SMC Networks 2555W-AG Скачать руководство пользователя страница 181

Страница: 181 / 260

802.1x Port Authentication

6-53

broadcast-key-refresh-rate

command specifies the

interval after which the broadcast keys are changed. The

802.1x session-key-refresh-rate

command specifies the

interval after which unicast session keys are changed.

• Dynamic broadcast key rotation allows the access point to

generate a random group key and periodically update all
key-management capable wireless clients.

Example

802.1x session-key-refresh-rate

This command sets the interval at which unicast session keys are
refreshed for associated stations using dynamic keying.

Syntax

802.1x

session-key-refresh-rate

rate>

rate

- The interval at which the access point refreshes a session

key. (Range: 0 - 1440 minutes)

Default Setting

0 (Disabled)

Command Mode

Global Configuration

Command Usage

Session keys are unique to each client, and are used to
authenticate a client connection, and correlate traffic passing
between a specific client and the access point.

Example

SMC-AP(config)#802.1x broadcast-key-refresh-rate 5
SMC-AP(config)#

SMC-AP(config)#802.1x session-key-refresh-rate 5
SMC-AP(config)#

Содержание 2555W-AG

Страница 1: ...SMC2555W AG...

Страница 2: ......

Страница 3: ...38 Tesla Irvine CA 92618 Phone 949 679 8000 EliteConnect Universal 2 4GHz 5GHz Wireless Access Point User Guide The easy way to make all your network connections April 2004 Revision Number R02 F3 0 02...

Страница 4: ...ts use No license is granted by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Copyright 2004 by SMC Netwo...

Страница 5: ...discretion replace an older product in its product line with one that incorporates these newer technologies At that point the obsolete product is discontinued and is no longer an Active SMC product A...

Страница 6: ...REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD LIMITATION OF LIABILITY IN NO EVENT WHETHER BASED IN CONTRACT OR TORT INCLUDING NEGLIGENCE...

Страница 7: ...ich the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance...

Страница 8: ...ital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled Digital Apparatus ICES 003 of Indu...

Страница 9: ...s as described below Note The user must use the configuration utility provided with this product to ensure the channels of operation are in conformance with the spectrum usage rules for European Commu...

Страница 10: ...complies with European requirements The current setting for this feature is found in the 5 GHz 802 11a Radio Settings Window as described in the user guide This device is restricted to indoor use whe...

Страница 11: ...ormity in Languages of the European Allowed 5GHz Channels in Each European Community Country Allowed Frequency Bands Allowed Channel Numbers Countries 5 15 5 25 GHz 36 40 44 48 Austria Belgium 5 15 5...

Страница 12: ...res dispositions pertinentes de la directive 1999 5 CE Swedish H rmed intygar SMC Networks att denna Radio LAN device st r I verensst mmelse med de v sentliga egenskapskrav och vriga relevanta best mm...

Страница 13: ...y disconnecting the power cord from the outlet This unit operates under SELV Safety Extra Low Voltage conditions according to IEC 60950 The conditions are only maintained if the equipment to which it...

Страница 14: ...ast 10 A The attachment plug must be an earth grounding type with NEMA 5 15P 15 A 125 V or NEMA 6 15P 15 A 250 V configuration Denmark The supply plug must comply with Section 107 2 D1 Standard DK2 1a...

Страница 15: ...es conditions ne sont maintenues que si l quipement auquel il est raccord fonctionne dans les m mes conditions France et P rou uniquement Ce groupe ne peut pas tre aliment par un dispositif imp dance...

Страница 16: ...u einen gem EN 60320 IEC 320 konfigurierten Ger teeingang haben Die Netzsteckdose mu in der N he des Ger ts und leicht zug nglich sein Die Stromversorgung des Ger ts kann nur durch Herausziehen des Ge...

Страница 17: ...G Der typ SV oder SJ 3 Leiter Der Cord mu haben eine strombelastbarkeit aus wenigstens 10 A Dieser Stromstecker mu hat einer erdschluss mit der typ NEMA 5 15P 15A 125V oder NEMA 6 15P 15A 250V konfigu...

Страница 18: ...COMPLIANCES xiv...

Страница 19: ...cture Wireless LAN 3 3 Infrastructure Wireless LAN for Roaming Wireless PCs 3 4 4 Initial Configuration 4 1 Initial Setup through the CLI 4 1 Required Connections 4 1 Initial Configuration Steps 4 3 U...

Страница 20: ...ords and Arguments 6 3 Minimum Abbreviation 6 4 Command Completion 6 4 Getting Help on Commands 6 4 Partial Keyword Lookup 6 5 Negating the Effect of Commands 6 6 Using Command History 6 6 Understandi...

Страница 21: ...timezone 6 32 show sntp 6 32 show system 6 33 show version 6 34 SNMP Commands 6 35 snmp server community 6 35 snmp server contact 6 36 snmp server enable server 6 37 snmp server host 6 38 snmp server...

Страница 22: ...filter local bridge 6 60 filter ap manage 6 61 filter ethernet type enable 6 62 filter ethernet type protocol 6 63 show filters 6 64 Interface Commands 6 64 interface 6 68 dns server 6 68 ip address 6...

Страница 23: ...native vlanid 6 101 A Troubleshooting A 1 Maximum Distance Table A 4 B Cables and Pinouts B 1 Twisted Pair Cable Assignments B 1 10 100BASE TX Pin Assignments B 2 Straight Through Wiring B 3 Crossove...

Страница 24: ...TABLE OF CONTENTS xx...

Страница 25: ...net LAN In addition the access point offers full network management capabilities through an easy to configure web interface a command line interface for initial configuration and troubleshooting and s...

Страница 26: ...s Point SMC2555W AG One Category 5 network cable One RS 232 console cable One 5 1 VDC power adapter and power cord Four rubber feet One mounting bracket Three mounting screws One Documentation CD This...

Страница 27: ...Hardware Description 1 3 Hardware Description Front Panel Rear Panel Antennas Indicator Panel Security Slot Console Port RJ 45 Port PoE Connector Reset Button 5 VDC Power Socket...

Страница 28: ...page 2 3 Note You can install an optional SMC 2 4 GHz high gain antenna for 802 11b and or 802 11g clients in the socket on the right antenna Also remember to order the jumper cable SMC2555W JMPRCBL t...

Страница 29: ...is proportional to your network activity 11a On Indicates a valid 802 11a wireless link Very Slow Flashing Searching for network association Slow Flashing Associated with network but no activity Fast...

Страница 30: ...or router that provide MDI X ports However when connecting the access point to a workstation or other device that does not have MDI X ports you must use crossover twisted pair cable The access point a...

Страница 31: ...the IEEE 802 3af standard Note that if the access point is connected to a PoE source device and also connected to a local power source through the AC power adapter PoE will be disabled Features and Be...

Страница 32: ...tallations and open areas where wiring is difficult to employ Frequently changing environments Retailers manufacturers and banks that frequently rearrange the workplace or change location Temporary LA...

Страница 33: ...eature Parameter Default Identification System Name Enterprise AP Administration User Name admin Password smcadmin General HTTP Server Enabled HTTP Server Port 80 TCP IP DHCP Enabled IP Address 192 16...

Страница 34: ...Session Key Refresh 0 minutes disabled Reauthentication Refresh Rate 0 seconds disabled VLAN Native VLAN ID 1 VLAN Tag Support Disabled Filter Control Local Bridge Disabled Local Management Disabled...

Страница 35: ...tem Logging Syslog Disabled Logging Host Disabled Logging Console Disabled IP Address Host Name 0 0 0 0 Logging Level Informational Logging Facility Type 16 Ethernet Interface Speed and Duplex Auto Fe...

Страница 36: ...imum Data Rate 54 Mbps Beacon Interval 100 TUs Data Beacon Rate DTIM Interval 2 beacons RTS Threshold 2347 bytes Wireless Security 802 11a Authentication Type Open System WEP Encryption Disabled WEP K...

Страница 37: ...it Power Full Maximum Data Rate 54 Mbps Beacon Interval 100 TUs Data Beacon Rate DTIM Interval 2 beacons RTS Threshold 2347 bytes Wireless Security 802 11b g Authentication Type Open System WEP Encryp...

Страница 38: ...Introduction 1 14...

Страница 39: ...ing on the surface attach the four rubber feet provided in the accessory kit to the embossed circles on the bottom of the access point Mounting on a wall The access point should be mounted only to a w...

Страница 40: ...4 Lock the Access Point in Place To prevent unauthorized removal of the access point you can use a Kensington Slim MicroSaver security cable not included to attach the access point to a fixed object...

Страница 41: ...gh a network device such as a hub or a switch Connect your network to the RJ 45 port on the back panel with category 3 4 or 5 UTP Ethernet cable When the access point and the connected device are powe...

Страница 42: ...ing the stronger signal to communicate with a wireless client 9 Connect the Console Port Connect the console cable included to the RS 232 console port for accessing the command line interface You can...

Страница 43: ...11b and 802 11g frequency band which operates at 2 4 GHz can easily encounter interference from other 2 4 GHz devices such as other 802 11b or g wireless devices cordless phones and microwave ovens I...

Страница 44: ...of computers each equipped with a wireless adapter connected via radio signals as an independent wireless LAN Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio...

Страница 45: ...access other computers or network resources in the wired LAN infrastructure via the access point The infrastructure configuration not only extends the accessibility of wireless PCs to the wired LAN bu...

Страница 46: ...rames sent between the access point and its clients to identify traffic in the service area The BSS ID is only set by the access point never by its clients The clients only need to set the Service Set...

Страница 47: ...tinuous coverage area is created wireless users within this ESS can roam freely All SMC wireless network card adapters and SMC2555W AG wireless access points within a specific ESS must be configured w...

Страница 48: ...Network Configuration 3 6...

Страница 49: ...address is not compatible with your network you can first use the command line interface CLI as described below to configure a valid address Note Units sold in countries outside the United States are...

Страница 50: ...to none Set the emulation mode to VT100 When using HyperTerminal select Terminal keys not Windows keys Note When using HyperTerminal with Microsoft Windows 2000 make sure that you have Windows 2000 Se...

Страница 51: ...isable DHCP client mode Then type ip address ip address netmask gateway where ip address is the access point s IP address netmask is the network mask for the network and gateway is the default gateway...

Страница 52: ...pe exit to leave configuration mode Then type country to display the list of countries Select the code for your country and enter the country command again following by your country code e g IE for Ir...

Страница 53: ...ed Management Setup Wizard 4 5 Logging In Enter the username admin the password smcadmin and click LOGIN For information on configuring a user name and password refer to page 5 27 The home page displa...

Страница 54: ...zard on the home page then click on the Next button to start the process 1 Service Set ID Enter the service set identifier in the SSID box which all wireless clients must use to associate with the acc...

Страница 55: ...1a Turbo Mode If you select Enable the access point will operate in turbo mode with a data rate of up to 108 Mbps Normal mode support 13 channels Turbo mode supports only 5 channels Default Disable 80...

Страница 56: ...nfiguration Protocol DHCP for automatic IP configuration If you disable DHCP then manually enter the IP address and subnet mask If a management station exists on another network segment then you must...

Страница 57: ...he access point by the network DHCP server Default Enable Note If there is no DHCP server on your network then the access point will automatically start up with its default IP address 192 168 2 2 4 Cl...

Страница 58: ...Initial Configuration 4 10...

Страница 59: ...in Chapter 4 to set up an IP address for the SMC2555W AG The SMC2555W AG can be managed by any computer using a web browser Enter the default IP address http 192 168 2 2 To log into the SMC2555W AG en...

Страница 60: ...ers 5 6 Radius Configures the RADIUS server for wireless client authentication 5 10 Authentication Configures 802 1x client authentication with an option for MAC address authentication 5 14 Filter Con...

Страница 61: ...s WPA 5 50 WPA Configures advanced encryption and authentication with Wi Fi Protected Access WPA 5 57 Radio Interface 2 Configures the IEEE 802 11b g interface 5 40 Radio Settings Configures radio sig...

Страница 62: ...network service provided by the SMC2555W AG Only clients with the same SSID can associate with the access point System Name An alias for the access point enabling the device to be uniquely identified...

Страница 63: ...config system name R D 6 20 SMC AP config interface wireless a 6 68 SMC AP if wireless a ssid r d 6 79 SMC AP if wireless a end 6 12 SMC AP show system 6 33 System Information Serial Number A324003220...

Страница 64: ...work By default the SMC2555W AG will be automatically configured with IP settings from a Dynamic Host Configuration Protocol DHCP server However if you are not using a DHCP server to configure IP addr...

Страница 65: ...server Default Enable DHCP Client Disable Select this option to manually configure a static address for the access point IP Address The IP address of the access point Valid IP addresses consist of fou...

Страница 66: ...dress as all zeros 0 0 0 0 Primary and Secondary DNS Address The IP address of Domain Name Servers on the network A DNS maps numerical IP addresses to domain names and can be used to identify network...

Страница 67: ...rface ethernet command from the Exec mode to display the current IP settings SMC AP config interface ethernet 6 68 Enter Ethernet configuration commands one per line SMC AP if ethernet no ip dhcp 6 71...

Страница 68: ...be specified for the SMC2555W AG to implement IEEE 802 1x network access control and Wi Fi Protected Access WPA wireless security A secondary RADIUS server may also be specified as a backup should the...

Страница 69: ...ault 1812 Key A shared text string used to encrypt messages between the access point and the RADIUS server Be sure that the same text string is specified on the RADIUS server Do not use blank spaces i...

Страница 70: ...s Server Setup Configure a secondary RADIUS server to provide a backup in case the primary server fails The access point uses the secondary server if the primary server fails or becomes inaccessible O...

Страница 71: ...s command from the Exec mode to display the current settings for the primary and secondary RADIUS servers SMC AP config radius server address 192 168 1 25 6 46 SMC AP config radius server port 181 6 4...

Страница 72: ...check other user credentials such as a user name and password MAC Authentication You can configure a list of the MAC addresses for wireless clients that are authorized to access the network This prov...

Страница 73: ...igured to allow or deny network access to specific clients System Default Specifies a default action for all unknown MAC addresses that is those not listed in the local MAC database Deny Blocks access...

Страница 74: ...unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point You can also enable broadcast key rotation so the access point provides a dy...

Страница 75: ...freshes unicast session keys for associated clients Range 0 1440 minutes Default 0 means disabled 802 1x Re authentication Refresh Rate The time period after which a connected client must be re authen...

Страница 76: ...ig address filter default denied 6 54 SMC AP config address filter entry 00 70 50 cc 99 1a denied 6 55 SMC AP config address filter entry 00 70 50 cc 99 1b allowed SMC AP config address filter entry 0...

Страница 77: ...ation session timeout 300 6 58 SMC AP config exit SMC AP show authentication 6 59 Authentication Information MAC Authentication Server REMOTE MAC Auth Session Timeout Value 300 secs 802 1x DISABLED Br...

Страница 78: ...802 1x broadcast key refresh rate 5 6 52 SMC AP config 802 1x session key refresh rate 5 6 53 SMC AP config 802 1x session timeout 300 6 54 SMC AP config exit SMC AP show authentication 6 59 Authenti...

Страница 79: ...guration VLAN Enables or disables VLAN tagging support on the SMC2555W AG If enabled the access point will tag traffic passing from wireless clients to the wired network with the VLAN ID associated wi...

Страница 80: ...ess point assigns the user to its own configured native VLAN ID When setting up VLAN IDs for each user on the RADIUS server be sure to use the RADIUS attributes and values as indicated in the followin...

Страница 81: ...tween clients through the access point Enable Blocks wireless to wireless communications between clients through the access point AP Management Filter Controls management access to the SMC2555W AG fro...

Страница 82: ...mand SMC AP config native vlanid 3 6 101 SMC AP config vlan enable 6 100 Reboot system now y n y SMC AP show system 6 33 System Information Serial Number A324003220 System Up time 0 days 0 hours 32 mi...

Страница 83: ...r ethernet type protocol command to define the protocols that you want to filter To remove an entry from the table use the address filter delete command To display the current settings use the show fi...

Страница 84: ...manually or dynamically Once an IP address has been configured appropriate SNMP communities and trap receivers should be configured Community names are used to control management access to SNMP stati...

Страница 85: ...as read only access Authorized management stations are only able to retrieve MIB objects Maximum length 23 characters case sensitive Community Name Read Write Defines the SNMP community access string...

Страница 86: ...t command defines a trap receiver host To view the current SNMP settings use the show snmp command SMC AP config snmp server enable server 6 37 SMC AP config snmp server community alpha rw 6 35 SMC AP...

Страница 87: ...nd password are not configured then anyone having access to the access point may be able to compromise access point and network security Note Pressing the Reset button on the back of the SMC2555W AG f...

Страница 88: ...onfiguration 5 30 CLI Commands for the User Name and Password Use the username and password commands from the CLI configuration mode SMC AP config username bob 6 21 SMC AP config password smcadmin 6 2...

Страница 89: ...G to implement the new code Until a reboot occurs the SMC2555W AG will continue to run the software it was using before the upgrade started After rebooting the access point with new software we advise...

Страница 90: ...oint from a wireless client the VLAN ID for the wireless client must be configured on a RADIUS server Current version Version number of runtime code Firmware Upgrade Local Downloads an operation code...

Страница 91: ...e of FTP or TFTP server Username The user ID used for login on an FTP server Password The password used for login on an FTP server Restore Factory Settings Click the Restore button to reset the config...

Страница 92: ...present in the access point file system To run the new software use the reset board command to reboot the access point SMC AP copy tftp file 6 42 1 Application image 2 Config file 3 Boot block image S...

Страница 93: ...with the correct time and date Enabling System Logging The SMC2555W AG supports a logging process that can control error messages saved to memory or sent to a Syslog server The logged messages serve...

Страница 94: ...sages saved in the access point s memory are erased when the device is rebooted CLI Commands for System Logging To enable logging on the access point use the logging on command from the global configu...

Страница 95: ...default set at the last bootup The SMC2555W AG acts as an SNTP client periodically sending time synchronization requests to specific time servers You can configure up to two time server IP addresses T...

Страница 96: ...based on the time at the Earth s prime meridian zero degrees longitude To display a time corresponding to your local time you must indicate the number of hours your time zone is located before east or...

Страница 97: ...light saving 6 31 Enter Daylight saving from which month 1 12 3 and which day 1 31 31 Enter Daylight saving end to which month 1 12 10 and which day 1 31 31 SMC AP config exit SMC AP show sntp 6 32 SN...

Страница 98: ...l The access point can operate in several different radio modes IEEE 802 11a only 802 11b only 802 11g only 802 11b g only or a mixed 802 11a b g mode Also note that 802 11g is backward compatible wit...

Страница 99: ...de provides connections up to 54 Mbps Turbo Mode is an enhanced mode not regulated in IEEE 802 11a that provides a higher data rate of up to 108 Mbps Enabling Turbo Mode allows the SMC2555W AG to prov...

Страница 100: ...l 60 for normal mode and channel 42 for Turbo mode Auto Channel Select Enables the access point to automatically select an unoccupied radio channel Default Enabled SSID Broadcast The SSID broadcast ca...

Страница 101: ...which is necessary to wake up stations that are using Power Save mode The default value of 2 indicates that the access point will save all broadcast multicast frames for the Basic Service Set BSS and...

Страница 102: ...nfigure a name for the interface using the description command Use the turbo command to enable this feature before setting the radio channel with the channel command Set any other parameters as requir...

Страница 103: ...1 Parameters Transmit Power FULL 17 dBm Max Station Data Rate 9Mbps Fragmentation Threshold 512 bytes RTS Threshold 256 bytes Beacon Interval 150 TUs DTIM Interval 5 beacons Maximum Association 32 sta...

Страница 104: ...Enable Enables radio communications on the SMC2555W AG Default Enabled Radio Channel The radio channel that the access point uses to communicate with wireless clients When multiple access points are d...

Страница 105: ...be automatically selected based on best signal reception i e Diversity mode or will be fixed to use an optional high gain antenna attached to the right side of the access point Use the SMC2555W JMPRCB...

Страница 106: ...g radio settings use the show interface wireless g command SMC AP config interface wireless g 6 68 Enter Wireless configuration commands one per line SMC AP if wireless g description RD AP 3 6 75 SMC...

Страница 107: ...Transmit Power FULL 14 dBm Max Station Data Rate 6Mbps Fragmentation Threshold 512 bytes RTS Threshold 256 bytes Beacon Interval 150 TUs DTIM Interval 5 beacons Maximum Association 32 stations Securit...

Страница 108: ...ecurity you have to implement two main functions Authentication It must be verified that clients attempting to connect to the network are authorized users Traffic Encryption Data passing between the a...

Страница 109: ...P Provides dynamic key rotation for improved WEP security Requires configured RADIUS server 802 1x EAP type may require management of digital certificates for clients and server MACAddress Filtering U...

Страница 110: ...imal or alphanumeric strings that are manually distributed to all clients that want to use the network WEP is the security protocol initially specified in the IEEE 802 11 standard for wireless communi...

Страница 111: ...other security mechanism on the access point the network has no protection and is open to all users This is the default setting Shared Key Sets the access point to use WEP shared keys If this option i...

Страница 112: ...four keys configured to the same values you can change the encryption key to any of the four settings without having to update the client keys Note Key index and type must match that configured on th...

Страница 113: ...P if wireless g authentication shared 6 83 SMC AP if wireless g encryption 128 6 84 SMC AP if wireless g multicast cipher wep 6 89 SMC AP if wireless g key 1 128 ascii abcdeabcdeabc 6 85 SMC AP if wir...

Страница 114: ...current 802 11g security settings use the show interface wireless g command not shown in example Security Closed System DISABLED Multicast cipher WEP WPA clients SUPPORTED WPA Key Mgmt Mode PRE SHARE...

Страница 115: ...r user authentication and dynamic key management The 802 1x client and RADIUS server should use an appropriate EAP type such as EAP TLS Transport Layer Security EAP TTLS Tunneled TLS or PEAP Protected...

Страница 116: ...a RADIUS authentication server to be configured on the wired network However for small office networks that may not have the resources to configure and maintain a RADIUS server WPA provides a simple o...

Страница 117: ...specified AES as an eventual replacement for TKIP and WEP However because of the difference in ciphering algorithms AES requires new hardware support in client network cards that is currently not wide...

Страница 118: ...s supported by all wireless clients WEP WEP is the first generation security protocol used to encrypt data crossing the wireless medium using a fairly short key Communicating devices must use the same...

Страница 119: ...hexadecimal or alphanumeric key and then use the wpa preshared key command to define the key Then disable 802 1x and MAC WPA pre shared key only WPA over 802 1x Authentication Type Open System WEP en...

Страница 120: ...show interface wireless g command not shown in example SMC AP config interface wireless g 6 68 Enter Wireless configuration commands one per line SMC AP if wireless g authentication open 6 83 SMC AP...

Страница 121: ...ays basic system configuration settings as well as the settings for the wireless interface Menu Description Page AP Status Displays configuration settings for the basic system and the wireless interfa...

Страница 122: ...rver Shows if management access via HTTP is enabled HTTP Server Port Shows the TCP port used by the HTTP interface Firmware Version Shows the version number for the runtime code AP Wireless Configurat...

Страница 123: ...show system 6 33 System Information Serial Number A324003220 System Up time 0 days 4 hours 39 minutes 46 seconds System Name Enterprise AP System Location System Contact Contact System Country Code U...

Страница 124: ...e MAC address of the wireless client Authenticated Shows if the station has been authenticated The two basic methods of authentication supported for 802 11 wireless networks are open system and shared...

Страница 125: ...arded to the appropriate access point Forwarding Allowed Shows if the station has passed 802 1x authentication and is now allowed to forward traffic to the access point Key Type Displays the current k...

Страница 126: ...l The logging level associated with this message For a description of the various levels see logging level on page 5 35 Event Message The content of the log message Error Messages An example of a logg...

Страница 127: ...the same the frame will be decrypted incorrectly using the wrong algorithm and sequence number CLI Commands for Displaying the Event Logs From the global configuration mode use the show logging comman...

Страница 128: ...System Configuration 5 70...

Страница 129: ...ing the access point s command line interface CLI is very similar to entering commands on a UNIX system Console Connection To access the access point through the console port perform these steps 1 At...

Страница 130: ...parated by periods Each address consists of a network portion and host portion For example if the access point cannot acquire an IP address from a DHCP server the default IP address used by the access...

Страница 131: ...commands to complete your desired tasks 4 When finished exit the session with the quit or exit command After entering the Telnet command the login screen displays Note You can open up to four sessions...

Страница 132: ...ill prompt for further input Command Completion If you terminate input with a Tab key the CLI will print the remaining characters of a partial keyword up to the point of ambiguity In the configure exa...

Страница 133: ...words starting with s SMC AP show authentication Show Authentication parameters bootfile Show bootfile name filters Show filters hardware Show hardware version history Display the session history inte...

Страница 134: ...ist can be executed again or first modified and then executed Using the show history command displays a longer list of recently executed commands Understanding Command Modes The command set is divided...

Страница 135: ...commands are used to modify access point settings These commands modify the running configuration and are saved in memory The configuration commands are organized into three different modes Global Con...

Страница 136: ...case sensitive You can abbreviate commands and parameters as long as they contain enough letters to differentiate them from any other currently available commands or parameters You can use the Tab key...

Страница 137: ...current command line on a new line Ctrl U Deletes the entire line Ctrl W Deletes the last word typed Esc B Moves the cursor backward one word Esc D Deletes from the cursor to the end of the word Esc...

Страница 138: ...a variety of other system information 6 16 SNMP Configures community access strings and trap managers 6 35 Flash File Manages code image or access point configuration files 6 40 RADIUS Configures the...

Страница 139: ...t Setting None Command Mode Exec Example Related Commands end page 6 12 Command Function Mode Page configure Activates global configuration mode Exec 6 11 end Returns to Exec mode GC IC 6 12 exit Retu...

Страница 140: ...ration mode from the Interface Configuration mode exit This command returns to the Exec mode or exits the configuration program Default Setting None Command Mode Any Example This example shows how to...

Страница 141: ...eached The following are some results of the ping command Normal response The normal response occurs in one to ten seconds depending on network traffic Destination does not respond If the host does no...

Страница 142: ...ation settings to the factory defaults and then reboots the system Default Setting None Command Mode Exec Command Usage When the system is restarted it will always run the Power On Self Test Example T...

Страница 143: ...ple the show history command lists the contents of the command history buffer show line This command displays the console port s configuration settings Command Mode Exec Example The console port setti...

Страница 144: ...6 20 snmp server contact Sets the system contact string GC 6 36 snmp server location Sets the system location string GC 6 39 User Access Configures the user name and password for management access use...

Страница 145: ...ore time servers GC 6 28 sntp server enable Accepts time from the specified time servers GC 6 29 sntp server date time Manually sets the system date and time GC 6 30 sntp server daylight saving Sets t...

Страница 146: ...LB Saudi Arabia SA Argentina AR Estonia EE Liechtenstein LI Singapore SG Armenia AM Finland FI Lithuania LT Slovak Republic SK Australia AU France FR Luxembourg LU Slovenia SI Austria AT Georgia GE Ma...

Страница 147: ...t US this command is not available The available Country Code settings can be displayed by using the country command Example Chile CL Ireland IE Pakistan PK United Kingdom GB China CN Israel IL Panama...

Страница 148: ...Maximum length 255 characters Default Setting SMC Enterprise AP Command Mode Global Configuration Example system name This command specifies or modifies the system name for this device Use the no form...

Страница 149: ...mmand configures the user name for management access Syntax username name name The name of the user Length 3 16 characters case sensitive Default Setting admin Command Mode Global Configuration Exampl...

Страница 150: ...for management access Length 3 16 characters case sensitive Default Setting smcadmin Command Mode Global Configuration Example ip http port This command specifies the TCP port number used by the web...

Страница 151: ...d allows this device to be monitored or configured from a browser Use the no form to disable this function Syntax ip http server no ip http server Default Setting Enabled Command Mode Global Configura...

Страница 152: ...ontrols error messages saved to memory You can use the logging level command to control the type of error messages that are stored in memory Example logging host This command specifies a syslog server...

Страница 153: ...s command initiates logging of error messages to the console Use the no form to disable logging to the console Syntax logging console no logging console Default Setting Disabled Command Mode Global Co...

Страница 154: ...Level Argument Description Alert Immediate action needed Critical Critical conditions e g memory allocation or free memory error resource exhausted Error Error conditions e g invalid input default use...

Страница 155: ...Default Setting 16 Command Mode Global Configuration Command Usage The command specifies the facility type tag sent in syslog messages See RFC 3164 This type has no effect on the kind of messages rep...

Страница 156: ...the current list Syntax sntp server ip 1 2 ip 1 First time server 2 Second time server ip IP address of an time server NTP or SNTP Default Setting 137 92 140 80 192 43 244 18 Command Mode Global Confi...

Страница 157: ...server enable This command enables SNTP client requests for time synchronization with NTP or SNTP time servers specified by the sntp server ip command Use the no form to disable SNTP client requests S...

Страница 158: ...t Setting 00 14 00 January 1 1970 Command Mode Global Configuration Example This example sets the system clock to 17 37 June 19 2004 Related Commands sntp server enable page 6 29 SMC AP config sntp se...

Страница 159: ...ht saving Default Setting Disabled Command Mode Global Configuration Command Usage The command sets the system clock back one hour during the specified period Example This sets daylight savings time t...

Страница 160: ...d sets the local time zone relative to the Coordinated Universal Time UTC formerly Greenwich Mean Time or GMT based on the earth s prime meridian zero degrees longitude To display a time corresponding...

Страница 161: ...iguration settings Default Setting None Command Mode Exec SMC AP show sntp SNTP Information Service State Enabled SNTP server 1 IP 137 92 140 80 SNTP server 2 IP 192 43 244 18 Current Time 08 04 Jun 2...

Страница 162: ...ys 1 hours 28 minutes 9 seconds System Name Enterprise AP System Location System Contact Contact System Country Code 99 NO_COUNTRY_SET MAC Address 00 30 F1 71 D6 40 IP Address 192 168 1 1 Subnet Mask...

Страница 163: ...p server community string string Community string that acts like a password and permits access to the SNMP protocol Maximum length 23 characters case sensitive Command Function Mode Page snmp server c...

Страница 164: ...access Authorized management stations are able to both retrieve and modify MIB objects Command Mode Global Configuration Command Usage If you enter a community string without the ro or rw option the d...

Страница 165: ...le SNMP service and trap messages Syntax snmp server enable server no snmp server enable server Default Setting Enabled Command Mode Global Configuration Command Usage This command enables both authen...

Страница 166: ...ge 1 20 characters community string Password like community string sent with the notification operation Although you can set this string using the snmp server host command by itself we recommend that...

Страница 167: ...location string Syntax snmp server location text no snmp server location text String that describes the system location Maximum length 20 characters Default Setting None Command Mode Global Configurat...

Страница 168: ...mation Service State Enable Community ro Community rw Location WC 19 Contact Paul Traps Enabled Host Name IP 10 1 19 23 Trap Community SMC AP Command Function Mode Page bootfile Specifies the file or...

Страница 169: ...Default Setting None Command Mode Exec Command Usage The file name should not contain slashes or the leading letter of the file name should not be a period and the maximum length for file names is 32...

Страница 170: ...tftp ftp Keyword that allows you to copy to from an FTP server tftp Keyword that allows you to copy to from a TFTP server file Keyword that allows you to copy to from a flash memory file config Keywo...

Страница 171: ...to upload the configuration settings to a file on the TFTP server The following example shows how to download a configuration file delete This command deletes a file or image Syntax delete filename fi...

Страница 172: ...tion image file booted at startup before you reboot the access point Example This example shows how to delete the test cfg configuration file from flash memory Related Commands bootfile page 6 41 dir...

Страница 173: ...ss client that requires access to the access point SMC AP dir File Name Type File Size dflt img bin 2 1044140 syscfg 5 16860 syscfg_bak 5 16860 zz img bin 2 1044140 1048576 byte s available SMC AP Com...

Страница 174: ...Host name of server Range 1 20 characters Default Setting None Command Mode Global Configuration Example radius server port This command sets the RADIUS server network port Syntax radius server secon...

Страница 175: ...Maximum length 20 characters Default Setting DEFAULT Command Mode Global Configuration Example radius server retransmit This command sets the number of retries Syntax radius server secondary retransmi...

Страница 176: ...s to the RADIUS server Syntax radius server secondary timeout number_of_seconds secondary Secondary server number_of_seconds Number of seconds the access point waits for a reply before resending a req...

Страница 177: ...ettings for the RADIUS server Default Setting None Command Mode Exec Example SMC AP show radius Radius Server Information IP 192 168 1 25 Port 181 Key Retransmit 5 Timeout 10 Radius Secondary Server I...

Страница 178: ...C 6 51 802 1x broadcast key refresh rate Sets the interval at which the primary broadcast keys are refreshed for stations using 802 1x dynamic keying GC 6 52 802 1x session key refresh rate Sets the i...

Страница 179: ...02 1x is disabled the access point does not support 802 1x authentication for any station After successful 802 11 association each client is allowed to access the network When 802 1x is supported the...

Страница 180: ...stations successfully authenticated with 802 1x are allowed to access the network 802 1x does not apply to the 10 100Base TX port Example 802 1x broadcast key refresh rate This command sets the interv...

Страница 181: ...rate This command sets the interval at which unicast session keys are refreshed for associated stations using dynamic keying Syntax 802 1x session key refresh rate rate rate The interval at which the...

Страница 182: ...mber of seconds Range 0 65535 Default 0 Disabled Command Mode Global Configuration Example address filter default This command sets filtering to allow or deny listed MAC addresses Syntax address filte...

Страница 183: ...dress Physical address of client Enter six pairs of hexadecimal digits separated by hyphens e g 00 90 D1 12 AB 89 allowed Entry is allowed access denied Entry is denied access Default None Command Mod...

Страница 184: ...table Syntax address filter delete mac address mac address Physical address of client Enter six pairs of hexadecimal digits separated by hyphens Default None Command Mode Global Configuration Example...

Страница 185: ...Authenticate the MAC address of wireless clients with the local authentication database during 802 11 association remote Authenticate the MAC address of wireless clients with a RADIUS server during 8...

Страница 186: ...e authenticated with the RADIUS server authentication database Use the no form to disable reauthentication Syntax mac authentication session timeout seconds seconds Re authentication interval Range 0...

Страница 187: ...Authentication Information MAC Authentication Server REMOTE MAC Auth Session Timeout Value 1 secs 802 1x SUPPORTED Broadcast Key Refresh Rate 5 min Session Key Refresh Rate 5 min 802 1x Session Timeou...

Страница 188: ...iltering Syntax filter local bridge no filter local bridge Default Disabled Command Mode Global Configuration Command Function Mode Page filter local bridge Disables communication between wireless cli...

Страница 189: ...s clients and the wired network Example filter ap manage This command prevents wireless clients from accessing the management interface on the access point Use the no form to disable this filtering Sy...

Страница 190: ...s feature Syntax filter ethernet type enable no filter ethernet type enable Default Disabled Command Mode Global Configuration Command Usage This command is used in conjunction with the filter etherne...

Страница 191: ...vel 3 Banyan CDP DEC XNS DEC MOP Dump Load DEC MOP DEC LAT Ethertalk Appletalk ARP Novell IPX old Novell IPX new EAPOL Telxon TXP Aironet DDP Enet Config Test Default None Command Mode Global Configur...

Страница 192: ...ibed in this section configure connection parameters for the Ethernet port and wireless interface SMC AP show filters Protocol Filter Information Local Bridge ENABLED AP Management ENABLED Ethernet Ty...

Страница 193: ...e status for the Ethernet interface Exec 6 72 Wireless Interface radio mode Sets the radio working mode IC W 6 73 select antenna mode Selects built in antennas or optional high gain antenna IC W 6 74...

Страница 194: ...ed IC W 6 81 rts threshold Sets the packet size threshold at which an RTS must be sent to the receiving station prior to the sending station starting communications IC W 6 82 authentication Defines th...

Страница 195: ...89 wpa clients Defines whether WPA is required or optionally supported for client stations IC W 6 90 wpa mode Specifies dynamic keys or a pre shared key IC W 6 92 wpa preshared key Defines a WPA pres...

Страница 196: ...al Configuration Example To specify the 10 100Base TX network interface enter the following command dns server This command specifies the address for the primary or secondary domain name server to be...

Страница 197: ...sets the IP address for the 10 100Base TX Ethernet interface Use the no form to restore the default IP address Syntax ip address ip address netmask gateway no ip address ip address IP address netmask...

Страница 198: ...to connect the access point to existing IP subnets You can manually configure a specific IP address using this command or direct the device to obtain an address from a DHCP server using the ip dhcp co...

Страница 199: ...cific IP address using the ip address command or direct the device to obtain an address from a DHCP server using this command When you use this command the access point will begin broadcasting DHCP cl...

Страница 200: ...Ethernet Command Usage This command allows you to disable the Ethernet port due to abnormal behavior e g excessive collisions and reenable it after the problem has been resolved You may also want to...

Страница 201: ...an only transfer data at 802 11b standard rates up to 11 Mbps g g only mode Only 802 11g clients can communicate with the access point b g b g mixed mode Both 802 11b and 802 11g clients can communica...

Страница 202: ...is sent out both antennas and the antenna with the best incoming signal is used for reception right antenna The right antenna is used both for transmission and reception Use this setting when an opti...

Страница 203: ...e Range 1 80 characters Default Setting None Command Mode Interface Configuration Wireless Example ssid broadcast This command opens access to clients without a pre configured SSID Use the no form to...

Страница 204: ...ss clients Options 1 2 5 5 6 9 11 12 18 24 36 48 54 Mbps Default Setting 54 Mbps Command Mode Interface Configuration Wireless Command Usage The maximum transmission distance is affected by the data r...

Страница 205: ...nel is selected Default Setting Automatic channel selection Command Mode Interface Configuration Wireless Command Usage The available channel settings are limited by local regulations which determine...

Страница 206: ...p to 54 Mbps Turbo Mode is an enhanced mode not regulated in IEEE 802 11a that provides a higher data rate of up to 108 Mbps Enabling Turbo Mode allows the access point to provide connections up to 10...

Страница 207: ...less Command Usage Clients that want to connect to the wireless network via an access point must set their SSIDs to the same as that of the access point Example beacon interval This command configures...

Страница 208: ...val interval Interval between the beacon frames that transmit broadcast or multicast traffic Range 1 255 beacon frames Default Setting 2 Command Mode Interface Configuration Wireless Command Usage The...

Страница 209: ...n length This command configures the minimum packet size that can be fragmented when passing through the access point Syntax fragmentation length length length Minimum packet size for which fragmentat...

Страница 210: ...the sending station starting communications Syntax rts threshold threshold threshold Threshold packet size for which to send an RTS Range 0 2347 bytes Default Setting 2347 Command Mode Interface Confi...

Страница 211: ...tion open shared open Accepts the client without verifying its identity using a shared key shared Authentication is based on a shared key that has been distributed to all stations Default Setting open...

Страница 212: ...Default Setting disabled Command Mode Interface Configuration Wireless Command Usage Wired Equivalent Privacy WEP is implemented in this device to prevent unauthorized access to your wireless network...

Страница 213: ...ge 6 85 key This command sets the keys used for WEP encryption Use the no form to delete a configured key Syntax key index size type value no key index index Key index Range 1 4 size Key size Options...

Страница 214: ...ncryption command and the key command must match The encryption index length and type configured in the access point must match those configured in the clients Example Related Commands authentication...

Страница 215: ...d broadcast messages to 802 1x enabled clients However because the access point sends the WEP keys during the 802 1x authentication process these keys do not have to appear in the client s WEP key lis...

Страница 216: ...nts You also have to ensure that high strength signals do not interfere with the operation of other radio devices in your area Example max association This command configures the maximum number of cli...

Страница 217: ...must be the same for all clients This command sets the encryption type that is supported by all clients If any clients supported by the access point are not WPA enabled the multicast cipher algorithm...

Страница 218: ...as the successor to the Data Encryption Standard DES encryption algorithm and will be used by the U S government for encrypting all sensitive nonclassified information Because of its strength and resi...

Страница 219: ...integrity check an extended initialization vector with sequencing rules and a re keying mechanism Enterprise level User Authentication via 802 1x and EAP To strengthen user authentication WPA uses 802...

Страница 220: ...nt has to be WPA enabled or support 802 1x client software A RADIUS server must also be configured and be available in the wired network In the dynamic mode keys are generated for each wireless client...

Страница 221: ...Configuration Wireless Command Usage To support Wi Fi Protected Access WPA for client authentication use the wpa clients command to specify the authentication type use the wpa mode command to specify...

Страница 222: ...tting HEX Command Mode Interface Configuration Wireless Example Related Commands wpa preshared key page 6 93 shutdown This command disables the wireless interface Use the no form to restart the interf...

Страница 223: ...interface wireless This command displays the status for the wireless interface Syntax show interface wireless a g a 802 11a radio interface g 802 11g radio interface Command Mode Exec SMC AP if wirel...

Страница 224: ...rameters Transmit Power FULL 5 dBm Max Station Data Rate 54Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs DTIM Interval 2 beacons Maximum Association 64 stati...

Страница 225: ...is command shows the wireless clients associated with the access point Command Mode Exec Example SMC AP show station 802 11g Station Table Station Address 00 04 E2 41 C2 9D Authenticated TRUE Associat...

Страница 226: ...s roaming between different 802 11f compliant access points Use the no form to disable 802 11f signaling Syntax iapp no iapp Default Enabled Command Mode Global Configuration Command Usage The current...

Страница 227: ...ust be configured on the RADIUS server for each user authorized to access the network If a user does not have a configured VLAN ID the access point assigns the user to its own configured native VLAN I...

Страница 228: ...ID configured for each client on the RADIUS server If the VLAN ID has not been configured for a client on the RADIUS server then the frames are tagged with the access point s native VLAN ID Traffic en...

Страница 229: ...are enabled on the access point a VLAN ID a number between 1 and 4095 can be assigned to each client after successful authentication using IEEE 802 1x and a central RADIUS server If a wireless client...

Страница 230: ...Command Line Interface 6 102...

Страница 231: ...authentication is being performed through a RADIUS server ensure that the clients are properly configured on the RADIUS server If authentication is being performed through IEEE 802 1x be sure the wire...

Страница 232: ...reless interface that you are using has not been disabled If you are connecting to the access point through the wired Ethernet interface check the network cabling between the management station and th...

Страница 233: ...nagement interface 5 If all other recovery measures fail and the access point is still not functioning properly take any of these steps Reset the access point s hardware using the console interface we...

Страница 234: ...tdoors1 30 m 99 ft 40 m 131 ft 85 m 279 ft 250 m 820 ft 310 m 1016 ft 400 m 1311 ft 445 m 1459 ft 455 m 1492 ft 465 m 1525 ft 510 m 1672 ft Indoors2 15 m 49 5 ft 20 m 66 ft 25 m 82 ft 35 m 115 ft 40 m...

Страница 235: ...o different colors For example one wire might be green and the other green with white stripes Also an RJ 45 connector must be attached to both ends of the cable Caution Each wire pair must be attached...

Страница 236: ...must use crossover cables for connections to PCs or servers and straight through cable for connections to switches or hubs However when connecting to devices that support automatic MDI MDI X pinout c...

Страница 237: ...ust use crossover cable for network connections to PCs servers or other end nodes that only have MDI ports However if the device to which you are connecting supports auto MDIX operation you can use ei...

Страница 238: ...erial Cable Signal serial port Pin Signal management console port Unused 1 Unused TXD transmit data 2 RXD receive data RXD receive data 3 TXD transmit data Unused 4 Unused GND ground 5 GND ground Unus...

Страница 239: ...DB 9 Ports Serial Cable Signal Directions for DB 25 Ports DB 9 to DB 9 AP Terminal or PC 1 2 3 4 5 6 7 8 9 1 2 3 4 5 6 7 8 9 DB 9 to DB 25 AP Terminal or PC 1 2 3 4 5 6 7 8 9 8 3 2 20 7 6 4 5 22 Rese...

Страница 240: ...Cables and Pinouts B 6...

Страница 241: ...10 13 MKK 1 14 Maximum Clients 64 Operating Range See Maximum Distance Table on page A 4 Data Rate 802 11a Normal Mode 6 9 12 18 24 36 48 54 Mbps per channel Turbo Mode 12 18 24 36 48 72 96 108 Mbps p...

Страница 242: ...volts 0 2A 9 6 watts Note Power can also be provided to the access point through the Ethernet port based on IEEE 802 3af Power over Ethernet PoE specifications When both PoE is provided and the adapt...

Страница 243: ...nal Certification FCC Part 15 247 2 4GHz FCC part 15 15 407 b CISPR 22 96 RSS 210 Canada EN 55022 EN55024 EN 300 328 EN 300 826 EN 61000 3 2 EN61000 3 3 ETSI300 328 ETS 300 826 802 11b MPT RCR std 33...

Страница 244: ...7 87 QPSK 12 Mbps 86 86 86 86 QPSK 18 Mbps 84 84 84 84 16 QAM 24 Mbps 82 81 81 81 16 QAM 36 Mbps 80 79 78 78 64 QAM 48 Mbps 73 73 73 73 64QAM 54 Mbps 70 70 69 67 IEEE 802 11g Data Rate Sensitivity dBm...

Страница 245: ...17 17 17 17 36 Mbps 17 17 17 17 48 Mbps 17 17 17 17 54 Mbps 12 17 17 16 IEEE 802 11g Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467 2 472 6 Mbps 20 20 18 9 Mbps 20 20 18 12 Mbps 20 20 18 18...

Страница 246: ...Specifications C 6...

Страница 247: ...ed network support the creation of multiple radio cells that enable roaming throughout a facility Ad Hoc A group of computers connected as an independent wireless network without an access point Advan...

Страница 248: ...roadcast keys are sent to stations using 802 1x dynamic keying Dynamic broadcast key rotation is often used to allow the access point to generate a random group key and periodically update all key man...

Страница 249: ...er Ethernet A popular local area data communications network which accepts transmission from computers and terminals File Transfer Protocol FTP A TCP IP protocol used for file transfer Hypertext Trans...

Страница 250: ...s also backward compatible with IEEE 802 11b IEEE 802 1x Port Authentication controls access to the switch ports by requiring users to first enter a user ID and password for authentication Infrastruct...

Страница 251: ...ng ODFM OFDM allows multiple users to transmit in an allocated band by dividing the bandwidth into many narrow bandwidth carriers Power over Ethernet PoE A specification for providing both power and d...

Страница 252: ...o authenticate each client attached to a wireless network Shared Key authentication must be used along with the 802 11 Wireless Equivalent Privacy algorithm Simple Network Management Protocol SNMP The...

Страница 253: ...the same LAN Wi Fi Protected Access WPA employs 802 1x as its basic framework for user authentication and dynamic key management to provide an enhanced security solution for 802 11 wireless networks W...

Страница 254: ...Glossary Glossary 8...

Страница 255: ...ity string 5 27 6 35 configuration settings saving or restoring 5 33 6 42 configuration initial setup 4 1 console port 1 6 connecting 2 4 pin assignments B 4 required settings 4 2 country code configu...

Страница 256: ...5 40 configuring interface 5 46 6 68 maximum data rate 5 47 6 76 radio channel 5 46 6 77 IEEE 802 1x 5 57 6 50 configuring 5 16 6 50 initial setup 4 1 installation hardware 2 1 mounting 2 1 IP addres...

Страница 257: ...ystem 5 33 6 14 RTS threshold 5 43 5 44 6 82 S security options 5 50 5 51 session key 5 16 5 17 6 53 shared key 5 54 6 85 Simple Network Management Protocol See SNMP Simple Network Time Protocol See S...

Страница 258: ...38 troubleshooting A 1 U upgrading software 5 31 6 42 user name manager 5 29 6 21 user password 5 29 6 21 6 22 V VLAN configuration 5 21 6 100 native ID 5 21 6 101 W WEP 5 52 6 84 configuring 5 52 5 5...

Страница 259: ......

Страница 260: ...32 Fax 33 0 41 38 01 58 Italy 39 0 335 5708602 Fax 39 02 739 14 17 Benelux 31 33 455 72 88 Fax 31 33 455 73 30 Central Europe 49 0 89 92861 0 Fax 49 0 89 92861 230 Nordic 46 0 868 70700 Fax 46 0 887...

Результаты поиска

Содержание 2555W-AG

Отзывы:

Бренды по названию

Популярные бренды

SMC Networks 2555W-AG, Руководство пользователя

Результаты поиска

Содержание 2555W-AG

Отзывы:

Бренды по названию

Популярные бренды