SMC Networks 2555W-AG User Manual Download Page 187 | Manualshive

Page: 187 / 260

background image

802.1x Port Authentication

6-59

show authentication

This command shows all 802.1x authentication settings, as well
as the address filter table.

Command Mode

Exec

Example

SMC-AP#show authentication

Authentication Information
=========================================================
MAC Authentication Server : REMOTE
MAC Auth Session Timeout Value : 1 secs
802.1x : SUPPORTED
Broadcast Key Refresh Rate : 5 min
Session Key Refresh Rate : 5 min
802.1x Session Timeout Value : 300 secs
Address Filtering : DENIED

System Default : DENY addresses not found in filter table.
Filter Table

MAC Address Status
----------------- ----------
00-70-50-cc-99-1a DENIED
00-70-50-cc-99-1b ALLOWED
=========================================================
SMC-AP(config)#

«
...
185
186
187
188
189
...
»

Summary of Contents for 2555W-AG

Page 1: ...SMC2555W AG...

Page 2: ......

Page 3: ...38 Tesla Irvine CA 92618 Phone 949 679 8000 EliteConnect Universal 2 4GHz 5GHz Wireless Access Point User Guide The easy way to make all your network connections April 2004 Revision Number R02 F3 0 02...

Page 4: ...ts use No license is granted by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Copyright 2004 by SMC Netwo...

Page 5: ...discretion replace an older product in its product line with one that incorporates these newer technologies At that point the obsolete product is discontinued and is no longer an Active SMC product A...

Page 6: ...REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE...

Page 7: ...ich the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance...

Page 8: ...ital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled Digital Apparatus ICES 003 of Indu...

Page 9: ...s as described below Note The user must use the configuration utility provided with this product to ensure the channels of operation are in conformance with the spectrum usage rules for European Commu...

Page 10: ...complies with European requirements The current setting for this feature is found in the 5 GHz 802 11a Radio Settings Window as described in the user guide This device is restricted to indoor use whe...

Page 11: ...ormity in Languages of the European Allowed 5GHz Channels in Each European Community Country Allowed Frequency Bands Allowed Channel Numbers Countries 5 15 5 25 GHz 36 40 44 48 Austria Belgium 5 15 5...

Page 12: ...res dispositions pertinentes de la directive 1999 5 CE Swedish H rmed intygar SMC Networks att denna Radio LAN device st r I verensst mmelse med de v sentliga egenskapskrav och vriga relevanta best mm...

Page 13: ...y disconnecting the power cord from the outlet This unit operates under SELV Safety Extra Low Voltage conditions according to IEC 60950 The conditions are only maintained if the equipment to which it...

Page 14: ...ast 10 A The attachment plug must be an earth grounding type with NEMA 5 15P 15 A 125 V or NEMA 6 15P 15 A 250 V configuration Denmark The supply plug must comply with Section 107 2 D1 Standard DK2 1a...

Page 15: ...es conditions ne sont maintenues que si l quipement auquel il est raccord fonctionne dans les m mes conditions France et P rou uniquement Ce groupe ne peut pas tre aliment par un dispositif imp dance...

Page 16: ...u einen gem EN 60320 IEC 320 konfigurierten Ger teeingang haben Die Netzsteckdose mu in der N he des Ger ts und leicht zug nglich sein Die Stromversorgung des Ger ts kann nur durch Herausziehen des Ge...

Page 17: ...G Der typ SV oder SJ 3 Leiter Der Cord mu haben eine strombelastbarkeit aus wenigstens 10 A Dieser Stromstecker mu hat einer erdschluss mit der typ NEMA 5 15P 15A 125V oder NEMA 6 15P 15A 250V konfigu...

Page 18: ...COMPLIANCES xiv...

Page 19: ...cture Wireless LAN 3 3 Infrastructure Wireless LAN for Roaming Wireless PCs 3 4 4 Initial Configuration 4 1 Initial Setup through the CLI 4 1 Required Connections 4 1 Initial Configuration Steps 4 3 U...

Page 20: ...ords and Arguments 6 3 Minimum Abbreviation 6 4 Command Completion 6 4 Getting Help on Commands 6 4 Partial Keyword Lookup 6 5 Negating the Effect of Commands 6 6 Using Command History 6 6 Understandi...

Page 21: ...timezone 6 32 show sntp 6 32 show system 6 33 show version 6 34 SNMP Commands 6 35 snmp server community 6 35 snmp server contact 6 36 snmp server enable server 6 37 snmp server host 6 38 snmp server...

Page 22: ...filter local bridge 6 60 filter ap manage 6 61 filter ethernet type enable 6 62 filter ethernet type protocol 6 63 show filters 6 64 Interface Commands 6 64 interface 6 68 dns server 6 68 ip address 6...

Page 23: ...native vlanid 6 101 A Troubleshooting A 1 Maximum Distance Table A 4 B Cables and Pinouts B 1 Twisted Pair Cable Assignments B 1 10 100BASE TX Pin Assignments B 2 Straight Through Wiring B 3 Crossove...

Page 24: ...TABLE OF CONTENTS xx...

Page 25: ...net LAN In addition the access point offers full network management capabilities through an easy to configure web interface a command line interface for initial configuration and troubleshooting and s...

Page 26: ...s Point SMC2555W AG One Category 5 network cable One RS 232 console cable One 5 1 VDC power adapter and power cord Four rubber feet One mounting bracket Three mounting screws One Documentation CD This...

Page 27: ...Hardware Description 1 3 Hardware Description Front Panel Rear Panel Antennas Indicator Panel Security Slot Console Port RJ 45 Port PoE Connector Reset Button 5 VDC Power Socket...

Page 28: ...page 2 3 Note You can install an optional SMC 2 4 GHz high gain antenna for 802 11b and or 802 11g clients in the socket on the right antenna Also remember to order the jumper cable SMC2555W JMPRCBL t...

Page 29: ...is proportional to your network activity 11a On Indicates a valid 802 11a wireless link Very Slow Flashing Searching for network association Slow Flashing Associated with network but no activity Fast...

Page 30: ...or router that provide MDI X ports However when connecting the access point to a workstation or other device that does not have MDI X ports you must use crossover twisted pair cable The access point a...

Page 31: ...the IEEE 802 3af standard Note that if the access point is connected to a PoE source device and also connected to a local power source through the AC power adapter PoE will be disabled Features and Be...

Page 32: ...tallations and open areas where wiring is difficult to employ Frequently changing environments Retailers manufacturers and banks that frequently rearrange the workplace or change location Temporary LA...

Page 33: ...eature Parameter Default Identification System Name Enterprise AP Administration User Name admin Password smcadmin General HTTP Server Enabled HTTP Server Port 80 TCP IP DHCP Enabled IP Address 192 16...

Page 34: ...Session Key Refresh 0 minutes disabled Reauthentication Refresh Rate 0 seconds disabled VLAN Native VLAN ID 1 VLAN Tag Support Disabled Filter Control Local Bridge Disabled Local Management Disabled...

Page 35: ...tem Logging Syslog Disabled Logging Host Disabled Logging Console Disabled IP Address Host Name 0 0 0 0 Logging Level Informational Logging Facility Type 16 Ethernet Interface Speed and Duplex Auto Fe...

Page 36: ...imum Data Rate 54 Mbps Beacon Interval 100 TUs Data Beacon Rate DTIM Interval 2 beacons RTS Threshold 2347 bytes Wireless Security 802 11a Authentication Type Open System WEP Encryption Disabled WEP K...

Page 37: ...it Power Full Maximum Data Rate 54 Mbps Beacon Interval 100 TUs Data Beacon Rate DTIM Interval 2 beacons RTS Threshold 2347 bytes Wireless Security 802 11b g Authentication Type Open System WEP Encryp...

Page 38: ...Introduction 1 14...

Page 39: ...ing on the surface attach the four rubber feet provided in the accessory kit to the embossed circles on the bottom of the access point Mounting on a wall The access point should be mounted only to a w...

Page 40: ...4 Lock the Access Point in Place To prevent unauthorized removal of the access point you can use a Kensington Slim MicroSaver security cable not included to attach the access point to a fixed object...

Page 41: ...gh a network device such as a hub or a switch Connect your network to the RJ 45 port on the back panel with category 3 4 or 5 UTP Ethernet cable When the access point and the connected device are powe...

Page 42: ...ing the stronger signal to communicate with a wireless client 9 Connect the Console Port Connect the console cable included to the RS 232 console port for accessing the command line interface You can...

Page 43: ...11b and 802 11g frequency band which operates at 2 4 GHz can easily encounter interference from other 2 4 GHz devices such as other 802 11b or g wireless devices cordless phones and microwave ovens I...

Page 44: ...of computers each equipped with a wireless adapter connected via radio signals as an independent wireless LAN Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio...

Page 45: ...access other computers or network resources in the wired LAN infrastructure via the access point The infrastructure configuration not only extends the accessibility of wireless PCs to the wired LAN bu...

Page 46: ...rames sent between the access point and its clients to identify traffic in the service area The BSS ID is only set by the access point never by its clients The clients only need to set the Service Set...

Page 47: ...tinuous coverage area is created wireless users within this ESS can roam freely All SMC wireless network card adapters and SMC2555W AG wireless access points within a specific ESS must be configured w...

Page 48: ...Network Configuration 3 6...

Page 49: ...address is not compatible with your network you can first use the command line interface CLI as described below to configure a valid address Note Units sold in countries outside the United States are...

Page 50: ...to none Set the emulation mode to VT100 When using HyperTerminal select Terminal keys not Windows keys Note When using HyperTerminal with Microsoft Windows 2000 make sure that you have Windows 2000 Se...

Page 51: ...isable DHCP client mode Then type ip address ip address netmask gateway where ip address is the access point s IP address netmask is the network mask for the network and gateway is the default gateway...

Page 52: ...pe exit to leave configuration mode Then type country to display the list of countries Select the code for your country and enter the country command again following by your country code e g IE for Ir...

Page 53: ...ed Management Setup Wizard 4 5 Logging In Enter the username admin the password smcadmin and click LOGIN For information on configuring a user name and password refer to page 5 27 The home page displa...

Page 54: ...zard on the home page then click on the Next button to start the process 1 Service Set ID Enter the service set identifier in the SSID box which all wireless clients must use to associate with the acc...

Page 55: ...1a Turbo Mode If you select Enable the access point will operate in turbo mode with a data rate of up to 108 Mbps Normal mode support 13 channels Turbo mode supports only 5 channels Default Disable 80...

Page 56: ...nfiguration Protocol DHCP for automatic IP configuration If you disable DHCP then manually enter the IP address and subnet mask If a management station exists on another network segment then you must...

Page 57: ...he access point by the network DHCP server Default Enable Note If there is no DHCP server on your network then the access point will automatically start up with its default IP address 192 168 2 2 4 Cl...

Page 58: ...Initial Configuration 4 10...

Page 59: ...in Chapter 4 to set up an IP address for the SMC2555W AG The SMC2555W AG can be managed by any computer using a web browser Enter the default IP address http 192 168 2 2 To log into the SMC2555W AG en...

Page 60: ...ers 5 6 Radius Configures the RADIUS server for wireless client authentication 5 10 Authentication Configures 802 1x client authentication with an option for MAC address authentication 5 14 Filter Con...

Page 61: ...s WPA 5 50 WPA Configures advanced encryption and authentication with Wi Fi Protected Access WPA 5 57 Radio Interface 2 Configures the IEEE 802 11b g interface 5 40 Radio Settings Configures radio sig...

Page 62: ...network service provided by the SMC2555W AG Only clients with the same SSID can associate with the access point System Name An alias for the access point enabling the device to be uniquely identified...

Page 63: ...config system name R D 6 20 SMC AP config interface wireless a 6 68 SMC AP if wireless a ssid r d 6 79 SMC AP if wireless a end 6 12 SMC AP show system 6 33 System Information Serial Number A324003220...

Page 64: ...work By default the SMC2555W AG will be automatically configured with IP settings from a Dynamic Host Configuration Protocol DHCP server However if you are not using a DHCP server to configure IP addr...

Page 65: ...server Default Enable DHCP Client Disable Select this option to manually configure a static address for the access point IP Address The IP address of the access point Valid IP addresses consist of fou...

Page 66: ...dress as all zeros 0 0 0 0 Primary and Secondary DNS Address The IP address of Domain Name Servers on the network A DNS maps numerical IP addresses to domain names and can be used to identify network...

Page 67: ...rface ethernet command from the Exec mode to display the current IP settings SMC AP config interface ethernet 6 68 Enter Ethernet configuration commands one per line SMC AP if ethernet no ip dhcp 6 71...

Page 68: ...be specified for the SMC2555W AG to implement IEEE 802 1x network access control and Wi Fi Protected Access WPA wireless security A secondary RADIUS server may also be specified as a backup should the...

Page 69: ...ault 1812 Key A shared text string used to encrypt messages between the access point and the RADIUS server Be sure that the same text string is specified on the RADIUS server Do not use blank spaces i...

Page 70: ...s Server Setup Configure a secondary RADIUS server to provide a backup in case the primary server fails The access point uses the secondary server if the primary server fails or becomes inaccessible O...

Page 71: ...s command from the Exec mode to display the current settings for the primary and secondary RADIUS servers SMC AP config radius server address 192 168 1 25 6 46 SMC AP config radius server port 181 6 4...

Page 72: ...check other user credentials such as a user name and password MAC Authentication You can configure a list of the MAC addresses for wireless clients that are authorized to access the network This prov...

Page 73: ...igured to allow or deny network access to specific clients System Default Specifies a default action for all unknown MAC addresses that is those not listed in the local MAC database Deny Blocks access...

Page 74: ...unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point You can also enable broadcast key rotation so the access point provides a dy...

Page 75: ...freshes unicast session keys for associated clients Range 0 1440 minutes Default 0 means disabled 802 1x Re authentication Refresh Rate The time period after which a connected client must be re authen...

Page 76: ...ig address filter default denied 6 54 SMC AP config address filter entry 00 70 50 cc 99 1a denied 6 55 SMC AP config address filter entry 00 70 50 cc 99 1b allowed SMC AP config address filter entry 0...

Page 77: ...ation session timeout 300 6 58 SMC AP config exit SMC AP show authentication 6 59 Authentication Information MAC Authentication Server REMOTE MAC Auth Session Timeout Value 300 secs 802 1x DISABLED Br...

Page 78: ...802 1x broadcast key refresh rate 5 6 52 SMC AP config 802 1x session key refresh rate 5 6 53 SMC AP config 802 1x session timeout 300 6 54 SMC AP config exit SMC AP show authentication 6 59 Authenti...

Page 79: ...guration VLAN Enables or disables VLAN tagging support on the SMC2555W AG If enabled the access point will tag traffic passing from wireless clients to the wired network with the VLAN ID associated wi...

Page 80: ...ess point assigns the user to its own configured native VLAN ID When setting up VLAN IDs for each user on the RADIUS server be sure to use the RADIUS attributes and values as indicated in the followin...

Page 81: ...tween clients through the access point Enable Blocks wireless to wireless communications between clients through the access point AP Management Filter Controls management access to the SMC2555W AG fro...

Page 82: ...mand SMC AP config native vlanid 3 6 101 SMC AP config vlan enable 6 100 Reboot system now y n y SMC AP show system 6 33 System Information Serial Number A324003220 System Up time 0 days 0 hours 32 mi...

Page 83: ...r ethernet type protocol command to define the protocols that you want to filter To remove an entry from the table use the address filter delete command To display the current settings use the show fi...

Page 84: ...manually or dynamically Once an IP address has been configured appropriate SNMP communities and trap receivers should be configured Community names are used to control management access to SNMP stati...

Page 85: ...as read only access Authorized management stations are only able to retrieve MIB objects Maximum length 23 characters case sensitive Community Name Read Write Defines the SNMP community access string...

Page 86: ...t command defines a trap receiver host To view the current SNMP settings use the show snmp command SMC AP config snmp server enable server 6 37 SMC AP config snmp server community alpha rw 6 35 SMC AP...

Page 87: ...nd password are not configured then anyone having access to the access point may be able to compromise access point and network security Note Pressing the Reset button on the back of the SMC2555W AG f...

Page 88: ...onfiguration 5 30 CLI Commands for the User Name and Password Use the username and password commands from the CLI configuration mode SMC AP config username bob 6 21 SMC AP config password smcadmin 6 2...

Page 89: ...G to implement the new code Until a reboot occurs the SMC2555W AG will continue to run the software it was using before the upgrade started After rebooting the access point with new software we advise...

Page 90: ...oint from a wireless client the VLAN ID for the wireless client must be configured on a RADIUS server Current version Version number of runtime code Firmware Upgrade Local Downloads an operation code...

Page 91: ...e of FTP or TFTP server Username The user ID used for login on an FTP server Password The password used for login on an FTP server Restore Factory Settings Click the Restore button to reset the config...

Page 92: ...present in the access point file system To run the new software use the reset board command to reboot the access point SMC AP copy tftp file 6 42 1 Application image 2 Config file 3 Boot block image S...

Page 93: ...with the correct time and date Enabling System Logging The SMC2555W AG supports a logging process that can control error messages saved to memory or sent to a Syslog server The logged messages serve...

Page 94: ...sages saved in the access point s memory are erased when the device is rebooted CLI Commands for System Logging To enable logging on the access point use the logging on command from the global configu...

Page 95: ...default set at the last bootup The SMC2555W AG acts as an SNTP client periodically sending time synchronization requests to specific time servers You can configure up to two time server IP addresses T...

Page 96: ...based on the time at the Earth s prime meridian zero degrees longitude To display a time corresponding to your local time you must indicate the number of hours your time zone is located before east or...

Page 97: ...light saving 6 31 Enter Daylight saving from which month 1 12 3 and which day 1 31 31 Enter Daylight saving end to which month 1 12 10 and which day 1 31 31 SMC AP config exit SMC AP show sntp 6 32 SN...

Page 98: ...l The access point can operate in several different radio modes IEEE 802 11a only 802 11b only 802 11g only 802 11b g only or a mixed 802 11a b g mode Also note that 802 11g is backward compatible wit...

Page 99: ...de provides connections up to 54 Mbps Turbo Mode is an enhanced mode not regulated in IEEE 802 11a that provides a higher data rate of up to 108 Mbps Enabling Turbo Mode allows the SMC2555W AG to prov...

Page 100: ...l 60 for normal mode and channel 42 for Turbo mode Auto Channel Select Enables the access point to automatically select an unoccupied radio channel Default Enabled SSID Broadcast The SSID broadcast ca...

Page 101: ...which is necessary to wake up stations that are using Power Save mode The default value of 2 indicates that the access point will save all broadcast multicast frames for the Basic Service Set BSS and...

Page 102: ...nfigure a name for the interface using the description command Use the turbo command to enable this feature before setting the radio channel with the channel command Set any other parameters as requir...

Page 103: ...1 Parameters Transmit Power FULL 17 dBm Max Station Data Rate 9Mbps Fragmentation Threshold 512 bytes RTS Threshold 256 bytes Beacon Interval 150 TUs DTIM Interval 5 beacons Maximum Association 32 sta...

Page 104: ...Enable Enables radio communications on the SMC2555W AG Default Enabled Radio Channel The radio channel that the access point uses to communicate with wireless clients When multiple access points are d...

Page 105: ...be automatically selected based on best signal reception i e Diversity mode or will be fixed to use an optional high gain antenna attached to the right side of the access point Use the SMC2555W JMPRCB...

Page 106: ...g radio settings use the show interface wireless g command SMC AP config interface wireless g 6 68 Enter Wireless configuration commands one per line SMC AP if wireless g description RD AP 3 6 75 SMC...

Page 107: ...Transmit Power FULL 14 dBm Max Station Data Rate 6Mbps Fragmentation Threshold 512 bytes RTS Threshold 256 bytes Beacon Interval 150 TUs DTIM Interval 5 beacons Maximum Association 32 stations Securit...

Page 108: ...ecurity you have to implement two main functions Authentication It must be verified that clients attempting to connect to the network are authorized users Traffic Encryption Data passing between the a...

Page 109: ...P Provides dynamic key rotation for improved WEP security Requires configured RADIUS server 802 1x EAP type may require management of digital certificates for clients and server MACAddress Filtering U...

Page 110: ...imal or alphanumeric strings that are manually distributed to all clients that want to use the network WEP is the security protocol initially specified in the IEEE 802 11 standard for wireless communi...

Page 111: ...other security mechanism on the access point the network has no protection and is open to all users This is the default setting Shared Key Sets the access point to use WEP shared keys If this option i...

Page 112: ...four keys configured to the same values you can change the encryption key to any of the four settings without having to update the client keys Note Key index and type must match that configured on th...

Page 113: ...P if wireless g authentication shared 6 83 SMC AP if wireless g encryption 128 6 84 SMC AP if wireless g multicast cipher wep 6 89 SMC AP if wireless g key 1 128 ascii abcdeabcdeabc 6 85 SMC AP if wir...

Page 114: ...current 802 11g security settings use the show interface wireless g command not shown in example Security Closed System DISABLED Multicast cipher WEP WPA clients SUPPORTED WPA Key Mgmt Mode PRE SHARE...

Page 115: ...r user authentication and dynamic key management The 802 1x client and RADIUS server should use an appropriate EAP type such as EAP TLS Transport Layer Security EAP TTLS Tunneled TLS or PEAP Protected...

Page 116: ...a RADIUS authentication server to be configured on the wired network However for small office networks that may not have the resources to configure and maintain a RADIUS server WPA provides a simple o...

Page 117: ...specified AES as an eventual replacement for TKIP and WEP However because of the difference in ciphering algorithms AES requires new hardware support in client network cards that is currently not wide...

Page 118: ...s supported by all wireless clients WEP WEP is the first generation security protocol used to encrypt data crossing the wireless medium using a fairly short key Communicating devices must use the same...

Page 119: ...hexadecimal or alphanumeric key and then use the wpa preshared key command to define the key Then disable 802 1x and MAC WPA pre shared key only WPA over 802 1x Authentication Type Open System WEP en...

Page 120: ...show interface wireless g command not shown in example SMC AP config interface wireless g 6 68 Enter Wireless configuration commands one per line SMC AP if wireless g authentication open 6 83 SMC AP...

Page 121: ...ays basic system configuration settings as well as the settings for the wireless interface Menu Description Page AP Status Displays configuration settings for the basic system and the wireless interfa...

Page 122: ...rver Shows if management access via HTTP is enabled HTTP Server Port Shows the TCP port used by the HTTP interface Firmware Version Shows the version number for the runtime code AP Wireless Configurat...

Page 123: ...show system 6 33 System Information Serial Number A324003220 System Up time 0 days 4 hours 39 minutes 46 seconds System Name Enterprise AP System Location System Contact Contact System Country Code U...

Page 124: ...e MAC address of the wireless client Authenticated Shows if the station has been authenticated The two basic methods of authentication supported for 802 11 wireless networks are open system and shared...

Page 125: ...arded to the appropriate access point Forwarding Allowed Shows if the station has passed 802 1x authentication and is now allowed to forward traffic to the access point Key Type Displays the current k...

Page 126: ...l The logging level associated with this message For a description of the various levels see logging level on page 5 35 Event Message The content of the log message Error Messages An example of a logg...

Page 127: ...the same the frame will be decrypted incorrectly using the wrong algorithm and sequence number CLI Commands for Displaying the Event Logs From the global configuration mode use the show logging comman...

Page 128: ...System Configuration 5 70...

Page 129: ...ing the access point s command line interface CLI is very similar to entering commands on a UNIX system Console Connection To access the access point through the console port perform these steps 1 At...

Page 130: ...parated by periods Each address consists of a network portion and host portion For example if the access point cannot acquire an IP address from a DHCP server the default IP address used by the access...

Page 131: ...commands to complete your desired tasks 4 When finished exit the session with the quit or exit command After entering the Telnet command the login screen displays Note You can open up to four sessions...

Page 132: ...ill prompt for further input Command Completion If you terminate input with a Tab key the CLI will print the remaining characters of a partial keyword up to the point of ambiguity In the configure exa...

Page 133: ...words starting with s SMC AP show authentication Show Authentication parameters bootfile Show bootfile name filters Show filters hardware Show hardware version history Display the session history inte...

Page 134: ...ist can be executed again or first modified and then executed Using the show history command displays a longer list of recently executed commands Understanding Command Modes The command set is divided...

Page 135: ...commands are used to modify access point settings These commands modify the running configuration and are saved in memory The configuration commands are organized into three different modes Global Con...

Page 136: ...case sensitive You can abbreviate commands and parameters as long as they contain enough letters to differentiate them from any other currently available commands or parameters You can use the Tab key...

Page 137: ...current command line on a new line Ctrl U Deletes the entire line Ctrl W Deletes the last word typed Esc B Moves the cursor backward one word Esc D Deletes from the cursor to the end of the word Esc...

Page 138: ...a variety of other system information 6 16 SNMP Configures community access strings and trap managers 6 35 Flash File Manages code image or access point configuration files 6 40 RADIUS Configures the...

Page 139: ...t Setting None Command Mode Exec Example Related Commands end page 6 12 Command Function Mode Page configure Activates global configuration mode Exec 6 11 end Returns to Exec mode GC IC 6 12 exit Retu...

Page 140: ...ration mode from the Interface Configuration mode exit This command returns to the Exec mode or exits the configuration program Default Setting None Command Mode Any Example This example shows how to...

Page 141: ...eached The following are some results of the ping command Normal response The normal response occurs in one to ten seconds depending on network traffic Destination does not respond If the host does no...

Page 142: ...ation settings to the factory defaults and then reboots the system Default Setting None Command Mode Exec Command Usage When the system is restarted it will always run the Power On Self Test Example T...

Page 143: ...ple the show history command lists the contents of the command history buffer show line This command displays the console port s configuration settings Command Mode Exec Example The console port setti...

Page 144: ...6 20 snmp server contact Sets the system contact string GC 6 36 snmp server location Sets the system location string GC 6 39 User Access Configures the user name and password for management access use...

Page 145: ...ore time servers GC 6 28 sntp server enable Accepts time from the specified time servers GC 6 29 sntp server date time Manually sets the system date and time GC 6 30 sntp server daylight saving Sets t...

Page 146: ...LB Saudi Arabia SA Argentina AR Estonia EE Liechtenstein LI Singapore SG Armenia AM Finland FI Lithuania LT Slovak Republic SK Australia AU France FR Luxembourg LU Slovenia SI Austria AT Georgia GE Ma...

Page 147: ...t US this command is not available The available Country Code settings can be displayed by using the country command Example Chile CL Ireland IE Pakistan PK United Kingdom GB China CN Israel IL Panama...

Page 148: ...Maximum length 255 characters Default Setting SMC Enterprise AP Command Mode Global Configuration Example system name This command specifies or modifies the system name for this device Use the no form...

Page 149: ...mmand configures the user name for management access Syntax username name name The name of the user Length 3 16 characters case sensitive Default Setting admin Command Mode Global Configuration Exampl...

Page 150: ...for management access Length 3 16 characters case sensitive Default Setting smcadmin Command Mode Global Configuration Example ip http port This command specifies the TCP port number used by the web...

Page 151: ...d allows this device to be monitored or configured from a browser Use the no form to disable this function Syntax ip http server no ip http server Default Setting Enabled Command Mode Global Configura...

Page 152: ...ontrols error messages saved to memory You can use the logging level command to control the type of error messages that are stored in memory Example logging host This command specifies a syslog server...

Page 153: ...s command initiates logging of error messages to the console Use the no form to disable logging to the console Syntax logging console no logging console Default Setting Disabled Command Mode Global Co...

Page 154: ...Level Argument Description Alert Immediate action needed Critical Critical conditions e g memory allocation or free memory error resource exhausted Error Error conditions e g invalid input default use...

Page 155: ...Default Setting 16 Command Mode Global Configuration Command Usage The command specifies the facility type tag sent in syslog messages See RFC 3164 This type has no effect on the kind of messages rep...

Page 156: ...the current list Syntax sntp server ip 1 2 ip 1 First time server 2 Second time server ip IP address of an time server NTP or SNTP Default Setting 137 92 140 80 192 43 244 18 Command Mode Global Confi...

Page 157: ...server enable This command enables SNTP client requests for time synchronization with NTP or SNTP time servers specified by the sntp server ip command Use the no form to disable SNTP client requests S...

Page 158: ...t Setting 00 14 00 January 1 1970 Command Mode Global Configuration Example This example sets the system clock to 17 37 June 19 2004 Related Commands sntp server enable page 6 29 SMC AP config sntp se...

Page 159: ...ht saving Default Setting Disabled Command Mode Global Configuration Command Usage The command sets the system clock back one hour during the specified period Example This sets daylight savings time t...

Page 160: ...d sets the local time zone relative to the Coordinated Universal Time UTC formerly Greenwich Mean Time or GMT based on the earth s prime meridian zero degrees longitude To display a time corresponding...

Page 161: ...iguration settings Default Setting None Command Mode Exec SMC AP show sntp SNTP Information Service State Enabled SNTP server 1 IP 137 92 140 80 SNTP server 2 IP 192 43 244 18 Current Time 08 04 Jun 2...

Page 162: ...ys 1 hours 28 minutes 9 seconds System Name Enterprise AP System Location System Contact Contact System Country Code 99 NO_COUNTRY_SET MAC Address 00 30 F1 71 D6 40 IP Address 192 168 1 1 Subnet Mask...

Page 163: ...p server community string string Community string that acts like a password and permits access to the SNMP protocol Maximum length 23 characters case sensitive Command Function Mode Page snmp server c...

Page 164: ...access Authorized management stations are able to both retrieve and modify MIB objects Command Mode Global Configuration Command Usage If you enter a community string without the ro or rw option the d...

Page 165: ...le SNMP service and trap messages Syntax snmp server enable server no snmp server enable server Default Setting Enabled Command Mode Global Configuration Command Usage This command enables both authen...

Page 166: ...ge 1 20 characters community string Password like community string sent with the notification operation Although you can set this string using the snmp server host command by itself we recommend that...

Page 167: ...location string Syntax snmp server location text no snmp server location text String that describes the system location Maximum length 20 characters Default Setting None Command Mode Global Configurat...

Page 168: ...mation Service State Enable Community ro Community rw Location WC 19 Contact Paul Traps Enabled Host Name IP 10 1 19 23 Trap Community SMC AP Command Function Mode Page bootfile Specifies the file or...

Page 169: ...Default Setting None Command Mode Exec Command Usage The file name should not contain slashes or the leading letter of the file name should not be a period and the maximum length for file names is 32...

Page 170: ...tftp ftp Keyword that allows you to copy to from an FTP server tftp Keyword that allows you to copy to from a TFTP server file Keyword that allows you to copy to from a flash memory file config Keywo...

Page 171: ...to upload the configuration settings to a file on the TFTP server The following example shows how to download a configuration file delete This command deletes a file or image Syntax delete filename fi...

Page 172: ...tion image file booted at startup before you reboot the access point Example This example shows how to delete the test cfg configuration file from flash memory Related Commands bootfile page 6 41 dir...

Page 173: ...ss client that requires access to the access point SMC AP dir File Name Type File Size dflt img bin 2 1044140 syscfg 5 16860 syscfg_bak 5 16860 zz img bin 2 1044140 1048576 byte s available SMC AP Com...

Page 174: ...Host name of server Range 1 20 characters Default Setting None Command Mode Global Configuration Example radius server port This command sets the RADIUS server network port Syntax radius server secon...

Page 175: ...Maximum length 20 characters Default Setting DEFAULT Command Mode Global Configuration Example radius server retransmit This command sets the number of retries Syntax radius server secondary retransmi...

Page 176: ...s to the RADIUS server Syntax radius server secondary timeout number_of_seconds secondary Secondary server number_of_seconds Number of seconds the access point waits for a reply before resending a req...

Page 177: ...ettings for the RADIUS server Default Setting None Command Mode Exec Example SMC AP show radius Radius Server Information IP 192 168 1 25 Port 181 Key Retransmit 5 Timeout 10 Radius Secondary Server I...

Page 178: ...C 6 51 802 1x broadcast key refresh rate Sets the interval at which the primary broadcast keys are refreshed for stations using 802 1x dynamic keying GC 6 52 802 1x session key refresh rate Sets the i...

Page 179: ...02 1x is disabled the access point does not support 802 1x authentication for any station After successful 802 11 association each client is allowed to access the network When 802 1x is supported the...

Page 180: ...stations successfully authenticated with 802 1x are allowed to access the network 802 1x does not apply to the 10 100Base TX port Example 802 1x broadcast key refresh rate This command sets the interv...

Page 181: ...rate This command sets the interval at which unicast session keys are refreshed for associated stations using dynamic keying Syntax 802 1x session key refresh rate rate rate The interval at which the...

Page 182: ...mber of seconds Range 0 65535 Default 0 Disabled Command Mode Global Configuration Example address filter default This command sets filtering to allow or deny listed MAC addresses Syntax address filte...

Page 183: ...dress Physical address of client Enter six pairs of hexadecimal digits separated by hyphens e g 00 90 D1 12 AB 89 allowed Entry is allowed access denied Entry is denied access Default None Command Mod...

Page 184: ...table Syntax address filter delete mac address mac address Physical address of client Enter six pairs of hexadecimal digits separated by hyphens Default None Command Mode Global Configuration Example...

Page 185: ...Authenticate the MAC address of wireless clients with the local authentication database during 802 11 association remote Authenticate the MAC address of wireless clients with a RADIUS server during 8...

Page 186: ...e authenticated with the RADIUS server authentication database Use the no form to disable reauthentication Syntax mac authentication session timeout seconds seconds Re authentication interval Range 0...

Page 187: ...Authentication Information MAC Authentication Server REMOTE MAC Auth Session Timeout Value 1 secs 802 1x SUPPORTED Broadcast Key Refresh Rate 5 min Session Key Refresh Rate 5 min 802 1x Session Timeou...

Page 188: ...iltering Syntax filter local bridge no filter local bridge Default Disabled Command Mode Global Configuration Command Function Mode Page filter local bridge Disables communication between wireless cli...

Page 189: ...s clients and the wired network Example filter ap manage This command prevents wireless clients from accessing the management interface on the access point Use the no form to disable this filtering Sy...

Page 190: ...s feature Syntax filter ethernet type enable no filter ethernet type enable Default Disabled Command Mode Global Configuration Command Usage This command is used in conjunction with the filter etherne...

Page 191: ...vel 3 Banyan CDP DEC XNS DEC MOP Dump Load DEC MOP DEC LAT Ethertalk Appletalk ARP Novell IPX old Novell IPX new EAPOL Telxon TXP Aironet DDP Enet Config Test Default None Command Mode Global Configur...

Page 192: ...ibed in this section configure connection parameters for the Ethernet port and wireless interface SMC AP show filters Protocol Filter Information Local Bridge ENABLED AP Management ENABLED Ethernet Ty...

Page 193: ...e status for the Ethernet interface Exec 6 72 Wireless Interface radio mode Sets the radio working mode IC W 6 73 select antenna mode Selects built in antennas or optional high gain antenna IC W 6 74...

Page 194: ...ed IC W 6 81 rts threshold Sets the packet size threshold at which an RTS must be sent to the receiving station prior to the sending station starting communications IC W 6 82 authentication Defines th...

Page 195: ...89 wpa clients Defines whether WPA is required or optionally supported for client stations IC W 6 90 wpa mode Specifies dynamic keys or a pre shared key IC W 6 92 wpa preshared key Defines a WPA pres...

Page 196: ...al Configuration Example To specify the 10 100Base TX network interface enter the following command dns server This command specifies the address for the primary or secondary domain name server to be...

Page 197: ...sets the IP address for the 10 100Base TX Ethernet interface Use the no form to restore the default IP address Syntax ip address ip address netmask gateway no ip address ip address IP address netmask...

Page 198: ...to connect the access point to existing IP subnets You can manually configure a specific IP address using this command or direct the device to obtain an address from a DHCP server using the ip dhcp co...

Page 199: ...cific IP address using the ip address command or direct the device to obtain an address from a DHCP server using this command When you use this command the access point will begin broadcasting DHCP cl...

Page 200: ...Ethernet Command Usage This command allows you to disable the Ethernet port due to abnormal behavior e g excessive collisions and reenable it after the problem has been resolved You may also want to...

Page 201: ...an only transfer data at 802 11b standard rates up to 11 Mbps g g only mode Only 802 11g clients can communicate with the access point b g b g mixed mode Both 802 11b and 802 11g clients can communica...

Page 202: ...is sent out both antennas and the antenna with the best incoming signal is used for reception right antenna The right antenna is used both for transmission and reception Use this setting when an opti...

Page 203: ...e Range 1 80 characters Default Setting None Command Mode Interface Configuration Wireless Example ssid broadcast This command opens access to clients without a pre configured SSID Use the no form to...

Page 204: ...ss clients Options 1 2 5 5 6 9 11 12 18 24 36 48 54 Mbps Default Setting 54 Mbps Command Mode Interface Configuration Wireless Command Usage The maximum transmission distance is affected by the data r...

Page 205: ...nel is selected Default Setting Automatic channel selection Command Mode Interface Configuration Wireless Command Usage The available channel settings are limited by local regulations which determine...

Page 206: ...p to 54 Mbps Turbo Mode is an enhanced mode not regulated in IEEE 802 11a that provides a higher data rate of up to 108 Mbps Enabling Turbo Mode allows the access point to provide connections up to 10...

Page 207: ...less Command Usage Clients that want to connect to the wireless network via an access point must set their SSIDs to the same as that of the access point Example beacon interval This command configures...

Page 208: ...val interval Interval between the beacon frames that transmit broadcast or multicast traffic Range 1 255 beacon frames Default Setting 2 Command Mode Interface Configuration Wireless Command Usage The...

Page 209: ...n length This command configures the minimum packet size that can be fragmented when passing through the access point Syntax fragmentation length length length Minimum packet size for which fragmentat...

Page 210: ...the sending station starting communications Syntax rts threshold threshold threshold Threshold packet size for which to send an RTS Range 0 2347 bytes Default Setting 2347 Command Mode Interface Confi...

Page 211: ...tion open shared open Accepts the client without verifying its identity using a shared key shared Authentication is based on a shared key that has been distributed to all stations Default Setting open...

Page 212: ...Default Setting disabled Command Mode Interface Configuration Wireless Command Usage Wired Equivalent Privacy WEP is implemented in this device to prevent unauthorized access to your wireless network...

Page 213: ...ge 6 85 key This command sets the keys used for WEP encryption Use the no form to delete a configured key Syntax key index size type value no key index index Key index Range 1 4 size Key size Options...

Page 214: ...ncryption command and the key command must match The encryption index length and type configured in the access point must match those configured in the clients Example Related Commands authentication...

Page 215: ...d broadcast messages to 802 1x enabled clients However because the access point sends the WEP keys during the 802 1x authentication process these keys do not have to appear in the client s WEP key lis...

Page 216: ...nts You also have to ensure that high strength signals do not interfere with the operation of other radio devices in your area Example max association This command configures the maximum number of cli...

Page 217: ...must be the same for all clients This command sets the encryption type that is supported by all clients If any clients supported by the access point are not WPA enabled the multicast cipher algorithm...

Page 218: ...as the successor to the Data Encryption Standard DES encryption algorithm and will be used by the U S government for encrypting all sensitive nonclassified information Because of its strength and resi...

Page 219: ...integrity check an extended initialization vector with sequencing rules and a re keying mechanism Enterprise level User Authentication via 802 1x and EAP To strengthen user authentication WPA uses 802...

Page 220: ...nt has to be WPA enabled or support 802 1x client software A RADIUS server must also be configured and be available in the wired network In the dynamic mode keys are generated for each wireless client...

Page 221: ...Configuration Wireless Command Usage To support Wi Fi Protected Access WPA for client authentication use the wpa clients command to specify the authentication type use the wpa mode command to specify...

Page 222: ...tting HEX Command Mode Interface Configuration Wireless Example Related Commands wpa preshared key page 6 93 shutdown This command disables the wireless interface Use the no form to restart the interf...

Page 223: ...interface wireless This command displays the status for the wireless interface Syntax show interface wireless a g a 802 11a radio interface g 802 11g radio interface Command Mode Exec SMC AP if wirel...

Page 224: ...rameters Transmit Power FULL 5 dBm Max Station Data Rate 54Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs DTIM Interval 2 beacons Maximum Association 64 stati...

Page 225: ...is command shows the wireless clients associated with the access point Command Mode Exec Example SMC AP show station 802 11g Station Table Station Address 00 04 E2 41 C2 9D Authenticated TRUE Associat...

Page 226: ...s roaming between different 802 11f compliant access points Use the no form to disable 802 11f signaling Syntax iapp no iapp Default Enabled Command Mode Global Configuration Command Usage The current...

Page 227: ...ust be configured on the RADIUS server for each user authorized to access the network If a user does not have a configured VLAN ID the access point assigns the user to its own configured native VLAN I...

Page 228: ...ID configured for each client on the RADIUS server If the VLAN ID has not been configured for a client on the RADIUS server then the frames are tagged with the access point s native VLAN ID Traffic en...

Page 229: ...are enabled on the access point a VLAN ID a number between 1 and 4095 can be assigned to each client after successful authentication using IEEE 802 1x and a central RADIUS server If a wireless client...

Page 230: ...Command Line Interface 6 102...

Page 231: ...authentication is being performed through a RADIUS server ensure that the clients are properly configured on the RADIUS server If authentication is being performed through IEEE 802 1x be sure the wire...

Page 232: ...reless interface that you are using has not been disabled If you are connecting to the access point through the wired Ethernet interface check the network cabling between the management station and th...

Page 233: ...nagement interface 5 If all other recovery measures fail and the access point is still not functioning properly take any of these steps Reset the access point s hardware using the console interface we...

Page 234: ...tdoors1 30 m 99 ft 40 m 131 ft 85 m 279 ft 250 m 820 ft 310 m 1016 ft 400 m 1311 ft 445 m 1459 ft 455 m 1492 ft 465 m 1525 ft 510 m 1672 ft Indoors2 15 m 49 5 ft 20 m 66 ft 25 m 82 ft 35 m 115 ft 40 m...

Page 235: ...o different colors For example one wire might be green and the other green with white stripes Also an RJ 45 connector must be attached to both ends of the cable Caution Each wire pair must be attached...

Page 236: ...must use crossover cables for connections to PCs or servers and straight through cable for connections to switches or hubs However when connecting to devices that support automatic MDI MDI X pinout c...

Page 237: ...ust use crossover cable for network connections to PCs servers or other end nodes that only have MDI ports However if the device to which you are connecting supports auto MDIX operation you can use ei...

Page 238: ...erial Cable Signal serial port Pin Signal management console port Unused 1 Unused TXD transmit data 2 RXD receive data RXD receive data 3 TXD transmit data Unused 4 Unused GND ground 5 GND ground Unus...

Page 239: ...DB 9 Ports Serial Cable Signal Directions for DB 25 Ports DB 9 to DB 9 AP Terminal or PC 1 2 3 4 5 6 7 8 9 1 2 3 4 5 6 7 8 9 DB 9 to DB 25 AP Terminal or PC 1 2 3 4 5 6 7 8 9 8 3 2 20 7 6 4 5 22 Rese...

Page 240: ...Cables and Pinouts B 6...

Page 241: ...10 13 MKK 1 14 Maximum Clients 64 Operating Range See Maximum Distance Table on page A 4 Data Rate 802 11a Normal Mode 6 9 12 18 24 36 48 54 Mbps per channel Turbo Mode 12 18 24 36 48 72 96 108 Mbps p...

Page 242: ...volts 0 2A 9 6 watts Note Power can also be provided to the access point through the Ethernet port based on IEEE 802 3af Power over Ethernet PoE specifications When both PoE is provided and the adapt...

Page 243: ...nal Certification FCC Part 15 247 2 4GHz FCC part 15 15 407 b CISPR 22 96 RSS 210 Canada EN 55022 EN55024 EN 300 328 EN 300 826 EN 61000 3 2 EN61000 3 3 ETSI300 328 ETS 300 826 802 11b MPT RCR std 33...

Page 244: ...7 87 QPSK 12 Mbps 86 86 86 86 QPSK 18 Mbps 84 84 84 84 16 QAM 24 Mbps 82 81 81 81 16 QAM 36 Mbps 80 79 78 78 64 QAM 48 Mbps 73 73 73 73 64QAM 54 Mbps 70 70 69 67 IEEE 802 11g Data Rate Sensitivity dBm...

Page 245: ...17 17 17 17 36 Mbps 17 17 17 17 48 Mbps 17 17 17 17 54 Mbps 12 17 17 16 IEEE 802 11g Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467 2 472 6 Mbps 20 20 18 9 Mbps 20 20 18 12 Mbps 20 20 18 18...

Page 246: ...Specifications C 6...

Page 247: ...ed network support the creation of multiple radio cells that enable roaming throughout a facility Ad Hoc A group of computers connected as an independent wireless network without an access point Advan...

Page 248: ...roadcast keys are sent to stations using 802 1x dynamic keying Dynamic broadcast key rotation is often used to allow the access point to generate a random group key and periodically update all key man...

Page 249: ...er Ethernet A popular local area data communications network which accepts transmission from computers and terminals File Transfer Protocol FTP A TCP IP protocol used for file transfer Hypertext Trans...

Page 250: ...s also backward compatible with IEEE 802 11b IEEE 802 1x Port Authentication controls access to the switch ports by requiring users to first enter a user ID and password for authentication Infrastruct...

Page 251: ...ng ODFM OFDM allows multiple users to transmit in an allocated band by dividing the bandwidth into many narrow bandwidth carriers Power over Ethernet PoE A specification for providing both power and d...

Page 252: ...o authenticate each client attached to a wireless network Shared Key authentication must be used along with the 802 11 Wireless Equivalent Privacy algorithm Simple Network Management Protocol SNMP The...

Page 253: ...the same LAN Wi Fi Protected Access WPA employs 802 1x as its basic framework for user authentication and dynamic key management to provide an enhanced security solution for 802 11 wireless networks W...

Page 254: ...Glossary Glossary 8...

Page 255: ...ity string 5 27 6 35 configuration settings saving or restoring 5 33 6 42 configuration initial setup 4 1 console port 1 6 connecting 2 4 pin assignments B 4 required settings 4 2 country code configu...

Page 256: ...5 40 configuring interface 5 46 6 68 maximum data rate 5 47 6 76 radio channel 5 46 6 77 IEEE 802 1x 5 57 6 50 configuring 5 16 6 50 initial setup 4 1 installation hardware 2 1 mounting 2 1 IP addres...

Page 257: ...ystem 5 33 6 14 RTS threshold 5 43 5 44 6 82 S security options 5 50 5 51 session key 5 16 5 17 6 53 shared key 5 54 6 85 Simple Network Management Protocol See SNMP Simple Network Time Protocol See S...

Page 258: ...38 troubleshooting A 1 U upgrading software 5 31 6 42 user name manager 5 29 6 21 user password 5 29 6 21 6 22 V VLAN configuration 5 21 6 100 native ID 5 21 6 101 W WEP 5 52 6 84 configuring 5 52 5 5...

Page 259: ......

Page 260: ...32 Fax 33 0 41 38 01 58 Italy 39 0 335 5708602 Fax 39 02 739 14 17 Benelux 31 33 455 72 88 Fax 31 33 455 73 30 Central Europe 49 0 89 92861 0 Fax 49 0 89 92861 230 Nordic 46 0 868 70700 Fax 46 0 887...

Reviews:

No comments

Related manuals for 2555W-AG

Wireless VPN Router DI-824VUP

Brand: D-Link Pages: 157

Brand: Inscape Data Pages: 29

Brand: SUNDRAY Pages: 20

Brand: Link electronics Pages: 34

Brand: Wunda Pages: 2

Brand: Credo mobile Pages: 6

Brand: Flybox Pages: 2

Brand: Wacom Pages: 44

Brand: 4gon Pages: 88

Brand: US Robotics Pages: 2

Brand: Planex Pages: 215

Brand: GainSpan Pages: 11

Brand: Hunter Pages: 5

Brand: Sapido Pages: 85

Brand: D-Link Pages: 13

Brand: Zte Pages: 11

Brand: Nanjing Z-com Wireless Pages: 45

Wireless LAN 11 Mbps

Brand: 3Com Pages: 58

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands