background image

MaxR-3210 Wireless-N Access Point User Manual

Arada Systems Confidential

25

v1.1, Dec 2009

Shared Secret.

 This is shared between the Wireless Access Point and the RADIUS 

Server while authenticating the supplicant (wireless client).

4.

Click 

Apply

 to save your settings.

Setting up a Security Profile

The MaxR-3210 allows you to set up eight different security profiles for 802.11b/bg/ng. Each 
profile can be configured with a different security option for network authentication.

.

Note: 

If you are using a RADIUS Server, configure the RADIUS settings first, as 

described in the 

“Configuring the RADIUS Server Settings” on page 2-23

.

Figure 2-12 Security profile settings

Summary of Contents for MaxR-3210

Page 1: ...Morse Avenue Sunnyvale CA 94089 Tel 1 408 773 9298 www aradasystems com Arada Systems Inc MaxR 3210 Single Band Wireless N Access Point User Manual This document helps you to configure and use the Ma...

Page 2: ...ate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult th...

Page 3: ...Rear Panel 1 5 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2 2 Understanding MaxR 3210 Wireless Security Options 2 3 Installing the MaxR 3210 Wirel...

Page 4: ...iguring WPA PSK and WPA2 PSK 2 36 Restricting Wireless Access by MAC Address 2 38 Chapter 3 Management Remote Management 3 1 Remote Console 3 3 Using the Secure Telnet Interface 3 3 CLI Commands 3 4 U...

Page 5: ...R 3210 as a Point to Multi Point Wireless Bridge 4 13 Chapter 5 Troubleshooting and Debugging No lights are lit on the Access Point 5 1 The Wireless LAN activity light does not light up 5 1 The LAN li...

Page 6: ...MaxR 3210 Wireless N Access Point User Manual vi Arada Systems Confidential v1 1 Dec 2009...

Page 7: ...ed in the following paragraphs Typographical Conventions This manual uses the following typographical conventions Formats This manual uses the following formats to highlight special messages Italic Em...

Page 8: ...MaxR 3210 Wireless N Access Point User Manual ii Arada Systems Confidential v1 1 Dec 2009 Danger This is a safety warning Failure to take heed of this notice may result in personal injury or death...

Page 9: ...acting with a wireless network interface card NIC via an antenna Typically an individual in building access point provides a maximum connectivity area of about a 500 foot radius Consequently the MaxR...

Page 10: ...3210 access point and assign different configuration settings to each SSID All the configured SSIDs are active and the network devices can connect to the access point by using any of these SSIDs DHCP...

Page 11: ...ure that only trusted wireless stations can use the MaxR 3210 to gain access to your LAN Security Profiles When using multiple BSSIDs you can configure unique security settings encryption SSID etc for...

Page 12: ...uted coordinated function CSMA CA Back off procedure ACK procedure retransmission of unacknowledged frames RTS CTS handshake Beacon generation Packet fragmentation and reassembly Auto or long preamble...

Page 13: ...adapter and cord 12 V dc 1 5 A Straight through Category 5 Ethernet cable RJ 45 to DB 9 female connector Resource CD which includes this manual Support Registration card Contact your reseller or cust...

Page 14: ...RJ 45 console port and restores the MaxR 3210 to the factory default settings 3 Serial Console Port RJ 45 serial console port for serial DTE connections 4 RJ 45 Ethernet Port Use the MaxR 3210 Ethern...

Page 15: ...efault IP Address 5 Setting Basic IP Options 6 Wireless Settings 7 Setting Up and Testing Basic Wireless Connectivity 8 Understanding Security Profiles 9 SSID and WEP WPA Settings Setup Form 10 Config...

Page 16: ...ur wireless connection can vary significantly based on the physical placement of the Access Point The latency data throughput performance and notebook power consumption of wireless adapters also vary...

Page 17: ...wireless network Restrict Access Based on MAC address You can restrict access to only trusted PCs so that unknown PCs cannot wirelessly connect to the MaxR 3210 MAC address filtering adds an obstacle...

Page 18: ...r is already part of your network record its TCP IP configuration settings 2 Configure the computer with a static IP address of 192 168 0 210 and 255 255 255 0 for the Subnet Mask 3 Connect an Etherne...

Page 19: ...screen select Logout to exit the MaxR 3210 setup screens You will automatically be logged out of the Access Point after 5 minutes of no activity 4 Access Point Name Enter the access point name of the...

Page 20: ...Time from the left panel The Time screen displays as shown in Figure 2 2 6 Enter the Time Settings for your area See the online help or Configuring Time Settings on page 2 7 for more information about...

Page 21: ...k The default values are suitable for most users and situations See the online help or Setting Basic IP Options on page 2 11 for more information about how to configure the settings on this screen 9 C...

Page 22: ...he default is USA Pacific NTP Client Enable NTP Client to synchronize the time of the access point with an NTP Server The Default is Enabled Use Custom NTP Server Check the option if you have a custom...

Page 23: ...leted the setup steps you can deploy the MaxR 3210 in your network If needed you can now reconfigure the computer you used in step 1 from the Static IP back to its original TCP IP settings Deploying t...

Page 24: ...in the MaxR 3210 Single Band Wireless N Access Point If they do not match no wireless connection will be made Logging In Using the Default IP Address After you install the MaxR 3210 log in to the Acce...

Page 25: ...ser should automatically find the MaxR 3210 Wireless Access Point and display the home screen Setting Basic IP Options The basic IP settings for your Access Point are entered on this screen Most of th...

Page 26: ...IP Address of your Access Point The default IP address is 192 168 0 237 To change it enter an unused IP address from the address range used on your LAN or enable DHCP IP Subnet Mask The Access Point...

Page 27: ...ou set this option you must ensure your default gateway is configured 3 Click Apply to save your basic IP settings Wireless Settings The following sections describe how to configure the wireless setti...

Page 28: ...reless network discovery feature of some products such as Windows XP Vista and Unix systems but the data is still fully exposed to a determined snoop using specialized test equipment like wireless sni...

Page 29: ...5 Mbps 65 Mbps 13 Mbps 26 Mbps 39 Mbps 52 Mbps 78 Mbps 104 Mbps 117 Mbps 130 Mbps Data Rates for Channel Width 40MHz and Guard Interval short Best 15 Mbps 30 Mbps 45 Mbps 60 Mbps 90 Mbps 120 Mbps 135...

Page 30: ...raffic For WMM to function correctly Wireless clients must also support WMM To configure basic wireless QoS settings for 11b bg ng 1 Under the Configuration tab select Wireless from the main menu sele...

Page 31: ...selected for your network This feature selects a channel that has the least interference It should not be necessary to change the wireless channel unless you notice interference problems or are near a...

Page 32: ...tanding Security Profiles Security Profiles let you configure unique security settings for each SSID You can configure up to eight unique 802 11b bg ng wireless security profiles on the MaxR 3210 see...

Page 33: ...to 32 alphanumeric characters Wireless Network Name SSID This is the name of your wireless network It is set to the default name of ARADA_11g for 802 11b bg ng Broadcast Wireless Network Name SSID If...

Page 34: ...In bridge modes some options may be unavailable Description Open System Can be used with WEP encryption or no encryption Shared Key You must use WEP encryption and enter at least one shared key Legac...

Page 35: ...8 to 64 characters in length Wireless Client Security Separation If enabled the associated wireless clients will not be able to communicate with each other This feature is intended for hotspots and o...

Page 36: ...s adapter card All wireless nodes in the same network must be configured with the same SSID Authentication Circle one Open System or Shared Key Choose Shared Key for more security Note If you select s...

Page 37: ...ntication security profile see Configuring WPA with RADIUS on page 2 29 Configuring WPA2 with RADIUS on page 2 31 or Configuring WPA and WPA2 with RADIUS on page 2 32 for specifics on implementing the...

Page 38: ...f the RADIUS Server Port Number The port number of the RADIUS Server The default is 1812 Shared Secret This is shared between the Wireless Access Point and the RADIUS Server while authenticating the s...

Page 39: ...4 Click Apply to save your settings Setting up a Security Profile The MaxR 3210 allows you to set up eight different security profiles for 802 11b bg ng Each profile can be configured with a different...

Page 40: ...rofile you want to modify and click Edit The Security Profile Configuration screen for the selected profile displays see Figure 2 13 4 Give your profile a meaningful name so that you can remember it l...

Page 41: ...and this feature has been enabled the default VLAN ID for MaxR 3210 will be associated with each profile The default Profile VLAN ID must match the IDs used by other network devices 10 Click Apply to...

Page 42: ...y populated with key values Manual Enter the number of hexadecimal digits appropriate to the encryption strength 10 digits for 64 bit 26 digits for 128 bit and 32 digits for 152 bit any combination of...

Page 43: ...tware for instructions on configuring WPA settings To configure WPA follow these steps 1 Under the Configuration tab select Security on the main menu select Advanced from the left hand menu and then s...

Page 44: ...ity Profile you want to modify and click Edit 5 Choose WPA with RADIUS from the from the Network Authentication drop down menu Data Encryption will be set to TKIP by default 6 Wireless Client Security...

Page 45: ...2 with RADIUS 1 Under the Configuration tab select Security on the main menu select Advanced from the left panel and then select RADIUS Server Settings The RADIUS Server Settings screen displays 2 Ent...

Page 46: ...nd WPA2 with RADIUS Not all wireless adapters support WPA and WPA2 Client software is required on the client Windows XP and Windows 2000 with Service Pack 3 or above do include the client software tha...

Page 47: ...settings 4 Under the Configuration tab select Security from the main menu The screen for Profile Settings displays When the Security Profile screen displays check the checkbox of the Security Profile...

Page 48: ...software is required on the client Windows XP and Windows 2000 with Service Pack 3 or above include the client software that supports WPA Nevertheless the wireless adapter hardware and driver must als...

Page 49: ...If enabled associated wireless clients will not be able to communicate with each other This feature is intended for hotspots and other public access situations 4 Click Apply to save your settings Con...

Page 50: ...Apply to save your settings Configuring WPA PSK and WPA2 PSK Not all wireless adapters support WPA and WPA2 Client software is required on the client Windows XP and Windows 2000 with Service Pack 3 o...

Page 51: ...PSK By default Data Encryption will be set to TKIP AES 2 Enter the WPA Passphrase Network Key 3 Wireless Client Security Separation is disabled by default If enabled associated wireless clients will n...

Page 52: ...to the MaxR 3210 using the default address of http 192 168 0 237 user name of admin and default password of password or whatever LAN address and password you have set up 2 Under the Configuration tab...

Page 53: ...ou choose this database you must configure the RADIUS Server Settings first see Configuring the RADIUS Server Settings on page 2 23 5 The Trusted Wireless Stations list shows any wireless stations you...

Page 54: ...ck Add to add the wireless device to the Trusted Wireless Stations list Repeat these steps for each additional device you want to add to the list 9 Click Apply to save your wireless access control lis...

Page 55: ...ent 2 Remote Console 3 Upgrading the Wireless Access Point Software 4 Configuration File Management 5 Restoring the MaxR 3210 to the Factory Default Settings 6 Changing the Administrator Password 7 En...

Page 56: ...Pv1 v2 protocol Read Only Community Name The community string to allow the SNMP manager to read the wireless access point s MIB objects The default is Public Read Write Community Name The community st...

Page 57: ...ure Telnet The default is Enable Telnet If set to Enable the Wireless Access Point will only allow remote access via Telnet The default is Disable Using the Secure Telnet Interface The MaxR 3210 inclu...

Page 58: ...lation program to use the following settings Baud rate 9600 bps Data bits 8 Parity none Stop bit 1 Flow control none These settings appear below the connector on the back panel 3 Press Enter The scree...

Page 59: ...from a computer that is connected to the MaxR 3210 Wireless Access Point with a wireless link You must use a computer that is connected to the MaxR 3210 Wireless Access Point with a Ethernet cable Not...

Page 60: ...ade from the main menu and then select Firmware Upgrade The Firmware Upgrade screen displays as shown in Figure 3 4 above 3 Click Browse and browse to the location of the upgrade file 4 Click Apply Wh...

Page 61: ...ttings from the left sidebar to back up your current settings The following screen displays 1 Click Backup Your browser will extract the configuration settings from the Access Point and prompt you for...

Page 62: ...e click Restore to upload the file After completing the upload the MaxR 3210 will reboot automatically Restoring the MaxR 3210 to the Factory Default Settings It is sometimes desirable to restore the...

Page 63: ...set to the name printed on the label on the bottom of the unit To restore the factory default configuration settings without knowing the login password or IP address you must use the Default Reset but...

Page 64: ...as now been restored and the MaxR 3210 is ready for use Changing the Administrator Password The default password is password You should change this password to a more secure password since you cannot...

Page 65: ...guration tab on the main menu select System then select the Advanced option and select SysLog to view the screen shown in Figure 3 9 2 Enable SysLog Enable this option if you have a SysLog server on y...

Page 66: ...e 3 10 below The Activity Log Window displays the Access Point system activity Click Refresh to update the display click Clear to clear the log content or click Save As to save the log contents into a...

Page 67: ...ireless card when operating at 2 4GHz Firmware Version The version of the firmware currently installed Current Time Displays the current system time of the access point Current IP Settings IP Address...

Page 68: ...ic Statistics The Statistics screen displays information for both wired LAN and wireless WLAN interface network traffic To access Statistics information 1 Under the Monitoring tab on the main menu sel...

Page 69: ...iption Wired Ethernet Packets The number of packets sent and received since the MaxR 3210 was restarted Bytes The number of bytes sent and received since the MaxR 3210 was restarted Wireless 11b bg ng...

Page 70: ...ID Mode and Status Total Packets The Wireless packets sent and received in 802 11n g mode since the MaxR 3210 was restarted Total Bytes The Wireless bytes sent and received in 802 11n g mode since the...

Page 71: ...as shown in Figure 3 13 2 Click Refresh to update the list Enabling Rogue AP Detection The MaxR 3210 can detect rogue APs and wireless stations and show their details to the administrator To enable Ro...

Page 72: ...ply If you enable Rogue AP Detection the AP continuously scans the wireless network and collects information about all APs heard on its channel 3 You can Import AP List from a File See Importing Rogue...

Page 73: ...s to the existing list 3 Click Browse and navigate to the location where you saved the text file 4 Select the file and click Open 5 Click Import to upload the list to the AP To import the list from an...

Page 74: ...s Confidential v1 1 Dec 2009 2 Click Refresh to refresh the list 3 Click Save to export the list of unknown APs to a file A window opens so you can browse to the location where you want to save the fi...

Page 75: ...Save to export the list of known APs to a file A window opens so you can browse to the location where you want to save the file Packet Capture The packet capture option is available under the Monitori...

Page 76: ...MaxR 3210 Wireless N Access Point User Manual 22 Arada Systems Confidential v1 1 Dec 2009 The packet capture screen is shown below Figure 3 17 Packet capture screen...

Page 77: ...reless Settings Advanced QoS Settings Configuring advanced QoS settings Configuring Advanced QoS Settings Access Point Settings Enabling wireless bridging modes Enabling Wireless Bridging IP Settings...

Page 78: ...are part of the configured VLAN ID will get their IP addresses only from the AP Starting IP Address Enter the starting IP address that can be assigned from the DHCP server on this Access Point Ending...

Page 79: ...r the IP address assigned The wireless client user is required to renew the IP address as soon as the lease is expired 4 Click Apply to save your settings Hotspot Settings If you want the Access Point...

Page 80: ...ireless LAN parameters for the 11b bg ng modes The default wireless LAN parameters usually work well However you can use these settings to fine tune the overall performance of your Access Point for yo...

Page 81: ...silence period With the CSMA CA transmission mechanism the transmitting station sends out an RTS packet to the receiving station and waits for the receiving station to send back a CTS Clear to Send p...

Page 82: ...uto Antenna Not supported 802 11d Enable this option to include support for additional regulatory domains that are not in the current standard Max Wireless Clients The number of wireless clients that...

Page 83: ...rom the wireless client to the MaxR 3210 Wireless Access Point If WMM is disabled you cannot configure Station EDCA parameters Table 4 1 describes the settings for QoS Queues Figure 4 4 Advanced QoS s...

Page 84: ...to point bridge mode using the MAC address of this MaxR 3210 They then send all traffic to this Master rather than communicate directly with each other Data 3 Background Lowest priority queue high th...

Page 85: ...ysical address of the other bridge mode wireless station in the fields provided WEP WPA PSK or WPA2 PSK are supported WPA2 PSK can and should be used to protect this communication The screens used to...

Page 86: ...idging 1 Click the Enable Wireless Bridging checkbox 2 Select either the Wireless Point to Point Bridge or Wireless Point to Multi Point Bridge radio button 3 Select Enable Wireless Client Association...

Page 87: ...ofile name 2 Enter the MAC address of the remote access point 3 Select a network authentication type 4 Select an encryption strength 5 Click Back 6 Enable the profile if you wish to on the Bridging sc...

Page 88: ...Configure and verify the following parameters for both access points Verify that the LAN network configuration of the MaxR 3210 Wireless Access Points both are configured to operate in the same LAN ne...

Page 89: ...AP2 on LAN Segment 2 in Point to Multi Point Bridge mode The MAC addresses of the adjacent APs are required in AP2 Configure the MaxR 3210 AP3 on LAN 3 in Point to Point Bridge mode with the Remote M...

Page 90: ...encryption in use All Point to Point Access Points must have the AP2 MAC address in its Remote AP MAC address field 4 Verify connectivity across the LANs A computer on any LAN segment should be able...

Page 91: ...uration password Go to Changing the Administrator Password on page 3 10 If you have trouble setting up your MaxR 3210 check the tips below No lights are lit on the Access Point It takes a few seconds...

Page 92: ...still blink if there is activity Make sure the connected device is turned on Be sure the correct cable is used Use a standard Category 5 Ethernet patch cable If the network device has Auto Uplink MDI...

Page 93: ...uses a Fixed Static IP address ensure that it is using an IP Address in the range of the MaxR 3210 The MaxR 3210 default IP Address is 192 168 0 237 and the default Subnet Mask is 255 255 255 0 If yo...

Page 94: ...t restart Reset to Factory Defaults This button can also be used to clear ALL data and restore ALL settings to the factory default values To clear all data and restore the factory default values 1 Pow...

Page 95: ...button for approximately 5 seconds until the TEST LED blinks rapidly Your device will return to the factory configuration settings shown in Table A 1 below Pressing the reset button for a shorter per...

Page 96: ...Communication Enabled 11 b bg ng Wireless Network Name SSID ARADA_11g Broadcast Network Name SSID Enabled Security Disabled Transmission Speed Besta 80211 g Radio Frequency Channel Auto Output Power F...

Page 97: ...s for Channel Width 40MHz and Guard Interval short Best 15 Mbps 30 Mbps 45 Mbps 60 Mbps 90 Mbps 120 Mbps 135 Mbps 150 Mbps 30 Mbps 60 Mbps 90 Mbps 120 Mbps 180 Mbps 240 Mbps 270 Mbps 300 Mbps Data Rat...

Page 98: ...MaxR 3210 Wireless N Access Point User Manual 4 Arada Systems Confidential v1 1 Dec 2009...

Page 99: ...IP range lease time lease time status status subnet mask subnet mask wins server WINS server http redirect enable HTTP redirection http redirect url HTTP redirection URL interface select wireless lan...

Page 100: ...rogue ap detection enable rogue access point detection rts threshold wireless RTS CTS threshold security profile create security profile 1 1st security profile authentication authentication type encr...

Page 101: ...yno key number name profile name presharedkey pre shared key security separation disable associated wireless client communication ssid network name 1 32 chars status profile status vlan id VLAN id wep...

Page 102: ...eless wep key type 6 6th security profile authentication authentication type encryption data encryption hide network name hide network name key1 wireless wep key 1 key2 wireless wep key 2 key3 wireles...

Page 103: ...ame profile name presharedkey pre shared key security separation disable associated wireless client communication ssid network name 1 32 chars status profile status vlan id VLAN id wep pass phrase wir...

Page 104: ...on name profile name presharedkey preshared key remote mac remote MAC status profile status wep pass phrase wireless wep passphrase key wepkey wireless wep key wepkeytype wireless wep key type wmm wmm...

Page 105: ...uthentication server primary sharedsecret primary authentication server shared secret authentication server secondary secondary authentication server authentication server secondary port secondary aut...

Page 106: ...store default system password show show system settings configuration show system configuration interface show wireless lan interface eth ethernet interface statistics show ethernet statistics wlan wl...

Page 107: ...ith RADIUS 2 32 with WPA2 PSK 2 36 aggregation length 4 6 aggregation support for 1 4 AID see association ID A MPDU Aggregation of MAC Protocol Data Units 4 6 antenna 4 6 2 4 GHz 1 5 position 2 2 2 9...

Page 108: ...4 5 CTS Clear to Send 4 5 D data encryption settings 128 bits WEP 2 21 152 bits WEP 2 21 64 bits WEP 2 21 AES 2 21 none 2 21 TKIP 2 21 TKIP AES 2 21 data rates 802 11bgn 2 15 default access point name...

Page 109: ...ss default 5 3 latency 2 2 legacy rates 2 3 line of sight 2 9 location 2 2 2 9 log in 2 11 logs 3 11 3 12 M MAC address access control list 2 38 bridge mode wireless station 4 8 wireless point to mult...

Page 110: ...red key passphrase WPA PSK 2 35 primary DNS server configure 2 12 profile name bridge mode wireless station 4 8 wireless point to multi point bridge 4 9 Q QoS queues 4 7 QoS settings 2 16 QoS settings...

Page 111: ...MP enable SNMP 3 2 read only community name 3 2 read write community name 3 2 receive traps IP address 3 2 remote management 3 1 trap community name 3 2 trap port 3 2 SNMP Simple Network Management Pr...

Page 112: ...g and repeating 4 8 wireless channel changing 2 14 2 17 wireless client point to point bridge communication 4 8 wireless client security separation hotspot setting 2 28 wireless computer configuring f...

Page 113: ...0 WPA WPA2 support for 1 2 WPA2 with RADIUS configure 2 31 data encryption default 2 32 network authentication type 2 32 wireless client security separation 2 32 WPA2 PSK configure data encryption 2 3...

Page 114: ...MaxR 3210 Wireless N Access Point User Manual Index 8 v1 1 Dec 2009...

Reviews: