PC and Server Configuration Figure 35: Active Directory Screen 6. Select the Group Policy tab, choose Default Domain Policy then click Edit. Figure 36: Group Policy Tab 7. Select Computer Configuration - Windows Settings - Security Settings - Public Key Policies, right-click Automatic Certificate Request Settings - New - Automatic Certificate Request.
Wireless Access Point User Guide Figure 37: Group Policy Screen 8. 9. When the Certificate Request Wizard appears, click Next. Select Computer, then click Next. Figure 38: Certificate Template Screen 10. Ensure that your certificate authority is checked, then click Next. 11. Review the policy change information and click Finish. 12. Click Start - Run, type cmd and press enter. Enter secedit /refreshpolicy machine_policy This command may take a few minutes to take effect.
PC and Server Configuration Internet Authentication Service (Radius) Setup 1. 2. Select Start - Programs - Administrative Tools - Internet Authentication Service Right-click on Clients, and select New Client. Figure 39: Service Screen 3. 4. 5. 6. 7. 8. Enter a name for the access point, click Next. Enter the address or name of the Wireless Access Point, and set the shared secret, as entered on the Security Settings of the Wireless Access Point. Click Finish.
Wireless Access Point User Guide 11. Click Edit Profile... and select the Authentication tab. Enable Extensible Authentication Protocol, and select Smart Card or other Certificate. Deselect other authentication methods listed. Click OK. Figure 41: Authentication Screen 12. Select No if you don't want to view the help for EAP. Click Finish.
PC and Server Configuration Remote Access Login for Users 1. 2. 3. Select Start - Programs - Administrative Tools- Active Directory Users and Computers. Double click on the user who you want to enable. Select the Dial-in tab, and enable Allow access. Click OK.
Wireless Access Point User Guide 802.1x Client Setup on Windows XP Windows XP ships with a complete 802.1x client implementation. If using Windows 2000, you can install SP3 (Service Pack 3) to gain the same functionality. If you don't have either of these systems, you must use the 802.1x client software provided with your wireless adapter. Refer to your vendor's documentation for setup instructions.
PC and Server Configuration Figure 44: Wireless CA Screen 5. Select User certificate request and select User Certificate, the click Next. Figure 45: Request Type Screen 6. Click Submit.
Wireless Access Point User Guide Figure 46: Identifying Information Screen 7. A message will be displayed, then the certificate will be returned to you. Click Install this certificate. Figure 47:Certificate Issued Screen 8. . You will receive a confirmation message. Click Yes.
PC and Server Configuration Figure 48: Root Certificate Screen 9. Certificate setup is now complete. 802.1x Authentication Setup 1. 2. 3. Open the properties for the wireless connection, by selecting Start - Control Panel Network Connections. Right Click on the Wireless Network Connection, and select Properties. Select the Authentication Tab, and ensure that Enable network access control using IEEE 802.1X is selected, and Smart Card or other Certificate is selected from the EAP type.
Wireless Access Point User Guide • Your network administrator can advise you of the correct settings for each network. 802.1x networks typically use EAP-TLS. This is a dynamic key system, so there is no need to enter key values. Enabling Encryption To enable encryption for a wireless network, follow this procedure: 1. Click on the Wireless Networks tab. Figure 50: Wireless Networks Screen 2. 3. Select the wireless network from the Available Networks list, and click Configure.
PC and Server Configuration Figure 51: Properties Screen Setup for Windows XP and 802.1x client is now complete.
Wireless Access Point User Guide Using 802.1x Mode (without WPA) This is very similar to using WPA-Enterprise. The only difference is that on your client, you must NOT enable the setting The key is provided for me automatically. Instead, you must enter the WEP key manually, ensuring it matches the WEP key used on the Access Point. Figure 52: Properties Screen Note: On some systems, the "64 bit" WEP key is shown as "40 bit" and the "128 bit" WEP key is shown as "104 bit".
Chapter 5 Operation and Status 5 This Chapter details the operation of the Wireless Access Point and the status screens. Operation Once both the Wireless Access Point and the PCs are configured, operation is automatic. However, you may need to perform the following operations on a regular basis. • If using the Access Control feature, update the Trusted PC database as required. (See Access Control in Chapter 3 for details.) • If using 802.
Wireless Access Point User Guide Figure 53: General Screen 60
Operation and Status Data - General Screen Access Point Information Access Point Name The current name will be displayed. MAC Address The MAC (physical) address of the Wireless Access Point. Country/Region The region or domain, as selected on the Basic Wireless screen. Firmware Version The version of the firmware currently installed. VLAN The current VLAN status will be displayed. Management VLAN ID The current VLAN ID used for management.
Wireless Access Point User Guide Activity Log If you have a Syslog Server on your LAN, this screen allows you to configure the Access Point to send log data to your Syslog Server. Figure 54: Activity Log Screen Data - Activity Log Screen Activity Log Window Current Time The system date and time is displayed. Log The Log shows details of the connections to the Wireless Access Point. Enable Syslog If enabled, log data will be sent to your Syslog Server.
Operation and Status Wireless Station List This screen is displayed when the Wireless Station List is clicked. Figure 55 Wireless Station List Screen Data - Wireless Station List Screen Wireless Station List Station ID The ID of each Wireless Station is displayed. MAC Address The MAC (physical) address of each Wireless Station is displayed. Type The type of each Wireless Station. SSID This displays the SSID used the Wireless station.
Wireless Access Point User Guide Statistics Screen This screen is displayed when the Statistics is clicked. It shows details of the traffic flowing through the Wireless Access Point.
Operation and Status Data - Statistics Screen Wired Ethernet Packets The number of packets transmitted to or received from the wired Ethernet. Bytes The number of bytes transmitted to or received from the wired Ethernet. Wireless Unicast Packets Unicast transmission, in which packets are sent or received from a single source to a specified destination Broadcast Packets Broadcast transmission, in which packets are sent or received from a single source to other destinations.
Chapter 6 Other Settings & Features 6 This Chapter explains when and how to use the Wireless Access Point's "Management" Features. Overview This Chapter covers the following features, available on the Wireless Access Point’s Management menu. • Change Password • Remote Management • Upgrade Firmware • Backup/Restore Settings • Reboot AP Change Password Screen The Change Password screen allows you to assign a password to the Wireless Access Point.
Other Settings & Features Restore Default Password Click Yes to clear and restore password settings to the factory default values. You will be prompted for the password when you connect, as shown below. Figure 58: Password Dialog Enter the User Name and Password, as set on the Change Password screen above.
Wireless Access Point User Guide Remote Management SNMP (Simple Network Management Protocol) is only useful if you have a SNMP program on your PC. To reach this screen, select Remote Management in the Management section of the menu. Figure 59: Remote Management Screen Data - Remote Management Screen Remote Management SNMP Enable or disable SNMP as required Public Community Name Enter the public community string, usually "Public".
Other Settings & Features Firmware Upgrade The firmware (software) in the Wireless Access Point can be upgraded using your Web Browser. You must first download the upgrade file, and then select Upgrade Firmware in the Management section of the menu. You will see a screen like the following. Figure 60: Firmware Upgrade Screen To perform the Firmware Upgrade: 1. 2. 3. Click the Browse button and navigate to the location of the upgrade file. Select the upgrade file.
Wireless Access Point User Guide Backup/Restore Settings This screen allows you to Backup (download) the configuration file, and to restore (upload) a previously-saved configuration file. You can also set the Wireless Access Point back to its factory default settings. To reach this screen, select Backup/Restore Settings in the Management section of the menu.
Other Settings & Features Restore Restore saved settings from a file If you have a previously-saved configuration file, you can use this to restore those settings by uploading the file. 1. Click the Browse button and navigate to the location of the configuration file. 2. Select the upgrade file. Its name will appear in the File field. 3. Click the Restore button to commence the upload. 4. The Wireless Access Point will need to restart, and will be unavailable during the restart.
Wireless Access Point User Guide Reboot AP To reach this screen, select Reboot AP in the Management section of the menu. Figure 62: Reboot AP Screen Data - Reboot AP Screen Reboot AP Reboot access point Click Yes to restart the Wireless Access Point.
Appendix A Specifications A Wireless Access Point Hardware Specifications CPU AR5312 Radio-on-Chip AR2112+AR5112 DRAM 16 Mbytes Flash ROM 4 Mbytes LAN port 1 x Auto-MDIX RJ 45 for 10/100Mbps PoE port IEEE 802.3af comliance 11G/B Network Standard IEEE 802.11b (Wi-Fi™) and IEEE 802.11g compliance Operating Frequencies 2.412. - 2.462GHz(FCC), 2.412. - 2.472GHz(EU) 11A Network Standard IEEE 802.11a compliance Operating Frequencies: FCC: 5.15 - 5.25GHz, 5.725 - 5.825GHz Europe: 5.15 - 5.35GHz, 5.
Wireless Access Point User Guide Operation Mode Security Management Other Features Firmware Upgrade • MBSSID support • WMM support • Tx Power Adjustment • Transmit Data Rate • Domain Selection • Preamble Type: long or short support • RTS Threshold Adjustment • Fragmentation Threshold Adjustment • Beacon Interval Adjustment • SSID assignment • Short Slot time support • CTS-only &CTS/RTS protect mechanism support • DFS(Dynamic Frequency Selection) Support • TPC (Transmit Power
Appendix A - Specifications FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Appendix B Troubleshooting B Overview This chapter covers some common problems that may be encountered while using the Wireless Access Point and some possible solutions to them. If you follow the suggested steps and the Wireless Access Point still does not function properly, contact your dealer for further advice. General Problems Problem 1: Can't connect to the Wireless Access Point to configure it.
Appendix B - Troubleshooting Problem 2: My PC can't connect to the LAN via the Wireless Access Point. Solution 2 Check the following: • The SSID and WEP settings on the PC match the settings on the Wireless Access Point. • On the PC, the wireless mode is set to "Infrastructure" • If using the Access Control feature, the PC's name and address is in the Trusted Stations list. • If using 802.1x mode, ensure the PC's 802.1x software is configured correctly.
Appendix C Windows TCP/ IP C Overview Normally, no changes need to be made. • By default, the Wireless Access Point will act as a DHCP client, automatically obtaining a suitable IP Address (and related information) from your DHCP Server. • If using Fixed (specified) IP addresses on your LAN (instead of a DHCP Server), there is no need to change the TCP/IP of each PC. Just configure the Wireless Access Point to match your existing LAN.
Appendix C - Windows TCP/IP Figure 65: IP Address (Win 95) Ensure your TCP/IP settings are correct, as follows: Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows settings. To work correctly, you need a DHCP server on your LAN. Using "Specify an IP Address" If your PC is already configured for a fixed (specified) IP address, no changes are required.
Wireless Access Point User Guide Checking TCP/IP Settings - Windows NT4.0 1. Select Control Panel - Network, and, on the Protocols tab, select the TCP/IP protocol, as shown below. Figure 66: Windows NT4.0 - TCP/IP 2. Click the Properties button to see a screen like the one below. Figure 67: Windows NT4.
Appendix C - Windows TCP/IP 3. 4. Select the network card for your LAN. Select the appropriate radio button - Obtain an IP address from a DHCP Server or Specify an IP Address, as explained below. Obtain an IP address from a DHCP Server This is the default Windows setting. This is the default Windows settings. To work correctly, you need a DHCP server on your LAN. Using "Specify an IP Address" If your PC is already configured for a fixed (specified) IP address, no changes are required.
Wireless Access Point User Guide Checking TCP/IP Settings - Windows 2000 1. 2. Select Control Panel - Network and Dial-up Connection. Right click the Local Area Connection icon and select Properties. You should see a screen like the following: Figure 68: Network Configuration (Win 2000) 3. 4. Select the TCP/IP protocol for your network card. Click on the Properties button. You should then see a screen like the following.
Appendix C - Windows TCP/IP 5. Ensure your TCP/IP settings are correct: Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. This is the default Windows settings. To work correctly, you need a DHCP server on your LAN. Using a fixed IP Address ("Use the following IP Address") If your PC is already configured for a fixed (specified) IP address, no changes are required.
Wireless Access Point User Guide Checking TCP/IP Settings - Windows XP 1. 2. Select Control Panel - Network Connection. Right click the Local Area Connection and choose Properties. You should see a screen like the following: Figure 70: Network Configuration (Windows XP) 3. 4. Select the TCP/IP protocol for your network card. Click on the Properties button. You should then see a screen like the following.
Appendix C - Windows TCP/IP 5. Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. To work correctly, you need a DHCP server on your LAN. Using a fixed IP Address ("Use the following IP Address") If your PC is already configured for a fixed (specified) IP address, no changes are required.
Wireless Access Point User Guide Checking TCP/IP Settings - Windows Vista 1. 2. Select Control Panel - Network Connections. Right click the Local Area Connection Status and choose Properties. Click Continue to the User Account Control dialog box, then you should see a screen like the following: Figure 72: Network Configuration (Windows Vista) 3. 4. Select the TCP/IP protocol for your network card. Click on the Properties button. You should then see a screen like the following.
Appendix C - Windows TCP/IP Figure 73: TCP/IP Properties (Windows Vista) 5. Ensure your TCP/IP settings are correct. Using DHCP To use DHCP, select the radio button Obtain an IP Address automatically. This is the default Windows setting. To work correctly, you need a DHCP server on your LAN. Using a fixed IP Address ("Use the following IP Address") If your PC is already configured for a fixed (specified) IP address, no changes are required.
Appendix D About Wireless LANs D Overview Wireless networks have their own terms and jargon. It is necessary to understand many of these terms in order to configure and operate a Wireless LAN. Wireless LAN Terminology Modes Wireless LANs can work in either of two (2) modes: • Ad-hoc • Infrastructure Ad-hoc Mode Ad-hoc mode does not require an Access Point or a wired (Ethernet) LAN. Wireless Stations (e.g. notebook PCs with wireless cards) communicate directly with each other.
Appendix D - About Wireless LANs Different Access Points within an ESS can use different Channels. To reduce interference, it is recommended that adjacent Access Points SHOULD use different channels. As Wireless Stations are physically moved through the area covered by an ESS, they will automatically change to the Access Point which has the least interference or best performance. This capability is called Roaming. (Access Points do not have or require Roaming capabilities.
Wireless Access Point User Guide All data transmission is encrypted using the WPA standard. Keys are automatically generated, so no key input is required. 802.1x This uses the 802.1x standard for client authentication, and WEP for data encryption. If possible, you should use WPA-Enterprise instead, because WPA encryption is much stronger than WEP encryption. If this option is used: • The Access Point must have a "client login" on the Radius Server.
Regulatory Approvals FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.