background image

Setup 

41 

Group Key Update 

This refers to the key used for broadcast transmissions. Enable 
this if you want the keys to be updated regularly. 

Key Lifetime 

This field determines how often the Group key is dynamically 
updated. Enter the desired value. 

Update Group Key 
when any membership 
terminates 

If enabled, the Group key will be updated whenever any mem-
ber leaves the group or disassociates from the Access Point. 

 

Summary of Contents for AP51DA

Page 1: ...Dual Band 802 11a b g Wireless Access Point User s Guide...

Page 2: ......

Page 3: ...vanced Settings 5GHz 46 CHAPTER 4 PC AND SERVER CONFIGURATION 48 Overview 48 Using WEP 48 Using WPA 802 1x 49 802 1x Server Setup Windows 2000 Server 50 802 1x Client Setup on Windows XP 60 Using 802...

Page 4: ...D ABOUT WIRELESS LANS 92 Overview 92 Wireless LAN Terminology 92 P N 9560ND0001 Copyright 2004 All Rights Reserved Document Version 1 0 All trademarks and trade names are the properties of their respe...

Page 5: ...nt allows packet transmission up to 54Mbps for maximum throughput or automatic speed reduction to lower speeds when the environment does not permit maximum throughput Features of your Wireless Access...

Page 6: ...The Wireless Access Point supports UAM Universal Access Method making it suitable for use in Internet cafes and other sites where user access time must be accounted for Simple Configuration If the de...

Page 7: ...eceived via the corresponding LAN Ethernet port 5GHz 802 11a On 802 11a Wireless connection is available Off No 802 11a Wireless connection available Flashing Data is being transmitted or received via...

Page 8: ...tton can also be used to clear ALL data and restore ALL settings to the factory default values To Clear All Data and restore the factory default values 1 Power Off the Access Point 2 Hold the Reset Bu...

Page 9: ...nes Use an elevated location such as wall mounted or on the top of a cubicle Place the Wireless Access Point near the center of your wireless coverage area If possible ensure there are no thick walls...

Page 10: ...pplied power adapter to the Wireless Access Point and a convenient power outlet and power up 4 Check the LEDs The Status LED should flash then turn OFF The Power WLAN and LAN LED should be ON For more...

Page 11: ...Browser Setup using the Windows Utility A simple Windows setup utility is supplied on the CD ROM This utility can be used to assign a suitable IP address to the Wireless Access Point Using this utili...

Page 12: ...1b 802 11g FW Version The current Firmware version installed in the Wireless Access Point Description Any extra information for the Wireless Access Point entered by the administrator Note If the desir...

Page 13: ...for your LAN Save any changes 5 Click the Web Management button to connect to the selected Wireless Access Point using your Web Browser If prompted enter the User Name and Password again 6 Configure...

Page 14: ...ss Point Until the Wireless Access Point is configured establishing a Wireless connection to it may be not possible If your LAN contains a Router or Routers ensure the PC used for configuration is on...

Page 15: ...plete Wireless stations must now be set to match the Wireless Access Point See Chapter 4 for details If you can t connect It is likely that your PC s IP address is incompatible with the Wireless Acces...

Page 16: ...you first connect you will see the Status screen This displays the current settings and status of the Wireless Access Point No data can be input on this screen Figure 7 Status Screen For further deta...

Page 17: ...Client Select this option if you have a DHCP Server on your LAN and you wish the Access Point to obtain an IP address automatically Fixed If selected the following data must be entered IP Address The...

Page 18: ...ontrol This feature can be used to block access to your LAN by unknown or untrusted wireless stations Click Access Control on the menu to view a screen like the following Figure 9 Access Control Scree...

Page 19: ...n the Access Control screen You will see a screen like the sample below Figure 10 Trusted Wireless Stations Data Trusted Wireless Stations Trusted Wireless Stations This lists any Wireless Stations wh...

Page 20: ...Other Stations list Edit To change an existing entry in the Trusted Stations list select it and click this button 1 Select the Station in the Trusted Station list 2 Click the Edit button The address...

Page 21: ...this is the default and will allow connec tions by both 802 11b and 802 1g wireless stations 802 11b if selected only 802 11b connections are allowed 802 11g wireless stations will only be able to co...

Page 22: ...he other AP in this field You can either enter the MAC address directly or if the other AP is on line you can click the Select AP button and select from a list of available APs Channel No If Automatic...

Page 23: ...d using the WPA standard If this option is selected This Access Point must have a client login on the Radius Server Each user must have a user login on the Radius Server Each user s wireless client mu...

Page 24: ...on the current security setting If you have already provided the address of your Radius server you won t be prompted for it again Figure 13 Radius based MAC Authentication Screen Enable Enable this i...

Page 25: ...of your Radius server you won t be prompted for it again Figure 14 UAM Screen Data UAM Screen Enable Enable this if you wish to use this feature Internal Web based Authentication If selected then when...

Page 26: ...nd ensure Wireless stations have the same setting and key value Authentication Normally this can be left at the default value of Automatic If that fails select the appropriate value Open System or Sha...

Page 27: ...4 bit then each of the four key fields will be populated with key values If encryption strength is set to 128 bit then only the selected WEP key field will be given a key value Radius based MAC Authen...

Page 28: ...d This refers to the key used for point to point transmissions Enable this if you want the keys to be updated regularly TKIP Unicast point to point transmissions and multicast broadcast transmissions...

Page 29: ...d for broadcast transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update...

Page 30: ...in on the Radius Server Each user must have a user login on the Radius Server Each user s wireless client must support 802 1x and provide the login data when required All data transmission is encrypte...

Page 31: ...rypted using AES CCMP Pairwise Key Up date This refers to the key used for point to point transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines how...

Page 32: ...ch user s wireless client must support 802 1x and provide the login data when required All data transmission is encrypted using the WEP standard You only have to select the WEP key size the WEP key is...

Page 33: ...st enter at least the default key For 128 Bit Encryption the key size is 13 chars ASCII or 26 chars in HEX 0 9 and A F Key Exchange Enable this if you wish the keys to exchanged and updated regularly...

Page 34: ...ed by the Mode setting on the Basic screen Select the desired option Auto negotiate This is the default and will normally give the best results Fixed Rate If you don t use to use Auto negotiate you mu...

Page 35: ...le Type Select the desired preamble type Output Power Level Select the desired power output Higher levels will give a greater range but are also more likely to cause interference with other devices An...

Page 36: ...all on the 5GHz band 802 11a 54Mbps this is the standard 802 11a mode and is the most compatible of the available modes Super 802 11a 108Mbps Select this only if all your Wireless clients support this...

Page 37: ...vailable APs Channel No If Automatic is selected the Access Point will select the best avail able Channel If you experience interference shown by lost connections and or slow data transfers you may ne...

Page 38: ...are encrypted using the WPA standard If this option is selected This Access Point must have a client login on the Radius Server Each user must have a user login on the Radius Server Each user s wirel...

Page 39: ...If you have already provided the address of your Radius server you won t be prompted for it again Figure 22 Radius based MAC Authentication Screen Enable Enable this if you wish to use this system Ra...

Page 40: ...use this feature UAM is intended for use in Internet cafes and other sites where user access must be accounted for To use this feature you also need a Radius Server The Radius Server Setup must be co...

Page 41: ...Setup 37...

Page 42: ...d ensure Wireless stations have the same setting and key value Authentication Normally this can be left at the default value of Automatic If that fails select the appropriate value Open System or Shar...

Page 43: ...4 bit then each of the four key fields will be populated with key values If encryption strength is set to 128 bit then only the selected WEP key field will be given a key value Radius based MAC Authen...

Page 44: ...method TKIP Unicast point to point transmissions and multicast broadcast transmissions are encrypted using TKIP TKIP 64 bit WEP Unicast point to point transmis sions are encrypted using TKIP and multi...

Page 45: ...the keys to be updated regularly Key Lifetime This field determines how often the Group key is dynamically updated Enter the desired value Update Group Key when any membership terminates If enabled t...

Page 46: ...n on the Radius Server Each user must have a user login on the Radius Server Each user s wireless client must support 802 1x and provide the login data when required All data transmission is encrypted...

Page 47: ...e encrypted using AES CCMP Pairwise Key Up date This refers to the key used for point to point transmissions Enable this if you want the keys to be updated regularly Key Lifetime This field determines...

Page 48: ...h user s wireless client must support 802 1x and provide the login data when required All data transmission is encrypted using the WEP standard You only have to select the WEP key size the WEP key is...

Page 49: ...st enter at least the default key For 128 Bit Encryption the key size is 13 chars ASCII or 26 chars in HEX 0 9 and A F Key Exchange Enable this if you wish the keys to exchanged and updated regularly...

Page 50: ...the desired speeds Options Wireless Separation If enabled then each Wireless station using the Access Point is invisible to other Wireless stations In most business situations this setting should be...

Page 51: ...give a greater range but are also more likely to cause interference with other devices Antenna Selection If your Access Point has only 1 antenna there is only 1 option available If your Access Point...

Page 52: ...h Wireless station is also more com plex Using WEP For each of the following items each Wireless Station must have the same settings as the Wireless Access Point Mode On each PC the mode must be set t...

Page 53: ...e 802 1x Authentication Each client must obtain a Certificate which is used for authentication for the Radius Server 802 1x Encryption Typically EAP TLS is used This is a dynamic key system so keys do...

Page 54: ...he default prompts ensure that DNS is installed and enabled during installa tion Services Installation 1 Select the Control Panel Add Remove Programs 2 Click Add Remove Windows Components from the lef...

Page 55: ...rver Configuration 51 Figure 29 Components Screen 4 Click Next 5 Select the Enterprise root CA and click Next Figure 30 Certification Screen 6 Enter the information for the Certificate Authority and c...

Page 56: ...must be stopped before continuing Click Ok then Finish DHCP server configuration 1 Click on the Start Programs Administrative Tools DHCP 2 Right click on the server entry as shown and select New Scop...

Page 57: ...er the router address for the current subnet The router address may be left blank if there is no router Click Next 10 For the Parent domain enter the domain you specified for the domain controller set...

Page 58: ...and select New Certificate to Issue Figure 35 Certificate Authority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 36 Temp...

Page 59: ...lect the Group Policy tab choose Default Domain Policy then click Edit Figure 38 Group Policy Tab 7 Select Computer Configuration Windows Settings Security Settings Public Key Policies right click Aut...

Page 60: ...ct Computer then click Next Figure 40 Certificate Template Screen 10 Ensure that your certificate authority is checked then click Next 11 Review the policy change information and click Finish 12 Click...

Page 61: ...Access Point and set the shared secret as entered on the 2 4GHz Security Settings of the Wireless Access Point 5 Click Finish 6 Right click on Remote Access Policies select New Remote Access Policy 7...

Page 62: ...ct the Authentication tab Enable Extensible Authentication Protocol and select Smart Card or other Certificate Deselect other authentication meth ods listed Click OK Figure 43 Authentication Screen 12...

Page 63: ...Access Login for Users 1 Select Start Programs Administrative Tools Active Directory Users and Computers 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow acc...

Page 64: ...at You are using Windows XP You are connecting to a Windows 2000 server for authentication You already have a login User name and password on the Windows 2000 server Client Certificate Setup 1 Connect...

Page 65: ...PC and Server Configuration 61 Figure 46 Wireless CA Screen 5 Select User certificate request and select User Certificate the click Next Figure 47 Request Type Screen 6 Click Submit...

Page 66: ...Figure 48 Identifying Information Screen 7 A message will be displayed then the certificate will be returned to you Click Install this certificate Figure 49 Certificate Issued Screen 8 You will recei...

Page 67: ...ork Connection and select Properties 3 Select the Authentication Tab and ensure that Enable network access control using IEEE 802 1X is selected and Smart Card or other Certificate is selected from th...

Page 68: ...nable encryption for a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 52 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and...

Page 69: ...PC and Server Configuration 65 Figure 53 Properties Screen Setup for Windows XP and 802 1x client is now complete...

Page 70: ...he key is pro vided for me automatically Instead you must enter the WEP key manually ensuring it matches the WEP key used on the Access Point Figure 54 Properties Screen Note On some systems the 64 bi...

Page 71: ...ic However you may need to perform the following operations on a regular basis If using the Access Control feature update the Trusted PC database as required See Access Control in Chapter 3 for detail...

Page 72: ...s indicates whether the current IP address was obtained from a DHCP Server on your network It will display Enabled or Disabled Wireless SSID The current SSID Channel Frequency The Channel currently in...

Page 73: ...ta Activity Log Data Current Time The system date and time is displayed Log The Log shows details of the existing connections to the Wireless Access Point Buttons Refresh Update the data on screen Sav...

Page 74: ...tus screen is clicked Figure 57 Station List Screen Data Station List Screen Station List MAC Address The MAC physical address of each Wireless Station is displayed Mode The mode of each Wireless Stat...

Page 75: ...a tion is the process of ending an existing authentication relationship Association The number of Association packets received Association creates a connection between the AP and the client Usually cl...

Page 76: ...adcast packets transmitted to or received from Wireless Stations using Multicast transmission Management Number of Management packets transmitted to or received from Wireless Stations Control Number o...

Page 77: ...een The Admin Login screen allows you to assign a password to the Wireless Access Point This password limits access to the configuration interface The default password is password It is recommended th...

Page 78: ...Wireless Access Point User Guide 74 Figure 60 Password Dialog Enter admin for the User Name Enter the Wireless Access Point s password as set on the Admin Login screen above...

Page 79: ...f you have a previously saved configuration file you can use this to restore those settings by uploading the file 1 Click the Browse button and navigate to the location of the configuration file 2 Sel...

Page 80: ...y station The IP address of the manager station is not checked A specific station The IP address is checked and must match the address you enter in the IP address field provided Traps Select the desir...

Page 81: ...the following Figure 63 Firmware Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will appe...

Page 82: ...es 2 412 2 497 GHz Wireless Interface Operating Channels 802 11g 13 for North America 13 for Europe ETSI 14 for Japan 802 11b 11 for North America 14 for Japan 13 for Europe ETSI Operating temperature...

Page 83: ...108Mbps Auto Sensing Open System Share Key authentication Wireless Channels Support Automatic Wireless Channel Selection Antenna selection Tx Power Adjustment Country Selection Preamble Type long or s...

Page 84: ...CLI Message Log Access Control list file support Configuration file Backup Restore Statistics support Device discovery program Windows Utility Other Features DHCP client WINS client Firmware Upgrade...

Page 85: ...ent and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help To assure co...

Page 86: ...IP Address automatically DHCP client restart it You can use the following method to determine the IP address of the Wireless Access Point and then try to connect using the IP address in stead of the n...

Page 87: ...on the Wire less Access Point On the PC the wireless mode is set to Infrastructure If using the Access Control feature the PC s name and address is in the Trusted Stations list If using 802 1x mode e...

Page 88: ...o need to change the TCP IP of each PC Just configure the Wireless Access Point to match your existing LAN The following sections provide details about checking the TCP IP settings for various types o...

Page 89: ...n IP Address automatically This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specified...

Page 90: ...Settings Windows NT4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 67 Windows NT4 0 TCP IP 2 Click the Properties button to see a screen li...

Page 91: ...P address from a DHCP Server This is the default Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is alr...

Page 92: ...ion 2 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 69 Network Configuration Win 2000 3 Select the TCP IP protocol for your network...

Page 93: ...ndows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fix...

Page 94: ...Right click the Local Area Connection and choose Properties You should see a screen like the following Figure 71 Network Configuration Windows XP 3 Select the TCP IP protocol for your network card 4 C...

Page 95: ...is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP add...

Page 96: ...ss Stations e g Notebook PCs with wireless cards to a wired Ethernet LAN The Wireless Stations can then access all LAN resources Access Points can only function in Infrastructure mode and can communic...

Page 97: ...e used the one with the strongest signal is used This can only happen within an ESS If using Ad hoc mode no Access Point all Wireless stations should be set to use the same Channel However most Wirele...

Page 98: ...r Each user must have a user login on the Radius Server Each user s wireless client must support 802 1x and provide the login data when required All data transmission is encrypted using the WEP standa...

Reviews: