background image

38

Chapter 3 System Configuration

214853-B

 

Authentication

Figure 15   Authentication screen

Management access will be checked against the authentication database stored on 
the access point 

(Figure 15)

. If a remote authentication server is used, you must 

specify the authentication sequence and the corresponding parameters (see 

“RADIUS” on page 36

) for the remote authentication protocol.

MAC Authentication (Default: Local MAC)

Selecting the MAC authentication allows you to define access permission and 
precedence. For Local MAC Authentication go to page 39. For RADIUS MAC 
Authentication see the following page.

Note: 

Be sure to set up the RADIUS MAC authentication for the client 

on the Radius server before using the RADIUS MAC service.

Summary of Contents for 2220

Page 1: ...4 Using the Nortel Networks Wireless LAN Access Point 2220 2221 802 11b only This multi product manual describes some features not available on the 2221 802 11b only Access Point The 802 11a radio described in this manual is unavailable on the 2221 802 11b only Access Point ...

Page 2: ...ccur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outl...

Page 3: ...r relevant provisions of Directive 1999 5 EC Finnish Valmistaja Nortel Networks vakuuttaa täten että Radio LAN device tyyppinen laite on direktiivin 1999 5 EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen Dutch Hierbij verklaart Nortel Networks dat het toestel Radio LAN device in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtl...

Page 4: ...es Communications Hiermit erklärt Nortel Networks die Übereinstimmung des Gerätes Radio LAN device mit den grundlegenden Anforderungen und den anderen relevanten Festlegungen der Richtlinie 1999 5 EG Wien Greek Ã Õ œ Nortel Networks ƒ ÀŸÕ œ Radio LAN device ÃÃœ ŸÕ œ œ Ÿƒ Àœ ƒ Œ œƒ 1999 5 Italian Con la presente Nortel Networks dichiara che questo Radio LAN device è conforme ai requisiti essenziali...

Page 5: ...module Celui ci ne comprend aucun composant pouvant être dépanné par l utilisateur Advertencia No retire nunca la cubierta superior del dispositivo ya que podría resultar herido como consecuencia de una descarga eléctrica y de corriente Dentro del dispositivo no hay ningún componente que pueda reparar el usuario Avviso per evitare lesioni personali da scosse elettriche e tensioni pericolose non ri...

Page 6: ...6 214853 B ...

Page 7: ...ystem Requirements 18 Chapter 1 Hardware Installation 19 Chapter 2 Network Configuration and Planning 21 Network Topologies 21 Ad Hoc Wireless LAN no AP or Bridge 21 Infrastructure Wireless LAN 22 Infrastructure Wireless LAN for Roaming Wireless PCs 22 Chapter 3 System Configuration 24 Accessing the CLI 24 Using the Web Management Interface 25 Setup Wizard 26 Channel 29 802 11a 29 802 11b 29 IP Co...

Page 8: ... 41 Administration 42 Change Password 43 Firmware Upgrade 43 Restore Factory Settings 43 Reset Access Point 43 System Log 44 SNTP Server 44 Radio Interface B 45 Radio Settings 45 Enable 45 Radio Channel 46 Maximum Station Data Rate 46 Beacon Interval 20 1000 46 DTIM Period 1 16384 46 RTS Threshold 0 2347 47 Preamble Setting 47 Security 48 WEP Wired Equivalent Privacy 48 Authentication Type Setup 4...

Page 9: ...riod 1 16384 52 RTS Threshold 0 2347 53 Security 54 WEP Wired Equivalent Privacy 54 Authentication Type Setup 54 Data Encryption 55 Standard Key Setup WEP Default 128 55 Status 56 Access Point Status 57 Station Status 58 Event Logs 59 Appendix A Specifications 61 Available Channels 61 Maximum Clients 61 Data Rate 61 Operating Frequency 61 Power supply 62 Output Power 62 Physical Size 62 Weight 62 ...

Page 10: ... Warranty 63 Appendix B Template for placing the Access Point 2220 2221 65 Appendix C Mounting the Access Point 2220 2221 on a Drop Ceiling 67 Attaching the mounting bracket to a drop ceiling 68 Attaching the Access Point 2220 2221 to the mounting bracket 68 ...

Page 11: ...tification screen 34 Figure 12 TCP IP Settings screen 35 Figure 13 RADIUS screen 36 Figure 14 PPPoE Setup screen 37 Figure 15 Authentication screen 38 Figure 16 Filter Control screen 40 Figure 17 SNMP screen 41 Figure 18 Administration screen 42 Figure 19 System Log screen 44 Figure 20 Radio Settings screen 45 Figure 21 Security screen 48 Figure 22 Radio Settings screen 50 Figure 23 Security scree...

Page 12: ...12 Figures 214853 B ...

Page 13: ...13 Using the Nortel Networks Wireless LAN Access Point 2220 2221 Tables Table 1 LED Indicators 17 Table 2 802 1x Setup 39 Table 3 Local MAC Authentication 39 ...

Page 14: ...14 Tables 214853 B ...

Page 15: ...ude long term maintenance overhead for cabling Using 802 11a 802 11b technology the Access Point 2220 2221 can easily replace a 10 Mbps Ethernet connection or seamlessly integrate into a 10 100 Ethernet LAN Note Both 802 11a and 802 11b radios are turned off on your Nortel Networks Wireless LAN Access Point 2220 2221 You must configure your Access Point 2220 2221 for your country before turning on...

Page 16: ...the wired LAN and vice versa Power over Ethernet The Access Point 2220 2221 supports Power over Ethernet PoE To use PoE to power the Access Point 2220 2221 connect a 4 pair Cat 5 or better cable to the RJ 45 port on the rear of the Access Point 2220 2221 Connect the other end of the cable to an ethernet switch capable of delivering IEEE 802 3af draft compliant power The Access Point 2220 2221 draw...

Page 17: ...ndicates a valid 802 11a wireless link Very Slow Flashing Searching for network association Slow Flashing Associated with network but no activity Fast Flashing Indicates that the access point is transmitting or receiving data through wireless links Flashing rate is proportional to network activity WLANb On Indicates a valid 802 11b wireless link Very Slow Flashing Searching for network association...

Page 18: ...ant power source 802 11a or 802 11b compliant or dual compliant wireless Ethernet adapters with TCP IP compatible protocol installed Web browser for configuration Alternatively you can connect an RS 232 cable to the console port and use the command line interface CLI For more information on the CLI refer to Run Time Console Specifications Nortel Networks Optivity NMS supports the Access Point 2220...

Page 19: ...s on your Access Point 2220 2221 Refer to Appendix B Template for placing the Access Point 2220 2221 for information on mounting the Access Point 2220 2221 Note Both 802 11a and 802 11b radios are turned off on your Nortel Networks Wireless LAN Access Point 2220 2221 You must configure your Access Point 2220 2221 for your country before turning on the 802 11a and 802 11b radios For information on ...

Page 20: ... Cable The Access Point 2220 2221 can be connected to a wireline network via a 10 or 100 Mbps Ethernet connection Connect a Cat 5 or higher UTP cable between the Access Point 2220 2221 and another network device such as a hub or switch 4 If you are not using PoE use the separately orderable power adapter Connect the power adapter cable to the 5 VDC power socket on the rear panel Warning Use ONLY t...

Page 21: ...AN for roaming wireless PCs Network Topologies Ad Hoc Wireless LAN no AP or Bridge Ad hoc mode is also called peer to peer mode or Independent Basic Service Set IBSS In ad hoc mode devices communicate directly with each other without using an access point An ad hoc wireless LAN consists of a group of computers each equipped with a wireless adapter connected via radio signals as an independent wire...

Page 22: ... wired LAN but also increases the effective wireless transmission range for wireless PCs by passing their signal through one or more access points A wireless infrastructure can be used for access to a central database or for connection between mobile workers as shown in the following figure Infrastructure Wireless LAN for Roaming Wireless PCs The Basic Service Set BSS is the communications domain ...

Page 23: ...ints so that a continuous coverage area is created wireless users within this ESS can roam freely All Nortel Networks Wireless LAN Series 2200 wireless network cards and adapters and Access Point 2220 2221 wireless access points within a specific ESS must be configured with the same SSID File Server Switch Desktop PC Access Point BSS2 Notebook with Wireless PC Card Adapter Seamless Roaming ESS Swi...

Page 24: ...a direct connection via the console port make sure the terminal has the following features 9600 bits per second b s 8 data bits 1 stop bit no parity no flow control Serial terminal emulation program Null modem cable and connector to match the female DB 9 connector on the Access Point 2220 2221 console port Note Both 802 11a and 802 11b radios are turned off on your Nortel Networks Wireless LAN Acc...

Page 25: ...he CLI refer to Run Time Console Specifications part number 215113 A Using the Web Management Interface To initially manage the Access Point 2220 2221 using the web management interface you must configure the network settings of the computers on your wireless LAN to use the same IP subnet as the Access Point 2220 2221 The default network settings assuming there is no external DHCP server for this ...

Page 26: ...the management interface Figure 3 enter the username nortel and click LOGIN Note Both 802 11a and 802 11b radios are turned off on your Nortel Networks Wireless LAN Access Point 2220 2221 You must configure your Access Point 2220 for your country before turning on the 802 11a and 802 11b radios For information on country specific configuration refer to Country specific Configuration for the Nortel...

Page 27: ...guration 27 Using the Nortel Networks Wireless LAN Access Point 2220 2221 Figure 3 Login screen 2 The home page displays the Main Menu Figure 4 Figure 4 Main Menu 3 Click Setup Wizard to open the 1 2 3 Setup Wizard Figure 5 ...

Page 28: ...ck the Next button to start basic configuration Figure 6 SSID The Service Set ID This should be set to the same value as other wireless devices in your network Default Nortel Figure 6 SSID screen Note The SSID is case sensitive and can consist of up to 32 alphanumeric characters ...

Page 29: ...able allows for automatic radio channel detection Automatic radio channel detection only occurs at boot up Default Enable 802 11b Enable Check this box to enable the 802 11b radio of your Access Point 2220 2221 By default the radio is not enabled Note Both 802 11a and 802 11b radios are turned off on your Nortel Networks Wireless LAN Access Point 2220 2221 You must configure your Access Point 2220...

Page 30: ...ateway and DNS address can be dynamically assigned to the access point by an external network DHCP server on the network This device implements a DHCP client but not a DHCP server Default Enable If DHCP Client is not enabled you must enter the IP address subnet mask default gateway and one or more DNS Domain Name Servers addresses Figure 8 Note Available channel settings are limited by local regul...

Page 31: ...Authentication Type Click on the Shared Key radio button to start filtering the frames with the addresses defined in the Shared Key Setup field Enabling the shared key gives the option to encrypt the data Default Open System Shared Key Setup For more secure data transmission check the Enable radio button in the Data Encryption field Then select one shared key size and the key number WEP Default Di...

Page 32: ... bit key can be in alphanumeric characters or hexadecimal numerals 0 9 A F e g D7 0A 9C 7F E5 All wireless devices must have the same Key ID values to communicate 64 Bit Manual Entry Key 1 4 Each Key ID contains 10 HEX digits or 5 alphanumeric characters 128 Bit Manual Entry Key ID contains 26 HEX digits or 13 alphanumeric characters 1 Click Finish 2 Click the OK button to restart the access point...

Page 33: ...vanced Setup page Figure 10 Figure 10 Advanced Setup screen Note You must use the Advanced screens to do 152 bit encryption which is available only on 802 11a Note The Advanced Setup screen allows you to view and change the current configuration of the access point After modifying the configuration parameters you must click on the Apply button to save the changes ...

Page 34: ...ters in the System Name field Figure 11 SSID The SSID Service Set Identification is the name of a Basic Service Set BSS provided by an access point Clients that want to connect to the wireless network via an access point must set their SSIDs to the same as that of the access point SSID Default Nortel The default system location is the MAC address Figure 11 Identification screen ...

Page 35: ...ly assigned to the access point by the network DHCP server Default Enable If DHCP Client is not enabled you must enter the IP address subnet mask default gateway and one or more DNS Domain Name Servers addresses Enter those addresses on this screen Figure 12 Note You must disable DHCP for the manual TCP IP addresses to be accepted Figure 12 Note If there is no DHCP server on your network then the ...

Page 36: ...ADIUS server IP address controlled port number per client unicast session key timeout value in seconds and retransmit attempts number Figure 13 The following RADIUS servers are supported by the Access Point 2220 2221 Microsoft IAS Windows 2000 Server Build 2195 Service Pack 2 TLS Funk Odyssey Server Version 1 0 TTLS TLS IP Address Address of authentication server Default 0 0 0 0 Port Network UDP p...

Page 37: ...ogon access via the authentication server Range 1 30 Default 3 PPPoE Settings Figure 14 PPPoE Setup screen Enter the PPPoE user name and password assigned by your Service Provider Figure 14 The Service Name is normally optional but may be required by some service providers Some xDSL Internet Service Providers may assign a fixed static IP address If you have been provided with this information clic...

Page 38: ...authentication sequence and the corresponding parameters see RADIUS on page 36 for the remote authentication protocol MAC Authentication Default Local MAC Selecting the MAC authentication allows you to define access permission and precedence For Local MAC Authentication go to page 39 For RADIUS MAC Authentication see the following page Note Be sure to set up the RADIUS MAC authentication for the c...

Page 39: ...inutes Defines how long the radius server will refresh the primary broadcast key Session Key Refresh Rate 0 in minutes Defines how long the radius server will dynamically re assign a session key to a connected client station 802 1x Reauthentication Refresh Rate 0 in seconds Defines how long the radius server will dynamically re assign session keys to the all connected client stations Table 3 Local...

Page 40: ...function Figure 16 prevents direct node to node connection through the Access Point 2220 2221 for a more secure wireless network The Local Bridge Filter does not restrict ad hoc connections between clients Default Disable AP Management Filter The administration management can be protected with AP Management Filter Default Enable ...

Page 41: ...le Network Management Protocol SNMP To communicate with the access point the SNMP agent must first be enabled and the Network Management Station must submit a valid community string for authentication Figure 17 Location Specifies the access point location Contact Set the system location string that describes the system location Maximum length 255 characters Community Name Read Only Specifies a com...

Page 42: ...both retrieve and modify MIB objects Maximum length 23 characters Trap Destination IP Address Fill in the IP address box for a trap manager that will receive these messages Trap Destination Community Name Fill in the community string box for a trap manager that will receive these messages Maximum length 23 characters Administration Figure 18 Administration screen ...

Page 43: ...etworks customer support web site at http support nortelnetworks com select Wireless LAN and then WLAN Access Point 2220 or WLAN Access Point 2221 and then Software Restore Factory Settings Click the Restore button to load the factory default configuration and reboot this device Note that all user configured information will be lost You will also have to re enter the default user name nortel to re...

Page 44: ...o setup a log server with various logging level as shown on the above screen Default Disable SNTP Server Allows you to enter Simple Network Time Protocol SNTP Server information for a primary and secondary SNTP Server Default Enable You may also set your time zone and daylight savings information as shown on the above screen ...

Page 45: ...a and 802 11b radios are turned off on your Nortel Networks Wireless LAN Access Point 2220 2221 You must configure your Access Point 2220 2221 for your country before turning on the 802 11a and 802 11b radios For information on country specific configuration refer to Country specific Configuration for the Nortel Networks Wireless LAN Access Point 2220 2221 part number 215293 B Go to http support n...

Page 46: ...d 1 16384 Sets the Delivery Traffic Indication Message DTIM packet interval value The DTIM informs the client that the access point has broadcast and multicast traffic to send This parameter is necessary to wake up stations that are using Power Save mode Note The available channel settings are limited by local regulations which determine the number of channels that are available For more informati...

Page 47: ...an RTS frame sequence always never or only on frames longer than a specified length If the packet size is smaller than the preset RTS threshold size the RTS CTS mechanism will NOT be enabled When the RTS CTS mechanism is enabled the access point sends Request to Send RTS frames to a particular receiving station to negotiate the sending of a data frame After receiving an RTS frame the station sends...

Page 48: ...s device to prevent unauthorized access to your wireless network Figure 21 The WEP setting must be the same on each client in your wireless network Authentication Type Setup You may choose either Open System or Shared Key Default Open System If Shared Key is enabled WEP should be enabled and at least one shared key should be defined ...

Page 49: ...encryption with key lengths of the standard 64 bit and industry standard 128 bit The bit key can be in alphanumeric characters or hexadecimal numerals 0 9 A F e g D7 0A 9C 7F E5 64 Bit Manual Entry Key 1 3 Each Key ID contains 10 HEX digits or 5 alphanumeric characters 128 Bit Manual Entry Key ID contains 26 HEX digits or 13 alphanumeric characters 1 Select a unique key 1 3 2 Enter the encryption ...

Page 50: ...urned off on your Nortel Networks Wireless LAN Access Point 2220 2221 You must configure your Access Point 2220 2221 for your country before turning on the 802 11a and 802 11b radios For information on country specific configuration refer to Country specific Configuration for the Nortel Networks Wireless LAN Access Point 2220 2221 part number 215293 B Go to http support nortelnetworks com select W...

Page 51: ...es to PCs in its BSS Note that the client channel for wireless users is automatically set to the same as that used by the access point to which it is linked Auto Channel Select Selecting Enable allows for automatic radio channel detection Automatic radio channel detection only occurs at boot up Default Enable Note The use of Turbo Mode is not allowed in all regions Before enabling Turbo Mode verif...

Page 52: ...e DTIM informs the client that the access point has broadcast and multicast traffic to send This parameter is necessary to wake up stations that are using Power Save mode The DTIM is the interval between two synchronous frames with broadcast information If you set the value to 2 the access point saves broadcast and multicast packets and forwards them after every second beacon Having smaller DTIM i...

Page 53: ...the RTS CTS mechanism is enabled the access point sends Request to Send RTS frames to a particular receiving station to negotiate the sending of a data frame After receiving an RTS frame the station sends a CTS Clear to Send frame to acknowledge the right of the sending station to send data frames The access points contending for the media may not be aware of each other The RTS CTS mechanism allow...

Page 54: ...EP Wired Equivalent Privacy Figure 23 Security screen Authentication Type Setup You may choose either Open System or Shared Key Default Open System If Shared Key is enabled WEP is automatically enabled and at least one shared key must be defined Figure 23 ...

Page 55: ...h key lengths from the standard 64 bit industry standard 128 bit to the extended 152 bit The bit key can be in alphanumeric characters or hexadecimal numerals 0 9 A F e g D7 0A 9C 7F E5 64 Bit Manual Entry Key 1 3 Each Key ID contains 10 HEX digits or 5 alphanumeric characters 128 Bit Manual Entry Key ID contains 26 HEX digits or 13 alphanumeric characters 152 Bit Manual Entry Key ID contains 32 H...

Page 56: ...guration 214853 B Status Figure 24 Status screen Clicking on the Status radio button on the home page displays additional information about the access point status and station status as shown in the following section Figure 24 ...

Page 57: ...ing the Nortel Networks Wireless LAN Access Point 2220 2221 Access Point Status Figure 25 AP Status screen On the Status page click AP Status to view the access point system configuration and access point wireless configuration Figure 25 ...

Page 58: ...tus Figure 26 Station Status screen Click Station Status to view connected station configuration Figure 26 The Station Statistics page displays basic connection information for all associated stations The page is automatically refreshed every five seconds ...

Page 59: ...ter 3 System Configuration 59 Using the Nortel Networks Wireless LAN Access Point 2220 2221 Event Logs Figure 27 Event Logs screen Click Event Logs to display the activity logs of the access point Figure 27 ...

Page 60: ...60 Chapter 3 System Configuration 214853 B ...

Page 61: ...1 for the country you are in go to http support nortelnetworks com select Wireless LAN and then WLAN Access Point 2220 or WLAN Access Point 2221 Maximum Clients Settable range using the CLI is 0 to 2007 the default setting is 64 Data Rate Normal Mode 6 9 12 18 24 36 48 54 Mbps per channel Turbo Mode 12 18 24 36 48 72 96 108 Mbps per channel Operating Frequency 5 15 5 25 GHz lower band US Canada Ja...

Page 62: ...x 4 cm 8 07 x 5 35 x 1 58 in Weight 700 grams 1 5 lbs LED Indicators Ready Power LAN Ethernet Link Activity WLANa and WLANb Wireless Link Activity Management HTML Web browser interface Command line interface connection via the console port requires a serial terminal emulation program and a nullmodem cable and connector to match the female DB 9 connector on the Access Point 2220 2221 console port T...

Page 63: ... FCC Part 15 247 2 4 GHz FCC Part 15 401 15 407 5 GHz RSS 139 1 RSS 210 Canada EN 300 329 Europe 2 4 GHz EN 301 893 Europe 5 GHz EMI and Susceptibility Class B FCC Part 15 107 and 15 109 ICES 003 Canada EN 301 489 1 and 17 Europe Other IEEE 802 11a and 802 11b FCC Bulletin OET 65C Human exposure to RF Fields RSS 102 Canada Standards IEEE 802 3 10BASE T IEEE 802 3u 100BASE TX IEEE 802 11a b Support...

Page 64: ...64 Appendix A Specifications 214853 B ...

Page 65: ...sist in positioning the Access Point 2220 2221 Mark where the wall mount screws should go For proper ventilation allow at least 1 inch 2 54 centimeters clearance around the ventilation holes on your Access Point 2220 2221 Note Because of variations that exist from printer to printer please verify that the template matches the mounting holes on the Access Point 2220 2221 ...

Page 66: ......

Page 67: ... LAN Access Point 2220 2221 on a drop ceiling sometimes referred to as an acoustic or suspended ceiling using the optional mounting bracket Figure 28 The bracket attaches to a drop ceiling T rail and provides a mounting surface for the Access Point 2220 2221 Figure 28 Optional mounting bracket 10983EA Washer nut Washer nut Mounting bracket Drop ceiling T rail Clamp Clamp ...

Page 68: ...cess Point 2220 to the mounting bracket Attaching the Access Point 2220 2221 to the mounting bracket To attach the Access Point 2220 2221 to the mounting bracket 1 Align the slotted mounting holes on the Access Point 2220 2221 with the mounting tabs on the bracket 2 Press the Access Point 2220 2221 against the bracket inserting the mounting tabs into the slotted mounting holes 3 Slide the Access P...

Reviews: