ORiNOCO AP-2000 Access Point
 Copyright
 Contents
 Viewing Status Information
 Bridge
 Monitoring the AP-2000
 Troubleshooting the AP-2000
 Using the Command Line Interface CLI
 Other Network Settings
 CLI Batch File
 Regulatory Information
 Introduction to Wireless Networking
Document Conventions
 Introduction
Guidelines for Roaming
 Management and Monitoring Capabilities
Ieee 802.11 Specifications
Command Line Interface
HTTP/HTTPS Interface
 Snmp Management
SNMPv3 Secure Management
 Getting Started
Prerequisites
 System Requirements
GHz Antenna Adapter or AP-2000 11a Upgrade Kit
Product Package
 Hardware Installation
AP-2000 with Active Ethernet
 AP-2000 with Power Supply
Connect an Ethernet cable from an AE hub to the AP
 Install the power supply
 Power LED turns green when the unit is operational
 GHz or AP-2000 11a Upgrade Kit
10 Remove the AP cover
 12 Replace cover
 ScanTool Instructions
Initialization
ScanTool
 13 Scan List
 Click LAN Settings
Setup Wizard
Setup Wizard Instructions
Set IP Address Type to Static
 15 Enter Network Password
 Getting Started
 Download the Latest Software
 Setup your Tftp Server
 Installing/Removing the Metal Faceplate
Additional Hardware Features
Installing the AP in a Plenum
Enter the command download tftpaddr filename img
 LED Indicators
Active Ethernet
 Related Topics
 Viewing Status Information
Logging into the Http Interface
 System Status
System Status Screen
 Performing Advanced Configuration
Configuring the AP Using the HTTP/HTTPS Interface
 Performing Advanced Configuration
 Dynamic DNS Support
Access Point System Naming Convention
System
 Basic IP Parameters
IP Configuration
Network
DNS Client
 Dhcp Server Configuration Screen
Dhcp Server
 Comment optional
Link Integrity
Start IP Address End IP Address
Target IP Address Comment optional
 Operational Mode 8Wireless-A and Wireless-B Ethernet
Interfaces
 Operational Mode Selection
Operational Mode
8Wireless-A and Wireless-B
Wireless a 802.11a
 RTS/CTS Medium Reservation
Wireless Service Status
Dynamic Frequency Selection DFS
 Wireless 802.11b
Traps Generated During Wireless Service Shutdown and Resume
 Distance Between APs
 Multicast Rate
Small Cell Large Cell
 Wireless 802.11b/g
1 Mbits/s and 11 Mbits/s Multicast Rates
 Wireless Distribution System WDS
 Bridging WDS
 Click on Interfaces Wireless-A or Wireless-B
WDS Edit Entry Screen
 Ethernet
 Management
Passwords
IP Access Table
 Http Access
Services
Snmp Settings
Https Access
 10 Management Services Configuration Screen
 SSH Session Setup
Telnet Configuration Settings
Secure Shell SSH Settings
Configuring SSH
 Click Commands Update AP via Http or via Tftp
Uploading Externally Generated Host Keys
 Serial Configuration Settings
Radius Based Management Access
 Set up Automatic Configuration for Static IP
Automatic Configuration AutoConfig
Auto Configuration and the CLI Batch File
 Set up Automatic Configuration for Dynamic IP
12 Automatic Configuration Screen
 13 Dhcp Options Setting the Boot Server Host Name
 Hardware Configuration Reset Chrp
Configuration Reset via Serial Port During Bootup
 Click Configure -Management -CHRD
Configuring Hardware Configuration Reset
Procedure to Reset Configuration via the Serial Interface
 Static MAC
Filtering
Ethernet Protocol
Select the Filter Operation Type
 16 Static MAC Configuration Screen
 Static MAC Filter Examples
Prevent Two Specific Devices from Communicating
 Adding TCP/UDP Port Filters
Advanced
TCP/UDP Port
Click Add under the TCP/UDP Port Filter Table heading
 Editing TCP/UDP Port Filters
Click Edit under the TCP/UDP Port Filter Table heading
 Groups
Alarms
Configuration Trap Group
 Operational Trap Group
Wireless Interface/Card Trap Group
Security Trap Group
Flash Memory Trap Group
 Image Trap Group
Bridge MIB RFC 1493 Alarms
Tftp Trap Group
RFC 1215-Trap
 Configuring Syslog Event Notifications
Alarm Host Table
Setting Syslog Event Notifications
Syslog
 Syslog Messages
Following messages are supported in the AP
 Rogue Access Point Detection RAD
RAD Configuration Requirements
 Configuring RAD
19 Rogue Access Point Detection Screen
 Storm Threshold
Bridge
Spanning Tree
Intra BSS
 QoS Quality of Service
Packet Forwarding Pkt Fwd
 Radius Servers per Authentication Mode and per Vlan
Radius Profiles
 RADIUS-based Vlan Assignment
Configuring Radius Profiles
Radius Servers Enforcing Vlan Access Control
 Adding or Modifying a Radius Server Profile
22 Add Radius Server Profile
 MAC Access Control Via Radius Authentication
802.1x Authentication using Radius
 Radius Accounting
Session Length
 Vlan Overview
SSID/VLAN/Security
Management Vlan
 Typical User Vlan Configurations
Vlan Workgroups and Traffic Management
 Disable Vlan Management
Control Access to the AP
Provide Access to a Wireless Host in the Same Workgroup
Click Configure SSID/VLAN/Security
 MAC Access
Configuring MAC Access
 WEP Encryption
802.1x Authentication
Security Profiles
 Wi-Fi Protected Access WPA
Authentication Process
 Authentication Protocol Hierarchy
VLANs and Security Profiles
 Non Secure Station
Configuring Security Profiles
Click Configure -SSID/VLAN/Security -Security Profile
WEP Station
 WPA-PSK Station
802.1x Station
WPA Station
802.11i Station
 27 Security Profile Table Add Entries
 Wireless-A and Wireless-B
Click on SSID/VLAN/Security Wireless-A or Wireless-B
 30 SSID/VLAN Edit Entries Screen Vlan Protocol Disabled
 Performing Advanced Configuration
 Adding or Modifying an SSID/VLAN with Vlan Protocol Enabled
Click SSID/VLAN/Security Wireless-A or Wireless-B
 33 SSID/VLAN Add Entries Screen Vlan Protocol Enabled
 34 SSID/VLAN Edit Entries Screen Vlan Protocol Enabled
 Broadcast Ssid and Closed System
 Monitoring the AP-2000
 Monitoring the AP-2000
 Version
Component Name
 Icmp
IP/ARP Table
 Learn Table
Iapp
 Radius
 106
 Refreshing Station Statistics
Station Statistics
Enabling and Viewing Station Statistics
Description of Station Statistics
 108
 Performing Commands
 Performing Commands
 Tftp File Transfer Guidelines
Image Error Checking during File Transfer
Introduction to File Transfer via Tftp or Http
Http File Transfer Guidelines
 Update AP via Tftp
Update AP via Tftp Command Screen
 Update AP via Http
Update AP via Http Command Screen
 114
 Retrieve File via Tftp Command Screen
Retrieve File via Tftp
 Retrieve File via Http Command Screen
Retrieve File via Http
 117
 Reboot
13 Reboot Command Screen
 Reset
14 Reset to Factory Defaults Command Screen
 Help Link
Program Files/ORiNOCO/AP/HTML/index.htm
 Troubleshooting the AP-2000
Troubleshooting Concepts
 Basic Software Setup and Configuration Problems
Symptoms and Solutions
Connectivity Issues
 Telnet CLI Does Not Work
Http browser or Telnet Interface Does Not Work
Html Help Files Do Not Appear
Tftp Server Does Not Work
 Client Connection Problems
Vlan Operation Issues
 AP Does Not Work
Recovery Procedures
Active Ethernet AE
There Is No Data Link
 Reset to Factory Default Procedure
Forced Reload Procedure
 Preparing to Download the AP Image
Download a New Image Using ScanTool
Download Procedure
 Download a New Image Using the Bootloader CLI
 Hardware and Software Requirements
Setting IP Address using Serial Port
Initializing the IP Address using CLI
Attaching the Serial Port Cable
 130
 Tftp Server
Radius Authentication Server
Related Applications
 Notation Conventions
General Notes
Prerequisite Skills and Knowledge
Important Terminology
 Navigation and Special Keys
Command Line Interface CLI Variations
CLI Error Messages
 Bootloader CLI
Figure A-1 Results of help bootloader CLI command
 ? List Commands
CLI Command Types
Operational CLI Commands
Example 1. Display Command list
 Example 3b. Display parameters based on letter sequence
Example 3. Display parameters for set and show
Example 3a. Display every parameter that can be changed
 Help
Done, exit, quit
Download
Example 4. Display Prompts for Successive Parameters
 Passwd
Reboot
History
Search
 Set CLI Command
Parameter Control Commands
Show CLI Command
Upload
 Example 1 Set the Access Point IP Address Parameter
Configuring Objects that Require Reboot
Set and show Command Examples
Following elements require reboot ipaddr
 Example 5 Show the Group Parameters
Example 4 Enable, Disable, or Delete a table entry or row
Example 3 Modify a table entry or row
 Example 6 Show Individual and Table Parameters
Using Tables & User Strings
Working with Tables
 Log into the AP using HyperTerminal
Configuring the AP using CLI commands
Using Strings
Log into the AP using Telnet
 Set System Name, Location and Contact Information
Set Basic Configuration Parameters using CLI Commands
Change Passwords
Set Static IP Address for the AP
 Set Network Names for the Wireless Interface
Configure Ssid Network Name and Vlan Pairs, and Profiles
 146
 Backup your AP Configuration File
Other Network Settings
Download an AP Configuration File from your Tftp Server
Set up Auto Configuration
 Maintain Client Connections using Link Integrity
Configure the AP as a Dhcp Server
Configure the DNS Client
Change your Wireless Interface Settings
 Shutdown/Resume Wireless Service
Operational Mode
Enable/Disable Closed System
Enable/Disable Interference Robustness 802.11b Only
 Set Ethernet Speed and Transmission Mode
Set Interface Management Services
 Configure Secure Socket Layer Https
Configure Syslog
Configure Intra BSS
Set Telnet Session Timeouts
 Add an Entry to the MAC Access Control Table
Configure MAC Access Control
Setup MAC Address Access Control
Disable or Delete an Entry in the MAC Access Control Table
 Configure Radius Authentication servers
Set Radius Parameters
 154
 Set Rogue Access Point Detection RAD Parameters
Figure A-16 Results of show rad CLI command
 CLI Monitoring Parameters
Set Hardware Configuration Reset Parameters
Enable Vlan Management
Parameter Tables
 157
 Name Type Values Access CLI Parameter
System Parameters
 Network Parameters
IP Configuration Parameters
DNS Client for Radius Name Resolution
Inventory Management Information
 Dhcp Server Parameters
Dhcp Server table for IP pools
 Link Integrity Parameters
Link Integrity IP Target Table
 Common Parameters to 802.11a, 802.11b, and 802.11b/g APs
Wireless Interface Parameters
Interface Parameters
802.11a Only Parameters
 802.11b Only Parameters
802.11b Channel Frequencies
 Wireless Distribution System WDS Parameters
802.11b/g Only Parameters
 Wireless Interface SSID/VLAN/Profile Parameters
Wireless Distribution System WDS Security Table Parameters
 Secure Management Parameters
Management Parameters
Ethernet Interface Parameters
Snmp Parameters
 Telnet Parameters
Serial Port Parameters
 Radius Based Management Access Parameters
SSH Parameters
 Tftp Server Parameters
Auto Configuration Parameters
IP Access Table Parameters
 Static MAC Address Filter Table
Filtering Parameters
Ethernet Protocol Filtering Parameters
Ethernet Protocol Filtering Table
 Broadcast Filtering Table
Proxy ARP Parameters
IP ARP Filtering Parameters
TCP/UDP Port Filtering
 Syslog Parameters
Alarms Parameters
Snmp Table Host Table Parameters
 Syslog Host Table
Bridge Parameters
Spanning Tree Parameters
Spanning Tree Priority and Path Cost Table
 Packet Forwarding Parameters
Storm Threshold Parameters
Intra BSS Subscriber Blocking
Storm Threshold Table
 Radius Parameters
MAC Access Control Parameter
Security Parameters
 VLAN/SSID Parameters
Rogue Access Point Detection RAD Parameters
Hardware Configuration Reset
 Configuring a Security Profile with WPA Security Mode
Configuring a Security Profile with WEP Security Mode
Configuring a Security Profile with 802.1x Security Mode
Set secprofiletbl index secmode nonsecure status enable
 Other Parameters
Configuring a Security Profile with WPA-PSK Security Mode
Configuring a Security Profile with 802.11i Security Mode
Iapp Parameters
 CLI Batch File Format and Syntax
Auto Configuration and the CLI Batch File
CLI Batch File
Sample CLI Batch File
 Reboot Behavior
CLI Batch File Error Log
 Ascii Character Chart
 Management Functions
Software Features
Number of Stations per BSS
 Security Functions
Medium Access Control MAC Functions
Advanced Bridging Functions
 Physical Specifications
Hardware Specifications
Advanced Wireless Functions
Network Functions
 Serial Port Interface
Radio Specifications
Ethernet Interface
Active Ethernet Interface
 802.11a Channel Frequencies
FCC Etsi Telec Asia
 802.11b Channel Frequencies
802.11g Channel Frequencies
 Wireless Communication Range
802.11b
 802.11a 5 GHz Upgrade Kit
802.11a 11a Upgrade Kit
 802.11b/g
Range
 International
For the U.S. and Canada
Europe, the Middle East, and Africa Emea
 Limitations of Warranty
Warranty Coverage
Repair or Replacement
Support Procedures
 Search Knowledgebase
Ask a Question or Open an Issue
Other Information
Other Adapter Cards
 Regulatory Information
 Important Safety Instructions
Information to the User
 Wireless LAN and your Health
Regulatory Information
 Informations pour l’utilisateur
Instructions Importantes Concernant LA Securite
 Réseaux sans fil et votre santé
Informations sur les réglementations
 Informazioni per l’utente
Norme DI Sicurezza Importanti
 Wireless LAN e la salute
Informazioni legali
 Informationen für den Benutzer
Wichtige Sicherheitshinweise
 Funk-LAN und gesundheitliche Sicherheit
Rechtliche Hinweise
 Información para el usuario
Instrucciones DE Seguridad Importantes
 LAN inalámbrica y su salud
Información sobre normativas
 これらの指示書を保管してください
 無線 LAN と人体への影響
 United States FCC Information
Modifications
 Industry Canada IC
Product Safety
Canada IC Information
 Europe Information
 210
 Japan Information
Association of Radio Industries and Businesses Arib
 AP-II E
South Korea Information
PC24E-H-FC
 Omologazioni radio
Radio Approvals
Certifications radio
Funkgenehmigungen
 R0167 SRD3a
Australia Alpha-1 A13QBF For indoor use only Austria
Österreich
G13ENE-PC
 PC24E-H-FC PC24E-H-ET-L
PC24E-H-ET
 A19PCE-PC
AP-AG-AT-01
AP-AG-AT-02
 B11FNF
C38WCW
 A04VBA-PC
 219
 AP-AT-AG-01
AP-AT-AG-02
 PC24E-H-FR-L
France
Restricted frequency band On French territory
PC24E-H-FR
 PC24E-H-ET Cetecom D810069L
 223
 224
 225
 PC24E-H-ET-L CEPT-RLAN
Pays Émetteur Radio Numéro du Permis Restrictions Paese
G05INI-PC
PC24E-H-ET CEPT-RLAN
 Telec 01NYDA1122
PC24E-H-FC Telec NYCA0010
Telec 01NYDA1121
G13GNJ-PC Telec 03YNDA0185 Telec 03GZDA0150
 228
 229
 RTIPRPC02-369
PC24E-11-FC/R Cofetel
G11FNF-PC Cofetel
A13QBF-PC Cofetel
 AP-AG-AT-02 RCPPRAP03-537
PCPPRAL03-095
AP-AG-AT-01 RCPPRAP03-537
PTIPRAL03-094
 232
 PC24E-H-FC RFS
PC24E-H-ET-L RFS
 G11FNF-PC Gost ME96 G13ENE-PC
PC24E-H-FC/R
PC24E-H-ET-L PC24E-H-ET/R
 G13ENE-PC IDA
PC24E-H-FC IDA
PC24E-H-ET IDA PMREQ-WLAN-B-0934
A09SBS-PC IDA
 236
 237
 238
 Schweiz Svizzera
Switzerland AP-700 For indoor use only Suisse
Pour usage intérieur uniquement
A09TBT-PC
 FCC ID IMRWLPC2411R USA G11FNF-PC
USA PC24E-H-FC FCC ID IMRWLPCE24H
IMRWLPCE2411R
HZB-G11FNFPC
 FCC ID HZB-A13QBF
FCC ID HZB-B11FNF USA
FCC ID HZB-G11FNF USA
AP-AG-AT-01 IXMAPAGAT01
 242
 243
 244