Manuals / Symbol Technologies / Computer Equipment / Network Router

Symbol Technologies AP-4131 manual Lan

Models: AP-4131

1 250

Download 250 pages 60.1 Kb

Page 246

K

Kerberos

AP proxy 29 authentication 26 authentication service (AS) 28 default setting 31 disabling 31

enabling 31 implementation 26

Key Distribution Center (KDC) 27 kss function 28, E-1

manual authentication configuration 94 MU authentication 29

realm 27 TGS_REP 29 TGS_REQ 29

Ticket Granting Ticket Server 28 known APs 171

MAC and IP addresses 171 statistics 171

KSS

databases 32

disable open enrollment 31 enable open enrollment 31 open enrollment period 31

L

LAN

IEEE 802.1d Spanning Tree support 11 LED indicators 198

description 198 flashing all LEDs 160 special cases 199, 200 WLAP mode LED display 199

M

MAC Layer Bridging 13 address database 13 MAC address 13

management options 34 SNMP 34

Telnet 34

WLAN 34

manually updating configuration kerberos 94

using TFTP 129

Media Access Control 8 miscellaneous statistics 182 Mobile IP 21

configuration 156 foreign agent 22, 170 mapping 170

roaming across routers 22 using MD5 authentication 155

mobile unit (MU) ESS 8

Model Number 162 monitoring statistics 159

ethernet statistics 174 interface statistics 163 miscellaneous statistics 182 radio statistics 176

MU 8

access control 14 ACL 14 association process 23 authentication 26 CAM 24

cellular coverage 8

clearing MUs from the AP 121 current transmit rate 168

Index-6

AP-4131 Access Point Product Reference Guide

Image 246

Symbol Technologies AP-4131 manual Lan

Contents

Spectrum24 AP-4131 Access Point 72E-56316-01 Revision a FebruaryCopyright About This Document ItalicsAP-4131 Access Point Product Reference Guide Contents Manual Kerberos Authentication Configuration 157 182 Appendix E Installing and Configuring Kerberos Setup Service AP-4131 Access Point Product Reference Guide Access Point AP IntroductionBootp Radio Basics 1 S24 Network TopologyIntroduction Introduction Introduction Introduction Cellular Coverage Introduction Root AP and Association Process Ieee 802.1d Spanning Tree Support Site TopographySite Surveys Access Point Functional Theory MAC Layer Bridging Filtering and Access Control Auto Fallback to Wireless ModeDhcp Support Media Types EssidIntroduction Direct-Sequence Spread Spectrum MU Association Process Introduction Mobile IP Introduction Introduction Supporting CAM and PSP Stations Data Encryption Kerberos Authentication Introduction Introduction Page Introduction KSS Open Enrollment Roaming and Authentication KSS DatabasesMixed Mode Security Web Management SupportManagement Options Programmable Snmp Trap SupportUsing Snmp Increased MIB SupportSee .1.2 Using a Direct Serial Connection on Using the UISee .1.1 Using Telnet on See .1.3 Using a Dial-Up Connection onGaining Access to the UI Using TelnetAt the prompt type the password Using a Direct Serial Connection EmulationUsing a Dial-Up Connection Refer to .12.2 Updating Using Xmodem on page 132 toUsing a Web Browser Setup Network Web Server Help File Access From this menu select Microsoft Internet ServercommonAccessing Web Browser UI WWW Service Properties window opens Select DirectoriesSelect Reset AP Http//xxx.xxx.xxx.xxx Configuring the AP Type the password AP displays a Main Menu when gaining access to the UI Navigating the UIConfiguring the AP Entering Admin Mode Changing the Access to the UI Change System Passwords screen displays As asterisks. The default password is SymbolConfiguring for Dial-Up to the UI EmulationAccess Point Installation Navigating the UI Using a Web BrowserSelect AP Installation from the Main Menu DHCP/BOOTPIP Address Country ConfigUnit Name Gateway IP AddressSecondary antenna which ever has Best signal strength and transmits onRadio receives on the primary or Last antenna it received onBy the AP. If both Dhcp and Bootp Dhcp and Bootp interoperateOnly Bootp responses will be accepted Services are required, do not selectedConfiguring System Parameters On the next power up, the AP scans all To enable or disable. To saveConfiguration, select F1 Channel in Flash the power LEDConfiguring the AP Serial allows users with admin privileges to Encryption maintenance page to changeAny allows users with admin privileges to change See .4.1 Encryption Administration onIf enabled, mobile units associated with the same Specifies if the AP can perform Wnmp functionsSystem Allows the user to change the passwords for Password Default interface is Ethernet. The AP defaults to Encryption Administration Encryption Parameter Access to Telnet and Serial Interfaces Encryption Parameter Access to Web InterfaceParameter Access Method Interface Serial Encryption Parameter Access for Snmp Interface System Password Administration Any alphanumeric, case-sensitive entry up to User PasswordAsterisks. The default password is Symbol Characters, the characters selected are displayed asConfiguring Radio Parameters Select Set RF Configuration from the Main Menu to displayConfiguring the AP Configuring the AP Configuring the AP Wlap Mode Wlap Priority Wlap Manual Wlap Hello Time Wlap Max AgeWlap Forward Delay To the packet prior to transmissionPreamble length is transmission data rate Eiap F4 Configuring the AP Wireless AP Operation Parameters Configuring the AP AP sets up automatically for wireless Select Set RF Configuration from the Main MenuWlap Mode No wireless operation possible. DefaultMinimizes confusion when more than two If setting the Wlap Manual Bssid toThis feature speeds up the association process Wlap Manual Specifies the Bssid of a particular WlapConfiguring the AP Enhanced Packet Prioritization EPP Enhanced Interference Avoidance Properties Eiap Configuring the AP Encryption Configuration and Key Maintenance Configuring the AP 1 40-Bit WEP Encryption Configuring the AP 2 128-Bit WEP Encryption Configuring the AP Manual Kerberos Authentication Configuration User ID Ap3 Password OK-CR Save-F1Cancel-ESC Enable Kerberos KSS Secret Address Backup KDCKSS Port KSS NameConfiguring EAP-TLS Support Configure Authenticator screen displays Re-authentication For an MU’s response once the access pointRequests an MUs identity. Default is 30 seconds Re-authenticate after the re-authentication periodConfiguring Mixed Mode Security Snmp and Mixed Mode Security Configuring the Snmp Agent AP-4131 Access Point Product Reference Guide 103 Configuration could adversely effect SNMPv1/2c For SNMPv3 operations. Changing the factoryOperation AP-4131 Access Point Product Reference Guide 105 If the current Wlap fails to receive a Config Bpdu Root AP lost. The Wlap eventually resets itself toSetup and ready to forward data Connection Generated Change Root Wlap UpAP-4131 Access Point Product Reference Guide 107 Configuring SNMPv3 Security AP-4131 Access Point Product Reference Guide 109 Authentication ACL and Address Filtering Access Address Filtering Access Control List Results ListConfiguring the ACL Range of MUs114 Adding Allowed MUs Removing Allowed MUsRemoving All Allowed MUs Use ACL options from the Set System Configuration menuACL Options Load ACL from MU ListLoad ACL from File ACLIndividual FlushConfiguring Address Filtering Adding Disallowed MUs Removing Disallowed MUsRemoving Filter Types Configuring Type FilteringAdding Filter Types Controlling Type FiltersManually Updating the AP Configuration Clearing MUs from the AP122 AP-4131 Access Point Product Reference Guide 123 124 AP-4131 Access Point Product Reference Guide 125 126 AP-4131 Access Point Product Reference Guide 127 128 Updating Using Tftp AP displays the Main Menu Firmware Update Menu displays Are You Sure? yes no Type Y Firmware Update Menu displays Are You Sure? yes no Type YUpdating Using Xmodem Select Enter Admin Mode and enter the password From the Main Menu select Special Functions Press F3 to view the Firmware Update Menu Special Functions Menu displays Are You Sure? yes no Type YDownload is complete when the UI displays Setting Logging Options 138 Update Using Tftp Updating AP Firmware140 AP-4131 Access Point Product Reference Guide 141 142 AP-4131 Access Point Product Reference Guide 143 144 Select Enter Admin Mode and type the password From the Main Menu select Special Functions and press Enter Select Send File Auto Upgrade all APs Through Messaging AP-4131 Access Point Product Reference Guide 149 Type the firmware filename in the Download Filename field Press Enter Select Save-F1to save settings Performing Pings Select Regular to display Select Echo-F1to display the Packet Ping Setup screen Mobile IP Using MD5 Authentication Saving the Configuration Select Special Functions from the Main Menu to displayResetting the AP Restoring the Factory ConfigurationSelect Special Functions from the Main Menu Configuring Network Time System Summary Select Show System Summary from the Main Menu to displayAuthentication using 40 or 128-bit WEP Access pointEnables Windows XP MUs to use EAP/TLS for Range required for the operating countryAP Configuration ACL & Filters When Disallowed is selected, only MAC Are allowed to associate with the APInterface Statistics Interface Statistics screen providesSelect Interface Statistics from the Main Menu to display Forwarding Counts Select Forwarding Counts from the Main Menu to displayMobile Units Select Show Mobile Units from the Main Menu to displayShared Key is enabled for this device AP-4131 Access Point Product Reference Guide 167 High priority MU power mode PSP or CAMVoice indicates packet delivery is time critical and a Normal indicates packet delivery is not time criticalBytes Sent Packets SentPackets Rcvd Bytes RcvdMobile IP Known APs HSQ MUSSelect Switch to view the Unit Name for each known AP Per second MUs associated with the APData traffic handled by the AP in kilobytes in and out FWVer Firmware version used by the specified AP AwayEthernet Statistics Select Ethernet Statistics from the Main Menu to displayEthernet because of a busy medium Radio Statistics Select Show RF Statistics from the Main Menu to displayIf the device fails to receive an acknowledgment ACK from a destinationCalculated ICV value does not match with the ICV Value errors. An MU transmitted a corrupt dataPacket and failed to pass the ICV verification. Value in the received packetTo display the Wlap RF Statistics screen select WLAP-F3 Current # Wlap Itf Send Cfg Bpdu configuration BridgeUnder .5 Configuring Radio Parameters Current StateBecomes the Root AP. The Root ID and the Wlap ID Negotiate the position of Root AP at power up.AP with the lowest Root ID, path and Wlap ID Are 16-digit numbers. The first 4 digits representMiscellaneous Statistics Select Show Misc Statistics from the Main Menu to displayReceived Analyzing Channel Use Analyzing Retries Select Show Misc Statistics from the Main MenuEvent History Clearing Statistics Select Special Functions from the Main MenuMonitoring Statistics 188 Precautions Package ContentsRequirements Network Connection2 10/100Base-T UTP Placing the AP Single CellPower Options Resting flat Rests on the four rubber pads on the underside Connecting the Power AdapterMounting the AP From trafficBIAS-T Low Power Distribution System Bias -T 196 AP-4131 Access Point Product Reference Guide 197 LED Indicators PowerSteady Green during operation Wlap mode LED display Power Wired LAN ActivityWireless LAN Activity Special cases Troubleshooting Ensure wired network is operatingElectrical Management System EMS operating outlet Setting Up MUs Physical Characteristics Meets CE-MarkRadio Characteristics Network Characteristics S24dsap.mib, MIB-II and 802.1x.mibSpecifications Appendix B Supported Modems Supported Modems Appendix C Customer Support North American ContactsInternational Contacts Appendix D Country Identification Codes Country Identification Codes UAE Country Identification Codes Creating a Windows 2000 Environment for the KSS Installing the KSS in a Windows 2000 Environment Creating a User Account and Password in Active Directory Click OK Preparing the KSS for Access Point Validation Installing and Configuring Kerberos Setup Service Kerberos Account Entry dialog box displays Installing and Configuring Kerberos Setup Service Enable Open Enrollment info box appears Listen For Connection Box displays Installing and Configuring Kerberos Setup Service Manually Creating an Access Point Setup Account Installing and Configuring Kerberos Setup Service Implementing Kerberos without the KSS Installing and Configuring Kerberos Setup Service Installing and Configuring Kerberos Setup Service Index Dtim Index-3 Index-4 Index-5 LAN Index-7 Index-8 TIM Wlap