manualshive.com logo in svg

SMC Networks 2552W-G2, User Manual

Share
Download
SMC Networks 2552W-G2 User Manual Download Page 22

xvi

Contents

antenna location 

6-100

beacon-interval 6-100
dtim-period 6-101
fragmentation-length 6-101
rts-threshold 6-102
super-g 6-103
description 6-103
ssid 6-104
closed-system 6-104
max-association 6-105
assoc-timeout-interval 6-105
auth-timeout-value 6-105
shutdown 6-106
show interface wireless 

6-107

show station 

6-108

Rogue AP Detection Commands 

6-108

rogue-ap enable 

6-109

rogue-ap authenticate 

6-110

rogue-ap duration 

6-110

rogue-ap interval 

6-111

rogue-ap scan 

6-112

show rogue-ap 

6-112

Wireless Security Commands 

6-113

auth 6-113
encryption 6-115
key 6-116
transmit-key 6-117
cipher-suite 6-118
mic_mode 6-119
wpa-pre-shared-key 6-120
pmksa-lifetime 6-120
pre-authentication 6-121

Link Integrity Commands 

6-122

link-integrity ping-detect 

6-123

link-integrity ping-host 

6-123

link-integrity ping-interval 

6-124

link-integrity ping-fail-retry 

6-124

link-integrity ethernet-detect 

6-124

show link-integrity 

6-125

IAPP Commands 

6-126

iapp 6-126

VLAN Commands 

6-127

vlan 6-127
management-vlanid 6-128
vlan-id 6-128

Summary of Contents for 2552W-G2

Page 1: ...USER GUIDE EliteConnectTM Universal 802 11g 2 4GHz Wireless Access Point SMC2552W G2...

Page 2: ...Mason Irvine CA 92618 Phone 949 679 8000 EliteConnect SMC2552W G2 2 4GHz Wireless Access Point The easy way to make all your network connections September 2008 Pub 149100034100E F4 3 2 2 E092008 AP R...

Page 3: ...ed by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Copyright 2008 by SMC Networks Inc 20 Mason Irvine CA...

Page 4: ...become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty wh...

Page 5: ...WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME STATES D...

Page 6: ...vi...

Page 7: ...ceiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer o...

Page 8: ...causing equipment standard entitled Digital Apparatus ICES 003 of Industry Canada Cet appareil num rique respecte les limites de bruits radio lectriques applicables aux appareils num riques de Classe...

Page 9: ...ribed below This device requires that the user or installer properly enter the current country of operation in the command line interface as described in the user guide before operating this device Th...

Page 10: ...igences essentielles et aux autres dispositions pertinentes de la directive 1999 5 CE Swedish H rmed intygar SMC att denna Radio LAN device st r I verensst mmelse med de v sentliga egenskapskrav och v...

Page 11: ...oltage conditions according to IEC 60950 The conditions are only maintained if the equipment to which it is connected also operates under SELV conditions The PoE Power over Ethernet which is to be int...

Page 12: ...east 10 A The attachment plug must be an earth grounding type with NEMA 5 15P 15 A 125 V or NEMA 6 15P 15 A 250 V configuration Denmark The supply plug must comply with Section 107 2 D1 Standard DK2 1...

Page 13: ...950 Ces conditions ne sont maintenues que si l quipement auquel il est raccord fonctionne dans les m mes conditions France et P rou uniquement Ce groupe ne peut pas tre aliment par un dispositif imp d...

Page 14: ...teeingang haben Die Netzsteckdose mu in der N he des Ger ts und leicht zug nglich sein Die Stromversorgung des Ger ts kann nur durch Herausziehen des Ger tenetzkabels aus der Netzsteckdose unterbroch...

Page 15: ...ne strombelastbarkeit aus wenigstens 10 A Dieser Stromstecker mu hat einer erdschluss mit der typ NEMA 5 15P 15A 125V oder NEMA 6 15P 15A 250V konfiguration Danemark Dieser Stromstecker mu die ebene 1...

Page 16: ...COMPLIANCES x...

Page 17: ...nfiguration 3 1 Network Topologies 3 2 Ad Hoc Wireless LAN no Access Point 3 2 Infrastructure Wireless LAN 3 3 Infrastructure Wireless LAN for Roaming Wireless PCs 3 4 Infrastructure Wireless Bridge 3...

Page 18: ...s 5 88 Event Logs 5 91 Chapter 6 Command Line Interface 6 1 Using the Command Line Interface 6 1 Accessing the CLI 6 1 Console Connection 6 1 Telnet Connection 6 1 Entering Commands 6 2 Keywords and A...

Page 19: ...ow config 6 23 show hardware 6 27 System Logging Commands 6 27 logging on 6 28 logging host 6 28 logging console 6 29 logging level 6 29 logging facility type 6 30 logging clear 6 31 show logging 6 31...

Page 20: ...57 RADIUS Client 6 58 radius server address 6 58 radius server port 6 59 radius server key 6 59 radius server retransmit 6 60 radius server timeout 6 60 radius server port accounting 6 61 radius serve...

Page 21: ...y 6 80 show bridge link 6 80 Spanning Tree Commands 6 82 bridge stp enable 6 82 bridge stp forwarding delay 6 83 bridge stp hello time 6 83 bridge stp max age 6 84 bridge stp priority 6 84 bridge link...

Page 22: ...ogue ap duration 6 110 rogue ap interval 6 111 rogue ap scan 6 112 show rogue ap 6 112 Wireless Security Commands 6 113 auth 6 113 encryption 6 115 key 6 116 transmit key 6 117 cipher suite 6 118 mic_...

Page 23: ...bles and Pinouts B 1 Twisted Pair Cable Assignments B 1 10 100BASE TX Pin Assignments B 1 Straight Through Wiring B 2 Crossover Wiring B 3 Console Port Pin Assignments B 3 Wiring Map for Serial Cable...

Page 24: ...xviii Contents...

Page 25: ...int does not have a cable connection to the wired Ethernet LAN Bridge Providing links to access points operating in Bridge or Root Bridge mode and thereby connecting other wired LAN segments Root Brid...

Page 26: ...232 console cable One AC power adapter and power cord Four rubber feet User Guide CD Inform your dealer if there are any incorrect missing or damaged parts If possible retain the carton including the...

Page 27: ...iving The access point never transmits from both antennas at the same time The antennas transmit the outgoing signal as a toroidal sphere doughnut shaped with the coverage extending most in a directio...

Page 28: ...hubs The access point appears as an Ethernet node and performs a bridging function by moving packets from the wired LAN to remote workstations on the wireless infrastructure Note The RJ 45 port also s...

Page 29: ...work cable based on the IEEE 802 3af standard Note that if the access point is connected to a PoE source device and also connected to a local power source through the AC power adapter PoE will be disa...

Page 30: ...n User Name admin Password smcadmin General HTTP Server Enabled HTTP Server Port 80 HTTP Server Enabled HTTP Server Port 443 TCP IP DHCP Enabled IP Address 192 168 2 2 Subnet Mask 255 255 255 0 Defaul...

Page 31: ...isabled VLAN Management VLAN ID 1 VLAN ID VAP Interface 1 VLAN Tag Support Disabled QoS QoS Mode Off SVP SpectraLink Voice Priority Disabled Filter Control Local Bridge Disabled AP Management Enabled...

Page 32: ...Eastern Time US and Canada Ethernet Interface Speed and Duplex Auto Wireless Interface 802 11b g IAPP Enabled SSID SMC Radio Mode b g Status Disabled Auto Channel Select Enabled Closed System Disable...

Page 33: ...Encryption Disabled WEP Key Length 128 bits WEP Key Type Hexadecimal WEP Transmit Key Number 1 WEP Keys null WPA Configuration Mode WEP Only Disabled WPA Key Management WPA Pre shared Key WPA PSK Typ...

Page 34: ...Introduction 1 10 1...

Page 35: ...o or near building support columns or other obstructions that may cause reduced signal or null zones in parts of the coverage area Mount away from any signal absorbing or reflecting structures such as...

Page 36: ...the back panel with category 3 4 or 5 UTP Ethernet cable When the access point and the connected device are powered on the Ethernet Link LED should light indicating a valid network connection If this...

Page 37: ...rastructure wireless bridge to connect wired LANs Infrastructure wireless repeater for extended range The 802 11b and 802 11g frequency band which operates at 2 4 GHz can easily encounter interference...

Page 38: ...ireless adapter connected via radio signals as an independent wireless LAN Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio channel An ad hoc wireless LAN can...

Page 39: ...group via a radio link or access other computers or network resources in the wired LAN infrastructure via the access point The infrastructure configuration not only extends the accessibility of wirele...

Page 40: ...ccess points The SSID can be manually configured by the clients can be detected in an access point s beacon or can be obtained by querying for the identity of the nearest access point For clients that...

Page 41: ...configured as the root bridge in the wireless network The root bridge should be the unit connected to the main core of the wired LAN Other bridges must configure one parent link to the root bridge or...

Page 42: ...o six WDS repeater links In repeater mode the access point does not support an Ethernet link to a wired LAN Note that when the access point operates in this mode only half the normal throughput is pos...

Page 43: ...serial port that enables a connection to a PC or terminal for monitoring and configuration Attach a VT100 compatible terminal or a PC running a terminal emulation program to the access point You can...

Page 44: ...igure to enter configuration mode then type interface ethernet to access the Ethernet interface configuration mode Type no ip dhcp to disable DHCP client mode Then type ip address ip address netmask g...

Page 45: ...code for your country and enter the country command again following by your country code e g tw for Taiwan Note The CLI examples shown later in this manual abbreviate the console prompt to just AP Th...

Page 46: ...Initial Configuration 4 4 4 The home page displays the Main Menu...

Page 47: ...ed IP address of the access point or use the default address http 192 168 2 2 To log into the access point enter the default user name admin and the password smcadmin then press LOGIN When the home pa...

Page 48: ...tree parameters 5 21 AP Management Configures access to management interfaces 5 27 Administration Configures user name and password for management access upgrades software from local file FTP or TFTP...

Page 49: ...distinguish different devices in your network System Name An alias for the access point enabling the device to be uniquely identified on the network Default Enterprise Wireless AP Range 1 32 characte...

Page 50: ...ig end 6 87 Enterprise AP show system 6 22 System Information Serial Number System Up time 0 days 0 hours 32 minutes 22 seconds System Name R D System Location System Contact Contact System Country Co...

Page 51: ...e page 4 2 After you have network access to the access point you can use the web browser interface to modify the initial IP configuration if needed Note If there is no DHCP server on your network or D...

Page 52: ...gs From the global configuration mode enter the interface configuration mode with the interface ethernet command Use the ip dhcp command to enable the DHCP client or no ip dhcp to disable it To manual...

Page 53: ...Wi Fi Protected Access WPA wireless security A secondary RADIUS server may also be specified as a backup should the primary server fail or become inaccessible In addition the configured RADIUS server...

Page 54: ...System Configuration 5 8 5...

Page 55: ...k spaces in the string Maximum length 255 characters Timeout Number of seconds the access point waits for a reply from the RADIUS server before resending a request Range 1 60 seconds Default 5 Retrans...

Page 56: ...address 192 168 1 256 58 Enterprise AP config radius server port 181 6 59 Enterprise AP config radius server key green 6 59 Enterprise AP config radius server timeout 10 6 60 Enterprise AP config radi...

Page 57: ...altered Clients can then securely use the local user name and password for access authentication Note that SSH client software needs to be installed on the management station to access the access poin...

Page 58: ...Take note of the following points before configuring MAC address or 802 1X authentication Use MAC address authentication for a small network with a limited number of users MAC addresses can be manuall...

Page 59: ...ovides a basic level of authentication for wireless clients attempting to gain access to the network A database of authorized MAC addresses can be stored locally on the access point or remotely on a c...

Page 60: ...MAC database provides a mechanism to take certain actions based on a wireless client s MAC address The MAC list can be configured to allow or deny network access to specific clients System Default Sp...

Page 61: ...tication server local 6 71 Enterprise AP config mac authentication session timeout 5 6 71 Enterprise AP config address filter default denied 6 69 Enterprise AP config address filter entry 00 70 50 cc...

Page 62: ...hen use the 802 1X supplicant command to enable the feature To display the current settings use the show authentication command from the Exec mode not shown in the following example Enterprise AP conf...

Page 63: ...When enabled clients associated with a specific VAP interface cannot establish wireless communications with each other Clients can communicate with clients associated to other VAP interfaces Prevent...

Page 64: ...ss to wireless communications through the access point Use the filter ap manage command to restrict management access from wireless clients To configure Ethernet protocol filtering use the filter ethe...

Page 65: ...er an assigned client VLAN ID default VLAN ID or the management VLAN ID Traffic received from the wired network must also be tagged with one of these known VLAN IDs Received traffic that has an unknow...

Page 66: ...e The specific configuration of RADIUS server software is beyond the scope of this guide Refer to the documentation provided with the RADIUS server software VLAN Classification Enables or disables VLA...

Page 67: ...dges need to specify one Parent link to the root bridge or to a bridge connected to the root bridge The other five WDS links are available as Child links to other bridges Bridge Role Sets the radio to...

Page 68: ...network It selects a root port on each bridging device except for the root device which incurs the lowest path cost when forwarding a packet from that device to the root device Then it selects a desig...

Page 69: ...ge 0 65535 Default 32768 Bridge Max Age The maximum time in seconds a device can wait without receiving a configuration message before attempting to reconfigure All device ports except for designated...

Page 70: ...akes a port with higher priority less likely to be blocked if the Spanning Tree Protocol is detecting network loops Where more than one port is assigned the highest priority the port with lowest numer...

Page 71: ...ss g bridge link child 4 00 08 3e 84 79 31 Enterprise AP if wireless g bridge link parent 00 08 2d 69 3a 51 6 97 Enterprise AP if wireless g exit Enterprise AP show bridge link wireless g 6 101 Interf...

Page 72: ...stp command Enterprise AP config bridge stp enable 6 104 Enterprise AP config bridge stp forwarding delay 25006 105 Enterprise AP config bridge stp hello time 500 6 106 Enterprise AP config bridge stp...

Page 73: ...s the access point will reject the connection UI Management Enables or disables management access through Telnet the Web HTTP or SNMP interfaces Default Enabled Note Secure Web HTTPS connections are n...

Page 74: ...compromise access point and network security Once a new Administrator has been configured you can delete the default admin user name from the system Note Pressing the Reset button on the back of the...

Page 75: ...vided periodically from your distributor After upgrading new software you must reboot the access point to implement the new code Until a reboot occurs the access point will continue to run the softwar...

Page 76: ...itional steps Obtain the IP address of the FTP or TFTP server where the access point software is stored If upgrading from an FTP server be sure that you have an account configured on the server with a...

Page 77: ...Specifies the name of the code file on the server The new firmware file name should not contain slashes or the leading letter of the file name should not be a period and the maximum length for file n...

Page 78: ...nt in the access point file system To run the new software use the reset board command to reboot the access point Enterprise AP copy tftp file 6 55 1 Application image 2 Config file 3 Boot block image...

Page 79: ...d to memory or sent to a Syslog server The logged messages serve as a valuable tool for isolating access point and network problems System Log Setup Enables the logging of error messages Default Disab...

Page 80: ...in the access point s memory are erased when the device is rebooted Logging Facility Type Sets the facility type for remote logging of syslog messages The command specifies the facility type tag sent...

Page 81: ...record the time from the factory default set at the last bootup The access point acts as an SNTP client periodically sending time synchronization requests to specific time servers You can configure up...

Page 82: ...d to end the change from standard time During this period the system clock is set back by one hour CLI Commands for SNTP To enable SNTP support on the access point from the global configuration mode s...

Page 83: ...ons and the protocol used to access this information over the network The access point includes an onboard agent that supports SNMP versions 1 2c and 3 clients This agent continuously monitors the sta...

Page 84: ...t stations SNMP Enables or disables SNMP management access and also enables the access point to send SNMP traps notifications Default Disable Location A text string that describes the system location...

Page 85: ...h the notification operation Maximum length 23 characters case sensitive Default public Engine ID Sets the engine identifier for the SNMPv3 agent that resides on the access point This engine protects...

Page 86: ...the RADIUS server dot1xAuthNotInitiated A client station did not initiate 802 1X authentication dot1xAuthSuccess A 802 1X client station has been successfully authenticated by the RADIUS server dot1x...

Page 87: ...ion of the access point and define a system contact To set the read only and read write community names use the snmp server community command Use the snmp server host command to define a trap receiver...

Page 88: ...ociation Enabled dot11StationAuthentication Enabled dot11StationReAssociation Enabled dot11StationRequestFail Enabled dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled dot1xAuthSuccess Enabled dot1x...

Page 89: ...ponding Passphrase field Priv Type The data encryption type used for the SNMP user either DES or none When DES is selected enter a key in the corresponding Passphrase field Passphrase The password or...

Page 90: ...P users and group settings use the show snmp users or show snmp group assignments commands Enterprise AP config snmp server engine id 1a 2b 3c 4d 00 ff 6 45 Enterprise AP config snmp server user 6 45...

Page 91: ...o configure the filter see below To edit an existing filter select the radio button next to the entry in the table and then click the Edit button To delete a filter select the radio button next to the...

Page 92: ...use exclude entries for the required trap objects to send to the target Note that the filter entries are applied in the sequence that they are defined CLI Commands for Configuring SNMPv3 Trap Filters...

Page 93: ...settings see below To edit an existing target select the radio button next to the entry in the table and then click the Edit button To delete targets select the radio button next to the entry in the...

Page 94: ...er The defined SNMP v3 user that is to receive notification messages Assigned Filter The name of a user defined notification filter that is applied to the target CLI Commands for Configuring SNMPv3 Ta...

Page 95: ...y to all eight VAP interfaces The VAPs function similar to a VLAN with each VAP mapped to its own VLAN ID Traffic to specific VAPs can be segregated based on user groups or application traffic Each VA...

Page 96: ...to Channel Select Enables the access point to automatically select an unoccupied radio channel Default Enabled Transmit Power Adjusts the power of the radio signals transmitted from the access point T...

Page 97: ...hen the Antenna ID is set to Default Antenna to use the access point s integrated antennas Right The radio only uses the antenna on the right side the side closest to the access point LEDs Select this...

Page 98: ...access point can increase data throughput when using a short preamble but will only use a short preamble if it determines that all associated clients support it Beacon Interval The rate at which beaco...

Page 99: ...256 2346 bytes Default 2346 bytes RTS Threshold Sets the packet size threshold at which a Request to Send RTS signal must be sent to a receiving station prior to the sending station starting communic...

Page 100: ...6 87 Enter Wireless configuration commands one per line Enterprise AP if wireless g super g 6 103 Enterprise AP if wireless g channel 42 6 96 Enterprise AP if wireless g transmit power full 6 96 Ente...

Page 101: ...nabled the VAP interface does not include its SSID in beacon messages Nor does it respond to probe requests from clients that do not include a fixed SSID Default Disable Authentication Timeout Interva...

Page 102: ...ess the 802 11b g radio interface From the 802 11b g interface mode you can access radio settings that apply to all VAP interfaces To access a specific VAP interface numbered 0 to 7 use the vap comman...

Page 103: ...e periodic scanning for other access points Default Disable AP Scan Interval Sets the time between each rogue AP scan Range 30 10080 minutes Default 720 minutes AP Scan Duration Sets the length of tim...

Page 104: ...ications with audio and video are particularly sensitive to the delay and throughput variations that result from this equal opportunity wireless access method For multimedia applications to run well o...

Page 105: ...e higher the AC priority the higher the probability that data is transmitted When the access point forwards traffic WMM adds data packets to four independent transmit queues one for each AC depending...

Page 106: ...after every collision up to a maximum value CWMax After a successful transmission the CW value is reset to its CWMin value Figure 5 1 WMM Backoff Wait Times For high priority traffic the AIFSN and CW...

Page 107: ...Radio Interface 5 61 5...

Page 108: ...er limit of the random backoff wait time before wireless medium access can be attempted The initial wait time is a random value between zero and the CWMin value Specify the CWMin value in the range 0...

Page 109: ...he access point The wmm acknowledge policy command is used to enable or disable a policy for each access category The wmmparms command defines detailed WMM parameters Enterprise AP if wireless g wmm r...

Page 110: ...shold 2347 bytes Beacon Interval 100 TUs Authentication Timeout Interval 60 Mins Association Timeout Interval 30 Mins DTIM Interval 1 beacon Maximum Association 64 stations MIC Mode Software Super A D...

Page 111: ...TXOP Limit 0 000 ms AC2 Video logCwMin 3 logCwMax 4 AIFSN 2 Admission Control No TXOP Limit 3 008 ms AC3 Voice logCwMin 2 logCwMax 3 AIFSN 2 Admission Control No TXOP Limit 1 504 ms WMM AP Parameters...

Page 112: ...r each virtual access point VAP interface MAC address filtering and RADIUS server settings are global and apply to all VAP interfaces The security mechanisms that may be employed depend on the level o...

Page 113: ...ecurity in small networks Requires manual management of pre shared key WPA2 with 802 1X Requires WPA enabled system and network card driver native support provided in Windows XP Provides the strongest...

Page 114: ...face Detail Settings Authentication Shared Key or Open System Encryption Enable 802 1x Disable Local RADIUS or Disabled Yesc Dynamic WEP 802 1x only Interface Detail Settings Authentication Open Syste...

Page 115: ...hentication rates Local or Disabled Yes WPA2 Pre Shared Key only Interface Detail Settings Authentication WPA2 PSK Encryption Enable WPA Clients Required Cipher Suite AES CCMP 802 1x Disable WPA Pre s...

Page 116: ...ings select Security under Radio G set an SSID to identify the wireless network service provided by each VAP you want to use and then click Apply to save your settings Before enabling the radio servic...

Page 117: ...nd cannot be recommended for a high level of network security For more robust wireless security the access point provides Wi Fi Protected Access WPA for improved data encryption and user authenticatio...

Page 118: ...nt with clients using static WEP keys and WPA select WEP transmit key index 2 3 or 4 The access point uses transmit key index 1 for the generation of dynamic keys To enable WEP shared keys for a VAP i...

Page 119: ...I in order to enable all types of encryption WEP TKIP or AES in the access point CLI Commands for WEP Shared Key Security To enable WEP shared key security for the 802 11g interface use the interface...

Page 120: ...e AP if wireless g VAP 0 exit Enterprise AP show interface wireless g 0 6 107 Wireless Interface Information Identification Description SMC 802 11g Access Point SSID SMC_G 0 Channel 11 AUTO Status DIS...

Page 121: ...30 min 802 1x Session Timeout Value 0 min Antenna Antenna Control method Diversity Antenna ID 0x0000 Default Antenna Antenna Location Indoor Quality of Service WMM Mode SUPPORTED WMM Acknowledge Poli...

Page 122: ...CwMax 10 AIFSN 7 Admission Control No TXOP Limit 0 000 ms AC2 Video logCwMin 3 logCwMax 4 AIFSN 1 Admission Control No AC3 Voice logCwMin 2 logCwMax 3 AIFSN 1 Admission Control No TXOP Limit 1 504 ms...

Page 123: ...with a master temporal key for each user session and then mathematically generates other keys to encrypt each data packet TKIP provides further data encryption enhancements by including a message int...

Page 124: ...A2 clients to associate to a common SSID interface In mixed mode the unicast encryption cipher TKIP or AES CCMP is negotiated for each client The access point advertises its supported encryption ciphe...

Page 125: ...eeds directly to key exchange and association To configure WPA click Security under Radio G Select one of the VAP interfaces by clicking More Select one of the WPA options in the Authentication Setup...

Page 126: ...hentication WPA2 PSK Clients using WPA2 with a Pre shared Key are accepted for authentication WPA WPA2 mixed Clients using WPA or WPA2 over 802 1X are accepted for authentication WPA WPA2 PSK mixed Cl...

Page 127: ...in example Table 5 4 WPA Configuration Settings WPA and WPA2 pre shared key only WPA and WPA2 over 802 1X Encryption Enabled Authentication Setup WPA PSK WPA2 PSK or WPA WPA2 mixed WPA Cipher Mode WE...

Page 128: ...cation Protocol EAP to pass user credentials either digital certificates user names and passwords or other from the client to the RADIUS server Client authentication is then verified on the RADIUS ser...

Page 129: ...after successful wireless association with the access point The 802 1X supported mode allows access for clients not using WPA or WPA2 security Required The access point enforces 802 1X authentication...

Page 130: ...splay the current settings use the show authentication command from the Exec mode Enterprise AP if wireless g VAP 0 802 1X supported 6 64 Enterprise AP if wireless g VAP 0 802 1X broadcast key refresh...

Page 131: ...lays basic system configuration settings as well as the settings for the wireless interface Menu Description Page AP Status Displays configuration settings for the basic system and the wireless interf...

Page 132: ...ist on other network segments HTTP Server Shows if management access via HTTP is enabled HTTP Server Port Shows the TCP port used by the HTTP interface Version Shows the version number for the runtime...

Page 133: ...AP System Location System Contact Contact System Country Code US UNITED STATES MAC Address 00 13 F7 1C 33 66 MAC Address 00 13 F7 1C 33 66 Radio G MAC Address 00 13 F7 1C 33 67 IP Address 192 168 2 2...

Page 134: ...ns as described below Note that this page is automatically refreshed every five seconds Station Address The MAC address of the wireless client Authenticated Shows if the station has been authenticated...

Page 135: ...n is completed stations can associate with the current access point or reassociate with a new access point The association procedure allows the wireless system to track the location of each mobile cli...

Page 136: ...0 802 11g Channel Auto No 802 11g Channel Stations if wireless G VAP 1 802 11g Channel Auto No 802 11g Channel Stations No 802 11g Channel Stations if wireless g VAP 7 802 11g Channel Auto No 802 11g...

Page 137: ...Error Messages An example of a logged error message is Station Failed to authenticate unsupported algorithm This message may be caused by any of the following conditions Access point was set to Open A...

Page 138: ...4 State Disabled 4 0 0 0 0 UDP Port 514 State Disabled Enterprise AP Enterprise AP show event log 6 32 Mar 09 11 57 55 Information 802 11g 11g Radio Interface Enabled Mar 09 11 57 55 Information 802 1...

Page 139: ...y commands to complete your desired tasks 3 When finished exit the session with the exit command After connecting to the system through the console port the login screen displays Caution The CLI examp...

Page 140: ...access mode i e Exec 3 Enter the necessary commands to complete your desired tasks 4 When finished exit the session with the quit or exit command After entering the Telnet command the login screen dis...

Page 141: ...Exec Global Configuration or Interface You can also display a list of valid keywords for a specific command For example the command show displays a list of possible show commands The command show inte...

Page 142: ...tory of commands by pressing the up arrow key Any command displayed in the history list can be executed again or first modified and then executed Using the show history command displays a longer list...

Page 143: ...erface Wireless Configuration IC W These commands modify the wireless port configuration of global parameters for the radio and include commands such as channel and transmit power Interface Wireless V...

Page 144: ...right one character Ctrl K Deletes from cursor to the end of the command line Ctrl L Repeats current command line on a new line Ctrl N Enters the next command line in the history buffer Ctrl P Shows t...

Page 145: ...rameters 6 82 Ethernet Interface Configures connection parameters for the Ethernet interface 6 87 Wireless Interface Configures radio interface settings 6 92 Wireless Security Configures radio interfa...

Page 146: ...ault Setting None Command Mode Exec Example Related Commands end 6 8 end This command returns to the previous configuration mode Default Setting None Command Mode Global Configuration Interface Config...

Page 147: ...e reached The following are some results of the ping command Normal response The normal response occurs in one to ten seconds depending on network traffic Destination does not respond If the host does...

Page 148: ...always run the Power On Self Test Example This example shows how to reset the system show history This command shows the contents of the command history buffer Default Setting None Command Mode Exec C...

Page 149: ...evice Designation prompt Customizes the command line prompt GC 6 14 system name Specifies the host name for the access point GC 6 14 snmp server contact Sets the system contact string GC 6 40 snmp ser...

Page 150: ...on the access point GC 6 19 System Status show system Displays system information Exec 6 22 show version Displays version information for the system Exec 6 23 show config Displays detailed configurat...

Page 151: ...BR Iceland IS New Zealand NZ Turkey TR Brunei Darussalam BN India IN Norway NO Ukraine UA Bulgaria BG Indonesia ID Qatar QA United Arab Emirates AE Canada CA Iran IR Oman OM United Kingdom GB Chile C...

Page 152: ...ring to use for the CLI prompt Maximum length 32 characters Default Setting Enterprise AP Command Mode Global Configuration Example system name This command specifies or modifies the system name for t...

Page 153: ...rd After initially logging onto the system you should set the password Remember to record it in a safe place Use the no form to reset the default password Syntax password password no password password...

Page 154: ...enerate host encryption keys The SSH server is disabled while the keys are being generated The show system command displays the status of the SSH server Example ip ssh server port This command sets th...

Page 155: ...port This command specifies the TCP port number used by the web browser interface Use the no form to use the default port Syntax ip http port port number no ip http port port number The TCP port to b...

Page 156: ...no form to restore the default port Syntax ip https port port_number no ip https port port_number The UDP port used for HTTPS SSL Range 80 1024 65535 Default Setting 443 Command Mode Global Configurat...

Page 157: ...pendently If you enable HTTPS you must indicate this in the URL https device port_number When you start HTTPS the connection is established in this way The client authenticates the server using the se...

Page 158: ...t interface on the access point from an invalid address the unit will reject the connection enter an event message in the system log and send a trap message to the trap manager IP address can be confi...

Page 159: ...or disables the selected management access method Default Setting All enabled Command Mode Global Configuration Example This example restricts management access to the indicated addresses show apmage...

Page 160: ...de US UNITED STATES MAC Address 00 13 F7 1C 33 66 Radio A MAC Address 00 13 F7 1C 33 66 Radio G MAC Address 00 13 F7 1C 33 67 IP Address 192 168 2 2 Subnet Mask 255 255 255 0 Default Gateway 0 0 0 0 V...

Page 161: ...ardware version R0A Enterprise AP Enterprise AP show config Authentication Information MAC Authentication Server DISABLED MAC Auth Session Timeout Value 0 min 802 1x supplicant DISABLED 802 1x supplic...

Page 162: ...g Transmit Power 100 16 dBm Data Rate 54Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs DTIM Interval 1 beacon Maximum Association 64 stations Native VLAN ID 1...

Page 163: ...0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC format no delimiter Radius VLAN format HEX Radius Secondary Server Information IP 0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC forma...

Page 164: ...emUp Enabled SNTP Information Service State Disabled SNTP server 1 IP 137 92 140 80 SNTP server 2 IP 192 43 244 18 Current Time 00 14 Jan 1st 1970 Time Zone 5 BOGOTA EASTERN INDIANA Daylight Saving Di...

Page 165: ...Enterprise AP Table 6 6 System Logging Commands Command Function Mode Page logging on Controls logging of error messages GC 6 28 logging host Adds a syslog server host IP address that will receive lo...

Page 166: ...t are stored in memory Example logging host This command specifies syslog servers host that will receive logging messages Use the no form to remove syslog server host Syntax logging host 1 2 3 4 host_...

Page 167: ...ult Setting Disabled Command Mode Global Configuration Example logging level This command sets the minimum severity level for event logging Syntax logging level Emergency Alert Critical Error Warning...

Page 168: ...ate service Range 16 23 Default Setting 16 Command Mode Global Configuration Level Argument Description Emergency System unusable Alert Immediate action needed Critical Critical conditions e g memory...

Page 169: ...Syntax logging clear Command Mode Global Configuration Example show logging This command displays the logging configuration Syntax show logging Command Mode Exec Example Enterprise AP config logging...

Page 170: ...09 11 55 52 Information SSH task Enable SSH server Mar 09 11 55 52 Information Enable Telnet Mar 09 11 55 40 Information 802 11g Transmit Power set to QUARTER Press n next p previous a abort y contin...

Page 171: ...s enabled using the sntp server enable command the sntp server ip command specifies the time servers from which the access point polls for time updates The access point will poll the time servers in t...

Page 172: ...e Related Commands sntp server ip 6 33 show sntp 6 36 sntp server date time This command sets the system clock Default Setting 00 14 00 January 1 1970 Command Mode Global Configuration Example This ex...

Page 173: ...the specified period Example This sets daylight savings time to be used from July 1st to September 1st sntp server timezone This command sets the time zone for the access point s internal clock Syntax...

Page 174: ...urs and minutes your time zone is east before or west after of UTC Example show sntp This command displays the current time and configuration settings for the SNTP client Command Mode Exec Example Ent...

Page 175: ...nt s DHCP relay agent Use the no form to disable the agent Syntax no dhcp relay enable Default Setting Disabled Command Mode Global Configuration Command Usage For the DHCP relay agent to function the...

Page 176: ...r ip_address IP address of the server Default Setting Primary and secondary 0 0 0 0 Command Mode Global Configuration Example show dhcp relay This command displays the current DHCP relay configuration...

Page 177: ...cations GC 6 43 snmp server engine id Sets the engine ID for SNMP v3 GC 6 45 snmp server user Sets the name of the SNMP v3 user GC 6 45 snmp server targets Configures SNMP v3 notification targets GC 6...

Page 178: ...tations are able to both retrieve and modify MIB objects Default Setting public Read only access Authorized management stations are only able to retrieve MIB objects private Read write access Authoriz...

Page 179: ...255 characters Default Setting None Command Mode Global Configuration Example Related Commands snmp server contact 6 40 snmp server enable server This command enables SNMP management access and also...

Page 180: ...community string no snmp server host 1 First SNMP host 2 Second SNMP host 3 Third SNMP host 4 Fourth SNMP host host_ip_address IP of the host the targeted recipient host_name Name of the host Range 1...

Page 181: ...d The access point s configuration file has been changed dot11StationAssociation A client station has successfully associated with the access point dot11StationReAssociation A client station has succe...

Page 182: ...ss iappContextDataSent A client station s Context Data has been sent to another access point with which the station has associated sntpServerFail The access point has failed to set the time from the c...

Page 183: ...ering this command invalidates all engine IDs that have been previously configured If the engineID is deleted or changed all SNMP users will be cleared You will need to reconfigure all existing users...

Page 184: ...MD5 and DES key passwords must be defined The command prompts for the following information to configure an SNMP v3 user user name A user defined string for the SNMP user 32 characters maximum group...

Page 185: ...ions Currently only version 3 is supported in this command udp port The UDP port that is used on the receiving management station for notifications notification type The type of notification that is s...

Page 186: ...oint allows up to 10 notification filters to be created Each filter can be defined by up to 20 MIB subtree ID entries Use the command more than once with the same filter ID to build a filter that incl...

Page 187: ...rs filter id A user defined name that identifies an SNMP v3 notification filter Maximum length 32 characters Default Setting None Command Mode Global Configuration Example show snmp groups This comman...

Page 188: ...ser group assignments Syntax show snmp group assignments Command Mode Exec Enterprise AP show snmp groups GroupName RO SecurityModel USM SecurityLevel NoAuthNoPriv GroupName RWAuth SecurityModel USM S...

Page 189: ...A user defined name that identifies an SNMP v3 notification filter Maximum length 32 characters Command Mode Exec Example Enterprise AP show snmp group assignments GroupName RWPriv UserName chris Ente...

Page 190: ...filter assignments This command displays the SNMP v3 notification filter assignments Syntax show snmp filter assignments Command Mode Exec Example Enterprise AP show snmp filter assignments HostID Fi...

Page 191: ...abled systemDown Enabled radiusServerChanged Enabled configFileVersionChanged Enabled sntpServerFail Enabled dot11StationAssociation Enabled dot11StationReAssociation Enabled dot11StationAuthenticatio...

Page 192: ...um length for file names is 32 characters Valid characters A Z a z 0 9 _ If the file contains an error it cannot be set as the default file Example Table 6 10 Flash File Commands Command Function Mode...

Page 193: ...ation file from flash memory Default Setting None Command Mode Exec Command Usage The system prompts for data required to complete the copy command Only a configuration file can be uploaded to an FTP...

Page 194: ...e files in flash memory and the one used to boot the access point is deleted be sure you first use the bootfile command to update the application image file booted at startup before you reboot the acc...

Page 195: ...urrent operation code file that booted the system Syntax show snmp filter assignments Command Mode Exec Example Column Heading Description File Name The name of the file Type 2 Operation Code and 5 Co...

Page 196: ...s Default Setting None Table 6 11 RADIUS Client Command Function Mode Page radius server address Specifies the RADIUS server GC 6 58 radius server port Sets the RADIUS server network port GC 6 59 radi...

Page 197: ...ple radius server key This command sets the RADIUS encryption key Syntax radius server secondary key key_string secondary Secondary server key_string Encryption key used to authenticate logon access f...

Page 198: ...lobal Configuration Example radius server timeout This command sets the interval between transmitting authentication requests to the RADIUS server Syntax radius server secondary timeout number_of_seco...

Page 199: ...RADIUS accounting session is automatically started for each user that is successfully authenticated to the access point Example radius server timeout interim This command sets the interval between tr...

Page 200: ...MAC addresses in the form xxxxxx xxxxxx Default Setting No delimiter Command Mode Global Configuration Example radius server vlan format This command sets the format for specifying VLAN IDs on the RA...

Page 201: ...0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Accounting Port 0 Disabled InterimUpdate 3600 Accounting Server State DOWN Radius MAC format no delimiter Radius VLAN format HEX Radius Secondary Server In...

Page 202: ...authentication process Uses standard 802 11 authentication for all others required Requires 802 1X authentication for all clients Default Setting Disabled Table 6 12 802 1X Authentication Command Func...

Page 203: ...If 802 1X authentication is not initiated by the station the access point will initiate authentication Only those stations successfully authenticated with 802 1X are allowed to access the network 802...

Page 204: ...sion key Range 0 1440 minutes Default Setting 0 Disabled Command Mode Global Configuration Command Usage Session keys are unique to each client and are used to authenticate a client connection and cor...

Page 205: ...can be enabled Example 802 1x supplicant user This command sets the user name and password used for authentication of the access point when operating as a 802 1X supplicant Use the no form to clear th...

Page 206: ...ec Example Enterprise AP config 802 1x supplicant user WA6102 dot1xpass Enterprise AP config Enterprise AP show authentication Authentication Information MAC Authentication Server DISABLED MAC Auth Se...

Page 207: ...y MAC addresses entered as allowed in the address filtering table are allowed Default allowed Command Mode Global Configuration Example Table 6 13 MAC Address Authentication Command Function Mode Page...

Page 208: ...Mode Global Configuration Command Mode The access point supports up to 1024 MAC addresses An entry in the address table may be allowed or denied access depending on the global setting configured for t...

Page 209: ...reless clients with the RADIUS server during 802 1X authentication Default Disabled Command Mode Global Configuration Example Related Commands address filter entry 6 70 radius server address 6 58 802...

Page 210: ...Mode Enterprise AP config mac authentication session timeout 1 Enterprise AP config Table 6 14 Filtering Commands Command Function Mode Page filter local bridge Disables communication between wireless...

Page 211: ...interface on the access point Use the no form to disable this filtering Syntax filter ap manage no filter ap manage Default Enabled Command Mode Global Configuration Example filter uplink enable This...

Page 212: ...mple filter ethernet type enable This command checks the Ethernet type on all incoming and outgoing Ethernet packets against the protocol filtering table Use the no form to disable this feature Syntax...

Page 213: ...ump Load DEC MOP DEC LAT Ethertalk Appletalk ARP Novell IPX old Novell IPX new EAPOL Telxon TXP Aironet DDP Enet Config Test IP IPv6 NetBEUI PPPoE_Discovery PPPoE_PPP_Session Default None Command Mode...

Page 214: ...Filters Protocol ARP ISO 0x0806 Enterprise AP Command Function Mode Page bridge role Selects the bridge operation mode for a radio interface IC W 6 77 bridge link parent Configures the MAC addresses...

Page 215: ...page 6 77 When the access point is operating in this mode traffic is not forwarded to the Ethernet port from the radio interface Up to six WDS bridge links MAC addresses can be specified for each unit...

Page 216: ...ndex number of the child node Range 1 6 mac address The wireless MAC address of a child bridge unit 12 hexadecimal digits in the form xx xx xx xx xx xx Default Setting None Command Mode Interface Conf...

Page 217: ...seconds Command Mode Global Configuration Command Usage If the MAC address of an entry in the address table is not seen on the associated interface for longer than the aging time the entry is discarde...

Page 218: ...erprise AP show bridge filter entry max entry numbers 512 current entry nums 13 Bridge MAC Addr Table MAC Port Fwd_type VlanID origin life remain Life Type 01 80 c2 00 00 00 0 5 4095 300 300 Static 01...

Page 219: ...d priority 0 path cost 19 message age Timer Inactive message age 4469 designated root priority 32768 MAC 00 30 F1 F0 9A 9C designated cost 0 designated bridge priority 32768 MAC 00 30 F1 F0 9A 9C desi...

Page 220: ...e Page bridge stp enable Enables the Spanning Tree feature GC 6 82 bridge stp forwarding delay Configures the spanning tree bridge forward time GC 6 83 bridge stp hello time Configures the spanning tr...

Page 221: ...must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to the discarding s...

Page 222: ...sage before attempting to reconfigure All device ports except for designated ports should receive configuration messages at regular intervals Any port that ages out STP information provided in the las...

Page 223: ...r the port Range 1 65535 Default Setting 19 Command Mode Interface Configuration Command Usage This command is used by the Spanning Tree Protocol to determine the best path between devices Therefore l...

Page 224: ...ds bridge link path cost 6 85 show bridge stp This command displays aging time and spanning tree settings for the Ethernet and wireless interfaces Syntax show bridge stp Command Mode Exec Example Ente...

Page 225: ...mmand Function Mode Page interface ethernet Enters Ethernet interface configuration mode GC 6 87 dns primary server Specifies the primary name server IC E 6 88 dns secondary server Specifies the secon...

Page 226: ...servers are queried in sequence Example This example specifies two domain name servers Related Commands show interface ethernet 6 91 ip address This command sets the IP address for the access point U...

Page 227: ...ll not be accepted by the configuration program Example Related Commands ip dhcp 6 89 ip dhcp This command enables the access point to obtain an IP address from a DHCP server Use the no form to restor...

Page 228: ...ntax speed duplex auto 10MH 10MF 100MF 100MH auto autonegotiate speed and duplex mode 10MH Forces 10 Mbps half duplex operation 10MF Forces 10 Mbps full duplex operation 100MH Forces 100 Mbps half dup...

Page 229: ...o disable the Ethernet port due to abnormal behavior e g excessive collisions and reenable it after the problem has been resolved You may also want to disable the Ethernet port for security reasons Ex...

Page 230: ...terface configuration mode IC W 6 94 speed Configures the maximum data rate at which the access point transmits unicast packets IC W 6 95 turbo Configures turbo mode to use a faster data rate IC W a 7...

Page 231: ...description Adds a description to the wireless interface IC W VAP 6 103 ssid Configures the service set identifier IC W VAP 6 104 closed system Opens access to clients without a pre configured SSID IC...

Page 232: ...e 802 11g interface enter the following command vap This command provides access to the VAP Virtual Access Point interface configuration mode Syntax vap vap id vap id The number that identifies the VA...

Page 233: ...longer the transmission distance Please refer to the table for maximum distances on page C 5 Example multicast data rate This command configures the maximum data rate at which the access point transmi...

Page 234: ...regulations which determine the number of channels that are available When multiple access points are deployed in the same area be sure to choose a channel separated by at least five channels for 802...

Page 235: ...b g b b only mode Both 802 11b and 802 11g clients can communicate with the access point but 802 11g clients can only transfer data at 802 11b standard rates up to 11 Mbps g g only mode Only 802 11g c...

Page 236: ...support all 802 11b and 802 11g clients Example antenna control This command selects the use of two diversity antennas or a single antenna for the radio interface Note This access point does not supp...

Page 237: ...a id antenna id Specifies the ID number of an approved antenna that is connected to the access point Range 0x0000 0xFFFF Default Setting 0x0000 built in antennas Command Mode Interface Configuration W...

Page 238: ...the country of operation Example beacon interval This command configures the rate at which beacon signals are transmitted from the access point Syntax beacon interval interval interval The rate for t...

Page 239: ...us frames with broadcast multicast information The default value of 2 indicates that the access point will save all broadcast multicast frames for the Basic Service Set BSS and forward them after ever...

Page 240: ...erhead to send multiple frames Example rts threshold This command sets the packet size threshold at which a Request to Send RTS signal must be sent to the receiving station prior to the sending statio...

Page 241: ...ion Wireless 802 11g Command Usage These enhancements include bursting compression fast frames and dynamic turbo Maximum throughput ranges between 40 to 60 Mbps for connections to Atheros compatible c...

Page 242: ...e as that of the access point Example closed system This command prohibits access to clients without a pre configured SSID Use the no form to disable this feature Syntax closed system no closed system...

Page 243: ...which the client is disassociated from the VAP interface Syntax assoc timeout interval minutes minutes The number of minutes of inactivity before disassociation Range 5 60 Default Setting 30 Command M...

Page 244: ...reless interface Use the no form to restart the interface Syntax shutdown no shutdown Default Setting Interface enabled Command Mode Interface Configuration Wireless VAP Command Usage You must first e...

Page 245: ...UTO Status Disable 802 11 Parameters Transmit Power FULL 13 dBm Max Station Data Rate 54Mbps Multicast Data Rate 5 5Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100...

Page 246: ...int can be configured to periodically scan all radio channels and find other access points within range A database of nearby access points is maintained where any rogue APs can be identified Enterpris...

Page 247: ...is a reason to believe that more intensive scanning is required to find a rogue AP A rogue AP is either an access point that is not authorized to participate in the wireless network or an access point...

Page 248: ...ss point that it finds against a RADIUS server to determine whether the access point is allowed With authentication disabled the access point can identify its neighboring access points only it cannot...

Page 249: ...nterval 6 111 rogue ap interval This command sets the interval at which to scan for access points Syntax rogue ap interval minutes minutes The interval between consecutive scans Range 30 10080 minutes...

Page 250: ...nd a rogue AP Example show rogue ap This command displays the current rogue AP database Command Mode Exec Example Enterprise AP if wireless g rogue ap scan Enterprise AP if wireless g rogueApDetect Co...

Page 251: ...Clients using WPA with a Pre shared Key are accepted for authentication wpa2 Clients using WPA2 are accepted for authentication Table 6 19 Wireless Security Commands Command Function Mode Page auth De...

Page 252: ...ork If a WPA WPA2 mode that operates over 802 1X is selected WPA WPA2 WPA WPA2 mixed or WPA WPA2 PSK mixed the 802 1X settings see 802 1X Authentication on page 6 64 and RADIUS server details see RADI...

Page 253: ...116 encryption This command enables data encryption for wireless communications Use the no form to disable data encryption Syntax encryption no encryption Default Setting disabled Command Mode Interf...

Page 254: ...ireless Command Usage To enable Wired Equivalent Privacy WEP use the auth shared key command to select the shared key authentication type use the encryption command to enable data encryption use the k...

Page 255: ...roadcast data signals that it sends to client devices Other keys can be used for decryption of data from clients When using IEEE 802 1X the access point uses a dynamic key to encrypt unicast and broad...

Page 256: ...ny clients supported by the access point are not WPA enabled the multicast cipher algorithm must be set to WEP WEP is the first generation security protocol used to encrypt data crossing the wireless...

Page 257: ...C Syntax mic_mode hardware software hardware Uses hardware to calculate the MIC software Uses software to calculate the MIC Default Setting software Command Mode Interface Configuration Wireless Comma...

Page 258: ...command to specify the authentication type and use the wpa preshared key command to specify one static key If WPA or WPA2 is used with pre shared key mode all wireless clients must be configured with...

Page 259: ...command enables WPA2 pre authentication for fast secure roaming Syntax pre authentication enable disable enable Enables pre authentication for the VAP interface disable Disables pre authentication for...

Page 260: ...nterfaces forcing clients to find and associate with another access point When the connection to the host is restored the access point re enables the radio interfaces Enterprise AP if wireless g VAP 0...

Page 261: ...the number of failed responses either the host does not respond or is unreachable exceeds the limit set by the link integrity ping fail retry command the link is determined as lost Example link integ...

Page 262: ...s before the link is determined as lost Syntax link integrity ping fail retry counts counts The number of failed Ping counts before the link is determined as lost Range 1 10 Default Setting 6 Command...

Page 263: ...guration Command Mode Exec Example Enterprise AP config link integrity ethernet detect Notification Ethernet Link Detect SUCCESS RADIO S ENABLED Enterprise AP config Enterprise AP show link integrity...

Page 264: ...oaming between different 802 11f compliant access points Use the no form to disable 802 11f signaling Syntax no iapp Default Enabled Command Mode Global Configuration Command Usage The current 802 11...

Page 265: ...does not include a VLAN tag To maintain network connectivity to the access point and wireless clients be sure that the access point is connected to a device port on a wired network that supports IEEE...

Page 266: ...vlan id vlan id Management VLAN ID Range 1 4094 Default Setting 1 Command Mode Global Configuration Command Usage The management VLAN is for managing the access point For example the access point allo...

Page 267: ...WMM Commands The access point implements QoS using the Wi Fi Multimedia WMM standard Using WMM the access point is able to prioritize traffic and optimize performance when multiple applications compet...

Page 268: ...owledge policy This command allows the acknowledgement wait time to be enabled or disabled for each Access Category AC Syntax wmm acknowledge policy ac_number ack noack ac_number Access categories Ran...

Page 269: ...contention window This is the initial upper limit of the random backoff wait time before wireless medium access can be attempted The initial wait time is a random value between zero and the LogCwMin...

Page 270: ...MM Parameters AC0 Best Effort AC1 Background AC2 Video AC3 Voice LogCwMin 4 4 3 2 LogCwMax 10 10 4 3 AIFS 3 7 2 2 TXOP Limit 0 0 94 47 Admission Control Disabled Disabled Disabled Disabled BSS Paramet...

Page 271: ...ice Set ESS are configured to the same SSID and authentication method 2 If the access point cannot be configured using the Telnet a web browser or SNMP software Be sure to have configured the access p...

Page 272: ...y pressing the reset button on the back panel for 5 seconds or more Then use the default user name admin and default password smcadmin to access the management interface 5 If all other recovery measur...

Page 273: ...The following figure illustrates how the pins on the RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins 10 100BASE TX Pin Assignm...

Page 274: ...Table B 1 10 100BASE TX MDI Port Pinouts Pin MDI Signal Name 1 Transmit Data plus TD 2 Transmit Data minus TD 3 Receive Data plus RD 4 GND Positive Vport 5 GND Positive Vport 6 Receive Data minus RD...

Page 275: ...Assignments The DB 9 console port on the front panel of the access point is used to connect to the access point for out of band console configuration The command line configuration program can be acc...

Page 276: ...ed 5 GND ground 5 GND ground 6 Unused 9 Unused 7 RTS request to send 8 CTS clear to send 8 CTS clear or send 7 RTS request to send 9 Unused 6 Unused Note The left hand column pin assignments are for t...

Page 277: ...2 5 5 11 Mbps per channel Modulation Type 802 11g CCK BPSK QPSK OFDM 802 11b CCK BPSK QPSK Network Configuration Infrastructure Operating Frequency 802 11b 2 4 2 4835 GHz US Canada ETSI 2 4 2 497 GHz...

Page 278: ...nk Ethernet Link Activity 11g Wireless Link Activity Network Management Web browser RS232 console Telnet SSH SNMP Temperature Operating 0 to 50 C 32 to 122 F Storage 0 to 70 C 32 to 158 F Humidity 15...

Page 279: ...85 24 Mbps 81 36 Mbps 77 48 Mbps 72 54 Mbps 70 IEEE 802 11b Data Rate Sensitivity dBm 1 Mbps 93 2 Mbps 90 5 5 Mbps 90 11 Mbps 87 IEEE 802 11g Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467...

Page 280: ...108 Mbps N A 22 N A IEEE 802 11b Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467 2 472 1 Mbps 19 20 22 2 Mbps 19 20 22 5 5 Mbps 19 20 22 11 Mbps 19 20 22 IEEE 802 11g Maximum Output Power GHz...

Page 281: ...ructions between the access point and clients Table C 1 802 11g Wireless Distance Table Speed and Distance Ranges Environment 54 Mbps 48 Mbps 36 Mbps 24 Mbps 18 Mbps 12 Mbps 11 Mbps 9 Mbps 6 Mbps 5 Mb...

Page 282: ...Specifications C 6 C...

Page 283: ...tion algorithm that implements symmetric key cryptography AES provides very strong encryption using a completely different ciphering algorithm to TKIP and WEP Authentication The process to verify the...

Page 284: ...ervice Set ESS More than one wireless cell can be configured with the same Service Set Identifier to allow mobile users can roam between different cells with the Extended Service Set Extensible Authen...

Page 285: ...he physical layer address used to uniquely identify network nodes Network Time Protocol NTP NTP provides the mechanisms to synchronize time across the network The time servers operate in a hierarchica...

Page 286: ...icate a client connection and correlate traffic passing between a specific client and the access point Shared Key A shared key can be used to authenticate each client attached to a wireless network Sh...

Page 287: ...sical location or connection point in the network A VLAN serves as a logical workgroup with no physical barriers and allows users to share information and resources as though located on the same LAN W...

Page 288: ...Glossary 6 Glossary...

Page 289: ...nfiguring 6 40 community string 5 39 6 40 configuration settings saving or restoring 5 31 6 55 configuration initial setup 4 1 console port 1 4 connecting 2 2 pin assignments B 3 required settings 4 1...

Page 290: ...ring 5 82 6 64 infrastructure wireless bridge 3 5 wireless repeater 3 6 initial setup 4 1 installation hardware 2 1 mounting 2 1 IP address BOOTP DHCP 6 88 6 89 configuring 4 2 5 5 6 88 6 89 L LED ind...

Page 291: ...on 5 39 6 42 trap manager 5 39 6 42 SNTP 5 35 6 33 enabling client 5 35 6 33 server 5 35 6 33 software displaying version 5 29 5 85 6 23 downloading 5 31 6 55 specifications C 1 SSH server Status 5 11...

Page 292: ...ex 4 W WEP 5 71 configuring 5 71 shared key 5 72 6 116 Wi Fi Multimedia See WMM Wi Fi Protected Access See WPA Wired Equivalent Protection See WEP WPA 5 77 pre shared key 5 80 6 120 WPA pre shared key...

Page 293: ......

Page 294: ...EUTSCH Technischer Support und weitere Information unter www smc com SPANISH En www smc com Ud podr encontrar la informaci n relativa a servicios de soporte t cnico DUTCH Technische ondersteuningsinfo...

Reviews:

No comments

Brands by name

Popular brands

Load more brands