Manuals / Intermec / Computer Equipment / Network Router

Intermec 6710 manual Password Security, Operation

Models: 6710

1 348

Download 348 pages 28.47 Kb

Page 229

APPENDIX E " OWL/IP

Password Security

The access point has two levels of password security. Knowledge of the standard password allows general access to the configuration menus. If desired, the OWL/IP configuration can be access protected by enabling the Advanced Password in the [Security] menu.

Operation

OWL/IP uses IP encapsulation to establish a virtual LAN segment through an IP router. The OWL/IP tunnel becomes a branch in the spanning tree. Access points on the remote subnet are linked to the super root through a designated bridge. Operation is analogous to secondary LANs, where wireless links are used to connect Ethernet segments. Figure E-1 shows Ethernet segments connected by a wireless link; Figure E-2 shows an OWL/IP tunnel.

For Ethernet secondary LANs, a wireless link is established between an access point on the distribution LAN and a designated bridge on a secondary Ethernet segment. Frames to or from a secondary Ethernet LAN are bridged at the MAC layer. In the case of OWL/IP, a virtual MAC layer link is established through an “IP tunnel” between the super root and a designated bridge.

6710 Access Point User’s Guide E-7

Image 229

Intermec 6710 manual Password Security, Operation

Contents

USER’S Guide Acknowledgments FCC Computer Compliance Canadian 2.4 GHz Radio License Suit our products. Other cables may not be tested. They may Page Contents TCP/IP End of Segment Middle of Segment MAC Address Status Hello Period Expressions ExprSeq Offset Mask Value Id Action Values Mode IP Addresses Type TX Filter Server Start Server Stop Server Log Appendix a Appendix B Appendix E Appendix F Figures Tables Xiv 6710 Access Point User’s Guide Section Features It operates on the open wireless FunctionalPurpose of This Guide OrganizationSoftware Download 10BASE5 EthernetIntended Audience Wireless Station User’s GuidesRelated Publications System Management Publications Customer SupportDescription Features and Functional OverviewGeneral Concepts Bridging FunctionalityFeatures and Functional Overview Network Organization Access Point Bridging LayerPending Messages ForwardingFlooding Configurations Proxy ARP Server Bridge PortsEthernet Port Ethernet Port Filters Radio Ports OWL/IP Port Configuration Configuration and ManagementDiagnostics and Configuration Port Remote Access Electronic Software Distribution Network Management Sample ConfigurationSample Network Configuration Components PC Card Slots Features and Functional Overview Power Cord AccessoriesIndustrial Locking Mounting Bracket Country Part NumberFeatures and Functional Overview Access Point User’s Guide Checking the Default Configuration InstallationCollecting the Equipment Preparing for the InstallationEthernet LAN Components 10BASE-T Component 10BASE2 Components10BASE5 Components For local access, you need the following Local Diag Port AccessCommunication Equipment Telnet Network Management PlatformWeb Browser Pin Null modem cable 25-pin 321-355-001Finding the Best Location General Installation GuidelinesSite Survey Horizontal Tabletop Mount Mounting the Access PointVertical and Ceiling Mounts See -6 and the procedure following itConnecting to Ethernet 10BASE2 Ethernet See -7 and the procedure following itEnd of Segment Middle of Segment See -8 and the procedure following itSeries Transceiver 10BASE5 EthernetVampire Tap On the transceiverSeries Transceiver 100/240 VAC Drop cable Pin AUI port Vampire tap 10BASE5 coax 10BASE-T Ethernet See -11 and the procedure following itWlif Installing PC Cards900 MHz UHF Applying Power AC Power Input Connection Installation Access Point User’s Guide Task Diag Port Telnet Browser ConfigurationCreating a Local Diag Port Session Local Session 9600, 8N1, full duplex Accessing the Configuration MenusAccessing the ROM Command Monitor Creating a Telnet Session Option Default Site Setting Default and Site SettingsBridge SecurityEthernet port Wlif radio port UHF radio port Main Menu Configuring the Access PointUse Eeprom since the access point was lastFollowing chart describes how to use the options Using the View CommandTion. You must write the new configuration To Eeprom and reboot the access point forPress IP Address TCP/IP OptionsDiscussion of Dhcp starts on IP Subnet MaskSubnet First Address Last Address IP RouterIP Frame Type Setting DescriptionIP Frame Type sets the type of frame containing IP traffic Prompt for the Dhcp server name is Dhcp Server NameNetworks With Dhcp and Bootp Servers Bootp OperationHandshaking Infinite LeasesAuto ARP Minutes Serial Number Bridge OptionsLan ID Root Default isRoot Priority Global Radio Wlif radio Option DescriptionFollowing are ranges and defaults for the Value option Each Global Radio option has the following settingsValue Range Default Global Flooding Inbound options are Multicast and Unicast options have the following settingsOutbound to Stations Answer Settings Flooding Level ChecklistAnswer Settings Comments Answer SettingAnswer Setting Yes Outbound to Secondaries/Unicast/Enabled UHF Flooding Level ARP Server ModeFlood Register Figuration, since multicast ARPs are never Select a port to display its options PortsMAC Address NameStatus Settings for Hello Period areHello Period Ethernet hello period can be set to 2 or 3 secondsOWL Frame Type Ethernet OptionsUse Ethernet to set Ethernet port options Static Addresses Cable TypeNormal RX Filter Frame Types options are Frame TypesFrame Type Description Frame types have the following settingsUser-Defined Subtypes in SubTypes 1 and SubTypes SubTypesSubtype Value Subtypes for SubTypes 2 areFiltering Examples Access Points Servicing IP Wireless Stations Example Example 1, Frame Types is set as follows Example 2, Frame Types is set as follows Expressions Advanced RX FilterAdvanced RX Filter options are Filter expressions have the following settings Operator Description EQ defaultValue Id Values Filter expression values have the following settingsBridge Priority BridgingBridging options are Designated Bridge Selection Disabled No flooding occurs. The super root, however Security Id Wlif OptionsUse Wlif to set Proxim 2.4 GHz radio options Node Type Default security ID is NorandowlChannel and Subchannel Master ParmsAccess Point Channel Subchannel Access Point Channel Subchannel Wireless Hops Slave Parms Settings for the Master areDefault is Slave station must have a root priority MAC ConfigAuto Manual MAC ParmsBeacon Frequency Hop PeriodDeferral Slot and Fairness Slot Fragment Size Settings for both options areNorm Ack Retry Transmit ModeNorm Qfsk Retry Frag Ack RetryFrag Qfsk Retry File Name MHz OptionsMode- Channel Use Falcon to set 900 MHz radio optionsSettingDescription Call Sign UHF OptionsUse UHF to set S-UHF radio options Call Sign displays your network’s callsign. The prompt isFrequency Master ModeAttach Priority Overview OWL/IP OptionsOWL/IP Overview Configuration OWL/IP port may be configured with the following options OWL/IP configuration menu options areOWL/IP Menu ModeIP Addresses Configuration screen for IP Addresses isTX Filter Entries are cleared by setting addresses toDefault filter settings for SubTypes 1 are shown below Default filter settings for OWL/IP are shown belowService Password PasswordUse Security to set these passwords Security OptionsCombining Radio Options Advanced PasswordSame LAN ID Different LAN IDs Creating a Web Browser SessionSet the Ethernet cable type Web Browser Session Setting Description Access Point Configuration Planning Your Installation Configuration GuidelinesUsing the Configuration Guide Simple Network Advanced Functions Configuration PlanningAccess point If using Wlif Secondary LANs or wirelessStations Secondary LANs Set the FloodFile System Structure Boot Segments 1Data Segments 3 Active and Inactive Segments RAM Segment Segment NamesMnemonic Description File Names File Menu CommandsDownloading Programs File Menu appears Fb CommandUse Fb to make inactive segments active. The format is This can also be accomplished by Fd CommandCommand’s format is Fdel CommandTftp Command Fe CommandUse the Tftp command to display the following screen Tftp Server These commands are supportedServer Start Tftp Client CommandsServer Stop Server LogFiletftp get ip address foreign file name local file name GetPut Script CommandCreating Script Files FHDR29K -d -v1.00 SCRIPT.TXT SCRIPT.DAT Sample Script FileCommand Sequence Description Script File Command SummaryReboot Command Tftp Client Command RetryAddition, all commands are case insensitive, so Is the same asUse the SDVars command to display the following arguments SDVars CommandFollowing variables are supported ScriptFilename ServerIpAddressStartTime Format of the ScriptFilename variable isStatus For example, consider the following script file commandsCheckPoint Filesdvars set terminate value TerminateSetActivePointers NextPowerUpTimeStarting the Command Monitor ROM Command MonitorFX s Viewing ROM CommandsSR z Npwd is for internal use by service personnel onlyBaud rates are FE sall To open the password menu, type the followingFollowing displays FB s FS s nFFR f FPC f sFPE RMI MI StringSoftware Download Example Exiting the ROM Command MonitorUpgrading Through Diag Port Apfx Command DescriptionUpgrading Tftp Clients Starting the Tftp ServerTo check the status of the Tftp server, type If the server is active its response isFilefb ib id RebootOverview Indicator LightsGroup Indicator Lights Status indicator lights are labeled Status and ModeEthernet Lights Status LightsError Status Status ModeMode Error Status DescriptionNetwork Link Description Network Mode LightsBaud Rate Pcmcia LightsPower-Up Sequence Indicator Lights Access Point User’s Guide Electrical Specifications Product SpecificationsAppendix a Physical Characteristics Environmental SpecificationsAccess point complies with the following standards RM180 Appendix BRadio Operation Following chart lists RM180 part numbersPart Numbers RM180 Part Number Compatibility and CommentsWhip Antenna Antenna RegulationsRemote Antenna Kits Medium Gain PatchHigh Gain Collinear Dipole Medium Gain Collinear DipoleCable Length Kit Part Number High Gain Yagi Antenna Adapter CableModel 2100 Antennas and Cables GHz Antenna Cables and ConnectorsGHz Antennas RM160 Appendix CRM160 Part Number Compatibility and Comments Antenna Kit Part Number Page RM111 Appendix DPart Number Comments Following chart lists radio part numbersWireless Hops Antenna ConnectorS-UHF antenna uses a standard BNC connector Whip AntennasTechnology Site LicenseTransaction Rates # Frequencies # Wireless Stations Installation GuidelinesPredicting Coverage Installing Multiple Access Points Installing a Single Access PointExtending Coverage Figure D-1 Reusing the FrequencyFigure D-2 Increasing System ThroughputOption Frequency Separation Absolute Minimum Frequency and Separation GuidelinesIntroduction Appendix EOWL/IP Restrictions Installation LimitationsAddressing Limitations OWL/IP tunnels should not be usedDefault Settings OWL/IP SafeguardsPermanent Filters Addressing Limitations Flooding RestrictionsAccess Point User’s Guide E-5 Subnet Filtering Default Filter SettingsOperation Password SecurityOWL/IP Tunnel Building the Spanning Tree Tunnel OriginationRedundancy Establishing and Maintaining TunnelsOutbound Frame ForwardingInbound Station Mobility Mobile IP ComparisonExample 1 Class C IP Addresses OWL/IP Configuration ExamplesComparison Mobile IP Example Class C Configuration Step Option a Unicast Addressing Following is the SubTypes 1 screen Set TX FiltersAction Scope DIX-IP-TCP Ports Drop Unlisted DIX-IP-UDP Ports Example 2 Class B IP Address Using Subnetting Example Class B Configuration Access Point User’s Guide E-21 Option C All Subnets Broadcast TX filter set up is identical to Example 1 page E-13 Appendix E OWL/IP Appendix F Pin Number Signal Name Signal LevelDiag Port Pin-Outs AUI Port Pin-Outs Pin Number Signal NameDiag Port To 9-pin Male PC Port Standard Null Modem Cable Diag Port CableAppendix F Port and Cable Pin-Outs Access Point User’s Guide Appendix G Product ContentsAbout This Product MIB-II Information Getting StartedMIB Family Access Point MIB InformationPurpose Groups Table G-2 shows access point MIB information Access to Management InformationExclusions Will not be Community String Access Type Description of Access TypeMIB Directory MIB-II NotesGroup Snmp Version 1 ConfigurationGroup Meaning Summary Definition Product OIDs System InformationMIB Outline Object Name Object Type AccessProduct OIDs System Information CriticalErrors Critical Errors Information G-30Fsinfo Group Dir Group G-32 Interface InformationPortState Group PortStats Group Ptxq Group Pmsg Group TrapTarget Snmp Version 1 Configuration GroupBridgeStats Bridge Statistics page G-69 Bridging ParametersBrg Group Addr Group BsDesignatedRootSequence SoftwareDownLoad Software Download page G-72 Control GroupsMIB Definitions Following are the MIB definitions for the 6710 Access Point6710MIB.MIB Version Object Segment Object Identifier = file Sequence Dir Object Identifier = file Access Point User’s Guide G-29 CriticalErrors Object Identifier = sysErrors Access Point User’s Guide G-31 Nifx Object Identifier = nInterfaces Syntax Integer Appendix G MIB Access Point User’s Guide G-35 PortState Object Identifier = nInterfaces Integer UHF Syntax Gauge Access read-only Status mandatory TRUE, if the port supports pending messages = psEntry OBJECT-TYPE PstcPort Received unicast relay packets = pstcEntry Appendix G MIB Send packets discarded due to excessive delay = pstcEntry Ptxq Object Identifier = nInterfaces Access Point User’s Guide G-47 Appendix G MIB Pmsg Object Identifier = nInterfaces PmsgTable Syntax Integer Access Access Point User’s Guide G-51 Object Identifier Access Point User’s Guide G-53 CommunityEntry = Access Point User’s Guide G-55 Object Identifier RtDestination PhysAddress RtPort OBJECT-TYPE True if the destination is a non-OWL node = rtEntry Appendix G MIB Brg Object Identifier = nBridge Primary1 Addr Object Identifier = nBridge BrgState Object Identifier = nBridge BsAddress Appendix G MIB BsParentAddress OBJECT-TYPE Syntax PhysAddress Flooding level for multicast frames 0-3 = brgState BridgeStats Object Identifier = nBridge Secondary LAN bridge table entries = bridgeStats Out-of-sequence route delete errors = bridgeStats PowerUp Object Identifier = nControl Access Point User’s Guide G-73 END Glossary Access points provide the following functionsBroadcast Flash Frames sent toward the distribution LAN are inbound FrameIP Subnet An octet is a byte composed of eight bits Multicast AddressFrames moving away from the distribution LAN are out- bound Radio NetworkROM Read-Only Memory Unicast Address Wireless Stations Index Index Access Point User’s Guide Index-3 Index-46710 Access Point User’s Guide Access Point User’s Guide Index-5 Index-66710 Access Point User’s Guide Access Point User’s Guide Index-7 Index-86710 Access Point User’s Guide Access Point User’s Guide Index-9 Index-106710 Access Point User’s Guide Access Point User’s Guide Index-11 Index-126710 Access Point User’s Guide Access Point User’s Guide Index-13 Index-146710 Access Point User’s Guide