VP Networks MultiAP 700G Скачать руководство пользователя страница 40

Страница: 40 / 42

Per User VLAN tagging

MultiAP 700G supports VLAN tagging on per-client-session basis when 802.1x authentication is
configured. The VLAN ID can be passed from the Radius server.

The VLAN ID to be set on a client session is passed from the radius server in a vendor attribute in the
Access-Accept response called

Tunnel-Private-Group-ID

. When the

Tunnel-Private-Group-ID

attribute

is present, the default VLAN ID setting will be overwritten with the value of the attribute.

Sample Radiator Settings

This is a sample Radiator

users

file for enabling the

Tunnel-Private-Group-ID

attribute:

login_id User-Password=abc123

Tunnel-Type=1:VLAN,

Tunnel-Medium-Type=1:Ether_802,

Tunnel-Private-Group-ID=1:

Service-Type = Framed-User

Содержание MultiAP 700G

Страница 1: ...t notice Copyright 2012 ValuePoint Networks All Rights Reserved ValuePoint and the VP logo are trademarks of ValuePoint Networks Other brands or products mentioned may be trademarks or registered trademarks of their respective owners MultiAP 700G User Manual Aug 12 ...

Страница 2: ...MATION 6 6 1 SYSTEM 6 6 2 WIRELESS 7 6 3 WDS 8 6 4 EVENT LOG 8 6 5 NEIGHBOR APS 9 5 CONFIGURATION 10 7 1 SYSTEM SETTINGS 10 7 2 WIRELESS NETWORKS SETTINGS 16 7 3 ADVANCED SETTINGS 26 7 4 WDS SETTINGS 30 7 5 SNMP SETTINGS 32 7 6 WEB ADMIN SETTINGS 35 6 DIAGNOSTIC TOOLS 37 7 COMMANDS 38 8 PER USER VLAN TAGGING 40 APPENDIX A 41 APPENDIX B 42 ...

Страница 3: ...tion mechanism e g 802 1x open captive portal etc to facilitate building your wholesale network much faster easier and more cost effective than ever before MultiAP 700G comes with a high power Wi Fi transmitter which greatly enhances coverage and performance 2 Product Features Key features of MultiAP 700G Designed for wholesale wireless networks with multiple SSID and VLAN support Independent secu...

Страница 4: ...e power adapter 4 Wait for the status LED to turn green 5 Connect a PC to the backbone network and configure the IP address of the PC to be any IP address between 192 168 0 4 and 192 168 0 254 with subnet mask of 255 255 255 0 6 With Microsoft Internet Explorer 6 or above or Mozilla Firefox 2 0 or above connect to the URL https 192 168 0 3 7 When prompted enter the default admin login ID and passw...

Страница 5: ...MultiAP 700G unit ...

Страница 6: ...s system Network IP Mode This field can be set in Configure System The three options available are DHCP Static IP and PPPoE Router Mode only Network IP Address This shows the current IP used on the system Network Subnet Mask This shows the current subnet mask used on the system Network Gateway This shows the detected assigned network gateway of the device Network DNS This shows the detected assign...

Страница 7: ... Current Clients This indicates the number of associated clients Current Channel This shows which 802 11 channel the system is using Current Status This shows the current status of the device Connected Clients Manufacturer This shows the manufacturer based on the MAC prefix MAC address This shows the client MAC address WLAN SSID This shows which SSID the client is associated VID This shows the VLA...

Страница 8: ...AC address of the Neighbor WDS node Parent This shows the parent node of the Neighbor WDS node Channel This shows the channel of the existing Bssid RSSI This shows the signal strength of the node Level This shows the hop level of the node State This shows the state of the node wired or wireless 4 4 Event Log Upon selecting Event Log from the navigation bar on the left hand side of the Main Menu th...

Страница 9: ...r Neighbor AP Discovery Neighbor APs Manufacturer This shows the manufacturer based on the MAC prefix SSID This shows the ESSID of the scanned access point Ch This shows the channel of the scanned access point RSSI This shows the signal strength of the access point Security This shows the encryption type of the access point used BSSID This shows the wireless MAC address of the access point Last Se...

Страница 10: ...If DHCP is set the IP address of the MultiAP 700G unit is then acquired from a DHCP server on the Ethernet segment If Static IP is set it is required to enter the information related to that static IP including Static IP address Subnet Mask Default Gateway and DNS Server If PPPoE is set it is required to enter the information related to that PPPoE connection PPPoE Username PPPoE Password PPPoE Ser...

Страница 11: ...abled the parameter is set to give the likeliness for root switch election Ethernet Path Cost If STP is enabled this gives the preference to provide the best path from the switch to the root switch 5 1 1 LAN Settings LAN Settings will only be available when the AP Mode in the previous section had been selected as Router mode You can use the 700G as a DHCP server for other devices behind ...

Страница 12: ...unique IP address for the MultiAP 700G unit to communicate over the tunnel If From DHCP is set the IP address of the MultiAP 700G unit is then acquired from a DHCP server over the tunnel Tunnel IP Address and Tunnel Subnet Mask will be disabled automatically Tunnel Subnet Mask This setting specifies the subnet mask of the MultiAP 700G unit over the tunnel Tunnel Management VLAN This specifies the ...

Страница 13: ...1x EAPOL When v1 is selected both v1 and v2 clients can associate with the access point However when v2 is selected only v2 clients can associate with the access point Most modern wireless clients support v2 In the event that there are stations that do not support v2 select the option v1 By default the value of the setting is v2 Management from Wireless Clients With this option enabled Web Admin i...

Страница 14: ...he Radius server specified by this setting will be used for accounting Secondary Accounting Server This setting specifies the Radius server to used for accounting in the event that the host specified by Primary Host is unavailable Secret This is the secret for accessing the Radius server Accounting Port This specifies the UDP port number for the Accounting port of the Radius server Re authenticati...

Страница 15: ...sion power options rely on the selected operating country By default United States is selected RF Channel This option selects the 802 11 channel to be utilized Available options for 802 11b and 802 11g are from 1 to 11 and from 1 to 13 respectively depend on the operating country selected in the previous option Tx Output Power This option selects the transmit output power of the 700G device Availa...

Страница 16: ...e the virtual AP or No to disable the virtual AP By default the virtual AP is enabled Wireless Network SSID This setting specifies the SSID of the virtual AP to be scanned by Wi Fi clients The value is not case sensitive By default the value is MultiAP_XXXX where the substring XXXX in the SSID is replaced by the last four hex digits of the LAN MAC address of the unit Default VLAN ID This setting s...

Страница 17: ... will be passed to the Ethernet segment and will not be processed by MultiAP 700G Relay MultiAP 700G will forward DHCP requests to a specified DHCP Server This option prevents broadcast messages from being propagated on the Ethernet segment Upon selecting this option the DHCP Server IP address will be prompted Server MultiAP 700G will allocate and offer IP addresses locally For further details ple...

Страница 18: ... 2 Communication settings will be available For details please refer to Section 5 2 9 Alternative Layer 2 Communication Settings Wireless Network Filter This option enables the access point to filter network traffic based on the users defined rules Users can use MAC address IP address and protocol to form the matching rules to perform either drop or accept policy For details please refer to Sectio...

Страница 19: ...P clients DNS 2 This setting specifies the IP address of the secondary DNS Server to be offered to DHCP clients DNS 3 This setting specifies the IP address of the tertiary DNS Server to be offered to DHCP clients Domain This setting specifies the domain name of the Wi Fi segment Lease Time This setting specifies the length of time throughout which an IP address of a DHCP client remains valid Upon ...

Страница 20: ...For ASCII format key length is either 5 or 13 For HEX format key length is either 10 or 26 Shared Key Authentication This setting enables the use of shared key authentication Open authentication is the default authentication 5 2 4 802 1x Parameters The configuration of 802 1x parameters enables Radius based 802 1x authentication with a dynamic WEP key The configuration screen is as follows 802 1x ...

Страница 21: ... or Pass Phrase is used for data encryption and authentication Under this configuration the Pre Shared Key option should be enabled Key length must be between 8 and 63 characters inclusive The security level of this method is known to be high 5 2 6 Access Control The settings allow administrator to control the access through Mac address filtering Available options are None Deny all except listed a...

Страница 22: ...ct URL This setting specifies the URL to be used to redirect the users HTTP and HTTPS are available for the choice of protocols Authentication URL This setting will only be available if you have chosen Plain Key Authentication or Shared Key Authentication as the authentication method It specifies the authentication URL to be used HTTP and HTTPS are available for the choice of protocols Comment ...

Страница 23: ...s setting specifies the method to do user authentication and the options are No Authentication Plain Key Authentication Shared Key Authentication and RADIUS Authentication Authentication Key This setting specifies the authentication key which is only available when Plain Key Authentication or Shared Key Authentication has been selected 5 2 8 Bandwidth Management Bandwidth Management Per VAP Settin...

Страница 24: ...parate unicast packet feature for Layer 2 communication Separate Broadcast Multicast packets Check the box to enable the separate broadcast multicast packets feature for Layer 2 communication Separate between SSIDs Check the box to enable the separate between SSIDs feature for Layer 2 communication ...

Страница 25: ... the source destination IP address es and the Netmask to be filtered Source Destination Port This setting specifies the source destination Port s to be filtered Protocol This setting specifies the Protocol to be filtered Policy This option defines the policy of this filter Available options are accept and drop Enable Check the box to enable or disable this filter You can delete any existing filter...

Страница 26: ...ach beacon send Available options are 100ms 250ms 500ms DTIM This setting provides the option to set the frequency for beacon to include Delivery Traffic Indication Message DTIM The interval unit is in millisecond RTS Threshold This setting provides the option to set the minimum packet size for the unit to send an RTS using the RTS CTS handshake Setting zero would disable this feature Fragmentatio...

Страница 27: ...AP device and adapters Available options are Long and Auto A long preamble type can be selected if the device is operating in a noisy network environment By default it is set as Auto 5 3 2 Neighbor AP Discovery Neighbor AP Discovery Neighbor AP Discovery Check the box to enable the function of scanning neighbor APs Scanning Interval This setting determines how often the access point goes to other ...

Страница 28: ... check is failed 5 3 5 Scheduled Tasks Scheduled Tasks Self Maintenance The system would perform reboot based on the scheduled time selected Auto Channel Selection The system would perform auto channel selection to avoid congested channel when no clients currently associated to the access point Radio On Off Period This option specify the time period which radio would be switched ON or OFF If there...

Страница 29: ...Schedule tasks will be started after date synchronized from NTP server ...

Страница 30: ...wired Ethernet to determine the node type If there is connectivity to the default gateway the unit would state its node type as gateway Otherwise the unit would state its node type as node Wired the unit is expected to be wire connected to provide public network access to other wireless nodes Wireless the unit would search for the best gateway or node wirelessly in order to gain public network acc...

Страница 31: ...Settings you can configure WDS connections manually Manual WDS Mode Enable This option enables this entry MAC Address This setting gives the MAC address of the other AP to form a WDS link Security Policy For more detail please refer to section 5 2 3 Static WEP Comment ...

Страница 32: ... the support for Version 2 of SNMP SNMPv3 This setting specifies whether to enable or disable the support for Version 3 of SNMP SNMP Trap SNMP Trap is a message initiated from a client and sent to the 700G device Once this option is enabled the following two options for SNMP Trap will be available for configuration SNMP Trap Receiver Name When SNMP Trap is enabled This setting specifies the SNMP T...

Страница 33: ...SNMPv2 Communities Community Name The password for getting or setting SNMP values IP Address and IP Mask The allowed subnet address who can access the SNMP server Access Mode Choose the access mode for this community name to either Read Only or Read Write Status Select to Enable or Disable this community ...

Страница 34: ... HMAC SHA Authentication Password Only users provided with a correct password will be granted the right to access the SNMP agent Privacy Protocol The encryption method to be used in SNMPv3 communication Available options are None and CBC DES Privacy Password When CBC DES is chosen as the Privacy Protocol This is the key for decrypting the encrypted data Access Mode Grant Read Only or Read Write ac...

Страница 35: ...This option specifies the protocol for web access of the device By default it is set as HTTPS Management Port This option configures the TCP port number of the secure web server By default the TCP port number is 443 HTTP to HTTPS Redirection With this option being enabled user who accesses the web admin with HTTP protocol will be redirected to HTTPS automatically WEB Access Control Select to enabl...

Страница 36: ...me enter the new username into the Username input fields To change to the password enter the same new password into the New Password and New Password Retype input fields 5 6 3 Disable Web Administration The selection Disable Web Administration turns off the access to Web Administration Interface After being turned off Web Administration Interface can be re enabled using SNMP ...

Страница 37: ...6 Diagnostic Tools This provides three useful tools for diagnosing the network The three available options are Ping Traceroute and Nslookup Comment ...

Страница 38: ...oss reboots choose Save Current Configuration to Flash Download Active Configuration Select this command to download the active configuration for backup purposes Upload Configuration Select this command to upload the configuration from a backed up configuration file The configuration changes are not immediately effected after uploading but are effected upon the selection of Activate Changes Upgrad...

Страница 39: ...t resolution by technical support from MultiAP please send along with a debug file with the support request Restore Factory Default This command to restore the device to factory default settings Users may check the box to preserver network settings including Server IP Subnet Mask Default Gateway DNS Server and Management VLAN ID Other configuration will be lost after the restoration Reboot AP This...

Страница 40: ... vendor attribute in the Access Accept response called Tunnel Private Group ID When the Tunnel Private Group ID attribute is present the default VLAN ID setting will be overwritten with the value of the attribute Sample Radiator Settings This is a sample Radiator users file for enabling the Tunnel Private Group ID attribute login_id User Password abc123 Tunnel Type 1 VLAN Tunnel Medium Type 1 Ethe...

Страница 41: ...of the virtual access point to WPA AES CCMP Sample Radiator Settings AuthPort 1812 AcctPort 1813 LogDir var log radius DbDir etc radiator Trace 4 Client DEFAULT Secret testing123 DupInterval 0 Client Realm DEFAULT AuthBy FILE Filename etc radiator users EAPType TTLS EAPTLS_CAFile etc 1x cert demoCA cacert pem EAPTLS_CertificateFile etc 1x cert cert srv pem EAPTLS_CertificateType PEM ...

Страница 42: ...ocate the receiving antenna 2 Increase the separation between the equipment and receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harm...

Результаты поиска

Содержание MultiAP 700G

Отзывы:

Бренды по названию

Популярные бренды

VP Networks MultiAP 700G, Руководство пользователя

Результаты поиска

Содержание MultiAP 700G

Отзывы:

Бренды по названию

Популярные бренды