manualshive.com logo in svg

SMC Networks 2552W-G2, Руководство пользователя

Поделиться
Скачать
SMC Networks 2552W-G2 Скачать руководство пользователя страница 197

RADIUS Client

6-59

6

Command Mode 

Global Configuration

Example 

radius-server port

This command sets the RADIUS server network port. 

Syntax

radius-server 

[

secondary

]

 port

 <

port_number>

•

secondary

 - Secondary server.

•

port_number

 - RADIUS server UDP port used for authentication messages. 

(Range: 1024-65535)

Default Setting 

1812

Command Mode 

Global Configuration

Example 

radius-server key

This command sets the RADIUS encryption key. 

Syntax 

radius-server 

[

secondary

] 

key

 <

key_string>

•

secondary

 - Secondary server.

•

key_string

 - Encryption key used to authenticate logon access for client. Do 

not use blank spaces in the string. (Maximum length: 20 characters)

Default Setting 

DEFAULT

Command Mode 

Global Configuration

Example 

Enterprise AP(config)#radius-server address 192.168.1.25
Enterprise AP(config)#

Enterprise AP(config)#radius-server port 181
Enterprise AP(config)#

Enterprise AP(config)#radius-server key green
Enterprise AP(config)#

Содержание 2552W-G2

Страница 1: ...USER GUIDE EliteConnectTM Universal 802 11g 2 4GHz Wireless Access Point SMC2552W G2...

Страница 2: ...Mason Irvine CA 92618 Phone 949 679 8000 EliteConnect SMC2552W G2 2 4GHz Wireless Access Point The easy way to make all your network connections September 2008 Pub 149100034100E F4 3 2 2 E092008 AP R...

Страница 3: ...ed by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Copyright 2008 by SMC Networks Inc 20 Mason Irvine CA...

Страница 4: ...become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty wh...

Страница 5: ...WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME STATES D...

Страница 6: ...vi...

Страница 7: ...ceiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer o...

Страница 8: ...causing equipment standard entitled Digital Apparatus ICES 003 of Industry Canada Cet appareil num rique respecte les limites de bruits radio lectriques applicables aux appareils num riques de Classe...

Страница 9: ...ribed below This device requires that the user or installer properly enter the current country of operation in the command line interface as described in the user guide before operating this device Th...

Страница 10: ...igences essentielles et aux autres dispositions pertinentes de la directive 1999 5 CE Swedish H rmed intygar SMC att denna Radio LAN device st r I verensst mmelse med de v sentliga egenskapskrav och v...

Страница 11: ...oltage conditions according to IEC 60950 The conditions are only maintained if the equipment to which it is connected also operates under SELV conditions The PoE Power over Ethernet which is to be int...

Страница 12: ...east 10 A The attachment plug must be an earth grounding type with NEMA 5 15P 15 A 125 V or NEMA 6 15P 15 A 250 V configuration Denmark The supply plug must comply with Section 107 2 D1 Standard DK2 1...

Страница 13: ...950 Ces conditions ne sont maintenues que si l quipement auquel il est raccord fonctionne dans les m mes conditions France et P rou uniquement Ce groupe ne peut pas tre aliment par un dispositif imp d...

Страница 14: ...teeingang haben Die Netzsteckdose mu in der N he des Ger ts und leicht zug nglich sein Die Stromversorgung des Ger ts kann nur durch Herausziehen des Ger tenetzkabels aus der Netzsteckdose unterbroch...

Страница 15: ...ne strombelastbarkeit aus wenigstens 10 A Dieser Stromstecker mu hat einer erdschluss mit der typ NEMA 5 15P 15A 125V oder NEMA 6 15P 15A 250V konfiguration Danemark Dieser Stromstecker mu die ebene 1...

Страница 16: ...COMPLIANCES x...

Страница 17: ...nfiguration 3 1 Network Topologies 3 2 Ad Hoc Wireless LAN no Access Point 3 2 Infrastructure Wireless LAN 3 3 Infrastructure Wireless LAN for Roaming Wireless PCs 3 4 Infrastructure Wireless Bridge 3...

Страница 18: ...s 5 88 Event Logs 5 91 Chapter 6 Command Line Interface 6 1 Using the Command Line Interface 6 1 Accessing the CLI 6 1 Console Connection 6 1 Telnet Connection 6 1 Entering Commands 6 2 Keywords and A...

Страница 19: ...ow config 6 23 show hardware 6 27 System Logging Commands 6 27 logging on 6 28 logging host 6 28 logging console 6 29 logging level 6 29 logging facility type 6 30 logging clear 6 31 show logging 6 31...

Страница 20: ...57 RADIUS Client 6 58 radius server address 6 58 radius server port 6 59 radius server key 6 59 radius server retransmit 6 60 radius server timeout 6 60 radius server port accounting 6 61 radius serve...

Страница 21: ...y 6 80 show bridge link 6 80 Spanning Tree Commands 6 82 bridge stp enable 6 82 bridge stp forwarding delay 6 83 bridge stp hello time 6 83 bridge stp max age 6 84 bridge stp priority 6 84 bridge link...

Страница 22: ...ogue ap duration 6 110 rogue ap interval 6 111 rogue ap scan 6 112 show rogue ap 6 112 Wireless Security Commands 6 113 auth 6 113 encryption 6 115 key 6 116 transmit key 6 117 cipher suite 6 118 mic_...

Страница 23: ...bles and Pinouts B 1 Twisted Pair Cable Assignments B 1 10 100BASE TX Pin Assignments B 1 Straight Through Wiring B 2 Crossover Wiring B 3 Console Port Pin Assignments B 3 Wiring Map for Serial Cable...

Страница 24: ...xviii Contents...

Страница 25: ...int does not have a cable connection to the wired Ethernet LAN Bridge Providing links to access points operating in Bridge or Root Bridge mode and thereby connecting other wired LAN segments Root Brid...

Страница 26: ...232 console cable One AC power adapter and power cord Four rubber feet User Guide CD Inform your dealer if there are any incorrect missing or damaged parts If possible retain the carton including the...

Страница 27: ...iving The access point never transmits from both antennas at the same time The antennas transmit the outgoing signal as a toroidal sphere doughnut shaped with the coverage extending most in a directio...

Страница 28: ...hubs The access point appears as an Ethernet node and performs a bridging function by moving packets from the wired LAN to remote workstations on the wireless infrastructure Note The RJ 45 port also s...

Страница 29: ...work cable based on the IEEE 802 3af standard Note that if the access point is connected to a PoE source device and also connected to a local power source through the AC power adapter PoE will be disa...

Страница 30: ...n User Name admin Password smcadmin General HTTP Server Enabled HTTP Server Port 80 HTTP Server Enabled HTTP Server Port 443 TCP IP DHCP Enabled IP Address 192 168 2 2 Subnet Mask 255 255 255 0 Defaul...

Страница 31: ...isabled VLAN Management VLAN ID 1 VLAN ID VAP Interface 1 VLAN Tag Support Disabled QoS QoS Mode Off SVP SpectraLink Voice Priority Disabled Filter Control Local Bridge Disabled AP Management Enabled...

Страница 32: ...Eastern Time US and Canada Ethernet Interface Speed and Duplex Auto Wireless Interface 802 11b g IAPP Enabled SSID SMC Radio Mode b g Status Disabled Auto Channel Select Enabled Closed System Disable...

Страница 33: ...Encryption Disabled WEP Key Length 128 bits WEP Key Type Hexadecimal WEP Transmit Key Number 1 WEP Keys null WPA Configuration Mode WEP Only Disabled WPA Key Management WPA Pre shared Key WPA PSK Typ...

Страница 34: ...Introduction 1 10 1...

Страница 35: ...o or near building support columns or other obstructions that may cause reduced signal or null zones in parts of the coverage area Mount away from any signal absorbing or reflecting structures such as...

Страница 36: ...the back panel with category 3 4 or 5 UTP Ethernet cable When the access point and the connected device are powered on the Ethernet Link LED should light indicating a valid network connection If this...

Страница 37: ...rastructure wireless bridge to connect wired LANs Infrastructure wireless repeater for extended range The 802 11b and 802 11g frequency band which operates at 2 4 GHz can easily encounter interference...

Страница 38: ...ireless adapter connected via radio signals as an independent wireless LAN Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio channel An ad hoc wireless LAN can...

Страница 39: ...group via a radio link or access other computers or network resources in the wired LAN infrastructure via the access point The infrastructure configuration not only extends the accessibility of wirele...

Страница 40: ...ccess points The SSID can be manually configured by the clients can be detected in an access point s beacon or can be obtained by querying for the identity of the nearest access point For clients that...

Страница 41: ...configured as the root bridge in the wireless network The root bridge should be the unit connected to the main core of the wired LAN Other bridges must configure one parent link to the root bridge or...

Страница 42: ...o six WDS repeater links In repeater mode the access point does not support an Ethernet link to a wired LAN Note that when the access point operates in this mode only half the normal throughput is pos...

Страница 43: ...serial port that enables a connection to a PC or terminal for monitoring and configuration Attach a VT100 compatible terminal or a PC running a terminal emulation program to the access point You can...

Страница 44: ...igure to enter configuration mode then type interface ethernet to access the Ethernet interface configuration mode Type no ip dhcp to disable DHCP client mode Then type ip address ip address netmask g...

Страница 45: ...code for your country and enter the country command again following by your country code e g tw for Taiwan Note The CLI examples shown later in this manual abbreviate the console prompt to just AP Th...

Страница 46: ...Initial Configuration 4 4 4 The home page displays the Main Menu...

Страница 47: ...ed IP address of the access point or use the default address http 192 168 2 2 To log into the access point enter the default user name admin and the password smcadmin then press LOGIN When the home pa...

Страница 48: ...tree parameters 5 21 AP Management Configures access to management interfaces 5 27 Administration Configures user name and password for management access upgrades software from local file FTP or TFTP...

Страница 49: ...distinguish different devices in your network System Name An alias for the access point enabling the device to be uniquely identified on the network Default Enterprise Wireless AP Range 1 32 characte...

Страница 50: ...ig end 6 87 Enterprise AP show system 6 22 System Information Serial Number System Up time 0 days 0 hours 32 minutes 22 seconds System Name R D System Location System Contact Contact System Country Co...

Страница 51: ...e page 4 2 After you have network access to the access point you can use the web browser interface to modify the initial IP configuration if needed Note If there is no DHCP server on your network or D...

Страница 52: ...gs From the global configuration mode enter the interface configuration mode with the interface ethernet command Use the ip dhcp command to enable the DHCP client or no ip dhcp to disable it To manual...

Страница 53: ...Wi Fi Protected Access WPA wireless security A secondary RADIUS server may also be specified as a backup should the primary server fail or become inaccessible In addition the configured RADIUS server...

Страница 54: ...System Configuration 5 8 5...

Страница 55: ...k spaces in the string Maximum length 255 characters Timeout Number of seconds the access point waits for a reply from the RADIUS server before resending a request Range 1 60 seconds Default 5 Retrans...

Страница 56: ...address 192 168 1 256 58 Enterprise AP config radius server port 181 6 59 Enterprise AP config radius server key green 6 59 Enterprise AP config radius server timeout 10 6 60 Enterprise AP config radi...

Страница 57: ...altered Clients can then securely use the local user name and password for access authentication Note that SSH client software needs to be installed on the management station to access the access poin...

Страница 58: ...Take note of the following points before configuring MAC address or 802 1X authentication Use MAC address authentication for a small network with a limited number of users MAC addresses can be manuall...

Страница 59: ...ovides a basic level of authentication for wireless clients attempting to gain access to the network A database of authorized MAC addresses can be stored locally on the access point or remotely on a c...

Страница 60: ...MAC database provides a mechanism to take certain actions based on a wireless client s MAC address The MAC list can be configured to allow or deny network access to specific clients System Default Sp...

Страница 61: ...tication server local 6 71 Enterprise AP config mac authentication session timeout 5 6 71 Enterprise AP config address filter default denied 6 69 Enterprise AP config address filter entry 00 70 50 cc...

Страница 62: ...hen use the 802 1X supplicant command to enable the feature To display the current settings use the show authentication command from the Exec mode not shown in the following example Enterprise AP conf...

Страница 63: ...When enabled clients associated with a specific VAP interface cannot establish wireless communications with each other Clients can communicate with clients associated to other VAP interfaces Prevent...

Страница 64: ...ss to wireless communications through the access point Use the filter ap manage command to restrict management access from wireless clients To configure Ethernet protocol filtering use the filter ethe...

Страница 65: ...er an assigned client VLAN ID default VLAN ID or the management VLAN ID Traffic received from the wired network must also be tagged with one of these known VLAN IDs Received traffic that has an unknow...

Страница 66: ...e The specific configuration of RADIUS server software is beyond the scope of this guide Refer to the documentation provided with the RADIUS server software VLAN Classification Enables or disables VLA...

Страница 67: ...dges need to specify one Parent link to the root bridge or to a bridge connected to the root bridge The other five WDS links are available as Child links to other bridges Bridge Role Sets the radio to...

Страница 68: ...network It selects a root port on each bridging device except for the root device which incurs the lowest path cost when forwarding a packet from that device to the root device Then it selects a desig...

Страница 69: ...ge 0 65535 Default 32768 Bridge Max Age The maximum time in seconds a device can wait without receiving a configuration message before attempting to reconfigure All device ports except for designated...

Страница 70: ...akes a port with higher priority less likely to be blocked if the Spanning Tree Protocol is detecting network loops Where more than one port is assigned the highest priority the port with lowest numer...

Страница 71: ...ss g bridge link child 4 00 08 3e 84 79 31 Enterprise AP if wireless g bridge link parent 00 08 2d 69 3a 51 6 97 Enterprise AP if wireless g exit Enterprise AP show bridge link wireless g 6 101 Interf...

Страница 72: ...stp command Enterprise AP config bridge stp enable 6 104 Enterprise AP config bridge stp forwarding delay 25006 105 Enterprise AP config bridge stp hello time 500 6 106 Enterprise AP config bridge stp...

Страница 73: ...s the access point will reject the connection UI Management Enables or disables management access through Telnet the Web HTTP or SNMP interfaces Default Enabled Note Secure Web HTTPS connections are n...

Страница 74: ...compromise access point and network security Once a new Administrator has been configured you can delete the default admin user name from the system Note Pressing the Reset button on the back of the...

Страница 75: ...vided periodically from your distributor After upgrading new software you must reboot the access point to implement the new code Until a reboot occurs the access point will continue to run the softwar...

Страница 76: ...itional steps Obtain the IP address of the FTP or TFTP server where the access point software is stored If upgrading from an FTP server be sure that you have an account configured on the server with a...

Страница 77: ...Specifies the name of the code file on the server The new firmware file name should not contain slashes or the leading letter of the file name should not be a period and the maximum length for file n...

Страница 78: ...nt in the access point file system To run the new software use the reset board command to reboot the access point Enterprise AP copy tftp file 6 55 1 Application image 2 Config file 3 Boot block image...

Страница 79: ...d to memory or sent to a Syslog server The logged messages serve as a valuable tool for isolating access point and network problems System Log Setup Enables the logging of error messages Default Disab...

Страница 80: ...in the access point s memory are erased when the device is rebooted Logging Facility Type Sets the facility type for remote logging of syslog messages The command specifies the facility type tag sent...

Страница 81: ...record the time from the factory default set at the last bootup The access point acts as an SNTP client periodically sending time synchronization requests to specific time servers You can configure up...

Страница 82: ...d to end the change from standard time During this period the system clock is set back by one hour CLI Commands for SNTP To enable SNTP support on the access point from the global configuration mode s...

Страница 83: ...ons and the protocol used to access this information over the network The access point includes an onboard agent that supports SNMP versions 1 2c and 3 clients This agent continuously monitors the sta...

Страница 84: ...t stations SNMP Enables or disables SNMP management access and also enables the access point to send SNMP traps notifications Default Disable Location A text string that describes the system location...

Страница 85: ...h the notification operation Maximum length 23 characters case sensitive Default public Engine ID Sets the engine identifier for the SNMPv3 agent that resides on the access point This engine protects...

Страница 86: ...the RADIUS server dot1xAuthNotInitiated A client station did not initiate 802 1X authentication dot1xAuthSuccess A 802 1X client station has been successfully authenticated by the RADIUS server dot1x...

Страница 87: ...ion of the access point and define a system contact To set the read only and read write community names use the snmp server community command Use the snmp server host command to define a trap receiver...

Страница 88: ...ociation Enabled dot11StationAuthentication Enabled dot11StationReAssociation Enabled dot11StationRequestFail Enabled dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled dot1xAuthSuccess Enabled dot1x...

Страница 89: ...ponding Passphrase field Priv Type The data encryption type used for the SNMP user either DES or none When DES is selected enter a key in the corresponding Passphrase field Passphrase The password or...

Страница 90: ...P users and group settings use the show snmp users or show snmp group assignments commands Enterprise AP config snmp server engine id 1a 2b 3c 4d 00 ff 6 45 Enterprise AP config snmp server user 6 45...

Страница 91: ...o configure the filter see below To edit an existing filter select the radio button next to the entry in the table and then click the Edit button To delete a filter select the radio button next to the...

Страница 92: ...use exclude entries for the required trap objects to send to the target Note that the filter entries are applied in the sequence that they are defined CLI Commands for Configuring SNMPv3 Trap Filters...

Страница 93: ...settings see below To edit an existing target select the radio button next to the entry in the table and then click the Edit button To delete targets select the radio button next to the entry in the...

Страница 94: ...er The defined SNMP v3 user that is to receive notification messages Assigned Filter The name of a user defined notification filter that is applied to the target CLI Commands for Configuring SNMPv3 Ta...

Страница 95: ...y to all eight VAP interfaces The VAPs function similar to a VLAN with each VAP mapped to its own VLAN ID Traffic to specific VAPs can be segregated based on user groups or application traffic Each VA...

Страница 96: ...to Channel Select Enables the access point to automatically select an unoccupied radio channel Default Enabled Transmit Power Adjusts the power of the radio signals transmitted from the access point T...

Страница 97: ...hen the Antenna ID is set to Default Antenna to use the access point s integrated antennas Right The radio only uses the antenna on the right side the side closest to the access point LEDs Select this...

Страница 98: ...access point can increase data throughput when using a short preamble but will only use a short preamble if it determines that all associated clients support it Beacon Interval The rate at which beaco...

Страница 99: ...256 2346 bytes Default 2346 bytes RTS Threshold Sets the packet size threshold at which a Request to Send RTS signal must be sent to a receiving station prior to the sending station starting communic...

Страница 100: ...6 87 Enter Wireless configuration commands one per line Enterprise AP if wireless g super g 6 103 Enterprise AP if wireless g channel 42 6 96 Enterprise AP if wireless g transmit power full 6 96 Ente...

Страница 101: ...nabled the VAP interface does not include its SSID in beacon messages Nor does it respond to probe requests from clients that do not include a fixed SSID Default Disable Authentication Timeout Interva...

Страница 102: ...ess the 802 11b g radio interface From the 802 11b g interface mode you can access radio settings that apply to all VAP interfaces To access a specific VAP interface numbered 0 to 7 use the vap comman...

Страница 103: ...e periodic scanning for other access points Default Disable AP Scan Interval Sets the time between each rogue AP scan Range 30 10080 minutes Default 720 minutes AP Scan Duration Sets the length of tim...

Страница 104: ...ications with audio and video are particularly sensitive to the delay and throughput variations that result from this equal opportunity wireless access method For multimedia applications to run well o...

Страница 105: ...e higher the AC priority the higher the probability that data is transmitted When the access point forwards traffic WMM adds data packets to four independent transmit queues one for each AC depending...

Страница 106: ...after every collision up to a maximum value CWMax After a successful transmission the CW value is reset to its CWMin value Figure 5 1 WMM Backoff Wait Times For high priority traffic the AIFSN and CW...

Страница 107: ...Radio Interface 5 61 5...

Страница 108: ...er limit of the random backoff wait time before wireless medium access can be attempted The initial wait time is a random value between zero and the CWMin value Specify the CWMin value in the range 0...

Страница 109: ...he access point The wmm acknowledge policy command is used to enable or disable a policy for each access category The wmmparms command defines detailed WMM parameters Enterprise AP if wireless g wmm r...

Страница 110: ...shold 2347 bytes Beacon Interval 100 TUs Authentication Timeout Interval 60 Mins Association Timeout Interval 30 Mins DTIM Interval 1 beacon Maximum Association 64 stations MIC Mode Software Super A D...

Страница 111: ...TXOP Limit 0 000 ms AC2 Video logCwMin 3 logCwMax 4 AIFSN 2 Admission Control No TXOP Limit 3 008 ms AC3 Voice logCwMin 2 logCwMax 3 AIFSN 2 Admission Control No TXOP Limit 1 504 ms WMM AP Parameters...

Страница 112: ...r each virtual access point VAP interface MAC address filtering and RADIUS server settings are global and apply to all VAP interfaces The security mechanisms that may be employed depend on the level o...

Страница 113: ...ecurity in small networks Requires manual management of pre shared key WPA2 with 802 1X Requires WPA enabled system and network card driver native support provided in Windows XP Provides the strongest...

Страница 114: ...face Detail Settings Authentication Shared Key or Open System Encryption Enable 802 1x Disable Local RADIUS or Disabled Yesc Dynamic WEP 802 1x only Interface Detail Settings Authentication Open Syste...

Страница 115: ...hentication rates Local or Disabled Yes WPA2 Pre Shared Key only Interface Detail Settings Authentication WPA2 PSK Encryption Enable WPA Clients Required Cipher Suite AES CCMP 802 1x Disable WPA Pre s...

Страница 116: ...ings select Security under Radio G set an SSID to identify the wireless network service provided by each VAP you want to use and then click Apply to save your settings Before enabling the radio servic...

Страница 117: ...nd cannot be recommended for a high level of network security For more robust wireless security the access point provides Wi Fi Protected Access WPA for improved data encryption and user authenticatio...

Страница 118: ...nt with clients using static WEP keys and WPA select WEP transmit key index 2 3 or 4 The access point uses transmit key index 1 for the generation of dynamic keys To enable WEP shared keys for a VAP i...

Страница 119: ...I in order to enable all types of encryption WEP TKIP or AES in the access point CLI Commands for WEP Shared Key Security To enable WEP shared key security for the 802 11g interface use the interface...

Страница 120: ...e AP if wireless g VAP 0 exit Enterprise AP show interface wireless g 0 6 107 Wireless Interface Information Identification Description SMC 802 11g Access Point SSID SMC_G 0 Channel 11 AUTO Status DIS...

Страница 121: ...30 min 802 1x Session Timeout Value 0 min Antenna Antenna Control method Diversity Antenna ID 0x0000 Default Antenna Antenna Location Indoor Quality of Service WMM Mode SUPPORTED WMM Acknowledge Poli...

Страница 122: ...CwMax 10 AIFSN 7 Admission Control No TXOP Limit 0 000 ms AC2 Video logCwMin 3 logCwMax 4 AIFSN 1 Admission Control No AC3 Voice logCwMin 2 logCwMax 3 AIFSN 1 Admission Control No TXOP Limit 1 504 ms...

Страница 123: ...with a master temporal key for each user session and then mathematically generates other keys to encrypt each data packet TKIP provides further data encryption enhancements by including a message int...

Страница 124: ...A2 clients to associate to a common SSID interface In mixed mode the unicast encryption cipher TKIP or AES CCMP is negotiated for each client The access point advertises its supported encryption ciphe...

Страница 125: ...eeds directly to key exchange and association To configure WPA click Security under Radio G Select one of the VAP interfaces by clicking More Select one of the WPA options in the Authentication Setup...

Страница 126: ...hentication WPA2 PSK Clients using WPA2 with a Pre shared Key are accepted for authentication WPA WPA2 mixed Clients using WPA or WPA2 over 802 1X are accepted for authentication WPA WPA2 PSK mixed Cl...

Страница 127: ...in example Table 5 4 WPA Configuration Settings WPA and WPA2 pre shared key only WPA and WPA2 over 802 1X Encryption Enabled Authentication Setup WPA PSK WPA2 PSK or WPA WPA2 mixed WPA Cipher Mode WE...

Страница 128: ...cation Protocol EAP to pass user credentials either digital certificates user names and passwords or other from the client to the RADIUS server Client authentication is then verified on the RADIUS ser...

Страница 129: ...after successful wireless association with the access point The 802 1X supported mode allows access for clients not using WPA or WPA2 security Required The access point enforces 802 1X authentication...

Страница 130: ...splay the current settings use the show authentication command from the Exec mode Enterprise AP if wireless g VAP 0 802 1X supported 6 64 Enterprise AP if wireless g VAP 0 802 1X broadcast key refresh...

Страница 131: ...lays basic system configuration settings as well as the settings for the wireless interface Menu Description Page AP Status Displays configuration settings for the basic system and the wireless interf...

Страница 132: ...ist on other network segments HTTP Server Shows if management access via HTTP is enabled HTTP Server Port Shows the TCP port used by the HTTP interface Version Shows the version number for the runtime...

Страница 133: ...AP System Location System Contact Contact System Country Code US UNITED STATES MAC Address 00 13 F7 1C 33 66 MAC Address 00 13 F7 1C 33 66 Radio G MAC Address 00 13 F7 1C 33 67 IP Address 192 168 2 2...

Страница 134: ...ns as described below Note that this page is automatically refreshed every five seconds Station Address The MAC address of the wireless client Authenticated Shows if the station has been authenticated...

Страница 135: ...n is completed stations can associate with the current access point or reassociate with a new access point The association procedure allows the wireless system to track the location of each mobile cli...

Страница 136: ...0 802 11g Channel Auto No 802 11g Channel Stations if wireless G VAP 1 802 11g Channel Auto No 802 11g Channel Stations No 802 11g Channel Stations if wireless g VAP 7 802 11g Channel Auto No 802 11g...

Страница 137: ...Error Messages An example of a logged error message is Station Failed to authenticate unsupported algorithm This message may be caused by any of the following conditions Access point was set to Open A...

Страница 138: ...4 State Disabled 4 0 0 0 0 UDP Port 514 State Disabled Enterprise AP Enterprise AP show event log 6 32 Mar 09 11 57 55 Information 802 11g 11g Radio Interface Enabled Mar 09 11 57 55 Information 802 1...

Страница 139: ...y commands to complete your desired tasks 3 When finished exit the session with the exit command After connecting to the system through the console port the login screen displays Caution The CLI examp...

Страница 140: ...access mode i e Exec 3 Enter the necessary commands to complete your desired tasks 4 When finished exit the session with the quit or exit command After entering the Telnet command the login screen dis...

Страница 141: ...Exec Global Configuration or Interface You can also display a list of valid keywords for a specific command For example the command show displays a list of possible show commands The command show inte...

Страница 142: ...tory of commands by pressing the up arrow key Any command displayed in the history list can be executed again or first modified and then executed Using the show history command displays a longer list...

Страница 143: ...erface Wireless Configuration IC W These commands modify the wireless port configuration of global parameters for the radio and include commands such as channel and transmit power Interface Wireless V...

Страница 144: ...right one character Ctrl K Deletes from cursor to the end of the command line Ctrl L Repeats current command line on a new line Ctrl N Enters the next command line in the history buffer Ctrl P Shows t...

Страница 145: ...rameters 6 82 Ethernet Interface Configures connection parameters for the Ethernet interface 6 87 Wireless Interface Configures radio interface settings 6 92 Wireless Security Configures radio interfa...

Страница 146: ...ault Setting None Command Mode Exec Example Related Commands end 6 8 end This command returns to the previous configuration mode Default Setting None Command Mode Global Configuration Interface Config...

Страница 147: ...e reached The following are some results of the ping command Normal response The normal response occurs in one to ten seconds depending on network traffic Destination does not respond If the host does...

Страница 148: ...always run the Power On Self Test Example This example shows how to reset the system show history This command shows the contents of the command history buffer Default Setting None Command Mode Exec C...

Страница 149: ...evice Designation prompt Customizes the command line prompt GC 6 14 system name Specifies the host name for the access point GC 6 14 snmp server contact Sets the system contact string GC 6 40 snmp ser...

Страница 150: ...on the access point GC 6 19 System Status show system Displays system information Exec 6 22 show version Displays version information for the system Exec 6 23 show config Displays detailed configurat...

Страница 151: ...BR Iceland IS New Zealand NZ Turkey TR Brunei Darussalam BN India IN Norway NO Ukraine UA Bulgaria BG Indonesia ID Qatar QA United Arab Emirates AE Canada CA Iran IR Oman OM United Kingdom GB Chile C...

Страница 152: ...ring to use for the CLI prompt Maximum length 32 characters Default Setting Enterprise AP Command Mode Global Configuration Example system name This command specifies or modifies the system name for t...

Страница 153: ...rd After initially logging onto the system you should set the password Remember to record it in a safe place Use the no form to reset the default password Syntax password password no password password...

Страница 154: ...enerate host encryption keys The SSH server is disabled while the keys are being generated The show system command displays the status of the SSH server Example ip ssh server port This command sets th...

Страница 155: ...port This command specifies the TCP port number used by the web browser interface Use the no form to use the default port Syntax ip http port port number no ip http port port number The TCP port to b...

Страница 156: ...no form to restore the default port Syntax ip https port port_number no ip https port port_number The UDP port used for HTTPS SSL Range 80 1024 65535 Default Setting 443 Command Mode Global Configurat...

Страница 157: ...pendently If you enable HTTPS you must indicate this in the URL https device port_number When you start HTTPS the connection is established in this way The client authenticates the server using the se...

Страница 158: ...t interface on the access point from an invalid address the unit will reject the connection enter an event message in the system log and send a trap message to the trap manager IP address can be confi...

Страница 159: ...or disables the selected management access method Default Setting All enabled Command Mode Global Configuration Example This example restricts management access to the indicated addresses show apmage...

Страница 160: ...de US UNITED STATES MAC Address 00 13 F7 1C 33 66 Radio A MAC Address 00 13 F7 1C 33 66 Radio G MAC Address 00 13 F7 1C 33 67 IP Address 192 168 2 2 Subnet Mask 255 255 255 0 Default Gateway 0 0 0 0 V...

Страница 161: ...ardware version R0A Enterprise AP Enterprise AP show config Authentication Information MAC Authentication Server DISABLED MAC Auth Session Timeout Value 0 min 802 1x supplicant DISABLED 802 1x supplic...

Страница 162: ...g Transmit Power 100 16 dBm Data Rate 54Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs DTIM Interval 1 beacon Maximum Association 64 stations Native VLAN ID 1...

Страница 163: ...0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC format no delimiter Radius VLAN format HEX Radius Secondary Server Information IP 0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC forma...

Страница 164: ...emUp Enabled SNTP Information Service State Disabled SNTP server 1 IP 137 92 140 80 SNTP server 2 IP 192 43 244 18 Current Time 00 14 Jan 1st 1970 Time Zone 5 BOGOTA EASTERN INDIANA Daylight Saving Di...

Страница 165: ...Enterprise AP Table 6 6 System Logging Commands Command Function Mode Page logging on Controls logging of error messages GC 6 28 logging host Adds a syslog server host IP address that will receive lo...

Страница 166: ...t are stored in memory Example logging host This command specifies syslog servers host that will receive logging messages Use the no form to remove syslog server host Syntax logging host 1 2 3 4 host_...

Страница 167: ...ult Setting Disabled Command Mode Global Configuration Example logging level This command sets the minimum severity level for event logging Syntax logging level Emergency Alert Critical Error Warning...

Страница 168: ...ate service Range 16 23 Default Setting 16 Command Mode Global Configuration Level Argument Description Emergency System unusable Alert Immediate action needed Critical Critical conditions e g memory...

Страница 169: ...Syntax logging clear Command Mode Global Configuration Example show logging This command displays the logging configuration Syntax show logging Command Mode Exec Example Enterprise AP config logging...

Страница 170: ...09 11 55 52 Information SSH task Enable SSH server Mar 09 11 55 52 Information Enable Telnet Mar 09 11 55 40 Information 802 11g Transmit Power set to QUARTER Press n next p previous a abort y contin...

Страница 171: ...s enabled using the sntp server enable command the sntp server ip command specifies the time servers from which the access point polls for time updates The access point will poll the time servers in t...

Страница 172: ...e Related Commands sntp server ip 6 33 show sntp 6 36 sntp server date time This command sets the system clock Default Setting 00 14 00 January 1 1970 Command Mode Global Configuration Example This ex...

Страница 173: ...the specified period Example This sets daylight savings time to be used from July 1st to September 1st sntp server timezone This command sets the time zone for the access point s internal clock Syntax...

Страница 174: ...urs and minutes your time zone is east before or west after of UTC Example show sntp This command displays the current time and configuration settings for the SNTP client Command Mode Exec Example Ent...

Страница 175: ...nt s DHCP relay agent Use the no form to disable the agent Syntax no dhcp relay enable Default Setting Disabled Command Mode Global Configuration Command Usage For the DHCP relay agent to function the...

Страница 176: ...r ip_address IP address of the server Default Setting Primary and secondary 0 0 0 0 Command Mode Global Configuration Example show dhcp relay This command displays the current DHCP relay configuration...

Страница 177: ...cations GC 6 43 snmp server engine id Sets the engine ID for SNMP v3 GC 6 45 snmp server user Sets the name of the SNMP v3 user GC 6 45 snmp server targets Configures SNMP v3 notification targets GC 6...

Страница 178: ...tations are able to both retrieve and modify MIB objects Default Setting public Read only access Authorized management stations are only able to retrieve MIB objects private Read write access Authoriz...

Страница 179: ...255 characters Default Setting None Command Mode Global Configuration Example Related Commands snmp server contact 6 40 snmp server enable server This command enables SNMP management access and also...

Страница 180: ...community string no snmp server host 1 First SNMP host 2 Second SNMP host 3 Third SNMP host 4 Fourth SNMP host host_ip_address IP of the host the targeted recipient host_name Name of the host Range 1...

Страница 181: ...d The access point s configuration file has been changed dot11StationAssociation A client station has successfully associated with the access point dot11StationReAssociation A client station has succe...

Страница 182: ...ss iappContextDataSent A client station s Context Data has been sent to another access point with which the station has associated sntpServerFail The access point has failed to set the time from the c...

Страница 183: ...ering this command invalidates all engine IDs that have been previously configured If the engineID is deleted or changed all SNMP users will be cleared You will need to reconfigure all existing users...

Страница 184: ...MD5 and DES key passwords must be defined The command prompts for the following information to configure an SNMP v3 user user name A user defined string for the SNMP user 32 characters maximum group...

Страница 185: ...ions Currently only version 3 is supported in this command udp port The UDP port that is used on the receiving management station for notifications notification type The type of notification that is s...

Страница 186: ...oint allows up to 10 notification filters to be created Each filter can be defined by up to 20 MIB subtree ID entries Use the command more than once with the same filter ID to build a filter that incl...

Страница 187: ...rs filter id A user defined name that identifies an SNMP v3 notification filter Maximum length 32 characters Default Setting None Command Mode Global Configuration Example show snmp groups This comman...

Страница 188: ...ser group assignments Syntax show snmp group assignments Command Mode Exec Enterprise AP show snmp groups GroupName RO SecurityModel USM SecurityLevel NoAuthNoPriv GroupName RWAuth SecurityModel USM S...

Страница 189: ...A user defined name that identifies an SNMP v3 notification filter Maximum length 32 characters Command Mode Exec Example Enterprise AP show snmp group assignments GroupName RWPriv UserName chris Ente...

Страница 190: ...filter assignments This command displays the SNMP v3 notification filter assignments Syntax show snmp filter assignments Command Mode Exec Example Enterprise AP show snmp filter assignments HostID Fi...

Страница 191: ...abled systemDown Enabled radiusServerChanged Enabled configFileVersionChanged Enabled sntpServerFail Enabled dot11StationAssociation Enabled dot11StationReAssociation Enabled dot11StationAuthenticatio...

Страница 192: ...um length for file names is 32 characters Valid characters A Z a z 0 9 _ If the file contains an error it cannot be set as the default file Example Table 6 10 Flash File Commands Command Function Mode...

Страница 193: ...ation file from flash memory Default Setting None Command Mode Exec Command Usage The system prompts for data required to complete the copy command Only a configuration file can be uploaded to an FTP...

Страница 194: ...e files in flash memory and the one used to boot the access point is deleted be sure you first use the bootfile command to update the application image file booted at startup before you reboot the acc...

Страница 195: ...urrent operation code file that booted the system Syntax show snmp filter assignments Command Mode Exec Example Column Heading Description File Name The name of the file Type 2 Operation Code and 5 Co...

Страница 196: ...s Default Setting None Table 6 11 RADIUS Client Command Function Mode Page radius server address Specifies the RADIUS server GC 6 58 radius server port Sets the RADIUS server network port GC 6 59 radi...

Страница 197: ...ple radius server key This command sets the RADIUS encryption key Syntax radius server secondary key key_string secondary Secondary server key_string Encryption key used to authenticate logon access f...

Страница 198: ...lobal Configuration Example radius server timeout This command sets the interval between transmitting authentication requests to the RADIUS server Syntax radius server secondary timeout number_of_seco...

Страница 199: ...RADIUS accounting session is automatically started for each user that is successfully authenticated to the access point Example radius server timeout interim This command sets the interval between tr...

Страница 200: ...MAC addresses in the form xxxxxx xxxxxx Default Setting No delimiter Command Mode Global Configuration Example radius server vlan format This command sets the format for specifying VLAN IDs on the RA...

Страница 201: ...0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Accounting Port 0 Disabled InterimUpdate 3600 Accounting Server State DOWN Radius MAC format no delimiter Radius VLAN format HEX Radius Secondary Server In...

Страница 202: ...authentication process Uses standard 802 11 authentication for all others required Requires 802 1X authentication for all clients Default Setting Disabled Table 6 12 802 1X Authentication Command Func...

Страница 203: ...If 802 1X authentication is not initiated by the station the access point will initiate authentication Only those stations successfully authenticated with 802 1X are allowed to access the network 802...

Страница 204: ...sion key Range 0 1440 minutes Default Setting 0 Disabled Command Mode Global Configuration Command Usage Session keys are unique to each client and are used to authenticate a client connection and cor...

Страница 205: ...can be enabled Example 802 1x supplicant user This command sets the user name and password used for authentication of the access point when operating as a 802 1X supplicant Use the no form to clear th...

Страница 206: ...ec Example Enterprise AP config 802 1x supplicant user WA6102 dot1xpass Enterprise AP config Enterprise AP show authentication Authentication Information MAC Authentication Server DISABLED MAC Auth Se...

Страница 207: ...y MAC addresses entered as allowed in the address filtering table are allowed Default allowed Command Mode Global Configuration Example Table 6 13 MAC Address Authentication Command Function Mode Page...

Страница 208: ...Mode Global Configuration Command Mode The access point supports up to 1024 MAC addresses An entry in the address table may be allowed or denied access depending on the global setting configured for t...

Страница 209: ...reless clients with the RADIUS server during 802 1X authentication Default Disabled Command Mode Global Configuration Example Related Commands address filter entry 6 70 radius server address 6 58 802...

Страница 210: ...Mode Enterprise AP config mac authentication session timeout 1 Enterprise AP config Table 6 14 Filtering Commands Command Function Mode Page filter local bridge Disables communication between wireless...

Страница 211: ...interface on the access point Use the no form to disable this filtering Syntax filter ap manage no filter ap manage Default Enabled Command Mode Global Configuration Example filter uplink enable This...

Страница 212: ...mple filter ethernet type enable This command checks the Ethernet type on all incoming and outgoing Ethernet packets against the protocol filtering table Use the no form to disable this feature Syntax...

Страница 213: ...ump Load DEC MOP DEC LAT Ethertalk Appletalk ARP Novell IPX old Novell IPX new EAPOL Telxon TXP Aironet DDP Enet Config Test IP IPv6 NetBEUI PPPoE_Discovery PPPoE_PPP_Session Default None Command Mode...

Страница 214: ...Filters Protocol ARP ISO 0x0806 Enterprise AP Command Function Mode Page bridge role Selects the bridge operation mode for a radio interface IC W 6 77 bridge link parent Configures the MAC addresses...

Страница 215: ...page 6 77 When the access point is operating in this mode traffic is not forwarded to the Ethernet port from the radio interface Up to six WDS bridge links MAC addresses can be specified for each unit...

Страница 216: ...ndex number of the child node Range 1 6 mac address The wireless MAC address of a child bridge unit 12 hexadecimal digits in the form xx xx xx xx xx xx Default Setting None Command Mode Interface Conf...

Страница 217: ...seconds Command Mode Global Configuration Command Usage If the MAC address of an entry in the address table is not seen on the associated interface for longer than the aging time the entry is discarde...

Страница 218: ...erprise AP show bridge filter entry max entry numbers 512 current entry nums 13 Bridge MAC Addr Table MAC Port Fwd_type VlanID origin life remain Life Type 01 80 c2 00 00 00 0 5 4095 300 300 Static 01...

Страница 219: ...d priority 0 path cost 19 message age Timer Inactive message age 4469 designated root priority 32768 MAC 00 30 F1 F0 9A 9C designated cost 0 designated bridge priority 32768 MAC 00 30 F1 F0 9A 9C desi...

Страница 220: ...e Page bridge stp enable Enables the Spanning Tree feature GC 6 82 bridge stp forwarding delay Configures the spanning tree bridge forward time GC 6 83 bridge stp hello time Configures the spanning tr...

Страница 221: ...must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to the discarding s...

Страница 222: ...sage before attempting to reconfigure All device ports except for designated ports should receive configuration messages at regular intervals Any port that ages out STP information provided in the las...

Страница 223: ...r the port Range 1 65535 Default Setting 19 Command Mode Interface Configuration Command Usage This command is used by the Spanning Tree Protocol to determine the best path between devices Therefore l...

Страница 224: ...ds bridge link path cost 6 85 show bridge stp This command displays aging time and spanning tree settings for the Ethernet and wireless interfaces Syntax show bridge stp Command Mode Exec Example Ente...

Страница 225: ...mmand Function Mode Page interface ethernet Enters Ethernet interface configuration mode GC 6 87 dns primary server Specifies the primary name server IC E 6 88 dns secondary server Specifies the secon...

Страница 226: ...servers are queried in sequence Example This example specifies two domain name servers Related Commands show interface ethernet 6 91 ip address This command sets the IP address for the access point U...

Страница 227: ...ll not be accepted by the configuration program Example Related Commands ip dhcp 6 89 ip dhcp This command enables the access point to obtain an IP address from a DHCP server Use the no form to restor...

Страница 228: ...ntax speed duplex auto 10MH 10MF 100MF 100MH auto autonegotiate speed and duplex mode 10MH Forces 10 Mbps half duplex operation 10MF Forces 10 Mbps full duplex operation 100MH Forces 100 Mbps half dup...

Страница 229: ...o disable the Ethernet port due to abnormal behavior e g excessive collisions and reenable it after the problem has been resolved You may also want to disable the Ethernet port for security reasons Ex...

Страница 230: ...terface configuration mode IC W 6 94 speed Configures the maximum data rate at which the access point transmits unicast packets IC W 6 95 turbo Configures turbo mode to use a faster data rate IC W a 7...

Страница 231: ...description Adds a description to the wireless interface IC W VAP 6 103 ssid Configures the service set identifier IC W VAP 6 104 closed system Opens access to clients without a pre configured SSID IC...

Страница 232: ...e 802 11g interface enter the following command vap This command provides access to the VAP Virtual Access Point interface configuration mode Syntax vap vap id vap id The number that identifies the VA...

Страница 233: ...longer the transmission distance Please refer to the table for maximum distances on page C 5 Example multicast data rate This command configures the maximum data rate at which the access point transmi...

Страница 234: ...regulations which determine the number of channels that are available When multiple access points are deployed in the same area be sure to choose a channel separated by at least five channels for 802...

Страница 235: ...b g b b only mode Both 802 11b and 802 11g clients can communicate with the access point but 802 11g clients can only transfer data at 802 11b standard rates up to 11 Mbps g g only mode Only 802 11g c...

Страница 236: ...support all 802 11b and 802 11g clients Example antenna control This command selects the use of two diversity antennas or a single antenna for the radio interface Note This access point does not supp...

Страница 237: ...a id antenna id Specifies the ID number of an approved antenna that is connected to the access point Range 0x0000 0xFFFF Default Setting 0x0000 built in antennas Command Mode Interface Configuration W...

Страница 238: ...the country of operation Example beacon interval This command configures the rate at which beacon signals are transmitted from the access point Syntax beacon interval interval interval The rate for t...

Страница 239: ...us frames with broadcast multicast information The default value of 2 indicates that the access point will save all broadcast multicast frames for the Basic Service Set BSS and forward them after ever...

Страница 240: ...erhead to send multiple frames Example rts threshold This command sets the packet size threshold at which a Request to Send RTS signal must be sent to the receiving station prior to the sending statio...

Страница 241: ...ion Wireless 802 11g Command Usage These enhancements include bursting compression fast frames and dynamic turbo Maximum throughput ranges between 40 to 60 Mbps for connections to Atheros compatible c...

Страница 242: ...e as that of the access point Example closed system This command prohibits access to clients without a pre configured SSID Use the no form to disable this feature Syntax closed system no closed system...

Страница 243: ...which the client is disassociated from the VAP interface Syntax assoc timeout interval minutes minutes The number of minutes of inactivity before disassociation Range 5 60 Default Setting 30 Command M...

Страница 244: ...reless interface Use the no form to restart the interface Syntax shutdown no shutdown Default Setting Interface enabled Command Mode Interface Configuration Wireless VAP Command Usage You must first e...

Страница 245: ...UTO Status Disable 802 11 Parameters Transmit Power FULL 13 dBm Max Station Data Rate 54Mbps Multicast Data Rate 5 5Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100...

Страница 246: ...int can be configured to periodically scan all radio channels and find other access points within range A database of nearby access points is maintained where any rogue APs can be identified Enterpris...

Страница 247: ...is a reason to believe that more intensive scanning is required to find a rogue AP A rogue AP is either an access point that is not authorized to participate in the wireless network or an access point...

Страница 248: ...ss point that it finds against a RADIUS server to determine whether the access point is allowed With authentication disabled the access point can identify its neighboring access points only it cannot...

Страница 249: ...nterval 6 111 rogue ap interval This command sets the interval at which to scan for access points Syntax rogue ap interval minutes minutes The interval between consecutive scans Range 30 10080 minutes...

Страница 250: ...nd a rogue AP Example show rogue ap This command displays the current rogue AP database Command Mode Exec Example Enterprise AP if wireless g rogue ap scan Enterprise AP if wireless g rogueApDetect Co...

Страница 251: ...Clients using WPA with a Pre shared Key are accepted for authentication wpa2 Clients using WPA2 are accepted for authentication Table 6 19 Wireless Security Commands Command Function Mode Page auth De...

Страница 252: ...ork If a WPA WPA2 mode that operates over 802 1X is selected WPA WPA2 WPA WPA2 mixed or WPA WPA2 PSK mixed the 802 1X settings see 802 1X Authentication on page 6 64 and RADIUS server details see RADI...

Страница 253: ...116 encryption This command enables data encryption for wireless communications Use the no form to disable data encryption Syntax encryption no encryption Default Setting disabled Command Mode Interf...

Страница 254: ...ireless Command Usage To enable Wired Equivalent Privacy WEP use the auth shared key command to select the shared key authentication type use the encryption command to enable data encryption use the k...

Страница 255: ...roadcast data signals that it sends to client devices Other keys can be used for decryption of data from clients When using IEEE 802 1X the access point uses a dynamic key to encrypt unicast and broad...

Страница 256: ...ny clients supported by the access point are not WPA enabled the multicast cipher algorithm must be set to WEP WEP is the first generation security protocol used to encrypt data crossing the wireless...

Страница 257: ...C Syntax mic_mode hardware software hardware Uses hardware to calculate the MIC software Uses software to calculate the MIC Default Setting software Command Mode Interface Configuration Wireless Comma...

Страница 258: ...command to specify the authentication type and use the wpa preshared key command to specify one static key If WPA or WPA2 is used with pre shared key mode all wireless clients must be configured with...

Страница 259: ...command enables WPA2 pre authentication for fast secure roaming Syntax pre authentication enable disable enable Enables pre authentication for the VAP interface disable Disables pre authentication for...

Страница 260: ...nterfaces forcing clients to find and associate with another access point When the connection to the host is restored the access point re enables the radio interfaces Enterprise AP if wireless g VAP 0...

Страница 261: ...the number of failed responses either the host does not respond or is unreachable exceeds the limit set by the link integrity ping fail retry command the link is determined as lost Example link integ...

Страница 262: ...s before the link is determined as lost Syntax link integrity ping fail retry counts counts The number of failed Ping counts before the link is determined as lost Range 1 10 Default Setting 6 Command...

Страница 263: ...guration Command Mode Exec Example Enterprise AP config link integrity ethernet detect Notification Ethernet Link Detect SUCCESS RADIO S ENABLED Enterprise AP config Enterprise AP show link integrity...

Страница 264: ...oaming between different 802 11f compliant access points Use the no form to disable 802 11f signaling Syntax no iapp Default Enabled Command Mode Global Configuration Command Usage The current 802 11...

Страница 265: ...does not include a VLAN tag To maintain network connectivity to the access point and wireless clients be sure that the access point is connected to a device port on a wired network that supports IEEE...

Страница 266: ...vlan id vlan id Management VLAN ID Range 1 4094 Default Setting 1 Command Mode Global Configuration Command Usage The management VLAN is for managing the access point For example the access point allo...

Страница 267: ...WMM Commands The access point implements QoS using the Wi Fi Multimedia WMM standard Using WMM the access point is able to prioritize traffic and optimize performance when multiple applications compet...

Страница 268: ...owledge policy This command allows the acknowledgement wait time to be enabled or disabled for each Access Category AC Syntax wmm acknowledge policy ac_number ack noack ac_number Access categories Ran...

Страница 269: ...contention window This is the initial upper limit of the random backoff wait time before wireless medium access can be attempted The initial wait time is a random value between zero and the LogCwMin...

Страница 270: ...MM Parameters AC0 Best Effort AC1 Background AC2 Video AC3 Voice LogCwMin 4 4 3 2 LogCwMax 10 10 4 3 AIFS 3 7 2 2 TXOP Limit 0 0 94 47 Admission Control Disabled Disabled Disabled Disabled BSS Paramet...

Страница 271: ...ice Set ESS are configured to the same SSID and authentication method 2 If the access point cannot be configured using the Telnet a web browser or SNMP software Be sure to have configured the access p...

Страница 272: ...y pressing the reset button on the back panel for 5 seconds or more Then use the default user name admin and default password smcadmin to access the management interface 5 If all other recovery measur...

Страница 273: ...The following figure illustrates how the pins on the RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins 10 100BASE TX Pin Assignm...

Страница 274: ...Table B 1 10 100BASE TX MDI Port Pinouts Pin MDI Signal Name 1 Transmit Data plus TD 2 Transmit Data minus TD 3 Receive Data plus RD 4 GND Positive Vport 5 GND Positive Vport 6 Receive Data minus RD...

Страница 275: ...Assignments The DB 9 console port on the front panel of the access point is used to connect to the access point for out of band console configuration The command line configuration program can be acc...

Страница 276: ...ed 5 GND ground 5 GND ground 6 Unused 9 Unused 7 RTS request to send 8 CTS clear to send 8 CTS clear or send 7 RTS request to send 9 Unused 6 Unused Note The left hand column pin assignments are for t...

Страница 277: ...2 5 5 11 Mbps per channel Modulation Type 802 11g CCK BPSK QPSK OFDM 802 11b CCK BPSK QPSK Network Configuration Infrastructure Operating Frequency 802 11b 2 4 2 4835 GHz US Canada ETSI 2 4 2 497 GHz...

Страница 278: ...nk Ethernet Link Activity 11g Wireless Link Activity Network Management Web browser RS232 console Telnet SSH SNMP Temperature Operating 0 to 50 C 32 to 122 F Storage 0 to 70 C 32 to 158 F Humidity 15...

Страница 279: ...85 24 Mbps 81 36 Mbps 77 48 Mbps 72 54 Mbps 70 IEEE 802 11b Data Rate Sensitivity dBm 1 Mbps 93 2 Mbps 90 5 5 Mbps 90 11 Mbps 87 IEEE 802 11g Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467...

Страница 280: ...108 Mbps N A 22 N A IEEE 802 11b Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467 2 472 1 Mbps 19 20 22 2 Mbps 19 20 22 5 5 Mbps 19 20 22 11 Mbps 19 20 22 IEEE 802 11g Maximum Output Power GHz...

Страница 281: ...ructions between the access point and clients Table C 1 802 11g Wireless Distance Table Speed and Distance Ranges Environment 54 Mbps 48 Mbps 36 Mbps 24 Mbps 18 Mbps 12 Mbps 11 Mbps 9 Mbps 6 Mbps 5 Mb...

Страница 282: ...Specifications C 6 C...

Страница 283: ...tion algorithm that implements symmetric key cryptography AES provides very strong encryption using a completely different ciphering algorithm to TKIP and WEP Authentication The process to verify the...

Страница 284: ...ervice Set ESS More than one wireless cell can be configured with the same Service Set Identifier to allow mobile users can roam between different cells with the Extended Service Set Extensible Authen...

Страница 285: ...he physical layer address used to uniquely identify network nodes Network Time Protocol NTP NTP provides the mechanisms to synchronize time across the network The time servers operate in a hierarchica...

Страница 286: ...icate a client connection and correlate traffic passing between a specific client and the access point Shared Key A shared key can be used to authenticate each client attached to a wireless network Sh...

Страница 287: ...sical location or connection point in the network A VLAN serves as a logical workgroup with no physical barriers and allows users to share information and resources as though located on the same LAN W...

Страница 288: ...Glossary 6 Glossary...

Страница 289: ...nfiguring 6 40 community string 5 39 6 40 configuration settings saving or restoring 5 31 6 55 configuration initial setup 4 1 console port 1 4 connecting 2 2 pin assignments B 3 required settings 4 1...

Страница 290: ...ring 5 82 6 64 infrastructure wireless bridge 3 5 wireless repeater 3 6 initial setup 4 1 installation hardware 2 1 mounting 2 1 IP address BOOTP DHCP 6 88 6 89 configuring 4 2 5 5 6 88 6 89 L LED ind...

Страница 291: ...on 5 39 6 42 trap manager 5 39 6 42 SNTP 5 35 6 33 enabling client 5 35 6 33 server 5 35 6 33 software displaying version 5 29 5 85 6 23 downloading 5 31 6 55 specifications C 1 SSH server Status 5 11...

Страница 292: ...ex 4 W WEP 5 71 configuring 5 71 shared key 5 72 6 116 Wi Fi Multimedia See WMM Wi Fi Protected Access See WPA Wired Equivalent Protection See WEP WPA 5 77 pre shared key 5 80 6 120 WPA pre shared key...

Страница 293: ......

Страница 294: ...EUTSCH Technischer Support und weitere Information unter www smc com SPANISH En www smc com Ud podr encontrar la informaci n relativa a servicios de soporte t cnico DUTCH Technische ondersteuningsinfo...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды