Proxim AP-2000 manuel d'utilisation

ORiNOCO AP-2000 Access Point User Guide[...]

2 Copyright © 2003-2004 Proxim Corporat ion. All right s reserved. Cove red by one or more of the following U.S. p atent s: 5,231,634; 5,87 5,179; 6,006,090; 5,8 09,060; 6,075,812 ; 5,077,753. This use r ’s guide and the software descri bed in it are copyrighted with a ll rights reserved. No part of th is publication may be rep roduced, transmit[...]

3 Content s 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Introduction to Wireless Networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

4 Contents LED Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 3 Viewing Status Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Logging into the HTTP Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

5 Contents Procedure to Reset Configu ration via the Serial Interf ace . . . . . . . . . . . . . . . . . . . . . . . . . 63 Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Ethernet Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

6 Contents Configuring MAC Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 WEP Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

7 Contents Help Link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1 2 0 7 Troubleshooting the AP-2000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 T roubleshoot ing Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

8 Contents A Using the Command Line Interface (CLI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 General Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2 Prerequisite Skills and Knowledge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

9 Contents Set up Auto Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 Other Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 Configure the AP as a DHCP Serv er . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

10 Contents Proxy ARP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 IP ARP Filtering Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 Broadcast Filtering T able . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

11 Electrical S pecifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 85 Environmental S pecifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185 Ethernet Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

12 1 Intr oduction • Document Conventions • Introduction t o Wireless Net working • IEEE 802.1 1 S pecifica tions • Management and Mon itoring Cap abilities Document Conventions • The term , AP , refers to an Access Point. •T h e t e r m , 802.1 1 , is used to describe features that apply to the 802.1 1a, 802.1 1b, and 802.1 1g wireless[...]

13 Intr oduction Figure 1- 1 T ypical wir eless network access infrastructure Once initialized, t he network administrator can conf igure each unit according to the net work’s requiremen ts. The AP functions as a wirel ess network access point to dat a networks. An AP netwo rk provides: • Seamless client roaming • Easy install ation and opera[...]

14 Intr oduction IEEE 802.1 1 Specifications In 1997, the Insti tute of Electrical and Electronics Engin eers (IEEE) adopted the 802. 1 1 standard for wireless devices operating in the 2.4 GHz freque ncy band. This stand ard includes provisions for th ree radio technologies: direct sequence spread spectru m, frequency hopping spread spect rum, and [...]

15 Intr oduction SNMP Management In addition to the HTTP and the CLI interfaces, you can also manage and con figure an AP using the Simple Networ k Management Protoco l (SNMP). Note th at this requires a n SNMP manager program, l ike HP Openview or Castlerock’ s SNMPc. The AP supports several Manag ement Information Base (MIB) fil es that describ[...]

16 2 Getting S tarted • Prerequisites • Product Package • System Requireme nts • Hardware Installation • Initializat ion • Download the Latest Software • Additional Hard ware Features Prer equisites Before instal ling an AP , you need to gather cert ain network info rmation. The fol lowing section ide ntifies the information you need.[...]

17 Getting S tarted Product Package Each Dual-radio AP comes with the fo llowing: • One ceiling or wall mount ing plate • Mounting hardware • Metal faceplat e for APs mounted in a plenum environme nt • AP cover • Processor module (with integrated Active Ethernet, if applicable) • Power supply (not provided with Active Ethernet uni t) ?[...]

18 Getting S tarted Hardwar e I nstallation • AP-2000 with Active Ethern et • AP-2000 with Power Supply • 5 GHz or AP-2000 1 1a Upgrade Kit AP-2000 with Active Ethernet 1. Slide the AP module onto t he mounting bracket. Make sure it is prop erly seated. Figure 2-1 Insert Module into Mounting Bracket 2. Slide an 802.1 1b, 802.1 1b/g wireless c[...]

19 Getting S tarted Figure 2-3 Connect an Ethernet cable from an AE hub to the AP 6. Conduct a Site Survey to determine the best location for your device. 7. Once you have chosen a final loca tion for your unit , mount the wall bra cket and the processor module and pl ace the cover onto the unit as shown. Figure 2-4 W all mounting the AP AP-2000 wi[...]

20 Getting S tarted Figure 2-5 Install the power supply 3. Slide the AP module onto t he mounting bracket. Make sure it is prop erly seated. 4. Plug the DC connector from th e power supply into the top of th e AP module. Figure 2-6 Insert module in mounting bracket and attach power connector[...]

21 Getting S tarted Figure 2-7 Slide a PC Card into the AP 5. Attach one end of an Ethernet cable to the AP's Ethernet port and the other end to a netwo rk hub or switch . 6. Connect the unit to a powe r source. 7. W ait for the p ower LED to turn green before proceeding. Figure 2-8 Power LED turns green when the unit is operational 8. Conduct[...]

22 Getting S tarted 5 GHz or AP-2000 1 1a Upgrade Kit If you are instal ling this kit on a new AP (one that has no t been instal led yet), skip to S tep 4. 1. Remove the AP from your network by unplugging the power and Ethernet cables from the uni t. 2. Remove the unit from it s mounting loca tion - keep the mounting b racket with the AP . 3. Remov[...]

23 Getting S tarted 6. Angle the antenna adap ter slightly upwards, pinch the end tabs inwards and caref ully slide the antenn a adapter onto the mounting bracket . 7. Gently push forward while rot ating the antenna downwards and cl ip the adapter into the sma ll cutouts on the face of the mounting bracket . 8. Position the antenna for b est recept[...]

24 Getting S tarted Initialization Proxim provide s two tools to simplify the ini tialization and configuration of an AP: • ScanT ool • Setup Wiza rd ScanT ool is included on the Inst allation CD; the Setup Wizard launches auto matically the first time you access the HTTP interface. NOTE These initializa tion instructi ons describe how t o conf[...]

25 Getting S tarted NOTE If your computer has more than one network adapter inst alled, you will be prompted to select the ada pter that you want ScanT ool to use before the Scan List appears . If prompted, select an ad apter and cl ick OK . Y ou can change your adapte r setting at any time by clic king the Select Adapter butt on on the Scan List s[...]

26 Getting S tarted Figure 2-14 Scan T ool Change Scr een 3. Set IP Address T ype to Stati c . 4. Enter a st atic IP Address for the AP in the field provided . Y ou must assign t he unit a unique address that is valid on your IP subnet. Co ntact your ne twork adm inistrator if you nee d assistance sel ecting an IP address for t he unit. 5. Enter yo[...]

27 Getting S tarted Figure 2-15 Enter Network Password Figure 2-16 Setup Wizard 5. Click Setup Wi zard to begin. If y ou want to configure the AP without using the Setup Wi zard, click Exit and see Performing Advance d Configuration . The Setup Wizard supports t he following n avigation o ptions: • Save & Next Button: Each Setup Wiz ard scree[...]

28 Getting S tarted 8. Assign the AP new passwords to prevent unauthorized acces s and click Save & Next . Each management interface ha s its o wn password: — SNMP Read Password — SNMP Read-Write Password — SNMPv3 Authentication Pas sword — SNMPv3 Privacy Password — CLI Password — HTTP (Web) Password By default, each of these passwo[...]

29 Getting S tarted • The following options are avai lable for an 8 02.1 1b/g AP: — Operationa l Mode: An 802.1 1b/g wireless interf ace can be configured t o operate in the fol lowing modes: — 802.1 1b mode only — 802.1 1g mode only — 802.1 1g-wifi mode — 802.1 1b/g mode (default) — Primary Network Name (SSID): Enter a Network Name ([...]

30 Getting S tarted Setup your TFTP Server A T rivial File T ransfer Protocol (TFTP) server allows you to transf er files across a network. Y ou can upload files from the AP for backup or copying, and you can downlo ad the files for configu ration and AP Image upgrades. The Solarwinds TFTP server sof tware is located on the ORiNOCO AP Inst allati o[...]

31 Getting S tarted Download Updates from your TFTP Server using the CLI Interface 1. Download the lat est software from http://www .proxim.com . 2. Copy the latest sof tware updates to your TFTP server . 3. Open the CLI interf ace via T elnet or a serial connection. 4. Enter the CLI p assword when prompted. 5. Enter the command: downl oad <t f [...]

32 Getting S tarted Active Ethernet An Active Ethernet-enabled AP is equipped with an 802.3 af-c ompliant Acti ve Ethernet module. Active Ethernet (AE) delivers both dat a and power to the access point over a singl e Ethernet cable. If you choose to use Active Ethernet, there is no d ifferenc e in opera tion; the only diff erence is in the power so[...]

33 Getting S tarted Related T opics The Setup Wizard help s you configure the b asic AP settings required to get the unit up and running. The AP supports many other configuratio n and management option s. The remainder of this user gu ide describes these opt ions in detai l. –S e e Performin g Advanced Configuration f or information on configurat[...]

34 3 V iewing S tatus Information • Logging into the HTTP Interface • System S tatus Logging into the HTTP Interface Once the AP has a valid IP Address and an Ethernet connection, you may use yo ur web browser to monitor the system status. Follow these step s to monitor an AP’s operat ing stati stics using the HTTP interface: 1. Open a Web br[...]

35 V iewing S t atus Information System S tatus System Status is the first screen to appear each time you connect to the HTTP inte rface. Y ou can also return to this screen by clicking the St at us button. Figure 3-2 System S tatus Scr een Each section of the System Status screen provides the f ollowing informat ion: – System St atus : This area[...]

36 4 Performing Advanced Configuration • Configuring the AP Using t he HTTP/HTTPS Interface • System : Configur e specific system information such as system name and cont act information. • Network: Configure IP setting s, DNS client, DHCP server , and Link Integrity . • Interface s: Configure the Access Point’ s interfaces: Wireless and [...]

37 Performing Advanced Configuration Figure 4-1 Enter Network Password Screen 5. Click the Config ure button located on t he left-h and side of the screen. Figure 4-2 Configure Main Screen 6. Click the t ab that corresp onds to the p arameter you want to conf igure. For example, click Network t o configure the Access Point’ s TCP/IP settings. The[...]

38 Performing Advanced Configuration System Y ou can configure and view the following parame ters within the System Configuration screen: • Name: The name assi gned to the AP . System name must be between 1-31 characters. Refer to the Dynamic DNS Support and Access Point System Naming Convention sections fo r rules on naming the AP . • Location[...]

39 Performing Advanced Configuration Network The Network tab cont ains three sub-t abs. – IP Configuration – DHCP Server – Link Integrity IP Configuration Y ou can configure and view the following parame ters within the IP Configuratio n screen: NOTE Y ou must reboot the Access Point in order for any change s to the Basi c IP or DNS Client pa[...]

40 Performing Advanced Configuration DHCP Server If your network does not have a DHCP Server , you can conf igure the AP as a DHCP server to assign dynamic IP addresses to Ethernet nod es and wireless client s. CAUTION ! Make sure there are no other DHCP servers on the network and do not enable t he DHCP server without checking with your ne twork a[...]

41 Performing Advanced Configuration Y ou can configure and view the following parame ters within the DHCP Server Configuration screen: • Enable DHCP Server: Place a check mark in the box provided to enab le DHCP Server functionality . NOTE Y ou cannot enable the DHCP Server f unctionality unless t here is at least one IP P ool T able Entry confi[...]

42 Performing Advanced Configuration Figure 4-4 Link Integrity Configuration Scr een Interfaces The Interfaces t ab contains the fo llowing sub-ta bs: – Operational Mode – 8Wireless-A and Wireless-B – Ethernet From these s ub-tabs, you configure the Acces s Point’s o perational mode, wireless interface settings and Et hernet settings. Y ou [...]

43 Performing Advanced Configuration Operational Mode Operational Mode Selection Y ou can configure and view the following parame ters within the Operational Mode screen. • Operational Mode : th e mode of communi cation between t he wireless cli ents and the Access Point : • 802.1 1b only • 802.1 1g only • 802.1 1bg • 802.1 1a • 802.1 1[...]

44 Performing Advanced Configuration • RTS/CTS Medium Reservation: Thi s parameter af fect s message flow control and sho uld not be changed under normal circumsta nces. Range is 0 to 2347 . When set to a value betwee n 0 and 2347, the Access Point uses the RTS/CTS mech anism for pack ets that are the speci fied size or greater . When set to 2347[...]

45 Performing Advanced Configuration In shutdown st ate, AP will not transmit and recei ve frames from the wireles s interface and will stop tra nsmitting periodic beacon s. Moreover , none of the frames received from the Ethernet interface will be forwarded to t hat wireless interface. Wireless service on a wirel ess interface of the AP can be res[...]

46 Performing Advanced Configuration • Frequency Cha nnel: Wh en Auto Channel Select is enabled, this f ield is read-only and displays the Access Point’s current operating channel . When Auto Channel Select is disabled, you can speci fy the Access Point’ s opera ting channel. If you decid e to manually set the unit’ s channel , ensure that [...]

47 Performing Advanced Configuration NOTE This feature is available on ly if you are using an Orinoco Class ic Gold card. Cell capacit ies are compared in th e following t able, which shows that small cells suit most of fices and large cells sui t most warehouses: Coverage The number of Access Point s in a set area determines th e network coverage [...]

48 Performing Advanced Configuration statio ns that may not be able to receive multicast pac kets at the hig her rates; in thi s case, you should set Multi cast Rate to 1 or 2 Mbits/sec. Figure 4-6 1 Mbits/s and 1 1 Mbits/s Multicast Rates NOTE There is an inter-dependent rel ationship between the Dis tance betwe en APs and the Multicast Rate. In g[...]

49 Performing Advanced Configuration – 802.1 1b/g mode: This is the default mod e. Use this mode if you want to suppo rt a mix of 802.1 1b and 802.1 1g devices. – 802.1 1g-wifi: This mode was developed for Wi-Fi complian ce testing purposes. It is simi lar to 802.1 1g only mode. In general, yo u should use ei ther 802.1 1g only mo de (if you wa[...]

50 Performing Advanced Configuration Figure 4-7 WDS Example Bridging WDS Each WDS link is mapped to a logica l WDS port on the AP . WDS ports behave like Etherne t ports ra ther than like standard wi reless interfaces: on a BSS port, an Access Poin t learns by associa tion and from frames; on a WDS or Ethernet port, a n Access Point learns from fra[...]

51 Performing Advanced Configuration 1. Confirm that Auto Channel Select i s disabled. 2. Write down the MAC Address of the radio that you wish t o include in th e Wireless Distribut ion System. 3. Click on Interfaces > Wireless -A or Wireless-B . 4. Scroll down t o the Wireless Distribution Syst em heading. 5. Click the Edit button to update th[...]

52 Performing Advanced Configuration 7. If security mode is en abled, enter a value f or Encryption Key 0. 8. Click OK . 9. Enter the MAC Address tha t you wrote down in S tep 2 in one of the Partner MAC Address field of the Wireless Distribution Setup wi ndow . 10. Set the Status of the device to Enable . 1 1. Click OK . 12. Reboot the AP . Ethern[...]

53 Performing Advanced Configuration Management The Management tab contain s five sub-tabs. – Passwords – IP Access T able – Services – Automatic Configuration (Aut oConfig) – Hardware Configuration Reset (CHRP) Passwords The following pa sswords are configurable: • SNMP Read Commu nity Password: The password for read access to the AP u[...]

54 Performing Advanced Configuration Services Y ou can configure the following management serv ices: NOTE Y ou must reboot the Access Point if you change the HTTP Port or T elnet Port. Secure Management Secure Management allows the use of encrypted and authenticate d communication protocol s such as SNMPv3, and Secure Socket Link (SSL), to manage t[...]

55 Performing Advanced Configuration Figure 4-10 Management Services Configuration Scr een[...]

56 Performing Advanced Configuration T elnet Configuration Settings • T elnet Interface Bitmask: Select the in terface ( Ethernet, Wirel ess-Slot A , Wire less-Slot B , All Interfaces ) from which you can manage the AP via telnet. This p arameter can also be used to Di sable tel net management. • T elne t Port: The default port number fo r T el[...]

57 Performing Advanced Configuration T o manually generate o r delete hos t keys on the AP: •S e l e c t Create to generat e a new pair of host keys. •S e l e c t Delete to remove the host keys f rom the AP . If no host keys are present, t he AP will not allows conn ections using SSH. When host keys are created or delete d, the AP updates the f[...]

58 Performing Advanced Configuration Serial Configuration Settings The serial port interface on the AP is enab led at all times. See Sett ing IP Address using Seri al Port for information on how to access the CLI interfac e via the serial port. Y ou can configure and view following p arameters: – Serial Baud Rate: Select the serial port speed (bi[...]

59 Performing Advanced Configuration Automatic Configur ation (AutoConfig) The Automatic Configurati on feature which allows an AP to be automatically conf igured by downloading a spec ific configuration fi le from a TFTP server during the boot up proces s. Automatic Configuration i s disabled by default. The configuration process for Aut omatic Co[...]

60 Performing Advanced Configuration Figure 4-12 Automatic Configuration Scr een Set up Automatic Conf ig uration for Dynamic IP Perform the following pro cedure to enable and set up Automat ic Configuration when you have a dyna mic IP address for the TFTP server via DHCP . The Configuration fi lename and the TFTP server IP address are contained i [...]

61 Performing Advanced Configuration Figure 4-13 DHCP Options: Setting the Boot Server Host Name 4. Add the Boot Server Host Name and Boot Filename p arameters to the Active Options list. 5. Set the value of the Bo ot Server Host Name Parameter to the host name or IP Address of the TFTP server . For example: 1 1.0.0.7. Figure 4-14 DHCP Options: Set[...]

62 Performing Advanced Configuration Hardware Configuration Reset (CHRP) Hardware Configuration Reset S tatus is a parameter that defi nes the hardware configuration reset behavi or of the AP (i.e., what ef fect p ressing the rel oad button ha s on an AP op erating in normal o perating mode). If a user loses or forgets the AP’s HTTP/T elnet/SNMP [...]

63 Performing Advanced Configuration Configuring Hardware Configuration Reset Perform the following procedure to configure Ha rdware C onf iguration Reset and to set the Configuration Res et Password. 1. Click Confi gure -> Man agement -> CHRD . 2. Check (enable) or uncheck (disable) the E nable Hardware Con figuration Res et checkbox. 3. Cha[...]

64 Performing Advanced Configuration Filtering The Access Point ’s Pa cket Filtering f eatures help con trol the amount o f traf fic exchanged be tween the wired a nd wireless networks. There are four sub- tabs under the Filteri ng tab: – Ethernet Protocol – St a t i c M A C – Advanced – TCP/UDP Port Ethernet Protocol The Ethernet Protoco[...]

65 Performing Advanced Configuration Each MAC Address or Mask is comprised of 12 hex adecimal digit s (0-9, A-F) that correspond to a 48-bit identifier . (Each hexadecimal digit represent s 4 bit s (0 or 1).) T aken together , a MAC Address/Mask pair specifies an add ress or a range of MAC addresses that the AP wi ll look for when examining p acket[...]

66 Performing Advanced Configuration S tatic MAC Filter Examples Consider a network that cont ains a wired server and three wireless clients. Th e MAC address for each unit is as follows: – W ired Server: 00:40:F4:1C:DB:6A – Wirel ess Client 1: 00:02:2D:51: 94:E4 – W ireless Client 2: 00:02 :2D:51:32:12 – W ireless Client 3: 00:20 :A6:12:4E[...]

67 Performing Advanced Configuration • Wired Mask: FF:FF:FF :FF:FF:FF • Wirele ss MAC Address: 00:00:00: 00:00:00 • Wirele ss Mask: 00:00:00:00 :00:00 Result: The Access Point does not forward any p acket s that have a destination addre ss of 01:00:5E:00:32:4B t o the wireless network. Advanced Y ou can configure the following advanced filter[...]

68 Performing Advanced Configuration • Ethernet and Wireless Sl ot A • Wireless Slot B • Ethernet and Wireless Sl ot B • Wireless Slot A and B • All Interf aces 7. Click OK . Editing TCP/UDP Port Filters 1. Click Edit unde r the TCP/UDP Port Filte r Table heading. 2. Make any changes to the Protoco l Name or Port Number for a specific ent[...]

69 Performing Advanced Configuration Alarms This tab has three sub -tabs. – Groups – Alarm Host T able – Syslog – Rogue Access Point De tection (RAD) Groups The AP can be configured to generate and send ala rms/notif ications/trap s as version 1 or a version 2c. Use the drop-down menu to sele ct SNMP alarm t ype . There are seven alarm grou[...]

70 Performing Advanced Configuration • Security T rap Group • Wireless Interface/Card T rap Group • Operational Trap Group • Flash Memory T rap Group T rap Name Description Authentication Fai lure oriTrapAuthenticationFa ilure Unauthorized Manager Detected oriTrapUnauthorizedManagerDetected RAD Scan Complete oriTrapRADScanComplete RAD Scan [...]

71 Performing Advanced Configuration • TFTP T rap Group • Image T rap Group In addition, th e AP supports these st andard trap s, which are always enabled: • RFC 1215-T rap • Bridge MIB (RFC 1493) Alarms All these alarm group s correspond to System Alarms that are displa yed in the System S tatus scree n, including the traps th at are sent [...]

72 Performing Advanced Configuration Severity Levels There are three severity levels for system al arms: –C r i t i c a l –M a j o r – Informational Critical alarms will often result in severe disruption in network acti vity or an automat ic reboot of t he AP Major alarms are usua lly activated due to a breach in the security of the system. C[...]

73 Performing Advanced Configuration • Syslog Heartbeat St atus : Enables or disables the sending of heartbeat messages from the AP to the configured Syslog servers. • Syslog Heartbeat Interval : S pecifies the inte rval (in seconds) a t which Syslog Heartbeat messages a re sent to the configured Syslog servers. • Syslog Host T able: This tab[...]

74 Performing Advanced Configuration Rogue Access Point Detection (RAD) The Rogue AP Detection (RAD) featu re provides an addit ional security level for wireless LAN deployment s. Rogue AP detection provides a mechanism for detecting Ro gue Access Point s by utilizing the coverage of the trusted Access Point deployment. The Rogue AP Scan employs ba[...]

75 Performing Advanced Configuration Points to the IP address of the management st ation. Th e Access Point s on detecting a new Access Point sen ds a RAD Scan Result T rap to the managemen t station. An example network depl oyment is shown. The T rusted AP has Rogue Access Detection en abled and the trap host is configured to be the manag ement st[...]

76 Performing Advanced Configuration Bridge The AP is a bridge between y our wired and wire less networking device s. As a bridge, the functions performed b y the AP include: • MAC address learning • Forward and filterin g decision makin g • S pa nning T ree protocol used for loop avoidance Once the AP is connected to your network , it learns[...]

77 Performing Advanced Configuration T o bloc k Intra BSS traffic, set Intra BSS T raffic Operat ion to Block . T o allow Intra BSS traf fic, set Intra BSS T raffic Operati on to Passthru . Packet Forwarding (Pkt Fwd) The Packet Forwarding feature en ables you to redirect traf fi c g enerated by wire less client s that are all associated to the sam[...]

78 Performing Advanced Configuration RADIUS Pr ofiles Configuring RADIUS Profiles on the AP define a profile for RADIUS Se rvers used by the system or by a VLAN. The network administrator can de fine RADIUS Servers per Authentication Mode and per VLAN . The AP communicates with the RADIUS server defin ed in a profile to provide the following featur[...]

79 Performing Advanced Configuration server used depends on whether th e authentication is done for an 802.1x client or non-80 2.1x client. The cli ents in VLAN 2 are authenticated us ing a diff erent set of authentica t ion servers conf igured for authentic ating users in VLAN 2. Authentication serve rs for each VLAN are configured as part of the [...]

80 Performing Advanced Configuration Adding or Modifying a RADIUS Server Profile Perform the following pro cedure to add a RADIUS server profile and to con figure its p arameters. 1. Click Add t o create a new profile. T o Modify an existing profile , select the profi le and click Edit. T o delete an existing pro file, select t he profile and click[...]

81 Performing Advanced Configuration • Server Name/IP Address : Enter th e server ’s name or IP address. • Destination Port : Enter the port number which the AP and the server will use to communicat e. By default, RADIUS servers communicate on port 1812. • Server VLAN ID : Indicates th e VLAN that uses this RADIUS server profile. If VLAN is[...]

82 Performing Advanced Configuration RADIUS Accounting Using an external RADIUS server , the AP can track and record the length of client sessions on the access point by sending RADIUS accounti ng messages per RFC2866. When a wi reless cli ent is successf ully authenti cated, RADIUS accounting is init iated by sending an “Accoun ting S t art” r[...]

83 Performing Advanced Configuration SSID/VLAN/Security The AP provides several security feat ures to protect your network from unaut horized access. Virtua l Local Area Networks (VLANs) are logical groupings of network hosts. Defi ned by software setti ngs, other VLAN members or resources appear (to cl ients) to be on the sa me physical se gment, [...]

84 Performing Advanced Configuration Figure 4-23 Components of a typical VLAN VLAN W orkgr oups and T raffic Management Access Points that are not VLAN-capabl e typically tr ansmit broadcast and multicast traffi c to all wirel ess Network Interface Cards (NICs). This process wastes wireless bandwid th and degrades throughput performance . In compar[...]

85 Performing Advanced Configuration The AP can segment users into a maximum of 16 dif ferent workgrou ps (32 if using two cards in a Dual-radio AP) based on an SSID/VLAN pai r (also referred as a VLAN Workgrou p or a Sub-network). NOTE The ability to co nfigure up to 16 VLAN/SSI D pairs and t o configure a secu rity profile pe r SSID is availab le[...]

86 Performing Advanced Configuration MAC Access The MAC Access sub-t ab allows you to build a list of stat i ons, identifie d by their MAC addresses, authori zed to access the network through the AP . The list is stored inside each AP wi thin your network. Note that y ou must reboot t he AP for any changes to the MAC Access Co ntrol T able to take [...]

87 Performing Advanced Configuration Security Profiles The AP supports the fol lowing Security features: • WEP Encryption : The original encrypt ion technique specif ied by the IEEE 802.1 1 standard. • 802.1x Authenti cation : An IEEE st andard for client authenti cation. • Wi-Fi Protected Acce ss (WP A) : A new st andard that provides improv[...]

88 Performing Advanced Configuration Authentication Process There are three main component s in the authent icat ion process. The standard refers to them as: 1. supp licant (cl ient PC) 2. authenticator (Acce ss Point) 3. authenticatio n server (RADIUS server) When using Authe ntication Mode to 802.1x, WP A, Mixed mode (802.1x and WEP), or 802.1 1 [...]

89 Performing Advanced Configuration • Dynamic Key distributi on – T he AP generates and maint ains the keys for it s client s – T he AP securely delivers the appropri ate keys to its clie nts • Client/server mutual au thentication – 802.1x – P re-shared key (for networks that do not have an 802.1x solution imple mented) NOTE For more i[...]

90 Performing Advanced Configuration Configuring Security Pr ofiles Security policies can be co nfigured and applied on t he AP as a whole, or on a per VLAN basis. When VLAN is disabled on the AP , the user can configure a security profile for each int erface of the AP . When VLANs are enabled and Security per SSID is enabled, the user can configur[...]

91 Performing Advanced Configuration • 802.1x S t ation : • Authentication Mode: 802.1x • Cipher: WEP • Encryption Ke y Length: 64 or 128 Bit s. • If 802.1x is e nabled simult aneously with WEP , the 802.1x S tation’ s encryption k ey length is determined by the WEP encryption key . • WP A St ation : • Authentication Mode: 802.1x ?[...]

92 Performing Advanced Configuration Figure 4-27 Security Profile T able - Add Entries[...]

93 Performing Advanced Configuration Wi rel e ss - A a n d Wire l e ss - B Each SSID/VLAN can have its own Security Profile that defines it s security mode, authen tication mechanism, and encryption, so that customers can have multiple types of clients (non-WEP , WEP , 802. 1x, WP A) on the same system, but sepa rated per VLAN. Re fer to the Securi[...]

94 Performing Advanced Configuration Figure 4-30 SSID/VLAN Edit Entries Screen (VLAN Protocol Disabled) 4. Enter a unique Network Name (SSID), between 1 and 32 characters. This paramet er is mandatory . 5. Enter a unique VLAN ID . This p arameter is mandat ory . – Y ou must specify a uni que VLAN ID for each SSID on the i nterface. A VLAN ID is a[...]

95 Performing Advanced Configuration Figure 4-31 SSID, VLAN, and Security Data Configuration (VLAN Protoc ol Disabled) 8. Enable or disable RADIUS accou nting on the VLAN/SSID under th e Accounti ng St at us drop-down menu. 9. Enable or disable RADIUS MAC authent ication stat us on the VLAN/SSID under the RADIUS Authen tication Statu s drop-down me[...]

96 Performing Advanced Configuration 13. Define the RADIUS Server Profile Configuration for the VLAN /SSID: • RADIUS MA C Authentication Profile • RADIUS EAP A uthenticati on Profile • RADIUS Accounti ng Profile If 802.1x, WP A, or 802.1 1i security mode is used, the RADIUS EAP Authenticati on Profile must have a value. A RADIUS Server Profil[...]

97 Performing Advanced Configuration The Add Entry or Ed it Entry screen appears. See Fi gure 4-33 belo w and Fig ure 4-34 on page 98 . Figure 4-33 SSID/VLAN Add Entries Screen (VLAN Protocol Enabled)[...]

98 Performing Advanced Configuration Figure 4-34 SSID/VLAN Edit Entrie s Screen (VLAN Protocol Enabled ) 4. Enter a unique Network Name (SSID), between 1 and 32 characters. This paramet er is mandatory . 5. Enter a unique VLAN ID . This p arameter is mandat ory . – Y ou must specify a uni que VLAN ID for each SSID on the i nterface. A VLAN ID is [...]

99 Performing Advanced Configuration NOTE If you have two or more SSIDs per interface using a securi ty Profile with a securi ty mode of Non Secure, be aware that security being a pplied in th e VLAN is not being applied in the wireles s network. 13. Define the RADIUS Server Profile Configuration for the VLAN/SSID: • RADIUS MA C Authentication Pr[...]

100 5 Monitoring the AP-2000 • Logging into the HTTP Interface • Ve r s i o n : Provides version information for the Access Point’ s system c omponents. • ICMP: Displays stati stics for Internet Control Message Protocol packet s sent and received by the AP . • IP/ARP T able: Displays the AP’s IP Address Res olution t able. • Learn T a[...]

101 Monitoring the AP-2000 Figure 5-1 Enter Network Password Screen 5. Click the Monitor butto n located on the lef t-hand side of the screen. Figure 5-2 Monitor Main Screen 6. Click the t ab that correspond s to the st atistics you wa nt to review . For example, click L earn T able to see the list of nodes that the AP has discovered on the network[...]

102 Monitoring the AP-2000 Ve r s i o n From the HTTP interface, click t he Monitor button and select the Ve r s i o n tab. The list dis played provides you with information that may be perti nent when calling T echnical Support. With this informati on, your T echnical Support representat ive can verify compa tibility issues and make sure th e late[...]

103 Monitoring the AP-2000 ICMP This tab provides statistical information for both received and t ransmitted messages direct ed to the AP . Not all ICMP traff ic on the network is counted in the IC MP (Internet Control Message Protoc ol) statist ics. Figure 5-4 ICMP Monitoring Screen IP/ARP T able This tab provides information based on the Add ress[...]

104 Monitoring the AP-2000 Learn T able This tab disp lays information rela ting to network bridging. It reports th e MAC address for each node that the device has learned is on the netwo rk and the interface on wh ich the node was detected. Th ere can be up 10,000 entri es in the Learn T able. Figure 5-6 Learn T able IAPP This tab displ ays statis[...]

105 Monitoring the AP-2000 RADIUS This tab p rovides RADIUS aut hentication, EAP/ 802.1x authenti cation, and account ing information for both the Primary and Backup RADIUS servers. NOTE RADIUS authenticat ion and accounting must be enabled for this inf ormation to be valid. Figure 5-8 RADIUS Monitoring Scr een[...]

106 Monitoring the AP-2000 Interfaces This tab di splays sta tistics for the Ethernet and wireless interfaces. The Ope rational S tatus can be up, down, or testing. Figure 5-9 Wir eless Interface Monitoring[...]

107 Monitoring the AP-2000 St a t i o n St a t i s t i c s This tab displ ays information on wireless clien ts att ached to the AP and on Wireless Distributio n System links. Enabling and V iewing S tation S tatistics T o enable the monitoring of S tations S t atistics, perf orm the following procedure: 1. Click on the Monitor t ab on the lef t on [...]

108 Monitoring the AP-2000 • Interface to which the St ation is connected : The interface number on which th e client is connected with the AP . For WDS links this is the interf ace on which the link is configured. • St atio n T ype : The typ e of wireles s client (ST A or WDS). • MAC Protocol : The MAC protocol for this wireles s client (or [...]

109 6 Performing Commands • Logging into the HTTP Interface • Introduction to File T ransfer via TFTP or HTTP : Describes the available f ile transfer methods. • Update AP via TFTP: Download files from a TFTP server to the AP . • Update AP via HTTP: Download files to the AP from HTTP . • Retrieve Fi le via TFT P: Upload configuration fi l[...]

110 Performing Commands Figure 6-1 Enter Network Password Screen 5. Click the Commands but ton located o n the lef t-hand side o f the screen. Figure 6-2 Commands Main Screen 6. Click the tab t hat corresponds to the command you want to issue. For example, click Re boot to rest art the unit.[...]

111 Performing Commands Intr oduction to File T r ansfer via TFTP or HTTP There are two methods of transferri ng f iles to or from the AP , TFTP or HTTP (or HTTPS if enabled). The following procedures d escribe downlo adin g Configuration, AP I mage, Bootloader , Private Key , and Certificate fi les to the AP : • Update AP via TFTP • Update AP [...]

112 Performing Commands Update AP via TFTP Use the Up date AP via TF TP tab to downlo ad Configuration, AP Image, Bootloader files, and Certi ficate and Private Key files to the AP . A TFTP server must be running and configured to point to the directory contai ning the file. Figure 6-3 Update AP via TFTP Comman d Screen If you do not have a TFTP se[...]

113 Performing Commands Update AP via HTTP Use the Up date AP via HTTP t ab to download Configurati on, AP Image, Boot loa der files, and Certificate and Private Key files to the A P . Once on the Update AP screen, click on the vi a HTTP tab. Figure 6-4 Update AP via HTTP Command Screen The Up date AP via HTTP tab shows version information and allo[...]

114 Performing Commands Figure 6-5 W arning Message Click OK to continue wi th the operation or Cancel to ab ort the operation. NOTE An HTTP file transfer using SSL may t ake extra time. If the operation complet es successfully the foll owing screen appears. Figure 6-6 Update AP Successful If the operation di d not complete succes sfully the foll o[...]

115 Performing Commands Retrieve File via TFTP Use the Retrieve File via TFTP t ab to uplo ad files f rom the AP to t he TFTP server . The TFTP server must be running and configured to point to the directo ry to which you want to copy the upl oaded file. W e suggest you assig n the file a meaningful name , which may i nclude version or locatio n in[...]

116 Performing Commands Retrieve File via HTTP Use the Retrieve Fil e via HTTP t ab to ret rieve confi guration files, CLI Batch Files, or CLI Batch Logs from the AP . Select the type of fil e (Config, CLI Batch Fi le, or CLI Batch Log) from the File T ype drop-down menu. For more information on CLI Batch File s and CLI Ba tch Logs refer t o CLI Ba[...]

117 Performing Commands Figure 6-1 1 File Download Dialog Box On clicking the Save but ton the following Save As wind ow displays, where the user is prompted to choose the filename and locat ion where the file is to be down loaded. Select an appro priate filename and loca tion and click OK . Figure 6-12 Retrieve File Save As Dialog[...]

118 Performing Commands Reboot Use the Reboot tab t o save configuration changes (if any) and reset the AP . Entering a value of 0 (zero) seconds causes an immediate reboot . Note that Reset , describ ed below , does not save configuration changes . CAUTION ! Rebooting the AP wi ll cause all users who are currently connect ed to lose their connect [...]

119 Performing Commands Reset Use the Reset t ab to restore the AP to factory default conditi ons. The AP may also be reset from the RESET button located on the side of the uni t. Since this will reset t he Access Point’ s current IP address, a new IP address must be assigned. Refer to Recovery Procedures for more information. CAUTION ! Resetting[...]

120 Performing Commands Help Link T o open Help , cl ick the Help button on any display screen. During initializ ation, the AP on-lin e help files are down loaded to the default location: C:/Program File s/ORiNOCO/AP/HTML /index.htm . NOTE Use the forward slash character ("/") rather than t he backslash characte r ("") when con[...]

121 7 T roubleshooting the AP-2000 • T roubleshooti ng Concepts • Symptoms and Solutions • Recovery Procedures • Related Applicati ons NOTE This section help s you locate probl ems related to the AP device setup. For det ails about RADIUS, TFTP , serial communication programs (such as HyperT erminal), T elnet applicatio ns, or web browsers,[...]

122 T roubleshooting the AP-2000 Symptoms and Solutions Connectivity Issues Connectivity i ssues include a ny problem that preve nts you f rom powering up or connecting t o the AP . AP Unit Will Not Boot - No LED Activity 1. Make sure your p ower source is operati ng. 2. Make sure al l cables ar e connected to the AP corre ctly . 3. If you are usin[...]

123 T roubleshooting the AP-2000 2. The AP only cont acts a DHCP server during bo ot-up. If your network’ s DHCP server is not a vailable while the AP is booting, the devi ce will ret ain the last IP Ad dress it had. Reboot the AP once your DHCP server is on-line a gain or use the ScanT ool to find the Access Point’ s current IP address. 3. T o[...]

124 T roubleshooting the AP-2000 Client Connection Problems Client Software Find s No Connection Make sure you have configured y our client sof tware with the proper Netw ork Name and Security settings . Network Names and WEP Keys are typically allocated and mai ntained by your net work administrator . Client PC Card Does Not W ork 1. Make sure you[...]

125 T roubleshooting the AP-2000 I have just conf igured t he Management ID and now I can't manage the AP? – Check to ensure your password is correct. If your passwor d is incorrect or all inbound pack ets do NOT have the correct tag, then a manua l override is necessary . CAUTION ! The manual override proc ess disconnect s all users and res[...]

126 T roubleshooting the AP-2000 Reset to Factory Default Procedur e Use this procedure to reset the network conf iguration values, i ncluding the Access Point’ s IP address and subnet mask. The current AP Image is not deleted. Follow th is procedure if you forget the Access Poin t’s p assword: 1. Press and hold the RELOAD button fo r 10 second[...]

127 T roubleshooting the AP-2000 For this procedure, you wil l first erase the AP Image current ly i nstalled on the unit and then use either Scan T ool or the Bootloader CLI (over the seria l port) to set the IP address and downl oad a new AP Image. Follow these step s: 1. While the un it is running, press the RESET button. NOTE See RELOAD and RES[...]

128 T roubleshooting the AP-2000 1 1. Click OK . – R esult: The Access Point will reboot and t he download will begin automa tically . Y ou should see downloading activity be gin af ter a few secon ds within t he TFTP server’s st atus screen. 12. Click OK when prompted that the device has been updated successfully t o return to the Scan List sc[...]

129 T roubleshooting the AP-2000 7. Enter only the follo wing statement s: [Device name]> set ipaddrtype static [Device name]> set ipaddr <Access Point IP Address> [Device name]> set ipsubmask <IP Mask> [Device name]> set tftpipaddr <TFTP Server IP Address> [Device name]> set tftpfilename <AP Image File Name , in[...]

130 T roubleshooting the AP-2000 Follow these step s to assign the AP an IP address: 1. Open your terminal emulatio n program (like HyperT e rminal) and set the foll owing connection properties: • Com Port: <COM1, COM2, etc., dependi ng on your computer> • Baud rate: 9600 • Data Bi ts: 8 •S t o p b i t s : 1 • Flow Control: No ne ?[...]

131 T roubleshooting the AP-2000 Related Applications RADIUS Authentication Server If you enabled RADIUS Authentication on the AP , make sure that your n etwork’s RADI US servers are operati onal. Otherwise, client s will not be able to log in . There are several reasons the aut hentication server servic es might be unavailable, here are t wo typ[...]

132 A Using the Command Line Interface (CLI) This section describe s the AP’s Command Line (CLI) I nterface. CLI co mmands can be used to in itialize, con figure, and manage the Access Point . – C LI commands may be entered in real time th rough a keyboard or submitted wit h CLI scripts. –A CLI Ba tch file is a user-editable confi guration fi[...]

133 Using the Command Line Interface (CLI) • Download vs. Upload - Downloa ds transfer files to the Ac cess Point. Uploads transf er files from the Access Poi nt. The TFTP server performs file transfers in both directions. • Group - A logical collection of network p arameter info rmation. For example, the System Group is composed of several rel[...]

134 Using the Command Line Interface (CLI) Bootloader CLI The Bootloader CLI is a minimal sub set of the normal CLI used to perform ini tial configurati on of the AP . This interface is only accessible via the serial interface if the AP does not contain a sof tware image or a download imag e command over TFTP has failed. The Bootloader CLI provides[...]

135 Using the Command Line Interface (CLI) CLI Command T ypes This guide divides CLI Commands int o two categories: Operatio nal and Parameter Controls . Operational CLI Commands These commands af fect Access Poi nt behavior , such as downloading , rebooting, and so o n. Af ter entering commands (and paramet ers, if any) press the Enter key to exec[...]

136 Using the Command Line Interface (CLI) Figure A-4 Result of “s?” CLI command Example 3. Display para meters for set and show Example 3a allows you to see every p ossible parame ter for the set (or show) commands. No tice from exampl e 3a that the list is very long. Example 3b sho ws how to display a subset of the parameters based on ini tia[...]

137 Using the Command Line Interface (CLI) Example 4. Display Prompt s for Success ive Parameters Enter the command, a space, and then ? . Then, when the p arameter prompt appears, ent er the parameter valu e. Result: The p arameter is changed and a new CLI line is echo ed with the new value (in the f irst part of the fol lowing example, the value [...]

138 Using the Command Line Interface (CLI) Figure A-8 Results of “help” CLI command 2. Complete command descripti on and command usage can be provided by: [Device-Name]> help <command name> [Device-Name]> <command name> help history Shows content of Command History Buf fer . The Command History Buf fer stores command stateme n[...]

139 Using the Command Line Interface (CLI) upload Uploads a text-based configuration fi le from the AP to the TFTP Server . Executing upload with the ast erisk character (“*”) will make use of the previously set/st ored TFTP parameters. Execut ing upload without p arameters will display command help and usage informa tion. 1. Synta x to upload [...]

140 Using the Command Line Interface (CLI) Configuring Objects that Requir e Reboot Certain objec ts supported by the Access Point require a device reboot in order for the chang es to take ef fect. In order to inform the end-user of thi s behavior , the CLI provides informational messages whe n the user has configured an object that requires a rebo[...]

141 Using the Command Line Interface (CLI) Example 3 - Modify a table entry or row Use the index to be modifie d and the table el ements you would like to modify . For example, sup pose the IP Access T able has one entry and you wanted to modify the IP address: [Device-Name]> set mgmtipaccesstbl 1 ipaddr 10.0.0.11 Y ou can also modify several el[...]

142 Using the Command Line Interface (CLI) Example 6 - Show Individual and T able Parameters 1. View a single parameter . Synta x: [Device-Name]> show <parameter name> Example: [Device-Name]> show ipaddr Result: Displays the Access Point IP address . Figure A-1 1 Result of “show ipaddr” CLI Command 2. View all p arameters in a t abl[...]

143 Using the Command Line Interface (CLI) Using S trings Since there are several strin g objects supp orted by the AP , a string delimiter i s required fo r the strings to be inte rpreted correctly by the command l ine parser . For this CLI implement ation, the singl e quote or double quote character can be used at the beginning and at the end of [...]

144 Using the Command Line Interface (CLI) NOTE Proxim recommends changi ng your defa ult passwords immediately . T o perform this operation using CLI commands, re fer to Change Passwords . Set Basic Configuration Para meters using CLI Commands There are a few basic configuration p arameters that you ma y want to setup right away when you receive t[...]

145 Using the Command Line Interface (CLI) [Device-Name]> set snmpv3privpasswd <New Password> (SNMPv3 privacy password) [Device-Name]> reboot 0 CAUTION ! Proxim strongly urges you to change the def ault passwor ds to restrict access to your network dev ices to authorized personnel . If you lose or forget your p assword settings, you can[...]

146 Using the Command Line Interface (CLI) Examples: [Device-Name]>set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication" radacctprofile "Accounting" radmacauthstatus enable aclstatus enable set wifssidtbl 4.1 s[...]

147 Using the Command Line Interface (CLI) Download an AP Configuration File fr om your TFTP Server Begin by starti ng your TFTP program. It must be running and confi gured to transmit and receive . [Device-Name]> set tftpfilename <file name> tftpfiletype config tftpipaddr <IP address of your TFTP server> [Device-Name]> show tftp [...]

148 Using the Command Line Interface (CLI) NOTE Refer to Performing Advanced Configuration for more i nformation on these settings. Configure the AP as a DHCP Server NOTE Y ou must have at least one entry in the DHCP Server IP Address Pool T able before you can set the DHCP Server S t atus to Enable. [Device-Name]> set dhcpstatus disable [Device[...]

149 Using the Command Line Interface (CLI) Operational Mode [Device-Name]> set wif <index> mode <see table> Autochannel Select (ACS) ACS is enabled b y default. Reboot after d isabling or enabli ng ACS. [Device-Name]> set wif <index> autochannel <enable/disable> [Device-Name]> reboot 0 Enable/Disable Closed System [[...]

150 Using the Command Line Interface (CLI) Set the Multicast Rate (802.1 1b Only) [Device-Name]> set wif <index> multrate <1,2,5.5,11 (Mbits/sec) > NOTE The Distance Bet ween APs must be set before the M ulticast Rate. Enable/Disable Super Mode (802.1 1a/ g only) [Device-Name]> set wif 3 super <enable/disable> Enable/Disable[...]

151 Using the Command Line Interface (CLI) Configure Secur e Socket Layer (HTTPS) Enabling SSL and c onfiguring a passphrase allows encrypted Secure Socke t Layer communic ations to the AP through the HTTPS interface. [Device-Name]> set sslstatus <enable/disable> The user must change the SSL passphrase when uploa din g a new certificate/ p[...]

152 Using the Command Line Interface (CLI) Configure MAC Access Contr ol Setup MAC (Addr ess) Access Contr ol [Device-Name]> set macaclstatus enable [Device-Name]> set macacloptype <passthru, block> [Device-Name]> reboot 0 Add an Entry to the MAC Access Contr ol T able [Device-Name]> set macacltbl <index> macaddr <MAC Add[...]

153 Using the Command Line Interface (CLI) Set RADIUS Parameters Configure RADIUS Authentication servers Perform the fo llowing command t o configure a RADI US Server and assign it to a VLAN. The RADIUS Server Profil e index is specifi ed by the index p arameter and the su bindex paramet er specifies wheth er you are configurin g a primary or secon[...]

154 Using the Command Line Interface (CLI) Index : 2 Primary/Backup : Primary Profile Name : EAP Authentication Server Status : notReady Server Addressing Format : ipaddr IP Address/Host Name : 0.0.0.0 Destination Port : 0 VLAN Identifier : -1 MAC Address Format : dashdelimited Response Time : 3 Maximum Retransmission : 3 Authorization Lifetime : 0[...]

155 Using the Command Line Interface (CLI) Accounting Update Interval : 0 Accounting Inactivity Timer : 5 Index : 4 Primary/Backup : Primary Profile Name : Management Access Server Status : notReady Server Addressing Format : ipaddr IP Address/Host Name : 0.0.0.0 Destination Port : 1812 VLAN Identifier : -1 MAC Address Format : dashdelimited Respon[...]

156 Using the Command Line Interface (CLI) Set Hardware Configur ation Reset Parameters The Hardware Configuration Re set commands allows you t o enable or disable t he hardware reset functional ity and to change the pass word to be used for config uration reset during boot up. T o disable hardware confi guration reset, en ter: [Device-Name]> se[...]

157 Using the Command Line Interface (CLI) Access Point network objects a re associated with Groups. The network object s are l isted below and associated paramete rs are described in the foll owing Parameter T ables: • System Parameters - Access Point system information – Inventory Manage ment Information - Hardware, firmware, and so ftware ve[...]

158 Using the Command Line Interface (CLI) – VLAN/SSID Parameters - Enable the c onfiguration of mult iple subnetworks based on VLAN ID and SSID pai rs . – Security Profil e T able - Configure Security Profil es that define allowed security modes (wireless client s), and encryption and authen tication mechanisms . • Other Parameters – IAPP [...]

159 Using the Command Line Interface (CLI) Inventory Management Information NOTE The inventory management comman ds display advanced informa tion about the AP’ s instal led component s. Y ou may be asked to report this information to a represent ative if you cont act customer support. Network Parameters IP Configuration Parameters NOTE The IP Add[...]

160 Using the Command Line Interface (CLI) DHCP Server Para meters NOTE The DHCP Server (dhcpstatus) can only be enabled af ter a DHCP IP Pool table entry has been created. DHCP Server tabl e for IP pools NOTE Set either End IP Address or Width (but not both) when creating an IP address pool. Name T ype Values Access CLI Parameter DHCP Server Group[...]

161 Using the Command Line Interface (CLI) Link Integrity Parameters Link Integrity IP T arg et T able Name T ype V alues Access CLI Parameter Link Integrity Group N/A R linkint Link Integrity Status Integer en able disable (default) RW linkintstatus Link Integrity Poll Interval Integer 500 - 15000 ms (in increm ents of 500 ms) 500 ms (default) RW [...]

162 Using the Command Line Interface (CLI) Interface Parameters Wir eless Interface Parameters The wireless interface group p arameter is wif . For Dua l-radio APs, Slot A uses tabl e index 3 and Slot B uses t able index 4. Common Parameters to 802.1 1a, 802.1 1b, and 802.1 1b/g APs Note 1: For 802.1 1a APs in Europe, Auto Channel Select is a read-[...]

163 Using the Command Line Interface (CLI) 802.1 1b Only Parameters NOTE There is an inter-dependent rel ationship between the Dis tance betwe en APs and the Multicast Rate. In general, larger systems operate a lower average tra nsmit rates. Name T ype Valu es Access CLI Parame ter Distance between APs Integer large (default) medium small minicell [...]

164 Using the Command Line Interface (CLI) 802.1 1b/g Only Parameters Note 1: Super Mode must be e nabled first o n the wireless i nterface before T urbo Mode can be enabled. Wir eless Distribution Sy stem (WDS) Parameters Name T ype Valu es Access CLI Parameter Wireless Operational Mode Integer dot11b-only dot11g-only dot11bg (default) dot11g-wifi[...]

165 Using the Command Line Interface (CLI) Wir eless Interface SSID/VLAN/Profile Parameters The Wireless Interface SSID t able manages the SSID/VL A N pairs, and the Se curity Profile and RADIUS Profil es associated to the VL AN NOTE The ability to configure up to 16 VLAN/SSI D pairs and to config ure security and RADIUS profiles pe r SSID is avail[...]

166 Using the Command Line Interface (CLI) Ethernet Interface Par ameters Management Parameters Secure Management Parameters SNMP Parameters HTTP (web browser) Parameters Name T ype V alues Access CLI Parameter Ethernet Interface Group N/A R ethernet Speed Integer 10halfdupl ex 10fullduplex 10autoduplex 100halfduplex 100fullduplex autohalfduplex au[...]

167 Using the Command Line Interface (CLI) NOTE The default p ath for the Help file s is C:/Program File s/ORiNOCO/AP/ HTML/index. htm . (Use the forwa rd slash character ("/") rather than the backsl ash characte r ("") when configuring the Help Li nk location.) The AP Help information is avai lable in English, French , German,[...]

168 Using the Command Line Interface (CLI) RADIUS Based Management Acce ss Parameters The RADIUS Based Management Access pa rameters allow you t o enable HTTP or T elnet Radius Management Access, enable or disable loc al user access, and configure th e local user pas sword. The default local user ID is root and the default local us er password is p[...]

169 Using the Command Line Interface (CLI) Auto Configurat ion Parameters These paramete rs relate to the Auto Config uration feat ure whic h allows an AP to be automatically con figured by downloading a specific configuration f ile from a TFTP s erver during the bo ot up process. TFTP Server Parameters These paramete rs relate to upload and downlo[...]

170 Using the Command Line Interface (CLI) Filtering Parameters Ethernet Protocol Filtering Parameters Ethernet Protocol Filtering T able Identify the dif ferent f ilters by using the t able index. NOTE The filter Operation T ype (passthru or block) applies only to the protocol filters that are enabled in this table. NOTE The AP requires a reboot f[...]

171 Using the Command Line Interface (CLI) Proxy ARP Parameters IP ARP Filtering Parameters Broadcast Filt ering T able TCP/UDP Port Filtering The following p arameters ar e used to enable/ disable the Port filter feat ure. TCP/UDP Port Filtering T able The following p arameters are u sed to configu re TCP/UDP Port filters . Name T ype V alues Acce[...]

172 Using the Command Line Interface (CLI) Alarms Parameters SNMP T able Host T able Parameters When creating t able entries, you may eit her specifying the argument name followed by argument value . CLI applies default values to the omitted arguments. Due to the nature of the information, the only argument that can be omitted is the “comment” [...]

173 Using the Command Line Interface (CLI) NOTE The Heartbeat parameters are adva nced settings not av ail able via the HTTP inte rface. When Heartbe at is enabled, the AP periodi cally sends a message to the Sys log server to indicate that it is active. The freq uency with which the heartbeat message is sent depends upon the setting of the Heartb [...]

174 Using the Command Line Interface (CLI) S tor m Thre shold Parameters S torm Thr eshold T a ble Intra BSS Subscriber Blocking The following pa rameters control the Intra BSS t raffic fe atur e, whic h prevent wireless client s that are associated wit h the same AP from communicating with eac h other: Packet Forwarding Parameters The following p [...]

175 Using the Command Line Interface (CLI) NOTE The Wireless Distri bution System (WDS) feature is not available for 802.1 1a or 802.1 1 b/g APs at this time. Security Parameters MAC Access Control Parameter MAC Access Contr ol T able RADIUS Parameters General RADIUS Parameters RADIUS Server Configuration Parameters NOTE Use a server na me only if [...]

176 Using the Command Line Interface (CLI) Rogue Access Point Detection (RAD) Parameters Hardware Configuration Reset The Hardware Configuration Reset co mmands allows you to en able or disable th e feature and to change the pass word to be used for configuration reset during boot up. VLAN/SSID Parameters Server IP Address or Name IpAddress Display[...]

177 Using the Command Line Interface (CLI) Security Profile T able The Security Profile T able allows you to configure security profiil es. A maximum of 16 security profiles are supported per wireless interfac e. Each security profi le can be enab le and configu re one or more s ecurity modes (None Secu re S tation, WEP S t ation, 802.1x S tation, [...]

178 Using the Command Line Interface (CLI) Configuring a Security Profile with WP A-PSK Security Mode set secprofiletbl <index > secmode wpa- p sk pas sphrase <value> st atus enable Example: set secprofiletbl 6 secmode wpa-psk passphrase 12345678 status enable Configuring a Security Profile with 802.1 1i Security Mode set secprofiletbl [...]

179 Using the Command Line Interface (CLI) CLI Batch File A CLI Batch fil e is a user-edit able config uration file that provides a user-friendly way to change th e AP configurati on through a file upload . The CLI Batch file is an ASCII fi le that facilit ates Auto Configu ration because it does not require the user to access one of the AP’ s ma[...]

180 Using the Command Line Interface (CLI) Reboot Behavior When a CLI Batch file contains a reboot command, the reboot will occu r only af ter the entire CLI Batch file has been executed. There are two methods of uploading the CLI Ba tch File: •U p l o a d • Upload and reboot (this opti on is to be used for a CLI Batch file cont aining the conf[...]

181 B ASCII Character Chart Y ou can configure WEP Encryption Keys in either Hexadeci mal or ASCII format. Hexade cimal digit s are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F , a-f (case sensitive), and punctuation marks. Each ASCII charact er corresponds to two hexadec imal digit s. The table below li sts the ASCII characters [...]

182 C Specifications • Software Features • Hardware S pecifica tions • Radio S pecifications Software Featur es The tables belo w compare the sof tware features avail able depending on the card t ype in the Access Point: • Number of S t ations per BSS • Management Function s • Advanced Bridgin g Functions • Medium Access Control (MAC)[...]

183 Specifications Advanced Bridging Functions Medium Access Control (MAC) Functions Note 1 : A user cannot manually select a channel for product s sold in Europe; thes e products require aut omatic channel selection using Dynamic Frequen cy Selection (DFS) . Security Functions Note 1 : Key lengths supported by 802. 1 1a: 64-bit, 128-bit, and 152-b[...]

184 Specifications Network Functions Note 1 : Includes Fal lback to Primary RADI US Server , RADI US Session Timeout, RADIUS Multiple MAC Address Formats, RADIUS DNS Host Name S upport, RADIUS S t art/S top Ac counting. Advanced Wir eless Functions Note 1 : Avail able only one way (AP to client) if usin g an ORiNOCO ComboCard or a non-ORiNOCO clien[...]

185 Specifications Electrical Specifications Without Active Ethernet Module V olt age = 100 to 240 V AC (50-60 Hz) Current = 0.2 amp Power Consumption = 2 0 W atts With Active Ethernet Module Input V oltage = 42 to 60 VDC Output Current = 200mA at 48V Power Consumption = 9 -10 W atts Environmental S pecifications AP-2000 Unit Operating = 0° to 40?[...]

186 Specifications 802.1 1a Channel Frequencies The available 802.1 1a Channels varies by re gulatory domain and/ or country . 802.1 1a radio certification is avail able in the following region s: – F CC: U.S., Canada, and Aus tralia – E TSI: Europe and the Unit ed Kingdom – TELEC: Jap an – SG: Singapore – ASIA: China, Hong Kong, and Sout[...]

187 Specifications 802.1 1b Channel Frequencies The available 8 02.1 1b channels va ry by regulatory domain and/o r country . 802.1 1b radio certificat ion is avai lable in the following region s: — FCC - U.S./Canada, Mexico, and Australi a — ETSI - Most of Europe, includin g the United Kingdom and some Eastern block cou ntries —M K K - J a p[...]

188 Specifications Note 1: France is restri cted to these c hannels. Note 2: Channel 14 is only ava ilable when using 802. 1 1b only mode. Wir eless Communication Range The range of the wire less signal is rel ated to the compositi on of object s in the radio wave path and t he transmit rate of the wireless co mmunication. Co mmunications at a l ow[...]

189 Specifications 802.1 1a (5 GHz Upgrade Kit) T able C-2 802.1 1a (5 GHz Upgrade Kit) Wir eless communication ranges 802.1 1a (1 1a Upgrade Kit) T able C-3 802.1 1a (1 1a Upgrade Kit) Wireless communication ranges Range 54 Mbits/ s 48 Mbit s/s 36 Mbits/s 24 Mbits/ s 18 Mbits/ s 12 Mbits/ s 9 Mbits/ s 6 Mbits/ s Open Office 19 m (62 ft.) 33 m (108[...]

190 Specifications 802.1 1b/g T able C-4 802.1 1b/g Wireless co mmunication ranges Range 54 Mbits/s 48 Mbits/s 36 Mbits/s 24 Mbit s/s 18 Mbits/s 12 Mbits/s 9 Mbits/s 6 Mbits/s 11 Mbits/s 5.5 Mbits/s 2 Mbits/s 1 Mbits/s Open Office 56 m (184 ft.) 69 m (226 ft.) 107 m (351 ft.) 164 m (538 ft.) 219 m (718 ft.) 272 m (892 ft.) 292 m (958 ft.) 314 m (10[...]

191 D T echnical Support If you are ha ving a proble m using an AP and cannot resolve it wi th the info rmation in T roubles hooting the AP-2000 , gather the following informat ion and cont act ORiNOCO T echnical Support: • List of ORiNOCO product s install ed on your network; include the foll owing: – Product names and quanti ty – Part numbe[...]

192 ORiNOCO AP-4000 User Guide E S tatement of W arranty W arranty Coverage Proxim Corporation warran ts that it s Products are manufa ct ured s olely from n ew part s, conform s ubstantia lly to specification s, and will be free of defect s in material and work manship for a W arranty Period of 1 year from the dat e of purchase. Repair or Replacem[...]

193 S tatement of W arranty Calls to the Customer Service Center for reasons other th a n Product failure will not be accepte d unless Buyer has purchased a Proxim Service Contract or t he call is made within the first thirty (30) days of t he Product’ s invoice date. Calls that a re outsi de of the 30-day free s upport time wi ll be charged a fe[...]

194 ORiNOCO AP-4000 User Guide F Regulatory Information This regulatory flyer con tains the foll owing sections: • Informat ion to the User Read this document prior t o installa tion! User Documentat ion is provided on the CD-ROM. • Informations po ur l’utilisateur Lisez ce document avant l'i nstallatio n ! La documentat ion utilisateur [...]

195 Regulatory Information Information to the User This document provides regulat ory information for the foll owing products: • Wireless Client prod ucts such as th e PC Card. • Wireless Base S tation products such as the AP-200 , AP-700, AP-1000, AP-4000, AP-400 0 1 1a Upgrade Kit, AP-4000 1 1g Cardbus Kit, AP-600 1 1abg Upgrade Kit, AP-2500,[...]

196 Regulatory Information Wir eless LAN and your Health Wireless LAN product s, like other radio devices, emit radio frequency elect romagnetic energy . The level of emitted energy however is far less than the el ectromagnetic ene rgy emitted by other wire less devices like mobil e phones, for example. Because Wireless LAN produ cts operate within[...]

197 Regulatory Information Informations pour l’utilisateur Ce document fournit des informat ions sur les réglementa tions concernant le s produits suivan ts : • Les produits clien t sans fil tels que PC Card. • Les produit s sans fil de la Base S tation tels que AP-200, AP-70 0, AP-1000, AP-4000, AP-40 00 1 1a Upgrade Kit, AP-4000 1 1g Cardb[...]

198 Regulatory Information Réseaux sans fil et votre santé Les produit s pour un rés eau sans fil, comme d’autres d ispositifs radi o, émettent de l’énergie él ectromagnétique de fréquence radio. Le nivea u d’énergie émis p ar les dispositifs pour résaeu sans fil est toutefoi s beaucoup moins élevé que l’énergie él ectro-magn[...]

199 Regulatory Information Informazioni per l’utente Questo documento conti ene informazioni l egali relative ai segue nti prodotti: • Prodott i client wirele ss come la PC Card. • Prodotti per Base S tat ion wireless come il AP-200 , AP-700, AP-1000 , AP-4000, AP-4000 1 1a Upgrade Kit, AP-4000 1 1g Cardbus Kit, AP-2500, AP-4000, ORiNOC O AP-[...]

200 Regulatory Information Wir eless LAN e la salute I prodotti LAN wirel ess, così come altri disposi tivi radio, emet tono energia elet tromagnetica in radiof requenza. L'energia emessa è tuttav ia molto inferiore all'energia el e ttromagnetica eme ssa da altri dispositivi wirel ess come, ad esempio, i telefo ni cellulari. Poiché i p[...]

201 Regulatory Information Informationen für den Benutzer Dieses Dokument enthält wicht ige Informationen über folg ende Produkte: • Funk-Client-Produkte wie die PC Card. • Funk-Base S t ations-Produk te wie der AP-200, AP-700, AP-1000, AP-4000, AP-4000 1 1a Upgrade Kit, AP-4000 1 1g Cardbus Kit, AP-2500, AP-400 0, ORiNOCO AP-600, AP-600 1 1[...]

202 Regulatory Information Funk-LAN und gesundheitliche Sicherheit Funk-LAN-Produkte geben wie alle Hochfrequ enzgeräte elekt romagnetische Hoc hfrequenzenenergie a b. Bei Funk-LAN-Geräten ist j edoch eine deutli ch geringere Emi ssi on elektromagnetisch er Energie zu verzeichnen als bei anderen Funkgerä ten, wie z. B. Mobiltelef onen. Da die Fu[...]

203 Regulatory Information Información para el usuario Este documento incluye in formación sobre normativ as acerca de los siguientes produc tos: • Productos cliente inalámbric os como la PC Card. • Productos de Base S tation inalámbric os como el AP -200, AP-700, AP-1000, AP-4000, AP-4000 1 1a Upgrade Kit, AP-4000 1 1g Cardbus Kit, AP-2500[...]

204 Regulatory Information LAN inalámbrica y su salud Los productos de LAN inalámbrica, al igual que otros dispositiv os de radiotecnología, emiten energía electromagnética de radiofrecuenci a. Sin embargo, e l nivel de en ergía que emiten es mucho menor que la energía electromagnética emitida por otros dispositivo s inalámbricos, como por[...]

205 Regulatory Information ユーザー情報 このマニュアルでは、次の製品に 関する規制情報について説明しま す。 ･ PC Card などの無線クライアント製品 ･ AP-200 , AP-700, AP-1000 , AP-4000 , AP-4000 11a Upgrade Kit, AP-4000 11g Cardbus Ki t, AP-2500 , AP-4000, ORiNOCO AP-600 , AP-600 11g Upgrade Ki t ,[...]

206 Regulatory Information 無線 LAN と人体への影響 無線 LAN 製品は、他の無線装置と同様に 、無線周波数電磁エネルギーを放 出します。ただし、無線 LAN 装置が放出するエ ネルギーのレベルは、携帯電話な どの無線装置が放出する電磁エネ ルギーより、はるかに低?[...]

207 Regulatory Information United S tates FCC Information Federal Communications Commission (FCC) Declaration of Confo rmity Products marked wit h the FCC logo and comply with t he limits fo r a Class B digital device, pursuant to Part 15 of the FCC Rules. These li mits are designe d to provide reasonable protect ion against harmful interference in[...]

208 Regulatory Information Canada IC Information Industry Canada (IC) This device complies with the limits fo r a class B digit al device and conforms to Industry Canada st andard ICES-003. Products th at contain a radi o transmitter comply with In dustry Canada st andard RSS 210 and are labell ed with IC approval number . Wireless LAN product s de[...]

209 Regulatory Information Eur ope Information • Products labele d with the CE mark comply with EMC Directive 89/336 /EEC and the Low V olt age Directive • 73/23/EEC implying conformity t o the following European Norms. • T ous les produits port ant la marque CE sont conf ormes à la directive EMC 8 9/336/EEC et à la directive • 73/23/EEC [...]

210 Regulatory Information • Proxim 802.1 1a Base S t ation product s sold in Europe use a techni que called Dynami c Frequency Selection (DFS) to auto matically sele ct an operating channel. The European T elecommunications S t andard Institute (ETSI) requires that 802.1 1a devices use DFS to prevent interference wit h radar systems and other de[...]

211 Regulatory Information Japan Information 日本の通達 Association of Radio Indus tries and Businesses (ARIB) 電波産業会 (ARIB) STD-T7 1) 通達 このセクションは、 5.15 ~ 5.25 GHz 帯域で運用されている IEEE 802.11a 準拠の送信機のみに当てはまります。使用の際 に適 用される制限については?[...]

212 Regulatory Information South Kor ea Information For Class (A) products: For Class (B) products: (Product Name) (Model Name) (Trade Name/Manufacturer) (Certification No.) (Date of Certification) (Made in) PC Card PC24E-H-FC Agere Systems R-LARN- 01-028 2001.10.15 Ta iwan PC24E-11-FC/R Agere Systems R- LARN-02-0027 2002.01.26 Taiwan AP-500 AP-500[...]

213 Regulatory Information Radio Appr ovals T o determine whether you are allowed to use your device in the countries listed belo w , plea se check the “contai ns transmitter” number that is print ed on the i dentification l abel of your de vice. Certifications radio Pour déterminer si v ous êtes autorisé à utiliser votre di spos itif dans [...]

214 Regulatory Information Australia Alpha-1: A13QBF • For indoor use only. Austria Österreich PC24E-H-FC CE 0122 ! PC24E-H-ET-L R01 67 SRD3a PC24E-H-ET PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Nur zum Einsatz innerhalb von Gebäuden (mit der integrierten Antenne oder einer zugelassenen Reich[...]

215 Regulatory Information Belgium Belgie Belgique PC24E-H-FC CE 0122 ! • For outdoor usage you may only use channels 10 and 11 (2457 and 2462 MHz). • Private usage outside buildings across less than 300 m public grounds require s no special registration. Private usage outside buildings acro ss more than 300 m public grounds require special reg[...]

216 Regulatory Information Belgium Alpha-1: C38WCW CE 0560 ! • Only indoo r with integral or approved Range Extender Antenna. • Alleen voor gebruik binnenshuis met ingebouwde of goedgekeurde reikwijdteversterkerantenne. • Pour usage intérieur u niquement, avec une antenne intégrale ou amplificatrice approuvée. • Nur zum Einsatz innerhalb[...]

217 Regulatory Information Belgium Belgie Belgique Alpha-1: A04LAE CE 0336 ! Alpha-1:A08NAE CE 0336 ! Brazil PC 24E-H-FC • This equipment operates in second ary mode: It is not allowed to protect the equipment against harmful interference from primary mode stations or stations of the same type. It is not allowed to cause interference to systems t[...]

218 Regulatory Information Canada Alpha-1: B11FNF IC: 1856B-B11FNF • Only with integral, approved Range Extender Antenn a. • Pour usage avec une antenne in tégrale ou amplificatrice approuvée. Canada Alpha-1: G11FNF IC: 1856A-G11FNF • Only with integral, approved Range Extender Antenn a. • Pour usage avec une antenne in tégrale ou amplif[...]

219 Regulatory Information Czech Republic PC24E-H-ET-L 45314454 PC24E-H-ET Denmark Danmark PC24E-H-FC CE 0122 ! PC24E-H-ET-L R01 67 SRD3a PC24E-H-ET CE 01 22 ! PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Kun til in dendørs brug sammen med en integreret eller godkendt afstandsforlængerantenne. PC2[...]

220 Regulatory Information Finland Suomi PC24E-H-FC CE 0122 ! PC24E-H-ET-L R01 67 SRD3a PC24E-H-ET PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Ainoa sisä- avu lla integraali eli hyväksytty Ala Avartaa Tuntosarvi. PC24E-11-ET/R Finland Suomi G11FNF-PC CE 0336 ! • Only indoo r with in tegral or a[...]

221 Regulatory Information France PC24E-H-FC CE 0122 ! • Restricted frequency band: On French terr itory PC24E-H-FC devices may only use channels 10 and 11 (2457 and 2462 MHz). • Bande de fré quence limitée : Sur le territoire français les dispositifs PC24E-H-FC ne sont autorisés à utiliser que les canaux 10 et 11 (2457 MHz et 2462 MHz). P[...]

222 Regulatory Information France Alpha-1: B13ENE CE 0336 ! • Restricted fr equency band: On French territory B13ENE devices may only us e channels 10, 11, 12, and 13 (2457, 2462, 2467 and 2472 MHz). • For WLAN hotspots, ART (Autorité de Regulation des Télécommunications) has special regulations allowin g the use of other channels as well; c[...]

223 Regulatory Information Germany Deutschland G11FNF-PC CE 0336 ! • Only indoo r with in tegral or approved Range Extender Antenna. • Nur zum Einsatz innerhalb von Gebäuden (mit der integrierten Antenne oder einer zugelassenen Reichweitenverstärkerantenne) G13ENE-PC CE 0336 ! Germany Deutschland Alpha-1: C38CWC CE 0560 ! • Only indoo r wit[...]

224 Regulatory Information Hong Kong PC24E-H-FC LP400096 PC24E-H-ET LP400095 PC24E-11-FC/R Hong Kong Alpha-1: B13ENE HKTA-1039 Hong Kong Alpha-1: A09SBS HKT A-1039 Hong Kong G13ENE-PC HKTA-1039 Hong Kong A19PCE-PC HKTA-1039 Hong Kong Alpha-1: G13ENE HKTA-1039 Hong Kong Alpha-1: C38WCW HKTA-1039 Hong Kong AP-700: AP-AT-AG -01 HKTA-1039 Hong Kong AP-[...]

225 Regulatory Information Iceland Ísland PC50E-4-ET/A CE 0336 ! • For indoor use only. • Fyrir inni- nota eini PC50E-8-ET/A CE 0336! A19PCE-PC CE 05 60 ! Iceland Ísland Alpha-1: B13ENE CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. Iceland Ísland Alpha-1: G11FNF CE 0336 ! • Only indoo r with integral or appro[...]

226 Regulatory Information Israel G05INI-PC MoC pending • Restricted frequency band: only channels 4 through 8 (2418.0-2457.0 MHz) may be used in Israel. • Rest ricted frequency band: only channels 4 through 8 (2418.0-2457.0 MHz) may be used in Israel. • Only indoor with integral or a pproved Range Extender Antenna. Israel Alpha-1: B05INI MoC[...]

227 Regulatory Information Japan 日本 PC24E-H-FC TELEC: NYCA0010 JATE: D99-1057JP PC24E-H-JP TELEC: NYCA0008 TELEC: GZCA0007 PC24E-H-ET-L T ELEC: NYCA00024 PC24E-11-FC/R TELEC: 01NYDA1121 JATE: D01-1128JP PC24E-11-JP/R T ELEC: 01NYDA1122 Japan 日本 G13GNJ-PC TELEC: 03YNDA0185 TELEC: 03GZDA0150 Japan 日本 PC50E-4-JP/A TELEC: 01WYBA1051 • For[...]

228 Regulatory Information Korea A04VBA-PC MIC: R-LARN-03-0248 Certification date: 2003.06-04 Product name: PC Card Manufacturer: Proxim Corporation Made in: Taiwan Korea Alpha-1: B13ENE MIC: R-LARN-03-0209 Certification date: 2003.05.13 Product name: PC Card Manufacturer: Proxim Corporation Made in: Taiwan Korea Alpha-1: G11FNF MIC: R-LARN-03-0230[...]

229 Regulatory Information Liechtenstein AP-700: AP-AG-A T-01 CE 0560! • Only indoor with integral or approved Ran ge Extender Antenna. • Nur zum Einsatz innerhalb von Gebäuden (mit der integrierten Antenne oder einer zugelassenen Reichweitenverstärkerantenne) Liechtenstein AP-4000: AP-AG-A T-02 CE 0560! Liechtenstein Alpha-1: B13ENE CE 0336 [...]

230 Regulatory Information Luxemburg Luxembourg PC50E-4-ET/A CE 0336 ! • For indoor use only. • Pour usage intérieur u niquement. PC50E-8-ET/A CE 0336 ! A19PCE-PC CE 05 60 ! Luxemburg Luxembourg Alpha-1: B13ENE CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Pour usage intérieur u niquement, avec une antenne i[...]

231 Regulatory Information Mexico México Alpha-1: B11FNF COFETEL: PCPPRAL03-095 • On Mexican territory wireless devices may only use channel 11 (2450.0-2483.5 MHz), however for indoors use there are no restr ictions on for using all channels, because use of this equipment in Mexico is on secundary basis. • En el ter ritorio mexicano, los dispo[...]

232 Regulatory Information Netherlands Nederland PC24E-H-FC CE 0122 ! No 67 • License requi red for outd oor installations. Check with reseller for procedure to follow. • Vergunning vereist voor buiteninstallatie. Raadpleeg de doorverkoper voor te volgen procedures. PC24E-H-ET-L R01 67 SDR3a; NL99061474 HDTP/RDR/485997 PC24E-H-ET CE 01 22 ! PC2[...]

233 Regulatory Information New Zealand PC24E-H- FC RFS PC24E-11-FC/R ENG 3/2/RFS29 PC24E-H-ET-L RFS PC24E-H-ET PC24E-11-ET/R ENG 3/2/RFS29 Norway Norsk PC24E-H-FC CE 0122 ! PC24E-H-ET-L R01 67 SRD3a PC24E-H-ET PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Bare innendørs med int egral eller godkjent [...]

234 Regulatory Information Poland PC24E-H-FC 688/2000 PC24E-H-FC/R 072/2002 PC24E-H-ET-L PC24E-H-ET PC24E-H-ET/R 072/2002 Portugal PC24E-H-FC CE 0122 ! PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Somente in door com a antena integral ou aprovada do extender da escala. PC24E-11-ET/R Portugal G11FNF-[...]

235 Regulatory Information Saudi Arabia PC24E-H-FC Reference 10/36 of 18-3-2002 PC24E-11-FC/R Reference 10/36 of 18-3-2002 PC24E-H-ET Ref erence 10/36 of 18-3-2002 PC24E-H-ET-L Ref erence 10/36 of 18-3-2002 PC24E-11ET/R Reference 10/36 of 18-3-2002 Saudi Arabia G11FNF-PC Reference 1355 H T/T G13ENE-PC Ref erence 1355 HT/T Singapore PC24E-H-FC IDA: [...]

236 Regulatory Information South Africa PC24E-H-FC PC24E-H-ET-L PC24E-H-ET South Africa G11FNF-PC ICASA: TA-2003/93 G13ENE-PC ICASA: TA-2003/93 Spain España PC24E-H-FC CE 0122 ! PC24E-H-ET-L 01 0 0 0196 PC24E-H-ET 01 0 0 0195 PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. • Sólo en interiores, con ant[...]

237 Regulatory Information Sweden Sverige G11FNF-PC CE 0336 ! • Only indoor with in tegral or a pproved Range Extender Antenna. • Endast inomhus med integr erad antenn eller godkänd antenn med längre räckvidd. G13ENE-PC CE 0336 ! Sweden Sverige Alpha-1: C38WCW CE 05 60 ! • Only indoor with integral or a pproved Range Extender Antenna. • [...]

238 Regulatory Information Switzerland Suisse Schweiz Svizzera G11FNF-PC CE 0336 ! • Only indoo r with in tegral or approved Range Extender Antenna. • Pour usage intérieur u niquement, avec une antenne intégrale ou amplificatrice approuvée. • Nur zum Einsatz innerhalb von Gebäuden (mit der integrierten Antenne oder einer zuge lassenen Rei[...]

239 Regulatory Information Switzerland Suisse Schweiz Svizzera AP-700: AP-AG-A T-01 CE 0560 ! • For indoor use only. • Pour usage intérieur u niquement. • Nur für Innengeb rauch. • Per uso int erno solo. Switzerland Suisse Schweiz Svizzera AP-4000: AP-AG-A T-02 CE 0560 ! Switzerland Suisse Schweiz Svizzera Alpha-1: A04LAE CE 0336 ! • Fo[...]

240 Regulatory Information United Kingdom PC24E-H-FC CE 0122 ! PC24E-H-ET-L R01 67 SRD3a PC24E-H-ET CE 01 22 ! PC24E-11-FC/R CE 0336 ! • Only indoor with integral or a pproved Range Extender Antenna. PC24E-11-ET/R CE 0336 ! United Kingdom G11FNF-PC CE 0336 ! • Only indoor with in tegral or approved Range Exten der Antenna. G13ENE-PC CE 0336 ! U[...]

241 Regulatory Information For Radio T ype Numbers with the format PCxxE-y-zz : xx =24 identi fies a IEEE 802.1 1b compliant WLAN radio product for the 2.4 GHz frequency band. 50 identifies a IEEE 802.1 1a compliant WLAN radio product for the 5 GHz frequency band. E = optional iden tifier to indicat e that the transmitte r has an integral antenna .[...]

242 Regulatory Information 4 ou 8 indique le nombre de cana ux. zz =FC ou FC/R identifi e un carte universelle à 1 1 canaux, conforme aux normes FCC, qui opère dans la zone de 2.412 - 2.462 GHz seulement. FC/A identifie un émette ur radio IEEE 802.1 1a conforme aux normes FCC. ET ou ET/R identifie un émetteur radio à 13 canaux conforme aux nor[...]

243 Regulatory Information E =wahlweise freige stellte Kennung, zum anzuzeigen , daß der Übermittler eine int egrale Antenne hat. y =H oder 11 kennzeichnet einen Funksender , der hohe Datentransferraten bis zu 1 1, 5,5, 2 und 1 Mbps unterstützt. 4 oder 8 kennzeichnet die Zah l Funkkanälen. zz =FC oder FC/R kennzeichnet eine FCC-ko nforme "[...]

244 Regulatory Information GNJ / LEJ = Japan VBA = Asia (C hina, South Korea) INI = I srael WCW = WORLD 無線タイプ番号の形式は、PC xx E- y - zz です。 xx = 24 は、 2.4 GH ｚ 周波数帯域で使用される IEEE 802.11b 準拠の WLAN 無線製品であることを示します。 50 は、 5 GH ｚ 周波数帯域で使用され?[...]