User manual

ManualsBrandsRedline Communications ManualsComputer equipmentAN-50e

AN-80i

Advanced Broadband Wireless

Infrastructure Solutions

User Manual

4Gon www.4Gon.co.uk info@4gon.co.uk Tel: +44 (0)1245 808295 Fax: +44 (0)1245 808299

Summary of content (152 pages)

PAGE 1
AN-80i Advanced Broadband Wireless Infrastructure Solutions User Manual 70-00072-01-10 Proprietary Redline Communications © 2011 Page 1 of 152 March 2, 2011 4Gon www.4Gon.co.uk info@4gon.co.
PAGE 2
AN-80i User Manual Copyright Information All rights reserved March 2, 2011. The information in this document is proprietary to Redline Communications Inc. This document may not in whole or in part be copied, reproduced, or reduced to any medium without prior consent, in writing, from Redline Communications Incorporated.
PAGE 3
AN-80i User Manual CONTENTS SUMMARY 70-00072-01-10 1 Safety & Service Notices...................................................... 12 2 System Overview .................................................................. 18 3 PTP Operation....................................................................... 23 4 PMP Operation...................................................................... 41 5 Common Web Screens.........................................................
PAGE 4
AN-80i User Manual TABLE OF CONTENTS 1 Safety & Service Notices...................................................... 12 1.1 1.1.1 1.1.2 1.1.3 1.1.4 Service & Safety...............................................................................................12 Safety Warnings..............................................................................................12 Warning Symbols............................................................................................13 Lightning Protection ..
PAGE 5
AN-80i User Manual Wireless .......................................................................................................27 3.3 3.3.1 3.3.2 3.3.3 3.3.4 PTP System Status Screen .............................................................................28 General information.........................................................................................28 Ethernet LAN Statistics ...................................................................................29 Wireless Statistics...
PAGE 6
AN-80i User Manual 4.9.3 Wireless Traffic Parameters .........................................................................58 Group Statistics...............................................................................................59 General ........................................................................................................59 Packet (Downlink) ........................................................................................59 Controls ..................................
PAGE 7
AN-80i User Manual 6.1.2 6.1.3 6.1.4 6.1.5 6.1.6 6.1.7 6.1.8 6.1.9 6.1.10 6.1.11 6.1.12 6.1.13 6.1.14 6.1.15 6.1.16 6.1.17 6.1.18 6.1.19 6.1.20 6.1.21 6.1.22 6.1.23 6.1.24 70-00072-01-10 Chgver ............................................................................................................84 Clear ...............................................................................................................84 Del ................................................................................
PAGE 8
AN-80i 70-00072-01-10 User Manual 8.1.1 8.1.2 8.1.3 8.1.4 Authentication ...............................................................................................118 Data Security ................................................................................................118 Management Security ...................................................................................119 Physical Security...........................................................................................119 8.
PAGE 9
AN-80i User Manual LIST OF TABLES Table 1: FCC & IC RF Recommended Safe Separation Distances ................................14 Table 2: FCC: TDWR System Locations ........................................................................16 Table 3: PTP - 802.1p Priority Settings ..........................................................................32 Table 4: PTP & PMP - Maximum TX Power Settings (dBm) ..........................................36 Table 5: PTP & PMP - Modulation/Coding for UBR Settings.
PAGE 10
AN-80i User Manual Table 46: Diag. - PTP Wireless Signal LED Indication .................................................110 Table 47: Diag. - Wireless Link LED Diagnostics .........................................................110 Table 48: Diag. - PTP Status Codes ............................................................................111 Table 49: Diag. - PMP Status Code Bits ......................................................................111 Table 50: Diag. - PMP Status Codes ..............
PAGE 11
AN-80i User Manual Fig. 12: Web - PTP System Status Screen ....................................................................28 Fig. 13: Web - PTP System and Ethernet Configuration Screen ....................................31 Fig. 14: Web - PTP Wireless Configuration Screen .......................................................35 Fig. 15: Web - PTP Wireless Configuration Screen .......................................................39 Fig. 16: Web - PMP - VLAN Tagged Traffic Example ...................
PAGE 12
AN-80i User Manual Chapter 1 1 Safety & Service Notices 1.1 Service & Safety 1.1.1 Safety Warnings 1. Lightning and Grounding WARNING to Service Personnel The system must be installed by a professional installer who is familiar with both data network issues and RF installations including grounding and lightning protection. The system must be properly grounded to protect against power surges and accumulated static electricity.
PAGE 13
AN-80i 1.1.2 User Manual Warning Symbols The following symbols may be encountered during installation or troubleshooting. These warning symbols mean danger. Bodily injury may result if you are not aware of the safety hazards involved in working with electrical equipment and radio transmitters. Familiarize yourself with standard safety practices before continuing. Electro-Magnetic Radiation 1.1.3 High Voltage Lightning Protection WARNING: The following notes are general recommendations for the system.
PAGE 14
AN-80i 1.1.4 User Manual Service & Warranty Information 1. Refer all repairs to qualified service personnel. Do not remove the covers or modify any part of this device, as this action will void the warranty. 2. Locate the serial numbers and record these on your registration card for future reference. Use the space below to affix serial number stickers. Also, record the MAC address identified on the unit product label. 3.
PAGE 15
AN-80i User Manual Installation and Operation USA FCC Part 90 guidelines for deployment of AN-80i systems in the frequency band of 3.650-3.700 GHz for “restricted” CBP (Contention Based Protocol) in USA includes restrictions on the maximum EIRP. To comply with the above guidelines, the following EIRP limitations are applied for deployment in this band: i) Max EIRP of 25 Watts/25 MHz (equivalent to 1 Watt/1 MHz) ii) Peak EIRP Power Density of 1 Watt in any 1 MHz slice of spectrum.
PAGE 16
AN-80i User Manual Table 2: FCC: TDWR System Locations STATE AZ 70-00072-01-10 CITY PHOENIX LONGITUDE LATITUDE FREQUENCY TERRAIN ELEVATION (MSL) [ft] W 112 09 46 N 33 25 14 5610 MHz 1024 ANTENNA HEIGHT [ft] 64 CO DENVER W 104 31 35 N 39 43 39 5615 MHz 5643 64 FL FT LAUDERDALE W 080 20 39 N 26 08 36 5645 MHz 7 113 FL MIAMI W 080 29 28 N 25 45 27 5605 MHz 10 113 FL ORLANDO W 081 19 33 N 28 20 37 5640 MHz 72 97 FL TAMPA W 082 31 04 N 27 51 35 5620 MHz 14 80 FL W
PAGE 17
AN-80i User Manual Additional information: http://spectrumbridge.com/udrs/home.aspx http://www.wispa.org/?page_id = 2341 1.2.2 UL Information 1. The suitability of the supplied Ethernet cable is subject to the approval of Authority 2. 3. 4. 5. 6. 7. 1.2.3 Having Jurisdiction and must comply with the local electrical code.
PAGE 18
AN-80i User Manual Chapter 2 2 System Overview The Access Node 80i system is manufactured by Redline Communications -- a world leader in design and production of Broadband Fixed Wireless (BFW) systems. Fig. 2: Intro - AN-80i System Components AN-80i is a high-performance, high-speed wireless Ethernet bridge for use in a commercial, industrial, business, or government environment. The system can operate with a 3.3 - 3.8 GHz, 5.4 GHz, 4.9 - 5.3 GHz, or 5.
PAGE 19
AN-80i User Manual bandwidth requests from the remote unit (PTP Slave / PMP Subscriber) to provide non contention-based traffic with predictable transmission characteristics. 2.1 Ethernet Port 2.2 RF Port 2.3 Mounting Brackets The Ethernet port is a female RJ-45 connector. The AN-80i receives DC power and exchanges data with the indoor network through the Ethernet port. The AN-80i Ethernet port connects to the PoE Adapter using a weatherproof CAT-5E Ethernet cable.
PAGE 20
AN-80i 2.5.2 User Manual DC Power Adapter The DC power adapter input is auto-sensing 18 - 60 VDC. Fig. 4: Intro - Indoor Power-over-Ethernet (PoE) Module - DC Model Warning to Service Personnel: 48 VDC Customer equipment including personal computers, routers, etc., must be connected only to the INPUT (DATA) port on the PoE unit. Only the outdoors Ethernet interface cable connecting to the AN-80i can be safely connected to the OUTPUT (DATA & POWER) connector.
PAGE 21
AN-80i 2.6.2 User Manual Audible Alignment When enabled, the audible alignment signal will sound infrequently when a low signal is detected, and more often as the signal strength increases. The audible antenna alignment tool provides only rough adjustment for the subscriber antennas. It is recommended to monitor the RSSI measurements to achieve maximum signal strength when performing fine adjustments to the subscriber antenna. See the AN-80i Installation Guidelines for detailed instructions.
PAGE 22
AN-80i User Manual Fig. 7: Intro - Open a Telnet Session to the AN-80i 2.7.3 70-00072-01-10 SNMP The AN-80i can be managed using SNMP (Simple Network Management Protocol) v2c or v3. The system MIBS information is provided separately. Contact your Redline sales representative for information about Redline device management products. Proprietary Redline Communications © 2011 Page 22 of 152 March 2, 2011 4Gon www.4Gon.co.uk info@4gon.co.
PAGE 23
AN-80i User Manual Chapter 3 3 PTP Operation 3.1 PTP System Menu The Web Interface provides all required settings and statistics necessary to configure and monitor the operation of the AN-80i using a standard web browser. An operator can access and control the AN-80i remotely from any geographical location with HTTP connectivity to that unit. Following a successful login, the General Information screen is displayed. On the left is a menu of all available screens.
PAGE 24
AN-80i 3.2 3.2.1 User Manual PTP System Information Screen Click General Information to view the system overview screen (read-only). See the System Configuration screen for information about changing these settings. Dashboard The dashboard at the top of the General Information screen displays a summary of important operational information and status indicators. Fig. 9: Web - PTP Dashboard Display General IP Address: IP address setting of this unit. Wireless Frequency: RF channel frequency.
PAGE 25
AN-80i User Manual Ethernet LED Indicators These LED indicators provide a summary of the Ethernet port status. Link LED Off: Ethernet connection is not detected (e.g., Ethernet cable is disconnected). On: Ethernet connection is detected and Ethernet traffic is not detected. Blink: Ethernet connection is detected and Ethernet traffic is detected. 100 LED Off: Ethernet port is operating at 10 Mb/s. On: Ethernet port is operating at 100 Mb/s.
PAGE 26
AN-80i 3.2.2 User Manual General Information Screen The General Information screen provides additional detail about the unit. Fig. 11: Web - PTP General Information Screen General System Name: User-assigned name for this AN-80i. System Details: User-assigned system details information. System Location: User-assigned system location information. Contact: User-assigned contact information. Radio Type: Displays the factory installed radio type. Refer to section 8.1 System Specifications.
PAGE 27
AN-80i User Manual Time Since System Start: Time since the system was last reset/powered-on. Start Up Time: Time and date the system was last reset/powered-on. Current Time: Current time setting on this AN-80i. Ethernet Ethernet MAC Address: Hardware (MAC) address of this AN-80i. This address is also recorded on the chassis label. IP Address: IP address. IP Subnet Mask: IP subnet mask. Default Gateway Address: IP address of the default router or gateway.
PAGE 28
AN-80i 3.3 User Manual PTP System Status Screen Click System Status in the main menu to view all AN-80i interface statistics. Fig. 12: Web - PTP System Status Screen 3.3.1 General information System Name: User-assigned system name. Software Version: Displays the software version in use. Tx Status: State of the wireless interface (FIPS mode only). The unit performs continuous self-tests for the RNG, DSA generator, and signature modules. If any of these tests fails, the transmitter is disabled.
PAGE 29
AN-80i User Manual No - RF link has not been established with the remote-end unit. Wireless Security: Status of the wireless security selection. Off - No wireless security. On - Data sent over the wireless interface is encrypted. FIPS Mode: State of the FIPS security option. Click the status (Off/On) link to view the status of all FIPS components. Refer to page 118 for a complete description of this feature. Off - FIPS mode is not active. On - FIPS mode is active and monitoring all security issues.
PAGE 30
AN-80i User Manual Received Signal Strength: Min: Minimum measured RSSI value. Received Signal Strength: Mean: Average measured RSSI value. Received Signal Strength: Max: Maximum measured RSSI value. SINADR: Ave. signal to interference, noise, and distortion ratio (updated each refresh). Rx Packets: Total number of packets received over the wireless interface.
PAGE 31
AN-80i 3.4 User Manual PTP System Configuration Screen Click Configure System in the main menu to view and adjust configuration settings for general system identification, Ethernet, and the wireless interface. 3.4.1 Ethernet Configuration Use settings on this section of the screen to configure the AN-80i Ethernet interface. Fig. 13: Web - PTP System and Ethernet Configuration Screen 70-00072-01-10 Proprietary Redline Communications © 2011 Page 31 of 152 March 2, 2011 4Gon www.4Gon.co.uk info@4gon.
PAGE 32
AN-80i User Manual System Name: Enter the name for this AN-80i. The name may be up to thirty (30) alphanumeric characters including a-z, A-Z, 0-9, dash (-), and underscore (_). System Details: Enter additional descriptive details about this AN-80i. The system details may be up to thirty (30) alpha-numeric characters including a-z, A-Z, 0-9, dash (), and underscore (_). System Location: Enter additional descriptive details about this AN-80i.
PAGE 33
AN-80i User Manual Auto - Automatically negotiate the connection speed and duplex. 10Mbps HD - Operate at 10Base-T half-duplex only. 10Mbps FD - Operate at 10Base-T full duplex only. 100Mbps HD -.Operate at 100Base-T half-duplex only. 100Mbps FD - Operate at 100Base-T full duplex only. Important: The auto-negotiate feature does not detect the speed and duplex of manually set Ethernet equipment.
PAGE 34
AN-80i User Manual Mgmt. Tag Enable: Check Disabled ( this box to enable VLAN tagged management traffic. ): AN-80i unit can be managed using untagged traffic. Enabled ( ): AN-80i unit can be managed only using VLAN traffic tagged with the value specified in the Mgmt. VID field. If the Mgmt. Tag feature is to be used, it is strongly recommended to create and test the VLAN connectivity before activating the Mgmt Tag Enable function.
PAGE 35
AN-80i 3.4.2 User Manual Wireless Configuration Use settings on this section of the screen to configure the AN-80i wireless interface. Fig. 14: Web - PTP Wireless Configuration Screen RF Freq. [MHz]: Enter the center frequency for the RF channel. This setting must be identical for both AN-80i systems operating as a wireless link. The options key controls channel availability. See Table 73: Spec. - Regional Identification Codes on page 144 for available channels.
PAGE 36
AN-80i User Manual Click the blue text [Frequency Ranges] adjacent to the check box to display the Frequency Management screen (see Frequency Range on page 75). PTP Master: The PTP Master can be programmed with a master list of frequency ranges. When a PTP Slave registers with the PTP Master, the programmed frequency ranges are downloaded by the PTP Slave (displayed as Remote Frequency Ranges on the PTP Slave).
PAGE 37
AN-80i User Manual Tx Off: When radar signals are detected, the transmitter is immediatelly switched off, an event message is logged, and configured SNMP trap messages are sent. After thirty minutes the unit monitors the RF channel for one minute. If radar signals are detected, the transitter remains disabled and the unit waits thirty minutes before repeating the monitoring period. Normal operation resumes only when radar signals are not detected during a one minute monitoring period.
PAGE 38
AN-80i User Manual Table 5: PTP & PMP - Modulation/Coding for UBR Settings 3.5 5 Modulation Coding Channel Sizes (MHz) 7 10 14 20 Uncoded Burst Rate (Mbps) 28* 40* 64 QAM 3/4 9.5 13.5 19.0 27.0 38.0 54.0 76.0 108.0 64 QAM 2/3 8.4 12.0 16.8 24.0 33.5 48.0 67.0 96.0 16 QAM 3/4 6.3 9.0 12.5 18.0 25.0 36.0 50.0 72.0 16 QAM 1/2 4.3 6.0 8.5 12.0 17.0 24.0 34.0 48.0 QPSK 3/4 3.1 4.5 6.3 9.0 12.5 18.0 25.0 36.0 QPSK 1/2 2.1 3.0 4.3 6.0 8.
PAGE 39
AN-80i User Manual Software Version: Select the version of system software to load when the AN-80i is rebooted. The system holds two independent software images. Link Length Measurement Mode: (PTP only) Select the mode for setting/measuring the distance between this and the remote-end unit. Auto: Distance is calculated automatically by the AN-80i. Manual: Enter the link distance manually in the Link Length field.
PAGE 40
AN-80i User Manual Link is being monitored by the Redline Management System (RMS). Link Name: Enter the shared name to uniquely identify this wireless link to both the local and remote-end systems. On power-up/reboot or auto scan following deregistration or DFS event, the wireless link will only be established between two units having identical link names. The name may be blank or contain up to thirty (30) alpha-numeric characters including a-z, A-Z, 0-9, dash (-), and underscore (_).
PAGE 41
AN-80i User Manual Chapter 4 4 PMP Operation 4.1 PMP General Operation This section describes only the additional parameters required for configuring PMP support, and an overview about defining and using VLAN and pass-through groups. The AN-80i PMP software provides the following main features: IEEE 802.
PAGE 42
AN-80i User Manual group. Subscriber #3 is a member of the Pass through group and receives traffic that does not match the VID of the Data or Voice groups. 4.1.1 Minimum Setup Requirements A minimum set of parameters must be configured to enable data and management traffic on any PMP deployment: 1. Links: Links identify each subscriber in the sector (by MAC address) and set the maximum uplink and downlink throughput (UBR) for each wireless link. 2.
PAGE 43
AN-80i 4.2 User Manual PMP System Menu The Web Interface provides all required settings and statistics necessary to configure and monitor the operation of the AN-80i using a standard web browser. An operator can access and control the AN-80i remotely from any geographical location with HTTP connectivity to that unit. The following menu items are available for configuring and monitoring the PMP functions.
PAGE 44
AN-80i 4.3 4.3.1 User Manual PMP Dashboard Display General Information The dashboard display at the top of all screens shows summary of important operational information including: the unit IP address, operating frequency, current time (web user's platform), wireless status, Ethernet status, and the radio temperature. Fig. 18: Web - PMP - Dashboard Display IP Address: Current IP address setting of this unit. Wireless Frequency: Current RF channel frequency. Time: Time obtained from user's Web browser.
PAGE 45
AN-80i 4.4 User Manual PMP General Information Screen The General Information screen provides details about the system and the Ethernet interface. See the General Information screen for details. Fig. 19: Web - PMP General Information Screen These fields are common for operation in PMP and PTP mode. See the General Information screen for details about these fields. 70-00072-01-10 Proprietary Redline Communications © 2011 Page 45 of 152 March 2, 2011 4Gon www.4Gon.co.uk info@4gon.co.
PAGE 46
AN-80i 4.5 User Manual PMP System Status Screen Click System Status in the main menu to view system, Ethernet statistics, and wireless interface statistics. Fig. 20: Web - PMP System Status Screen The following fields are specific to operation in PMP mode. See 3.3: PTP System Status Screen on page 28 for information on all other fields. Configured Stations: Number of Links defined (to subscribers). Configured Connections: Number of Connections defined for all subscribers.
PAGE 47
AN-80i 4.6 User Manual PMP Links Summary Screen Click Links Summary in the main menu to view system, Ethernet statistics, and wireless interface statistics. The Link Status Summary page displays information about all wireless links. This information includes: ID, name, status, and uplink/downlink statistics for SINADR, RSSI, burst rate, total blocks transmitted, and blocks retransmitted. This table also provides direct links to the link configuration and statistics pages. Fig.
PAGE 48
AN-80i 4.7 4.7.1 User Manual PMP System Configuration Screen Click Configure System in the main menu to view and adjust configuration settings for general system identification, Ethernet, and the wireless interface. The fields specific to PMP are highlighted. Ethernet Interface Use settings in the Ethernet section of the screen to configure the AN-80i Ethernet interface. These fields are common for PTP and PMP modes of operation with the following exceptions: Flow Control: PTP only.
PAGE 49
AN-80i User Manual by the subscriber (displayed as Remote Frequency Ranges on the subscriber). The downloaded range settings are used exclusively by the subscriber during autoscan and remain in effect until the subscriber is rebooted (setting are discarded at reboot. PMP SS: When no frequency ranges are entered (default), the subscriber scans all available frequency ranges for that region (refer to 9.5: Regional Codes on page 144).
PAGE 50
AN-80i 4.7.3 User Manual Wireless Security Use these settings to configure the AN-80i wireless security features. Fig. 23: Web - PMP - Wireless Configuration Screen Encryption Type: Select an encryption type for data transmitted over the wireless interface. All units in a sector must be set to the same encryption type. None: Encryption is disabled.* AES 128: Advanced Encryption Standard using 128-bit encryption. AES 192: Advanced Encryption Standard using 192-bit encryption.
PAGE 51
AN-80i 4.8 4.8.1 User Manual PMP Link Screens Links Browse Screen Click Links in the main menu to display the links browse screen. This is a list of all configured wireless links. Click New Links in the main menu to create a link. Fig. 24: Web - PMP - Links Browse Screen ID: Unique number identifying each link. Name: User-assigned name for each link. Status: Field indicates the current status of the wireless link. Up: The subscriber is registered. Down: The subscriber is not registered.
PAGE 52
AN-80i 4.8.2 User Manual Link Configuration Use this screen to display and modify existing link settings. Access existing links through the Links Browse screen or click New Links in the main menu to add a new link. Fig. 25: Web - PMP - Link Configuration Screen Link Name: Enter a unique name to identify this wireless link. This identifier is displayed on configuration and statistics screens.
PAGE 53
AN-80i User Manual Adaptive Modulation: Select the adaptive modulation mode. The adaptive modulation feature provides automatic adjustments to maintain wireless link operation during periods of transient interference, power variations (fade), and reflections. This feature is enabled and disabled individually for each Subscriber Link. Enabled ( ):Automatically adjust the modulation and coding to achieve the highest throughput where packet error rates (PER) are lower than a pre-set value.
PAGE 54
AN-80i 4.8.3 User Manual Link Statistics The Link Statistics screen is accessible only from the Links browse screen (refer to 4.8: PMP Link Screens on page 51). Click Links in the main menu to locate the desired link and then click Status to display the link statistics screen. Fig. 26: Web - PMP - Link Statistics Screen General Link Name: User-assigned name for this link. Link ID: Unique number identifying this link. Peer MAC: MAC Address of the subscriber.
PAGE 55
AN-80i User Manual Blocks Blocks Total: Total number of blocks transmitted over the wireless interface. Blocks Retransmitted: Number of blocks retransmitted over the wireless interface. Blocks Discarded: Number of blocks discarded (could not be sent over the wireless). Controls Refresh: Click Refresh (bottom left) to update the statistics display. Reset: Click Reset (top right) to zero the counters for the wireless and Ethernet LAN Statistics displayed on this page.
PAGE 56
AN-80i 4.9 4.9.1 User Manual PMP Group Screens Groups Browse Screen Click Groups in the main menu to display the Groups browse screen. This is a list of all configured Groups. Click New Group in the main menu to create a Group. The Group configuration defines how Ethernet packets are handled on the sector controller. A unique Group must be created for each VLAN. Fig. 27: Web - PMP - Groups Browse Screen ID: Unique number identifying each Group. Name: User-assigned name for each Group.
PAGE 57
AN-80i 4.9.2 User Manual Group Configuration Click New Group in the main menu to display the Group Configuration screen and define a new Group. Use the Group browse screen (refer to 4.9 PMP Group Screens on page 56) to view/modify existing Groups. Click Groups in the main menu to locate the desired Group and then click Config to display the Group Configuration screen. Fig. 28: Web - PMP - Group Configuration Screen Wireless Group Group Name: Enter a unique name to identify this group.
PAGE 58
AN-80i User Manual The Group Default Priority value is used when adding the 802.1Q tag (Connection VLAN ID) to a packet being forwarded only when the Group Tagging Mode is 'pass-through' and the destination Connection Tagging Mode is set to 'Tagged'. SC ethernet enable: Controls the function of the sector controller Ethernet port for group multicast traffic. Enabled ( ): Broadcast and multicast traffic received from subscribers is forwarded over the sector controller Ethernet port.
PAGE 59
AN-80i 4.9.3 User Manual Group Statistics Use the Group statistics screen to view statistics for all downlink traffic on Connections to this Group. Click Groups in the main menu to display the Groups browse screen. Click Status to display downlink statistics for a Group. Fig. 29: Web - PMP - Group Statistics Screen General Group Name: Name assigned to this Group. Group ID: Unique numeric identifier for this Group.
PAGE 60
AN-80i 4.10 User Manual PMP Connection Screens 4.10.1 Connections Browse Screen This is a list of all configured Connections. Click New Connection in the main menu to create a connection. The Connections browse screen is accessible from the Links browse screen (refer to 4.8: PMP Link Screens on page 51). Click Links in the main menu to locate the desired link and then click Expand to display the Connections browse screen. The Connections are displayed sorted by Link.
PAGE 61
AN-80i User Manual 4.10.2 Connection Configuration Screen Click New Connection in the main menu to display the Connection Configuration screen and add a new connection (Link + Group). Use the Links browse screen (refer to 4.8: PMP Link Screens on page 51) to view/modify existing Connections. Click Links in the main menu to locate the desired link and then click Expand to display the Connections browse screen. Click Config to display the Connection Configuration screen.
PAGE 62
AN-80i User Manual Connection VLAN ID: Enter the VLAN ID tag associated with this Connection definition. This field is used only when 'Tagged' is selected in the Connection Tagging Mode field. Default priority: Enter the default 802.1p priority setting. The default priority setting is used only when Connection Tagging Mode is 'pass-through' and the associated Group Tagging Mode is 'Tagged'. The Connection Default Priority value is 5. Parent Link ID: The connection is assigned to this subscriber link.
PAGE 63
AN-80i User Manual Wireless Traffic Parameters DL QoS Level: Enter the QoS level for downlink unicast traffic for this connection. UL QoS Level: Enter the QoS level for uplink unicast traffic for this connection. It is strongly recommended to calculate QoS levels using the Redline PMP Configuration Tool (contact your Redline representative to obtain a copy of this tool).
PAGE 64
AN-80i User Manual 4.10.3 Connection Statistics The Connection Statistics screen is accessible only from the Connection browse screen (refer to 4.10.2: Connection Configuration Screen on page 61). Use the Connection Statistics screen to view statistics for all uplink and downlink traffic on the selected Connection. Click Links in the main menu to locate the desired link and then click Expand to display the Connections browse screen.
PAGE 65
AN-80i User Manual Chapter 5 5 Common Web Screens 5.1 System Log Screen This section describes the screens common for PTP and PMP operation. Click System Log in the main menu to view the system activity and error messages recorded by the AN-80i. Fig. 36: Web - System Log Messages Log Controls Clear Log: Click to erase all messages from the system log file. Refer to Table 52: Diag. - System Log Messages on page 113 for a brief description of the key system messages.
PAGE 66
AN-80i 5.2 User Manual Users Management Screen Click Users Management in the left hand menu to display the System Password screen. This screen allows the operator to modify the system passwords. Fig. 37: Web - System Password Screen The AN-80i supports administrator and user accounts. See 7.5: Factory Default Settings on page 116 for the factory default login values. See Table 7: PTP & PMP - User Access on page 68 for permissions associated with each group.
PAGE 67
AN-80i User Manual authorization is changed on the RADIUS server, it may be up to ten minutes (max.) before the AN-80i is updated. 5.2.1 System Users Index: Unique reference number (auto-generated) for this user. User Name: User-assigned login name for this user. Group: Indicates the group associated with this user. See Table 7: PTP & PMP - User Access table. 5.2.2 Change User Settings Use this dialog to change the settings for an existing user.
PAGE 68
AN-80i 5.2.5 User Manual User and Admin Account Permissions The following table lists the permissions associated with each group. Table 7: PTP & PMP - User Access Matrix for Web Screens Admin Access User Access General Information X X View general system identification and configuration settings. √ System Status X X View system, Ethernet, and wireless statistics. √ √ System Log X X View the system status messages.
PAGE 69
AN-80i 5.3 5.3.1 User Manual Configuration Screens The following screens are available for configuring features selected on the PTP and PMP system configuration screen. RADIUS Setup Screen When Radius or Local + RADIUS is checked on the system configuration screen, click the blue text [Configure Radius] adjacent to this selection to display the Radius Configuration screen. Fig.
PAGE 70
AN-80i User Manual Table 8: PTP & PMP - Required FreeRadius Files 5.3.2 Action File File Entry Define an AN-80i client. clients.conf client 192.168.0.0/16 {secret = secret shortname = AN80i } Add an account of type: admin users.conf admuser Auth-Type := Local, User-Password == "abc" Service-Type = Administrative-User Add an account of type:user users.conf usrjoe Auth-Type := Local, User-Password == "pass" Service-Type = NAS-Prompt-User Reject an account. users.
PAGE 71
AN-80i User Manual and should be changed to ensure secure access to AN-80 data and management functions. SNMP Community Editor Screen Click the Change or Add links to modify the associated SNMP settings. Fig. 40: Web - SNMP Configuration Screen - Communities Management Community Name: Displays the SNMP community name for each entry. The AN-80i supports up to eight separate community strings. Access: Displays the access permissions for each SNMP community.
PAGE 72
AN-80i User Manual SNMP v3 Security SNMP v3 supports authentication and privacy settings to ensure secure management when using SNMP. These security methods are associated with AN-80i user accounts. Note: FIPS mode operation requires SHA authentication and AES privacy. SNMP Community Security Settings Use this section of the screen to view and modify SNMP v3 authentication and privacy. Fig. 42: Web - SNMP Configuration Screen - v3 Configuration Security Name: User name of account.
PAGE 73
AN-80i User Manual Security Name: name of the selected account to use for SNMP v3 requests. Authentication Method: Select the access permissions for this entry. MD5: MD5 (Message-Digest algorithm 5) is a cryptographic hash function with a 128-bit hash value (RFC 1321). SHA: SHA (secure Hash Algorith) is a set of cryptographic hash functions. Privacy Method: Select the access permissions for this entry. None: Deny read and write permission for this entry.
PAGE 74
AN-80i User Manual SNMP Trap Editor Screen Click the Add button in the SNMP Traps Management section of the SNMP Configuration screen to modify the associated SNMP trap settings. Fig. 45: Web - SNMP Traps Management - SNMP V2/V3 Editor Screens Index: Display the table position index for this entry. Position 0 is the first entry. IP Address: Enter the IP address (IPv4) associated with this SNMP trap alarm. Port: Enter the destination port address associated with this SNMP trap alarm.
PAGE 75
AN-80i 5.3.3 User Manual Frequency Range Settings Frequency Ranges: C Click the blue text Frequency Ranges (on the system configuration screen ) adjacent to the Auto Scan selection to display the Frequency Management screen. Up to 32 frequency ranges may be entered. Settings entered on the PTP Master (PMP SC) will be downloaded and used by the PTP Slave (PMP SS) if Auto scan is enabled. Fig.
PAGE 76
AN-80i User Manual End: Upper limit of the frequency scan interval (MHz). Remote Frequency Ranges If values have been downloaded, these settings will be used when recovering from a loss of registration. This list is not saved permanently, and is discarded when the unit is rebooted. Controls Reload: Reload and display the saved (Local) scan intervals. Unsaved changes are discarded. Test: Check the validity of the current range settings in the Local Frequency Range list.
PAGE 77
AN-80i 5.4 User Manual Product Options Screen Click Product Options in the left hand menu to display the Product Options screen. The options keys (a string of numbers, letters, and dashes) enable AN-80i features including the maximum uncoded burst rate and frequency ranges (region codes). Options key are unique to a specific AN-80i (keyed to MAC address).
PAGE 78
AN-80i 5.5 5.5.1 User Manual Spectrum Sweep Screen Overview Use the AN-80i Spectrum Sweep feature to determine if RF spectrum is free from interference. Configurable survey settings allow you to scan a specific frequency range - specifying both the step size and the number of samples at each step. When the sweep is completed, an output graph displays the average (blue) and maximum (red) RSSI measured at each sample step.
PAGE 79
AN-80i User Manual Hint: Login to the remote PTP Master or PMP sector controller, uncheck ( ) the Radio Enable setting, and click Test. The radio will be disabled and the wireless link will be lost. The radio is automatically re-enabled after approximately 5 minutes. 2. Click on Spectrum Sweep in the main menu. It is recommended to scan using the smallest available channel with a step size of 1/2 the channel size (e.g., use a 5 MHz step size when scanning for a free 10 MHz channel). 12. For example: 13.
PAGE 80
AN-80i 5.6 User Manual Upload Software Screen Click Upload Software in the left hand menu to display the Upload Software screen. This screen is used to upgrade the AN-80i with new software. The AN-80i contains nonvolatile storage for two versions of the software. The upload overwrites the nonoperational (unselected) version. Fig. 50: Web - Upload Software Screen Transfer Protocol: Select the type of server: TFTP: Use Trivial File Transfer Protocol for file upload.
PAGE 81
AN-80i User Manual 4. Click Upload File to begin the file transfer. The transfer and saving operation may require up to eight minutes based on the data transfer rate. Do not interrupt the transfer process. 5. When the transfer is complete, the AN-80i checks the integrity of the uploaded file and registers a status message in the event log. If the upload is completed successfully, the following message is displayed on the screen: 17. Upgrade Status: Ended successfully 18.
PAGE 82
AN-80i User Manual Chapter 6 6 CLI Interface This section describes the procedures for configuring and operating the AN-80i using CLI over a Telnet Connection. All commands are case-sensitive. Use the following general format: command Online help is available for all commands, and the Tab key can be used for autocomplete functions. The following table lists all AN-80i commands available from root mode (default mode when you login).
PAGE 83
AN-80i User Manual Table 10: CLI - Root Mode Commands 6.1 6.1.1 PTP PMP Command Description √ √ Tab When entering a command, hit the Tab key at any time to perform auto-complete or view available options. √ √ ? √ √ CTRL-Z Use the '?' character to display help for any command or mode. Example: From the root directory, enter the following command to list all parameters that can be changed using the 'set' command: set? Return to root mode.
PAGE 84
AN-80i 6.1.2 User Manual Chgver Use the chgver command to change the software version loaded when the AN-80i is rebooted. Table 12: CLI - chgver Use this command to switch to alternate software version. chgver (no options) Switch to the binary saved in the alternate version of software. This command works silently (no operator confirmation) and the AN-80i reboots immediately. Note: Use 'get swver' to list the active and alternate versions of software. 6.1.
PAGE 85
AN-80i User Manual Table 14: CLI - del mode Specify the type of information to display. usr User entered files (default if type is not specified). factory Factory default files (requires hardware jumper selection). fips FIPS mode files. Refer to page 118 for a complete description of this feature. id Remove a Group, Connection, or Link table entry. id Unique number for Group, Connection, or Link. folder Remove all files from the specified table.
PAGE 86
AN-80i 6.1.7 User Manual Generate Use the generate command to generate a DSA or RSA key for use with SSH. Table 17: CLI - generate Create keys of the specified type. The keys are saved in flash and runtime memory. generate The AN-80i will generate a key using its own encryption engine. sshkey dsa Generate DSA key for SSH. rsa Generate RSA key for SSH (not used in v4.00 and higher). Note: RSA is not used for SSH connections in v4.00 and higher. 6.1.
PAGE 87
AN-80i User Manual Table 19: CLI - get (PTP-Specific Commands) radiotemp: Radio temperature. rflink: Link ID. rfstatus: Status RF transmitter. rssimax: Maximum RSSI. rssimean: Mean RSSI. rssimin: Minimum RSSI. sinadr: Ration of signal to interference + noise. txstatus: State of the wireless interface (FIPS mode only. ). Radio is disabled on failure of any security check (hardware, firmware, software). Off - Wireless security has disabled the transmitter. On - Wireless security has enabled the transmitter.
PAGE 88
AN-80i User Manual Table 20: CLI - get (PMP-Specific Commands) lrcon: Number of Link registered Connections. lscode: Link status code. lulblk: UpLink total blocks counter. lulbr: UpLink burst rate. luldblk: UpLink discarded blocks counter. lullfr: UpLink lost frames counter. lulrblk: UpLink retransmitted blocks counter. lulrssi: UpLink RSSI. lulsnr: UpLink SINADR. luptime: Link up-time. regconn: Number of configured Connections. regstations: Number of configured stations.
PAGE 89
AN-80i User Manual Table 21: CLI - load For example: dsa_key_00-09-02-00-01-02.pem RSA is not used for SSH Connections in v4.00 and higher. * ** Not used in v3.00 software release. Specify where to store the security information. usr User entered files (default if type is not specified). factory Default files. fips FIPS mode files. For example: load file 192.168.25.10 ssl_key_00-09-02-00-b2-73.pem usr tftp idtable (no parameters) Load all IDs from flash memory (PMP only).
PAGE 90
AN-80i User Manual Table 23: CLI - new id - Specify a unique ID for this link: 6.1.12 Ping Use the ping command to initiate an ICMP ping command from the AN-80i. Table 24: CLI - ping Send an ICMP ping command. This can be used to confirm network access to FTP/TFTP servers, syslog servers, etc. ping IP address IP address of target. Number of Packets Number of ICMP packets to send (1 to 16). 6.1.13 Reboot Use the reboot command to reboot the AN-80i software.
PAGE 91
AN-80i User Manual Table 27: CLI - save Idtable (PMP only). idtable Save current idtable settings (PMP only). snmp Save current SNMP settings. 6.1.16 Script Use the script command to save a file containing a string of Commands that can be used to restore the current (active) configuration of the AN-80i. Saved configuration files can be viewed, copied, and/or modified using a text editor. The file will be saved in the TFTP default directory.
PAGE 92
AN-80i User Manual Table 29: CLI - set (Common for PTP and PMP) Enable or disable the Autoscan function. off - Disable on - Enable When enabled, the PTP Subscriber (system mode) AN-80i automatically scans available channels to locate the current operating frequency of the PTP Sector Controller system. Executing a set command this field on a PTP Sector Controller will generate an error message. buzzer Enable or disable the audible alignment buzzer.
PAGE 93
AN-80i User Manual Table 29: CLI - set (Common for PTP and PMP) on - Enable FIPS mode. gateway Enter the IP address of the default gateway on this segment. gmt Enter the time offset from GMT (e.g., -5 for EST). http Enable or disable the HTTP function. When disabled, the Web interface will not be available. off - Disable on - Enable https Enable or disable the HTTPS function. off - Disable on - Enable ipaddr Enter the IP address and subnet mask of the AN-80i.
PAGE 94
AN-80i User Manual Table 29: CLI - set (Common for PTP and PMP) on - Enable radius Configure the RADIUS server (allowed in FIPS mode). The first parameter for all commands must be the radius server identifier (1 or 2): ip <1 | 2> IP address of RADIUS server. 1 - Primary RADIUS server. 2 - Secondary RADIUS server. For example: Set the primary RADIUS server IP address and then set the secondary RADIUS server IP address: set radius ip 1 192.168.100.
PAGE 95
AN-80i User Manual Table 29: CLI - set (Common for PTP and PMP) sntppoll <1 - 24> Enter the SNTP polling interval in hours. Enter period in hours. ssh Enable or disable the SSH function. off - Disable on - Enable syscontact Enter additional descriptive details about this AN-80i. Enter up to thirty (30) alphanumeric characters including a-z, A-Z, 0-9, dash (-), and underscore (_). sysdescr Details about this AN-80i.
PAGE 96
AN-80i User Manual Table 29: CLI - set (Common for PTP and PMP) local - use local authentication. radius - Use the RADIUS server. x509auth Enable or disable authentication. off - Allow network connections without authentication. on - Require authentication using X.509 certificates. Table 30: CLI - set (PTP-Specific Commands) View and change PMP-specific parameters. set atpc Enable or disable the ATPC function.
PAGE 97
AN-80i User Manual Table 30: CLI - set (PTP-Specific Commands) will be automatically re-enabled to allow management of the AN-80i. flowctrl Enable or disable the flow control function. The Flow control feature enables the AN-80i to request other Ethernet devices to pause transmission during busy periods. off - Disable on - Enable mrate <1 - 54> Maximum uncoded burst rate (Mbps). Maximum value is set by the options key. Entry values are dependent on the channel bandwidth (chwidth).
PAGE 98
AN-80i User Manual Table 31: CLI - set (PMP-Specific Commands) conlid Link associated with this Connection. id - Connection ID number. lid - Link ID number. conpri <0 - 7> Connection default priority. id - Connection reference ID number. convid <1 - 4095> Set or show a Connection's VLAN ID id - Connections reference ID number. conviden Enable or disable VLAN connections. id - Connection ID number. on - VLAN is enabled. off - VLAN is disabled.
PAGE 99
AN-80i User Manual Table 31: CLI - set (PMP-Specific Commands) id - Group reference ID number. grppri Group default priority. id - Group reference ID number. pri - Group 802.1p priority setting. grpvid Group VLAN ID. id - [id number] vid - VLAN ID grpviden Group VLAN enable. id - [id number] off - Disabled on -Enabled idname View or modify the name associated with an ID. id - ID for Link, Connection, or Group. name - Name (maximum 15 text characters).
PAGE 100
AN-80i User Manual Table 31: CLI - set (PMP-Specific Commands) Link maximum uplink uncoded burst rate. id = Link ID number. 6.1.18 Show Use the show command to display system statistics. show Change to 'show' mode. show [field] Display values for the selected parameter. Table 32: CLI - show (Common PTP and PMP Commands) Display PTP system parameters and statistics. show config List system configuration information.
PAGE 101
AN-80i User Manual Table 33: CLI - show (PMP-Specific Commands) links 98 99 100 101 Data Voice Data Voice B B C C Conn Conn Conn Conn Enabled Enabled Enabled Enabled Display information for all Links. 192.168.25.2(show)# links 4 Sub A Link Down 5 Sub B Link Down 10 15 Sub C Sub D Link Link Down Down 6.1.19 Snmpcommunity Use the snmpcommunity command to configure SNMP community permissions. Table 34: CLI - snmpcommunity Configure SNMP community permissions.
PAGE 102
AN-80i User Manual Table 35: CLI - snmptrap Create a new SNMP trap. The index value is assigned automatically. Up to eight settings may be entered. ipaddr Enter destination IP address port Enter destination port address. identity v2: Enter associated SNMP community string. v3: Enter account username for authorization. change [-p ] [-i ] [-c ] [-u username] Modify the specified SNMP setting. idx Index of the SNMP trap (use 'print' command to display ids).
PAGE 103
AN-80i User Manual 6.1.22 Upgrade Use the upgrade command to upload a new software binary file to the AN-80i. Table 37: CLI - upgrade Configure SNMP community permissions. upgrade ip addr IP address of the FTP/TFTP server. file name Name of the binary file to be uploaded. user name FTP account name (FTP server only). password FTP account password (FTP server only).
PAGE 104
AN-80i User Manual Table 38: CLI - user Designate an authentication method and privacy method to be used for SNMP v3 requests. An authentication method must be selected to enable usage of the privacy method. Only combination SHA authentication + AES privacy is valid in FIPS mode. username - Account to setup for SNMP v3 authorization. chgpasswd Administrators can change the password of any account. Users can change only their own password. Users are prompted to enter new password information.
PAGE 105
AN-80i User Manual Chapter 7 7 Diagnostics and Troubleshooting 7.1 Long Reset (Recover from Lost IP or Password) This section provides basic diagnostic and troubleshooting procedures to help solve problems that may occur with the system. If the system is not operating correctly after applying the suggestions in this section, please contact your local Redline representative. Include the model name and serial number of the system in your communications.
PAGE 106
AN-80i User Manual 6. Reboot the unit to exit from long reset mode. Notes: 7. If a login prompt does not appear in step 4, re-enter the Telnet command during the 30 second interval until the command prompt appears. If this is not successful, repeat steps 1 to 4 using an initial wait time of 70 to 90 seconds). 8. When the operator performs a login (Telnet or Web browser) during a long reset session, the usernames and passwords for the administrator and user are automatically reset to default values.
PAGE 107
AN-80i User Manual 4. Wait for the reboot to complete (10 seconds) and login to the AN-80i using the default IP address (192.168.25.2) and the default administrator username (admin) and password (admin). 7.2 Testing and Saving System Parameters The AN-80i is a highly configurable communications device. All user settings are saved in non-volatile RAM. The system configuration and SNMP settings are saved separately. 7.2.1 CLI Interface Use the 'test' command to have the AN-80i load the edited settings.
PAGE 108
AN-80i User Manual If the ping test is successful, the host computer was able to send and receive packets to/from the AN-80i. The problem may be with the Internet browser or related settings on the host computer. Reboot the host computer to try to resolve the problem. If the ping is unsuccessful, there may be problems using that IP address; the IP address may be incorrect, or there may be a duplicate address. For correct operation the host computer and the AN-80i must be on the same subnet.
PAGE 109
AN-80i User Manual Ethernet 100 LED The Ethernet 100 LED lights solid green when the Ethernet port is operating at 100 Mb/s and is off when operating at 10 Mb/s. If the LED is off, it may indicate one of the problems listed in the following table: Table 42: Diag. - PTP Ethernet 100 LED Diagnostics Symptom Ethernet 10 Mbps Possible Problem Solution Unit is manually set for 10Base-T operation and connected device is operating at 100Base-T or autonegotiate.
PAGE 110
AN-80i User Manual Wireless Link LED The PTP wireless Link LED lights solid green when the wireless link is established. If the LED is off, it may indicate one of the problems listed in the following table: Table 45: Diag. - PTP Wireless Link LED Diagnostics Symptom No wireless link Possible Problem Solution Link name does not match. Enter identical Link Name field settings on master and slave units (may be blank). Remote system is malfunctioning or is not powered-on.
PAGE 111
AN-80i 7.4 7.4.1 User Manual Status Codes PTP Status Codes The PTP status code is displayed in a series of decimal characters representing the status of six different alarm conditions. The value '1' indicates the associated condition is active. All unused bits are set to zero. To determine the status, the decimal number must be converted to binary notation. Table 48: Diag. - PTP Status Codes Error Type Error # Decimal* Error # Binary Description Tx Power 1 1 RF High Temp.
PAGE 112
AN-80i User Manual Table 50: Diag. - PMP Status Codes Description Bit 7.4.3 1 Radio over-temperature 4, 5, 6 PLL Errors 8 Firmware Error 16 No Ethernet packets received by the wireless MAC 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 MAC Internal Errors FIPS Status Codes The PMP status code is displayed in a series of hexadecimal characters representing the status of different alarm conditions. The value '1' indicates the associated condition is active. All unused bits are set to zero.
PAGE 113
AN-80i 7.4.4 User Manual System Log Messages The following table provides a brief description of the key system messages. Table 52: Diag.
PAGE 114
AN-80i User Manual Table 52: Diag.
PAGE 115
AN-80i User Manual Table 52: Diag.
PAGE 116
AN-80i 7.5 User Manual Factory Default Settings Table 53: Diag. - Factory Default Settings Web Field activekey Active Key adaptmod Adaptive Off antgain Antenna Gain 30 atpc ATPC autoscan Autoscan Off buzzer Buzzer Off chwidth Channel Width dfsaction DFS Action dst Link Length PTP Based on Key: Key = No change No Key = 10 MHz Based on Key: Req.
PAGE 117
AN-80i User Manual Table 53: Diag. - Factory Default Settings Key Control PTP 1 CLI Parameter Web Field pllm radio Prioritized Low Latency Radio Enable radius RADIUS ratedif regper Modulation Reduction Level Registration Period rffreq RF Freq. (MHz) Based on options key. snmp SNMP Unchanged snmpcommunity snmptraplink SNMP Community Strings SNMP Traps "Public".
PAGE 118
AN-80i User Manual Chapter 8 8 Security 8.1 Overview The Redline AN-80i provides a high level of security and reliability. Security sensitive institutions including banks, military, government groups, and large corporations have tested and approved the AN-80i as meeting their strict requirements for network operations. There are two primary modes of operation for the AN-80i: Standard Security: Wireless authentication using X.
PAGE 119
AN-80i User Manual specifies a cryptographic algorithm for use by U.S. Government organizations to protect sensitive information. The AES block cipher has been ratified as a standard by National Institute of Standards and Technology of the United States (NIST). The AN-80i also supports a Redline engineered proprietary encryption scheme based on private-key proprietary algorithms.
PAGE 120
AN-80i 8.2 User Manual Standard Security Mode This section describes using the AN-80i security features in standard (non-FIPS) mode. Important: When operating in standard security (non FIPS) mode, the wireless authentication, SSH, and HTTPS algorithms use only certificate and key files loaded in the user (usr) table. 8.2.1 Wireless Authentication Wireless authentication is a standard feature on all AN-80i systems. Out-of-Box Operation Wireless authentication is not supported out of box.
PAGE 121
AN-80i User Manual ... 192.168.25.2# set x509auth on 192.168.25.2# save config 8.2.2 Redline 64-bit Encryption (PTP Only) Redline proprietary 64-bit wireless encryption is a standard on all AN-80i PTP systems. Out-of-Box Operation The AN-80i provides out-of-box wireless encryption using the Redline proprietary encryption scheme based on private-key proprietary algorithms. This encryption method is also compatible with AN-50e equipment.
PAGE 122
AN-80i User Manual 4. Choose the same AES encryption setting on both AN-80i systems. A data link can be established only between systems with identical security settings. Web: Configuration screen -> Wireless Security Configuration: Encryption Type (None, 64-Bit, AES 128, AES 192, AES 256) 5. Save the configuration to active changes. 8.2.4 SSH for Secure CLI SSH is a standard feature on all AN-80i systems.
PAGE 123
AN-80i User Manual dsa_key.pem size=672 192.168.25.2# 192.168.25.2# reboot md5=fa9bd7a1f465fd7e9fed30150b0608c4 SSH Key Generate Utility Use the Command 'generate sshkey dsa' to create a DSA key and save this file in the user (usr) table. This key file will be persistent through reboots. After executing the generate command, the AN-80i must be rebooted to activate the new key. Example: Generate a new DSA key file. 192.168.25.2# generate sshkey dsa 192.168.25.2# reboot 8.2.
PAGE 124
AN-80i User Manual Maximum 2048 bits. Filename must be formatted as follows: ssl_key_.pem 2. Copy the key files to the default directory on a TFTP server. 3. Use the CLI 'load' command to load the RSA key and certificate. It is recommended to use the local Ethernet port when transferring encryption keys and certificates to the AN-80i. 4. Use the command 'show files usr' to verify the files have been successfully loaded. 5. Reboot the AN-80i to activate changes to the key files.
PAGE 125
AN-80i 8.3 User Manual FIPS - High-Security Model FIPS operation is an optional feature for AN-80i systems. The FIPS option provides very high security for physical, data, and management when using the AN-80i equipment. FIPS supports the strongest standards based encryption for information secrecy and integrity against eavesdropping.
PAGE 126
AN-80i User Manual SNMP: Off (or v3) Telnet: SSH: Off On 3. Enable FIPS Bypass Mode FIPS mode can be enabled after all user accounts have been made compliant to the FIPS security policy, and management access has been restricted to SSH. Web: Configuration screen -> Wireless Security Configuration: FIPS Mode Enable CLI: set fipsmode on Save the configuration to activate changes. If all conditions for FIPS mode are satisfied, the AN-80i will reboot and enter FIPS mode.
PAGE 127
AN-80i User Manual The FIPS Status screen provides a summary of the all FIPS related operations, policies, and parameter settings. The following example screen indicates that the user accounts do not comply with the FIPS security policy (and HTTPS is enabled). Fig. 54: Security - FIPS Status Popup - Invalid Account Setup 8.3.2 FIPS: Wireless Authentication The FIPS mode option includes wireless authentication using X.509 certificates, and AES encryption.
PAGE 128
AN-80i User Manual Example Use the TFTP server at IP address 192.168.25.1 to load certificate and key files generated for the AN-80i with MAC address 00 09 02 01 C1 9A. 192.168.25.2# load file 192.168.25.1 usr_wacert_00-09-02-01-C1-9A.der fips tftp 192.168.25.2# load file 192.168.25.1 usr_wcert_00-09-02-01-C1-9A.der fips tftp 192.168.25.2# load file 192.168.25.1 usr_wkey_00-09-02-01-C1-9A.der fips tftp 192.168.25.2# show files fips dsa_key.pem size=672 md5=fa9bd7a1f465fd7e9fed30150b0608c4 usr_ssl_key.
PAGE 129
AN-80i User Manual The self-generated key appears in the FIPS (fips) table, but is not permanent and a new key is generated on each reboot. This feature is disabled when a user-generated key has been loaded, or a key has been created using the CLI 'generate' command. Enable SSH SSH is disabled by (factory) default.
PAGE 130
AN-80i User Manual Out-of-box Operation Out-of-box, HTTPS access does not meet the security standards for FIPS security mode (embedded certificate and key are i dentical for all units). Each AN-80i system to use HTTPS in FIPS mode must meet the following requirements: 1. AN-80i software with FIPS support is loaded and operational. 2. FIPS mode must be active (see FIPS Mode Out-of-Box Operation). 3. X.509 certificate and key files for HTTPS (SSL) must be loaded in the FIPS table.
PAGE 131
AN-80i User Manual Fig. 55: Security - System Status - FIPS Status The FIPS Status screen provides a summary of all FIPS related operations, policies, and parameter settings. The FIPS Mode status selection is available only in FIPS-enabled systems (see FIPS Mode Out-of-Box Operation). Fig. 56: Security - FIPS Status - FIPS Mode Active 8.3.6 FIPS Behavior Certificate and Key Files When FIPS mode is active, only certificate and key files in the FIPS (fips) table are used by the AN-80i.
PAGE 132
AN-80i User Manual Long Reset If the operator can not access the AN-80i management interface (unknown IP, username, and/or password), a long reset operation must be performed to provide access using the default IP, username and password. The long reset can only be invoked by an operator having physical access to the AN-80i Ethernet port and power source (e.g., PoE adapter). Wireless service is interrupted while the system is poweredoff and then rebooted.
PAGE 133
AN-80i User Manual Table 55: Security: User (usr) Keys and Certificate Files dsa_key_.pem Standard mode: Ethernet: SSH: DSA Key ssl_cert_.pem Standard mode: Ethernet: HTTPS: SSL X.509 Certificate ssl_key_.pem Standard mode: Ethernet: HTTPS: SSL Key usr_wacert_.der Standard mode: Wireless: Authentication: X.509 Authority usr_wcert_.der Standard mode: Wireless: Authentication: X.509 Unit Certificate usr_wkey_.
PAGE 134
AN-80i User Manual Chapter 9 9 Appendices 9.1 AN-80i Technical Specifications Table 58: Spec. - AN-80i Technical Specifications T35 Radio: RF Band: Rx Sensitivity: Center Freq. Steps: Channel Size: T49 Radio: RF Band: Rx Sensitivity: Center Freq. Steps: Channel Size: T54 Radio: RF Band: Rx Sensitivity: Center Freq. Steps: Channel Size: T58 Radio: RF Band: Rx Sensitivity: Center Freq.
PAGE 135
AN-80i User Manual Table 58: Spec. - AN-80i Technical Specifications Node Authentication: Network Attributes: X.509 certificates 802.3x Ethernet flow control DHCP pass-through, transparent bridge 6 802.1p network traffic prioritization 7 802.
PAGE 136
AN-80i 9.2 9.2.1 User Manual Antenna & Mounting Bracket Matrix 3 GHz Antenna & Brackets The following table lists antennas and mounting brackets available from Redline. Table 59: Spec.
PAGE 137
AN-80i 9.2.3 User Manual Legacy Products The following products are listed for reference only. These items are discontinued and not available to order from Redline. Table 61: Spec. - AN-80i Legacy Antenna / Mounting Bracket Matrix Redline Order # Gain (Part Number) (dBi) A12015MTS A2014ARF A2209MTFD A2212AWFD A2212RWP A2310AWF A2510PWP A2804MTF A2806RWP A3104RWP A6015MTS A6017RWS A9014MTS A9016RWS 70-00072-01-10 15 20 22 22 22 23 25 28 28 31.2 16 17 14 16 Type 120° panel 13.
PAGE 138
AN-80i 9.3 9.3.1 User Manual ETSI Certified Antennas The RF output power and selection must be professionally programmed and installed by the manufacturer or a trained professional installer. 5.8 GHz Radio: ETSI Certified Antennas The following table lists ETSI certified 5.8 GHz antennas. Operation is restricted to 10 MHz and 20 MHz channel operation only. Table 62: Spec. - ETSI Certified Antennas: 5.8 GHz Operation 9.3.
PAGE 139
AN-80i 9.3.3 User Manual 5.15 - 5.35 GHz Radio: ETSI Antennas The following table lists ETSI certified 5.15-5.35 GHz antennas. Table 64: Spec. - ETSI Certified Antennas: 5.15 - 5.35 GHz Operation Gain (dBi) Redline Order # (Part Number) A12015EAS (48-00065-00) A2209MTFW (48-00071-00) A6017EAS (48-00067-00) A9016EAS (48-00066-00) 9.3.4 Antenna Type App. Tx Power Setting (dBm) 15 120°, 4.9-5.9 GHz, sector flat panel PMP 3 22 9°, 4.9-5.875 GHz, flat panel PTP -4 17.5 62°, 4.9-5.
PAGE 140
AN-80i 9.4 9.4.1 User Manual FCC & IC Certified Antennas 5.8 GHz Radio: FCC & IC Antennas This device has been designed to operate with the antennas listed below, and having a maximum gain of 34.6 dBi. Table 66: Spec. - FCC & IC Certified Antennas: 5.8 GHz PTP Operation Redline Order # Gain (Part Number) (dBi) A2209MTFW (48-00071-00) A2804MTFW (48-00070-00) A2906PWP (48-00063-00) A3204PWP (48-00064-00) A3403RWP (48-00033-00) Description App. 22 9°, 4.9-5.875 GHz, flat panel PTP 28 4.5°, 4.9-5.
PAGE 141
AN-80i 9.4.2 User Manual 5.4 GHz Radio: FCC & IC Antennas This device has been designed to operate with the antennas listed below, and having a maximum gain of 22 dBi. Table 68: Spec. - FCC & IC Certified Antennas: 5.47-5.725 GHz Operation Redline Order # Gain (dBi) Description Tx Power Setting (dBm) 10 MHz 20 MHz 40 MHz (Part Number) A12015EAS (48-00065-00) A2209MTFW (48-00071-00) A36009MMO (48-00048-01) A6017EAS (48-00067-00) A9016EAS (48-00066-00) 15 120°, 4.9-5.
PAGE 142
AN-80i 9.4.4 User Manual 4.94 - 4.99 GHz Radio: FCC & IC Antennas This device has been designed to operate with the antennas listed in the following table, and having a maximum gain of 32 dBi. Table 70: Spec. - FCC & IC Antennas: 4.94 - 4.99 GHz Operation Redline Order # (Part Number) Gain (dBi) A12015EAS (48-00065-00) A2906PWP (48-00063-00) A3204PWP (48-00064-00) A6017EAS (48-00067-00) A9016EAS (48-00066-00) 15 29 32 17.5 16.6 Description App. Tx Power Settings (dBm) Channel Size (MHz) 120 deg., .
PAGE 143
AN-80i User Manual impedance is 50 ohms. The RF output power selection must be professionally programmed and the equipment must be installed by the manufacturer or a trained professional installer. 9.4.6 3.450-3.650 GHz Radio: IC Antennas The 3.450-3.650 GHz frequency range is a licensed band and operators must have a valid spectrum license to operate AN-80i equipment using this band in the Canada. Table 72: Spec. - IC Antennas: 3.450-3.
PAGE 144
AN-80i 9.5 User Manual Regional Codes The regional code is incorporated into the options key. This feature enforces compliance to regional regulatory statutes. The options keys (a string of numbers, letters, and dashes) enable AN-80i features including the maximum uncoded burst rate and frequency ranges (region codes). Options key are unique to a specific AN-80i (keyed to MAC address). Table 73: Spec.
PAGE 145
AN-80i User Manual Table 73: Spec. - Regional Identification Codes Regions Region 11 EU Radio DFS/CBP 1 Required Channel Size (MHz) Channel Step (MHz) CE .2 G 5.155 - 5.245 T49 No 10 20 40 10 20 40 2.5 2.5 2.5 2.5 2.5 2.5 5155 - 5245 5160 - 5240 5170 - 5230 5255 - 5345 5260 - 5340 5270 - 5330 10 20 40 2.5 2.5 2.5 5260 - 5340 5265 - 5335 5280 - 5320 10 20 40 2.5 2.5 2.5 5260 - 5340 5265 - 5335 5280 - 5320 3.
PAGE 146
AN-80i 9.6 9.6.1 User Manual PMP Packet Classification Classification at the Sector Controller The AN-80i PMP deployment can be configured for use with VLAN tagged traffic, untagged traffic, or a combination these two types. Ingress packets received on the sector controller Ethernet port are classified according to the criteria in the following table. These descriptions do not include management traffic for the AN-80i sector controller or subscriber. Table 74: Spec.
PAGE 147
AN-80i User Manual Table 75: Spec. - PMP Classification: Packet Received on SC Wireless Interface Service Group type: Tagged Known unicast address Priority: --- AND --Tag: destination is Ethernet Forward: port Known unicast address Forward: --- AND --destination is subscriber Rate: Use priority received with packet Add VLAN tag (outermost) for this Service (Q in Q). To sector controller Ethernet port 1. Retransmit packet unmodified over the wireless interface to the destination subscriber.
PAGE 148
AN-80i 9.6.2 User Manual Classification at the Subscriber The AN-80i PMP deployment can be configured for use with VLAN tagged traffic, untagged traffic, or a combination these two types. Ingress packets received on the subscriber Ethernet port are classified according to the criteria in the following table. Table 76: Spec. - PMP Classification: Packet Received on SS Ethernet Port VLAN tag matches a Service VID Known unicast Priority: Preserve original 802.1 priority.
PAGE 149
AN-80i 9.7 User Manual ID Map Beginning with v13.xx, all IDs must comply to ranges listed in the following table. The 'load script ...' command rejects all ID references greater than 511. Table 78: Spec. - Provisioning Table ID Ranges Provisioning Type Version 10.xx to 12.xx Version 13.xx ID Range ID Range 4 - 1024 64 - 95 Link 4 - 63 Group Connection 95 - 511 Note: When the v13.
PAGE 150
AN-80i 9.8 User Manual Glossary Of Terms Table 79: Spec. - Glossary Term Antenna Gain ARQ The measure of antenna performance relative to a theoretical antenna called an isotropic antenna. ATPC Automatic Transmission Power Control. The sector controller-end system automatically adjusts the RF transmit level of both systems to optimize performance of the link. Beamwidth The angle of signal coverage provided by an antenna. BFW Broadband Fixed Wireless Bps Bits Per Second.
PAGE 151
AN-80i User Manual Table 79: Spec. - Glossary Term 70-00072-01-10 Definition Modem MOdulator/DEModulator. A hardware device that converts digital data into analog and vice versa. Modulation Any of several techniques for combining user information with a transmitter carrier signal. Multipath The radio echoes created as a radio signal bounces off objects. NVRAM Non-volatile RAM. System parameters are stored in NVRAM. This data is not affected by powering off the system. NLOS Non Line Of Sight.
PAGE 152
70-00072-01-10 Proprietary Redline Communications © 2011 Page 152 of 152 March 2, 2011 4Gon www.4Gon.co.uk info@4gon.co.