Planet Technology WAP-4000 manual

802.11g W irele s s Access Poin t / Bridge W A P-4000 User ’ s Manual[...]

Co p y right Copyright  2003 by PLANE T T echnology Corp . A ll righ t s r eserved . No par t of t his publication ma y be reproduced, t r ansmit t ed, t r anscribed, s t ored in a ret r ieval system, or translated into any language or compu t er language , in any form or by any means , electronic, mechanical , magne t ic, optical , chemical, ma[...]

Federal Communication Commission (FCC) Radiation Exposu r e Statement This equipment complies w ith FCC radia t ion e x posure set f orth for an uncontrolled envi r onment. In orde r to avoid the possibility of e x ceeding the FCC r adio f r equency e x posure limi t s , human p r o x imity to the an t enna shall not be less than 20 cm(8 inches) du[...]

T A BLE OF CONTENTS C H A P T ER 1 IN T RODUC T I O N ................................................................................................. .1 1.1 P ACKAGE C ON T ENTS ........................................................................................................ .1 1.2 S YSTEM R EQUIREME N TS ..................................[...]

5.4 M U L TIPLE B RID G E MODE ................................................................................................. . 51 C H A P T ER 6 T ROUBLES H OO T IN G ...................................................................................... . 52[...]

- 1 - Chapter 1 I ntroduction Thank you for pu r chasing WAP-4000. W A P-4000 is an I EEE 802. 1 1g W ireless A ccess Poin t . IEE E 802. 1 1g uses 2.4GHz frequency band , the same as IEEE 802. 1 1b; but it p r ovides more throughput rate than 802. 1 1b . The ma x imum t hroughput rate of 802. 1 1g can up to 54 M bps. W A P-4000 is also back w ard [...]

- 2 - 1.4 Speci f ica t ion S t andard IEEE 802. 1 1b, IEEE 802. 1 1g Signal T ype DSSS (Direct Sequence S pread S pect r um) M odulation BPSK / QPSK / CCK / OFDM Port 10/100Base-T X (RJ-45) * 1 Antenna De t achable Dipole A ntenna * 1 Antenna Connec t or Reversed Polarity S M A M ale Output Po w er 17dBm 802. 1 1b 11 M bps (CCK): -82d B m 5.5 M bp[...]

- 3 - Input P o w er DC 5V, 2.5A Certification FCC, CE 1.5 W ireles s P e rf o rmance The follo w ing info r ma t ion w ill help you utilizing t he w ireless performance, and opera t ing co v erage of W A P-4000. 1. Site se l ection T o avoid interfe r ences , please locate W A P-4000 and w ireless clien t s a w ay from trans f orme r s, mic r o w [...]

- 4 - Chapter 2 H ard w a re Installation Before you p r oceed w ith the ins t allation, it is necessary that you have enough info r ma t ion about the W A P-4000 . 1. Locate an optimum location for the W A P-4000. T h e be s t place f or your WAP-4000 is usually at the center of your w ireless net w ork, w ith line of sight to all of your mobile s[...]

- 5 - Chapter 3 C onf i guring the Wire l ess A c ce s s Po i nt W A P-4000 can be con f igu r ed via w eb bro w ser or bundled utilit y . It is st r ongly recommended to configure and manage W A P-4000 using a w ired LAN compute r . 3.1 Configur e t h rough Web Br o w s er W eb configura t ion provides a user-f r iendly graphical user in t erface [...]

- 6 - 3.1. 1 Wizard Setup w izard provides a simple w ay to con f igu r e you r W A P - 4000 . Clicking “ W iza rd ” button on top panel of W A P-4000 ’ s w eb page, Se t up W izard w ill pop up as belo w .. To quick configure W A P - 4000, please follo w the steps belo w to complete t he configura t ion. Click “ Ne x t> ” to continue [...]

- 7 - Enter the SSID of your W LAN and select t he f r equency channel. Click “ Ne x t> ” . Step 3. Set Encr y ption Y ou can enable W E P encryp t ion and set W E P key in this sc r een. Click “ Ne x t> ” to continue . Step 4. Restart Please click the “ Res t art ” but t on to save the set t ings and r es t art W A P - 4000. In t[...]

- 8 - 3.1. 2 St atus: Y ou can check your W A P - 4000 se t tings and s t a t us in this screen . Y ou can click the “ V ie w Log ” button , and t hen the screen belo w w ill appea r . Y ou can vie w the logged message he r e. Y ou can also clear or r efresh the log record .[...]

- 9 - 3.1. 3 Ba s ic Settings: Y ou can set t he A P Name, SS I D, Channel and W E P func t ion to this A ccess Point. A f ter con f iguration , please click Apply t o save you r set t ings. AP Name : The host name o f the W A P-4000. This can be any name for you to easily identify this access point. SSID : The SSID is the name shared among all poi[...]

- 10 - I P address : This address is a unique numbe r s that identi f ies a computer or device on the WAN o r LAN. These numbe r s a r e usually sho w n in grou p s sepa r ated by periods, for e x ample: 123.123.23 . 2. Subnet Mask : Subne t s allo w net w ork tra ff ic bet w een hos t s t o be se p arated based on t he net w ork's con f igura[...]

- 11 - 3.1.5 A d v an c ed Settings: Y ou can set t he W A P-4000 operation mode and relative settings. A f ter configuration, please click Apply to save your set t ings. AP Mode: WAP-4000 has f ou r opera t ion modes. By default, it is set to A P mode . A ccess Point: This mode is set to W A P - 4000 by de f ault . This connec t s your w ireless P[...]

- 12 - RTS Threshold: Use this field to specify a value fo r the R TS Threshold . Ente r a value bet w een 256 and 2346. This value should r emain at i t s default set t ing o f 2346. S hould you encounter inconsistent da t a f lo w , only minor modifica t ions are recommended. Fragmen t ation Threshold: This field is used to specify the fragmen t [...]

- 13 - Password : Enter the ne w pass w ord in the " AP Pass w ord Ne w " field and again in the ne x t field to con f irm . Click on " A pply" to execu t e t he pass w ord change . The Pass w ord is case - sensi t ive, and can be made up o f any keyboa r d characte r s. The ne w pass w ord mus t be bet w een 0 and 15 characte r[...]

- 14 - Enable/D i sable: Enable or disable 802 . 1 X authentication of W A P-4000. Encr y ption K e y: Select one of the Encryp t ion key leng t h options. I t should be set t he same leng t h as W EP ke y . Select one of the Encryption key life t ime options. Once the life t ime e x pires, RADIU S server w ill rene w the Encryp t ion ke y . RADIUS[...]

- 15 - 3.1. 8 T ools: Y ou can backup or restore W A P-4000 set t ings, reset W AP-4000 t o factory default and upg r ade firm w are in this option. Backup Sett i ngs : Y ou can backup current set t ings to a file. Press “ Backup ” but t on, it will p r omp t you a loca t ion t o save the backup f ile (config.bin ). Restore S ettings : W hen yo[...]

- 16 - 3. Y ou can click “ Bro w se ” to specify the Destination Folder that you w ant to ins t all t he utilit y . Or you can keep the de f aul t setting and click ” Ne xt ” to continue. 4. Please click “ Finish ” t o complete the so f t w are ins t allation .[...]

- 17 - 3.2.2 54M A P Utili t y c onfiguration A f ter ins t alling u t ilit y , you can f ound t he icon on your desk t op, please double click this icon to run t he configura t ion u t ilit y and select each option to se t up you r Access Point as you need . A ft er settings in each option, please press “ Apply ” to save . It w ill sho w you t[...]

- 18 - 3.2. 2 .2 A P Settings Basic Sett i ngs : ESSID : ESSID is used by all w ireless devices w ithin the w ireless net w ork . The ESSID value mus t be the same on all s t ations and A ccess poin t s in this W LAN. Channel : Select the appropriate channel f r om the list provided to cor r espond w ith your ne tw or k settings, bet w een 1 and 13[...]

- 19 - A d vance se t ting: w hen you press the “ Advance Set t ing button ” , t he dialog bo x belo w w ill appea r . Y ou can set more de t ails parame t ers in this sc r een . SSID Broadcast: This allo w s the A P t o broadcast i t s SSID. Other w ireless client w ith si t e survey function can easily kno w this SSID and use this SS I D to c[...]

- 20 - 3.2. 2 .3 I P Settings Fix I P A ddress : Y ou may give a fi x ed I P add r ess to W A P - 4000 manually by choosing t his radio button. I P A ddress: Set an I P add r ess for t he A P . Subnet mask: Set the Subne t M ask for the A P . Gate wa y: The I P address o f a gate w ay device necessa r y for communica t ion w ith devices ou t side t[...]

- 21 - 3.2. 2 .4 WEP Settings Da t a Encr y ption : Select this option w hen you w ant to enable W EP f unction. A uth. Mode : Open A uthentication: W i t h t his set t ing , any s t ation in the W LAN can receives and transmi t s da t a f r om the A ccess Point (null authentication). Shared A uthenticat i on : W i t h this set t ing, only s t atio[...]

- 22 - 3.2. 2 .5 8 02 . 1x Settings 802.1X Funct i on: Enable or disable 802.1 X authentica t ion o f WAP-4000. Encr y ption K e y: Select one of the Encryp t ion key leng t h options. I t should be set t he same leng t h as W EP ke y . Select one of the Encryption key life t ime options. Once the life t ime e x pires, RADIU S server w ill rene w t[...]

- 23 - Chapter 4 8 0 2. 1 X A uthenticat i on Setup 4.1 8 02. 1 X Infra s tructure An 802.1 X Infrastructu r e is composed o f three majo r componen t s: Authenticato r , Au t hen t ication serve r , and Supplicant. A uthentication server: An entity t hat provides an authentication service to an authenticator . This service de t ermines, from the c[...]

- 24 - 6. The client validates the digi t al cer t ificate, and replies i t s o w n digi t al cer t ifica t e to t he R A DIUS serve r . 7. The RADIUS server valida t es client ’ s digi t al cer t ificate. 8. The client and RADIUS se r ver derive encryption keys. 9. The RADIUS server sends WAP-4000 a RADIUS ACCEP T message, including the client ?[...]

- 25 - 6. Enter the info r ma t ion tha t you w ant for your Ce r tifica t e Service, and click “ Next ” to continue . 7. Go to S t art > Program > A dministra t ive Tools > Certif i cate A uthori t y . 8. Right-click on the “ Poli c y S etting ” , select “ new ” . 9. Select “ Certi f ica t e to Issue ” . 10. Selec t “ A [...]

- 26 - 11. Go to Start > Program > A dministrative Tools > A ctive Director y Users and Computers . 12. Right-click on domain, and select ” Properties ” to con t inue. 13. Selec t “ Group Pol i cy ” tab and click “ Properties ” to con t inue .[...]

- 27 - 14. Go to “ Compu t er Configuration ” > “ Securi t y Settings ” > “ Public K e y Policies ” 15. Right-click “ A utomatic Certificate Request S etting ” , and select “ New ” 16. Click “ A utomatic Certif i cate Request ... ”[...]

- 28 - 17. The Au t oma t ic C erti f icate Request Setup W iza r d w ill guide you th r ough the Automa t ic Certi f icate Request setup , simply click “ Next ” th r ough to t he last step. 18. Click “ Fin i sh ” to complete the Au t omatic Certi f icate Request Setup 19. Go to Start > Run , and type “ command ” and click “ Enter [...]

- 29 - Setting In t ernet Authenticat i on Service 24. Go to Start > Program > A dministrative Tools > Inte r net A uthentication Service . 25. Right-click “ Cl i ent ” , and select “ N e w C l ient ” . 26. En t er the IP address of W AP-4000 in the Client address te x t field, a memorable name for W A P-4000 in t he Cl i ent-Vendo[...]

- 30 - 27. Click “ F i nish ” . 28. In the Inte r net Authentication Service, right - click “ R emo t e A ccess Pol i cies ” 29. Selec t “ New Remote A ccess Pol i cy ” . 30. Selec t “ D a y - A nd-Time-Restriction ” , and click “ A dd ” to continue .[...]

- 31 - 31. Unless you w ant to specif y the active dura t ion for 802.1 X authentication, click “ OK ” to accept for having 802.1 x authentication enabled a t all times. 32. Selec t “ Grant remo t e access pe r miss i on ” , and click “ Next ” to continue.[...]

- 32 - 33. C lic k “ Edit Profile ” . For TLS Authenticat i on Setup (Steps 34 ~ 35 ) 34. Selec t “ A uthentication ” Tab. 35. Enable “ Extensible A uthentication Protocol ” , and select “ Smart C ard or other Cert i ficate ” f or TLS au t hen t ication. Click “ OK ” . Then go t o step 38.[...]

- 33 - For M D5 Authentication S e t up (Steps 36 ~ 37 ) 36. Selec t “ A uthentication ” Tab. 37. Enable “ Extensible A uthentication Protocol ” . Select “ MD5-Challenge ” and enable “ E ncr y pted A uthentication (CH A P) ” for MD5 authentication. Click “ OK ” .[...]

- 34 - 38. Selec t “ Internet A uthentication Service (Local) ” , click on “ Action ” f r om t op panel. Then click “ Register Service i n A ctive Directory ” . 39. Go to Start > Program > A dministrative Tools > A ctive Director y Users and Computers. 40. Right click on the domain, and select “ Properties ” . 41. Selec t ?[...]

- 35 - 42. Go to “ Computer Conf i guration ” > “ Windows S ettings ” > “ Securi t y Settings ” > “ A ccount Policies ” > “ Password Pol i c i es ” . D ouble click on “ S t ore password us i ng reversib l e enc r y ption for all users in the domain ” .[...]

- 36 - 43. Click “ Define this poli c y s etting ” , select “ E nab l ed ” , and click “ OK ” to continue . 44. Go to Start > Program > A dministrative Tools > A ctive Director y Users and Computers . 45. Go to Users . R ight - click on the use r tha t you are granting access, and selec t “ Propert i es ” . 46. Go to “ A [...]

- 37 - 48. Go to the “ Dial-in ” tab , and check “ A llo w access ” op t ion for Remote Access Pe r mission and “ No Call-back ” for Callback Options. Then click “ OK ” .[...]

- 38 - 4.3 A uthenticator Setup 1. For E A P-MD5 Au t hen t ication, W E P key must be set previously. Go t o Bas i c Sett i ngs. Enable W E P key, and en t er a desired key s t ring. Y ou can skip this step if using E A P-TLS Authen t ication . 2. Click on 802.1X for detailed con f iguration.[...]

- 39 - 3. Enable 802 . 1 X Authentica t ion by selecting “ Enable ” . 4. If E A P-MD5 is used, you can leave t he set t ings in Encr y p tion K e y Length and Lifet i me as default. I f you are using E A P-TLS authentication, set t he Encr y ption K e y Length ranging from 64 t o 256 B its and the Li f etime from 5 M inutes to 1 Day. As soon as[...]

- 40 - 4.4.1 E A P-MD5 A uth e ntication 1. Go to S t art > Control P anel, double - click on “ Ne t work Connections ” . 2. Right-click on the W ireless Net w ork Connection w hich using W L - 3555. 3. Click “ Properties ” to open up the P r oper t ies setting w indo w . 4. Click on the “ Wireless Ne t work ” t ab. 5. Click “ Prop[...]

- 41 - 6. Select “ Da t a encr y ption (WEP enabled ) ” option, but leave othe r op t ions unselected . 7. Enter the net w ork key in “ N e t w ork k ey ” t e x t bo x . The string must be t he same as the fi r st set o f W E P key w hich you set t o W A P-4000. 8. Click “ OK ” .[...]

- 42 - 9. Select “ A uthentication ” tab. 10. Selec t “ Enab l e ne t work access contro l using IEEE 802.1X ” to enable 802 . 1 x authentica t ion. 11. Selec t “ MD-5 Challenge ” f rom the drop-do w n list bo x for EAP type. 12. Click “ OK ” . 13. W hen w ireless client has associated w ith W A P - 4000, a user authentication notic[...]

- 43 - 4.4.2 E A P-TLS A u thentication Get Digital Certif i cate from S erver The follo w ing procedu r es are based on ob t aining a certi f ica t e from W indo w s 2000 Server w hich acts as a CA server. Fu r the r more , you mus t have a valid account/pass w ord to access the server . 1. Ac t ive w eb bro w ser, en t er “ http:/ / 192 . 168 .[...]

- 44 - 4. Select “ User Certificate request ” , and click “ Next ” t o continue. 5. Click “ Submit > ” to con t inue.[...]

- 45 - 6. The Certi f icate Service is no w processing the cer t ificate request. 7. The cer t ifica t e is issued by t he server, click “ Install t his certificate ” t o do w nload and sto r e the certi f icate t o your local compu t er.[...]

- 46 - 8. Click “ Y es ” to s t ore the certifica t e to your local computer . 9. Certi f icate is no w installed. Wireless Adapter S etup 1. Go to S t art > Control P anel, double - click on “ Ne t work Connections ” . 2. Right-click on the W ireless Net w ork Connection w hich using W L - 3555. 3. Click “ Properties ” to open up th[...]

- 47 - 5. Click “ Properties ” of one a v ailable w ireless net w ork, w hich you w ant to associate w ith . 6. Select “ The k e y is provided for me automatica l ly ” option.[...]

- 48 - 7. Click “ OK ” . 8. Click “ A uthentication ” tab 9. Select “ Enable ne t work access control using IEEE 802 . 1X ” op t ion t o enable 802.1 x authen t ica t ion. 10. Selec t “ Smart Card or other Certificate ” from the drop-do w n list bo x for EAP type. 11. Click “ OK ” . 12. W hen w ireless client has associated w it[...]

- 49 - certi f icate f or w ireless net w ork connec t ion. If you only have one certi f ica t e in local compute r , system w ill automatically use it f or authen t ica t e. If you have mul t iple certifica t es in local compute r , click on the net w ork connection icon in t he system tray to continue . 13. Selec t the cer t ifica t e that w as i[...]

- 50 - Chapter 5 A ppl i cation This chapter describe the four opera t ing mode of your W A P-4000 . The four w orking modes of W A P-4000 are Access P oint , Access Point Client M ode, W ireless Bridge mode and M ultiple B r idge mode. 5.1 A ccess Point mode W i t h t his mode, you r W ireless net w ork connection could act as follo w ing. Any of [...]

- 51 - 5.3 W ireles s Bridge mode The W i r eless Bridge mode help to make the t w o Ethernet ne tw orks connected w ithout any w ire. W i t h t w o W A P-4000s in this mode, the tw o LANs in dis t ance can communica t e to each o t he r . This could be deployed if the net w orks are hard to make t he w ire in bet w een. Please be noted, key in the[...]

Chapter 6 Troubleshooting This chapter provides solutions to problems usually encoun t ered during the ins t alla t ion and ope r ation of the W A P-4000. The W A P-4000 canno t power up. Use an electrical test meter to dete r mine the ou t put vol t age of the po w er suppl y . Check if it matched the speci f ication of W AP-4000. Cannot commun i [...]