HP (Hewlett-Packard) M111 manual

Pr oC ur v e 5400zl S wit che s Installation and Getting Start ed Gui de Management and Configuration Guide for HP HP ProCurve M11 1 Client Bridge HP Pr oC ur v e M1 1 1 Cli ent Br i dge Management an d Conf igur ation Gui de[...]

[...]

HP ProCurve M111 Client Bridge Management and Configuration Guide[...]

Copyright and Disclaimer Notices © Copyright 2010 Hew lett-Packard Develo pment Company , L.P . The information contained he rein is subject to change without notice. This document contains proprietary in formation, which is protected by copyright. No part of this docum ent may be photocopi ed, reproduced, or translated into another language witho[...]

Contents 1 Introduction About this guide ........................................................................................................... 1-2 Products covered ................................................................................................... 1-2 Important term s ...........................................................[...]

Contents iv Scenario 2: Connecting a wired device using MAC address cloning ..................... 2-8 Overview ................................................................................................................. 2-8 Configuration procedure ...................................................................................... 2-9 A. Con[...]

Contents v T o configure the radio ......................................................................................... 3-10 W ireless mode ............................................................................................... 3-10 Restrict channels to ...................................................................................[...]

Contents vi Cloning the address of a wired device ..................................................................... 3-30 Limitations ..................................................................................................... 3-30 Enabling Ethernet MAC cloning ........................................................................ 3-3[...]

Contents vii A Regulatory information Notice for U.S.A. .................................................................................................... 4-2 Notice for Canada .................................................................................................. 4-3 Notice for the European Community ..................................[...]

Contents viii[...]

Chapter 1: Introduction 1 Introduction Contents About this guide ........................................................................................................... 1-2 Products covered ................................................................................................... 1-2 Important term s ...................................[...]

Introduction About this guide 1-2 About this guide This guide explains how to install, config ure, and operat e the M111 Client Bridge. Products covered The manual applies to the M111 Clien t Bridge (J9389A WW , J9523A Japan). Important terms The following terms are used in this gu ide. Conventions This guide uses specif ic syntax when directing yo[...]

Introduction About this guide 1-3 Caution Identifies a hazard that can ca use the loss of data or configuration information, create a non- compliant condition, o r hardware damage. Commands and program listings Monospaced text identifies commands and program listings as follows: Example Description use-access-list Command name. Specify it as shown.[...]

Introduction Introducing the M111 Client Bridge 1-4 Introducing the M111 Client Bridge The M111 connec ts legacy Ethernet or serial communicat ions devices to a wireless loc al area network (WLAN) with simplicity and security . It enables the deployme nt of legacy client devices (such as electronic cash registers, serv ers, printers), in any locati[...]

Introduction Safety informat ion 1-5 Safety information Wa r n i n g Professional Installa tion Required Prior to installing or using an M1 11, consult with a professional in staller trained in RF installation and knowledgeable in local regula tions including building and wiring codes, safety , channel, power , indoor/outdo or restrict ions, and li[...]

Introduction HP ProCurve Networking support 1-6 HP ProCurve Networking support HP ProCurve Networking offers support 24 h ours a day , seven days a week through a number of automated electronic services. See the Cust omer Support/W arranty booklet included with your product. The HP ProCurve Networking W eb site, www .hp.com/go/procur ve/support pro[...]

Chapter 2: Getting started 2 Getting started Contents Deploying the M 111 ..................................................................................................... 2-2 Scenario 1: Connecting wired devices to a wireless network ................................ 2-2 Overview .................................................................[...]

Getting started Deploying the M111 2-2 Deploying the M111 This chapter provides step-b y-step instructions that explain how to configure the M111 for the following frequently used deployments.  Scenario 1: Connecting wired devic es to a wireless network on page 2-2  Scenario 2: Connecting a wired device using MAC address cloning on page 2-8 ?[...]

Getting started Scenario 1: Connecting wired devices to a wireless network 2-3  The MSM AP is operating in autonomous mode in its factory-defaul t configuration. (As such, it obtains an IP add ress of 5.25 fr om the DHCP server and creates a wireless network call HP ProCurve .) Install the MSM AP as described in its Quickstart.  The wired com[...]

Getting started Scenario 1: Connecting wired de vices to a wireless network 2-4 B. Connect to the M111 Connect the LAN port on the computer to the Et hernet port on the M111 usin g a standard Ethernet cable. (If your computer has an olde r 10BaseT -only Ethernet interface, then use a crossover cable instead.) C. Start the M111 Power on the M111 usi[...]

Getting started Scenario 1: Connecting wired devices to a wireless network 2-5 7. At the password prompt it is recommended that you change the de fault password. Enter the new password and select Save . About passwords The defa ult usern ame and pa ssword is admin. New passwords must be 6 to 16 printable ASCII characters in length with at least 4 d[...]

Getting started Scenario 1: Connecting wired de vices to a wireless network 2-6 6. Select Sa ve . The IP address of the M111 will immedi ately change, causing you to lose your connection to the management tool . This is normal. T o re-establ ish the connection, configure the computer with a static IP address on the same subnet as the M111. For this[...]

Getting started Scenario 1: Connecting wired devices to a wireless network 2-7 2. Under General , configure settings as follows:  Select Enabled .  Profile name: The Profile na me is just a friend ly name used for display purposes. Y ou can use the default value.  WLAN name (SSID): This is the name of the wireless network that to which the[...]

Getting started Scenario 2: Connecting a wired device using MAC address cloning 2-8 Scenario 2: Connecting a wired device using MAC address cloning This scenario explains how to connect a single wired device to a wireless network using the M111’ s Ethernet MAC cloning fe ature. Overview In this scenario, a wired printer is converted to wireless a[...]

Getting started Scenario 2: Connecting a wired device using MA C ad dress cloning 2-9 Configuration procedure The initial configuratio n steps for this scenario are the same as for Sc enario 1. For each step see the instructions on the indicated page. A. Configure your computer See Configure your computer on page 2-3 . B. Connect to the M111 See Co[...]

Getting started Scenario 2: Connecting a wired device using MAC address cloning 2-10 2. Select Ethernet MAC cloning , then configure the following options:  Select the Discovered MAC address option. This option causes the M111 to take the MAC address of the wired device that is connected to Po rt 1 (the printer) and assign it to the W ireless po[...]

Getting started Scenario 3: Connecting a serial device to a wireless network 2-11 Scenario 3: Connecting a serial device to a wireless network This scenario explains how to connect a serial device to a wireless network, enabling serial traffic to be sent to a remote host via TCP/IP . Overview In this scenario, the M1 11 enab les a point-of-sale ter[...]

Getting started Scenario 3: Connecting a serial device to a wireless network 2-12 Configuration procedure The initial configuratio n steps for this scenario are the same as for Sc enario 1. For each step see the instructions on the indicated page. A. Configure your computer See Configure your computer on page 2-3 . B. Connect to the M111 See Connec[...]

Getting started Scenario 3: Connecting a serial device to a wireless network 2-13 3. Under TCP connection , set Mode to Server . In this scenario, the M 111 acts as a TCP server and will listen for an incoming conn ection from the Host computer (TCP client). Leave the other parameters at their default settings. (For more information on these settin[...]

Getting started Scenario 3: Connecting a serial device to a wireless network 2-14[...]

Chapter 3: W orking with the M111 3 W orking with the M111 Contents Management tool .......................................................................................................... 3-3 Starting the managem ent tool .............................................................................. 3-3 Customizing management to ol settings ....[...]

Working with the M111 3-2 Cloning the address of a wired device ..................................................................... 3-30 Enabling Ethernet MAC cloning ........................................................................ 3-31 W ireless access to the M111 when MAC cloning is active ............................. 3-31 Using filter[...]

Working with the M111 Management tool 3-3 Management tool The management tool is a web-based interface to the M111 that provides easy access to all configuration and m onitoring functions. The computer used to connect to the management tool must:  Have at least Microsoft Internet E x plore r 7/8 or Firefox 3. x .  Be able to establish an IP c[...]

Working with the M111 Management tool 3-4 Customizing management tool settings T o customize manage ment tool settings, select Management > Management tool . Manager and Operator accounts T wo types of a dministrati ve accounts are defi ned: mana ger and opera tor .  The manager accou nt provides full management tool rights.  The operator [...]

Working with the M111 Management tool 3-5 The following options can be used to prevent th e management tool from be ing locked by an idle manager or operator:  T erminates the current manager session: When enable d, an active mana ger or operator session will be terminated by the login of another manager . This prevents the management tool from [...]

Working with the M111 Management tool 3-6 Security policies Security policies affect both ma nager and operator acco unts. Select from one of the following options:  Follow FIPS 140-2 guidelines : When selected , implements the following requirements from the FIPS 140-2 guidelin es:  Passwords must be at least six characters long.  Passwor[...]

Working with the M111 IP address configuration 3-7 We b s e r v e r Y ou can also configure the web server ports from which access to the management tool is permitted.  Secure web server port : Specify a port number for the M1 11 to use to provide secure HTTPS access to th e management tool . Default is 443. Before logging on to the manage ment [...]

Working with the M111 IP address configuration 3-8 There are several soluti ons to this problem:  Pre-configure the DHCP server on the networ k to assign a specific IP address to the M111. T o do this you need to specify the M111 MAC addr ess and a reserved IP address on the DHCP server . The M111 MAC address is printed on the M111 la bel identi[...]

Working with the M111 Radio configuration 3-9 5. When you save the IP address chan ge, the connection to the management to ol will be lost. T o-reconnect, you need to re-launch th e M111 management tool by browsing to: https:// new IP address assigned to the M111 . (For this to work, your computer must be on the same subnet as the M111.) Radio conf[...]

Working with the M111 Radio configuration 3-10 T o configure the radio Select W ireless > Radio . This open s the Radio configuration page: Configure parameter settin gs as f ollows: Wi r e l e s s m o d e Select the transmission speed and frequency ba nd. The permitted freq uencies and channels are determined by the country of operation, and ma[...]

Working with the M111 Radio configuration 3-11 Antenna selection Select the antenna on which the ra dio will transmit and receive. If a single antenna is used, it can be connected to either Main or Aux.  Diversity: In this mode both antennas are used to transmit and receiv e. The M111 supports both transmit and receiv e diversity .  T ransmit[...]

Working with the M111 Radio configuration 3-12 If both options are enabled at the same time , whichever optio n is triggered first takes precedence. SNR is expressed in decibels (dB). The hi gher the number the stronger the signal. Note If 802.1X/ WP A/WP A2 is enabled, this can add an unpredictable delay based on network topology . For example, if[...]

Working with the M111 Using station profiles to establish a wireless link 3-13 Advanced wireless settings RT S t h r e s h o l d Use this parameter to control collisions on the wireless link that can reduce throughput. If the Status > W ireless page shows increasing values for Tx multiple retry frames or Tx single retry frames , adjusting this v[...]

Working with the M111 Using station profiles to establish a wireless link 3-14 Each profile contains the definitions for a wi reless connection. The M111 uses the profile definitions in the following order when it atte mpts to find an AP with which to establish a wireless link: 1. First, all profiles with Active scanning enabled are sequentially ch[...]

Working with the M111 Using station profiles to establish a wireless link 3-15 T o add or edit a station profile Select W ireless > S tation profiles and do the following:  T o add a new profile, select Add New Profile.  T o edit a profile, select its name in the list. In either case, the Stat ion profiles - Add/Edit Station profile page o[...]

Working with the M111 Using station profiles to establish a wireless link 3-16 When this option is enabled, this profile takes priority over profiles without active scanning. The M111 attempts to connect with acti ve profiles first before trying other profiles in the list. W ireless security W ireless protection The M111 supports several authentica[...]

Working with the M111 Using station profiles to establish a wireless link 3-17  Username: Specify the username assign ed to the M111 on the remote AP's RADIUS server .  Password: Specify the passwo rd assigned to the M111 on the remote AP's RADIUS server .  Anonymous (Optional): Specify the outer authentication username for the T[...]

Working with the M111 Viewing APs in the neighborhood 3-18 T o facilitate matching, standard regular expr essions can be used in the common name. For example: Use the backslash () as an esc ape character if you need to match a period (.) or other characters that hav e meaning in a regular expression. For example, to match any number of periods, sp[...]

Working with the M111 Configuring Quality of Service (QoS) 3-19 Field descriptions  MAC address: MAC address of the AP (Also called the BSSID).  SSID: SSID assigned to the AP .  Mode: Indicates the operating mode of the AP: A, B, or G.  Channel: Channel the AP is operating on.  Signal: Signal strength.  Noise: Amount of noise. [...]

Working with the M111 Configuring Quality of Service (QoS) 3-20 Outgoing wireless traffic on the wire le ss link is assigned to a queue based on the se lected priority mechanism. T raffic delivery is based on strict priority (p er the WMM standard). Therefore, if excessiv e traffic is present on queues 1 or 2, it will reduce the flow of traffic on [...]

Working with the M111 Configuring Quality of Service (QoS) 3-21 V ery-high, high, no rmal, low priority This mechanism is unique to the M111. It en ables you to assign a single priority level to all traffic on a station profile. If you enable one of these priority mechanisms, it takes precedence regardless o f the existing priority assigned to the [...]

Working with the M111 Configuring Quality of Service (QoS) 3-22 IP QoS This option lets you assig n traffic to the queues based on the criteria in one or more IP QoS profiles. Each profile lets you ta rget traffic on specific ports or using specific protocols . For more information, see Creating IP QoS profiles on page 3-22. Disabled When QoS traff[...]

Working with the M111 Connecting serial devices 3-23 Settings Profile name Specify a unique name to identify the profile. Protocol Specify an IP protocol to use to classify tra ffic by specifying its Internet Assigned Numbers Authority (IANA) protocol number . Protocol numbers are pre-defined for a number of common protocols. If the protoc ol you r[...]

Working with the M111 Connecting serial devices 3-24 For complete instructions on how to configure this scenario, see Scenario 3: Connecting a serial device to a wireless network on page 2-11 . The M111 can also connect to a TCP host via Port 1. For example, in this scenario the host computer is on the network connecte d to Port 1. If you enable th[...]

Working with the M111 Connecting serial devices 3-25 2. Select Network > TCP serial. The TCP to serial configuration page opens. 3. Enable the TCP to serial configurat ion option and con figure parameters as f ollows: TCP connection Mode  Client: The M111 acts as a TCP client and initiates a con nection to the specified Remote IP address usin[...]

Working with the M111 Connecting serial devices 3-26 Data bits Number of data bits. Parity bit Sets the parity . Stop bits Number of stop bits. Baud rate Baud rate in bps. Software flow control  None: The M111 does not pr ovide flow control. Instead, flow control is performed end- to-end by the remote TCP device an d the locally connected serial[...]

Working with the M111 DNS configuration 3-27  Listening: When Mode is set to Server , indicates that the M111 is waiting for the remote TCP client to establ ish the connection.  Connecting: When Mode is set to Client , indicates that the M111 is attempting to establish a connection wit h the remote TCP server . If this st ate persists it mean[...]

Working with the M111 DNS configuration 3-28  If the M111 is configured as a DH CP client, the following options are displayed: DNS servers Dynamically assigned DNS servers Lists the servers that were as signed by the DHCP server . Override dynamically assigned DNS servers Enable this option to repl ace the dynamically assigned servers with manu[...]

Working with the M111 Handling unsupported traffic 3-29  When enabled, the M111 switches servers if the current server replies with a DNS server failure message.  When disabled, the M111 switches serve rs if the current does not reply to a DNS request. DNS switch over This setting controls how the M 111 switches back to the primary DNS server[...]

Working with the M111 Cloning the address of a wired device 3-30 IP forwarding Ethernet devices that do not send any IP packets at startup will have no entry in the M111 wireless-to-MAC translation table. As a result, the M111 will not be able to route incoming IPV4 wireless traffic to these devices. When this option is enable d, the M111 sends an [...]

Working with the M111 Cloning the address of a wired device 3-31 Enabling Ethernet MAC cloning Configure Ethernet MAC cloning as follows: 1. Select W ireless > B ridging . The W ireless bridging page opens. 2. Under Ethernet MAC cloni ng , enable one of the following options:  Discovered MAC address: When this option is selected, as soon as t[...]

Working with the M111 Cloning the address of a wired device 3-32 Setting up management traf fic interception The management tr affic interception feature (on the W ireless > Bridging page) let s you establish administrator logins to the M111 mana gement tool when MAC cloning is ac tive and lets you intercept incoming wirele ss traffic on specifi[...]

Working with the M111 Using filters t o restrict wirele ss traffic 3-33 3. Select Save . SNMP notifications (UDP port 162) This enables support for the SN MP notification s, allowing the M111 SNMP agent to send notifications using UDP port 162. Remote log (UDP port 514) This enables support for the Remot e logging feature on the T ools menu , allow[...]

Working with the M111 Assigning a mana gement address 3-34 Assigning a management address A Management address is a secondary , static IP add res s that provides a fixed address where the M111 management tool can be reache d via either Port 1 or the W ireless port. Note The management add ress must be on a different subnet than the IP address curre[...]

Working with the M111 SNMP 3-35 SNMP The M111 provides a robust SN MP implementation suppo rting both industry-standard and custom MIBs. For information on supported M IBs, see the M111 SNMP MIB Refere nce Guide . Select Management > SNMP to open the SNMP agent configuration page. By default, the SNMP agent is enabled ( SNMP agent configuration [...]

Working with the M111 SNMP 3-36 Attributes  System name : Specif y a name to identify the M111. Default is the M111 serial number .  Location : Specify a descriptive na me for the location where the M111 is installed.  Contact : Spec ify an email address for a contact pe rson for the M111.  Port: Specify the UDP port and protocol the M1[...]

Working with the M111 Managing certificates 3-37 Access leve l T ype of access assigne d to the user:  Read-only: The user has read and notif y access to all MIB objects.  Read-write: The user has read, write, and notify access to all MIB objects. Notification receivers This table lists all defined SNMP notification re ceivers. S NMP notifica[...]

Working with the M111 Managing certificates 3-38 802.1X certificates 802.1X certificates are managed on the Security > 802.1X certificates page. The M111 supports two 802.1X certificates:  TLS client certificate: Installation of this certificate is mandatory if 802. 1X with an EAP method of TLS is configured under W ireless security in a stat[...]

Working with the M111 Managing certificates 3-39 802.1X — Manage TLS client certificates The Certificate field shows the co ntents of the CN fiel d in the certificate. This is the domain name of the certificate. Select Vi e w to see the contents of the certificate. 802.1X — T rusted CA certificates The M111 uses the CA certificates to valid ate[...]

Working with the M111 Managing certificates 3-40 T rusted CA certificate store This list di splays all CA cert ificates install e d on the M111. The M111 uses the CA certificates to validate the certificates supp lied by admi nistrators accessing the M111 management tool. Multiple CA certificat es can be installed to support validatio n of certific[...]

Working with the M111 Managing certificates 3-41 Certificate and private key store This list di splays all certifi cates installed on the M111. The M111 uses these certificates and private keys to authentica te itself to peers. The following information is displaye d for each c ertificate in the list:  ID: A sequentially assigned number to help [...]

Working with the M111 Managing certificates 3-42 1. Specify the name of the certifica te file or select Browse to choose one from a list. Certificates must be in PKCS #7 format. 2. Specify the PKCS #12 password . 3. Select Install to install the certi f ica te. Default installed private key/p ublic key certificate chains The following private ke y/[...]

Working with the M111 Managing certificates 3-43 Changing the certificate assigned to a service Select the service name to ope n the Certificate details page . For example, if you select We b management tool , you will see: Under Authentication to the peer , select a new Local certificate and then select Save . About certificate warnings When you c[...]

Working with the M111 Configuration file management 3-44 Configuration file management The configuration file contains all the settings that customize the operation of the M111 . Y ou can save and restore the conf igurat ion file manually or automatically by selecting Maintenance > Config file management . Manual configuration file management Th[...]

Working with the M111 Configuration file management 3-45  Manager and operator username/password: This information is not saved in the backup configuration fi le. This means that if you restore a configu ration file, the current username and password on the AP are not overwritten.  All other configuration information: All other configuration [...]

Working with the M111 Software updates 3-46 5. For T ime of day , specify the hour an d minute on which to perform the backup or restoration. Use the format hh mm, where:  hh ranges from 00 to 23  mm ranges from 00 to 59 6. For URL, specify the path that leads to the loca l or remote directory in which to save the configuration file or from w[...]

Working with the M111 Software updates 3-47 Caution  Before updating be sure to check fo r update issues in the Release Notes.  Even though configuration settings are pr eserved during software updates, it is recommended that you backup your config uration sett ings before updating. See Manual configuration file ma nagement on page 3-44 . [...]

Working with the M111 Software updates 3-48[...]

Appendix A: Regula tory information A Regulatory information Contents Notice for U.S.A. .................................................................................................... 4-2 Notice for Canada .................................................................................................. 4-3 Notice for the European Community ..[...]

Regulatory informat ion A-2 Notice for U.S.A. Manufacturer's FCC Declaration of Conformity Statement For questions regarding this declaration, co ntact the Product Regulations Manager at the above address or phone number . This device complies with Part 1 5 of the FCC ru les. Operation is subjec t to the following two conditions: 1) this de vi[...]

Regulatory informat ion A-3 Notice for Canada This device complies with the lim its for a Clas s B digital device and conforms to Indu stry Canada standard ICES-003. Prod ucts that cont ain a radio transmitter comply with Industry Canada standard RSS210 and are la beled wit h an IC approval number . Cet appareil numérique de la classe B est conf o[...]

Regulatory informat ion A-4 2.4 GHz Operation  This device may be oper ated indoors or outdoors in all EU and EFT A countries using th e 2.4 GHz band (Channels 1 - 13), except where n oted below .  In France , this device may use the entire 2400 - 2483.5 MHz band (Cha nnels 1 through 13) for indoor applications. For outdoor use, only the 2400[...]

Regulatory informat ion A-5 Disposal of W aste Equipment by Users in Private Household in the European Union This symbol on the product or on its pa ckaging indicates that this product must not be disposed of with your other household waste. Instead, it is your responsibility to dispose of your wast e equipment by handing it over to a designated co[...]

Regulatory informat ion A-6 Notice for Japan Notice for T aiwan DGT LPD (Low Power Device) Statement Notice for Korea (warning for wireless equipment)[...]

Appendix B: Resetting to factory defaults B Resetting to factory defaults Contents How it works ................................................................................................................. 5- 2 Using the Reset button.......................................................................................... 5-2 Using the manageme[...]

Resetting to factory defaults How it works B-2 How it works Caution Resetting the M111 to factory defaults deletes all configurati on settings, resets the manager username and password to “admin”, and enable s the DHCP client. If no DHCP server assigns an address to the M111 , its address defaults to 19 2.168.1.1. Using the Reset button Using a[...]

[...]

T echnology for bet ter business outcom es T o learn m or e , visit ww w .hp .com/go/pr oc ur v e/ © Copy right 20 1 0 Hewlett-P ackar d De velopment Company , L.P . The information contained here in is sub ject to change withou t notice. T he on l y warran ties for HP pr oducts and serv ices ar e set f orth in the e xpre ss warr anty statemen ts [...]