IP Access Table, Services, Secure Management | Proxim AP-4000

Advanced Configuration

AP-4000 Series User Guide

Management

IP Access Table

The Management IP Access table limits in-band management access to the IP addresses or range of IP addresses specified in the table. This feature applies to all management services (SNMP, HTTP, and CLI) except for CLI management over the serial port. To configure this table, click Add and set the following parameters:

•IP Address: Enter the IP Address for the management station.

•IP Mask: Enter a mask that will act as a filter to limit access to a range of IP Addresses based on the IP Address you already entered.

–The IP mask 255.255.255.255 would authorize the single station defined by the IP Address to configure the Access Point. The AP would ignore commands from any other IP address. In contrast, the IP mask 255.255.255.0 would allow any device that shares the first three octets of the IP address to configure the AP. For example, if you enter an IP address of 10.20.30.1 with a 255.255.255.0 subnet mask, any IP address between 10.20.30.1 and 10.20.30.254 will have access to the AP’s management interfaces.

•Comment: Enter an optional comment, such as the station name.

To edit or delete an entry, click Edit. Edit the information, or select Enable, Disable, or Delete from the Status pull-down menu.

Services

You can configure the following management services:

Secure Management

Secure Management allows the use of encrypted and authenticated communication protocols such as SNMPv3, Secure Socket Link (SSL), and Secure Shell (SSH) to manage the Access Point.

69

Image 69

Proxim AP-4000 manual IP Access Table, Services, Secure Management

Contents

ORiNOCO AP-4000 Series Access Points User Guide Trademarks CopyrightOpenSSL License Note AP-4000 Series User Guide Contents Contents AP-4000 Series User Guide System Status 4 Advanced Configuration Commands TroubleshootingMonitoring Recovery Procedures Command Line Interface CLI Ascii Character Chart C Specifications Statement of WarrantyTechnical Support Regulatory Compliance Products Covered in this User Guide Document ConventionsProduct Description Introduction AP-4000 Series User Guide Introduction to Wireless Networking Mesh Network Convergence Mesh Networking AP-4000M/4900M Only Mesh Startup Topology Example Step Mesh Network Configuration Guidelines for Roaming Command Line Interface Ieee 802.11 SpecificationsManagement and Monitoring Capabilities HTTP/HTTPS Interface SNMPv3 Secure Management Snmp Management SSH Secure Shell Management Overview AP-4000 Series Hardware Description External Antennas Antennas Installation and Initialization AP-4000 Series User Guide Active EthernetGHz Antenna LED Indicators on the AP-4000/4000M/4900M Top Panel LED Indicators General Prerequisites Prerequisites Mesh Prerequisites System Requirements Product Package Hardware Installation Required MaterialsCabling the AP-4000/4000M/4900M Mounting the AP-4000/4000M/4900M Installing the Security Cover Mounting the AP-4900M in a Vehicle Mounting the AP-4000/4000M/4900M to a Ceiling Opening the Antenna Compartment Installing External Antennas Attaching Antennas to the AP-4900M for 4.9 GHz Operation Installing the AP in a PlenumPage Using ScanTool InitializationScanTool Instructions Scan List Click LAN Settings LoggingSelect Tools Internet Options 11 Enter Network Password 12 System Status Screen Using the Setup WizardPage Download the Software Installing the Software Click Commands Update AP via Http Install Software with Http Interface Install Software with Tftp Server Click Commands Reboot Related Topics Install Updates from your Tftp Server using the CLI System Status Advanced Configuration Configure Main Screen Advanced Configuration AP-4000 Series User Guide Dynamic DNS Support SystemPage Network IP Configuration Dhcp Server DNS ClientAdvanced Advanced Configuration AP-4000 Series User Guide Network Start IP Address End IP AddressComment optional Dhcp Relay Agent Dhcp Server IP Address Table Dhcp Relay Agent Target IP Address Comment optional Link Integrity Sntp Simple Network Time Protocol Link Integrity Configuration Screen Sntp Configuration Screen Advanced Configuration AP-4000 Series User Guide Network Interfaces Operational Mode Advanced Configuration AP-4000 Series User Guide Interfaces Super Mode and Turbo ModeIeee 802.11d Support for Additional Regulatory Domains Configuring 802.11d Support TX Power Control/Transmit Power LevelConfiguring TX Power Control 10 Wireless Interface a Wireless-A 802.11a Radio and Wireless-B 802.11b/g Radio Advanced Configuration AP-4000 Series User Guide Interfaces Dynamic Frequency Selection/Radar Detection DFS/RD Wireless Service Status Affected CountriesRTS/CTS Medium Reservation Traps Generated During Wireless Service Shutdown and Resume Click on Configure Interfaces Wireless a or Wireless BChannel Blacklist Table 13 WDS Example Bridging WDS WDS Setup Procedure 15 Adding WDS Links Ethernet 16 Ethernet Sub-tab 17 Mesh Sub-tab AP-4000M/AP-4900M Mesh AP-4000M/AP-4900M Only 18 Mesh Sub-tab AP-4000 Mesh Software Kit Management Passwords IP Access Table ServicesSecure Management Advanced Configuration AP-4000 Series User Guide Management Https Access Secure Socket LayerAccessing the AP through the Https interface 19 Management Services Configuration Screen SSH Session Setup Configuring SSHSSH Clients Uploading Externally Generated Host Keys Click Commands Update AP via Http or via Tftp Radius Based Management Access Serial Configuration Settings Automatic Configuration AutoConfig Auto Configuration and the CLI Batch FileSet up Automatic Configuration for Static IP Set up Automatic Configuration for Dynamic IP 21 Automatic Configuration Screen 22 Dhcp Options Setting the Boot Server Host Name Hardware Configuration Reset Chrd Configuration Reset via Serial Port During Bootup Configuring Hardware Configuration ResetClick Configure Management Chrd Procedure to Reset Configuration via the Serial Interface Ethernet Protocol FilteringStatic MAC Select the Filter Operation Type Advanced Configuration AP-4000 Series User Guide Filtering Wireless MAC Address 00022D5194E4 Wired MAC Address 0040F41CDB6AWired MAC Address Wireless MAC Address 0020A6124E38 TCP/UDP Port AdvancedNumber Click Add under the TCP/UDP Port Filter Table heading Click Edit under the TCP/UDP Port Filter Table heading Editing TCP/UDP Port Filters Groups Alarms Operational Trap Group Trap Name Description Severity Level Security Trap Group Trap Name Description Severity Level Flash Memory Trap Group Trap Name Description Severity Level Trap Name Description Severity Level Image Trap Group Trap Name Description Severity Level Tftp Trap Group Trap Name Description Severity LevelSntp Trap Group Trap Name Description Severity Level Generic Trap Group Trap Name Description Severity Level RFC 1215-Trap Trap Name Description Severity Level Alarm Host Table Configuring Syslog Event Notifications SyslogEvent Priority Description Advanced Configuration AP-4000 Series User Guide Alarms Syslog MessagesSyslog Message Name Priority Severity Description Advanced Configuration AP-4000 Series User Guide Rogue Scan Continuous Scanning Mode Background Scanning ModeMulti-Band Scanning Click Configure Alarms Rogue Scan Rogue Scan Data CollectionRogue Scan 28 Rogue Scan Screen Spanning Tree Bridge Storm Threshold Advanced Configuration AP-4000 Series User Guide Bridge Configuring Interfaces for Packet Forwarding Intra BSSPacket Forwarding Click Configure QoS Policy Wireless Multimedia Extensions WME/Quality of Service QoSQoS Enabling QoS and Adding QoS policies Advanced Configuration AP-4000 Series User Guide QoS Enter the Priority Mapping Index101 Click Configure QoS Priority Mapping Priority Mapping102 Enhanced Distributed Channel Access Edca STA Edca Table and AP Edca Table103 104 Click Configure QoS Edca 105 Radius Servers per Authentication Mode and per Vlan Radius Profiles106 Configuring Radius Profiles Radius Servers Enforcing Vlan Access Control107 108 109 37 Add Radius Server Profile 802.1x Authentication using Radius MAC Access Control Via Radius AuthenticationRadius Accounting Session Length Authentication Attributes Accounting Attributes111 112 SSID/VLAN/Security Vlan Overview113 114 Control Access to the AP Typical User Vlan ConfigurationsClick Configure SSID/VLAN/Security Mgmt Vlan Management Vlan Provide Access to a Wireless Host in the Same Workgroup Disable Vlan TaggingSecurity Profile Authentication Process Wi-Fi Protected Access WPA/802.11i WPA2117 118 Authentication Protocol Hierarchy Configuring Security Profiles Click Configure SSID/VLAN/Security Security ProfileVLANs and Security Profiles WEP Station Non Secure Station802.1x Station WPA Station 121 802.11i-PSK Station 42 Security Profile Table Add Entries 122 MAC Access Wireless-A or Wireless-B123 124 Configuring an SSID/VLAN with Vlan Tagging Disabled 125 45 SSID/VLAN Edit Entries Screen Vlan Tagging Disabled Configuring SSID/VLANs with Vlan Tagging Enabled Click SSID/VLAN/Security Wireless-A or Wireless-B126 127 47 SSID/VLAN Edit Entries Screen Vlan Tagging Enabled 128 Broadcast Ssid and Closed System 129 Monitor Main Screen Monitoring AP-4000 Series User Guide Version Icmp Monitoring Tab IP/ARP Table Learn Table Monitoring Tab Learn Table Radius 134 135 Monitoring AP-4000 Series User Guide Interfaces 136 137 Station Statistics Monitoring AP-4000 Series User Guide Station Statistics Mesh Statistics 139 Introduction to File Transfer via Tftp or Http Tftp File Transfer Guidelines Image Error Checking During File TransferHttp File Transfer Guidelines 140 Update AP via Tftp Update APCommands AP-4000 Series User Guide 141 Update AP via Http Commands AP-4000 Series User Guide Update AP142 Retrieve File Commands AP-4000 Series User Guide Retrieve FileRetrieve File via Tftp 143 144 Retrieve File via Http Retrieve File via Http Command Screen Reboot ResetCommands AP-4000 Series User Guide Reboot Help Link 13 Help Link Configuration Screen 147 Symptoms and Solutions Troubleshooting ConceptsConnectivity Issues AP Unit Will Not Boot No LED Activity Basic Software Setup and Configuration Problems Client Connection Problems Active Ethernet AE Vlan Operation Issues Recovery Procedures Reset to Factory Default ProcedureForced Reload Procedure Download Procedure Download a New Image Using ScanToolPreparing to Download the AP Image 153 154 Download a New Image Using the Bootloader CLI Initializing the IP Address using CLI Setting IP Address using Serial PortHardware and Software Requirements Attaching the Serial Port Cable Radius Authentication Server Related Applications156 157 Tftp Server Prerequisite Skills and Knowledge General NotesNotation Conventions Important Terminology Error Message Description CLI Error MessagesNavigation and Special Keys Key Combination Operation Bootloader CLI Command Line Interface CLI VariationsCommand Line Interface CLI AP-4000 Series User Guide 160 CLI Command Types Operational CLI CommandsExample 1. Display Command list Example 2. Display specific Commands Example 3. Display parameters for set and showExample 3a. Display every parameter that can be changed Example 4. Display Prompts for Successive Parameters Example 3b. Display parameters based on letter sequenceDone, exit, quit Download History HelpPasswd 164 Show CLI Command Parameter Control CommandsSearch 165 Configuring Objects that Require Reboot Set CLI CommandSet and show Command Examples Examples Example 4 Enable, Disable, or Delete a table entry or row Example 1 Set the Access Point IP Address ParameterExample 2 Create a table entry or row Example 3 Modify a table entry or row Example 5 Show the Group Parameters Example 6 Show Individual and Table Parameters168 Using Strings Using Tables and StringsWorking with Tables 169 Set Basic Configuration Parameters using CLI Commands Configuring the AP using CLI commandsLog into the AP using HyperTerminal Log into the AP using Telnet Set Network Names for the Wireless Interface Change PasswordsSet System Name, Location and Contact Information 171 172 Country Code 173 Configure SSIDs Network Names, VLANs, and Profiles Backup your AP Configuration File Download an AP Configuration File from your Tftp ServerSet up Auto Configuration 174 Other Network Settings Configure the AP as a Dhcp ServerConfigure the DNS Client Autochannel Select ACS Operational Mode Shutdown/Resume Wireless Service Enable/Disable Closed SystemEnable/Disable Super Mode 802.11a/g only Enable/Disable Turbo Mode 802.11a/g only Edit Management IP Access Table Configure Management PortsSet the Distance Between APs Set Telnet Session Timeouts Configure Secure Socket Layer HttpsConfigure Serial Port Interface Set Communication Ports Enable/Disable WDS Create/Enable WDSSetup MAC Address Access Control Add an Entry to the MAC Access Control Table Configure Radius Authentication servers Set Radius Parameters181 182 Set Hardware Configuration Reset Parameters Disable Vlan Management Enable Vlan ManagementConfigure a Security Profile with Non Secure Security Mode Configure a Security Profile with WEP Security Mode Configure a Security Profile with 802.11i-PSK Security Mode Configure a Security Profile with 802.11i Security ModeCLI Monitoring Parameters Parameter Tables 185 Serial Port Parameters Serial Port setup 186 Set sysresettodefaults Name Type Value Access CLI ParameterSystem Parameters 187 Dhcp Server Parameters Name Type Value Access CLI Parameter DNS Client for Radius Name ResolutionNetwork Parameters 188 Dhcp Relay Group Dhcp Server table for IP poolsDhcp Relay Server Table 189 Sntp Parameters Name Type Value Access CLI Parameter Link Integrity IP Target Table190 Interface Parameters Wireless Interface ParametersCommon Parameters to 802.11a/b/g 191 192 802.11a Only Parameters 802.11b Only Parameters 802.11b/g Only Parameters193 For 802.11b/g mode For 802.11g-only modeFor 802.11b-only Mode Wireless Interface SSID/VLAN/Profile Parameters Wireless Distribution System WDS ParametersChannel Blacklist Parameters 195 196 Wireless Distribution System WDS Security Table Parameters Snmp Parameters Name Type Value Access CLI Parameter Management Parameters197 198 Http Parameters Name Type Value Access CLI Parameter Telnet Parameters Name Type Value Access CLI Parameter199 Radius Based Management Access Parameters Serial Port Parameters Name Type Value Access CLI ParameterSSH Parameters 200 IP Access Table Parameters Tftp Server Parameters201 Filtering Parameters Ethernet Filtering Table202 TCP/UDP Port Filtering Proxy ARP Parameters Name Type Value Access CLI ParameterTCP/UDP Port Filtering Table 203 Alarms Parameters Snmp Table Host Table Parameters204 Syslog Parameters Syslog Host Table205 Bridge Parameters Spanning Tree Priority and Path Cost Table206 Intra BSS Subscriber Blocking Storm Threshold TablePacket Forwarding Parameters 207 Radius Parameters Radius Server Configuration ParametersGeneral Radius Parameters 208 Security Parameters MAC Access Control Table 210 Security Profile Table VLAN/SSID Parameters Iapp Parameters Name Type Value Access CLI ParameterOther Parameters 211 Configuring QoS Policies Enabling QoS Name Type Value Access CLI ParameterSpecifying the Mapping between 802.1p and 802.1D Priorities 212 213 QoS Enhanced Distributed Channel Access Edca Parameters CLI Batch File Auto Configuration and the CLI Batch FileCLI Batch File Format and Syntax Sample CLI Batch File Reboot Behavior CLI Batch File Error Log215 Charact Equival Ent 216 Hex Feature Supported by AP-4000 Series Software FeaturesRadius Based Management Access 217 Number of Stations per BSS Specifications AP-4000 Series User Guide Software Features Medium Access Control MAC FunctionsAdvanced Bridging Functions Security Functions Specifications AP-4000 Series User Guide Network Functions219 Hardware Specifications Available Channels AP-4000/4000M Channels221 AP-4900M Channels AP-4900M Channels 4.9 GHz Public Safety ModeAP-4900M Channels a/b/g Modes 222 223 Software and Documentation Downloads Knowledgebase 224 Online Support International 225 Telephone Support Repair or Replacement Warranty CoverageLimitations of Warranty Support Procedures Other Information Ask a Question or Open an IssueSearch Knowledgebase Other Adapter Cards 228 Product Model Numbers 229 Regulatory Compliance AP-4000 Series User Guide 230 Safety Information USA, Canada, & European Union 231 Federal Communications Commission FCC AP-4000/4000M 232 Modifications 233 Industry Canada IC AP-4000/4000M only 234 European Union AP-4000/4000M only Regulatory Compliance Certifications Summary AP-4900M Regulatory Compliance Certifications Summary AP-4000/4000MCountry Certification/Reference No 235