Advanced Configuration | Proxim AP-700 guide

AP-700 User Guide

Advanced Configuration	4

This chapter contains information on configuring settings in the following categories:

•System: Configure specific system information such as system name and contact information.

•Network: Configure IP, DNS client, DHCP server, DHCP Relay Agent, DHCP Relay Servers, Link Integrity, and SNTP settings.

•Interfaces: Configure the Access Point’s interfaces: Wireless and Ethernet settings. Configure the Channel Blacklist Table and a Wireless Distribution System (WDS).

•Management: Configure the Access Point’s management Passwords, IP Access Table, and Services such as configuring secure or restricted access to the AP via SNMPv3, HTTPS, or CLI. Configure Secure Management, SSL, Secure Shell (SSH), and RADIUS Based Access Management. Set up Automatic Configuration for Static IP.

•Filtering: Configure Ethernet Protocol filters, Static MAC Address filters, Advanced filters, and Port filters.

•Alarms: Configure the Alarm (SNMP Trap) Groups, the Alarm Host Table, and the Syslog features.

•Bridge: Configure the Spanning Tree Protocol, Storm Threshold protection, Intra BSS traffic, and Packet Forwarding.

•QoS: Configure Wireless Multimedia Enhancements/Quality of Service parameters and QoS policies.

•Radius Profiles: Configure RADIUS features such as RADIUS Access Control and Accounting.

•SSID/VLAN/Security: Configure SSIDs, VLANs, and security profiles. Configure security features such as MAC Access Control, WPA, WEP Encryption, and 802.1x.

To configure the AP using the HTTP/HTTPS interface, you must first log in to a web browser. See Logging In for instructions.

You may also configure the AP using the command line interface. See Command Line Interface (CLI) for more information.

To configure the AP via HTTP/HTTPS:

1. Click the Configure button located on the left-hand side of the screen.

34

Image 34

Proxim AP-700 manual Advanced Configuration

Contents

ORiNOCO AP-700 Access Point User Guide OpenSSL License Note CopyrightTrademarks AP-700 User Guide Contents Contents AP-700 User Guide Management Troubleshooting CommandsMonitoring Command Line Interface CLI General Notes Technical Support Ascii Character Chart C SpecificationsStatement of Warranty Regulatory Compliance AP-700 User Guide Introduction Introduction to Wireless NetworkingDocument Conventions Guidelines for Roaming Ieee 802.11 SpecificationsIntroduction AP-700 User Guide Management and Monitoring Capabilities Command Line InterfaceHTTP/HTTPS Interface SSH Secure Shell Management Snmp ManagementSNMPv3 Secure Management Page AP-700 Hardware Description Installation and InitializationOverview Antennas Installation and Initialization AP-700 User GuideExternal Antennas LED Indicators Active Ethernet Prerequisites Installation and Initialization AP-700 User Guide Product Package System Requirements Required Materials Hardware InstallationCabling the AP-700 Mounting the AP-700 Installing the Security CoverMounting the AP-700 to a Ceiling Installing External Antennas AP-700 Mounting Plate Mounting the AP-700 to a Wall Installing the AP in a Plenum Opening the Antenna Compartment Initialization Using ScanToolScanTool Instructions Scan List Logging Click LAN SettingsEnter Network Password screen appears Select Tools Internet Options Using the Setup Wizard 11 System Status Screen 12 Setup Wizard Setup Wizard Instructions Installing the Software Install Software with Http Interface Click Commands Update AP via Http Click Commands Reboot Install Software with Tftp Server Install Updates from your Tftp Server using the CLI Related Topics System Status System Status Screen Advanced Configuration Advanced Configuration AP-700 User Guide Configure Main Screen System Dynamic DNS SupportPage IP Configuration Network DNS Client Dhcp ServerAdvanced Start IP Address End IP Address Advanced Configuration AP-700 User Guide NetworkComment optional Dhcp Relay Agent Dhcp Relay Agent Dhcp Server IP Address Table Link Integrity Target IP Address Comment optional Link Integrity Configuration Screen Sntp Simple Network Time Protocol Sntp Configuration Screen Advanced Configuration AP-700 User Guide Network Operational Mode Interfaces Configuring 802.11d Support Advanced Configuration AP-700 User Guide InterfacesSuper Mode and Turbo Mode Ieee 802.11d Support for Additional Regulatory Domains TX Power Control/Transmit Power Level Configuring TX Power Control Wireless 802.11a/b/g Radio 10 Wireless InterfacePage Dynamic Frequency Selection/Radar Detection DFS/RD Affected Countries Wireless Service Status RTS/CTS Medium Reservation Set Blacklist Status to Enable Traps Generated During Wireless Service Shutdown and ResumeClick on Configure Interfaces Wireless Channel Blacklist Table 13 WDS Example Bridging WDS WDS Setup Procedure 14 WDS Configuration Ethernet 15 Adding WDS Links 16 Ethernet Sub-tab Passwords Management Services IP Access TableSecure Management Http Access Advanced Configuration AP-700 User Guide ManagementSnmp Settings Https Access Secure Socket Layer 17 Management Services Configuration Screen Configuring SSH SSH Session SetupSSH Clients Click Commands Update AP via Http or via Tftp Uploading Externally Generated Host Keys Serial Configuration Settings Radius Based Management Access Auto Configuration and the CLI Batch File Automatic Configuration AutoConfigSet up Automatic Configuration for Static IP 19 Automatic Configuration Screen Set up Automatic Configuration for Dynamic IP Hardware Configuration Reset Chrd 20 Dhcp Options Setting the Boot Server Host Name Configuring Hardware Configuration Reset Configuration Reset via Serial Port During BootupClick Configure Management Chrd Procedure to Reset Configuration via the Serial Interface Static MAC FilteringEthernet Protocol Select the Filter Operation Type Advanced Configuration AP-700 User Guide Filtering Wired MAC Address Wired MAC Address 0040F41CDB6AWireless MAC Address 00022D5194E4 Wireless MAC Address 0020A6124E38 Number AdvancedTCP/UDP Port Click Add under the TCP/UDP Port Filter Table heading Editing TCP/UDP Port Filters Click Edit under the TCP/UDP Port Filter Table heading Alarms Groups Security Trap Group Trap Name Description Severity Level Operational Trap Group Trap Name Description Severity Level Trap Name Description Severity Level Flash Memory Trap Group Trap Name Description Severity Level Image Trap Group Trap Name Description Severity Level Alarm Host TableTftp Trap Group Trap Name Description Severity Level Sntp Trap Group Trap Name Description Severity Level Advanced Configuration AP-700 User Guide Alarms Syslog Configuring Syslog Event NotificationsEvent Priority Description Syslog Messages Syslog Message Name Priority Severity Description Advanced Configuration AP-700 User Guide Rogue Scan 25 Preventing Rogue AP Attacks Multi-Band Scanning Continuous Scanning ModeBackground Scanning Mode Rogue Scan Data Collection Click Configure Alarms Rogue Scan Rogue Scan 26 Rogue Scan Screen Bridge Spanning Tree Advanced Configuration AP-700 User Guide Bridge Storm Threshold Intra BSS Configuring Interfaces for Packet ForwardingPacket Forwarding QoS Wireless Multimedia Extensions WME/Quality of Service QoSClick Configure QoS Policy Enabling QoS and Adding QoS policies Advanced Configuration AP-700 User Guide QoS Enter the Priority Mapping Index Click Configure QoS Priority Mapping Priority Mapping Enhanced Distributed Channel Access Edca STA Edca Table and AP Edca Table 32 Edca Tables Advanced Configuration AP-700 User Guide QoS Radius Servers per Authentication Mode and per Vlan Radius Profiles Configuring Radius Profiles Radius Servers Enforcing Vlan Access Control Advanced Configuration AP-700 User Guide 35 Add Radius Server Profile 802.1x Authentication using Radius MAC Access Control Via Radius AuthenticationRadius Accounting Accounting Attributes Authentication Attributes101 102 Vlan Overview SSID/VLAN/Security103 104 Click Configure SSID/VLAN/Security Mgmt Vlan Typical User Vlan ConfigurationsControl Access to the AP Management Vlan Disable Vlan Tagging Provide Access to a Wireless Host in the Same WorkgroupSecurity Profile Wi-Fi Protected Access WPA/802.11i WPA2 Advanced Configuration AP-700 User Guide SSID/VLAN/SecurityAuthentication Process 107 Authentication Protocol Hierarchy 108 VLANs and Security Profiles Configuring Security ProfilesClick Configure SSID/VLAN/Security Security Profile 109 802.1x Station Non Secure StationWEP Station WPA Station 111 40 Security Profile Table Add Entries 112 Wireless MAC Access113 Configuring an SSID/VLAN with Vlan Tagging Disabled 114 43 SSID/VLAN Edit Entries Screen Vlan Tagging Disabled 115 Click SSID/VLAN/Security Wireless Configuring SSID/VLANs with Vlan Tagging Enabled116 45 SSID/VLAN Edit Entries Screen Vlan Tagging Enabled 117 Broadcast Ssid and Closed System 118 Monitoring 119 Version Monitoring AP-700 User Guide IP/ARP Table Icmp Monitoring Tab Learn Table Learn Table Monitoring Tab Radius 124 Monitoring AP-700 User Guide Interfaces 125 126 Station Statistics 127 Monitoring AP-700 User Guide Station Statistics 128 Introduction to File Transfer via Tftp or Http Commands129 Http File Transfer Guidelines Image Error Checking During File TransferTftp File Transfer Guidelines 130 Commands AP-700 User Guide Update APUpdate AP via Tftp 131 Commands AP-700 User Guide Update AP via Http Update AP via Http132 Retrieve File via Tftp Commands AP-700 User Guide Retrieve FileRetrieve File 133 Retrieve File via Http 134 Retrieve File via Http Command Screen Reset RebootCommands AP-700 User Guide Reboot 13 Help Link Configuration Screen 137 Help Link Symptoms and Solutions TroubleshootingTroubleshooting Concepts Connectivity Issues Basic Software Setup and Configuration Problems Client Connection Problems Vlan Operation Issues Active Ethernet AE Reset to Factory Default Procedure Recovery ProceduresForced Reload Procedure Preparing to Download the AP Image Download a New Image Using ScanToolDownload Procedure 143 Download a New Image Using the Bootloader CLI 144 Hardware and Software Requirements Setting IP Address using Serial PortInitializing the IP Address using CLI Attaching the Serial Port Cable Tftp Server Radius Authentication ServerRelated Applications 146 Troubleshooting AP-700 User Guide Related Applications 147 Prerequisite Skills and Knowledge Command Line Interface CLIGeneral Notes Notation Conventions CLI Error Messages Navigation and Special Keys Command Line Interface CLI AP-700 User Guide Command Line Interface CLI VariationsBootloader CLI 150 Operational CLI Commands CLI Command TypesExample 1. Display Command list Example 3. Display parameters for set and show Example 2. Display specific CommandsExample 3a. Display every parameter that can be changed Done, exit, quit Example 3b. Display parameters based on letter sequenceExample 4. Display Prompts for Successive Parameters Download Passwd HelpHistory 154 Search Parameter Control CommandsShow CLI Command 155 Set and show Command Examples Set CLI CommandConfiguring Objects that Require Reboot Examples Example 2 Create a table entry or row Example 1 Set the Access Point IP Address ParameterExample 4 Enable, Disable, or Delete a table entry or row Example 3 Modify a table entry or row Example 6 Show Individual and Table Parameters Example 5 Show the Group Parameters158 Working with Tables Using Tables and StringsUsing Strings 159 Log into the AP using HyperTerminal Configuring the AP using CLI commandsSet Basic Configuration Parameters using CLI Commands Log into the AP using Telnet Set System Name, Location and Contact Information Change PasswordsSet Network Names for the Wireless Interface 161 Country Code 162 Configure SSIDs Network Names, VLANs, and Profiles 163 Backup your AP Configuration File Other Network SettingsDownload an AP Configuration File from your Tftp Server Set up Auto Configuration Configure the AP as a Dhcp Server Configure the DNS Client Enable/Disable Closed System Operational ModeAutochannel Select ACS Enable/Disable Turbo Mode 802.11a/g only Shutdown/Resume Wireless ServiceEnable/Disable Super Mode 802.11a/g only Configure Antenna Diversity Configure Management Ports Edit Management IP Access TableSet Communication Ports Configure Serial Port Interface Configure Secure Socket Layer HttpsSet Telnet Session Timeouts 169 Setup MAC Address Access Control Create/Enable WDSEnable/Disable WDS Add an Entry to the MAC Access Control Table Figure A-17 Result of showradiustbl CLI Command 171 Disable Vlan Management Enable Vlan ManagementAdd a Entry to the Wifssid Table CLI Monitoring Parameters Parameter Tables 174 Filtering Parameters 175 System Parameters Name Type Value Access CLI ParameterSet sysresettodefaults 176 Network Parameters DNS Client for Radius Name ResolutionDhcp Server Parameters Name Type Value Access CLI Parameter 177 Dhcp Relay Server Table Dhcp Server table for IP poolsDhcp Relay Group 178 Link Integrity IP Target Table Sntp Parameters Name Type Value Access CLI Parameter179 Common Parameters to 802.11a/b/g Wireless Interface ParametersInterface Parameters 180 802.11a Only Parameters 181 802.11b/g Only Parameters 802.11b Only Parameters182 For 802.11b-only For 802.11g-only modeFor 802.11b/g mode Mode Channel Blacklist Parameters Wireless Distribution System WDS ParametersWireless Interface SSID/VLAN/Profile Parameters 184 Management Parameters Wireless Distribution System WDS Security Table ParametersSnmp Parameters Name Type Value Access CLI Parameter 185 186 Telnet Parameters Name Type Value Access CLI Parameter Http Parameters Name Type Value Access CLI Parameter187 SSH Parameters Serial Port Parameters Name Type Value Access CLI ParameterRadius Based Management Access Parameters 188 Tftp Server Parameters IP Access Table Parameters189 Ethernet Filtering Table Filtering Parameters190 TCP/UDP Port Filtering Table Proxy ARP Parameters Name Type Value Access CLI ParameterTCP/UDP Port Filtering 191 Snmp Table Host Table Parameters Alarms ParametersName Type Value Access CLI Parameter Syslog Group 192 Syslog Parameters Syslog Host Table 193 Spanning Tree Priority and Path Cost Table Bridge Parameters194 Packet Forwarding Parameters Storm Threshold TableIntra BSS Subscriber Blocking 195 General Radius Parameters Radius Server Configuration ParametersRadius Parameters 196 MAC Access Control Table Security Parameters Security Profile Table VLAN/SSID Parameters198 Configuring QoS Policies Iapp Parameters Name Type Value Access CLI ParameterEnabling QoS Name Type Value Access CLI Parameter Other Parameters Specifying the Mapping between 802.1p and 802.1D Priorities 200 CLI Batch File Defining the QoS Policy used for a Wireless Interface Ssid201 Reboot Behavior Auto Configuration and the CLI Batch FileCLI Batch File Format and Syntax CLI Batch File Error Log 203 Hex Ascii Character ChartCharact Equival Ent 204 Number of Stations per BSS SpecificationsSoftware Features Management Functions Advanced Bridging Functions Medium Access Control MAC FunctionsSpecifications AP-700 User Guide Software Features Security Functions Network Functions Specifications AP-700 User Guide207 Hardware Specifications 802.11b/g 802.11a Mode Frequency Channel Product SKU BandAvailable Channels Upper 149 153 157 161 ISM Band 165 802.11a RF Performance 802.11a Data Rates Mbps RF Performance210 Online Support Technical SupportSoftware and Documentation Downloads Knowledgebase 211 Technical Support AP-700 User Guide Telephone Support Telephone SupportInternational 212 Repair or Replacement Statement of WarrantyWarranty Coverage Limitations of Warranty Search Knowledgebase Ask a Question or Open an IssueOther Information Other Adapter Cards Product Model Numbers Regulatory Compliance215 Regulatory Compliance AP-700 User Guide Safety Information USA, Canada, & European Union216 Federal Communications Commission FCC 217 Modifications 218 Industry Canada IC 219 European Union 220 Country Certification/Reference No Regulatory Compliance Certifications Summary221