Planet Technology WDAP-2000PE manuale d’uso

54/108Mbps Super A+G Wireless Access Point WDAP-2000PE User’s Manual[...]

Copyright Copyright © 2005 by PLANET Technology Corp. All rights reserved. No part of this publica- tion may be reproduced, transmitted, transcribed, stored in a retr ieval system, or translated into any language or computer language, in any fo rm or by any means, electronic, mechanical, magnetic, optical, chemical, m anual or otherw ise, without [...]

Safety This equipment is designed with t he utmost care for the safety of those w ho install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when w orking w ith electrical equipment. All guidelines of this and of the computer manufac- ture must therefore be allowed at all time s to ensure [...]

T ABLE OF C ONTENTS CHAPTER 1 INTRODUCTION ......................................................................... 3 1.1 Package Contents .......................................................................................... 3 1.2 Features ........................................................................................................[...]

4.5.6 Grant Remote Access for Users ........................................................... 40 4.6 802.1x Client Setup on Window s XP .......................................................... 41 4.6.1 Client Certificate Setup .......................................................................... 41 4.6.2 802.1x Authentication Setup .......[...]

Chapter 1 Introduction PLANET WDAP-2000PE is an IEEE 802.11a+g dual band Wireless Ac- cess Point with PoE. With the latest i nnovative Super A/G te chnology integrated, the maximum data rate of WDAP-2000PE is 108Mbps, which doubles the speed of standard 802.11a/g. WDAP-2000PE is also ba ckward compatible and interoperable with IEEE 802.11b complian[...]

1.3 Physical Details T op View LED Status Description POWER PWR Steady Green – Power on OFF – Power off Link/A ct Steady Green - Link is active Flashing Green - T ransmit or receive data OFF - No connection LA N 100M Steady Green - Link is active on 100M speed Flashing Green - T ransmit or receive data OFF - Link is active on 10M speed 5 GHz St[...]

Installation Rear View Connector Description ANT T wo dipole antennas are supplied. Best result is usually obtained with the antenna in a vertical position. Pow er Connect the supplied power adapter here. Reset Button In order to clear ALL settings and restore to factory default, holding the Reset Button down continuously for 5 seconds. LA N (PoE) [...]

Management Web based configuration CLI configuration Message Log Firmware upgrade UPnP support Configuration file Backup/Restore Super A/G mode Up to 108Mbps 802.11g Up to 54Mbps (6/9 /12/18/24/36/48/54) Data Rate 802.11b Up to 11Mbps (1/2/5.5/11) Dimensions (L x W x H) 190 x 145 x 28mm Weight 320g Environmental Specifi- cation Operating temperat u[...]

Installation 2 Chapter 2 Inst allation 2.1 General Installation Before you proceed w ith the installation, it is necessary that y ou have enough information about the WDAP-2000PE. 1. Locate an optimum location for the WDAP-2000PE. T h e b e s t place for your WDAP- 2000PE is usually at the center of your w ireless netw ork, w ith line of sight to a[...]

3 Chapter 3 Setup & Management 3.1 Overview This chapter describes the setup procedure to make the WDAP-2000PE a valid device on your LAN, and to function as an Access Point for your Wireless Stations. The WDAP-2000PE can be configured using either the Web Browser or the CLI (Command Line Interface). Please refer to appendix B for the commands [...]

If you can't connect: It is likely that your PC’s IP address is incompatible w ith the WDAP-2000PE’s IP address. The default IP address of the Wire less Access Point is 192.168.1.1, with a Network Mask of 255.255.255.0. If your PC’s IP address is not compatible w ith this, you must change y our PC’s IP address to an unused value in the[...]

A ssign static IP to this device If selected, the followi ng data must be entered. • IP A ddress - The IP Address of this device. Enter an unused IP address from the address range on your LAN. • Subnet Mask - The Netw ork Mask associated with the IP Address above. Enter the value used by other devices on y our LAN. • Gatew ay - The IP Address[...]

Netw ork ID (SSID) The SSID (up to 32 printable ASCII characters) is the unique name identified in a WLAN. The ID prevents the unintentional merging of two co-located WLANs. Please make sure that the SSID of all stations in the same WLAN netwo rk are the same. The default SSID is “ default ”. Disable SSID Broadcasting If this option is unselect[...]

rity Policy connect to your netw ork. WEP: WDAP-2000PE allows you to use WEP data encry ption to secure your data from bei ng eavesdropping by unauthorized users. There are WEP64, WEP128 and WEP152 provided for data encryption. You can either use ASCII format or Hex format to enter a key. With Hex format, 2 digits represent 1 byte. Once you enable [...]

3.4 Device Status You can monitor the system general information from the Dev ice Information field. 3.4.1 System Log The system log allows y ou to track events that have occurred in the system. Such event mes- sages can sometimes be helpful in determining the cause of a problem that you may have encountered. 3.4.2 Wireless Client Table The wireles[...]

3.4.3 Bridge Table The bridge table shows all MAC entries learned from the wired LAN interface, w ireless clients, and WDS peers (if running in the WDS mode). 15[...]

3.4.4 Radio Table Radio table lists current Mode, channel, client associated wi th them and transmit packet, re- ceived packet, data error. 3.4.5 Site Survey Table This page shows other APs currently in t he environment that t he system can detect. 16[...]

3.5 Advanced Settings The advanced settings tab contains more confi gurations for experienced users. However, changing your login passw ord from the default factory setting is highly recommended for secu- rity purposes. 3.5.1 Password Settings The default administrative password is “ passwo rd ”. To change the password, type the current passwor[...]

Local Management This option allows you to enabl e/disable management from WLAN connection. System A dministration The Access Point allows you to designate special port numbers other than the standard 80 for http for remote management. It also allows y ou to specify the duration of idle time (inactivity) before a web brow ser session times out. The[...]

Bridge You can enable/disable the 802. 1d STP (Spanning Tr ee Protocol) function on the bridge of WLAN and Ethernet (i.e. the LAN inter- face). Enable this function can detect loops in your LAN environment and then prot ect the LAN from being saturated with infinite loop traffic. Syslog When the WDAP-2000PE encounters an error or w arning condi- ti[...]

are enabled, the device can s end out TRAP messages automati- cally to the TRAP manager if configured. A ssign System Informa- tion System Name: A name that you assign to y our WDAP-2000PE. It is an alphanumeric string of up to 30 characters. System Location: Description of where y our WDAP-2000PE is physically located. It is an alphanum eric strin[...]

Disable MAC address control list When selected, no MAC address filtering will be performed. Enable GRANT address control list When selected, data traffic from onl y the specified devices in the table will be allow ed in the netw ork. Enable DENY address control list When selected, data traffic from t he devices specified in the table will be denied[...]

Enable VLA N for all SSIDs Once this function is enabled, you can specify an individual VLAN ID and priority tag for each SSID. In this w ay, you can separate traffic from stations using differ ent SSIDs and so protect the wired network from being accessed by unauthorized stations using certain SSIDs. If this function is enabled, packets from a SSI[...]

Select security policy Configure the security policy for the SSID. 3.5.6 Wireless Settings Beacon interval The WDAP-2000PE broadcasts beacon frames regularly to announce its existence. Default is 100, i.e., ten beacons per second. Decreasing the beacon interval makes passive scanning more reliable and faster. Increasing the beacon interval may impr[...]

Fragmentation When the size of a unicast fr ame exceeds t he fragmentation threshold, it will be fragmented before the transmission. It should have a value of 256-2346 bytes, w ith a default of 2346 . If you experience a high packet error rate, you should slightly decrease the Fragmentation Threshold. DTIM interval The WDAP-2000PE buffers packets f[...]

ure WDS devices. A ccess Point This means the device is working on AP-only Mode, and is for wireless client users only . Wireless Distribution System (Bridge mode ) This mode can help you to group different wired netw orks to- gether by multiple WDAP-2000PE. The single system can support up to 8 WDAP-2000PE in WDS mode. A dditional configurations f[...]

Enable Primary/Seconda ry Server Check this if you w ant to enabl e RADIUS authentic ation using the primary/secondary Radius Server . If both are selected, the pri- mary server w ill be tried first. Server IP The IP address of the RADIUS server. Port number The port number that your RADI US server uses for authentica- tion. The default setting is [...]

Ping flooding filtering When the ping (to the AP) traffi c reaches the configured degree (e.g. High, Low), any more such ping packets will be dropped. Higher degree allows less ping traffic to the AP. 27[...]

3.6 System Tools 3.6.1 Firmware Upgrade You can upgrade the firmware of y our WDAP-2000PE. Normally, this is done w hen a new version of firmware is released. Upgrade procedures: Step 1: Select System Tools  Firmware Upg rad e from the menu. Step 2: To update the WDAP-2000PE firmware, first dow nload the firmware from the distribu- tor’s web s[...]

3.6.2 Configuration Save and Restore You can save system configuration settings to a file, and later dow nload it back to the WDAP- 2000PE by follow ing the steps below. Step 1: Select Configuration Sav e and Restore from the Sy stem Tools menu. Step 2: Enter the path of the confi guration file to save-to/re store-from (or click the Brow se button [...]

3.6.3 Factory Default You can reset the configuration of your WDAP-2000PE to the factory default settings. Step 1: Select Factory Default from the Sys tem Tools menu. Step 2: Click YES to go ahead and restore the configur ation to the factory default. 3.6.4 Reboot System You can reset your WDAP-2000PE from the Brow ser. Step 1: Select Reboot System[...]

Chapter 4 PC and Server Configuration 4.1 Overview All Wireless Stations need to have settings which match the Wireless Access Point. These settings depend on the mode in which the WDAP-2000PE is being used. • If using WEP or WPA-PSK, it is only necessary to ensure that eac h Wireless station's settings match those of the WDAP-2000PE, as des[...]

Security • The Pre-shared Key entered on the WDAP-2000PE must also be entered on each Wireless client. • The Encryption method (e.g. TKIP, AES) must be set to match the WDAP-2000PE. 4.4 Using WPA This is the most secure and most complex system. WPA mode provides greater security and centralized management, but it is more complex to configure. W[...]

• rras • webserver (IIS) • Radius Server (Internet Authentication Service) • Certificate Authority 4.5.1 Windows 2000 Domain Controller Setup 1. Run dcpromo.exe from the command prompt. 2. Follow all of the default prompts, ens ure that DNS is installed and enabled during installation. 4.5.2 Services Installation 1. Select the Control Panel[...]

6. Enter the information for the Certificate Authority, and click Next . 7. Click Next if you don't want to change t he CA's configuration data. 8. Installation will warn you that Internet Information Services are running, and must be stopped before continuing. Click Ok , then Finish . 4.5.3 DHCP server configuration 1. Click on the Start[...]

3. Click Next when the New Scope Wizard Begins. 4. Enter the name and description for the scope, click Next . 5. Define the IP address range. Change the subnet mask if necessary. Click Next . 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank. Click Next . 7. Change the Lease Duration time if preferre[...]

11. If you don't want a WINS server, just click Next . 12. Select Yes, I want to activate this scope now . Click Next , then Finish . 13. Right-click on the server, and select Authorize . It may take a few minutes to complete. 4.5.4 Certificate Authority Setup 1. Select Start - Programs - Administrative Tools - Certification Authority . 2. Rig[...]

4. Select Start - Programs - Administrative Tools - Active Directory Users and Com- puters . 5. Right-click on your active directory domain, and select Properties. 6. Select the Group Policy tab, choose Default Domain Policy then click Edit . 37[...]

7. Select Computer Configuration - Windows Settings - Security Settings - Public Key Policies , right-click Automatic Certificate Request Settings - New - Automatic Certificate Request . 8. When the Certificate R equest Wizard appears, click Next . 9. Select Computer , then click Next . 38[...]

10. Ensure that your certificat e authority is checked, then click Next . 11. Review the policy change information and click Finish . 12. Click Start - Run , type cmd and press enter. Enter secedit /refreshpolicy machine_policy This command may take a few minutes to take effect. 4.5.5 Internet Authentication Service (Radius) Setup 1. Select Start -[...]

9. Click Permitted , then OK . Select Next . 10. Select Grant remote access permission . Click Next . 11. Click Edit Profile... and select the Authentication tab. Enable Extensible Authenti- cation Protocol , and select Smart Card or other Certificate . Deselect other authentication methods listed. Click OK . 12. Select No if you don't want to[...]

3. Select the Dial-in tab, and enable Allow access . Click OK . 4.6 802.1x Client Setup on Windows XP Windows XP ships with a complete 802.1x client implementation. If using Windows 2000, you can install SP4 (Service Pack 4) to gain the same functionality. If you don't have either of t hese systems, you must use the 802.1x client software prov[...]

4. On the first screen (below), select Request a certificate , click Next . 5. Select User certificate request and select User Certificate , the click Next . 42[...]

6. Click Submit . 7. A message will be displayed, then the certificate will be returned to you. Click Install this certificate . 43[...]

8. . You will receive a confirmation message. Click Yes . 9. Certificate setup is now complete. 4.6.2 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right Click on the Wireless Network Connection , and select Properties . 3. Select the Authentication Tab, [...]

Encryption Settings The Encryption settings must match t he APs (WDAP-2000PE) on the Wireless net- work you want to join. • Windows XP will detect any available Wirele ss networks, and allow you to config- ure each network independently. • Your network administrator can advise you of the correct settings for each net- work. 802.1x networks typi[...]

2. Select the wireless network from the Available Networks list, and click Configure . 3. Select and enter the correct values, as advised by your Network Administrator. For example, to use EAP-TLS, you would enable Data encryption , and click the checkbox for the setting: The key is provided for me automatically , as shown be- low. Setup for Window[...]

4.7 Using 802.1x Mode The procedures are similar to using 802.1x. The only difference is that on your client, you must NOT enable the setting: The key is provided for me automatically . Instead, you must enter the WEP key m anually, ensuring it matches the WEP key used on the Access Point. Note : On some systems, the "64 bit" WEP key is s[...]

A Appendix A T roubleshooting Problem 1: Can't connect to the WDAP-2000PE to configure it. Solution 1: Check the following: • The WDAP-2000PE is properly inst alled, LAN connections are OK, and it is powered ON. Che ck the LEDs for port status. • Ensure that your PC and the WDAP-2000PE are on the same network segment. (If you don't ha[...]

Appendix B Command Line Interface If desired, the Command Line Interface (CLI) can be used for configurati on. This creat possibility of creating scripts to perform common configuration changes. es the B Using the CLI - Telnet 1. Start your Telnet client, and es tablish a connection to the WDAP-2000PE. e.g. Telnet 192.168.1.1 2. You will be prompte[...]

Description: Set the HTTP server port (f or device management) to the one specified. set http timeout <timeout value in minutes, 1-60> Description: Set the timeout val ue for the HTTP management session. set prompt <string up to 15 ch aracters> Description: Set the command line prompt. set system contact <string up to 60 ch aracters&[...]

show snmp statistics Description: Display the cu rrent SNMP statistics. show trap manager [<string u p to 30 characters>] Description: Display the settings of the s pecified SNMP trap manager. If no trap manager is specified, this command displays the settings of all trap managers. (4) Diagnostics Commands disable log <facility> Descrip[...]