Страница 1: ......
Страница 2: ...HAPTER 4 PC AND SERVER CONFIGURATION 37 Overview 37 Using WEP 37 Using WPA PSK WPA2 PSK 38 Using WPA Enterprise 39 802 1x Server Setup Windows 2000 Server 40 802 1x Client Setup on Windows XP 50 Using...
Страница 3: ...NDIX D ABOUT WIRELESS LANS 89 Overview 89 Wireless LAN Terminology 89 APPENDIX E COMMAND LINE INTERFACE 92 Overview 92 Command Reference 92 P N 956YHD0001 Copyright 2007 All Rights Reserved Document V...
Страница 4: ...llows packet transmission up to 300Mbps for maximum throughput or automatic speed reduction to lower speeds when the environment does not permit maximum throughput Features of your Wireless Access Poi...
Страница 5: ...ces connecting to different Virtual APs can be isolated from each other VLAN Support The 802 1Q VLAN standard is supported allowing traffic from differ ent sources to be segmented Combined with the mu...
Страница 6: ...eless Access Point can send its log data to your Syslog Server SNMP Support SNMP Simple Network Management Protocol is supported allowing you to use a SNMP program to manage the Wireless Access Point...
Страница 7: ...Security WPS Off WPS feature is not in use On Blue If the LED is on for a while and then off WPS is processing successfully Blinking Blue WPS feature is currently in use Blinking Amber WPS is in error...
Страница 8: ...utton has two 2 functions Reboot When pressed and released the Wireless Access Point will reboot restart Reset to Factory Defaults This button can also be used to clear ALL data and restore ALL settin...
Страница 9: ...Access Point To maximize reliability and performance follow these guidelines Use an elevated location such as wall mounted or on the top of a cubicle Place the Wireless Access Point near the center o...
Страница 10: ...ess Point to a 10 100BaseT hub switch on your LAN 3 Connect the supplied power adapter to the Wireless Access Point and a convenient power outlet and power up 4 Check the LEDs The Status LED should fl...
Страница 11: ...ew This chapter describes the setup procedure to make the Wireless Access Point a valid device on your LAN and to function as an Access Point for your Wireless Stations Wireless Stations may also requ...
Страница 12: ...rt your Web browser Note If you have changed the default IP Address assigned to the TEW 636APB make sure to enter the correct IP Address 3 Open your web browser type HTTP SCXXXXXX in the Address bar a...
Страница 13: ...screens and features available on the Management menu 8 Use the Apply and Reboot buttons on the menu to apply your changes and restart the Wireless Access Point Setup is now complete Wireless stations...
Страница 14: ...on MAC Address The MAC address is displayed IP Settings DHCP Client Select this option if you have a DHCP Server on your LAN and you wish the Access Point to obtain an IP address automatically Fixed I...
Страница 15: ...the DHCP server when allocating IP Addresses to DHCP clients This range also determines the number of DHCP clients supported NTP NTP Server Name IP Ad dress Enter the server name or IP address of the...
Страница 16: ...the hubs switches on your LAN support the VLAN standard Delete Add buttons Use these buttons to add or delete the VLAN ID Management VLAN Define the VLAN IDs used for management LLTD Enable Link Layer...
Страница 17: ...15 Authentication Authentication via MAC Address Select this if you want to Use MAC Address for Authentication Authentication via Name and Password Select this if you want to Use name and password fo...
Страница 18: ...s used by Wireless Stations Click Basic Settings on the Wireless menu to view a screen like the following Figure 8 Wireless Basic Screen Data Wireless Basic Settings Screen Operation Wireless Mode Sel...
Страница 19: ...the allowed APs 1 Click the button Set PTMP APs 2 On the resulting sub screen enter the MAC addresses of the allowed APs PTP Bridge AP MAC Address This is not required unless the Bridge Mode is Point...
Страница 20: ...VAP name is displayed SSID The current SSID associated with this VAP Security System The current security system e g WPA PSK is dis played Enable Button Enable the selected VAP Configure Button Chang...
Страница 21: ...ration If enabled then each Wireless station using the Access Point is invisible to other Wireless stations In most business stations this setting should be Disabled VLAN ID Enter the desired VLAN ID...
Страница 22: ...dius Server Each user must authenticate on the Radius Server This is usually done using digital certificates Each user s wireless client must support 802 1x and provide the Radius authentication data...
Страница 23: ...Security None No security is used Anyone using the correct SSID can connect to your network Security Settings WEP This is the 802 11b standard Data is encrypted before transmission but the encryption...
Страница 24: ...a particular method select the appropriate value Open System or Shared Key All Wireless stations must then be set to use the same method Key Input Select Hex or ASCII depending on your input method A...
Страница 25: ...ue Data is encrypted using a 256Bit key derived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key...
Страница 26: ...rived from this key Other Wireless Stations must use the same key WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broad...
Страница 27: ...this key Other Wireless Stations must use the same key WPA Encryption The encryption method is TKIP for WPA PSK and AES for WPA2 PSK Group Key Update This refers to the key used for broadcast transmi...
Страница 28: ...th Radius Screen WPA with Radius WPA Encryption The encryption method is TKIP Wireless Stations must also use TKIP Group Key Update This refers to the key used for broadcast transmissions Enable this...
Страница 29: ...adius Screen WPA2 with Radius WPA Encryption The encryption method is AES Wireless Stations must also use AES Group Key Update This refers to the key used for broadcast transmissions Enable this if yo...
Страница 30: ...Data WPA and WPA2 with Radius Screen WPA and WPA2 with Radius WPA Encryption The encryption method is TKIP for WPA and AES for WPA2 Group Key Update This refers to the key used for broadcast transmiss...
Страница 31: ...dard You only have to select the WEP key size the WEP key is automatically generated Figure 19 802 1x Wireless Security Screen Data 802 1x Screen 802 1x WEP Key Size Select the desired option 64 Bit K...
Страница 32: ...WEP Key EAP MD5 Enable this if some wireless clients use a fixed static WEP key using EAP MD5 Note that both Dynamic and Static keys can be used simulta neously allowing clients using either method t...
Страница 33: ...ared Secret Enter the key value to match the Radius Server Backup Authentication Server The Backup Authentication Server will be used when the Primary Authentication Server is not available Accounting...
Страница 34: ...you have not added any stations this table will be empty For each Wireless station the following data is displayed Name the name of the Wireless station MAC Address the MAC or physical address of eac...
Страница 35: ...Station Use this when adding or editing a Trusted Station Address The MAC physical address of the Trusted Wireless Station Use this when adding or editing a Trusted Station Buttons Add a Trusted Wire...
Страница 36: ...list 2 Click the Edit button The address will be copied to the Address field and the Add button will change to Update 3 Edit the address MAC or physical address as required 4 Click Update to save you...
Страница 37: ...hen WMM acknowledgement is disabled Depend ing on the environment disabling acknowledgement may increase throughput slightly Parameters Disassociated Timeout This determines how quickly a Wireless Sta...
Страница 38: ...Wireless menu to view a screen like the following Figure 24 WPS PIN Screen Data WPS PIN Screen WPS PIN Input Enrollee s PIN Check this and enter the PIN code to the client device Change AP Settings Ch...
Страница 39: ...lso more complex Using WEP For each of the following items each Wireless Station must have the same settings as the Wireless Access Point Mode On each PC the mode must be set to Infrastructure SSID ES...
Страница 40: ...t be set to Infrastructure SSID ESSID This must match the value used on the Wireless Access Point The default value is wireless Note The SSID is case sensitive Wireless Security On each client Wireles...
Страница 41: ...tion for the Radius Server 802 1x Encryption Typically EAP TLS is used This is a dynamic key system so keys do NOT have to be entered on each Wireless station However you can also use a static WEP key...
Страница 42: ...he default prompts ensure that DNS is installed and enabled during installa tion Services Installation 1 Select the Control Panel Add Remove Programs 2 Click Add Remove Windows Components from the lef...
Страница 43: ...rver Configuration 41 Figure 25 Components Screen 4 Click Next 5 Select the Enterprise root CA and click Next Figure 26 Certification Screen 6 Enter the information for the Certificate Authority and c...
Страница 44: ...must be stopped before continuing Click Ok then Finish DHCP server configuration 1 Click on the Start Programs Administrative Tools DHCP 2 Right click on the server entry as shown and select New Scop...
Страница 45: ...er the router address for the current subnet The router address may be left blank if there is no router Click Next 10 For the Parent domain enter the domain you specified for the domain controller set...
Страница 46: ...and select New Certificate to Issue Figure 31 Certificate Authority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 32 Temp...
Страница 47: ...lect the Group Policy tab choose Default Domain Policy then click Edit Figure 34 Group Policy Tab 7 Select Computer Configuration Windows Settings Security Settings Public Key Policies right click Aut...
Страница 48: ...ct Computer then click Next Figure 36 Certificate Template Screen 10 Ensure that your certificate authority is checked then click Next 11 Review the policy change information and click Finish 12 Click...
Страница 49: ...ess Access Point and set the shared secret as entered on the Security Settings of the Wireless Access Point 5 Click Finish 6 Right click on Remote Access Policies select New Remote Access Policy 7 Ass...
Страница 50: ...ct the Authentication tab Enable Extensible Authentication Protocol and select Smart Card or other Certificate Deselect other authentication me thods listed Click OK Figure 39 Authentication Screen 12...
Страница 51: ...Access Login for Users 1 Select Start Programs Administrative Tools Active Directory Users and Computers 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow acc...
Страница 52: ...at You are using Windows XP You are connecting to a Windows 2000 server for authentication You already have a login User name and password on the Windows 2000 server Client Certificate Setup 1 Connect...
Страница 53: ...PC and Server Configuration 51 Figure 42 Wireless CA Screen 5 Select User certificate request and select User Certificate the click Next Figure 43 Request Type Screen 6 Click Submit...
Страница 54: ...Figure 44 Identifying Information Screen 7 A message will be displayed then the certificate will be returned to you Click Install this certificate Figure 45 Certificate Issued Screen 8 You will recei...
Страница 55: ...ork Connection and select Properties 3 Select the Authentication Tab and ensure that Enable network access control using IEEE 802 1X is selected and Smart Card or other Certificate is selected from th...
Страница 56: ...nable encryption for a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 48 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and...
Страница 57: ...PC and Server Configuration 55 Figure 49 Properties Screen Setup for Windows XP and 802 1x client is now complete...
Страница 58: ...The key is pro vided for me automatically Instead you must enter the WEP key manually ensuring it matches the WEP key used on the Access Point Figure 50 Properties Screen Note On some systems the 64...
Страница 59: ...ic However you may need to perform the following operations on a regular basis If using the Access Control feature update the Trusted PC database as required See Access Control in Chapter 3 for detail...
Страница 60: ...the current IP address was obtained from a DHCP Server on your network It will display Enabled or Disabled Wireless BSSID The BSSID currently in use is displayed Channel Frequency The Channel currentl...
Страница 61: ...Status 59 Statistics Screen This screen is displayed when the Statistics button on the Status screen is clicked It shows details of the traffic flowing through the Wireless Access Point Figure 52 Stat...
Страница 62: ...es a connection between the AP and the client Usually clients asso ciate with only one 1 AP at any time Disassociation The number of Disassociation packets received Disassociation breaks the existing...
Страница 63: ...gave to this VAP if you didn t change the name the default name is used SSID The SSID assigned to this VAP Broadcast SSID Indicates whether or not the SSID is broadcast Security The security method us...
Страница 64: ...Screen Data Activity Log Data Current Time The system date and time is displayed Log The Log shows details of the connections to the Wireless Access Point Buttons Refresh Update the data on screen Sa...
Страница 65: ...a Station List Screen Station List MAC Address The MAC physical address of each Wireless Station is displayed Mode The mode of each Wireless Station SSID This displays the SSID used the Wireless stati...
Страница 66: ...Login Config File Rogue APs SNMP Settings Syslog Settings Upgrade Firmware Admin Login Screen The Admin Login screen allows you to assign a password to the Wireless Access Point This password limits...
Страница 67: ...nabled HTTP Port Number Enter the port number to be used for HTTP connections to this device The default value is 80 Enable HTTPS Enable this to allow admin connections via HTTPS secure HTTP If enable...
Страница 68: ...e a copy of cur rent settings Once you have the Access Point working properly you should back up the settings to a file on your computer You can later restore the Access Point s settings from this fil...
Страница 69: ...factory default settings click Set to Defaults button Note This will terminate the current connection The Access Point will be unavailable until it has restarted By default the Access Point will act...
Страница 70: ...use this feature enable the Enable Rogue AP Detection checkbox and select the desired wireless band and time interval Scan Enter the desired time interval between each scan Detection generates SNMP T...
Страница 71: ...y Data can be read and setting changed SNMPv3 User Name Enter the user name for SNMPv3 Authentication Protocol Select the authentication protocol used by SNMPv3 Authentication Key Enter the authentica...
Страница 72: ...agement 71 Traps Version Select the desired option as supported by your SNMP Management program Receiver Select this to have Trap messages sent to the specified PC only You must enter the IP Address o...
Страница 73: ...used Broadcast Syslog data is broadcast Use this option if different PCs act as the Syslog server at different times Send to specified Syslog Server Select this if the same PC is always used as the Sy...
Страница 74: ...the following Figure 61 Firmware Upgrade Screen To perform the Firmware Upgrade 1 Click the Browse button and navigate to the location of the upgrade file 2 Select the upgrade file Its name will appe...
Страница 75: ...apter 12VDC 1A External Dimensions 147mm W 147mm D 33mm H Wireless Specifications Receive Sensitivity at 11Mbps min 85dBm Receive Sensitivity at 5 5Mbps min 89dBm Receive Sensitivity at 2Mbps min 90dB...
Страница 76: ...ridge mode can be used simultaneously with Common AP mode Security Open shared WPA WPA PSK and WPA2 PSK authentication 802 1x support EAP TLS EAP TTLS PEAP Block inter wireless station communication B...
Страница 77: ...ipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help To assure...
Страница 78: ...IP Address automatically DHCP client restart it You can use the following method to determine the IP address of the Wireless Access Point and then try to connect using the IP address in stead of the n...
Страница 79: ...ngs on the Wire less Access Point On the PC the wireless mode is set to Infrastructure If using the Access Control feature the PC s name and address is in the Trusted Stations list If using 802 1x mod...
Страница 80: ...o need to change the TCP IP of each PC Just configure the Wireless Access Point to match your existing LAN The following sections provide details about checking the TCP IP settings for various types o...
Страница 81: ...n an IP Address automatically This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is already configured for a fixed specifi...
Страница 82: ...tings Windows NT4 0 1 Select Control Panel Network and on the Protocols tab select the TCP IP protocol as shown below Figure 65 Windows NT4 0 TCP IP 2 Click the Properties button to see a screen like...
Страница 83: ...n IP address from a DHCP Server This is the default Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using Specify an IP Address If your PC is...
Страница 84: ...2 Right click the Local Area Connection icon and select Properties You should see a screen like the following Figure 67 Network Configuration Win 2000 3 Select the TCP IP protocol for your network ca...
Страница 85: ...Windows setting This is the default Windows settings To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a...
Страница 86: ...t click the Local Area Connection and choose Properties You should see a screen like the following Figure 69 Network Configuration Windows XP 3 Select the TCP IP protocol for your network card 4 Click...
Страница 87: ...his is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for a fixed specified IP...
Страница 88: ...ocal Area Connection Status and choose Properties Click Continue to the User Account Control dialog box then you should see a screen like the following Figure 71 Network Configuration Windows Vista 3...
Страница 89: ...dress automatically This is the default Windows setting To work correctly you need a DHCP server on your LAN Using a fixed IP Address Use the following IP Address If your PC is already configured for...
Страница 90: ...ss Stations e g Notebook PCs with wireless cards to a wired Ethernet LAN The Wireless Stations can then access all LAN resources Access Points can only function in Infrastructure mode and can communic...
Страница 91: ...Access Point If more than one Access Point can be used the one with the strongest signal is used This can only happen within an ESS If using Ad hoc mode no Access Point all Wireless stations should be...
Страница 92: ...quired 802 1x This uses the 802 1x standard for client authentication and WEP for data encryption If possi ble you should use WPA Enterprise instead because WPA encryption is much stronger than WEP en...
Страница 93: ...Password 3 Once connected you can use any of the commands listed in the following Command Reference Command Reference The following commands are available config vap Config Virtual AP X Display CLI C...
Страница 94: ...gateway Display Gateway IP Address get gtkupdate Display Group Key Update Mode get gtkupdateinterval Display Group Key Update Interval in Seconds get http Display HTTP Mode get httpport Display HTTP P...
Страница 95: ...ay Short Preamble Usage get snmpreadcommun ity Display SNMP Read Community get snmpwritecom munity Display SNMP Write Community get snmpmode Display SNMP Mode get snmpmanagemode Display SNMP Manager M...
Страница 96: ...t 11n A MPDU Aggregation Mode set 11namsdu Set 11n A MSDU Aggregation Mode set 11nguardinterval Set 11n Guard Interval Mode set 11nsubchannel Set 11n Extension Sub Channel set 11nradioband Set 11n Rad...
Страница 97: ...k set isolation Set Isolate All Virtual APs State set key Set WEP Key Value set keylength Set WEP Key Length set lltd Set LLTD Mode set md5supplicant Set 802 1x MD5 Supplicant Mode set md5suppname Set...
Страница 98: ...3authproto Set SNMP v3 Authentication Protocol set snmpv3authkey Set SNMP v3 Authentication Key set snmpv3privproto Set SNMP v3 Private Protocol set snmpv3privkey Set SNMP v3 Private Key set ssid Set...
Страница 99: ...ireless Access Point User Guide 98 set wmm Set WMM Mode set wmmnoack Set WMM No Acknowledge factoryrestore Restore to Default Factory Settings apply To make the changes take effect exit Quit the telne...
Страница 100: ...Wireless Access Point User Guide 100...
