Manuals / Brands / Computer Equipment / Network Router / Symbol Technologies / Computer Equipment / Network Router

Symbol Technologies AP-5131 - page 367

1 578

Download 578 pages, 5.94 Mb

Command Line Interface Reference 8-73

AP5131>admin(network.wireless.security)> create

Description:

Defines the parameter of AP-5131 security policies.

Contents

Main Page Page Page Page Page Contents About This Guide Chapter 1. AP-5131 Introduction Page Chapter 2. Hardware Installation Chapter 3. Getting Started Chapter 4. System Configuration Chapter 5. Network Management Chapter 6. Configuring Access Point Security Chapter 7. Monitoring Statistics Chapter 8. Command Line Interface Reference Chapter 9. Configuring Mesh Networking Appendix A. Technical Specifications Appendix B. AP-5131 Usage Scenarios Appendix C. Customer Support Page Notational Conventions Service Information AP-5131 Introduction 1.1 New AP-5131 Features 1.1.1 Mesh Networking 1.1.2 Additional LAN Subnet 1.1.3 On-board Radius Server Authentication 1.1.4 Hotspot Support 1.1.5 Routing Information Protocol (RIP) 1.1.6 Manual Date and Time Settings 1.2 Feature Overview 1.2.1 Single or Dual Mode Radio Options 1.2.2 Separate LAN and WAN Ports 1.2.3 Multiple Mounting Options 1.2.4 Antenna Support for 2.4 GHz and 5.2 GHz Radios 1.2.5 Sixteen Configurable WLANs 1.2.6 Support for 4 BSSIDs per Radio 1.2.7 Quality of Service (QoS) Support 1.2.8 Industry Leading Data Security 1.2.8.1 Kerberos Authentication 1.2.8.2 EAP Authentication 1.2.8.3 WEP Encryption 1.2.8.4 KeyGuard Encryption 1.2.8.5 Wi-Fi Protected Access (WPA) Using TKIP Encryption 1.2.8.6 WPA2-CCMP (802.11i) Encryption 1.2.8.7 Firewall Security 1.2.8.8 VPN Tunnels 1.2.9 VLAN Support 1.2.10 Multiple Management Accessibility Options 1.2.11 Updatable Firmware 1.2.12 Programmable SNMP v1/v2/v3 Trap Support 1.2.13 Power-over-Ethernet Support 1.2.14 MU-MU Transmission Disallow 1.2.15 Voice Prioritization 1.2.16 Support for CAM and PSP MUs 1.2.17 Statistical Displays 1.2.18 Transmit Power Control 1.2.19 Advanced Event Logging Capability 1.2.20 Configuration File Import/Export Functionality 1.2.21 Default Configuration Restoration 1.2.22 DHCP Support 1.3 Theory of Operations 1.3.1 Cellular Coverage 1.3.2 MAC Layer Bridging 1.3.3 Media Types 1.3.4 Direct-Sequence Spread Spectrum 1.3.5 MU Association Process 1.3.6 Operating Modes 1.3.7 Management Access Options Page Hardware Installation 2.1 Precautions 2.2 Package Contents 2.2.1 Available Product Configurations Page 2.3 Requirements 2.4 Placement of the AP-5131 2.4.1 Site Surveys 2.4.2 Antenna Options Page Page 2.5 Power Options 2.6 Symbol Power Injector System 2.6.1 Installing the Power Injector 2.6.1.1 Preparing for Site Installation 2.6.1.2 Cabling the Power Injector 2.6.1.3 Power Injector LED Indicators 2.7 Mounting the AP-5131 2.7.1 Desk Mounted Installations Page 2.7.2 Wall Mounted Installations Page 2.7.3 Suspended Ceiling T-Bar Installations Page 2.7.4 Above the Ceiling (Plenum) Installations Page Page 2.8 LED Indicators Page 2.9 Setting Up MUs Getting Started 3.1 Installing the AP-5131 3.2 Configuration Options 3.3 Default Configuration Changes 3.4 Initially Connecting to the Access Point 3.4.1 Connecting to the Access Point using the WAN Port 3.4.2 Connecting to the Access Point using the LAN Port 3.5 Basic Device Configuration 3.5.1 Configuring Device Settings Page Page Page Page 3.5.1.1 Configuring WLAN Security Settings Page 3.5.2 Testing Connectivity 3.5.3 Where to Go from Here? System Configuration 4.1 Configuring System Settings Page Page Page 4.2 Configuring Data Access Page Page 4.3 Managing Certificate Authority (CA) Certificates 4.3.1 Importing a CA Certificate 4.3.2 Creating Self Certificates for Accessing the VPN Page Page 4.3.3 Creating a Certificate for Onboard Radius Authentication Page Page Page 4.4 Configuring SNMP Settings Page Page Page Page Page 4.4.1 Configuring SNMP Access Control Page 4.4.2 Enabling SNMP Traps Page Page 4.4.3 Configuring Specific SNMP Traps Page 4.4.4 Configuring SNMP RF Trap Thresholds Page 4.5 Configuring Network Time Protocol (NTP) Page Page 4.6 Logging Configuration AP-5131 4.7 Importing/Exporting Configurations Page This interface is a DHCP Client CAUTION For HTTP downloads (exports) to be successful, pop-up messages must be disabled. Page 4.8 Updating Device Firmware Page Page Page Page 4.8.1 Upgrade/Downgrade Considerations Page Page Network Management 5.1 Configuring the LAN Interface Page Page 5.1.1 Configuring VLAN Support Page Page Page 5.1.2 Configuring LAN1 and LAN2 Settings Page AP-5131 numerical (non DNS name) DNS name) 5.1.2.1 Configuring Advanced DHCP Server Settings Page 5.1.2.2 Setting the Type Filter Configuration 5.2 Configuring WAN Settings Page AP-5131 VPN WAN IP Configuration Page 5.2.1 Configuring Network Address Translation (NAT) Settings Page 5.2.1.1 Configuring Port Forwarding 5.3 Enabling Wireless LANs (WLANs) Page 5.3.1 Creating/Editing Individual WLANs Page Page Page Page 5.3.1.1 Configuring WLAN Security Policies Page 5.3.1.2 Configuring a WLAN Access Control List (ACL) Page Page 5.3.1.3 Setting the WLAN Quality of Service (QoS) Policy Page Page Page Page U-APSD (WMM Power Save) Support 5.3.1.4 Configuring WLAN Hotspot Support Page Page Defining the Hotspot White List Page 5.3.2 Setting the WLANs Radio Configuration Page Page 5.3.2.1 Configuring the 802.11a or 802.11b/g Radio Page Page 4. Refer to the Beacon Settings field to set the radio beacon and DTIM intervals. Page Page Page 5.3.3 Configuring Bandwidth Management Settings Page 5.4 Configuring Router Settings Page 5.4.1 Setting the RIP Configuration Page Page Page Configuring Access Point Security 6.1 Configuring Security Options 6.2 Setting Passwords 6.2.1 Resetting the AP-5131 Password 6.3 Enabling Authentication and Encryption Schemes Page Page Page 6.4 Configuring Kerberos Authentication Page 6.5 Configuring 802.1x EAP Authentication Page Page Page Page 6.6 Configuring WEP Encryption Page 6.7 Configuring KeyGuard Encryption Page 6.8 Configuring WPA Using TKIP Page 6.9 Configuring WPA2-CCMP (802.11i) Page Page 6.10 Configuring Firewall Settings Page Page 6.10.1 Configuring LAN to WAN Access Page Page 6.10.1.1 Available Protocols 6.10.2 Configuring Advanced Subnet Access Page 6.11 Configuring VPN Tunnels Page Page Page 6.11.1 Configuring Manual Key Settings Page Page Page 6.11.2 Configuring Auto Key Settings 3. Configure the Auto Key Settings screen to modify the following: 6.11.3 Configuring IKE Key Settings 3. Configure the IKE Key Settings screen to modify the following: Page Page 6.11.4 Viewing VPN Status Page 6.12 Configuring Content Filtering Settings Page 3. Configure the SMTP field to disable or restrict specific kinds of network mail traffic. 4. Configure the FTP field to block or restrict various FTP traffic on the network. 6.13 Configuring Rogue AP Detection Page Page 6.13.1 Moving Rogue APs to the Allowed AP List Page 6.13.1.1 Displaying Rogue AP Details 3. Refer to the Rogue AP Detail field for the following information: 4. Refer to the Rogue Detector Detail field for the following inform ation: 6.13.2 Using MUs to Detect Rogue Devices Page 6.14 Configuring User Authentication 6.14.1 Configuring the Radius Server Page Page 6.14.2 Configuring LDAP Authentication Page 6.14.3 Configuring a Proxy Radius Server Page 6.14.4 Managing the Local User Database Page 6.14.4.1 Mapping Users to Groups 6.14.5 Defining the User Access Policy Page Page Monitoring Statistics 7.1 Viewing WAN Statistics Page 3. Refer to the Received field to reference data received over the AP-5131 WAN port. 4. Refer to the Transmitted field to reference data received over the AP-5131 WAN port. AP-5131 Page 7.2 Viewing LAN Statistics Page Page 7.2.1 Viewing a LANs STP Statistics Page 7.3 Viewing Wireless Statistics 2. Refer to the WLAN Summary field to reference high-level data for each enabled WLAN. 7.3.1 Viewing WLAN Statistics Page Page Page 7.4 Viewing Radio Statistics Summary 7.4.1 Viewing Radio Statistics Page Page Page 7.4.1.1 Retry Histogram 7.5 Viewing MU Statistics Summary Page 7.5.1 Viewing MU Details 5. Refer to the Traffic field to view individual MU RF throughput information. 7.5.2 Pinging Individual MUs 7.5.3 MU Authentication Statistics 7.6 Viewing the Mesh Statistics Summary 7.7 Viewing Known Access Point Statistics Page Page Page Page Command Line Interface Reference 8.1 Connecting to the CLI 8.1.1 Accessing the CLI through the Serial Port Page 8.2 Admin and Common Commands AP5131>admin> AP5131>admin>help Displays general CLI user interface help. help Displays command line help using combinations of function keys for navigation. AP5131>admin>passwd AP5131>admin>summary Displays the AP-5131s system summary. summary Displays a summary of high-level characteristics and settings for the WAN, LAN and WLAN. Page Page AP5131>admin>save Page 8.3 Network Commands AP5131>admin(network)> 8.3.1 Network LAN Commands AP5131>admin(network.lan)> AP5131>admin(network.lan)> show Displays the AP-5131 LAN settings. show Shows the settings for the AP-5131 LAN1 and LAN2 interfaces. Page AP5131>admin(network.lan)> set Description: Syntax: Example: Related Commands: Page AP5131>admin(network.lan.bridge)> show AP5131>admin(network.lan.bridge)> set 8.3.1.2 Network LAN, WLAN-Mapping Commands AP5131>admin(network.lan.wlan-mapping)> AP5131>admin(network.lan.wlan-mapping)> show Page AP5131>admin(network.lan.wlan-mapping)> set AP5131>admin(network.lan.wlan-mapping)> create Page Page Page Page Page AP5131>admin(network.lan.dhcp)> show AP5131>admin(network.lan.dhcp)> set AP5131>admin(network.lan.dhcp)> add AP5131>admin(network.lan.dhcp)> delete Deletes static DHCP address assignments. AP5131>admin(network.lan.dhcp)> list Page AP5131>admin(network.lan.type-filter)> show AP5131>admin(network.lan.type-filter)> set AP5131>admin(network.lan.type-filter)> add AP5131>admin(network.lan.type-filter)> delete 8.3.2 Network WAN Commands AP5131>admin(network.wan)> AP5131>admin(network.wan)> show Displays the AP-5131 WAN port parameters. show Shows the general IP parameters for the WAN port along with settings for the WAN interface.. AP5131>admin(network.wan)> set 8.3.2.1 Network WAN NAT Commands AP5131>admin(network.wan.nat)> AP5131>admin(network.wan.nat)> show AP5131>admin(network.wan.nat)> set AP5131>admin(network.wan.nat)> add AP5131>admin(network.wan.nat)> delete AP5131>admin(network.wan.nat)> list 8.3.2.2 Network WAN, VPN Commands AP5131>admin(network.wan.vpn)> AP5131>admin(network.wan.vpn)> add AP5131>admin(network.wan.vpn)> set Page AP5131>admin(network.wan.vpn)> delete AP5131>admin(network.wan.vpn)> list Lists VPN tunnel entries. AP5131>admin(network.wan.vpn)> reset AP5131>admin(network.wan.vpn)> stats AP5131>admin(network.wan.vpn)> ikestate 8.3.3 Network Wireless Commands AP5131>admin(network.wireless) 8.3.3.1 Network WLAN Commands AP5131>admin(network.wireless.wlan)> AP5131>admin(network.wireless.wlan)> show Displays the AP-5131s current WLAN configuration. AP5131>admin(network.wireless.wlan)> create Page AP5131>admin(network.wireless.wlan)> edit Page AP5131>admin(network.wireless.wlan.hotspot)> AP5131>admin(network.wireless.wlan.hotspot)> show Displays the current AP-5131 Rogue AP detection configuration. show hotspot <idx> Shows hotspot parameters per wlan index (1-16). AP5131>admin(network.wireless.wlan.hotspot)> redirection AP5131>admin(network.wireless.wlan.hotspot)> radius AP5131>admin(network.wireless.wlan.hotspot.radius)> set AP5131>admin(network.wireless.wlan.hotspot.radius)> show AP5131>admin(network.wireless.wlan.hotspot)> white-list 8.3.3.2 Network Security Commands AP5131>admin(network.wireless.security)> AP5131>admin(network.wireless.security)> show Page Page Page Page Page AP5131>admin(network.wireless.security.edit)> Page Page AP5131>admin(network.wireless.acl)> show AP5131>admin(network.wireless.acl)> create AP5131>admin(network.wireless.acl.edit)> Page Page AP5131>admin(network.wireless.radio)> show Displays the AP-5131s current radio configuration. show Displays the AP-5131s current radio configuration. AP5131>admin(network.wireless.radio)> set AP5131>admin(network.wireless.radio.radio1)> AP5131>admin(network.wireless.radio.radio1)> show Displays specific 802.11b/g radio settings. Page AP5131>admin(network.wireless.radio.802-11bg)> set AP5131>admin(network.wireless.radio.802-11bg.advanced)> AP5131>admin(network.wireless.radio.802-11bg.advanced)> show Displays the BSSID to WLAN mapping for the 802.11b/g radio. AP5131>admin(network.wireless.radio.802-11bg.advanced)> set AP5131>admin(network.wireless.radio.radio2)> AP5131>admin(network.wireless.radio.802-11a)> show Displays specific 802.11a radio settings. Page AP5131>admin(network.wireless.radio.802-11a)> set AP5131>admin(network.wireless.radio.802-11a.advanced)> AP5131>admin(network.wireless.radio.802-11a.advanced)> show Displays the BSSID to WLAN mapping for the 802.11a radio. AP5131>admin(network.wireless.radio.802-11a.advanced)> set Page AP5131>admin(network.wireless.qos)> show AP5131>admin(network.wireless.qos.create)> AP5131>admin(network.wireless.qos.edit)> Descripton: Syntax: AP5131>admin(network.wireless.qos)> delete Page AP5131>admin(network.wireless.bandwidth)> show AP5131>admin(network.wireless.bandwidth)> set 8.3.3.7 Network Rogue-AP Commands AP5131>admin(network.wireless.rogue-ap)> AP5131>admin(network.wireless.rogue-ap)> show AP5131>admin(network.wireless.rogue-ap)> set AP5131>admin(network.wireless.rogue-ap.mu-scan)> Page Page AP5131>admin(network.wireless.rogue-ap.allowed-list)> AP5131>admin(network.wireless.rogue-ap.allowed-list)> show AP5131>admin(network.wireless.rogue-ap.allowed-list)> add AP5131>admin(network.wireless.rogue-ap.allowed-list)> delete Page AP5131>admin(network.firewall)> show AP5131>admin(network.firewall)> set AP5131>admin(network.firewall)> access AP5131>admin(network.firewall)> advanced Page AP5131>admin(network.router)> show AP5131>admin(network.router)> set AP5131>admin(network.router)> add AP5131>admin(network.router)> delete AP5131>admin(network.router)> list 8.4 System Commands AP5131>admin(system)> AP5131>admin(system)>restart AP5131>admin(system)>show AP5131>admin(system)>set Page Page AP5131>admin(system.access)>set AP5131>admin(system.access)>show 8.4.3 System Certificate Management Commands AP5131>admin(system)>cmgr AP5131>admin(system.cmgr)> genreq AP5131>admin(system.cmgr)> delself Page Page Page Page Page Page Page Page Page Page Page Page AP5131>admin(system.snmp.access)> show AP5131>admin(system.snmp.access)> add AP5131>admin(system.snmp.access)> delete AP5131>admin(system.snmp.access)> list Page AP5131>admin(system.snmp.traps)> show Shows SNMP trap parameters. show trap Shows SNMP trap parameter settings. rate-trap Shows SNMP rate-trap parameter settings. AP5131>admin(system.snmp.traps)> set AP5131>admin(system.snmp.traps)> add AP5131>admin(system.snmp.traps)> delete AP5131>admin(system.snmp.traps)> list 8.4.5 System Network Time Protocol (NTP) Commands AP5131>admin(system)> ntp AP5131>admin(system.ntp)> show Page Page AP5131>admin(system.ntp)> set 8.4.6 System Log Commands AP5131>admin(system)> logs AP5131>admin(system.logs)> show AP5131>admin(system.logs)> set AP5131>admin(system.logs)> view Displays the AP-5131 system log file. view Displays the entire AP-5131 system log file. Page AP5131>admin(system.logs)> send 8.4.7 System Configuration-Update Commands AP5131>admin(system.config)> AP5131>admin(system.config)> default AP5131>admin(system.config)> partial AP5131>admin(system.config)> show AP5131>admin(system.config)> set AP5131>admin(system.config)> export AP5131>admin(system.config)> import Page AP5131>admin(system.fw-update)>show AP5131>admin(system.fw-update)>set AP5131>admin(system.fw-update)>update 8.5 Statistics Commands AP5131>admin(stats) AP5131>admin(stats)> show AP5131>admin(stats)> send-cfg-ap AP5131>admin(stats)> send-cfg-all AP5131>admin(stats)> clear AP5131>admin(stats)> flash-all-leds AP5131>admin(stats)> echo AP5131>admin.stats.echo)> show AP5131>admin.stats.echo)> list AP5131>admin.stats.echo)>set AP5131>admin.stats.echo)> start AP5131>admin(stats)> ping AP5131>admin.stats.ping)> show AP5131>admin.stats.ping)> list AP5131>admin.stats.ping)> set AP5131>admin.stats.echo)> start Page Configuring Mesh Networking 9.1 Mesh Networking Overview Page 9.1.1 The AP-5131 Client Bridge Association Process 9.1.2 Spanning Tree Protocol (STP) 9.1.3 Defining the Mesh Topology 9.1.4 Mesh Networking and the AP-5131s Two Subnets 9.1.5 Normal Operation 9.1.6 Impact of Importing/Exporting Configurations to a Mesh Network 9.2 Configuring Mesh Networking Support 9.2.1 Setting the LAN Configuration for Mesh Networking Support Page 9.2.2 Configuring a WLAN for Mesh Networking Support Page Page Page 9.2.3 Configuring the AP-5131 Radio for Mesh Networking Support Page Page Page Page Page 9.3 Usage Scenario - Trion Enterprises 9.3.1 Trions Initial Deployment Page Page Page Page Page Page Page Page Page Page 9.3.2 Adding 2 Client Bridges to Expand the Coverage Area Page Page Page Page Page Page 9.3.3 Adding 2 More Client Bridges to the Trion Network Page Page Page Page Page Page Page A.1 Physical Characteristics The AP-5131 has the following physical characteristics: The AP-5131 has the following electrical characteristics: A.2 Electrical Characteristics A.3 Radio Characteristics The AP-5131 has the following radio characteristics: A.4 Antenna Specifications A.4.1 2.4 GHz Antenna Matrix A.4.2 5.2 GHz Antenna Matrix A.4.3 Additional Antenna Components The following table describes each antenna accessorys connector and cable type, plus the length. A.4.4 Antenna Accessory Connectors, Cable Type and Length A.5 Country Codes Page Page AP-5131 Usage Scenarios B.1.1 Windows - DHCP Server Configuration B.1.1.1 Embedded Options - Using Option 43 Page B.1.1.2 Global Options - Using Extended/Standard Options B.1.1.3 DHCP Priorities B.1.2 Linux - BootP Server Configuration B.1.2.1 BootP Options Page B.1.2.2 BootP Priorities B.2 Configuring an IPSEC Tunnel and VPN FAQs B.2.1 Configuring a VPN Tunnel Between Two AP-5131s Page Page B.2.2 Configuring a Cisco VPN Device B.2.3 Frequently Asked VPN Questions Page Page Page Page B.3 Replacing an AP-4131 with an AP-5131 Page Customer Support North American Contacts International Contacts Web Support Sites Additional Information Page Index A B C D E F H I J K L M R S T V W IN-9