SmartBridges sB3210 manual

Copyri ght © s martBri dges Pt e Ltd. A ll Rights Reserv ed. u n w i r i n g o u r w o r l d TM airPoint™ Nexus sB3210 User Guide Version 1.0[...]

Page 2 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform TABLE OF CONTENTS ABOUT THIS DOCUMENT .................................................................................................... 3 OVERVIEW OF USER GUIDE ......................................................................... ...................... 3[...]

Page 3 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform About This Document This U ser Guide i s for t he networ king pr ofess ional wh o conf igures and mana ges the s martB ridges ’ Intelligent Nexus Platform of wireless access po ints (airPoint ™ Nexu s). It provides detailed information on u sing the web-base[...]

Page 4 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform T echnical Support Center Comprehensive t echnical support by dedicated smartBridges engineers is available to all customers through the smartBridges support center website. The website provides updated tools and documents to help troubleshoot and resolve techni[...]

Page 5 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 1. Introduction This User Guide provides information on how to set-up the features and deploy the airPoint unit. A web-based management tool is provided to assist the user in configuring the airPoint unit for diff erent purpos es. 1.1. airPoint™ Nexus C onfigu[...]

Page 6 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 1.3. Checklists Pre-Installation Checklis t for airPoint™ Organization Name/Site Name Addr ess City State Zip Code Telephone N umber Site Survey and Link Planning No Parameters Units Site A Site B 1 Standard to be followed FCC/ETSI 2 Freq uency Band 2.4GHz 5.2[...]

Page 7 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform No Parameters Units Site A Site B 22 Length of external cable connecting a Radio and antenna Feet/meters 23 Fade Margin taken into account for a link budgeting Between 10 to 20 dBm 24 Model of smartBridges airPoint™ equipmen t selected for a link. Ple ase refe[...]

Page 8 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Post-Installation Checkli st for airPoint ™ Organization Name/Site Name Addr ess City State Zip Code Telephone N umber General Configuration Informat ion No Parameters Units Site A Site B 1 Radio operations Mode Bridge 2 SSI D of a Radi o 3 IP address x.x.x.x [...]

Page 9 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Chec klist No Parameters Units Site A Site B 1 Check out the Crimping of the Ethernet cable at both the ends Yes/No 2 Check out the proper grounding of the antenna and equipment Yes/No 3 Ensure no extreme bends or kink's in the cable Yes/No 4 Ensure Etherne[...]

Page 10 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 2. airPoint™ Configuration This chapter explains how to log in, change passwords and configure the various parameters for the airP oint™ Nexus. 2.1. User Login and License Agreement The airPoint unit comes w ith a pre-configured defaul t Ethern et (wired-si[...]

Page 11 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 2-2 License Agreement Page Figure 2-3 Nexus Summary Information Page The page information descriptions are provided in the table on the following page:[...]

Page 12 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Table 2-1 Description of Parameters 2.2. Web GUI Administra tor Password Change By default the ad ministrator pa ssword is smartBridges (case sens itive ). Follow the steps below to change the Ad ministrator password. 1. Click on the ’Tools | User Manager’ [...]

Page 13 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 2.3. Using the Conf iguration Pages : The airPoint™ Nexus configuration system comprises several pages for configuring each parameter. A common navigation menu bar is provided at the top of each page for e asy navigation as shown in the figure below . Figure [...]

Page 14 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 2-6 Editable Boxes for Parameter Edit ing The Navigation me nu bar contains me nu items that allow user to go to different configuration pages. The following table summarizes functiona lities available for the menu item links. Table 2-2 Description of Me[...]

Page 15 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Menu Item Menu Sub-items Description Main Wireless Tr affic Statistics: Displays the Wireless Tra ffic Statistics. Radio Security Allow s the use r to set the security mode: 1. None 2. WEP only 3. Internal ACL 4. External ACL (Radius) 5. WPA-Radius 6. WP A-P SK[...]

Page 16 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Menu Item Menu Sub-items Description Tools System Configuration System Name: Allows user to change the name of the airPoint™ unit Sys tem Des cripti on: Allo ws user to en ter a desc riptio n of the airPoint™ unit SNM P Secu rity : Allows user to set the SN[...]

Page 17 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Menu Item Menu Sub-items Description Profile Manager Save Profile Allows user to def ine and save up to three device operating profiles for easy device management. One installa tion profile is a lways available. Operating Profile Allows user to load the profile[...]

Page 18 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 2.4. airPoint™ Bridge Configuration Parameters This s ecti on explai ns how t o confi gure the follo wi ng parameters for airPoint Bridge: Ethernet, Wireless and Bridge Spanning Tree Protocol. 2.4.1. Ethernet Configurations The Ethernet (wired-side) parameter[...]

Page 19 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 6. Ch oose a r adio c hannel to asso ciat e with th e clie nt. 7. Choose the data rate. 8. Select the transmit power of the radio from Dial in Pow er drop down menu 9. Se lect the gain of the antenna from the drop down menu according to the gain of the antenna [...]

Page 20 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Page Items Descriptions Rates This indicates the current rate at w hich the radio is operating, which can be set as desired by the user. Auto Rate Fallback Allows radio to fall b ack to low er data rate. Dial a Power Dial a Power is used to set the outpu t powe[...]

Page 21 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Page Item Descriptions Preamble Settings a) Shows current value b) Choose other settings available from pull-down menu The radio preamble is a section of data at the head of a packet tha t cont ains i nforma tion t he air Point™ Device and Remo te dev ices ne[...]

Page 22 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 2.5. Bridge Configuration In Bridge mode the airPoint™ unit a cts as a transparent br idge between the Radio and the Ethernet interfaces. The figure below shows the bridge configuration and the bridge forwarding table information. The STP (Spanning Tree Proto[...]

Page 23 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Setting Default Value Range Purpose Bridge forward delay 15 4-30 The pe riod of time a bridge will wait (the listen and learn period) before beginning to forw ard data packets. Ethernet port (ETH A) path cost 100 0-65535 The cost of u sing the port to reach the[...]

Page 24 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform The Radio and Ethernet interfaces are assigned to bridge group by default. When the user enables STP and assigns a priority on bridge, STP is enabled on the radio and Ethernet interfaces. The interfaces adopt the priority assigned to bridge. The user can edit S[...]

Page 25 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 2-11 Bridge Configuration[...]

Page 26 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 3. Secur ity The Security Configuration page allows the clien t devices to authenticate with the airPoint™ unit by using differ ent sec urity modes. Follo w the st eps bel ow to c onfigur e the ai rPoint™ u nit with Secu rity Parameters: 1. Click the Securi[...]

Page 27 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 3-1 Radio Security Page with WDS entries added 3) Internal ACL (Access Control List) Mode : The user needs to provide the ACL MAC addresses or WDS addresses of the clients that can get ass ociated with t he airPoi nt Bri dge. I n this mode , you c an def[...]

Page 28 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 3-2 Internal ACL with WEP disabled If the WEP key is en abled, the configuration page for Internal ACL w ill be as follows: Figu re 3-3 Intern al ACL wi th WEP enab led[...]

Page 29 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 4) External ACL( Radius) & Internal A CL : This mode allows the user to use an External Radius as well as an Internal ACL for client authentication. The entry in the Inte rnal ACL has more precedence than the External ACL table (W DS entries still need to b[...]

Page 30 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Encryption type is TKIP (Temporal Key Integrity Protocol). Figure 3-5 WPA radius page 6) WPA-PSK: In this mode, a clien t needs to be capable of WPA-PSK. The user needs to give th e Pre-Shared Key value and the client s must spec ify t he key t o get ass ociate[...]

Page 31 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 4. T raffic St atistics The Wireless and Ethernet Traffic Statistics can be displayed by c licking on the ‘Networking’ | ‘Statistics’ drop down menu. Th e follow i ng figu re show s the stat istics page. This pa ge will be refreshed after every 10 secon[...]

Page 32 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 5. T ools 5.1. 1. Syst em Co nfi gur ation The System Configuration page provides a one page tool to configure the airPoint™ de vice. To access the System Configuration page go to ‘Tools ’ | ‘System Configuration’ drop down menu. The following figure [...]

Page 33 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Table 5-1 System Configurat ion 5.1. 2. S NMP Secu rity User can edit the SNMP Community String and SNMP Access filters. To cha nge the SNMP security settings, click on the SNMP security link in the System Configuration page. Figure 13 show s the SNMP Security [...]

Page 34 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 5-2 SNMP Security Configuration Table 5-2 SNMP Security Configuration 5.1. 3. Re set Opti ons All rese t options power cycles the d evice a nd restar t s th e who le syste m. Reset : To reset the device. The device w ill come up w ith the current configu[...]

Page 35 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 5-3 Delayed Reset For delayed reset, follow the steps below: 1. S elect dat e from the c alendar that ha s been provid ed. 2. Select the recurrence. 3. Click ’Apply Changes’ button to change the settin gs. 4. I f user wa nts to disable ‘Del ayed Re[...]

Page 36 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 5-4 NTP Time Settings 5.2. Profile Manager The airPoint™ Nexus configuration parameters can be saved as profiles in the system. There are four profiles available in the system: 1. Installation profile 2. P rofile 1 3. P rofile 1 4. P rofile 3 All the f[...]

Page 37 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 5-5 Profile Manage r Table 5-3 Profile Manager Menu Items 5.2. 1 Sav e Profi le Follow the steps below to save the curre nt configuration to a profile: 1. Select a profile name from ‘Save As’: 2. Enter a description of the profile. 3. Cli ck the ‘S[...]

Page 38 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 5.2.2 Load Operating Profile To load the operating profile: 1. Select a profile to loa d from the Profile Table: 2. Click the Load Profile b utton to load the selected profile. Note : Current configuration parameters w ill be replaced by the new loaded profile.[...]

Page 39 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 5.3. Link Test The Link Test tools are available from the navigation menu bar ‘Tools’ | ‘Link Test’ drop down menu. From Link Test tools the u ser can test Th roughput and perform Ping Test. You will nee d to run Radio Transmit or R adio Re ceive. The c[...]

Page 40 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 5-8 Throughput Test Result 5.4. Link Budget Planning Link Budget Planning is a very useful tool fo r link budget estimation. Th e Link Budget Planning Calculator can be accessed from the navigation menu bar ’Tools| Link Bud get Planning Calculator’ d[...]

Page 41 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 6. The link budget information will be displayed in the following figure. The link budget info rmation EIRP, Free Space Loss and Theoretical RSSI are computed and displayed. The Receive Sensitivity, Maximum Transmit P ower, System Gain and Available Fade Margin[...]

Page 42 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform 6. Firmware Upgrade New firmware for airPoint™ Nexus is available for down load from smartBridges Support web-site: http://www .smartbridges.com/sup p ort/ The airPoint™ Nexus device firmware can be upgraded from the web management interface. Follow the ste[...]

Page 43 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Figure 6-3 Successful upgrade pop-up w indow[...]

Page 44 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Appendix A: Configuratio n of the Radius Server FreeRADIUS/WinXP Authentication Setup This docume nt desc ribes ho w to bui ld a Fre eRADIU S serv er for TLS and PEA P authent icat ion, an d how to configure the Windows XP clients (supplicants). The server is c[...]

Page 45 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform make > mym ake.log 2>&1 If you encounter problems, you can review myma ke.log (or myconfig.log, or myinstall.log) for er rors. b. FreeRadius -- Download the latest FreeRADIUS snapshot.We downloaded the file to our home directo ry. The sna pshot is loc[...]

Page 46 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform # The extensions to add to a certificate request [ req_ dist inguis hed_na me ] count ryNam e = Country Name (2 letter code) countryName_default = US count ryNam e_min = 2 count ryNam e_max = 2 stateOrProvinceName = State or Province Name (full name) stateOrPro[...]

Page 47 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform For TLS and PEA P, the s erver nee ds root .pem an d cert-s rv.pem . For TLS , the Win dows X P client needs root.der and cert-clt.p12. For PEAP, the Windows XP client needs roo t.der. In the event tha t you want to use TLS authenticati on with multip le client[...]

Page 48 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform dh_file = /usr/local/rad ius/etc/1x/dh random_file = /usr/local/radius/etc/1x/rando m fragment_size = 1024 include_length = yes } No other changes are needed in radiusd.conf for TLS. d. Server Certificates, DH File, and Random File – we added a new directory [...]

Page 49 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform At the R ADIUS tab for authe ntication: Active = Yes Server IP = 192 .168.1.10 Port Number = 1812 Shared Secret = AP_Sha red_Secret 6. Test TLS The final step is to test th e server. With Wi ndow s XP comp uter off, start the server in the debug mode by enterin[...]

Page 50 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Change the default_eap_type from tls to peap: eap { defa ult_ea p_typ e = peap Move to the PEAP section below the TLS sectio n and uncomment the following lines: peap { defa ult_ea p_typ e = msc hapv2 } The server is now ready for PEAP authentica tion. 8. Chang[...]

Page 51 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Appendix B - Useful te rms and definitions Abbreviations Acronyms MAC Media Access Control RSSI Receive Signal Sensitivity Indication SSID Se rvice Set Ide ntifier DHCP Dynamic Host Configuration Protocol ACL Access C ontrol L ist SNMP Simple Network Ma nagemen[...]

Page 52 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform then forwards the encrypted frame to its destination. The encrypted data frames a re sent with the MAC header WEP bit set. Thus , the rec eiver k nows to use the share d WEP key to decryp t the payload and recover the original frame. The new frame, w i th an un[...]

Page 53 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform SNMP Short for S imple N etwo rk M anagement P rotocol, a se t of proto cols for managing compl ex ne tworks. The first versions of SNMP were developed in the early 80s. SNMP w orks by sending messages, called protocol data units (PDUs) , to different parts of [...]

Page 54 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Appendix C - SNMP T rap The airPoint™ Nexus generates SNMP trap that ca n be forwarded to the SNMP Trap server. The SNMP Trap serve r IP addres s is set in sectio n. The following table provides a list of SN MP traps generated. Trap Message IP address Object [...]

Page 55 of 55 airPoint™ Nexus User Configuration Guide intellig ent wirele ss platform Appendix D – License airPoint™ Nexus is Copyright © 2004-2005 by smartBridges. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the follow ing conditions are met: 1. Redistrib[...]