue AP submenu. The ite ms available under this command include: e show Displays the current AP-5131 Rogue AP detection config uration. set Defines the Rogue AP detection method. mu-scan[...]

Command Line Interfa ce Reference 8-111 AP5131>admin(network.w ireless.rogue-ap)> show Description: Displays the current AP -5131 Rogue AP detection configura tion. Syntax: Example: admin(network.wireless.rogue-ap)> show MU Scan : disable MU Scan Interval : 60 minutes On-Channel : disable Detector Radio Scan : enable Auto Authorize Symbol [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-112 AP5131>admin(network.w ireless.rogue-ap)> set Description: Defines the AP-5131 ACL rogue AP method. Syntax: Example: admin(network.wireless.rogue-ap)> admin(network.wireless.rogue-ap)> set mu-scan enable admin(network.wireless.rogue-ap)> set interval 10 admin(network.wireless.rogu[...]

Command Line Interfa ce Reference 8-113 AP5131>admin(network.wir eless.rogue-ap.mu-scan)> Description: Displays the Rogue-AP mu-sca n submenu. Syntax: show Displays all APs located by the MU scan. start Initiates scan immediately by the MU. .. Goes to the parent menu. / Goes to the root menu. save Saves the configuration to system flash. quit[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-114 AP5131>admin(network.wireles s.rogue-ap.mu-scan)> start Description: Initiates an MU scan from a user provided MAC address. Syntax: For information on configuring the Rogue AP options available to the AP-5131 us ing the ap plet (GUI), see Configuring Rogue AP Detection on page 6-53 . start[...]

Command Line Interfa ce Reference 8-115 AP5131>admin(network.wirel ess.rogue-ap.mu-scan)> show Description: Displays the results of an MU scan. Syntax: For information on configuring the Rogue AP options available to the AP-5131 using the applet (GUI), see Configuring Rogue AP Detection on pag e 6-53 . show Displays all APs located by the MU [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-116 AP5131>admin(network.wirel ess.rogue-ap.allowed-list)> Description: Displays the Rogue-AP allowed-lis t submenu. show Displays the rogue AP allowed list add Adds an AP MAC address and ESSID to the allowed list. delete Deletes an entry or all en tries from the allowed list. .. Goes to the p[...]

Command Line Interfa ce Reference 8-117 AP5131>admin(network.wireless. rogue-ap.allowed-list)> show Description: Displays the Rogue AP allowed List . Syntax: Example: admin(network.wireless.rogue-ap.allowed-list)> show ----------------------------------------------------------------------------- index ap essid -----------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-118 AP5131>admin(network.wireless. rogue-ap.allowed-list)> add Description: Adds an AP MAC address and ESSID to existing allowed list. Syntax: Example: admin(network.wireless.rogue-ap.allowed-list)> add 00A0F83161BB 103 admin(network.wireless.rogue-ap.allowed-list)> show ----------------[...]

Command Line Interfa ce Reference 8-119 AP5131>admin(network.wireless. rogue-ap.allowed-list)> delete Description: Deletes an AP MAC address and ESSID to existing allowed list. Syntax: For information on configuring the Rogue AP options available to the AP-5131 using the applet (GUI), see Configuring Rogue AP Detection on pag e 6-53 . delete [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-120 8.3.4 Network Firewall Commands AP5131>admin(network.firewall)> Description: Displays the AP-5131 firewall su bmenu. The items available under this command include : show Displays the AP-5131’ s curre nt firewall c onfiguration. set Defines the AP-5131’ s firewall parameters. access En[...]

Command Line Interfa ce Reference 8-121 AP5131>admin(network.firewall)> show Description: Displays the AP-5131 fi rewall parameters. Syntax: Example: admin(network.firewall)> show Firewall Status : disable NAT Timeout : 10 minutes Configurable Firewall Filters: ftp bounce attack filter : enable syn flood attack filter : enable unaligned ip[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-122 AP5131>admin(network.firewall)> set Description: Defines the AP-5131 firewall parameters. Syntax: Example: admin(network.firewall)> set mode enable admin(network.firewall)> set ftp enable admin(network.firewall)> set ip enable admin(network.firewall)> set seq enable admin(netwo[...]

Command Line Interfa ce Reference 8-123 AP5131>admin(network.firewall)> access Description: Enables or disables firewa ll permissions through LAN to W AN ports. Syntax: Example: admin(network.firewall)> set override disable admin(network.firewall)> access admin(network.firewall.lan-wan-access)> set rule allow admin(network.firewall.l[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-124 AP5131>admin(network.firewall)> advanced Description: Displays whether an AP-5131 fire wall rule is intended for inbo und traffic to an interface or outbound traffic from that interfa ce.. Syntax: Example: admin(network.firewall)> set override enable admin(network.firewall)> advanced[...]

Command Line Interfa ce Reference 8-125 8.3.5 Network Router Commands AP5131>admin(network.router)> Description: Displays the router submenu. The items ava ilable under this command are: show Displays the existing AP-5131 router configuration. set Sets the RIP parameters. add Adds user -defined routes. delete Deletes user-defined routes. list[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-126 AP5131>admin(netwo rk.router)> show Description: Shows the AP-5131 route table. Syntax: Example: admin(network.router)> show routes ---------------------------------------------------------------------------- index destination netmask gateway interface metric ---------------------------[...]

Command Line Interfa ce Reference 8-127 AP5131>admin(network.router)> set Description: Shows the AP-5131 route table. Syntax: For information on configuring the Router options av ailable to the AP-5 131 using the applet (GUI), see Configuring Router Settings on pa ge 5-57 . set auth Sets the RIP authentication type. dir Sets RIP direction. id[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-128 AP5131>admin(network.router)> add Description: Adds user -defined routes. Syntax: Example: admin(network.router)> add 192.168.3.0 255.255.255.0 192.168.2.1 LAN 1 1 admin(network.router)> list ---------------------------------------------------------------------------- index destinati[...]

Command Line Interfa ce Reference 8-129 AP5131>admin(netwo rk.router)> delete Description: Deletes user -defined routes. Syntax: Example: admin(network.router)> list ---------------------------------------------------------------------------- index destination netmask gateway interface metric -----------------------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-130 AP5131>admin(network.router)> list Description: Lists user -defined routes. Syntax: Example: admin(network.router)> list ---------------------------------------------------------------------------- index destination netmask gateway interface metric --------------------------------------[...]

Command Line Interfa ce Reference 8-131 8.4 Sy stem Commands AP5131>admin(sy stem)> Description: Displays the System submenu. The ite ms ava ilable under this command are shown be low . restart Restarts the AP-5131. show Shows AP-5131 system paramete r settings. set Defines AP-5131 system parameter settings. debug Accesses AP-5131 p assword-p[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-132 AP5131>admin(sy stem)>restart Description: Restarts the AP-5131 access poin t. Syntax: Example: admin(system)> restart ********************************WARNING*********************************** ** Unsaved configuration changes will be lost when the AP-5131 is reset. ** Please be sure to[...]

Command Line Interfa ce Reference 8-133 AP5131>admin(sy stem)>show Description: Displays high-level AP-5131 sys tem information. Syntax: Example: admin(system)> show system name : BldgC system location : Atlanta Field Office admin email address : johndoe@mycompany.com system uptime : 0 days 4 hours 41 minutes AP-5131 firmware version : 1.1[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-134 AP5131>admin(sy stem)>set Description: Sets AP-5131 s ystem parameters . Syntax: ? Example: admin(system)> show system name : AP5131 system location : San Jose Engineering admin email address : SJSharkey@symbol.com system uptime : 0 days 4 hours 33 minutes AP-5131 firmware version : 1.1[...]

Command Line Interfa ce Reference 8-135 8.4.1 Sy stem Debug and Last Password Commands AP5131>admin(sy stem)>debug Description: Accesses AP-5131 debug information. This informatio n is designed for field service use only , and should not be used by unqualif ied personnel. Example: admin(system)>debug Debug Password: AP-5131 MAC Address is [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-136 8.4.2 Sy s tem Access Commands AP5131>admin(sy stem)>access Description: Displays the AP-5131 access su bmenu. show Displays AP-5131 system access capa bilities. set Goes to the AP-5131 system access submenu. .. Goes to the parent menu. / Goes to the root menu. save Saves the current confi[...]

Command Line Interfa ce Reference 8-137 AP5131>admin(sy stem.access)>set Description: Defines the permissions to access the AP-5131 ap plet, CL I, SNMP as well as defining their timeout values. Syntax: For information on configuring AP-5131 access s ettings using the a pplet (GUI), see Configuring Data Access on page 4-6 . set applet Defines [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-138 AP5131>admin(sy stem.access)>show Description: Displays the current AP -5131 access permissions and timeout valu es. Syntax: Example: admin(system.access)> show -------------------------------From LAN1-------From LAN2-------From WAN applet http access from lan enable enable enable apple[...]

Command Line Interfa ce Reference 8-139 8.4.3 Sy s tem Certificat e Management Commands AP5131>admin(sy stem)>cmgr Description: Displays the Certificate Manager submenu . The items available und er this command in clude: genreq Generates a Certificate Request. delself Deletes a Self Certificate. loadself Loads a Self Certificate signed by CA.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-140 AP5131>admin(sy stem.cmgr)> genreq Description: Generates a certificate request. Syntax: Note: The parameters in [square brackets] a re optional. Check with the CA to determine what fields a re necessary . For example, most CAs require an email address and an IP address, but no t the addre[...]

Command Line Interfa ce Reference 8-141 AP5131>admin(sy stem.cmgr)> delself Description: ) Deletes a self certificate. Syntax: Example: admin(system.cmgr)> delself MyCert2 For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 . delself <IDnam[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-142 AP5131>admin(sy ste m.cmgr)> loadself Description: Loads a self certificate signed by the Certificate Authority . Syntax: For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 . loadself <IDn[...]

Command Line Interfa ce Reference 8-143 AP5131>admin(sy stem.cmgr)> listself Description: Lists the loaded self certificates. Syntax: For information on configuring self certif icate settings using the ap plet (GUI), see Creating Self Certificates for Accessing the VPN on pag e 4-10 . listself Lists all self certificates that are loaded.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-144 AP5131>admin(sy stem.cmgr)> loadca Description: Loads a trusted certificate fro m the Certificate Authority . Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . loadca Loads the trusted certificate (in PEM form [...]

Command Line Interfa ce Reference 8-145 AP5131>admin(sy stem.cmgr)> delca Description: Deletes a trusted certificate. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . delca <IDname> Deletes the trusted certificate.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-146 AP5131>admin(sy stem.cmgr)> listca Description: Lists the loaded trusted certificate. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . listca Lists the loaded trusted certificates.[...]

Command Line Interfa ce Reference 8-147 AP5131>admin(sy ste m.cm gr)> showreq Description: Displays a certificate request in PEM format. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . showreq <IDname> Displays a certificate request name d <IDname> g[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-148 AP5131>admin(sy stem. cmgr)> delprivkey Description: Deletes a private key . Syntax: For information on configuring certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10 . delprivkey <IDname> Deletes private key named <IDnam[...]

Command Line Interfa ce Reference 8-149 AP5131>admin(sy stem. cmgr)> listprivkey Description: Lists the names of private keys. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . listprivkey Lists all private keys.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-150 AP5131>admin(sy ste m.cmgr)> expcert Description: Exports the certificaqte file. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . expcert Exports the certificaqte file.[...]

Command Line Interfa ce Reference 8-151 AP5131>admin(sy stem.cmgr)> impcert Description: Imports the target certificate file. Syntax: For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on pag e 4-9 . impcert Imports the target certificate file.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-152 8.4.4 Sy stem SNMP Commands AP5131>admin(sy stem)> snmp Description: Displays the SNMP submenu. Th e items available under this command are shown below . access Goes to the SNMP access submenu. traps Goes to the SNMP trap s submenu. .. Goes to the parent menu. / Goes to the root m enu. sav[...]

Command Line Interfa ce Reference 8-153 8.4.4.1 Sy stem SNMP Access Commands AP5131>admin(sy s tem.snmp.access) Description: Displays the SNMP Access menu. The items available under this command are sho wn below . show Shows SNMP v3 engine ID. add Adds SNMP access entries. delete Deletes SNMP access entries. list Lists SNMP acc ess entries. .. G[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-154 AP5131>admin(sy stem. snmp.access)> show Description: Shows the SNMP v3 engine ID. Syntax: Example: admin(system.snmp.access)> show eid AP-5131 snmp v3 engine id : 000001846B8B4567F871AC68 admin(system.snmp.access)> For information on configuring SNMP access settin gs using the apple[...]

Command Line Interfa ce Reference 8-155 AP5131>admin(sy stem. snmp.access)> add Description: Adds SNMP access entries for specific v1v2 and v3 user definitions. Syntax: For information on configuring SNMP access settin gs using the applet (GUI), see Configuring SNMP Access Control on pag e 4-23 . add acl <ip1> <ip2> Adds an entry [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-156 AP5131>admin(sy stem. snmp.access)> delete Description: Deletes SNMP access entries for specific v1v2 and v3 user de finitions. Syntax: Example: admin(system.snmp.access)> list acl ----------------------------------------------------------------------------- index start ip end ip ------[...]

Command Line Interfa ce Reference 8-157 AP5131>admin(sy stem. snmp.access)> list Description: Lists SNMP access entries. Syntax: Example: admin(system.snmp.access)> list acl ---------------------------------------------------------------- index start ip end ip ---------------------------------------------------------------- 1 209.236.24.1 [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-158 8.4.4.2 Sy stem SNMP T raps Commands AP5131>admin(sy stem.snmp.traps) Description: Displays the SNMP traps submenu. The ite ms available under this command are shown be low . show Shows SNMP trap parameters. set Sets SNMP trap parameters. add Adds SNMP trap entries. delete Deletes SNMP trap e[...]

Command Line Interfa ce Reference 8-159 AP5131>admin(sy stem. snmp.traps)> show Description: Shows SNMP trap parameters. Syntax: Example: admin(system.snmp.traps)> show trap SNMP MU Traps mu associated : enable mu unassociated : disable mu denied association : disable mu denied authentication : disable SNMP Traps snmp authentication failur[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-160 AP5131>admin(sy stem.snmp.traps)> set Description: Sets SNMP trap parameters. Syntax: For information on configuring SNMP traps using the applet (GUI), see Configuring Specific SNMP T raps on pag e 4-28 . set mu-assoc enable / disable Enables/disables the MU associated trap. mu-unassoc ena[...]

Command Line Interfa ce Reference 8-161 AP5131>admin(sy stem. snmp.traps)> add Description: Adds SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> add v1v2 203.223.24.2 333 mycomm v1 admin(system.snmp.traps)> list v1v2c ---------------------------------------------------------------------- index dest ip dest port community v[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-162 AP5131>admin(sy stem.snmp.traps)> delete Description: Deletes SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> delete v1v2 all For information on configuring SNMP traps using the applet (GUI), see Configuring SNMP Settings on pag e 4-17 . delete v1v2c <idx> Deletes en[...]

Command Line Interfa ce Reference 8-163 AP5131>admin(sy stem. snmp.traps)> list Description: Lists SNMP trap entries. Syntax: Example: admin(system.snmp.traps)> add v1v2 203.223.24.2 162 mycomm v1 admin(system.snmp.traps)> list v1v2c ---------------------------------------------------------------------- index dest ip dest port community[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-164 8.4.5 Sy s tem Network T ime Protocol (NTP) Commands AP5131>admin(sy stem)> ntp Description: Displays the NTP menu. The corre ct network time is required for numerous functions to be config ured accuaretly on the AP-513 1. Syntax: set show Shows NTP parameters settings. date-zone Show date[...]

Command Line Interfa ce Reference 8-165 AP5131>admin(sy stem.ntp)> show Description: Displays the NTP server configuratio n. Syntax: Example: admin(system.ntp)> show current time (UTC) : 2006-07-31 14:35:20 Time Zone: ntp mode : enable preferred Time server ip : 203.21.37.18 preferred Time server port : 123 first alternate server ip : 203.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-166 AP5131>admin(sy stem.ntp)> date-zone Description: Show date, time and time zone. Syntax: Example: admin(system.ntp)> date-zone Date/Time : Sat 1970-Jan-03 20:06:22 +0000 UTC Time Zone : date-zone Show date, time and time zone.[...]

Command Line Interfa ce Reference 8-167 AP5131>admin(sy ste m.ntp)> zone-list Description: Displays an ex tensive list of time zone s for countries aro und the world . Syntax: Example: admin(system.ntp)> zone-list zone-list Displays list of time zones for every known zone.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-168 AP5131>admin(sy stem.ntp)> set Description: Sets NTP parameters for AP-5131 clo ck synchronization. Syntax: Example: admin(system.ntp)> set mode enable admin(system.ntp)> set server 1 203.21.37.18 admin(system.ntp)> set port 1 123 admin(system.ntp)> set intrvl 15 admin(system.n[...]

Command Line Interfa ce Reference 8-169 8.4.6 Sy stem Log Commands AP5131>admin(sy stem)> logs Description: Displays the AP-5131 log submenu . Logging options in clude: Syntax: show Shows logging options. set Sets log options and parameters. view V iews system log. delete Deletes the sys tem log. send Sends log to the designated F TP Server .[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-170 AP5131>admin(sy stem.logs)> show Description: Displays the current AP -5131 logging settings. Syntax: Example: admin(system.logs)> show log level : L6 Info syslog server logging : enable syslog server ip address : 192.168.0.102 For information on configuring logging settings us ing the [...]

Command Line Interfa ce Reference 8-171 AP5131>admin(sy stem.logs)> set Description: Sets log options and parameters. Syntax: For information on configuring logging settings u sing the app let (GUI), see Logging Con figuration on page 4-35 . set level <level> Sets the level of the events that will be logged. All ev ents with a level at [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-172 AP5131>admin(sy stem.logs)> view Description: Displays the AP-5131 syste m log file. Syntax: Example: admin(system.logs)> view Jan 7 16:14:00 (none) syslogd 1.4.1: restart (remote reception). Jan 7 16:14:10 (none) klogd: :ps log:fc: queue maintenance Jan 7 16:14:41 (none) klogd: :ps log[...]

Command Line Interfa ce Reference 8-173 AP5131>admin(sy stem.logs)> delete Description: Deletes the log files. Syntax: Example: admin(system.logs)> delete For information on configuring logging settings u sing the app let (GUI), see Logging Con figuration on page 4-35 . delete Deletes the AP-5131 sy stem log file.[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-174 AP5131>admin(sy stem.logs)> send Description: Sends log and core file to an F TP Server . Syntax: Example: admin(system.logs)> send File transfer : [ In progress ] File transfer : [ Done ] admin(system.logs)> For information on configuring logging settings us ing the app let (GUI), s[...]

Command Line Interfa ce Reference 8-175 8.4.7 Sy stem Configuration-Update Commands AP5131>admin(sy stem.config)> Description: Displays the AP-5131 config uration update submenu. Syntax: default Restores the default AP-5131 configuration. partial Restores a partia l default AP-5131 co nfiguration. show Shows import/export parameters. set Sets[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-176 AP5131>admin(sy stem. config)> default Description: Restores the full AP-5131 factory default configuration. Syntax: Example: admin(system.config)> default Are you sure you want to default the configuration? <yes/no>: For information on importing/exp orting AP-5131 configur ations[...]

Command Line Interfa ce Reference 8-177 AP5131>admin(sy stem. config)> partial Description: Restores a partial factory default configuratio n. The AP-5131’ s LAN, W AN and SNMP settings are une ffected by the partial re stor e. Syntax: Example: admin(system.config)> partial Are you sure you want to partially default the AP-5131? <yes/[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-178 AP5131>admin(sy ste m.config)> show Description: Displays import/export param eters for the AP-5131 configuration file. Syntax: Example: admin(system.config)> show cfg filename : cfg.txt cfg filepath : ftp/tftp server ip address : 192.168.0.101 ftp user name : myadmin ftp password : ***[...]

Command Line Interfa ce Reference 8-179 AP5131>admin(sy stem.config)> set Description: Sets the import/export parameters. Syntax: Example: admin(system.config)> set server 192.168.22.12 admin(system.config)> set user myadmin admin(system.config> set passwd georges admin(system.config)> show cfg filename : cfg.txt cfg filepath : ft[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-180 AP5131>admin(sy ste m.config)> export Description: Exports the configuration from the syste m. Syntax: Example: Export F TP Example: admin(system.config)> set server 192.168.22.12 admin(system.config)> set user myadmin admin(system.config)> set file config.txt admin(system.config)[...]

Command Line Interfa ce Reference 8-181 AP5131>admin(sy ste m.config)> import Description: Imports the AP-5131 configuration to the AP-51 31. Errors could di splay a s a result of invaid configuration p arameters. Correct the sepcified lines and import the file aga in until the import operation is error free. Syntax: Example: Import F TP Exam[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-182 8.4.8 Firmware Update Commands AP5131>admin(sy stem)>fw-update Description: Displays the firmware update sub menu. The items available un der this command are shown below . NOTE The AP-5131 must complete the reboot proc ess to succe ssfully upd ate the device firmware, regardless of whethe[...]

Command Line Interfa ce Reference 8-183 AP5131>admin(sy ste m.fw-update)>show Description: Displays the current AP -5131 firmware update settings. Syntax: Example: admin(system.fw-update)> show automatic firmware upgrade : enable automatic config upgrade : enable automatic upgrade interface : WAN firmware filename : APFW.bin firmware path [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-184 AP5131>admin(sy ste m.fw-update)>set Description: Defines AP-5131 firmware update settings and user permissions. Syntax: For information on upda ting AP-5131 d evice firmware using th e applet (GUI), see Updating Device Firmware on page 4 -41 . set fw-auto <mode> Whe n enabled, updat[...]

Command Line Interfa ce Reference 8-185 AP5131>admin(sy ste m.fw-update)>update Description: Executes the AP-5131 firmware update over t he W AN or LAN port using either ftp or tftp. Syntax: For information on updating AP-5131 device firm ware using the applet (GUI), see Updating Device Firmware on page 4-41 . update <mode><iface>[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-186 8.5 Statistics Commands AP5131>admin(stats) Description: Displays the AP-5131 statistics submenu . The items a vailable under this command are: show Displays AP-5131 WLAN, MU, LAN an d W AN statistics. send-cfg-ap Sends a config file to another AP-5131 within the know n AP table. send-cfg-all[...]

Command Line Interfa ce Reference 8-187 AP5131>admin(stats)> show Description: Displays AP-5131 system inform ation. Syntax: For information on displaying W AN port statistics using the applet (GUI), see Viewing W AN Statistics on page 7-2 . For information on displaying LAN port statistics using the applet (GUI), see Viewing LAN Statistics o[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-188 AP5131>admin(sta ts)> send-cfg-ap Description: Copies the AP-5131’ s configuration to another AP-5131 within the known AP table. Syntax: Example: admin(stats)> send-cfg-ap 2 admin(stats)> For information on copying the AP-5131 config to another AP-5131 using the ap plet (GUI), see [...]

Command Line Interfa ce Reference 8-189 AP5131>admin(stats )> send-cfg-all Description: Copies the AP-5131’ s configuration to all o f the AP-5131s within the known AP table. Syntax: Example: admin(stats)> send-cfg-all admin(stats)> For information on copying the AP-513 1 config to another AP-5131 using the ap plet (GUI), see Viewing [...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-190 AP5131>admin(stats)> clear Description: Clears the specified statistics counters to zero to begin new data calculations. Syntax: clear wan Clears W AN statistics counters. lan Clears LAN statistics counters. all-rf Clears all RF data. all-wlan Clears all WLAN summary information. wlan Clea[...]

Command Line Interfa ce Reference 8-191 AP5131>admin(stats)> flash-all-leds Description: Starts and stops the illumination of a specified access point’ s LEDs. Syntax: Example: admin(stats)> admin(stats)> flash-all-leds 1 start Password ******** admin(stats)> flash-all-leds 1 stop admin(stats)> For information on flashing AP-513[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-192 AP5131>admin(stats)> echo Description: Defines the echo test values used to condu ct a ping test to an associated MU. Syntax: For information on MU Echo and Ping tests using the app let (GUI), see Pin ging Individual MUs on page 7-2 7 . show Shows the Mobile Unit Statistics Summary . list [...]

Command Line Interfa ce Reference 8-193 AP5131>admin.stats.echo)> show Description: Shows Mobile Unit Statistics Summary . Syntax: Example: admin(stats.echo)> show ---------------------------------------------------------------------------- Idx IP Address MAC Address WLAN Radio T-put ABS Retries --------------------------------------------[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-194 AP5131>admin.stats.echo)> list Description: Lists echo test parameters and results. Syntax: Example: admin(stats.echo)> list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.echo)> For information on MU Echo and Ping tests u[...]

Command Line Interfa ce Reference 8-195 AP5131>admin.stats.echo)>set Description: Defines the parameters of the echo test. Syntax: For information on MU Echo and Ping tests using the applet (GUI), se e Pin ging Individual MUs on page 7-27 . set station <mac> Defines MU target MAC address. request <num> Sets nu mber of echo packets[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-196 AP5131>admin.stats.echo)> start Description: Initiates the echo test. Syntax: Example: admin(stats.echo)> start admin(stats.echo)> list Station Address : 00A0F843AABB Number of Pings : 10 Packet Length : 100 Packet Data (in HEX) : 1 Number of MU Responses : 2 For information on MU Ec[...]

Command Line Interfa ce Reference 8-197 AP5131>admin(stats)> ping Description: Defines the ping test values used to conduct a ping test to an AP with th e same ESSID. Syntax: For information on Known AP tests using the applet (GUI), see Pinging Ind ividual MUs on page 7-27 . ping show Shows Known AP Summary details. list Defines ping test pac[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-198 AP5131>admin.stats.ping)> show Description: Shows Known AP Summary Details. Syntax: Example: admin(stats.ping)> show ---------------------------------------------------------------------------- Idx IP Address MAC Address MUs KBIOS Unit Name ----------------------------------------------[...]

Command Line Interfa ce Reference 8-199 AP5131>admin.stats.ping)> list Description: Lists ping test parameters and results. Syntax: Example: admin(stats.ping)> list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.ping)> For information on Known AP tests using the applet (GUI),[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-200 AP5131>admin.stats.ping)> set Description: Defines the parameters of the ping test. Syntax: Example: admin(stats.ping)> set station 00A0F843AABB admin(stats.ping)> set request 10 admin(stats.ping)> set length 100 admin(stats.ping)> set data 1 admin(stats.ping)> For informati[...]

Command Line Interfa ce Reference 8-201 AP5131>admin.stats.echo)> start Description: Initiates the pin g test. Syntax: Example: admin(stats.ping)> start admin(stats.ping)> list Station Address : 00A0F843AABB Number of Pings : 10 Packet Length : 100 Packet Data (in HEX) : 1 Number of AP Responses : 2 For information on Known AP tests usi[...]

AP-5131 Acce ss Point Pro duct Refere nce Guide 8-202[...]

Configuring Mesh Networking 9.1 Mesh Networking Overview An AP-5131 can be configured in two modes to support the new mesh networking functio nality . Th e AP-5131 can be set to a client bridge mode and /or a base bridge mode (which accepts connections from client bridges). Base bridge and client bridge mode can be used at the same time by an indiv[...]

AP-5131 Access Poin t Product Referen ce Guide 9-2 AP-5131s configured as both a base and a client bridge functio n as repeaters to transmit data with associated MUs in their coverage area (client br idge mode) as well as forward traffic to other AP- 5131s in the mesh network (base brid ge mode). T he number of AP-5131s and their intended func tion[...]

Configuring M esh Networki ng 9-3 If an AP-5131 is configured as a base bridge (but not as a client bridge) it o perates normally at boot time. The base bridge AP-513 1 supports connection s made by other client bridge AP-51 31s. The dual-radio model AP-5131 affords users better optimization of the mesh networking feature by enabling the AP-5131 to[...]

AP-5131 Access Poin t Product Referen ce Guide 9-4 The dual-radio model AP-5131 affords users better optimization of the mesh networking feature by allowing the AP-5131 to transmit to other AP-513 1s (in base or client bridge mode) using one independent radio and transmit with its associ ated MUs using the second indep endent radio. A single-radio [...]

Configuring M esh Networki ng 9-5 Limit the wireless client’ s connections to reduce the to tal number of hops required to get to the wired network. Use each radio’ s "preferred" base b ridge list to define which AP-5131s the client bridge is allowed to connect to. For more information, see Co nfiguring Mesh Networking Support on pa g[...]

AP-5131 Access Poin t Product Referen ce Guide 9-6 However , if using the Known AP Statistics screen’ s Send Cfg to APs functionality , “auto-select” and preferred list” settings do not get imported. 9.2 Configuring Mesh Networking Support Configuring the AP-5131 for Mesh Bridging support entails: • Setting the LAN Configuration for Mesh [...]

Configuring M esh Networki ng 9-7 V erify the enabled LAN is named appropriately in respect to its intended function in supporting the mesh network. 3. Select Network Configuration -> LAN -> LAN1 or LAN2 from the AP-5131 menu tree. 4. Click the Mesh STP Configuration button on the bottom off the screen. 5. Define the properties for the follow[...]

AP-5131 Access Poin t Product Referen ce Guide 9-8 6. Click OK to return to either the LAN1 or LAN2 screen where up dates to the Mesh STP Configuration can be saved by clicking the Apply butto n. 7. Click Cancel to discard the changes made to the Mesh STP Configu ration and return to the LAN1 or LAN2 screen. Once the Mesh STP Configuration is defin[...]

Configuring M esh Networki ng 9-9 The Wireless Configuration screen displays with those existin g WLANs displayed within the table. 2. Select the Cre ate button to configure a new WLAN specifically to s upport mesh networking. An existing WLAN can be modified (or used as is) for mesh ne tworking support by selectin g it from the list of available W[...]

AP-5131 Access Poin t Product Referen ce Guide 9-10 Symbol recommends assigning a unique name to a WLAN supporting a mes h network to differentiate it from WLANs defined for non mes h support. The name assig ned to the WLAN is what is selected from the Radio Configuration screen for use within the mesh network. 4. Use the A vailable On checkboxes t[...]

Configuring M esh Networki ng 9-11 are typically not guest networks, wherein pub lic assess is more important than data protection. Symbol also discourages user-based authentication schemes such as Kerberos and 802.1 x EAP , a s these authentication schemes are not supported within a mesh network. If none of the existing policies are suitable, sele[...]

AP-5131 Access Poin t Product Referen ce Guide 9-12 10. Select the Use Secure Beac on checkbox to not transmit the AP- 5131’ s ESSID amongst the AP-5131s and devices within the mesh ne twork. If a hacker tries to find an ESSID via an MU, the AP- 5131’ s ESSID does not display since the ESSID is not in the beacon. Symbol recommend s keeping the [...]

Configuring M esh Networki ng 9-13 1. Select Network Co nfiguration -> Wireless -> Radio Configuration from the AP-5131 menu tree. 2. Enable the radio(s) using the Enable checkbox(es) for both Radio 1 and Radio 2. Refer to RF Band of Operation parameter to en sure you are enablin g the correct 8 02.11a or 802.11b/g radio. After the settings a[...]

AP-5131 Access Poin t Product Referen ce Guide 9-14 mesh network data from those client bridges within the mesh network and never the initiator . 4. If the Base Bridge checkbox has been se lected, use the Max# Client Bridges parameter to define the client bridge load on a particular base bridge. The maximum number of client bridge con nections per [...]

Configuring M esh Networki ng 9-15 If the Client Bridge checkbox h as been selected, use the Mesh Network Name drop-down menu to select the WLAN (ESS) the client bridge uses to establis h a wireless link. The default setting, is (WLAN1). Symb ol recommend s creating (and naming) a WLAN specifically for mesh networking support to differentiate the M[...]

AP-5131 Access Poin t Product Referen ce Guide 9-16 the user from selecting the order b ase bridges are a dded to the mesh network w hen one of the three associated base brid ges becomes unavailable. 8. Refer to the Available Base Bridge List to view devices located by the AP-5131 using the WLAN selected from the Radio Configuration sc reen. Refer [...]

Configuring M esh Networki ng 9-17 If a MAC address is not desirable as others but still worthy of being on the prefe rred list, select it, and click the Down button to decrease its likelihood of being selecte d as a member of the mesh network. 13. If a device MAC address is on the Preferred Base Brid ge List and constitutes a threat as a potential[...]

AP-5131 Access Poin t Product Referen ce Guide 9-18 9.3 Usage Scenario - T rion Enterprises T rion Enterprises is a new ship ping and receiving comp any . T rion wants to create an outdoor wire less coverage area (in addition to its indoo r wireless in frastru cture) that can expand as they grow their business. As T rion expand s the wireless cover[...]

Configuring M esh Networki ng 9-19 1. The T rion IT department verifies connectivity with both of the AP-513 1s following the instructions in T esting Connectivity on page 3- 13 . 2. The T rion IT Departme nt installs the AP1 on a wall with the antenna s orienting outward in to the shipping and receiving yard. The team then installs the AP2 on a wa[...]

AP-5131 Access Poin t Product Referen ce Guide 9-20 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies the LAN used to support the mesh network is enabled for both AP1 and AP2, (by selecting the Enable checkbox). 5. The T rion IT department then selects Network Confi[...]

Configuring M esh Networki ng 9-21 6. The IT team sele cts the Mesh STP Configuration button on the bottom off the screen. 7. The T rion IT departme nt sets the Priority setting to 1 (for AP1) in order for future members of the mesh network to defer to AP1 as the AP defining the mesh netwo rk configuration (setting this value to 1 AP1 to what is co[...]

AP-5131 Access Poin t Product Referen ce Guide 9-22 The Wireless Configuration screen displays with those e xisting WLANs displayed within the table. This is T rion’ s first deploy ment fo r this new dual-radio AP-5131, up on reviewing the Wireless Page they determine the existing default WLAN should be left as is and a new WLAN should be created[...]

Configuring M esh Networki ng 9-23 12. The team assigns the name of “ trion mesh ” to the WLAN so it will not be confused with other WLANs used in o ther areas of the T rio n facility . This name also serves to associate the name of the WLAN with its intended mesh network utiliza tion of data. entry within the shipping y ard 13. For AP1 the tea[...]

AP-5131 Access Poin t Product Referen ce Guide 9-24 19. The Broadcast Key Rotation checkbox is selected, as th e IT team plans to change the ke ys from time to time (for security purposes) an d wants these keys to be broadcasted using the default interval 86400 seconds. 20. The IT team does not want to use a passphrase to repres ent the 256-bit key[...]

Configuring M esh Networki ng 9-25 23. The IT team assigns the name of “ trion mesh network ” to the ACL to eliminat e any confusion with the ACLs intended function 24. Since the range of client bridge MAC addre sses for the shipping yard mesh network is known to the IT T eam, they select the Deny drop-down menu option, as the team wants to den[...]

AP-5131 Access Poin t Product Referen ce Guide 9-26 26. The team decides to le ave the Disallow MU to MU Communication checkbox unselec ted for the WLAN, as the team considers all MU traf fic within the secure shipping a nd receiving yard known and not a threat to the initial 2 AP mesh network de ployment. 27. The team selects the Use Secure Beacon[...]

Configuring M esh Networki ng 9-27 31. The IT T eam does not p lan on supporting any legacy 802.11b vo ice enabled de vices, so they leave the Support V oice prioritization checkbox unselected. 32. The IT T eam selects 11ag-default from the drop -down menu to best describe the type of data proliferating the m esh network. With this setting selected[...]

AP-5131 Access Poin t Product Referen ce Guide 9-28 37. For AP2, the IT T eam enables both Radio 1 and Radio 2 and defines radio 1 as a client bridge. 38. The IT T eam leaves each radio’ s Max # Client Bridge setting at the default setting of 12. This ensures as client bridges are added to the growin g mesh network they can be accounted for . 39.[...]

Configuring M esh Networki ng 9-29 For the next six months, T rion Enterprises’ mesh netwo rk only consists of AP1 an d AP2. AP1 has already been defined as the root bridge in the mesh netwo rk when it was assigned a Priority value of 1 within th e Bridge STP Configuration screen. 41. The T rion IT T eam clicks Apply within both the AP1 and AP2 R[...]

AP-5131 Access Poin t Product Referen ce Guide 9-30 broadcast range (see the illustration below). T he T rion IT departme nt follows the instructions in Wall Mounted Installations on page 2-13 to install AP3 and AP4. 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies[...]

Configuring M esh Networki ng 9-31 5. The T rion IT department then selects Network Configuration -> LAN -> trion from the AP-5131 menu tree. 6. The IT team sele cts the Mesh STP Configuration button on the bottom of the screen. 7. The T rion IT department leaves the Priority setting to at 32768 for AP3 and AP4 for both to defer to AP1 (which[...]

AP-5131 Access Poin t Product Referen ce Guide 9-32 9. The team selects the Edit button to revise (and rename) the existing default WLAN to support mesh networking. 10. The T rion IT team assigns AP 3 and AP4 an ES SID of 103. Therefore, AP 1 and AP2 should be able to “see” AP3 and AP4 as soon as they are deployed. 11. The team assigns the name[...]

Configuring M esh Networki ng 9-33 13. The team does not want any MUs connecting to the mesh WLAN, only the dev ices comprising the mesh network. Therefore, the team leave s the Maximum MUs field as is, and will use the Radio Config uration page to control the nu mber of client bridge connections. 14. The team verifies the Enable Client Bridge Back[...]

AP-5131 Access Poin t Product Referen ce Guide 9-34 21. Now a QoS policy needs to be defined for the shipp ing and receiving mesh WLAN. The IT T eam still envisions little (if any) video or voic e traffic within the shippi ng as the MUs within primarily scan bar cod es and uplo ad data. Th is holds true for the QoS requiremen ts for AP3 and AP4 as [...]

Configuring M esh Networki ng 9-35 25. For both AP3 and AP4, the IT T eam uses the Mesh Network Name drop-down m enu to assign the “ trion mesh ” WL AN to radio 1. This is the WL AN the AP3 and AP4 radios will use to interoperate with the MUs populating the shipping ya rd. 26. As with AP1 and AP2, the IT T eam d ecides to not select the Advance[...]

AP-5131 Access Poin t Product Referen ce Guide 9-36 9.3.3 Adding 2 More Client Br idges to the T rion Network After an additional six months with their existing 4 AP-5131 mesh network, T rion Enterprises needs and approves the addition of two additional AP -5131s (AP5 and AP6) to be conf igured as client bridges. The team will configure AP5 and AP6[...]

Configuring M esh Networki ng 9-37 3. The T rion IT dep artment selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The T rion IT department verifies the LAN used to support the mesh netwo rk is enabled for both AP5 and AP6, (by selecting the Enable checkbox). 5. The T rion IT department then selects Network Configuration -> L[...]

AP-5131 Access Poin t Product Referen ce Guide 9-38 7. The T rion IT departm ent leaves the Priority setting to at 32768 for AP5 and AP6 for bo th to defer to AP1 (which was assigned a priority of 1 for root design ation) as the AP-5131 defining the mesh ne twork configuratio n. The remainder of the Mesh STP Configurat ion settings are left unchang[...]

Configuring M esh Networki ng 9-39 9. The team selects the Edit button to revise (and rename) the existing defa ult WLAN to support mesh networking. 10. The T rion IT team assigns the WLAN an ESSID of 103 to be consistent with the trion mesh WLAN ESSID of the other four AP-5131s within the mesh network. 11. The team assigns the name of “ tr ion m[...]

AP-5131 Access Poin t Product Referen ce Guide 9-40 13. The team still does not want any MUs connecting to the mesh WLAN, only th e devices comprising the mesh network. There fore, the team leaves the Maxim um MUs field as is, and will use the Radio Configuration page to control the number of c lient bridge connections within the mesh WLAN. 14. The[...]

Configuring M esh Networki ng 9-41 22. The IT team sele cts Network Configuration -> Wireless -> Radio Configuration from the AP-5131 menu tree. The Radio Configuration screen disp lays. 23. For both AP5 and AP6, the IT T eam enables Radi o 1 and defines the radio as a client brid ge. 24. For both AP5 and AP6, the IT T eam uses the Mesh Netwo[...]

AP-5131 Access Poin t Product Referen ce Guide 9-42[...]

T echnical Specifications This appendix provides technical specifications in the following area s: • Physical Characterist ics • Electrical Characteristics • Radio Charac teristics • Antenna Specification s • Country Code s[...]

AP-5131 Access Poin t Product Referen ce Guide A-2 A.1 Phy sical Characteristics The AP-5131 has the following phy sical characteris tics: A.2 Electrical Characteristics The AP-5131 has the following electrical characteristic s: Dimensions 5.32 inches long x 9.45 inches wide x 1.77 inches thick. 135 mm long x 240 mm wide x 45 mm thick. Housing Meta[...]

Technical Specifications A-3 A.3 Radio Characteristics The AP-5131 has the following radio cha racteristics: Operating Channels 802.11a radio - Channels 34-161 (5170-5825 MHz) 802.11b/g radio - Channels 1-13 (2412-2472 MHz) 802.11b/g radio - Channel 14 (2484 MHz Japan only) Actual operating frequencies depend on regulatory rules and certification a[...]

AP-5131 Access Poin t Product Referen ce Guide A-4 A.4 Antenna Specifications The AP-5131 antenna suite has the following specificatio ns: A.4.1 2.4 GHz Antenna Matrix The following table describes each 2.4 GHz antenna approved for use with the AP-5131. A.4.2 5.2 GHz Antenna Matrix The following table d escribes each 5.2 GHz antenna approved for us[...]

Technical Specifications A-5 A.4.3 Additional Antenna Components The following table lists the Symbol part number fo r vario us antenna accessories. This table also includes the loss for each access ory at both 2.4 and 5.2 GHz. A.4.4 Antenna Accessory Connectors, Cable T ype and Length The following table d escribes each antenn a accessory’ s con[...]

AP-5131 Access Poin t Product Referen ce Guide A-6 A.5 Country Codes The following list of c ountries and their country codes is useful wh en using the AP -5131 configuration file, CLI or the MIB to configure the AP-5131: Country Code Country Code Argentina AR New Zealand NZ Australia AU Norway NO Austria A T Oman OM Bahrain BH Peru PE Belarus BY P[...]

Technical Specifications A-7 Germany DE T urkey TR Greece GR Ukraine UA Hong Kong HK UAE AE Hungary HU United Kingdom UK Iceland IS USA US India IN Uruguay UY Indonesia ID Vietnam VN Ireland IE V enezuela VE Israel IL Italy IT Japan JP Jordan JO Kazakhanstan KZ Kuwait KW Latvia L V Liechtenstein LI Lithuania L T Luxembourg LU Malaysia MY Malta MT M[...]

AP-5131 Access Poin t Product Referen ce Guide A-8[...]

AP-5131 Usage Scenarios This appendix provides practica l usage scenarios for many of the AP-5131 ’ s key features. This information should be referenced as a suppleme nt to the information contained within this AP-5131 Product Reference Guide. The following scenarios are described: • Configuring Au tomatic Updates using a DHCP or Linux BootP S[...]

AP-5131 Access Poin t Product Referen ce Guide B-2 The firmware is automatically updated each time firmware versions are found to be different between the AP-5131 and the firmware file locate d on the DHCP/BootP server . The configu ration file is automatically applied only if the filename is different than what resides on the AP-5131. B.1.1 Window[...]

AP-5131 Us age Scenarios B-3 e. Add the following 3 new options under AP513 1 Options class: f. Highlight Scope Options from the tree and select Configure Options . g. Go to the Advanced tab. From under the Vendor Class AP5131 Options, check all three options mentioned in the table above and enter a value for each option. 3. Copy the firmware and c[...]

AP-5131 Access Poin t Product Referen ce Guide B-4 B.1.1.2 Global Options - Using Extended/Standard Options The following are in structions for automatic firmwa re and configuratio n file updates via DHCP us ing extended options or standard options con figured globally . The setup example described in this section includes: • 1 AP-5131 • 1 Micr[...]

AP-5131 Us age Scenarios B-5 d. Under the General tab, check a ll 3 options mention ed within the Exte nded Options table and enter a value for each option. 3. Copy both the firmwa re and con figuration files to the appropriate d irectory on the T F TP Server . By default, auto update is enabled on the AP-5131 (s ince the LAN Port is a DHCP Client,[...]

AP-5131 Access Poin t Product Referen ce Guide B-6 If the DHCP Server is configured for options 186 and 66 (to assign TF TP Server IP addresses) the AP-5131 uses the IP add ress configured for option 186. Similarly , if the DHCP Server is configured for options 187 and 67 (for the firmware file) the AP-5131 use s the file name configured for option[...]

AP-5131 Us age Scenarios B-7 B.1.2.1 BootP Options This section contains instructio ns for the automatic update of the AP-513 1 firmware and configurat ion file using a Boot P Server . The setup example described in this section includes: • 1 AP-5131 • 1 Linux/Unix BOOTP Server • 1 TF TP Server . T o configure BootP options us ing a Linux/Uni[...]

AP-5131 Access Poin t Product Referen ce Guide B-8 Using options sa, bf a nd 136: 3. Copy the firmware and configuratio n files to the appropriate directory on the TF TP Server . By default, auto update is enabled on the AP-5131 (s ince the LAN Port is a DHCP Client, out-of-the-box auto update sup port is on the LAN Port). 4. Restart the AP-5131. 5[...]

AP-5131 Us age Scenarios B-9 B.1.2.2 BootP Priorities The following flowchart displays the priorities used by the AP-5131 when the BootP server is configured fo r multiple option s: If the BootP Server is configured for options 186 and 66 (to assign TF TP server IP addresses) the AP-5131 uses the IP address configured for option 186. Simila rly , i[...]

AP-5131 Access Poin t Product Referen ce Guide B-10 B.2.1 Configuring a VPN T un nel Between T wo AP-5131s The AP-5131 can con nect to a no n-AP device supporting IP Sec, such as a Cisco VPN device - labeled as "Device #2". For this usage scen ario, the following compo nents are required: • 2 AP-5131s • 1 PC on each s ide of the AP-5 [...]

AP-5131 Us age Scenarios B-11 8. Click Apply to save the changes. 9. Select the Auto (IKE) Key Exchange checkbox. 10. Select the Auto Key Settings button. 11. For the ESP T ype, select ESP with Authentication and use AES 128-bit as the ESP Encryption Algorithm. Click OK . 12. Select the IKE Settings button. NOTE For this example, Auto IKE Key Excha[...]

AP-5131 Access Poin t Product Referen ce Guide B-12 13. Select Pre Shared Key (PSK) from the IKE Authentication Mode drop-do wn menu. 14. Enter a Passphrase . Pa ssphrases must match on both VP N devices. 15. Select AES 128-bit as the IKE Encry ption Algorithm. 16. Select Group 2 as the Diffie -He llman Group. Click OK . This will take you back to [...]

AP-5131 Us age Scenarios B-13 19. On AP-5131 #2/ Device #2, repeat the same procedure. However , replace AP-5131 #2 information with AP-5131 #1 information. 20. Once both tunne ls are established, ping each side o f the tunnel to ensu re connectivity . B.2.2 Configuring a Cisco VPN Device This section includes general in structions for co nfiguring[...]

AP-5131 Access Poin t Product Referen ce Guide B-14 B.2.3 Frequently Asked VPN Questions The following are c ommon questions that arise w hen configuring a VPN tunnel using the AP-5131 . • Question 1: Does the AP- 5131 IPSec tunnel support mu ltiple subnets on the other end of a VPN concentrator? Ye s . The AP-5 131 can access multiple subnets on[...]

AP-5131 Us age Scenarios B-15 • Question 2: Even if a wild card entry of "0.0 .0.0" i s entered in the Remote Subnet field in the VPN configuration page, can the AP access multip le subnets on the other end of a VPN concentrator for the APs LAN/W AN side? No. Using a "0.0.0.0" wildcard is an unsupported configuration. In orde [...]

AP-5131 Access Poin t Product Referen ce Guide B-16 Ye s . • Question 6: Can an IPSec tunnel over a PPPoE co nnection be estab lished - such as a PPPoE enab led DSL link? Ye s . The AP-5 131 supports tunne ling when using a PPPoE u sername and passw ord. • Question 7: Can I setup a n AP-5131 so clie nts can access b oth the WAN normally and onl[...]

AP-5131 Us age Scenarios B-17 • UFQDN - tries to match the user entered remote ID data string to the email address field of the received certificate. • Question 9: I am using a direct cable connection betwee n my two VPN gateway s for testing an d cannot get a tunn el established, ye t it works when I set t hem up across another network or rout[...]

AP-5131 Access Poin t Product Referen ce Guide B-18 • Question 11: I still can't get my tunnel to work after attempting to initiate traffic between the two sub nets. What no w? T ry the following troubleshooting tips: • V erify you can ping each of the remote Gateway IP ad dresses from clients on either side. Failed pings can indicate gene[...]

AP-5131 Us age Scenarios B-19 These three rules should be configured abo ve all other rules (default or u ser defined). When Advanced LAN Access is used, certain inbou nd/outbound rules need to be config ured to control incoming/ou tgoing packet flow for IPSec to work properly (with Advanced LAN Access). These rules should be config ured first befo[...]

AP-5131 Access Poin t Product Referen ce Guide B-20 • The interface para meter has been removed from the Auto Update config uration feature. • The W AN interface now has http/telnet/https/ssh connectivity enabled by default.[...]

Customer Support Symbol T echnologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact fo r any technical problem, questio n or support issu e involving Symbol products. If the Symbol Customer Support specia lists cannot so lve a pro blem, access to all technical disciplines with[...]

AP-5131 Access Poin t Product Referen ce Guide C-2 North American Contacts Inside North America: Symbol T echnologies, Inc. One Symbol Plaza Holtsville, New Y ork 11742-1300 T elephone: 1-631-738-2400 /1-800-SCAN 234 Fax: 1-631-738-5990 Symbol Support Center (for warra nty and service information): telephone: 1-800-653-5350 fax: (631) 738-5410 Emai[...]

Customer Support C-3 W eb Support Sites MySymbolCare http://www .symb ol.com/services/msc /msc.html Symbol Services Homepage http://symbol.com/servic es Symbol Software Updates http://symbol.com/servic es/downloads Symbol Developer Program http:// devzone .symbol.com Additional Information Obtain additional information by contacting Sym bol at: 1-8[...]

AP-5131 Access Poin t Product Referen ce Guide C-4[...]

A access options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-23 access point CAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 PSP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 RSSI . . . . . . . . [...]

AP-5131 Access Poin t Product Referen ce Guide IN-6 CAM stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 PSP stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-16 BSSID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8 bullets, use of . . . . . . . . . . . . . . . . . . . . . . [...]

IN-7 I importing certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8 importing/exp orting conf igurations . . . . . . . . . . . . . . . 4-37 installation, ceiling . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17 installation, ceiling T-Bar . . . . . . . . . . . . . . . . . . . . . . . 2-15 installation, desk mounting . [...]

AP-5131 Access Poin t Product Referen ce Guide IN-8 R radio options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6 radio, retry histogram . . . . . . . . . . . . . . . . . . . . . . . . . . 7-22 radio, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-17 restore default configur at ion . . . . . . .[...]

IN-9 WAN, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11 WEP encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9, 1-11 Wi-Fi Protected Access (WPA) . . . . . . . . . . . . . . . . . . 1-12 WLAN, ACL . . . . . . . . .[...]

AP-5131 Access Poin t Product Referen ce Guide IN-10[...]

[...]

Symbol T echnolog ies, Inc. One Symbol Plaza Holtsville, New Y ork 11742-1300 72E-94168-01 Revision A - November 2006[...]