Advanced Bridging Functions, Security Functions | Proxim AP-4000

Specifications	AP-4000 Series User Guide
Software Features

Advanced Bridging Functions

Feature	Supported by
	AP-4000 Series
IEEE 802.1d Bridging	3
WDS Relay	3
Roaming	3
Protocol Filtering	3
Multicast/Broadcast Storm Filtering	3
Proxy ARP	3
TCP/UDP Port Filtering	3
Blocking Intra BSS Clients	3
Packet Forwarding	3

Medium Access Control (MAC) Functions

Feature	Supported by
	AP-4000 Series
Automatic Channel Selection (ACS)	3
Dynamic Frequency Selection (DFS)*	3
Closed System Feature	3
Wireless Service Shutdown	3
802.11d Support	3
TX Power Control	3
Wireless Multimedia Enhancements/Quality of Service	3
(QoS)

*DFS is required for 802.11a APs certified in the ETSI and TELEC regulatory domains and operating in the middle frequency band. When ACS is disabled, available channels are limited to those in the lower frequency band. See Dynamic Frequency Selection/Radar Detection (DFS/RD).

Security Functions

Feature	Supported by
	AP-4000 Series
Security Profiles per VLAN	3
RADIUS Profiles per VLAN	3
IEEE 802.11 WEP*	3
MAC Access Control	3
RADIUS MAC-based Access Control	3
IEEE 802.1x Authentication†	3
Multiple Authentication Server Support per VLAN‡	3
Rogue Scanning to Detect Rogue Access Points and Clients	3
Per User Per Session (PUPS) Encryption §	3
Wi-Fi Protected Access (WPA)	3
Hardware Configuration Reset Disable	3

* Key lengths supported by 802.11a: 64-bit, 128-bit, and 152-bit. Key lengths supported by 802.11b: 64-bit and 128-bit.

Key lengths supported by 802.11b/g: 64-bit, 128-bit, and 152-bit.

† EAP-MD5, EAP-TLS, EAP-TTLS, and PEAP client supplicant supported.

218

Image 218

Proxim AP-4000 manual Advanced Bridging Functions, Medium Access Control MAC Functions, Security Functions, 218

Contents

ORiNOCO AP-4000 Series Access Points User Guide OpenSSL License Note CopyrightTrademarks AP-4000 Series User Guide Contents System Status 4 Advanced Configuration Contents AP-4000 Series User Guide Monitoring CommandsTroubleshooting Command Line Interface CLI Recovery Procedures Technical Support Ascii Character Chart C SpecificationsStatement of Warranty Regulatory Compliance Product Description Products Covered in this User GuideDocument Conventions Introduction to Wireless Networking Introduction AP-4000 Series User Guide Mesh Networking AP-4000M/4900M Only Mesh Network Convergence Mesh Startup Topology Example Step Mesh Network Configuration Guidelines for Roaming Management and Monitoring Capabilities Ieee 802.11 SpecificationsCommand Line Interface HTTP/HTTPS Interface Snmp Management SNMPv3 Secure Management SSH Secure Shell Management AP-4000 Series Hardware Description Overview Antennas External Antennas GHz Antenna Installation and Initialization AP-4000 Series User GuideActive Ethernet LED Indicators LED Indicators on the AP-4000/4000M/4900M Top Panel Prerequisites General Prerequisites Mesh Prerequisites Product Package System Requirements Cabling the AP-4000/4000M/4900M Hardware InstallationRequired Materials Installing the Security Cover Mounting the AP-4000/4000M/4900M Mounting the AP-4000/4000M/4900M to a Ceiling Mounting the AP-4900M in a Vehicle Installing External Antennas Opening the Antenna Compartment Installing the AP in a Plenum Attaching Antennas to the AP-4900M for 4.9 GHz OperationPage ScanTool Instructions Using ScanToolInitialization Scan List Select Tools Internet Options Click LAN SettingsLogging 11 Enter Network Password Using the Setup Wizard 12 System Status ScreenPage Installing the Software Download the Software Install Software with Http Interface Click Commands Update AP via Http Click Commands Reboot Install Software with Tftp Server Install Updates from your Tftp Server using the CLI Related Topics System Status Advanced Configuration Advanced Configuration AP-4000 Series User Guide Configure Main Screen System Dynamic DNS SupportPage IP Configuration Network Advanced Dhcp ServerDNS Client Comment optional Advanced Configuration AP-4000 Series User Guide NetworkStart IP Address End IP Address Dhcp Relay Agent Dhcp Relay Agent Dhcp Server IP Address Table Link Integrity Target IP Address Comment optional Link Integrity Configuration Screen Sntp Simple Network Time Protocol Sntp Configuration Screen Advanced Configuration AP-4000 Series User Guide Network Operational Mode Interfaces Ieee 802.11d Support for Additional Regulatory Domains Advanced Configuration AP-4000 Series User Guide InterfacesSuper Mode and Turbo Mode Configuring TX Power Control Configuring 802.11d SupportTX Power Control/Transmit Power Level Wireless-A 802.11a Radio and Wireless-B 802.11b/g Radio 10 Wireless Interface a Advanced Configuration AP-4000 Series User Guide Interfaces Dynamic Frequency Selection/Radar Detection DFS/RD RTS/CTS Medium Reservation Wireless Service StatusAffected Countries Channel Blacklist Table Traps Generated During Wireless Service Shutdown and ResumeClick on Configure Interfaces Wireless a or Wireless B 13 WDS Example WDS Setup Procedure Bridging WDS Ethernet 15 Adding WDS Links 16 Ethernet Sub-tab Mesh AP-4000M/AP-4900M Only 17 Mesh Sub-tab AP-4000M/AP-4900M Mesh Software Kit 18 Mesh Sub-tab AP-4000 Passwords Management Secure Management IP Access TableServices Accessing the AP through the Https interface Advanced Configuration AP-4000 Series User Guide ManagementHttps Access Secure Socket Layer 19 Management Services Configuration Screen SSH Clients SSH Session SetupConfiguring SSH Click Commands Update AP via Http or via Tftp Uploading Externally Generated Host Keys Serial Configuration Settings Radius Based Management Access Set up Automatic Configuration for Static IP Automatic Configuration AutoConfigAuto Configuration and the CLI Batch File 21 Automatic Configuration Screen Set up Automatic Configuration for Dynamic IP Hardware Configuration Reset Chrd 22 Dhcp Options Setting the Boot Server Host Name Click Configure Management Chrd Configuration Reset via Serial Port During BootupConfiguring Hardware Configuration Reset Procedure to Reset Configuration via the Serial Interface Static MAC FilteringEthernet Protocol Select the Filter Operation Type Advanced Configuration AP-4000 Series User Guide Filtering Wired MAC Address Wired MAC Address 0040F41CDB6AWireless MAC Address 00022D5194E4 Wireless MAC Address 0020A6124E38 Number AdvancedTCP/UDP Port Click Add under the TCP/UDP Port Filter Table heading Editing TCP/UDP Port Filters Click Edit under the TCP/UDP Port Filter Table heading Alarms Groups Security Trap Group Trap Name Description Severity Level Operational Trap Group Trap Name Description Severity Level Trap Name Description Severity Level Flash Memory Trap Group Trap Name Description Severity Level Sntp Trap Group Trap Name Description Severity Level Tftp Trap Group Trap Name Description Severity LevelImage Trap Group Trap Name Description Severity Level Generic Trap Group Trap Name Description Severity Level Alarm Host Table RFC 1215-Trap Trap Name Description Severity Level Event Priority Description Configuring Syslog Event NotificationsSyslog Syslog Message Name Priority Severity Description Advanced Configuration AP-4000 Series User Guide AlarmsSyslog Messages Advanced Configuration AP-4000 Series User Guide Rogue Scan Multi-Band Scanning Continuous Scanning ModeBackground Scanning Mode Rogue Scan Click Configure Alarms Rogue ScanRogue Scan Data Collection 28 Rogue Scan Screen Bridge Spanning Tree Advanced Configuration AP-4000 Series User Guide Bridge Storm Threshold Packet Forwarding Configuring Interfaces for Packet ForwardingIntra BSS QoS Wireless Multimedia Extensions WME/Quality of Service QoSClick Configure QoS Policy Enabling QoS and Adding QoS policies 101 Advanced Configuration AP-4000 Series User Guide QoSEnter the Priority Mapping Index 102 Click Configure QoS Priority MappingPriority Mapping 103 Enhanced Distributed Channel Access EdcaSTA Edca Table and AP Edca Table Click Configure QoS Edca 104 105 106 Radius Servers per Authentication Mode and per VlanRadius Profiles 107 Configuring Radius ProfilesRadius Servers Enforcing Vlan Access Control 108 37 Add Radius Server Profile 109 Radius Accounting MAC Access Control Via Radius Authentication802.1x Authentication using Radius Session Length 111 Authentication AttributesAccounting Attributes 112 113 SSID/VLAN/SecurityVlan Overview 114 Click Configure SSID/VLAN/Security Mgmt Vlan Typical User Vlan ConfigurationsControl Access to the AP Management Vlan Security Profile Provide Access to a Wireless Host in the Same WorkgroupDisable Vlan Tagging 117 Authentication ProcessWi-Fi Protected Access WPA/802.11i WPA2 Authentication Protocol Hierarchy 118 VLANs and Security Profiles Configuring Security ProfilesClick Configure SSID/VLAN/Security Security Profile 802.1x Station Non Secure StationWEP Station WPA Station 802.11i-PSK Station 121 42 Security Profile Table Add Entries 122 123 MAC AccessWireless-A or Wireless-B Configuring an SSID/VLAN with Vlan Tagging Disabled 124 45 SSID/VLAN Edit Entries Screen Vlan Tagging Disabled 125 126 Configuring SSID/VLANs with Vlan Tagging EnabledClick SSID/VLAN/Security Wireless-A or Wireless-B 47 SSID/VLAN Edit Entries Screen Vlan Tagging Enabled 127 Broadcast Ssid and Closed System 128 Monitor Main Screen 129 Version Monitoring AP-4000 Series User Guide IP/ARP Table Icmp Monitoring Tab Learn Table Learn Table Monitoring Tab Radius 134 Monitoring AP-4000 Series User Guide Interfaces 135 136 Station Statistics 137 Mesh Statistics Monitoring AP-4000 Series User Guide Station Statistics Introduction to File Transfer via Tftp or Http 139 Http File Transfer Guidelines Image Error Checking During File TransferTftp File Transfer Guidelines 140 Commands AP-4000 Series User Guide Update APUpdate AP via Tftp 141 142 Update AP via HttpCommands AP-4000 Series User Guide Update AP Retrieve File via Tftp Commands AP-4000 Series User Guide Retrieve FileRetrieve File 143 Retrieve File via Http 144 Retrieve File via Http Command Screen Commands AP-4000 Series User Guide Reboot RebootReset 13 Help Link Configuration Screen 147 Help Link Connectivity Issues Troubleshooting ConceptsSymptoms and Solutions AP Unit Will Not Boot No LED Activity Basic Software Setup and Configuration Problems Client Connection Problems Vlan Operation Issues Active Ethernet AE Forced Reload Procedure Recovery ProceduresReset to Factory Default Procedure Preparing to Download the AP Image Download a New Image Using ScanToolDownload Procedure 153 Download a New Image Using the Bootloader CLI 154 Hardware and Software Requirements Setting IP Address using Serial PortInitializing the IP Address using CLI Attaching the Serial Port Cable 156 Radius Authentication ServerRelated Applications Tftp Server 157 Notation Conventions General NotesPrerequisite Skills and Knowledge Important Terminology Navigation and Special Keys CLI Error MessagesError Message Description Key Combination Operation Command Line Interface CLI AP-4000 Series User Guide Command Line Interface CLI VariationsBootloader CLI 160 Example 1. Display Command list CLI Command TypesOperational CLI Commands Example 3a. Display every parameter that can be changed Example 2. Display specific CommandsExample 3. Display parameters for set and show Done, exit, quit Example 3b. Display parameters based on letter sequenceExample 4. Display Prompts for Successive Parameters Download Passwd HelpHistory 164 Search Parameter Control CommandsShow CLI Command 165 Set and show Command Examples Set CLI CommandConfiguring Objects that Require Reboot Examples Example 2 Create a table entry or row Example 1 Set the Access Point IP Address ParameterExample 4 Enable, Disable, or Delete a table entry or row Example 3 Modify a table entry or row 168 Example 5 Show the Group ParametersExample 6 Show Individual and Table Parameters Working with Tables Using Tables and StringsUsing Strings 169 Log into the AP using HyperTerminal Configuring the AP using CLI commandsSet Basic Configuration Parameters using CLI Commands Log into the AP using Telnet Set System Name, Location and Contact Information Change PasswordsSet Network Names for the Wireless Interface 171 Country Code 172 Configure SSIDs Network Names, VLANs, and Profiles 173 Set up Auto Configuration Download an AP Configuration File from your Tftp ServerBackup your AP Configuration File 174 Configure the DNS Client Other Network SettingsConfigure the AP as a Dhcp Server Operational Mode Autochannel Select ACS Enable/Disable Super Mode 802.11a/g only Enable/Disable Closed SystemShutdown/Resume Wireless Service Enable/Disable Turbo Mode 802.11a/g only Set the Distance Between APs Edit Management IP Access TableConfigure Management Ports Configure Serial Port Interface Configure Secure Socket Layer HttpsSet Telnet Session Timeouts Set Communication Ports Setup MAC Address Access Control Create/Enable WDSEnable/Disable WDS Add an Entry to the MAC Access Control Table 181 Configure Radius Authentication serversSet Radius Parameters Set Hardware Configuration Reset Parameters 182 Configure a Security Profile with Non Secure Security Mode Enable Vlan ManagementDisable Vlan Management Configure a Security Profile with WEP Security Mode CLI Monitoring Parameters Configure a Security Profile with 802.11i Security ModeConfigure a Security Profile with 802.11i-PSK Security Mode Parameter Tables Serial Port Parameters Serial Port setup 185 186 System Parameters Name Type Value Access CLI ParameterSet sysresettodefaults 187 Network Parameters DNS Client for Radius Name ResolutionDhcp Server Parameters Name Type Value Access CLI Parameter 188 Dhcp Relay Server Table Dhcp Server table for IP poolsDhcp Relay Group 189 190 Sntp Parameters Name Type Value Access CLI ParameterLink Integrity IP Target Table Common Parameters to 802.11a/b/g Wireless Interface ParametersInterface Parameters 191 802.11a Only Parameters 192 193 802.11b Only Parameters802.11b/g Only Parameters For 802.11b-only For 802.11g-only modeFor 802.11b/g mode Mode Channel Blacklist Parameters Wireless Distribution System WDS ParametersWireless Interface SSID/VLAN/Profile Parameters 195 Wireless Distribution System WDS Security Table Parameters 196 197 Snmp Parameters Name Type Value Access CLI ParameterManagement Parameters 198 199 Http Parameters Name Type Value Access CLI ParameterTelnet Parameters Name Type Value Access CLI Parameter SSH Parameters Serial Port Parameters Name Type Value Access CLI ParameterRadius Based Management Access Parameters 200 201 IP Access Table ParametersTftp Server Parameters 202 Filtering ParametersEthernet Filtering Table TCP/UDP Port Filtering Table Proxy ARP Parameters Name Type Value Access CLI ParameterTCP/UDP Port Filtering 203 204 Alarms ParametersSnmp Table Host Table Parameters 205 Syslog ParametersSyslog Host Table 206 Bridge ParametersSpanning Tree Priority and Path Cost Table Packet Forwarding Parameters Storm Threshold TableIntra BSS Subscriber Blocking 207 General Radius Parameters Radius Server Configuration ParametersRadius Parameters 208 MAC Access Control Table Security Parameters Security Profile Table 210 Other Parameters Iapp Parameters Name Type Value Access CLI ParameterVLAN/SSID Parameters 211 Specifying the Mapping between 802.1p and 802.1D Priorities Enabling QoS Name Type Value Access CLI ParameterConfiguring QoS Policies 212 QoS Enhanced Distributed Channel Access Edca Parameters 213 CLI Batch File Format and Syntax Auto Configuration and the CLI Batch FileCLI Batch File Sample CLI Batch File 215 Reboot BehaviorCLI Batch File Error Log Hex Charact Equival Ent 216 Radius Based Management Access 217 Software FeaturesFeature Supported by AP-4000 Series Number of Stations per BSS Advanced Bridging Functions Medium Access Control MAC FunctionsSpecifications AP-4000 Series User Guide Software Features Security Functions 219 Specifications AP-4000 Series User GuideNetwork Functions Hardware Specifications 221 Available ChannelsAP-4000/4000M Channels AP-4900M Channels a/b/g Modes AP-4900M Channels 4.9 GHz Public Safety ModeAP-4900M Channels 222 223 Online Support Software and Documentation Downloads Knowledgebase 224 Telephone Support International 225 Limitations of Warranty Warranty CoverageRepair or Replacement Support Procedures Search Knowledgebase Ask a Question or Open an IssueOther Information Other Adapter Cards Product Model Numbers 228 Regulatory Compliance AP-4000 Series User Guide 229 Safety Information USA, Canada, & European Union 230 Federal Communications Commission FCC AP-4000/4000M 231 Modifications 232 Industry Canada IC AP-4000/4000M only 233 European Union AP-4000/4000M only 234 Country Certification/Reference No Regulatory Compliance Certifications Summary AP-4000/4000MRegulatory Compliance Certifications Summary AP-4900M 235