Deliberant FWBD0501 Скачать руководство пользователя страница 65

Страница: 65 / 67

User’s

Guide

deliberant

Page

RADIUS

Attributes

The following RADIUS attributes and messages are supported by the DLB APC.

General

Attributes

Attribute

Description

User-name (1)

Full username as entered by the user.

User-Password (2)

Used for UAM as alternative to CHAP-Password and CHAP-Challenge.

CHAP-Password (3)

Used for UAM CHAP Authentication

CHAP-Challenge (60)

Used for UAM CHAP Authentication

EAP-Message (79)

Used for WPA Authentication

NAS-IP-Address (4)

IP address of Chilli (set by the

nasip

radiuslisten

option, and

otherwise "0.0.0.0")

Service-Type (6)

Set to Login (1) for normal authentication requests. The Access-Accept
message from the
radius server for configuration management messages must also be
set to Administrative-User.

Framed-IP-Address (8)

IP address of the user, which is configurable during MAC
authentication in the Access-Accept.

Filter-ID (11)

Filter ID pass on to scripts possibly.

Reply-Message (18)

Reason of reject if present.

State (24)

Sent to chilli in Access-Accept or Access-Challenge. Used
transparently in subsequent Access-Request.

Class (25)

Copied transparently by chilli from Access-Accept to Accounting-
Request.

Session-Timeout (27)

Logout once session timeout is reached (seconds)

Idle-Timeout (28)

Logout once idle timeout is reached (seconds)

alled-Station-ID (30)

Set to the nasmac option or the MAC address of chilli.

Calling-Station-ID (31)

MAC address of client

NAS-Identifier (32)

Set to radiusnasid option if present.

Acct-Status-Type (40)

1=Start, 2=Stop, 3=Interim-Update

Acct-Input-Octets (42)

Number of octets received from client.

Acct-Output-Octets (43)

Number of octets transmitted to client.

Acct-Session-ID (44)

Unique ID to link Access-Request and Accounting-Request messages.

Acct-Session-Time (46)

Session duration in seconds.

Acct-Input-Packets (47)

Number of packets received from client.

Acct-Output-Packets (48)

Number of packets transmitted to client.

Acct-Terminate-Cause (49)

1=User-Request, 2=Lost-Carrier, 4=Idle-Timeout, 5=Session-Timeout,
11=NAS-Reboot

Acct-Input-Gigawords (52)

Number of times the Acct-Input-Octets counter has wrapped around.

Acct-Output-Gigawords (53)

Number of times the Acct-Output-Octets counter has wrapped around.

NAS-Port-Type (61)

19=Wireless-IEEE-802.11

Message-Authenticator (80)

Is always included in Access-Request. If present in Access-Accept,
Access-Challenge or

Содержание FWBD0501

Страница 2: ...thorization from Deliberant Trademarks Deliberant logo is trademark of Deliberant LLC All other registered and unregistered trademarks in this document are the sole property of their respective owners FCC Caution Any Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This device complies with part 15 of t...

Страница 3: ...ained between the antenna and users This final and product must be labeled in a visible area with the following Contains FCC ID UB8 FWBD0501 Manual Information to the End User The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the user s manual of the end product which integrates this module The end user manual shall i...

Страница 4: ...pproved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated Antenna types not included in this list having a gain greater than the maximum gain indicated for that type are strictly prohibited for use with this device ...

Страница 5: ...us 19 Information 19 Network 19 Wireless 20 Routes 21 ARP 22 Configuration 22 Network 22 Bridge Mode 22 IP Settings 23 VLAN to SSID Mapping 24 Management VLAN 24 Router Mode 25 WAN Settings 26 LAN Network Settings 28 LAN DHCP Settings 29 Wireless 30 Wireless Mode Access Point auto WDS 31 Basic Wireless Settings 31 Security Settings 32 Advanced Wireless Settings 33 Wireless Mode Station 35 Basic Wi...

Страница 6: ...NTP 51 SSH 51 HTTP 52 Autodiscovery 52 System 53 Administration 53 Device settings 53 Account settings 53 System functions 54 Log 54 LED Control 55 Firmware Upgrade 56 Tools 57 Antenna Alignment 57 Site Survey 57 Delayed Reboot 58 Ping 58 Traceroute 59 Spectrum Analyzer 60 UNIVERSAL ACCESS METHOD UAM 61 UAM Overview 61 UAM Configuration 61 White Black List 63 APPENDIX 64 A Resetting Device to Fact...

Страница 7: ...re displayed in bold italic References to sections inside the document are displayed in italic code File names directory names form names system generated output and user typed entries are displayed in constant width type Abbreviation List Abbreviation Description ACL Access Control List AES Advanced Encryption Standard AMSDU Aggregated Mac Service Data Unit AP Access Point CRC Cyclic Redundancy C...

Страница 8: ...eived signal strength in mV measured on BNC outdoor unit connector RX Receive SISO Simple Input Simple Output SNMP Simple Network Management Protocol SMTP Simple Mail Transfer Protocol SSID Service Set Identifier TCP Transmission Control Protocol TKIP Temporal Key Integrity Protocol TTLS Tunneled Transport Layer Security EAP TTLS protocol TX Transmission UDP User Datagram Protocol UAM Universal Ac...

Страница 9: ...in Password admin01 After successful administrator login you will see the main page of the device Web management interface The device now is ready for configuration Initial AP Setup Follow the steps for initial wireless Access Point setup that will be prepared to accept wireless Station connections refer to the section Initial Station Setup for instructions Step 1 Connect an Ethernet cable between...

Страница 10: ... According to the chosen country the regulatory domain settings may differ You are not allowed to select radio channels and RF output power values other the permitted values for your country and regulatory domain Step 6 Enter the default password and then press the Login button to enter the AP web management page ...

Страница 11: ...Navigate to the Configuration Network tab and choose the Router network mode with NAT enabled Static IP enabled on WAN side LAN settings with DHCP server enabled to loan an IP addresses for connected clients on LAN side and click Save Apply ...

Страница 12: ...ully connected to the APC device Initial Station Setup Follow the steps for initial wireless client setup that will be connected to the previously configured AP refer to the section Initial AP Setup Step 1 Connect an Ethernet cable between your computer and the DLB APC device Step 2 Make sure your computer is set to the same subnet as the APC i e 192 168 2 150 Step 3 Start your Web browser Step 4 ...

Страница 13: ... According to the chosen country the regulatory domain settings may differ You are not allowed to select radio channels and RF output power values other the permitted values for your country and regulatory domain Step 6 Enter the default password and then press the Login button to enter the APC web management page ...

Страница 14: ...e the bridge network mode with Dynamic IP enabled be sure that AP to which the device will be associated has a DHCP server running refer to the section Initial AP Setup for instructions specify the DHCP fallback settings in case the DHCP server will be unreachable and click Save Apply button ...

Страница 15: ...ssociated to Specify the Security parameters for the AP check IEEE mode these settings must conform with AP wireless settings and click Save Apply Step 9 Verify connection Navigate to the Status Information page The Information page will display wireless information of the link with AP The connection status must be displayed as Connected and progress bars indicating the quality of the connection m...

Страница 16: ...alid address on the other side of the bridge Router Mode In router mode the device will receive internet through WAN port and will share it to the LAN ports that will be separated with a different IP range The type of connection to the WAN interface can be made by Static IP DHCP client or PPPoE client Figure 3 Router Mode When device operates in Router mode the traffic coming on wired interface an...

Страница 17: ...l AP create and setup virtual AP only in AP wireless mode Wireless ACL access control by MAC address only in AP and IPoll AP wireless modes Traffic shaping download and upload traffic control Port forwarding port forwarding rules only in router network mode for AP and IPoll AP Static routes static route rules only in router network mode for AP and IPoll AP Services WNMS set WNMS server collector U...

Страница 18: ...applied instantly It will take few seconds and the device will be running with new settings It should be noted that pressing Apply button settings are not written to the permanent memory Therefore if the device is rebooted it will start with old configuration settings Discard if pressed parameter changes are discarded It should be noted that if Apply or Save Apply is pressed it is not possible to ...

Страница 19: ...t Station iPoll wireless modes AP mode displays access point operating information number of connected clients and SSID details including VAPs Station mode displays settings at which the station is connected to the access point iPoll AP displays iPoll access point operating information number of connected wireless stations iPoll Station displays settings at which the iPoll wireless station is conn...

Страница 20: ...nsmitted displays the number of transmitted packets TX errors displays the number of the TX errors DHCP leases table displays information about leased DHCP addresses This table appears only on AP which acts as Router and have DHCP server enabled Wireless Status Wireless section is not available if APC is operating in Station wireless mode In this case all necessary information about wireless conne...

Страница 21: ...plays MAC address of the successfully connected wireless client Signal indicates the signal strength of the access point main and auxiliary antennas that the station communicates with displayed dBm Noise displays the noise level in dBm IEEE mode displays the IEEE mode at which the access point communicates with the particular station Data rate displays the data rate at which the access point commu...

Страница 22: ...w varies depending on your selection Figure 8 Network Mode Options Network mode choose the device operating mode bridge router Bridge in this mode the device works as transparent bridge interconnecting wireless network and LAN port Router in this mode the device works as router between wireless network and all LAN ports Network settings will vary according to the selected Network mode The Bridge m...

Страница 23: ...IP address is unused and belongs to the same IP subnet as your wired LAN otherwise you will lose the connection to the device from your current PC If you enable the DHCP client the browser will lose the connection after saving because the IP address assigned by the DHCP server is not predictable Method specify IP reception method IP addresses can either be retrieved from a DHCP server or configure...

Страница 24: ...Management VLAN ID All other frames using any management protocol will be rejected When you specify a new management VLAN your HTTP connection to the device will be lost For this reason you should have a connection between your management station and a port in the new management VLAN or connect to the new management VLAN through a multi VLAN router Figure 11 Management VLAN Settings Enable select ...

Страница 25: ...nable NAT Network Address Translation that functions by transforming the private IP address of packets originating from hosts on your network so that they appear to be coming from a single public IP address and by restoring the destination public IP address to the appropriate private IP address for packets entering the private network the multiple PCs on your network would then appear as a single ...

Страница 26: ...s need to change hardware router you need to notify your ISP about MAC address change or simply set the router s MAC address to the MAC address of the previously router computer VLAN ID specify the VLAN ID for traffic tagging on required radio interface 2 4095 The Station devices that associate using the particular SSID will be grouped into this VLAN WAN mode choose Static IP to specify IP setting...

Страница 27: ... your ISP about MAC address change or simply set the router s MAC address to the MAC address of the previously router computer VLAN ID specify the VLAN ID for traffic tagging on required radio interface 2 4095 The Station devices that associate using the particular SSID will be grouped into this VLAN DHCP fallback setting specify IP address Subnet mask Default gateway and optionally DNS server for...

Страница 28: ...ed into this VLAN User name specify the user name for PPPoE Password specify the password for PPPoE MTU specify the MTU Maximum Transmission Unit The default value is 1500 bytes Reconnect mode specify PPPoE reconnection mode Always on PPPoE connection automatically starts without timeout The router will keep trying to bring up the connection if it is disconnected for some reason On demand the PPPo...

Страница 29: ...HCP messages between subnets with different sublayer broadcast domains Figure 18 Router LAN Settings DHCP Relay DHCP mode choose server to enable DHCP server on LAN interface Figure 19 Router LAN Settings DHCP Server IP address from specify the starting IP address of the DHCP address pool IP address to specify the ending IP address of DHCP address pool Subnet mask specify the subnet mask Default g...

Страница 30: ...ccess point When in AP mode wireless clients can see the AP broadcast and associate to it if settings are configured correctly Station sets the radio to run in client mode In this mode wireless station does not broadcast an SSID and clients cannot connect to it Station mode allows the APC radio to connect to other radios functioning as an AP Station WDS a wireless station will communicate with acc...

Страница 31: ... for 802 11 radio is 20MHz The 802 11n allow channel bonding in such way the total channel width becomes 40MHz Channel displays the channel at which the AP is operating or indicates that autochannel function is used Channel list select the channel s at which the AP unit will operate If more than one channel is selected then autochannel feature will be enabled Automatic channel selection allows AP ...

Страница 32: ...n WEP security For WEP 64bit encryption 5 HEX pairs e g aa bb cc dd ee or 5 ASCII characters e g abcde For WEP 128bit encryption 13 HEX pairs e g aa bb cc dd ee ff gg hh 00 11 22 33 44 or 13 ASCII characters e g abcdefghijklm To setup Personal WPA WPA2 encryption need to specify the pre shared key and encryption with chosen AES TKIP or Auto method Figure 24 Security Private WPA WPA2 Encryption Pas...

Страница 33: ...r Default 1812 for authentication RADIUS key specify the secret key of the authentication server string The shared secret is used to encrypt data packets transmitted between RADIUS server and client Shared secrets must be the same on the RADIUS servers and the RADIUS client Advanced Wireless Settings Advanced parameters allow configuring the device to get the best performance capacity of the link ...

Страница 34: ...AC frames will be increased Mode choose the AP antenna operating mode SISO single input single output The device will use only one antenna for data transfer The antenna will be chosen automatically MIMO multiple input multiple output The device will use two antennas for data transfer two simultaneous streams Max data rate choose the maximum data rate in Mbps at which should transmit packets The AP...

Страница 35: ...ings to setup radio interface of the device Figure 27 Station Wireless Settings Basic Wireless Settings SSID specify the SSID of the wireless network device Scan click this button to scan for surrounding wireless networks Found network SSID s will be available in drop down menu IEEE mode specify the wireless network mode Channel width The default channel bandwidth for 802 11 radio is 20MHz The 802...

Страница 36: ...64bit encryption 5 HEX pairs e g aa bb cc dd ee or 5 ASCII characters e g abcde For WEP 128bit encryption 13 HEX pairs e g aa bb cc dd ee ff gg hh 00 11 22 33 44 or 13 ASCII characters e g abcdefghijklm Personal WPA WPA2 encryption must be specified with the pre shared key encrypted with chosen AES or TKIP method Auto mode on Station is not available Figure 30 Security Private WPA WPA2 Encryption ...

Страница 37: ...he device will transmit data The larger the distance the higher transmit power is required To set transmit power level use the slider or enter the value manually When entering the transmit power value manually the slider position will change according to the entered value The maximum transmit power level is limited to the allowed value by country in which device is operating regulatory agency Enab...

Страница 38: ...here will be an interference encountered the APC will step down to the highest rate that allows data transmission Max data rate N choose the data rates in Mbps at which should transmit packets for the selected 802 11n mode The APC will attempts to transmit data at the highest data rate set If there will be an interference encountered the APC will step down to the highest rate that allows data tran...

Страница 39: ...dth for 802 11n radio is 20MHz The 802 11n allow channel bonding in such way the total channel width becomes 40MHz Channel displays the channel at which the iPoll AP is operating or indicates that autochannel function is used Channel list select the channel s at which the iPoll AP will operate If more than one channel is selected then autochannel feature will be enabled Automatic channel selection...

Страница 40: ... will be converted to key format selected above Advanced Wireless Settings Advanced wireless settings allow configuring the iPoll AP to get the best performance capacity of the link Figure 36 iPoll Access Point Advanced Wireless Settings Transmit power set the unit s transmitting power at which the device will transmit data The larger the distance the higher transmit power is required To set trans...

Страница 41: ... SISO single input single output The device will use only one antenna for data transfer The antenna will be chosen automatically MIMO multiple input multiple output The device will use two antennas for data transfer two simultaneous streams Max data rate select the device data transmission rates in Mbps from the drop down list The iPoll AP will attempt to transmit data at the highest data rate set...

Страница 42: ... SSID of the wireless network device manually or use Scan functionality Scan click this button to scan for surrounding iPoll Access Points Found network SSID s will be available in drop down menu Channel width The default channel bandwidth for 802 11 N radio is 20 40MHz The 802 11n allow channel bonding in such way the total channel width becomes 40MHz Security Settings Both sides iPoll Access Poi...

Страница 43: ...the slider or enter the value manually When entering the transmit power value manually the slider position will change according to the entered value The maximum transmit power level is limited to the allowed value by country in which device is operating regulatory agency Enable ATPC select to enable Automatic Transmit Power Control ATPC If enabled device radio will continuously communicate with r...

Страница 44: ...VAP Table To create a new Virtual AP click on button to add new entry on the VAP table then select this entry and specify required parameters Figure 42 VAP Settings SSID specify the unique name for the VAP string Broadcast SSID when this option is selected the particular SSID is visible during network scans on a wireless station When unselected the VAP SSID is not visible and not broadcasted to wi...

Страница 45: ... Control provides the ability to limit associations wirelessly based on MAC address to an AP by creating an Access Control List ACL on each wireless interface including VAPs Figure 43 Wireless ACL Configuration Policy define the policy Open no rules applied Allow MAC in the list only listed MAC clients can connect to the AP white list Deny MAC in the list only listed MAC clients can NOT connect to...

Страница 46: ...upload from Ethernet interface to wireless interface bandwidth value in Kbps Upload burst kbytes specify the upload burst size in kbytes Limit per IP traffic Use button to create new traffic limitation rules Figure 45 Traffic Shaping Per IP Limitation IP address specify IP address for which the traffic will be limited Down rate kbps specify the maximum download from wireless interface to Ethernet ...

Страница 47: ...s Figure 46 Port Forwarding Configuration Enable UPnP select to enable UPnP Universal Plug and Play connectivity service The UPnP enables APC communicate with other network devices automatically opening required ports without manual intervention Enable DMZ select to enable DMZ DMZ opens all TCP UDP ports to particular IP address It allows setting up servers behind the APC The feature is used commo...

Страница 48: ...dress Netmask specify destination netmask Gateway specify the gateway address for the route 0 0 0 0 stands for the default gateway of the selected interface Services WNMS Wireless Network Management System WNMS is a centralized monitoring and management system for wireless network devices The communication between managed devices and the WNMS server is always initiated by an WNMS client service ru...

Страница 49: ...send notification on Ethernet link status change RSSI level lower than system will send notification when RSSI reach value lower than specified Default 25 Noise level greater than system will send notification when signal noise will reach value greater than specified Default 60 dBm RX drop greater than system will send notification when percent of RX dropped packets become higher than specified va...

Страница 50: ...t number used by the networked SMTP server By default the port number is 25 Source e mail address specify the e mail address that will be used by the device Destination e mail address specify the e mail address where the device will send the alert messages E mail notification interval specify interval in seconds at which the e mail notification will be sent from the device 0 86400 If 0 specified t...

Страница 51: ...ion time zone and enter NTP server in order to use the NTP service Figure 51 Device Clock NTP Configuration Configuration choose the system clock configuration mode NTP Manual Timezone select the timezone Time zone should be specified as a difference between local time and GMT time Save last known time select to recall the timestamp that was saved on last reboot When NTP is enabled this option wil...

Страница 52: ... select tis option to enable or disable HTTP access to the device management Port specify HTTP port Standard HTTP port is 80 HTTPS connection via the standard port 8080 is always enabled Autodiscovery Autodiscovery function is available only on Station Station WDS and IPoll Station wireless modes Enable this feature to allow the APC unit discovery within reach of a single multicast packet Figure 5...

Страница 53: ...aracters Longitude specify the longitude coordinates of the device specific decimal format e q 54 869446 Latitude specify the latitude coordinates of the device specific decimal format e q 23 891058 Both coordinates helps indicate accurate location of the device Account settings The Administrative Account menu is for changing the administrator s password Default administrator logon settings are Us...

Страница 54: ...through the web interface Restore configuration from file click to upload an existing configuration file to the device Installer radio test mode select to enable Installer radio test mode If enabled responsibility for the compliance of the device performance with the regulatory rules must be taken by the installer Log Use the log tab to configure device to view or save log messages to the local or...

Страница 55: ...the port to which syslog messages will be forwarded 0 65535 Default 514 LED Control The APC is equipped with 6 LEDs power LAN and 4 Signal LEDs that indicates the signal strength of current connection The signal level is classified into 4 levels thus corresponding 4 LEDs switches on as soon as indicated threshold is reached Figure 58 Device LED Control LAN LED select to enable LAN LED The red LED ...

Страница 56: ...mware upgrade is compatible with all configuration settings When the device is upgraded with a newer version or the same version builds all the system s configuration will be preserved after the upgrade The new firmware image is uploaded to the controller s temporary memory It is necessary to save the firmware into the device permanent memory Click the Upgrade button Upgrade upgrade device with th...

Страница 57: ...ton to stop antenna alignment Average if this option selected the graph will display the average RSSI of both antennas Site Survey The Site Survey tool shows overview information for wireless networks in a local geographic area Using this test an administrator can scan for working access points check their operating channels encryption and see signal noise levels To perform the Site Survey test cu...

Страница 58: ...booted in specified minutes thus the old settings will be set back Figure 60 Delayed Reboot Configuration Reboot after specify time in minutes after which the device will be rebooted Start Stop click to start or stop delayed reboot tool Ping This command is used to test whether a particular host is reachable across an IP network The Ping results will be displayed graphically Figure 61 Ping Results...

Страница 59: ...nation This is useful when trying to find out why destination is unreachable as you will be able to see where the connection fails Figure 62 Traceroute Results Destination IP or Hostname specify hostname or IP address of the target host Max Hops Specifies the maximum number of hops to search for target Start Stop click to start or stop traceroute tool ...

Страница 60: ...ating and chosen channel width Do not use the Spectrum analyzer on the remote unit of the link as the connection to the device will be lost during the test Click Start button to perform the test Operating frequency range displays the channel frequency range at which the APC unit is operating currently Maximum color indicates a the maximum achieved signal level on the appropriate frequency Current ...

Страница 61: ... They are uniquely identified by specifying WISP domain name in addition to subscriber user name when logging in APC can be configured to send authentication and accounting information to different Authentication Authorization and Accounting AAA servers associated with different WISP domains Subscriber s login format username UAM Configuration UAM authentication is available on radio interfaces in...

Страница 62: ...equests default 1812 RADIUS accounting port specify the UDP port number to use for radius accounting requests default 1813 RADIUS WEB page type choose the authentication Web portal type Internal use the built in authentication Web page If selected then when a users first tries to access the Internet they will be blocked and re directed to the built in login page The logon data will be sent to the ...

Страница 63: ...c IP settings for the connected users Network specify the network for IP address pool Subnet mask specify the subnet mask for the DHCP DNS server specify the primary and the secondary DNS servers Data encryption settings choose the data encryption method Open no encryption Personal WPA preshared key encryption with WPA using AES method Personal WPA 2 preshared key encryption with WPA2 using AES me...

Страница 64: ...ing wired link status change connecting the device that will be reset Steps to reset to default settings Step 1 Power off the APC device Step 2 Obtain the device MAC address Step 3 Connect a PC to the same physical subnet as the device Step 4 Execute arp s command to assign the IP address IP address should be from the same subnet as PC to the device MAC address arp s IP address to assign device MA...

Страница 65: ...uest Class 25 Copied transparently by chilli from Access Accept to Accounting Request Session Timeout 27 Logout once session timeout is reached seconds Idle Timeout 28 Logout once idle timeout is reached seconds alled Station ID 30 Set to the nasmac option or the MAC address of chilli Calling Station ID 31 MAC address of client NAS Identifier 32 Set to radiusnasid option if present Acct Status Typ...

Страница 66: ...WISPr Logoff URL in order to enable the client to log off WISPr Bandwidth Max Up 14122 7 Maximum transmit rate b s Limits the bandwidth of the connection Note that this attribute is specified in bits per second WISPr Bandwidth Max Down 14122 8 Maximum receive rate b s Limits the bandwidth of the connection Note that this attribute is specified in bits per second WISPr Session Terminate Time 14122 ...

Страница 67: ...ximum bandwidth up ChilliSpot Bandwidth Max Down 14559 5 Maximum bandwidth down ChilliSpot Config 14559 6 Configurations passed between chilli and back end as name value pairs ChilliSpot Lang 14559 7 Language selected in user interface ChilliSpot Version 14559 8 Version of Chilli sending this AccessRequest ...

Результаты поиска

Содержание FWBD0501

Отзывы:

Похожие инструкции для FWBD0501

Бренды по названию

Популярные бренды

Deliberant FWBD0501, Руководство пользователя

Результаты поиска

Содержание FWBD0501

Отзывы:

Похожие инструкции для FWBD0501

Бренды по названию

Популярные бренды