Installation Guide C-65 Access Point/Sensor 339 N. Bernardo Avenue, # 200, Mountain View, CA 94043 www.airtightnetworks.com ©2014-2015 AirTight Networks, Inc. All rights reserved.
This page is intentionally left blank.
END USER LICENSE AGREEMENT Please read the End User License Agreement before installing the C-65 Access Point/Sensor. The End User License Agreement is available at the following location http://www.airtightnetworks.com/fileadmin/pdf/AirTightEULA.pdf. Installing the C-65 Access Point/Sensor constitutes your acceptance of the terms and conditions of the End User License Agreement. DISCLAIMER THE INFORMATION IN THIS GUIDE IS SUBJECT TO CHANGE WITHOUT ANY PRIOR NOTICE. ® AIRTIGHT NETWORKS, INC.
Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.
Industry Canada Statement This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Ce dispositif est conforme a la norme CNR-210 d’Industrie Canada applicable aux appareils radio exempts de licence.
About this Guide This installation guide explains how to mount the C-65 access point (AP)/sensor and the various configuration details. Important! Please read the EULA before installing the C-65 device. Installation constitutes your acceptance of the terms and conditions of the EULA mentioned above in this document. Intended Audience This guide can be referred to by anyone who wants to install and configure the C-65 AP/Sensor. Document Overview This guide contains the following chapters: 1.
1. Package Contents Please ensure that the items shown in Figure 1-1 are included in the C-65 device package: Figure 1-1 C-65 Package Contents Note: The MAC address of the device is printed on a label at the bottom of the product and the packaging box. Note down the MAC address, before mounting the device on the ceiling or at a location that is difficult to access. ® If the package is not complete, please contact AirTight Networks, Inc. technical support at support@airtightnetworks.
2. C-65 Overview C-65 is a 2x2:2 802.11 a/b/g/n/ac access point/sensor. This chapter provides an overview of the C-65 and describes front and the rear panels. The front panel of the C-65 has 4 LEDs that indicate the working of the device. Figure 2-1 Front Panel of C-65 The following table indicates the device states based on the LEDs. Table 2-1 LED Details for C-65 in AP mode 2.
Table 2-2. LED Details for C-65 in WIPS Mode Power LAN1 2.4 GHz 5 GHz Off Solid Green Solid Green Solid Green Slow Blink Green Slow Blink Green Any Off Solid Orange Off Any Any Solid Orange Fast Blink Green Any Any Solid Orange Slow Blink Green Any Any Off Off Off Off Not powered on or it is in the process of starting up. Off Solid Green Slow Blink Green Solid Green Prevention is in progress on 2.
Figure 2-2 Rear Panel of C-65 Table 2-3 Rear Panel Port Settings for C-65 Port Description Connector Type Speed/Protocol 12V DC Enables you to connect to and power on device using 12 V DC power with 2.5 ampere. -- -- RJ45 10/100/1000 Mbps Ethernet Ethernet (LAN/PoE) Enables you to connect the device to a wired LAN through a switch or a hub. The device can then communicate with the server. This port also provides the power for the device using the 802.
3. Installing the C-65 When the C-65 functions as a WIPS sensor, it monitors your network and communicates with the server to guard your corporate network against over-the-air attacks Clients can connect to your corporate network in wireless mode through the C-65 AP(s). The C-65 must be plugged into your corporate network to perform the above-mentioned operation. As a WIPS sensor, C-65 can be configured in one of the following two modes: • Sensor Mode: This is the default mode.
Ceiling Mounting Use the mounting bracket to install the C-65 on the ceiling. To mount the device: 1. Attach the mounting bracket to the device. 2. Slide the device on to the T-rail affixed to the ceiling. Given below is the diagrammatic representation of ceiling mounting of the C-65 device. Figure 3-1 Ceiling Mounting Wall Mounting To mount the device on the wall, follow the steps given below. 1. Affix the screws on to the wall. 2. Mount the device on the screws.
Given below is the diagrammatic representation of wall mounting of the C-65 device. Figure 3-2 Wall Mounting Power On C-65 A C-65 device can be powered on by 802.3af Class 0 Power Over Ethernet (PoE) of Nominal input voltage 48V DC. You can connect the device to the network using PoE or a power adapter. Connect C-65 to the Network To connect C-65 to the network, perform the following steps. 1. Ensure that a DHCP server is already available on the network to enable network configuration of the C65. 2.
Figure 3-3. Power Up and Connect C-65 using PoE Using C-65 with power adapter To power up the device, perform the following steps: 1. Plug the power cable into the DC power receptacle at the rear of the device. 2. Plug the other end of the power cable into an 110V~240V 50/60 Hz AC power source. Wait until the device is ready. Refer to the respective LED details table based on the configured device mode. Figure 3-4. Power Up C-65 To connect C-65 to the network, perform the following steps: 1.
2. Connect one end of the network interface cable to the Ethernet port at the rear of the C-65. 3. Connect the other end of the network interface cable to an Ethernet jack on the desired subnet. Wait until the device is ready (approx. 10 mins). Figure 3-5. Connect C-65 to network 4. Check the status LEDs on the device. If all LEDs glow green, then the device is operational and connected to the server. 5. Log on to the server through SSH and run the get sensor list command.
4. Manually Configuring C-65 Important: If the installation in the previous chapter was successful, stop! You do not need to configure the device manually. Introduction Manual configuration of C-65 is typically required in the following cases: • Devices cannot connect to the server through zero-configuration. • Device needs to be configured in the ND mode. • Sensor Only (SO) devices cannot connect to the server through zero-configuration.
Figure 4-1 The set server discovery Command Note: If IP address/ host name based discovery is being used and more than one server is present on the network, then you must enter the IP address of the appropriate server. Configure Network Settings Configure a static IP address in absence of a DHCP server 1. Connect a crossover cable from the computer to the Ethernet port of C-65. 2. Configure the LAN IP address on the computer in the subnet 192.168.1.0/24. 3. SSH to IP address: 192.168.1.
To configure the communication key or passphrase kindly refer to Appendix A: AP-Server Mutual Authentication for further details.
5. C-65 Config Shell Commands The following tables detail the C-65 config shell commands.
Table 5-1 get Commands get Commands Command Description get ap Displays all the currently visible APs NEW get channel util Displays the current channel utilization in %, non-Wi-Fi interference in %, and noise floor values in dBm when device is in AP mode. The radio must have at least one active virtual AP to get the channel utilization statistics. You can choose to fetch the current utilization or to auto-read the channel utilization statistics every 5 seconds. Press Ctrl+C to stop auto-read.
Table 5-2. set Commands set Commands Command Description set erase Sets the erase character to ^H. set interface Sets network interface properties such as auto negotiation, speed, and duplex settings. set ip config Runs through the current VLAN and IP config wizard. set server discovery Sets the server discovery information. set vlan config Configures list of VLANs and their network settings, to be monitored by ND. set ipv6 config Sets IPv6 network settings.
Table 5-3. Miscellaneous commands Other Commands Command Description exit Exits the config shell session help Displays help for all commands help set Displays help for ‘set’ commands help get Displays help for ‘get’ commands help other Displays help for ‘other’ commands passwd Changes the config shell password ping Pings a host. Usage: ping For example, ping 192.168.1.
6. C-65 Troubleshooting Following are the troubleshooting guidelines for C-65. Symptoms Wi-Fi: any Ethernet: fast blink Power: solid orange Diagnosis Solution The device did not receive a valid IP address via the DHCP. Ensure that the DHCP server is on and available on the VLAN/subnet to which the device is connected. If the device still fails to get a valid IP address, you can reboot it to see if the problem is resolved. The Ethernet cable is loose.
Appendix A: Access Point (AP)-Server Mutual Authentication The AP-server communication begins with a mutual authentication step in which the AP and server authenticate each other using a shared secret. The AP-server communication takes place only if this authentication succeeds. After the authentication succeeds, a session key is generated. All communication between the AP and server from this point on is encrypted using the session key.
