background image

 

-23-

The 802.1x authentication (EAP) is designed to enhance the security of wireless networks. 

The 802.1x provides an authentication framework for wireless LANs, allowing a user to be 

authenticated by a central authority. For wireless LANs, it also provides centralized, 

server-based authentication of end users. The standard is flexible enough to allow multiple 

authentication algorithms, and because it is an open standard, multiple vendors can innovate 

and offer enhancements.   

For wireless LANs, the 802.1x authentication has three main components: The supplicant 

(usually the client software, such as zero configuration in window XP), the authenticator 

(usually the access point), and the authentication server (usually a Remote Authentication 

Dial-In User Service server, although RADIUS although 802.1X does not specify it).   

The advanced security describes how to control authorized access to the Access Point with 

Authentication Dial-In User Service (RADIUS). There are many ways to enhance your 

wireless security: 802.1x Based Auth mode or MAC Address Based Auth mode. To enable 

802.1x based authentication, please select 802.1x Based Auth mode. Moreover, you may 

enable the radius account function by check Enable Radius Account in the check box. To 

configure the Authentication and Account Server function, the parameter of Radius 

Authentication Server and Radius Account Server must set to the same with the 

Authentication Server and Account Server. Before you enable RADIUS account, you have 

select 802.1x Based Auth mode first.   

Note: The Password is up to 16 bytes.   

If you want to use MAC Address Based authentication, you should select MAC Address 

Based Auth mode. However, the RADIUS account server will not be supported here.   

Most likely, the MAC Address Based authentication is less secure than 802.1x (EAP) 

authentication. MAC Address Based authentication provides an alternative for wireless 10 

network security that does not support 802.1x capability.   

Otherwise, you may select disable auth mode that adjusts to the 802.11 legacy network. For 

setting 802.1x Based Auth:   

 

Содержание BL4001

Страница 1: ......

Страница 2: ...s without the written permission of the supplier About This Manual The purpose of this manual is for the setup of the 11Mbps Wireless LAN ODU This manual revised as version 4 0 3 in 2004 includes procedures assisting you in avoiding unforeseen problems Technical Support If you have difficulty resolving the problem while installing or using the Wireless LAN ODU please contact the supplier for suppo...

Страница 3: ...ler must ensure that the high gain directional antenna used in this system is used exclusively for fixed point to point operations and that multiple co located intentional radiators transmitting the same information are not used For further information please see Appendix B Notice The changes or modifications not expressly approved by the party responsible for compliance could void the user s auth...

Страница 4: ...allation 8 Chapter 2 Hardware Installation 9 2 1 Product Kit 9 2 2 System Requirements 9 2 3 Mechanical Description 10 2 4 Hardware Installation 11 Chapter 3 Configuring the ODU 12 3 1 Configuration 12 3 2 Using the Web Management 25 3 3 Using the Telnet 29 Appendix A Channels 36 Appendix B FCC Certified Systems 37 Appendix C Troubleshooting 38 ...

Страница 5: ...ions n Creates a Point to Multipoint system using three or more Indoor Units or Indoor and Outdoor total solutions n Detachable antenna allows you for the use of external high gain antenna n With a data rate of 11Mbps and 5 5Mbps the system is faster than an E1 T1 data link n Features 11Mbps data rate by incorporating Direct Sequence Spread Spectrum technology n Fully IEEE 802 11b compatible Allow...

Страница 6: ...uently rearrange the workplace and change location 4 Temporary LANs for Special Projects or Peak Time C1 Trade shows exhibitions and construction sites where a temporary network will be practical C2 Retailers airline and shipping companies need additional workstations during peak period C3 Auditors requiring workgroups at customer sites 5 Access to Database for Mobile Workers Doctors nurses retail...

Страница 7: ...ions This would increase efficiency of the communications since the wireless adapters do not need to be within direct range of each other Wireless Infrastructure with Stations Attaching to a Wired LAN The 11Mbps Wireless LAN ODU will provide an access to the local LAN An integration of wireless and wired LAN is called an Infrastructure configuration A group of wireless LAN PC users and an ODU cons...

Страница 8: ...ion The 11Mbps Wireless ODU provides ideal bridging solution for inter building LANs connection In an inter building application the 11Mbps ODU acts as a repeater thus expanding and connecting corporate LANs with reliable and high speed connection ...

Страница 9: ...pter x 1 u Power Cord x 1 u Mounting kit x 1 u Product CD x 1 u Quick Installation Guide x 1 NOTE If any of the above items are missing or damaged please contact your local dealer for support 2 2 System Requirements Installation of the 11Mbps Wireless LAN ODU requires 1 A DC 12V adapter which supplies the power for the PoE Power over Ethernet 2 A 10 100 Base T UTP Ethernet cable drop 3 Operating s...

Страница 10: ...erproof RJ 45 connector Connect to the POE with SFTP cable N type connector Connect to the antenna by the RF cable The maximum RF cable length depend on the loss of the RF cable SFTP Cable This cable is attached to the ODU The default SFTP cable length is 25 meter RJ 45 connector To POE LED Indicator N type connector ...

Страница 11: ...ther end of the POE with straight RJ 45 cable to a hub or a switch Please note that use the cross over cable when you desire to connect the PoE of ODU to a PC n Connect the Antenna In ODU connection you can connect antenna to the N type connector of ODU by RF cable n Connect the Power Cable Connect DC 12V adapter to the PoE and plug the other end of the adapter into an electrical outlet NOTE Only ...

Страница 12: ...e Windows based utility Access Point Utility provides a user friendly interface The ODU Utility enables you to configure all of your ODUs on the network more easily than ever before The following gives instructions guiding you through the installations of the ODU Utility 1 Insert the Product CD ROM disk that came with your product kit into the corresponding drive on your computer 2 From the Start ...

Страница 13: ... basic information of the ODU such as MAC Address Frequency Domain and Firmware Version MAC Address It is a hardware identification number that distinguishes the unit from others Frequency Domain The regulated operating frequency per country Firmware Version Displays the firmware version that is equipped with your hardware Statistics The statistics tab contains three of the following items for you...

Страница 14: ... 14 Wireless network traffic Ethernet You may monitor the TX RX on the wired network Wireless You may monitor the TX RX of the wireless network ...

Страница 15: ...that have WEP encryption errors Transmit Deferred Transmission The number of packets that have deferred transmission due to the fact that the medium is busy Retry Limit Exceed The number of packets that are not sent due to the reason that the packets exceed the retry limits Single Tries The number of packets that are successfully sent on the first retry Multiple Retries The number of packets that ...

Страница 16: ... ease if you have multiple ODU on the network IEEE802 11 Radio Mode The Wireless LAN ODU can operate total of 5 radio modes Ø Wireless LAN Access Point AP Enables the ODU to act as a wireless bridge connecting to your network backbone Ø Inter building with Repeating PxP Allows for multi point connection among LANs default setting Ø Station Adapter Infrastructure SAI Served as a wireless station in...

Страница 17: ...ever can be ignored When the SAA2 is selected you need to set the ODU the same ESSID and channel ESSID The ESSID is a unique ID given to the ODU Wireless clients associating to the ODU must have the same ESSID The ESSID can have up to 32 characters Channel You may select any of the available channels as an operational channel for your ODU You may use the Site Survey tool came with the wireless PC ...

Страница 18: ...he efficiency when there is high traffic within the wireless network If you transmit large files in a wireless network you can enable the Fragmentation Threshold and specify the packet size The mechanism will split the packet into the packet size you set TX Rate When the ODU is under PXP SAI SAA and SAA2 it provides various data rate options for you to select Data rates options include Fully Auto ...

Страница 19: ... new setting take affect IP Address To enable remote access to the ODU using Telnet or Web Management you must assign an IP address to the ODU You may also assign other related Internet addressing options such as subnet mask or gateway address Consult your network administrator to obtain an available IP address Default setting is 192 168 1 1 WEP ...

Страница 20: ... key value of your choice may either be From the 4 Key entry field enter the corresponding key value for each encryption method For WEP64 data encryption 5 alphanumeric characters in the range of a z A Z and 0 9 e g MyKey 10 digit hexadecimal values in the range of A F a f and 0 9 preceded by the characters 0x values e g 0x11AA22BB33 For WEP128 data encryption 13 alphanumeric characters in the ran...

Страница 21: ...ey for the ODU the same WEP Key MyKey must be assigned to other client stations Upgrade This item is used for uploading the newest firmware of the ODU You may either enter the file name in the entry field or browse the file by clicking the Open File button For information about the release of the newest firmware contact your local reseller Access Control ...

Страница 22: ...h Down bandwidth and Total bandwidth if needed Specify the desired bandwidth or unlimited if you do not need the bandwidth control Ø Click Apply to make the setting take effect You can also configure the Access Control by using web based management NOTE Be aware that when you enable the Access Control Table without any MAC address in the table no access is allowed to communicate with the Access Po...

Страница 23: ... User Service RADIUS There are many ways to enhance your wireless security 802 1x Based Auth mode or MAC Address Based Auth mode To enable 802 1x based authentication please select 802 1x Based Auth mode Moreover you may enable the radius account function by check Enable Radius Account in the check box To configure the Authentication and Account Server function the parameter of Radius Authenticati...

Страница 24: ... 24 ...

Страница 25: ...1 1 will allow you to monitor and configure the ODU 1 Open your web browser 2 Enter the available IP address of your ODU in the Address field e g http 192 168 1 1 You will have access to the Wireless LAN Access Point Web Pages of the ODU 3 Enter the password to login to the ODU The default password is default The main page will show up The ODU main page contains three items for you to manage your ...

Страница 26: ...nformation General This item displays the general information of the ODU such as the MAC address Frequency Domain and Firmware Version Statistics This item displays the Ethernet and wireless network traffic ...

Страница 27: ...Channel RTS Threshold Fragment Threshold TX Rate and Password WEP To prevent unauthorized wireless stations from accessing data transmitted over the network the 11Mbps Wireless LAN ODU offers WEP Wired Equivalency Privacy You can set up 4 encryption keys but choose one key to encrypt your data ...

Страница 28: ...estrict wireless stations accessing the ODUs by identifying the MAC address of the wireless devices Upgrade Here you can upload the newest firmware of the ODU You may either enter the file name in the entry field or browse the file by clicking the Browse button ...

Страница 29: ...he ODU anywhere to get access to the ODU console Thus you will be able to make the configuration via the TCP IP connection 1 Telnet to your ODU A window will show up 2 Enter the password The default password is default 3 3 1 Basic Commands The following are the commands provided for configuring the ODU In loader mode i e no valid firmware in the ODU only the commands with an asterisk are provided ...

Страница 30: ...uency domain etc stat Display the statistical values of the operation of the ODU for example association status LAN WLAN interface load etc ping ip_addr num_pings data_size Ping ICMP echo to an ip_addr host with optional num_pings times with optional data size in a length of data_size ...

Страница 31: ... 31 set List the configuration information set apname web_port telnet_port mode channel essid tx_rate tx_retry antenna rts_threshold frag_threshold ip_address ip_netmask ip_gateway ...

Страница 32: ...tual name for the identification of the ODU apXXXXXX where XXXXXX is the last six octets of ODU s MAC address web_port Port number dedicated to WEB 80 telnet_port Port number dedicated to Telnet 23 mode Operation mode of the ODU PxP channel The radio channel number 1 essid The ESS ID a k a SSID of the ODU My Network tx_rate Transmission Rate Auto tx_retry Number of retries for data transmission 7 ...

Страница 33: ...tory default settings of the ODU except for the IP addresses A save command is required for changes to take effect cls Clear the console screen exit Exit the console or help Print a help screen reset Issue a reset signal The ODU will be reset if user confirms 3 3 2 Advanced Settings for Security This section describes the commands to control the security for ODU To prevent unauthorized wireless st...

Страница 34: ...on of each mode is specified as follows open open to public default restrict only allow access of the authorized stations repeaters in the table no access is allowed if the list stays empty add mac_addr add an address into the access control table del mac_addr index delete a MAC address or index an address from the access control table list start end display the content of the access control mode ...

Страница 35: ... 1 as key_text 10 hexadecimal digits 0 9 or A F heading by 0x or five alphanumeric values ASCII characters case sensitive are required if 64 bit WEP is used Example 0x1122334455 0x0055AA55AA abcde or MyKey set key2 key_text set WEP Key 2 as key_text with a same format as WEP Key 1 set key3 key_text set WEP Key 3 as key_text with a same format as WEP Key 1 set key4 key_text set WEP Key 2 as key_tex...

Страница 36: ... 36 Appendix A Channels Conversion Table 802 11b Channel Frequency MHz 1 2412 2 2417 3 2422 4 2427 5 2432 6 2437 7 2442 8 2447 9 2452 10 2457 11 2462 ...

Страница 37: ...enna Gain dBi Max EIRP dBm Application KBNT2402 17 omni 2 22 P T MP KBNT2406 17 omni 6 26 P T MP KBNT2411 17 omni 11 31 P T MP KBNT2416 14 Sector 16 36 P T MP KBNT 2418 16 Panel 18 38 P T P KBNT2420 13 Grid 20 40 P T P BL4001 KBNT2424 13 Grid 24 44 P T P KBNT2402 17 omni 2 29 P T MP KBNT2406 17 omni 6 33 P T MP BL4002 KBNT2411 17 omni 11 31 P T MP KBNT2402 17 omni 2 32 P T MP BL4003 KBNT2406 17 om...

Страница 38: ... power adapter and the power outlet 2 Check if there is electricity on power outlet 2 Check if the connection between antenna and WLAN ODU is correct or whether the connector is loose or not 3 Check if the connection between WLAN ODU and PoE is correct or whether the connector is loose or not 4 Verify if the transmit power which calculated before is correct 5 If none of the above measures could so...

Отзывы: