manualshive.com logo in svg

Sercomm AP101nA, User Manual, Page: 54 / 105

Share
Download
Sercomm AP101nA User Manual Download Page 54

PC and Server Configuration 

11. Click

Edit Profile...

 and select the 

Authentication

tab. Enable

Extensible Authentication

Protocol

, and select 

Smart Card or other Certificate

. Deselect other authentication meth-

ods listed. Click

OK

.

Figure 41: Authentication Screen 

12. Select

No

 if you don't want to view the help for EAP. Click

Finish

.

51

Summary of Contents for AP101nA

Page 1: ...802 11n Wireless Access Point AP101nA WNAP 3000PE User s Guide...

Page 2: ...R 4 PC AND SERVER CONFIGURATION 40 Overview 40 Using WEP 40 Using WPA PSK WPA2 PSK 41 Using WPA Enterprise 42 802 1x Server Setup Windows 2000 Server 43 802 1x Client Setup on Windows XP 53 Using 802...

Page 3: ...Vista 91 APPENDIX D ABOUT WIRELESS LANS 93 Overview 93 Wireless LAN Terminology 93 APPENDIX E COMMAND LINE INTERFACE 96 Overview 96 Command Reference 96 P N 956YHZ0001 Copyright 2008 All Rights Reser...

Page 4: ...Wireless Access Point incorporates many advanced features carefully designed to provide sophisticated functions while being easy to use x Standards Compliant The Wireless Access Point complies with th...

Page 5: ...her x VLAN Support The 802 1Q VLAN standard is supported allowing traffic from differ ent sources to be segmented Combined with the multiple SSID feature this provides a powerful tool to control acces...

Page 6: ...er you can use it to provide accounting data on Wireless clients x Syslog Support If you have a Syslog Server the Wireless Access Point can send its log data to your Syslog Server x SNMP Support SNMP...

Page 7: ...g transmitted or received via the Wireless access point Data includes network traffic as well as user data Status On Error condition Off Normal operation Blinking During start up and when the Firmware...

Page 8: ...to the factory default values To Clear All Data and restore the factory default values 1 Hold the Reset Button until the Status Red LED blinks TWICE usually more than 5 seconds 2 Release the Reset Bu...

Page 9: ...maximize reliability and performance follow these guidelines x Use an elevated location such as wall mounted or on the top of a cubicle x Place the Wireless Access Point near the center of your wirel...

Page 10: ...hernet The Wireless Access Point supports PoE Power over Ethernet To use PoE 1 Do not connect the supplied power adapter to the Wireless Access Point 2 Connect one end of a standard category 5 LAN cab...

Page 11: ...ser Setup using the Windows Utility A simple Windows setup utility is supplied on the CD ROM This utility can be used to assign a suitable IP address to the Wireless Access Point Using this utility is...

Page 12: ...he Wireless Access Point Description Any extra information for the Wireless Access Point entered by the administrator Note If the desired Wireless Access Point is not listed check that the device is i...

Page 13: ...word again 6 Check the following screens and configure as necessary for your environment Use the on line help if necessary The later sections in this Chapter also provides more details about each of t...

Page 14: ...a Wireless connection to it may be not possible x If your LAN contains a Router or Routers ensure the PC used for configuration is on the same LAN segment as the Wireless Access Point 3 Start your Web...

Page 15: ...Management menu 9 Use the Apply and Reboot buttons on the menu to apply your changes and restart the Wireless Access Point Setup is now complete Wireless stations must now be set to match the Wireless...

Page 16: ...ion Access Point Name Enter a suitable name for this Access Point Description If desired you can enter a description for the Access Point Country Domain The country or domain which is matching your cu...

Page 17: ...allocate IP Addresses to PCs DHCP clients on your LAN when they start up The default and recommended value is Enabled x The Start IP Address and Finish IP Address fields set the values used by the DHC...

Page 18: ...anced Settings on the System menu to view a screen like the following Figure 9 System Advanced Settings Screen Data System Advanced Settings Screen VLAN Enable 802 1Q VLAN This option is only useful i...

Page 19: ...nvalid LLTD Enable Link Layer Topology Discovery Enable this if you want to use Link Layer Topology Discovery proto col LLTD feature STP Enable Spanning tree Protocol Enable this if you want to use th...

Page 20: ...creen like the following Figure 10 Wireless Basic Screen Data Wireless Basic Settings Screen Operation Turn Radio On Enable this to use the wireless feature Wireless Mode Select the desired option x D...

Page 21: ...nt x Bridge Point to Point Bridge to a single AP You must provide the MAC address of the other AP in the PTP Bridge AP MAC Address field x Bridge Multi Point Select this only if this AP is the Master...

Page 22: ...Access Point Setup Select Remote AP If the other AP is on line you can click the Select Remote AP button and select from a list of available APs 19...

Page 23: ...AP name is displayed x SSID The current SSID associated with this VAP x Security System The current security system e g WPA PSK is dis played Enable Button Enable the selected VAP Configure Button Cha...

Page 24: ...ess Point Isolation within VAP If enabled then each Wireless station using the Access Point is invisible to other Wireless stations In most business stations this setting should be Disabled Security S...

Page 25: ...us Server This is usually done using digital certificates x Each user s wireless client must support 802 1x and provide the Radius authentication data when required x All data transmission is encrypte...

Page 26: ...urity None No security is used Anyone using the correct SSID can connect to your network Security Settings WEP This is the 802 11b standard Data is encrypted before transmission but the encryption sys...

Page 27: ...a particular method select the appropriate value Open System or Shared Key All Wireless stations must then be set to use the same method Key Input Select Hex or ASCII depending on your input method A...

Page 28: ...Data is encrypted using a 256Bit key derived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Upd...

Page 29: ...ed from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcas...

Page 30: ...is key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP for WPA PSK and AES for WPA2 PSK Group Key Update This refers to the key used for broadcast transmissi...

Page 31: ...Radius Screen WPA with Radius WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Update This refers to the key used for broadcast transmissions Enable this if...

Page 32: ...us Screen WPA2 with Radius WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast transmissions Enable this if you w...

Page 33: ...a WPA and WPA2 with Radius Screen WPA and WPA2 with Radius WPA Encryption The encryption method is TKIP for WPA and AES for WPA2 Group Key Update This refers to the key used for broadcast transmission...

Page 34: ...to authenticate each user See Chapter4 for details of user configuration x Each user s wireless client must support 802 1x x All data transmission is encrypted using the WEP standard You only have to...

Page 35: ...ange This setting if only available if using Dynamic WEP Keys If you want the Dynamic WEP keys to be updated regularly enable this and enter the desired lifetime in minutes Static WEP Key EAP MD5 Enab...

Page 36: ...t Enter the key value to match the Radius Server Secondary Authentica tion Server The Secondary Authentication Server will be used when the Primary Authentication Server is not available Accounting Se...

Page 37: ...r on the LAN for Access Control Warning Ensure your own PC is in the Trusted Wireless Stations list before enabling this feature Local Trusted Stations This table lists any Wireless Stations you have...

Page 38: ...eless Stations This lists any Wireless Stations which you have designated as Trusted Other Wireless Stations This list any Wireless Stations detected by the Access Point which you have not designated...

Page 39: ...Stations list Edit To change an existing entry in the Trusted Stations list select it and click this button 1 Select the Station in the Trusted Station list 2 Click the Edit button The address will b...

Page 40: ...ients voice and multimedia traffic will be given a higher priority than other traffic No Acknowledgement If enabled then WMM acknowledgement is disabled Depend ing on the environment disabling acknowl...

Page 41: ...e desired option The default is Long The Short setting takes less time when used in a good environment 802 11b Protection Mode The Protection system is intended to prevent older 802 11b devices from i...

Page 42: ...selected enter the PIN code from the client device in this field and click Register button x If the third option is selected enter the displayed PIN code to the client device Change AP Settings Enter...

Page 43: ...so more complex Using WEP For each of the following items each Wireless Station must have the same settings as the Wireless Access Point Mode On each PC the mode must be set to Infrastructure SSID ESS...

Page 44: ...to Infrastructure SSID ESSID This must match the value used on the Wireless Access Point The default value is wireless Note The SSID is case sensitive Wireless Security On each client Wireless securi...

Page 45: ...or the Radius Server 802 1x Encryption Typically EAP TLS is used This is a dynamic key system so keys do NOT have to be entered on each Wireless station However you can also use a static WEP key EAP M...

Page 46: ...default prompts ensure that DNS is installed and enabled during installa tion Services Installation 1 Select the Control Panel Add Remove Programs 2 Click Add Remove Windows Components from the left...

Page 47: ...ess Point User Guide Figure 27 Components Screen 4 Click Next 5 Select the Enterprise root CA and click Next Figure 28 Certification Screen 6 Enter the information for the Certificate Authority and cl...

Page 48: ...be stopped before continuing Click Ok then Finish DHCP server configuration 1 Click on the Start Programs Administrative Tools DHCP 2 Right click on the server entry as shown and select New Scope Figu...

Page 49: ...r the router address for the current subnet The router address may be left blank if there is no router Click Next 10 For the Parent domain enter the domain you specified for the domain controller setu...

Page 50: ...select New Certificate to Issue Figure 33 Certificate Authority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 34 Template...

Page 51: ...ect the Group Policy tab choose Default Domain Policy then click Edit Figure 36 Group Policy Tab 7 Select Computer Configuration Windows Settings Security Settings Public Key Policies right click Auto...

Page 52: ...puter then click Next Figure 38 Certificate Template Screen 10 Ensure that your certificate authority is checked then click Next 11 Review the policy change information and click Finish 12 Click Start...

Page 53: ...ss Access Point and set the shared secret as entered on the Security Settings of the Wireless Access Point 5 Click Finish 6 Right click on Remote Access Policies select New Remote Access Policy 7 Assu...

Page 54: ...Authentication tab Enable Extensible Authentication Protocol and select Smart Card or other Certificate Deselect other authentication meth ods listed Click OK Figure 41 Authentication Screen 12 Selec...

Page 55: ...Access Login for Users 1 Select Start Programs Administrative Tools Active Directory Users and Computers 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow acc...

Page 56: ...are using Windows XP x You are connecting to a Windows 2000 server for authentication x You already have a login User name and password on the Windows 2000 server Client Certificate Setup 1 Connect t...

Page 57: ...Wireless Access Point User Guide Figure 44 Wireless CA Screen 5 Select User certificate request and select User Certificate the click Next Figure 45 Request Type Screen 6 Click Submit 54...

Page 58: ...e 46 Identifying Information Screen 7 A message will be displayed then the certificate will be returned to you Click Install this certificate Figure 47 Certificate Issued Screen 8 You will receive a c...

Page 59: ...k Connection and select Properties 3 Select the Authentication Tab and ensure that Enable network access control using IEEE 802 1X is selected and Smart Card or other Certificate is selected from the...

Page 60: ...encryption for a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 50 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and clic...

Page 61: ...Wireless Access Point User Guide Figure 51 Properties Screen Setup for Windows XP and 802 1x client is now complete 58...

Page 62: ...ey is pro vided for me automatically Instead you must enter the WEP key manually ensuring it matches the WEP key used on the Access Point Figure 52 Properties Screen Note On some systems the 64 bit WE...

Page 63: ...However you may need to perform the following operations on a regular basis x If using the Access Control feature update the Trusted PC database as required See Access Control in Chapter 3 for details...

Page 64: ...dress was obtained from a DHCP Server on your network It will display Enabled or Disabled DHCP Server Enabled or Disabled is displayed for the DHCP server status Ethernet Status The current Ethernet s...

Page 65: ...t User Guide Statistics Screen This screen is displayed when the Statistics button on the Status screen is clicked It shows details of the traffic flowing through the Wireless Access Point Figure 54 S...

Page 66: ...ection between the AP and the client Usually clients associ ate with only one 1 AP at any time Disassociation The number of Disassociation packets received Disassociation breaks the existing connectio...

Page 67: ...AP if you didn t change the name the default name is used BSSIS The MAC address of the VAP SSID The SSID assigned to this VAP Broadcast SSID Indicates whether or not the SSID is broadcast Security The...

Page 68: ...ata Activity Log Data Current Time The system date and time is displayed Log The Log shows details of the connections to the Wireless Access Point Buttons Refresh Update the data on screen Save to Fil...

Page 69: ...Data Station List Screen Station List MAC Address The MAC physical address of each Wireless Station is displayed Mode The mode of each Wireless Station SSID This displays the SSID used the Wireless st...

Page 70: ...s Point s Man agement menu x Admin Login x Auto Config Update x Config File x SNMP Settings x Log Settings x Upgrade Firmware Admin Login Screen The Admin Login screen allows you to assign a password...

Page 71: ...nabled you must provide a port number in the field below Either HTTP or HTTPS must be enabled HTTP Port Number Enter the port number to be used for HTTP connections to this device The default value is...

Page 72: ...equests from other AP will be ignored Provide admin login name and password If enabled the login name and password need to be provided Provide Respond to Auto Configuration setting If enabled the Resp...

Page 73: ...f cur rent settings to a file Once you have the Access Point working properly you should back up the settings to a file on your computer You can later restore the Access Point s settings from this fil...

Page 74: ...ory default settings click Set to Defaults button Note x This will terminate the current connection The Access Point will be unavailable until it has restarted x By default the Access Point will act a...

Page 75: ...igure 61 SNMP Screen Data SNMP Screen General SNMP Use this to enable or disable SNMP as required Read Only com munity Data can be read but not changed Read Write Com munity Data can be read and setti...

Page 76: ...ed Only this station The IP address is checked and must match the address you enter in the IP address field provided If selected you must enter the IP address of the required station Traps Version Sel...

Page 77: ...if different PCs act as the Syslog server at different times x Unicast Select this if the same PC is always used as the Syslog server If selected you must enter the server ad dress in the field provi...

Page 78: ...dress the log is to be sent to E mail Log Now Press this button to let the log to be e mailed immediately Log Email Alerts Use these checkboxes to determine which events are included in the log Checki...

Page 79: ...e the following Figure 63 Firmware Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will app...

Page 80: ...802 11b CCK 11 Mbps 5 5 Mbps DQPSK 2 Mbps DBPSK 1 Mbps Operating Frequencies 2 412 2 497 GHz 11b Operating Channels 802 11g 11 for North America 13 for Europe ETSI 14 for Japan 802 11b 11 for North Am...

Page 81: ...IEEE 802 11d x CTS only CTS RTS protect mechanism support x WMM support x WPS support x Wireless isolations Operation Mode x Common AP PTMP PTP x Universal Repeater x Universal Client x Rogue AP Dete...

Page 82: ...2c v3 x LLTD x Only wired users to be able to control x Auto configuration Other Features x DHCP client x WINS client x Radius client x Enable Disable wireless x Network Integrality Check x FTP client...

Page 83: ...om that to which the receiver is connected x Consult the dealer or an experienced radio TV technician for help To assure continued compliance any changes or modifications not expressly approved by the...

Page 84: ...IP Address automatically DHCP client restart it x You can use the following method to determine the IP address of the Wireless Access Point and then try to connect using the IP address in stead of th...

Page 85: ...n the Wire less Access Point x On the PC the wireless mode is set to Infrastructure x If using the Access Control feature the PC s name and address is in the Trusted Stations list x If using 802 1x mo...

Page 86: ...no need to change the TCP IP of each PC Just configure the Wireless Access Point to match your existing LAN The following sections provide details about checking the TCP IP settings for various types...

Page 87: ...n IP Address automatically This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specified...

Page 88: ...gs Windows NT4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 67 Windows NT4 0 TCP IP 2 Click the Properties button to see a screen like the...

Page 89: ...P address from a DHCP Server This is the default Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is alr...

Page 90: ...Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 69 Network Configuration Win 2000 3 Select the TCP IP protocol for your network card...

Page 91: ...ndows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fix...

Page 92: ...lick the Local Area Connection and choose Properties You should see a screen like the following Figure 71 Network Configuration Windows XP 3 Select the TCP IP protocol for your network card 4 Click on...

Page 93: ...is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP add...

Page 94: ...l Area Connection Status and choose Properties Click Continue to the User Account Control dialog box then you should see a screen like the following Figure 73 Network Configuration Windows Vista 3 Sel...

Page 95: ...ss automatically This is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a f...

Page 96: ...ess Stations e g Notebook PCs with wireless cards to a wired Ethernet LAN The Wireless Stations can then access all LAN resources Access Points can only function in Infrastructure mode and can communi...

Page 97: ...ccess Point If more than one Access Point can be used the one with the strongest signal is used This can only happen within an ESS x If using Ad hoc mode no Access Point all Wireless stations should b...

Page 98: ...ed 802 1x This uses the 802 1x standard for client authentication and WEP for data encryption If possi ble you should use WPA Enterprise instead because WPA encryption is much stronger than WEP encryp...

Page 99: ...ssword 3 Once connected you can use any of the commands listed in the following Command Reference Command Reference The following commands are available config vap Config Virtual AP X Display CLI Comm...

Page 100: ...eway Display Gateway IP Address get gtkupdate Display Group Key Update Mode get gtkupdateinterval Display Group Key Update Interval in Seconds get http Display HTTP Mode get httpport Display HTTP Port...

Page 101: ...Short Preamble Usage get snmpreadcommu nity Display SNMP Read Community get snmpwritecommu nity Display SNMP Write Community get snmpmode Display SNMP Mode get snmpmanagemode Display SNMP Manager Mode...

Page 102: ...1n A MPDU Aggregation Mode set 11namsdu Set 11n A MSDU Aggregation Mode set 11nguardinterval Set 11n Guard Interval Mode set 11nsubchannel Set 11n Extension Sub Channel set 11nradioband Set 11n Radio...

Page 103: ...et isolation Set Isolate All Virtual APs State set key Set WEP Key Value set keylength Set WEP Key Length set lltd Set LLTD Mode set md5supplicant Set 802 1x MD5 Supplicant Mode set md5suppname Set 80...

Page 104: ...thproto Set SNMP v3 Authentication Protocol set snmpv3authkey Set SNMP v3 Authentication Key set snmpv3privproto Set SNMP v3 Private Protocol set snmpv3privkey Set SNMP v3 Private Key set ssid Set Ser...

Page 105: ...reless Access Point User Guide set wmm Set WMM Mode set wmmnoack Set WMM No Acknowledge factoryrestore Restore to Default Factory Settings apply To make the changes take effect exit Quit the telnet 10...

Reviews:

No comments