Planet Technology WDAP-2000PE manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Planet Technology WDAP-2000PE, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Planet Technology WDAP-2000PE one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Planet Technology WDAP-2000PE. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Planet Technology WDAP-2000PE should contain:
- informations concerning technical data of Planet Technology WDAP-2000PE
- name of the manufacturer and a year of construction of the Planet Technology WDAP-2000PE item
- rules of operation, control and maintenance of the Planet Technology WDAP-2000PE item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Planet Technology WDAP-2000PE alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Planet Technology WDAP-2000PE, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Planet Technology service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Planet Technology WDAP-2000PE.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Planet Technology WDAP-2000PE item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    54/108Mbps Super A+G Wireless Access Point WDAP-2000PE User’s Manual[...]

  • Page 2

    Copyright Copyright © 2005 by PLANET Technology Corp. All rights reserved. No part of this publica- tion may be reproduced, transmitted, transcribed, stored in a retr ieval system, or translated into any language or computer language, in any fo rm or by any means, electronic, mechanical, magnetic, optical, chemical, m anual or otherw ise, without [...]

  • Page 3

    Safety This equipment is designed with t he utmost care for the safety of those w ho install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when w orking w ith electrical equipment. All guidelines of this and of the computer manufac- ture must therefore be allowed at all time s to ensure [...]

  • Page 4

    T ABLE OF C ONTENTS CHAPTER 1 INTRODUCTION ......................................................................... 3 1.1 Package Contents .......................................................................................... 3 1.2 Features ........................................................................................................[...]

  • Page 5

    4.5.6 Grant Remote Access for Users ........................................................... 40 4.6 802.1x Client Setup on Window s XP .......................................................... 41 4.6.1 Client Certificate Setup .......................................................................... 41 4.6.2 802.1x Authentication Setup .......[...]

  • Page 6

    Chapter 1 Introduction PLANET WDAP-2000PE is an IEEE 802.11a+g dual band Wireless Ac- cess Point with PoE. With the latest i nnovative Super A/G te chnology integrated, the maximum data rate of WDAP-2000PE is 108Mbps, which doubles the speed of standard 802.11a/g. WDAP-2000PE is also ba ckward compatible and interoperable with IEEE 802.11b complian[...]

  • Page 7

    1.3 Physical Details T op View LED Status Description POWER PWR Steady Green – Power on OFF – Power off Link/A ct Steady Green - Link is active Flashing Green - T ransmit or receive data OFF - No connection LA N 100M Steady Green - Link is active on 100M speed Flashing Green - T ransmit or receive data OFF - Link is active on 10M speed 5 GHz St[...]

  • Page 8

    Installation Rear View Connector Description ANT T wo dipole antennas are supplied. Best result is usually obtained with the antenna in a vertical position. Pow er Connect the supplied power adapter here. Reset Button In order to clear ALL settings and restore to factory default, holding the Reset Button down continuously for 5 seconds. LA N (PoE) [...]

  • Page 9

    Management Web based configuration CLI configuration Message Log Firmware upgrade UPnP support Configuration file Backup/Restore Super A/G mode Up to 108Mbps 802.11g Up to 54Mbps (6/9 /12/18/24/36/48/54) Data Rate 802.11b Up to 11Mbps (1/2/5.5/11) Dimensions (L x W x H) 190 x 145 x 28mm Weight 320g Environmental Specifi- cation Operating temperat u[...]

  • Page 10

    Installation 2 Chapter 2 Inst allation 2.1 General Installation Before you proceed w ith the installation, it is necessary that y ou have enough information about the WDAP-2000PE. 1. Locate an optimum location for the WDAP-2000PE. T h e b e s t place for your WDAP- 2000PE is usually at the center of your w ireless netw ork, w ith line of sight to a[...]

  • Page 11

    3 Chapter 3 Setup & Management 3.1 Overview This chapter describes the setup procedure to make the WDAP-2000PE a valid device on your LAN, and to function as an Access Point for your Wireless Stations. The WDAP-2000PE can be configured using either the Web Browser or the CLI (Command Line Interface). Please refer to appendix B for the commands [...]

  • Page 12

    If you can't connect: It is likely that your PC’s IP address is incompatible w ith the WDAP-2000PE’s IP address. The default IP address of the Wire less Access Point is 192.168.1.1, with a Network Mask of 255.255.255.0. If your PC’s IP address is not compatible w ith this, you must change y our PC’s IP address to an unused value in the[...]

  • Page 13

    A ssign static IP to this device If selected, the followi ng data must be entered. • IP A ddress - The IP Address of this device. Enter an unused IP address from the address range on your LAN. • Subnet Mask - The Netw ork Mask associated with the IP Address above. Enter the value used by other devices on y our LAN. • Gatew ay - The IP Address[...]

  • Page 14

    Netw ork ID (SSID) The SSID (up to 32 printable ASCII characters) is the unique name identified in a WLAN. The ID prevents the unintentional merging of two co-located WLANs. Please make sure that the SSID of all stations in the same WLAN netwo rk are the same. The default SSID is “ default ”. Disable SSID Broadcasting If this option is unselect[...]

  • Page 15

    rity Policy connect to your netw ork. WEP: WDAP-2000PE allows you to use WEP data encry ption to secure your data from bei ng eavesdropping by unauthorized users. There are WEP64, WEP128 and WEP152 provided for data encryption. You can either use ASCII format or Hex format to enter a key. With Hex format, 2 digits represent 1 byte. Once you enable [...]

  • Page 16

    3.4 Device Status You can monitor the system general information from the Dev ice Information field. 3.4.1 System Log The system log allows y ou to track events that have occurred in the system. Such event mes- sages can sometimes be helpful in determining the cause of a problem that you may have encountered. 3.4.2 Wireless Client Table The wireles[...]

  • Page 17

    3.4.3 Bridge Table The bridge table shows all MAC entries learned from the wired LAN interface, w ireless clients, and WDS peers (if running in the WDS mode). 15[...]

  • Page 18

    3.4.4 Radio Table Radio table lists current Mode, channel, client associated wi th them and transmit packet, re- ceived packet, data error. 3.4.5 Site Survey Table This page shows other APs currently in t he environment that t he system can detect. 16[...]

  • Page 19

    3.5 Advanced Settings The advanced settings tab contains more confi gurations for experienced users. However, changing your login passw ord from the default factory setting is highly recommended for secu- rity purposes. 3.5.1 Password Settings The default administrative password is “ passwo rd ”. To change the password, type the current passwor[...]

  • Page 20

    Local Management This option allows you to enabl e/disable management from WLAN connection. System A dministration The Access Point allows you to designate special port numbers other than the standard 80 for http for remote management. It also allows y ou to specify the duration of idle time (inactivity) before a web brow ser session times out. The[...]

  • Page 21

    Bridge You can enable/disable the 802. 1d STP (Spanning Tr ee Protocol) function on the bridge of WLAN and Ethernet (i.e. the LAN inter- face). Enable this function can detect loops in your LAN environment and then prot ect the LAN from being saturated with infinite loop traffic. Syslog When the WDAP-2000PE encounters an error or w arning condi- ti[...]

  • Page 22

    are enabled, the device can s end out TRAP messages automati- cally to the TRAP manager if configured. A ssign System Informa- tion System Name: A name that you assign to y our WDAP-2000PE. It is an alphanumeric string of up to 30 characters. System Location: Description of where y our WDAP-2000PE is physically located. It is an alphanum eric strin[...]

  • Page 23

    Disable MAC address control list When selected, no MAC address filtering will be performed. Enable GRANT address control list When selected, data traffic from onl y the specified devices in the table will be allow ed in the netw ork. Enable DENY address control list When selected, data traffic from t he devices specified in the table will be denied[...]

  • Page 24

    Enable VLA N for all SSIDs Once this function is enabled, you can specify an individual VLAN ID and priority tag for each SSID. In this w ay, you can separate traffic from stations using differ ent SSIDs and so protect the wired network from being accessed by unauthorized stations using certain SSIDs. If this function is enabled, packets from a SSI[...]

  • Page 25

    Select security policy Configure the security policy for the SSID. 3.5.6 Wireless Settings Beacon interval The WDAP-2000PE broadcasts beacon frames regularly to announce its existence. Default is 100, i.e., ten beacons per second. Decreasing the beacon interval makes passive scanning more reliable and faster. Increasing the beacon interval may impr[...]

  • Page 26

    Fragmentation When the size of a unicast fr ame exceeds t he fragmentation threshold, it will be fragmented before the transmission. It should have a value of 256-2346 bytes, w ith a default of 2346 . If you experience a high packet error rate, you should slightly decrease the Fragmentation Threshold. DTIM interval The WDAP-2000PE buffers packets f[...]

  • Page 27

    ure WDS devices. A ccess Point This means the device is working on AP-only Mode, and is for wireless client users only . Wireless Distribution System (Bridge mode ) This mode can help you to group different wired netw orks to- gether by multiple WDAP-2000PE. The single system can support up to 8 WDAP-2000PE in WDS mode. A dditional configurations f[...]

  • Page 28

    Enable Primary/Seconda ry Server Check this if you w ant to enabl e RADIUS authentic ation using the primary/secondary Radius Server . If both are selected, the pri- mary server w ill be tried first. Server IP The IP address of the RADIUS server. Port number The port number that your RADI US server uses for authentica- tion. The default setting is [...]

  • Page 29

    Ping flooding filtering When the ping (to the AP) traffi c reaches the configured degree (e.g. High, Low), any more such ping packets will be dropped. Higher degree allows less ping traffic to the AP. 27[...]

  • Page 30

    3.6 System Tools 3.6.1 Firmware Upgrade You can upgrade the firmware of y our WDAP-2000PE. Normally, this is done w hen a new version of firmware is released. Upgrade procedures: Step 1: Select System Tools  Firmware Upg rad e from the menu. Step 2: To update the WDAP-2000PE firmware, first dow nload the firmware from the distribu- tor’s web s[...]

  • Page 31

    3.6.2 Configuration Save and Restore You can save system configuration settings to a file, and later dow nload it back to the WDAP- 2000PE by follow ing the steps below. Step 1: Select Configuration Sav e and Restore from the Sy stem Tools menu. Step 2: Enter the path of the confi guration file to save-to/re store-from (or click the Brow se button [...]

  • Page 32

    3.6.3 Factory Default You can reset the configuration of your WDAP-2000PE to the factory default settings. Step 1: Select Factory Default from the Sys tem Tools menu. Step 2: Click YES to go ahead and restore the configur ation to the factory default. 3.6.4 Reboot System You can reset your WDAP-2000PE from the Brow ser. Step 1: Select Reboot System[...]

  • Page 33

    Chapter 4 PC and Server Configuration 4.1 Overview All Wireless Stations need to have settings which match the Wireless Access Point. These settings depend on the mode in which the WDAP-2000PE is being used. • If using WEP or WPA-PSK, it is only necessary to ensure that eac h Wireless station's settings match those of the WDAP-2000PE, as des[...]

  • Page 34

    Security • The Pre-shared Key entered on the WDAP-2000PE must also be entered on each Wireless client. • The Encryption method (e.g. TKIP, AES) must be set to match the WDAP-2000PE. 4.4 Using WPA This is the most secure and most complex system. WPA mode provides greater security and centralized management, but it is more complex to configure. W[...]

  • Page 35

    • rras • webserver (IIS) • Radius Server (Internet Authentication Service) • Certificate Authority 4.5.1 Windows 2000 Domain Controller Setup 1. Run dcpromo.exe from the command prompt. 2. Follow all of the default prompts, ens ure that DNS is installed and enabled during installation. 4.5.2 Services Installation 1. Select the Control Panel[...]

  • Page 36

    6. Enter the information for the Certificate Authority, and click Next . 7. Click Next if you don't want to change t he CA's configuration data. 8. Installation will warn you that Internet Information Services are running, and must be stopped before continuing. Click Ok , then Finish . 4.5.3 DHCP server configuration 1. Click on the Start[...]

  • Page 37

    3. Click Next when the New Scope Wizard Begins. 4. Enter the name and description for the scope, click Next . 5. Define the IP address range. Change the subnet mask if necessary. Click Next . 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank. Click Next . 7. Change the Lease Duration time if preferre[...]

  • Page 38

    11. If you don't want a WINS server, just click Next . 12. Select Yes, I want to activate this scope now . Click Next , then Finish . 13. Right-click on the server, and select Authorize . It may take a few minutes to complete. 4.5.4 Certificate Authority Setup 1. Select Start - Programs - Administrative Tools - Certification Authority . 2. Rig[...]

  • Page 39

    4. Select Start - Programs - Administrative Tools - Active Directory Users and Com- puters . 5. Right-click on your active directory domain, and select Properties. 6. Select the Group Policy tab, choose Default Domain Policy then click Edit . 37[...]

  • Page 40

    7. Select Computer Configuration - Windows Settings - Security Settings - Public Key Policies , right-click Automatic Certificate Request Settings - New - Automatic Certificate Request . 8. When the Certificate R equest Wizard appears, click Next . 9. Select Computer , then click Next . 38[...]

  • Page 41

    10. Ensure that your certificat e authority is checked, then click Next . 11. Review the policy change information and click Finish . 12. Click Start - Run , type cmd and press enter. Enter secedit /refreshpolicy machine_policy This command may take a few minutes to take effect. 4.5.5 Internet Authentication Service (Radius) Setup 1. Select Start -[...]

  • Page 42

    9. Click Permitted , then OK . Select Next . 10. Select Grant remote access permission . Click Next . 11. Click Edit Profile... and select the Authentication tab. Enable Extensible Authenti- cation Protocol , and select Smart Card or other Certificate . Deselect other authentication methods listed. Click OK . 12. Select No if you don't want to[...]

  • Page 43

    3. Select the Dial-in tab, and enable Allow access . Click OK . 4.6 802.1x Client Setup on Windows XP Windows XP ships with a complete 802.1x client implementation. If using Windows 2000, you can install SP4 (Service Pack 4) to gain the same functionality. If you don't have either of t hese systems, you must use the 802.1x client software prov[...]

  • Page 44

    4. On the first screen (below), select Request a certificate , click Next . 5. Select User certificate request and select User Certificate , the click Next . 42[...]

  • Page 45

    6. Click Submit . 7. A message will be displayed, then the certificate will be returned to you. Click Install this certificate . 43[...]

  • Page 46

    8. . You will receive a confirmation message. Click Yes . 9. Certificate setup is now complete. 4.6.2 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right Click on the Wireless Network Connection , and select Properties . 3. Select the Authentication Tab, [...]

  • Page 47

    Encryption Settings The Encryption settings must match t he APs (WDAP-2000PE) on the Wireless net- work you want to join. • Windows XP will detect any available Wirele ss networks, and allow you to config- ure each network independently. • Your network administrator can advise you of the correct settings for each net- work. 802.1x networks typi[...]

  • Page 48

    2. Select the wireless network from the Available Networks list, and click Configure . 3. Select and enter the correct values, as advised by your Network Administrator. For example, to use EAP-TLS, you would enable Data encryption , and click the checkbox for the setting: The key is provided for me automatically , as shown be- low. Setup for Window[...]

  • Page 49

    4.7 Using 802.1x Mode The procedures are similar to using 802.1x. The only difference is that on your client, you must NOT enable the setting: The key is provided for me automatically . Instead, you must enter the WEP key m anually, ensuring it matches the WEP key used on the Access Point. Note : On some systems, the "64 bit" WEP key is s[...]

  • Page 50

    A Appendix A T roubleshooting Problem 1: Can't connect to the WDAP-2000PE to configure it. Solution 1: Check the following: • The WDAP-2000PE is properly inst alled, LAN connections are OK, and it is powered ON. Che ck the LEDs for port status. • Ensure that your PC and the WDAP-2000PE are on the same network segment. (If you don't ha[...]

  • Page 51

    Appendix B Command Line Interface If desired, the Command Line Interface (CLI) can be used for configurati on. This creat possibility of creating scripts to perform common configuration changes. es the B Using the CLI - Telnet 1. Start your Telnet client, and es tablish a connection to the WDAP-2000PE. e.g. Telnet 192.168.1.1 2. You will be prompte[...]

  • Page 52

    Description: Set the HTTP server port (f or device management) to the one specified. set http timeout <timeout value in minutes, 1-60> Description: Set the timeout val ue for the HTTP management session. set prompt <string up to 15 ch aracters> Description: Set the command line prompt. set system contact <string up to 60 ch aracters&[...]

  • Page 53

    show snmp statistics Description: Display the cu rrent SNMP statistics. show trap manager [<string u p to 30 characters>] Description: Display the settings of the s pecified SNMP trap manager. If no trap manager is specified, this command displays the settings of all trap managers. (4) Diagnostics Commands disable log <facility> Descrip[...]