Avaya AP-3 User Manual Download Page 196 | Manualshive

Page: 196 / 425

background image

Security

4-108 Avaya Wireless AP-3 User’s Guide

Enable 802.1x Security

Follow these steps to enable 802.1x only:

1. Within the

802.1x Configuration

screen, set

802.1x Security

Mode

to

802.1x

.

2. Select an

Encryption Key Length

.

— An 802.11b AP supports 64-bit and 128-bit encryption.

— An 802.11a or 802.11b/g AP supports 64-bit and 128-bit

encryption.

3. Enter a

Re-keying Interval

.

— The Re-keying Interval determines how often a client’s

encryption key is changed and can be set to any value
between 60 - 65535 seconds. Rekeying frustrates hacking
attempts without taxing system resources. Setting a fairly
frequent rekey value (900 seconds=15 minutes) effectively
protects against intrusion without disrupting network activities.

4. Click

OK

to save the changes.

5. If you have not already done so, configure the RADIUS

authentication settings (see

RADIUS Authentication with 802.1x

for details.

6. Reboot the Access Point.

«
...
194
195
196
197
198
...
»

Summary of Contents for AP-3

Page 1: ......

Page 2: ...ya Inc Microsoft Windows is a registered trademark of the Microsoft Corporation All trademarks mentioned herein belong to their respective owners Publication Information Copyright 2003 Avaya Inc All rights reserved Part Number 66222 A Release 2 3 Date July 2003 ...

Page 3: ...In addition Avaya s standard warranty language as well as information regarding support for this product while under warranty is available through the following website www avaya com support Notice While reasonable efforts were made to ensure that the information in this book was complete and accurate at the time of printing Avaya can assume no responsibility for any errors Changes and corrections...

Page 4: ...he Escalation Management link Then click the International Services link that includes telephone numbers for the international Centers of Excellence TCP IP Facilities Customers may experience differences in product performance reliability and security depending upon network configurations design and topologies even when the product performs as warranted To order copies of this and other documents ...

Page 5: ...Wireless Networking 1 2 Site Survey 1 3 Guidelines for Roaming 1 4 Wireless Standard Support 1 4 Network Names 1 5 Security Settings 1 5 Cell Coverage 1 5 Data Rates 1 6 Channels 1 6 IEEE 802 11 Specifications 1 6 802 11b 1 7 802 11a 1 7 802 11g 1 7 Management and Monitoring Capabilities 1 8 HTTP Interface 1 8 Command Line Interface 1 8 How To Access the CLI 1 9 SNMP Management 1 10 ...

Page 6: ... Upgrade Kit 2 15 Initialization 2 19 ScanTool 2 20 Default IP Address 2 20 ScanTool Instructions 2 20 Setup Wizard 2 28 Setup Wizard Instructions 2 28 Download the Latest Software 2 44 Setup your TFTP Server 2 45 Download Updates from your TFTP Server using the Web Interface 2 46 Download Updates from your TFTP Server using the CLI Interface 2 47 Additional Hardware Features 2 48 Installing the A...

Page 7: ...face 4 2 System 4 6 Network 4 7 IP Configuration 4 7 Basic IP Parameters 4 8 DNS Client 4 10 Advanced 4 12 DHCP Server 4 12 Link Integrity 4 16 Interfaces 4 19 Wireless 802 11a 4 19 Dynamic Frequency Selection DFS 4 24 RTS CTS Medium Reservation 4 25 Wireless 802 11b 4 27 Distance Between APs 4 35 Coverage 4 36 Multicast Rate 4 38 Wireless Distribution System WDS 4 40 Bridging WDS 4 42 WDS Setup P...

Page 8: ...MAC Filter Examples 4 68 Prevent Two Specific Devices from Communicating 4 68 Prevent Multiple Wireless Devices From Communicating With a Single Wired Device 4 69 Prevent All Wireless Devices From Communicating With a Single Wired Device 4 70 Prevent A Wireless Device From Communicating With the Wired Network 4 70 Prevent Messages Destined for a Specific Multicast Group from Being Forwarded to the...

Page 9: ...ing 4 93 Security 4 94 Authentication and Encryption Modes 4 95 WEP Encryption 4 95 802 1x Authentication 4 97 Authentication Process 4 99 Wi Fi Protected Access WPA 4 101 Configuring Security Settings 4 104 Enable WEP Encryption 4 107 Enable 802 1x Security 4 108 Enable Mixed Mode 802 1x and WEP Encryption 4 109 802 1x Security and Wireless Distribution Systems WDS 4 110 Enable WPA Mode 4 111 Ena...

Page 10: ... 131 Typical User VLAN Configurations 4 132 Configure Multiple VLAN SSID Pairs 4 133 Typical VLAN Management Configurations 4 135 Control Access to the AP 4 135 Provide Access to a Wireless Host in the Same Workgroup 4 136 Disable VLAN Management 4 136 5 Monitor Information In This Chapter 5 1 Logging into the HTTP Interface 5 2 Version 5 5 ICMP 5 7 IP ARP Table 5 8 Learn Table 5 10 IAPP 5 10 RADI...

Page 11: ...ot Boot No LED Activity 7 4 Serial Link Does Not Work 7 4 Ethernet Link Does Not Work 7 5 Basic Software Setup and Configuration Problems 7 6 Lost AP Telnet or SNMP Password 7 6 Client Computer Cannot Connect 7 6 AP Has Incorrect IP Address 7 7 HTTP browser or Telnet Interface Does Not Work 7 8 HTML Help Files Do Not Appear 7 9 Telnet CLI Does Not Work 7 9 TFTP Server Does Not Work 7 10 Client Con...

Page 12: ...s Not Work 7 14 There Is No Data Link 7 15 Overload Indications 7 16 Recovery Procedures 7 16 Reset to Factory Default Procedure 7 17 Forced Reload Procedure 7 18 Download a New Image Using ScanTool 7 20 Preparing to Download the AP Image 7 20 Download Procedure 7 21 Download a New Image Using the Bootloader CLI 7 22 Preparing to Download the AP Image 7 23 Download Procedure 7 23 Setting IP Addres...

Page 13: ...I Variations A 7 Bootloader CLI A 7 CLI Command Types A 11 Operational CLI Commands A 11 List Commands A 12 Example 1 Display Command list A 13 Example 2 Display specific Commands A 13 Example 3 Display parameters for set and show A 14 Example 3a Display every parameter that can be changed A 15 Example 3b Display parameters based on letter sequence A 16 Example 4 Display Prompts for Successive Par...

Page 14: ...IP Address Parameter A 27 Example 2 Create a table entry or row A 28 Example 3 Modify a table entry or row A 28 Example 4 Enable Disable or Delete a table entry or row A 29 Example 5 Show the Group Parameters A 30 Example 6 Show Individual Table Parameters A 31 Using Tables User Strings A 32 Working with Tables A 32 Using Strings A 34 Configuring the AP using CLI commands A 36 Log into the AP usin...

Page 15: ...t ACS A 49 Enable Disable Closed System A 49 Enable Disable Interference Robustness 802 11b Only A 49 Enable Disable Load Balancing 802 11b Only A 50 Enable Disable Medium Density Distribution 802 11b Only A 50 Set the Distance Between APs 802 11b Only A 50 Set the Multicast Rate 802 11b Only A 51 Set Ethernet Speed and Transmission Mode A 51 Set Interface Management Services A 52 Edit Management ...

Page 16: ...n Lifetime A 58 Enable RADIUS Accounting A 59 Configure RADIUS Accounting server A 60 Set VLAN SSID Parameters A 60 Enable VLAN Management A 61 Disable VLAN Management A 61 Add an Entry to the VLAN ID Table A 61 CLI Monitoring Parameters A 62 Parameter Tables A 63 System Parameters A 66 Inventory Management Information A 68 Network Parameters A 68 IP Configuration Parameters A 68 DNS Client for RA...

Page 17: ...wser Parameters A 83 Telnet Parameters A 84 Serial Port Parameters A 85 TFTP Server Parameters A 86 IP Access Table Parameters A 87 Filtering Parameters A 87 Ethernet Protocol Filtering Parameters A 88 Ethernet Filtering Table A 89 Static MAC Address Filter Table A 90 Proxy ARP Parameters A 91 IP ARP Filtering Parameters A 91 Broadcast Filtering Table A 92 TCP UDP Port Filtering A 93 TCP UDP Port ...

Page 18: ...WPA PSK Mode A 105 Wireless Interface Security Parameters A 106 Security Encryption Key Length Table A 107 MAC Access Control Parameter A 107 MAC Access Control Table A 108 RADIUS Parameters A 108 Primary and Backup RADIUS Server Table Parameters A 108 General RADIUS Parameters A 109 RADIUS Authentication A 110 RADIUS Accounting A 111 VLAN SSID Parameters A 112 VLAN ID Table A 113 Other Parameters...

Page 19: ...ysical Specifications C 7 AP 3 Unit C 7 802 11a Antenna Adapter C 7 Electrical Specifications C 7 Without Active Ethernet Module C 7 With Active Ethernet Module C 7 Environmental Specifications C 8 AP 3 Unit C 8 802 11a Antenna Adapter C 8 Ethernet Interface C 8 Serial Port Interface C 8 Active Ethernet Interface C 9 HTTP Interface C 9 Radio Specifications C 9 802 11a Channel Frequencies C 10 802 ...

Page 20: ...vaya Wireless AP 3 User s Guide 802 11a 5 GHz Upgrade Kit Wireless Communication Ranges C 17 802 11a 11a Upgrade Kit Wireless Communication Ranges C 18 802 11b g Wireless Communication Ranges C 19 D Technical Support Before You Seek Help D 1 ...

Page 21: ... The term 802 11 is used to describe features that apply to the 802 11a 802 11b and 802 11g wireless standards A Dual radio AP is an Access Point that includes two radios it can support one or two IEEE radio standards depending on the type of radios installed The AP 3 is a Dual radio AP An 802 11a AP is an Access Point that supports the IEEE 802 11a standard An 802 11b AP is an Access Point that s...

Page 22: ...better use of your computer CAUTION A Caution indicates either potential damage to hardware or loss of data and tells you how to avoid the problem Introduction to Wireless Networking An AP extends the capability of an existing Ethernet network to devices on a wireless network Wireless devices can connect to a single Access Point or move between multiple Access Points located within the same vicini...

Page 23: ... conducting a Site Survey before placing the device in its final location For information about how to conduct a Site Survey contact your local reseller Before an Access Point can be configured for your specific networking requirements it must first be initialized See Getting Started for details Figure 1 1 Typical wireless network access infrastructure ...

Page 24: ...sy installation and operation Over the air encryption of data High speed network links To be fully operational the AP 3 needs at least one wireless card installed Guidelines for Roaming Wireless Standard Support An AP can only communicate with client devices that support its wireless standard For example an 802 11a client cannot communicate with an 802 11b AP and an 802 11b client cannot communica...

Page 25: ...Point to communicate see Interfaces Security Settings All Access Points and clients must have the same security settings to communicate Cell Coverage The Access Points cells must overlap to ensure that there are no gaps in coverage and to ensure that the roaming client will always have a connection available The coverage area of an 802 11b or 802 11b g AP is larger than the coverage area of an 802...

Page 26: ... but you can also set the Channel manually see Interfaces for details Access Points that use the same Channel should be installed as far away from each other as possible to reduce potential interference IEEE 802 11 Specifications In 1997 the Institute of Electrical and Electronics Engineers IEEE adopted the 802 11 standard for wireless devices operating in the 2 4 GHz frequency band This standard ...

Page 27: ...operating in the 5 GHz frequency band This standard is referred to as 802 11a 802 11a devices are not compatible with 2 4 GHz 802 11 or 802 11b devices 802 11a radios use a radio technology called Orthogonal Frequency Division Multiplexing OFDM to achieve data rates of up to 54 Mbits sec Available Frequency Channels vary by regulatory domain and or country See 802 11a Channel Frequencies for detai...

Page 28: ...terface The HTTP Interface also known as the Web browser Interface provides easy access to configuration settings and network statistics from any computer on the network You can access the HTTP Interface over your LAN switch hub etc over the Internet or with a crossover Ethernet cable connected directly to your computer s Ethernet Port Command Line Interface The Command Line Interface CLI is a tex...

Page 29: ...file name and file type parameters How To Access the CLI You access the CLI over a HyperTerminal serial connection or via Telnet During initial configuration you can use the CLI over a serial port connection to configure an Access Point s IP address When accessing the CLI via Telnet you can communicate with the Access Point from over your LAN switch hub etc from over the Internet or with a crossov...

Page 30: ...mation Base MIB files that describe the parameters that can be viewed and or configured over SNMP MIB II RFC 1213 Bridge MIB RFC 1493 Ethernet like MIB RFC 1643 802 11 MIB Avaya Wireless Enterprise MIB Avaya provides these MIB files on the CD included with each Access Point You need to compile one or more of the above MIBs into your SNMP program s database before you can manage an Access Point usi...

Page 31: ...e other management interfaces Refer to the Enterprise MIB for more information the MIB can be opened with any text editor such as Microsoft Word Notepad or WordPad NOTE The remainder of this guide describes how to configure an AP using the HTTP Web interface or the CLI interface For information on how to manage devices using SNMP refer to the documentation that came with your SNMP program Also ref...

Page 32: ...isites Product Package System Requirements Hardware Installation Initialization Download the Latest Software Additional Hardware Features Prerequisites Before installing an AP you need to gather certain network information The following section identifies the information you need ...

Page 33: ...dress that is valid on your network HTTP Web Interface Password Each Access Point requires a read write password to access the Web interface The default password is public CLI Interface Password Each Access Point requires a read write password to access the CLI interface The default password is public SNMP Read Password Each Access Point requires a password to allow get requests from an SNMP manag...

Page 34: ... RADIUS authentication server so both passwords must be the same and is typically provided by the network administrator Authentication Server Authentication Port This is a port number default is 1812 and is typically provided by the network administrator Client IP Address Pool Allocation Scheme The Access Point can automatically provide IP addresses to clients as they sign on The network administr...

Page 35: ...applicable Power supply not provided with Active Ethernet unit AC power cord not provided with Active Ethernet unit 802 11b PC Card or 802 11b g AP Card One Installation CD ROM that contains the following Software Installation Wizard ScanTool Solarwinds TFTP software HTML Help this user s guide in PDF format One Access Point Quick Start Guide If any of these items are missing or damaged please con...

Page 36: ...an be populated with an 802 11b or 802 11b g card System Requirements The following are the minimum requirements to begin using an AP A 10Base T Ethernet or 100Base TX Fast Ethernet switch or hub At least one radio card designed for the AP an 802 11b PC Card 802 11b g Card 5 GHz Antenna Adapter Kit or 11a Upgrade Kit At least one of the following IEEE 802 11 compliant devices You will need an If y...

Page 37: ...uter that is connected to the same IP network as the AP and has one of the following Web browsers installed Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later The computer is required to configure the AP using the Web or HTTP interface ...

Page 38: ...2 7 Hardware Installation AP 3 with Active Ethernet AP 3 with Power Supply 5 GHz or AP 3 11a Upgrade Kit AP 3 with Active Ethernet 1 Slide the AP module onto the mounting bracket Make sure it is properly seated Figure 2 1 Insert Module into Mounting Bracket ...

Page 39: ...ireless card or 802 11a card with antenna adapter not included in the kit into Slot A or B NOTE The 802 11a wireless card with antenna adapter will only fit in Slot A 3 Slide an 802 11b or an 802 11b g wireless card included in the kit into Slot A or B Figure 2 2 Slide a PC Card into the AP ...

Page 40: ... for the LED indicators to turn green before proceeding Figure 2 3 Connect an Ethernet cable from an AE hub to the AP 6 Conduct a Site Survey to determine the best location for your device If you need assistance contact your reseller for help 7 Once you have chosen a final location for your unit mount the wall bracket and the processor module and place the cover onto the unit as shown ...

Page 41: ...are Installation 2 10 Avaya Wireless AP 3 User s Guide Figure 2 4 Wall mounting the AP AP 3 with Power Supply 1 Clip the power supply into the mounting bracket 2 Plug the AC power cord into the power supply ...

Page 42: ...ya Wireless AP 3 User s Guide 2 11 Figure 2 5 Install the power supply 3 Slide the AP module onto the mounting bracket Make sure it is properly seated 4 Plug the DC connector from the power supply into the top of the AP module ...

Page 43: ...Hardware Installation 2 12 Avaya Wireless AP 3 User s Guide Figure 2 6 Insert module in mounting bracket and attach power connector ...

Page 44: ...uide 2 13 Figure 2 7 Slide a PC Card into the AP 5 Attach one end of an Ethernet cable to the AP s Ethernet port and the other end to a network hub or switch 6 Connect the unit to a power source 7 Wait for the power LED to turn green before proceeding ...

Page 45: ... 8 Power LED turns green when the unit is operational 8 Conduct a Site Survey to determine the best location for your device 9 Once you have chosen a final location for your unit mount the wall bracket and the processor module and place the cover onto the unit as shown ...

Page 46: ...grade Kit If you are installing this kit on a new AP an AP that has not been installed yet skip to Step 4 1 Remove the AP from your network by unplugging the power and Ethernet cables from the unit 2 Remove the unit from its mounting location keep the mounting bracket with the AP 3 Remove the outer plastic cover ...

Page 47: ...st one card slot available The power or Ethernet cable tie wrap may need to be cut and the cable repositioned to allow the antenna adapter to fit correctly 5 Position the antenna adapter card inward facing the top of the unit see Figure 2 11 Insert Card and Antenna and insert the 5 GHz card into the available card slot ...

Page 48: ...Hardware Installation Avaya Wireless AP 3 User s Guide 2 17 Figure 2 11 Insert Card and Antenna ...

Page 49: ...g bracket 7 Gently push forward while rotating the antenna downwards and clip the adapter into the small cutouts on the face of the mounting bracket 8 Position the antenna for best reception at a 90 angle for flat surface mounts at a 180 angle for wall mounts 9 Re install the cover and mount the AP back in place Figure 2 12 Replace cover 10 Connect the power and Ethernet cables to the AP ...

Page 50: ...rd launches automatically the first time you access the HTTP interface NOTE These initialization instructions describe how to configure an AP over an Ethernet connection using ScanTool and the HTTP interface If you want to configure the unit over the serial port see Setting IP Address using Serial Port for information on how to access the CLI over a serial connection and Command Line Interface CLI...

Page 51: ...must be assigned an IP address that is valid on its Ethernet network By default the AP is configured to obtain an IP address automatically from a network Dynamic Host Configuration Protocol DHCP server during boot up If your network contains a DHCP server you can run ScanTool to find out what IP address the AP has been assigned Default IP Address If your network does not contain a DHCP server the ...

Page 52: ... The unit requests an IP Address from the network DHCP server 4 Insert the Installation CD into the CD ROM drive of the computer that you will use to configure the AP Result The installation program will launch automatically 5 Follow the on screen instructions to install the Access Point software and documentation NOTE The Avaya Wireless Installation program supports the following operating system...

Page 53: ... will be prompted to select the adapter that you want ScanTool to use before the Scan List appears If prompted select an adapter and click OK You can change your adapter setting at any time by clicking the Select Adapter button on the Scan List screen The ScanTool Network Adapter Selection screen will not appear if your computer only has one network adapter installed Figure 2 13 Scan List 7 Locate...

Page 54: ...nt does not show up in the Scan List click the Rescan button to update the display If the unit still does not appear in the list see Troubleshooting for suggestions Note that after rebooting an Access Point it may take up to five minutes for the unit to appear in the Scan List ...

Page 55: ...ork write down the IP address and click Cancel to close ScanTool Go to Setup Wizard for information on how to access the HTTP interface using this IP address If the AP has not been assigned an IP address in other words the unit is using its default IP address 10 0 0 1 follow these steps to assign it a static IP address that is valid on your network ...

Page 56: ...lization Avaya Wireless AP 3 User s Guide 2 25 Step Action 1 Highlight the entry for the AP you want to configure 2 Click the Change button Result The Change screen appears Figure 2 14 Scan Tool Change Screen ...

Page 57: ...cting an IP address for the unit 5 Enter your network s Subnet Mask in the field provided 6 Enter your network s Gateway IP Address in the field provided 7 Enter the SNMP Read Write password in the Read Write Password field for new units the default SNMP Read Write password is public NOTE The TFTP Server IP Address and Image File Name fields are only available if ScanTool detects that the AP does ...

Page 58: ...ult The Access Point will reboot automatically and any changes you made will take effect 9 When prompted click OK a second time to return to the Scan List screen 10 Click Cancel to close the ScanTool 11 Proceed to Setup Wizard for information on how to access the HTTP interface Step Action ...

Page 59: ...s Setup Wizard Instructions Follow these steps to access the Access Point s HTTP interface and launch the Setup Wizard 1 Open a Web browser on a network computer The HTTP interface supports the following Web browser Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later 2 If necessary disable the browser s Internet proxy settings For Internet Explorer users follow these s...

Page 60: ...dress assigned by a network DHCP server or the static IP address you manually configured See ScanTool for information on how to determine the unit s IP address and manually configure a new IP address if necessary Result The Enter Network Password screen appears 4 Enter the HTTP password in the Password field Leave the User Name field blank For new units the default HTTP password is public Result T...

Page 61: ...Initialization 2 30 Avaya Wireless AP 3 User s Guide Figure 2 15 Enter Network Password ...

Page 62: ...d click Exit and see Advanced Configuration The Setup Wizard supports the following navigation options Save Next Button Each Setup Wizard screen has a Save Next button Click this button to submit any changes you made to the unit s parameters and continue to the next page The instructions described next shown how to navigate the Setup Wizard using the Save Next buttons ...

Page 63: ...this link to close the Setup Wizard at any time CAUTION If you exit from the Setup Wizard any changes you submitted by clicking the Save Next button up to that point will be saved to the unit but will not take effect until it is rebooted 6 Configure the System Configuration settings and click Save Next See System for more information 7 Configure the Access Point s Basic IP address settings if nece...

Page 64: ...Name between 1 and 32 characters long for the wireless network You must configure each wireless client to use this name as well Auto Channel Select By default the AP scans the area for other Access Points and selects the best available communication channel either a free channel if available or the channel with the least amount of interference Remove the check mark to disable this option Note that...

Page 65: ...ure that nearby devices do not use the same frequency Available Channels vary based on regulatory domain See 802 11a Channel Frequencies Note that you cannot manually set the channel for 802 11a products in Europe see Dynamic Frequency Selection DFS for details Transmit Rate Use the drop down menu to select a specific transmit rate for the AP Choose between 6 9 12 18 24 36 48 54 Mbits s and Auto F...

Page 66: ...used to encrypt and decrypt data between the AP and its wireless clients Enter the number of characters that correspond to the desired key size as described below Enter 10 hexadecimal characters 0 9 and A F or 5 ASCII characters see ASCII Character Chart to use 64 bit encryption Enter 26 hexadecimal characters or 13 ASCII characters to use 128 bit encryption Enter 32 hexadecimal characters or 16 A...

Page 67: ...each wireless client to use this name as well Auto Channel Select By default the AP scans the area for other Access Points and selects the best available communication channel either a free channel if available or the channel with the least amount of interference Remove the check mark to disable this option If you are setting up a Wireless Distribution System WDS it must be disabled See Wireless D...

Page 68: ...nel ensure that nearby devices do not use the same frequency unless you are setting up a WDS Available Channels vary based on regulatory domain See 802 11b Channel Frequencies Distance Between APs Set to Large Medium Small Microcell or Minicell depending on the site survey for your system The distance value is related to the Multicast Rate described next In general a larger distance between APs me...

Page 69: ...s parameter described previously The table below displays the possible Multicast Rates based on the Distance between APs See Multicast Rate for more information Option Description Distance between APs Multicast Rate Large 1 and 2 Mbits sec Medium 1 2 and 5 5 Mbits sec Small 1 2 5 5 and 11 Mbits sec Minicell 1 2 5 5 and 11 Mbits sec Microcell 1 2 5 5 and 11 Mbits sec ...

Page 70: ...gure an Encryption Key This key is used to encrypt and decrypt data between the AP and its wireless clients Enter the number of characters that correspond to the desired key size as described below Enter 10 hexadecimal characters 0 9 and A F or 5 ASCII characters see ASCII Character Chart to use 64 bit encryption Enter 26 hexadecimal characters 0 9 and A F or 13 ASCII characters to use 128 bit enc...

Page 71: ... 802 11g wifi mode 802 11bg mode default Network Name SSID Enter a Network Name between 1 and 32 characters long for the wireless network You must configure each wireless client to use this name as well Auto Channel Select By default the AP scans the area for other Access Points and selects the best available communication channel either a free channel if available or the channel with the least am...

Page 72: ...not use the same frequency Available Channels vary based on regulatory domain See 802 11g Channel Frequencies Transmit Rate Select a specific transmit rate for the AP The values available depend on the Operational Mode Auto Fallback is the default setting it allows the AP to select the best transmit rate based on the cell size For 802 11b only Auto Fallback 1 2 5 5 11 Mbits sec For 802 11g only Au...

Page 73: ...Initialization 2 42 Avaya Wireless AP 3 User s Guide WEP Encryption Place a check mark in the box provided to enable WEP encryption See WEP Encryption for more information Option Description ...

Page 74: ...eless clients Enter the number of characters that correspond to the desired key size as described below Enter 10 hexadecimal characters 0 9 and A F or 5 ASCII characters see ASCII Character Chart to use 64 bit encryption Enter 26 hexadecimal characters or 13 ASCII characters to use 128 bit encryption Enter 32 hexadecimal characters or 16 ASCII characters to use 152 bit encryption Option Descriptio...

Page 75: ...y screen to restart the AP and apply your changes Download the Latest Software Avaya periodically releases updated software for the AP on its Web site at http www avaya com support Avaya recommends that you check the Web site for the latest updates after you have installed and initialized the unit Set Encryption Key 1 continued NOTE Additional advanced settings are available in the Wireless Interf...

Page 76: ...nd download the files for configuration and AP Image upgrades The Solarwinds TFTP server software is located on the Avaya Wireless AP Installation CD ROM You can also download the latest TFTP software from Solarwind s Web site at http www solarwinds net If a TFTP server is not configured and running you will not be able to download and upload images and configuration files to from the AP Remember ...

Page 77: ...es from your TFTP Server using the Web Interface 1 Download the latest software from http www avaya com support 2 Copy the latest software updates to your TFTP server 3 In the Web Interface click the Commands button and select the Download tab 4 Enter the IP address of your TFTP server in the field provided 5 Enter the File Name including the file extension Enter the full directory path and file n...

Page 78: ...l connection 4 Enter the CLI password when prompted 5 Type set tftpfilename file name include the file extension and press Enter 6 Type set tftpfiletype img and press Enter 7 Type set tftpipaddr IP address of your TFTP server and press Enter 8 Type show tftp and confirm that the file name file type and IP address are correct 9 Type download and press Enter Result The download will begin Be patient...

Page 79: ...ducts and cables must comply with certain safety requirements such as Underwriter Labs UL Standard 2043 Standard for Fire Test for Heat and Visible Smoke Release for Discrete Products and Their Accessories Installed in Air Handling Spaces The AP has been certified under UL Standard 2043 and can be installed in the plenum only when the following conditions apply The unit s plastic cover has been re...

Page 80: ... cover 2 Place the top edge of the faceplate under the front ridge of the metal enclosure 3 Snap the faceplate in the empty card slot in the Access Point CAUTION Do not drop the faceplate into the card slot in the AP 4 To install a second radio card the faceplate must be removed Gently pry the faceplate off using the tab on the faceplate Active Ethernet An Active Ethernet enabled AP is equipped wi...

Page 81: ...d not exceed 100 meters approximately 325 feet The AE hub is not a repeater and does not amplify the Ethernet data signal If connected to an AE hub and an AC power simultaneously the Access Point draws power from Active Ethernet Maximum power supplied to an Access Point is 11 Watts the unit typically draws approximately 10 Watts Also see Hardware Specifications NOTE The AP s 802 3af compliant Acti...

Page 82: ... activity Greenflash with data activity Normal Operation Amber Red Amber Amber Rebooting Power On Self Test POST Amber n a not applicable n a n a Missing or bad AP image if amber after reboot Red Red n a n a Power On Self Test POST running n a n a Red Red PC Card incompatible on indicated interface n a n a Red Red PC Card failure on indicataed interface Green n a Amber Amber Indicated interface in...

Page 83: ...in detail See Advanced Configuration for information on configuration options that are available within the Access Point s HTTP interface See Monitor Information for information on the statistics displayed within the Access Point s HTTP interface See Commands for information on the commands supported by the Access Point s HTTP interface See Troubleshooting for troubleshooting suggestions See Comma...

Page 84: ... may use your web browser to monitor the system status Follow these steps to monitor an AP s operating statistics using the HTTP interface 1 Open a Web browser on a network computer NOTE The HTTP interface supports the following Web browser Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later 2 If necessary disable the Internet proxy settings For Internet Explorer users...

Page 85: ... a proxy server box Click OK twice to save your changes and return to Internet Explorer 3 Enter the Access Point s IP address in the browser s Address field and press Enter Result The Enter Network Password screen appears 4 Enter the HTTP password in the Password field and click OK Leave the User Name field blank By default the HTTP password is public Result The System Status screen appears ...

Page 86: ... AP 3 User s Guide 3 3 Figure 3 1 Enter Network Password Screen System Status System Status is the first screen to appear each time you connect to the HTTP interface You can also return to this screen by clicking the Status button ...

Page 87: ...System Status 3 4 Avaya Wireless AP 3 User s Guide Figure 3 2 System Status Screen ...

Page 88: ...m Status This area provides system level information including the unit s IP address and contact information See System for information on these settings System Alarms System traps if any appear in this area Each trap identifies a specific severity level Critical Major Minor and Informational See Alarms for a list of possible alarms ...

Page 89: ... interfaces Wireless and Ethernet Management Configure the Access Point s management Passwords IP Access Table and Services Filtering Configure Ethernet Protocol filters Static MAC Address filters Advanced filters and Port filters Alarms Configure the Alarm SNMP Trap Groups the Alarm Host Table and the Syslog features Bridge Configure the Spanning Tree Protocol Storm Threshold protection Intra BSS...

Page 90: ...sing the HTTP interface 1 Open a Web browser on a network computer NOTE The HTTP interface supports the following Web browser Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later 2 If necessary disable the Internet proxy settings For Internet Explorer users follow these steps Select Tools Internet Options Click the Connections tab Click LAN Settings If necessary remove ...

Page 91: ... and press Enter Result The Enter Network Password screen appears 4 Enter the HTTP password in the Password field and click OK Leave the User Name field blank By default the HTTP password is public Result The System Status screen appears Figure 4 1 Enter Network Password Screen 5 Click the Configure button located on the left hand side of the screen ...

Page 92: ...igure 4 2 Configure Main Screen 6 Click the tab that corresponds to the parameter you want to configure For example click Network to configure the Access Point s TCP IP settings The parameters contained in each of the nine configuration categories are described later in this chapter ...

Page 93: ...TP Interface Avaya Wireless AP 3 User s Guide 4 5 7 Configure the Access Point s parameters as necessary After changing a configuration value click OK to save the change 8 Reboot the Access Point for all of the changes to take effect ...

Page 94: ...le for the AP Contact Email The email address of the person responsible for the AP Contact Phone The telephone number of the person responsible for the AP Object ID This is a read only field that displays the Access Point s MIB definition this information is useful if you are managing the AP using SNMP Ethernet MAC Address This is a read only field that displays the unique MAC Media Access Control...

Page 95: ... Configuration screen NOTE You must reboot the Access Point in order for any changes to the Basic IP or DNS Client parameters take effect Descriptor This is a read only field that reports the Access Point s name serial number current image software version and current bootloader software version Up Time This is a read only field that displays how long the Access Point has been running since its la...

Page 96: ...btain IP settings from a network DHCP server automatically during boot up If you do not have a DHCP server or if you want to manually configure the Access Point s IP settings set this parameter to Static IP Address The Access Point s IP address When IP Address Assignment Type is set to Dynamic this field is read only and reports the unit s current IP address The Access Point will default to 10 0 0...

Page 97: ...k The subnet mask will default to 255 0 0 0 if the unit cannot obtain one from a DHCP server Gateway IP Address The IP address of the Access Point s gateway When IP Address Assignment Type is set to Dynamic this field is read only and reports the IP address of the unit s gateway The gateway IP address will default to 10 0 0 2 if the unit cannot obtain an address from a DHCP server Parameter Descri...

Page 98: ...ork s DNS server to translate a host name to the appropriate network IP address You can use this DNS Client functionality to identify RADIUS servers by host name See RADIUS for details Parameter Description Enable DNS Client Place a check mark in the box provided to enable DNS client functionality Note that this option must be enabled before you can configure the other DNS Client parameters DNS Pr...

Page 99: ...the network The Access Point will attempt to contact the secondary server if the primary server is unavailable DNS Client Default Domain Name The default domain name for the Access Point s network for example avaya com Contact your network administrator if you need assistance setting this parameter Parameter Description ...

Page 100: ...L is 64 DHCP Server If your network does not have a DHCP Server you can configure the AP as a DHCP server to assign dynamic IP addresses to Ethernet nodes and wireless clients CAUTION Make sure there are no other DHCP servers on the network and do not enable the DHCP server without checking with your network administrator first as it could bring down the whole network Also the AP must be con figur...

Page 101: ...Network Avaya Wireless AP 3 User s Guide 4 13 Figure 4 3 DHCP Server Configuration Screen ...

Page 102: ...nfigured Subnet Mask This field is read only and reports the Access Point s current subnet mask DHCP clients that receive dynamic addresses from the AP will be assigned this same subnet mask Gateway IP Address The AP will assign the specified address to its DHCP clients Primary DNS IP Address The AP will assign the specified address to its DHCP clients Secondary DNS IP Address The AP will assign t...

Page 103: ...tional The default time value for clients to retain the assigned IP address DHCP automatically renews IP Addresses without client notification This parameter supports a range between 0 and 86400 seconds The default is 86400 seconds Maximum Lease Time optional The maximum time value for clients to retain the assigned IP address DHCP automatically renews IP Addresses without client notification This...

Page 104: ...e ping attempts fail the AP disables its wireless interface until the connection is restored This forces the unit s wireless clients to switch to another Access Point that still has a network connection Note that this feature does not affect WDS links if applicable IP Pool Table Entry continued Status IP Pools are enabled upon entry in the table You can also disable or delete entries by changing t...

Page 105: ...mber of times a poll should be retransmitted before the link is considered down Range is 0 to 255 default is 5 Target IP Address Entry This entry specifies the IP address of a host on the network that the AP will periodically poll to confirm connectivity The table can hold up to five entries By default all five entries are set to 0 0 0 0 Click Edit to update one or more entries Each entry contains...

Page 106: ...Network 4 18 Avaya Wireless AP 3 User s Guide Figure 4 4 Link Integrity Configuration Screen ...

Page 107: ... Point s radio and Ethernet settings Refer to the Wireless parameters below that correspond to your radio type Wireless 802 11a Wireless 802 11b Wireless 802 11b g Ethernet Wireless 802 11a You can configure and view the following parameters within the Wireless Interface Configuration screen for an 802 11a AP ...

Page 108: ...erface Type For an 802 11a AP this field reports 802 11a OFDM 5 GHz OFDM stands for Orthogonal Frequency Division Multiplexing this is the name for the radio technology used by 802 11a devices MAC Address This is a read only field that displays the unique MAC Media Access Control address for the Access Point s wireless interface The MAC address is assigned at the factory ...

Page 109: ...l countries The available regulatory domains include FCC U S Canada Mexico and Australia ETSI Europe and the United Kingdom MKK Japan SG Singapore ASIA China Hong Kong and South Korea TW Taiwan Network Name SSID Enter a Network Name between 1 and 32 characters long for the wireless network You must configure each wireless client to use this name as well Parameter Description ...

Page 110: ...ails See 802 11a Channel Frequencies for a list of Channels Frequency Channel When Auto Channel Select is enabled this field is read only and displays the Access Point s current operating Channel When Auto Channel Select is disabled you can specify the Access Point s channel If you decide to manually set the unit s Channel ensure that nearby devices do not use the same frequency Available Channels...

Page 111: ...llback Auto Fallback is the default setting it allows the AP unit to select the best transmit rate based on the cell size DTIM Period The Deferred Traffic Indicator Map DTIM is used with clients that have power management enabled DTIM should be left at 1 the default value if any clients have power management enabled This parameter supports a range between 1 and 255 Parameter Description ...

Page 112: ...Medium Reservation This parameter affects message flow control and should not be changed under normal circumstances Range is 0 to 2347 When set to a value between 0 and 2347 the Access Point uses the RTS CTS mechanism for packets that are the specified size or greater When set to 2347 the default setting RTS CTS is disabled See RTS CTS Medium Reservation for more information Closed System Check th...

Page 113: ...ating channel you must let DFS select the channel You cannot configure the Auto Channel Select option Within the HTTP interface this option always appears enabled RTS CTS Medium Reservation The 802 11 standard supports optional RTS CTS communication based on packet size Without RTS CTS a sending radio listens to see if another radio is already using the medium before transmitting a data packet If ...

Page 114: ...that the medium is in use for a specified period This helps to minimize collisions While RTS CTS adds overhead to the radio network it is particularly useful for large packets that take longer to resend after a collision occurs RTS CTS Medium Reservation is an advanced parameter and supports a range between 0 and 2347 bytes When set to 2347 the default setting the RTS CTS mechanism is disabled Whe...

Page 115: ... changes to these parameters take effect Parameter Description Physical Interface Type For 802 11b AP this field reports 802 11b DSSS 2 4 GHz DSSS stands for Direct Sequence Spread Spectrum this is the name for the radio technology used by 802 11b devices MAC Address This is a read only field that displays the unique MAC Media Access Control address for the Access Point s wireless interface The MA...

Page 116: ...all countries The available regulatory domains include FCC U S Canada Mexico and Australia ETSI Most of Europe including the United Kingdom Ireland Singapore and Hong Kong MKK Japan IL Israel Network Name SSID Enter a Network Name between 1 and 32 characters long for the wireless network You must configure each wireless client to use this name as well Parameter Description ...

Page 117: ...reless Distribution System WDS it must be disabled See Wireless Distribution System WDS for more information Frequency Channel When Auto Channel Select is enabled this field is read only and displays the Access Point s current operating channel When Auto Channel Select is disabled you can specify the Access Point s operating channel If you decide to manually set the unit s channel ensure that near...

Page 118: ...ending on the site survey for your system By default this parameter is set to Large The distance value is related to the Multicast Rate described next In general a larger distance between APs means that your clients operate a slower data rates on average See Distance Between APs for more information Parameter Description ...

Page 119: ...y The table below displays the possible Multicast Rates based on the Distance between APs setting By default this parameter is set to 2 Mbits sec See Multicast Rate for more information Parameter Description Distance between APs Multicast Rate Large 1 and 2 Mbits sec Medium 1 2 and 5 5 Mbits sec Small 1 2 5 5 and 11 Mbits sec Minicell 1 2 5 5 and 11 Mbits sec Microcell 1 2 5 5 and 11 Mbits sec ...

Page 120: ...parameter supports a range between 1 and 255 RTS CTS Medium Reservation This parameter affects message flow control and should not be changed under normal circumstances Range is 0 to 2347 When set to a value between 0 and 2347 the Access Point uses the RTS CTS mechanism for packets that are the specified size or greater When set to 2347 the default setting RTS CTS is disabled See RTS CTS Medium Re...

Page 121: ...nterference is detected to increase the likelihood that the messages will be received in the presence of interference The receiving radio reassembles the original packet once all fragments have been received This option is disabled by default Closed System Check this box to allow only clients configured with the Access Point s specific Network Name to associate with the Access Point When enabled a...

Page 122: ...nce Robustness and RTS CTS Medium Reservation settings This feature is enabled by default and allows clients to automatically adopt the values used by its current Access Point even if these values differ from the client s default values or from the values supported by other Access Points NOTE This feature is not available if you are using an Avaya 802 11a b Card or a non Avaya Wireless client with...

Page 123: ...high speed data processing In contrast a typical warehouse has a few forklifts requiring low bandwidth for simple transactions NOTE This feature is not available if you are using an Avaya 802 11a b Card or a non Avaya Wireless client with the AP Cell capacities are compared in the following table which shows that small cells suit most offices and large cells suit most warehouses Small Cell Large C...

Page 124: ...uld result in a low density cell even though in both cases the actual area did not change only the number of Access Points covering the area changed In a typical office a high density area consists of a number of Access Points installed every 20 feet and each Access Point generates a small radio cell with a diameter of about 10 feet In contrast a typical warehouse might have a low density area con...

Page 125: ...t is calculated by means of a manual Site Survey in which an AP is set up and clients are tested throughout the area to determine signal strength and coverage and local limits such as physical interference are investigated From these measurements the appropriate cell size and density is determined and the optimum distance between APs is calculated to suit your particular business requirements Cont...

Page 126: ... the AP You should set the Multicast Rate based on the size of the Access Point s cell If the Access Point s cell is very small for example Distance Between APs is set to Microcell you can expect that all stations should be able to successfully receive multicast packets at 11 MBits sec so you can set Multicast Rate to 11 Mbits sec However if the Access Point s cell is large you need to accommodate...

Page 127: ...s Multicast Rates NOTE There is an inter dependent relationship between the Distance between APs and the Multicast Rate In general larger systems operate at a lower average transmit rate The variation between Multicast Rate and Distance Between APs is presented in the following table ...

Page 128: ...ve Ethernet connectivity to a second 802 11b AP that has Ethernet connectivity WDS allows you to configure up to six 6 point to point links between Access Points In the WDS Example that follows AP 1 and AP 2 communicate over a WDS link represented by the blue line This link provides Client 1 with access to network resources even though AP 1 is not directly connected to the Ethernet network Packets...

Page 129: ...Interfaces Avaya Wireless AP 3 User s Guide 4 41 NOTE This feature is not available with an 802 11a or 802 11b g AP Figure 4 7 WDS Example ...

Page 130: ...hroughput will decrease when the WDS link is active Partner MAC Address If there is no partner MAC address configured in the WDS table the WDS port remains disabled Each WDS port on a single 802 11b AP should have a unique partner MAC address Do not enter the same MAC address twice in an AP s WDS port list Channel Each Access Point that is a member of the WDS must have the same Channel setting to ...

Page 131: ...e steps below for each 802 11b AP that you wish to include in the Wireless Distribution System 1 Confirm that Auto Channel Select is disabled 2 Write down the MAC Address of the radio that you wish to include in the Wireless Distribution System 3 Open the Wireless Interface Configuration screen 4 Scroll down to the Wireless Distribution System heading 5 Click the Edit button to update the Wireless...

Page 132: ...AP 3 User s Guide Figure 4 8 WDS Configuration NOTE To set up a Wireless Distribution System WDS with 802 1x set each Access Point s 802 1x Security Mode to Mixed and assign each unit in the WDS the same Encryption Key 1 See Security ...

Page 133: ...vaya Wireless AP 3 User s Guide 4 45 Wireless 802 11b g You can configure the following radio parameters for an 802 11b g AP NOTE You must reboot the Access Point before any changes to these parameters take effect ...

Page 134: ... devices This setting will provide the best results if this radio interface will only communicate with 802 11g devices 802 11bg mode This is the default mode Use this mode if you want to support a mix of 802 11b and 802 11g devices 802 11g wifi This mode was developed for Wi Fi compliance testing purposes It is similar to 802 11g only mode In general you should use either 802 11g only mode if you ...

Page 135: ...P CCK DSSS OFDM 2 4 GHz OFDM stands for Orthogonal Frequency Division Multiplexing this is the name for the radio technology used by 802 11a devices DSSS stands for Direct Sequence Spread Spectrum this is the name for the radio technology used by 802 11b devices MAC Address This is a read only field that displays the unique MAC Media Access Control address for the Access Point s wireless interface...

Page 136: ...and South Korea MKK Japan IL Israel Network Name SSID Enter a Network Name between 1 and 32 characters long for the wireless network You must configure each wireless client to use this name as well Auto Channel Select The AP scans the area for other Access Points and selects a free or relatively unused communication channel This helps prevent interference problems and increases network performance...

Page 137: ...me frequency unless you are setting up a WDS Available Channels vary based on regulatory domain See 802 11g Channel Frequencies Transmit Rate Select a specific transmit rate for the AP The values available depend on the Operational Mode Auto Fallback is the default setting it allows the AP to select the best transmit rate based on the cell size For 802 11b only Auto Fallback 1 2 5 5 11 Mbits sec F...

Page 138: ...be changed under normal circumstances Range is 0 to 2347 When set to a value between 0 and 2347 the Access Point uses the RTS CTS mechanism for packets that are the specified size or greater When set to 2347 the default setting RTS CTS is disabled See RTS CTS Medium Reservation for more information Closed System Check this box to allow only clients configured with the Access Point s specific Netwo...

Page 139: ... switch or hub to automatically select the highest throughput option supported by both sides For best results Avaya recommends that you configure the Ethernet setting to match the speed and transmission mode of the device the Access Point is connected to such as a hub or switch If in doubt leave this setting at its default auto speed auto duplex Choose between 10 Mbit s half duplex full duplex or ...

Page 140: ...ess to the AP using SNMP Enter a password in both the Password field and the Confirm field The default password is public SNMP Read Write Password For read and write access to the AP using SNMP Enter a password in both the Password field and the Confirm field The default password is public Telnet CLI Password For the CLI interface via serial or Telnet Enter a password in both the Password field an...

Page 141: ...ss for the management station IP Mask Enter a mask that will act as a filter to limit access to a range of IP Addresses based on the IP Address you already entered HTTP Web Password For the Web browser HTTP interface Enter a password in both the Password field and the Confirm field The default password is public NOTE For security purposes Avaya recommends changing ALL PASSWORDS from the default pu...

Page 142: ...uld allow any device that shares the first three octets of the IP address to configure the AP For example if you enter an IP address of 10 20 30 1 with a 255 255 255 0 subnet mask any IP address between 10 20 30 1 and 10 20 30 254 will have access to the AP s management interfaces Comment Enter an optional comment such as the station name To edit or delete an entry click Edit Edit the information ...

Page 143: ...Management Avaya Wireless AP 3 User s Guide 4 55 Services You can configure the following management services NOTE You must reboot the Access Point if you change the HTTP Port or Telnet Port ...

Page 144: ...n also select Disabled to prevent a user from accessing the AP via SNMP Setting Description HTTP Interface Bitmap Configure the interface or interfaces Ethernet Wireless All Interfaces from which you will manage the AP via the Web interface For example to allow Web configuration via the Ethernet network only set HTTP Interface Bitmask to Ethernet You can also select Disabled to prevent a user from...

Page 145: ...e HTTP port is 80 Enable HTTP Setup Wizard The Setup Wizard appears automatically the first time you access the HTTP interface If you exited out of the Setup Wizard and want to relaunch it enable this option click OK and then close your browser or reboot the AP The Setup Wizard will appear the next time you access the HTTP interface Setting Description ...

Page 146: ...Management 4 58 Avaya Wireless AP 3 User s Guide Figure 4 9 Management Services Configuration Screen ...

Page 147: ...his field if you want to change the Telnet port for security reasons but your Telnet application also must support the new port number you select Login Idle Timeout seconds Enter the number of seconds the system will wait for a login attempt The AP terminates the session when it times out The range is 1 to 300 seconds the default is 30 seconds Session Idle Timeout seconds Enter the number of secon...

Page 148: ... Rate Select the serial port speed bits per second Choose between 2400 4800 9600 19200 38400 or 57600 the default Baud Rate is 9600 Flow Control Select either None default or Xon Xoff software controlled data flow control NOTE To avoid potential problems when communicating with the AP through the serial port Avaya recommends that you leave the Flow Control setting at None the default value Serial ...

Page 149: ...he Filtering heading Ethernet Protocol Static MAC Advanced TCP UDP Port Serial Parity This is a read only field and displays the number of parity bits used in serial communication no parity bits by default Serial Stop Bits This is a read only field that displays the number of stop bits used in serial communication 1 stop bit by default NOTE The serial port bit configuration is commonly referred to...

Page 150: ...w these steps to configure the Ethernet Protocol Filter 1 Select the interface or interfaces that will implement the filter from the Ethernet Protocol Filtering drop down menu Ethernet Packets are examined at the Ethernet interface Wireless Packets are examined at the Wireless interface All Interfaces Packets are examined at both interfaces Disabled The filter is not used ...

Page 151: ...tocol Filters however you may enter additional filters by specifying the appropriate parameters To add an entry click Add and then specify the Protocol Number and a Protocol Name Protocol Number Enter the protocol number See http www iana org assignments ethernet numbers for a list of protocol numbers Protocol Name Enter related information typically the protocol name To edit or delete an entry cl...

Page 152: ...e Ethernet network You can also use this filter to block unnecessary multicast packets from being forwarded to the wireless network NOTE The Static MAC Filter is an advanced feature You may find it easier to control wireless traffic via other filtering options such as Ethernet Protocol Filtering Each static MAC entry contains the following fields Wired MAC Address Wired Mask Wireless MAC Address W...

Page 153: ...filter using only the hexadecimal digits 0 and F in the Mask where 0 is any value and F is the value specified in the MAC address A Mask of 00 00 00 00 00 00 corresponds to all MAC addresses and a Mask of FF FF FF FF FF FF applies only to the specified MAC Address Example For example if the MAC Address is 00 20 A6 12 54 C3 and the Mask is FF FF FF 00 00 00 the AP will examine the source and destin...

Page 154: ...n entry click Edit To disable or remove an entry click Edit and change the Status field from Enable to Disable or Delete To block all traffic Configure from a specific wired MAC address from being forwarded to the wireless network only the Wired MAC Address and Wired Mask leave the Wireless MAC Address and Wireless Mask set to all zeros from a specific wireless MAC address from being forwarded to ...

Page 155: ...Filtering Avaya Wireless AP 3 User s Guide 4 67 Figure 4 10 Static MAC Configuration Screen ...

Page 156: ...0 02 2D 51 32 12 Wireless Client 3 00 20 A6 12 4E 38 Prevent Two Specific Devices from Communicating Configure the following settings to prevent the Wired Server and Wireless Client 1 from communicating Wired MAC Address 00 40 F4 1C DB 6A Wired Mask FF FF FF FF FF FF Wireless MAC Address 00 02 2D 51 94 E4 Wireless Mask FF FF FF FF FF FF Result Traffic between the Wired Server and Wireless Client 1...

Page 157: ... FF FF FF Wireless MAC Address 00 02 2D 51 94 E4 Wireless Mask FF FF FF 00 00 00 Result When a logical AND is performed on the Wireless MAC Address and Wireless Mask the result corresponds to any MAC address beginning with the 00 20 2D prefix Since Wireless Client 1 and Wireless Client 2 share the same prefix 00 02 2D traffic between the Wired Server and Wireless Clients 1 and 2 is blocked Wireles...

Page 158: ...00 Wireless Mask 00 00 00 00 00 00 Result The Access Point blocks all traffic between Wired Server 1 and all wireless clients Prevent A Wireless Device From Communicating With the Wired Network Configure the following settings to prevent Wireless Client 3 from communicating with any device on the Ethernet Wired MAC Address 00 00 00 00 00 00 Wired Mask 00 00 00 00 00 00 Wireless MAC Address 00 20 A...

Page 159: ...ter to preserve wireless bandwidth For example if routers on your network use a specific multicast address such as 01 00 5E 00 32 4B to exchange information you can set up a filter to prevent these multicast packets from being forwarded to the wireless network Wired MAC Address 01 00 5E 00 32 4B Wired Mask FF FF FF FF FF FF Wireless MAC Address 00 00 00 00 00 00 Wireless Mask 00 00 00 00 00 00 Res...

Page 160: ... the Access Point will bridge ARP requests for wireless clients to the wireless LAN Enable IP ARP Filtering Place a check mark in the box provided to allow IP ARP filtering based on the IP ARP Filtering Address and IP Mask Leave the box unchecked to prevent filtering If enabled you should also configure the IP ARP Filtering Address and IP ARP IP Mask IP ARP Filtering Address Enter the Network filt...

Page 161: ...e AP A user specifies a Protocol Name Port Number Port Type TCP UDP or TCP UDP and filtering interfaces Wireless only Ethernet only all interfaces or no interfaces in order to block access to services such as Telnet and FTP and traffic such as NETBIOS and HTTP For example an AP with the following configuration would discard frames received on its Ethernet interface with a UDP destination port numb...

Page 162: ...e TCP UDP Port Filter Table enter the Protocol Names to filter 4 Set the destination Port Number a value between 0 and 65535 to filter See the IANA Web site at http www iana org assignments port numbers for a list of assigned port numbers and their descriptions 5 Set the Port Type for the protocol TCP UDP or both TCP UDP 6 Set the Interface to filter Wireless Ethernet All interfaces No interfaces ...

Page 163: ... UDP Port Filter Table heading 2 Make any changes to the Protocol Name or Port Number for a specific entry if necessary 3 In the row that defines the port set the Status to Enable Disable or Delete as appropriate 4 Select OK Alarms This category has three sub categories Groups Alarm Host Table Syslog ...

Page 164: ...eb interface Place a check mark in the box provided to enable a specific group Remove the check mark from the box to disable the alarms Alarm Severity Levels vary Configuration Alarm Trap Name Description oriTrapDNSIPNotConfigured This traps is generated when the DNS IP Address has not been configured Severity Level Major ...

Page 165: ...t authentication failure occurs The authentication failures can range from MAC Access Control Table RADIUS MAC Authentication 802 1x Authentication specifying the EAP Type Severity Level Major oriTrapUnauthorizedManage rDetected This trap is generated when an unauthorized manager has attempted to view and or modify parameters Severity Level Major ...

Page 166: ...ormational oriTrapWLCFailure This trap is generated when a general failure occurs with the wireless interface card Severity Level Critical oriTrapWLCRemoval This trap is generated when the wireless interface card has been removed from the device Severity Level Critical oriTrapWLCIncompatibleFir mware This trap is generated when the firmware of the wireless interface card is incompatible with the A...

Page 167: ...g a different voltage is inserted in the AP Severity Level Critical oriTrapWLCIncompatibleVen dor This trap is generated when an incompatible wireless vendor card is inserted or present in the AP Severity Level Critical oriTrapWLCFirmwareDownlo adFailure This trap is generated when a failure occurs during the firmware download process of the wireless interface card Severity Level Critical ...

Page 168: ...rap Severity Level Critical oriTrapRADIUSServerNotRe sponding This trap is generated when no response is received from the RADIUS server s for authentication requests sent from the RADIUS client in the AP Trap Severity Level Major oriTrapModuleNotInitialized This trap is generated when a certain software or hardware module is not initialized or fails to initialize Trap Severity Level Major oriTrap...

Page 169: ...sponse from the BootP server The result is that the Access Point reverts to its static IP configuration and you will need to set reset configuration options Trap Severity Level Major oriTrapDHCPFailed In operational mode this trap is generated when the AP does not receive a response from the DHCP server The result is that the Access Point reverts to its static IP configuration and you will need to...

Page 170: ...TrapFlashMemoryCorrupt ed This trap is generated when an error occurs while downloading a file to the AP and the data in the flash memory is invalid or corrupted Severity Level Critical Trap Name Description oriTrapTFTPFailedOperation This trap is generated when a failure occurs during a TFTP upload or download operation Severity Level Major oriTrapTFTPOperationInitiat ed This trap is generated wh...

Page 171: ... when a zero size image is loaded on the AP Trap Severity Level Major oriTrapInvalidImage This trap is generated when an invalid image is loaded in the Access Point Trap Severity Level Major oriTrapImageTooLarge This trap is generated when the image loaded in the AP exceeds the size limitation of the flash memory Trap Severity Level Major oriTrapIncompatibleImage This trap is generated when an inc...

Page 172: ...P has been turned on or rebooted Trap Severity Level Informational linkUp The AP s Ethernet interface link is up working Trap Severity Level Informational linkDown The AP s Ethernet interface link is down not working Trap Severity Level Informational Trap Name Description newRoot This trap indicates that the AP has become the new root in the Spanning Tree network Trap Severity Level Informational ...

Page 173: ...often result in severe disruption in network activity or an automatic reboot of the AP Major alarms are usually activated due to a breach in the security of the system Clients cannot be authenticated or an attempt at unauthorized access into the AP has been detected topologyChan ge This trap is sent by the AP when any of its configured ports transitions from the Learning state to the Forwarding st...

Page 174: ...he password in the Password field and the Confirm field Comment Enter an optional comment such as the alarm trap host station name To edit or delete an entry click Edit Edit the information or select Enable Disable or Delete from the Status drop down menu Syslog The Syslog messaging system enables the AP to transmit event messages to a central server for monitoring and troubleshooting The access p...

Page 175: ...ications Syslog Events are logged according to the level of detail specified by the administrator Logging only urgent system messages will create a far smaller more easily read log then a log of every event the system encounters Determine which events to log by selecting a priority defined by the following scale ...

Page 176: ... Syslog Lowest Priority Logged The AP will send event messages to the Syslog server that correspond to the selected priority and above For example if set to 6 the AP will transmit event messages labeled priority 0 to 6 to the Syslog server s Event Priority Description LOG_EMERG 0 system is unusable LOG_ALERT 1 action must be taken immediately LOG_CRIT 2 critical conditions LOG_ERR 3 error conditio...

Page 177: ... the Status field is only visible when editing an entry You can also disable or delete entries by changing this field s value Bridge The AP is a bridge between your wired and wireless networking devices As a bridge the functions performed by the AP include MAC address learning Forward and filtering decision making Spanning Tree protocol used for loop avoidance Once the AP is connected to your netw...

Page 178: ...use Broadcast Storms multiple frame copies and MAC address table instability problems Complex network structures can create multiple loops within a network The Spanning Tree configuration blocks certain ports on AP devices to control the path of communication within the network avoiding loops and following a spanning tree structure For more information on Spanning Tree protocol please see Section ...

Page 179: ...ou to specify a set of thresholds for each port of the AP identifying separate values for the number of broadcast messages second and Multicast messages second When the number of frames for a port or identified station exceeds the maximum value per second the AP will ignore all subsequent messages issued by the particular network device or ignore all messages of that type Address Threshold Enter t...

Page 180: ...ith the same AP to prevent unauthorized communication and to conserve bandwidth This feature enables you to prevent wireless subscribers within a BSS from exchanging traffic Although this feature is generally enabled in public access environments Enterprise LAN administrators use it to conserve wireless bandwidth by limiting communication between wireless clients For example this feature prevents ...

Page 181: ...ed MAC address to determine the optimal port NOTE The gateway to which traffic will be redirected should be node on the Ethernet network It should not be a wireless client Configuring Interfaces for Packet Forwarding Configure your AP to forward packets by specifying interface port s to which packets are redirected and a destination MAC address 1 Within the Packet Forwarding Configuration screen c...

Page 182: ...ribution System WDS for details Any traffic is redirected to a port based on the bridge learning process 4 Click OK to save your changes Security The AP provides several security features to protect your network from unauthorized access Authentication and Encryption Modes MAC Access ...

Page 183: ...work using an Encryption Key also known as a WEP Key When Encryption is enabled two 802 11 devices must have the same Encryption Keys and both devices must be configured to use Encryption in order to communicate If one device is configured to use Encryption but a second device is not then the two devices will not communicate even if both devices have the same Encryption Keys Type Description WEP E...

Page 184: ...An 802 11a or 802 11b g AP supports 64 bit 128 bit and 152 bit encryption For 64 bit encryption an encryption key is 10 hexadecimal characters 0 9 and A F or 5 ASCII characters see ASCII Character Chart For 128 bit encryption an encryption key is 26 hexadecimal characters or 13 ASCII characters For 152 bit encryption an encryption key is 32 hexadecimal characters or 16 ASCII characters NOTE 64 bit...

Page 185: ...r and uses the Extensible Authentication Protocol EAP as a standards based authentication framework and supports automatic key distribution for enhanced security The EAP based authentication framework can easily be upgraded to keep pace with future EAP types Popular EAP types include Type Description EAP Message Digest 5 MD5 Username Password based authentication does not support automatic key dis...

Page 186: ...d the AP supports the following EAP types EAP TLS PEAP EAP TLLS and EAP MD5 MD5 does not support automatic key distribution therefore if you choose this method you need to manually configure each client with the network s encryption key EAP Tunneled Transport Layer Security TTLS Certificate based authentication a certificate is required on the server a client s username password is tunneled to the...

Page 187: ...xed mode 802 1x and WEP you need to configure your RADIUS server for authentication purposes Prior to successful authentication an unauthenticated client PC cannot send any data traffic through the AP device to other systems on the LAN The AP inhibits all data traffic from a particular client PC until the client PC is authenticated Regardless of its authentication status a client PC can always exc...

Page 188: ...ion are encapsulated by the AP and transmitted to the RADIUS 3 server using EAP extensions B Upon receiving a reply EAP packet from the RADIUS the message is typically forwarded to the client after translating it back to the EAPOL format Negotiations take place between the client and the RADIUS server After the client has been successfully authenticated the client receives an Encryption Key from t...

Page 189: ...s a sub set of the forthcoming IEEE 802 11i security standard currently in draft form IEEE 802 11i is also referred to as WPA2 and will be available in 2004 NOTE For Dual radio APs WPA is available for APs with an 11a Upgrade Kit or 802 11b g Kit WPA is NOT available for APs with an 802 11b PC Card or a 5 GHz Upgrade Kit WPA is a replacement for Wired Equivalent Privacy WEP the encryption techniqu...

Page 190: ... A client s key is different for every session it changes each time the client associates with an AP The AP uses a single global key to encrypt broadcast packets that are sent to all clients simultaneously Encryption keys change periodically based on the Re keying Interval parameter WPA uses 128 bit encryption keys Dynamic Key distribution The AP generates and maintains the keys for its clients Th...

Page 191: ...entication for details WPA PSK Pre Shared Key For networks that do not have 802 1x implemented you can configure the AP to authenticate clients based on a Pre Shared Key This is a shared secret that is manually configured on the AP and each of its clients The Pre Shared Key must be 256 bits long which is either 64 hexadecimal digits or 32 alphanumeric characters see ASCII Character Chart The AP al...

Page 192: ...se the same static WEP keys to encrypt data Enable 802 1x Security The AP uses the 802 1x standard to communicate with a RADIUS server and authenticate clients The AP generates and distributes dynamic per user WEP Keys to each client following successful authentication Enable Mixed Mode 802 1x and WEP Encryption The AP uses 802 1x Mode for clients that support 802 1x and have an 802 1x supplicant ...

Page 193: ...utes dynamic per user encryption keys based on the Temporal Key Integrity Protocol TKIP to each client following successful authentication WPA mode provides message integrity checking to guard against replay type attacks This mode is not available for all radio types Enable WPA PSK Mode The AP uses a Pre shared Key manually configured on both the AP and the clients to authenticate clients The AP g...

Page 194: ...ne None or manually configured Static WEP settings from Configure Security Encryption screen 802 1x 802 1x Dynamic WEP Keying Mixed 802 1x or None depends on a client s configuration Dynamic WEP Keying or Static WEP depends on client s configuration WPA 802 1x Dynamic TKIP Keying WPA PSK Manually configured Pre shared Key Dynamic TKIP Keying ...

Page 195: ...more than one Key use the same number of characters for each Key All Keys need to be the same Key Size 64 128 or 152 bit You can enter the Encryption Keys in either hexadecimal or ASCII format You need to configure your wireless clients to use the same Keys in order for the clients and the AP to communicate 3 Select the Key that the AP will use to encryption outgoing data from the Encrypt Data Tra...

Page 196: ...r a Re keying Interval The Re keying Interval determines how often a client s encryption key is changed and can be set to any value between 60 65535 seconds Rekeying frustrates hacking attempts without taxing system resources Setting a fairly frequent rekey value 900 seconds 15 minutes effectively protects against intrusion without disrupting network activities 4 Click OK to save the changes 5 If ...

Page 197: ...0 65535 seconds Rekeying frustrates hacking attempts without taxing system resources Setting a fairly frequent rekey value 900 seconds 15 minutes effectively protects against intrusion without disrupting network activities 3 Click OK to save the changes 4 Click the Encryption tab 5 Place a check mark in the box labeled Enable Encryption WEP 6 Configure Encryption Key 1 only i e do not configure Ke...

Page 198: ...e so configure the RADIUS authentication settings see RADIUS Authentication with 802 1x for details 10 Reboot the Access Point 802 1x Security and Wireless Distribution Systems WDS Wireless distribution systems WDS are configured using specific ports on an 802 11b AP To use 802 1x with WDS you need to set the 802 1x Security Mode to Mixed WEP and 802 1x and confirm that the 802 11b APs communicati...

Page 199: ...e to WPA 3 Enter a Re keying Interval The Re keying Interval determines how often a client s encryption key is changed and can be set to any value between 60 and 65535 seconds Rekeying frustrates hacking attempts without taxing system resources Setting a fairly frequent rekey value 900 seconds 15 minutes effectively protects against intrusion without disrupting network activities 4 Click OK 5 If y...

Page 200: ...Configure Security Authentication 2 Set Authentication Mode to WPA PSK 3 Enter a Re keying Interval The Re keying Interval determines how often a client s encryption key is changed and can be set to any value between 60 and 65535 seconds Rekeying frustrates hacking attempts without taxing system resources Setting a fairly frequent rekey value 900 seconds 15 minutes effectively protects against int...

Page 201: ...ter between 1 and 64 characters Avaya recommends using a pass phrase of at least 13 characters to ensure that the generated key cannot be easily deciphered by network infiltrators 5 Click OK 6 Reboot the Access Point MAC Access The MAC Access tab allows you to build a list of stations identified by their MAC addresses authorized to access the network through the AP The list is stored inside each A...

Page 202: ...eate a new entry Click Edit to change an existing entry Each entry contains the following field MAC Address Enter the wireless client s MAC address Comment Enter an optional comment such as the client s name Status The entry is enabled automatically when saved so the Status field is only visible when editing an entry You can also disable or delete entries by changing this field s value NOTE For la...

Page 203: ...Security Avaya Wireless AP 3 User s Guide 4 115 Figure 4 13 MAC Access Configuration Screen ...

Page 204: ... RADIUS Authentication with 802 1x RADIUS Accounting You can configure the AP to communicate with up to four different RADIUS servers Primary Authentication Server Back up Authentication Server Primary Accounting Server Back up Accounting Server NOTE You must have configured the settings for at least one Authentication server before configuring the settings for an Accounting server ...

Page 205: ...s access to the network and if your network includes a RADIUS Server you can store the list of MAC addresses on the RADIUS server rather than configure each AP individually From the RADIUS Authentication tab you can define the IP Address of the server that contains a central list of MAC Address values that identify the authorized stations that may access the wireless network You must specify infor...

Page 206: ...C Address Format Type This should correspond to the format in which the clients 12 digit MAC addresses are listed within the RADIUS server Available options include Dash delimited dash between each pair of digits xx yy zz aa bb cc Colon delimited colon between each pair of digits xx yy zz aa bb cc Single dash delimited dash between the sixth and seventh digits xxyyzz aabbcc No delimiters No charac...

Page 207: ...so be configured on the RADIUS server 10 Enter the maximum time in seconds that the AP should wait for the RADIUS server to respond to a request in the Response Time field Range is 1 10 seconds default is 3 seconds 11 Enter the maximum number of times an authentication request may be retransmitted in the Maximum Retransmissions field Range is 1 4 default is 3 12 If you are configuring a back up se...

Page 208: ...RADIUS 4 120 Avaya Wireless AP 3 User s Guide Figure 4 14 RADIUS Access Control Configuration Screen ...

Page 209: ...creen configure the 802 1x settings See 802 1x Authentication for details 2 Click the RADIUS tab 3 Click the RADIUS Auth sub tab 4 Place a check mark in the box labeled Enable Primary RADIUS Authentication Server 5 If you want to configure a back up RADIUS server place a check mark in the box labeled Enable Back up RADIUS Authentication Server 6 Enter the time in seconds each client session may be...

Page 210: ...ld This is a password shared by the RADIUS server and the AP The same password must also be configured on the RADIUS server 11 Enter the maximum time in seconds that the AP should wait for the RADIUS server to respond to a request in the Response Time field Range is 1 10 seconds default is 3 seconds 12 Enter the maximum number of times an authentication request may be retransmitted in the Maximum ...

Page 211: ...on ends an Accounting Stop request is sent to the RADIUS server Session Length Accounting sessions continue when a client reauthenticates to the same AP Sessions are terminated when A client disassociates A client does not transmit any data to the AP for a fixed amount of time A client is detected on a different interface If the client roams from one AP to another one session is terminated and a n...

Page 212: ...le Back up RADIUS Accounting Server 4 Enter the session timeout interval in minutes within the Accounting Inactivity Timer field An accounting session automatically ends for a client that is idle for the period of time specified Range is 1 60 minutes default is 5 minutes 5 Select a Server Addressing Format type IP Address or Name If you want to identify RADIUS servers by name you must configure th...

Page 213: ...seconds that the AP should wait for the RADIUS server to respond to a request in the Response Time field Range is 1 10 seconds default is 3 seconds 10 Enter the maximum number of times an authentication request may be retransmitted in the Maximum Retransmissions field Range is 1 4 default is 3 11 If you are configuring a back up server repeat Steps 5 through 10 for the back up server 12 Click OK t...

Page 214: ...RADIUS 4 126 Avaya Wireless AP 3 User s Guide Figure 4 15 RADIUS Accounting Server Configuration ...

Page 215: ...ort up to 16 SSIDs per wireless interface to segment wireless networks based on VLAN membership NOTE For Dual radio APs APs with an 11a Upgrade Kit or 802 11b g Kit support up to 16 VLAN SSID pairs APs with an 802 11b PC Card or a 5 GHz Upgrade Kit support only one VLAN SSID per radio VLAN Overview Virtual Local Area Networks VLANs are logical groupings of network hosts Defined by software setting...

Page 216: ...ort certain network settings should be configured and network resources such as a VLAN aware switch a RADIUS server and possibly a DHCP server should be available Once enabled VLANs are used to conveniently efficiently and easily manage your network in the following ways Manage adds moves and changes from a single point of contact Define and monitor groups Reduce broadcast and multicast traffic to...

Page 217: ...ket headers and directs traffic to the appropriate ports On the wired network a RADIUS server authenticates traffic and a DHCP server manages IP addresses for the VLAN s Resources like servers and printers may be present and a hub may include multiple APs extending the network over a larger area In this figure the numbered items correspond to the following components 1 VLAN enabled access point 2 ...

Page 218: ...VLAN SSID 4 130 Avaya Wireless AP 3 User s Guide Figure 4 16 Components of a typical VLAN ...

Page 219: ...s per radio Note that 802 11b APs Single or Dual radio models and 5 GHz Upgrade Kits for Dual radio APs can only support one VLAN SSID per radio The AP matches packets transmitted or received to a network name with the associated VLAN Traffic received by a VLAN is only sent on the wireless interface associated with that same VLAN This eliminates unnecessary traffic on the wireless LAN conserving b...

Page 220: ... a gateway that allowed access to only the Internet A member of the GUEST workgroup could send and receive e mail and access the Internet but would be prevented from accessing servers or hosts on the local corporate network Typical User VLAN Configurations VLANs segment network traffic into workgroups which enable you to limit broadcast and multicast traffic Workgroups enable clients from differen...

Page 221: ... VLAN SSID Pairs NOTE You must reboot the AP before any changes to these parameters take effect 1 Click Configure VLAN 2 Place a check mark in the Enable VLAN Protocol box to enable VLAN support 3 Click the tab for Wireless A or Wireless B if applicable VLAN disabled Your network does not use VLANs but you can configure the AP to use multiple SSIDs VLAN enabled all VLAN Workgroups use the same VLA...

Page 222: ... ID in the field provided As defined by the 802 1Q standard a VLAN ID is a number between 1 and 4094 A value of 1 means that an entry is untagged You can use the same VLAN ID for all SSIDs if you want all wireless clients to be part of the same VLAN You can specify a different VLAN ID for each SSID The VLAN ID must match an ID used by your network contact your network administrator if you need ass...

Page 223: ...nt stations or hosts and the AP itself members of a common VLAN Simply configure a non zero management VLAN ID and enable VLAN to restrict management of the AP to members of the same VLAN NOTE If a non zero management VLAN ID is configured then management access to the AP is restricted to wired or wireless hosts that are members of the same VLAN Ensure your management platform or host is a member ...

Page 224: ...ser IDs on the AP all members of that User VLAN will have management access to the AP Be careful to restrict VLAN membership to those with legitimate access to the AP 1 Click Configure VLAN 2 Set the VLAN Management ID to use the same VLAN ID as one of the configured SSID VLAN pairs See Typical User VLAN Configurations for details 3 Place a check mark in the Enable VLAN Protocol box Disable VLAN M...

Page 225: ... the AP IP ARP Table Displays the AP s IP Address Resolution table Learn Table Displays the list of nodes that the AP has learned are on the network IAPP Provides statistics for the Inter Access Point Protocol messages sent and received by the AP RADIUS Provides statistics for the configured primary and backup RADIUS server s Interfaces Displays the Access Point s interface statistics Wireless and...

Page 226: ... use of the HTTP interface For more information about viewing network statistics with the CLI refer to Command Line Interface CLI Follow these steps to monitor an AP s operating statistics using the HTTP interface 1 Open a Web browser on a network computer NOTE The HTTP interface supports the following Web browser Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later 2 I...

Page 227: ...return to Internet Explorer 3 Enter the Access Point s IP address in the browser s Address field and press Enter Result The AP Enter Network Password screen appears 4 Enter the HTTP password in the Password field and click OK Leave the User Name field blank By default the HTTP password is public Result The System Status screen appears Figure 5 1 Enter Network Password Screen ...

Page 228: ...ed on the left hand side of the screen Figure 5 2 Monitor Main Screen 6 Click the tab that corresponds to the statistics you want to review For example click Learn Table to see the list of nodes that the AP has discovered on the network 7 If applicable click the Refresh button to update the statistics ...

Page 229: ...re loaded This screen displays the following information for each Access Point component Serial Number The component s serial number if applicable Component Name ID The AP identifies a system component based on its ID Each component has a unique identifier Variant Several variants may exist of the same component for example a hardware component may have two variants one with more memory than the o...

Page 230: ...Version 5 6 Avaya Wireless AP 3 User s Guide Figure 5 3 Version Information Screen ...

Page 231: ...CMP This tab provides statistical information for both received and transmitted messages directed to the AP Not all ICMP traffic on the network is counted in the ICMP Internet Control Message Protocol statistics Figure 5 4 ICMP Monitoring Screen ...

Page 232: ...P ARP Table 5 8 Avaya Wireless AP 3 User s Guide IP ARP Table This tab provides information based on the Address Resolution Protocol ARP which relates MAC Address and IP Addresses Figure 5 5 IP ARP Table ...

Page 233: ...is tab displays information relating to network bridging It reports the MAC address for each node that the device has learned is on the network and the interface on which the node was detected There can be up 10 000 entries in the Learn Table Figure 5 6 Learn Table ...

Page 234: ...IAPP 5 10 Avaya Wireless AP 3 User s Guide IAPP This tab displays statistics relating to client handovers and communications between Avaya Wireless Access Points Figure 5 7 IAPP Screen ...

Page 235: ...User s Guide 5 11 RADIUS This tab provides RADIUS authentication and accounting information for both the Primary and Backup RADIUS servers NOTE RADIUS authentication and accounting must be enabled for this information to be valid ...

Page 236: ...RADIUS 5 12 Avaya Wireless AP 3 User s Guide Figure 5 8 RADIUS Monitoring Screen ...

Page 237: ...Interfaces Avaya Wireless AP 3 User s Guide 5 13 Interfaces This tab displays statistics for the Ethernet and wireless interfaces The Operational Status can be up down or testing ...

Page 238: ...Interfaces 5 14 Avaya Wireless AP 3 User s Guide Figure 5 9 Wireless Interface Monitoring ...

Page 239: ...e strength of the connection The devices start by exchanging packets at the 11 Mbits sec rate but fall back to the slower rates if necessary NOTE This feature is not available for an 802 11a or 802 11b g AP Also this feature is not available if you are using an Avaya 802 11a b Card or a non Avaya Wireless client with an 802 11b AP Follow these steps to perform a Link Test 1 Open the Remote Link Te...

Page 240: ...t a Station from the list by clicking the circle to the left of the Station s entry 4 Click Link Test to start the test Result A new Link Test window opens and displays the following information for the Access Point referred to as the Initiator Station and the wireless client referred to as the Remote Station ...

Page 241: ... running average since the start of the test and is reported as a negative number Higher numbers correspond to a stronger link For example 40 dBm corresponds to a stronger signal than 50 dBm The bar graph also displays the relative strength of the signal a longer bar represents a stronger signal Noise dBm The strength of the noise detected at the receiver reported in dBm decibels referenced to 1 m...

Page 242: ... a strong link 5 5 Mbps pkts The number of packets received at the 5 5 Mbits sec transmit rate since the start of the Link Test 2 Mbps pkts The number of packets received at the 2 Mbits sec transmit rate since the start of the Link Test 1 Mbps pkts The number of packets received at the 1 Mbits sec transmit rate since the start of the Link Test NOTE Click the Refresh button periodically to update t...

Page 243: ...Link Test 802 11b APs Only Avaya Wireless AP 3 User s Guide 5 19 Figure 5 11 SNR Report Screen 5 Click Close to end the Link Test ...

Page 244: ...configuration settings to factory defaults Help Link Configure the location where the AP Help files can be found Logging into the HTTP Interface Once the AP has a valid IP Address and an Ethernet connection you may use your web browser to issue commands The Command Line Interface CLI also provides a method for issuing commands using Telnet or a serial connection This section covers only use of the...

Page 245: ...isable the Internet proxy settings For Internet Explorer users follow these steps Select Tools Internet Options Click the Connections tab Click LAN Settings If necessary remove the check mark from the Use a proxy server box Click OK twice to save your changes and return to Internet Explorer 3 Enter the Access Point s IP address in the browser s Address field and press Enter Result The Enter Networ...

Page 246: ...to the HTTP Interface Avaya Wireless AP 3 User s Guide 6 3 Result The System Status screen appears Figure 6 1 Enter Network Password Screen 5 Click the Commands button located on the left hand side of the screen ...

Page 247: ...ng into the HTTP Interface 6 4 Avaya Wireless AP 3 User s Guide Figure 6 2 Commands Main Screen 6 Click the tab that corresponds to the command you want to issue For example click Reboot to restart the unit ...

Page 248: ...r must be running and configured to point to the directory containing the file Figure 6 3 Download Command Screen If you don t have a TFTP server installed on your system install the TFTP server from the Avaya Wireless CD You can either install the TFTP server from the CD Wizard or run OEM TFTP Server exe found in the CD s Xtras SolarWinds sub directory ...

Page 249: ...ccess Point to the AP Image file File Name Enter the name of the file to be downloaded including the file extension Copy the updated AP Image file to the TFTP server s root folder The default AP Image is located at C Program Files Avaya_Wireless AP600 File Type Select the proper file type Choices include Config for configuration information such as System Name Contact Name and so on Img for the AP...

Page 250: ...n information If you don t have a TFTP server installed on your system install the TFTP server from the Avaya Wireless CD You can either install the TFTP server from the CD Wizard or run OEM TFTP Server exe found in the CD s Xtras SolarWinds sub directory Server IP Address Enter the TFTP server IP Address Double click the TFTP server icon on your desktop and locate the IP address assigned to the T...

Page 251: ...f any and reset the AP Entering a value of 0 zero seconds causes an immediate reboot Note that Reset described below does not save configuration changes CAUTION Rebooting the AP will cause all users who are currently connected to lose their connection to the network until the AP has completed the restart pro cess and resumed operation ...

Page 252: ...Reboot Avaya Wireless AP 3 User s Guide 6 9 Figure 6 5 Reboot Command Screen ...

Page 253: ...t Since this will reset the Access Point s current IP address a new IP address must be assigned Refer to Recovery Procedures for more information CAUTION Resetting the AP to its factory default configuration will permanently over write all changes that have made to the unit The AP will reboot automati cally after this command has been issued Figure 6 6 Reset to Factory Defaults Command Screen ...

Page 254: ...TML index htm NOTE Use the forward slash character rather than the backslash character when configuring the Help Link location The Avaya Wireless AP Help information is available in English French German Italian Spanish and Japanese The Help files are copied to your computer in one language only If you want to place these files on a shared drive copy the Help Folder to the new location and then sp...

Page 255: ...Help Link 6 12 Avaya Wireless AP 3 User s Guide Figure 6 7 Help Link Configuration Screen ...

Page 256: ...ons Recovery Procedures Related Applications NOTE This section helps you locate problems related to the AP device setup For details about RADIUS TFTP serial communication programs such as HyperTerminal Telnet applications or web browsers please refer to the documentation that came with the application for assistance ...

Page 257: ...a network with an active DHCP server then use ScanTool to locate the IP address of your unit If a DHCP server is not active on your subnet then use ScanTool to assign a static IP address to the unit The Trivial File Transfer Protocol TFTP provides a means to download and upload files These files include the AP Image executable program and configuration files If the AP password is lost or forgotten...

Page 258: ... Guide 7 3 The AP Supports a Command Line Interface CLI If you are having trouble locating your AP on the network connect to the unit directly using the serial interface and refer to Command Line Interface CLI for CLI command syntax and parameter names ...

Page 259: ...AP AP Unit Will Not Boot No LED Activity 1 Make sure your power source is operating 2 Make sure all cables are connected to the AP correctly 3 If you are using Active Ethernet make sure you are using a Category 5 foiled twisted pair cable to power the AP Serial Link Does Not Work 1 Make sure you are using a standard straight through 9 pin serial cable 2 Double check the physical network connection...

Page 260: ...e AP IP address you can use the Ping command over Ethernet to test the IP Address If the AP responds to the Ping then the Ethernet Interface is working properly 2 By default the Access Point will attempt to automatically detect the Ethernet settings However if you are having problems with the Ethernet link manually configure the Access Point s Ethernet settings For example if your switch operates ...

Page 261: ...network parameters but does not affect the AP Image The default AP HTTP password is public and the default Telnet password is also public Client Computer Cannot Connect 1 Client computers should have the same Network Name and security settings as the AP 2 Network Names should be allocated and maintained by the Network Administrator 3 Refer to the documentation that came with your client card for a...

Page 262: ...network s DHCP server is not available while the AP is booting the device will retain the last IP Address it had Reboot the AP once your DHCP server is on line again or use the ScanTool to find the Access Point s current IP address 3 To find the unit s current IP address if using DHCP open the IP Client Table in the DHCP Server and match the Access Point s IP address to its MAC address found on th...

Page 263: ... compatible browser Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later 2 Make sure you have the proper IP address Enter your Access Point s IP Address in the browser address bar similar to this example http 192 168 1 100 When the Enter Network Password window appears leave the User Name field empty and enter the HTTP password in the Password field The default HTTP pas...

Page 264: ... the pathname for the Help files a Click the Commands button in the HTTP interface b Select the Help tab located at the top of the screen c Enter the pathname where the Help files are located in the Help Link box d Click OK when finished Telnet CLI Does Not Work 1 Make sure you have the proper IP Address Enter your AP IP address in the Telnet connection dialog from a DOS prompt type C telnet AP IP...

Page 265: ...s a valid IP address 3 Configure the TFTP Server to point to the folder containing the file to be downloaded or to the folder in which the file is to be uploaded 4 Verify that you have entered the proper AP Image file name including the file extension and directory path 5 If you have a problem uploading a file verify that the TFTP server is configured to allow uploads typically the default setting...

Page 266: ... your client software with the proper Network Name and Security settings Network Names and WEP Keys are typically allocated and maintained by your network administrator Client PC Card Does Not Work 1 Make sure you are using the latest PC Card driver software 2 Download and install the latest Avaya Wireless client software from http www avaya com support ...

Page 267: ...igured as a DHCP server open the Web browser Interface and select the Configure button and then the Network tab to make sure the proper DHCP settings are being used 2 If you are not using the DHCP server feature on the AP then make sure that your local DHCP server is accessible from the Access Point s subnet 3 From the client computer use the ping network command to test the connection with the AP...

Page 268: ... IDs configured for the AP NOTE For Dual radio APs APs with an 11a Upgrade Kit or 802 11b g Kit support up to 16 VLAN SSID pairs APs with an 802 11b PC Card or a 5 GHz Upgrade Kit support only one VLAN SSID per radio VLAN Workgroups The correct VLAN assignment can be verified by pinging the AP to ensure connectivity by pinging the switch to ensure VLAN properties and by pinging hosts past the swit...

Page 269: ...re your password is correct If your password is incorrect or all inbound packets do NOT have the correct tag then a manual override is necessary CAUTION The manual override process disconnects all users and resets all values to factory defaults Active Ethernet AE The AP Does Not Work 1 Verify that you are using a standard UTP Category 5 cable 2 Try a different port on the same AE hub remember to m...

Page 270: ...that the AE hub is connected to the Ethernet network with a good connection 3 Verify that the Ethernet cable is Category 5 or better and is less than 100 meters approximately 325 feet in length from the Ethernet source to the AP 4 Try to connect a different device to the same port on the AE hub if it works and a link is established there is probably a faulty data link in the AP 5 Try to re connect...

Page 271: ... problems relate to IP addressing For example without the TFTP server IP Address you will not be able to download a new AP Image to the AP IP Address management is fundamental It is recommended that you create a chart to document and validate the IP addresses for your system If the password is lost or forgotten you will need to reset the AP to default values The Reset to Factory Default Procedure ...

Page 272: ... if you forget the Access Point s password 1 Press and hold the RELOAD button for 10 seconds NOTE See RELOAD and RESET Buttons to identify the buttons You need to use a pin or the end of a paperclip to press a button Result The AP reboots and the factory default network values are restored 2 If not using DHCP use the ScanTool or CLI over a serial connection to set the IP address subnet mask and ot...

Page 273: ...uttons Forced Reload Procedure Use this procedure to erase the current AP Image and download a new AP Image In some cases specifically when a missing or corrupted AP Image prevents successful booting you may need to use ScanTool or the Bootloader CLI to download a new executable AP Image ...

Page 274: ...otloader CLI over the serial port to set the IP address and download a new AP Image Follow these steps 1 While the unit is running press the RESET button NOTE See RELOAD and RESET Buttons to identify the buttons You need to use a pin or the end of a paperclip to press a button Result The AP reboots and the indicators begin to flash CAUTION By completing Step 2 the firmware in the AP will be erased...

Page 275: ...ted to the same network or a single computer running both programs ScanTool detects if an Access Point does not have a valid software image installed In this case the TFTP Server and Image File Name parameters are enabled in the ScanTool s Change screen so you can download a new image to the unit These fields are grayed out if ScanTool does not detect a software image problem Preparing to Download...

Page 276: ...rmation temporarily to the Access Point since its DHCP client functionality is not available when no image is installed on the device 6 Enter an unused IP address that is valid on your network in the IP Address field You may need to contact your network administrator to get this address 7 Enter the network s Subnet Mask in the field provided 8 Enter the network s Gateway IP Address if necessary Yo...

Page 277: ...vice has been updated successfully to return to the Scan List screen 13 Click Cancel to close the ScanTool 14 When the download process is complete configure the AP as described in Getting Started and Advanced Configuration Download a New Image Using the Bootloader CLI To download the AP Image you will need an Ethernet connection to the computer on which the TFTP server resides This can be any com...

Page 278: ... is running and configured to point to the folder containing the image to be downloaded Download Procedure 1 Download the latest software from http www avaya com support 2 Copy the latest software updates to your TFTP server s default directory 3 Use a straight through serial cable to connect the Access Point s serial port to your computer s serial port NOTE You must remove the Access Point s cabl...

Page 279: ... None 5 Under File Properties Settings ASCII Setup enable the Send line ends with line feeds option Result HyperTerminal sends a line return at the end of each line of code 6 Press the RESET button on the AP Result The terminal display shows Power On Self Tests POST activity After approximately 30 seconds a message indicates Sending Traps to SNMP manager periodically After this message appears pre...

Page 280: ...e name show tftp to confirm your new settings Device name reboot 0 Example Device name set ipaddrtype static Device name set ipaddr 10 0 0 12 Device name set ipsubmask 255 255 255 0 Device name set tftpipaddr 10 0 0 20 Device name set tftpfilename MyImage bin Device name set ipgw 10 0 0 30 Device name show ip Device name show tftp Device name reboot 0 Result The AP will reboot and then download th...

Page 281: ...ard straight through serial data RS 232 cable with a one male DB 9 connector and one female DB 9 connector The AP comes with a female 9 pin serial port ASCII Terminal software such as HyperTerminal Attaching the Serial Port Cable 1 Unlock and remove the cable cover from the AP 2 Remove the front cover from the AP to reveal the serial port 3 Connect one end of the serial cable to the AP and the oth...

Page 282: ...ommunicate with the AP CLI supports most generic terminal emulation programs such as HyperTerminal which is included with the Windows operating systems In addition many web sites offer shareware or commercial terminal programs you can download Once the IP address has been assigned you can use the HTTP interface or the CLI over Telnet to complete configuration ...

Page 283: ...II Setup enable the Send line ends with line feeds option Result HyperTerminal sends a line return at the end of each line of code 3 Press the RESET button on the AP see RELOAD and RESET Buttons to identify the location of the RESET button Result The terminal display shows Power On Self Tests POST activity and then displays a CLI prompt similar to the example below This process may take up to 90 s...

Page 284: ...efault If you have a DHCP server on your network you should not need to manually configure the Access Point s IP address the Access Point will obtain an IP address from the network s DHCP server during boot up Result After each entry the CLI reminds you to reboot however wait to reboot until all commands have been entered Device name set ipaddrtype static Device name set ipaddr IP Address Device n...

Page 285: ...pplications RADIUS Authentication Server If you enabled RADIUS Authentication on the AP make sure that your network s RADIUS servers are operational Otherwise clients will not be able to log in There are several reasons the authentication server services might be unavailable here are two typical things to check Make sure you have the proper RADIUS authentication server information setup configured...

Page 286: ...ng you will not be able to download and upload images and configuration files to from the AP Remember that the TFTP server does not have to be local so long as you have a valid TFTP IP address Note that you do not need a TFTP server running unless you want to transfer files to or from the AP After the TFTP server is installed Check to see that TFTP is configured to point to the directory containin...

Page 287: ... CLI commands may be entered in real time through a keyboard or submitted with CLI scripts The CLI is available through both the Serial Port interface and over the Ethernet interface using Telnet NOTE All CLI commands and parameters are case sensitive General Notes Command Line Interface CLI Variations CLI Command Types Using Tables User Strings Configuring the AP using CLI commands Set Basic Conf...

Page 288: ...n addition you should be familiar with software setup procedures for typical network operating systems and servers Notation Conventions Computer prompts are shown as constant width type For example Device name Information that you input as shown is displayed in bold constant width type For example Device name set ipaddr 10 0 0 12 The names of keyboard keys software buttons and field names are disp...

Page 289: ...pload Downloads transfer files to the Access Point Uploads transfer files from the Access Point The TFTP server performs file transfers in both directions Group A logical collection of network parameter information For example the System Group is composed of several related parameters Groups can also contain Tables All items for a given Group can be displayed with a show Group CLI Command Image Fi...

Page 290: ...e Wireless interface must be assigned an SSID Change parameters with the CLI set Command and view them with the CLI show Command Table Tables hold parameters for several related items For example you can add several potential managers to the SNMP Table All items for a given Table can be displayed with a show Table CLI Command TFTP Refers to the TFTP Server used for file transfers Term Description ...

Page 291: ...ckspace Delete previous character Ctrl A Move cursor to beginning of line Ctrl E Move cursor to end of line Ctrl F Move cursor forward one character Ctrl B Move cursor back one character Ctrl D Delete the character the cursor is on Ctrl U Delete all text to left of cursor Ctrl P Go to the previous line in the history buffer Ctrl N Go to the next line in the history buffer Tab Complete the command ...

Page 292: ...s been entered at the command prompt Invalid Table Index An invalid table index has been entered at the command prompt Invalid Table Parameter An invalid table parameter has been entered at the command prompt Invalid Table Parameter Value An invalid table parameter value has been entered at the command prompt Read Only Parameter User is attempting to configure a read only parameter Incorrect Passw...

Page 293: ...rmal CLI unless otherwise specified Bootloader CLI The Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration of the AP This interface is only accessible via the serial interface if the AP does not contain a software image or a download image command over TFTP has failed The Bootloader CLI provides you with the ability to configure the initial setup parameters a...

Page 294: ... Wireless AP 3 User s Guide The parameters supported by the Bootloader CLI for viewing and modifying are System Name IP Address Assignment Type IP Address IP Mask Gateway IP Address TFTP Server IP Address Image File Name including the file extension ...

Page 295: ...nd Line Interface CLI Variations Avaya Wireless AP 3 User s Guide A 9 The following lists display the results of using the help command in the Bootloader CLI Figure A 1 Results of help bootloader CLI command ...

Page 296: ...d Line Interface CLI Variations A 10 Avaya Wireless AP 3 User s Guide The following lists display the results of using the show command in the Bootloader CLI Figure A 2 Results of show bootloader CLI command ...

Page 297: ...erational commands include Typing a question mark lists CLI Commands or parameters depending on usage you do not need to type Enter after typing this command done exit quit Terminates the CLI session download Uses TFTP server to download image config or bootloader upgrade files to Access Point help Displays general CLI help information or command help information such as command usage and syntax h...

Page 298: ...ands and parameters The following table lists each operation and provides a basic example Following the table are detailed examples and display results for each operation Operation Basic Example Display the Command List Example 1 Device Name Display commands that start with specified letters Example 2 Device Name s Display parameters for set and show Commands Examples 3a and 3b Device Name set Dev...

Page 299: ...st To display the Command List enter Device Name Figure A 3 Result of CLI command Example 2 Display specific Commands To show all commands that start with specified letters enter one or more letters then with no space between letters and Device Name s Figure A 4 Result of s CLI command ...

Page 300: ... 3 Display parameters for set and show Example 3a allows you to see every possible parameter for the set or show commands Notice from example 3a that the list is very long Example 3b shows how to display a subset of the parameters based on initial parameter letters ...

Page 301: ...CLI Command Types Avaya Wireless AP 3 User s Guide A 15 Example 3a Display every parameter that can be changed Device Name set Figure A 5 Result of set CLI command ...

Page 302: ...ple shows entries for parameters that start with the letter i The more letters you enter the fewer the results returned Notice that there is no space between the letters and the question mark Device Name show ipa Figure A 6 Result of show ipa CLI command Device Name show iparp Figure A 7 Result of show iparp CLI command ...

Page 303: ...ddress of the TFTP server After entering one parameter you may add another to the new CLI line to see the next parameter prompt and so on until you have entered all of the required parameters The following example shows how this is used for the download Command The last part of the example shows the completed download Command ready for execution Device Name download TFTP IP Address Device Name dow...

Page 304: ... the asterisks character will make use of the previously set TFTP parameters Executing download without parameters will display command help and usage information 1 Syntax to download a file Device Name download tftp server address path and filename file type Example Device Name download 192 168 1 100 APImage2 img 2 Syntax to display help and usage information Device Name download 3 Syntax to exec...

Page 305: ...ser s Guide A 19 help Displays instructions on using control key sequences for navigating a Command Line and displays command information and examples 1 Using help as the only argument Device Name help Figure A 8 Results of help CLI command ...

Page 306: ...uffer stores command statements entered in the current session To avoid re entering long command statements use the keyboard up arrow Ctrl P and down arrow Ctrl N keys to recall previous statements from the Command History Buffer When the desired statement reappears press the Enter key to execute or you may edit the statement before executing it Device Name history passwd Changes the CLI Password ...

Page 307: ...ce Name reboot 0 Device Name reboot 30 search Lists the parameters supported by the specified table This list corresponds to the table information displayed in the HTTP interface In this example the CLI returns the list of parameters that make up an entry in the IP Access Table Device Name search mgmtipaccesstbl Figure A 9 Results of search mgmtipaccesstbl CLI command ...

Page 308: ...FTP parameters Executing upload without parameters will display command help and usage information 1 Syntax to upload a file Device Name upload tftp server address path and filename filetype Example Device Name upload 192 168 1 100 APconfig sys config 2 Syntax to display help and usage information Device Name help upload 3 Syntax to execute the upload command using previously set stored TFTP Param...

Page 309: ...se this CLI Command to change parameter values You can use a single CLI statement to modify Tables or you can modify each parameter separately show CLI Command Displays the value of the specified parameter or displays all parameter values of a specified group parameter table Groups contain Parameters and Tables Tables contain parameters for a series of similar entities To see a definition and synt...

Page 310: ... parameter To see a definition and syntax example type only set and then press the Enter key To see a list of available parameters enter a space then a question mark after set example set Syntax Device Name set parameter value Device Name set table index argument 1 value 1 argument N value N Example Device Name set sysloc Main Lobby Device Name set mgmtipaccesstbl 0 ipaddr 10 0 0 10 ipmask 255 255...

Page 311: ... CLI provides informational messages when the user has configured an object that requires a reboot The following messages are displayed as a result of the configuring such object or objects Example 1 Configuring objects that require the device to be rebooted The following message is displayed every time the user has configured an object that requires the device to be rebooted Device Name set ipadd...

Page 312: ...lso provides a message as a result of the exit quit or done command if changes have been made to objects that require reboot If you make changes to objects that require reboot and execute the exit command the following message is displayed Device Name exit CR OR quit CR OR done CR Modifications have been made to parameters that require the device to be rebooted These changes will only take effect ...

Page 313: ... parameters may be set individually or all parameters for a given table can be set with a single statement Example 1 Set the Access Point IP Address Parameter Syntax Device Name set parameter name parameter value Example Device Name set ipaddr 10 0 0 12 Result IP Address will be changed when you reboot the Access Point The CLI reminds you when rebooting is required for a change to take effect To r...

Page 314: ...f you do not specify a value Syntax Device Name set table name table index element 1 value 1 element n value n Example Device Name set mgmtipaccesstbl 0 ipaddr 10 0 0 10 ipmask 255 255 0 0 Result A new table entry is created for IP address 10 0 0 10 with a 255 255 0 0 subnet mask Example 3 Modify a table entry or row Use the index to be modified and the table elements you would like to modify For ...

Page 315: ... Example 4 Enable Disable or Delete a table entry or row The following example illustrates how to manage the second entry in a table Syntax Device Name set Table index status enable disable delete Device Name set Table index status 1 enable 2 disable 3 delete Example Device Name set mgmtipaccesstbl 2 status enable Device Name set mgmtipaccesstbl 2 status disable Device Name set mgmtipaccesstbl 2 s...

Page 316: ...is example illustrates how to view all elements of a group or table Syntax Device Name show group name Example Device Name show network Result The CLI displays network group parameters Note show network and show ip return the same data Figure A 10 Results of show network and show ip CLI Commands ...

Page 317: ...eter Syntax Device Name show parameter name Example Device Name show ipaddr Result Displays the Access Point IP address Figure A 11 Result of show ipaddr CLI Command 2 View all parameters in a table Syntax Device Name show table name Example Device Name show mgmtipaccesstbl Result Displays the IP Access Table and its entries ...

Page 318: ...r 10 0 0 10 ipmask 255 255 0 0 Below are the rules for creating modifying enabling disabling and deleting table entries Creation The table name is required The table index is required for table entry instance creation the index is always zero 0 The order in which the table arguments or objects are entered in not important Parameters that are not required can be omitted in which case they will be a...

Page 319: ...e modified the order in which they are entered is not important If the entire table entry is to be modified all the table objects have to be specified Enabling Disabling The table name is required The table index is required for table enabling disabling the index should be the index of the entry to be enabled disabled The entry s new state either enable or disable is required Deletion The table na...

Page 320: ...e parser For this CLI implementation the single quote or double quote character can be used at the beginning and at the end of the string For example Device Name set sysname Lobby Does not need quote marks Device Name set sysname Front Lobby Requires quote marks The scenarios supported by this CLI are My Desk in the office Double Quotes My Desk in the office Single Quotes My Desk in the office Sin...

Page 321: ...tring objects that contain blank space characters If the string object being used does not contain blank spaces then the string delimiters single or double quotes mentioned in this section are not required My Desk in the office Double Quotes within Single Quotes Daniel s Desk in the office One Single Quote within Double Quotes Daniel s Desk in the office One Double Quote within Single Quotes ...

Page 322: ...rt COM1 COM2 etc depending on your computer Baud rate 9600 Data Bits 8 Stop bits 1 Flow Control None Parity None 2 Under File Properties Settings ASCII Setup enable the Send line ends with line feeds option Result HyperTerminal sends a line return at the end of each line of code 3 Enter the CLI password default is public NOTE Avaya recommends changing your default passwords immediately To perform ...

Page 323: ... IP subnet as the AP NOTE If you have not previously configured the Access Point s IP address and do not have a DHCP server on the network the Access Point will default to an IP address of 10 0 0 1 2 Go to the DOS command prompt on your computer 3 Type telnet IP Address of the unit 4 Enter the CLI password default is public NOTE Avaya recommends changing your default passwords immediately To perfo...

Page 324: ...wnload an AP Configuration File from your TFTP Server Set Network Names for the Wireless Interface Set WEP Encryption for the Wireless Interface Download an AP Configuration File from your TFTP Server Backup your AP Configuration File Set System Name Location and Contact Information Device Name set sysname system name sysloc Unit Location Device Name set sysctname Contact Name person responsible f...

Page 325: ...ystem CLI Command Set Static IP Address for the AP NOTE The IP Subnet Mask of the AP must match your network s Subnet Mask Device Name set ipaddrtype static Device Name set ipaddr fixed IP address of unit Device Name set ipsubmask IP Mask Device Name set ipgw gateway IP address Device Name show network ...

Page 326: ... Name set snmprwpasswd New Password SNMP read write Device Name reboot 0 CAUTION Avaya strongly urges you to change the default passwords to restrict access to your network devices to authorized personnel If you lose or for get your password settings you can always perform the Reset to Factory Default Procedure Set Network Names for the Wireless Interface Device Name set wif index 3 Single radio A...

Page 327: ...Set Basic Configuration Parameters Avaya Wireless AP 3 User s Guide A 41 Figure A 13 Results of show wif CLI command for an AP ...

Page 328: ...ame length The available key sizes vary based on the Access Point s model See Security Encryption Key Length Table for more information You can set up to four encryption keys This example describes setting encryption Key 1 on the wireless card in Slot A if applicable a Single radio AP uses index 3 a Dual radio AP uses index 3 for Slot A and index 4 for Slot B Device Name set wifsec 3 encryptstatus...

Page 329: ...File from your TFTP Server Begin by starting your TFTP program It must be running and configured to transmit and receive Device Name set tftpfilename file name tftpfiletype config tftpipaddr IP address of your TFTP server Device Name show tftp to ensure the filename file type and the IP address are correct Device Name download Device Name reboot 0 ...

Page 330: ...d Backup your AP Configuration File Begin by starting your TFTP program It must be running and configured to transmit and receive Device Name upload TFTP Server IP address tftpfilename such as config sys config Device Name show tftp to ensure the filename file type and the IP address are correct After setting the TFTP parameters you can backup your current file so long as all the other parameters ...

Page 331: ...d below Configure the AP as a DHCP Server Configure the DNS Client Maintain Client Connections using Link Integrity Change your Wireless Interface Settings Set Ethernet Speed and Transmission Mode Set Interface Management Services Configure MAC Access Control Set RADIUS Parameters Set VLAN SSID Parameters NOTE Refer to Advanced Configuration for more information on these settings ...

Page 332: ...paddr end ip address Device Name set dhcpgw gateway ip address Device Name set dhcppridnsipaddr primary dns ip address Device Name set dhcpsecdnsipaddr secondary dns ip address Device Name set dhcpstatus enable Device Name reboot 0 CAUTION Before enabling this feature confirm that the IP address pools you have configured are valid addresses on the network and do not overlap the addresses assigned ...

Page 333: ...ent Device Name set dnsstatus enable Device Name set dnsprisvripaddr IP address of primary DNS server Device Name set dnssecsvripaddr IP address of secondary DNS server Device Name set dnsdomainname default domain name Device Name show dns Figure A 15 Results of show dns CLI command ...

Page 334: ... you want to check Device Name set linkintpollint the interval between link integrity checks Device Name set linkintpollretx number of times to retransmit before considering the link down Device Name set linkintstatus enable Device Name show linkinttbl confirm new settings Device Name reboot 0 Change your Wireless Interface Settings See Interfaces for information on the parameters listed below Sin...

Page 335: ...ult Reboot after disabling or enabling ACS Device Name set wif index autochannel enable disable Device Name reboot 0 Enable Disable Closed System Device Name set wif index closedsys enable disable Enable Disable Interference Robustness 802 11b Only Device Name set wif index interrobust enable disable mode Operational Mode 1 dot11b only 2 dot11g only 3 dot11bg 5 dot11g wifi ...

Page 336: ...f index distaps large medium small minicell microcell Device Name reboot 0 NOTE The distance between APs should not be approximated It is calculated by means of a manual Site Survey in which an AP is set up and clients are tested throughout the area to determine signal strength and coverage and local limits such as physical interference are investigated From these measurements the appropriate cell...

Page 337: ...et Ethernet Speed and Transmission Mode Device Name set etherspeed value see below Device Name reboot 0 Ethernet Speed and Transmission Mode Value 10 Mbits sec half duplex 10halfduplex 10 Mbits sec full duplex 10fullduplex 10 Mbits sec auto duplex 10autoduplex 100 Mbits sec half duplex 100halfduplex 100 Mbits sec full duplex 100fullduplex Auto Speed half duplex autohalfduplex Auto Speed auto duple...

Page 338: ...figure Management Ports Device Name set snmpifbitmask see below Device Name set httpifbitmask see below Device Name set telifbitmask see below Choose from the following values Interface bitmask Description 0 or 2 disable all interfaces All management channels disabled 1 or 3 Ethernet only Ethernet only enabled 4 or 6 Wireless A only Wireless A only enabled 8 or 10 Wireless B only Wireless B only e...

Page 339: ...out time in seconds between 1 and 300 default is 30 Device Name set telsessiontout time in seconds between 1 and 36000 default is 900 Configure Serial Port Interface NOTE To avoid unexpected performance issues leave Flow Control at the default setting none unless you are sure what this setting should be 12 Wireless A and Wireless B Wireless A and Wireless B enabled 13 or 15 all interfaces All mana...

Page 340: ...00 38400 57600 Device Name set serflowctrl none xonxoff Device Name show serial Figure A 16 Result of show serial CLI Command Configure Syslog Device Name set syslogpriority 1 7 default is 6 Device Name set syslogstatus enable disable Configure Intra BSS Device Name set intrabssoptype passthru default block ...

Page 341: ... the MAC Access Control Table Device Name set macacltbl index macaddr MAC Address status enable Device Name show macacltbl Disable or Delete an Entry in the MAC Access Control Table Device Name set macacltbl index status disable delete Device Name show macacltbl NOTE For larger networks that include multiple Access Points you may prefer to maintain this list on a centralized location using the RAD...

Page 342: ... Name set secconfigtbl index rekeyint 60 65535 seconds default is 900 sec Device Name show secconfigtbl to review your settings Device Name reboot 0 NOTE If you set Authentication Mode to 802 1x WPA or Mixed you also need to configure the RADIUS Authentication parameters If you set Authentication Mode to Mixed you also need to configure WEP Encryption settings For Dual radio APs WPA is available f...

Page 343: ...4 characters a minimum of 13 characters is recommended Device Name show wpaconfigtbl to review your settings Device Name reboot 0 Set RADIUS Parameters Configure RADIUS Authentication server Device Name set radiustbl index status enable seraddrfmt ipaddr or name ipaddr RADIUS IP address or name port user defined ssecret user defined responsetm 1 to 4 seconds maxretx 1 to 10 times Device Name show ...

Page 344: ...mand Enable RADIUS MAC Access Control Device Name set radmacaccctrl enable Device Name reboot 0 Set MAC Address Format Type Device Name set radmacaddrformat dashdelimited colondelimited singledashdelimited nodelimiter Set Authorization Lifetime Device Name set radauthlifetm 900 43200 seconds default is 900 ...

Page 345: ...ya Wireless AP 3 User s Guide A 59 Enable RADIUS Accounting Device Name set radaccstatus enable Device Name set radaccinactivetmr inactivity timer in minutes Device Name show radius Figure A 18 Result of show radius CLI Command ...

Page 346: ...ess or name port user defined ssecret user defined responsetm 1 to 4 seconds maxretx 1 to 10 times Device Name show radacctbl Figure A 19 Results of show radacctbl CLI command Set VLAN SSID Parameters NOTE For Dual radio APs APs with an 11a Upgrade Kit or 802 11b g Kit support up to 16 VLAN SSID pairs APs with an 802 11b PC Card or a 5 GHz Upgrade Kit support only one VLAN SSID per radio ...

Page 347: ... vlandidtbl to review your settings Device Name reboot 0 Disable VLAN Management Device Name set vlanstatus disable or Device Name set vlanmgmtid 0 Device Name reboot 0 Add an Entry to the VLAN ID Table Device Name set vlanidtbl index number see table id 1 4094 1 untagged ssid enter network name Device Name show vlandidtbl to review your settings Device Name reboot 0 ...

Page 348: ... the HTTP Web interface staticmp Displays the ICMP Statistics statarptbl Displays the IP ARP Table Statistics statbridgetbl Displays the Learn Table statiapp Displays the IAPP Statistics statradius Displays the RADIUS Authentication Statistics statif Displays information and statistics about the Ethernet and wireless interfaces stat802 11 Displays additional statistics for the wireless interfaces ...

Page 349: ...te can be set W Write Only CLI Parameter Parameter name as used in the Access Point Access Point network objects are associated with Groups The network objects are listed below and associated parameters are described in the following Parameter Tables System Parameters Access Point system information Inventory Management Information Hardware firmware and software version information Network Paramet...

Page 350: ... speed and duplex of the Ethernet port Management Parameters Control access to the AP s management interfaces SNMP Parameters Set read and read write passwords HTTP web browser Parameters Set up the graphical web browser interface Telnet Parameters Telnet Port setup Serial Port Parameters Serial Port setup TFTP Server Parameters Set up for file transfers specify IP Address file name and file type ...

Page 351: ...ork TCP UDP Port Filtering Filter IP packets based on TCP UDP port Alarms Parameters SNMP Table Host Table Parameters Enter the list of IP addresses that will receive alarms from the AP Syslog Parameters Configure the AP to send Syslog information to network servers Bridge Parameters Spanning Tree Parameters Used to help prevent network loops Storm Threshold Parameters Set threshold for number of ...

Page 352: ...ing information VLAN SSID Parameters Configure mutiple subnetworks based on VLAN ID and SSID pairs Other Parameters IAPP Parameters Enable or disable the Inter Access Point Protocol SpectraLink VoIP Parameters 802 11b Only Enable or disable SpectraLink Voice over IP feature System Parameters Name Type Values Access CLI Parameter System Group N A R system Name DisplayString User Defined RW sysname ...

Page 353: ...1 RW sysflashupdate System OID DisplayString N A R sysoid Descriptor DisplayString System Name flash version S N bootloader version R sysdescr Up Time Integer dd hh mm ss dd days hh hours mm minutes ss seconds R sysuptime Emergency Restore to defaults Resets all parameters to default factory values RW sysresettodefaults Note You must enter the following command twice to reset to defaults set sysre...

Page 354: ...twork Parameters IP Configuration Parameters Name Type Values Access CLI Parameter System Inventory Management Subgroup N A R sysinvmgmt Component Table Subgroup N A R sysinvmgmtcmptbl Component Interface Table Subgroup N A R sysinvmgmtcmpiftbl Name Type Values Access CLI Parameter Network Group N A R network IP Configuration Group N A R ip Note The network and ip parameters display the same infor...

Page 355: ...ess User Defined RW ipgw Default TTL Integer User Defined seconds 64 default RW ipttl Address Type Integer static dynamic default RW ipaddrtype Name Type Values Access CLI Parameter DNS Client Group N A R dns DNS Client status Integer enable disable default RW dnsstatus Primary DNS Server IP Address IpAddress User Defined RW dnspridnsipaddr Secondary DNS Server IP Address IpAddress User Defined RW...

Page 356: ... dhcpstatus Gateway IP Address IpAddress User Defined RW dhcpgw Primary DNS IP Address IpAddress User Defined RW dhcppridnsipaddr Secondary DNS IP Address IpAddress User Defined RW dhcpsecdnsipaddr Number of IP Pool Table Entries Integer32 N A R dhcpippooltblent Name Type Values Access CLI Parameter DHCP Server IP Address Pool Table Table N A R dhcpippooltbl Table Index Integer User Defined N A in...

Page 357: ... not both when creating an IP address pool Default Lease Time optional Integer32 0 86400 sec default RW defleasetm Maximum Lease Time optional Integer32 0 86400 sec default RW maxleasetm Comment optional DisplayString User Defined RW cmt Status optional Integer enable 1 disable 2 delete 3 RW status ...

Page 358: ...Interval Integer 500 15000 ms in increments of 500ms 500 ms default RW linkintpollint Link Integrity Poll Retransmissions Integer 0 255 5 default RW linkintpollretx Name Type Values Access CLI Parameter Link Integrity IP Target Table Table N A R linkinttbl Table Index Integer 1 5 N A index Target IP Address IpAddress User Defined RW ipaddr Comment optional DisplayString User Defined up to 254 char...

Page 359: ...s CLI Parameter Wireless Interfaces Group N A R wif Table Index Integer 3 or 4 Dual radio APs R index Network Name DisplayString 1 32 characters My Wireless Network default RW netname Auto Channel Select ACS 1 Integer enable default disable RW autochannel DTIM Period Integer 1 255 1 default RW dtimperiod RTS CTS Medium Reservation Integer 0 2347 Default is 2347 off RW medres MAC Address PhyAddress...

Page 360: ...ncy Channel Integer Varies by regulatory domain and country See 802 11a Channel Frequencies RW channel Supported Data Rates Octet String See Transmit Rate below R suppdatarates Transmit Rate Integer32 0 Auto Fallback default 6 Mbits sec 9 Mbits sec 12 Mbits sec 18 Mbits sec 24 Mbits sec 36 Mbits sec 48 Mbits sec 54 Mbits sec RW txrate Physical Layer Type Integer ofdm orthogonal frequency division ...

Page 361: ...bustness Integer enable default disable RW interrobust Operating Frequency Channel Integer 1 14 available channels vary by regulatory domain country see 802 11b Channel Frequencies RW channel Multicast Rate Integer 1 Mbits sec 1 2 Mbits sec 2 default 5 5 Mbits sec 3 11 Mbits sec 4 RW multrate Closed Wireless System Integer enable disable default RW closedsys Load Balancing Integer enable default d...

Page 362: ... sec 11 Mbits sec R suppdatarates Transmit Rate Integer32 0 auto fallback default 1 Mbits sec 2 Mbits sec 5 5 Mbits sec 11 Mbits sec RW txrate Supported Frequency Channels Octet String Depends on Regulatory Domain R suppchannels Physical Layer Type Integer dsss direct sequence spread spectrum for 802 11b R phytype Regulatory Domain List DisplayString U S Canada FCC Europe ETSI Japan MKK R regdomai...

Page 363: ...ween the Distance between APs and the Multicast Rate In general larger systems operate a lower average transmit rates Distance between APs Multicast Rate Large 1 and 2 Mbits sec Medium 1 2 and 5 5 Mbits sec Small 1 2 5 5 and 11 Mbits sec Minicell 1 2 5 5 and 11 Mbits sec Microcell 1 2 5 5 and 11 Mbits sec ...

Page 364: ...arameter Wireless Operational Mode Integer dot11b only dot11g only dot11bg default dot11g wifi RW mode Operating Frequency Channel Integer 1 14 available channels vary by regulatory domain country see 802 11g Channel Frequencies RW channel Supported Data Rates Octet String See Transmit Rate next R suppdatarates ...

Page 365: ...uto fallback default 1 Mbits sec 2 Mbits sec 5 5 Mbits sec 11 Mbits sec For 802 11g only mode 0 auto fallback default 6 Mbits sec 9 Mbits sec 12 Mbits sec 18 Mbits sec 24 Mbits sec 36 Mbits sec 48 Mbits sec 54 Mbits sec 36 Mbits sec 48 Mbits sec 54 Mbits sec RW txrate Name Type Values Access CLI Parameter ...

Page 366: ...2 For 802 11g wifi and 802 11bg modes 0 auto fallback default 1 Mbits sec 2 Mbits sec 5 5 Mbits sec 11 Mbits sec 6 Mbits sec 9 Mbits sec 12 Mbits sec 18 Mbits sec 24 Mbits sec RW txrate Physical Layer Type Integer ERP Extended Rate Protocol R phytype Name Type Values Access CLI Parameter ...

Page 367: ...Parameter WDS Table Table N A R wdstbl Port Index Integer 3 1 3 6 Wireless R portindex Status Integer enable disable RW status Partner MAC Address PhysAddress User Defined RW partnermacaddr Name Type Values Access CLI Parameter Ethernet Interface Group N A R ethernet Speed Integer 10halfduplex 10fullduplex 10autoduplex 100halfduplex 100fullduplex autohalfduplex autoautoduplex default RW etherspeed...

Page 368: ...Interface Bitmask Interface Bitmask 0 or 2 no interfaces disable 1 or 3 Ethernet 4 or 6 Wireless A 8 or 10 Wireless B 12 Wireless A B 13 or 15 all interfaces default is 15 RW snmpifbitmask Read Password DisplayString User Defined public default max 63 characters W snmprpasswd Read Write Password DisplayString User Defined public default max 63 characters W snmprwpasswd ...

Page 369: ...is available in English French German Italian Spanish and Japanese Name Type Values Access CLI Parameter HTTP Group N A R http HTTP Management Interface Bitmask Interface Bitmask 0 or 2 no interfaces disable 1 or 3 Ethernet 4 or 6 Wireless A 8 or 10 Wireless B 12 Wireless A B 13 or 15 all interfaces default is 15 RW httpifbitmask HTTP Password DisplayString User Defined max 64 characters W httppas...

Page 370: ...Bitmask 0 or 2 no interfaces disable 1 or 3 Ethernet 4 or 6 Wireless A 8 or 10 Wireless B 12 Wireless A B 13 or 15 all interfaces default is 15 RW telifbitmask Telnet Port Integer User Defined 23 default RW telport Telnet Login Inactivity Time out Integer 1 300 seconds 30 sec default RW tellogintout Telnet Session Idle Time out Integer 1 900 seconds 900 sec default RW telsessiontout ...

Page 371: ...ype Values Access CLI Parameter Serial Group N A R serial Baud Rate Integer 2400 4800 9600 default 19200 38400 57600 RW serbaudrate Data Bits Integer 8 R serdatabits Parity Integer none R serparity Stop Bits Integer 1 R serstopbits Flow Control Value none default xonxoff RW serflowctrl ...

Page 372: ... are stored in TFTP parameters for future use If nothing is specified in the command line when issuing subsequent upload and or download commands the stored arguments are used Name Type Values Access CLI Parameter TFTP Group N A R tftp TFTP Server IP Address IpAddress User Defined RW tftpipaddr TFTP File Name DisplayString User Defined RW tftpfilename TFTP File Type Integer img config bootloader R...

Page 373: ...ed by the following table CLI applies default values to the omitted arguments Due to the nature of the information the only argument that can be omitted is the comment argument Name Type Values Access CLI Parameter IP Access Table Table N A R mgmtipaccesstbl Table Index Integer User Defined N A index IP Address IpAddress User Defined RW ipaddr IP Mask IpAddress User Defined RW ipmask Comment optio...

Page 374: ...ype Values Access CLI Parameter Ethernet Filtering Group N A R etherflt Filtering Interface Bitmask Interface Bitmask 0 or 2 no interfaces disable 1 or 3 Ethernet 4 or 6 Wireless A 8 or 10 Wireless B 12 Wireless A B 13 or 15 all interfaces default is 15 RW etherfltifbitmask Operation Type passthru block RW etherfltoptype ...

Page 375: ...ype passthru or block applies only to the protocol filters that are enabled in this table Name Type Values Access CLI Parameter Ethernet Filtering Table Table N A R etherflttbl Table Index N A N A R index Protocol Number Octet String N A RW protonumber Protocol Name optional DisplayString RW protoname Status optional Integer enable 1 disable 2 delete 3 RW status ...

Page 376: ...ss on Wired Network PhysAddress User Defined RW wiredmacaddr Static MAC Address Mask on Wired Network PhysAddress User Defined RW wiredmask Static MAC Address on Wireless Network PhysAddress User Defined RW wirelessmacaddr Static MAC Address Mask on Wireless Network PhysAddress User Defined RW wirelessmask Comment optional DisplayString max 255 characters RW cmt Status optional Integer enable defa...

Page 377: ... CLI Parameter Proxy ARP Group N A R parp Status Integer enable disable default RW parpstatus Name Type Values Access CLI Parameter IP ARP Filtering Group N A R iparp Status Integer enable disable default RW iparpfltstatus IP Address IpAddress User Defined RW iparpfltipaddr Subnet Mask IpAddress User Defined RW iparpfltsubmask ...

Page 378: ...me Type Values Access CLI Parameter Broadcast Filtering Table Table N A R broadcastflttbl Index Integer 1 5 N A index Protocol Name DisplayString N A R protoname Direction Integer ethertowireless wirelesstoether both default RW direction Status Integer enable disable default RW status ...

Page 379: ...sed to configure TCP UDP Port filters Name Type Values Access CLI Port Filtering Group N A R portflt Port Filter Status Integer enable default disable RW portfltstatus Name Type Values Access CLI Port Filtering Table Table N A R portflttbl Table Index N A User Defined there are also 4 pre defined indices see Port Number in this table for more information R index Port Type Octet String tcp udp tcp ...

Page 380: ...there are also 4 pre defined protocols Index 1 NetBios Name Service 137 Index 2 NetBios Datagram Service 138 Index 3 NetBios Session Service 139 Index 4 SNMP Service 161 RW portnum Protocol Name DisplayString User Defined there are also 4 pre defined protocols see Port Number above RW protoname ...

Page 381: ...k Integer32 0 or 2 no interfaces disable 1 or 3 Ethernet 4 or 6 Wireless A 8 or 10 Wireless B 12 Wireless A B 13 or 15 all interfaces default is 15 RW ifbitmask Status optional Integer enable default for new entries disable default for pre defined entries delete RW status ...

Page 382: ...the nature of the information the only argument that can be omitted is the comment argument Name Type Values Access CLI Parameter SNMP Trap Host Table Table N A R snmptraphosttbl Table Index Integer User Defined N A index IP Address IpAddress User Defined RW ipaddr Password DisplayString User Defined up to 64 characters W passwd Comment optional DisplayString User Defined up to 254 characters RW c...

Page 383: ...Integer enable disable default RW syslogstatus Syslog Port Octet String 514 R syslogport Syslog Lowest Priority Logged Integer 1 7 1 LOG_ALERT 2 LOG_CRIT 3 LOG_ERR 4 LOG_ WARNING 5 LOG_NOTICE 6 LOG_INFO default 7 LOG_DEBUG RW syslogpritolog Heartbeat Status Integer enable 1 disable 2 default RW sysloghbstatus Heartbeat Interval seconds Integer 1 604800 seconds 900 sec default RW sysloghbinterval ...

Page 384: ...tbeat message is sent depends upon the setting of the Heartbeat Interval Syslog Host Table The table described below configures the Syslog hosts that will receive message from the AP You can configure up to ten Syslog hosts Name Type Values Access CLI Parameter Syslog Host Table Table N A R sysloghosttbl Table Index Integer 1 10 N A index IP Address IpAddress User Defined RW ipaddr Comment optiona...

Page 385: ...r enable disable default RW stpstatus Bridge Priority Integer 0 65535 32768 default RW stppriority Maximum Age Integer 600 4000 in 0 01 sec intervals i e 6 to 40 seconds 2000 default RW stpmaxage Hello Time Integer 100 1000 in 0 01 sec intervals i e 1 to 10 seconds 200 default RW stphellotime Forward Delay Integer 400 3000 in 0 01 sec intervals i e 4 to 30 seconds 1500 default RW stpfwddelay ...

Page 386: ...alues Access CLI Parameter Spanning Tree Table Table N A R stpbl Table Index Port N A 1 15 R index Priority Integer 0 255 128 default RW priority Path Cost Integer 1 65535 100 default RW pathcost State Integer disable blocking listening learning forwarding broken R state Status Integer enable disable RW status ...

Page 387: ...d Integer 0 255 packets sec default is 0 RW stmbrdthres Multicast Threshold Integer 0 255 packets sec default is 0 RW stmmultithres Name Type Values Access CLI Parameter Storm Threshold Table Table N A R stmthrestbl Table Index Integer 1 Ethernet 3 Wireless R index Broadcast Threshold Integer 0 255 packets sec default is 0 RW bcast Multicast Threshold Integer 0 255 packets sec default is 0 RW mcas...

Page 388: ...he following parameters control the Packet Forwarding feature which redirects wireless traffic to a specific MAC address Name Type Values Access CLI Intra BSS Traffic Group N A R intrabss Intra BSS Traffic Operation Integer passthru default block RW intrabssoptype Name Type Values Access CLI Packet Forwarding MAC Address Group N A R pktfwd Packet Forwarding MAC Address MacAddress User Defined RW p...

Page 389: ...Guide A 103 NOTE The Wireless Distribution System WDS feature is not available for 802 11a or 802 11b g APs at this time Packet Forwarding Interface Port Integer 0 any default 1 Ethernet 2 WDS 1 3 WDS 2 4 WDS 3 5 WDS 4 6 WDS 5 7 WDS 6 RW pktfwdif ...

Page 390: ...s with an 802 11b PC Card or a 5 GHz Upgrade Kit Name Type Values Access CLI Parameter Security Table N A R secconfigtbl Index Integer 3 Single radio APs 3 or 4 Dual radio APs R index Authentication Mode Integer none default 802 1x mixed wpa wpa psk RW authmode Re keying Interval Integer 60 65535 seconds default is 900 sec RW rekeyint Encryption Key Length Integer 64bits 128bits RW enckeylen ...

Page 391: ...ng Similarly setting PSK Pass Phrase will override a previous Pre Shared Key setting Note 2 Avaya recommends using a PSK Pass Phrase of at least 13 characters to ensure that the generated key cannot be easily deciphered by network infiltrators Name Type Values Access CLI Parameter WPA PSK Pre Shared Key Table Table N A R wpaconfigtbl Index Integer 3 Slot A or 4 Slot B N A index Pre Shared Key1 Dis...

Page 392: ...ss Interface Security Group R wifsec Encryption Status Integer enable disable default RW encryptstatus Index Integer 3 Single radio APs 3 or 4 Dual radio APs R index Encryption Key 1 DisplayString User Defined W encryptkey1 Encryption Key 2 DisplayString User Defined W encryptkey2 Encryption Key 3 DisplayString User Defined W encryptkey3 Encryption Key 4 DisplayString User Defined W encryptkey4 Da...

Page 393: ...ame Type Values Access CLI Parameter Security Encryption Key Length Table Table N A R secenckeylentbl Index Integer 3 Single radio APs 3 or 4 Dual radio APs N A index Encryption Key Length Integer 64bits 128bits RW enckeylen Name Type Values Access CLI Parameter MAC Address Control Group N A R macacl Status Integer enable disable default RW macaclstatus Operation Type Integer passthru default bloc...

Page 394: ...configuration parameters and statistics are the same for both primary and backup servers The CLI differentiates the primary and backup RADIUS parameters by using the table index Name Type Values Access CLI Parameter MAC Address Control Table Table N A R macacltbl Table Index N A N A R index MAC Address PhysAddress User Defined RW macaddr Comment optional DisplayString User Defined max 254 characte...

Page 395: ...e default R radmacacctrl Authorization Lifetime Integer32 900 43200 seconds 900 sec default RW radauthlifetm MAC Address Format Integer dashdelimited default colondelimited singledashdelimite d no delimiter RW radmacaddrformat RADIUS Accounting Status Integer enable disable default RW radaccstatus Accounting Inactivity Timer Integer32 0 2147483647 minutes default is 5 min RW radaccinactivetmr ...

Page 396: ... Integer 2 R index RADIUS Server Status Integer enable disable default RW status Server Addressing Format see note Integer ipaddr default name RW seraddrfmt Server IP Address or Name IpAddress DisplayString User Defined enter an IP address if seraddrfmt is ipaddr or a name if set to name up to 254 characters if using a name RW ipaddr Port optional Integer User Defined 1812 default RW port Shared S...

Page 397: ... Parameter RADIUS Accounting Table N A R radacctbl Primary RADIUS Integer 1 R index Backup RADIUS Integer 2 R index RADIUS Server Status Integer enable disable default RW status Server Addressing Format see note Integer ipaddr default name RW seraddrfmt Server IP Address or Name IpAddress Display String User Defined enter an IP address if seraddrfmt is ipaddr or a name if set to name up to 254 cha...

Page 398: ...t only one VLAN SSID per radio Shared Secret DisplayString User Defined max 63 characters W ssecret Response Time sec Integer 1 4 seconds 3 sec default RW responsetm Maximum Retransmissions optional Integer 1 10 3 default RW maxretx Name Type Values Access CLI Parameter Name Type Values Access CLI Parameter VLAN Group N A R vlan Status Integer enable disable default RW vlanstatus Management ID Vla...

Page 399: ...able to this table and does not create a new entry Name Type Values Access CLI Parameter VLAN ID Table Table N A R vlanidtbl Index1 Integer32 3 1 3 16 Wireless A 4 1 4 16 Wireless B Dual radio APs only R index Identifier ID VlanId 1 or 0 both correspond to untagged or 1 4094 RW id Network Name SSID DisplayString 1 32 characters RW ssid Status Integer enable default when new entry created disable d...

Page 400: ...ype Values Access CLI Parameter IAPP Group N A R iapp IAPP Status Integer enable default disable RW iappstatus Periodic Announce Interval seconds Integer 80 120 default 160 200 RW iappannint Announce Response Time Integer 2 seconds R iappannresp Handover Time out Integer 410 ms 512 ms default 614 ms 717 ms 819 ms RW iapphandtout Max Handover Retransmissions Integer 1 4 default 4 RW iapphandretx Se...

Page 401: ...Wireless AP 3 User s Guide A 115 SpectraLink VoIP Parameters 802 11b Only Name Type Values Access CLI Parameter Spectralink VoIP Group N A R spectralink Spectralink VoIP Status Integer enable disable default RW speclinkstatus ...

Page 402: ...hexadecimal digits The table below lists the ASCII characters that you can use to configure WEP Encryption Keys It also lists the Hexadecimal equivalent for each ASCII character ASCII Character Hex Equivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent 21 9 39 Q 51 i 69 22 3A R 52 j 6A 23 3B S 53 k 6B 24 3C T 54 l 6C 25 3D U 55 m 6D 26 3E V 56 n 6E ...

Page 403: ... 0 30 H 48 60 x 78 1 31 I 49 a 61 y 79 2 32 J 4A b 62 z 7A 3 33 K 4B c 63 7B 4 34 L 4C d 64 7C 5 35 M 4D e 65 7D 6 36 N 4E f 66 7E 7 37 O 4F g 67 8 38 P 50 h 68 ASCII Character Hex Equivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent ...

Page 404: ...dio Specifications Software Features The tables below compare the software features available depending on the card type in the Access Point Number of Stations per BSS Management Functions Advanced Bridging Functions Medium Access Control MAC Functions Security Functions Network Functions Advanced Wireless Functions ...

Page 405: ...3 802 11b g card Without encryption up to 250 up to 250 up to 250 up to 250 With WEP encryption up to 250 up to 60 up to 120 up to 120 With 802 1x Authentication up to 50 up to 44 up to 88 up to 88 With WPA N A N A up to 27 up to 27 Feature 802 11b 802 11a 802 11b g Web User Interface yes yes yes Telnet CLI yes yes yes SNMP Agent yes yes yes TFTP yes yes yes ...

Page 406: ...ection DFS Feature 802 11b 802 11a 802 11b g IEEE 802 1d Bridging yes yes yes WDS Relay yes Roaming yes yes yes Protocol Filtering yes yes yes Multicast Broadcast Storm Filtering yes yes yes Proxy ARP yes yes yes TCP UDP Port Filtering yes yes yes Blocking Intra BSS Clients yes yes yes Packet Forwarding yes yes yes Feature 802 11b 802 11a 802 11b g Automatic Channel Selection ACS yes yes yes Dynam...

Page 407: ...2 11b g 64 bit 128 bit and 152 bit Note 2 EAP MD5 EAP TLS EAP TTLS and PEAP client supplicant supported Note 3 Use in conjunction with WPA or 802 1x Authentication Feature 802 11b 802 11a 802 11b g IEEE 802 11 WEP 1 yes yes yes MAC Access Control yes yes yes RADIUS MAC based Access Control yes yes yes IEEE 802 1x Authentication 2 yes yes yes Per User Per Session PUPS Encryption 3 yes yes Wi Fi Pro...

Page 408: ...02 11b g DHCP Client yes yes yes DHCP Server yes yes yes Inter Access Point Protocol IAPP yes yes yes Link Integrity yes yes yes System Logging Syslog yes yes yes RADIUS Accounting Support 1 yes yes yes DNS Client yes yes yes TCP IP Protocol Support yes yes yes Virtual LAN Support One VLAN ID per wireless interface 11a Upgrade Kit Up to 16 VLAN IDs per wireless interface 5 GHz Upgrade Kit One VLAN...

Page 409: ...less Functions Feature 802 11b 802 11a 802 11b g WEP Plus Weak Key Avoidance yes Remote Link Test yes Link Test Responder yes Load Balancing yes AP List yes Medium Density Distribution yes Distance between APs yes Interference Robustness yes SpectraLink VoIP Support yes ...

Page 410: ...5 in Weight 1 75 Kg 3 5 lb 802 11a Antenna Adapter Dimensions H x W x L 11 3 x 2 10 x 26 2 cm 4 5 x 0 83 x 10 3in Weight 0 18kg 0 4lb Electrical Specifications Without Active Ethernet Module Voltage 100 to 240 VAC 50 60 Hz Current 0 2 amp Power Consumption 20 Watts With Active Ethernet Module Input Voltage 42 to 60 VDC Output Current 200mA at 48V Power Consumption 9 10 Watts ...

Page 411: ...ensation allowed Storage 10 to 60 C 14 to 140 F 10 to 90 relative humidity no condensation allowed 802 11a Antenna Adapter Operating 0 to 70 C 32 to 158 F 20 to 90 relative humidity Transport 40 to 75 C 40 to 167 F 15 to 95 relative humidity Storage 20 to 75 C 4 to 167 F 10 to 95 relative humidity Ethernet Interface 10 100 Base TX RJ 45 female socket Serial Port Interface Standard RS 232C interfac...

Page 412: ...t B Class B requirements Standard 802 3af pin assignments HTTP Interface Microsoft Internet Explorer 6 with Service Pack 1 or later Netscape 6 1 or later Radio Specifications 802 11a Channel Frequencies 802 11b Channel Frequencies 802 11g Channel Frequencies Wireless Communication Range NOTE Refer to the Regulatory Flyer included with the AP for the latest regulatory information ...

Page 413: ... and South Korea TW Taiwan There are five sets of frequency bands that determine the available channels depending on the regulatory domain Some countries restrict 802 11a operation to specific frequency bands The Web interface and CLI display the available channels for a radio s particular regulatory domain In the CLI any channels that are not available are labeled Not Supported NOTE The original ...

Page 414: ...200 5 200 42 5 210 44 5 220 5 220 5 220 46 5 230 48 5 240 5 240 5 240 Middle Band 52 default 52 5 260 5 260 5 260 56 5 280 5 280 5 280 58 5 300 5 300 5 300 60 5 320 5 320 5 320 H Band 100 5 500 104 5 520 108 5 540 112 5 560 116 5 580 120 5 600 124 5 620 128 5 640 132 5 660 136 5 680 140 5 700 Upper Band 149 default 149 5 745 5 745 5 745 5 745 153 5 675 5 675 5 675 5 675 157 5 785 5 785 5 785 5 785...

Page 415: ...ael Some countries restrict 802 11b operation to specific frequency bands The web interface will always display the available channels depending in the cards regulatory domain In the CLI any channels that are not available are labeled Not Supported Channel ID FCC GHz ETSI GHz MKK GHz IL GHz 1 2 412 2 412 2 412 2 2 417 2 417 2 417 3 2 422 2 422 2 422 4 2 427 2 427 2 427 2 427 5 2 432 2 432 2 432 2 ...

Page 416: ...e and the United Kingdom ETSI Europe including the United Kingdom China and South Korea MKK Japan IL Israel Some countries restrict 802 11g operation to specific frequency bands The web interface will always display the available channels depending in the cards regulatory domain In the CLI any channels that are not available are labeled Not Supported 13 2 4721 2 472 14 2 484 Channel ID FCC GHz ETS...

Page 417: ...is only available when using 802 11b only mode 4 2 427 2 427 2 427 2 427 5 2 432 2 432 2 432 2 432 6 2 437 2 437 2 437 2 437 7 2 442 2 442 2 442 2 442 8 2 447 2 447 2 447 2 447 9 2 452 2 452 2 452 10 2 457 2 4571 2 457 11 2 462 2 4621 2 462 12 2 4671 2 467 13 2 4721 2 472 14 2 4842 Channel ID FCC GHz ETSI GHz MKK GHz IL GHz ...

Page 418: ...n where the product is used The range of your wireless devices can be affected when the antennas are placed near metal surfaces and solid high density materials Range is also impacted due to obstacles in the signal path of the radio that may either absorb or reflect the radio signal In Open Office environments antennas can see each other no physical obstructions between them In Semi open Office en...

Page 419: ...ts s 1 Mbits Open Office 142 m 466 ft 177 m 581 ft 219 m 718 ft 272 m 892 ft Semi Open Office 98 m 322 ft 122 m 400 ft 151 m 495 ft 187 m 614 ft Closed Office 67 m 220 ft 84 m 276 ft 104 m 341 ft 129 m 423 ft Tx Power 15 15 15 15 Receiver Sensitivity dBm 82 85 88 91 Antenna Gain 0 dBi integrated diversity antenna module 2 4 2 5 GHz ...

Page 420: ...55 m 180 ft 74 m 243 ft 92 m 302 ft 106 m 348 ft 122 m 400 ft 131 m 430 ft Semi Op en Office 13 m 43 ft 23 m 75 ft 38 m 125 ft 51 m 167 ft 63 m 207 ft 73 m 239 ft 84 m 276 ft 90 m 295 ft Closed Office 9 m 30 ft 16 m 52 ft 26 m 85 ft 35 m 115 ft 43 m 141 ft 50 m 164 ft 58 m 190 ft 62 m 203 ft Tx Power dBm 7 11 14 14 14 14 14 14 Receiver Sensitivit y dBm 65 69 73 77 80 82 84 85 Antenna Gain 3 5 dBi ...

Page 421: ...m 269 ft 110 m 361 ft 136 m 446 ft 169 m 554 ft 181 m 594 ft 195 m 640 ft Semi Open Office 32 m 105 ft 42 m 138 ft 57 m 187 ft 75 m 246 ft 94 m 308 ft 116 m 381 ft 125 m 410 ft 134 m 440 ft Closed Office 22 m 72 ft 29 m 95 ft 39 m 128 ft 52 m 171 ft 64 m 210 ft 80 m 262 ft 86 m 282 ft 92 m 302 ft Tx Power dBm 15 15 15 15 15 15 15 15 Receiver Sensitivity dBm 69 73 77 81 84 87 88 89 Antenna Gain 4 d...

Page 422: ...3 m 108 ft 51 m 167 ft 78 m 256 ft 104 m 341 ft 129 m 423 ft Tx Power dBm 12 13 14 15 15 15 Receiver Sensitivity dBm 68 70 75 80 84 87 Antenna Gain 3 dBi integrated diversity antenna module 2 4 2 5 GHz Range 9 Mbits s 6 Mbits s 11 Mbits s 5 5 Mbits s 2 Mbits s 1 Mbits s Open Office 292 m 958 ft 314 m 1030 ft 204 m 669 ft 236 m 774 ft 253 m 830 ft 338 m 1109 ft Semi Ope n Office 201 m 659 ft 216 m ...

Page 423: ...Radio Specifications C 20 Avaya Wireless AP 3 User s Guide Receiver Sensitivity dBm 88 89 83 85 86 90 Antenna Gain 3 dBi integrated diversity antenna module 2 4 2 5 GHz ...

Page 424: ...orized reseller or visit http www avaya com support for contact information List of Avaya Wireless products installed on your network include the following Product names and quantity Part numbers P N Serial numbers S N List of Avaya Wireless software versions installed For the AP check the HTTP interface s Version screen Include the source of the software version e g pre loaded on unit installed f...

Page 425: ...her static or DHCP Network speed and duplex 10 or 100 Mbits sec full or half duplex Type of Ethernet device that the Access Points are connected to e g Active Ethernet power injector hub switch etc Type of Security enabled on the wireless network None WEP Encryption 802 1x Mixed A description of the problem you are experiencing What were you doing when the error occurred What error message did you...

Reviews:

No comments

Related manuals for AP-3

Brand: Pakedge Pages: 7

Brand: Pakedge Pages: 4

Brand: Quectel Pages: 28

Brand: NC-link Pages: 13

Brand: Pakedge Device & Software Pages: 45

WAP-1000 WireFree

Brand: Planet Pages: 28

Wireless LAN Access Point

Brand: Hama Pages: 2

Brand: Aversky Technology Pages: 10

Brand: 4IPNET Pages: 15

Brand: 4IPNET Pages: 20

Brand: EnGenius Pages: 2

Brand: EnGenius Pages: 45

Brand: EnGenius Pages: 60

Brand: EnGenius Pages: 75

Brand: EnGenius Pages: 84

Brand: EnGenius Pages: 86

Brand: EnGenius Pages: 88

Brand: EnGenius Pages: 90

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands