NI WAP-3701/3711 User’s Manual First Edition, Sept 2007
NI WAP-3701/3711 User’s Manual The software described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agreement. Copyright Notice Copyright © 2007 National Instruments Corporation. All rights reserved. Reproduction without permission is prohibited. Trademarks National Instruments or NI is a registered trademark of National Instruments Corporation.
Table of Contents Chapter 1 Introduction ...............................................................................................1-1 Overview .............................................................................................................................. 1-2 Package Checklist................................................................................................................. 1-2 Product Features ...............................................................................
Appendix C Regulatory Statement .............................................................................. C-1 Appendix D Technical Support and Professional Services ......................................
1 Chapter 1 Introduction The NI WAP-3701/3711 enables wireless users to access network resources wirelessly. The NI WAP-3701/3711 can authenticate and authorize wireless users by IEEE 802.1X and RADIUS, and communicate with a back-end RADIUS (Remote Authentication User Dial-In Service) server to determine if a wireless user is allowed to access the wireless network..
NI WAP-3701/3711 User’s Manual Introduction Overview NI WAP-3701/3711 is rated to operate at temperatures ranging from 0 to 60°C, and is rugged enough for any harsh industrial environment. It can be installed easily on DIN-Rail mounting as well as in distribution boxes. The DIN-Rail mounting capability, wide operating temperature range, and the IP30 case with LED indicators make the NI WAP-3701/3711 a ready, plug-and-play, yet reliable solution for your Industrial Wireless application.
NI WAP-3701/3711 User’s Manual Introduction 802.
2 Chapter 2 Getting Started This chapter explains how to install the NI WAP-3701/3711 for the first time. The following topics are covered: First-Time Installation and Configuration Deploying the Access Point (AP) Setting up Client Computers ¾ Configuring IEEE 802.11g-related Settings ¾ Configuring TCP/IP-related Settings Confirming the Settings of the AP and Client Computers ¾ Checking if the IEEE 802.
NI WAP-3701/3711 User’s Manual Getting Started First-Time Installation and Configuration Before installing the NI WAP-3701/3711, check to make sure that all items in the Package Checklist are in the box. In addition, you will need access to a notebook computer or PC equipped with an Ethernet port. The NI WAP-3701/3711 has a default IP address that you must use when connecting to the NI WAP-3701/3711 for the first time.
NI WAP-3701/3711 User’s Manual NOTE Getting Started For security reasons, we strongly recommend changing the password. To do this, open the Network Manager homepage, click on General Æ Password, and then follow the onscreen instructions. Step 5: Select the Operational Mode for NI WAP-3701/3711 By default, the NI WAP-3701/3711’s operation mode is set to AP/Bridge.
NI WAP-3701/3711 User’s Manual Getting Started Step 6: Configure the NI WAP-3701/3711’s IEEE 802.11 settings Go to the IEEE 802.11 Communication section to configure IEEE 802.11g-related communication settings, including Regulatory domain, Channel number, and Network name (SSID). The number of available RF channels depends on local regulations; therefore, you will need to choose an appropriate regulatory domain to comply with local regulations.
NI WAP-3701/3711 User’s Manual Getting Started Deploying the Access Point (AP) After the settings have been configured, deploy the AP to the field application environment. Connect the AP to an Ethernet LAN through an Ethernet switch or hub.
NI WAP-3701/3711 User’s Manual Getting Started NOTE A wireless client computer must be in infrastructure mode to associate with an AP. NOTE The SSID of the wireless client computer and the SSID of the AP must be identical. Or, if the SSID broadcast capability of the AP is enabled (default setting), the SSID of the wireless client computer could be set to “any.” NOTE Both the wireless client computer and the Access Point must have the same WEP settings for them to communicate with each other.
NI WAP-3701/3711 User’s Manual 3. 4. Getting Started Type “ping default_gateway”, where default_gateway is the IP address of the default gateway of the wireless client computer, and then press Enter. If the gateway responds, go to the next step; otherwise, see Appendix B, “TCP/IP Settings Problems,” to troubleshoot the problem. Type “ping 1st_dns_server”, where 1st_dns_server is the IP address of the primary DNS server of the wireless client computer, and then press Enter.
3 Chapter 3 Web Console Configuration In this chapter, we will explain each Web management page of the Web-based Network Manager.
NI WAP-3701/3711 User’s Manual Web Console Configuration Overview Menu Structure The left side of the home page contains a menu that you can use to carry out commands. Here is a brief description of the hyperlinks in the menu: y Home. For returning to the home page. y Status. Status information. ¾ Wireless Clients. The status of the wireless clients currently associated with the AP. ¾ DHCP Mappings. Current IP-MAC address mappings of the built-in DHCP server. ¾ System Log. System events log.
NI WAP-3701/3711 User’s Manual Web Console Configuration Save, Save & Restart, and Cancel Buttons There are three buttons at the bottom of each page for configuring settings—Save, Save & Restart, and Cancel. Clicking Save stores changes to the NI WAP-3701/3711’s memory and returns you to the home page. Clicking Save & Restart stores the changes to the NI WAP-3701/3711’s memory and restarts the NI WAP-3701/3711 to activate the new settings.
NI WAP-3701/3711 User’s Manual Web Console Configuration Current DHCP Mappings On this page, all the current static or dynamic DHCP mappings are shown. A DHCP mapping is a correspondence relationship between an IP address assigned by the DHCP server and a computer or device that obtains the IP address. A computer or device that acts as a DHCP client is identified by its MAC address. A static mapping indicates that the DHCP client always obtains the specified IP address from the DHCP server.
NI WAP-3701/3711 User’s Manual Web Console Configuration General Operations Specifying the Operational Mode Go to the General, Operational Mode section, select an operational mode and then click Save at the bottom of this page. This will take you back to the starting page. The AP supports 2 operational modes: y AP/Bridge. This mode provides both Access Point and Static LAN-to-LAN Bridging functionality. The static LAN-to-LAN bridging function is supported through Wireless Distribution System (WDS).
NI WAP-3701/3711 User’s Manual Web Console Configuration NOTE Although it is more convenient to use dynamic bridging, there is a limitation—the AP Client can only transmit TCP/IP packets between its wireless interface and Ethernet interface; other types of traffic (such as IPX and AppleTalk) are not forwarded. TIP When the AP is configured for AP Client, it can be used as an Ethernet-to-wireless network adapter.
NI WAP-3701/3711 User’s Manual Web Console Configuration Backing up and Restoring Configuration Settings by HTTP To back up the configuration of the NI WAP-3701/3711 by HTTP (i.e., export the configuration to a file): 1. Click on Back Up 2. You will be prompted to open or save the configuration file. Click on Save. 3. The configuration file is named with the NI WAP-3701/3711’s MAC address.
NI WAP-3701/3711 User’s Manual 4. 5. 6. 7. 8. NOTE Web Console Configuration On the computer, run the TFTP Server utility, and specify the folder in which the firmware files will be placed. On the computer, run a Web browser and click the General, Firmware Tools hyperlink. Choose TFTP as the Firmware management protocol. Specify the IP address of the computer, which acts as a TFTP server.
NI WAP-3701/3711 User’s Manual Web Console Configuration Backing up and Restoring Configuration Settings by TFTP To back up the configuration of the NI WAP-3701/3711 by TFTP: 1. 2. 3. 4. 5. 6. 7. 8. NOTE Prepare a computer that will be used as a TFTP server and as a managing computer to trigger the backup process. Connect the computer and one of the LAN Ethernet switch ports with a normal Ethernet cable.
NI WAP-3701/3711 User’s Manual TIP Web Console Configuration If you want to back up or restore the configuration from a remote location over the Internet, adjust the Timeout and Max no. of retries settings of TFTP Server for remote TFTP configuration backup/restore to succeed. Resetting the Configuration to Factory Defaults Clicking the Reset button resets the device configuration to factory defaults. WARNING Think twice before clicking the Reset button.
NI WAP-3701/3711 User’s Manual Web Console Configuration DHCP Server (AP/Bridge modes only) Basic The NI WAP-3701/3711 can assign IP addresses to client computers automatically by DHCP. In this section of the management page, you can specify the Default gateway, Subnet mask, Primary DNS server, and Secondary DNS server settings that will be sent to a client at its request.
NI WAP-3701/3711 User’s Manual Web Console Configuration To assign a static IP address to a specific DHCP client: 1. 2. Specify the MAC address of the DHCP client and the IP address to be assigned to it. Then, give a description for this mapping. Select the corresponding Enabled check box. Configuring IEEE 802.11g-related Settings Communication Basic Basic IEEE 802.
NI WAP-3701/3711 User’s Manual Web Console Configuration Association Control If the number of currently associated wireless clients exceeds the value specified in the Max number of clients setting, no more wireless clients can associate with the NI WAP-3701/3711. If the traffic load of the NI WAP-3701/3711 exceeds the load specified in the Block clients if traffic load exceeds setting, no more wireless clients can associate with the NI WAP-3701/3711.
NI WAP-3701/3711 User’s Manual Web Console Configuration By WDS, two or more LAN segments can be connected wirelessly. As illustrated in the above figure, a pair of wireless LAN-to-LAN bridges is used to connect two LAN segments. Since the AP is WDS-enabled, it can be used as a wireless bridge. NOTE The NI WAP-3701/3711 can have up to 6 WDS links to other APs or wireless bridges. To enable a WDS link: 1. 2. Specify the MAC address of the NI WAP-3701/3711 at the other end of the WDS link.
NI WAP-3701/3711 User’s Manual Web Console Configuration WARNING Be sure to eliminate loops from networks that consist of wireless bridges, Ethernet switches, Ethernet links, and WDS links. If any loops exist, packets will circle around the loops and network performance will be seriously degraded. Network topology containing a loop Security IEEE 802.11g security settings include SSID broadcasts, Wireless client isolation, Security mode, IEEE 802.
NI WAP-3701/3711 User’s Manual STA 1 Web Console Configuration STA 3 STA 2 AP 1 AP 2 WCI: This AP Only WCI: This AP Only Switch Wireless Link Ethernet Link Behavior of the “This AP Only” wireless client isolation option STA 1 STA 3 STA 2 AP 1 AP 2 WCI: All APs in This Subnet WCI: All APs in This Subnet Switch Wireless Link Ethernet Link Behavior of the “All APs on This Subnet” wireless client isolation option When AP 1 and AP 2 are using the “This AP Only” option, wireless traffic between
NI WAP-3701/3711 User’s Manual Web Console Configuration A total of 7 security modes are available with the different NI WAP-3701/3711 models: y Open System. No authentication, no data encryption. y Static WEP. WEP (Wired Equivalent Privacy) keys must be configured manually. y Static TKIP (WPA-PSK). Only TKIP (Temporal Key Integrity Protocol) mechanism of WPA (Wi-Fi Protected Access) is enabled.
NI WAP-3701/3711 User’s Manual Web Console Configuration MAC-Address-Based Access Control With MAC-Address-Based Access Control, you can specify the wireless client computers that are permitted or not permitted to associate with the NI WAP-3701/3711. When the table type is set to inclusive, entries in the table are permitted to associate with the NI WAP-3701/3711. When the table type is set to exclusive, entries in the table are not permitted to associate with the NI WAP-3701/3711.
NI WAP-3701/3711 User’s Manual Web Console Configuration Sample MAC ACL file To download a MAC ACL file from a TFTP server: 1. 2. 3. Specify the IP address of the TFTP server in the TFTP server IP address text box. Specify the name of the MAC ACL file on the TFTP server in the MAC ACL file name text box. Click Download. IEEE 802.1X/RADIUS (AP mode only) IEEE 802.1X Port-Based Network Access Control is a new standard for solving some security issues associated with IEEE 802.
NI WAP-3701/3711 User’s Manual Web Console Configuration IEEE 802.1X-Compliant Wireless Client Wireless AP user authentication Internet Wireless AP user authentication RADIUS Server User Database IEEE 802.1X and RADIUS An access point supporting IEEE 802.1X can be configured to communicate with two RADIUS servers. When the primary RADIUS server fails to respond, the wireless access point will try to communicate with the secondary RADIUS server.
NI WAP-3701/3711 User’s Manual Web Console Configuration Configuring Advanced Settings Packet Filters The NI WAP-3701/3711 provides layer 2 (Ethernet Type Filters), layer 3 (IP Protocol Filters), and layer 4 (TCP/UDP Port Filters) filtering capabilities. The configuration processes for the filters are similar. y Functionality: whether this filtering capability is enabled or disabled. y Policy for matched packets: how a matched packet is processed—discard or pass.
NI WAP-3701/3711 User’s Manual Web Console Configuration TCP/UDP Port Filters The destination port field of the TCP or UDP header of a packet incoming from the WLAN or Ethernet interface is inspected for filtering. As a rule, specify the decimal Destination Port, Protocol type (TCP/UDP), and the name of the higher-level protocol (Application Name). Management UPnP UPnP (Universal Plug and Play) enables a Windows XP user to discover peripheral devices automatically by HTTP.
NI WAP-3701/3711 User’s Manual NOTE Web Console Configuration The SNMP Authentication Failure trap is issued when using an incorrect community string to manage the AP via SNMP and the SNMP MIB II OID, snmpEnableAuthenTraps, is enabled (disabled by default). SNMP The SNMP (Simple Network Management Protocol) functionality can be disabled, and you can specify the name (used as a password) of the read-only and read-write community. In addition, up to 5 SNMP trap targets can be set in the SNMP Trap Table.
A Appendix A TIP Default Settings Press the Reset (SF-Reset, or Soft-Reset) switch on the housing of a powered-on AP to reset the configuration settings to factory-default values. Setting Name Global User Name Password IEEE 802.11g Regulatory Domain Channel Number SSID SSID Broadcasts Transmission Rate Transmit Power MAC Address Default Value admin root FCC (U.S.
NI WAP-3701/3711 User’s Manual Default Settings LAN Interface Method of obtaining an IP Address IP Address Subnet Mask Default Gateway DHCP Server Management UPnP System Log SNMP SNMP read community SNMP write community TELNET A-2 Set manually 192.168.127.253 255.255.255.0 0.0.0.
B Appendix B Troubleshooting Check the following first: y Make sure that the power is on and the Ethernet cables are connected firmly to the RJ45 jacks of the NI WAP-3701/3711. y Make sure the LED WLAN of the AP is blinking to indicate that the RF is working. y Make sure you are using the correct types of Ethernet cables. Keep in mind that there are two kind of Ethernet cable—normal and crossover. Wireless Settings Problems The wireless client computer cannot associate with an NI WAP-3701/3711.
NI WAP-3701/3711 User’s Manual Troubleshooting TCP/IP Settings Problems Correspondent Host IEEE 802.11g Internet Ethernet LAN Stage A Client Computer State B AP Stage D Default Gateway of Client Computer DNS Server of Client Computer Communication stages for a client to reach its correspondent host For a wireless client computer to communicate with a host on the Internet by the host’s domain name (e.g., http://www.wi-fi.com), it first sends a DNS request to a DNS server on the Internet.
NI WAP-3701/3711 User’s Manual Troubleshooting ¾ Make sure the wireless settings of the wireless client computer and of the AP match. y Are the IP address of the client computer and the IP address of the AP on the same IP subnet? ¾ Use WinIPCfg.exe or IPConfig.exe to see the current IP address of the client computer. Make sure the IP address of the client computer and the IP address of the AP are on the same IP subnet.
NI WAP-3701/3711 User’s Manual Troubleshooting The NI WAP-3701/3711 stops working and does not respond to Web management requests. y The firmware of the AP may be stuck in an incorrect state. ¾ Unplug the power connector from the power jack, and then re-plug the connector to restart the AP. ¾ Report this problem to our technical support staff. y If the AP still does not work after being restarted, some hardware components of the AP may have failed. ¾ Contact our technical support staff.
C Appendix C Regulatory Statement Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
NI WAP-3701/3711 User’s Manual Regulatory Statement Safety This equipment is designed with the utmost care for the safety of those who install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment. All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment.
D Appendix D Technical Support and Professional Services Visit the following sections of the National Instruments Web site at ni.com for technical support and professional services: y Support— Online technical support resources at ni.
NI AirWorks NI-WAP-3701/3711 User’s Manual Service Information Worldwide Technical Support and Product Information ni.