RBT-4102 Wireless Access Point Configuration Guide
Wireless Networking
Enterasys RoamAbout
Page
Enterasys Networks, Inc 50 Minuteman Road Andover, MA
You and Enterasys agree as follows
Enterasys Networks, Inc. Firmware License Agreement
BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT
CAREFULLY READ THIS LICENSE AGREEMENT
5. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The enclosed Program i was developed solely at private expense ii contains “restricted computer software” submitted with restricted rights in accordance with section 52.227‐19 a through d of the Commercial Computer Software‐Restricted Rights Clause and its successors, and iii in all respects is proprietary data belonging to Enterasys and/or its suppliers. For Department of Defense units, the Program is considered commercial computer software in accordance with DFARS section 227.7202‐3 and its successors, and use, duplication, or disclosure by the U.S. Government is subject to restrictions set forth herein
11. ASSIGNMENT. You may not assign, transfer or sublicense this Agreement or any of Your rights or obligations under this Agreement, except that You may assign this Agreement to any person or entity which acquires substantially all of Your stock assets. Enterasys may assign this Agreement in its sole discretion. This Agreement shall be binding upon and inure to the benefit of the parties, their legal representatives, permitted transferees, successors and assigns as permitted by this Agreement. Any attempted assignment, transfer or sublicense in violation of the terms of this Agreement shall be void and a breach of this Agreement
4. TITLE AND PROPRIETARY RIGHTS
Enterasys Networks, Inc. Software License Agreement
to Enterasys
12. GENERAL
viii
Chapter 4 Advanced Configuration
Contents
Chapter 2 Network Configuration
Chapter 3 Initial Configuration
Filter Control and VLANs
Appendix A Default Settings
Appendix B Troubleshooting
Index
Page
Firmware Version Support
Preface
Purpose of This Manual
Intended Audience
Getting Help
Convention
Description
Overview
Introduction
Policy
Features
Applications
1-4 Introduction
Applications
Overview
Network Configuration
Figure 2-1 Ad Hoc Wireless LAN
Network Topologies
Ad Hoc Wireless LAN no Access Point or Bridge
Figure 2-2 Infrastructure Wireless LAN
Infrastructure Wireless LAN
Figure 2-3 Infrastructure Wireless LAN for Roaming
Infrastructure Wireless LAN for Roaming Wireless PCs
Figure 2-4 Infrastructure Wireless Bridge
Infrastructure Wireless Bridge
Network Topologies
2-6 Network Configuration
Overview
Initial Configuration
Initial Setup Using the CLI
Required Connections
Logging In
c. Reboot the RoamAbout RBT‐4102
Using Web Management
If applicable, the County Code page appears, go to step
d. Click OK The access point reboots, and the Login window appears
4. Enter the following information, and click Apply
d. Click Apply at the bottom of the page
h. Click OK The access point reboots
c. Specify a new password in the Password field
Table 4-1 Advanced Configuration
Advanced Configuration
Using the Web Interface
Using the Command Line Interface CLI
Page
Table 4-1 Advanced Configuration continued
Menu
Description
Identification
Using Web Management to Configure System Information
Using the CLI to Configure System Information
TCP / IP Settings
Using Web Management to Configure TCP/IP
The access point only supports SSH version
Using the CLI to Configure TCP/IP
TCP/IP Configuration
Example
Example
SSH Configuration
Ethernet Settings Configuration
Example
Speed-duplexOper 100Base-TX Full Duplex
Auto Negotiate Disable Speed-duplexAdmin 100Base-TX Full Duplex
TCP / IP Settings
4-10 Advanced Configuration
RADIUS
Using Web Management to Configure RADIUS
Description
Table 4-2 RADIUS Attributes
RADIUS Accounting Attribute
RADIUS Accounting enables or disables the AP to send RADIUS accounting information for clients to the RADIUS accounting server. Default Disable
RADIUS Accounting Attribute
Using the CLI to Configure RADIUS
Table 4-2 RADIUS Attributes continued
Example
Authentication
Using Web Management to Configure Authentication
Example
Using the CLI to Configure Authentication
Filter Control and VLANs
Using Web Management to Configure Filter Control and VLANs
IBSS Relay Control, in conjunction with radio interface and Virtual AP VAP IBSS settings, controls whether clients associated with an interface or VAP can establish wireless communications with clients associated with other interfaces or VAPs. Default All VAP mode
Using the CLI to Configure Filter Control and VLANs
CLI Commands for VLAN Support
Example
Page
Example
CLI Commands for Filtering
Example
SVP Commands
CDP Settings
Using Web Management to Configure CDP
Global Status
Port Status Disable ‐ disables this AP from using CDP
Example
Using the CLI to Configure CDP
Rogue AP Detection
Using Web Management to Configure Rogue AP Detection
Example
Using the CLI to Configure Rogue AP Detection
802.11a Rogue AP Status
SNMP
Using Web Management to Configure SNMP
Description
Table 4-3 SNMP Notifications
Notification
SNMP allows you to enable or disable SNMP management access and also enables the access point to send SNMP traps notifications. SNMP management is enabled by default
Table 4-3 SNMP Notifications continued
User specifies string to identify an SNMP user. 32 characters maximum
Security Level
SNMP Targets
SNMP Filter
IP Address is the IP address of the user
Using the CLI to Configure SNMP
CLI Commands for SNMP
Examples
Examples
CLI Commands for Configuring SNMPv3 Users and Groups
RoamAbout 4102#show snmp group-assignments GroupName TPS
RoamAbout RBT-4102 Wireless Access Point Configuration Guide
Passphrase PrivType DES Passphrase
=============================================
Example
CLI Commands for Configuring SNMPv3 Targets
CLI Commands for Configuring SNMPv3 Trap Filters
Example
Changing the Password
Administration
Using Web Management to Change the Password
Enabling and Disabling Com Port
Using the CLI to Change the Password
Using Web Management to Enable and Disable Com Port
Using the CLI to Enable and Disable Com Port
Upgrading Firmware
Using Web Management to Upgrade Firmware
Example
Using the CLI to Upgrade Firmware
System Log
Using Web Management to Configure System Log
Description
Error Level
Table 4-4 Logging Level Descriptions
Logging Level sets the severity level for event logging
Examples
Using the CLI to Configure System Log
Using Web Management to Configure SNTP
Examples
Using the CLI to Configure SNTP
WDS and STP
4-50 Advanced Configuration
WDS and STP
WDS and STP
Using Web Management to Configure WDS and STP
RoamAbout RBT-4102 Wireless Access Point Configuration Guide
Select WDS & STP from the menu
Bridge enables/disables STP on the wireless bridge. Default Disabled
‐ Range 0‐65535 ‐ Default
Using the CLI to Configure WDS
Examples
Example
Example
Using the CLI to Configure STP
Radio Interface
Radio Signal Characteristics
Using Web Management to Configure Interface Radio Settings
Radio Settings
Value
Table 4-5 VLAN ID RADIUS Attributes
Number
RADIUS Attribute
Note The Antenna ID must be selected in conjunction with the Antenna Control Method to configure proper use of any of the antenna options
Default 802.11b and 802.11g
faster. Using higher DTIM values reduces the power used by stations in Power Save mode, but delays the transmission of broadcast/multicast frames. Range 1‐255 beacons Default 2 beacons
Using the CLI to Configure the 802.11a Interface Radio Settings
Example
Set any other parameters as required
802.11 Parameters
Authentication Parameters
Quality of Service
Example
Admission Control No
Example
Using the CLI to Configure the 802.11b/g Interface Radio Settings
Authentication Parameters
Quality of Service
Example
Radio Interface
WMM Operation
Wi-Fi Multimedia WMM Configuration
Table 4-6 WMM Access Categories
Access
Figure 4-1 WMM Backoff Wait times
Using Web Management to Configure WMM
Examples
Using the CLI to Configure WMM
Security
Antenna
Admission Control No
Using Web Management to Configure Virtual APs
Virtual APs VAPs Configuration
Radio Interface
4-74 Advanced Configuration
Examples
Using the CLI to Configure Virtual APs
802.11 Parameters
To view VAP settings, use the show interface wireless ag vap# command
Admission Control No
Mechanism
Security
Table 4-7 Security Mechanisms
Security
Using Web Management to Configure Security Settings
Wired Equivalent Privacy WEP
Key Len specifies whether to use 64, 128 or 152 bit keys
Security
RoamAbout RBT-4102 Wireless Access Point Configuration Guide
To use Pre‐Authentication, you must have the following
Authentication
Hexadecimal uses a key made up of a string of 64 hexadecimal numbers
802.1x Authentication
The 802.1x EAP packets are also used to pass dynamic unicast session keys and static broadcast keys to wireless clients. Session keys are unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point. You can also enable broadcast key rotation, so the access point provides a dynamic broadcast key and changes it at a specified interval
If you specify RADIUS MAC for this default interface or VAP, you must specify the following parameters
Example
Using the CLI to Configure WPA Pre-Shared Key
Using the CLI to Configure WPA over 802.1X Security
Example
Example
g command
Authentication Parameters
Quality of Service
AC1Background
Examples
Using the CLI to Configure Local MAC Authentication
802.11a
4-90 Advanced Configuration
Index MAC Address
Status
Examples
Using the CLI to Configure RADIUS MAC Authentication
Example
Examples
Using the CLI to Configure WEP Shared Key Security
Page
Examples
Using the CLI to Configure WEP over 802.1x Security
WPA Key Mgmt Mode
Examples
Using the CLI to Configure WPA2 Security
WPA PSK Key Type
Using the CLI to Configure WPA2 Pre-Shared Key Security
Examples
Examples
Multicast cipher
Menu
Status Information
Table 4-8 Status
Status information is described in Table 4‐8
Status Information
Using Web Management to View AP Status
4-102 Advanced Configuration
Select AP Status from the menu
System Up Time is the length of time the management agent has been up
Examples
Using the CLI to Display AP Status
Using Web Management to View CDP Status
Example
Using the CLI to Display CDP Status
Using Web Management to View Station Status
RoamAbout RBT-4102 Wireless Access Point Configuration Guide
Status Information
Station Address is the MAC address of the wireless client
Using Web Management to View Neighbor AP Detection Status
Example
Using the CLI to View Neighbor AP Detection Status
Forward Transitions
Using Web Management to View WDS-STP Status
Using the CLI to View WDS-STP Status
show bridge
Example
show bridge link
Child Status
Example
Example
Root Bridge Status
Using Web Management to View Event Logs
Examples
Using the CLI to View Event Logs
From the global configuration mode, use the show logging command
command from the Executive mode. clear command from the Global
Status Information
RoamAbout RBT-4102 Wireless Access Point Configuration Guide
Status Information
4-118 Advanced Configuration
Parameter
Default Settings
Feature
Default
Parameter
Feature
Default
A-2 Default Settings
Parameter
Feature
Default
RoamAbout RBT-4102 Wireless Access Point Configuration Guide A-3
Parameter
Feature
Default
A-4 Default Settings
Parameter
Feature
Default
RoamAbout RBT-4102 Wireless Access Point Configuration Guide A-5
Parameter
Feature
Default
A-6 Default Settings
Troubleshooting Steps
Troubleshooting
4. If you forgot or lost the password
Maximum Distance Tables
Table B-1 802.11a Wireless Distance Speed and Distance Ranges1
Table B-2 802.11b Wireless Distance Speed and Distance Ranges1
Table B-3 802.11g Wireless Distance Table Speed and Distance Ranges1
Maximum Distance Tables
B-4 Troubleshooting
Numerics
Index
CLI 4-28 detection
WDS 4-50 bridge 4-52 CLI
Index-4
