Proxim AP-4000 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Proxim AP-4000, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Proxim AP-4000 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Proxim AP-4000. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Proxim AP-4000 should contain:
- informations concerning technical data of Proxim AP-4000
- name of the manufacturer and a year of construction of the Proxim AP-4000 item
- rules of operation, control and maintenance of the Proxim AP-4000 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Proxim AP-4000 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Proxim AP-4000, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Proxim service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Proxim AP-4000.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Proxim AP-4000 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    ORiNOCO AP-4000 Series Access Points User Guide[...]

  • Page 2

    AP-4000 Series User Guide 2 Copyright © 2005 Proxim Corporation. All rights reserved. Covered by one or more of the fo llowing U.S. p atents: 5, 231,634; 5,875,1 79; 6,0 0 6,090; 5,809,060; 6, 075,812; 5,077 ,753. This user’s guid e and the s oftware desc ribed in it are copyright ed with all ri ghts reserved . N o p art of this publication may [...]

  • Page 3

    AP-4000 Series User Guide 3 Content s 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Products Covered in this Use r Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Document Convent[...]

  • Page 4

    Content s AP-4000 Series User Guide 4 3 System Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 4 Advanced Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 System . . . . . . . . . . . . [...]

  • Page 5

    Content s AP-4000 Series User Guide 5 Configuring Radius Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 MAC Access Control Via RADIUS Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 10 802.[...]

  • Page 6

    Content s AP-4000 Series User Guide 6 Connectivity Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148 Basic Software Setup and Configu ration Probl ems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 7

    Content s AP-4000 Series User Guide 7 Bridge Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206 RADIUS Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 8

    AP-4000 Series User Guide 8 Ask a Question or Open an I ssue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 Other Adapter Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 F[...]

  • Page 9

    9 AP-4000 Series User Guide 1 Introduction This chapter contains in formation on the following: • Products Covered in this User Guide • Document Conventions • Introduction to Wireless Networking • Mesh Networking (AP-4000M /4900M Only) • Guidelines for Roaming • IEEE 802.1 1 Specifica tions • Management and Monitoring Capabilities Pro[...]

  • Page 10

    Introduction AP-4000 Series User Guide Introduction to Wireless Networking 10 Introduction to Wireless Networking An Access Point extends the capability of an existing Ethernet network to devices on a wireless network. Wireless devices can connect to a single Access Point, or they can move between multiple Access Po ints located within the same vic[...]

  • Page 11

    Introduction AP-4000 Series User Guide Mesh Networking (AP-4000M/4900M Only) 11 Mesh Networking (AP-4000M/4900M Only) Using the ORiNOCO Mesh Crea tion Protocol (OMCP), The AP-4 000M and AP-49 00M support structured Mesh networking. For informa tion on converting an AP-4000 into an AP-4000M to enable Me sh functionality , see Mesh Software Kit . In [...]

  • Page 12

    Introduction AP-4000 Series User Guide Mesh Networking (AP-4000M/4900M Only) 12 are discovered, MAP2 through MAP8 will bui ld a neighbor table from the beacons a nd probe responses they receive. The neighbor t able cont ains three kinds of links: • Active: Link with a m esh neighbor that h as gone thro ugh association and authentication, and th e[...]

  • Page 13

    Introduction AP-4000 Series User Guide Mesh Networking (AP-4000M/4900M Only) 13 from MAP4 to MP1 fails, MAP4 can still reach the backbone via MAP3 and MAP2. The same goes for other MAPs that discover e ach other . After a short while, the network in this example will look like Figure 1-4 , where solid lines indica te active Mesh links and dotted li[...]

  • Page 14

    Introduction AP-4000 Series User Guide Guidelines for Roaming 14 – 18 Mbps throughpu t is available at the portal (max is 25 Mbps , but APs will back off as distance between them increases). – 20 wireless clients are suppor ted per AP . – Average utilization (time th at a client is actually transferring data) is 10%. If the conditions on your[...]

  • Page 15

    Introduction AP-4000 Series User Guide IEEE 802.1 1 S pecifications 15 • In countries that req uire passive scann ing for Mesh, the roam time may be higher . • When an AP-4000M/4900M is mounted in a vehicle and is being used in a Mesh network, there will be limited connectivity when the vehicle is moving. IEEE 802.1 1 Specifications In 1997, th[...]

  • Page 16

    Introduction AP-4000 Series User Guide Management and Monitoring Capabilities 16 Users enter Command S tatement s, composed of CLI Commands and their associated param eters. S t atement s may be issued from the keyboard for real time control, or from scripts that automate conf iguration. For example, when downloading a file, administrators enter th[...]

  • Page 17

    Introduction AP-4000 Series User Guide Management and Monitoring Capabilities 17 • Privacy (a.k.a Encryption): Protects against disclosure of message p ayload. • Access Control: Controls and autho rizes access to managed object s. The default SNMPv3 username is administrator , with SHA authenticat ion, and DES privacy protocol. SSH (Secure Shel[...]

  • Page 18

    18 AP-4000 Series User Guide 2 Inst allation and Initialization This chapter contains in formation on the following: • AP-4000 Series Hardware Descriptio n – Overview – Antennas – Active Ethernet – LED Indicator s • Prerequisites – General Prerequisites – Mesh Prerequisites • Product Package • System Requirements • Hardware In[...]

  • Page 19

    Inst allation and Initialization AP-4000 Series User Guide AP-4000 Series Hardware Description 19 The AP-4000/4000M/49 00M includes a a power jack, a 10/10 0 base-T Ethernet port, and an RS- 232 serial dat a communication port. The AP include s an optional security co ver that can be inst alled to protect against a ccess to the power and LAN cables[...]

  • Page 20

    Inst allation and Initialization AP-4000 Series User Guide AP-4000 Series Hardware Description 20 Figure 2-2 AP-4000/4000 M/4900M Antenna Connect ors Connectors 1 and 2 are for the 802.1 1b/g radio; connecto rs 3 and 4 are for the 802.1 1a radio. When the AP is mounted on a wall, connectors 1 and 4 cor respond to the horizo ntally po larized intern[...]

  • Page 21

    Inst allation and Initialization AP-4000 Series User Guide AP-4000 Series Hardware Description 21 • The Active Ethernet (AE) integrated mo dule receives ~48 VDC over a stan dard Category 5 Ethernet cable . • T o use Active Ethernet, you must have an AE hub (als o known as a power injector ) con nected to the network. • The cable length betwee[...]

  • Page 22

    Inst allation and Initialization AP-4000 Series User Guide Prerequisites 22 Prerequisites General Prerequisites Before installing an AP-4000/4000M/490 0M, you need to ga ther certain n etwork information. The following t able identifies the information you need. Network Nam e (SSID of the wireless cards) You must assign the Access Point a Network N[...]

  • Page 23

    Inst allation and Initialization AP-4000 Series User Guide Prerequisites 23 Mesh Prerequisi tes Before setting up a Mesh network, gather th e following information: Mesh Mode The mode in which the AP will be used. If the AP will be connected directly to the wired backbone, it should be config ured for Mesh Portal mode; if it will conne ct to the Po[...]

  • Page 24

    Inst allation and Initialization AP-4000 Series User Guide Product Package 24 Product Package Each AP-4000/4000M/4900 M comes with the following: • AP-4000/4000M/49 00M unit (with integrated 802.1 1 a radio and 802.1 1b/g radio, and Active Ethernet) • Power adapter • One ceiling or wall mounting plate • Security cover • One Installation C[...]

  • Page 25

    Inst allation and Initialization AP-4000 Series User Guide Hardware Installation 25 Hardware Inst allation Required Materials • AP-4000/4000M/AP-4 900M unit • Mounting br acket with screws • Power adapter • Security cover • Quick St art Flyer Perform the fo llowing procedures to install the AP hardware: • Cabling the AP-4000/4000M/4900 [...]

  • Page 26

    Inst allation and Initialization AP-4000 Series User Guide Hardware Installation 26 2. Attach one end of an Ethernet cable to the AP's LAN port (the center por t, labeled “LAN”) and the ot her end to a network hub or switch. 3. Option ally , co nnect an RS-2 32 cable to the RS-2 32 console port (the right port, labele d “RS-232”). NOTE[...]

  • Page 27

    Inst allation and Initialization AP-4000 Series User Guide Hardware Installation 27 Once you have chosen a final location for your unit, mount the AP-4000/4000 M/4900M to a wall, to a T -bar ceiling, or in a vehicle as described below . Mounting the AP-4000/400 0M/4900M to a Ceiling 1. Attach th e mounting plate to the bottom of the AP-4 000/ 4000M[...]

  • Page 28

    Inst allation and Initialization AP-4000 Series User Guide Hardware Installation 28 Inst alling External Antennas Y ou can optionally inst all external antennas on the AP-400 0/4000M/4900M. For info rmation on the AP’ s ante nna functionality , see Antennas . Follow the mounting instructions included with your external antenna, and then connect t[...]

  • Page 29

    Inst allation and Initialization AP-4000 Series User Guide Hardware Installation 29 Figure 2-7 AP-4000/4000 M/4900M Antenna Connect ors 3. If installing a secon d external antenna on a radio, connect the antenna cabl e to connector 2 (802 .1 1b/g radio) or connector 3 (802.1 1a radio). 4. Close the external antenna access comp artment s. 5. If desi[...]

  • Page 30

    Inst allation and Initialization AP-4000 Series User Guide Hardware Installation 30 cables must comply with certain safety requirement s, such as Underwriter Labs (UL) S tandard 2043: “S tandard for Fire T e st for Heat and Visible Smoke Release fo r Discrete Produc ts and Their Accessories Installe d in Air-Handling S paces”. The AP-4000/4000 [...]

  • Page 31

    Inst allation and Initialization AP-4000 Series User Guide Initialization 31 Initialization The following sections detail how to initialize the AP using ScanT ool, log in to the HTTP interface, perform an initial configuration of the AP using the Setup Wizard, and downl oad the required AP sof tware. • Using ScanT ool • Logging In • Using the[...]

  • Page 32

    Inst allation and Initialization AP-4000 Series User Guide Initialization 32 NOTE: If your computer has more than one network adapter installed, you will be pr ompted to select the adapter that you want ScanT ool to use before the Scan List appears. If prompted, select an adapter and click OK . Y ou can change your adapter setting at a ny time by c[...]

  • Page 33

    Inst allation and Initialization AP-4000 Series User Guide Initialization 33 Figure 2-10 Scan T ool Change Screen c. Set IP Address T ype to Stat ic . d. Ente r a static IP Address for the AP in the field provided. Y ou must assign the unit a unique address that is valid on your IP subnet. Con tact your networ k administra tor if you need assist an[...]

  • Page 34

    Inst allation and Initialization AP-4000 Series User Guide Initialization 34 – Click OK twice to save your changes and return to Internet Explorer . 3. Enter the Access Point’s IP addr ess in the browse r ’s Ad dress field and pr ess Enter or Go . This is either the dynamic IP a ddress assigned by a ne twork DHCP server or the static IP addre[...]

  • Page 35

    Inst allation and Initialization AP-4000 Series User Guide Initialization 35 Figure 2-12 System S t atus Scr een The buttons on the left of the screen provide access to th e monitoring and co nfiguration options for the AP . See Advanced Co nfiguration to begin configuring the AP without using the Setup Wizard. The Command Line Interfa ce (CLI) als[...]

  • Page 36

    Inst allation and Initialization AP-4000 Series User Guide Initialization 36 Setup Wizard Instructions 1. Click Setup Wizard to begin. The Setup Wizard suppor ts the following navigation options: • Save & Next Button: Each Setup Wiza rd screen has a Save & Next button. Click this bu tton to submit any changes you made to the unit’ s p a[...]

  • Page 37

    Inst allation and Initialization AP-4000 Series User Guide Initialization 37 — Auto Channel Select: By default, the AP scans the a rea for other Access Point s and select s the best available communication channe l, either a free channel (if available) or the ch annel with the least amount of interference. Remove the check mark to disable this op[...]

  • Page 38

    Inst allation and Initialization AP-4000 Series User Guide Initialization 38 2. If prompted, create an account to gain access. NOTE: The Knowledgebase is available to all website visitors. First-time users will be asked to create an account to gain access. 3. Click Search Knowledgebase . 4. In the Search Knowledgebase field, enter 1250 . 5. From th[...]

  • Page 39

    Inst allation and Initialization AP-4000 Series User Guide Initialization 39 5. Click OK to continue with the operation or Cancel to abor t the operation. 6. If the operation is unsuccessful, you will rece ive an error message. If this oc curs, see the T rouble shooting chapter or attempt installing the software with a TFTP se rver , as described i[...]

  • Page 40

    Inst allation and Initialization AP-4000 Series User Guide Related T opics 40 Install Updates from yo ur TFTP Server using the CLI 1. Download the latest software to http://support.proxim.com (Knowledgebase Answer ID 1250). See Download th e Software for instructions) . 1. Copy the latest sof tware updates to your TFTP server . 2. Open the CLI inte[...]

  • Page 41

    41 AP-4000 Series User Guide 3 System S t atus The first screen displayed af ter Logging In is the System S tatus screen. Y ou can always return to this screen by clicking the Stat us button. Figure 3-1 System S t atus Screen The System Status screen provides the following info rmation: • System St atus: This area provides system-level informatio[...]

  • Page 42

    42 AP-4000 Series User Guide 4 Advanced Configuration This chapter contain s information on configuring settings in the following ca tegories: • System : Configure specific system information such as syste m name and con tact inform ation. • Network: Configure IP , DNS client, DHCP server , DHCP Relay Agen t, DHCP Relay Servers, Link Integrity [...]

  • Page 43

    Advanced Configuration AP-4000 Series User Guide 43 Figure 4-1 Configure Main Scre en 2. Click the tab that corresponds to the paramete r you want to configure. For example, click Network to config ure the Access Point’s TCP/IP settings. Each Configure tab is d escribed in the remai nder of this chapter .[...]

  • Page 44

    Advanced Configuration AP-4000 Series User Guide System 44 System Y ou can configure and view the following para meters within the System Con figuration screen: • Name: The name as signed to the AP . See the Dynamic DNS Support and Access Point System Naming Convention sections for rules on naming the AP . • Location: Th e location where th e A[...]

  • Page 45

    Advanced Configuration AP-4000 Series User Guide System 45 Access Point System Naming Co nvention The Access Point's system name is used as it s host name. In order to preven t Access Point s with default configurations from regist ering similar host names in DNS, the default system name of the Acce ss Point is uniquely generate d. Access Poin[...]

  • Page 46

    Advanced Configuration AP-4000 Series User Guide Network 46 Network The Network tab con tains the followin g sub-t abs: • IP Configuration • DHCP Server • DHCP Relay Agent • Link Integrity • SNTP (Simple Network T ime Protocol) IP Configuration This tab is use d to configure the internet (TCP/IP) settings for the access point. These setti[...]

  • Page 47

    Advanced Configuration AP-4000 Series User Guide Network 47 Basic IP Parameters • IP Address Assignment T ype: Set this parameter to Dynamic to configure the Access Point as a Dynamic Host Configuration Protocol (DHCP) client ; the Access Point will obtain IP sett ings from a network DHCP server automatically during boot-up. If you do not have a [...]

  • Page 48

    Advanced Configuration AP-4000 Series User Guide Network 48 Figure 4-4 DHCP Server Configuration Screen Y ou can configure and view the following para meters within the DHCP Server Configuration screen: NOTE: Y ou must reboot the Access Point before changes to any of these DHCP serve r parameter s take effect. • Enable DHCP Server: Place a check [...]

  • Page 49

    Advanced Configuration AP-4000 Series User Guide Network 49 – Stat us: IP Pools are enabled upon entry in the table . Y ou can also disable or delete entries by changing this field’ s value. NOTE: Y ou must reboot the Access Point before changes to any of these DHCP server p arameters t ake effect. DHCP Relay Agent When enabled, the DHCP relay [...]

  • Page 50

    Advanced Configuration AP-4000 Series User Guide Network 50 Figure 4-6 DHCP Server IP Address T able - Edit Entries T o add an entry , enter the IP Address of the DHCP Server and a comment (optional), a nd click OK. T o edit an entry , make changes to the appropriate entry . Enab le or disable the entry by choosing Enable or Disable from the S t at[...]

  • Page 51

    Advanced Configuration AP-4000 Series User Guide Network 51 Figure 4-7 Link Integrity Configuration Screen SNTP (Simple Network Time Protocol) SNTP allows a network entity to communic ate w ith time servers in th e network/internet to retr ieve and synchronize time of day information. When this feature is enabled, t he AP will attempt to retrieve t[...]

  • Page 52

    Advanced Configuration AP-4000 Series User Guide Network 52 Figure 4-8 SNTP Configuration Scre en Y ou can configure and view the followin g pa rameters within the SNTP screen: • SNTP St a tus : Select Enable or Disable from the drop-down menu. The selected st atus will determine which of the paramete rs on the SNTP screen are configurable. NOTE:[...]

  • Page 53

    Advanced Configuration AP-4000 Series User Guide Network 53 – Y ear: Enter the current year . – Month: Enter the month in digits (1-12). – Day : Enter the day in digit s (1-31). – Hour: Enter the hour in digits (0-23). – Minutes: Enter the minutes in digits (0-59). – Seconds: En ter the seconds in digits (0-59).[...]

  • Page 54

    Advanced Configuration AP-4000 Series User Guide Interfaces 54 Interfaces From the Int erfaces t ab, you configure the Access Point’ s operatio nal mode settings, power control se ttings, wireless interface settings and Ethernet settings. Y o u may also configure a Wireless Distribution System for AP-to-AP communications. The Interfaces t ab cont[...]

  • Page 55

    Advanced Configuration AP-4000 Series User Guide Interfaces 55 • 802.1 1g only mode: The radio is optimized to communicate with 802.1 1g devices. Th is setting will provide the best results if this radio interface will on ly communicate with 802.1 1g devices. • 802.1 1b/g mode: This is the default mode. Use this mode if y ou want to support a m[...]

  • Page 56

    Advanced Configuration AP-4000 Series User Guide Interfaces 56 The Wireless NIC determin es the regulatory domain the AP is o perating in. If the AP has dual Wireless NICs, the NIC in Slot A determ ines the regulato ry domain. Depend ing on the regu latory domain, a d efault country cod e is chosen that is transmitted in the beacon and pro be respo[...]

  • Page 57

    Advanced Configuration AP-4000 Series User Guide Interfaces 57 Wireless-A (802.1 1a Radio ) a nd Wireless-B (802.1 1b/g Radio) Figure 4-10 Wi reless Interface A[...]

  • Page 58

    Advanced Configuration AP-4000 Series User Guide Interfaces 58 Y ou can view and configure the following pa rameters for the Wi reless-A and Wireless-B interfaces: NOTE: Y ou m ust reboot the Ac cess Point before any changes to these parameters take effe ct. • Physical Interfa ce T ype: For Wireless Interface A on the AP-4000/40 00M , this field [...]

  • Page 59

    Advanced Configuration AP-4000 Series User Guide Interfaces 59 – For 802.1 1b/g -- Auto Fallback, 1, 2, 5.5, 6, 9, 1 1, 12, 18, 24, 36, 48, 54 Mbits/sec – For 802.1 1g-wifi -- Auto Fallback, 1, 2, 5.5, 6, 9, 1 1, 12, 18, 24, 36, 48, 54 Mbits/sec NOTE: 802.1 1g-wifi has been defined for Wi-Fi testing pur poses. It is not recommended fo r use in [...]

  • Page 60

    Advanced Configuration AP-4000 Series User Guide Interfaces 60 Aff ected Countries Japan is certifie d in the TELEC regulator y domain for operati on in the 5 GHz band. The fo llowing countries ar e certified in the ETSI regulatory domain for operation in th e 5 GHz band: RTS/CTS Medium Reservat ion The 802.1 1 standard suppo rts option al R TS/CTS[...]

  • Page 61

    Advanced Configuration AP-4000 Series User Guide Interfaces 61 • Enable the transmission and reception of frames on that wireless interface • Enable the associated BSS port on that interface • S t art the AP services to wireless clients • Indicate the wireless service resume st atus of the wireless interface through LED and tr aps After wir[...]

  • Page 62

    Advanced Configuration AP-4000 Series User Guide Interfaces 62 4. Set Blacklist St atus to Enable . Figure 4-12 Channel Blacklist T able - Edit Screen NOTE: In the AP-4000/4000M/49 00M, wireless service can be shut down/r esumed on each wireless interface individually . Wireless Distr ibution System (WDS) A Wireless Distribution System (WDS) crea t[...]

  • Page 63

    Advanced Configuration AP-4000 Series User Guide Interfaces 63 Bridgin g WDS Each WDS link is mapped to a logical WDS port on the AP . WDS ports behave like Eth ernet ports rather than like standard wireless interfaces: on a BSS port, an Access Point learns by a ssociation and from frames; on a WDS or Ethernet port, an Access Point learns from fram[...]

  • Page 64

    Advanced Configuration AP-4000 Series User Guide Interfaces 64 5. Click the Edit button to update the Wireless Distribution System (WDS) T able. Figure 4-15 Adding WDS Links 6. Select whether to use encryp tion in the WDS by checking the Enable WD S Securi ty Mode checkbox. 7. If you enabled WDS Security Mode, ente r the Encryption Key 0 used for e[...]

  • Page 65

    Advanced Configuration AP-4000 Series User Guide Interfaces 65 Figure 4-16 Ethern et Sub-t ab For best results, Proxim reco mmends that you configure th e Ethernet setting to match th e speed and transmission mod e of the device the Access Point is connected to (such as a hu b or switch). If in doubt, leave th is setting at its default, auto-speed [...]

  • Page 66

    Advanced Configuration AP-4000 Series User Guide Interfaces 66 Mesh (AP-4000M/AP-4900M Only) Mesh functiona lity can be enabled on onl y one of the AP’ s wireless interfaces. When configured for Mesh, the AP’s wireless interface simult aneously functions as a mesh link and as a radio to service client s. Mesh is available o nly the AP-4000M and[...]

  • Page 67

    Advanced Configuration AP-4000 Series User Guide Interfaces 67 – For a Mesh AP , one uplink and up to 5 do wnlink connections are supported. For more informa tion on Mesh, see Mesh Networking (AP-4000M/49 00M Only) . Mesh Sof tware Kit The Mesh Softwar e Kit (purchased seperately) convert s an AP-4000 unit into an AP-4000M unit that supports Mesh[...]

  • Page 68

    Advanced Configuration AP-4000 Series User Guide Management 68 Management The Management t ab conta ins the following sub-t abs: • Passwords • IP Access T able • Services • Automatic Configuration (AutoC onfig) • Hardware Configur ation Reset (CH RD) Passwords Y ou can configure the following p asswords: • SNMP Read Community Password: [...]

  • Page 69

    Advanced Configuration AP-4000 Series User Guide Management 69 IP Access T able The Management IP Access table limits in-ba nd management ac cess to th e IP addresses or range of IP addresse s specified in the table. This feat ure applies to all m anagement services (SNMP , HTTP , and CLI) except for CLI management over the serial port. T o configu[...]

  • Page 70

    Advanced Configuration AP-4000 Series User Guide Management 70 • Secure Management S t atus: Enables the further configuration of HTTPS Access, SNMPv3, and Secure Shell (SSH). After enab ling Secure Management, you can choose to configure HTTPS (SSL) and Secure Shell access on the Services tab, and to configure SNMPv3 passwords on the Passwor ds [...]

  • Page 71

    Advanced Configuration AP-4000 Series User Guide Management 71 Figure 4-19 Manag ement Services Config uration Screen[...]

  • Page 72

    Advanced Configuration AP-4000 Series User Guide Management 72 T elnet Configuration Settings • T elnet Interface Bitmask: Select the interface ( Ethernet , Wireless-Slot A, Wireless-Slot B , All Interfaces ) from which you can manage the AP via telnet. This param eter can also be used to Disable te lnet management . • T elnet Port Nu mber: The[...]

  • Page 73

    Advanced Configuration AP-4000 Series User Guide Management 73 NOTE: When Secure Management is enabled on the AP , SSH will be enable d by default and cannot be disabled. Host keys must eithe r be generated ex ternally and uploaded to the AP (see Uploading Externall y Generated Host Keys ), generated manually , or auto-generated at the time o f SSH[...]

  • Page 74

    Advanced Configuration AP-4000 Series User Guide Management 74 Serial Configuration Set tings The serial port interface on the AP is enabled at all times. See Setting IP Address using Serial Port for information o n how to access the CLI interface via the serial port. Y ou can configure and view the following p arameters: • Serial Baud Rate: Sele[...]

  • Page 75

    Advanced Configuration AP-4000 Series User Guide Management 75 • RADIUS Profile for Management Ac cess Control : S pecifies the RAD IUS Profile to be used for RAD IUS Based Management Access. • Local User S t atus : Enab les or disables the local user when RA DIUS Based Managem ent is enabled. The default local user ID is root. • Local User P[...]

  • Page 76

    Advanced Configuration AP-4000 Series User Guide Management 76 Figure 4-21 Automatic Configuration Screen Set up Automatic Configuration for Dynamic IP Perform the following procedur e to enable and set up Automatic Configuration when you have a dynam ic IP address for the TFTP serve r via DHCP . The Configuration filena me and the TFTP server IP a[...]

  • Page 77

    Advanced Configuration AP-4000 Series User Guide Management 77 Figure 4-22 DHCP Options : Setting the Boot Ser ver Host Name 4. Add the Boot Server Hostname and Boo t Filename para meters to the Active Options list. 5. Set the value of the Boot Server Hostname Parameter to th e hostname or IP Address of the TFTP server . For example: 1 1.0.0.7. Fig[...]

  • Page 78

    Advanced Configuration AP-4000 Series User Guide Management 78 AP is not protected, an unauthorized person could reset the AP to factory default s and thus gain control of the AP . The user can disable the hardwa re configuration re set functionality to prev ent unauthorize d access. The hardware configuration reset feature operates as follows: •[...]

  • Page 79

    Advanced Configuration AP-4000 Series User Guide Management 79 2. Check (enable) or uncheck ( disable) the Enable Hardware Configura tion Reset checkbox. 3. Change the default Configuration Reset Pa ssword in th e “Configurati on Reset Password” and “C onfirm” fields. 4. Click OK. 5. Reboot the AP . NOTE: It is important to saf ely store th[...]

  • Page 80

    Advanced Configuration AP-4000 Series User Guide Filtering 80 Filtering The Access Point’ s Packet Filtering features help control th e amount of traf fic exchanged be tween the wired and wireless networks. There are fo ur sub-ta bs under the Filtering headin g: • Ethernet Pr otocol • St a t i c M A C • Advanced • TCP/UDP Port Ethernet Pr[...]

  • Page 81

    Advanced Configuration AP-4000 Series User Guide Filtering 81 Each MAC Address or Mask is comprised of 12 hexadecim al digits (0-9, A-F) t hat correspond to a 48-bit identifier . (Each hexadecimal digit represen ts 4 bit s (0 or 1).) T aken together , a MAC Address /Mask pair specifies an address or a range of MAC addresses that the AP will look fo[...]

  • Page 82

    Advanced Configuration AP-4000 Series User Guide Filtering 82 • Wireless Client 2: 00:02:2D:5 1:32:12 • Wireless Client 3: 00:20:A6:12:4E:38 Prevent T wo Specific Device s from Communicating Configure the following settings to prevent the Wired Serv er and Wi reless Client 1 from communicating: • Wired MAC Address: 00:40:F4:1C:DB:6A • Wired[...]

  • Page 83

    Advanced Configuration AP-4000 Series User Guide Filtering 83 • Wired MAC Address: 01:00:5E:00:32:4B • Wired Mask : FF:FF:FF:FF:F F:FF • Wireless MAC Address: 00:00:00 :00:00:00 • Wireless Mask: 00:00 :00:00:00:00 Result: The Access Point does not forward any p acket s that have a destina tion address of 01 :00:5E:00:32:4B to the wireless n[...]

  • Page 84

    Advanced Configuration AP-4000 Series User Guide Filtering 84 4. Set the destination Port Number (a value between 1 and 65535) to filter . See the IANA Web site at http://www .iana.org/assignments/port-numbers for a list of assigned port numbers an d their descriptions. 5. Set the Port T ype for the protocol: TCP , UDP , or both ( TCP/UDP ). 6. Set[...]

  • Page 85

    Advanced Configuration AP-4000 Series User Guide Alarms 85 Alarms The Alarms ta b has the following sub- tabs: • Group s • Alarm Host T able • Syslog • Rogue Scan Group s Alarm group s can be enabled or disab led via the Web interf ace. Place a check mark in the box provided to enable a specific group. Remove the check mark from the box to [...]

  • Page 86

    Advanced Configuration AP-4000 Series User Guide Alarms 86 Security T rap Group Wireless Int erface/Card T rap Group Operational T rap Group T rap Name Description Severity Level oriTrapInvalidEncryptionKey Invalid encryption key has bee n detected. Critical oriTrapAuthenticat ionFailure Client authentica tion failure has occurred. Authenticatio n [...]

  • Page 87

    Advanced Configuration AP-4000 Series User Guide Alarms 87 Flash Memory T rap Group oriTrapDHCPFailed Response to the DHCP client request not received; device not dyna mically assign ed an IP address Major oriTrapDNSClientLookupFailure DNS client attempts to resolve a specified hostname (DNS lookup) and a failur e occurs because eith er the DNS ser[...]

  • Page 88

    Advanced Configuration AP-4000 Series User Guide Alarms 88 TFTP T rap Group Image T rap Group SNTP T rap Group Generic T rap Group A generic SNMP trap may be sent for any of the fo llowing reasons: System Featur e/License Gro up In addition, the AP support s these st andard trap s, which are always enable d: T rap Name Description Severity Level or[...]

  • Page 89

    Advanced Configuration AP-4000 Series User Guide Alarms 89 RFC 1215-T rap Bridge MIB (RFC 1493) Alarms All these alarm groups cor respond to System Alarms that are displayed in the System S tatus Screen , including the trap s that are sent by the AP to the SNMP managers specifi ed in the Alarm Host T able . Alarm Host T able T o add an entry and en[...]

  • Page 90

    Advanced Configuration AP-4000 Series User Guide Alarms 90 Syslog The Syslog messaging system enables the AP to transmit event messa ges to a central server for monitorin g and troubleshooting. The access point lo gs “Session S tart (Log-i n)” and “Session S top (Log-out)” event s for each wirele ss client as an alternativ e to RADIUS accou[...]

  • Page 91

    Advanced Configuration AP-4000 Series User Guide Alarms 91 • Syslog Lowest Priorit y Logged: The AP will send event messages to the S yslog server that c orrespond to the selected priority number a nd any priority numbers below it. For ex ample, if set to 6, the AP will transmit event messages labeled priori ty 0 to 6 to the Syslog server . Th is[...]

  • Page 92

    Advanced Configuration AP-4000 Series User Guide Alarms 92 Client Login Authentication Status 6 Informational Client logs in/a uthenticate s. Message includes : • Client MAC Addres s • Authentication T ype = None, ACL, RADIUS MAC, 802.1X • Cipher T ype = None, WEP , TKIP , AES • S t atus = Allow , Deny • SSID to which client is connecting[...]

  • Page 93

    Advanced Configuration AP-4000 Series User Guide Alarms 93 Rogue Scan The Rogue Scan feature pr ovides an additional security le vel for wireless LAN deploymen ts. Rogue Sca n uses the selected wireless interface(s) fo r scanning its coverage are a for Access Points and client s. A centralized Network Mana ger receives MAC address information from [...]

  • Page 94

    Advanced Configuration AP-4000 Series User Guide Alarms 94 Figure 4-27 Preven ting Rogue AP Att acks The figure above shows Client 1 connected to a T rus ted AP and Client 2 conn ected to a Rogue AP . The Tr usted AP scans the networks, detects Clie nt 2, and notifies the Netw ork Manager . The Network Manager uses SN MP/CLI to query the wired s wi[...]

  • Page 95

    Advanced Configuration AP-4000 Series User Guide Alarms 95 throughput. The op timum value for this p aramete r during backgr ound scanning mode is 20ms. The channel scan time is calculated from the scan cycle time parameter and the number of channels in the scan channel lis t as follows: intra-channel scan time = (scan cycle t ime - (channel scan t[...]

  • Page 96

    Advanced Configuration AP-4000 Series User Guide Alarms 96 7. Configur e the Scan Result s T rap Notification Mode to control the notification behavi or when APs or stations are detected in a scan: • No Notification •N o t i f y A P • Notify Client • Notify All (Notify both AP and Client detection) 8. Configur e the Scan Result s T rap Repo[...]

  • Page 97

    Advanced Configuration AP-4000 Series User Guide Bridge 97 Bridge The AP is a bridge be tween your wired and wirele ss networking d evices. As a bridge, the functions performed b y the AP include: • MAC addres s learning • Forward and filtering decision making • S panning T ree protoc ol used for loop avoidance Once the AP is connected to you[...]

  • Page 98

    Advanced Configuration AP-4000 Series User Guide Bridge 98 Figure 4-29 S p anning T ree Sub-T ab Storm Threshold S torm Threshold is a n advanced Bridge setup option th at you can use t o protect the n etwork against d ata overload by: • S pecifying a maximum number of frames per second as re ceived from a single network device ( identified by it[...]

  • Page 99

    Advanced Configuration AP-4000 Series User Guide Bridge 99 • Wireless Thresh old: Enter the maximu m allowed number of p ackets per second. Intra BSS The wireless client s (or subscribers ) that associate with a cert ain AP form the Basic Service Set (BSS) of a network infrastructure. By default, wireless su bscribers in the same BSS can communic[...]

  • Page 100

    Advanced Configuration AP-4000 Series User Guide QoS 100 QoS Wireless Multimedia Extensions (WME)/Quality of Service (QoS) The AP supports Wireless Mult imedia Enhancements which defines an interm ediate solution for QoS functionality until the IEEE 802.1 1e specification is formally approved. WME is based on a subset of the 802.1 1e st andard, and[...]

  • Page 101

    Advanced Configuration AP-4000 Series User Guide QoS 101 2. T o enable QoS, check the Enable Quality of Se rvice checkbox. 3. Configur e the QoS Maximum Medium Thre shold for all Admission Controls. Admi ssion will be granted if the new requested traf fic stream and alread y admitted time is less than the medium maximum threshold . 4. T o add a QoS[...]

  • Page 102

    Advanced Configuration AP-4000 Series User Guide QoS 102 8. Select whether to Enable QoS Marking . 9. Click OK . Priority Mapping Use this page to con figure QoS 802.1p to 802.1d priorit y mappings (for layer 2 policies) a nd IP DSCP to 802. 1d priority mappings (for layer 3 policies). The first entry in e ach tab le cont ains the recommen ded prio[...]

  • Page 103

    Advanced Configuration AP-4000 Series User Guide QoS 103 Figure 4-33 Add Priority Mapping Entry 3. Select the 802.1p Priority (from 0-7) for 802.1d Priorities 0-7. 4. Click OK . 5. Click Add in the IP Precedence/DSCP rang es and 802.1d Pr iority t able. 6. Select the IP DSCP Range for each 802.1d Priority . 7. Click OK . NOTE: Changes to Priority M[...]

  • Page 104

    Advanced Configuration AP-4000 Series User Guide QoS 104 Perform the following procedur e to configure the S tation and AP EDCA tables. 1. Click Configure > QoS > EDCA . Figure 4-34 EDCA T ables 2. Click Edit and configure the following parameters in each table: NOTE: Changes to EDCA parameters re quire a reboot of the AP to take effect. • [...]

  • Page 105

    Advanced Configuration AP-4000 Series User Guide QoS 105 • Tx OP Limit : The T ransmission Oppo rtunity Limit. The Tx OP is an interval of time during which a particular QoS enhanced clien t has the right to initiate a fram e exch ange sequence o nto the wireless medium. Th e Tx OP Limit defines the upper limit placed on the value of Tx OP a wire[...]

  • Page 106

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 106 Radius Profiles Configuring Radius Profiles on the AP allows the administrato r to define a pr ofile for RADIUS Servers used by th e system or by a VLAN. The network administrato r can define RADIUS Servers per Auth entication Mode and p er VLAN . The AP communicates with the RADI[...]

  • Page 107

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 107 Figure 4-35 RADIUS Servers per VLAN This figure shows a network with sep arate authentication se rvers for each authentication type and for each VLAN. The clients in VLAN 1 are au thenticated using the auth entication servers configur ed fo r VLAN 1. The type of authen tication se[...]

  • Page 108

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 108 Figure 4-36 RADIUS Server Profiles Adding or Modifying a RADIUS Server Profile Perform the following procedur e to add a RADIUS server profile and to configu re its p arameters. 1. Click Add to create a new profile. T o Modify an existing profile, select the profile and click Edit[...]

  • Page 109

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 109 Figure 4-37 Add RADIUS Server Profile • Server Profile Name : the profile name. This is the name used to associat ed a VLAN to the profile. See Configuring Security Profiles . The Server Profile Name is also used in the Configure > Managemen t > Services page to sp ecify t[...]

  • Page 110

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 110 • Destination Port: Enter the port number which th e AP and the server will use to communicate. By default, RADIUS servers communicate on port 181 2. • Server VLAN ID : Indicates the VLAN that uses this RADIUS server profile. If VLAN is disabled, this field will be grayed o ut[...]

  • Page 111

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 111 NOTE: This feature requ ires RADIUS authentication using MAC Access Control or 802 .1 x. Wireless clients configured in the Access Point’s static MAC A ccess Control list are no t tracked. Authentication and Accounting Attribute s Additionally , the AP supports a number of Authe[...]

  • Page 112

    Advanced Configuration AP-4000 Series User Guide Radius Profiles 112 – Number of octets (bytes) rece ived by subscriber . • Acct-Output-Octets – Number of octets (bytes) sent by subs criber . • Acct-Input-Packets – Number of packets rece ived by subscriber . • Acct-Output-Packets – Number of packets sent by subscriber . • Acct-T erm[...]

  • Page 113

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 113 SSID/VLAN/Security The AP prov ides several security features to pro tect your network from unauthorized a ccess. This section gi ves an overview of VLANs and then discusses the SSID/V LAN/Security configur ation options in the AP: • VLAN Overview • Management VLAN • Sec[...]

  • Page 114

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 114 Figure 4-38 Component s of a T ypical VLAN VLAN Workgro up s and T raffic Management Access Points that are no t VLAN-capable typ ically transmit broadcast and multicast traf fic to all wireless Ne twork Interface Cards (NICs). This process wastes wirel ess bandwidth and degr [...]

  • Page 115

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 115 T ypical User VLAN Configura tions VLANs segment network traf fic into workgroup s, which enable you to limit broad cast and multicas t traffic. W orkgroups enable client s from dif ferent VLANs to access d if ferent res ources using the sa me network infrastr ucture. Clients [...]

  • Page 116

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 116 3. Place a check mark in the Enable VLAN T agging box. Provide Access to a Wireless Host in the Same Workgroup The VLAN featu re can allow wireless clients to manage th e AP . If the VLAN Managem ent ID matches a VLAN User ID, then those wireless clients who are members of tha[...]

  • Page 117

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 117 • EAP-T unneled T ransport Layer Security (TTLS): Certificate-based authentication (a certific ate is required on the server; a c lient’s username/password is tu nneled to the server ov er a secure connection) ; supports automatic key distribution • PEAP - Protected EAP [...]

  • Page 118

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 118 WP A is a replacement for Wired Equivalent Privac y (WEP), t he encryption techniqu e specif ied by the or iginal 802.1 1 standard. WEP has several vulnerabilitie s that have been widely publicized. WP A addresses these weaknesses and provides a stronger security syst em to pr[...]

  • Page 119

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 119 VLANs and Security Profiles The AP-4000/400 0M/4900M allows you to segme nt wireless networks into multip le sub-networks base d on Network Name (SSID) and VLAN memb ership. A Network Name (SSID) identifies a wireless network. Clients associate with Access Points that share an[...]

  • Page 120

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 120 2. Click Add in the Security Profile T able to create a new entry . T o modify an existing profile, select the profile and click Edit . T o delete an existing profile , select the profile and click Delete . Y ou cannot delete a Security Profile used in an SSID. Also, the first[...]

  • Page 121

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 121 • Cipher: CCMP based on AES • 802.1 1i-PSK Station : • Authentication Mode: PSK • Cipher: CCMP based on AES • PSK Passphrase: an 8- 63 character user-defined phra se. It is recommended a pass phrase of at least 13 characters, including both letters and num bers, and [...]

  • Page 122

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 122 Figure 4-42 Security Profile T able - Add Entries[...]

  • Page 123

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 123 MAC Access The MAC Access sub-tab allows you to bu ild a list of stations, identified by thei r MAC ad dresses, author ized to access the network through th e AP . The list is stored inside each AP within your network. Note that you must reboot the AP for any changes to the M [...]

  • Page 124

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 124 the same system separated per VLAN. See th e Security Profile section for more inform atio n. Each SSID can support a unique VLANs. I n order for the AP to support multiple SSID/VLANs, VLAN T agging mu st be enabled. Thes e parameters are configurable on the Wireless-A and Wir[...]

  • Page 125

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 125 6. Enter the Security Profile used by the VL AN in the Se curity Profile field. See the Security Profile section for more information. 7. Define the RADIUS Server Profile Configuration for the VLAN/SS ID: • RADIUS MAC Authentication Profile • RADIUS EAP Authentication Prof[...]

  • Page 126

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 126 11 . S p e c i f y a QoS profile . See the Enabling QoS and Adding QoS policies section for more information. 12.If editing an entry , enable or disable the p arameters on this page by electing Enab le or Disable from the Statu s drop-down menu. If adding a new entry , this dr[...]

  • Page 127

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 127 Figure 4-47 SSID/VLAN Edit Entrie s Screen (VLAN T agging Enabled) 4. Enter a unique Network Name (SSID) between 1 and 32 characters. This p arameter is mandatory . NOTE: Do not use quotation marks (single or double) in the Network Name; this will cause the AP to misinterpret [...]

  • Page 128

    Advanced Configuration AP-4000 Series User Guide SSID/VLAN/Secu rity 128 7. Enable or disable RADIUS acc ounting on the VLAN/SSID under the Accountin g St atus drop -down menu. 8. Enable or disable RADIUS MAC authentication st atus on the VLAN/SSID under the RADIUS Auth entication Status drop-down men u. 9. Enable or disable MAC Access Control List[...]

  • Page 129

    129 AP-4000 Series User Guide 5 Monitoring This chapter discusses the followin g monitoring optio ns: • Ve r s i o n : Provides version information for th e Access Point’s system components. • ICMP: Displays statistics for Internet Contro l Message Protocol packet s sent and received by the AP . • IP/ARP T able: Displays the AP’s IP Addre[...]

  • Page 130

    Monitoring AP-4000 Series User Guide Ve r s i o n 130 Ve r s i o n From the HTTP interface, click the Monitor button and select the Ve r s i o n tab. The list displayed provides you with information that may be pertinent when calling T echnical Su pport. With this informati on, your T echnical Support representative can verify comp atibility i ssue[...]

  • Page 131

    Monitoring AP-4000 Series User Guide ICMP 131 ICMP This tab pr ovides statistical information fo r both received and transmitted messa ges directed to the AP . Not all ICMP traffic on the network is count ed in the ICMP (Internet Contro l Message Protocol) st atistics. Figure 5-3 ICMP Monitoring T ab IP/ARP T able This tab pr ovides information bas[...]

  • Page 132

    Monitoring AP-4000 Series User Guide Learn T able 132 Learn T able This tab displays information relating to network bridging . It report s the MAC address for each node that the device has learned is on the netwo rk and the interface on wh ich the node was d etected. There can be up 10,000 entries in the L earn Ta b l e . Figure 5-5 Learn T able M[...]

  • Page 133

    Monitoring AP-4000 Series User Guide RADIUS 133 RADIUS This tab provides RADIUS au thentication, EAP/802.1x authen tication, and accounting info rmation for both the Primary and Backup RADIUS servers for each RADIUS Server Profile. NOTE: Separate RADIUS servers can be config ured f or each RADIUS Serv er Profile. Select the RADIUS Server Profile to[...]

  • Page 134

    Monitoring AP-4000 Series User Guide Interfaces 134 Interfaces This ta b displays st atistics for the Ethe rnet and wireless interfaces. Figure 5-8 Interfa ce Monitoring T ab (Ethernet) Description of Interface St atistics The following statistics are displayed for the Ethernet in terface only , either of the wireless i nterfaces only , or for all [...]

  • Page 135

    Monitoring AP-4000 Series User Guide Interfaces 135 • Ethernet Chipset (Ethernet) : Identifies the chipset used to realize the interface. • Excessive Collisions ( Ethernet) : The number of frames for which transmi ssion fails due to excessive collisions. • Failed ACK Count (Wireless-Slot A/B) : The number of of times an acknowled gment (or AC[...]

  • Page 136

    Monitoring AP-4000 Series User Guide Interfaces 136 • Out Discards (Ethernet/W ireless-Slot A/B) : The number of error-free outboun d packet s chosen to be discarded to prevent their being tra nsmitted. One possible reason for discarding such a p acket could be to free up buf fer spa ce. • Out Errors (Ethernet/Wireless- Slot A/B) : The number o[...]

  • Page 137

    Monitoring AP-4000 Series User Guide S t ation S tatistics 137 S t ation S t atistics This tab displays information on wir eless clients att ached to the AP and on Wireless Distrib ution System links. Enable the Monitoring S tation S t atistics feature (S tation S t atistics are disabled by default) by checking Enable Monitoring S t ation S t atis [...]

  • Page 138

    Monitoring AP-4000 Series User Guide S t ation S tatistics 138 The following sta tions statistics are available thr ough SNMP: • Octet s Receiv ed : The number of octet s received from the associated wire less station ( or WDS link p artner) b y the AP . • Unicast Frames Received : T he number of Unicast frames received fr om the associated wir[...]

  • Page 139

    139 AP-4000 Series User Guide 6 Commands This chapter contain s information on the following Command functions: • Introduction to File T ransfer via TFTP or HT TP : Describes the available file tra nsfer methods. • Update AP via TFTP: Download files from a TFTP server to the AP . • Update AP via HTTP: Download files to the AP from HTTP . • [...]

  • Page 140

    Commands AP-4000 Series User Guide Introduction to File T ransfer via TFTP or HTTP 140 • Uploading files (Configura tion, CLI Batch F ile) from the AP is called “Retrieving Files.” TFTP File T ransfer Guidelines A TFTP server must be running and configure d to point to the directory containing the file. If you do not have a TFTP server inst a[...]

  • Page 141

    Commands AP-4000 Series User Guide Update AP 141 Up date AP Up date AP via TFTP Use the Update AP via TFTP tab to download Configuration, AP Image, License file, Bootlo ader files, Certificate and Private Key files, and CLI Batch File to the AP . A TFTP serv er must be r unning and configured to point to the dire ctory containing the file. Figure 6[...]

  • Page 142

    Commands AP-4000 Series User Guide Update AP 142 – SSH Private Key : the private key in SSH communications. See Secure Shell (SSH) Settings for more information. – CLI Batch File : a CLI Batch file that contains CLI commands to configure the AP . This file will be executed by the AP immediately af ter being uploa ded. See CLI Batch File for mor[...]

  • Page 143

    Commands AP-4000 Series User Guide Retrieve File 143 A warning message gets displayed that advises the user that a reboot of the device will be required for changes to take ef fect. Figure 6-4 W arning Mess age 4. Click OK to continue with the operation or Cancel to abor t the operation. NOTE: An HTTP file transfer using SSL may take extra time. If[...]

  • Page 144

    Commands AP-4000 Series User Guide Retrieve File 144 – Double-click the TFTP server icon on your desktop an d locate the IP address assigne d to the TFTP server . • File Name: Enter the name of the file to be upload ed. • File T ype : Select the type of file to be uploaded: Config file, CLI Batch File, or CL I Batch (Error) Log. Use the follo[...]

  • Page 145

    Commands AP-4000 Series User Guide Retrieve File 145 Click on the Retrieve File button to initiate th e operation. Figure 6-8 Retrieve File via HTTP Comma nd Screen A confirmation message is displayed, asking if t he user want s to proceed with retrieving the file. Figure 6-9 Retrieve File Confirma tion Dialog Click OK to continue with the oper ati[...]

  • Page 146

    Commands AP-4000 Series User Guide Reboot 146 On clicking the Save button the Save As window displays, wh ere the user is p rompted to choo se the filename an d location where the file is to be downloaded. Sele ct an appropriate filena me and location and click OK . Reboot Use the Reboot t ab to save configuration changes (if an y) and reset the AP[...]

  • Page 147

    Commands AP-4000 Series User Guide Help Link 147 Help Link Use the Help tab to configure the location of the AP Help files. During initialization, the AP on-line help files are downloaded to the de fault location: C:/Program Files/ORiNOCO/AP4xxxx/HTML/index.htm . T o enable the Help button on each p age of the W eb inte rface to access the help fil[...]

  • Page 148

    148 AP-4000 Series User Guide 7 T roubleshooting This chapter prov ides in formation on the following: • T roubleshooting Concept s • Symptoms and Solutions • Recovery Procedures • Related Applications NOTE: This section helps you locate problems related to the AP device setup. For details about RADIUS, TFTP , serial communication program s[...]

  • Page 149

    T roublesh ooting AP-4000 Series User Guide Symptoms and Solutions 149 Serial Link Does Not W ork 1. Make sure you are using a st and ard, straight-throu gh, 9-pin serial cable. 2. Double-check the physical network connections. 3. Make su re your PC termin al program (suc h as HyperT erminal) is active and config ured to the follow ing values: – [...]

  • Page 150

    T roublesh ooting AP-4000 Series User Guide Symptoms and Solutions 150 6. Perfor m the Reset to Factory De fault Procedure in this guide. This will reset th e unit to “DHCP” mode. If there is a DHCP Server on the network, the DHCP Serv er will assign an IP Address to the AP . HTTP Interface or T e lnet Interface Does N ot Work 1. Make sure you [...]

  • Page 151

    T roublesh ooting AP-4000 Series User Guide Symptoms and Solutions 151 Client PC Card Does Not Work 1. Make sure you are using the latest PC Card driver softwa re. 2. Download and install the latest ORiNOCO client softwa re from http://support.proxim.com . Intermittent Loss of Connect ion 1. Make sure you are within range of an active AP . 2. Y ou [...]

  • Page 152

    T roublesh ooting AP-4000 Series User Guide Recovery Procedures 152 3. If possible, try to connect the AP to a different AE hub. 4. T ry using a dif ferent Ethernet cable – if it works, there is probably a faulty connection over the long cable, or a bad RJ-45 connec tion. 5. Check power plug and hub. 6. If the Ethernet link goes down, check the c[...]

  • Page 153

    T roublesh ooting AP-4000 Series User Guide Recovery Procedures 153 For this procedure, you will first erase t he AP Image currently installe d on the unit and then use either ScanT ool or the Bootloader CLI (ove r the serial port ) to se t the IP address and download a new AP Image. Follow these steps: 1. While the unit is running, press the RESET[...]

  • Page 154

    T roublesh ooting AP-4000 Series User Guide Recovery Procedures 154 The Access Point will reboot and the do wnload will begin automatically . Y ou should see downloading activity begin after a few secon ds within the TFTP server’s status screen. 1 1. Click OK when prompted that the device has been updated successfully to return to the Scan List s[...]

  • Page 155

    T roublesh ooting AP-4000 Series User Guide Recovery Procedures 155 [Device name]> reboot Example: [Device name]> show [Device name]> set ipaddrtype static [Device name]> set ipaddr 10.0.0.12 [Device name]> set ipsubmask 255.255.255.0 [Device name]> set tftpipaddr 10.0.0.20 [Device name]> set tftpfilename MyImage.bin [Device na[...]

  • Page 156

    T roublesh ooting AP-4000 Series User Guide Related Applications 156 The terminal display shows Power On Self T ests (POST) activity , and then di splays a CLI prompt, similar to the example below . This process may take up to 90 seconds. [Device name]> Please enter password: 4. Enter the C LI p assword (def ault is public ). The terminal displa[...]

  • Page 157

    T roublesh ooting AP-4000 Series User Guide Related Applications 157 TFTP Server The “T rivial File T ransfer Protocol” (TFTP) server allows you to transfer files across a network. Y ou can upload configuration files from the AP for backup or copying, and yo u can download configuration files or new sof tware images. The TFTP software is locate[...]

  • Page 158

    158 AP-4000 Series User Guide A Command Line Interface (CLI) This section discusses the following: • General Notes • Command Line Interface (CLI) V ariations • CLI Command T ypes • Using T ables and S tring s • Configuring the AP using CLI commands • Set Basic Configuration Parame ters using CLI Commands • Other Network Settings • C[...]

  • Page 159

    Command Line Interface (CLI) AP-4000 Series User Guide General Notes 159 • Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer file s from the Access Point. The TFTP server performs file tr ansfers in both directions. • Group - A logical collection of network p arameter infor mation. For example, the System Gro [...]

  • Page 160

    Command Line Interface (CLI) AP-4000 Series User Guide Command Line Interface (CLI) V ariations 160 Command Line Interface (CLI) V ariations Administrators use the CL I to control Access Point operatio n and monitor ne twork statistics. The AP support s two types of CLI: the Bootloader CLI and the no rmal CLI. The Bootload er CLI provides a limited[...]

  • Page 161

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 161 Figure A-2 Result s of “show” bootloader CLI command CLI Command T ypes This guide divides CLI Comman ds into two ca tegories: Operationa l and Parameter Controls. Operational CLI Commands These commands af fect Access Point behavior , such as downloading, rebooting, [...]

  • Page 162

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 162 [Device-Name]> ? Figure A-3 Result of “?” CLI command Example 2. Display specifi c Commands T o show all commands that start with specifie d letters, enter one or more letters, then ? with no sp ace between letters and ? . [ Device-Name]> s? Figure A-4 Result of[...]

  • Page 163

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 163 Example 3b. Display parame ters based o n letter sequen ce This example shows entries fo r parame ters that sta rt with the letter “i”. The more letters you enter , the fewer the results returned. Notice that ther e is no space be tween the letter s and the question m[...]

  • Page 164

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 164 Example: [Device-Name]> download 192.168.1.100 APImage2 img 2. Syntax to display he lp and usage information: [Device-Name]> download 3. Syntax to execut e the download Comma nd using previously set (sto red) TFTP Paramet ers: [ Device-Name]> download * help Disp[...]

  • Page 165

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 165 reboot Reboots Access Point af ter specified num ber of seconds . S pecify a value of 0 (zero) for immediate reboot. [Device-Name]> reboot 0 [Device-Name]> reboot 30 search Lists th e parameters suppo rted by the specified table . This list corresponds to the table [...]

  • Page 166

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 166 Syntax: [Device-Name]> show <parameter> [Device-Name]> show <group> [Device-Name]> show <table> Examples: [Device-Name]> show ipaddr [Device-Name]> show network [Device-Name]> show mgmtipaccesstbl “set” CLI Command Sets (modifies) t[...]

  • Page 167

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 167 Example 1 - Set the Access Point IP Addres s Parameter Syntax: [Device-Name]> set <parameter name> <parameter value> Example: [Device-Name]> set ipaddr 10.0.0.12 IP Address will be changed when you reboot the Acces s Poin t. The CLI reminds you when rebo[...]

  • Page 168

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Command T ypes 168 Example 5 - Show the Group Para meters This example illustrates how to view all elements of a group or table. Syntax: [Device-Name]> show <group name> Example: [Device-Name]> show network The CLI displays network gro up param eters. Note show network and show [...]

  • Page 169

    Command Line Interface (CLI) AP-4000 Series User Guide Using T ables and S trings 169 Using T ables and S trings Working with T ables Each table element (or paramete r) must be specified, as in the example below . [Device-Name]> set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0 Below are the rules for creating, modifying, enabling/disabl[...]

  • Page 170

    Command Line Interface (CLI) AP-4000 Series User Guide Configuring the AP using CLI commands 170 The string delimiter does no t have to be used for every string object. The single qu ote or double quote only has to be used for string object s that cont ain blank sp ace characte rs. If the string ob ject being used does not contain blank spaces, the[...]

  • Page 171

    Command Line Interface (CLI) AP-4000 Series User Guide Set Basic Configuration Parameters using CLI Commands 171 • Download an AP Configuration F ile from your TFTP Server • Backup your AP Configuration File Set System Name, Location and Cont act Information [Device-Name]> set sysname <system name> sysloc <Unit Location> [Device-[...]

  • Page 172

    Command Line Interface (CLI) AP-4000 Series User Guide Set Basic Configuration Parameters using CLI Commands 172 Figure A-13 Result s of “s how wif” CLI command for an AP Enable 802.1 1d Support and Set the Country Code Perform the following command to enable 802.1 1d IEEE 802.1 1d support for additional regulatory domains. [Device-Name]>set[...]

  • Page 173

    Command Line Interface (CLI) AP-4000 Series User Guide Set Basic Configuration Parameters using CLI Commands 173 Enable and Configure TX Power Control for the W ireless Interfa ce(s) The TX Power Control feature let s the user configure the transmi t power level of the card in the AP at one of fo ur levels: • 100% of the maximum transmit power le[...]

  • Page 174

    Command Line Interface (CLI) AP-4000 Series User Guide Set Basic Configuration Parameters using CLI Commands 174 Examples: [Device-Name]> set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication" radacctprofile "Account[...]

  • Page 175

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 175 Other Network Settings There are other configu ration settings that you may want to set for the AP . Some of them are listed below . • Configure the AP as a DHCP Server • Configure the DNS Client • Configure DHCP Relay and Configure DHCP Relay Servers • Mainta[...]

  • Page 176

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 176 Configure DHCP Relay Perform the following command to enable or disable DHCP Relay Agent S tatus. NOTE: Y ou must have at least one entry in the DHCP Relay Server T able before yo u can set the DHCP Relay Status to Enable. [Device-Name]> set dhcprelaystatus enable [...]

  • Page 177

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 177 Enable/Disable Closed System [Device-Name]> set wif <index> closedsys <enable/disable> Shutdown/Resume Wire less Service [Device-Name]> set wif <index> wssstatus <1 (resume)/2 (shutdown)> Set Load Balancing Maximum Number of Client s [Dev[...]

  • Page 178

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 178 NOTE: See Antennas for more informatio n on internal and external anten na ports. Set the Distanc e Between APs [Device-Name] > set wif <index> distaps <1–5> (see below) [Device-Name] > reboot 0 Set Ethernet S peed and T ransmission Mode [Device-Na[...]

  • Page 179

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 179 [Device-Name]> set telifbitmask < (see below) > Choose from the following values: Set Communication Ports [Device-Name]> set httpport <HTTP port number (default is 80) > [Device-Name]> set telport <Telnet port number (default is 23) > Config[...]

  • Page 180

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 180 [Device-Name]> set serbaudrate <2400, 4800, 9600, 19200, 38400, 57600> [Device-Name]> set serflowctrl <none, xonxoff> [Device-Name]> show serial Figure A-16 Result of “show s erial” CLI Command Configure Syslog [Device-Name]> set syslogprio[...]

  • Page 181

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 181 Set RADIUS Parameters Configure RADIUS Authenti cation server s Perform the following command to configure a RADIUS Server and assign it to a VLAN. Th e RADIUS Server Profile index is specified by the index p arameter and the subindex p a ramete r specifies whether yo[...]

  • Page 182

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 182 Maximum Retransmission : 3 . . . Index : 4 Primary/Backup : Backup Profile Name : Management Access Server Status : notReady Server Addressing Format : ipaddr IP Address/Host Name : 0.0.0.0 Destination Port : 1812 VLAN Identifier : -1 MAC Address Format : dashdelimite[...]

  • Page 183

    Command Line Interface (CLI) AP-4000 Series User Guide Other Network Settings 183 Set VLAN/SSID Parameters Enable VLAN Management [Device-Name]> set vlanstatus enable [Device-Name]> set vlanmgmtid <1–4094> [Device-Name]> show wifssidtbl (to review your settings) [Device-Name]> reboot 0 Disable VLAN Management [Device-Name]> s[...]

  • Page 184

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Monitoring Parameters 184 Configure a Security Profile with 80 2.1 1i Security Mode [Device-Name]> set secprofiletbl <index> secmode 802.11i rekeyint <value> status enable Example: [Device-Name]>set secprofiletbl 7 secmode 802.11i rekeyint 900 status enable Configure a Sec[...]

  • Page 185

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 185 – Link Inte grity Paramete rs - Monitor link st atus • Interface Parameters - Configure Wire less and Ethernet settings – Wireless Inter face Parameters — Channel Blacklist Parameters - View and configur e blacklisted chan nels — Wireless Distribution Sy stem (W [...]

  • Page 186

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 186 – Hardware Config uration Reset - Disable or enable har dware configuration reset and configur e a configuration reset password. – Other Parameters - Configure Security Profiles that define a llowed security mo des (wireless clients), and encryption and authentication [...]

  • Page 187

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 187 System Parameters Inventory Management Inf ormation NOTE: The inventory manage ment commands display advance d information about the AP’ s inst alled compone nts. Y ou may be asked to report this in fo rmation to a representative if you co nt act customer support. Name T[...]

  • Page 188

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 188 Network Parameters IP Configuration Parameters NOTE: The IP Address Assignment T ype (ipaddrtyp e) must be set to static be fore the IP Address (ipadd r), IP Mask (ipmask) or Default Gateway IP Address ( ipgw) values can be entered. DNS Client for RADIUS N ame Resolution D[...]

  • Page 189

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 189 DHCP Server table f or IP pools NOTE: Set either End IP Address or Wid th (b ut not both) when creating an IP address pool. DHCP Relay Group The DHCP Relay Group allows you to enab le or disable DHCP Relay Agent St atus. DHCP Relay Server T able The DHCP Relay Server T abl[...]

  • Page 190

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 190 SNTP Parameters Link Integrity Parameters * Link integrity cannot be configured when the AP is configur ed to function as a Mesh AP. Link Integrity IP T arget T able Name T ype V alue Access CLI Parameter SNTP Group Group N/A R sntp SNTP Status Integer en able disable RW s[...]

  • Page 191

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 191 Interface Parameters Wireless Interf ace Parameters The wireless interface gr oup para meter is wif . Wireless Inter face A (802.1 1a radio) uses table index 3 an d Wireless Interface B (802.1 1b/g radio) uses table index 4. Common Parameters to 80 2.1 1a/b/g * For 802.1 1[...]

  • Page 192

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 192 § When the AP-4900M is configured to use the 4.9 GHz Public Sa fety o perational mode, antenna diversity is disabled, and antenna 3 is stati- cally configured for use. If an operational mode other than 4.9 Public Safety is c onfigured, antenna diversity is configurable by[...]

  • Page 193

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 193 802.1 1b Only Parameters 802.1 1b/g Only Parameters Name T ype V alue Access CLI Parameter Operating Frequency Channel Integer 1 - 14; available channels vary by regulatory domain/country; see Availa ble Channels RW channel Multicast Rate Intege r 1 Mbits/sec (1) 2 Mbits/s[...]

  • Page 194

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 194 * Also for 802.1 1g -wifi mode. 802.1 1g-wifi has be en defined for Wi-Fi testing purpose s; it is not recommended for use in your wi reless network environment. † Super mode must be enabled on the wireless interface before Turb o mode can be enabled. T urbo mode and Mes[...]

  • Page 195

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 195 Channel Blackli st Parameters Wireless Distribution System (WDS) Parameters Wireless Int erface SSID/V LAN/Profile Parameters The Wireless Interface SSID t able manages the SSIDs, VLAN s, Security Profiles, and RA DIUS Profiles associated to each SSID. For configuration ex[...]

  • Page 196

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 196 Wireless Distr ibution System (WDS) Secur ity T able Parameters The WDS Security T able manages WDS related security object s. Ethernet Interface Parameters RADIUS Accounting Status per VLAN Integer enable disable RW acctstatus MAC ACL Stat us per VLAN Integer enable disab[...]

  • Page 197

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 197 Mesh Network Parameters * Higher RSSI smoothing and roaming threshold values create a mo re static mesh envrironment. Lower RSSI smoothing and roaming threshold values create a more dynamic mesh e nvrionment Management Parameters Secure Management Parameters SNMP Parameter[...]

  • Page 198

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 198 SNMPv3 Privacy Password DisplayString User Define d public (default) 6 - 32 characters W snmpv3priv passwd[...]

  • Page 199

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 199 HTTP Parameters * The help link must be set to an HTTP addre ss. Use the forward sl ash character ("/") rather than the backslash character ("") when configur- ing the Help Link location. T e lnet Parameters Name T ype V alue Access CLI Parameter HTTP [...]

  • Page 200

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 200 Serial Port Parameters RADIUS Based Manageme nt Access Parameters The RADIUS Based Managem ent Access pa rameters allow yo u to enable HTTP or T elnet Radius Manageme nt Access, enable or disable loca l user access, and configure the local user password. The default local [...]

  • Page 201

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 201 Auto Configurat ion Parameters These par ameters relate to the Auto Co nfiguration featur e which allows an AP to be automatically configured by downloading a specific configur ation file fr om a TFTP ser ver during the boot up process . TFTP Server Parameters These par am[...]

  • Page 202

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 202 Filtering Parameters Ethernet Protocol Filtering Parame ters Ethernet Filtering T able Identify the dif ferent filters by using the t able index. NOTE: The filter Oper ation T ype (passthru or block) applies only to the p rotocol filters th at are enabled in this table. St[...]

  • Page 203

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 203 Proxy ARP Parameters IP ARP Filtering Parameters Broadcast Filtering T able TCP/UDP Port Filtering The following parame ters are used t o enable/disable th e Port filter featur e. TCP/UDP Port Filtering T able The following parameters are used to configure TCP/UDP Port fil[...]

  • Page 204

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 204 Alarms Parameters SNMP T able Host T able Parameters When creating table entries, you may e ither specifying the argument nam e followed by argument value. CL I applies default valu es to the omitte d arguments. Due to the nature of the information, the only argum ent that[...]

  • Page 205

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 205 Syslog Parameters The following parameters conf igure the Syslog settings. NOTE: When Heartbeat is en abled, the AP periodically send s a message to the Syslog serv er to indicate that it is active. The frequency with which the heartbeat messa ge is sent dep ends upon the [...]

  • Page 206

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 206 Bridge Parameters Sp anning T ree Parameters Spanning T ree Priority and Path Cost T able Storm Threshold Parameters Name T ype V alue Access CLI Parameter Spanning Tree Group N/A R stp Spanning Tree Status Integer enable (default) disable RW stpstat us Bridge Priority Int[...]

  • Page 207

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 207 S torm Threshold T able Intra BSS Subscriber Blocking The following parameter s control the Intra BSS traffic feature, w hich prevent wireless clients that ar e associated with the same AP from communicating with each oth er: Packet Forwarding Parameters The following para[...]

  • Page 208

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 208 RADIUS Parameters General RADIUS Parameters RADIUS Server Configuration Paramete rs NOTE: Use a server name only if you have enabl ed the DNS Client functionality . See DNS Client for RADIUS Name Resolution . Name T ype V alue Access CLI Parameter RADIUS Group N/A R radius[...]

  • Page 209

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 209 Security P arameters MAC Access Control Parameters MAC Access Control Ta ble Rogue Scan Configuration T able The Rogue Scan Configuration T able allows you to enab le or d isable Rogue Scan a nd configure th e scanning parame ters. 802.1X Parameters Hardware Configurat ion[...]

  • Page 210

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 210 Security Profile T able The Security Profile T able allows you to configure security profiles. A maximum of 16 security profiles are suppor ted per wireless interface. Each security profile can be enable and configur e one or more security modes (None Secure S tation, WEP [...]

  • Page 211

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 211 VLAN/SSID Parameters Other Parameters IAPP Parameters NOTE: These parameters conf igure the Inter Access Point Protocol (IAPP) for roaming. Leave these settings at their default value unless a technical re pres ent ative asks you to chang e them. Wireless Multimedia Enhanc[...]

  • Page 212

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 212 Enabling QoS Configuring QoS Policies The QoS group ma nages the QoS policies: * QoS must be enabled on a wireless inte r face before spectralink can be enabled. † A priority mapping needs to be specified for a QoS Policy . The priority mapping depends on the type of pol[...]

  • Page 213

    Command Line Interface (CLI) AP-4000 Series User Guide Parameter T ables 213 Specifying the Mapping between IP Preced ence/DSCP Ranges and 802.1D Priorities The QoS IP DSCP to 802.1D Mapping T able specifies the mapping between IP Precede nc e/DSCP Ranges and 802.1D priorities. QoS Enhanced Distri buted Channel Access (EDCA) Parameters The followin[...]

  • Page 214

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Batch File 214 Defining the QoS Policy used for a W ireless Int erface SSID The QoS Policy object configures the QoS policy to be used per wireless interface SSID. Th is object is part of the Wireless Interface SSID T able; the CLI co mmand for this table is “wifssidtbl.” * A QoS Policy[...]

  • Page 215

    Command Line Interface (CLI) AP-4000 Series User Guide CLI Batch File 215 set ipaddr 11.0.0.66 set ipaddrtype static set ipsubmask 255.255.255.0 set ipgw 11.0.0.1 set wif 4 autochannel disable set wif 4 mode 1 set syslogstatus enable set sysloghbstatus enable set sysloghbinterval 5 set wif 4 netname london reboot Figure A-18 Sample CLI Bat ch File [...]

  • Page 216

    216 AP-4000 Series User Guide B ASCII Character Chart Y ou can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digit s are 0-9 and A-F (not case s ensitive). ASCII ch aracters are 0- 9, A-F , a-f (c ase sensitive), and punctuation marks. Each ASCII character correspond s to two hexade cimal digits. The table below l[...]

  • Page 217

    217 AP-4000 Series User Guide C Specifications • Software Features • Hardware S pecifications • Availab le Channels Sof tware Features The tabl es below list the softwar e features available on the AP- 4000 Series. • Number of St ations per BSS • Management Functions • Advanced Bridging Functions • Medium Access Control (MAC) Function[...]

  • Page 218

    Specifications AP-4000 Series User Guide Software Features 218 Advanced Brid ging Functions Medium Access Contro l (MAC) Functions * DFS is required for 802.1 1a APs certified in the ETSI and TE LEC regulatory domains and operating in the middle frequency band. Wh en ACS is disabled, available c hannels are limited to those in t he lower frequency [...]

  • Page 219

    Specifications AP-4000 Series User Guide Software Features 219 ‡ Support is provided for a primary and backup RADIUS authenticat ion server for both MAC -based authentication and 802.1x authent ication per VLAN. § Use in conjunction with WP A o r 802.1x Authentication. Network Functions * Includes Fallback to Primary RADIUS Server , RADIUS Sessi[...]

  • Page 220

    Specifications AP-4000 Series User Guide Hardware S pecifications 220 Hardware Specifications Physical Specifications Dimensions (H x W x L) = 6.5 x 18.5 x 26 cm (2.5 x 7.25 x 10.25 in.) Weight = 1.75 Kg (3.5 lb.) Electrical Specifications V oltage = 100 to 240 V AC (50-60 Hz) Current = 0.2 amp Power Consumption = <9 W atts (power supply) Enviro[...]

  • Page 221

    Specifications AP-4000 Series User Guide Available Channels 221 A vailable Channels Availa ble channels vary based on r adio, country , and freque ncy band . T o v erify which channe ls are available f or your product: 1. Locate the product SKU on the underside of your AP unit or on the unit’s box. 2. Note the alphanumeric code following the numb[...]

  • Page 222

    Specifications AP-4000 Series User Guide Available Channels 222 AP-4900M Channels Channel availability in the AP-4900M de pends on the operatio nal mode. When operating in 802.1 1a-only , 802.1 1b-only , or 802.1 1b/g operational mode, the AP uses the channels in the following t able. Additionally , when the AP-4900M’ s 802.1 1a radio is operatin[...]

  • Page 223

    Specifications AP-4000 Series User Guide Available Channels 223 25 30 33 35 40 33 45 50 33 55 60 33 65 70 33 75 80 33 85 90 3 Channel Frequ ency Band 10 MHz 20 MHz[...]

  • Page 224

    224 AP-4000 Series User Guide D T echnical Support If you are having a prob lem using an AP and cannot resolve it with the information in T roubleshooting , gather the following information and co ntact your local reseller: • List of ORiNOCO products installed o n your network; include the following: – Product names and quantity – Part number[...]

  • Page 225

    T echnical Support AP-4000 Series User Guide T elephone Support 225 Submit a Knowledgebase question or open an issue at: <http://support.proxim.com/cgi-bin/p roxim.cfg/php/enduser/ask.php>. Our technical support staf f will reply to you by email. NOTE: The Knowledgebase is available to all website visitors. First-time us ers will be asked to [...]

  • Page 226

    226 AP-4000 Series User Guide E St atement of W arranty W arranty Coverage Proxim Corpor ation warrant s that it s Product s are manu fa ctured so lely from new par ts, conform subst antially to specifications, and will be free of defects in material and workm anship for a W arranty Period of 1 year from the date of purchase. Rep air or Replacement[...]

  • Page 227

    St atement of Warranty AP-4000 Series User Guide Other Information 227 Calls to the Customer Servic e Center for reasons other t han Product failure will not be accepted unless Buyer has purchased a Proxim Service Contract or th e call is made within the first thirty (30) days of the Product’ s invoice date. Calls that are outside of the 30-day f[...]

  • Page 228

    228 AP-4000 Series User Guide F Regulatory Compliance NOTE: Please read this sectio n before installing and us ing your product, and sa ve these instructions. Visit http://support.proxim.com for the latest regulato ry complianc e information. This section contains impo rtant reg ulatory compliance information and det ails for the following product [...]

  • Page 229

    Regulatory Compliance AP-4000 Series User Guide 229 Please see the following se ct ions for more in formation: • Safety Information (USA, Canada, & European Union) • Federal Communications Commission (FCC) ( AP-4000/4000M) • Industry Canada (IC) (AP-4 000/4000M only) • European Union (AP-4000/4000M only) • Regulatory Compliance Certif[...]

  • Page 230

    Regulatory Compliance AP-4000 Series User Guide Safety Information (USA, Canada, & European Union) 230 Safety Information (USA, Ca nada, & European Union) This product has b een evaluated to, and complies with, the Safety requirement s of UL60 95 0:2000, and IEC60950:1999; the S t andard s for the Safety of Inform ation T echnology Eq uipme[...]

  • Page 231

    Regulatory Compliance AP-4000 Series User Guide Federal Communications Commission (FCC) (AP-4000/4000M) 231 Federal Communications Commission (FCC) (A P-4000/4000M)[...]

  • Page 232

    Regulatory Compliance AP-4000 Series User Guide Federal Communications Commission (FCC) (AP-4000/4000M) 232 W arnings This equipment gene rates, uses, and can radiate ra dio freque ncy energy; and, if not installed an d used in accordance with the instructions, may cause harm ful interference to ra dio commu nications. However , there is no guarant[...]

  • Page 233

    Regulatory Compliance AP-4000 Series User Guide Industry Canada (IC) (AP-4000/4000M only) 233 Industry Canada (IC) (AP-4000/4000M only)[...]

  • Page 234

    Regulatory Compliance AP-4000 Series User Guide European Union (AP-4000/4000M only) 234 European Union (A P-4000/4000M only) NOTE: European Union includes th e following countries: Austria, Belgium, Cyprus, Czech Re public, Denmark, Estonia, Finland, France, Ger many , Greece, Hungary , Ireland, Italy , Latvia, Lithuania, L uxembourg, Malt a, Nethe[...]

  • Page 235

    Regulatory Compliance AP-4000 Series User Guide Regulatory Compliance Certifications Summary (AP-4000/4000M) 235 Regulatory Compliance Certifi cations Summary (AP-4000/4000M) * European Union includes the following countrie s: Austria, Belgiu m, Cyprus, Czech Republic, Denmar k, Estonia, Finland, France, Germany , Greece, Hungary , Ireland, Italy ,[...]