Alvarion 214486 manual

BreezeMAX Wi² and BreezeACCESS Wi² System Manual SW V ersion 4.3.4 March 2007 P/N 214486[...]

ii BreezeMAX Wi² and BreezeACCESS Wi² System Manual Document History Document Histor y T opic Descr iption Date Issued This is the document’s first Release March 2007[...]

BreezeMAX Wi² and BreezeA CCESS Wi² System Manual iii Legal Rights Le gal Rights © Copyright 2007 Alvarion Lt d. All rights reserved. The material contained herein is propri etary, privileged, and confidential and owned by Alvarion or its third party licenso rs. No disc losure th ereof shall be made to third parties without the express written p[...]

iv BreezeMAX Wi² and BreezeACCESS Wi² System Manual Legal Rights invoice date (the "Warranty Period")". During the Warranty Period, Alvarion may release to it s Customers firm ware updat es, which include additional performance improvements and/or bug fi xes, upon availability (the "Warranty"). Bug fixes, temporary patche[...]

BreezeMAX Wi² and BreezeA CCESS Wi² System Manual v Legal Rights FULLEST EXTENT ALLOWED BY LAW, THE WARRANTIES AND REMEDIES SET FORTH IN THIS AGREEMENT ARE EXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCL UDING BUT NOT LIMITED TO WARRANTIES, TERMS [...]

vi BreezeMAX Wi² and BreezeACCESS Wi² System Manual Legal Rights Outdoor Unit and Antenna Installa ti on and Grounding Ensure that outdoor units, antennas an d supporting structures are properly installed to eliminate any physical hazard to either people or property. Make sure that the installation of the outdoor un it, antenna and cables is perf[...]

BreezeMAX Wi² and BreezeA CCESS Wi² System Manual vii Legal Rights Impor tant Notice This user manual is delivered subject to the following conditions and restrictions:  This manual contains proprietary inform ation belonging to Alvarion Ltd. Such information is supplied sole ly for the purpose of assisting prop erly authorized users of the re[...]

viii BreezeMAX Wi² and BreezeACCESS Wi² System Manual Legal Rights the manufacturers. Non-compliance with su ch instructions may result in serious damage and/or b odily harm and/or void th e user's authority to oper ate the equipment and/or revoke the warrant y provided by such manufacturer.[...]

BreezeMAX Wi² and BreezeA CCESS Wi² System Manual ix Compliances Compliances F eder al Communication Commi ssion Interf er ence Statement This equipment has been teste d and found to comply with the limits for a Class B digital device, pursuant to Part 15 of th e FCC Rules. These limits are designed to provide reasonable protec tion against harmf[...]

x BreezeMAX Wi² and BreezeACCESS Wi² System Manual Compliances IMPORT ANT NO TE: FCC Radiat ion Exposure Statement This equipment complies with FCC radiat ion exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters (8 inches) between the radiator and your[...]

BreezeMAX Wi² and BreezeA CCESS Wi² System Manual xi Compliances  In Italy the end-user must apply for a license from the national spectrum authority to operate this device outdo ors.  In Belgium outdoor operation is only permitted using the 2.46 - 2.4835 GHz band: Channel 13.  In France outdoor operatio n is only permitted using the 2.4[...]

[...]

About T his Manual This manual describes the BreezeMAX Wi 2 and BreezeACCESS Wi 2 unit and details how to install, operate and manage the access point. This manual is intended for technicians responsible for installing, setting and operating the BreezeMAX Wi 2 and BreezeACCESS Wi 2 , and for system administrators responsibl e for managing the syste[...]

[...]

T able of Contents Chapter 1 - Produ ct Description 1.1 Introduction ................................................. .......................................... ..................... 2 1.2 Specifications ......................... ..................................................... ............................... 4 1.2.1 Radio ...................[...]

xvi BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual Table of Contents 2.3.2 Attaching the Mounting Plate to the Wi² Unit............................................... 21 2.3.3 Connecting the Wi² Unit to the SU-ODU ............. ........................................ 22 2.3.4 Preparing the Power Cable . ...................................[...]

BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual xvii Table of Contents 4.4.7 VLAN ................................... ..................................................... ................... 64 4.4.8 WDS Settings ........................................................................... ................... 66 4.4.9 AP Management............[...]

xviii BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual Table of Contents 5.2.7 Using Command History .......................................................... ................. 133 5.2.8 Understanding Command Modes............................................. ................. 133 5.2.9 Exec Commands ..........................................[...]

BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual xix Table of Contents 5.5.12 ip https port............................................... ................................................. 150 5.5.13 ip https server ............ ..................................................... ........................... 150 5.5.14 APmgmtIP ..............[...]

xx BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual Table of Contents 5.8.1 dhcp-relay enable ................................................................................ ...... 170 5.8.2 dhcp-relay............................................................ ...................................... 170 5.8.3 show dhcp-relay .................[...]

BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual xxi Table of Contents 5.10.4 dir ................................................... .......................................... ................. 187 5.10.5 show bootfile ....................................................... ...................................... 188 5.11 RADIUS Client .......[...]

xxii BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual Table of Contents 5.14.2 filter ap-manage .................................................. ...................................... 203 5.14.3 filter uplink enable .................................... ................................................. 203 5.14.4 filter uplink ...............[...]

BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual xxiii Table of Contents 5.18.10 antenna id............................................................ ...................................... 220 5.18.11 antenna location .................................................................................. ...... 221 5.18.12 beacon-interval .......[...]

xxiv BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual Table of Contents 5.20.3 key ............................. ..................................................... ........................... 237 5.20.4 transmit-key ......................... ........................................... ........................... 238 5.20.5 cipher-suite ....[...]

BreezeMAX Wi 2 and BreezeACCESS VL Wi 2 System Manual xxv Table of Contents Index ................. ................................ .............. ............. .............. ........... 263[...]

[...]

1 Chapter 1 - Product Description In T his Chapter:  “Introduction” on page 2  “Specificatio ns” on page 4[...]

2 System Description Chapter 1 - Product Description 1.1 Intr oduction Alvarion's Wi² suite of converged so lutions, including BreezeMAX Wi²and BreezeACCESS Wi²("Wi²"), unites the advant ages of the popula r WiFi access with the powerful capab ilities of BreezeMAX or B reezeACCESS VL/4900 (“BreezeACCESS”) s ystems to provide [...]

Introduction BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 3  A power supply module that provides power to both the WiFi AP and the SU-ODU. The Wi² system requires only a single conne ction to either AC or DC power. With its easy installation and operation, high performance, and rich s ecurity and QoS feature sets, the Wi² is an ideal so[...]

4 System Description Chapter 1 - Product Description 1.2 Specifica tions 1.2.1 Radio T able 1-1: Radio Specifications Item Description Radio T ype IEEE 802.1 1b/g Radio Mode 802.1 1b+g, 802.1 1b only , 802.1 1g only Frequency Band 2400-2497 MHz Operating Channels ETSI (EUR): 2412 ~ 2472 MHz(CH1-CH13) MKK (Japan) 1 1b: 2412 ~ 2484 MHz (CH1-CH14) MKK[...]

Specific ations BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 5 1.2.2 Sensitivity 1.2.3 8 dBi Omni Antenna T abl e 1- 2: Sen si tiv it y Dat a Rate Sensitivity (dBm) 802.1 1b, 1 Mbps -96 802.1 1b, 2 Mbps -93 802.1 1b, 5.5 Mbps -93 802.1 1b, 1 1 Mbps -90 802.1 1g, 6 Mbps -91 802.1 1g, 9 Mbps -90 802.1 1g, 12 Mbps -89 802.1 1g, 18 Mbps -88 802.[...]

6 System Description Chapter 1 - Product Description 1.2.4 Configuration and Management T able 1-4: Configurat ion and Manage ment Item Descripti on Management optio ns  Web-based (HTTP/HTTPS)  Te l n e t  SSH  SNMP SNMP agent V1 / V2c, supports 802.1 1 MIB, RFC-1213 MIB II and private MIB. Management acces s  Local via Console p ort[...]

Specific ations BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 7 1.2.5 Mec hanical 1.2.6 Electrical 1.2.7 Connector s and LEDs T ab le 1- 5: Me ch a ni ca l Specific at io n s Item Descripti on Dimensions (excludin g mo u nt ing plat e and connectors) 240mm (W) X 261mm (H) X 171mm (D) Weight ( excluding antennas, backhaulin g CPE and mounting [...]

8 System Description Chapter 1 - Product Description LEDs  Power  Link (Ethernet link integrity/activity)  1 1b/g: 3 LEDs indicating wireless link acti vity T able 1-7: Connectors and LEDs Ty p e Description[...]

Specific ations BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 9 1.2.8 En vir onmental 1.2.9 Standar ds Compliance T a bl e 1- 8: Env iron m e ntal Specifications Item Det ails Operating T emperature -40 0 C to 55 0 C Stor age T emperature -40 0 C to 70 0 C Humidity Maximum 95%. Wa t e r P r o o f IP-67 Solar Radiation protection IEC 60068-2-5[...]

[...]

2 Chapter 2 - Hardware Installation In T his Chapter:  “Hardware Description” on page 12  “Installation Requir ements” on page 16  “Installation” on page 19  “Attaching the SU-ODU to the Mounting Plate” on page 19  “Attaching the Moun ting Plate to the Wi² Unit” on page 21  “Connecting the Wi² Unit to the S[...]

12 Installation Chapter 2 - Hardware Installation 2.1 Har dwar e Description The Wi² consists of a WiFi access point with an integrated power supply and interface module that connects to eith er a Bre ezeMAX or Bree zeACCESS outd oor unit (SU-ODU) for backhaul and networ k management software. Each unit is housed in a weatherp roof enclos ure for [...]

Hardware Description BreezeMAX Wi² and BreezeACCESS Wi² System Manual 13 2.1.1 Bottom P anel Figure 2-2 shows the bottom panel of the Wi² unit and Table 2-1 lists the components. Figure 2-2: Bottom Panel (wit hout the SU-ODU) T able 2-1: Bottom Panel Component s Element Item Description WiFi Access Point (AP) Console Port Cover Holder Holder for[...]

14 Installation Chapter 2 - Hardware Installation 2.1.2 T op Panel Figure 2-3 shows the top panel of the Wi² unit with two N-type RF connectors for external antennas. 2.1.3 LED Indica tor s The Wi² includes eight status LED indicators. Figure 2-4 shows the LEDs and Table 2-2 describes the system st atus. Figure 2-3: T op Panel (without the SU-ODU[...]

Hardware Description BreezeMAX Wi² and BreezeACCESS Wi² System Manual 15 C Flashing Indicates packet s received using 802.1 1g modulation. Power On Green Indicates that the system is working normally . On Amber Indicates a power shutdown due to a low temperature condition. Link On Green Indicates a valid 10/100 Mbps Ethernet cable link. Flashing [...]

16 Installation Chapter 2 - Hardware Installation 2.2 Installa tion R equir ements This section describes all the supplies re quired to install th e Wi² and the items included in each installation package. 2.2.1 P ac king List The BreezeMAX Wi² and BreezeACCESS Wi² inst allation kit includes the following components:  Wi² unit  SU-ODU mou[...]

Installation Requirements BreezeMAX Wi² and BreezeACCESS Wi² System Manual 17  Crimping tool for RJ-45 connectors (if connecting to a BreezeACCESS ODU)  RS232 console cable*  8 dBi Omnidirectional antenna(s)*  Sectoral antenna(s), including RF cable with N-Type connector*  UL/CSA listed smooth circular power cable, 1.5mm to 2.5mm e[...]

18 Installation Chapter 2 - Hardware Installation 2.2.3 Guidelines fo r P ositioning W i² The Wi² should be mounted vertically on a 2"- 6" pole. Its location should enable easy access to the unit and its connector s for installation and maintenance and should have a clear or near line of sight to the area to be covered. For best perform[...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 19 2.3 Installa tion The following sections describe how to in stall a Wi² unit, including attaching the SU-ODU to the mounting plat e, attachin g the mounting plate to the Wi² unit, connecting to the SU-ODU, pole mounti ng, connecting a grounding cable, and connecting the antenna(s)[...]

20 Installation Chapter 2 - Hardware Installation 1 Determine the tilt dir ection of the SU-ODU. 2 Using the 1/4” x 1/2 ” hex head screws and the flat washers and spring washers supplied, attach the SU-ODU to the mounting plate as shown in Figure 2-6 in the direction marked. 3 Tighten the screws. Apply torque of 57 lb*in [6.4 N*m]. Figure 2-5: [...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 21 2.3.2 Attac hing the Mounting Pla te to the Wi ² Unit 1 Hold the mounting plate with SU-ODU atta ched so the tilt la bel faces the tilt direction that you have decided upon (see Section 2.3.1 ). 2 Using the M6 x 12 hex head screws and the flat washers and spring washers supplied, a[...]

22 Installation Chapter 2 - Hardware Installation 3 Adjust the tilt angle according to the scale ma rked on the mou nting plate and tighten the screws. Apply torque of 57 lb*in [6.4 N*m]. 2.3.3 Connecting the W i² Unit to the SU-ODU 2.3.3.1 Connecting to BreezeMAX PRO-S ODU 1 The rubber sealing cap (supplied with the SU-ODU) has a special groove a[...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 23 2 Expose the RJ-45 connector under the se aling cap on the Ethernet cable and connect to the SU-ODU RJ-45 connector ( Figure 2-9 ). 3 Put the sealing cap back in its place. Make sure that the s mall protrusion on the side of the cap fits inside the hole on the connector's prote[...]

24 Installation Chapter 2 - Hardware Installation 2.3.3.2 Adapting the Ethernet Cable for Connecting to BreezeACCESS SU-ODU The 55 cm Ethernet cable supplied with the unit has crossed Ethernet connections which have to be adapted fo r connec ting the unit to a BreezeACCESS ODU: 1 Cut the cable as close as possible to th e connector that should be c[...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 25 2.3.3.3 Connecting to Br eezeACCESS ODU wi th HW Revision E 1 Adapt the cable as described in Section 2.3.3.2 2 Connect the cable to the ODU as described in Section 2.3.3.1 . 2.3.3.4 Connecting to BreezeACCESS ODU with HW Revision D or Lower 1 Cut the cable as close as possible to t[...]

26 Installation Chapter 2 - Hardware Installation 2.3.4 Pr eparing the P ow er Cable 1 Use a UL/CSA listed smooth circular power cable, 1.5mm to 2.5mm each. Outer diamete r 7mm to 9mm, UV resist ant, temper ature range -40° C to + 65°C (-40°F to +1 49°F) minimum. Other specifications (such as oil resistance, no of wires) according to spec ific [...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 27 4 Strip insulation from wires as shown in Figure 2-11 . 5 Insert bare wire ends into the terminal s and fully tighten the screws . The wires should be connected as shown below: 6 Draw cable back until socket insert is co rrectly seated in D-sha ped location in the main body. Tighten[...]

28 Installation Chapter 2 - Hardware Installation 2.3.5 Mounting the W i² Unit 1 With the bottom panel of the unit fa cing downwards, thread the two 9/16" wide metal bands supplied through the brackets on the sides of the unit. 2 Rotate the mounting b racket, so th at the Wi² faces the Base Station. 3 Secure the Wi² unit to a pole as shown [...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 29  A 50 cm pole (diameter 6.03 cm)  Screws for attaching the po le to mounting b racket 1 Place the bracket on the wall and use as a template to mark the position of the holes to be drilled for the screws . 2 Remove the bracket from the wall and dr ill a hole in each of the loca[...]

30 Installation Chapter 2 - Hardware Installation 1 Mount the tilt accessory bracket on the wall or pole as described above. 2 Using the screws provided attach the pole to the tilt ac cessory bracket. 3 Using a spirit level, adjust the angle of the pole until it is vertical and tighten the screws to hold in place. 4 Secure the Wi² to the pole as d[...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 31 2.3.6 Connecting the Antenna(s) 1 Connect the external antenna directly to the N-type connector o n the top panel of the Wi² unit. 2 Set the antenna options for corresponding antenna through the u ser interface ( Section 5.18.10 ). 2.3.7 Connecting the Gr ounding Cables 1 Connect a[...]

32 Installation Chapter 2 - Hardware Installation 2 Check that the LED on the Wi² is green indicating that the system is working normally. 2.3.9 Configuration and T esting 2.3.9.1 Configuring the SU-ODU 1 Disconnect the cable connecting the WiFi Access Point (AP) from the AP connector on the Power Supply and Interface module. 2 Connect a PC to the[...]

Installation BreezeMAX Wi² and BreezeACCESS Wi² System Manual 33 5 Complete t he config uration of the AP, using either CLI as outlined in Chapt er 5 - "Command Line Interface" or the web-based interface as outlined in Chapter 4 - "System Configuration " . 6 Disconnect the configuration cable from the Wi² unit and reconnect t[...]

[...]

3 Chapter 3 - Initial Configuration In T his Chapter:  “Introduct ion” on page 36  “Initial Se tup through t he CLI” on page 37  “Configuration via Telnet” on page 37  “Configuration via Console” on page 37  “Initial Configuration Steps” on page 38  “Logging In” on page 40[...]

36 Commissi oning Chapter 3 - In itial Configuration 3.1 Intr oduction The Access Point (AP) unit offers a vari ety of management options, including a web-based int erface, Telnet , SSH, SNMP and a dire ct connection to the console port. The initial configuration steps can be ma de through the web browser interface or CLI.[...]

Initial Setup thro ugh the CLI BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 37 3.2 Initial Setup thr ough the CLI For a description of how to use the CLI, see “Using the Command Line Interface” on page 129 . For a list of all the CLI commands and detailed information on using the CLI, refer to “Comma nd Groups” on page 136 . 3.2.1 Co[...]

38 Commissi oning Chapter 3 - In itial Configuration 3.2.3 Initial Configuration Steps Logging In – Enter admin for the user name. The default password is null, so just press [Enter] at the password prom pt. The CLI prompt appears disp laying Enterprise AP#. Setting the Countr y Code – You must use the CLI to set the country code. Setting the c[...]

Initial Setup thro ugh the CLI BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 39 After configuring the AP’s IP parameters, you can access the management interface from anywhere within the atta ched network. The com mand line interface can also be accessed using Telnet from any computer attached to the network. NOTE Command examples shown lat[...]

40 Commissi oning Chapter 3 - In itial Configuration 3.3 Logging In There are a few basic steps you need to complete to connect the AP to your corporate network, and provide network access to wireless clients. The AP can be managed by any computer using a web brow ser (Internet Explorer 5.0 or above, or Nets cape 6.2 or above). 1 Enter the default [...]

Logging In BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 41 Figure 3-2: Home Page NOTE For information on configuring a user na me and password, see page 68 .[...]

[...]

4 Chapter 4 - System Configuration In T his Chapter:  “Introduct ion” on page 44  “BreezeMAX Backhauling Configuration” on page 45  “BreezeACCESS Backhauling Co nfiguration” on page 46  “Advanced Configuration” on page 47  “SNMP” on page 79  “Radio Interface” on page 85  “Status Information” on page [...]

44 Operation Chapter 4 - System Con figuration 4.1 Intr oduction Before continuing with advanced conf iguration, first complete the initial configuration step s described in Chapter 3 to set up an IP address f or the Access Point (AP) unit. The AP unit can be managed by any co mpute r using a web browser (Inte rnet Explorer 5.0 or above, or Netscap[...]

BreezeMAX Backhauling Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 45 4.2 Br eez eMAX Bac khauling Configur a tion Note the following when usin g BreezeMAX for backhauling: 1 If VLANs are u sed by the AP (VLAN Cl assification enabled):  Maximum number of VLAN IDs behind the SU is 16  The recommend ed configuration of Bree[...]

46 Operation Chapter 4 - System Con figuration 4.3 Br eez eA CCESS Backhauling Configur a tion Note the following when using Bree zeACCESS fo r backhauli ng: 1 If VLANs are u sed by the AP (VLAN Cl assification enabled):  In the SU Access Lin k should not be used.  The AU can operate in either Hybrid or Trunk Link (Q in Q should not be used) [...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 47 4.4 Advanced Configur a tion The Advanced Configuration page s include the following options. T abl e 4-1: Men u Menu Description Page System Configures basic administrative and client access 48 Identification S pecif ies the host name 48 TCP / IP Settings Configures the [...]

48 Operation Chapter 4 - System Con figuration 4.4.1 System Identifica tion The system name can be left with the default setting. However, modifying this parameter enables you to easily identify different devices in your network. System Name – An alias for the AP, enabling the device to be uniquely identified on the network. (Default: BlueSecur e[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 49 4.4.1.0.1 CLI Commands fo r System Identification Enter the global configuration mode, and use the system name command to specify a new s ystem name. Retu rn to the Exec mode, an d use the show system command to display the changes to the system identification settings . [...]

50 Operation Chapter 4 - System Con figuration By default, the AP is automatically conf igured with IP settings from a Dynam ic Host Configuration Protocol (DHCP) ser ver. However, if you are not using a DHCP server to configure IP ad dressing, use the CLI to manually conf igure the initial IP values (see page 38 ). Once you have ne twork access to[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 51  Default Gateway : The default gateway is the IP address of the router for the AP, which is used if the requested destination addr ess is not on the local subnet. If you have management stations, DNS, RADIUS, or other network servers located on another subnet, type the[...]

52 Operation Chapter 4 - System Con figuration 4.4.3 RADIUS Remote Authentication Dial-in User Se rvice (RADIUS) is an authentication protocol that uses soft ware running on a central server to control acce ss to RADIUS-aware devices on the network. An authentica tion server contains a database of user credentials for each user that requires acce s[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 53 MAC Address Format – MAC addr esses can be specifie d in one of four format s, using no delimiter, with a single dash de limiter, with multiple dash delimiters, and with multiple colon delimiters. VLAN ID Format – A VLAN ID (a number between 1 and 4094) can be assigne[...]

54 Operation Chapter 4 - System Con figuration each user authorized to access the network. VLAN IDs can be entered as hexadecimal numbers or as ASCII strings. Primary Radius Server Setup – Configure the following settings to use RADIUS authentication on t he AP.  Radius Status : Enabling Radius Status allo ws the sett ings of RADIUS authentica[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 55 4.4.3.0.1 CLI Commands for RADIUS From the global config uration mode, use the radius-serve r address command to specify the address of the primary or sec ondary RADIUS servers. (The following example configures the settings for the primary RADIUS server.) Configure the o[...]

56 Operation Chapter 4 - System Con figuration SSH client software needs to be installed on the management station to access the AP for management via the SSH protocol. 4.4.4.1 SSH Settings Telnet Server Status – Enables or disables the Te lnet server. (Defau lt: Enabled) SSH Server Status – Enables or disables the SSH server. (Default: Enabled[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 57 4.4.5 Authentica tion Wireless clients ca n be authenticated for netw ork access by checking the ir MAC address against the local database configured on the AP, or by using a database configured on a central RADIUS server. Alternatively, authentication can be implemented [...]

58 Operation Chapter 4 - System Con figuration MAC Authentication – You can configure a list of the MAC addresses for wire less clients that are authorized to access the network. This provides a basic level of authentication for wireless clients attemp ting to gain access to the network. A database of authorized MAC addresses can be stored locall[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 59 802.1X Supplicant – The AP can also operate in a 802.1X supplicant mode. This enables the access point itself to be authenticate d with a RADIUS server using a configured MD5 user name and password . This prevents rogue APs from gaining access to the network. Local MAC [...]

60 Operation Chapter 4 - System Con figuration addresses in the local table using the address filt er entry command. To remove an entry from the table, u se the address fi lter delete comman d. To display th e current settings, use the show authentication command from the Exec mode. 4.4.5.0.2 CLI Commands for RADIUS MAC Authentication Use the mac-a[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 61 4.4.5.0.3 CLI Command for 802.1x Supplicant To configure the AP to op erate as a 802.1X supplicant, first use the 802.1X supplicant user command to set a user name and password for the AP, then use the 802.1X supplicant command to enable the feat ure. To display the curre[...]

62 Operation Chapter 4 - System Con figuration Inter Client STAs Communication Filter – Sets the global mode for wireless-to-wireless communications betw een clients associated to Virtual AP (VAP) interfaces on th e AP. (Default: Disabled)  Disabled : All clients can communicate with each other through the access point.  Prevent Intra VAP c[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 63  Disabled : Allows management access from wireless clients.  Enabled : Blocks management access from wireless clients. Uplink Port MAC Ad dress Filtering Status – Prevents traffic with specified source MAC addresses from being forwarded to wi reless clients throug[...]

64 Operation Chapter 4 - System Con figuration 4.4.7 VLAN The AP can employ VLAN tagging su pport to control access to network resources and increase security. VLANs separate traffic passing between the AP, associated clients, and the wired network. There c an be a VLAN assigned t o each associated client, a default VLAN for each VAP (Vir tual Acce[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 65  When VLAN support is disabled, the AP does not tag traffic passed to the wired network and ignor es the VLAN tags on an y received frames. Using IEEE 802.1X and a central RADIUS server, up to 64 VLAN IDs can be mapped to specific wireless c lients, allowi ng users to [...]

66 Operation Chapter 4 - System Con figuration VLAN Classification – Enables or disables VLAN tagging support on the AP. Native VLAN ID – Th e V LA N I D th at tr af fi c m us t h av e to be ab le to ma n age t he AP . (Range 1-4094; Default: 1) 4.4.8 WDS Settings WDS Settings is not applicab le for the current release. 4.4.9 AP Mana gement The[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 67 UI Management – Enables or disables management access through Telnet, the Web (HTTP), or SNMP inte rfaces. (Default: Enabled) IP Management – Restricts management access to Telnet, Web, and SNMP interfaces to specified IP addresses. (Default: Any IP)  Any IP : Indi[...]

68 Operation Chapter 4 - System Con figuration 4.4.9.0.1 CLI Commands for AP Management features. 4.4.10 Administr a tion 4.4.10.1 Changing the Password Management access to the web and CLI inte rface on the AP is contro lled through a single user name and password. You can also gain additional access se curity by using control filters (see “Filt[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 69 4.4.10.2 Setting the T imeout Interval You can set the timeout interval for w eb access to th e unit, after which the user will have to re-enter the username and password. Session Timeout for WEB: Sets the time limit for an idle web interface session. (Range: 0-1800 secon[...]

70 Operation Chapter 4 - System Con figuration Before upgrading new software, verify that the AP is conne cted to the network an d has been configured with a compat ible IP address and subnet mask. If you nee d t o do wnl oa d fr om an F TP o r T FTP ser ve r, t ake the fo llo win g ad di tio na l steps:  Obtain the IP address of the FTP or TF T[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 71 managing the AP from a wireless client, the VLAN ID for the wireless client must be configured on a RADIUS server. Current version – Version number of runtime code. Firmware Upgrade Loca l – Downloads an operation c o de image file from the web management station to t[...]

72 Operation Chapter 4 - System Con figuration cannot be a period (.), and the maxi mum length for file names on the FTP/TFTP server is 255 char a cters. (Valid charac ters: A-Z, a-z, 0-9, “. ”, “-”, “_”)  IP Address : IP address or host name of FTP or TFTP server.  Username : The user ID used for login on an FTP server.  Passw[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 73 4.4.10.3.1 CLI Commands for Download ing Sof tware from a TFTP Server Use the copy tftp file command from t he Exec mode and then specify the file type, name, and IP address of the TFTP server. When the download is complete, the dir command can be used to check that the n[...]

74 Operation Chapter 4 - System Con figuration 4.4.11 System Log The AP can be configured to send event and error messages to a System Log Server. The system clock ca n also be synchr onized with a time server, so that all the messages sent to the Syslog server are stamped with the correct time and date. 4.4.1 1.1 Enabling System Logging The AP sup[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 75 Logging Level – Sets the minimum severity level for event logging. (Default: Informational) The system allows you to limit the me ssa ges that are logged by s pecifying a minimum severity level. Table 4-3 lists the error message levels from the mos t severe (Emergenc y)[...]

76 Operation Chapter 4 - System Con figuration 4.4.1 1.2 Configuring SNTP Simple Network Time Prot ocol (SNTP) allows the AP to set its internal clock based on periodic updates from a tim e server (SNTP or NTP). Maintaining an accurate time on the AP enables the system log to record meaningful dat es and time s for event entries. If the clock is no[...]

Advanced Configuration BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 77 Set Time Zone – SNTP uses Coordinated Univer sal Time (o r UTC, formerly Greenwich Mean Time, or GMT) based on the time at the Earth’s prime meridian, zero degrees longitude. To display a time corresponding to your local time, you must indicate the num ber of hours yo[...]

78 Operation Chapter 4 - System Con figuration 4.4.1 1 .2.2 CLI Commands for the System Clock The following example shows how to ma nually set the system time when SNTP server support is disabled on the AP. 4.4.12 RSSI RSSI is not applicable for the current release. Enterprise AP(config)#no sntp-server e nable 167 Enterprise AP(config)#sntp-server [...]

SNMP BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 79 4.5 SNMP You can use a network management app lication such as HP’s OpenView to manage the AP via the Simple Network Management Protocol (SNMP) from a network management statio n. To implement SNMP management, the AP must have an IP address and s ubnet mask, conf igured either manually o[...]

80 Operation Chapter 4 - System Con figuration Location – A text string that describes the system location. (Maximum length: 255 characters ) Contact – A text string that describes the system contact. (Maximum length: 255 characters ) Community Name (Read Only) – Defines the SNMP comm unity acces s string that has read-only access. Authorized[...]

SNMP BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 81 Trap Configura tion – Allows selection of specific SNMP notifications to send. The following items are available:  sysSystemUp - The AP is up and running.  sysSystemDown - The AP is about to shutdown and reboot.  sysRadiusServerChanged - The AP has chan ged from the primary RAD [...]

82 Operation Chapter 4 - System Con figuration  dot11InterfaceBFail - The 802.11b interface has failed.  dot1xMacAddrAuthSuccess - A c lient station has successfully authe nticated its MAC address with the RADIUS server.  dot1xMacAddrAuthFail - A client station has failed MAC address authentication with the RADIUS server.  dot1xAuthNotI[...]

SNMP BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 83  dot11StationDisassociate - A client station no longer associates with the network.  dot11StationAuthenticateFai l - A client station ha s tried and failed to authenticate to the network.  Enable All Traps - Click the button to enable all the available traps.  Disable All Traps[...]

84 Operation Chapter 4 - System Con figuration Enterprise AP#show snmp 183 SNMP Information ====================================== ======== Service State : Enable Community (ro) : ***** Community (rw) : ***** Location : WC-19 Contact : Paul EngineId :80:00:07:e5:80:00:00:2e:62 :00:00:00:18 EngineBoots:1 Trap Destinations: 1: 192.168.1.9, Community:[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 85 4.6 Radio Interf ace The 802.11g interface includes conf iguration options for radio signal characterist ics and wireless sec urity features. Th e configuration options are nearly identical, and are therefore both covered in this section of the manual. The radio supports up to f[...]

86 Operation Chapter 4 - System Con figuration For informatio n on configur ing 802.11g settings, refer to the following sections:  “Configuring VAP Radio Settings” on page 86  “Configuring Rogue AP Detection” on page 88  “Configuring WiFi Multimedia” on page 96 4.6.1.1 Configur ing V AP Radio Settings To configure VAP radio se[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 87 Default VLAN ID – The VLAN ID assigned to wireless clients associated to the VAP interface that are not assigned to a specif ic VLAN by RADIUS server configuration. (Default: 1) Closed System – When enabled, the VAP interface does not include its SSID in beacon messages. Nor[...]

88 Operation Chapter 4 - System Con figuration interface (numbered 0 to 3), use the vap command. You can configure a name for each interface using the description command. You can also use the closed-syste m command to stop sending the SSID in beacon messages. Set any other VAP parameters and radio setting as required before enabling the VAP interf[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 89 on page 74 ) are sent for eac h AP detected. Rogue APs can be identifie d by unknown BSSID (MAC address) or SSID configuration.  AP Detection – Enables th e periodic scanning for other APs. (Default: Disable)  AP Scan Interval – Sets the time between each rogue AP scan[...]

90 Operation Chapter 4 - System Con figuration To configure the remaining 802.11g radio settings, select the Radio Settings page. Enterprise AP(config)#interface wire less g 215 Enter Wireless configuration command s, one per line. Enterprise AP(if-wireless g)#rogue-a p enable 231 configure either syslog or trap or b oth to receive the rogue APs de[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 91 Radio Channel – The radio channel that the AP uses to communicate with wireless clients. When multiple APs are deployed in the same area, set the channel on neighboring access points at least four ch annels ap art to avoid interferen ce with each other. This means that you can[...]

92 Operation Chapter 4 - System Con figuration Auto Channel Select – Enables the AP to automatically select a n unoccupied radio channel. (Default: Enabled) Transmit Power – Adjusts the power of the radi o signals transmitted from the access point. The higher the transmissi on power, the farther the transmission range. Power selection is not ju[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 93 antenna ID ensures that the AP's radio tr ansmissions are within regulatory power limits for the country of operation. In the current release, select id-0x0108, module-ACC04-05427A Omni-Directional An t from the list for the 8d Bi omni antenna(s). The unit will not transm i[...]

94 Operation Chapter 4 - System Con figuration Super G – The Atheros proprietary Super G performance enhancements are supported by the access point. Thes e enhancements provide increased throughput for connections to Atheros-compatible clients through bursting, compression, and fast frames (con catenation). (Default: Disabled) Radio Mode – Sele[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 95 that the access point will save all br oadcast/multicast fr ames for the Basic Service Set (BSS) and forward them after every second beac on. Using smaller DTIM intervals delivers br oadcast/multicast frames in a more timely manner, causing stations in Power Save mode to wake up[...]

96 Operation Chapter 4 - System Con figuration other radio settings as required befo re enabling the VAP interface (with the no shutdown command). T o view the current 802.11g radio settings for the VAP interface, use the show interface wireless g [0~3] command as shown on page 215. 4.6.1.2.3 CLI Commands for the Radio Settings From the global conf[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 97 delay and throughput variations that result f r o m t h i s “ e q u a l o p p o r tu ni t y ” w i r e l e s s access method. For multimedia applications to run well ov er a wireless network, a Quality of Service (QoS) mechanism is re quired to prioritize traffic types and pr[...]

98 Operation Chapter 4 - System Con figuration mechanism first selects data with the high est priority to be granted a transmit opportunity. Then the same collision resolu tion mechanism is used externally to determine which device has access to the wireless medium. For each AC queue, the collision resolu tion mechanism is dependent on two timing p[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 99 WMM – Sets the WMM ope rational mode on the AP. When enabled, the parameters for each AC queue will be employed on the access point and QoS capabilities are advertised to WMM- enabled clients. (Default: Support)  Disable : WMM is disabled.  Support : WMM will be used for[...]

100 Operation Chapter 4 - System Con figuration  logCWMin (Minimum Contention Window) – The initial upper limit of the random backoff wait time before wirele ss medium access can be attempted. The initial wait time is a random va lue between zero and the CWMin value. Specify the CWMin value in the range 0-15 microseconds. Note that the CWMin v[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 101 Enterprise AP#show interface wireless g 0 227 Wireless Interface Information ==================================== ========================= --------------------Identification-- ------------------------- Description : En terprise 802.11g Access Point SSID : VA P_TEST_11G 0 Turbo[...]

102 Operation Chapter 4 - System Con figuration 4.6.2 Security The access point is configured by default as an “open system,” which broadcasts a beacon signal including the configured SSI D. Wireless clients with an SSID setting of “any” can rea d the SSID from the beacon and automatica lly set their SSID to allow immediate connection to th[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 103 For a more secure network, the AP can implement one or a combination of the following security mechanisms:  Wired Equivalent Privacy (WEP) page 103  IEEE 802.1X page 118  Wireless MAC address filtering page 58  WiFi Protected Access (WPA or WPA2) page 112 Both WEP a[...]

104 Operation Chapter 4 - System Con figuration The AP can simultaneously sup port clients using various different secu rity mechanisms. The configuration for these security combinations are outlined in the following table. Note that MAC add r ess authentication can be configured WP A over 802.1X Mode Requires WP A-enabled system and network card d[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 105 independently to work with all security me chanisms and is indicated separately in the table. Required RADIUS server support is also listed. T able 4-7: Security Combinatio ns Client Security Combination Configuration Summary a MAC Authentication b RADIUS Serve r No encryption [...]

106 Operation Chapter 4 - System Con figuration S tatic and dynamic (802.1x) WEP keys Enter 1 to 4 WEP keys Select a WEP transmit key Interface Detail Settin gs: Authentication: Open System Encryption: Enable 802.1x: Supported Set 802.1x key refresh and reauthentication rates Local, RADIUS, or Disabled Ye s Dynamic WEP and 802.1x WP A Interface Det[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 107 4.6.2.1 Enabling the V APs Before enabling the Virtual Access Point (V AP) radio interfaces, first configure all of the relevant ra dio settings (see “Radio Settings G (8 02.11g) ” on pa ge 85 .) WP A2 Pre-Shared Key only Interface De tail Settings: Authentication: WP A2-PS[...]

108 Operation Chapter 4 - System Con figuration After you have co nfigured the radio sett ings, select Security und er Radio G, set an SSID to identify the wire less network servi ce provided by each VAP you want to use, and then click A pply to save your settings. Before enabling the radio service for any VAP, first configure the WEP, WPA, and 802[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 109 WEP is the security protocol initially specified in the I EEE 802.11 standard for wireless communications. Unfortunately, WEP has been found to be seriously flawed and cannot be recommended for a hi gh level of network security. For more robust wireless security, the access poi[...]

110 Operation Chapter 4 - System Con figuration Key Number – Selects t he key number to use for encryption for each VAP interface. If the clients hav e all four keys configured to the same values, you can cha nge the encryption key to any of the four settings without having to update the client keys. (Default: Key 1) Shared Key Setup – Select 6[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 111  Shared Key: Sets the access point to use WEP shared keys. If this option is selected, you must configure at least one key on the access point and all clients. Encryption – Enable or disable the access po int to use data encryption (WEP, TKIP, or AES). I f this option is s[...]

112 Operation Chapter 4 - System Con figuration 4.6.2.3 WiFi Protected Access (WP A) WPA employs a combination of several te chnologies to provide an enhanced security solution for 802.11 wireless networks. The access point supports the followi ng WPA components and features: IEEE 802.1X and the Extensible Authentication Protocol (EAP): WPA employs[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 113 packet encryption an d key management as WPA in the enterprise, providing a robust and manageable alternative for small networks. Mixed WPA and WEP Client Support : WPA enables the access point to indicate its supported encryption and authentica tion mechanisms to clients using[...]

114 Operation Chapter 4 - System Con figuration  Key Caching : WPA2 provides fast roaming for authenticated clients by retaining keys and other security informat ion in a cache, so that if a client roams away from an access poin t and th en returns, re-aut hentication is not required. When a WPA2 client is first authenticated, it receives a Pair[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 115 The WPA configuration parameters are described below: Encryption – You must enable data encryption in order to enable all types of encryption (WEP, TKIP, or AES) in t he access point. Pre-Authentication – When using WPA2 over 802. 1X, pre-authentication can be enabled, whic[...]

116 Operation Chapter 4 - System Con figuration  WPA2 : Clients using WPA2 over 802.1X are accepted for authentication.  WPA2-PSK : Clients using WPA2 with a Pre-shared Key are accepted for authentication.  WPA-WPA2 - mixe d: Clients using WPA or WPA2 over 802.1X are accepted for authentication.  WPA-WPA2-PSK-mixed : Clients using WPA o[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 117 The configuration settings for WPA are summarized in Table 4 -8 : 4.6.2.3.1 CLI Commands for WP A Using Pre-shared Key Security From the VAP interface configuration mode, use the auth wpa-psk required command to ena ble WPA Pre-shared Key s ec urity. To enter a key value, use t[...]

118 Operation Chapter 4 - System Con figuration 4.6.2.4 Configuring 802.1X IEEE 802.1X is a standard framework for network access co ntrol that uses a central RADIUS se rver for user auth entication. This control feat ure prevents unauthorized access to the network by re quiring an 802.1X client application to submit user credentials for authentica[...]

Radio Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 119 You can enable 802.1X as o ptionally su pported or as required to enhance the security of the wireless network. (Default: Disable)  Disable : The AP does not support 802. 1X authentic ation for any wireless client. After successful wireless associat ion with the ac cess poin[...]

120 Operation Chapter 4 - System Con figuration 4.7 Sta tus Inf or ma tion The Status page includes info rmation on the following items: 4.7.1 Access P oint Status The AP Status window displays basic syst em configuration settings, as well as the settings for the wireless interface. T able 4-9: St atus Page Information Menu Description Page AP S ta[...]

Status Information BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 121 AP System Configuration – The AP System Configurat ion table displays the basic system configuration se ttings:  System Up Time : Length of time the mana gement agent has been up.  Ethernet MAC : The physica l layer address f or the Ethernet port .  Radio G MAC : [...]

122 Operation Chapter 4 - System Con figuration 4.7.1.0.1 CLI Commands for Displaying System Settings To view the current access point system settings, use the show system co mmand from the Exec mode. To view the curr ent radio interface settings, use the show interface wireless a or show interface wir eless g command (see page 227 ). 4.7.2 Station[...]

Status Information BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 123 The Station Configuration page displays basic connection information for all associated stations as descr ibed below. This page is automatically refreshed every five seconds.  Station Address : The MAC addre ss of the wireless client.  Authenticated : Shows if the stat[...]

124 Operation Chapter 4 - System Con figuration  WEP Disabled – The client is not using Wi red Equivalent Privacy (WEP) encryption keys.  Dynamic – The client is using WiFi Protected Access (802.1X or pre-shared key mode) or using 802.1X aut hentication with dynamic keying.  Static – The client is using stat ic WEP k eys for encrypti[...]

Status Information BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 125 The Event Logs table displays the following information:  Log Time : The time the log message was generated.  Event Level : The logging level associated with this message. For a description of the various levels, see “logging level” on page 74 .  Event Message :[...]

126 Operation Chapter 4 - System Con figuration 4.7.3.0.2 CLI Commands for Displaying Event Logs To view the access point log entries, use the show event-log command from the Exec mode. To clear all log entrie s from the access point, use the logging clear command from the Global Configuration mode. Enterprise AP#show logging 164 Logging Informatio[...]

5 Chapter 5 - Command Line Interface In T his Chapter:  “Using the Command Line Interface” on page 129  “Entering Commands” on page 131  “Command Groups” on page 136  “General Commands ” on page 138  “System Management Commands” on page 143  “System Logging Commands” on page 161  “System Cl ock Comma n[...]

128 Operation Chapter 5 - Command Line Interface  “WDS Bridge Commands” on page 207  “Spanning Tree Commands” on page 208  “Ethernet Interface Commands” on page 209  “Wireless Interface Comma nds” on page 214  “Rogue AP Detection Commands” on page 231  “Wireless Security Command s” on page 235  “Link I[...]

Using the Command Line Interface BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 129 5.1 Using the Command Line Interf ace 5.1.1 Accessing the CLI When accessing the manage ment interface over a direct connection to the console port, or via a Telnet connection, the A ccess Point (AP) unit can be managed by entering command keyword s and para me[...]

130 Operation Chapter 5 - Command Line Interface To access the AP through a Telnet sessio n, you must firs t set the IP address for the AP, and se t the defaul t gateway if you are managin g the AP from a different IP subnet. For example: If your corpora te network is connect ed to another network outside your office or to the Internet, you need to[...]

Entering Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 131 5.2 Entering Commands This section describes how to enter CLI commands. 5.2.1 K eyword s and Ar guments A CLI command is a series of keywords and arguments. Keywords identify a command, an d arguments specify co nfigur ation parameters. For example, in th e command “show in[...]

132 Operation Chapter 5 - Command Line Interface Interface). You can also display a list of valid keywords for a specific command. For example, the command “ show ? ” displays a list of possible show commands: The command “ show interface ? ” will display the following information: 5.2.5 P ar tial K eyw ord Lookup If you terminate a partial[...]

Entering Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 133 disable logging, specify the no logging command. This guide de scribes the negation effect for all applicable commands. 5.2.7 Using Command Histor y The CLI maintains a history of commands that have been entered. You can scroll back through the history of co mmands by pressin[...]

134 Operation Chapter 5 - Command Line Interface 5.2.10 Configuration Commands Configuration commands are used to modi fy AP settings. The se commands modify the running configuration and are saved in memory. The configuration comman ds are organized into four different modes:  Global Configuration (GC) - These co mmands modify the system level [...]

Entering Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 135 currently available commands or para m eters. You can use the Tab key to complete partial co mmands, or enter a partial command followed by the “?” character to display a list of possible matches. You can also use the following editing keystrokes for command-line processi[...]

136 Operation Chapter 5 - Command Line Interface 5.3 Command Gr oups The system comm ands can be broken d own into the functional groups shown below. T able 5-3: Command Group Command Group Description Page General Basic commands for entering configuration mode , restarting the system, or quittin g th e CLI 138 System Management Controls user name,[...]

Command Groups BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 137 The access mode shown in the following tables is indicate d by these abbreviations: Exec (Executive Mode), GC (Global Configuration), IC-E (Interface- Ethernet Configuration), IC-W (Interface-Wireless Configuration), and IC-W-VAP (Interface-Wireless VAP Configuration).[...]

138 Operation Chapter 5 - Command Line Interface 5.4 Gener al Commands T able 5-4: General Commands Command Function Mode Page configure Activates global confi guration mode Exec 139 end Returns to previous configuration mode GC, IC 139 exit Returns to the previous conf iguration mode , or exits the CLI any 140 ping Sends ICMP echo request packets [...]

General Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 139 5.4.1 configure This command activates Global Configuratio n mode. You must enter this mode to modify most of the settings on the AP. You must also enter Global Configuration mode prior to enabling the context mo des for Interface Configuration. see “Using the Command Line [...]

140 Operation Chapter 5 - Command Line Interface 5.4.3 e xit This command returns to the Exe c mode or exits the configuration program. Default Setting None Command Mode Any Example This example shows how to return to the Exec mode from the Interface Configuration mode, and th en quit the CLI session: 5.4.4 ping This command sends ICMP echo request[...]

General Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 141 Example 5.4.5 reset This command restarts the system or restores the factory default settings. Syntax reset < board | config uration > • board - Reboots the system. • configurati on - Resets the configuration settings to the factory defaults, and then reboots the sy[...]

142 Operation Chapter 5 - Command Line Interface 5.4.7 sho w line This command displays the co nsol e port’s configuration settings. Command Mode Exec Example The console port settings are fixed a t the values shown be low. Enterprise AP#show history config exit show history Enterprise AP# Enterprise AP#show line Console Line Information ========[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 143 5.5 System Mana gement Commands These commands are used to configure the user name, password, system logs, browser mana gement options, clock settings, and a varie ty of other system information. T able 5-5: System Management Commands Command Function Mode Page Coun[...]

144 Operation Chapter 5 - Command Line Interface 5.5.1 countr y This command configures the AP’s country code, which identifies the countr y of operation and sets the authorized radio channels. Syntax country < country_code > country_code - A two character code that identifies t he coun try of operation. See the followin g table for a full [...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 145 Default Setting US - for units sold in the United S tates 99 (no country set) - for units sold in other co untries Command Mode Exec Command Usage • I f you purchased an AP outside of the United St ates, the country code must be set before radio functions are enab[...]

146 Operation Chapter 5 - Command Line Interface Default Setting Enterprise AP Command Mode Global Configuration Example 5.5.3 system name This command specifies or modifies the system name for this de vice. Use the no form to restore the default system name. Syntax system name < na me > no system name name - The name of this host. (Maximum l[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 147 Default Setting admin Command Mode Global Configuration Example 5.5.5 pass wor d After initially logging onto the system, yo u should set the password. Remember to record it in a safe place. Use the no form to reset the default password. Syntax password < p asswo[...]

148 Operation Chapter 5 - Command Line Interface  After boot up, the SSH server needs about two minutes to generate host encryption keys. The SSH server is disabled while the keys are being generated. The show system command displays the status of the SSH server. Example 5.5.7 ip ssh-ser v er por t This command sets the Secure Shell server port.[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 149 Syntax ip http port < port-number > no ip http port port-number - The TCP port to be used by th e browser interface. (Range: 1024-65535) Default Setting 80 Command Mode Global Configuration Example Related Commands ip http server (page 149) 5.5.10 ip http ser [...]

150 Operation Chapter 5 - Command Line Interface Default Setting 300 seconds Command Mode Global Configuration Example Related Commands ip http port (page 148) 5.5.12 ip https por t Use this command to specify the UD P port numb er used for HTTPS/SSL connection to the AP’s Web interface. Use the no form to restore the default port. Syntax ip http[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 151 Syntax ip https server no ip https server Default Setting Enabled Command Mode Global Configuration Command Usage • B oth HT TP and HTTPS service can be enabled independentl y. • I f you enable HTTPS, you must indicate this in the URL: https:// device : port_num[...]

152 Operation Chapter 5 - Command Line Interface • IP address can be configu red for SNMP, web and Telne t acce ss respectively. Each of these groups can include up to five different sets of addre sse s, ei ther individual addres ses or address ranges. • When entering addresses for the same group (i.e., SNMP, web or Telnet ), the AP will not ac[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 153 Command Mode Exec Example 5.5.17 show system This command displays basic system configuration settings. Enterprise AP#show apmanagement Management AP Information ================================= AP Management IP Mode: Any IP Telnet UI: Enable WEB UI : Enable SNMP U[...]

154 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Exec Example 5.5.18 sho w v er sion This command displays the software version for the system. Enterprise AP#show system System Information ==================================== ====================== Serial Number : A123456789 System Up time : 0 days, 4 ho urs, 33 mi[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 155 Command Mode Exec Example 5.5.19 show config This command displays detailed conf iguration information for the system. Enterprise AP#show version Version Information ==================================== ===== Version: v4.3.3.8b02 Date : Dec 20 2005, 18:38:12 =======[...]

156 Operation Chapter 5 - Command Line Interface Command Mode Exec Example Enterprise AP#show config Authentication Information ==================================== ======================= MAC Authentication Server : DIS ABLED MAC Auth Session Timeout Value : 0 m in 802.1x supplicant : DIS ABLED 802.1x supplicant user : EMP TY 802.1x supplicant pas[...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 157 Hardware Version Information ==================================== ======= Hardware version R01A ==================================== ======= Ethernet Interface Information ==================================== ==== IP Address : 192.168.0.151 Subnet Mask : 255.255.255[...]

158 Operation Chapter 5 - Command Line Interface Logging Information ==================================== ================= Syslog State : Disable d Logging Console State : Disable d Logging Level : Informa tional Logging Facility Type : 16 Servers 1: 0.0.0.0 , UDP Port: 51 4, State: Disabled 2: 0.0.0.0 , UDP Port: 51 4, State: Disabled 3: 0.0.0.0 [...]

System Management Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 159 dot11InterfaceGFail Enabled dot11InterfaceBFail En abled dot11StationAssociation Enabled dot11StationAuthentication En abled dot11StationReAssociation Enabled dot11StationRequestFail En abled dot1xAuthFail Enabled dot1xAuthNotInitiated En abled dot1xAuthSuccess Enab[...]

160 Operation Chapter 5 - Command Line Interface 5.5.20 show hard ware This command dis plays the hardware ve rsion of the system. Command Mode Exec Example SSH Server : ENABLED SSH Server Port : 22 Telnet Server : ENABLED WEB Redirect : DISABLED DHCP Relay : DISABLED ==================================== ========================== Version Informati[...]

System Logging Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 161 5.6 System Logging Commands These commands are used to conf igure system logging on the AP. 5.6.1 logging on This command controls loggi ng of error messages; i.e., sending d ebug or error messages to me mory. The no form disa bles the logging process. Syntax [no] loggi[...]

162 Operation Chapter 5 - Command Line Interface Syntax logging host < 1 | 2 | 3 | 4 > < host_name | host_ip_ address > [ udp_port ] no logging ho st < 1 | 2 | 3 | 4 > • 1 - First syslog server. • 2 - Second syslog server. • 3 - Third syslog server. • 4 - Fourth syslog server . • host_name - The name of a syslog server. [...]

System Logging Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 163 Syntax logging level < Emergency | Alert | Critical | Error | Wa r n i ng | Notice | Informational | Debug > Default Setting Informational Command Mode Global Configuration Command Usage Messages sent include the selected level d own to Emergency level. Example 5.[...]

164 Operation Chapter 5 - Command Line Interface Default Setting 16 Command Mode Global Configuration Command Usage The command specifies t he facility type tag sent in syslog messages. (See RFC 3164.) This type has no effect on the kind of messages reported by the AP . However , it may be used by the syslog server to sort messages or to store mess[...]

System Logging Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 165 Syntax show loggi ng Command Mode Exec Example 5.6.8 sho w e vent-log This command displays log messages stored in the AP’s memory. Syntax show event-log Command Mode Exec Example Enterprise AP#show logging Logging Information ==================================== ====[...]

166 Operation Chapter 5 - Command Line Interface 5.7 System Cloc k Commands These commands are used to configure SNTP and system clock se ttings on the AP. 5.7.1 sntp-ser v er ip This command sets the IP ad dress of the servers to whic h SNTP time reques ts are issued. Use the this command with no ar guments to clear all time servers from the curre[...]

System Clock Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 167 Default Setting 137.92.140.80 192.43.244.18 Command Mode Global Configuration Command Usage When SNTP client mode is e nabled using the sntp-server enab le command, the sntp-server ip command specifies the time servers from which the AP pol ls for time updates. The AP wil[...]

168 Operation Chapter 5 - Command Line Interface Default Setting 00:14:00, January 1, 1970 Command Mode Global Configuration Example This example sets the system clock to 17:37 June 19, 2003. Related Commands sntp-server enable (page 167) 5.7.4 sntp-ser ver daylight-sa ving This command sets the start and end dates for da ylight savings time. Use t[...]

System Clock Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 169 Syntax sntp-server timezone < hours> hours - Number of hours befo re/after U TC. (Range: -12 to +12 hours) Default Setting -5 (BOGOT A, EASTERN, INDIANA) Command Mode Global Configuration Command Usage This command sets the local ti me zone relative to the Coordinat[...]

170 Operation Chapter 5 - Command Line Interface 5.8 DHCP R elay Commands Dynamic Host Configuration Protocol (DHCP) can dynamically allocate an IP address and other configuration informatio n to network client s that broadc ast a request. To receive the broadcast request, the DHCP server w ould normally have to be on the same subnet as the client.[...]

DHCP Relay Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 171 Syntax dhcp-relay < primary | secondar y > < ip_address > • primary - The primary DHCP serve r. • secondary - The seco nda ry DHCP server. • ip_address - IP address of the server. Default Setting Primary and secondary: 0.0.0.0 Command Mode Global Configura[...]

172 Operation Chapter 5 - Command Line Interface 5.9 SNMP Commands Controls access to this AP from manage ment stations using the Simple Network Management Protocol (SNMP), as well as th e hosts that will receive trap messages. 5.9.1 snmp-ser v er community This command defines the community access string for the Simple Network Management Protocol.[...]

SNMP Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 173 (Maximum length: 23 characters, case sensitive) • ro - Specifies read-only access. Authori ze d ma nag ement stations are only able to retrieve MIB objects. • rw - Specifies read/write access. Authorized manage me nt stations are able to both retrie ve and modify MIB objects.[...]

174 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Global Configuration Example Related Commands snmp-server cont act (page 173) 5.9.4 snmp-ser v er enable ser v er This command enables SNMP management access and also enables this dev ice to send SNMP traps (i.e., notifications). Use the no form to disable SN MP serv[...]

SNMP Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 175 • host_ip_address - IP of the host (the targeted recipi ent). • host_name - Name of the host. (Range: 1-63 char acte rs) • community-string - Password-like community string sent wi th the notification operation. Al though you can set this string using th e snmp-server host [...]

176 Operation Chapter 5 - Command Line Interface address). - localMacAddrAuthFail - A cli ent station has failed au thentication with the local MAC address database on the AP. - localMacAddrAuthSucce ss - A client station has successfully au thenticated its MAC address with the local database on the AP. - pppLogonFa il - The AP has failed to log on[...]

SNMP Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 177 Example 5.9.8 snmp-ser v er user This command c onfigures the SNMP v3 users that are allo wed to manage the A P. Use the no form to d elete an SNMP v3 user. Syntax snmp-server user < user-name> user-name - A use r-defined string for the SN MP user . (32 characters maximum) [...]

178 Operation Chapter 5 - Command Line Interface Example 5.9.9 snmp-ser v er tar gets This command configures SNMP v3 notification targets. Use the no form to delete an SNMP v3 target. Syntax snmp-server targets < ta rge t- id > < ip-addr > < sec-name > [ version { 3 }] [ ud p-port { port-number }] [ notification-type { TRAP }] no[...]

SNMP Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 179 Syntax snmp-server filter < filter-id > < include | exclude > < subtree > [ mask { mask }] no snmp-server filter < filter-id > [ subtree ] • filter-id - A user-defined name that identifie s an SNMP v3 notification filter. (Maxi mum length: 32 characters)[...]

180 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Global Configuration Example 5.9.12 show snmp gr oups This command displays the SNMP v3 pre-defined groups. Syntax show snmp groups Command Mode Exec Example 5.9.13 sho w snmp users This command displays the SNMP v3 users and settings. Enterprise AP(config)#snmp-serv[...]

SNMP Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 181 Syntax show snmp users Command Mode Exec Example 5.9.14 sho w snmp gr oup-assignments This command displays the SNMP v3 user group assignments. Syntax show snmp group-assignments Command Mode Exec Example 5.9.15 sho w snmp target This command displays the SNMP v3 notification tar[...]

182 Operation Chapter 5 - Command Line Interface Syntax show snmp target Command Mode Exec Example 5.9.16 sho w snmp filter This command displays the SNMP v3 notification filter settings. Syntax show snmp filter [ fi lter-id ] • filter-id - A user-defined name that identifie s an SNMP v3 notification filter. (Maxi mum length: 32 characters) Comma[...]

SNMP Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 183 Syntax show snmp filter-assignments Command Mode Exec Example 5.9.18 sho w snmp This command displays the SN MP configuration settings. Enterprise AP#show snmp filter-assignments HostID FilterID mytraps trapfilter Enterprise AP#[...]

184 Operation Chapter 5 - Command Line Interface Command Mode Exec Example Enterprise AP#show snmp SNMP Information ==================================== ========== Service State : Enab le Community (ro) : **** * Community (rw) : **** * Location : WC-1 9 Contact : Paul EngineId :80:00:07:e5:80:00:00:2e: 62:00:00:00:18 EngineBoots:1 Trap Destinations[...]

Flash/Fil e Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 185 5.10 F lash/File Commands These commands are us ed to manage the system code or conf iguration files. 5.10.1 bootfile This command specifies the image us ed to start up the system. Syntax boot file < fil ename > filename - Name of the image file. Default Setting None[...]

186 Operation Chapter 5 - Command Line Interface Syntax copy < ftp | tftp > file copy config < ft p | tf tp > • ftp - Keyword that allows you to copy to/from an FTP server. • tftp - Keyword that allows you to copy to/from a TFTP server. • file - Keyword that allows you to copy to/from a flash memory file. • config - Keyword that[...]

Flash/Fil e Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 187 Default Setting None Command Mode Exec Example This example shows how to delete the t est.cfg configuration file from flash memory. Related Commands bootfile (page 185) dir (page 187) 5.10.4 dir This command displays a list of files in flash memory. CAUTION Beware of delet[...]

188 Operation Chapter 5 - Command Line Interface Command Mode Exec Command Usage File information is shown below: Example The following example shows how to display all file information: 5.10.5 show bootfile This command displays the name of the cu rrent operation code file that booted the system. Syntax show snmp filter-assignments Command Mode Ex[...]

RADIUS Client BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 189 5.11 RADIUS Client Remote Authentication Dial-in User Serv ice (RADIUS) is a logon authentication protocol that uses soft ware running on a central server to control acce ss for RADIUS-aware devices to the network. An authentication server contains a database of credentials, such[...]

190 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Global Configuration Example 5.11.2 r adius-ser v er por t This command sets the RADIUS server network port. Syntax radius-server [ secondary ] port < port_number> • secondary - Secondary server. • port_number - RADIUS server UDP port used for authenticatio[...]

RADIUS Client BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 191 Syntax radius-server [ secondary ] retr ansmit number_of_re tries • secondary - Secondary server. • number_of_retries - Number of times the AP will try to authenticate lo gon access via the RADIUS server. (Range: 1 - 30) Default Setting 3 Command Mode Global Configuration Exa[...]

192 Operation Chapter 5 - Command Line Interface Default Setting 0 (disabled) Command Mode Global Configuration Command Usage • W hen the RADIUS Acco unting server UDP port is specified, a RADIUS accounting session is automatically sta r te d for each user that is successfully authenticated to the AP. Example 5.11.7 r adius-ser v er timeout-inter[...]

RADIUS Client BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 193 Default Setting No delim iter Command Mode Global Configuration Example 5.11.9 r adius-ser v er vlan-f o r m a t This command sets the format for spec ifying VLAN IDs on the RADIUS server. Syntax r adius-server vlan-forma t < hex | ascii > • hex - Enter VLAN IDs as a hexa[...]

194 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Exec Example Enterprise AP#show radius Radius Server Information ==================================== ==== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ==================================== =[...]

802.1X Authentication BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 195 5.12 802.1X Authentica tion The AP supports IEEE 802.1X access contro l for wireless clie nts. This control feature prevents unauthorized access to the network by requiring an 802.1X client application to submit user cr edentials for authentication. Client authentication [...]

196 Operation Chapter 5 - Command Line Interface successful 802.11 association, each clie nt is allowed to access the network. • W hen 802.1X is supported, the AP supports 802.1X authen tication only for clients initia ti ng the 802.1X authentication pro cess (i.e ., the AP does NOT initiate 802. 1X authentication). For stations initiating 802.1X[...]

802.1X Authentication BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 197 Default None Command Mode Global Configuration Command Usage The AP currently only supports EAP-MD5 CH AP for 802.1X supp licant au thentication. Example 5.12.4 show authentica tion This command shows all 802.1X authentica tion settings, as well as the address filter tabl[...]

198 Operation Chapter 5 - Command Line Interface 5.13 MAC Addr ess Authentica tion Use these commands to defin e MAC auth entication on the AP. For local MAC authentication, fir st define the default filtering policy using the address filter default command. Then enter the MAC addresses to be filtered, indicating if they are allowed or denied. For [...]

MAC Address Authentication BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 199 Default allowed Command Mode Global Configuration Example Related Commands address filter entry (page 199) 802.1x-supplicant user (p age 196) 5.13.2 addr ess filter entr y This command enters a MAC address in the filter table. Syntax address filter entry < mac-add[...]

200 Operation Chapter 5 - Command Line Interface Default None Command Mode Global Configuration Example Related Commands 802.1x-supplicant user (p age 196) 5.13.4 mac-authentica t ion ser v er This command sets address filtering to be performed with lo cal or re mote opti ons. Use the no form to disable MAC address authentication. Syntax mac-authen[...]

MAC Address Authentication BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 201 Default 0 (disabled) Command Mode Global Configuration Example Enterprise AP(config)#mac-authentica tion session-timeout 1 Enterprise AP(config)#[...]

202 Operation Chapter 5 - Command Line Interface 5.14 Filtering Commands The commands described in this sectio n are used to filter communications between wirele ss clients, control access to the management interface from wireless clients, and filter traffic us ing specific Ethern et protocol types. T abl e 5- 15 : F ilt erin g Comm an d s Command [...]

Filtering Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 203 5.14.1 filter local-bridge This command disables communication between wireless clients. Us e the no form to disable this filtering. Syntax filter local-bridge < all-V AP | intra-V AP > no filter local-bridge all-V AP - When enabled, clie nts cannot establish wir el es[...]

204 Operation Chapter 5 - Command Line Interface Syntax [no] filter uplink enable Default Disabled Command Mode Global Configuration Example 5.14.4 filter uplink This command adds or deletes M AC addr esses from the uplink filtering table. Syntax filter uplink < add | delete > MAC address MAC address - S pecifies a MAC address in t he form xx[...]

Filtering Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 205 Syntax filter ethernet-type enable no filter ethernet-type enabl e Default Disabled Command Mode Global Configuration Command Usage This command is used in conjunction with the filter etherne t-type protocol command to determine which Etherne t protoc ol types are to be filt[...]

206 Operation Chapter 5 - Command Line Interface Default None Command Mode Global Configuration Command Usage Use the filter ethernet-type enable command to enable filtering for Ethernet types specified in the filtering table, or the no filter ether net-type enable command to disable all filtering based on the filtering table. Example Related Comma[...]

WDS Bridge Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 207 5.15 WDS Bridge Commands The WDS Bridge commands are not ap plicable for the current release.[...]

208 Operation Chapter 5 - Command Line Interface 5.16 Spanning T r ee Commands The Spanning Tree commands are not applicable for th e current version.[...]

Ethernet Interface Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 209 5.17 Ether net Interface Commands The commands described in this section configure connection parameters for the Ethernet port and wireless int erface. 5.17.1 interfa ce ether net This command enters Ethernet interface config uration mo de. Default Setting None Com[...]

210 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Global Configuration Command Usage The primary and seconda ry name servers are queried in sequence. Example This example specifies two domain-name servers. Related Commands show interface ethernet (page 212) 5.17.3 ip addr ess This command s ets the IP addres s for t[...]

Ethernet Interface Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 211 Example Related Commands ip dhcp (page 211) 5.17.4 ip dhcp This command enables the AP to obtain an IP address from a DHCP server. Us e the no form to restore the default IP address. Syntax ip dhcp no ip dhcp Default Setting Enabled Command Mode Interface Configura[...]

212 Operation Chapter 5 - Command Line Interface • 100MH - Forces 100 Mbps, half-duplex operation • 100MF - Forces 100 Mbps, full-duplex operation Default Setting Auto-negotiation is enabled by de fault. Command Mode Interface Configuration (Ethernet) Command Usage If autonegotiation is disabled, th e speed and dupl ex mode must be configured t[...]

Ethernet Interface Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 213 Syntax show interface [ eth ernet ] Default Setting Ethernet interface Command Mode Exec Example Enterprise AP#show interface ethernet Ethernet Interface Information ==================================== ==== IP Address : 192.168.1.1 Subnet Mask : 255.255.255.0 Defa[...]

214 Operation Chapter 5 - Command Line Interface 5.18 W ir eless Interface Commands The commands described in this section configure connection parameters for the wireless interfaces. T able 5-17: Wireless Interfa ce Commands Command Function Mode Page interface wireless Enter s wi reless interface configuration mode GC 215 vap Provides access to t[...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 215 5.18.1 interfa ce wir eless This command enters wireless interface configuration mode. Syntax interface wireless < g > • g - 802.11g radio interface. Default Setting None Command Mode Global Configuration Example To specify the 802.11g int erface, enter the [...]

216 Operation Chapter 5 - Command Line Interface Default Setting None Command Mode Interface Configuration (Wireless) Example 5.18.3 speed This command configures the maximum data rate at which th e transmits unicast packets. Syntax speed < speed > speed - Maximum access speed allowed for wireless clients. (Options for 802.1 1b/g: 1, 2, 5.5, [...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 217 Default Setting 1 Mbps for 802.1 1b/g Command Mode Interface Configuration (Wireless) Example Enterprise AP(if-wireless g)#multica st-data-rate 5.5 Enterprise AP(if-wireless g)#[...]

218 Operation Chapter 5 - Command Line Interface 5.18.5 c hannel This command c onfigures the radio cha n nel through which th e AP communicates with wireless clients. Syntax channel < chann el | auto > • channel - Manually sets the radio channel us ed fo r communications with wireless clients. (Range for 802.11b/g: 1 to 14) • auto - Auto[...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 219 Example 5.18.7 r adio-mode This command fo rces the operating mo de for the 802.11g wireless interface. Syntax radio-mode < b | g | b+g > • b - b-only mode: Both 802.11b and 802.11g clie nts can communicate with the AP, but 802.11g clients can only tra nsfer[...]

220 Operation Chapter 5 - Command Line Interface Example 5.18.9 antenna control This command selects the use of two diversity antennas or a single antenna for the radio interface. Syntax antenna contr ol < diversity | left | right > • diversity - The radio uses two identical antennas in a diversity mode. • left - The ra dio uses a single [...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 221 • I n th e current release, select id=0x0108 for the 8dBi omni antenna. Example 5.18.11 antenna loca tion This command selects the antenna mounting location for the radio interface. Syntax antenna location < indoor | outdoor > • indoor - The antenna is mou[...]

222 Operation Chapter 5 - Command Line Interface Default Setting 100 Command Mode Interface Configuration (Wireless) Command Usage The beacon signals all ow wireless client s to maintain contact with the AP . They may also carry power-management info rmation. Example 5.18.13 dtim-period This command configures the ra te at which stations in sleep m[...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 223 Syntax fragmentation-length < length> length - Minimum packet size fo r which fragmentation is allowed. (Range: 256-2346 bytes) Default Setting 2346 Command Mode Interface Configuration (Wireless) Command Usage • I f the pa cket size is smaller than the pres[...]

224 Operation Chapter 5 - Command Line Interface Example 5.18.16 super-g This command enables Atheros propriet ary Super G perfo rma nce enhancements. Use the no form to disable this function. Syntax [ no ] super-g Default Setting Disabled Command Mode Interface Configuration (Wireless - 802.1 1g) Command Usage These enhancements include bursting, [...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 225 Syntax ssid < string > string - The name of a basic service set supp or ted by the AP . (Range: 0 - 7 characters) Default Setting 802.1 1g Radio: V AP_TEST_1 1G (0 to 3) Command Mode Interface Configuration (Wireless-V AP) Command Usage Clients that want to co[...]

226 Operation Chapter 5 - Command Line Interface Default Setting 64 Command Mode Interface Configuration (Wireless-V AP) Example 5.18.21 assoc-timeout-inter val This command c onfigures the idle time interval (when no frames are sent) after which the client is disassoc iated from the VAP interface. Syntax assoc-timeout-int erval < minutes> mi[...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 227 Syntax shutdown no shutdown Default Setting Interface enabled Command Mode Interface Configuration (Wireless-V AP) Command Usage Y ou must first enable V AP interface 0 before you can enable V AP interfaces 1, 2, 3, 4, 5, 6, o r 7. Example 5.18.24 sho w interface wi[...]

228 Operation Chapter 5 - Command Line Interface Command Mode Exec Example Enterprise AP#show interface wireles s g 0 Wireless Interface Information ==================================== ================================ ===== ----------------Identification------ -------------------------------- ----- Description : En terprise 802.11g Access Point SS[...]

Wireless Interface Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 229 5.18.25 sho w station This command shows the wireless clients associated with the AP. ----------------802.1x-------------- -------------------------------- ----- 802.1x : DI SABLED Broadcast Key Refresh Rate : 30 min Session Key Refresh Rate : 30 min 802.1x Session [...]

230 Operation Chapter 5 - Command Line Interface Command Mode Exec Example Enterprise AP#show station Station Table Information ==================================== ==================== if-wireless g VAP [0] : 802.11g Channel : 60 No 802.11g Channel Stations. . . . if-wireless G VAP [0] : 802.11g Channel : 1 802.11g Channel Station Table Station Ad[...]

Rogue AP Detection Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 231 5.19 Rogue AP Detection Commands A “rogue AP” is either an AP that is not authorized to particip ate in the wireles s network, or an AP that do es not have the correct security configuration. Rogue APs can potentially allow unauthorized user s access to the net[...]

232 Operation Chapter 5 - Command Line Interface the show rogue-ap command. • T he AP sends Syslog messages for each detected AP during a rogue AP scan. Example 5.19.2 rogue-a p authenticate This command forces the u nit to authen ticate all APs on the network. Use the no form to disable this function. Syntax [ no ] rogue-ap authenticate Default [...]

Rogue AP Detection Comma nds BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 233 Example Related Commands rogue-ap interval (page 233) 5.19.4 rogue-a p inter val This command sets the interval at which to scan for APs. Syntax rogue-ap interval <minutes> minutes - The interval between consec utive scans. (Range: 30-10080 minutes) Default S[...]

234 Operation Chapter 5 - Command Line Interface Default Setting Disabled Command Mode Interface Configuration (Wireless) Command Usage While the AP scans a channel for ro gue APs, wirele ss clients will not be able to connect to the AP . Therefore, avoid frequent scann ing or scans of a long duration unless there is a reason to believe that more i[...]

Wireless Security Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 235 5.20 W ir eless Security Commands The commands described in this sectio n configure parameters for wireless security on the 802.11g interface. 5.20.1 auth This command c onfigures authentication f or the VAP interface. Syntax auth < open-system | shared-key | wpa [...]

236 Operation Chapter 5 - Command Line Interface Default Setting open-system Command Mode Interface Configuration (Wireless-V AP) Command Usage • T he auth command automatically configu res settings for each authentication type, including encryption, 802.1 X, and ci pher suite. Th e command auth open-s ystem disables encryption an d 802.1X. • T[...]

Wireless Security Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 237 Example Related Commands encryption (page 237) key (page 237) 5.20.2 encr yption This command enables data encryption for wireless communications. Use the no form to disable data encryption. Syntax encryption no encryption Default Setting disabled Command Mode Interf[...]

238 Operation Chapter 5 - Command Line Interface - For 128-bit keys, use 13 alphanumeric characters or 26 hexadecimal digits. - For 152-bit keys, use 16 alphanumeric characters or 32 hexadecimal digits. Default Setting None Command Mode Interface Configuration (Wireless) Command Usage • T o enable Wired Equivalent Privacy (WEP), use the auth shar[...]

Wireless Security Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 239 Example 5.20.5 cipher-suite This command de fines the cipher algorithm use d to encrypt the global ke y for broadcast and multicast traf fic when using WiFi Protected Access (WPA) security. Syntax multicast-cipher < aes -ccmp | tkip | we p > • aes-ccmp - Use [...]

240 Operation Chapter 5 - Command Line Interface Example 5.20.6 mic_mode This command specifies how to calculat e the Message Integrity Check (MIC). Syntax mic_mode < hardware | sof tware > • hardware - Uses hardware to calculate the MIC. • software - Uses software to calculate the MIC. Default Setting software Command Mode Interface Conf[...]

Wireless Security Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 241 Example Related Commands auth (page 235) 5.20.8 pmksa-lif etime This command sets the time for aging out cached W PA2 Pairwise Master Key Security Association (PMKSA) information for fast roaming. Syntax pmksa-lifetime < minutes> minutes - The time for aging ou[...]

242 Operation Chapter 5 - Command Line Interface Default Setting Disabled Command Mode Interface Configuration (Wireless-V AP) Command Usage • Each time a client roams to another AP it has to be fully re-authenticat ed. This authentication process is time consuming and can d isrupt applicat ions running over the network. WPA2 i ncludes a mechanis[...]

Link Integrity Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 243 5.21 Link Inte grity Commands The AP provides a link integrity feature that can be used to e nsure that wireless clients are connected to resources on th e wired network. The AP does this by periodically sending Ping messages to a host device in the wired Ethern et netw[...]

244 Operation Chapter 5 - Command Line Interface Example 5.21.2 link-inte g rity ping-host This command configures the link ho st name or IP address. Use the no form to remove the host setting. Syntax link-integrity ping-host < host_name | ip_addre ss > no link-integ rity ping-host • host_name - Alias of the host. • ip_address - IP addres[...]

Link Integrity Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 245 Default Setting 6 Command Mode Global Configuration Example 5.21.5 link-inte g rity ether net-detect This command enables an integrity check to determine whether or not the AP is connected to the wired Ethernet. Syntax [ no ] link-integrity ether net-detect Default Sett[...]

246 Operation Chapter 5 - Command Line Interface 5.22 IAPP Commands The command described in this section enables the protocol signaling required to ensure the successful handover of wire less clients roaming between different 802.11f-compliant APs. In other word s, the 802.11f protocol can ensure successful roaming bet ween APs in a multi-vendor e[...]

VLAN Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 247 5.23 VLAN Commands The AP can enab le the support of VL AN-tagged traffic pass ing between wireless clients and the wired network. Up to 6 4 VLAN IDs can be mapped to specific wireless clients, allowing users to remain within the same VLAN as they move around a campus site. When [...]

248 Operation Chapter 5 - Command Line Interface client on the RADIUS server, then the fram es are tagged with th e AP’s native VLAN ID. • T raffic entering the Ethernet port must be tagged with a VLAN ID that matches the AP’s native VLAN ID, or with a VLAN tag that matches one of the wireless clients currently associated with the AP. Example[...]

VLAN Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 249 • W hen VLANs are en abled, the AP tags frames rece ived from wireless clients with the default VLAN ID for the V AP interface. If IEEE 802.1X is being used to authenticate wir eless clients, specific VLAN IDs can b e configured on the RA DIUS server to be assigned to each clie[...]

250 Operation Chapter 5 - Command Line Interface 5.24 WMM Commands The AP implements QoS using the WiFi Multimedia (WMM) standard. Using WMM, the AP is able to pr ioritize traffic and optimize performance when multiple applications compete for wireless network bandwidt h at the same time. WM M employs techniques that are a subset of the developing [...]

WMM Commands BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 251 Syntax wmm-acknowledge-policy < ac_number > < ack | noack > • ac_number - Access categories. (Range: 0-3) • ack - Require the sender to wait for an acknowledgement from the receiver. • noack - Does not require the sender to wait for an acknowledgement from the re[...]

252 Operation Chapter 5 - Command Line Interface high data-rate traffic. (Range: 0-6 5535 microseconds) • admission_control - The admission control mode fo r the access category. When enabled, clients are blocked from using the access categor y. (Options: 0 to disable, 1 to ena ble) Default Command Mode Interface Configuration (Wireless) Example [...]

A Appendix A - Troubleshooting In T his Chapter: This appendix provides a lis ts of things t o check in case of problems befor e contacting local Technical Support.[...]

254 BreezeMAX Wi² and BreezeACCESS Wi² System Manual Appendix A -Troubleshooting Check the following before you contact local Technical Support. 1 If wireless clients cannot access the network, check the following:  Be sure the AP and the wireless clients are configured with the same Service Set ID (SSID).  If authentication or encryption a[...]

BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 255 Appendix A -Troubleshoo ti ng  If you cannot connect using Telnet, you may have exceeded the maximum number of concurrent Telnet sessions permitted (i.e, four sessions). Try connecting again at a later time. 3 If you cannot ac cess the on-board c onfiguration program v ia a serial port conn[...]

[...]

Glossar y 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 or better UTP cable. 10BASE-T IEEE 802.3 specification for 10 Mbp s Ethernet over two pairs of Category 3 or better UTP cable AES Advanced Encryption Standard: An encryption algorithm that implements symmetric key cryptography. AES provides very s[...]

258 BreezeMAX Wi² and BreezeACCESS Wi² System Manual Glossary DHCP Dynamic Host Configuration Protocol: Provides a framework for passing configuration information to hosts on a TCP/IP network. DHCP is b ased on the Bootstrap Protocol (BOOTP), adding the capability of automa tic allocation of reusable network addresses and additi onal configuratio[...]

Glossary BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 259 MAC Media Access Control: The lower of the two sub-layers of the data link layer defined by the IEEE. The MAC sub-layer handles access to share d media, such as whether token passing or contention will be used. MAC Address Standardized data link layer addr ess that is required for eve[...]

260 BreezeMAX Wi² and BreezeACCESS Wi² System Manual Glossary Shared Key A shared key can be used to authenticate each client attached to a wireless netw ork. Shared Key authentica tion must be used along with the 802.11 Wireless Equivalent Privacy algorithm. SNMP Simple Network Mana gement Protocol: The application protocol in the Internet suite[...]

Glossary BreezeMAX Wi² and BreezeA CCESS Wi² System Manual 261 . . WEP Wired Equivalent Privacy: WEP is based on the use of security keys and the popular RC4 encr yption algorithm. Wireless devices without a valid WEP key will be excluded from network traffic. WPA WiFi Protected Ac cess: WPA employs 802.1X as its b asic framework for user au then[...]

[...]

Inde x Numerics 802.11g 5-215 A AES 4-113 authentication 4-57 cipher suite 4-116 , 5-236 closed system 5-225 configuring 4-57 MAC address 4-58 , 5-198 , 5-199 type 4-102 , 5-225 web redirect 4-59 B beacon interval 4-94 , 5-221 rate 4-94 , 5-222 BOOTP 5-210 , 5-211 C Clear To Send See CTS CLI 5-129 command modes 5-133 closed system 4-87 , 5-225 comm[...]

Index 264 BreezeMAX Wi² and Breeze ACCESS VL Wi² System Manual G gateway address 3-38 , 4-51 , 5-130 , 5-210 grounding cables 2-31 H hardware version, displaying 5-154 HTTP, secure server 5-151 HTTPS 5-150 I IAPP 5-246 IEEE 802.11b 4-85 IEEE 802.11f 5-246 IEEE 802.11g 4-85 configuring interface 4-85 , 5-215 IEEE 802.1x 4-112 , 5-195 , 5-198 confi[...]

Index BreezeMAX Wi² and BreezeACCESS VL Wi² System Manual 265 SNTP 4-76 , 5-166 enabling client 4-76 , 5-167 server 4-76 , 5-166 software displaying version 4-69 , 4-120 , 5-154 downloading 4-71 , 5-185 SSH server Status 4-56 SSID 4-108 , 5-224 SSL 5-150 startup files, setting 5-185 station status 4-122 , 5-229 status displaying device status 5-1[...]