Appendix E - Command Line Interface
101
factoryrestore
Restore to Default Factory Settings
apply
To make the changes take effect
exit
Quit the telnet
Page 1: ...11n Wireless Access Point User s Guide...
Page 2: ......
Page 3: ...TER 4 PC AND SERVER CONFIGURATION 40 Overview 40 Using WEP 40 Using WPA PSK WPA2 PSK 41 Using WPA Enterprise 42 802 1x Server Setup Windows 2000 Server 43 802 1x Client Setup on Windows XP 53 Using 80...
Page 4: ...de ii Checking TCP IP Settings Windows XP 88 Checking TCP IP Settings Windows Vista 90 APPENDIX D ABOUT WIRELESS LANS 92 Overview 92 Wireless LAN Terminology 92 APPENDIX E COMMAND LINE INTERFACE 95 Ov...
Page 5: ...le being easy to use Standards Compliant The Wireless Access Point complies with the IEEE802 11g and IEEE802 11n draft 2 0 specifications for Wireless LANs Supports 11n Wireless Stations The 802 11n D...
Page 6: ...ncluded Both 64 Bit 128 Bit and 152 Bit keys are supported WPA support Support for WPA is included WPA is more secure than WEP and should be used if possible Both TKIP and AES encryption methods are s...
Page 7: ...Access Point can send its log data to your Syslog Server SNMP Support SNMP Simple Network Management Protocol is supported allowing you to use a SNMP program to manage the Wireless Access Point Packag...
Page 8: ...ing transmitted or received via the Wireless access point Data includes network traffic as well as user data Status On Error condition Off Normal operation Blinking During start up and when the Firmwa...
Page 9: ...fault values To Clear All Data and restore the factory default values 1 Hold the Reset Button until the Status Red LED blinks TWICE usually more than 5 seconds 2 Release the Reset Button The factory d...
Page 10: ...To maximize reliability and performance follow these guidelines Use an elevated location such as wall mounted or on the top of a cubicle Place the Wireless Access Point near the center of your wireles...
Page 11: ...hernet The Wireless Access Point supports PoE Power over Ethernet To use PoE 1 Do not connect the supplied power adapter to the Wireless Access Point 2 Connect one end of a standard category 5 LAN cab...
Page 12: ...Browser Setup using the Windows Utility A simple Windows setup utility is supplied on the CD ROM This utility can be used to assign a suitable IP address to the Wireless Access Point Using this utilit...
Page 13: ...the Wireless Access Point Description Any extra information for the Wireless Access Point entered by the administrator Note If the desired Wireless Access Point is not listed check that the device is...
Page 14: ...d Password again 6 Check the following screens and configure as necessary for your environment Use the on line help if necessary The later sections in this Chapter also provides more details about eac...
Page 15: ...ensure the PC used for configuration is on the same LAN segment as the Wireless Access Point 3 Start your Web browser 4 In the Address box enter HTTP and the IP Address of the 11N Wireless Access Poin...
Page 16: ...Management menu 9 Use the Apply and Reboot buttons on the menu to apply your changes and restart the Wireless Access Point Setup is now complete Wireless stations must now be set to match the Wireles...
Page 17: ...cation Access Point Name Enter a suitable name for this Access Point Description If desired you can enter a description for the Access Point Country Domain The country or domain which is matching your...
Page 18: ...allocate IP Addresses to PCs DHCP clients on your LAN when they start up The default and recommended value is Enabled The Start IP Address and Finish IP Address fields set the values used by the DHCP...
Page 19: ...Access Point Setup 15 System Advanced Settings Screen Click Advanced Settings on the System menu to view a screen like the following Figure 9 System Advanced Settings Screen...
Page 20: ...le Bonjour Enable Bonjour If checked the Bonjour will enable applications to discover the devices and the services on IP networks Now this AP only publish http and https service LLTD Enable Link Layer...
Page 21: ...creen like the following Figure 10 Wireless Basic Screen Data Wireless Basic Settings Screen Operation Turn Radio On Enable this to use the wireless feature Wireless Mode Select the desired option Dis...
Page 22: ...Point Bridge Point to Point Bridge to a single AP You must pro vide the MAC address of the other AP in the PTP Bridge AP MAC Address field Bridge Multi Point Select this only if this AP is the Master...
Page 23: ...Access Point Setup 19 Select Remote AP If the other AP is on line you can click the Select Remote AP button and select from a list of available APs...
Page 24: ...t VAP name is displayed SSID The current SSID associated with this VAP Security System The current security system e g WPA PSK is dis played Enable Button Enable the selected VAP Configure Button Chan...
Page 25: ...is Access Point Isolation within VAP If enabled then each Wireless station using the Access Point is invisible to other Wireless stations In most business stations this setting should be Disabled Secu...
Page 26: ...Radius Server This is usually done using digital certificates Each user s wireless client must support 802 1x and provide the Radius authentication data when required All data transmission is encrypt...
Page 27: ...Security None No security is used Anyone using the correct SSID can connect to your network Security Settings WEP This is the 802 11b standard Data is encrypted before transmission but the encryption...
Page 28: ...a particular method select the appropriate value Open System or Shared Key All Wireless stations must then be set to use the same method Key Input Select Hex or ASCII depending on your input method A...
Page 29: ...ue Data is encrypted using a 256Bit key derived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key...
Page 30: ...rived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broad...
Page 31: ...this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP for WPA PSK and AES for WPA2 PSK Group Key Update This refers to the key used for broadcast transmi...
Page 32: ...th Radius Screen WPA with Radius WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Update This refers to the key used for broadcast transmissions Enable this...
Page 33: ...adius Screen WPA2 with Radius WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast transmissions Enable this if yo...
Page 34: ...Data WPA and WPA2 with Radius Screen WPA and WPA2 with Radius WPA Encryption The encryption method is TKIP for WPA and AES for WPA2 Group Key Update This refers to the key used for broadcast transmiss...
Page 35: ...used to authenticate each user See Chapter4 for details of user configuration Each user s wireless client must support 802 1x All data transmission is encrypted using the WEP standard You only have t...
Page 36: ...ange This setting if only available if using Dynamic WEP Keys If you want the Dynamic WEP keys to be updated regularly enable this and enter the desired lifetime in minutes Static WEP Key EAP MD5 Enab...
Page 37: ...cret Enter the key value to match the Radius Server Secondary Authentica tion Server The Secondary Authentication Server will be used when the Primary Authentication Server is not available Accounting...
Page 38: ...erver on the LAN for Access Control Warning Ensure your own PC is in the Trusted Wireless Stations list before enabling this feature Local Trusted Stations This table lists any Wireless Stations you h...
Page 39: ...d Wireless Stations This lists any Wireless Stations which you have designated as Trusted Other Wireless Stations This list any Wireless Stations detected by the Access Point which you have not design...
Page 40: ...Stations list Edit To change an existing entry in the Trusted Stations list select it and click this button 1 Select the Station in the Trusted Station list 2 Click the Edit button The address will b...
Page 41: ...s clients voice and multimedia traffic will be given a higher priority than other traffic No Acknowledgement If enabled then WMM acknowledgement is disabled Depend ing on the environment disabling ack...
Page 42: ...the desired option The default is Long The Short setting takes less time when used in a good environment 802 11b Protection Mode The Protection system is intended to prevent older 802 11b devices from...
Page 43: ...is selected enter the PIN code from the client device in this field and click Register button If the third option is selected enter the displayed PIN code to the client device Change AP Settings Enter...
Page 44: ...lso more complex Using WEP For each of the following items each Wireless Station must have the same settings as the Wireless Access Point Mode On each PC the mode must be set to Infrastructure SSID ES...
Page 45: ...e set to Infrastructure SSID ESSID This must match the value used on the Wireless Access Point The default value is wireless Note The SSID is case sensitive Wireless Security On each client Wireless s...
Page 46: ...cation for the Radius Server 802 1x Encryption Typically EAP TLS is used This is a dynamic key system so keys do NOT have to be entered on each Wireless station However you can also use a static WEP k...
Page 47: ...default prompts ensure that DNS is installed and enabled during installa tion Services Installation 1 Select the Control Panel Add Remove Programs 2 Click Add Remove Windows Components from the left...
Page 48: ...ess Point User Guide 44 Figure 27 Components Screen 4 Click Next 5 Select the Enterprise root CA and click Next Figure 28 Certification Screen 6 Enter the information for the Certificate Authority and...
Page 49: ...st be stopped before continuing Click Ok then Finish DHCP server configuration 1 Click on the Start Programs Administrative Tools DHCP 2 Right click on the server entry as shown and select New Scope F...
Page 50: ...nter the router address for the current subnet The router address may be left blank if there is no router Click Next 10 For the Parent domain enter the domain you specified for the domain controller s...
Page 51: ...nd select New Certificate to Issue Figure 33 Certificate Authority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 34 Templa...
Page 52: ...Select the Group Policy tab choose Default Domain Policy then click Edit Figure 36 Group Policy Tab 7 Select Computer Configuration Windows Settings Security Settings Public Key Poli cies right click...
Page 53: ...Computer then click Next Figure 38 Certificate Template Screen 10 Ensure that your certificate authority is checked then click Next 11 Review the policy change information and click Finish 12 Click St...
Page 54: ...eless Access Point and set the shared secret as entered on the Security Settings of the Wireless Access Point 5 Click Finish 6 Right click on Remote Access Policies select New Remote Access Policy 7 A...
Page 55: ...the Authentication tab Enable Extensible Authentication Protocol and select Smart Card or other Certificate Deselect other authentication meth ods listed Click OK Figure 41 Authentication Screen 12 Se...
Page 56: ...te Access Login for Users 1 Select Start Programs Administrative Tools Active Directory Users and Computers 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow...
Page 57: ...You are using Windows XP You are connecting to a Windows 2000 server for authentication You already have a login User name and password on the Windows 2000 server Client Certificate Setup 1 Connect t...
Page 58: ...Wireless Access Point User Guide 54 Figure 44 Wireless CA Screen 5 Select User certificate request and select User Certificate the click Next Figure 45 Request Type Screen 6 Click Submit...
Page 59: ...gure 46 Identifying Information Screen 7 A message will be displayed then the certificate will be returned to you Click Install this certificate Figure 47 Certificate Issued Screen 8 You will receive...
Page 60: ...twork Connection and select Properties 3 Select the Authentication Tab and ensure that Enable network access control using IEEE 802 1X is selected and Smart Card or other Certificate is selected from...
Page 61: ...ble encryption for a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 50 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and c...
Page 62: ...Wireless Access Point User Guide 58 Figure 51 Properties Screen Setup for Windows XP and 802 1x client is now complete...
Page 63: ...he key is provided for me automatically Instead you must enter the WEP key manually ensuring it matches the WEP key used on the Access Point Figure 52 Properties Screen Note On some systems the 64 bit...
Page 64: ...ic However you may need to perform the following operations on a regular basis If using the Access Control feature update the Trusted PC database as required See Access Control in Chapter 3 for detail...
Page 65: ...address was obtained from a DHCP Server on your network It will display Enabled or Disabled DHCP Server Enabled or Disabled is displayed for the DHCP server status Ethernet Status The current Etherne...
Page 66: ...t User Guide 62 Statistics Screen This screen is displayed when the Statistics button on the Status screen is clicked It shows details of the traffic flowing through the Wireless Access Point Figure 5...
Page 67: ...onnection between the AP and the client Usually clients associ ate with only one 1 AP at any time Disassociation The number of Disassociation packets received Disassociation breaks the existing connec...
Page 68: ...s VAP if you didn t change the name the default name is used BSSIS The MAC address of the VAP SSID The SSID assigned to this VAP Broadcast SSID Indicates whether or not the SSID is broadcast Security...
Page 69: ...n Data Activity Log Data Current Time The system date and time is displayed Log The Log shows details of the connections to the Wireless Access Point Buttons Refresh Update the data on screen Save to...
Page 70: ...en Data Station List Screen Station List MAC Address The MAC physical address of each Wireless Station is displayed Mode The mode of each Wireless Station SSID This displays the SSID used the Wireless...
Page 71: ...s Access Point s Manage ment menu Admin Login Auto Config Update Config File SNMP Settings Log Settings Upgrade Firmware Admin Login Screen The Admin Login screen allows you to assign a password to th...
Page 72: ...f enabled you must provide a port number in the field below Either HTTP or HTTPS must be enabled HTTP Port Number Enter the port number to be used for HTTP connections to this device The default value...
Page 73: ...n requests from other AP will be ignored Provide admin login name and password If enabled the login name and password need to be provided Provide Respond to Auto Configuration setting If enabled the R...
Page 74: ...py of cur rent settings to a file Once you have the Access Point working properly you should back up the settings to a file on your computer You can later restore the Access Point s settings from this...
Page 75: ...factory default settings click Set to Defaults button Note This will terminate the current connection The Access Point will be unavailable until it has restarted By default the Access Point will act...
Page 76: ...u Figure 61 SNMP Screen Data SNMP Screen General SNMP Use this to enable or disable SNMP as required Read Only com munity Data can be read but not changed Read Write Com munity Data can be read and se...
Page 77: ...ecked Only this station The IP address is checked and must match the address you enter in the IP address field provided If selected you must enter the IP address of the required station Traps Version...
Page 78: ...on if different PCs act as the Syslog server at different times Unicast Select this if the same PC is always used as the Syslog server If selected you must enter the server ad dress in the field provi...
Page 79: ...mail address the log is to be sent to E mail Log Now Press this button to let the log to be e mailed immediately Log Email Alerts Use these checkboxes to determine which events are included in the log...
Page 80: ...like the following Figure 63 Firmware Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will...
Page 81: ...nce OFDM 802 11b CCK 11 Mbps 5 5 Mbps DQPSK 2 Mbps DBPSK 1 Mbps Operating Frequencies 2 412 2 497 GHz 11b Operating Channels 802 11g 11 for North America 13 for Europe ETSI 14 for Japan 802 11b 11 for...
Page 82: ...time support IEEE 802 11d CTS only CTS RTS protect mechanism support WMM support WPS support Wireless isolations Operation Mode Common AP PTMP PTP Universal Repeater Universal Client Rogue AP Detectio...
Page 83: ...t SNMP v1 v2c v3 LLTD Only wired users to be able to control Auto configuration Other Features DHCP client WINS client Radius client Enable Disable wireless Network Integrality Check FTP client Firmwa...
Page 84: ...restart it You can use the following method to determine the IP address of the Wireless Access Point and then try to connect using the IP address in stead of the name To Find the Access Point s IP Ad...
Page 85: ...e PC the wireless mode is set to Infrastructure If using the Access Control feature the PC s name and address is in the Trusted Stations list If using 802 1x mode ensure the PC s 802 1x software is co...
Page 86: ...o need to change the TCP IP of each PC Just configure the Wireless Access Point to match your existing LAN The following sections provide details about checking the TCP IP settings for various types o...
Page 87: ...n IP Address automatically This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specified...
Page 88: ...Settings Windows NT4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 67 Windows NT4 0 TCP IP 2 Click the Properties button to see a screen li...
Page 89: ...P address from a DHCP Server This is the default Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is alr...
Page 90: ...ion 2 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 69 Network Configuration Win 2000 3 Select the TCP IP protocol for your network...
Page 91: ...dows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixe...
Page 92: ...Right click the Local Area Connection and choose Properties You should see a screen like the following Figure 71 Network Configuration Windows XP 3 Select the TCP IP protocol for your network card 4 C...
Page 93: ...is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP add...
Page 94: ...he Local Area Connection Status and choose Properties Click Continue to the User Account Control dialog box then you should see a screen like the following Figure 73 Network Configuration Windows Vist...
Page 95: ...ss automatically This is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a f...
Page 96: ...ess Stations can then access all LAN resources Access Points can only function in Infrastructure mode and can communicate only with Wireless Stations which are set to Infrastructure mode SSID ESSID BS...
Page 97: ...ESS If using Ad hoc mode no Access Point all Wireless stations should be set to use the same Channel However most Wireless stations will still scan all Channels to see if there is an existing Ad hoc...
Page 98: ...d for client authentication and WEP for data encryption If possi ble you should use WPA Enterprise instead because WPA encryption is much stronger than WEP encryption If this option is used The Access...
Page 99: ...cted you can use any of the commands listed in the following Command Reference Command Reference The following commands are available config vap Config Virtual AP X Display CLI Command List help Displ...
Page 100: ...Key Update Mode get gtkupdateinterval Display Group Key Update Interval in Seconds get http Display HTTP Mode get httpport Display HTTP Port Number get https Display HTTPS Mode get httpsport Display...
Page 101: ...nmpwritecommu nity Display SNMP Write Community get snmpmode Display SNMP Mode get snmpmanagemode Display SNMP Manager Mode get snmptrapmode Display SNMP Trap Mode get snmptrapversion Display SNMP Tra...
Page 102: ...nterval Set 11n Guard Interval Mode set 11nsubchannel Set 11n Extension Sub Channel set 11nradioband Set 11n Radio Band set 802 11d Set 802 11d Mode set acctserver Set Accounting Server set acctport S...
Page 103: ...EP Key Length set lltd Set LLTD Mode set md5supplicant Set 802 1x MD5 Supplicant Mode set md5suppname Set 802 1x Supplicant MD5 Name set md5supppassword Set 802 1x Supplicant MD5 Password set md5suppt...
Page 104: ...Authentication Key set snmpv3privproto Set SNMP v3 Private Protocol set snmpv3privkey Set SNMP v3 Private Key set ssid Set Service Set ID set ssidsuppress Set SSID Broadcast Mode set stp Set STP Mode...
Page 105: ...Appendix E Command Line Interface 101 factoryrestore Restore to Default Factory Settings apply To make the changes take effect exit Quit the telnet...
