Proxim AP-2000 Configure MAC Access Control

152

Using the Command Line Interface (CLI)

Configure MAC Access Control

Setup MAC (Address) Access Control

[Device-Name]>set macaclstatus enable

[Device-Name]>set macacloptype <passthru, block>

[Device-Name]>reboot 0

Add an Entry to the MAC Access Control Table

[Device-Name]>set macacltbl <index> macaddr <MAC Address> status enable

[Device-Name]>show macacltbl

Disable or Delete an Entry in the MAC Access Control Table

[Device-Name]>set macacltbl <index> status <disable/delete>

[Device-Name]>show macacltbl

NOTE

For larger networks that include multiple AccessPoints, you may prefer to maintain this list on a centralized

location using the RADIUS parameters (see Set RADIUS Parameters).

Contents

Main Copyright Trademarks OpenSSL License Note Contents Page Page Page Page A Using the Command Line Interface (CLI). . . . . . . . . . . . . . . . . . . . . . . . . . . .132 Set Basic Configuration Parameters using CLI Commands . . . . . . . . . . . . . . . . . . . . . 144 Page Page Page Introduction Document Conventions Introduction to Wireless Networking Guidelines for Roaming IEEE 802.11 Specifications Management and Monitoring Capabilities HTTP/HTTPS Interface Command Line Interface SNMP Management SNMPv3 Secure Management Getting Started Prerequisites Product Package 5 GHz Antenna Adapter or AP-2000 11a Upgrade Kit System Requirements Hardware Installation AP-2000 with Active Ethernet Page Page Page 5 GHz or AP-2000 11a Upgrade Kit Page Initialization ScanTool ScanTool Instructions Page Setup Wizard Setup Wizard Instructions Page Page Download the Latest Software Setup your TFTP Server Download Updates from your TFTP Server using the Web Interface Download Updates from your TFTP Server using the CLI Interface Additional Hardware Features Installing the AP in a Plenum Installing/Removing the Metal Faceplate Active Ethernet LED Indicators Related Topics Viewing Status Information Viewing Status Information System Status Performing Advanced Configuration Configuring the AP Using the HTTP/HTTPS Interface Page System Dynamic DNS Support Access Point System Naming Convention Network IP Configuration Basic IP Parameters DNS Client Advanced Page Link Integrity Interfaces Operational Mode Operational Mode Selection Wireless A (802.11a) Dynamic Frequency Selection (DFS) RTS/CTS Medium Reservation Wireless Service Status Traps Generated During Wireless Service Shutdown (and Resume) Wireless Interface Activity LED and Wireless Service Shutdown Wireless (802.11b) Distance Between APs Coverage Multicast Rate Wireless (802.11b/g) Wireless Distribution System (WDS) Bridging WDS WDS Setup Procedure Page Ethernet Management Passwords IP Access Table Services Secure Management SNMP Settings HTTP Access HTTPS Access Page Telnet Configuration Settings Secure Shell (SSH) Settings SSH Session Setup SSH Clients Configuring SSH ! Uploading Externally Generated Host Keys Serial Configuration Settings RADIUS Based Management Access Automatic Configuration (AutoConfig) Auto Configuration and the CLI Batch File Set up Automatic Configuration for Static IP Set up Automatic Configuration for Dynamic IP Page Hardware Configuration Reset (CHRP) Configuration Reset via Serial Port During Bootup Configuring Hardware Configuration Reset Procedure to Reset Configuration via the Serial Interface Filtering Ethernet Protocol Static MAC Page Static MAC Filter Examples Prevent Two Specific Devices from Communicating Prevent Multiple Wireless Devices From Communicating With a Single Wired Device Prevent All Wireless Devices From Communicating With a Single Wired Device Prevent A Wireless Device From Communicating With the Wired Network Advanced TCP/UDP Port Adding TCP/UDP Port Filters Editing TCP/UDP Port Filters Alarms Groups Security Trap Group Wireless Interface/Card Trap Group Flash Memory Trap Group Operational Trap Group Page Severity Levels Alarm Host Table Syslog Setting Syslog Event Notifications Configuring Syslog Event Notifications Syslog Messages Page Configuring RAD Bridge Spanning Tree Storm Threshold Intra BSS Packet Forwarding (Pkt Fwd) QoS (Quality of Service) RADIUS Profiles RADIUS Servers per Authentication Mode and per VLAN RADIUS-based VLAN Assignment RADIUS Servers Enforcing VLAN Access Control Configuring RADIUS Profiles Adding or Modifying a RADIUS Server Profile MAC Access Control Via RADIUS Authentication 802.1x Authentication using RADIUS RADIUS Accounting Session Length SSID/VLAN/Security Management VLAN VLAN Overview VLAN Workgroups and Traffic Management Typical User VLAN Configurations Enabling/Disabling VLAN Protocol Control Access to the AP Provide Access to a Wireless Host in the Same Workgroup Disable VLAN Management MAC Access Configuring MAC Access Security Profiles WEP Encryption 802.1x Authentication Authentication Process Wi-Fi Protected Access (WPA) Authentication Protocol Hierarchy VLANs and Security Profiles Configuring Security Profiles Page Page Wireless-A and Wireless-B Adding or Modifying an SSID/VLAN with VLAN Protocol Disabled Page Page Adding or Modifying an SSID/VLAN with VLAN Protocol Enabled Page Page Broadcast SSID and Closed System Monitoring the AP-2000 Page Ver si on Page Page Page Page Stati on Stat istic s Enabling and Viewing Station Statistics Refreshing Station Statistics Description of Station Statistics Page Performing Commands Page Introduction to File Transfer via TFTP or HTTP TFTP File Transfer Guidelines HTTP File Transfer Guidelines Image Error Checking during File Transfer Update AP via TFTP Update AP via HTTP Page Retrieve File via TFTP Retrieve File via HTTP Page Reboot Reset Help Link Troubleshooting the AP-2000 Troubleshooting Concepts Symptoms and Solutions Connectivity Issues AP Unit Will Not Boot - No LED Activity Serial Link Does Not Work Ethernet Link Does Not Work HTTP (browser) or Telnet Interface Does Not Work HTML Help Files Do Not Appear Telnet CLI Does Not Work TFTP Server Does Not Work Client Connection Problems Client Software Finds No Connection Client PC Card Does Not Work Intermittent Loss of Connection Client Does Not Receive an IP Address - Cannot Connect to Internet Recovery Procedures Reset to Factory Default Procedure Forced Reload Procedure Download a New Image Using ScanTool Preparing to Download the AP Image Download Procedure Download a New Image Using the Bootloader CLI Preparing to Download the AP Image Download Procedure Setting IP Address using Serial Port Hardware and Software Requirements Attaching the Serial Port Cable Initializing the IP Address using CLI Page Related Applications RADIUS Authentication Server TFTP Server A Using the Command Line Interface (CLI) General Notes Prerequisite Skills and Knowledge Notation Conventions Command Line Interface (CLI) Variations Bootloader CLI CLI Command Types Operational CLI Commands ? (List Commands) Example 1. Display Command list Example 2. Display specific Commands Page Example 4. Display Prompts for Successive Parameters done, exit, quit download help Page upload Parameter Control Commands show CLI Command set CLI Command Configuring Objects that Require Reboot Example 1: Configuring objects that require the device to be rebooted set and show Command Examples Example 1 - Set the AccessPoint IP Address Parameter Example 2 - Create a table entry or row Example 3 - Modify a table entry or row Example 4 - Enable, Disable, or Delete a table entry or row Example 5 - Show the Group Parameters Example 6 - Show Individual and Table Parameters Using Tables & User Strings Working with Tables Using Strings Configuring the AP using CLI commands Log into the AP using HyperTerminal Log into the AP using Telnet Set Basic Configuration Parameters using CLI Commands Set System Name, Location and Contact Information Set Static IP Address for the AP Change Passwords Set Network Names for the Wireless Interface Enable and Configure TX Power Control for the Wireless Interface(s) Configure SSID (Network Name) and VLAN Pairs, and Profiles Page Download an AP Configuration File from your TFTP Server Backup your AP Configuration File Set up Auto Configuration Other Network Settings Configure the AP as a DHCP Server Configure the DNS Client Maintain Client Connections using Link Integrity Change your Wireless Interface Settings Page Set Ethernet Speed and Transmission Mode Set Interface Management Services Configure Secure Socket Layer (HTTPS) Set Telnet Session Timeouts Configure Serial Port Interface Configure Syslog Configure Intra BSS Configure MAC Access Control Set RADIUS Parameters Configure RADIUS Authentication servers Page Set Rogue Access Point Detection (RAD) Parameters Set Hardware Configuration Reset Parameters Set VLAN/SSID Parameters Enable VLAN Management Disable VLAN Management CLI Monitoring Parameters Parameter Tables Page System Parameters Inventory Management Information DNS Client for RADIUS Name Resolution Network Parameters IP Configuration Parameters DHCP Server Parameters The DHCP Server (dhcpstatus) can only be enabled after a DHCP IP Pool table entry has been created. Set either End IP Address or Width (but not both) when creating an IP address pool. DHCP Server table for IP pools Link Integrity Parameters Link Integrity IP Target Table Interface Parameters Wireless Interface Parameters Note 1: Super Mode must be enabled first on the wireless interface before Turbo Mode can be enabled. Common Parameters to 802.11a, 802.11b, and 802.11b/g APs 802.11a Only Parameters 802.11b Only Parameters 802.11b/g Only Parameters Note 1: Super Mode must be enabled first on the wireless interface before Turbo Mode can be enabled. Wireless Distribution System (WDS) Parameters Wireless Interface SSID/VLAN/Profile Parameters The WDS Security Table manages WDS related security objects. Wireless Distribution System (WDS) Security Table Parameters Ethernet Interface Parameters Management Parameters HTTP (web browser) Parameters Secure Management Parameters SNMP Parameters Telnet Parameters Serial Port Parameters RADIUS Based Management Access Parameters SSH Parameters Auto Configuration Parameters TFTP Server Parameters IP Access Table Parameters Filtering Parameters Ethernet Protocol Filtering Parameters Static MAC Address Filter Table Ethernet Protocol Filtering Table Identify the different filters by using the table index. Proxy ARP Parameters IP ARP Filtering Parameters Broadcast Filtering Table The following parameters are used to configure TCP/UDP Port filters. TCP/UDP Port Filtering The following parameters are used to enable/disable the Port filter feature. Alarms Parameters SNMP Table Host Table Parameters The following parameters configure the Syslog settings. Up to 10 entries can be added to the SNMP Trap Host Table. Syslog Parameters Bridge Parameters Spanning Tree Parameters Storm Threshold Parameters Storm Threshold Table Intra BSS Subscriber Blocking Packet Forwarding Parameters Security Parameters MAC Access Control Parameter MAC Access Control Table RADIUS Parameters General RADIUS Parameters Rogue Access Point Detection (RAD) Parameters Hardware Configuration Reset VLAN/SSID Parameters Security Profile Table Command Syntax and Examples of Configuring Security Profiles: Configuring a Security Profile with Non Secure Security Mode Configuring a Security Profile with WEP Security Mode Configuring a Security Profile with 802.1x Security Mode Other Parameters IAPP Parameters SpectraLink VoIP Parameters (802.11b and bg Modes Only) CLI Batch File Auto Configuration and the CLI Batch File CLI Batch File Format and Syntax Sample CLI Batch File Reboot Behavior CLI Batch File Error Log B ASCII Character Chart C Specifications Management Functions Software Features Number of Stations per BSS Advanced Bridging Functions Medium Access Control (MAC) Functions Security Functions Network Functions Advanced Wireless Functions Hardware Specifications Physical Specifications AP-2000 Unit Dimensions (H x W x L) = 6.5 x 18.5 x 26 cm (2.5 x 7.25 x 10.25 in.) Weight = 1.75 Kg (3.5 lb.) 802.11a Antenna Adapter Radio Specifications 802.11a Channel Frequencies Note 1: Channel 34 is the default channel for Japan 802.11b Channel Frequencies 802.11g Channel Frequencies Wireless Communication Range 802.11b 802.11a (5 GHz Upgrade Kit) Table C-2 802.11a (5 GHz Upgrade Kit) Wireless communication ranges Table C-3 802.11a (11a Upgrade Kit) Wireless communication ranges 802.11a (11a Upgrade Kit) 802.11b/g Table C-4 802.11b/g Wireless communication ranges D Technical Support For the U.S. and Canada: Europe, the Middle East, and Africa (EMEA): ORiNOCO AP-4000 User Guide E Statement of Warranty Warranty Coverage Repair or Replacement Limitations of Warranty Other Information ORiNOCO AP-4000 User Guide F Regulatory Information Information to the User IMPORTANT SAFETY INSTRUCTIONS SAVE THESE INSTRUCTIONS Additional Installation Requirements for Base Station products Wireless LAN and your Health Informations pour lutilisateur INSTRUCTIONS IMPORTANTES CONCERNANT LA SECURITE CONSERVEZ CES INSTRUCTIONS Autres conditions dinstallation des produits de la Base Station Rseaux sans fil et votre sant Informations sur les rglementations Informazioni per lutente NORME DI SICUREZZA IMPORTANTI CONSERVARE QUESTE ISTRUZIONI Requisiti supplementari per linstallazione dei prodotti Base Station Wireless LAN e la salute Informazioni legali Informationen fr den Benutzer WICHTIGE SICHERHEITSHINWEISE BEWAHREN SIE DIESE ANWEISUNGEN AN EINEM SICHEREN ORT AUF Weitere Installationsvoraussetzungen fr Base Stationsprodukte Funk-LAN und gesundheitliche Sicherheit Rechtliche Hinweise Informacin para el usuario INSTRUCCIONES DE SEGURIDAD IMPORTANTES GUARDE ESTAS INSTRUCCIONES Requisitos de instalacin adicionales para los productos de Base Station LAN inalmbrica y su salud Informacin sobre normativas Base Station LAN United States FCC Information Federal Communications Commission (FCC) Declaration of Conformity Warnin gs Caution: Exposure to Radio Frequency Radiation Modifications Canada IC Information Industry Canada (IC) Product Safety Europe Information Page Japan Information Association of Radio Industries and Businesses (ARIB) South Korea Information For Class (A) products: For Class (B) products: Radio Approvals Certifications radio Omologazioni radio Funkgenehmigungen Permisos de utilizacin