ORiNOCO AP-2000 User Guide

Contents

1

Introducing the ORiNOCO AP-2000 device
Notes and Cautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

Wireless Networking Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Management and Monitoring Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
HTTP Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Active Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3 802.11b versus 802.11a Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Feature List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3 Cell Size and Coverage Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4 Auto Channel Select . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

Installation and Initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

2

Configuring the ORiNOCO AP-2000 device
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 ScanTool Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 Set Basic Configuration Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3
Log Into the AP-2000 Unit using the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3 Set System Name, Location and Contact Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5 Set a Static IP Address for the AP-2000 Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5 Set Network Names and Encryption Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6 Set WEP Encryption for each Wireless Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7 Change Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7

Download the Latest Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Setup your TFTP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8 Download Updates to your TFTP Server from the Web Interface . . . . . . . . . . . . . . . . . . . . . . 2-8 Backup your AP-2000 Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9 Copy a Configuration File from Another AP-2000 Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9

Other Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-10
Configure the AP-2000 Device as a DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-10 Maintain 802.11b Client Connections using Link Integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11 Configure Link Integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11 Disable Link Integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

Change your Wireless Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12
802.11a Wireless Interface Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

i

802.11b Wireless Interface Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13 Auto Channel Select (ACS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14 Distance Between APs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14 Multicast Rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-16

Ethernet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17
Set Ethernet Speed and Transmission Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17

Configure your Management Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17
Set HTTP Interface Management Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-18 Configure Serial Port Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-18

Other Security Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-18
Configure your MAC (Address) Access Control Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-19 Add an Entry to the MAC Access Control Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-19 Disable or Delete an Entry in the MAC Access Control Table . . . . . . . . . . . . . . . . . . . . . 2-19 RADIUS Authentication Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-19 IEEE 802.1x Security Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-20 Setting Up the AP-2000 using 802.1x Security Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22 802.1x Security and Wireless Distribution Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22

If You Encounter Problems... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22

3

Managing the ORiNOCO AP-2000 device
Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1 Monitoring Network Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3
View Hardware/Software Component Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 Monitoring ICMP Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4 Monitoring IP/ARP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4 Monitoring Learn Table Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5 Monitoring IAPP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5 Monitoring RADIUS Server Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5 Monitoring Interfaces Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-6 Monitoring Remote Link Test Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-6

Issuing System Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-7
Download. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-8 Upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-9 Reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-9 Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-10 Help Link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-10

4

Configuring Advanced Features
Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Advanced DHCP Server Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 DHCP IP Pool Table Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Link Integrity Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3 Target IP Address Table Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3

ii

VLAN Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Typical VLAN Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 VLAN Workgroups and Traffic Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5 Traffic Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5 Typical User VLAN Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5 Setting Up Independent VLAN Workgroups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5 Setting Up Independent VLAN Workgroups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-6 Setting Up One VLAN Workgroup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7 Typical VLAN Management ID Configuration Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8 Making the AP-2000 a VLAN Member to Control Management Access . . . . . . . . . . . . . . 4-8 Managing the AP-2000 from a Wireless Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8

Management Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9
Setting New Passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9 Managing IP Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10 Configuring Management Service Interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10

Setting Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11
Setting the Ethernet Protocol Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12 Advanced Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12

Alarms (SNMP Traps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-13
Alarm (Trap) Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-13 Alarm Host Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-13

Bridge Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-14
MAC Address Learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-14 Static MAC Address Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-14 Information Masks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15 Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15 Broadcast Storms and Storm Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15

Wireless Distribution System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
WDS Setup Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16 Setup the 802.1x Security Mode Wireless Distribution System . . . . . . . . . . . . . . . . . . . . 4-17 Wireless Port Mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-17 Configuring the AP-2000 Unit as a Wireless Repeater . . . . . . . . . . . . . . . . . . . . . . . . . . 4-18

Advanced Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-18
Wireless Security - EAP Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-18 MAC Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19 MAC Access Control Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19 RADIUS Authentication Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19 RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-20

5

Troubleshooting
Troubleshooting Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2 Symptoms and Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2
Connectivity Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2 iii

AP-2000 Unit Will Not Boot - No LED Activity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2 Serial Link Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2 Ethernet Link Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2 Basic Software Setup and Configuration Problems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 Lost AP-2000, Telnet, or SNMP Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 Client Computer Cannot Connect. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 AP-2000 Has Incorrect IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 HTTP (browser) or Telnet Interface Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 HTML Help Files Do Not Appear . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 Telnet CLI Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 TFTP Server Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 Client Connection Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 Client Manager Finds No Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 Client PC Card Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 Intermittent Loss of Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 Client Does Not Receive an IP Address - Cannot Connect to Internet . . . . . . . . . . . . . . . 5-4 VLAN Operation Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 Verifying Proper Operation of the VLAN Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 VLAN Workgroups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 Active Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 The AP-2000 Unit Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 There Is No Data Link. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 “Overload” Indications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5

Recovery Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6
Reset to Factory Default Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6 Forced Reload Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6 Initialize the AP-2000 using the Bootloader CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6 Preparing to Download the AP Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6 Download Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-7 Setting IP Address using Serial Port and Normal CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-7 Hardware and Software Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-7 Attaching the Serial Port Cable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-7 Initializing the IP Address using Normal CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8

System Alarms (Traps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9
Security Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 Wireless Interface Card Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 Operational Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 FLASH Memory Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 TFTP Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 Image Alarms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 Standard MIB-II (RFC 1213) Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9 Bridge MIB (RFC 1493) Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9

iv

Related Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
RADIUS Authentication Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10 TFTP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10

LED Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10

6

Using the Command Line Interface
Prerequisite Skills and Knowledge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1 Notation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2 Important Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2 Navigation and Special Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2 CLI Error Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3

Command Line Interface (CLI) Variations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3
Bootloader CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3

CLI Command Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
Operational CLI Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4 ? (List Commands) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4 done, exit, quit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-6 download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-6 help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7 history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7 passwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7 reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7 search. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-8 upload. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-8 Parameter Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-8 “set” and “show” Command Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-8

Using Tables & User Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-10
Working with Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-10 Using Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-11 Configuring Objects that Require Reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-11 “set” CLI Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-11 “show” CLI Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-12

Configuring the AP-2000 Unit using CLI commands . . . . . . . . . . . . . . . . . . . . . . . . . 6-12
Log Into the AP-2000 Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-12 Log Into the AP-2000 Unit using HyperTerminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-12 Set Basic Configuration Parameters using CLI Commands . . . . . . . . . . . . . . . . . . . . . . . . . 6-13 Set System Name, Location and Contact Information . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-13 Set Static IP Address for the AP-2000 device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-13 Set a Network Name for each Wireless Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-13 Set WEP Encryption for each Wireless Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-13 Change Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-14 Download an AP-2000 Configuration File from your TFTP Server. . . . . . . . . . . . . . . . . . 6-14 Backup your AP-2000 Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-14

v

Other Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-15
Configure the AP-2000 device as a DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-15 Maintain 802.11b Client Connections using Link Integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-15 Change your Wireless Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-15 Enable/Disable Interference Robustness . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-15 Enable/Disable Closed System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16 Enable/Disable Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16 Enable/Disable Medium Density Distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16 Autochannel Select (ACS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16 Set the Distance Between APs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16 Set the Multicast Rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16 Set Ethernet Speed and Transmission Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Set Interface Management Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Enable/Disable Interface Management Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Set Communication Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Set Session Timeouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Configure Management Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Edit Management IP Access Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17 Configure Serial Port Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18 MAC Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18 Setup MAC (Address) Access Control Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18 Add an Entry to the MAC Access Control Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18 Disable or Delete an Entry in the MAC Access Control Table . . . . . . . . . . . . . . . . . . . . . 6-18 RADIUS Authentication Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18 Set RADIUS Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18 Configure RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18

Parameter Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-19
System Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-20 Inventory Management Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-20 Network Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-20 Wireless Interface Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-21 SNMP Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-22 SNMP IP Access Table Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-22 SNMP Table Host Table Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-22 Primary and Backup RADIUS Server Table Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-23 Telnet Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-23 Serial Port Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-24 TFTP Server Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-24 HTTP (web browser) Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-24 Link Integrity Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-24 Link Integrity IP Target Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-25 Wireless Interface Security Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-25 Ethernet Filtering Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-25 IAPP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-26 vi

. . . . 8-1 Ethernet Interface . . . . . . . . . 6-26 Spanning Tree Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-27 Storm Threshold Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 Serial Port Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-28 DHCP Server table for IP pools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3 802. . . . . . . . . . . . . . . . . . . . . . 6-26 Spanning Tree Priority and Path Cost for Each Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 Active Ethernet Interface . . . . . . . . . . . . . . . . . . . . . 8-2 PCMCIA Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1 Electrical Specifications . . . . . . . . 6-27 DHCP Server Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-28 SpectraLink VoIP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3 802. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-28 7 8 Recording Your Configuration Settings Specifications Hardware Specifications . . . 8-4 vii . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 HTTP Interface . . . . . . . . . . . . . . . . . . . . . .Static MAC Address Filter Table . . . . . . . . . . . . . . . . . . . . . . . 6-27 Storm Threshold Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3 Wireless Communication Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-27 MAC Access Control Table Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1 Physical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1 Environmental Specifications . . . . . . . . . . . . . . . . . . . . . . .11b Channel Frequencies. . . . . 8-2 Radio Specifications . . . . . . . . . . . . . . . . . . . . . . . . .11a Channel Frequencies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

before performing an operation.Introducing the ORiNOCO AP-2000 device 1 In This Chapter Wireless Networking Concepts Management and Monitoring Capabilities Active Ethernet 802. AP-2000 units automatically allow client roaming within the same subnet. A Note indicates important information that helps youmake better use of your computer. A Caution indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. contact your local reseller. especially sections on information you need. it must first be initialized. Figure 1-1 12. For information about how to conduct a Site Survey. Before the AP-2000 unit can be configured for your specific networking requirements.78$& ! (721 (721 Remember to review the contents of this manual.11b versus 802. To determine the best location for the Base Station units.11a Networks Installation and Initialization Notes and Cautions Wireless Networking Concepts The AP-2000 provides wireless access to network infrastructures. Standalone wireless network access infrastructure 1-1 . we recommend conducting a Site Survey before placing the devices in their final locations. As wireless clients move from one coverage cell to another. Initialization consists of setting a static IP address and the appropriate IP mask for the AP-2000 unit so that you can recognize it once it is located in your network.

1-2 . There are three management and monitoring interfaces available to the network administrator to configure and manage the AP-2000 device(s) in the network: 1. wireless interface. Use the CLI through your computer serial port. AP-2000 networks provide: Seamless client roaming Easy installation and operation Over-the-air encryption of data High speed network links To be fully operational. Command Line Interface The Command Line Interface (CLI) represents a set of keyboard commands and parameters used for configuring and managing the AP-2000. the AP-2000 needs at least one PC Card. Management and Monitoring Capabilities To configure the AP-2000 for your needs. Statements may be issued from the keyboard for real time control. hub. over your LAN. If necessary. Details of the CLI commands used to manage the AP-2000 device along with syntax and specific parameters names can be found in Using the Command Line Interface. (721 (721 PC Cards are not included with your kit and must be ordered as separate items. HTTP Interface Command Line Interface Full SNMP configuration capabilities HTTP Interface The HTTP Interface (Web browser Interface) provides easy access to configuration settings and network statistics from any computer in the network. For example. Wireless clients (computers connected to your network through a radio PC Card) use Client Manager software for network access.Management and Monitoring Capabilities The network administrator can configure each unit according to the requirements for the network. and bridge parameters. composed of CLI Commands and their associated parameters. Users enter Command Statements. 2. The HTTP (web browser) Interface provides easy configuration and management. use the AP Manager software. or with a "crossover" Ethernet cable connected directly to your computer. set your specific network. and file type parameters. when downloading a file. The CLI provides configuration and management access for most generic Telnet and Terminal clients. Once connected. administrators enter the download CLI Command along with IP Address. etc. or from scripts that automate configuration. or with a "crossover" Ethernet cable connected directly to your computer’s Ethernet Port.) through the Internet. To manage AP-1000 devices. The HTTP Interface is not backwards compatible with Access Point 1000 hardware. use the CLI with your computer serial port to initialize the proper IP address for your network. 3. users can roam from one coverage cell to another while maintaining their connection. Use the HTTP Interface through your LAN (switch. file name. The Access Point 2000 (AP-2000) functions as a wireless network access point to data networks. through the Internet.

00 meter (approx 3. Output Power.11bcompliant 2. The IEEE 802.4 GHz up to 250 yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes No client support for 802. The AE module is not a repeater and does not amplify the Ethernet data signal. EAP-TLS and EAP-TTLS) 802.4 GHz band using Direct Sequence Spread Spectrum (DSSS). 12. and 54 Mbits/s. The table below compares the software features supported for each type of card in the AP-2000 device: Feature Number of stations per BSS HTTP Server Telnet / CLI SNMP Agent VLAN Support (2 User VLANs) Emergency Reset to Default Configuration DHCP Client DHCP Server TFTP RADIUS Access Control 802. the only difference is in the power source.11a 5 GHz up to 50 yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes No client support for 802. 9. There is no difference in operation.).4 GHz radio technology.11a-compliant 5 GHz and 802.5. 2.Active Ethernet Active Ethernet Some AP-2000 unit are equipped with an Active Ethernet module. Active Ethernet (AE) delivers both data and power to the access point. AP-2000 devices with Active Ethernet should be connected to a grounding type AC outlet (100-240 VAC). Feature List The IEEE standards that governs wireless communications are different for the 2. 5.1d bridging MAC Access Control Table Protocol Filtering Multicast/Broadcast Storm Filtering Proxy ARP Configuration Support for MAC Features ICMP Echo Response Hardware Watchdog Timer Roaming Link Integrity Automatic Channel Select WEP WEP Plus (Weak Key Avoidance) WDS Relay Remote Link Test Link Test Responder Medium Density Distribution Distance between AP's 2. 18. 24. 12. The standard provides for data rates of 1.11a standard adds support for a high-speed wireless physical layer in the 5 GHz band using Orthogonal Frequency Division Multiplexing (OFDM). 802.11wireless connectivity through the use of an 802.11a Comments 1-3 . The AP-2000 unit supports the following data rates: 6.11b standard supports wireless physical layer in the 2. The cable length between the Ethernet network source and the AP-2000 unit should not exceed 1. The IEEE 802. per Port 11 Watts Also see Electrical Specifications. 54 Mbits/s.11a Networks The AP-2000 supports 802. using the standard power cord supplied. The standard requires support for data rates of 6.1X (EAP-MD5. 36. – – – – – The Active Ethernet (AE) integrated module adds ~48 VDC to unused (non-data) wires in standard Category 5 Ethernet cable. and 11 Mbits/s.25 ft. 24.11b versus 802.4 GHz band and the 5 GHz band.

11a yes The AP-2000 device can be used with any combination of 802.11a (5 GHz) Cell Size Figure 1-3 802.11a and an 802.11a Networks Feature Ultra High Density Closed System Interference Robustness Load Balancing AP List SpectraLink VoIP Support Fragmentation 2.11a No client support for 802.11b radio cards. Figure 1-2 802.4 GHz card type is larger than that of a 5 GHz radio card.802. Note however.11b versus 802.4 GHz and 5 GHz clients will be supported simultaneously.11a versus 802. Cell Size and Coverage Area The coverage area achieved with the 2. that only one 802.11a card with antenna adapter can be plugged into the AP-2000 unit at one time.4 GHz) cell than the larger (5 GHz cell). You can have an 802.4 GHz yes yes yes yes yes yes 5 GHz Comments No client support for 802.11a and 802.11b card present in the AP-2000 device at the same time and 2. The following illustrations depict the difference in cell sizes and the way that cell size affects coverage area. The transmit rate is higher in the smaller (2.11b Coverage Area 1-4 .

427 GHz 5 .Installation and Initialization Auto Channel Select The Access Point selects its own frequency channel.5.472 GHz 14 .4 GHz (802. This is beneficial when deploying AP-2000 units in a new environment or adding an AP-2000 unit in an existing environment.447 GHz 9 .4 GHz (IEEE 802.5.5.180 GHz 40 . Multiple AP-2000 units can be turned on simultaneously to establish proper channel selection. 2.2.2.300 GHz 64 .320 GHz These channels are only valid in US/Canada. When a second AP-2000 unit is turned on in the vicinity of the currently active AP-2000 device.2.462 GHz 12 . 1-5 .5.422 GHz (default FCC.11a) radio cards.2.11b) radio cards and 5 GHz (IEEE 802.2.477 GHz (Japan only) For France.5.2.5. The ORiNOCO 5 GHz card for the AP-2000 has an antenna adapter which snaps into place on the existing wall mounting bracket.Auto Fallback (default) 6 Mbit/sec 9 Mbits/sec 12 Mbits/sec 18 Mbits/sec 24 Mbits/sec 36 Mbits/sec 48 Mbits/sec 54 Mbits/sec N/A N/A N/A N/A Interference Robustness Closed System Load Balancing Medium Density Distribution Enable (default) Disable Enable Disable (default) Enable (default) Disable Enable (default) Disable Installation and Initialization The AP-2000 is designed to support both 2. channels 10-13 only Distance Between APs Large (default) Medium Small Minicell Microcell 1 Mbit/sec 2 Mbits/sec 5.11a) ODFM (Orthogonal Frequency Division Multiplexing) Enable (default) Disable 36 . and Japan at this time. The default channel for the 5 GHz radio card is 52 .260 GHz (default) 56 .2.432 GHz 6 .2. the Auto Channel Select feature changes the frequency channel of the second unit so there is no interference between the units.200 GHz 44 . using the Auto Channel Select feature.5. Multicast Rate 0 .467 GHz (ETSI countries only) 13 .452 GHz 10 .422 GHz 8 .240 GHz 52 .220 GHz 48 .280 GHz 60 .412 GHz 2 .5.457 GHz 11 . Japan) 4 .2.2. based on interference situation.437 GHz 7 . bandwidth usage and adjacent channel use. Refer to the printed Quick Start Guide provided in you kit for instructions on installing the Base Station hardware and initializing the unit for your network.417 GHz 3 . ETSI.2.5 Mbits/sec (default) 11 Mbits/sec N/A 5 GHz (802.2.11b) Physical Layer Type (Modulation Type) Auto Channel Select Frequency Channel DSSS (Direct Sequence Spread Spectrum) Enable (default) Disable 1 .2.5260 MHz.2.

2-1 . Most administrators use the HTTP Interface (web browser) for configuration. Prerequisites ScanTool Program Set Basic Configuration Parameters Download the Latest Software – Setup your TFTP Server – Download Updates to your TFTP Server from the Web Interface – Backup your AP-2000 Configuration File – Copy a Configuration File from Another AP-2000 Unit Other Network Settings – Configure the AP-2000 Device as a DHCP Server – Maintain 802. This guide explains each choice. we suggest you accept the default values. the Command Line Interface (CLI) provides the same functionality by entering CLI Commands or scripts from Terminal and Telnet sessions. please refer to Using the Command Line Interface.11a Wireless Interface Card – 802. which radio channel to use). When in doubt. however.11b Client Connections using Link Integrity Change your Wireless Interface Settings – 802. In some scenarios described in this chapter.1x Security Mode If You Encounter Problems. the AP-2000 must be configured to operate in your network environment.11b Wireless Interface Card – Auto Channel Select (ACS) – Distance Between APs – Multicast Rate Ethernet Settings – Set Ethernet Speed and Transmission Mode Configure your Management Interfaces – Set HTTP Interface Management Services – Configure Serial Port Interface Settings Other Security Configuration Settings – Configure your MAC (Address) Access Control Table – RADIUS Authentication Settings – IEEE 802.. you need to make configuration choices (for example.Configuring the ORiNOCO AP-2000 device 2 In This Chapter Since each network is unique. For information about using the CLI..

2-2 . The current network profile on the wireless client must contain a valid Network Name. Refer to Recording Your Configuration Settings. When sent from the factory. The network administrator typically provides the IP Pool range. in other words. reboot. one of the case-sensitive Network Names defined in the AP-2000 PC Card "Wireless Interface" properties. IP Address Type (Static or Dynamic). If using DHCP. a backup authentication server is also optional. Authentication Server Authentication Port This is a port number (default is 1812) and is typically provided by the network administrator. Power up. that shows a single unit in the factory default state . The following section identifies the information you need. Open ScanTool. (721 (721 Client Manager software comes with the PC Cards used in wireless client computers. which applies only to the AP-2000 unit. you must record the MAC Address and physical location of each unit during installation. ScanTool Program Use ScanTool to initialize units and download image files for any unit connected to the LAN subnet. Network Name (SSID of the wireless cards) Each wireless interface of your AP-2000 must be given a Network Name before users can sign on.exe application is included on the installation CD-ROM. Install the AP-2000 hardware and connect the unit(s) to the LAN. For more information. A form has been provided at the end of this guide for you to document the configuration settings of each of the AP-2000 units in your network. the unit requests an IP Address from the network DHCP server. you need to gather certain network information. Result: If set for DHCP. To track units. This may apply to the isolated unit. the AP-2000 is set for DHCP operation. This is not the same as the System Name. and is typically provided by the network administrator. you can install multiple units simultaneously and initialize them from ScanTool. similar to the example below. and other values. or reset the AP-2000. Client IP Address Pool Allocation Scheme The AP-2000 can automatically provide IP addresses to clients as they sign on. the immediate. (HTTP) Password Each AP-2000 requires a read/write password to access the web interface. 2. 3. or to multiple networks. The ScanTool Main screen appears. You can set the IP Address. Use the following procedure to open ScanTool and set AP-2000 network parameters. The ScanTool. please refer to the PC Card documentation.Prerequisites Prerequisites Before configuring the AP-2000. The network administrator typically provides this information. The network administrator typically provides the Network Name(s). it may be difficult to identify the IP Address assigned to the unit. active network. You should have the AP-2000 unit(s) and your computer connected to the same LAN subnet. ScanTool is very useful because units can be installed without prior bench initialization. Since ScanTool identifies each unit by its MAC Address. DNS Server IP Address The network administrator typically provides this IP Address. Authentication Method A primary authentication server may be configured. 1. the unit requests an IP Address from the DHCP server when rebooted or powered up. Since the IP Address could come from a large DHCP address pool. The default password is "public". Authentication Server Shared Secret This is a kind of password shared between the AP-2000 and the RADIUS authentication server (so both passwords must be the same). Result: ScanTool scans the subnet and locates all AP-2000 units.

This is typically descriptive text. To change values or download an AP Image. — TFTP Server IP Address. use your web browser to configure the AP-2000 through the Web Interface. The default password is “public”. To cancel the operation and return to the ScanTool Main screen. Each tab contains information for specific configuration categories. Ensure any proxies are turned off. If you selected Static. — Name. If you wish to download a new AP Image file. Enter the read/write password. 2. If you selected Static. Select Static if you wish to enter the IP values manually. This read-only field displays the MAC Address of the selected unit. Result: the ScanTool Change screen appears. — Subnet Mask. If you selected Static. Click the Configure operation button. click the Rescan button. 3. If the file is located in the default TFTP directory. then enter the full directory path and file name. Result: The System Configuration screen appears. Log Into the AP-2000 Unit using the Web Interface 1. and then click the Change button. you need enter only the file name. — Image File Name. Result: The AP-2000 Login screen appears. — MAC Address. similar to the following example. Enter public in the Password field. — Read/Write Password. Our example shows a unit with factory default settings. — IP Address Type. Set Basic Configuration Parameters Once you have a valid IP Address assigned to your AP-2000 and an Ethernet connection. Result: The unit will reboot and the new values will be in effect.Set Basic Configuration Parameters To re-scan the network and update the display after changing values. — Gateway IP Address. verify the entered values and then click the OK button. To reboot the unit to make the changes effective. such as “Main Lobby”. Open your browser and enter the IP Address. click the Cancel button. Select DHCP to force the unit to request and IP Address from a DHCP server each time it is powered up or rebooted. (721 Leave the User Name field empty 2-3 . Note that certain options are available only when selecting Static IP Address mode. select the desired unit. — IP Address. If you wish to download a new AP Image file. Press ENTER. then enter the Subnet Mask. Enter the System Name of the unit. then enter the IP Address of the TFTP server. Result: The System Status screen appears. then enter the IP Address of the Gateway. You may perform the following operations. then enter the IP Address.

under Setup your TFTP Server. the AP-2000 reminds you that it must be rebooted for a change to take effect. Figure 2-2 Configuration Options To set properties for each category. In a given session. you will also want to setup your TFTP server to communicate with the AP-2000 device. or enter. In some cases. Result: The selected configuration screen appears.Set Basic Configuration Parameters 1 2 3 Figure 2-1 Configuration through the Web Interface You are now ready to configure each AP-2000 category. In some cases. 2-4 . For example: – – – – – – System name and location Contact information for network administrator IP Address Communication rules for your wireless interface(s) Passwords for the different management interfaces (SNMP. click OK to save changes. If you are in doubt about any setting. click on the desired tab. Each configuration screen allows you to select options. you can wait to reboot until all changes have been made. or click Cancel to restore previous settings. HTTP) If you need to upload the latest software. After entering or editing information on configuration screens. you will not need to make any changes. we recommend that you use the default values. and delete information. depending on your system. edit. You will want to set up a few basic configuration parameters right away when you receive the AP-2000 unit. Telnet. This process is described in downloading the latest software.

Click OK when finished. 2. check the IP mask of your computer before proceeding. the name. such as “Front Lobby” or Engineering. Then enter a fixed IP Address for your AP-2000 unit. phone number and e-mail address of the person responsible for this device. Network IP Configuration 2-5 . along with the IP mask and default gateway IP Address you want to use. Figure 2-4 (721 The IP Mask of the AP-2000 unit needs to match the IP Mask of your network. 3. If you are setting up the AP-2000 device from a client station. Enter the name of the AP-2000 device. start by clicking on the Configure button. then the System tab. Set a Static IP Address for the AP-2000 Device 1. The AP-2000 unit will need to be rebooted for the changes to take affect.Set Basic Configuration Parameters Set System Name. Location and Contact Information Figure 2-3 1. and click OK. System Configuration From the web interface. 2. its location within your network or its physical location. Click on the Network tab and select the IP Address Assignment Type to Static.

The default values will be assigned. the AP-2000 software will automatically detect the card type. Select Network Names (SSID) for the PC Cards in wireless Slots A and/or B in the AP-2000 device. You can have an 802. Client stations use the Network Name of the PC Card to connect to the network through the AP-2000 unit.11a) radio cards. The Configuration and Monitoring parameters displayed in the HTTP Interface will be updated accordingly.4 GHz (802. that only one 802.11a cards.4 GHz and 5 GHz clients will be supported simultaneously.11b card present in the AP-2000 device at the same time.11a adapter card can be plugged into the AP-2000 unit at one time. and 2. (721 Not all software features available for the 802.11b) and 5 GHz (802. 2-6 . Note however.11a and an 802. At power up or insertion of either a 2. Figure 2-5 Wireless Interface Configuration The AP-2000 device can be used with any combination of 2.4 GHz or 5 GHz radio card.Set Basic Configuration Parameters Set Network Names and Encryption Options 1.11b cards are available for the 802.

Telnet/CLI. WEP Encryption Click on the Security > Encryption tabs. Change Passwords 1. 2. Select which key to use for WEP encryption.and 128-bit cards. and HTTP interfaces. Click on the Management tab and change the default passwords for the SNMP. 128-bit cards support key lengths of 13 alphanumeric characters. (721 (721 The AP-2000 device supports both 40. you can always perform the Reset to Factory Default Procedure.Set Basic Configuration Parameters Set WEP Encryption for each Wireless Interface Figure 2-6 1. 3. Type in an encryption key based on the type of card present in each slot. 4. 40-bit cards support key lengths of 5 alphanumeric characters. The default passwords for each interface is public. Click inside the check box to enable WEP encryption on a wireless card. We strongly urge your to change the default passwords to restrict access to your network devices to authorized personnel. 2-7 . Client stations must have the same encryption key to be able to communicate with the AP-2000 device. We also recommend that you document your AP-2000 configuration using the work sheets provided for you in Recording Your Configuration Settings. If you lose or forget your password settings.

the proper AP Image file name. Make sure you have the proper TFTP server IP Address. and you can download the files for configuration and AP Image upgrades. Make sure the TFTP server is running and pointing to the directory containing the desired file. Setup your TFTP Server The “Trivial File Transfer Protocol” (TFTP) server allows you to transfer files across a network.Download the Latest Software Download the Latest Software There are three types of files that can be downloaded to the AP-2000 from a TFTP server: — — — img (AP software image or kernel) config (configuration file) bspbl (BSP/Bootloader firmware file) The latest updates on software and documentation can be found on the Agere web site at: <{WebLink}>http://www. Type in the IP address of your TFTP server. TFTP does not have to be running for AP-2000 operations that do not transfer files. 6. Figure 2-7 WXRHPLW UR QZRGWXKV FLWDPRWXD RQ KWLZ VHOLI HYLHFH5 GQD WLPVQDU7 KWRE RW GHUXJLIQRF VL UHYUHV 37)7 HKW HUXV HND0 Download Software Image from TFTP Server 2-8 . After the TFTP server is installed: Check to see that TFTP is configured to point to the directory containing the AP Image. Type in the file name (including the file extension) and select the file type from the pull down menu. You can upload files from the AP-2000 for backup or copying. and that the TFTP server is connected. you will not be able to download and upload images and configuration files to/from the AP-2000. so long as you have a valid TFTP IP Address. Download Updates to your TFTP Server from the Web Interface 1. If a TFTP server is not configured and running. 3. Click on the Commands button. The TFTP software is located on the ORiNOCO AP-2000 Installation CD-ROM.net for the latest version of the TFTP server. 2. 5.orinocowireless. Also see SolarWind. Open the web interface of the AP-2000 device. Remember that the TFTP server does not have to be local.com. select the Download tab. The unit will need to be rebooted for the changes to take affect. 4.

Verify the IP address of your TFTP server and enter the name of the file you wish to transfer (refer to Step 3). Figure 2-8 3. Type in a descriptive name for your configuration file. 2. Select the Upload tab and enter the IP address of your TFTP server. 9. 10. Click OK to upload this information from your AP-2000 unit to the TFTP server. Click on the Commands button. Do not use a static IP address in this configuration file. Repeat this procedure for all the AP-2000 units you want to configure using this specific file. Wait for the file to transfer from the AP-2000 device to the TFTP server.78$& ! (721 Record the name of this configuration file and the IP address of the AP-2000 unit so you can easily find it if you need to download it. where it can be retrieved in the event you reset your AP-2000 device to factory defaults at some time. A system window will notify you when this process is complete. 1. Select the file type as config from the pull down menu. 8. and then download the configuration file to other AP-2000 units. Click Download. 3. Open the web interface of the AP-2000 device. Then open the Web interface from the AP-2000 unit with the desired configuration and click the Commands button. and click OK. 4. Make sure the TFTP server is running and pointing to the directory where you want to save the file. Enter the name of your configuration file and click OK. Click on the Commands button. 6. 2. Confirm by clicking OK. Set the file type to config. 6.Download the Latest Software Backup your AP-2000 Configuration File 1. 5. 12. 5. 7. otherwise you will end up with duplicate IP addresses in your network! Upload Configuration File to TFTP Server 2-9 . Type in the IP address of your TFTP server. 4. 7. The unit will need to be rebooted for the changes to take affect. Copy a Configuration File from Another AP-2000 Unit You can configure multiple units using the same configuration file by uploading the configuration file from one AP-2000 unit to the TFTP server. Access the AP-2000 unit to which you will download the configuration. then select the Download tab. Check to ensure Dynamic IP address is enabled by clicking the Configure button and selecting the IPConfig tab. select the Upload tab.

WEP encryption or 802.DHCP Server 2-10 .Other Network Settings Other Network Settings You may want to set other configuration parameters for your AP-2000 unit.11b client connections using Link Integrity checking Change your Wireless Interface settings Configure which physical interface will be used to manage the AP-2000 unit Control access to the AP-2000 device using MAC Address authentication. click on the Configure button and select the Network > DHCP Server tabs. You must have at least one entry in the DHCP Server client IP Address assignment table before you can enable the DHCP Server Status feature. Figure 2-9 1.1x security settings Refer to Configuring Advanced Features for more complex network settings. Enter the following information: — Start IP Address — End IP Address 12. Network Configuration Screens . 3. Click on the Add button in the IP Pool Table. From the HTTP interface. Enable the DHCP Server to allow the AP-2000 to assign clients IP Addresses from IP Pool Tables. such as: — — — — — Configure the AP-2000 device as a DHCP server Maintain 802. 2. Deselect the Status check box to prevent client IP Address assignment from the AP-2000. as it could bring down the whole network. Configure the AP-2000 Device as a DHCP Server Use DHCP configuration to provide dynamic client IP Addresses from one or more IP Pool Tables.78$& (721 ! Make sure there is only one DHCP server on the network and do not enable the DHCP server without checking with your network administrator first.

Figure 2-10 Configure Link Integrity 1. click on the Configure button and select the Network > Link Integrity tabs.11b Client Connections using Link Integrity The Link Integrity feature checks the link between the AP-2000 and the nodes on the backbone. DHCP automatically renews IP Addresses without client notification. (721 This feature is only applicable to 2. 3. Link Integrity 2-11 . and select the Enable DHCP Server check box. Comment (optional) Status . – Poll Retransmissions . DHCP automatically renews IP Addresses without client notification. 2.the interval between link integrity checks. Use the Edit button to disable or delete existing table entries.the number of times a poll should be retransmitted before the link is considered down.Other Network Settings — — — — Default Lease Time (optional) . Range is 500 . Default is 86400 seconds.the maximum time value for clients to retain the assigned IP Address. 5.4 GHz (802. Maximum Lease Time (optional) . Maintain 802. the client will connect to another AP-2000 in your network that still communicates with the server. Default is 86400 seconds. Click OK. If the link goes down. Enter the IP Address of the host computer you want to check and add comments to identify the computer if you wish.11b) cards. This Target IP Address is enabled as soon as it is entered in the table. From the HTTP interface. 4. and serve as backup. 5. Enter the Default Gateway IP Address. Reboot the AP-2000 unit for the changes to take affect. These nodes are listed by their IP address on the Link Integrity IP Address Table.IP Pools are enabled upon entry in the table. Set the following parameters as needed: – Poll Interval .15000 ms in increments of 500 ms. the Primary and Secondary DNS IP Addresses. default is 500 ms. Click the Edit button in the Target IP Address Table. Click to select the Enable Link Integrity check box. 4.the default time value for clients to retain the assigned IP Address.

single 802. RTS/CTS Medium Reservation. Change your Wireless Interface Settings Depending on the type of wireless PC Card installed in the AP-2000 device. This value affects message flow control. Use the pull-down menu to select a specific transmit rate for the 802. Transmit Rate. The AP-2000 device will scan the area for other AP-2000 devices and select a free or relatively unused communication channel. By default this feature is enabled. Range is 2347 (on). Deferred Traffic Indicator Map (DTIM) is used with clients that use power management. Others are unique to each card type. 3. or Auto Fallback. This helps prevent interference problems and increases the performance of the network.11b cards.Change your Wireless Interface Settings Disable Link Integrity To disable Link Integrity check for all clients.11a card with the attached antenna adapter single 802.11a and 802. Choose between 6.11b card 802.11a card. Enter a Network Name for each PC Card.11a Wireless Interface Card Figure 2-11 – – 802. and should not be changed under normal circumstances. 4. 12. Some parameters are the same for 802. Frequency Channel. DTIM Period. 2. 36. 24. To disable Link Integrity check to a certain host computer. click on the Edit button in the Target IP Address Table and set the Status to Disable. Refer to Radio Specifications for details.11a Wireless Interface Options – – – – Network Name. 500 (off). Use the pull-down menu to select the desired card frequency. 48.11b cards (one in each slot) one 802. DTIM should be left at the default value. The Auto Fallback feature allows the AP-2000 unit to select the best transmit rate based on the cell size. 9. 54 Mbits/s. deselect the Enable Link Integrity check box. the configuration options will be different. This is the same name used on client machines to connect using the Client Manager software. Enable Auto Channel Select (ACS).11b card two 802. Ensure nearby devices do not use the same frequency. You can setup an AP-2000 unit using the following combinations of wireless cards: 1. 2-12 .11a card with attached antenna and one 802. 18. The Frequency Channels available will depend on the card type and the country of use.

This value is related to the Distance Between APs parameter (described previously). 5. This feature is only available for 802. Enable Auto Channel Select (ACS). 2. Distance between APs Multicast Rate Large Medium Small Minicell Microcell 1 and 2 Mbits/sec 1. 2. 5. Enter a Network Name for each PC Card. Multicast Rate. This feature is only available for 802. 2.11b wireless cards. By default this feature is enabled. Use the pull-down menu to select the desired card frequency.5 and 11 Mbits/sec 1. if you are setting up a Wireless Distribution System (WDS).5 and 11 Mbits/sec 1.Change your Wireless Interface Settings 802. Set to Large. Set the rate at which Multicast messages may be sent. In general. Distance Between APs. Ensure nearby devices do not use the same frequency.11b Wireless Interface Options – – – Network Name. The AP-2000 device will scan the area for other AP-2000 devices and select a free or relatively unused communication channel. it must be disabled. and 5. This is the same name used on client machines to connect using the Client Manager software. 5. Small. This helps prevent interference problems and increases the performance of the network. However.5 Mbits/sec 1. larger systems operate at a slower average rate. Refer to Radio Specifications for details. 2. Medium.11b wireless cards. Microcell or Minicell depending on the site survey for your system.11b Wireless Interface Card Figure 2-12 – – 802. The Frequency Channels available will depend on the card type and the country of use. Frequency Channel.5 and 11 Mbits/sec 2-13 . The distance value is related to the Multicast Rate (described next).

Enable this option if other electrical devices in the 2. while large cells suit most warehouses: Small Cell Physically accommodates few stations High cell bandwidth per station High transmit rate Large Cell Physically accommodates many stations Lower cell bandwidth per station Lower transmit rate 12. however. Disabling ACS 1. The channel range is set by the regulatory agency responsible for your geographic region. From the Web interface. Enable Load Balancing. 2. Enable Closed System. On changing the status you must reboot your AP-2000.78$& ! On changing the status you must reboot your AP-2000. select Configuration then click on the Interfaces tab.78$& ! 12. select Configuration then click on the Interfaces tab. In contrast.11b wireless cards. The clients automatically sense the channel and will configure themselves to reassociate on the new channel. 2. 3. Auto Channel Select (ACS) Auto Channel Select (ACS) tests available channels and selects one according to its signal strength. Cells of different sizes have different capacities and therefore suit different applications. if you plan to use WDS setup then you must disable ACS.4 GHz range may be interfering with the wireless signal. Enable this option to automatically notify client stations of roaming thresholds for the nearby APs. a typical office has many stations requiring high bandwidth and transmit rates for complex. This feature is only available for 802. signal strength). the AP-2000 device scans appropriate channels and selects the radio frequency channel with the best signal to noise ratio (i. high-speed data processing. Select a frequency channel from the drop-down menu. a typical warehouse has a few forklifts requiring low bandwidth and transmit rates for simple transactions. Check this box to allow only clients configured with your specific Network Names to access the AP-2000. For instance.11b wireless cards. This feature is only available for 802. 2-14 .11b wireless cards. Select the check box to Enable Auto Channel Select. Enable Medium Density Distribution. a client configured with the Network Name “ANY” can connect to the AP-2000. Enable this option so clients can evaluate which access point to associate with.. When disabled. This feature is only available for systems using two 802. which will disconnect all clients from the AP-2000. ACS is enabled by default. From the Web interface. which will disconnect all clients from the AP-2000. This feature is only available for 802. Distance Between APs Cells Distance Between APs defines how far apart (physically) your AP-2000 devices are located. Deselect the check box to disable Auto Channel Select.11b wireless cards.Change your Wireless Interface Settings – – – – Enable Interference Robustness. which in turn determines the size of your cell. based on current AP loads. which shows small cells suit most offices. to more evenly balance the load between APs. Enabling ACS 1. Cell capacities are compared in the following table. Using a probe.e.

Change your Wireless Interface Settings Coverage The number of access point units in a set area determines the network coverage for that area. smalls cells may have a ten foot (10’) diameter and an AP-2000 device every twenty feet (20’). The Site Survey is contained on the Installation CD included in your kit. considered low density. select the Network > Interfaces tab. 12. even though in both cases the actual area did not change. large cells in a typical warehouse may have a ninety foot (90’) diameter and an AP-2000 unit every two hundred feet (200’). Use the drop-down menu to set the Multicast rate for the appropriate card.78$& ! The distance between APs should not be approximated. Ultra High Density Network Set the Distance Between APs 1. It is calculated by means of a manual Site Survey. Minicell. Small.The AP-2000 recognizes the following five values for the Distance Between APs parameter (configurable for each Wireless NIC): Large. Medium.only the number of access points covering the area changed. or even a single unit covering the same small area would result in a low-density cell. which would be considered high density. and local limits such as physical interference are investigated. From the Web interface. in which an AP-2000 unit is set up and clients are tested throughout the area to determine signal strength and coverage. Figure 2-13 Low Density vs. Select the desired Wireless Slot tab. click on the Configure button. 3. and the optimum distance between APs is calculated to suit your particular business requirements. 2. 2-15 . In a typical office. and Microcell. In contrast. From these measurements the appropriate cell size and density is determined. A great number of access point units covering a small area would be a high-density cell. Few access point units.

In addition. because when you select the Distance Between APs. Select the Wireless .Slot A or Wireless . In general. 3. (721 Large Medium Small Minicell Microcell There is an inter-dependent relationship between the Distance between APs and the Multicast Rate.Change your Wireless Interface Settings Multicast Rate The multicast rate measures how quickly information is transmitted across your network.5 Mbits/s 11 Mbits/s (721 The Distance Between APs must be set before the Multicast Rate. a small cell with several stations located close to the AP-2000 unit can actually transmit information faster than a larger cell with only a few stations located farther from the AP-2000 device.The variation between Multicast Rate and Distance Between APs is presented in the following table: 1. the appropriate range of Multicast values automatically populates the drop down menu.0 Mbits/s yes yes yes yes yes yes yes yes yes yes yes yes 5. From the Web interface. 2-16 . click on the Configure button.11b card is installed. This rate is approximated for a cell. Use the drop down menu to select a Multicast rate.0 Mbit/s yes yes yes yes yes 2. Stations closer to an AP actually have higher multicast rates than stations in the same cell that are located farther from the AP. and select the Network > Interfaces tabs.Slot B tab depending on where your 802. 2. larger systems operate at a lower average transmit rate. 11 Mbits/s 1 Mbit/s Figure 2-14 1 Mbits/s and 11 Mbits/s Multicast Rates Set the Multicast Rate 1. since physical proximity to the AP increases throughput.

Choose between: 10 Mbit/s . or auto duplex auto speed .auto duplex Configure your Management Interfaces Select which interfaces will be available through the Wireless. Ethernet. Figure 2-16 Management Interface Settings 2-17 . Select the desired speed and transmission mode from the pull down menu. or auto duplex 100 Mbit/s . The recommended setting is auto-speed-auto-duplex.Ethernet Settings Ethernet Settings Set Ethernet Speed and Transmission Mode Figure 2-15 Ethernet Interface Configuration. full duplex. and Serial Port interfaces of the AP-2000 unit.half duplex.half duplex auto speed .half duplex. full-duplex allows both sides to transmit. Half-duplex means that only one side can broadcast at a time. full duplex. while auto-duplex selects the best transmission mode for the given configuration.

WEP encryption. select which physical interface(s) can be used to manage the AP-2000 device using the HTTP management interface. Other Security Configuration Settings Control access to the AP-2000 device using MAC Address authentication. 9600. or 57600. Select either None (default) or Xon/Xoff (software controlled) data flow control. Flow Control. Security Configuration Screen . 19200. leave the setting Flow Control to its default value (none) unless you are sure what this setting should be. You can set the following parameters as needed: – – Baud Rate. Figure 2-17 (721 To avoid unexpected performance of your AP-2000. Select the serial port speed (bits per second). the default Baud Rate is 9600. 4800. Configure Serial Port Interface Settings The serial port interface on the AP-2000 device is enabled at all times.MAC Authentication 2-18 .Other Security Configuration Settings Set HTTP Interface Management Services From the drop-down menu. 38400. or 802. Default is 80. Choose between: — — — — — Disabled (all interfaces) Ethernet only enabled Wireless A only enabled Wireless B only enabled All Interfaces enabled Enter the HTTP communication port number.1x security settings. Choose between 2400.

Enter the time. Entries are automatically enabled. Select the MAC Address you want to disable or delete. You must specify information for at least the Primary RADIUS server. you can use this tab to define the IP Address of the server that contains a central list of MAC Address values that identify the authorized stations that may access the wireless network. Click OK. Operation Type. Destination Port. Enter the MAC Address of the client station authorized to manage this AP-2000 device. Click the Edit button in the MAC Access Control Table. Check this box to enable the Control Table. each client session may be active before being automatically re-authenticated. Click the Add button in the MAC Access Control table. 2. 3. Deselect the check box to prevent use of the RADIUS server. 3. Range is 900 . Response time (seconds).Other Security Configuration Settings Configure your MAC (Address) Access Control Table The MAC Authentication tab allows you to build a list of stations. 2. you may prefer to maintain this list on a centralized location using the RADIUS Authentication Settings. Click in the desired check box to enable the RADIUS Server. Enable the Primary or Backup RADIUS Server. Add an Entry to the MAC Access Control Table 1. 2-19 . IP Address. – – Enable MAC Access Control. RADIUS Authentication Settings Also. Problems with RADIUS Server configuration or RADIUS Authentication should be referred to the RADIUS Server developer. if your network includes a RADIUS Server. Click inside the check box to provide authentication by the RADIUS server. Shared Secret. – – – – – – – – Enable RADIUS MAC Access Control Status. in seconds. Authorization Lifetime (seconds). Maximum Retransmissions. identified by their MAC addresses. default is 900 sec. Add a comment as needed. The list is stored inside each AP-2000 within your network. The Backup RADIUS server is optional. authorized to access the AP-2000 device within your network. (721 (721 For larger networks that include multiple AP-2000 devices. This determines how the stations identified in the MAC Access Control Table are filtered. Disable or Delete an Entry in the MAC Access Control Table 1.43200 sec. The password for the user on the RADIUS Server must be the same as the Shared Secret. Choose between Passthru and Block.

1x Security Mode or Mixed mode (802.1x and WEP).RADIUS Authentication IEEE 802. A port in the context of IEEE 802. Data traffic is always encrypted with a WEP key that the client PC receives after it has been authenticated. Initially the unauthenticated client PC cannot send any data traffic through the AP-2000 device to other systems on the LAN.1x messages in the clear with the AP-2000 unit 2-20 . Regardless of its authentication status. supplicant (client PC) authenticator (Access Point) authentication server (RADIUS server) When using 802. 2.Other Security Configuration Settings Figure 2-18 Security Configuration Screen .1x is a proposed standard that provides a means to authenticate and authorize network devices attached to a LAN port. The standard refers to them as: 1. The AP-2000 device inhibits all data traffic from a particular client PC until the client PC is authenticated.1x Security Mode IEEE 802. either a LAN jack for the case of a desktop PC.1x is a point of attachment to the LAN. Authentication Process There are three main components in the authentication process. a client PC can always exchange 802. or a laptop PC association with an Access Point device. 3. you need to configure your Radius server for authentication purposes.

you will only use one key to encrypt data to be transmitted. WEP encryption is the wireless equivalent of the security level available through a wired network. since this mode creates keys dynamically.1x security mode. Messages sent from the client station are encapsulated by the AP-2000 device and transmitted to the RADIUS server using EAP extensions. you must first configure the RADIUS server to receive an authentication response. (721 Currently. Negotiations take place between the client PC and the RADIUS server.1x security mode only. In case of success. both the EAP-TLS and EAP-MD5 types are supported provided that the RADIUS server is also configured to support both types.1x Security Mode to none and make sure the Encryption status is set to disable for both wireless interface cards. the Encryption Key Length will be 40. Upon receiving a reply EAP packet from the RADIUS. only the EAP type of EAP-TLS (smart card or certificate) is supported when using 802. Select the 802. Click on the Encryption tab in the Security Configuration screen to set the 802. The AP-2000 software offers several methods for configuring security settings: Set the 802. The AP-2000 unit and the client PC exchange 802. In this procedure. the RADIUS server sends a per-session key to the AP-2000 device. You can specify up to four encryption keys between 5 and 12 alphanumeric characters depending on the key length supported by the PC Card in each slot. an Encryption Key entry is not required. and “Slot B” refers to PC Card B. Setting a fairly frequent rekey value (900 seconds=15 minutes) effectively protects against intrusion without disrupting network activities. the message is typically forwarded to the client PC. In Mixed mode. Depending on the card type.1x messages using an EAPOL protocol. \HNH5 [ GQD HGRP GH[L0 5. QRLWDFLWQHKWXD UHYUHV 68. QRLWS\UFQH 3(: GQD [ KWLZ HGRP GH[L0 4. With 802.1x Security Mode to none and enable the Encryption status for one or both wireless PC Cards.Other Security Configuration Settings The AP-2000 device acts as a pass-through device to facilitate communications between the client PC and the RADIUS server. In mixed mode.1x security mode. “Slot A” refers to PC Card A. Encryption Keys 2-4 are not required.or 128-bits. QRLWS\UFQH UR \WLUXFHV R1 1.65535 seconds. Operating System Windows 98 Windows 98SE Windows ME Windows 2000 Windows XP MD5 TLS TTLS When you decide to use the 802.'$5 VHULXTHU \WLUXFHV [ 3. Your computer operating system must also be configured to receive and send authenticated packets. Select the encryption key length from the drop-down menu. This will determine the number of characters allowed for each the Encryption Key. The rekey feature determines how often your encryption key is changed (the interval between changes) and can be set to any value between 60 . ODYUHWQ. However. VHFDIUHWQL VVHOHULZ KWRE UR HQR QR \OQR QRLWS\UFQH 3(: 2. after translating it back to the EAPOL format. 2-21 . rekeying frustrates hacking attempts without taxing system resources. Compared with re-authentication.1x security mode for the AP-2000 and/ or to set the over-the-air encryption properties for each wireless card.

If You Encounter Problems...

Setting Up the AP-2000 using 802.1x Security Mode
1. 2. 3. 4. 5. 6. 7. 8. 9. From the Web interface, select Security, then click on the Encryption tab. Set the 802.1x Security Mode to 802.1x and click OK. Ignore the reboot message - this can be done when the entire procedure is finished. Select the RADIUS Authentication tab. Enter the RADIUS server password in the Shared Secret and Confirm Shared Secret fields. Enable the Primary RADIUS server. Enter the IP Address for the Primary RADIUS server. Enter the Destination Port. The default is 1812, however your RADIUS server provider may have another communication port defined. Define the Response Time and Response Maximum Retransmission values. Reboot the AP-2000 device for these changes to take affect.

Figure 2-19

Security Configuration Screen - 802.1x Security Mode

802.1x Security and Wireless Distribution Systems
Wireless distribution systems are setup using specific ports on the AP-2000 unit and frequency channels in the wireless interface cards. To use 802.1x with WDS, you need to set the 802.1x Security Mode to Mixed (WEP and 802.1x), to make sure that the AP-2000 and the clients share the same encryption key (Key 1). IT managers can install AP-2000 access points with Wi-Fi radios and gradually migrate to the 802.11a radios without replacing their access points or client devices. As 802.11a radios become available, they can simply pop out one of the Wi-Fi radios from one of the dual slots and replace it with an 802.11a radio.

If You Encounter Problems...
Cannot Associate with a Network. When the Client Manager starts, it automatically looks for a network. If it cannot associate with a network, you will see a message reminding you to update the case-sensitive Network Name in the current Client Manager Configuration Profile.

Ask your network administrator for the correct Network Name, and then edit the profile by opening Client Manager. Select Actions -> Add/Edit Configuration Profile -> Edit Profile -> Basic. Enter the Network Name and then click OK. For more information, please refer to your PC Card documentation. If the Network Name is the same in both the client and the AP-2000 device, then verify the settings in the Security Properties table, which includes encryption settings. Other Errors. Systematically double-check the AP-2000 unit settings, especially the IP Addresses and the client IP Address Pool. For more information, please refer to Troubleshooting in this guide. 

(721

2-22

Managing the ORiNOCO AP-2000 device

3

In This Chapter
Management Interface Monitoring Network Statistics – View Hardware/Software Component Information – Monitoring ICMP Statistics – Monitoring IP/ARP Statistics – Monitoring Learn Table Statistics – Monitoring IAPP Statistics – Monitoring RADIUS Server Statistics – Monitoring Interfaces Statistics – Monitoring Remote Link Test Statistics Issuing System Commands – Download – Upload – Reboot – Reset – Help Link

Management Interface
Once you have a valid AP-2000 IP Address and an Ethernet connection, you may use your web browser to issue commands and monitor network statistics. The Command Line Interface (CLI) also provides a method for issuing commands and viewing network statistics using Telnet and Terminal clients. This section covers only use of the HTTP Interface. For more information about issuing commands and viewing network statistics with the CLI, refer to Using the Command Line Interface.

3-1

Management Interface

1

2

Figure 3-1

Login to HTTP Interface

1. Open your browser and enter the IP Address in the address bar. Press the ENTER key. Result: The AP-2000 Login screen appears.

Leave the User Name field empty 2. Enter your password in the Password field (default is “public”). 3. Each section of the System Status screen provides the following information. – System Status. This area provides system level information, including the AP-2000 IP Address and contact information. – System Traps. System traps (if any) appear in this area. Each trap identifies a specific severity level. 

(721

3-2

With this information. Result: The Monitor screen appears. your Technical Support representative can verify compatibility issues and make sure the latest software and drivers are loaded. 3-3 .Monitoring Network Statistics Monitoring Network Statistics To observe the AP-2000 network statistics. Each tab contains information for monitoring specific statistics. The list displayed provides you with information that may be pertinent when calling Technical Support. click on the Monitor button and select the Version tab. Figure 3-2 Monitor Screen View Hardware/Software Component Information Figure 3-3 Hardware/Software Component Information From the HTTP interface. click the Monitor button.

which relates MAC Address and IP Addresses. 3-4 . Not all network traffic is counted in ICMP statistics.Monitoring Network Statistics Monitoring ICMP Statistics This tab provides message related information for both received and transmitted messages directed to the AP-2000 device. Monitoring IP/ARP Statistics This tab provides information based on the Address Resolution Protocol (ARP).

Monitoring IAPP Statistics This tab displays statistics relating to client handovers and communications between Access Points. Monitoring RADIUS Server Statistics This tab provides RADIUS authentication information for both the Primary and Backup RADIUS servers. There can be up 2000 entries in the Learn Table. (721 RADIUS authentication must be enabled for this information to be valid. the MAC Address and interface number.Monitoring Network Statistics Monitoring Learn Table Statistics This tab displays information relating to network bridging. 3-5 . specifically.

11b) clients. as well as each PC Card interface. 3-6 . The Operational Status can be: 1 = up. 3 = testing.4 GHz (802.Monitoring Network Statistics Monitoring Interfaces Statistics This tab displays information for the Ethernet interface. Monitoring Remote Link Test Statistics This tab displays information on the quality of the wireless link to clients and other AP-2000 units in the Wireless Distribution System. (721 The Remote Link Test feature is only available for 2. 2 = down.

then the Refresh button. To test the link quality. and the Signal to Noise Ratio (SNR). Each tab allows a specific operation. click Explore. Noise strength. 3-7 . click on the Commands operation button.Issuing System Commands To find wireless clients connected to the AP-2000 device. Result: The Commands screen appears. Quality is measured in terms of Signal strength. Issuing System Commands To issue commands. and then click Link Test. select a station.

The default AP Image is located at C:/Program Files/ORiNOCO/AP/. File Type. Copy the updated AP Image file to the shared TFTP server folder. such as System Name. and follow the directions given to complete the installation. Choices include: – Config for configuration information. Enter the name of the file to be downloaded. – Img for the AP Image (executable program).exe”. File Name.Download Use the Download tab to download Configuration.Issuing System Commands Download Figure 3-4 Commands Screen . – BspBl for the Bootloader software. – – – 3-8 . Select the proper file type. Select either Download. AP Image. Note: This is the IP address that will be used to point the Access Point to the AP Image file. File Operation. Double-click on the TFTP server icon on your desktop and locate the IP address assigned to the TFTP server. and Bootloader files to the AP-2000. and so on. A TFTP server must be running and configured to point to the directory containing the file. The Download tab shows version information and allows you to enter TFTP information as described below. Enter the TFTP server IP Address. – Server IP Address. Select the “Xtras/ SolarWinds” sub-directory. or Download & Reboot. Contact Name. double-click “OEM-TFTP-Server. install the TFTP server from the CD. If you don’t have a TFTP server installed on your system. You should reboot the AP-2000 after downloading files.

Issuing System Commands

Upload

Use the Upload tab to upload Configuration files from the AP-2000. The TFTP server must be running, and configured to point to the directory that is to contain the uploaded file. We suggest you assign the file a meaningful name, which may include version or location information. If you don’t have a TFTP server installed on your system, install the TFTP server from the CD. Select the “Xtras/ SolarWinds” sub-directory, double-click “OEM-TFTP-Server.exe”, and follow the directions given to complete the installation. –
Server IP Address. Enter the TFTP server IP Address. Double-click on the TFTP server icon on your desktop and locate the IP address assigned to the TFTP server. Note: This is the IP address that will be used to point the Access Point to the AP Image file. File Name. Enter the name of the file to be uploaded. Copy the updated AP Image file to the shared TFTP server folder. The default AP Image is located at C:/Program Files/ORiNOCO/AP/. File Type. Select Config. File Operation. Select Upload.

– –

Reboot

Use the Reboot tab to save configuration changes (if any) and reset the AP-2000. Entering a value of 0 (zero) seconds causes an immediate reboot. Note that Reset, covered below, does not save configuration changes.

3-9

Issuing System Commands

Reset

Use the Reset tab to restore the AP-2000 to factory default conditions. The AP-2000 may also be reset from the RESET button on indicator side of the unit. Since this will reset the current AP-2000 IP Address, a new IP Address must be assigned. Also refer to Recovery Procedures.

Help Link

To open Help, click the Help button on any display screen. During initialization, the AP-2000 on-line help files are downloaded to the default location: C:\Program Files\ORiNOCO\AP\Help###BOT_TEXT###lt;language>\. The ORiNOCO AP-2000 Help information is available in Ebglish, French, German, Italian, Spanish, and Japanese. If you want to place these files on a shared drive, copy the Help Folder to the new location, and then specify the new path in the Help Link box.

3-10

Configuring Advanced Features

4

In This Chapter
Some of the more complex networking configurations are described in this chapter:
• • •

Network Settings Advanced DHCP Server Configuration DHCP IP Pool Table Settings Link Integrity Settings

Set parameters for DHCP server including the IP Pool table. Configure Link Integrity settings and Target IP Address table.

VLAN Support Setup a VLAN network. • Typical VLAN Configurations • VLAN Workgroups and Traffic Management • Typical User VLAN Configurations • Typical VLAN Management ID Configuration Scenarios Management Settings • Setting New Passwords • Managing IP Access • Configuring Management Service Interfaces Setting Filters • Setting the Ethernet Protocol Filter • Advanced Filtering Alarms (SNMP Traps) • Alarm (Trap) Groups • Alarm Host Table Bridge Configuration Settings • Spanning Tree Protocol • Broadcast Storms and Storm Thresholds Wireless Distribution System (WDS) • WDS Setup Procedure • Wireless Port Mapping Advanced Security Settings • Wireless Security - EAP Overview • MAC Access • RADIUS Authentication Tab
Configure system management settings such as passwords, management IP Access table, and services’ parameters (SNMP, Telnet, HTTP, Serial).

Set AP-2000 device filters including Ethernet filters, Static MAC address filters, and other advanced filters.

Set alarms (SNMP Traps) including enabling alarm groups and the alarm host table.

Setup the AP-2000 device as a simple bridge or a wireless repeater, setup loop avoidance through the Spanning Tree protocol and Storm Threshold protection. Establish point-to-point connections with other access points (the wireless backbone).

Configure advanced security settings including MAC access control, RADIUS MAC access control, RADIUS servers, and 802.1x parameters.

4-1

Read-only value of the AP-2000 mask. Secondary DNS IP Address. Edit the information. Select Enable to allow the AP-2000 to assign clients IP Addresses from IP Pool Tables. Enter the Domain Name Server IP Address. Enter the default Gateway IP Address. Shows enabled/disabled status. and then specify the start and end IP Address. Gateway IP Address. Status. or select Enable. Create IP Pool Tables by specifying a Start IP Address and an End IP Address. or Delete from the Status pull-down menu. 4-2 . Enter the starting IP Address for this IP Pool Table. Disable. – – – – IP Mask. – – – – Start IP Address. – DHCP Server Status. To edit or delete an entry. click Add.Network Settings Network Settings Advanced DHCP Server Configuration Configure DHCP to provide dynamic client IP Addresses from one or more IP Pool Tables. Enter the Domain Name Server IP Address. (721 You must have at least one entry in the DHCP Server IP Address Pool table before you can enable the DHCP Server feature. End IP Address. Enter related information. Select Disable to prevent client IP Address assignment from the AP-2000. Comment. Primary DNS IP Address. Enter the ending IP Address for this IP Pool Table. click Edit. DHCP IP Pool Table Settings To add an entry.

Disable. – – – Target IP Address. and then specify the IP Address of the servers you want to check. Poll Retransmissions. or Delete from the Status pulldown menu. Edit the information. Enter the IP Address Comments. for example. click Edit. Poll Interval. Target IP Address Table Settings To add an Target IP Address entry. Shows enabled/disabled status. when the network server is being serviced.Network Settings Link Integrity Settings This feature checks the link between the AP-2000 and connected network server(s). A disabled status only means that the AP-2000 is not checking the link. 4-3 . Set the number of times a poll should be retransmitted before the link is considered down. – – – Link Integrity Status. Set the interval (minimum 500ms and in increments of 500ms) between polls. To edit or delete an entry. Select Enable to activate the Link Integrity feature. Enter related information. Status. If the link goes down then the client will connect to another AP-2000 in your network that still communicates with the server. click Add. or select Enable.

extending the network over a larger area. 3. VLAN resources appear (to clients) to be in the same room. 7. Before enabling VLAN support. a RADIUS server. efficiently. Resources like servers and printers may be present. Once enabled. VLANs are used to more conveniently. Manage adds. and a hub may include multiple APs. 5. however. They simplify traffic flow between clients and their frequently-used or restricted resources. no matter where they are attached on the physical LAN segment.VLAN Support VLAN Support Virtual Local Area Networks (VLANs) are logical groupings of network resources. 2. 6. AP-2000 devices are fully VLAN-ready. Figure 4-1 1. and easily manage your network. VLANs now extend as far as the access point signal reaches. Components of a typical VLAN VLAN-enabled access point VLAN-aware switch (IEEE 802. 4. The broadcast area is defined by the network name configured for the wireless card on the access point device. Web interface or CLI) DHCP Server RADIUS Server VLAN 1 (Wireless Card A) VLAN 2 (Wireless Card B) 4-4 . a RADIUS server authenticates traffic and a DHCP server manages IP addresses.1Q uplink) AP-2000 management via wired host (SNMP. and possibly a DHCP server should be available. moves. by default VLAN support is disabled. An Ethernet port on the access point typically connects a wireless cell to a wired backbone. clients can connect from anywhere in the broadcast area. and network resources such as a VLAN-aware switch. Defined by software settings. and changes from a single point of contact Define and monitor groups Reduce broadcast and multicast traffic to unnecessary destinations – Improve network performance and reduce latency Increase security – Secure network restricts members to resources on their own workgroup – Clients roam without compromising security Typical VLAN Configurations VLANs collect and distribute data through wireless AP-2000 network interface cards (NIC). They communicate across a VLAN-capable switch that reviews packet headers and directs traffic to the appropriate ports. certain network settings should be configured. On the wired network.

VLAN-capable AP-2000 device is designed to efficiently manage delivery of broadcast. each one of the wireless NICs in the AP-2000 device is configured with a unique network name and an 802. This eliminates unnecessary traffic on the wireless LAN. which enable you to limit broadcast and multicast traffic. VLAN ID for Wireless NIC in Slot A = a number between 1 and 4094 (per the IEEE 802. conserving bandwidth and maximizing throughput. The AP-2000 device assigns clients to one of two VLANs designated by a network name. In comparison. Clients using the same physical network are limited to those resources available to their workgroup. dual-slot access point devices that are not VLAN-capable typically broadcast and multicast traffic on wireless Network Interface Cards (NICs). be restricted to a gateway that allowed access to only the Internet. To configure this scenario.1Q-compliant VLAN identifier. – – – Scenario 1: Setting Up Independent VLAN Workgroups (“Tagged” User VLANs) Scenario 2: Setting Up Independent VLAN Workgroups (Tagged & Untagged User VLANs) Scenario 3: Setting Up One VLAN Workgroup (One Tagged VLAN) Setting Up Independent VLAN Workgroups The AP-2000 tags all traffic received from wireless clients transmitted on either the wired or the wireless backbone (see description of Wireless Distribution System (WDS) feature in this User Guide) with a header identifying each packet as belonging to one VLAN workgroup. The AP-2000 device matches packets transmitted or received to a network name with the associated VLAN. the VLAN-capable AP-2000 device supports easy assignment of wireless users to workgroups. for example. Typical User VLAN Configurations VLANs segment network traffic into workgroups. for a GUEST workgroup. 4-5 . the dual-slot. This process wastes wireless bandwidth and degrades throughput performance. each user VLAN represents a workgroup. Each packet would then be identified as EMPLOYEE or GUEST. In a typical scenario. the AP-2000 device would assign every packet it accepted to a VLAN. The three primary scenarios for use of the VLAN support feature are detailed as follows. Each network client is then assigned one of the two wireless NIC network names. multicast. The AP-2000 device would insert VLAN headers or “tags” with identifiers into the packets transmitted on the wired backbone to a network switch. but would be prevented from accessing servers or hosts on the local corporate network. one VLAN could be used for an EMPLOYEE workgroup and the other. Packets from the GUEST workgroup transmitted on the same network as packets from the EMPLOYEE workgroup. Each NIC represents a VLAN. Workgroups enable clients from different VLANs to access different resources using the same network infrastructure.VLAN Support VLAN Workgroups and Traffic Management Traditional. set up two different workgroups with separate VLAN Identifiers (IDs). or another. Traffic Management In addition to enhancing wireless traffic management. In this scenario. depending on which wireless NIC received it. the switch would be configured to route packets from the EMPLOYEE workgroup to the appropriate corporate resources such as printers and servers. could. First. in contrast. Traffic received by a VLAN is only sent on the wireless NIC associated with that same VLAN. A member of the GUEST workgroup could send and receive e-mail and access the Internet.1Q standard) VLAN ID for Wireless NIC in Slot B = a number between 1 and 4094 (721 The number configured for the wireless NIC in Slot A must be different than the number configured for the wireless NIC in Slot B. and unicast traffic to wireless clients. Finally.

VLAN Support 1. A “tagged” user VLAN is created when a VLAN ID between 1 and 4094 (per the 802. 6. Click the Configure button at the left and select the Interfaces tab. To configure this scenario. 5. 2. 3. Set a unique VLAN User ID for each wireless NIC (enter a value between 1 and 4094) Set VLAN Status to Enable. An “untagged” User VLAN is created when a VLAN ID of 0 is configured for one of the wireless NICs and VLAN is enabled. Click OK. The AP-2000 applies a VLAN header to tag traffic from wireless clients (members of a “tagged” VLAN) and transmits the traffic as appropriate. Type in your password. Open your browser and enter the IP address of your access point. 7. 4-6 . “Untagged” User VLANs enable VLANs to coexist on networks with non-VLAN capable devices such as legacy servers. Configure the wireless client with one of the two Network Names based on VLAN membership. Select the Network > VLAN tab.1Q standard) is configured for one of the wireless NICs and VLAN is enabled. on either the wired or wireless backbone. on either the wired or wireless backbone.Traffic received from wireless clients (members of an “untagged” VLAN) is transmitted as appropriate. Setting Up Independent VLAN Workgroups The VLAN-capable AP-2000 supports configuration of both “tagged” and “untagged” user VLANs. 4. Enter a unique Network Name (SSID) for each wireless network interface card (NIC). set up only one workgroup by configuring one VLAN and untagged traffic: VLAN ID for Wireless NIC in Slot A = 0 or a number between 1 and 4094 VLAN ID for Wireless NIC in Slot B = 0 or a number between 1 and 4094 (721 Either the wireless NIC in Slot A or the wireless NIC in Slot B must be set to 0.

Configure the wireless client with one of the two Network Names based on VLAN membership. Enter a unique Network Name (SSID) for each NIC. Enter a unique Network Name (SSID) for each wireless network interface card (NIC). to be configured as members of the same VLAN.VLAN Support 1. 7. 2. set up one. Click OK. 6. Set the VLAN UserID for the NIC in Slot B to the same value configured for the NIC in Slot A. 4. 8. 4. Click OK. To configure this scenario. 8. 4-7 . Open your browser and enter the IP address of your access point. 3. Click the Configure button at the left and Select the Interfaces tab. All wireless clients become members of the same VLAN. Configure the wireless client with one of the two Network Names based on VLAN membership. 6. Set VLAN Status to Enable. Click the Configure button at the left and Select the Interfaces tab. In this scenario. 7. Set the VLAN UserID for one NIC to 0. The same VLAN header or tag is then applied to all traffic received from wireless clients and transmitted on the wired or wireless backbone. 5. Set VLAN status to Enable. 2. 3. Setting Up One VLAN Workgroup The VLAN feature enables all wireless clients that access the network through the same AP-2000. Select the Network > VLAN tab. each wireless NIC is configured with the same VLAN ID. Type in your password. Open your browser and enter the IP address of your access point. Type in your password. Set the VLAN User ID for the other NIC to a value between 1 and 4094. 5. Set the VLAN UserID for the NIC in Slot A to a value between 1 and 4094. Select the Network > VLAN tab. large workgroup: VLAN ID for Wireless NIC in Slot A = 0 or a number between 1 and 4094 VLAN ID for Wireless NIC in Slot B = 0 or a number between 1 and 4094 1.

Type in your password. then those wireless clients who are members of both VLANs will have AP-2000 management access. Open your browser and enter the IP address of your access point. 4. 1. Ensure your management platform or host is a member of the same VLAN before attempting to manage the AP-2000 device. 3. 7. Enter a unique Network Name (SSID) for each wireless NIC Select the Network > VLAN tab Set the VLAN UserID for the wireless NICs in Slot A and Slot B to values between 1 and 4094 Set the VLAN Management ID to a value equivalent to one of the VLAN UserIDs Set VLAN Status to Enable 12. 4. all members of the User VLAN will have management access to the AP-2000. Click the Configure button at the left and Select the Interfaces tab. 3. Click the Configure button at the left and Select the Network>VLAN tab Set the VLAN Management ID to a value between1 and 4094 (a value of 0 disables VLAN management). 5. Click OK. 6. Set VLAN Status to Enable. Click OK. Once a VLAN ManagementID is configured and is equivalent to one of the VLAN UserIDs on the AP-2000. Type in your password. 2. 2.78$& ! (721 If a non-zero management VLAN ID is configured then management access to the AP-2000 is restricted to wired or wireless hosts that are members of the same VLAN. 4-8 . If the VLAN ManagementID matches a VLAN UserID. Managing the AP-2000 from a Wireless Host The VLAN feature enables wireless clients to manage the AP-2000. Be careful to restrict VLAN membership to those with legitimate access to the AP-2000 device.VLAN Support Typical VLAN Management ID Configuration Scenarios Making the AP-2000 a VLAN Member to Control Management Access Management access to the AP-2000 can easily be secured by making management stations or hosts and the AP-2000 device itself members of a common VLAN. Simply configure a non-zero management VLAN ID and enable VLAN to restrict management of the AP-2000 device to members of the same VLAN. 1. Open your browser and enter the IP address of your access point.

Enter the password in both the Read Password field and the Confirm field. Confirm. including interface access passwords. HTTP (Web) Password. SNMP Read/Write Password. The default password is “public”. Enter each password in both the Read Password field and the Confirm field. and service timeouts. Confirm.Management Settings Management Settings Configure system management settings.” immediately. Select new passwords during initial configuration. The default password is “public”. Confirm. destination port numbers. 4-9 . (721 For security purposes we recommend changing ALL PASSWORDS from the default “public. Enter the password in both the Read Password field and the Confirm field. Confirm. The default password is “public”. The default password is “public”. Setting New Passwords – – – – SNPMP Read Password. Enter the password in both the Read Password field and the Confirm field. Telnet (CLI) Password.

(721 The IP mask 255. This parameter can also be used to Disable SNMP-based management. Enter a mask that will act as a filter to limit access to a range of IP Addresses. All Interfaces) from which you will manage the AP-2000 device via SNMP.Management Settings Managing IP Access The Management IP Access table is used to specify station(s) that is (are) authorized to manage the AP-2000 device through available management services (SNMP.255 would authorize the single station defined by the IP Address to configure the Access Point device. The Access Point device would ignore commands from any other IP address. click Add and set the following parameters: – – – IP Address. 4-10 . HTTP [Web]. Ethernet. the IP mask 255. Enter the IP Address for the management station.255. Wireless-A.255. IP Mask. Comment. In contrast.255. Configuring Management Service Interfaces SNMP-Based Management Interface Bitmask Configure the interface or interfaces (Disabled. Enter an optional comment such as the station name.0 would authorize anyone on the subnet shared by the IP Address to configure the Access Point device. Wireless-B. To configure this table.255. and Telnet [CLI]).

Ethernet. and other values. password. The default port number is 23. The AP-2000 terminates the session when it times out. This parameter can also be used to Disable telnet management. and session parameters as well as the number of Telnet sessions. Wireless A. Enter the Telnet Port. timeout. – Telnet Server Interface Bitmask. Telnet Port. Enter the number of seconds the system will wait for a login attempt. Login Idle Timeout (seconds). Enter the number of seconds the system will wait during a session while there is no activity.Setting Filters HTTP-Based Management Interface Bitmask Configure the HTTP port from which you will manage the AP-2000 device via Web interface. 4-11 . Wireless B. All Interfaces) from which you can manage the AP-2000 device via telnet. Reboot the AP-2000 for this setting to take effect. Select the interface(s) (Disabled. Telnet Configuration Settings Use the Services tab to set the Telnet port. – – – Setting Filters Setting protocol filters through the Ethernet protocol Filter and the Advanced Filtering interface can impact the performance of your network by limiting the amount of unnecessary traffic received from unsupported protocols. Session Idle Timeout (seconds). The AP-2000 will terminate the session on timeout. Various filters can be set up through the Static MAC Address Table to control the interaction between network devices and to control the types of protocol packets distributed by your network.

Proxy ARP answers ARP requests for wireless stations without actually forwarding the (broadcast) ARP request to the wireless network. Enter the protocol number. unless Disable is selected to prevent proxy ARP. you may enter additional filters by specifying th eappropriate parameters. only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge. Advanced Filtering – – – – Enable Proxy ARP. If Disable is selected. To add an entry. Ethernet Protocol Filtering Interface Bitmask. Select Enable. Enable IP/ARP Filtering. – – – Protocol Number. Enter the Network Mask IP Address. Select Enable to allow filtering. Enter the Network filtering IP Address. or Delete.Setting Filters Setting the Ethernet Protocol Filter Use the Ethernet Protocol tab to set filters – – – Enable Ethernet Filter Status If set to Disable then the Ethernet protocols listed in the Filter Table will be disabled. Ethernet. 4-12 . Wireless B. Filter Operation Type If set to Passthru. and then specify the Protocol Number and a protocol name in the Comment field. If set to Block. however. Select Enable to allow the Access Point to respond to Address Resolution Protocol (ARP) requests for wireless clients. or select Enable. or for each individual interface. click Edit and change the information. the bridge will block enabled Ethernet Protocols listed in the Filter Table. Configure the interface or interfaces (Disabled. This parameter can also be used to disable filtering. and All Interfaces) that will filter the Ethernet protocols you use. typically the protocol name. Disable. IP/ARP IP Mask. To edit or delete an entry. the Access Point will bridge ARP requests for wireless clients to the wireless LAN. Wireless A. or Delete from the Status pull-down menu. This can be set for all interfaces. Status. or Disable to prevent filtering. Enter related information. Ethernet Protocol Filter Table This table is pre-populated with existing Ethernet Protocol Filters. IP/ARP Filtering Address. click Add. Protocol Name. Disable.

the Ethernet-to-wireless direction. Select Enable or Disable to control this trap group. Refer also to System Alarms (Traps). To edit or delete an entry.78$& ! An error in configuring the IP Access Table entries may result in loss of management access to the AP-2000 device. Deny IPX RIP Deny IPX SAP Deny IPX LSP Deny IP Broadcasts Deny IP Multicasts Alarms (SNMP Traps) Alarm (Trap) Groups – – – – – – – Enable Configuration Alarms. Select Enable or Disable to control this trap group. Alarm Host Table To add an entry and enable the AP-2000 to send SNMP trap messages to a Trap Host. Password. Use the Status field to Enable or Disable the filter. Select Enable or Disable to control this trap group. Select Enable or Disable to control this trap group. Enable Flash Memory Alarms. or Delete from the Status pulldown menu. Enter the Trap Host IP Address. such as the alarm (trap) host station name. and then specify the IP Address and Password for the Trap Host. 4-13 . Enter an optional comment. or in both directions. Select Enable or Disable to control this trap group. Enable Image Alarms. Enable Security Alarms. Disable. Select Enable or Disable to control this trap group. Comment. or select Enable. If this occurs. click Add. click Edit. Confirm. Select Enable or Disable to control this trap group. Enter the password in the Password field and the Confirm field. Enable Operational Alarms. Enable Wireless Alarms. Enable TFTP Alarms. Edit the information.Alarms (SNMP Traps) The following advanced filtering protocols can filter in the wireless-to-Ethernet direction. – – – – – IP Address. 12. then the AP-2000 can only be managed from the serial (console) port.

the functions performed by the AP-2000 device include: — — — MAC address learning Forward and filtering decision making Spanning Tree protocol used for loop avoidance Figure 4-2 Simple Bridge Setup MAC Address Learning Once the AP-2000 unit is connected to your network.Bridge Configuration Settings Bridge Configuration Settings The AP-2000 device can be set up as a simple bridge between your wired and wireless network devices. 4-14 . you could deny traffic between two particular servers. to prevent redundant traffic from being transmitted over the wireless network. click on the Monitor button in the web interface and select the Learn Table tab. The AP-2000 device can learn up to two thousand entries. For example. identified by their MAC Address and their location as perceived by the AP-2000 (on the ‘wired’ or wireless’ port of the bridge). As a bridge. it learns which devices are connected to it by recording the MAC addresses of each device to which it sends packets during the course of a normal session. The filter is an advanced Bridge setup parameter for AP-2000 devices. It enables you to deny data traffic between two specific devices via the wireless interface(s) of the AP-2000 bridge. Static MAC Address Filter You can use the Static MAC Address filter to optimize the performance of a wireless (and wired) network. To view the Learn Table.

Wireless MAC Address. When the number of frames for a port or identified station exceeds the maximum value per second. (721 For more information on Spanning Tree protocol.Bridge Configuration Settings In most situations. redundant systems can cause Broadcast Storms. Wired MAC Addresses and their associated masks. Broadcast Storms and Storm Thresholds Storm Threshold is an advanced Bridge setup option that you can use to protect the network against data overload by: Specifying a maximum number of frames per second as received from a single network device (identified by its MAC address). Information Masks The MAC Address combines with the Bit Mask to create a filter. Enter the Wireless Mask value Comment. please see Section 8. Enter the Wired Mask value. Interface 3 Threshold Enter the maximum allowed number of packets per second. Wired Mask. avoiding loops and following a spanning tree structure. it is easier to control redundant traffic via other filtering options. Enter the device MAC Address.1d standard. the AP-2000 will ignore all subsequent messages issued by the particular network device. 4-15 . Enter related information. Complex network structures can create multiple loops within a network. Enter the maximum allowed number of packets per second. – – – – – Wired MAC Address. such as Protocol Filtering. all MAC Addresses starting with 00 02 10 12 are filtered. Wireless Mask. The ‘Storm Threshold’ parameters allow you to specify a set of thresholds for each port of the AP-2000. Bridges do not have any inherent mechanism to avoid loops. Interface 1 Threshold Enter the maximum allowed number of packets per second. identifying separate values for the number of broadcast messages/second and Multicast messages/second. Interface 2 Threshold Enter the maximum allowed number of packets per second. The Spanning Tree configuration blocks certain ports on AP-2000 devices to control the path of communication within the network. or ignore all messages of that type. Spanning Tree Protocol A Spanning Tree is used to avoid redundant communication loops in networks with multiple bridging devices. and wireless MAC Addresses and their associated masks are known generically as “information masks” and are written in the following format: MAC Address: Bit Mask: 00 02 10 12 34 56 FF FF FF FF 00 00 In this example. Specifying an absolute maximum number of messages per port. because having redundant systems is a necessity is certain networks. However. Enter the device MAC Address. however.0 of the IEEE 802. – – – – Address Threshold. multiple frame copies and MAC address table instability problems.

2.Wireless Distribution System Wireless Distribution System Figure 4-3 Traffic flow between AP-2000 devices with WDS Each wireless card can support up to six WDS links . To setup a wireless backbone follow the steps below for each AP-2000 that you wish to include in the wireless distribution system. WDS Ports for Wireless Card B SNMP Configuration Issues WDS ports states in the bridge/spanning tree can be controlled from two places: 802. 1. 4-16 . the WDS port remains disabled No two partner MAC address should be the same for WDS ports on the same card Channel settings on the cards should be the same WDS Setup Procedure The Wireless Distribution System (WDS) allows you to set up a wireless backbone between AP-2000 devices. (721 WDS and ACS cannot be Enabled at the same time on the same card.each link is mapped to a logical port on the bridge (WDS ports) If you are only using one card. WDS ports for Wireless Card A 9. Write down the MAC Address of the PC Card inside that slot (this value is printed on a label on the back of the PC Card).Bridge learns on WDS/Ethernet ports from frames AP-2000 Ports: 1. always place it in Slot A All WDS ports behave like Ethernet ports do on the bridge All BSS ports are handled differently than Ethernet/WDS ports Bridge learns on BSS ports by association .11 MIB WDS table Bridge MIB port table Spanning tree determines the port states if WDS configurations are correct If there is no partner MAC address configured i the WDS table. Write down the PC Card slot number (A or B) of the AP-2000 device that you wish to setup for the wireless backbone link. BSS Port (Wireless Card A) 3-8. BSS Port (Wireless Card B) 10-15. Ethernet Port 2.

The AP-2000 unit will need to be rebooted for the changes to take affect. Using wireless cards. In the Web Interface.Wireless Distribution System 3. WDS allows you to configure up to six (6) point-to-point links between Access Point devices. Click on the Add or Edit button to update the WDS Table. Select a key length from the pull-down menu. Wireless Distribution System (WDS) is a wireless method of configuring a network backbone. 6. In the HTTP Interface. Enter the MAC Address that you registered in Step 2 in the Partner MAC Address field of the Wireless Distribution Setup window. 3. to the MAC address of the wireless card you configure. and functions much like Ethernet. Click OK. Wireless Port Mapping The following information details the wireless port mapping for the AP-2000 device when using the Spanning Tree. but you need to specify which key to use for encryption. Set the Status for the device to Enable. Wireless Port Map to Wired Ethernet Card A .Association of Clients WDS -Card B -Port 1 WDS -Card B -Port 2 WDS -Card B -Port 3 WDS -Card B -Port 4 WDS -Card B -Port 5 WDS -Card B -Port 6 4-17 . (721 (721 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Make sure that your client cards are setup with the same encryption method. via point-to-point link. In the 802. When configuring a WDS link. set the AP-2000 unit in mixed mode and give each card the same encryption key 1 as described hereafter. Setup the 802. you must first configure the MAC address of the wireless card to which the wireless link will be established. or they will not be able to communicate with the AP-2000 device. 1. 4. A 40-bit card has a key length of 5 alphanumeric characters. 5. Data transmitted on the WDS port goes directly.1x and WEP) from the pull-down menu. 4.1x security mode. you need a way to map the paths from WDS ports to mutually exclusive wireless port designations for Spanning Tree. while a 128-bit card has a key length of 13 characters. click on the Configure button and select the Security tab.Association of Clients WDS -Card A -Port 1 WDS -Card A -Port 2 WDS -Card A -Port 3 WDS -Card A -Port 4 WDS -Card A -Port 5 WDS -Card A -Port 6 Card B . select Mixed (802. 5. Encryption keys will be generated automatically. 2. 6. Since six (6) WDS ports can be configured for each card.1x Security Mode Wireless Distribution System If you want to set up a Wireless Distribution System (WDS) with 802. click on the Configure button and select the Wireless Slot tab that matches the slot value you registered in Step 1 above.1x Security Mode field.

These authorized stations will be identified by the unique MAC Address of their wireless interface. can easily be added to the access point device. 4-18 .EAP Overview 802. A dedicated wireless AP-2000 unit should be configured with Slot A and Slot B of the AP-2000 device wireless distribution link. which. and supports dynamic WEP keys for enhanced security. EAP currently supports three authentication methods: EAP-Message Digest 5 (MD5) EAP-Transport Layer Security (TLS) EAP-Tunneled Transport Layer Security (TTLS) EAP-MD5 is a user name and password base method. Two wired AP-2000 units should be configured so that one slot partners with the Wireless WDS partner. This AP-2000 unit should not be connected to a wired interface. Please note: A slot may repeat up to six wired links. Additional Information: The AP-2000 unit should only allow client associations on those channels and network names that are configured for a WDS link. you may wish to create a list of authorized wireless computers that have access to the wireless network.Advanced Security Settings Configuring the AP-2000 Unit as a Wireless Repeater This configuration requires at least 3 AP-2000 devices. Two options facilitate this type of authentication: — — MAC Access RADIUS Authentication Tab Wireless Security .1x uses the Extensible Authentication Protocol (EAP) as a standards-based authentication framework. Using WDS as a repeater This configuration requires at least two AP-2000 devices. EAP-TTLS is a username and password-based method that requires download of a certificate to the access point device. Two wired AP-2000 units should be configured so that one slot partners on the other. Additional Information: The AP-2000 should only allow client associations Advanced Security Settings To enhance wireless security. The EAP-based authentication framework can easily be upgraded to keep pace with future EAP types. Result: The wireless AP-2000 unit functions as a repeater. EAP-TLS requires the use of certificates on both the access point and the client.

you may prefer to maintain this list on a centralized location using a RADIUS Server. or select Enable. The Backup RADIUS server is optional. click Add.Advanced Security Settings MAC Access The MAC Authentication tab allows you to build a list of authorized stations that will be stored inside each AP-2000 within your network. click Edit. and then specify the MAC Address and related comment. Select Passthru to permit access by only the devices specified in the MAC Access Control Table. This only takes effect when the MAC Access Control Status is enabled. Disable. Operation Type. Problems with RADIUS Server configuration or RADIUS Authentication should be referred to the RADIUS Server developer. Comment. Enter related information such as the device name or location. (721 (721 For larger networks that include multiple AP-2000 devices. Enter the MAC Address of the device. or select Disable to turn off the MAC Address authentication feature. you can use this tab to define the IP Address of the server that contains a central list of MAC Address values that identify the authorized stations that may access the wireless network. Edit the information. 4-19 . – – MAC Address. or Delete from the Status pulldown menu. MAC Access Control Table To add an entry. – – Enable MAC Access Control . In contrast. You must specify information for at least the Primary RADIUS server. RADIUS Authentication Tab If your network includes a RADIUS Server. select Block to prevent access by devices listed in the MAC Access Control Table. To edit or delete an entry. Click to check the boxSelect Enable to allow MAC Address authentication.

IP Address. Enter the maximum time. using the following format: 00601D . Shared Secret. each client session may be active before being automatically re-authenticated.Advanced Security Settings – – Enable RADIUS MAC Access Control . Default value is 900 seconds. Enter the maximum number of times an authentication may be retransmitted. The password for the user on the RADIUS Server must be the same as the Shared Secret. Destination Port. Enter the password in both fields. Maximum Retransmissions. Enable Secondary RADIUS Server. in seconds. The default value is 1812. to wait for RADIUS to respond with authentication status. 4-20 . The AP-2000 will send the client MAC Address to the RADIUS Server as the “User Name”. That is. Click to select the box to provide authenbtication by the RADIUS server. then the remaining six characters separated by a dash. Enter the time. the first six characters – – – – of the MAC Address. in seconds. Click to select this box in order to enable the Primary RADIUS Server. Authorization Lifetime (seconds).123456. Enter the RADIUS Authentication port. Click to clear the box or leave the box empty to prevent use of the RADIUS server. Enter the IP Address of the RADIUS server. Response Time (seconds). RADIUS Server – – – Enable Primary RADIUS Server. Click to select this box in order to enable the Secondary RADIUS Server. Confirm Shared Secret.

Telnet.Troubleshooting 5 In This Chapter Troubleshooting Concepts Symptoms and Solutions Connectivity Issues AP-2000 Unit Will Not Boot .Cannot Connect to Internet VLAN Operation Issues Active Ethernet The AP-2000 Unit Does Not Work There Is No Data Link “Overload” Indications Recovery Procedures Reset to Factory Default Procedure Forced Reload Procedure Initialize the AP-2000 using the Bootloader CLI Setting IP Address using Serial Port and Normal CLI System Alarms (Traps) Security Alarms Wireless Interface Card Alarms Operational Alarms FLASH Memory Alarms TFTP Alarms Image Alarms Standard MIB-II (RFC 1213) Alarms Bridge MIB (RFC 1493) Alarms Related Applications RADIUS Authentication Server TFTP Server LED Indicators 5-1 . or SNMP Password Client Computer Cannot Connect AP-2000 Has Incorrect IP Address HTTP (browser) or Telnet Interface Does Not Work HTML Help Files Do Not Appear Telnet CLI Does Not Work TFTP Server Does Not Work Client Connection Problems Client Manager Finds No Connection Client PC Card Does Not Work Intermittent Loss of Connection Client Does Not Receive an IP Address .No LED Activity Serial Link Does Not Work Ethernet Link Does Not Work Basic Software Setup and Configuration Problems Lost AP-2000.

These files include the AP-2000 Image (executable program) and configuration files. If all else fails… The Forced Reload Procedure erases the current AP-2000 Image and sets the unit to factory default values. 2. Parity: None. If the AP-2000 responds to the Ping.1. Data bits: 8. If you are having trouble locating your AP-2000 on the network. then the Ethernet Interface is working properly.No LED Activity 1. Flow Control: None. Serial communications program (such as HyperTerminal). If you connect the AP-2000 unit to a network with an active DHCP server. Refer to the “Documenting Your Configuration” section Factory default units are set for “Dynamic” (DHCP) IP Address assignment. AP-2000 Supports a Command Line Interface (CLI). for CLI command syntax and parameter names.). For example. 2. Make sure all cables are connected to the AP-2000 unit correctly. you will need to reset to default values. If the AP-2000 password is lost or forgotten.0. (721 This section helps you locate problems related to the AP-2000 device setup. foiled. Telnet applications or web browsers. you can use the “Ping” command over Ethernet to test the IP Address. For details about RADIUS. connect to the unit directly using the serial interface and refer Using the Command Line Interface.0. etc. Stop bits: 1. The Trivial File Transfer Protocol (TFTP) provides a means to download and upload files.) Ethernet Link Does Not Work 1. 3. If a DHCP server is not active on your subnet. Double-check the physical network connections. Once you have the AP-2000 IP Address. please refer to their respective documentation. – Line Feeds with Carriage Returns (In HyperTerminal select: File -> Properties -> Settings -> ASCII Setup -> Send Line Ends with Line Feeds. The Reset to Factory Default Procedure resets configuration. but does not change the current AP Image. Use a known-good unit to Make sure the network connection is present. then use ScanTool to locate the IP Address of your unit. 5-2 . Perform network infrastructure troubleshooting (check switches. Double-check the physical network connections. COM2. Symptoms and Solutions Connectivity Issues Connectivity issues include any issues that prevent you from powering up or connecting to the AP-2000 device. TFTP. Make sure you are using the proper serial port cable. With Active Ethernet. make sure you are using a Category 5. Then you can download a new image and configure the unit. Make sure your PC terminal program (such as HyperTerminal) is active and configured to the following values: – Com Port: (COM1. – Baud rate: 9600. you must have valid IP Addresses for both the AP-2000 device and the TFTP server before you can transfer files over Ethernet. twisted pair cable to power the AP-2000 unit. depending on your computer). etc. AP-2000 Unit Will Not Boot .Troubleshooting Concepts Troubleshooting Concepts The following list identifies important troubleshooting concepts and topics. The most common initialization and installation problems relate to IP Addressing. 2. routers. Serial Link Does Not Work 1. Make sure your power source is operating. IP Address management is fundamental. then the ScanTool can be used to configure your AP-2000. The default IP Address for the AP-2000 is 10. 3.

If there is a DHCP Server on the same subnet. For example the ORiNOCO Client Manager software allows you to store Network Names in configuration profiles. 2. To find the current IP Address using DHCP. Once the IP Address is set. This will reset the unit to “DHCP” mode. 2. 4. If you use static IP Address assignments. HTTP (browser) or Telnet Interface Does Not Work 1.1. Make sure you have the proper IP Address. match to the AP-2000 MAC Address in the table to the one on your unit. If the DHCP server in your network is not available for some reason while the AP-2000 unit reboots. which can be restricting access to Telnet and HTTP. then you can select a profile to fit your location. Enter the pathname where the Help files are located in the Help Link box. This Network Name must match the active Network Name on client machines. the DHCP Server will assign an IP Address to the AP-2000. The default AP-2000 password is “public”. b. use the HTTP or CLI Interface to either set the unit to DHCP mode or assign a static IP Address. 6. 2.0. Document your password(s) in the form provided in Recording Your Configuration Settings. If the Help files are not located in this folder.0 or better (preferred). c. 3. 2. Enter your AP-2000 IP Address in the browser address bar. Click OK when finished.1.100 When the AP-2000 Login window appears. Client Computer Cannot Connect 1. leave the User Name field empty and enter public in the Password field. Network Names should be allocated and maintained by the Network Administrator. Each wireless PC Card in the AP-2000 unit should have a unique Network Name. 3. 3. If you do not have a DHCP server on your network. Click the Commands button in the Web Interface. or SNMP Password 1. Verify that the HTML Help files are installed in the default directory: C:\Program Files\ORiNOCO\AP\Help###BOT_TEXT###lt;language> 2. Or use ScanTool to locate the current AP-2000 IP Address. contact your network administrator to find out where the Help files are located on your server. HTML Help Files Do Not Appear 1. 5-3 .Symptoms and Solutions Basic Software Setup and Configuration Problems Lost AP-2000. Refer to the ORiNOCO Client Manager Troubleshooting Guide. Select the Help tab located at the top of the screen. Once you have the current IP Address. Perform the Reset to Factory Default Procedure in this guide. Perform the Reset to Factory Default Procedure in this guide. Reboot the AP-2000 device once your DHCP server is on-line again or use the ScanTool to find the current IP Address of the AP-2000 unit in question. Perform the following steps to verify or enter the pathname for the Help files: a. Make sure you are using a compatible browser: Microsoft Internet Explorer 5. but does not affect the AP-2000 Image. you can use the Ethernet Interface to complete configuration. This procedure resets system and network parameters. Use the CLI over the serial port to check the SNMP Table. and the default Telnet password is also “public”.168. the device will retain the last IP Address it had. AP-2000 Has Incorrect IP Address 1. the default IP Address is 10. 3. use the Initializing the IP Address using Normal CLI procedure. Default IP Address Assignment mode is dynamic (DHCP). similar to this example: http://192. Telnet. check the IP Client Table in the DHCP Server to find the current AP-2000 IP Address. or Netscape 6 or higher. and cannot access the unit over Ethernet. d. 5.0.

4. Enter your AP-2000 IP Address in the Telnet connection dialog. 3. Network Names are typically allocated and maintained by your network administrator. Intermittent Loss of Connection 1.Cannot Connect to Internet 1. Client PC Card Does Not Work 1. If the AP-2000 device is configured as a DHCP server. 3. From the client computer. Configure the TFTP Server to “point” to the folder containing the file to be downloaded (or to the folder in which the file is to be uploaded). from a DOS prompt. then make sure that your local DHCP server is operating on the same subnet as your AP-2000 device. The server may be local or remote. there may be a physical network configuration problem (contact your network support staff). but you still cannot connect to the Internet. 4. which can be restricting access to Telnet and HTTP. For units with Active Ethernet. Verify that you have the proper AP-2000 Image file name and directory path. Make sure you have the proper IP Address. Use the CLI over the serial port to check the SNMP Table. 5-4 . Verify the IP Address of the TFTP Server. If you are not using the DHCP feature on the AP-2000 unit. 2. Download and install the latest ORiNOCO Client Manager and PC Card Driver software from <{WebLink}>http://www.com. Client Does Not Receive an IP Address . use the “ping” network command to test the connection with the AP-2000 unit. AP-2000. Make sure you are using the latest PC Card driver software. You can check the signal strength using the signal strength gauge on your ORiNOCO Client Manager. If the AP-2000 device responds. 2. 2.Symptoms and Solutions Telnet CLI Does Not Work 1. Make sure you are within range of an active AP-2000 device. make sure you are not using a crossover type Ethernet cable between the AP-2000 unit and the hub.orinocowireless. so long as it has a valid IP Address. type: C:###BOT_TEXT###gt; telnet <AP-2000 IP Address> 2. Client Connection Problems Client Manager Finds No Connection Make sure you have configured your Client Manager software with the proper Network Name(s). TFTP Server Does Not Work 1. open the Web-browser Interface and select the Configure button and then the Network tab to make sure the proper DHCP settings are being used. 2. Make sure the TFTP Server has been started. Check the DHCP Server log (if possible) for error messages.

Move the device into a different output port – if it works. cable type. The VLAN ID in the headers should correspond to one of the VLAN UserIDs configured for the AP-2000 device. 12. VLAN Workgroups The correct VLAN assignment can be verified by pinging the AP-2000 to ensure connectivity. 5 cable. Bridge frames generated by wireless clients and viewed on one of the backbones should contain IEEE 802. Try to re-connect the load into a different output port (remember to move the input port accordingly) – if it works. Verify that there is no short over any of the twisted pair cable or the RJ45 connector. try to connect the load device into a different AE hub. Check power plug and hub. there is probably a faulty port or bad RJ-45 port connection.” 2. traffic is lost. Verify that the Ethernet cable is Category 5 or better. and a manual override is necessary Workaround: you can configure the switch to mimic the nonexistent host I have just configured the Management ID and now I can't manage the AP? – Check to ensure your password is correct. Try using a different Ethernet cable – if it works.1Q compliant VLAN tags containing the proper VLAN ID have been inserted in the bridged frames. there is probably a faulty output or input port in the AE or a bad RJ45 connection. 5-5 .25 ft. If your password is incorrect or all inbound packets do NOT have the correct tag then a manual override is necessary. If Ethernet link goes down.Symptoms and Solutions VLAN Operation Issues Verifying Proper Operation of the VLAN Feature The correct VLAN configuration can be verified by “pinging” both wired and wireless hosts from both sides of the AP-2000 device and the network switch. 3. there is probably a faulty port or bad RJ45 connection. 6. 4. What if network traffic is being directed to a nonexistent host? – – All sessions are disconnected. Verify that the AE is connected to the Ethernet network with a good connection. including all 8 wires (4 pairs). switch. and is less than 100 meters (approx. by pinging the switch to ensure VLAN properties. there is probably a faulty data link in the load. and by pinging hosts past the switch to confirm the switch is functional.78$& ! The manual override process disconnects all users and resets all values to factory defaults. Verify that you are using a standard UTP Cat. hub. 2. There Is No Data Link 1. 2. 3. The VLAN ID in the header should correspond to users assigned network name. Traffic can be “sniffed” on both the wired (Ethernet) and wireless (WDS) backbones (if configured). 3. Verify that the indicator for the port is “on. 5.1Q compliant VLAN headers or tags. Try to connect a different device over the same port – if it works and link is established. check cable. 4. traffic can be “sniffed” on the Ethernet or WDS interfaces (if configured) using third-party packages. Active Ethernet The AP-2000 Unit Does Not Work 1. Ultimately. 5. Verify that you are not using any cross-over cable between the AE output port to the AP-2000 device. Most problems can be avoided by ensuring that 802. Try to move the same load into a different port on the same AE hub – if it works. or a bad RJ45 connection. “Overload” Indications 1. 3. If possible. there is probably a faulty connection over the long cable.) in length from the Ethernet source to the AP-2000.

Press and hold the RELOAD button for about 20 seconds until the POWER LED turns amber. You must also connect the AP-2000 to a computer with a standard serial cable and use a terminal client. If you need to force the AP-2000 to factory default state. specifically when a bad AP Image prevents successful booting. Result: The AP-2000 reboots. you will not be able to download the AP Image to the AP-2000. This procedure may be required when the password is forgotten or the current AP Image is missing or corrupted. The Bootloader CLI becomes active. and the factory default network values are restored. 1. This can be any computer on the LAN. Press and hold the RELOAD button for about 10 seconds. a cross-over Ethernet cable. You can also use the form provided in Recording Your Configuration Settings. you may need to use the Bootloader CLI to download a new executable AP Image. the TFTP Server IP Address. 2. While the AP Image is running. The Reset to Factory Default Procedure resets configuration settings. you need to know the AP-2000 IP Address. you will need an Ethernet connection to the computer on which the TFTP server resides. IP Address management is fundamental. In this procedure. IP Mask. IP Mask. Result: The AP-2000 deletes the current AP Image and Configuration files. Reset to Factory Default Procedure Use this procedure to reset the network configuration values. If not using DHCP. or connected to the AP-2000 with a “crossover” Ethernet cable. and so on. To download the AP Image. use the Reset to Factory Default Procedure above. you will need to reset the AP-2000 to default values. and a TFTP server will be required to reload firmware. This procedure may required if the AP-2000 password is forgotten. Forced Reload Procedure Use this procedure to force the AP-2000 back to default network configuration values and download a new AP Image. (721 By completing Step 2. IP Mask. enter CLI Commands to set the IP Address and download an AP Image.Recovery Procedures Recovery Procedures The most common installation problems relate to IP Addressing. If the password is lost or forgotten. and so on. 5-6 . use the Bootloader CLI over the serial port to set the IP Address and download a new AP Image. use the ScanTool or normal CLI to set the AP-2000 IP Address. and the AP Image file name. including the AP-2000 IP Address. A serial cable. press the RESET button. The Forced Reload Procedure erases the current AP Image if you need to download a new image. Result: The AP-2000 reboots and the indicators begin to flash. Please refer to the “Command Line Interface Reference Manual” for CLI information. The following procedure describes how to use the Bootloader CLI to assign an IP Address and download a new AP Image. without the TFTP server IP Address. but does not change the current AP Image. 1. Preparing to Download the AP Image Before starting. the firmware in the Agere AP-2000 will be erased. From the terminal. For example. such as HyperTerminal. Make sure the TFTP sever is running and configured to point to the folder containing the image to be downloaded. Initialize the AP-2000 using the Bootloader CLI In some cases. We suggest you create a chart to document and validate the IP addresses for your system. The current AP Image is not deleted. 2.

Remove power from the AP-2000 and your computer. 7. 3. In this procedure. Result: HyperTerminal sends a line return at the end of each line of code. depending on your computer> Baud rate: 9600 Data Bits: 8 Stop bits: 1 Flow Control: None Parity: None 4. After this message appears. After approximately 30 seconds. providing the AP-2000 IP Address is correct.255. configure the AP-2000 as described in Configuring the ORiNOCO AP-2000 device. a message indicates: Sending Traps to SNMP manager periodically. Connect the computer serial cable to the AP-2000 serial port. Once the AP-2000 image is downloaded and you have a valid AP-2000 IP Address.0. Restart the computer and power up the Access Point device. Press the RESET button on the AP-2000. Hardware and Software Requirements Standard serial data (RS-232) cable with a female DB-9 connector at each end or a standard serial cable and the Mini-DIN8 to DB-9 adapter included in your kit. Start TFTP Server. Attaching the Serial Port Cable 1.0.30 [Device name]> reboot 0 Result: The AP-2000 will reboot and then download the image file.. Open your terminal emulator. 2. 2. Result: The terminal display shows Power On Self Tests (POST) activity. COM2.255.0.12 ipsubmask 255.Recovery Procedures Download Procedure 1. Setting IP Address using Serial Port and Normal CLI Use the following procedure to set an IP Address over the serial port using the normal CLI. The network administrator typically provides the AP-2000 IP Address. the AP-2000 is ready for configuration.0 ipaddrtype static tftpipaddr 10. Enable the “ASCII Setup” settings by selecting “Send line ends with line feeds”. Connect the serial port cable to the back of the AP-2000 unit and to your computer. Enter only the following statements. 5. etc. and Make sure the new AP Image file is in the TFTP directory. ASCII Terminal software. Observe the TFTP display and you should see downloading activity begin after a few seconds. [Device name]> set ipaddr <Access Point IP Address> [Device name]> set ipsubmask <IP Mask> [Device name]> set ipaddrtype static [Device name]> set tftpipaddr <TFTP Server IP Address> [Device name]> set tftpfilename <AP Image File Name> [Device name]> set ipgw <Gateway IP Address> [Device name]> reboot 0 Example: [Device [Device [Device [Device [Device name]> set name]> set name]> set name]> set name]> set ipaddr 10. such as HyperTerminal.20 tftpfilename MyImage [Device name]> set ipgw 10. TFTP downloads an AP Image to the AP-2000. 3.0. press the ENTER key repeatedly until the following prompt appears. Com Port: <COM1. and then connect. set the following connection properties.0.0. When downloading has stopped. 5-7 . [Device name]> 6.

COM2. [Device name]> set ipaddrtype static [Device name]> set ipaddr <IP Address> [Device name]> set ipsubmask <IP Mask> [Device name]> set ipgw <Default Gateway IP Address> [Device name]> reboot 0 7. After the AP-2000 reboots.0. Result: The terminal displays a welcome message and then the CLI Prompt: [Device name]> 5.0. Result: HyperTerminal sends a line return at the end of each line of code. etc.0.1 Default TTL: 64 Address Type: 1 6. depending on your computer> Baud rate: 9600 Data Bits: 8 Stop bits: 1 Flow Control: None Parity: None 2..0 Default Router: 10.1 IP Mask: 255. Once the IP Address has been assigned. use CLI or the HTTP Interface over the LAN to complete configuration and manage operations. When the proper IP Address is set. [Device name]> Please enter password: 4. Result: After each entry the CLI reminds you to reboot.0. Use the following procedure to initialize the AP-2000 IP Address. verify the new IP Address by reconnecting. you may use the CLI to communicate with the AP-2000. however wait to reboot until all commands have been entered. You may use most generic terminal programs. Press the RESET button on the AP-2000 (located on the LED Indicator side of the unit). similar to the example below. Change the IP Address and other network values using set and reboot CLI commands. Alternatively. Open your terminal emulator. Enable the “ASCII Setup” settings by selecting “Send line ends with line feeds”. you can use the ping network command from networked computers to test the new IP Address. Result: Network parameters appear: [Device name]> show ip IP Address: 10.0. and then entering a show ip CLI statement (as in Step 5). use the HTTP Interface or the CLI to complete configuration. and then displays a CLI prompt. 1. 8. Result: The terminal display shows Power On Self Tests (POST) activity. Enter the password (default is "public"). similar to the example dialog below (use your own IP Address and IP Mask). 3. and then set the following connection properties: Com Port: <COM1. This process may take up to 90 seconds. 5-8 . such as HyperTerminal. Enter show ip.0. Many web sites offer shareware or commercial terminal programs you can download.Recovery Procedures Initializing the IP Address using Normal CLI After installing the serial port cable.

System Alarms (Traps) System Alarms (Traps) Security Alarms oriTrapAuthenticationFailure oriTrapUnauthorizedManagerDetected Wireless Card (A and/or B) incompatible vendor detected Wireless Card (A and/or B) firmware download failure detected Wireless Interface Card Alarms oriTrapWLCNotPresent oriTrapWLCFailure riTrapWLCRemoval oriTrapWLCIncompatibleFirmware oriTrapWLCVoltageDiscrepancy oriTrapWLCIncompatibleVendor oriTrapWLCFirmwareDownloadFailure Wireless Card (A and/or B) not present Wireless Card (A and/or B) general failure Wireless Card (A and/or B) removal Wireless Card (A and/or B) incompatible firmware detected Wireless Card (A and/or B) voltage discrepancy detected Wireless Card (A and/or B) incompatible vendor detected Wireless Card (A and/or B) firmware download failure detected Operational Alarms oriTrapWatchDogTimerExpired oriTrapRADIUSServerNotResponding oriTrapModuleNotInitialized oriTrapDeviceRebooting oriTrapTaskSuspended oriTrapBootPFailed oriTrapDHCPFailed Watch Dog Timer has expired RADIUS Server is not responding or error communicating with RADIUS Server Module has not been initialized Device is rebooting Task suspension has been detected BootP failure detected (no response from BootP Server) DHCP Client failure detected (no response from DHCP server) FLASH Memory Alarms oriTrapFlashMemoryEmpty oriTrapFlashMemoryCorrupted Flash memory card detected empty Flash memory data corrupted TFTP Alarms oriTrapTFTPFailedOperation oriTrapTFTPOperationInitiated oriTrapTFTPOperationCompleted FTP (upload or download) failure detected TFTP (upload or download) operation initiated TFTP (upload or download) operation completed Image Alarms oriTrapZeroSizeImage oriTrapInvalidImage oriTrapImageTooLarge oriTrapIncompatibleImage Zero size image has been downloaded to device Invalid image has been downloaded to device Image downloaded to device is too big Incompatible image has been downloaded to device Standard MIB-II (RFC 1213) Alarms coldStart warmStart linkUp linkDown Device has been cold started Device has been warm started Device Link is up (Ethernet interface is up) Device Link is down (Ethernet interface is down) Bridge MIB (RFC 1493) Alarms newRoot topologyChange New root has been added to Bridge Network Topology change has been detected 5-9 .

here are two typical things to check. and that the TFTP server is connected. Make sure you have the proper TFTP server IP Address. TFTP Server The “Trivial File Transfer Protocol” (TFTP) server allows you to transfer files across a network. so long as you have a valid TFTP IP Address. After the TFTP server is installed: Check to see that TFTP is configured to point to the directory containing the AP Image. Make sure you have the proper RADIUS authentication server information setup configured in the AP-2000. clients will not be able to log in. Check the RADIUS server IP Address authentication Port number (default is 1812). the proper AP Image file name. you will not be able to download and upload images and configuration files to/from the AP-2000. Otherwise.Related Applications Related Applications RADIUS Authentication Server If the RADIUS authentication server is selected for authentication during configuration. Remember that the TFTP server does not have to be local. The TFTP software is located on the ORiNOCO AP-2000 Installation CD-ROM. There are several reasons the authentication server services might be unavailable. TFTP does not have to be running for AP-2000 operations that do not transfer files. LED Indicators POWER Green Amber Amber Red n/a n/a Green n/a ETHERNET Green flash with data activity n/a (not applicable) n/a Red n/a n/a n/a n/a PC CARD A Green flash with data activity Amber n/a n/a Red Red Amber Off PC CARD B Green flash with data activity Amber n/a n/a Red Red Amber Off INIDICATION Normal Operation Rebooting Missing or bad AP Image if amber after reboot Power On Self Test (POST) running PC Card incompatible on indicated interface PC Card failure on indicated interface Indicated interface in Administrative State PC Card not present WXRHPLW RQ KWLZ HYLHFHU GQD GQHV KWRE RW GHUXJLIQRF VL UHYUHV 37)7 HKW HUXV HND0 5-10 . If a TFTP server is not configured and running. and Shared Secret. Make sure RADIUS is configured and running. You can upload files from the AP-2000 for backup or copying. Make sure the RADIUS authentication server RAS setup matches the AP-2000. and you can download the files for configuration and AP Image upgrades.

and client-server relationships. configure.Using the Command Line Interface 6 In This Chapter This section provides details for the Command Line (CLI) Interface used to manage an ORiNOCO AP-2000 device. or submitted with CLI scripts. CLI commands can be used to initialize. – Prerequisite Skills and Knowledge – Notation Conventions – Important Terminology – Navigation and Special Keys – CLI Error Messages Command Line Interface (CLI) Variations – Bootloader CLI CLI Command Types – Operational CLI Commands – Parameter Control Commands Using Tables & User Strings – Working with Tables – Using Strings Configuring the AP-2000 Unit using CLI commands – Configuring Objects that Require Reboot – “set” CLI Command – “show” CLI Command Other Network Settings – Set Basic Configuration Parameters using CLI Commands – Configure the AP-2000 device as a DHCP Server – Maintain 802. (721 All CLI commands and parameters are case-sensitive. network access infrastructures. In addition. you should have a working knowledge of Local Area Networking (LAN) concepts.11b Client Connections using Link Integrity – Change your Wireless Interface Settings – Set Interface Management Services – RADIUS Authentication Settings Parameter Tables Prerequisite Skills and Knowledge To use this document effectively. CLI commands may be entered in real time through a keyboard. you should be familiar with software setup procedures for typical network operating systems and servers. The CLI is available through both the Serial Port Interface and the Ethernet Interface. and manage network operation of the Access Point. 6-1 .

All items for a given Table can be displayed with a show <Table> CLI Command. Key Combination Delete or Backspace Ctrl-A Ctrl-E Ctrl-F Ctrl-B Ctrl-D Ctrl-U Ctrl-P Ctrl-N Tab ? Operation Delete previous character Move cursor to beginning of line Move cursor to end of line Move cursor forward one character Move cursor back one character Delete the character the cursor is on Delete the entire line Go to the previous line in the history buffer Go to the next line in the history buffer Complete the command line List available commands 6-2 . For example: [Device name]> set ipaddr 10. To update an Access Point you typically download a new Image File. Change parameters with the CLI set Command.Notation Conventions Computer prompts are shown as constant width type. the System Status screen. Image File . For example. you can add several potential managers to the SNMP Table. For example: [Device name]> Information that you input as shown is displayed in bold constant width type. Navigation and Special Keys This CLI supports the following navigation and special key functions to move the cursor along the prompt line. This file is often referred to as the "AP Image".A fundamental network value that can be displayed and may be changeable. the System Group is composed of several related parameters. Configuration items include the IP Address and other network-specific values. Download Vs.0. For example. Parameter .Tables hold parameters for several related items. Group . Groups can also contain Tables. For example: Click the Configure button Screen names are displayed in bold italics. software buttons.Downloads transfer files to the Access Point. The TFTP server performs file transfers in both directions. For example.12 The names of keyboard keys.The Access Point software executed from RAM.0. and field names are displayed in bold type. Important Terminology Config Files . Uploads transfer files from the Access Point.A logical collection of network parameter information. TFTP . used for file transfers. and view them with the CLI show Command Table . Upload .Refers to the TFTP Server. Config files may be downloaded to the Access Point or uploaded for backup or troubleshooting. All items for a given Group can be displayed with a “show” <Group> CLI Command.Database files containing the current Access Point configuration. the Access Point must have a unique IP Address and the Radio PC Cards must know which channel to use. For example.

and parameters 6-3 . The Bootloader CLI provides a limited command set. An invalid parameter value has been entered at the command prompt. Command Line Interface (CLI) Variations Administrators use the CLI to control Access Point operation and monitor network statistics. An incorrect password has been entered in the CLI login prompt. Once the image is downloaded and running. Error Message % Syntax error % Invalid command % Invalid parameter name % Invalid parameter value % Invalid table index % Invalid table parameter % Invalid table parameter value % Read only parameter % Incorrect password % Download unsuccessful % Upload unsuccessful Description Invalid syntax entered at the command prompt. The AP-2000 supports two types of CLI: the Bootloader CLI and the normal CLI. An invalid table parameter value has been entered at the command prompt. command usage. the Access Point uses the normal CLI. Bootloader CLI The Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration of the AP-2000 device. An invalid table index has been entered at the command prompt. This guide covers the normal CLI unless otherwise specified. This interface is only be accessible via the serial interface if the AP-2000 unit does not contain an image (binary) or the TFTP operation has failed as result of the download command for an image. User is attempting to configure a read-only parameter. The Bootloader CLI provides you with the ability to configure the initial setup parameters as well as download an image (binary) to the device. The upload operation has failed due to incorrect TFTP server IP Address or file name.Command Line Interface (CLI) Variations CLI Error Messages The following table describes the error messages associated with improper inputs or expected CLI behavior. The parameters supported by the Bootloader CLI (for viewing and modifying) are: – – – – – – – System Name IP Address Assignment Type IP Address IP Mask Gateway IP Address TFTP Server IP Address Image (binary) File Name The following lists display the results of using the help and show commands in the Bootloader CLI: [DeviceName]>help Command List ============= set show reboot help Description =========== Set system parameters Show running system information Reboots the system Description of commands. The Bootloader CLI allows you to assign an IP Address and download a new image. An invalid table parameter has been entered at the command prompt. The functions that shall be supported by the Bootloader CLI are: – – – – configuration of initial device parameters using the set command show command to view the device’s configuration parameters help command to provide additional information on all commands supported by the Bootloader CLI reboot command to reboot the device. The download operation has failed due to incorrect TFTP server IP Address or file name. and is used when the current AP Image is bad or missing. A non-existent command has been entered at the command prompt. An invalid parameter name has been entered at the command prompt.

depending on usage.Displays general CLI help information or command help information.Terminates the CLI session download . Operational commands include. or “bootloader upgrade” files to Access Point. such as downloading. depending on the operation in which it is used.Reboots the Access Point in specified time search . "config".(Question Mark) Lists CLI Commands or parameters.Uses TFTP server to upload "config" files from Access Point to TFTP default directory or specified path. ? . exit.Sets the Access Point CLI password reboot . Following the table are detailed examples and display results for each operation. After entering commands (and parameters if any) press the Enter key to execute the Command Line. done.CLI Command Types Command Usage ============= set <parameter name> <parameter value> <CR> show <CR> reboot <number f seconds> <CR> help <CR> Parameter List ============== sysname ipaddrtype ipaddr ipsubmask ipgw tftpipaddr tftpfilenameImage or [DeviceName]>show sysname ipaddrtype ipaddr ipsubmask ipgw tftpipaddr tftpfilename <value <value <value <value <value <value <value of of of of of of of sysname> ipaddrtype> ipaddr> ipsubmask> ipgw> tftpipaddr> tftpfilename> Description =========== System Name System IP Address Assignment Type System IP Address System IP Mask System Default Gateway IP Address TFTP Server IP Address Binary File Name CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Control. rebooting.Remembers commands to help avoid re-entering complex statements passwd . such as command usage and syntax history . Operational CLI Commands This type affects Access Point behavior. help . quit . ? (List Commands) This command has varied uses to display commands and parameters. Operation Display the Command List (Example 1) Display commands that start with specified letters (Example 2) Display parameters for set and show Commands (Examples 3a and 3b) Basic Example [Device Name]>? [Device Name]>s? [Device Name]>show? [Device Name]>show ipa? [Device Name]>download? Prompt to enter successive parameters for Commands (Example 4) 6-4 .Lists the parameters in a specified Table upload . The following table lists each operation and provides a basic example.Uses TFTP server to download "image". and so on.

iparpfltipaddr Example 3b. then "?" with no space between letters and "?". [Device Name]>s?<CR> show set search Example 3. Display specific Commands To show all commands that start with specified letters. Notice that there is no space between the letters and the question mark. Example 3b shows how to display a subset of the parameters based on initial parameter letters. Display parameters based on letter sequence This example shows entries for parameters that start with the letter "i". The more letters you enter. Example 3a.CLI Command Types Example 1. enter one or more letters. the fewer the results returned. Display Command list To display the Command List. enter "?" [Device Name]>? show set download upload reboot passwd help quit done exit history search Example 2. Display parameters for set and show Example 3a allows you to see every possible parameter for the set (or show) commands. . Display every parameter that can be changed [Device Name]>set?<CR> sysctemail sysctphone etherspeed ipaddrtype . [Device Name]> show i?<CR> iappstatus iapphandtout iapp ipaddr iparpfltstatus iparp [Device Name]> show ip?<CR> ipaddrtype ip ipttl ipaddr iparpstatus iparpfltstatus iparpfltsubmsk iparp [Device Name]> show ipa?<CR> ipaddrtype ipaddr iparpfltstatus iparpfltipaddr iparp [Device Name]> show ipar?<CR> iparpstatus iparpfltstatus iparpfltsubmsk iparp ipaddrtype ip ipgw iappannreqstart iparpstatus iparpfltsubmsk iappannint iapphandretx ipttl ipsubmask iparpfltipaddr ipgw ipsubmask iparpfltipaddr iparpstatus iparpfltsubmsk iparpfltipaddr 6-5 . Notice from example 3a that the list is very long. .

Syntax to download a file: Device Name]>download <tftp server address> <path and filename> <file type> Example: [Device Name]>download 192. you may add another "?" to the new CLI line see the next parameter prompt. Result: The parameter is changed and a new CLI line is echoed with the new value (in the first part of the following example.0. Then.CLI Command Types Example 4.1. The following example shows how this is used for the "download" Command. and then "?". Executing 'download' in combination with the asterisks character. The last part of the example shows the completed download Command ready for execution. Display Prompts for Successive Parameters Enter the command. Syntax to execute the download Command using previously set (stored) TFTP Parameters: [Device Name]>download * 6-6 .2 apimage bin done.0. [Device Name]> done [Device Name]> exit [Device Name]> quit download Downloads the specified file from TFTP server to the Access Point. Syntax to display help and usage information: [Device Name]>download 3. Executing download without parameters will display command help and usage information. when the parameter prompt appears. and so on until you enter all parameters. a space. 1.0. enter the parameter value. After entering one parameter. To see a list of available files to download.2 apimage?<CR> <file type (config/bin/bspbl)> [Device Name]> download 10. “*”.2?<CR> <File Name> [Device Name]> download 10. exit. [Device Name]> download?<CR> <TFTP IP Address> [Device Name]> download 10. will make use of the previously set TFTP parameters.0.168. quit Each command disconnects the CLI Session. enter a question mark (?) after download (example: download?).100 APImage2 bin 2.0.0. the value is the IP Address of the TFTP server).

X. 1... use the keyboard "up arrow" and "down arrow" keys to recall pervious statements from the Command History Buffer...... [Device Name]> passwd oldpassword newpassword newpassword reboot Reboots Access Point after specified number of seconds.... Complete command description and command usage can be provided by: [Device Name]>help <command name> [Device Name]><command name> help history Shows content of Command History Buffer. delete current character Ctrl-U.. delete previous character Ctrl-A... press the "Enter" key to execute. go forward one character Ctrl-B.CLI Command Types help Displays instructions on using control-key sequences for navigating a Command Line........ Using help as the only argument: [Device Name]>help Special keys supported: Arrow Keys DEL.. go backward one character Ctrl-D....... will provide command listing Examples: '?' list all the supported commands and brief description 'sh?' list all commands that start with sh 'show?' list all arguments to the show command 'sh<TAB>' complete the 'show' command 2. The Command History Buffer stores command statements entered in the current session. delete previous word Ctrl-T. and displays command information and examples.. go to end of line Ctrl-F. To avoid re-entering long command statements. or you may edit the statement before executing it...... transpose previous character Ctrl-P. go to next line in history buffer Tab .. BS... [Device Name]> history passwd Changes the CLI Password... go to previous line in history buffer Ctrl-N. [Device Name]> reboot 0 [Device Name]> reboot 30 6-7 . go to beginning of line Ctrl-E.. Specify a value of 0 (zero) for immediate reboot. will attempt command completion ? . delete to beginning of line Ctrl-K. delete to end of line Ctrl-W.. When the desired statement reappears..

parameters may be set individually. character will make use of the previously set/stored TFTP parameters.12 Result: IP Address will be changed when you reboot the Access Point. “*”. Example 1 . The two Parameter Control Commands are show and set. These allow you to view (show) all parameters and statistics. The CLI reminds you when rebooting is required for a change to take effect. As shown in the following six examples. Fore more details. refer to "set and show command examples" later in this guide. you will use the CLI "show" Command to view current parameter values.168. Executing 'upload' without parameters will display command help and usage information. [Device Name]> search snmpipaccesstbl The supported elements are: index ipaddr submask if cmt status upload Uploads the specified file from AP-2000 to TFTP Server directory. In this example. To reboot immediately. and use the CLI "set" Command to change parameter values. and all parameters for a given table can be set with a single statement. you specify a single parameter. Fore more details. or modify each parameter separately. Syntax to execute the upload command using previously set (stored) TFTP Parameters: [Device Name]>upload * Parameter Control Commands The following sections cover each CLI Command. “set” and “show” Command Examples In general. and include several tables showing parameter properties. 1.Set the Access Point IP Address Parameter Syntax: [Device Name]>set <parameter name> <parameter value> Example: [Device Name]> set ipaddr 10. Syntax to display help and usage information: [Device Name]>help upload 3.CLI Command Types search Lists the members of the specified table. set .To see any Parameter or Statistic values. Executing ‘upload” with the asterisks. You can use a single CLI Statement to modify Tables.Use this CLI Command to change parameter values. show . enter reboot 0 (zero) at the CLI prompt.0. refer to "set and show command examples" later in this guide. a Group.1. the CLI returns the same SNMP table items displayed in the HTTP Interface SNMP Access Table.0. Syntax to upload a file: [Device Name]>upload <tftp server address> <path and filename> <filetype> Example: [Device Name]>upload 192. 6-8 . This list corresponds to the table information displayed in the HTTP Interface. and to change (set) parameters. or a Table.100 APImage2 bin 2.

255.Show the Group Parameters In this example you can view all elements of a group or table.255. 2=disable. For example.Create a table entry or row Use 0 (zero) as the index to the table when creating an entry. disable.0.10 submask 255. Syntax: [Device Name]>set <Table> index status <enable.0. which. Note that show network and show ip work the same. suppose the SNMP IP Access table has one entry and you wanted to modify the IP Address: [Device Name]>set snmpipaccesstbl 1 ipaddr 10.11 You can also modify several elements in the table entry. Example 3 .255.255. 6-9 .0. Syntax: [Device Name]>set <table name> <table index> <element 1> <value 1> … <element n> <value n> Example: [Device Name]> set snmpipaccesstbl 0 ipaddr 10. or Delete a table entry or row In this example you would like to manage the second table row/entry. 3=delete> Example: [Device [Device [Device [Device Name]>set Name]>set Name]>set Name]>set snmpipaccesstbl snmpipaccesstbl snmpipaccesstbl snmpipaccesstbl 2 2 2 2 status status status status enable disable delete 2 Example 5 .0.0. Syntax: [Device Name]> show <group name> Example: [Device Name]>show network Result: The CLI displays network group parameters. Disable. if not entered. There are other optional table elements.0. delete> [Device Name]>set <Table> index status <1=enable.0.10 and 255.0.Modify a table entry or row Use the index to be modified and the table elements you would like to modify.0 Result: The SNMP Table (Index 0) "IP Address" and "IP Mask" parameters are assigned 10. Enter the index number and specific table elements you would like to modify. [Device Name]>set snmpipaccesstbl 1 ipaddr 10. the default value applies.0.Enable. When creating a table row. only the mandatory table elements are required (comment is usually an optional table element).0.CLI Command Types Example 2 .0.248 cmt “First Row” Example 4 . Hint: Use the search Command to see the elements that belong to the table. respectively.12 submask 255.

Not all the table objects are required. Enabling/Disabling – – The table name is required. – The table index is required – for table modification the index should be the index of the entry to be modified. – Parameters that are not required can be omitted.255. all the table objects have to be specified. in which case they will be assigned the default value as specified in the MIB or product functional specification document. 2. – The order in which the table arguments or objects are entered in not important.10 Below are the rules for creating. modifying. as in the example below. View all parameters in a table Syntax: [Device Name]> show <table name> Example:[Device Name]> show snmpipaccesstbl Result: Displays the Access Point SNMP IP Access Table and its entries. and deleting table entries. enabling/disabling. – The reserved word enable or disable are required. – Only the table objects that are to be modified need to be specified. Modification – The table name is required.0 ipaddr 10. Creation – The table name is required. – The table index is required – for table entry/instance creation the index is always zero (0). – If multiple table objects are to be modified the order in which they are entered is not important. Using Tables & User Strings Working with Tables Each member of the table must be specified. – The reserved word delete is required.0.Show Individual and Table Parameters 1. 6-10 . – The table index is required – for table deletion the index should be the index of the entry to be deleted. – If the entire table entry is to be modified. Deletion – The table name is required. [Device Name]>set snmpipaccesstbl 0 submask 255. The table index is required – for table enabling/disabling the index should be the index of the entry to be enabled/disabled. View a single parameter Syntax: [Device Name]>show <parameter name> Example: [Device Name]> show ipaddr Result: Displays the Access Point IP Address.Using Tables & User Strings Example 6 .0.0.

enter a space. quit. then the string delimiters. The following message shall be displayed as a result of the configuring such object or objects.0. mentioned in this section are not required. the CLI shall provide informational messages when the user has configured an object or object(s) that requires the device to be rebooted.10 In order for this change to take effect. <argument N> <value N> Name]>set sysloc "Main Lobby" Name]>set snmpipaccesstbl 0 ipaddr 10..Requires quote marks.0 6-11 . the CLI also provides a message as a result of the exit. To see a definition and syntax example.Using Tables & User Strings Using Strings Since there are several string objects supported by the AP-2000 device. the device is required to be rebooted.114. single or double quotes. To see a list of available parameters. quit. Example 2: Executing the exit. In order to inform the end-user of this behavior. or done commands when an object that requires reboot has been configured In addition to the above informational message. If the string object being used does not contain blank spaces. then a question mark (?) after set (example: set?). Example 1: Configuring objects that require the device to be rebooted The following message is displayed every time the user has configured an object that requires the device to be rebooted. The scenarios supported by this CLI are: “My Desk in Nieuwegein” ‘My Desk in Nieuwegein’ “My ‘Desk’ in Nieuwegein” ‘My “Desk” in Nieuwegein’ “Daniel’s Desk in Nieuwegein” ‘Daniel”s Desk in Nieuwegein’ Double Quotes Single Quotes Single Quotes within Double Quotes Double Quotes within Single Quotes One Single Quote within Double Quotes One Double Quote within Single Quotes The string delimiter does not have to be used for every string object. For this CLI implementation. The single quote or double quote only has to be used for string objects that contain blank space characters. If you make changes to objects that require reboot and execute the exit command the following message is displayed: [Device Name]>exit<CR> OR quit<CR> OR done<CR> Modifications have been made to parameters that require the device to be rebooted.73.0. Syntax: [Device [Device Example: [Device [Device Name]>set <parameter> <value> Name]>set <table> <index> <argument 1> <value 1> . For example: [Device Name]> set sysname Lobby . These changes will only take effect after the next reboot.. [Device Name]>set ipaddr 135.10 submask 255. or done command if changes have been made to objects that require reboot.255. the single quote or double quote character can be used at the beginning and at the end of the string. “set” CLI Command Sets (modifies) the value of given parameter. type only set and then press the Enter key.Does not need quote marks [Device Name]> set sysname "Front Lobby" . a string delimiter is required for the strings to be interpreted correctly by the command line parser.0. Configuring Objects that Require Reboot Certain objects supported by ORiNOCO devices require the device to be rebooted in order for the changes to take effect.

Enter the Telnet password (default is public). To perform this operation using CLI commands. Launch HyperTerminal from the Start > Programs menu. and manage your AP-2000 device using Telnet or a terminal emulation application. Type in telnet <IP Address of the unit>. (721 (721 We recommend changing your default passwords immediately. To perform this operation using CLI commands. (Result: HyperTerminal sends a line return at the end of each line of code.Configuring the AP-2000 Unit using CLI commands “show” CLI Command Displays the value of specified parameter. 6-12 . configure. type only show and then press the Enter key. To see a list of available parameters. 2. Log into the AP-2000 unit using Telnet: 1. 2. 3. refer to Change Passwords. We recommend changing your default passwords immediately.. Syntax: [Device Name]>show [Device Name]>show [Device Name]>show Examples: [Device Name]>show [Device Name]>show [Device Name]>show <parameter> <group> <table> ipaddr network snmpipaccesstbl Configuring the AP-2000 Unit using CLI commands Log Into the AP-2000 Unit The CLI commands can be used to access. Log Into the AP-2000 Unit using HyperTerminal 1.) Enter the Telnet password (default is public). such as HyperTerminal. To see a definition and syntax example. refer to Change Passwords. Open an existing connection or create a new one with the following settings: Com Port: <COM1. Go to the DOS command prompt on your computer. 3. depending on your computer> Baud rate: 9600 Data Bits: 8 Stop bits: 1 Flow Control: None Parity: None Enable the “ASCII Setup” settings by selecting “Send line ends with line feeds”. enter a question mark (?) after show (example: show ?). etc. COM2. Groups contain Parameters and Tables. Tables contain parameters for a series of similar entities. or displays all parameter values of a specified group (parameter table).

Location and Contact Information [Device [Device [Device [Device [Device [Device Name]>set sysname <system name> Name]>set sysloc <Unit Location> Name]>set sysctname <Contact Name (person responsible for system)> Name]>set sysctphone <Contact Phone Number> Name]>set sysctemail <Contact E-mail address> Name]>show system<CR> Set Static IP Address for the AP-2000 device [Device [Device [Device [Device [Device Name]>set ipaddrtype static Name]>set ipaddr <fixed IP address of unit> Name]>set ipsubmask <IP Mask (default = 255. HTTP) Download an AP-2000 configuration file from your server Copy an AP-2000 configuration file from another AP-2000 device Communication rules for your wireless interface(s) Set System Name.Configuring the AP-2000 Unit using CLI commands Set Basic Configuration Parameters using CLI Commands There are a few basic configuration parameters that you will want to setup right away when you receive the AP-2000 unit.0)> Name]>set ipgw <gateway IP address (default = 10. check the IP mask of your computer before proceeding.0. Location and Contact Information Set a Static IP Address for the AP-2000 device Set Network Names and Encryption options Set WEP Encryption for each Wireless Interface Change Passwords for the different management interfaces (SNMP. Client stations must have the same encryption key to be able to communicate with the AP-2000 device. 6-13 .0. If you are setting up the AP-2000 device from a client station.0. Telnet. For example: – – – – – – – – – Contact information for network administrator Set System Name.1)> Name]>show network<CR> Set a Network Name for each Wireless Interface – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif 3 netname <Network Name (SSID) for wireless card in Slot A> [Device Name]>set wif 4 netname <Network Name (SSID) for wireless card in Slot B> [Device Name]>show wif<CR> Set WEP Encryption for each Wireless Interface – – 3 = wireless card in Slot A 4 = wireless card in Slot B 12.0.78$& ! (721 The IP Mask of the AP-2000 unit needs to match the IP Mask of your network.

file type. This example describes setting encryption Key 2 on the wireless card in Slot B. We also recommend that you document your AP-2000 configuration using the work sheets provided for you in the chapter.sys”)> config [Device Name]>show tftp (ensure the filename. and the IP address are correct) [Device Name]>download * [Device Name]>reboot 0 After doing this once. [Device Name]>set tftpfilename <file name> tftpfiletype config tftpipaddr <IP address of your TFTP server> [Device Name]>show tftp (ensure the filename. If you lose or forget your password settings. [Device Name]>upload <TFTP Server IP address> <tftpfilename (such as “config. with the following command: [Device Name]>download * Backup your AP-2000 Configuration File Begin by starting your TFTP program. This example describes setting encryption Key 1 on the wireless card in Slot A.Configuring the AP-2000 Unit using CLI commands For the wireless card in Slot A You can set up to four encryption keys. [Device Name]>set wifsec 3 encrypt enable encryptkey 1 <WEP key (5-13 characters long depending on card type)> encryptkeytx 1 [Device Name]>show wifsec<CR> For the wireless card in Slot B You can set up to four encryption keys. with the following command: [Device Name]>upload * 12. file type. [Device Name]>set wifsec 4 encrypt enable encryptkey 2 <WEP key (5-13 characters long depending on card type)> encryptkeytx 2 [Device Name]>show wifsec<CR> Change Passwords [Device [Device [Device [Device Name]>set telpasswd <Old Password> <New Password> <Confirm Password> Name]>set httppasswd <Old Password> <New Password> <Confirm Password> Name]>set snmppasswd <Old Password> <New Password> <Confirm Password> Name]>reboot 0 Download an AP-2000 Configuration File from your TFTP Server Begin by starting your TFTP program. you can backup your current file (so long as all the parameters are the same). and the IP address are correct) After doing this once. It must be running and configured to transmit and receive.78$& ! We strongly urge your to change the default passwords to restrict access to your network devices to authorized personnel. you can backup your current file (so long as all the parameters are the same). 6-14 . Recording Your Configuration Settings. It must be running and configured to transmit and receive. you can always perform the Reset to Factory Default Procedure.

1x security settings Configure the AP-2000 device as a DHCP Server [Device Name]>set dhcpstatus disable [Device Name]>set dhcpippooltable 0 startipaddr <start ip address> endipaddr <end ip address> [Device Name]>set dhcppridnsipaddr <primary dns ip address> [Device Name]>set dhcpsecdnsipaddr <secondary dns ip address> [Device Name]>set dhcpstatus enable [Device Name]>reboot 0 Maintain 802.11b Client Connections using Link Integrity [Device Name]>show linkinttbl (this shows the current links) [Device Name]>set linkinttbl <1-4 (depending on what row in the table you wish to address)> ipaddr <ip address of the host computer you want to check> [Device Name]>set linkintpollint <the interval between link integrity checks> [Device Name]>set linkintpollretx <number of times to retransmit before considering the link down> [Device Name]>set linkintstatus <enable> [Device Name]>reboot 0 Change your Wireless Interface Settings Enable/Disable Interference Robustness – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> interrobust <enable/disable> (721 (721 (721 Refer to Configuring Advanced Features for more complex network settings. This feature is only applicable for 2. Some of them are listed below.Other Network Settings Other Network Settings There are other configuration settings that you may want to set for your AP-2000 unit. 6-15 . You must have at least one entry in the DHCP Server client IP Address assignment table before you can enable the DHCP Server Status feature.11b) cards.4 GHz (802. – – – – – – Download an AP-2000 configuration file from your server Configure your AP-2000 device as a DHCP server Maintain 802.11b client connections using Link Integrity checking Change your Wireless Interface settings Configure the physical interface that will be used to manage the AP-2000 unit Control access to the AP-2000 device using MAC Address authentication. WEP encryption or 802.

a client configured with the Network Name “ANY” can connect to the AP-2000. This feature is only available for 802.2. and local limits such as physical interference are investigated. small. 6-16 . It is calculated by means of a manual Site Survey. In order to disable ACS. The Site Survey is contained on the Installation CD included in your kit. The distance between APs should not be approximated.11b wireless cards. microcell> [Device Name]>reboot 0 Set the Multicast Rate [Device Name]>set multrate <1.5. minicell. The Distance Between APs must be set before the Multicast Rate. From these measurements the appropriate cell size and density is determined.11 (Mbps)> (721 (721 (721 When disabled. in which an AP-2000 unit is set up and clients are tested throughout the area to determine signal strength and coverage.Other Network Settings Enable/Disable Closed System – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> closedsys <enable/disable> Enable/Disable Load Balancing – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> ldbalance <enable/disable> Enable/Disable Medium Density Distribution – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> meddendistrib <enable/disable> Autochannel Select (ACS) ACS is enabled by default. disable the cards in slots A and B and reboot. and the optimum distance between APs is calculated to suit your particular business requirements. – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> autochannel disable [Device Name]>reboot 0 Re-enable ACS – – 3 = wireless card in Slot A 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> autochannel enable [Device Name]>reboot 0 Set the Distance Between APs [Device Name]>set distaps <large. medium.5.

auto duplex 100 Mbit/s . 8.half duplex Auto Speed .auto duplex Value 10half 10full 10auto 100half 100full autospeedhalf autospeedauto (recommended) Set Interface Management Services Enable/Disable Interface Management Services [Device Name]>set httpstatus <enable/disable> [Device Name]>set telstatus <enable/disable> [Device Name]>set snmpstatus <enable/disable> Set Communication Ports [Device Name]>set httpport <HTTP port number (default is 80)> [Device Name]>set telport <Telnet port number (default is 23)> [Device Name]>set snmpport <SNMP port number (default is 161)> Set Session Timeouts [Device Name]>set tellogintout <time in seconds> [Device Name]>set telsessiontout <time in seonds> Configure Management Ports [Device Name]>set snmpifbitmask <0.half duplex 10 Mbit/s . 1.full duplex 10 Mbit/s .Other Network Settings Set Ethernet Speed and Transmission Mode [Device Name]>set etherspeed <value (see below)> [Device Name]>reboot 0 Ethernet Speed and Transmission Mode 10 Mbit/s . 4. 15 (see below)> [Device Name]>set telifbitmask <0. 4. 1. 8. 15 (see below)> Choose from the following values: Interface bitmask 0 = disable (all interfaces) 1 = ethernet if 4 = pcCardA if 8 = pcCardB if 15 = allInterfaces Description All management channels disabled Ethernet only enabled Wireless A only enabled Wireless B only enabled All management channels enabled Edit Management IP Access Table [Device Name]>set mgmtipaccesstbl <index> ipaddr <IP address> ipsubmask <subnet mask> 6-17 .full duplex Auto Speed .half duplex 100 Mbit/s . 4. 8. 1. 15 (see below)> [Device Name]>set httpifbitmask <0.

xon/xoff> [Device Name]>show serial MAC Access Control Setup MAC (Address) Access Control Table [Device Name]>set macaclstatus <enable> macacloptype <passthru. 9600. 4800. 38400.Other Network Settings Configure Serial Port Interface [Device Name]>set serbaudrate <2400. 57600> serflowctrl <none. you may prefer to maintain this list on a centralized location using the RADIUS Authentication Settings. accounting> [Device Name]>show radiustbl [Device Name]>reboot 0 (721 (721 To avoid unexpected performance of your AP-2000. leave the setting Flow Control to its default value (none) unless you are sure what this setting should be. 6-18 . For larger networks that include multiple AP-2000 devices. block> [Device Name]>reboot 0 Add an Entry to the MAC Access Control Table [Device Name]>set macacltbl <index> macaddr <MAC Address. 19200. such as 00:12:34:56:78:ab> status <enable> [Device Name]>show macacltbl Disable or Delete an Entry in the MAC Access Control Table [Device Name]>set macacltbl <index> status <disable/delete> [Device Name]>show macacltbl RADIUS Authentication Settings Set RADIUS Parameters [Device [Device [Device [Device Name]>set radmacaccctrl <enable> Name]>set radiustbl <index> ipaddr <RADIUS IP address> Name]>set radauthlifetm <900-43200 milliseconds (in 60 sec increments)> Name]>show radiustbl Configure RADIUS server [Device Name]>set radiustbl <index> status <enable> ipaddr <RADIUS IP address> port <user defined> ssecret <user defined> responsetm <1 to 4 seconds> maxretx <1 to 10 times> type <authentication.

Parameter name as used in the Access Point Access Point network objects are associated with Groups. and default value.Enable or disable the Inter-Access Point Protocol Static MAC Address Filter Table .Access Point system information Inventory Management Information . Specify IP Address. The Access Point CLI is under development as this document is being prepared.Use the graphical web browser interface Link Integrity Group .Enable and disable specific addresses IAPP Parameters .Management information SNMP IP Access Table Parameters SNMP Table Host Table Parameters Primary and Backup RADIUS Server Table Parameters .Control access my Media Access Control number DHCP Server Parameters . Use the following Tables to configure the Access Point.Enable or disable SpectraLink Voice over IP feature 6-19 . RW = Read-Write.Wireless Interface (or you can say Wireless Card) Information Autochannel Select (ACS) .Hardware.Value range.Security settings Ethernet Filtering Table .Data type Values .Parameter Tables Parameter Tables Objects contain groups that contain both parameters and parameter tables. therefore.RADIUS Authentication and Accounting information Telnet Parameters . Group.Set up for file transfers.Telnet Port setup Serial Port Parameters . firmware and software version information Network Parameters . and file type. W = Write Only CLI Parameter . if any ACC. Columns used on the tables include: — — — — — Name . file name.Enable and disable specific addresses Spanning Tree Parameters .Enable or disable dynamic host configuration DHCP Server table for IP pools SpectraLink VoIP Parameters .IP and Ethernet information Wireless Interface Parameters .Parameter.Set multicast rate MAC Access Control Table Parameters .Indicates access type.Used to help prevent network loops Storm Threshold Parameters .Monitor link status Link Integrity IP Target Table Wireless Interface Security Table . can be "set". The network objects are listed below and associated parameters are described in the following Parameter Tables: System Parameters . or Table Name Type . some table cells are blank where a feature has not yet been implemented or information needs validation. HTTP (web browser) Parameters . . R = Read Only (show).Serial Port setup TFTP Server Parameters .

IP Mask (ipsubmask) or Default Gateway IP Address (ipgw) values can be entered. 6-20 . R R R R R R CLI Parameter sysinvmgmt N/A N/A N/A N/A N/A Network Parameters Name Network IP Address IP Mask Default Router IP Address Default TTL Address Type Type Group IpAddress IpAddress IpAddress Integer Integer Values N/A User Defined User Defined User Defined User Defined static (default) dynamic (future release) ACC. R RW RW RW RW RW RW RW RW R R CLI Parameter system sysname sysloc sysctname sysctemail sysctphone sysflashbckint sysflashupdate sysresettodefaults none none Inventory Management Information Name Inventory Management Serial Number Name ID Major Version Minor Version Type Group DisplayString DisplayString Integer Integer Integer Values N/A N/A N/A N/A N/A N/A ACC. R RW RW RW RW RW CLI Parameter network ipaddr ipsubmask ipgw ipttl ipaddrtype (721 The IP Address Assignment Type (ipaddrtype) must be set to static before the IP Address (ipaddr).Parameter Tables System Parameters Name System Name Location Contact Name Contact E-mail Contact Phone FLASH Backup Interval Flash Update Emergency Restore to defaults Descriptor Up Time DisplayString Integer Type Group DisplayString DisplayString DisplayString DisplayString DisplayString Integer Values N/A User Defined User Defined User Defined User Defined User Defined Seconds 0 1 Resets all parameters to default factory values N/A dd:hh:mm:ss dd – days hh – hours mm – minutes ss – seconds ACC.

2.5 and 11 Mbits/sec 1.5 Mbit/sec 11 Mbit/sec enable disable enable disable enable disable 12 hex digits ACC. 5.5 Mbits/sec 1. and 5.Parameter Tables Wireless Interface Parameters Since the AP-2000 devices support two PC Card slots. 5. 5. which displays the objects associated with both PC Cards A and B. 2. larger systems operate a lower average transmit rates.5 and 11 Mbits/sec 6-21 . Distance between APs Multicast Rate 1 and 2 Mbits/sec 1. 2. Name Wireless Interfaces Wireless Interface A Wireless Interface B Network Name Distance between APs Type Group N/A N/A DisplayString Integer Values N/A N/A N/A 2 – 31 characters Large Medium Small Minicell Microcell enable (default) disable enable (default) disable 1 – 65535 sec Depends on Card Support 0 – 2347 1 Mbit/sec 2 Mbit/sec 5. R R R RW RW CLI Parameter wif wif 3 wif 4 netname distaps Auto Channel Select (ACS) Interference Robustness DTIM Period Operating Frequency Channel RTS/CTS Medium Reservation Multicast Rate Integer Integer Integer Integer Integer Integer RW RW RW RW RW RW autochannel interrobust dtimperiod channel medres multrate Closed Wireless System Load Balancing Medium Distribution MAC Address Integer Integer Integer PhyAddress RW RW RW R closedsys ldbalance meddendistrib macaddr (721 Large Medium Small Minicell Microcell There is an inter-dependent relationship between the Distance between APs and the Multicast Rate. 2. In general. we differentiate the two cards by using the table index: — — Slot A = index 3 Slot B = index 4 The wireless interface group parameter is wif.5 and 11 Mbits/sec 1.

Name SNMP IP Access Table Table Index IP Address IP Mask Interface Type Table Integer IpAddress IpAddress Integer Values N/A User Defined User Defined User Defined 1 = Ethernet 3 = PC Card A 4 = PC Card B User Defined enable disable delete ACC. R W W RW RW CLI Parameter snmpstatus snmprpasswd snmprwpasswd snmptraphosttbl snmpipaccesstbl SNMP IP Access Table Parameters When creating table entries. you may either specify the argument name followed by argument value or simply entering the argument value. then enter the values in the order depicted by the following table. the only argument that can be omitted is the “comment” argument. Due to the nature of the information. CLI applies default values to the omitted arguments. R N/A RW W RW RW CLI Parameter snmptraphosttbl index ipaddr passwd cmt status 6-22 . CLI applies default values to the omitted arguments. When only the argument value is specified.Parameter Tables SNMP Parameters Name SNMP Read Password Read/Write Password SNMP Trap Host Table SNMP IP Access Table Type Group DisplayString DisplayString N/A N/A Values N/A User Defined public (default) User Defined public (default) N/A N/A ACC. you may either specifying the argument name followed by argument value. Name SNMP Trap Host Table Table Index IP Address Password Comment (optional) Status Type Table Integer IpAddress DisplayString DisplayString Integer Values N/A User Defined User Defined User Defined User Defined enable disable delete ACC. R N/A RW RW RW CLI Parameter snmpipaccesstbl index ipaddr submask if Comment (optional) Status DisplayString Integer RW RW cmt status SNMP Table Host Table Parameters When creating table entries. the only argument that can be omitted is the “comment” argument. Due to the nature of the information.

6-23 .Parameter Tables Primary and Backup RADIUS Server Table Parameters ORiNOCO devices that use RADIUS authentication and/or accounting support both primary and backup RADIUS servers.900 seconds 900 sec (default) disable ethernetIf pcCardAIf pcCardBIf allInterfaces ACC. Name RADIUS Primary RADIUS Backup RADIUS RADIUS Server Status Service Type Type Table N/A N/A Integer Integer Values N/A N/A N/A enable disable (default) Authentication (default) Accounting Auth & Accounting User Defined 900-43200 sec in 60 sec increments 900 sec (default) enable disable (default) User Defined 1812 (default) User Defined 1813 (default) User Defined public (default) 1 – 4 seconds 3 sec (default) 1 – 10 3 (default) RW RW W RW RW ACC. HTTP and Serial port). R RW RW RW RW RW CLI Parameter telnet telsessions telport tellogintout telsessiontout telifbitmask (721 The Telnet Sessions (telsessions) parameter is the maximum number of concurrent management interface sessions allowed (Telnet. R R R RW R CLI Parameter radiustbl (index) 1 (index) 2 status type Server IP Address IpAddress RW RW ipaddr radauthlifetm Authentication Life Time Integer MAC Access Control Authentication Port Accounting Port Shared Secret Response Time (sec) Maximum Retransmissions Integer Integer Integer DisplayString Integer Integer radmacaccctrl pauth port ssecret responsetm maxretx Telnet Parameters Name Telnet Telnet Sessions Telnet Port Telnet Login Inactivity Time-out Telnet Session Idle Time-out Telnet Session Bitmask Type Group Integer Integer Integer Integer Value Values N/A 3-5 User Defined 23 (default) 1 – 60 seconds 30 sec (default) 1 . The configuration parameters and statistics are the same for both primary and backup servers. The CLI differentiates the primary and backup RADIUS parameters by using the table index. SNMP.

4800. R RW CLI Parameter serial serbaudrate Data Bits Parity Stop Bits Flow Control Integer Integer Integer Value R R R RW serdatabits serparity serstopbits serflowctrl TFTP Server Parameters These parameters relate to upload and download commands. If nothing is specified in the command line when issuing subsequent upload and/or download commands. 57600 8 none 1 none (default) xon/xoff ACC. 19200. the specified arguments are stored in TFTP parameters for future use. 38400. the stored arguments are used. Name TFTP TFTP File Name TFTP File Type Type Group DisplayString Integer Values N/A User Defined User Defined bin (image) config bspbl ACC. R RW RW RW R CLI Parameter linkint linkintstatus linkintpollint linkintpollretx linkinttbl 6-24 . R RW W RW RW CLI Parameter http httpstatus httppasswd httpport httpifbitmask Link Integrity Group Name Link Integrity Link Integrity Status Link Integrity Poll Interval Link Integrity Poll Retransmissions Link Integrity IP Target Table Type Group Integer Integer Integer N/A Values N/A enable (default) disable User Defined 500 ms (default) User Defined N/A ACC.Parameter Tables Serial Port Parameters Name Serial Baud Rate Type Group Integer Values N/A 2400. 9600 (default). When a user executes an upload and/or download Command. R RW RW RW CLI Parameter tftp tftpipaddr tftpfilename tftpfiletype TFTP Server IP Address IpAddress HTTP (web browser) Parameters Name HTTP HTTP Server Status HTTP Password HTTP Port HTTP Session Bitmask Type Group Integer DisplayString Integer Value Values N/A enable (default) disable User Defined User Defined Default = 80 disable ethernetIf pcCardAIf pcCardBIf allInterfaces ACC.

Name Security Table Index Enable Encryption Encryption Key 1 Encryption Key 2 Encryption Key 3 Encryption Key 4 Deny non-encrypted Data Data Transmission Encryption Key Usage Type Table Integer Integer DisplayString DisplayString DisplayString DisplayString Integer Integer 3 = PC Card A 4 = PC Card B enable disable User Defined User Defined User Defined User Defined enable disable Key 1 (default) Key 2 Key 3 Key 4 Values ACC. R N/A RW RW RW CLI Parameter linkinttbl index targetipaddr cmt status Wireless Interface Security Table The following table details the specific wireless interface parameters for the AP-2000.Parameter Tables Link Integrity IP Target Table Name Link Integrity IP Target Table Table Index Target IP Address Comment (optional) Status Type Table Integer IpAddress DisplayString Integer Values N/A User Defined User Defined User Defined enable disable delete ACC. 6-25 . Name Ethernet Filtering Table Table Index Operation Type Ethernet Filtering Protocol Filter Comment Filter Status Octet String DisplayString Integer Type Table N/A Values N/A N/A Allow Deny N/A 2. R N/A RW W W W W RW RW CLI Parameter wifsec N/A encrypt encryptkey1 encryptkey2 encryptkey3 encryptkey4 encryptallowdeny encryptkeytx Ethernet Filtering Table Identify the different filters by using the table index.31 characters enable (default) disable ACC. R R RW RW RW RW CLI Parameter etherflttbl index etherfltoptype proto cmt status (721 The filter Operation Type (allow or deny) applies only to the protocol filters that are enabled in this table.

4 seconds 2 seconds 410 ms 512 ms (default) 614 ms 717 ms 819 ms 1 . R RW RW RW RW RW CLI Parameter stp stpstatus stppriority stpmaxage stphellotime stpfwddelay 6-26 . R R RW wiredmacaddr RW RW wirelessmacaddr RW wirelessmask wiredmask CLI Parameter staticmactbl index DisplayString Integer 2 – 31 characters enable (default) disable RW RW cmt status Spanning Tree Parameters Name Spanning Tree Spanning Tree Status Bridge Priority Maximum Age Hello Time Forward Delay Type Group Integer Integer Integer Integer Integer Values N/A enable disable (default) User Defined User Defined User Defined User Defined ACC.10 enable (default) disable ACC.Parameter Tables IAPP Parameters Name IAPP IAPP Status Periodic Announce Interval Announce Response Time Handover Time-out Type Group Integer Integer Integer Integer Values N/A enable (default) disable 1 . R RW RW R RW CLI Parameter iapp iappstatus iappannint iappannresp iapphandtout Max. Handover Retransmissions Send Announce Request on Startup Integer Integer RW RW iapphandretx iappannreqstart Static MAC Address Filter Table Name Static MAC Address Filter Table Table Index Static MAC Address on Wired Network Static MAC Address Mask on Wired Network Static MAC Address on Wireless Network Static MAC Address Mask on Wireless Network Comment (optional) Status (optional) Type Table N/A PhysAddress PhysAddress PhysAddress PhysAddress Values N/A N/A User Defined User Defined User Defined User Defined ACC.

Parameter Tables Spanning Tree Priority and Path Cost for Each Interface Name Spanning Tree Table Table Index Interface Type Table N/A Integer Values N/A N/A 1 = Ethernet 2 = PC Card A 3 = PC Card B User Defined User Defined ACC. R R RW RW RW CLI Parameter macacltbl index macaddr cmt status 6-27 . N/A RW RW CLI Parameter stmthres stmbrdthres stmmultithres Storm Threshold Table Name Storm Threshold Table Table Index Type Table Integer Values N/A 1 = Ethernet 2 = PC Card A 3 = PC Card B 4 – 250 packets/sec 4 – 250 packets/sec ACC. R R CLI Parameter stmthrestbl index Broadcast Threshold Multicast Threshold Integer Integer RW RW bcast mcast MAC Access Control Table Parameters Name MAC Address Control Table Table Index MAC Address Comment (optional) Status Type Table N/A PhysAddress DisplayString Integer Values N/A N/A User Defined User Defined enable (default) disable ACC. R R RW CLI Parameter stpbl index if Priority Path Cost Integer Integer RW RW priority pathcost Storm Threshold Parameters Name Storm Threshold Broadcast Threshold Multicast Threshold Type Group Integer Integer Values N/A 4 – 250 packets/sec 4 – 250 packets/sec ACC.

Parameter Tables DHCP Server Parameters Name DHCP Server DHCP Server Status Default Router IP Address Default Lease Time Maximum Lease Time Type Group Integer IpAddress Integer32 Integer32 Values N/A enable (default) disable User Defined >0 86400 sec (default) >0 86400 sec (default) ACC. 6-28 . R RW RW RW RW CLI Parameter dhcp dhcpstatus dhcpgw dhcpdefleasetm dhcpmaxleasetm DHCP Server table for IP pools Name DHCP Server IP Address Pool Table Table Index Start IP Address End IP Address Width Comment (optional) Status Type Table Integer IpAddress IpAddress Integer DisplayString Integer Values N/A User Defined User Defined User Defined User Defined User Defined enable disable delete ACC. R RW CLI Parameter spectralink speclinkstatus (721 The DHCP Server (dhcpstatus) can only be enabled after a DHCP IP Pool table entry has been created. R N/A RW RW RW RW RW CLI Parameter dhcpippooltbl index startipaddr endipaddr width cmt status SpectraLink VoIP Parameters Name Spectralink VoIP Spectralink VoIP Status Type Group Integer Values N/A disable (default) enable ACC.

For the Hardware Revision Level. or > show sysinvmgmtcmptbl to see the Component Table.Recording Your Configuration Settings 7 We recommend keeping a copy of the configuration settings for each of the AP-2000 devices in your network. MAC Address of the AP-2000 unit AP software image version BSP/Bootloader firmware version Hardware revision level MAC Address of the PC Card in Slot A Driver version of the PC CArd in Slot A MAC Address of the PC Card in Slot B Driver version of the PC Card in Slot B In the web interface. The information below is hard-coded in your system and can be viewed from the Web Interface pages by clicking the Status button or by viewing the Inventory management Table information form the CLI using: > show sysinvmgmt to see the entire table. the following information may be useful when contacting Technical Support: Type AP-2000 with Mini-DIN8 serial port adapter AP-2000 converted to AS-2000 with Mini-DIN8 serial port adapter Object ID 97 96 Use the following pages to document your configuration. 7-1 . click the Monitor button and select the Version tab. or > show sysinvmgmtcmpiftbl to see the Component Interface Table only. You can use this information to easily recover your network settings if necessary. The table displays the Object ID and version numbers for each piece of hardware.

dynamic> My System Values CLI Parameter Syntax Configurable Parameters Configurable Parameter System Parameters Name AP-2000 Location Contact Name Contact E-mail Contact Phone Network Parameters .0.IP Configuration IP Address Assignment Type dynamic (DHCP) IP Address (static) 10. Use the third column to record your settings. The AP-2000 device will act as a DHCP client to the server in your network.IP Pool Table Start IP Address End IP Address Default Lease Time 86400 Maximum Lease Time 86400 Comment (optional) (721 If the IP Address Assignment type is set to dynamic.0.DHCP Server DHCP Server Status 2 (disable) Gateway IP Address Primary DNS IP Address Secondary DNS IP Address Network Parameters .0. Table 7-1 Factory Default Values > show system > set sysname <System Name> > set sysloc “Unit Location” > set sysctname “Contact Name” > set sysctnemail “name@organization.DHCP Server . no other information is required. 7-2 .0.com” > set sysctphone “Contact Phone Number” > show network OR > show network ip > set ipaddrtype <static. The first column in the table indicates the parameter name.1 > set ipaddr <IP Address> > set ipsubmask <IP Mask IP Address> > set ipgw <Default Gateway IP Address> > set ipttl <number of hops to destination> > show dhcp > set dhcpstatus <1=enable.0 Default Router IP Address (Gateway IP Address) 10. The last column is an aide which indicates the CLI command syntax required to define the configuration parameters in case you need to re-enter data through the Command Line Interface.0.0. 2=disable> > set dhcpgw <Default Gateway IP Address> > set dhcppridnsipaddr <DNS Server IP Address> > set dhcpsecdnsipaddr <DNS Server IP Address> > show dhcpippooltbl > set dhcpippooltbl <index> startipaddr <Starting IP Address in the Range> > set dhcpippooltbl <index> endipaddr <Ending IP Address in the Range> (sec) > set dhcpippooltbl <index> defleasetm <Time in Seconds> (sec) > set dhcpippooltbl <index> maxleasetm <Time in Seconds> > set dhcpippooltbl <index> cmt “Optional Comment” IP Mask 255. The shaded cells indicate the location of the parameters within the HTTP web interface.1 Default TTL (Time to Live) 64 Network Parameters . the second column indicates the default value of each parameter (when applicable).In the table below. record the configuration settings for each of your AP-2000 units.

56. 44. 2=disable> > show linkint > set linkintstatus <1=enable.38. 9. 64 .5260 MHz Japan: 34 . 12. 48.0. 54> > show wif OR show wif 3 > show wif 3 phytype > set wif 3 netname “Network Name for PC Card in Slot A” >set wif 3 autoselect <enable. 36.0. disable> RTS/CTS Medium Reservation 2347 (disable) DTIM Period 1 Transmit Rate 0 .Wireless Slot A with 5 GHz (802.11b) card Physical Layer Type DSSS Network Name My Wireless Network A Auto Channel Select enable (721 When setting up WDS. disable> > set vlanmgmtid <VLAN ID for AP-2000 device> > show vlanidtbl > set <index> id <VLAN ID> > show wif OR show wif 3 > show wif 3 phytype > set wif 3 netname “Network Name for PC Card in Slot A” >set wif 3 autoselect <enable.Link Intergrity .VLAN ID Table VLAN ID (wireless interfaces) Interfaces Parameters . 24.Link Intergrity Link Integrity Status 2 (disable) Poll Interval 500 Poll Retransmissions 5 Network Parameters .VLAN Status disable Management ID Network Parameters .Wireless Slot A with 2.42.5170 When setting up WDS.0 Comment (optional) Status 2 (disable) Network Parameters .in Japan: 34. (721 7-3 .65355> > show wif 3 suppdatarates (Mbits/s) > set wif 3 txrate <6.Auto Fallback Interfaces Parameters . 2=disable> (sec) > set linkintpollint <Time in Seconds> > set linkintpollretx <Number of Times to Retransmit> > show linkinttbl > set linkinttbl <index> targetipaddr > set linkinttbl <index> cmt <Optional Comment> > set linkinttbl <index> status <1=enable. 48.Target IP Address Table Target IP Address 0. 18. 2=disable> > show vlan > set vlan status <enable. 60. Auto Channel Select must be disabled.46> My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Status 2 (disable) Network Parameters . 40. disable> MHz > show wif 3 suppchannels > set wif 3 channel <in the US: 36. 52.11a) card Physical Layer Type OFDM Network Name My Wireless Network A Auto Channel Select enable Frequency Channel US/CAN: 52 .Table 7-1 Factory Default Values > set dhcpippooltbl <index> status <1=enable. > set wif 3 medres <500=enable .4 GHz (802. Auto Channel Select must be disabled.2347=disable) (sec) > set wif 3 dtimperiod <1 .

00.00. disable> (sec) > set wif 3 dtimperiod <1 .65355> >set wif 3 closedsys <enable.4 GHz (802.00 Status disable (721 (721 (721 The Distance between APs and the Multicast Rate are inter-dependent.3 <enable.2462 MHz (France) When setting up WDS. Auto Channel Select must be disabled.Table 7-1 Factory Default Values > show wif 3 suppchannels MHz > set wif 3 channel <Frequency Channel> My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Frequency Channel 3 . 2=disable> OR > set wdstbl 3.00.00.Partner MAC Address 00. disable> > set wif 3 ldbalancing <enable. > set wif 3 medres <500=enable . 11> Interfaces Parameters .2 <enable.00.2 partnermacaddr <MAC Address> > set wdstbl 3.1 status <1=enable.Partner MAC Address 00. When setting up WDS. Small> RTS/CTS Medium Reservation 2347 (disable) Interference Robustness enable DTIM Period 1 Closed System disable Load Balancing enable Distance Between APs Large Multicast Rate > show wdstbl 3 2 Mbits/s > show wif 3 suppdatarates (Mbits/s) > set wif 3 multrate <1. disable> > set wif 3 distaps <Large. disable> Status disable 2. disable> > set wdstbl 3. 2=disable> OR > set wdstbl 3.00.Wireless Slot A with 2.1 <enable. the second digit represents the channel numbers 1-6.00.2347=disable) >set wif 3 interrobust <enable.00. 2.00 Status disable 3. 5.2422 MHz 11 . 2=disable> OR > set wdstbl 3. The WDS table index uses two digits .00.00. 7-4 .2 status <1=enable.1 partnermacaddr <MAC Address> > set wdstbl 3. Auto Channel Select must be disabled.Partner MAC Address 00.00.11b) card.5. As you increase the distance between APs.00 > set wdstbl 3. Medium. the Multicast rate drops.3 partnermacaddr <MAC Address> > set wdstbl 3.00.the first represent the wireless interface card (3 = Slot A and 4 = Slot B). disable> > set wdstbl 3.Wireless Distribution System 1.3 status <1=enable.

2=disable> OR > set wdstbl 3.11b) card Physical Layer Type DSSS Network Name My Wireless Network B Auto Channel Select enable When setting up WDS.00.2347=disable) >set wif 4 interrobust <enable.0 Status disable 6. disable> > set wdstbl 3.0.Wireless Slot B with 2. 44.Partner MAC Address 0.4 status <1=enable. 48.Table 7-1 Factory Default Values > set wdstbl 3.00 Status disable 5.2422 MHz 11 .Partner MAC Address 0. 12.6 partnermacaddr <MAC Address> > set wdstbl 3. 2=disable> OR > set wdstbl 3. 40.4 <enable.5260 MHz RTS/CTS Medium Reservation 2347 (disable) DTIM Period 1 Transmit Rate 0 .0.0.2462 MHz (France) RTS/CTS Medium Reservation 2347 (disable) Interference Robustness enable DTIM Period 1 Closed System disable Load Balancing enable (721 7-5 .5 partnermacaddr <MAC Address> > set wdstbl 3.00. 60. disable> > set wdstbl 3.0 Status disable Interfaces Parameters .5 <enable. disable> > show wif OR show wif 4 > show wif 4 phytype > set wif 4 netname “Network Name for PC Card in Slot A” >set wif 4 autoselect <enable. 64> > set wif 4 medres <500=enable .65355> > show wif 4 suppdatarates (Mbits/s) > set wif 4 txrate <6. 18. 24. 36.0.Partner MAC Address 00.4 GHz (802. 48.00. 2=disable> OR > set wdstbl 3.Auto Fallback Interfaces Parameters .6 status <1=enable.00.6 <enable.5 status <1=enable. Auto Channel Select must be disabled. disable) (sec) > set wif 4 dtimperiod <1 .Wireless Slot B with 5 GHz (802.2347=disable) (sec) > set wif 4 dtimperiod <1 . disable> > set wif 4 ldbalancing <enable.65535> >set wif 4 closedsys <enable. disable> My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter 4.11a) card Physical Layer Type OFDM Network Name My Wireless Network A Auto Channel Select enable Frequency Channel 52 . 9. 56. disable> Frequency Channel 3 . 52. disable> > show wif 4 suppchannels MHz > set wif 4 channel <36.4 partnermacaddr <MAC Address> > set wdstbl 3. 54> > show wif OR show wif 4 > show wif 4 phytype > set wif 4 netname “Network Name for PC Card in Slot A” >set wif 3 autoselect <enable. > show wif 4 suppchannels MHz > set wif 4 channel <Frequency Channel> > set wif 4 medres <500=enable .

3 status <1=enable.Partner MAC Address 00.Table 7-1 Factory Default Values > set wif 4 distaps <Large.4 GHz (802.00.00.00 Status disable (721 (721 The Distance between APs and the Multicast Rate are inter-dependent. disable> > set wdstbl 4.00. Auto Channel Select must be disabled. disable> > set wdstbl 4.00.00.3 partnermacaddr <MAC Address> > set wdstbl 4.Wireless Distribution System 1. disable> 00.2 <enable.00 Status disable 3.5 status <1=enable.6 <enable.00.Partner MAC Address 00.1 status <1=enable. 5.2 partnermacaddr <MAC Address> > set wdstbl 4. 2=disable> OR > set wdstbl 4.4 partnermacaddr <MAC Address> > set wdstbl 4.00. 2. disable> > set wdstbl 4.00.00. the Multicast rate drops.00 > set wdstbl 4.00. The WDS table index uses two digits . 2=disable> OR > set wdstbl 4.00.2 status <1=enable. Small> My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Distance Between APs Large Multicast Rate > show wdstbl 4 2 Mbits/s > show wif 4 suppdatarates (Mbits/s) > set wif 4 multrate <1.00 Status disable 4.Partner MAC Address 00.00.4 <enable.00.00.5 partnermacaddr <MAC Address> > set wdstbl 4.5.6 partnermacaddr <MAC Address> > set wdstbl 4.00.00.00 Status disable 5.1 <enable.6 status <1=enable.00. Medium. 7-6 .4 status <1=enable. As you increase the distance between APs. 11> Interfaces Parameters .Partner MAC Address > set wdstbl 4.00.Partner MAC Address 00.00.00. disable> > set wdstbl 4. 2=disable> OR > set wdstbl 4. disable> > set wdstbl 4.11b) card . 2=disable> OR > set wdstbl 4.00 Status disable 6.00.00.00. 2=disable> OR > set wdstbl 4.Partner MAC Address 00. the second digit represents the channel numbers 1-6.1 partnermacaddr <MAC Address> Status disable 2.5 <enable. 2=disable> OR > set wdstbl 4. When setting up WDS.the first represent the wireless interface card (3 = Slot A and 4 = Slot B).3 <enable.00.Wireless Slot B with 2.

57600> > set serflowctrl <xon/xoff.Table 7-1 Factory Default Values > show ethernet > set etherspeed <10halfduplex. disable> > set httpport <0 . 100halfduplex. all> > set mgmtipaccesstbl <index> cmt <Optional Comment> > set mgmtipaccesstbl <index> status <enable.Ethernet (speed and transmission mode) Configuration autospeedauto 10 and 100 indicate the transmission speed in Mbps. 4=SlotB. 38400.IP Access Table Management IP Access Table Status enable IP Address IP Mask Interface (optional) all Comment (optional) Status (optional) enabled with entry Management Parameters . disable> > show snmp OR show http OR show telnet OR show serial > set snmpstatus <enable. 10fullduplex.65535> (sec) > set tellogintout <0 . autohalfduplex. (721 7-7 . disable> > set httpstatus <enable. disable> > set telport <0 . Management Parameters . autospeedauto> My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Interfaces Parameters . 19200.Services SNMP Status disable HTTP Status enable HTTP Port 80 Telnet Status enable Telnet Port Number 23 Telnet Login Time-out 30 Telnet Session Idle Time-out 450 Serial Baud Rate 9600 Serial Flow Control None (721 We recommend leaving this setting at its default value.300 > (sec) > set telsessiontout <0 .36000> >set serbaudrate <2400. 4800.65535> > set telstatus <enable. 3=SlotA.Passwords > set snmprpasswd <Old Password> <New Password> <Confirm Password> > set snmprwpasswd <Old Password> <New Password> <Confirm Password> > set telpasswd <Old Password> <New Password> <Confirm Password> > set httppasswd <Old Password> <New Password> <Confirm Password> > show mgmtipaccesstbl > set mgmtpipaccesstblstatus <enable. 9600. disable> > set mgmtipaccesstbl <index> ipaddr <IP Address> > set mgmtipaccesstbl <index> submask <IP Address> > set mgmtipaccesstbl <index> if <1=Ethernet. 100fullduplex. 10autoduplex. none> SNMP Read Password public SNMP Read/Write Password public Telnet/CLI Password public HTTP (AP-2000) Password public Management Parameters .

80:09 Apple Talk 1 and 2 disable The Ethernet Protocol Filter Table contains a list of common protocol filters.08:00 IP disable 16 .Static MAC Address Table Filtering Parameters . disable.80:40 DEC Netbios disable 13 .08:88 Xyplex disable Filtering Parameters . block> > show etherflttbl My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Filtering Parameters .Static MAC Address Filter Table Refer to Filtering Parameters . disable> >set iparpfltipaddr <Network filter IP Address> >set iparpfltsubmask <Network Mask IP Address> Proxy ARP Status disable IP/ARP Filtering Status disable IP/ARP Filtering Address 7-8 IP/ARP IP Mask (721 2 .Ethernet Protocol Filter Status enable Operation Type block Filtering Parameters .60:01 DEC MOP Dump/Load disable To enable or disable a protocol filter: > set etherflttbl <index> enable OR > set etherflttbl <index> protonumber <Protocol Number> status <enable.60:05 DEC Diagnostics disable To add a filter to the table: > set etherflttbl <index> protonumber <Protocol Number> protoname <(Optional) Protocol Name> status <(Optional) enable.0B:AD Banyan VINES disable 5 .60:07 DEC LAVC disable 10 .Advanced Filtering >show parp >setparp status <enable. delete> cmt <Optional Comment> 8 . . delete> 11 . disable.08:06 IP-ARP disable 17 . The Filter Operation (passthru or block) applies only to the protocols enabled in this table.80:D5 IBM SNA Services disable 15 .80:05 HP Probe Control disable 14 .80:F3 Apple Talk ARP 1 and 2 disable 4 .60:02 DEC MOP Rem Cons disable 12 .81:37 Novell (ECONFIG E) disable 18 .0B:AF Banyan VINES Echo disable 6 .60:03 Decnet Phase IV disable 7 . disable> > set etherfltoptype <passthru.Ethernet Protocol Filter Table 1 . You can add filters to this table as needed. disable> >show iparp >set iparp status <enable.60:04 DEC LAT disable 9 .80:19 Apollo Domain Status disable 3 .Table 7-1 Factory Default Values > show etherflt > set etherfltstatus <enable.80:35 RARP Reverse ARP disable 19 .81:4C SNMP Over Ethernet disable 20 .

Storm Threshold Table Broadcast Address Threshold 0 Multicast Address Threshold 0 Broadcast Ethernet Threshold 0 Multicast Ethernet Threshold 0 Broadcast Wireless . disable> > set oriWirelessIfTrapsStatus <enable.65535> (1/100 sec) > set sptfwddelay <0 . disable> > set oriFlashMemoryTrapsStatus <enable. disable> > set oriOperationalTrapsStatus <enable.65535> (1/100 sec) >set sptbridgehellotime <0 .Priority and Path Cost Table Refer to Bridge Parameters .Priority Path and Cost Table >show stmthres (packets/sec) >set stmbrdthres <0 . disable> > show snmptraphosttbl > set snmptraphosttbl <index> ipaddr <IP Address> > set snmptraphosttbl <index> passwd <Old Password> <New Password> <Confirm Password> > set snmptraphosttbl <index> cmt <Optional Comment> > set snmptraphosttbl <index> status <enable.255> (packets/sec) >set stmmultithres <0 .9999> (packets/sec) >set stmthrestbl 3 mcast <0 .255> (packets/sec) >set stmthrestbl 1 bcast <0 .9999> (packets/sec) >set stmthrestbl 4 mcast <0 .Trap Host Table IP Address Password Comment (optional) Status (optional) enabled with entry Bridge Parameters .Spanning Tree Spanning Tree Status enable Bridge Priority 32768 Max Age 2000 Hello Time 200 Forward Delay 1500 Bridge Parameters .Spanning Tree .Slot A Threshold 0 Broadcast Wireless .Slot A Threshold 0 Multicast Wireless .9999> (packets/sec) >set stmthrestbl 4 bcast <0 .9999> (packets/sec) >set stmthrestbl 1 mcast <0 .65535> (1/100 sec) > set sptmaxage <0 .9999> Bridge Parameters .65535> Configuration Trap Status enable Security Trap Status enable Wireless Interface Trap Status enable Operational Trap Status enable Flash Memory Trap Status enable TFTP Trap Status enable Image Trap Status enable Alarms Parameters . disable> > show spt > set sptstatus <enable.Slot B Threshold 0 7-9 . disable> > set oriTrapsImageStatus <enable.Slot B Threshold 0 Multicast Wireless . disable> > set oriConfigurationTrapsStatus <enable.9999> (packets/sec) >set stmthrestbl 3 bcast <0 . disable> > set oriTFTPTrapsStatus <enable.Table 7-1 Factory Default Values My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Alarms Parameters .Spanning Tree . disable> > set stppriority <0 .Groups > set oriConfigurationTrapsStatus <enable.

disable> > set radiustbl 1 ipaddr <IP Address> > set radiustbl 1 port <Port Number> > set radiustbl 1 ssecret <Password> (sec) > set radiustbl 1 responsetm <1 .None .Wireless Slot A none disable > set secconfig none > set wifsec 3 encryptstatus disable 802.Table 7-1 Factory Default Values > show macacl > set macaclstatus <enable.Primary RADIUS Server Status disable Server IP Address Port (optional) 1812 Shared Secret public Response Time (optional) 3 Max.10> > set radiustbl 1 maxretx <Number of Times to Retransmit 1 . delete> > show radius > set radmacaccctrl <enable. disable> > set radiustbl 2 ipaddr <IP Address> > set radiustbl 2 port <1 .MAC Access Control Table MAC Address Comment (optional) Status (optional) enable on entry Security Parameters .Wireless Slot B none disable > set secconfig none > set wifsec 4 encryptstatus disable 802. disable> (sec) > set radauthlifetm <90 .4> > show radiustbl 2 > set radiustbl 2 status <enable.RADIUS Authentication .None . Retransmissions (optional) 3 Security Parameters .43200> > show radiustbl > set radiustbl 1 status <enable.Encryption .4> My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Security Parameters . disable.1x Security Mode --- Encryption Status (Wireless Slot B) --- 7-10 . disable> > set macacloptype <passsthru.Backup RADIUS Server Status disable Server IP Address Destination Port 1813 Response Time (optional) 3 Max.10> > set radiustbl 2 maxretx <Number of Times to Retransmit 1. Retransmissions (optional) 3 Security Parameters . block> > show macacltbl > set macacltbl <index> macaddr <MAC address> > set macacltbl <index> cmt <Optional Comment> > set macacltbl <index> status <enable.RADIUS Authentication .Encryption .1x Security Mode --- Encryption Status (Wireless Slot A) --- Security Parameters .MAC Access Control MAC Access Control Status disable MAC Access Control Operation block Security Parameters .RADIUS MAC Authentication RADIUS MAC Access Control Status disable Authorization Lifetime 900 Security Parameters .65535> (sec) > set radiustbl 2 responsetm <1 .

128> > set wifsec 4 encryptkey1 <Encryption Key> > set wifsec 4 encryptkey2 <Encryption Key> > set wifsec 4 encryptkey3 <Encryption Key> > set wifsec 4 encryptkey4 <Encryption Key> > set wifsec 4 encrypt <enable.Table 7-1 Factory Default Values My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Security Parameters .Slot B none enable (bits) > set wifsec 3 enckeylen <40.Encryption .1x Security Mode Encryption Status Encryption Key Length Encryption Key 1 Encryption Key 2 Encryption Key 3 Encryption Key 4 Deny Non-Encrypted Data enable Encrypt Date Transmissions Using 1 Security Parameters .1x > set wifsec 3 encryptstatus disable > set wifsec 4 encryptstatus disable (bits) >set secenckeylentbl 3 enckeylen <40 or 128> (bits) >set secenckeylentbl 4 enckeylen <40 or 128> (sec) > set secrekeyinterval <60 .WEP only .Encryption .1x Security Mode --- Encryption Status --- Encryption Key Length Encryption Key 1 Encryption Key 2 Encryption Key 3 Encryption Key 4 Deny Non-Encrypted Data enable Encrypt Date Transmissions Using 1 Security Parameters . disable> > set wifsec 4 encryptkeytx <Key Number 1-4> > show security 802.Encryption .1x Security Mode Encryption Status Key Length 7-11 Encryption Key 1 generated automatically .65535> > set wifsec 4 encryptstatus enable > set secconfig none 802.Slot A none enable (bits) > set wifsec 3 enckeylen <40.1x Security Mode Encryption Status (Wireless Slot A) Encryption Status (Wireless Slot B) Key Length (Wireless Slot A) Key Length (Wireless Slot B) Rekeying Interval 3600 seconds Security Parameters .1x) .802. 128> > set wifsec 3 encryptkey1 <Encryption Key> > set wifsec 3 encryptkey2 <Encryption Key> > set wifsec 3 encryptkey3 <Encryption Key> > set wifsec 3 encryptkey4 <Encryption Key> > set wifsec 3 encrypt <enable.1x only 802. disable> > set wifsec 3 encryptkeytx <Key Number 1-4> > set wifsec 3 encryptstatus enable > set secconfig none 802.Slot A Mixed (WEP and 802.1x) enable > set secconfig mixed > set wifsec 3 encryptstatus enable (bits) >set secenckeylentbl 3 enckeylen <40 or 128> ----- 802.Encryption .WEP only .Mixed (WEP and 802.1x disable disable > set secconfig 802.

2 Commands .0. The following message will be displayed: WARNING: This command will reset the device configuration parameters to factory default values.0.Mixed (WEP and 802.TFTP Server Server IP Address 10.Slot B Mixed (WEP and 802. 7-12 .Table 7-1 Factory Default Values --------Key 1 (sec) > set secrekeyinterval <60 .65535> ----------My System Values CLI Parameter Syntax Configurable Parameters (Continued) Configurable Parameter Encryption Key 2 --- Encryption Key 3 --- Encryption Key 4 --- Deny Non-Encrypted Data disable Encrypt Date Transmissions Using Key 1 Rekeying Interval 3600 seconds Security Parameters .0. bspbl> > show tftp > set tftpipaddr <IP Address> > upload <TFTP IP Address> <File Name> config ----------> set wifsec 4 encryptstatus enable > set secconfig mixed 802. bin.Download .0.2 Commands .Reset --> set sysresettodefaults 1 Reset to Factory Defaults --- SpectraLink VoIP (Voice over IP) > show spectralink > set spectralinkstatus <enable.TFTP Server Server IP Address 10.1x Security Mode Encryption Status Key Length Encryption Key 1 generated automatically Encryption Key 2 --- Encryption Key 3 --- Encryption Key 4 --- Deny Non-Encrypted Data disable Encrypt Date Transmissions Using Key 1 Rekeying Interval 3600 seconds Commands .1x) enable (bits) >set secenckeylentbl <index> enckeylen <40 or 128> ----------Key 1 --(sec) > set secrekeyinterval <60 .65535> > show tftp > set tftpipaddr <IP Address> > download <TFTP IP Address> <File Name> <config. disable> SpectraLink VoIP Status disable (721 This command requires you to re-enter the command for confirmation.Upload . Please re-enter this command in order to proceed with execution.1x) .Encryption .

Table 7-2 Wired Mask Wireless MAC Address Wireless Mask Comment (optional) Status (optional) Filtering Parameters .enabled with entry in table)> 7-13 .Static MAC Address Table Wired MAC Address Use the following commands to enter information into the Static MAC Address Table: > show staicmactbl > set staticmactbl <index> wiredmacaddr <wired MAC address> > set staticmactbl <index> wiredmask <wired mask MAC address> > set staticmactbl <index> wirelessmacaddr <wireless MAC address> > set staticmactbl <index> wirelessmask <wireless mask MAC address> > set staticmactble <index> cmt <Optional Comment> > set staticmactbl status <enable. disable (optional .

delete> 7-14 .15> priority <0 .65535> > set stptbl <index> status <enable.Spanning Tree . disable.255> > set stptbl <index> pathcost <1 .Priority Path and Cost Table Priority Path Cost Status Use the following commands to enter information into the Priority Path and Cost Table: > show stptbl > set stptbl <index 1 .Table 7-3 Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Bridge Parameters .

75 Kg (3.10 x 26.11b Channel Frequencies – 802.11a Channel Frequencies – Wireless Communication Range Hardware Specifications Physical Specifications AP-2000 Unit Dimensions (H x W x L) = 5 x 18.) Weight = 1.2 amp Power Consumption = 20 Watts With Active Ethernet Module Input Voltage = 42 to 60 VDC Output Current = 200mA at 48V Power Consumption = 9-10 Watts Environmental Specifications AP-2000 Unit Operating = 0° to 40°C (32° to 104 °F) @ 20 to 90% relative humidity Transport = -40° to 60°C (-40° to 140°F) @ 15 to 95% relative humidity (no condensation allowed) Storage = -10° to 60°C (14° to 140°F) @ 10 to 90% relative humidity (no condensation allowed) 802.25 in.) 802.) Weight = 0.18kg (0.5 lb.5 x 0.3in.4lb) Electrical Specifications Without Active Ethernet Module Voltage = 100 to 240 VAC (50-60 Hz) Current = 0.11a Antenna Adapter Dimensions (H x W x L) = 11.2 cm (4.3 x 2.5 x 26 cm (2 x 7.25 x 10.Specifications 8 In This Chapter Hardware Specifications Radio Specifications – 802.83 x 10.11a Antenna Adapter Operating = 0° to 70°C (32° to 158 °F) @ 20 to 90% relative humidity Transport = -40° to 75°C (-40° to 167 °F) @ 15 to 95% relative humidity Storage = -20° to 75°C (-4° to 167 °F) @ 10 to 95% relative humidity 8-1 .

Active Ethernet Interface Category 5. male Serial Cable = Standard RS-232C serial data cable. subpart B. RJ-45 female socket PCMCIA Interface PC Card Slot (A & B) = Standard PC Card slot for PC Card Serial Port Interface Connector Type = DB9. or Netscape 4 or higher. foiled.0 or better (preferred). with a female DB-9 connector at each end or a standard serial cable and the Mini-DIN8 to DB-9 adapter included in your kit.Hardware Specifications Ethernet Interface 10/100 Base-T.3af pin assignments HTTP Interface Microsoft Internet Explorer 5. 8-2 . Class B requirements Standard 802. twisted pair cables must be used to ensure compliance with FCC Part 15.

11b Channel Frequencies The following table shows the channel allocations that vary from country to country. Values listed in bold font indicate default channels and frequencies.most countries) 4 5 6 7 8 9 10 11 (default-France) 12 13 14 FCC/World (MHz) 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 ETSI (MHz) 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 2467 2472 France (MHz) 2457 2462 2467 2472 Japan (MHz) 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 2467 2472 2484 Table 8-1 802.11a radio certification is currently available in the US/Canada (FCC) and Japan (VCCI) only at this time. 802.11a Channel Frequencies The following table shows the channel allocations that vary from country to country. and France.11a Channel Frequencies 8-3 .11b radio certification is available in the US/Canada (FCC). Channel ID 1 2 3 (default . 802.11a Channel Frequencies 802. Europe (ETSI). Channel ID 34 36 38 40 42 44 46 48 52 56 60 64 FCC/World (MHz) 5180 5200 5220 5240 5260 5280 5300 5320 ETSI (MHz) France (MHz) Japan (MHz) 5170 5190 5210 5230 - Table 8-2 802. Values listed in bold font indicate default channels and frequencies. Japan (VCCI) .Radio Specifications Radio Specifications 802.

) -73 dBm 24 Mbs 112 m (367 ft. ) 63 m (206 ft. ) 15 m (49 ft. solid walls and other obstructions may affect signal strength. In Open Office environments. ) 27 m (88 ft. ) 29 m (95 ft. Communications at a lower transmit range may travel longer distances. In a Closed Office environment.) 50 m (165 ft.5 Mbs 270 m (885 ft. Ranges for outdoor antenna installations are related to type of outdoor antennas used. ) 36 m (118 ft. Range is also impacted due to "obstacles" in the signal path of the radio that may either absorb or reflect the radio signal.) 115 m (375 ft.11b Wireless communication ranges 54 Mbs 19 m (62 ft. and length of antenna cables.) 25 m (80 ft. 802. ) -84 dBm 6 Mbs 258 m (846 ft.11a Wireless communication ranges 8-4 . ) 52 m (170 ft. ) -69 dBm 36 Mbs 74 m (243 ft. Range Open Office Semi-Open Office Closed Office Receiver Sensitivity Delay Spread (at FER of <1%) 11 Mbs 160 m (525 ft. ) 76 m (249 ft. ) -65 dBm 48 Mbs 35 m (115 ft.) -94 dBm 500 ns Table 8-3 Range Open Office Semi-Open Office Closed Office Receiver Sensitivity Table 8-4 (721 The range values listed in the Communications Range Chart are typical distances as measured at the development laboratories. ) 24 m (79 ft. ) -82 dBm 9 Mbs 232 m (761 ft.) 40 m (130 ft. antennas are at desktop level. ) 90 m (295 ft. antennas can "see" each other (no physical obstructions between them). ) 49 m (161 ft.) 90 m (300 ft. These values provide a rule of thumb and may vary according to the actual radio conditions at the location where the product is used. In Semi-open Office environments.) 35 m (115 ft. ) -77 dBm 18 Mbs 153 m (502 ft.) 50 m (165 ft.) -87 dBm 225 ns 2 Mbs 400 m (1300 ft. ) 17 m (56 ft. The following tables show typical range values for various environments. The range of your wireless devices can be affected when the antennas are placed near metal surfaces and solid highdensity materials.) -91 dBm 400 ns 1 Mbs 550 m (1750 ft. hollow wall elements. ) -80 dBm 12 Mbs 189 m (620 ft. ) 60 m (197 ft. and the transmit rate of the wireless communication. ) 45 m (147 ft. ) -85 dBm 802.) 70 m (230 ft. ) 99 m (325 ft.Radio Specifications Wireless Communication Range The range of the wireless signal is related to the composition of objects in the radio wave path. ) 64 m (210 ft. ) 34 m (111 ft. workspace is divided by shoulder-height.) -82 dBm 65 ns 5.