manualshive.com logo in svg

SMC Networks 2555W-AG2, Руководство пользователя, Страница: 264 / 308

Поделиться
Скачать
SMC Networks 2555W-AG2 Скачать руководство пользователя страница 264

Command Line Interface

7-116

7

show rogue-ap

This command displays the current rogue AP database.

Command Mode 

Exec

Example 

Wireless Security Commands

The commands described in this section configure parameters for wireless security 
on the 802.11a and 802.11g interfaces.

Enterprise AP#show rogue-ap

802.11a Channel : Rogue AP Status
AP Address(BSSID)            SSID   Channel(MHz) RSSI Type Privacy RSN
======================================================================

802.11g Channel : Rogue AP Status
AP Address(BSSID)            SSID   Channel(MHz) RSSI Type Privacy RSN
======================================================================
00-04-e2-2a-37-23         WLAN1AP   11(2462 MHz)   17  ESS       0   0
00-04-e2-2a-37-3d             ANY    7(2442 MHz)   42  ESS       0   0
00-04-e2-2a-37-49         WLAN1AP    9(2452 MHz)   42  ESS       0   0
00-90-d1-08-9d-a7         WLAN1AP    1(2412 MHz)   12  ESS       0   0
00-30-f1-fb-31-f4            WLAN    6(2437 MHz)   16  ESS       0   0
Enterprise AP#

Table 7-19. Wireless Security Commands

Command

Function

Mode

Page

auth

Defines the 802.11 authentication type allowed by the 

access point

IC-W-VAP

7-120

encryption 

Defines whether or not WEP encryption is used to 

provide privacy for wireless communications

IC-W-VAP

7-119

key 

Sets the keys used for WEP encryption

IC-W

7-120

transmit-key

Sets the index of the key to be used for encrypting 

data frames sent between the access point and 

wireless clients

IC-W-VAP

7-121

cipher-suite

Selects an encryption method for the global key used 

for multicast and broadcast traffic

IC-W-VAP

7-122

mic_mode

Specifies how to calculate the Message Integrity 

Check (MIC)

IC-W

7-123

wpa-pre-shared- key 

Defines a WPA preshared-key value

IC-W-VAP

7-124

Содержание 2555W-AG2

Страница 1: ...USER GUIDE EliteConnectTM Universal 802 11a g 2 4GHz 5GHz Wireless Access Point SMC2555W AG2...

Страница 2: ...rvine CA 92618 Phone 949 679 8000 EliteConnect SMC2555W AG2 Universal 2 4GHz 5GHz Wireless Dual Band Access Point The easy way to make all your network connections October 2008 Pub 149100033500E E1020...

Страница 3: ...ed by implication or otherwise under any patent or patent rights of SMC SMC reserves the right to change specifications at any time without notice Copyright 2008 by SMC Networks Inc 20 Mason Irvine CA...

Страница 4: ...become the property of SMC Replacement products may be either new or reconditioned Any replaced or repaired product carries either a 30 day limited warranty or the remainder of the initial warranty wh...

Страница 5: ...WITH THE SALE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF ITS PRODUCTS EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME STATES D...

Страница 6: ...vi...

Страница 7: ...that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution Any changes or modifications not expressly approved by the party responsible for...

Страница 8: ...e met Industry Canada Class B This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entit...

Страница 9: ...or European Community countries as described below This device requires that the user or installer properly enter the current country of operation in the command line interface as described in the use...

Страница 10: ...ettings Window as described in the user guide This device is restricted to indoor use when operated in the European Community using the 5 15 5 35 GHz band Channels 36 40 44 48 52 56 60 64 See table be...

Страница 11: ...cument Allowed 5GHz Channels in Each European Community Country Allowed Frequency Bands Allowed Channel Numbers Countries 5 15 5 25 GHz 36 40 44 48 Austria Belgium 5 15 5 35 GHz 36 40 44 48 52 56 60 6...

Страница 12: ...igences essentielles et aux autres dispositions pertinentes de la directive 1999 5 CE Swedish H rmed intygar SMC att denna Radio LAN device st r I verensst mmelse med de v sentliga egenskapskrav och v...

Страница 13: ...Voltage conditions according to IEC 60950 The conditions are only maintained if the equipment to which it is connected also operates under SELV conditions The PoE Power over Ethernet which is to be in...

Страница 14: ...least 10 A The attachment plug must be an earth grounding type with NEMA 5 15P 15 A 125 V or NEMA 6 15P 15 A 250 V configuration Denmark The supply plug must comply with Section 107 2 D1 Standard DK2...

Страница 15: ...950 Ces conditions ne sont maintenues que si l quipement auquel il est raccord fonctionne dans les m mes conditions France et P rou uniquement Ce groupe ne peut pas tre aliment par un dispositif imp d...

Страница 16: ...teeingang haben Die Netzsteckdose mu in der N he des Ger ts und leicht zug nglich sein Die Stromversorgung des Ger ts kann nur durch Herausziehen des Ger tenetzkabels aus der Netzsteckdose unterbroche...

Страница 17: ...ne strombelastbarkeit aus wenigstens 10 A Dieser Stromstecker mu hat einer erdschluss mit der typ NEMA 5 15P 15A 125V oder NEMA 6 15P 15A 250V konfiguration Danemark Dieser Stromstecker mu die ebene 1...

Страница 18: ...COMPLIANCES xii...

Страница 19: ...2 Ad Hoc Wireless LAN no Access Point 4 2 Infrastructure Wireless LAN 4 3 Infrastructure Wireless LAN for Roaming Wireless PCs 4 4 Infrastructure Wireless Bridge 4 5 Infrastructure Wireless Repeater 4...

Страница 20: ...ation Status 6 89 Event Logs 6 92 STP Status 6 94 Chapter 7 Command Line Interface 7 1 Using the Command Line Interface 7 1 Accessing the CLI 7 1 Console Connection 7 1 Telnet Connection 7 1 Entering...

Страница 21: ...2 show version 7 23 show config 7 23 show hardware 7 27 System Logging Commands 7 27 logging on 7 28 logging host 7 28 logging console 7 29 logging level 7 29 logging facility type 7 30 logging clear...

Страница 22: ...56 dir 7 57 show bootfile 7 57 RADIUS Client 7 58 radius server address 7 58 radius server port 7 59 radius server key 7 59 radius server retransmit 7 60 radius server timeout 7 60 radius server port...

Страница 23: ...e 7 79 show bridge filter entry 7 80 show bridge link 7 80 Spanning Tree Commands 7 82 bridge stp enable 7 82 bridge stp forwarding delay 7 83 bridge stp hello time 7 83 bridge stp max age 7 84 bridge...

Страница 24: ...rogue ap enable 7 112 rogue ap authenticate 7 113 rogue ap duration 7 114 rogue ap interval 7 114 rogue ap scan 7 115 show rogue ap 7 116 Wireless Security Commands 7 116 auth 7 117 encryption 7 119...

Страница 25: ...ooting A 1 Appendix B Cables and Pinouts B 1 Twisted Pair Cable Assignments B 1 10 100BASE TX Pin Assignments B 1 Straight Through Wiring B 2 Crossover Wiring B 3 Console Port Pin Assignments B 3 Wiri...

Страница 26: ...xx Contents...

Страница 27: ...t does not have a cable connection to the wired Ethernet LAN Bridge Providing links to access points operating in Bridge or Root Bridge mode and thereby connecting other wired LAN segments Root Bridge...

Страница 28: ...32 console cable One AC power adapter and power cord Four rubber feet User Guide CD Inform your dealer if there are any incorrect missing or damaged parts If possible retain the carton including the o...

Страница 29: ...ts from both antennas at the same time The antennas transmit the outgoing signal as a toroidal sphere doughnut shaped with the coverage extending most in a direction perpendicular to the antenna The a...

Страница 30: ...s to PCs switches or hubs The access point appears as an Ethernet node and performs a bridging function by moving packets from the wired LAN to remote workstations on the wireless infrastructure LED S...

Страница 31: ...uired The access point may also receive Power over Ethernet PoE from a switch or other network device that supplies power over the network cable based on the IEEE 802 3af standard Note that if the acc...

Страница 32: ...n User Name admin Password smcadmin General HTTP Server Enabled HTTP Server Port 80 HTTP Server Enabled HTTP Server Port 443 TCP IP DHCP Enabled IP Address 192 168 2 2 Subnet Mask 255 255 255 0 Defaul...

Страница 33: ...isabled VLAN Management VLAN ID 1 VLAN ID VAP Interface 1 VLAN Tag Support Disabled QoS QoS Mode Off SVP SpectraLink Voice Priority Disabled Filter Control Local Bridge Disabled AP Management Enabled...

Страница 34: ...Logging Facility Type 16 System Clock SNTP Server Status Enabled SNTP Server 1 IP 137 92 140 80 SNTP Server 2 IP 192 43 244 18 Date and Time 00 00 Jan 1 1970 when there is no time server Daylight Sav...

Страница 35: ...ation Timeout Interval 30 minutes Authentication Timeout Interval 60 minutes Rogue AP Detection Disabled Antenna Control Method Diversity Antenna ID 0x0000 Antenna Location Indoor Wireless Security 80...

Страница 36: ...s Association Timeout Interval 30 minutes Authentication Timeout Interval 60 minutes Rogue AP Detection Disabled Antenna Control Method Diversity Antenna ID 0x0000 Antenna Location Indoor Wireless Sec...

Страница 37: ...System Defaults 1 11 1 Link Integrity Status Disabled Ping Interval 30 seconds Fail Retry Count 6 Table 1 1 System Defaults Feature Parameter Default...

Страница 38: ...Introduction 1 12 1...

Страница 39: ...access point can be mounted on any horizontal surface Mounting on a horizontal surface To keep the access point from sliding on the surface attach the four rubber feet provided in the accessory kit t...

Страница 40: ...A 1 Note The RJ 45 port on the access point supports auto MDI MDI X operation so you can use either straight through or crossover cable to connect to switches or PCs 6 Position the Antennas Each ante...

Страница 41: ...e Installation Pigtail Cables Use the coax pigtail cable attached to the antenna to connect to the access point Because most pigtail cables are a relatively short length 83 cm or 33 inches be sure to...

Страница 42: ...to point the antennas towards the coverage area Outdoor Installation When installing an antenna outdoors be sure to consider these additional factors Always place the antenna away from power and tele...

Страница 43: ...sing the web browser interface CLI or SNMP 2 Remove power to the access point 3 Remove both of the access point s antennas by unscrewing them at their base 4 For diversity antennas connect the antenna...

Страница 44: ...3 4 3 5 Reconnect power to the access point Note Before enabling the radio with an external antenna attached be sure to first configure the access point s antenna mode Antenna pigtail cable Screw ont...

Страница 45: ...ure wireless LAN for roaming wireless PCs Infrastructure wireless bridge to connect wired LANs Infrastructure wireless repeater for extended range The 802 11b and 802 11g frequency band which operates...

Страница 46: ...ireless adapter connected via radio signals as an independent wireless LAN Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio channel An ad hoc wireless LAN can...

Страница 47: ...group via a radio link or access other computers or network resources in the wired LAN infrastructure via the access point The infrastructure configuration not only extends the accessibility of wirele...

Страница 48: ...ccess points The SSID can be manually configured by the clients can be detected in an access point s beacon or can be obtained by querying for the identity of the nearest access point For clients that...

Страница 49: ...The root bridge should be the unit connected to the main core of the wired LAN Other bridges must configure one parent link to the root bridge or to a bridge connected to the root bridge The other fi...

Страница 50: ...o six WDS repeater links In repeater mode the access point does not support an Ethernet link to a wired LAN Note that when the access point operates in this mode only half the normal throughput is pos...

Страница 51: ...up through the CLI Required Connections The access point provides an RS 232 serial port that enables a connection to a PC or terminal for monitoring and configuration Attach a VT100 compatible termina...

Страница 52: ...ress By default the access point is configured to obtain IP address settings from a DHCP server If a DHCP server is not available the IP address defaults to 192 168 2 2 which may not be compatible wit...

Страница 53: ...r wireless networks in the specified country Type exit to leave configuration mode Then type country to display the list of countries Select the code for your country and enter the country command aga...

Страница 54: ...Initial Configuration 5 4 5 The home page displays the Main Menu...

Страница 55: ...red IP address of the access point or use the default address http 192 168 2 2 To log into the access point enter the default user name admin and the password smcadmin then press LOGIN When the home p...

Страница 56: ...22 AP Management Configures access to management interfaces 6 28 Administration Configures user name and password for management access upgrades software from local file FTP or TFTP server resets conf...

Страница 57: ...ely identified on the network Default SMC Range 1 32 characters Security Enables each VAP interface sets the SSID and configures wireless security 6 69 Status Displays information about the access poi...

Страница 58: ...g end 7 87 Enterprise AP show system 7 22 System Information Serial Number System Up time 0 days 0 hours 32 minutes 22 seconds System Name R D System Location System Contact Contact System Country Cod...

Страница 59: ...e page 5 2 After you have network access to the access point you can use the web browser interface to modify the initial IP configuration if needed Note If there is no DHCP server on your network or D...

Страница 60: ...s From the global configuration mode enter the interface configuration mode with the interface ethernet command Use the ip dhcp command to enable the DHCP client or no ip dhcp to disable it To manuall...

Страница 61: ...Wi Fi Protected Access WPA wireless security A secondary RADIUS server may also be specified as a backup should the primary server fail or become inaccessible In addition the configured RADIUS server...

Страница 62: ...System Configuration 6 8 6...

Страница 63: ...k spaces in the string Maximum length 255 characters Timeout Number of seconds the access point waits for a reply from the RADIUS server before resending a request Range 1 60 seconds Default 5 Retrans...

Страница 64: ...ddress 192 168 1 25 7 58 Enterprise AP config radius server port 181 7 59 Enterprise AP config radius server key green 7 59 Enterprise AP config radius server timeout 10 7 60 Enterprise AP config radi...

Страница 65: ...altered Clients can then securely use the local user name and password for access authentication Note that SSH client software needs to be installed on the management station to access the access poin...

Страница 66: ...mall network with a limited number of users MAC addresses can be manually configured on the access point itself without the need to set up a RADIUS server but managing a large number of MAC addresses...

Страница 67: ...station is compared against the local database stored on the access point Use the Local MAC Authentication section of this web page to set up the local database and configure all access points in the...

Страница 68: ...all unknown MAC addresses that is those not listed in the local MAC database Deny Blocks access for all MAC addresses except those listed in the local database as Allow Allow Permits access for all M...

Страница 69: ...tication server local 7 71 Enterprise AP config mac authentication session timeout 5 7 71 Enterprise AP config address filter default denied 7 69 Enterprise AP config address filter entry 00 70 50 cc...

Страница 70: ...en use the 802 1X supplicant command to enable the feature To display the current settings use the show authentication command from the Exec mode not shown in the following example Enterprise AP confi...

Страница 71: ...access point Inter Client STAs Communication Filter Sets the global mode for wireless to wireless communications between clients associated to Virtual AP VAP interfaces on the access point Default Pre...

Страница 72: ...a MAC address from the filtering table Ethernet Type Filter Controls checks on the Ethernet type of all incoming and outgoing Ethernet packets against the protocol filtering table Default Disabled Di...

Страница 73: ...73 Enterprise AP config filter ap manage 7 73 Enterprise AP config filter uplink enable 7 74 Enterprise AP config filter uplink add 00 12 34 56 78 9a 7 74 Enterprise AP config filter ethernet type ena...

Страница 74: ...r an assigned client VLAN ID default VLAN ID or the management VLAN ID Traffic received from the wired network must also be tagged with one of these known VLAN IDs Received traffic that has an unknown...

Страница 75: ...te The specific configuration of RADIUS server software is beyond the scope of this guide Refer to the documentation provided with the RADIUS server software VLAN Classification Enables or disables VL...

Страница 76: ...es that is an STP compliant switch bridge or router in your network to ensure that only one route exists between any two stations on the network and provide backup links which automatically take over...

Страница 77: ...dio interface Root Bridge Operates as the root bridge in the wireless bridge network Up to six Child links are available to other bridges in the network Bridge Parent The physical layer address of the...

Страница 78: ...network It selects a root port on each bridging device except for the root device which incurs the lowest path cost when forwarding a packet from that device to the root device Then it selects a desig...

Страница 79: ...ge 0 65535 Default 32768 Bridge Max Age The maximum time in seconds a device can wait without receiving a configuration message before attempting to reconfigure All device ports except for designated...

Страница 80: ...s point radio interface use the bridge role command from the CLI wireless interface configuration mode If the role of the radio interface is set to Bridge or Repeater the MAC address of the parent nod...

Страница 81: ...stp command Enterprise AP config bridge stp enable 6 104 Enterprise AP config bridge stp forwarding delay 2500 6 105 Enterprise AP config bridge stp hello time 500 6 106 Enterprise AP config bridge st...

Страница 82: ...the access point will reject the connection UI Management Enables or disables management access through Telnet the Web HTTP or SNMP interfaces Default Enabled Note Secure Web HTTPS connections are no...

Страница 83: ...efault admin user name from the system Note Pressing the Reset button on the back of the access point for more than five seconds resets the user name and password to the factory defaults For this reas...

Страница 84: ...ding Firmware You can upgrade new access point software from a local file on the management workstation or from an FTP or TFTP server New software may be provided periodically from your distributor Af...

Страница 85: ...software is stored If upgrading from an FTP server be sure that you have an account configured on the server with a user name and password If VLANs are configured on the access point determine the VL...

Страница 86: ...nfiguration file to a specified remote FTP or TFTP server A configuration file can also be downloaded to the access point to restore a specific configuration Export Import Select Export to upload a fi...

Страница 87: ...ir command can be used to check that the new file is present in the access point file system To run the new software use the reset board command to reboot the access point Enterprise AP copy tftp file...

Страница 88: ...to memory or sent to a Syslog server The logged messages serve as a valuable tool for isolating access point and network problems System Log Setup Enables the logging of error messages Default Disabl...

Страница 89: ...in the access point s memory are erased when the device is rebooted Logging Facility Type Sets the facility type for remote logging of syslog messages The command specifies the facility type tag sent...

Страница 90: ...ic time servers You can configure up to two time server IP addresses The access point will attempt to poll each server in the configured sequence SNTP Server Configures the access point to operate as...

Страница 91: ...t from the global configuration mode specify SNTP server IP addresses using the sntp server ip command then use the sntp server enable command to enable the service Use the sntp server timezone comman...

Страница 92: ...cifications and the protocol used to access this information over the network The access point includes an onboard agent that supports SNMP versions 1 2c and 3 clients This agent continuously monitors...

Страница 93: ...ns SNMP Enables or disables SNMP management access and also enables the access point to send SNMP traps notifications Default Disable Location A text string that describes the system location Maximum...

Страница 94: ...sent with the notification operation Maximum length 23 characters case sensitive Default public Engine ID Sets the engine identifier for the SNMPv3 agent that resides on the access point This engine p...

Страница 95: ...Fail A client station has failed MAC address authentication with the RADIUS server dot1xAuthNotInitiated A client station did not initiate 802 1X authentication dot1xAuthSuccess A 802 1X client statio...

Страница 96: ...contact commands to indicate the physical location of the access point and define a system contact To set the read only and read write community names use the snmp server community command Use the sn...

Страница 97: ...Enabled dot11StationAuthentication Enabled dot11StationReAssociation Enabled dot11StationRequestFail Enabled dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled dot1xAuthSuccess Enabled dot1xMacAddrA...

Страница 98: ...e corresponding Passphrase field Priv Type The data encryption type used for the SNMP user either DES or none When DES is selected enter a key in the corresponding Passphrase field Passphrase The pass...

Страница 99: ...and group settings use the show snmp users or show snmp group assignments commands Enterprise AP config snmp server engine id 1a 2b 3c 4d 00 ff 7 44 Enterprise AP config snmp server user 7 45 User Nam...

Страница 100: ...opens to configure the filter see below To edit an existing filter select the radio button next to the entry in the table and then click the Edit button To delete a filter select the radio button nex...

Страница 101: ...ude entries for the required trap objects to send to the target Note that the filter entries are applied in the sequence that they are defined CLI Commands for Configuring SNMPv3 Trap Filters To creat...

Страница 102: ...gure the settings see below To edit an existing target select the radio button next to the entry in the table and then click the Edit button To delete targets select the radio button next to the entry...

Страница 103: ...efined SNMP v3 user that is to receive notification messages Assigned Filter The name of a user defined notification filter that is applied to the target CLI Commands for Configuring SNMPv3 Targets To...

Страница 104: ...wever most radio signal parameters apply to all eight VAP interfaces The VAPs function similar to a VLAN with each VAP mapped to its own VLAN ID Traffic to specific VAPs can be segregated based on use...

Страница 105: ...system After you have configured the radio settings go to the Security page under the 802 a Interface see Security on page 6 69 enable the radio service for any of the VAP interfaces and then set an S...

Страница 106: ...lient is disassociated from the VAP interface Range 5 60 minutes Default 30 minutes WPA2 PMKSA Life Time WPA2 provides fast roaming for authenticated clients by retaining keys and other security setti...

Страница 107: ...ue AP Detection To configure Rouge AP detection select the Radio Settings page and scroll down to the Rouge AP section Rogue AP A rogue AP is either an access point that is not authorized to participa...

Страница 108: ...enabled the access point checks the MAC address Basic Service Set Identifier BSSID of each access point that it finds against a RADIUS server to determine whether the access point is allowed With RADI...

Страница 109: ...ise AP if wireless g rogue ap interval 120 7 114 Enterprise AP if wireless g rogue ap scan 7 115 Enterprise AP if wireless g rogueApDetect Completed Radio G 5 APs detected rogueAPDetect Radio G refres...

Страница 110: ...f up to 108 Mbps Enabling Turbo Mode allows the access point to provide connections up to 108 Mbps Default Disabled Note In normal mode the access point provides a channel bandwidth of 20 MHz and supp...

Страница 111: ...the service area Options 100 50 25 12 minimum Default 100 Note When operating the access point using 5 GHz channels in a European Community country the end user and installer are obligated to operate...

Страница 112: ...nce of the access point can be improved by selecting the best method for the specific deployment Default Software Hardware Provides best performance when the number of supported clients is less than 2...

Страница 113: ...p the retransmission of smaller frames However it is more efficient to set the fragment size larger if very little or no interference is present because it requires overhead to send multiple frames Ra...

Страница 114: ...te for wireless network bandwidth at the same time WMM employs techniques that are a subset of the developing IEEE 802 11e QoS standard and it enables the access point to inter operate with both WMM e...

Страница 115: ...dent on two timing parameters AIFSN Arbitration Inter Frame Space Number a number used to calculate the minimum time between data frames CW Contention Window a number used to calculate a random backof...

Страница 116: ...values equate to less backoff and wait time and therefore more transmit opportunities To configure WMM select the Radio Settings page and scroll down to the WMM configuration settings AIFS Random Bac...

Страница 117: ...limit of the random backoff wait time before wireless medium access can be attempted The initial wait time is a random value between zero and the CWMin value Specify the CWMin value in the range 0 15...

Страница 118: ...the access point The wmm acknowledge policy command is used to enable or disable a policy for each access category The wmmparms command defines detailed WMM parameters Enterprise AP if wireless a wmm...

Страница 119: ...old 2347 bytes Beacon Interval 100 TUs Authentication Timeout Interval 60 Mins Association Timeout Interval 30 Mins DTIM Interval 1 beacon Maximum Association 64 stations MIC Mode Software Super A Dis...

Страница 120: ...can associate with a VAP Note You must first enable VAP interface 0 before the other interfaces can be enabled Quality of Service WMM Mode SUPPORTED WMM Acknowledge Policy AC0 Best Effort Ack AC1 Back...

Страница 121: ...s specific to the 802 11g interface are included in this section To configure the 802 11g radio settings select the Radio Settings page Radio Mode Selects the operating mode for the 802 11g wireless i...

Страница 122: ...tance is affected by the data rate The lower the data rate the longer the transmission distance Default 54 Mbps Super G The Atheros proprietary Super G performance enhancements are supported by the ac...

Страница 123: ...ou have to implement two main functions Authentication It must be verified that clients attempting to connect to the network are authorized users Traffic Encryption Data passing between the access poi...

Страница 124: ...bled system and network card driver native support provided in Windows XP Provides robust security in WPA only mode i e WPA clients only Offers support for legacy WEP clients but with increased securi...

Страница 125: ...Settings Authentication Shared Key or Open System Encryption Enable 802 1x Disable Local RADIUS or Disabled Yesc Dynamic WEP 802 1x only Interface Detail Settings Authentication Open System Encryption...

Страница 126: ...authentication rates Local or Disabled Yes WPA2 Pre Shared Key only Interface Detail Settings Authentication WPA2 PSK Encryption Enable WPA Configuraton Required Cipher Suite AES CCMP 802 1x Disable W...

Страница 127: ...urity under Radio A or Radio G set an SSID to identify the wireless network service provided by each VAP you want to use and then click Apply to save your settings Before enabling the radio service fo...

Страница 128: ...nded for a high level of network security For more robust wireless security the access point provides Wi Fi Protected Access WPA for improved data encryption and user authentication Setting up shared...

Страница 129: ...ment with clients using static WEP keys and WPA select WEP transmit key index 2 3 or 4 The access point uses transmit key index 1 for the generation of dynamic keys To enable WEP shared keys for a VAP...

Страница 130: ...h the web or CLI in order to enable all types of encryption WEP TKIP or AES in the access point CLI Commands for WEP Shared Key Security To enable WEP shared key security for the 802 11g interface use...

Страница 131: ...de b g mixed mode Transmit Power FULL 5 dBm Max Station Data Rate 54Mbps Multicast Data Rate 5 5Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs Authentication...

Страница 132: ...Acknowledge AC3 Voice Acknowledge WMM BSS Parameters AC0 Best Effort logCwMin 4 logCwMax 10 AIFSN 3 Admission Control No TXOP Limit 0 000 ms AC1 Background logCwMin 4 logCwMax 10 AIFSN 7 Admission Co...

Страница 133: ...port other systems require additional software Temporal Key Integrity Protocol TKIP WPA specifies TKIP as the data encryption method to replace WEP TKIP avoids the problems of WEP static keys by dynam...

Страница 134: ...nd support for TKIP encryption The main differences and enhancements in WPA2 can be summarized as follows Advanced Encryption Standard AES WPA2 uses AES Counter Mode encryption with Cipher Block Chain...

Страница 135: ...icated to a wireless network it has to be fully authenticated When the client is about to roam to another access point in the network the access point sends pre authentication messages to the new acce...

Страница 136: ...hentication WPA2 PSK Clients using WPA2 with a Pre shared Key are accepted for authentication WPA WPA2 mixed Clients using WPA or WPA2 over 802 1X are accepted for authentication WPA WPA2 PSK mixed Cl...

Страница 137: ...e shared Key Type Hex ASCII Encryption Enabled Authentication Setup WPA WPA2 WPA WPA2 mixed Cipher Suite WEP TKIP AES CCMP requires RADIUS server to be specified 1 You must enable data encryption in o...

Страница 138: ...the access point grants client access to the network The 802 1X EAP packets are also used to pass dynamic unicast session keys and static broadcast keys to wireless clients Session keys are unique to...

Страница 139: ...after successful wireless association with the access point The 802 1X supported mode allows access for clients not using WPA or WPA2 security Required The access point enforces 802 1X authentication...

Страница 140: ...how interface wireless command from the Exec mode not shown in the example Status Information The Status page includes information on the following items Access Point Status The AP Status window displ...

Страница 141: ...G MAC The physical layer address for the 802 11b g interface System Name Name assigned to this system System Contact Administrator responsible for the system IP Address IP address of the management in...

Страница 142: ...or Displaying System Settings To view the current access point system settings use the show system command from the Exec mode To view the current radio interface settings use the show interface wirele...

Страница 143: ...s as described below Note that this page is automatically refreshed every five seconds Station Address The MAC address of the wireless client Authenticated Shows if the station has been authenticated...

Страница 144: ...cedure allows the wireless system to track the location of each mobile client and ensure that frames destined for each client are forwarded to the appropriate access point Forwarding Allowed Shows if...

Страница 145: ...802 11a Channel Auto No 802 11a Channel Stations if wireless A VAP 1 802 11a Channel Auto No 802 11a Channel Stations No 802 11a Channel Stations if wireless A VAP 7 802 11a Channel Auto No 802 11a C...

Страница 146: ...Error Messages An example of a logged error message is Station Failed to authenticate unsupported algorithm This message may be caused by any of the following conditions Access point was set to Open...

Страница 147: ...rt 514 State Disabled Enterprise AP Enterprise AP show event log 7 32 Mar 09 11 57 55 Information 802 11g 11g Radio Interface Enabled Mar 09 11 57 55 Information 802 11g Radio channel updated to 8 Mar...

Страница 148: ...for each port ID Displays the port ID number Priority The priority designated to the specified port Path Cost Displays the path cost value for the specified port Status Displays if STP is enabled or d...

Страница 149: ...login screen displays Caution Command examples shown later in this chapter abbreviate the console prompt to AP for simplicity Telnet Connection Telnet operates over the IP transport protocol In this...

Страница 150: ...ing the Telnet command the login screen displays Caution You can open up to four sessions to the device via Telnet Entering Commands This section describes how to enter CLI commands Keywords and Argum...

Страница 151: ...show displays a list of possible show commands The command show interface will display the following information Enterprise AP show APmanagement Show management AP information authentication Show Auth...

Страница 152: ...tory of commands by pressing the up arrow key Any command displayed in the history list can be executed again or first modified and then executed Using the show history command displays a longer list...

Страница 153: ...ess Configuration IC W These commands modify the wireless port configuration of global parameters for the radio and include commands such as channel and transmit power Interface Wireless Virtual Acces...

Страница 154: ...right one character Ctrl K Deletes from cursor to the end of the command line Ctrl L Repeats current command line on a new line Ctrl N Enters the next command line in the history buffer Ctrl P Shows t...

Страница 155: ...rameters 7 82 Ethernet Interface Configures connection parameters for the Ethernet interface 7 87 Wireless Interface Configures radio interface settings 7 92 Wireless Security Configures radio interfa...

Страница 156: ...ault Setting None Command Mode Exec Example Related Commands end 7 8 end This command returns to the previous configuration mode Default Setting None Command Mode Global Configuration Interface Config...

Страница 157: ...e reached The following are some results of the ping command Normal response The normal response occurs in one to ten seconds depending on network traffic Destination does not respond If the host does...

Страница 158: ...always run the Power On Self Test Example This example shows how to reset the system show history This command shows the contents of the command history buffer Default Setting None Command Mode Exec C...

Страница 159: ...evice Designation prompt Customizes the command line prompt GC 7 14 system name Specifies the host name for the access point GC 7 14 snmp server contact Sets the system contact string GC 7 40 snmp ser...

Страница 160: ...on the access point GC 7 19 System Status show system Displays system information Exec 7 22 show version Displays version information for the system Exec 7 23 show config Displays detailed configurat...

Страница 161: ...BR Iceland IS New Zealand NZ Turkey TR Brunei Darussalam BN India IN Norway NO Ukraine UA Bulgaria BG Indonesia ID Qatar QA United Arab Emirates AE Canada CA Iran IR Oman OM United Kingdom GB Chile C...

Страница 162: ...ring to use for the CLI prompt Maximum length 32 characters Default Setting Enterprise AP Command Mode Global Configuration Example system name This command specifies or modifies the system name for t...

Страница 163: ...rd After initially logging onto the system you should set the password Remember to record it in a safe place Use the no form to reset the default password Syntax password password no password password...

Страница 164: ...enerate host encryption keys The SSH server is disabled while the keys are being generated The show system command displays the status of the SSH server Example ip ssh server port This command sets th...

Страница 165: ...port This command specifies the TCP port number used by the web browser interface Use the no form to use the default port Syntax ip http port port number no ip http port port number The TCP port to b...

Страница 166: ...no form to restore the default port Syntax ip https port port_number no ip https port port_number The UDP port used for HTTPS SSL Range 80 1024 65535 Default Setting 443 Command Mode Global Configurat...

Страница 167: ...pendently If you enable HTTPS you must indicate this in the URL https device port_number When you start HTTPS the connection is established in this way The client authenticates the server using the se...

Страница 168: ...t interface on the access point from an invalid address the unit will reject the connection enter an event message in the system log and send a trap message to the trap manager IP address can be confi...

Страница 169: ...r disables the selected management access method Default Setting All enabled Command Mode Global Configuration Example This example restricts management access to the indicated addresses show apmanage...

Страница 170: ...em Contact System Country Code US UNITED STATES MAC Address 00 30 F1 F0 9A 9C IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Default Gateway 0 0 0 0 VLAN State DISABLED Management VLAN ID AP 1 IAPP...

Страница 171: ...prise AP Enterprise AP show config Authentication Information MAC Authentication Server DISABLED MAC Auth Session Timeout Value 0 min 802 1x supplicant DISABLED 802 1x supplicant user EMPTY 802 1x sup...

Страница 172: ...Bm Data Rate 54Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs DTIM Interval 1 beacon Maximum Association 64 stations Native VLAN ID 1 Security Closed System D...

Страница 173: ...0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC format no delimiter Radius VLAN format HEX Radius Secondary Server Information IP 0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC forma...

Страница 174: ...vice State Disabled SNTP server 1 IP 137 92 140 80 SNTP server 2 IP 192 43 244 18 Current Time 00 14 Jan 1st 1970 Time Zone 5 BOGOTA EASTERN INDIANA Daylight Saving Disabled Station Table Information...

Страница 175: ...Enterprise AP Table 7 6 System Logging Commands Command Function Mode Page logging on Controls logging of error messages GC 7 28 logging host Adds a syslog server host IP address that will receive lo...

Страница 176: ...t are stored in memory Example logging host This command specifies syslog servers host that will receive logging messages Use the no form to remove syslog server host Syntax logging host 1 2 3 4 host_...

Страница 177: ...ult Setting Disabled Command Mode Global Configuration Example logging level This command sets the minimum severity level for event logging Syntax logging level Emergency Alert Critical Error Warning...

Страница 178: ...ate service Range 16 23 Default Setting 16 Command Mode Global Configuration Level Argument Description Emergency System unusable Alert Immediate action needed Critical Critical conditions e g memory...

Страница 179: ...Syntax logging clear Command Mode Global Configuration Example show logging This command displays the logging configuration Syntax show logging Command Mode Exec Example Enterprise AP config logging...

Страница 180: ...09 11 55 52 Information SSH task Enable SSH server Mar 09 11 55 52 Information Enable Telnet Mar 09 11 55 40 Information 802 11a 11a Radio Interface Disabled Mar 09 11 55 40 Information 802 11a Trans...

Страница 181: ...s enabled using the sntp server enable command the sntp server ip command specifies the time servers from which the access point polls for time updates The access point will poll the time servers in t...

Страница 182: ...Example Related Commands sntp server ip 7 33 show sntp 7 36 sntp server date time This command sets the system clock Default Setting 00 14 00 January 1 1970 Command Mode Global Configuration Example...

Страница 183: ...the specified period Example This sets daylight savings time to be used from July 1st to September 1st sntp server timezone This command sets the time zone for the access point s internal clock Syntax...

Страница 184: ...urs and minutes your time zone is east before or west after of UTC Example show sntp This command displays the current time and configuration settings for the SNTP client Command Mode Exec Example Ent...

Страница 185: ...nt s DHCP relay agent Use the no form to disable the agent Syntax no dhcp relay enable Default Setting Disabled Command Mode Global Configuration Command Usage For the DHCP relay agent to function the...

Страница 186: ...r ip_address IP address of the server Default Setting Primary and secondary 0 0 0 0 Command Mode Global Configuration Example show dhcp relay This command displays the current DHCP relay configuration...

Страница 187: ...cations GC 7 43 snmp server engine id Sets the engine ID for SNMP v3 GC 7 44 snmp server user Sets the name of the SNMP v3 user GC 7 45 snmp server targets Configures SNMP v3 notification targets GC 7...

Страница 188: ...tations are able to both retrieve and modify MIB objects Default Setting public Read only access Authorized management stations are only able to retrieve MIB objects private Read write access Authoriz...

Страница 189: ...255 characters Default Setting None Command Mode Global Configuration Example Related Commands snmp server contact 7 40 snmp server enable server This command enables SNMP management access and also...

Страница 190: ...community string no snmp server host 1 First SNMP host 2 Second SNMP host 3 Third SNMP host 4 Fourth SNMP host host_ip_address IP of the host the targeted recipient host_name Name of the host Range 1...

Страница 191: ...1StationReAssociation A client station has successfully re associated with the access point dot11StationRequestFail A client station has failed association re association or authentication dot1xAuthFa...

Страница 192: ...diusServerChanged The access point has changed from the primary RADIUS server to the secondary or from the secondary to the primary sysSystemDown The access point is about to shutdown and reboot sysSy...

Страница 193: ...aximum Default Setting None Command Mode Global Configuration Command Usage Up to 10 SNMPv3 users can be configured on the access point The SNMP engine ID is used to compute the authentication privacy...

Страница 194: ...on md5 or none auth passphrase The user password required when authentication is used 8 32 characters priv proto The encryption type used for SNMP data encryption des or none priv passphrase The user...

Страница 195: ...name The defined SNMP v3 user name that is to receive notifications version The SNMP version of notifications Currently only version 3 is supported in this command udp port The UDP port that is used o...

Страница 196: ...oint allows up to 10 notification filters to be created Each filter can be defined by up to 20 MIB subtree ID entries Use the command more than once with the same filter ID to build a filter that incl...

Страница 197: ...rs filter id A user defined name that identifies an SNMP v3 notification filter Maximum length 32 characters Default Setting None Command Mode Global Configuration Example show snmp groups This comman...

Страница 198: ...ser group assignments Syntax show snmp group assignments Command Mode Exec Enterprise AP show snmp groups GroupName RO SecurityModel USM SecurityLevel NoAuthNoPriv GroupName RWAuth SecurityModel USM S...

Страница 199: ...A user defined name that identifies an SNMP v3 notification filter Maximum length 32 characters Command Mode Exec Example Enterprise AP show snmp group assignments GroupName RWPriv UserName chris Ente...

Страница 200: ...filter assignments This command displays the SNMP v3 notification filter assignments Syntax show snmp filter assignments Command Mode Exec Example Enterprise AP show snmp filter assignments HostID Fi...

Страница 201: ...Disabled dot11InterfaceAGFail Enabled dot11InterfaceBFail Enabled dot11StationAssociation Enabled dot11StationAuthentication Enabled dot11StationReAssociation Enabled dot11StationRequestFail Enabled...

Страница 202: ...um length for file names is 32 characters Valid characters A Z a z 0 9 _ If the file contains an error it cannot be set as the default file Example Table 7 10 Flash File Commands Command Function Mode...

Страница 203: ...ation file from flash memory Default Setting None Command Mode Exec Command Usage The system prompts for data required to complete the copy command Only a configuration file can be uploaded to an FTP...

Страница 204: ...e files in flash memory and the one used to boot the access point is deleted be sure you first use the bootfile command to update the application image file booted at startup before you reboot the acc...

Страница 205: ...on code file that booted the system Syntax show snmp filter assignments Command Mode Exec Example Column Heading Description File Name The name of the file Type 2 Operation Code and 5 Configuration fi...

Страница 206: ...s Default Setting None Table 7 11 RADIUS Client Command Function Mode Page radius server address Specifies the RADIUS server GC 7 58 radius server port Sets the RADIUS server network port GC 7 59 radi...

Страница 207: ...ple radius server key This command sets the RADIUS encryption key Syntax radius server secondary key key_string secondary Secondary server key_string Encryption key used to authenticate logon access f...

Страница 208: ...lobal Configuration Example radius server timeout This command sets the interval between transmitting authentication requests to the RADIUS server Syntax radius server secondary timeout number_of_seco...

Страница 209: ...RADIUS accounting session is automatically started for each user that is successfully authenticated to the access point Example radius server timeout interim This command sets the interval between tr...

Страница 210: ...MAC addresses in the form xxxxxx xxxxxx Default Setting No delimiter Command Mode Global Configuration Example radius server vlan format This command sets the format for specifying VLAN IDs on the RA...

Страница 211: ...d Mode Exec Example Enterprise AP show radius Radius Server Information IP 0 0 0 0 Port 1812 Key Retransmit 3 Timeout 5 Radius MAC format no delimiter Radius VLAN format HEX Radius Secondary Server In...

Страница 212: ...authentication process Uses standard 802 11 authentication for all others required Requires 802 1X authentication for all clients Default Setting Disabled Table 7 12 802 1X Authentication Command Func...

Страница 213: ...If 802 1X authentication is not initiated by the station the access point will initiate authentication Only those stations successfully authenticated with 802 1X are allowed to access the network 802...

Страница 214: ...sion key Range 0 1440 minutes Default Setting 0 Disabled Command Mode Global Configuration Command Usage Session keys are unique to each client and are used to authenticate a client connection and cor...

Страница 215: ...can be enabled Example 802 1x supplicant user This command sets the user name and password used for authentication of the access point when operating as a 802 1X supplicant Use the no form to clear th...

Страница 216: ...ec Example Enterprise AP config 802 1x supplicant user WA6102 dot1xpass Enterprise AP config Enterprise AP show authentication Authentication Information MAC Authentication Server DISABLED MAC Auth Se...

Страница 217: ...y MAC addresses entered as allowed in the address filtering table are allowed Default allowed Command Mode Global Configuration Example Table 7 13 MAC Address Authentication Command Function Mode Page...

Страница 218: ...Mode Global Configuration Command Mode The access point supports up to 1024 MAC addresses An entry in the address table may be allowed or denied access depending on the global setting configured for t...

Страница 219: ...reless clients with the RADIUS server during 802 1X authentication Default Disabled Command Mode Global Configuration Example Related Commands address filter entry 7 70 radius server address 7 58 802...

Страница 220: ...ng Commands Command Function Mode Page filter local bridge Disables communication between wireless clients GC 7 73 filter ap manage Prevents wireless clients from accessing the management interface GC...

Страница 221: ...Clients can communicate with clients associated to other VAP interfaces Default Disabled Command Mode Global Configuration Command Usage This command can disable wireless to wireless communications b...

Страница 222: ...in the form xx xx xx xx xx xx A maximum of eight addresses can be added to the filtering table Default Disabled Command Mode Global Configuration Example filter ethernet type enable This command chec...

Страница 223: ...ns ARP RARP Berkeley Trailer Negotiation LAN Test X25 Level 3 Banyan CDP DEC XNS DEC MOP Dump Load DEC MOP DEC LAT Ethertalk Appletalk ARP Novell IPX old Novell IPX new EAPOL Telxon TXP Aironet DDP En...

Страница 224: ...nk MAC access control list 00 12 34 56 78 9a Enabled Protocol Filters No protocol filters are enabled Enterprise AP Command Function Mode Page bridge role Selects the bridge operation mode for a radio...

Страница 225: ...en the access point is operating in this mode traffic is not forwarded to the Ethernet port from the radio interface Up to four WDS bridge links MAC addresses per radio interface can be specified for...

Страница 226: ...hexadecimal digits in the form xx xx xx xx xx xx Default Setting None Command Mode Interface Configuration Wireless Command Usage In root bridge mode up to six child bridge links can be specified usi...

Страница 227: ...seconds Command Mode Global Configuration Command Usage If the MAC address of an entry in the address table is not seen on the associated interface for longer than the aging time the entry is discarde...

Страница 228: ...nd Mode Exec Enterprise AP show bridge filter entry max entry numbers 512 current entry nums 13 Bridge MAC Addr Table MAC Port Fwd_type VlanID origin life remain Life Type 01 80 c2 00 00 00 0 5 4095 3...

Страница 229: ...d priority 0 path cost 19 message age Timer Inactive message age 4469 designated root priority 32768 MAC 00 30 F1 F0 9A 9C designated cost 0 designated bridge priority 32768 MAC 00 30 F1 F0 9A 9C desi...

Страница 230: ...e Page bridge stp enable Enables the Spanning Tree feature GC 7 82 bridge stp forwarding delay Configures the spanning tree bridge forward time GC 7 83 bridge stp hello time Configures the spanning tr...

Страница 231: ...must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to the discarding s...

Страница 232: ...sage before attempting to reconfigure All device ports except for designated ports should receive configuration messages at regular intervals Any port that ages out STP information provided in the las...

Страница 233: ...r the port Range 1 65535 Default Setting 19 Command Mode Interface Configuration Command Usage This command is used by the Spanning Tree Protocol to determine the best path between devices Therefore l...

Страница 234: ...ds bridge link path cost 7 85 show bridge stp This command displays aging time and spanning tree settings for the Ethernet and wireless interfaces Syntax show bridge stp Command Mode Exec Example Ente...

Страница 235: ...mmand Function Mode Page interface ethernet Enters Ethernet interface configuration mode GC 7 87 dns primary server Specifies the primary name server IC E 7 88 dns secondary server Specifies the secon...

Страница 236: ...servers are queried in sequence Example This example specifies two domain name servers Related Commands show interface ethernet 7 91 ip address This command sets the IP address for the access point U...

Страница 237: ...ll not be accepted by the configuration program Example Related Commands ip dhcp 7 89 ip dhcp This command enables the access point to obtain an IP address from a DHCP server Use the no form to restor...

Страница 238: ...ntax speed duplex auto 10MH 10MF 100MF 100MH auto autonegotiate speed and duplex mode 10MH Forces 10 Mbps half duplex operation 10MF Forces 10 Mbps full duplex operation 100MH Forces 100 Mbps half dup...

Страница 239: ...o disable the Ethernet port due to abnormal behavior e g excessive collisions and reenable it after the problem has been resolved You may also want to disable the Ethernet port for security reasons Ex...

Страница 240: ...terface configuration mode IC W 7 94 speed Configures the maximum data rate at which the access point transmits unicast packets IC W 7 95 turbo Configures turbo mode to use a faster data rate IC W a 7...

Страница 241: ...description Adds a description to the wireless interface IC W VAP 7 105 ssid Configures the service set identifier IC W VAP 7 106 closed system Opens access to clients without a pre configured SSID IC...

Страница 242: ...To specify the 802 11a interface enter the following command vap This command provides access to the VAP Virtual Access Point interface configuration mode Syntax vap vap id vap id The number that ide...

Страница 243: ...refer to the table for maximum distances on page C 6 When turbo mode is enabled page 7 106 for 802 11a the effective maximum speed specified by this command is double the entered value e g setting th...

Страница 244: ...sed to 40 MHz to support the increased data rate However this reduces the number of channels supported e g 5 channels for the United States Example multicast data rate This command configures the maxi...

Страница 245: ...ne the number of channels that are available When multiple access points are deployed in the same area be sure to choose a channel separated by at least two channels for 802 11a to avoid having the ch...

Страница 246: ...g b b only mode Both 802 11b and 802 11g clients can communicate with the access point but 802 11g clients can only transfer data at 802 11b standard rates up to 11 Mbps g g only mode Only 802 11g cli...

Страница 247: ...ccess point can support all 802 11b and 802 11g clients Example antenna control This command selects the use of two diversity antennas or a single antenna for the radio interface Syntax antenna contro...

Страница 248: ...tenna or an optional external antenna Syntax antenna id antenna id antenna id Specifies the ID number of an approved antenna that is connected to the access point Range 0x0000 0xFFFF Default Setting 0...

Страница 249: ...cation ensures that the access point only uses radio channels that are permitted in the country of operation Example beacon interval This command configures the rate at which beacon signals are transm...

Страница 250: ...p stations that are using Power Save mode The DTIM is the interval between two synchronous frames with broadcast multicast information The default value of 2 indicates that the access point will save...

Страница 251: ...ccessful transmission due to smaller frame size If there is significant interference present or collisions due to high network utilization try setting the fragment size to send smaller fragments This...

Страница 252: ...to notify the sending station that it can start sending data Access points contending for the wireless medium may not be aware of each other The RTS CTS mechanism can solve this Hidden Node problem Ex...

Страница 253: ...m throughput ranges between 40 to 60 Mbps for connections to Atheros compatible clients Example description This command adds a description to a the wireless interface Use the no form to remove the de...

Страница 254: ...IDs to the same as that of the access point Example closed system This command prohibits access to clients without a pre configured SSID Use the no form to disable this feature Syntax closed system no...

Страница 255: ...is disassociated from the VAP interface Syntax assoc timeout interval minutes minutes The number of minutes of inactivity before disassociation Range 5 60 Default Setting 30 Command Mode Interface Co...

Страница 256: ...terface Syntax shutdown no shutdown Default Setting Interface enabled Command Mode Interface Configuration Wireless VAP Command Usage You must first enable VAP interface 0 before you can enable VAP in...

Страница 257: ...ection Method CTS only Transmit Power FULL 16 dBm Max Station Data Rate 54Mbps Multicast Data Rate 5 5Mbps Fragmentation Threshold 2346 bytes RTS Threshold 2347 bytes Beacon Interval 100 TUs Authentic...

Страница 258: ...10 AIFSN 3 Admission Control No TXOP Limit 0 000 ms AC1 Background logCwMin 4 logCwMax 10 AIFSN 7 Admission Control No TXOP Limit 0 000 ms AC2 Video logCwMin 3 logCwMax 4 AIFSN 2 Admission Control No...

Страница 259: ...A VAP 0 802 11a Channel 60 No 802 11a Channel Stations if wireless G VAP 0 802 11g Channel 1 802 11g Channel Station Table Station Address 00 04 23 94 9A 9C VLAN ID 0 Authenticated Associated Forward...

Страница 260: ...on of nearby access points Use the no form to disable periodic detection Syntax no rogue ap enable Default Setting Disabled Command Mode Interface Configuration Wireless Command Usage While the access...

Страница 261: ...icate Default Setting Disabled Command Mode Interface Configuration Wireless Command Usage Enabling authentication in conjunction with a database of approved access points stored on a RADIUS server al...

Страница 262: ...time A long scan duration time will detect more access points in the area but causes more disruption to client access Example Related Commands rogue ap interval 7 114 rogue ap interval This command s...

Страница 263: ...ue APs wireless clients will not be able to connect to the access point Therefore avoid frequent scanning or scans of a long duration unless there is a reason to believe that more intensive scanning i...

Страница 264: ...9d a7 WLAN1AP 1 2412 MHz 12 ESS 0 0 00 30 f1 fb 31 f4 WLAN 6 2437 MHz 16 ESS 0 0 Enterprise AP Table 7 19 Wireless Security Commands Command Function Mode Page auth Defines the 802 11 authentication...

Страница 265: ...are accepted for authentication wpa2 psk Clients using WPA2 with a Pre shared Key are accepted for authentication wpa wpa2 mixed Clients using WPA or WPA2 are accepted for authentication wpa wpa2 psk...

Страница 266: ...nd be available in the wired network If a WPA WPA2 Pre shared Key mode is selected WPA PSK WPA2 PSK or WPA WPA2 PSK mixed the key must first be generated and distributed to all wireless clients before...

Страница 267: ...ore secure data transmissions enable encryption with this command and set at least one static WEP key with the key command The WEP settings must be the same on each client in your wireless network Not...

Страница 268: ...less Command Usage To enable Wired Equivalent Privacy WEP use the auth shared key command to select the shared key authentication type use the key command to configure at least one key and use the tra...

Страница 269: ...t data signals that it sends to client devices Other keys can be used for decryption of data from clients When using IEEE 802 1X the access point uses a dynamic key to encrypt unicast and broadcast me...

Страница 270: ...ny clients supported by the access point are not WPA enabled the multicast cipher algorithm must be set to WEP WEP is the first generation security protocol used to encrypt data crossing the wireless...

Страница 271: ...mode hardware software hardware Uses hardware to calculate the MIC software Uses software to calculate the MIC Default Setting software Command Mode Interface Configuration Wireless Command Usage The...

Страница 272: ...command to specify the authentication type and use the wpa preshared key command to specify one static key If WPA or WPA2 is used with pre shared key mode all wireless clients must be configured with...

Страница 273: ...command enables WPA2 pre authentication for fast secure roaming Syntax pre authentication enable disable enable Enables pre authentication for the VAP interface disable Disables pre authentication for...

Страница 274: ...nterfaces forcing clients to find and associate with another access point When the connection to the host is restored the access point re enables the radio interfaces Enterprise AP if wireless g VAP 0...

Страница 275: ...the number of failed responses either the host does not respond or is unreachable exceeds the limit set by the link integrity ping fail retry command the link is determined as lost Example link integ...

Страница 276: ...before the link is determined as lost Syntax link integrity ping fail retry counts counts The number of failed Ping counts before the link is determined as lost Range 1 10 Default Setting 6 Command Mo...

Страница 277: ...guration Command Mode Exec Example Enterprise AP config link integrity ethernet detect Notification Ethernet Link Detect SUCCESS RADIO S ENABLED Enterprise AP config Enterprise AP show link integrity...

Страница 278: ...oaming between different 802 11f compliant access points Use the no form to disable 802 11f signaling Syntax no iapp Default Enabled Command Mode Global Configuration Command Usage The current 802 11...

Страница 279: ...does not include a VLAN tag To maintain network connectivity to the access point and wireless clients be sure that the access point is connected to a device port on a wired network that supports IEEE...

Страница 280: ...vlan id vlan id Management VLAN ID Range 1 4094 Default Setting 1 Command Mode Global Configuration Command Usage The management VLAN is for managing the access point For example the access point allo...

Страница 281: ...WMM Commands The access point implements QoS using the Wi Fi Multimedia WMM standard Using WMM the access point is able to prioritize traffic and optimize performance when multiple applications compet...

Страница 282: ...owledge policy This command allows the acknowledgement wait time to be enabled or disabled for each Access Category AC Syntax wmm acknowledge policy ac_number ack noack ac_number Access categories Ran...

Страница 283: ...contention window This is the initial upper limit of the random backoff wait time before wireless medium access can be attempted The initial wait time is a random value between zero and the LogCwMin...

Страница 284: ...MM Parameters AC0 Best Effort AC1 Background AC2 Video AC3 Voice LogCwMin 4 4 3 2 LogCwMax 10 10 4 3 AIFS 3 7 2 2 TXOP Limit 0 0 94 47 Admission Control Disabled Disabled Disabled Disabled BSS Paramet...

Страница 285: ...ice Set ESS are configured to the same SSID and authentication method 2 If the access point cannot be configured using the Telnet a web browser or SNMP software Be sure to have configured the access p...

Страница 286: ...uration by pressing the reset button on the back panel for 5 seconds or more Then use the default user name admin and password smcadmin to access the management interface 5 If all other recovery measu...

Страница 287: ...The following figure illustrates how the pins on the RJ 45 connector are numbered Be sure to hold the connectors in the same orientation when attaching the wires to the pins 10 100BASE TX Pin Assignm...

Страница 288: ...Table B 1 10 100BASE TX MDI Port Pinouts Pin MDI Signal Name 1 Transmit Data plus TD 2 Transmit Data minus TD 3 Receive Data plus RD 4 GND Positive Vport 5 GND Positive Vport 6 Receive Data minus RD...

Страница 289: ...Assignments The DB 9 console port on the front panel of the access point is used to connect to the access point for out of band console configuration The command line configuration program can be acc...

Страница 290: ...ceive data 5 Unused 1 Unused 6 Unused 9 Unused 7 RTS request to send 8 CTS clear to send 8 CTS clear or send 7 RTS request to send 9 Unused 6 Unused Note The left hand column pin assignments are for t...

Страница 291: ...ance 10 13 MKK 1 14 Taiwan 1 11 Maximum Clients 64 per VAP interface Operating Range See Operating Range on page C 6 Data Rate 802 11a Normal Mode 6 9 12 18 24 36 48 54 Mbps per channel Turbo Mode 12...

Страница 292: ...input 48 VDC 0 2 A maximum Power consumption 9 6 W maximum PoE DC Input voltage 48 volts 0 2 A 12 96 watts Note Power can also be provided to the access point through the Ethernet port based on IEEE 8...

Страница 293: ...Signal Certification FCC Part 15C 15 247 15 207 2 4 GHz FCC part 15E 15 407 5 GHz RSS 210 Canada EN 301 893 EN 300 328 EN 301 489 1 EN 301 489 17 MPT RCR std 33 D33 1 13 Channel T66 Channel 14 Safety...

Страница 294: ...87 87 QPSK 12 Mbps 86 86 86 86 QPSK 18 Mbps 84 84 84 84 16 QAM 24 Mbps 82 81 81 81 16 QAM 36 Mbps 80 79 78 78 64 QAM 48 Mbps 73 73 73 73 64QAM 54 Mbps 70 70 69 67 IEEE 802 11g Data Rate Sensitivity dB...

Страница 295: ...17 17 17 36 Mbps 17 17 17 17 48 Mbps 17 17 17 17 54 Mbps 12 17 17 16 IEEE 802 11g Maximum Output Power GHz dBm Data Rate 2 412 2 417 2 467 2 472 6 Mbps 20 20 18 9 Mbps 20 20 18 12 Mbps 20 20 18 18 Mbp...

Страница 296: ...30 m 99 ft 40 m 131 ft 85 m 279 ft 250 m 820 ft 310 m 1016 ft 400 m 1311 ft 445 m 1459 ft 455 m 1492 ft 465 m 1525 ft 510 m 1672 ft Indoors2 15 m 49 5 ft 20 m 66 ft 25 m 82 ft 35 m 115 ft 40 m 131 ft...

Страница 297: ...tion algorithm that implements symmetric key cryptography AES provides very strong encryption using a completely different ciphering algorithm to TKIP and WEP Authentication The process to verify the...

Страница 298: ...ice Set ESS More than one wireless cell can be configured with the same Service Set Identifier to allow mobile users can roam between different cells with the Extended Service Set Extensible Authentic...

Страница 299: ...the wireless signaling required to ensure the successful handover of wireless clients roaming between different 802 11f compliant access points Local Area Network LAN A group of interconnected comput...

Страница 300: ...NOT be enabled Service Set Identifier SSID An identifier that is attached to packets sent over the wireless LAN and functions as a password for joining a particular radio cell i e Basic Service Set B...

Страница 301: ...adio spectrum Virtual LAN VLAN A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network A VLAN serve...

Страница 302: ...Glossary 6 Glossary...

Страница 303: ...7 40 community string 6 40 7 40 configuration settings saving or restoring 6 32 7 55 configuration initial setup 5 1 console port 1 4 connecting 2 2 pin assignments B 3 required settings 5 1 country...

Страница 304: ...rastructure wireless bridge 4 5 wireless repeater 4 6 initial setup 5 1 installation hardware 2 1 3 1 location considerations 3 1 mounting 2 1 IP address BOOTP DHCP 7 88 7 89 configuring 5 2 6 5 7 88...

Страница 305: ...mmunity string 7 40 enabling traps 6 40 7 41 trap destination 6 40 7 42 trap manager 6 40 7 42 SNTP 6 36 7 33 enabling client 6 36 7 33 server 6 36 7 33 software displaying version 6 30 6 86 7 23 down...

Страница 306: ...on 6 52 7 131 native ID 6 52 W WEP 6 74 configuring 6 74 shared key 6 75 7 120 Wi Fi Multimedia See WMM Wi Fi Protected Access See WPA Wired Equivalent Protection See WEP WPA 6 79 pre shared key 6 82...

Страница 307: ......

Страница 308: ...EUTSCH Technischer Support und weitere Information unter www smc com SPANISH En www smc com Ud podr encontrar la informaci n relativa a servicios de soporte t cnico DUTCH Technische ondersteuningsinfo...

Отзывы:

Нет отзывов