LevelOne WAP-6012 User Manual Download Page 52

Page: 52 / 105

Wireless Access Point User Guide

Figure 36: Group Policy Screen

8. When the Certificate Request Wizard appears, click

Next

9. Select

Computer

, then click

Next

Figure 37: Certificate Template Screen

10. Ensure that your certificate authority is checked, then click

Next

11. Review the policy change information and click

Finish

12. Click

Start

Run

, type

cmd

and press enter.

Enter

secedit /refreshpolicy machine_policy

This command may take a few minutes to take effect.

Summary of Contents for WAP-6012

Page 1: ...LevelOne WAP 6012 300Mbps N_Max Wireless Gigabit PoE Access Point User Manual V1 0...

Page 2: ...R CONFIGURATION 39 Overview 39 Using WEP 39 Using WPA PSK WPA2 PSK 40 Using WPA Enterprise 41 802 1x Server Setup Windows 2000 Server 42 802 1x Client Setup on Windows XP 52 Using 802 1x Mode without...

Page 3: ...IP Settings Windows Vista 90 APPENDIX D ABOUT WIRELESS LANS 92 Overview 92 Wireless LAN Terminology 92 APPENDIX E COMMAND LINE INTERFACE 95 Overview 95 Command Reference 95 All trademarks and trade n...

Page 4: ......

Page 5: ...ions while being easy to use Standards Compliant The Wireless Access Point complies with the IEEE802 11g and IEEE802 11n specifications for Wireless LANs Supports 11n Wireless Stations The 802 11n sta...

Page 6: ...to your LAN WEP support Support for WEP Wired Equivalent Privacy is included Both 64 Bit 128 Bit and 152 Bit keys are supported WPA support Support for WPA is included WPA is more secure than WEP and...

Page 7: ...eless Access Point can send its log data to your Syslog Server SNMP Support SNMP Simple Network Management Protocol is supported allowing you to use a SNMP program to manage the Wireless Access Point...

Page 8: ...ess point Data includes network traffic as well as user data Status On Error condition Off Normal operation Blinking During start up and when the Firmware is being up graded Ethernet On The LAN Ethern...

Page 9: ...to the factory default values To Clear All Data and restore the factory default values 1 Hold the Reset Button until the Status Red LED blinks TWICE usually more than 5 seconds 2 Release the Reset Bu...

Page 10: ...Access Point To maximize reliability and performance follow these guidelines Use an elevated location such as wall mounted or on the top of a cubicle Place the Wireless Access Point near the center o...

Page 11: ...Chapter 1 Using PoE Power over Ethernet The Wireless Access Point supports PoE Power over Ethernet To use PoE 5 Do not connect the supplied power adapter to the Wireless Access Point 6 Connect one end...

Page 12: ...Wireless Access Point User Guide 8 Figure 5 Using PoE Power over Ethernet...

Page 13: ...w This chapter describes the setup procedure to make the Wireless Access Point a valid device on your LAN and to function as an Access Point for your Wireless Stations Wireless Stations may also requi...

Page 14: ...the Wireless Access Point is configured establishing a Wireless connec tion to it may be not possible If your LAN contains a Router or Routers ensure the PC used for configura tion is on the same LAN...

Page 15: ...Access Point Setup 11 6 You will then see the Status screen which displays the current settings and status No data input is possible on this screen See Chapter 5 for details of the Status screen...

Page 16: ...Management menu 9 Use the Apply and Reboot buttons on the menu to apply your changes and restart the Wireless Access Point Setup is now complete Wireless stations must now be set to match the Wireles...

Page 17: ...ation Access Point Name Enter a suitable name for this Access Point Description If desired you can enter a description for the Access Point Country Do main The country or domain which is matching your...

Page 18: ...llocate IP Addresses to PCs DHCP clients on your LAN when they start up The de fault and recommended value is Enabled The Start IP Address and Finish IP Address fields set the values used by the DHCP...

Page 19: ...ge ment VLAN Define the VLAN ID used for management VLAN List Define the unique ID value 1 4094 for each VAP Network Integrality Check Enable Net work Integrality Check If enabled the AP will disable...

Page 20: ...want to Use MAC Address for Authentica tion Authentication via Name and Password Select this if you want to Use name and password for Au thentication Bonjour Zero configuration networking enables auto...

Page 21: ...ireless Mode Select the desired option Disable select this if for some reason you do not this AP to transmit or receive at all 802 11b if selected only 802 11b connections are allowed 802 11g wireless...

Page 22: ...mode APs The other Bridge mode APs must be set to Point to Point Bridge mode using this AP s MAC address They then send all traffic to this Mas ter Wireless Client Repeater Act as a client or repeater...

Page 23: ...name is displayed SSID The current SSID associated with this VAP Security System The current security system e g WPA PSK is displayed Enable Button Enable the selected VAP Configure Button Change the...

Page 24: ...ns to this Access Point Isolation within VAP If enabled then each Wireless station using the Access Point is invisible to other Wireless stations In most business sta tions this setting should be Disa...

Page 25: ...Server This is usually done using digital certificates Each user s wireless client must support 802 1x and provide the Radius au thentication data when required All data transmission is encrypted usi...

Page 26: ...reless Security None No security is used Anyone using the correct SSID can connect to your network Security Settings WEP This is the 802 11b standard Data is encrypted before transmission but the encr...

Page 27: ...ticular method select the appropriate value Open System or Shared Key All Wireless stations must then be set to use the same method Key Input Select Hex or ASCII depending on your input method All key...

Page 28: ...key value Data is encrypted using a 256Bit key derived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Gro...

Page 29: ...om this key Other Wireless Stations must use the same key WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast tra...

Page 30: ...using this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP for WPA PSK and AES for WPA2 PSK Group Key Update This refers to the key used for broadcast t...

Page 31: ...s Screen WPA with Radius WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Update This refers to the key used for broadcast transmissions Enable this if you w...

Page 32: ...with Radius Screen WPA2 with Radius WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast transmissions Enable this...

Page 33: ...and WPA2 with Radius Screen WPA and WPA2 with Radius WPA Encryption The encryption method is TKIP for WPA and AES for WPA2 Group Key Update This refers to the key used for broadcast transmissions Enab...

Page 34: ...d Figure 20 802 1x Wireless Security Screen Data 802 1x Screen 802 1x WEP Key Size Select the desired option 64 Bit Keys are 10 Hex 5 ASCII characters 128 Bit Keys are 26 Hex 13 ASCII characters 152 B...

Page 35: ...e that both Dynamic and Static keys can be used simultaneously allowing clients using either method to use the Access Point WEP Key Enter the WEP key according to the WEP Key Size set ting above Wirel...

Page 36: ...red Secret Enter the key value to match the Radius Server Secondary Authenti cation Server The Secondary Authentication Server will be used when the Primary Authentication Server is not available Acco...

Page 37: ...ing this feature Local Trusted Stations This table lists any Wireless Stations you have designated as Trusted If you have not added any stations this table will be empty For each Wireless station the...

Page 38: ...ireless Station Use this when adding or editing a Trusted Station Address The MAC physical address of the Trusted Wireless Station Use this when adding or editing a Trusted Station Buttons Add a Trust...

Page 39: ...Click the Edit button The address will be copied to the Address field and the Add button will change to Up date 3 Edit the address MAC or physical address as required 4 Click Update to save your chang...

Page 40: ...nabled then WMM acknowledgement is disabled Depending on the environment disabling acknowledge ment may increase throughput slightly Parameters Disassociated Time out This determines how quickly a Wir...

Page 41: ...de The Protection system is intended to prevent older 802 11b devices from interfering with 802 11g transmis sions Older 802 11b devices may not be able to detect that a 802 11g transmission is in pro...

Page 42: ...option is selected enter the PIN code from the client device in this field and click Register button If the third option is selected enter the displayed PIN code to the client device Change AP Setting...

Page 43: ...lso more complex Using WEP For each of the following items each Wireless Station must have the same settings as the Wireless Access Point Mode On each PC the mode must be set to Infrastructure SSID ES...

Page 44: ...t be set to Infrastructure SSID ESSID This must match the value used on the Wireless Access Point The default value is wireless Note The SSID is case sensitive Wireless Security On each client Wireles...

Page 45: ...tion for the Radius Server 802 1x Encryption Typically EAP TLS is used This is a dynamic key system so keys do NOT have to be entered on each Wireless station However you can also use a static WEP ke...

Page 46: ...the default prompts ensure that DNS is installed and enabled during installation Services Installation 1 Select the Control Panel Add Remove Programs 2 Click Add Remove Windows Components from the lef...

Page 47: ...rver Configuration 43 Figure 26 Components Screen 4 Click Next 5 Select the Enterprise root CA and click Next Figure 27 Certification Screen 6 Enter the information for the Certificate Authority and c...

Page 48: ...must be stopped before continuing Click Ok then Finish DHCP server configuration 1 Click on the Start Programs Administrative Tools DHCP 2 Right click on the server entry as shown and select New Scop...

Page 49: ...r the router address for the current subnet The router address may be left blank if there is no router Click Next 10 For the Parent domain enter the domain you specified for the domain controller setu...

Page 50: ...and select New Certificate to Issue Figure 32 Certificate Authority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 33 Temp...

Page 51: ...ect the Group Policy tab choose Default Domain Policy then click Edit Figure 35 Group Policy Tab 7 Select Computer Configuration Windows Settings Security Settings Public Key Policies right click Auto...

Page 52: ...ct Computer then click Next Figure 37 Certificate Template Screen 10 Ensure that your certificate authority is checked then click Next 11 Review the policy change information and click Finish 12 Click...

Page 53: ...ess Access Point and set the shared secret as entered on the Security Settings of the Wireless Access Point 5 Click Finish 6 Right click on Remote Access Policies select New Remote Access Policy 7 Ass...

Page 54: ...ct the Authentication tab Enable Extensible Authenti cation Protocol and select Smart Card or other Certificate Deselect other authentication methods listed Click OK Figure 40 Authentication Screen 12...

Page 55: ...Access Login for Users 1 Select Start Programs Administrative Tools Active Directory Users and Com puters 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow ac...

Page 56: ...at You are using Windows XP You are connecting to a Windows 2000 server for authentication You already have a login User name and password on the Windows 2000 server Client Certificate Setup 1 Connect...

Page 57: ...PC and Server Configuration 53 Figure 43 Wireless CA Screen 5 Select User certificate request and select User Certificate the click Next Figure 44 Request Type Screen 6 Click Submit...

Page 58: ...Figure 45 Identifying Information Screen 7 A message will be displayed then the certificate will be returned to you Click Install this certificate Figure 46 Certificate Issued Screen 8 You will recei...

Page 59: ...rk Connection and select Properties 3 Select the Authentication Tab and ensure that Enable network access control using IEEE 802 1X is selected and Smart Card or other Certificate is selected from the...

Page 60: ...nable encryption for a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 49 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and...

Page 61: ...PC and Server Configuration 57 Figure 50 Properties Screen Setup for Windows XP and 802 1x client is now complete...

Page 62: ...The key is provided for me automatically Instead you must enter the WEP key manually ensuring it matches the WEP key used on the Access Point Figure 51 Properties Screen Note On some systems the 64 b...

Page 63: ...ic However you may need to perform the following operations on a regular basis If using the Access Control feature update the Trusted PC database as required See Access Control in Chapter 3 for detail...

Page 64: ...ent IP address was obtained from a DHCP Server on your network It will display Enabled or Disabled DHCP Server Enabled or Disabled is displayed for the DHCP server status Ethernet Status The current E...

Page 65: ...Status 61 Statistics Screen This screen is displayed when the Statistics button on the Status screen is clicked It shows details of the traffic flowing through the Wireless Access Point Figure 53 Stat...

Page 66: ...es a connection between the AP and the client Usually clients associate with only one 1 AP at any time Disassociation The number of Disassociation packets received Disassoci ation breaks the existing...

Page 67: ...if you didn t change the name the default name is used BSSIS The MAC address of the VAP SSID The SSID assigned to this VAP Broadcast SSID Indicates whether or not the SSID is broadcast Security The se...

Page 68: ...Screen Data Activity Log Data Current Time The system date and time is displayed Log The Log shows details of the connections to the Wireless Access Point Buttons Refresh Update the data on screen Sa...

Page 69: ...a Station List Screen Station List MAC Address The MAC physical address of each Wireless Station is displayed Mode The mode of each Wireless Station SSID This displays the SSID used the Wireless stati...

Page 70: ...Firmware Admin Login Screen The Admin Login screen allows you to assign a password to the Wireless Access Point This password limits access to the configuration interface The default password is passw...

Page 71: ...ter the port number to be used for HTTP connections to this device The default value is 80 Enable HTTPS Enable this to allow admin connections via HTTPS secure HTTP If enabled you must provide a port...

Page 72: ...ation requests from other AP will be ignored Provide admin login name and pass word If enabled the login name and password need to be pro vided Provide Respond to Auto Configuration setting If enabled...

Page 73: ...f current settings to a file Once you have the Access Point working properly you should back up the settings to a file on your computer You can later restore the Access Point s settings from this file...

Page 74: ...ginal factory default settings click Set to Defaults button Note This will terminate the current connection The Access Point will be unavailable until it has restarted By default the Access Point will...

Page 75: ...a can be read and setting changed SNMPv3 User Name Enter the user name for SNMPv3 Authentication Protocol Select the authentication protocol used by SNMPv3 Authentication Key Enter the authentication...

Page 76: ...User Guide 72 Traps Version Select the desired option as supported by your SNMP Man agement program Receiver Select this to have Trap messages sent to the specified PC only You must enter the IP Addr...

Page 77: ...Name IP Ad dress Enter the name or IP address of your Syslog Server Minimum Severity Level Select the desired severity level Events with a severtiy level equal to or higher i e lower number than the...

Page 78: ...Checking all options will increase the size of the log so it is good practice to disable any events which are not really required Unauthorized Login Attempt If checked the unauthorized users who atte...

Page 79: ...the following Figure 62 Firmware Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will appe...

Page 80: ...IEEE 802 11g compliance OFDM 802 11b CCK 11 Mbps 5 5 Mbps DQPSK 2 Mbps DBPSK 1 Mbps Operating Frequencies 2 412 2 497 GHz Operating Channels 802 11g 11 for North America 13 for Europe ETSI 14 for Jap...

Page 81: ...ation Short Slot time support IEEE 802 11d CTS only CTS RTS protect mechanism support WMM support WPS support Wireless isolations Operation Mode Common AP PTMP PTP Universal Repeater Universal Client...

Page 82: ...estore Statistics support SNMP v1 v2c v3 LLTD Only wired users to be able to control Auto configuration Other Features DHCP client WINS client Radius client Enable Disable wireless Network Intergralit...

Page 83: ...and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help To assure conti...

Page 84: ...set to Obtain an IP Address automatically DHCP client restart it You can use the following method to determine the IP address of the Wireless Access Point and then try to connect using the IP address...

Page 85: ...atch the settings on the Wireless Access Point On the PC the wireless mode is set to Infrastructure If using the Access Control feature the PC s name and address is in the Trusted Stations list If usi...

Page 86: ...o need to change the TCP IP of each PC Just configure the Wireless Access Point to match your existing LAN The following sections provide details about checking the TCP IP settings for various types o...

Page 87: ...n IP Address automatically This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specified...

Page 88: ...4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 66 Windows NT4 0 TCP IP 2 Click the Properties button to see a screen like the one below Fi...

Page 89: ...P Server This is the default Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for...

Page 90: ...ion 6 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 68 Network Configuration Win 2000 7 Select the TCP IP protocol for your network...

Page 91: ...dows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixe...

Page 92: ...Right click the Local Area Connection and choose Properties You should see a screen like the following Figure 70 Network Configuration Windows XP 3 Select the TCP IP protocol for your network card 4 C...

Page 93: ...is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP add...

Page 94: ...he Local Area Connection Status and choose Properties Click Contin ue to the User Account Control dialog box then you should see a screen like the following Figure 72 Network Configuration Windows Vis...

Page 95: ...ss automatically This is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a f...

Page 96: ...ss Stations e g Notebook PCs with wireless cards to a wired Ethernet LAN The Wireless Stations can then access all LAN resources Access Points can only function in Infrastructure mode and can communic...

Page 97: ...ess Point If more than one Access Point can be used the one with the strongest signal is used This can only happen within an ESS If using Ad hoc mode no Access Point all Wireless stations should be se...

Page 98: ...equired 802 1x This uses the 802 1x standard for client authentication and WEP for data encryption If possible you should use WPA Enterprise instead because WPA encryption is much stronger than WEP en...

Page 99: ...ed you can use any of the commands listed in the following Com mand Reference Command Reference The following commands are available config vap Config Virtual AP X Display CLI Command List help Displa...

Page 100: ...Key Update Mode get gtkupdateinterval Display Group Key Update Interval in Seconds get http Display HTTP Mode get httpport Display HTTP Port Number get https Display HTTPS Mode get httpsport Display...

Page 101: ...Display SNMP Write Community get snmpmode Display SNMP Mode get snmpmanage mode Display SNMP Manager Mode get snmptrapmode Display SNMP Trap Mode get snmptrapversion Display SNMP Trap Version get snmp...

Page 102: ...el Set 11n Extension Sub Channel set 11nradioband Set 11n Radio Band set 802 11d Set 802 11d Mode set acctserver Set Accounting Server set acctport Set Accounting Port set acctsecret Set Accounting Se...

Page 103: ...upplicant Mode set md5suppname Set 802 1x Supplicant MD5 Name set md5supppassword Set 802 1x Supplicant MD5 Password set md5supptype Set 802 1x MD5 Supplicant Type set nativevlanid Set Native VLAN ID...

Page 104: ...MP v3 Private Key set ssid Set Service Set ID set ssidsuppress Set SSID Broadcast Mode set stp Set STP Mode set strictgtkupdate Set Group Key Update Strict Status set syslog Set Syslog Mode set syslog...

Page 105: ...Appendix E Command Line Interface 101...

Search results

Summary of Contents for WAP-6012

Reviews:

Related manuals for WAP-6012

Brands by name

Popular brands

LevelOne WAP-6012, User Manual

Search results

Summary of Contents for WAP-6012

Reviews:

Related manuals for WAP-6012

Brands by name

Popular brands