ORiNOCO AP-4000 Series Access Points User Guide
AP-4000 Series User Guide Copyright © 2005 Proxim Corporation. All rights reserved. Covered by one or more of the following U.S. patents: 5,231,634; 5,875,179; 6,006,090; 5,809,060; 6,075,812; 5,077,753. This user’s guide and the software described in it are copyrighted with all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form by any means without the written permission of Proxim Corporation.
AP-4000 Series User Guide Contents 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Products Covered in this User Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents AP-4000 Series User Guide 3 System Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 4 Advanced Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Dynamic DNS Support . . . . .
Contents AP-4000 Series User Guide Configuring Radius Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 MAC Access Control Via RADIUS Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 802.1x Authentication using RADIUS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents AP-4000 Series User Guide Connectivity Issues. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148 Basic Software Setup and Configuration Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149 Client Connection Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents AP-4000 Series User Guide Bridge Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206 RADIUS Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208 Security Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
AP-4000 Series User Guide Ask a Question or Open an Issue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 Other Adapter Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 F Regulatory Compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
AP-4000 Series User Guide 1 Introduction This chapter contains information on the following: • Products Covered in this User Guide • Document Conventions • Introduction to Wireless Networking • Mesh Networking (AP-4000M/4900M Only) • Guidelines for Roaming • IEEE 802.
Introduction Introduction to Wireless Networking AP-4000 Series User Guide Introduction to Wireless Networking An Access Point extends the capability of an existing Ethernet network to devices on a wireless network. Wireless devices can connect to a single Access Point, or they can move between multiple Access Points located within the same vicinity. As wireless clients move from one coverage cell to another, they maintain network connectivity.
Introduction Mesh Networking (AP-4000M/4900M Only) AP-4000 Series User Guide Mesh Networking (AP-4000M/4900M Only) Using the ORiNOCO Mesh Creation Protocol (OMCP), The AP-4000M and AP-4900M support structured Mesh networking. For information on converting an AP-4000 into an AP-4000M to enable Mesh functionality, see Mesh Software Kit. In a mesh network, access points use their wireless interface as a backhaul to the rest of the network.
Introduction Mesh Networking (AP-4000M/4900M Only) AP-4000 Series User Guide are discovered, MAP2 through MAP8 will build a neighbor table from the beacons and probe responses they receive. The neighbor table contains three kinds of links: • Active: Link with a mesh neighbor that has gone through association and authentication, and the port is open. • Connected: Link with a mesh neighbor that has gone through association and authentication, but the port is closed.
Introduction Mesh Networking (AP-4000M/4900M Only) AP-4000 Series User Guide from MAP4 to MP1 fails, MAP4 can still reach the backbone via MAP3 and MAP2. The same goes for other MAPs that discover each other. After a short while, the network in this example will look like Figure 1-4, where solid lines indicate active Mesh links and dotted lines indicate established but inactive Mesh links.
Introduction Guidelines for Roaming AP-4000 Series User Guide – 18 Mbps throughput is available at the portal (max is 25 Mbps, but APs will back off as distance between them increases). – 20 wireless clients are supported per AP. – Average utilization (time that a client is actually transferring data) is 10%. If the conditions on your network are different than the assumptions above, then the maximum number of APs should be adjusted accordingly.
Introduction IEEE 802.11 Specifications AP-4000 Series User Guide • In countries that require passive scanning for Mesh, the roam time may be higher. • When an AP-4000M/4900M is mounted in a vehicle and is being used in a Mesh network, there will be limited connectivity when the vehicle is moving. IEEE 802.11 Specifications In 1997, the Institute of Electrical and Electronics Engineers (IEEE) adopted the 802.11 standard for wireless devices operating in the 2.4 GHz frequency band.
Introduction Management and Monitoring Capabilities AP-4000 Series User Guide Users enter Command Statements, composed of CLI Commands and their associated parameters. Statements may be issued from the keyboard for real time control, or from scripts that automate configuration. For example, when downloading a file, administrators enter the download CLI Command along with IP Address, file name, and file type parameters. You access the CLI over a HyperTerminal serial connection or via Telnet.
Introduction Management and Monitoring Capabilities • Privacy (a.k.a Encryption): Protects against disclosure of message payload. • Access Control: Controls and authorizes access to managed objects. AP-4000 Series User Guide The default SNMPv3 username is administrator, with SHA authentication, and DES privacy protocol. SSH (Secure Shell) Management You may securely also manage the AP using SSH (Secure Shell). The AP supports SSH version 2, for secure remote CLI (Telnet) sessions.
AP-4000 Series User Guide Installation and Initialization 2 This chapter contains information on the following: • • AP-4000 Series Hardware Description – Overview – Antennas – Active Ethernet – LED Indicators Prerequisites – General Prerequisites – Mesh Prerequisites • Product Package • System Requirements • Hardware Installation • Initialization • – Using ScanTool – Logging In – Using the Setup Wizard – Installing the Software Related Topics AP-4000 Series Hardware Descri
Installation and Initialization AP-4000 Series Hardware Description AP-4000 Series User Guide The AP-4000/4000M/4900M includes a a power jack, a 10/100 base-T Ethernet port, and an RS-232 serial data communication port. The AP includes an optional security cover that can be installed to protect against access to the power and LAN cables and to the reset and reload buttons. See Figure 2-1.
Installation and Initialization AP-4000 Series Hardware Description AP-4000 Series User Guide Figure 2-2 AP-4000/4000M/4900M Antenna Connectors Connectors 1 and 2 are for the 802.11b/g radio; connectors 3 and 4 are for the 802.11a radio.
Installation and Initialization AP-4000 Series Hardware Description AP-4000 Series User Guide • The Active Ethernet (AE) integrated module receives ~48 VDC over a standard Category 5 Ethernet cable. • To use Active Ethernet, you must have an AE hub (also known as a power injector) connected to the network. • The cable length between the AE hub and the Access Point should not exceed 100 meters (approximately 325 feet). The AE hub is not a repeater and does not amplify the Ethernet data signal.
Installation and Initialization Prerequisites AP-4000 Series User Guide Prerequisites General Prerequisites Before installing an AP-4000/4000M/4900M, you need to gather certain network information. The following table identifies the information you need. Network Name (SSID of the wireless cards) You must assign the Access Point a Network Name before wireless users can communicate with it. The clients also need the same Network Name.
Installation and Initialization Prerequisites AP-4000 Series User Guide Mesh Prerequisites Before setting up a Mesh network, gather the following information: Mesh Mode The mode in which the AP will be used. If the AP will be connected directly to the wired backbone, it should be configured for Mesh Portal mode; if it will connect to the Portal and backbone wirelessly, it should be configured for Mesh AP mode. If the AP will not be used in a Mesh network, Mesh Mode can be disabled.
Installation and Initialization Product Package AP-4000 Series User Guide Product Package Each AP-4000/4000M/4900M comes with the following: • AP-4000/4000M/4900M unit (with integrated 802.11a radio and 802.
Installation and Initialization Hardware Installation AP-4000 Series User Guide Hardware Installation NOTE: Before installing and using this product, see the Regulatory Compliance section. NOTE: Avant l’installation et l’utilisation de ce produit, veuillez vous référer à la partie « Regulatory Compliance » (conformité aux réglementations). NOTA: Prima di installare ed utilizzare questo prodotto, fare riferimento alla sezione relativa alla “Regulatory Compliance” (conformità alle norme).
Installation and Initialization Hardware Installation AP-4000 Series User Guide 2. Attach one end of an Ethernet cable to the AP's LAN port (the center port, labeled “LAN”) and the other end to a network hub or switch. 3. Optionally, connect an RS-232 cable to the RS-232 console port (the right port, labeled “RS-232”). NOTE: You cannot install the security cover to the AP-4000/4000M/4900M if an RS-232 cable is connected. Figure 2-4 Cabling the AP-4000/4000M/4900M 4. Verify LED Status 5.
Installation and Initialization Hardware Installation AP-4000 Series User Guide Once you have chosen a final location for your unit, mount the AP-4000/4000M/4900M to a wall, to a T-bar ceiling, or in a vehicle as described below. Mounting the AP-4000/4000M/4900M to a Ceiling 1. Attach the mounting plate to the bottom of the AP-4000/4000M/4900M by lining up the keyholes and attaching it with two screws. 2. Snap the tabs onto the ceiling T-bar. Rotate the AP-4000/4000M/4900M until it snaps on to the T-bar.
Installation and Initialization Hardware Installation AP-4000 Series User Guide Installing External Antennas You can optionally install external antennas on the AP-4000/4000M/4900M. For information on the AP’s antenna functionality, see Antennas. Follow the mounting instructions included with your external antenna, and then connect the antenna cable to the AP, as follows: 1. Press down near the center of the compartment covering and slide open the external antenna access compartments.
Installation and Initialization Hardware Installation AP-4000 Series User Guide Figure 2-7 AP-4000/4000M/4900M Antenna Connectors 3. If installing a second external antenna on a radio, connect the antenna cable to connector 2 (802.11b/g radio) or connector 3 (802.11a radio). 4. Close the external antenna access compartments. 5. If desired, manually select which antenna(s) to use through the Command Line Interface. See Configure Antenna Diversity. Attaching Antenna(s) to the AP-4900M for 4.
Installation and Initialization Hardware Installation AP-4000 Series User Guide cables must comply with certain safety requirements, such as Underwriter Labs (UL) Standard 2043: “Standard for Fire Test for Heat and Visible Smoke Release for Discrete Products and Their Accessories Installed in Air-Handling Spaces”. The AP-4000/4000M/4900M has been certified under UL Standard 2043 and can be installed in the plenum. When installed in a plenum, the AP must use Active Ethernet.
Installation and Initialization Initialization AP-4000 Series User Guide Initialization The following sections detail how to initialize the AP using ScanTool, log in to the HTTP interface, perform an initial configuration of the AP using the Setup Wizard, and download the required AP software. • Using ScanTool • Logging In • Using the Setup Wizard • Installing the Software Using ScanTool ScanTool is a software utility that is included on the installation CD-ROM.
Installation and Initialization Initialization AP-4000 Series User Guide NOTE: If your computer has more than one network adapter installed, you will be prompted to select the adapter that you want ScanTool to use before the Scan List appears. If prompted, select an adapter and click OK. You can change your adapter setting at any time by clicking the Select Adapter button on the Scan List screen.
Installation and Initialization Initialization AP-4000 Series User Guide Figure 2-10 Scan Tool Change Screen c. Set IP Address Type to Static. d. Enter a static IP Address for the AP in the field provided. You must assign the unit a unique address that is valid on your IP subnet. Contact your network administrator if you need assistance selecting an IP address for the unit. e. Enter your network’s Subnet Mask in the field provided. f. Enter your network’s Gateway IP Address in the field provided. g.
Installation and Initialization Initialization – AP-4000 Series User Guide Click OK twice to save your changes and return to Internet Explorer. 3. Enter the Access Point’s IP address in the browser’s Address field and press Enter or Go. This is either the dynamic IP address assigned by a network DHCP server or the static IP address you manually configured. See Using ScanTool for information on how to determine the unit’s IP address and manually configure a new IP address, if necessary.
Installation and Initialization Initialization AP-4000 Series User Guide Figure 2-12 System Status Screen The buttons on the left of the screen provide access to the monitoring and configuration options for the AP. See Advanced Configuration to begin configuring the AP without using the Setup Wizard. The Command Line Interface (CLI) also provides a method for monitoring and configuring the AP using Telnet or a serial connection.
Installation and Initialization Initialization AP-4000 Series User Guide Setup Wizard Instructions 1. Click Setup Wizard to begin. The Setup Wizard supports the following navigation options: • Save & Next Button: Each Setup Wizard screen has a Save & Next button. Click this button to submit any changes you made to the unit’s parameters and continue to the next page. The instructions below describe how to navigate the Setup Wizard using the Save & Next buttons.
Installation and Initialization Initialization AP-4000 Series User Guide — Auto Channel Select: By default, the AP scans the area for other Access Points and selects the best available communication channel, either a free channel (if available) or the channel with the least amount of interference. Remove the check mark to disable this option. See Dynamic Frequency Selection/Radar Detection (DFS/RD) for information and Available Channels for a list of available channels.
Installation and Initialization Initialization AP-4000 Series User Guide 2. If prompted, create an account to gain access. NOTE: The Knowledgebase is available to all website visitors. First-time users will be asked to create an account to gain access. 3. Click Search Knowledgebase. 4. In the Search Knowledgebase field, enter 1250. 5. From the Search By drop-down menu, select Answer ID. 6. Click Search. 7. Click on the appropriate link to download the software. 8.
Installation and Initialization Initialization AP-4000 Series User Guide 5. Click OK to continue with the operation or Cancel to abort the operation. 6. If the operation is unsuccessful, you will receive an error message. If this occurs, see the Troubleshooting chapter or attempt installing the software with a TFTP server, as described in the next section. 7. If the operation is successful, you will receive a confirmation message.
Installation and Initialization Related Topics AP-4000 Series User Guide Install Updates from your TFTP Server using the CLI 1. Download the latest software to http://support.proxim.com (Knowledgebase Answer ID 1250). See Download the Software for instructions). 1. Copy the latest software updates to your TFTP server. 2. Open the CLI interface via Telnet or a serial connection. 3. Enter the CLI password when prompted. 4.
AP-4000 Series User Guide System Status 3 The first screen displayed after Logging In is the System Status screen. You can always return to this screen by clicking the Status button. Figure 3-1 System Status Screen The System Status screen provides the following information: • System Status: This area provides system-level information, including the unit’s IP address and contact information. See System for information on these settings. • System Alarms: System traps (if any) appear in this area.
AP-4000 Series User Guide Advanced Configuration 4 This chapter contains information on configuring settings in the following categories: • System: Configure specific system information such as system name and contact information. • Network: Configure IP, DNS client, DHCP server, DHCP Relay Agent, DHCP Relay Servers, Link Integrity, and SNTP settings. • Interfaces: Configure the Access Point’s interfaces: Wireless A, Wireless B, Ethernet, and Mesh settings.
Advanced Configuration AP-4000 Series User Guide Figure 4-1 Configure Main Screen 2. Click the tab that corresponds to the parameter you want to configure. For example, click Network to configure the Access Point’s TCP/IP settings. Each Configure tab is described in the remainder of this chapter.
Advanced Configuration System AP-4000 Series User Guide System You can configure and view the following parameters within the System Configuration screen: • Name: The name assigned to the AP. See the Dynamic DNS Support and Access Point System Naming Convention sections for rules on naming the AP. • Location: The location where the AP is installed. • Contact Name: The name of the person responsible for the AP. • Contact Email: The email address of the person responsible for the AP.
Advanced Configuration System AP-4000 Series User Guide Access Point System Naming Convention The Access Point's system name is used as its host name. In order to prevent Access Points with default configurations from registering similar host names in DNS, the default system name of the Access Point is uniquely generated. Access Points generate unique system names by appending the last 3 bytes of the Access Point's MAC address to the default system name.
Advanced Configuration Network AP-4000 Series User Guide Network The Network tab contains the following sub-tabs: • IP Configuration • DHCP Server • DHCP Relay Agent • Link Integrity • SNTP (Simple Network Time Protocol) IP Configuration This tab is used to configure the internet (TCP/IP) settings for the access point. These settings can be either entered manually (static IP address, subnet mask, and gateway IP address) or obtained automatically (dynamic).
Advanced Configuration Network AP-4000 Series User Guide Basic IP Parameters • IP Address Assignment Type: Set this parameter to Dynamic to configure the Access Point as a Dynamic Host Configuration Protocol (DHCP) client; the Access Point will obtain IP settings from a network DHCP server automatically during boot-up. If you do not have a DHCP server or if you want to manually configure the Access Point’s IP settings, set this parameter to Static.
Advanced Configuration Network AP-4000 Series User Guide Figure 4-4 DHCP Server Configuration Screen You can configure and view the following parameters within the DHCP Server Configuration screen: NOTE: You must reboot the Access Point before changes to any of these DHCP server parameters take effect. • Enable DHCP Server: Place a check mark in the box provided to enable DHCP Server functionality.
Advanced Configuration Network – AP-4000 Series User Guide Status: IP Pools are enabled upon entry in the table. You can also disable or delete entries by changing this field’s value. NOTE: You must reboot the Access Point before changes to any of these DHCP server parameters take effect. DHCP Relay Agent When enabled, the DHCP relay agent forwards DHCP requests to the set DHCP server. Click the Configure > Network > DHCP R A to configure DHCP relay agent servers and enable the DHCP relay agent.
Advanced Configuration Network AP-4000 Series User Guide Figure 4-6 DHCP Server IP Address Table - Edit Entries To add an entry, enter the IP Address of the DHCP Server and a comment (optional), and click OK. To edit an entry, make changes to the appropriate entry. Enable or disable the entry by choosing Enable or Disable from the Status drop-down menu, and click OK. Link Integrity The Link Integrity feature checks the link between the AP and the nodes on the Ethernet backbone.
Advanced Configuration Network AP-4000 Series User Guide Figure 4-7 Link Integrity Configuration Screen SNTP (Simple Network Time Protocol) SNTP allows a network entity to communicate with time servers in the network/internet to retrieve and synchronize time of day information. When this feature is enabled, the AP will attempt to retrieve the time of day information from the configured time servers (primary or secondary), and, if successful, will update the relevant time objects in the AP.
Advanced Configuration Network AP-4000 Series User Guide Figure 4-8 SNTP Configuration Screen You can configure and view the following parameters within the SNTP screen: • SNTP Status: Select Enable or Disable from the drop-down menu. The selected status will determine which of the parameters on the SNTP screen are configurable. NOTE: When SNTP is enabled, it will take some time for the AP to retrieve the time of day from the configured time servers and update the relevant date and time parameters.
Advanced Configuration Network – Year: Enter the current year. – Month: Enter the month in digits (1-12). – Day: Enter the day in digits (1-31). – Hour: Enter the hour in digits (0-23). – Minutes: Enter the minutes in digits (0-59). – Seconds: Enter the seconds in digits (0-59).
Advanced Configuration Interfaces AP-4000 Series User Guide Interfaces From the Interfaces tab, you configure the Access Point’s operational mode settings, power control settings, wireless interface settings and Ethernet settings. You may also configure a Wireless Distribution System for AP-to-AP communications. The Interfaces tab contains the following sub-tabs: • Operational Mode • Wireless-A (802.11a Radio) and Wireless-B (802.
Advanced Configuration Interfaces AP-4000 Series User Guide • 802.11g only mode: The radio is optimized to communicate with 802.11g devices. This setting will provide the best results if this radio interface will only communicate with 802.11g devices. • 802.11b/g mode: This is the default mode. Use this mode if you want to support a mix of 802.11b and 802.11g devices. • 802.11g-wifi mode: The 802.11g-wifi mode has been defined for Wi-Fi testing purposes.
Advanced Configuration Interfaces AP-4000 Series User Guide The Wireless NIC determines the regulatory domain the AP is operating in. If the AP has dual Wireless NICs, the NIC in Slot A determines the regulatory domain. Depending on the regulatory domain, a default country code is chosen that is transmitted in the beacon and probe response frames. Configuring 802.11d Support Perform the following procedure to enable 802.11d support and select the country code: 1.
Advanced Configuration Interfaces AP-4000 Series User Guide Wireless-A (802.11a Radio) and Wireless-B (802.
Advanced Configuration Interfaces AP-4000 Series User Guide You can view and configure the following parameters for the Wireless-A and Wireless-B interfaces: NOTE: You must reboot the Access Point before any changes to these parameters take effect. • Physical Interface Type: For Wireless Interface A on the AP-4000/4000M, this field reports “802.11a (OFDM 5 GHz)”. On the AP-4900M, this field reports “802.11a (OFDM 5 GHz)” when operating in 802.11a only mode or “Public Safety (OFDM 4.
Advanced Configuration Interfaces AP-4000 Series User Guide – For 802.11b/g -- Auto Fallback, 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbits/sec – For 802.11g-wifi -- Auto Fallback, 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbits/sec NOTE: 802.11g-wifi has been defined for Wi-Fi testing purposes. It is not recommended for use in your wireless network environment. NOTE: Turbo mode is supported in 802.11a and 802.11g mode.
Advanced Configuration Interfaces AP-4000 Series User Guide Affected Countries Japan is certified in the TELEC regulatory domain for operation in the 5 GHz band.
Advanced Configuration Interfaces AP-4000 Series User Guide • Enable the transmission and reception of frames on that wireless interface • Enable the associated BSS port on that interface • Start the AP services to wireless clients • Indicate the wireless service resume status of the wireless interface through LED and traps After wireless service resumes, the AP resumes beaconing, transmitting and receiving frames to/from the wireless interface and bridging the frames between the Ethernet and the
Advanced Configuration Interfaces AP-4000 Series User Guide 4. Set Blacklist Status to Enable. Figure 4-12 Channel Blacklist Table - Edit Screen NOTE: In the AP-4000/4000M/4900M, wireless service can be shut down/resumed on each wireless interface individually. Wireless Distribution System (WDS) A Wireless Distribution System (WDS) creates a link between two 802.11a, 802.11b, or 802.11b/g APs over their radio interfaces.
Advanced Configuration Interfaces AP-4000 Series User Guide Bridging WDS Each WDS link is mapped to a logical WDS port on the AP. WDS ports behave like Ethernet ports rather than like standard wireless interfaces: on a BSS port, an Access Point learns by association and from frames; on a WDS or Ethernet port, an Access Point learns from frames only.
Advanced Configuration Interfaces AP-4000 Series User Guide 5. Click the Edit button to update the Wireless Distribution System (WDS) Table. Figure 4-15 Adding WDS Links 6. Select whether to use encryption in the WDS by checking the Enable WDS Security Mode checkbox. 7. If you enabled WDS Security Mode, enter the Encryption Key 0 used for encryption between the WDS links. 8.
Advanced Configuration Interfaces AP-4000 Series User Guide Figure 4-16 Ethernet Sub-tab For best results, Proxim recommends that you configure the Ethernet setting to match the speed and transmission mode of the device the Access Point is connected to (such as a hub or switch). If in doubt, leave this setting at its default, auto-speed-auto-duplex.
Advanced Configuration Interfaces AP-4000 Series User Guide Mesh (AP-4000M/AP-4900M Only) Mesh functionality can be enabled on only one of the AP’s wireless interfaces. When configured for Mesh, the AP’s wireless interface simultaneously functions as a mesh link and as a radio to service clients. Mesh is available only the AP-4000M and AP-4900M models. To convert an AP-4000 to an AP-4000M and enable Mesh capabilities, see Mesh Software Kit.
Advanced Configuration Interfaces – AP-4000 Series User Guide For a Mesh AP, one uplink and up to 5 downlink connections are supported. For more information on Mesh, see Mesh Networking (AP-4000M/4900M Only). Mesh Software Kit The Mesh Software Kit (purchased seperately) converts an AP-4000 unit into an AP-4000M unit that supports Mesh capabilities. To covert your AP using the Mesh Software Kit, follow the steps below: 1.
Advanced Configuration Management AP-4000 Series User Guide Management The Management tab contains the following sub-tabs: • Passwords • IP Access Table • Services • Automatic Configuration (AutoConfig) • Hardware Configuration Reset (CHRD) Passwords You can configure the following passwords: • SNMP Read Community Password: The password for read access to the AP using SNMP. Enter a password in both the Password field and the Confirm field. This password must be between 6 and 32 characters.
Advanced Configuration Management AP-4000 Series User Guide IP Access Table The Management IP Access table limits in-band management access to the IP addresses or range of IP addresses specified in the table. This feature applies to all management services (SNMP, HTTP, and CLI) except for CLI management over the serial port. To configure this table, click Add and set the following parameters: • IP Address: Enter the IP Address for the management station.
Advanced Configuration Management • AP-4000 Series User Guide Secure Management Status: Enables the further configuration of HTTPS Access, SNMPv3, and Secure Shell (SSH). After enabling Secure Management, you can choose to configure HTTPS (SSL) and Secure Shell access on the Services tab, and to configure SNMPv3 passwords on the Passwords tab.
Advanced Configuration Management AP-4000 Series User Guide Figure 4-19 Management Services Configuration Screen 71
Advanced Configuration Management AP-4000 Series User Guide Telnet Configuration Settings • Telnet Interface Bitmask: Select the interface (Ethernet, Wireless-Slot A, Wireless-Slot B, All Interfaces) from which you can manage the AP via telnet. This parameter can also be used to Disable telnet management. • Telnet Port Number: The default port number for Telnet applications is 23.
Advanced Configuration Management AP-4000 Series User Guide NOTE: When Secure Management is enabled on the AP, SSH will be enabled by default and cannot be disabled. Host keys must either be generated externally and uploaded to the AP (see Uploading Externally Generated Host Keys), generated manually, or auto-generated at the time of SSH initialization if SSH is enabled and no host keys are present. There is no key present in an AP that is in a factory default state.
Advanced Configuration Management AP-4000 Series User Guide Serial Configuration Settings The serial port interface on the AP is enabled at all times. See Setting IP Address using Serial Port for information on how to access the CLI interface via the serial port. You can configure and view the following parameters: • Serial Baud Rate: Select the serial port speed (bits per second). Choose between 2400, 4800, 9600, 19200, 38400, or 57600; the default Baud Rate is 9600.
Advanced Configuration Management AP-4000 Series User Guide • RADIUS Profile for Management Access Control: Specifies the RADIUS Profile to be used for RADIUS Based Management Access. • Local User Status: Enables or disables the local user when RADIUS Based Management is enabled. The default local user ID is root. • Local User Password and Confirm Password: The default local user password is public.
Advanced Configuration Management AP-4000 Series User Guide Figure 4-21 Automatic Configuration Screen Set up Automatic Configuration for Dynamic IP Perform the following procedure to enable and set up Automatic Configuration when you have a dynamic IP address for the TFTP server via DHCP. The Configuration filename and the TFTP server IP address are contained in the DHCP response when the AP gets its IP address dynamically from the DHCP server.
Advanced Configuration Management AP-4000 Series User Guide Figure 4-22 DHCP Options: Setting the Boot Server Host Name 4. Add the Boot Server Hostname and Boot Filename parameters to the Active Options list. 5. Set the value of the Boot Server Hostname Parameter to the hostname or IP Address of the TFTP server. For example: 11.0.0.7. Figure 4-23 DHCP Options: Setting the Bootfile Name 6. Set the value of the Bootfile Name parameter to the Configuration filename. For example: AP-Config 7.
Advanced Configuration Management AP-4000 Series User Guide AP is not protected, an unauthorized person could reset the AP to factory defaults and thus gain control of the AP. The user can disable the hardware configuration reset functionality to prevent unauthorized access.
Advanced Configuration Management AP-4000 Series User Guide 2. Check (enable) or uncheck (disable) the Enable Hardware Configuration Reset checkbox. 3. Change the default Configuration Reset Password in the “Configuration Reset Password” and “Confirm” fields. 4. Click OK. 5. Reboot the AP. NOTE: It is important to safely store the configuration reset password.
Advanced Configuration Filtering AP-4000 Series User Guide Filtering The Access Point’s Packet Filtering features help control the amount of traffic exchanged between the wired and wireless networks. There are four sub-tabs under the Filtering heading: • Ethernet Protocol • Static MAC • Advanced • TCP/UDP Port Ethernet Protocol The Ethernet Protocol Filter blocks or forwards packets based on the Ethernet protocols they support. Follow these steps to configure the Ethernet Protocol Filter: 1.
Advanced Configuration Filtering AP-4000 Series User Guide Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier. (Each hexadecimal digit represents 4 bits (0 or 1).) Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP will look for when examining packets. The AP uses Boolean logic to perform an “AND” operation between the MAC Address and the Mask at the bit level.
Advanced Configuration Filtering • Wireless Client 2: 00:02:2D:51:32:12 • Wireless Client 3: 00:20:A6:12:4E:38 AP-4000 Series User Guide Prevent Two Specific Devices from Communicating Configure the following settings to prevent the Wired Server and Wireless Client 1 from communicating: • Wired MAC Address: 00:40:F4:1C:DB:6A • Wired Mask: FF:FF:FF:FF:FF:FF • Wireless MAC Address: 00:02:2D:51:94:E4 • Wireless Mask: FF:FF:FF:FF:FF:FF Result: Traffic between the Wired Server and Wireless Client 1
Advanced Configuration Filtering AP-4000 Series User Guide • Wired MAC Address: 01:00:5E:00:32:4B • Wired Mask: FF:FF:FF:FF:FF:FF • Wireless MAC Address: 00:00:00:00:00:00 • Wireless Mask: 00:00:00:00:00:00 Result: The Access Point does not forward any packets that have a destination address of 01:00:5E:00:32:4B to the wireless network.
Advanced Configuration Filtering AP-4000 Series User Guide 4. Set the destination Port Number (a value between 1 and 65535) to filter. See the IANA Web site at http://www.iana.org/assignments/port-numbers for a list of assigned port numbers and their descriptions. 5. Set the Port Type for the protocol: TCP, UDP, or both (TCP/UDP). 6.
Advanced Configuration Alarms AP-4000 Series User Guide Alarms The Alarms tab has the following sub-tabs: • Groups • Alarm Host Table • Syslog • Rogue Scan Groups Alarm groups can be enabled or disabled via the Web interface. Place a check mark in the box provided to enable a specific group. Remove the check mark from the box to disable the alarms. Alarm severity levels are as follows: • Critical alarms will often result in severe disruption in network activity or an automatic reboot of the AP.
Advanced Configuration Alarms AP-4000 Series User Guide Security Trap Group Trap Name Description Severity Level oriTrapInvalidEncryptionKey Invalid encryption key has been detected. Critical oriTrapAuthenticationFailure Client authentication failure has occurred. Authentication failures can range from: Major • MAC Access Control table • RADIUS MAC authentication • 802.
Advanced Configuration Alarms Trap Name AP-4000 Series User Guide Description Severity Level oriTrapDHCPFailed Response to the DHCP client request not received; device not dynamically assigned an IP address Major oriTrapDNSClientLookupFailure DNS client attempts to resolve a specified hostname (DNS lookup) and a failure occurs because either the DNS server is unreachable or there is an error for the hostname lookup. Trap specifies the hostname that was being resolved.
Advanced Configuration Alarms AP-4000 Series User Guide TFTP Trap Group Trap Name Description Severity Level oriTrapTFTPFailedOperation TFTP operation failed Major oriTrapTFTPOperationInitiated TFTP operation Initiated Informational oriTrapTFTPOperationCompleted TFTP operation completed Informational Image Trap Group Trap Name Description Severity Level oriTrapZeroSizeImage Zero size image loaded onto device Major oriTrapInvalidImage Invalid image loaded onto device Major oriTrapImage
Advanced Configuration Alarms AP-4000 Series User Guide RFC 1215-Trap Trap Name Description Severity Level coldStart AP is on or rebooted Informational linkUp AP's Ethernet interface link is up (working) Informational linkDown AP's Ethernet interface link is down (not working) Informational Bridge MIB (RFC 1493) Alarms Trap Name Description Severity Level New Root AP has become the new root in the Spanning Tree network Informational topologyChange Trap is not sent if a newRoot trap is se
Advanced Configuration Alarms AP-4000 Series User Guide Syslog The Syslog messaging system enables the AP to transmit event messages to a central server for monitoring and troubleshooting. The access point logs “Session Start (Log-in)” and “Session Stop (Log-out)” events for each wireless client as an alternative to RADIUS accounting. See RFC 3164 at http://www.rfc-editor.org for more information on the Syslog standard.
Advanced Configuration Alarms AP-4000 Series User Guide • Syslog Lowest Priority Logged: The AP will send event messages to the Syslog server that correspond to the selected priority number and any priority numbers below it. For example, if set to 6, the AP will transmit event messages labeled priority 0 to 6 to the Syslog server. This parameter supports a range between 0 and 7; 6 is the default.
Advanced Configuration Alarms AP-4000 Series User Guide Syslog Message Name Client Login Authentication Status Priority 6 Severity Informational Description Client logs in/authenticates. Message includes: • Client MAC Address • Authentication Type = None, ACL, RADIUS MAC, 802.
Advanced Configuration Alarms AP-4000 Series User Guide Syslog Message Name Priority Severity Description CLI Configuration File Execution Errors 4 Minor There is an error in execution of the CLI configuration file. The message specifies the filename, line number, and error reason.
Advanced Configuration Alarms AP-4000 Series User Guide Figure 4-27 Preventing Rogue AP Attacks The figure above shows Client 1 connected to a Trusted AP and Client 2 connected to a Rogue AP. The Trusted AP scans the networks, detects Client 2, and notifies the Network Manager. The Network Manager uses SNMP/CLI to query the wired switch to find the inbound switch port of Client 2’s packets.
Advanced Configuration Alarms AP-4000 Series User Guide throughput. The optimum value for this parameter during background scanning mode is 20ms.The channel scan time is calculated from the scan cycle time parameter and the number of channels in the scan channel list as follows: intra-channel scan time = (scan cycle time - (channel scan time * number of channels in the scan list))/number of channels in the scan list.
Advanced Configuration Alarms AP-4000 Series User Guide 7. Configure the Scan Results Trap Notification Mode to control the notification behavior when APs or stations are detected in a scan: • No Notification • Notify AP • Notify Client • Notify All (Notify both AP and Client detection) 8.
Advanced Configuration Bridge AP-4000 Series User Guide Bridge The AP is a bridge between your wired and wireless networking devices. As a bridge, the functions performed by the AP include: • MAC address learning • Forward and filtering decision making • Spanning Tree protocol used for loop avoidance Once the AP is connected to your network, it learns which devices are connected to it and records their MAC addresses in the Learn Table. The table can hold up to 10,000 entries.
Advanced Configuration Bridge AP-4000 Series User Guide Figure 4-29 Spanning Tree Sub-Tab Storm Threshold Storm Threshold is an advanced Bridge setup option that you can use to protect the network against data overload by: • Specifying a maximum number of frames per second as received from a single network device (identified by its MAC address). • Specifying an absolute maximum number of messages per interface.
Advanced Configuration Bridge • AP-4000 Series User Guide Wireless Threshold: Enter the maximum allowed number of packets per second. Intra BSS The wireless clients (or subscribers) that associate with a certain AP form the Basic Service Set (BSS) of a network infrastructure. By default, wireless subscribers in the same BSS can communicate with each other.
Advanced Configuration QoS AP-4000 Series User Guide QoS Wireless Multimedia Extensions (WME)/Quality of Service (QoS) The AP supports Wireless Multimedia Enhancements which defines an intermediate solution for QoS functionality until the IEEE 802.11e specification is formally approved. WME is based on a subset of the 802.11e standard, and defines enhancements to the MAC for wireless LAN applications with Quality of Service requirements, which include transport of voice traffic over IEEE 802.
Advanced Configuration QoS AP-4000 Series User Guide 2. To enable QoS, check the Enable Quality of Service checkbox. 3. Configure the QoS Maximum Medium Threshold for all Admission Controls. Admission will be granted if the new requested traffic stream and already admitted time is less than the medium maximum threshold. 4. To add a QoS Policy, click the Add button in the “QoS Policies Table” box. The Add Entries box appears. Figure 4-31 Add QoS Policy 5. Enter the Policy Name. 6.
Advanced Configuration QoS AP-4000 Series User Guide 8. Select whether to Enable QoS Marking. 9. Click OK. Priority Mapping Use this page to configure QoS 802.1p to 802.1d priority mappings (for layer 2 policies) and IP DSCP to 802.1d priority mappings (for layer 3 policies). The first entry in each table contains the recommended priority mappings. Custom entries can be added to each table with different priority mappings. 1. Click Configure > QoS > Priority Mapping. Figure 4-32 Priority Mapping 2.
Advanced Configuration QoS AP-4000 Series User Guide Figure 4-33 Add Priority Mapping Entry 3. Select the 802.1p Priority (from 0-7) for 802.1d Priorities 0-7. 4. Click OK. 5. Click Add in the IP Precedence/DSCP ranges and 802.1d Priority table. 6. Select the IP DSCP Range for each 802.1d Priority. 7. Click OK. NOTE: Changes to Priority Mapping require a reboot of the AP to take effect.
Advanced Configuration QoS AP-4000 Series User Guide Perform the following procedure to configure the Station and AP EDCA tables. 1. Click Configure > QoS > EDCA. Figure 4-34 EDCA Tables 2. Click Edit and configure the following parameters in each table: NOTE: Changes to EDCA parameters require a reboot of the AP to take effect. • Index: read-only. Indicates the index of the Access Category (1-4) being defined. • CWMin: minimum Contention Window. Configurable range is 0 to 255.
Advanced Configuration QoS AP-4000 Series User Guide • Tx OP Limit: The Transmission Opportunity Limit. The Tx OP is an interval of time during which a particular QoS enhanced client has the right to initiate a frame exchange sequence onto the wireless medium. The Tx OP Limit defines the upper limit placed on the value of Tx OP a wireless entity can obtain for a particular access category. Configurable range is 0 to 65535.
Advanced Configuration Radius Profiles AP-4000 Series User Guide Radius Profiles Configuring Radius Profiles on the AP allows the administrator to define a profile for RADIUS Servers used by the system or by a VLAN. The network administrator can define RADIUS Servers per Authentication Mode and per VLAN. The AP communicates with the RADIUS server defined in a profile to provide the following features: • MAC Access Control Via RADIUS Authentication • 802.
Advanced Configuration Radius Profiles AP-4000 Series User Guide Figure 4-35 RADIUS Servers per VLAN This figure shows a network with separate authentication servers for each authentication type and for each VLAN. The clients in VLAN 1 are authenticated using the authentication servers configured for VLAN 1. The type of authentication server used depends on whether the authentication is done for an 802.1x client or a non-802.1x client.
Advanced Configuration Radius Profiles AP-4000 Series User Guide Figure 4-36 RADIUS Server Profiles Adding or Modifying a RADIUS Server Profile Perform the following procedure to add a RADIUS server profile and to configure its parameters. 1. Click Add to create a new profile. To Modify an existing profile, select the profile and click Edit. To delete an existing profile, select the profile and click Delete. You cannot delete a RADIUS server profile if it is applied to an SSID. 2.
Advanced Configuration Radius Profiles AP-4000 Series User Guide Figure 4-37 Add RADIUS Server Profile • Server Profile Name: the profile name. This is the name used to associated a VLAN to the profile. See Configuring Security Profiles. The Server Profile Name is also used in the Configure > Management > Services page to specify the RADIUS profile to be used for RADIUS Based Management Access.
Advanced Configuration Radius Profiles AP-4000 Series User Guide • Destination Port: Enter the port number which the AP and the server will use to communicate. By default, RADIUS servers communicate on port 1812. • Server VLAN ID: Indicates the VLAN that uses this RADIUS server profile. If VLAN is disabled, this field will be grayed out. • Shared Secret and Confirm Shared Secret: Enter the password shared by the RADIUS server and the AP. The same password must also be configured on the RADIUS server.
Advanced Configuration Radius Profiles AP-4000 Series User Guide NOTE: This feature requires RADIUS authentication using MAC Access Control or 802.1x. Wireless clients configured in the Access Point’s static MAC Access Control list are not tracked. Authentication and Accounting Attributes Additionally, the AP supports a number of Authentication and Accounting Attributes defined in RFC2865, RFC2866, RFC2869, and RFC3580.
Advanced Configuration Radius Profiles – Number of octets (bytes) received by subscriber. • Acct-Output-Octets • Acct-Input-Packets – – Number of octets (bytes) sent by subscriber. Number of packets received by subscriber. • Acct-Output-Packets • Acct-Terminate Cause – – • AP-4000 Series User Guide Number of packets sent by subscriber. Indicates how the session was terminated.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide SSID/VLAN/Security The AP provides several security features to protect your network from unauthorized access.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide Figure 4-38 Components of a Typical VLAN VLAN Workgroups and Traffic Management Access Points that are not VLAN-capable typically transmit broadcast and multicast traffic to all wireless Network Interface Cards (NICs). This process wastes wireless bandwidth and degrades throughput performance. In comparison, a VLAN-capable AP is designed to efficiently manage delivery of broadcast, multicast, and unicast traffic to wireless clients.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide Typical User VLAN Configurations VLANs segment network traffic into workgroups, which enable you to limit broadcast and multicast traffic. Workgroups enable clients from different VLANs to access different resources using the same network infrastructure. Clients using the same physical network are limited to those resources available to their workgroup.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide 3. Place a check mark in the Enable VLAN Tagging box. Provide Access to a Wireless Host in the Same Workgroup The VLAN feature can allow wireless clients to manage the AP. If the VLAN Management ID matches a VLAN User ID, then those wireless clients who are members of that VLAN will have AP management access.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide • EAP-Tunneled Transport Layer Security (TTLS): Certificate-based authentication (a certificate is required on the server; a client’s username/password is tunneled to the server over a secure connection); supports automatic key distribution • PEAP - Protected EAP with MS-CHAP: Secure username/password-based authentication; supports automatic key distribution Different servers support different EAP types and each EAP type provides diff
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide WPA is a replacement for Wired Equivalent Privacy (WEP), the encryption technique specified by the original 802.11 standard. WEP has several vulnerabilities that have been widely publicized. WPA addresses these weaknesses and provides a stronger security system to protect wireless networks.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide VLANs and Security Profiles The AP-4000/4000M/4900M allows you to segment wireless networks into multiple sub-networks based on Network Name (SSID) and VLAN membership. A Network Name (SSID) identifies a wireless network. Clients associate with Access Points that share an SSID. During installation, the Setup Wizard prompts you to configure a Primary Network Name for each wireless interface.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide 2. Click Add in the Security Profile Table to create a new entry. To modify an existing profile, select the profile and click Edit. To delete an existing profile, select the profile and click Delete. You cannot delete a Security Profile used in an SSID. Also, the first Security Profile cannot be deleted. 3. Configure one or more types of wireless stations (security modes) that are allowed access to the AP under the security profile.
Advanced Configuration SSID/VLAN/Security • • AP-4000 Series User Guide Cipher: CCMP based on AES 802.11i-PSK Station: • Authentication Mode: PSK • Cipher: CCMP based on AES • PSK Passphrase: an 8-63 character user-defined phrase. It is recommended a passphrase of at least 13 characters, including both letters and numbers, and upper and lower case characters, to ensure that the generated key cannot be easily deciphered by network infiltrators. 5. When finished configuring all parameters, click OK.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide Figure 4-42 Security Profile Table - Add Entries 122
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide MAC Access The MAC Access sub-tab allows you to build a list of stations, identified by their MAC addresses, authorized to access the network through the AP. The list is stored inside each AP within your network. Note that you must reboot the AP for any changes to the MAC Access Control Table to take effect. Up to 1000 entries can be made in the table.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide the same system separated per VLAN. See the Security Profile section for more information. Each SSID can support a unique VLANs. In order for the AP to support multiple SSID/VLANs, VLAN Tagging must be enabled. These parameters are configurable on the Wireless-A and Wireless-B sub-tabs.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide 6. Enter the Security Profile used by the VLAN in the Security Profile field. See the Security Profile section for more information. 7. Define the RADIUS Server Profile Configuration for the VLAN/SSID: • RADIUS MAC Authentication Profile • RADIUS EAP Authentication Profile • RADIUS Accounting Profile If 802.1x, WPA, or 802.11i security mode is used, the RADIUS EAP Authentication Profile must have a value.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide 11. Specify a QoS profile. See the Enabling QoS and Adding QoS policies section for more information. 12.If editing an entry, enable or disable the parameters on this page by electing Enable or Disable from the Status drop-down menu. If adding a new entry, this drop-down menu will not appear. 13.Click OK to return to Wireless-A or Wireless-B Security Configuration Screen. 14.Reboot the AP.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide Figure 4-47 SSID/VLAN Edit Entries Screen (VLAN Tagging Enabled) 4. Enter a unique Network Name (SSID) between 1 and 32 characters. This parameter is mandatory. NOTE: Do not use quotation marks (single or double) in the Network Name; this will cause the AP to misinterpret the name. 5. Enter a unique VLAN ID. This parameter is mandatory. • A VLAN ID is a number from -1 to 4094. A value of -1 means that an entry is “untagged.
Advanced Configuration SSID/VLAN/Security AP-4000 Series User Guide 7. Enable or disable RADIUS accounting on the VLAN/SSID under the Accounting Status drop-down menu. 8. Enable or disable RADIUS MAC authentication status on the VLAN/SSID under the RADIUS Authentication Status drop-down menu. 9. Enable or disable MAC Access Control List status on the VLAN/SSID under the MAC ACL Status drop-down menu. 10.Enter the Rekeying Interval in seconds. The default interval is 900 seconds. 11.
AP-4000 Series User Guide 5 Monitoring This chapter discusses the following monitoring options: • Version: Provides version information for the Access Point’s system components. • ICMP: Displays statistics for Internet Control Message Protocol packets sent and received by the AP. • IP/ARP Table: Displays the AP’s IP Address Resolution table. • Learn Table: Displays the list of nodes that the AP has learned are on the network.
Monitoring Version AP-4000 Series User Guide Version From the HTTP interface, click the Monitor button and select the Version tab. The list displayed provides you with information that may be pertinent when calling Technical Support. With this information, your Technical Support representative can verify compatibility issues and make sure the latest software are loaded.
Monitoring ICMP AP-4000 Series User Guide ICMP This tab provides statistical information for both received and transmitted messages directed to the AP. Not all ICMP traffic on the network is counted in the ICMP (Internet Control Message Protocol) statistics. Figure 5-3 ICMP Monitoring Tab IP/ARP Table This tab provides information based on the Address Resolution Protocol (ARP), which relates MAC Address and IP Addresses.
Monitoring Learn Table AP-4000 Series User Guide Learn Table This tab displays information relating to network bridging. It reports the MAC address for each node that the device has learned is on the network and the interface on which the node was detected. There can be up 10,000 entries in the Learn Table. Figure 5-5 Learn Table Monitoring Tab IAPP This tab displays statistics relating to client handovers and communications between ORiNOCO Access Points.
Monitoring RADIUS AP-4000 Series User Guide RADIUS This tab provides RADIUS authentication, EAP/802.1x authentication, and accounting information for both the Primary and Backup RADIUS servers for each RADIUS Server Profile. NOTE: Separate RADIUS servers can be configured for each RADIUS Server Profile. Select the RADIUS Server Profile to view statistics on from the Select Server Profile drop-down menu.
Monitoring Interfaces AP-4000 Series User Guide Interfaces This tab displays statistics for the Ethernet and wireless interfaces.
Monitoring Interfaces AP-4000 Series User Guide • Ethernet Chipset (Ethernet): Identifies the chipset used to realize the interface. • Excessive Collisions (Ethernet): The number of frames for which transmission fails due to excessive collisions. • Failed ACK Count (Wireless-Slot A/B): The number of of times an acknowledgment (or ACK) is not received when expected. • Failed Count (Wireless-Slot A/B): The number of packets not transmitted successfully due to too many transmit attempts.
Monitoring Interfaces AP-4000 Series User Guide • Out Discards (Ethernet/Wireless-Slot A/B): The number of error-free outbound packets chosen to be discarded to prevent their being transmitted. One possible reason for discarding such a packet could be to free up buffer space. • Out Errors (Ethernet/Wireless-Slot A/B): The number of outbound packets that could not be transmitted because of errors.
Monitoring Station Statistics AP-4000 Series User Guide Station Statistics This tab displays information on wireless clients attached to the AP and on Wireless Distribution System links. Enable the Monitoring Station Statistics feature (Station Statistics are disabled by default) by checking Enable Monitoring Station Statistics and click OK. You do not need to reboot the AP for the changes to take effect.
Monitoring Station Statistics AP-4000 Series User Guide The following stations statistics are available through SNMP: • Octets Received: The number of octets received from the associated wireless station (or WDS link partner) by the AP. • Unicast Frames Received: The number of Unicast frames received from the associated wireless station (or WDS link partner) by the AP. • Non-Unicast Frames Received: The number of Non-Unicast frames received (i.e.
AP-4000 Series User Guide Commands 6 This chapter contains information on the following Command functions: • Introduction to File Transfer via TFTP or HTTP: Describes the available file transfer methods. • Update AP via TFTP: Download files from a TFTP server to the AP. • Update AP via HTTP: Download files to the AP from HTTP. • Retrieve File: Upload configuration files from the AP to a TFTP server. • Retrieve File via HTTP: Upload configuration files from the AP via HTTP.
Commands Introduction to File Transfer via TFTP or HTTP • AP-4000 Series User Guide Uploading files (Configuration, CLI Batch File) from the AP is called “Retrieving Files.” TFTP File Transfer Guidelines A TFTP server must be running and configured to point to the directory containing the file. If you do not have a TFTP server installed on your system, install the TFTP server from the ORiNOCO CD. HTTP File Transfer Guidelines HTTP file transfer can be performed either with or without SSL enabled.
Commands Update AP AP-4000 Series User Guide Update AP Update AP via TFTP Use the Update AP via TFTP tab to download Configuration, AP Image, License file, Bootloader files, Certificate and Private Key files, and CLI Batch File to the AP. A TFTP server must be running and configured to point to the directory containing the file. Figure 6-2 Update AP via TFTP Command Screen If you do not have a TFTP server installed on your system, install the TFTP server from the ORiNOCO CD.
Commands Update AP • AP-4000 Series User Guide – SSH Private Key: the private key in SSH communications. See Secure Shell (SSH) Settings for more information. – CLI Batch File: a CLI Batch file that contains CLI commands to configure the AP. This file will be executed by the AP immediately after being uploaded. See CLI Batch File for more information. File Operation: Select either Update AP or Update AP & Reboot. You should reboot the AP after downloading files.
Commands Retrieve File AP-4000 Series User Guide A warning message gets displayed that advises the user that a reboot of the device will be required for changes to take effect. Figure 6-4 Warning Message 4. Click OK to continue with the operation or Cancel to abort the operation. NOTE: An HTTP file transfer using SSL may take extra time. If the operation completes successfully the following screen appears.
Commands Retrieve File – AP-4000 Series User Guide Double-click the TFTP server icon on your desktop and locate the IP address assigned to the TFTP server. • File Name: Enter the name of the file to be uploaded. • File Type: Select the type of file to be uploaded: Config file, CLI Batch File, or CLI Batch (Error) Log. Use the following procedure to retrieve a file from an AP to a TFTP server: 1. If retrieving a Config file, configure all the required parameters in their respective tabs.
Commands Retrieve File AP-4000 Series User Guide Click on the Retrieve File button to initiate the operation. Figure 6-8 Retrieve File via HTTP Command Screen A confirmation message is displayed, asking if the user wants to proceed with retrieving the file. Figure 6-9 Retrieve File Confirmation Dialog Click OK to continue with the operation or Cancel to abort the operation. On clicking OK, the File Download window appears.
Commands Reboot AP-4000 Series User Guide On clicking the Save button the Save As window displays, where the user is prompted to choose the filename and location where the file is to be downloaded. Select an appropriate filename and location and click OK. Reboot Use the Reboot tab to save configuration changes (if any) and reset the AP. Enter a value between 0 and 65535 seconds; entering a value of 0 (zero) seconds causes an immediate reboot.
Commands Help Link AP-4000 Series User Guide Help Link Use the Help tab to configure the location of the AP Help files. During initialization, the AP on-line help files are downloaded to the default location: C:/Program Files/ORiNOCO/AP4xxxx/HTML/index.htm. To enable the Help button on each page of the Web interface to access the help files, however, copy the entire Help folder to a web server, then specify the new HTTP path in the Help Link box.
AP-4000 Series User Guide Troubleshooting 7 This chapter provides information on the following: • Troubleshooting Concepts • Symptoms and Solutions • Recovery Procedures • Related Applications NOTE: This section helps you locate problems related to the AP device setup. For details about RADIUS, TFTP, serial communication programs (such as HyperTerminal), Telnet applications, or web browsers, please see the documentation that came with the respective application for assistance.
Troubleshooting Symptoms and Solutions AP-4000 Series User Guide Serial Link Does Not Work 1. Make sure you are using a standard, straight-through, 9-pin serial cable. 2. Double-check the physical network connections. 3. Make sure your PC terminal program (such as HyperTerminal) is active and configured to the following values: – Com Port: (COM1, COM2, etc.
Troubleshooting Symptoms and Solutions AP-4000 Series User Guide 6. Perform the Reset to Factory Default Procedure in this guide. This will reset the unit to “DHCP” mode. If there is a DHCP Server on the network, the DHCP Server will assign an IP Address to the AP. HTTP Interface or Telnet Interface Does Not Work 1. Make sure you are using a compatible browser: – Microsoft Internet Explorer 6 with Service Pack 1 or later – Netscape 7.1 or later 2. Make sure you have the proper IP address.
Troubleshooting Symptoms and Solutions AP-4000 Series User Guide Client PC Card Does Not Work 1. Make sure you are using the latest PC Card driver software. 2. Download and install the latest ORiNOCO client software from http://support.proxim.com. Intermittent Loss of Connection 1. Make sure you are within range of an active AP. 2. You can check the signal strength using the signal strength gauge on your client software. Client Does Not Receive an IP Address - Cannot Connect to Internet 1.
Troubleshooting Recovery Procedures AP-4000 Series User Guide 3. If possible, try to connect the AP to a different AE hub. 4. Try using a different Ethernet cable – if it works, there is probably a faulty connection over the long cable, or a bad RJ-45 connection. 5. Check power plug and hub. 6. If the Ethernet link goes down, check the cable, cable type, switch, and hub. There Is No Data Link 1. Verify that the indicator for the port is “on.” 2.
Troubleshooting Recovery Procedures AP-4000 Series User Guide For this procedure, you will first erase the AP Image currently installed on the unit and then use either ScanTool or the Bootloader CLI (over the serial port) to set the IP address and download a new AP Image. Follow these steps: 1. While the unit is running, press the RESET button. NOTE: You need to use a pin or the end of a paperclip to press a button. The AP reboots and the indicators begin to flash.
Troubleshooting Recovery Procedures AP-4000 Series User Guide The Access Point will reboot and the download will begin automatically. You should see downloading activity begin after a few seconds within the TFTP server’s status screen. 11. Click OK when prompted that the device has been updated successfully to return to the Scan List screen. 12.Click Cancel to close the ScanTool. 13.
Troubleshooting Recovery Procedures AP-4000 Series User Guide [Device name]> reboot Example: [Device name]> show [Device name]> set ipaddrtype static [Device name]> set ipaddr 10.0.0.12 [Device name]> set ipsubmask 255.255.255.0 [Device name]> set tftpipaddr 10.0.0.20 [Device name]> set tftpfilename MyImage.bin [Device name]> set ipgw 10.0.0.30 [Device name]> show [Device name]> reboot The AP will reboot and then download the image file.
Troubleshooting Related Applications AP-4000 Series User Guide The terminal display shows Power On Self Tests (POST) activity, and then displays a CLI prompt, similar to the example below. This process may take up to 90 seconds. [Device name]> Please enter password: 4. Enter the CLI password (default is public). The terminal displays a welcome message and then the CLI Prompt: [Device name]> 5. Enter show ip. Network parameters appear: Figure 7-1 Result of “show ip” CLI Command 6.
Troubleshooting Related Applications AP-4000 Series User Guide TFTP Server The “Trivial File Transfer Protocol” (TFTP) server allows you to transfer files across a network. You can upload configuration files from the AP for backup or copying, and you can download configuration files or new software images. The TFTP software is located on the ORiNOCO AP Installation CD-ROM.
AP-4000 Series User Guide Command Line Interface (CLI) A This section discusses the following: • General Notes • Command Line Interface (CLI) Variations • CLI Command Types • Using Tables and Strings • Configuring the AP using CLI commands • Set Basic Configuration Parameters using CLI Commands • Other Network Settings • CLI Monitoring Parameters • Parameter Tables • CLI Batch File CLI commands can be used to initialize, configure, and manage the Access Point.
Command Line Interface (CLI) General Notes AP-4000 Series User Guide • Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer files from the Access Point. The TFTP server performs file transfers in both directions. • Group - A logical collection of network parameter information. For example, the System Group is composed of several related parameters. Groups can also contain Tables. All items for a given Group can be displayed with a show CLI Command.
Command Line Interface (CLI) Command Line Interface (CLI) Variations AP-4000 Series User Guide Command Line Interface (CLI) Variations Administrators use the CLI to control Access Point operation and monitor network statistics. The AP supports two types of CLI: the Bootloader CLI and the normal CLI. The Bootloader CLI provides a limited command set, and is used when the current AP Image is bad or missing. The Bootloader CLI allows you to assign an IP Address and download a new image.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide Figure A-2 Results of “show” bootloader CLI command CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Controls. Operational CLI Commands These commands affect Access Point behavior, such as downloading, rebooting, and so on. After entering commands (and parameters, if any) press the Enter key to execute the Command Line.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide [Device-Name]>? Figure A-3 Result of “?” CLI command Example 2. Display specific Commands To show all commands that start with specified letters, enter one or more letters, then ? with no space between letters and ?. [Device-Name]>s? Figure A-4 Result of “s?” CLI command Example 3. Display parameters for set and show Example 3a allows you to see every possible parameter for the set (or show) commands.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide Example 3b. Display parameters based on letter sequence This example shows entries for parameters that start with the letter “i”. The more letters you enter, the fewer the results returned. Notice that there is no space between the letters and the question mark. [Device-Name]> show ipa? Figure A-6 Result of “show ipa?” CLI command [Device-Name]> show iparp? Figure A-7 Result of “show iparp?” CLI command Example 4.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide Example: [Device-Name]>download 192.168.1.100 APImage2 img 2. Syntax to display help and usage information: [Device-Name]>download 3. Syntax to execute the download Command using previously set (stored) TFTP Parameters: [Device-Name]>download * help Displays instructions on using control-key sequences for navigating a Command Line and displays command information and examples. 1.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide reboot Reboots Access Point after specified number of seconds. Specify a value of 0 (zero) for immediate reboot. [Device-Name]> reboot 0 [Device-Name]> reboot 30 search Lists the parameters supported by the specified table. This list corresponds to the table information displayed in the HTTP interface. In this example, the CLI returns the list of parameters that make up an entry in the IP Access Table.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide Syntax: [Device-Name]>show [Device-Name]>show [Device-Name]>show Examples: [Device-Name]>show ipaddr [Device-Name]>show network [Device-Name]>show mgmtipaccesstbl “set” CLI Command Sets (modifies) the value of the specified parameter. To see a definition and syntax example, type only set and then press the Enter key.Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide Example 1 - Set the Access Point IP Address Parameter Syntax: [Device-Name]>set Example: [Device-Name]> set ipaddr 10.0.0.12 IP Address will be changed when you reboot the Access Point. The CLI reminds you when rebooting is required for a change to take effect. To reboot immediately, enter reboot 0 (zero) at the CLI prompt.
Command Line Interface (CLI) CLI Command Types AP-4000 Series User Guide Example 5 - Show the Group Parameters This example illustrates how to view all elements of a group or table. Syntax: [Device-Name]> show Example: [Device-Name]>show network The CLI displays network group parameters. Note show network and show ip return the same data. Figure A-10 Results of “show network” and “show ip” CLI Commands Example 6 - Show Individual and Table Parameters 1. View a single parameter.
Command Line Interface (CLI) Using Tables and Strings AP-4000 Series User Guide Using Tables and Strings Working with Tables Each table element (or parameter) must be specified, as in the example below. [Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0 Below are the rules for creating, modifying, enabling/disabling, and deleting table entries. • • • • Creation – The table name is required.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-4000 Series User Guide The string delimiter does not have to be used for every string object. The single quote or double quote only has to be used for string objects that contain blank space characters. If the string object being used does not contain blank spaces, then the string delimiters, single or double quotes, mentioned in this section are not required. Configuring the AP using CLI commands Log into the AP using HyperTerminal 1.
Command Line Interface (CLI) Set Basic Configuration Parameters using CLI Commands • Download an AP Configuration File from your TFTP Server • Backup your AP Configuration File AP-4000 Series User Guide Set System Name, Location and Contact Information [Device-Name]>set sysname sysloc [Device-Name]>set sysctname [Device-Name]>set sysctphone sysctemail [Device-Name]>show system F
Command Line Interface (CLI) Set Basic Configuration Parameters using CLI Commands AP-4000 Series User Guide Figure A-13 Results of “show wif” CLI command for an AP Enable 802.11d Support and Set the Country Code Perform the following command to enable 802.11d IEEE 802.11d support for additional regulatory domains.
Command Line Interface (CLI) Set Basic Configuration Parameters using CLI Commands Country Code Country AP-4000 Series User Guide Code Country Code Chile CL Korea Republic2 K2 South Korea KR China CN Kuwait KW Spain ES Colombia CO Latvia LV Sweden SE Costa Rica CR Lebanon LB Switzerland CH Croatia HR Liechtenstein LI Syria SY Cyprus CY Lithuania LT Taiwan TW Czech Republic CZ Luxembourg LU Thailand TH Denmark DK Macau MO Turkey TR Dominican Republic DO
Command Line Interface (CLI) Set Basic Configuration Parameters using CLI Commands AP-4000 Series User Guide Examples: [Device-Name]>set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication" radacctprofile "Accounting" radmacauthstatus enable aclstatus enable [Device-Name]>set wifssidtbl 4.
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide Other Network Settings There are other configuration settings that you may want to set for the AP. Some of them are listed below.
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide Configure DHCP Relay Perform the following command to enable or disable DHCP Relay Agent Status. NOTE: You must have at least one entry in the DHCP Relay Server Table before you can set the DHCP Relay Status to Enable. [Device-Name]>set dhcprelaystatus enable Configure DHCP Relay Servers Perform the following command to configure and enable a DHCP Relay Server.
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide Enable/Disable Closed System [Device-Name]>set wif closedsys Shutdown/Resume Wireless Service [Device-Name]>set wif wssstatus <1 (resume)/2 (shutdown)> Set Load Balancing Maximum Number of Clients [Device-Name]>set wif lbmaxclients <1–63> Set the Multicast Rate (802.11a) [Device-Name]>set wif 3 multrate <6, 12, 24 (Mbits/sec)> Set the Multicast Rate (802.
Command Line Interface (CLI) Other Network Settings Value AP-4000 Series User Guide Corresponding Antenna Enabled 1 802.11b/g (connector 1) 2 802.11b/g (connector 2) 3 802.11a (connector 3) 4 802.11a (connector 4) 5 (auto) Both antennas on interface NOTE: See Antennas for more information on internal and external antenna ports.
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide [Device-Name]>set telifbitmask <(see below)> Choose from the following values: Interface Bitmask 0 or 2 = Disable (all interfaces) 1 or 3 = Ethernet only 4 or 6 = Wireless A only 8 or 10 = Wireless B only 12 = Wireless A and Wireless B 13 or 15 = All interfaces Description All management channels disabled Ethernet only enabled Wireless A only enabled Wireless B only enabled Wireless A and Wireless B enabled All management chann
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide [Device-Name]>set serbaudrate <2400, 4800, 9600, 19200, 38400, 57600> [Device-Name]>set serflowctrl [Device-Name]>show serial Figure A-16 Result of “show serial” CLI Command Configure Syslog [Device-Name]>set [Device-Name]>set [Device-Name]>set [Device-Name]>set [Device-Name]>set syslogpriority <1–7 (default is 6)> syslogstatus sysloghbstatus (default is disabl
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide Set RADIUS Parameters Configure RADIUS Authentication servers Perform the following command to configure a RADIUS Server and assign it to a VLAN. The RADIUS Server Profile index is specified by the index parameter and the subindex parameter specifies whether you are configuring a primary or secondary RADIUS server.
Command Line Interface (CLI) Other Network Settings Maximum Retransmission . AP-4000 Series User Guide : 3 . . Index Primary/Backup Profile Name Server Status Server Addressing Format IP Address/Host Name Destination Port VLAN Identifier MAC Address Format Response Time Maximum Retransmission Authorization Lifetime Accounting Update Interval Accounting Inactivity Timer : : : : : : : : : : : : : 4 Backup Management Access notReady ipaddr 0.0.0.
Command Line Interface (CLI) Other Network Settings AP-4000 Series User Guide Set VLAN/SSID Parameters Enable VLAN Management [Device-Name]>set vlanstatus enable [Device-Name]>set vlanmgmtid <1–4094> [Device-Name]>show wifssidtbl (to review your settings) [Device-Name]>reboot 0 Disable VLAN Management [Device-Name]>set vlanstatus disable or [Device-Name]>set vlanmgmtid -1 [Device-Name]>reboot 0 Add a Entry to the WIFSSID Table [Device-Name]>set wifssidtbl ssid vlanid <-1 (untagged)
Command Line Interface (CLI) CLI Monitoring Parameters AP-4000 Series User Guide Configure a Security Profile with 802.11i Security Mode [Device-Name]>set secprofiletbl secmode 802.11i rekeyint status enable Example: [Device-Name]>set secprofiletbl 7 secmode 802.11i rekeyint 900 status enable Configure a Security Profile with 802.11i-PSK Security Mode [Device-Name]>set secprofiletbl secmode 802.
Command Line Interface (CLI) Parameter Tables – • AP-4000 Series User Guide Link Integrity Parameters - Monitor link status Interface Parameters - Configure Wireless and Ethernet settings – Wireless Interface Parameters — Channel Blacklist Parameters - View and configure blacklisted channels — Wireless Distribution System (WDS) Parameters - Configure the WDS partnerships • • • • • – Wireless Interface SSID/VLAN/Profile Parameters - Configure the SSIDs, VLANs, and security modes for each interface
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide – Hardware Configuration Reset - Disable or enable hardware configuration reset and configure a configuration reset password. – Other Parameters - Configure Security Profiles that define allowed security modes (wireless clients), and encryption and authentication mechanisms. • VLAN/SSID Parameters - Enable the configuration of multiple subnetworks based on VLAN ID and SSID.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide System Parameters Name Type System Name Location Contact Name Contact E-mail Contact Phone Group DisplayString DisplayString DisplayString DisplayString DisplayString FLASH Backup Interval Flash Update Integer System OID Descriptor DisplayString DisplayString Up Time Integer System Security ID Emergency Restore to defaults DisplayString Value N/A User Defined User Defined User Defined User Defined User Defined max 254 char
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Network Parameters IP Configuration Parameters Name Type Value Access Network IP Configuration Group Group N/A N/A R R IP Address IP Mask Default Router IP Address Default TTL IpAddress IpAddress IpAddress User Defined User Defined User Defined RW RW RW CLI Parameter network ip (Note: The network and ip parameters display the same information) ipaddr ipmask ipgw Integer RW ipttl Address Type Integer User Defined (sec
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide DHCP Server table for IP pools Name DHCP Server IP Address Pool Table Table Index Start IP Address End IP Address Width Default Lease Time (optional) Maximum Lease Time (optional) Comment (optional) Status (optional) Table Type N/A R CLI Parameter dhcpippooltbl Integer IpAddress IpAddress Integer Integer32 User Defined User Defined User Defined User Defined >0 86400 sec (default) >0 86400 sec (default) User Defined enable (1) di
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide SNTP Parameters Name SNTP Group SNTP Status Type Group Integer Primary Server Name or DisplayString IP Address Secondary Server Name DisplayString or IP Address Time Zone Integer Daylight Savings Time Integer Year Month Day Hour Minutes Seconds Addressing Format Integer32 Integer32 Integer32 Integer32 Integer32 Integer32 Integer Value N/A enable disable 0 - 255 characters Access R RW CLI Parameter sntp sntpstatus RW sntppris
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Interface Parameters Wireless Interface Parameters The wireless interface group parameter is wif. Wireless Interface A (802.11a radio) uses table index 3 and Wireless Interface B (802.11b/g radio) uses table index 4. Common Parameters to 802.
Command Line Interface (CLI) Parameter Tables Distance Between APs Mini Micro 25 33 AP-4000 Series User Guide Receive Sensitivity Threshold Value dBm -70 -62 53 59 Transmit Defer Threshold Value dBm -42 -36 § When the AP-4900M is configured to use the 4.9 GHz Public Safety operational mode, antenna diversity is disabled, and antenna 3 is statically configured for use. If an operational mode other than 4.9 Public Safety is configured, antenna diversity is configurable by the administrator.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide 802.11b Only Parameters Name Operating Frequency Channel Integer Type Multicast Rate Integer Closed Wireless System Integer MAC Address Supported Data Rates PhyAddress Octet String Transmit Rate Integer32 Physical Layer Type Integer Regulatory Domain List DisplayString Value 1 - 14; available channels vary by regulatory domain/country; see Available Channels 1 Mbits/sec (1) 2 Mbits/sec (2) (default) 5.
Command Line Interface (CLI) Parameter Tables Name Transmit Rate Type Integer32 AP-4000 Series User Guide Value Access RW For 802.11b-only mode: 0 (auto fallback; default) 1 Mbits/sec 2 Mbits/sec 5.5 Mbits/sec 11 Mbits/sec CLI Parameter txrate For 802.11g-only mode:* 0 (auto fallback; default) 6 Mbits/sec 9 Mbits/sec 12 Mbits/sec 18 Mbits/sec 24 Mbits/sec 36 Mbits/sec 48 Mbits/sec 54 Mbits/sec * Physical Layer Type Integer Super Mode Integer Turbo Mode † Integer For 802.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Channel Blacklist Parameters Name Wireless Interface Channel Blacklist Table Interface Index Type Table Integer Channel Number Integer Radar Detected TruthValue Elapsed Time (minutes) Blacklist Status Gauge32 ObjStatus Value wifchblklisttbl Wireless interface A = 3 Wireless interface B = 4 Depends on regulatory domain True False 0 - 32 enable disable Access CLI Parameter R wdstbl R ifindex R channel R radardetected
Command Line Interface (CLI) Parameter Tables RADIUS Accounting Status per VLAN MAC ACL Status per VLAN Security Profile RADIUS MAC Profile RADIUS EAP Profile RADIUS Accounting Profile QoS Policy AP-4000 Series User Guide Integer Integer32 DisplayString DisplayString DisplayString enable disable enable disable User defined User defined User defined User defined Integer32 User defined Integer RW acctstatus RW aclstatus RW RW RW RW secprofile radmacprofile radeapprofile radacctprofile RW qospol
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Mesh Network Parameters * Name Mesh Group Mesh Mode Group Integer Type Mesh Interface Number Integer32 Mesh SSID Security Mode DisplayString Integer Shared Secret DisplayString Maximum Active Mesh Links RSSI Smoothing* Roaming Threshold* Send Client Deauth Message Integer32 Integer32 Integer32 ObjStatus Value N/A disable (default) portal ap 3 (Wireless Interface A) 4 (Wireless Interface B) 1–16 characters none aes (defaul
Command Line Interface (CLI) Parameter Tables SNMPv3 Privacy Password DisplayString AP-4000 Series User Guide User Defined public (default) 6 - 32 characters W snmpv3privpasswd 198
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide HTTP Parameters * Name HTTP HTTP Management Interface Bitmask Type Group Interface Bitmask HTTP Password DisplayString HTTP Port Integer Help Link* SSL Status SSL Certificate Passphrase DisplayString Integer DisplayString Value N/A 0 or 2 = No interfaces (disable) 1 or 3 = Ethernet 4 or 6 = Wireless A 8 or 10 = Wireless B 12 = Wireless A & B 13 or 15 = All interfaces (default is 15) User Defined (6 - 32 characters) User Defi
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Serial Port Parameters Name Serial Baud Rate Group Integer Type Data Bits Parity Stop Bits Flow Control Integer Integer Integer Value Value N/A 2400, 4800,9600 (default), 19200, 38400, 57600 8 none 1 none (default) xonxoff Access R RW CLI Parameter serial serbaudrate R R R RW serdatabits serparity serstopbits serflowctrl RADIUS Based Management Access Parameters The RADIUS Based Management Access parameters allow you to enab
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Auto Configuration Parameters These parameters relate to the Auto Configuration feature which allows an AP to be automatically configured by downloading a specific configuration file from a TFTP server during the boot up process.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Filtering Parameters Ethernet Protocol Filtering Parameters Name Ethernet Filtering Filtering Interface Bitmask Type Group Interface Bitmask Operation Type Value Access N/A R RW 0 or 2 = No interfaces (disable) 1 or 3 = Ethernet 4 or 6 = Wireless A 8 or 10 = Wireless B 12 = Wireless A & B 13 or 15 = All interfaces (default is 15) passthru RW block CLI Parameter etherflt etherfltifbitmask etherfltoptype Ethernet Filtering Table
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Proxy ARP Parameters Name Proxy ARP Status Type Value N/A enable disable (default) Access R RW CLI Parameter parp parpstatus Type Value N/A enable disable (default) User Defined User Defined Access R RW CLI Parameter iparp iparpfltstatus RW RW iparpfltipaddr iparpfltsubmask Value N/A 1-5 N/A ethertowireless wirelesstoether both (default) enable disable (default) Access R N/A R RW CLI Parameter broadcastflttbl index proton
Command Line Interface (CLI) Parameter Tables Name Port Number Type Octet String Protocol Name DisplayString Interface Bitmask Integer32 Status (optional) Integer AP-4000 Series User Guide Value User Defined (there are also 4 pre-defined protocols: Index 1: NetBios Name Service - 137, Index 2: NetBios Datagram Service - 138, Index 3: NetBios Session Service - 139, Index 4: SNMP Service - 161) User Defined (there are also 4 pre-defined protocols, see Port Number above) 0 or 2 = No interfaces (disabl
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Syslog Parameters The following parameters configure the Syslog settings.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Bridge Parameters Spanning Tree Parameters Name Spanning Tree Spanning Tree Status Type Group Integer Bridge Priority Integer Maximum Age Integer Hello Time Integer Forward Delay Integer Value N/A enable (default) disable 0 - 65535 32768 (default) 600 - 4000 (in 0.01 sec intervals; i.e., 6 to 40 seconds) 2000 (default) 100 - 1000 (1/100 second; i.e.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Storm Threshold Table Name Storm Threshold Table Table Index Table Integer Type Broadcast Threshold Integer Multicast Threshold Integer Value N/A 1 = Ethernet 3 = Wireless 0 - 255 packets/sec (default is 0) 0 - 255 packets/sec (default is 0) Access R R CLI Parameter stmthrestbl index RW bcast RW mcast Intra BSS Subscriber Blocking The following parameters control the Intra BSS traffic feature, which prevent wireless clie
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide RADIUS Parameters General RADIUS Parameters Name RADIUS Client Invalid Server Address Type Group Counter32 Value N/A N/A Access R R CLI Parameter radius radcliinvsvradd RADIUS Server Configuration Parameters NOTE: Use a server name only if you have enabled the DNS Client functionality. See DNS Client for RADIUS Name Resolution.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Security Parameters MAC Access Control Parameters Name MAC Address Control Status Type Group Integer Operation Type Integer Value N/A enable disable (default) passthru (default) block Access R RW RW CLI Parameter macacl aclstatus macacloptype MAC Access Control Table Name MAC Address Control Table Table Index MAC Address Comment (optional) Status (optional) Type Value Table N/A N/A PhysAddress DisplayString N/A User Defin
Command Line Interface (CLI) Parameter Tables Name Hardware Configuration Reset Status Configuration Reset Password AP-4000 Series User Guide Type Integer DisplayString Value enable (1) disable (2) User Defined Access R RW CLI Parameter hwconfigresetstatus configresetpasswd Security Profile Table The Security Profile Table allows you to configure security profiles. A maximum of 16 security profiles are supported per wireless interface.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide VLAN/SSID Parameters Name Type VLAN Status Group Integer Management ID VlanId Value N/A enable disable (default) -1 (untagged) or 1 - 4094 Access CLI Parameter R RW vlan vlanstatus RW vlanmgmtid Other Parameters IAPP Parameters Name IAPP IAPP Status Type Group Integer Periodic Announce Interval (seconds) Integer Announce Response Time Handover Time-out Integer Integer Max.
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Enabling QoS Name QoS Status Type Object Status QoS Maximum Medium Threshold Integer Value enable disable (default) 50 - 90 Access RW CLI Parameter qosstatus RW qosmaximummediumthresh old Value Access N/A N/A R R RW RW CLI Parameter qos qospolicytbl index secindex policyname type RW RW mapindex markstatus RW status Configuring QoS Policies The QoS group manages the QoS policies: * Name QoS Group QoS Policy Table Tabl
Command Line Interface (CLI) Parameter Tables AP-4000 Series User Guide Specifying the Mapping between IP Precedence/DSCP Ranges and 802.1D Priorities The QoS IP DSCP to 802.1D Mapping Table specifies the mapping between IP Precedence/DSCP Ranges and 802.1D priorities. Name QoS IP DSCP to 802.1D Mapping Table Table Index (Primary Index) 802.
Command Line Interface (CLI) CLI Batch File AP-4000 Series User Guide Defining the QoS Policy used for a Wireless Interface SSID The QoS Policy object configures the QoS policy to be used per wireless interface SSID. This object is part of the Wireless Interface SSID Table; the CLI command for this table is “wifssidtbl.” Name QoS Policy * Type Integer Value See Note* Access RW CLI Parameter qospolicy A QoS Policy number needs to be specified in the SSID table.
Command Line Interface (CLI) CLI Batch File AP-4000 Series User Guide set ipaddr 11.0.0.66 set ipaddrtype static set ipsubmask 255.255.255.0 set ipgw 11.0.0.1 set wif 4 autochannel disable set wif 4 mode 1 set syslogstatus enable set sysloghbstatus enable set sysloghbinterval 5 set wif 4 netname london reboot Figure A-18 Sample CLI Batch File Reboot Behavior When a CLI Batch file contains a reboot command, the reboot will occur only after the entire CLI Batch file has been executed.
AP-4000 Series User Guide B ASCII Character Chart You can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F, a-f (case sensitive), and punctuation marks. Each ASCII character corresponds to two hexadecimal digits. The table below lists the ASCII characters that you can use to configure WEP Encryption Keys. It also lists the Hexadecimal equivalent for each ASCII character.
AP-4000 Series User Guide C Specifications • Software Features • Hardware Specifications • Available Channels Software Features The tables below list the software features available on the AP-4000 Series. • Number of Stations per BSS • Management Functions • Advanced Bridging Functions • Medium Access Control (MAC) Functions • Security Functions • Network Functions Number of Stations per BSS Feature Without encryption With WEP encryption With 802.1x Authentication With WPA With 802.
Specifications Software Features AP-4000 Series User Guide Advanced Bridging Functions Feature IEEE 802.1d Bridging WDS Relay Roaming Protocol Filtering Multicast/Broadcast Storm Filtering Proxy ARP TCP/UDP Port Filtering Blocking Intra BSS Clients Packet Forwarding Supported by AP-4000 Series 3 3 3 3 3 3 3 3 3 Medium Access Control (MAC) Functions Feature Automatic Channel Selection (ACS) Dynamic Frequency Selection (DFS)* Closed System Feature Wireless Service Shutdown 802.
Specifications Software Features AP-4000 Series User Guide ‡ Support is provided for a primary and backup RADIUS authentication server for both MAC-based authentication and 802.1x authentication per VLAN. § Use in conjunction with WPA or 802.1x Authentication.
Specifications Hardware Specifications AP-4000 Series User Guide Hardware Specifications Physical Specifications Dimensions (H x W x L) = 6.5 x 18.5 x 26 cm (2.5 x 7.25 x 10.25 in.) Weight = 1.75 Kg (3.5 lb.) Electrical Specifications Voltage = 100 to 240 VAC (50-60 Hz) Current = 0.
Specifications Available Channels AP-4000 Series User Guide Available Channels Available channels vary based on radio, country, and frequency band. To verify which channels are available for your product: 1. Locate the product SKU on the underside of your AP unit or on the unit’s box. 2. Note the alphanumeric code following the number 8670. (e.g., 8670-EU) 3. See the following tables. NOTE: Country restrictions may apply. Please see Regulatory Compliance. AP-4000/4000M Channels Radio 802.
Specifications Available Channels AP-4000 Series User Guide AP-4900M Channels Channel availability in the AP-4900M depends on the operational mode. When operating in 802.11a-only, 802.11b-only, or 802.11b/g operational mode, the AP uses the channels in the following table. Additionally, when the AP-4900M’s 802.11a radio is operating in 4.9 GHz Public Safety operational mode, the AP uses channels detailed in AP-4900M Channels (4.9 GHz Public Safety Mode).
Specifications Available Channels Channel 25 30 35 40 45 50 55 60 65 70 75 80 85 90 AP-4000 Series User Guide Frequency Band 10 MHz 20 MHz 3 3 3 3 3 3 3 3 3 3 3 3 3 223
AP-4000 Series User Guide Technical Support D If you are having a problem using an AP and cannot resolve it with the information in Troubleshooting, gather the following information and contact your local reseller: • • • List of ORiNOCO products installed on your network; include the following: – Product names and quantity – Part numbers (P/N) – Serial numbers (S/N) List of ORiNOCO software versions installed – Check the HTTP interface’s Version tab (click on Monitor > Version).
Technical Support Telephone Support AP-4000 Series User Guide Submit a Knowledgebase question or open an issue at: . Our technical support staff will reply to you by email. NOTE: The Knowledgebase is available to all website visitors. First-time users will be asked to create an account to gain access. Telephone Support Contact technical support by phone 24 hours a day, seven days a week.
AP-4000 Series User Guide Statement of Warranty E Warranty Coverage Proxim Corporation warrants that its Products are manufactured solely from new parts, conform substantially to specifications, and will be free of defects in material and workmanship for a Warranty Period of 1 year from the date of purchase.
Statement of Warranty Other Information AP-4000 Series User Guide Calls to the Customer Service Center for reasons other than Product failure will not be accepted unless Buyer has purchased a Proxim Service Contract or the call is made within the first thirty (30) days of the Product’s invoice date. Calls that are outside of the 30-day free support time will be charged a fee of $25.00 (US Dollars) per Support Call.
AP-4000 Series User Guide F Regulatory Compliance NOTE: Please read this section before installing and using your product, and save these instructions. Visit http://support.proxim.com for the latest regulatory compliance information.
Regulatory Compliance AP-4000 Series User Guide Please see the following sections for more information: • Safety Information (USA, Canada, & European Union) • Federal Communications Commission (FCC) (AP-4000/4000M) • Industry Canada (IC) (AP-4000/4000M only) • European Union (AP-4000/4000M only) • Regulatory Compliance Certifications Summary (AP-4000/4000M) • Regulatory Compliance Certifications Summary (AP-4900M) 229
Regulatory Compliance Safety Information (USA, Canada, & European Union) AP-4000 Series User Guide Safety Information (USA, Canada, & European Union) This product has been evaluated to, and complies with, the Safety requirements of UL60950:2000, and IEC60950:1999; the Standards for the Safety of Information Technology Equipment.
Regulatory Compliance Federal Communications Commission (FCC) (AP-4000/4000M) AP-4000 Series User Guide Federal Communications Commission (FCC) (AP-4000/4000M) 231
Regulatory Compliance Federal Communications Commission (FCC) (AP-4000/4000M) AP-4000 Series User Guide Warnings This equipment generates, uses, and can radiate radio frequency energy; and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.
Regulatory Compliance Industry Canada (IC) (AP-4000/4000M only) AP-4000 Series User Guide Industry Canada (IC) (AP-4000/4000M only) 233
Regulatory Compliance European Union (AP-4000/4000M only) AP-4000 Series User Guide European Union (AP-4000/4000M only) NOTE: European Union includes the following countries: Austria, Belgium, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Slovakia, Slovenia, Spain, Sweden, and the United Kingdom; DoC also applies to Iceland, Liechtenstein, Norway, and Switzerland.
Regulatory Compliance Regulatory Compliance Certifications Summary (AP-4000/4000M) AP-4000 Series User Guide Regulatory Compliance Certifications Summary (AP-4000/4000M) Country Australia & New Zealand Brazil Canada China European Union* India Japan Mexico Saudi Arabia Singapore South Korea Taiwan United Arab Emirates USA Certification/Reference No. N11394 ANATEL Cert. No.: 1121-04-1641 IC Cert. No.: 4110A-APAGAT02 Safety: UL File No. E177793 CMII ID: 2004DJ0340 CE1313! Safety: CB Lic. No.
