Advanced Configuration SSID/VLAN/Security AP-700 User Guide — For 64-bit encryption, an encryption key is 10 hexadecimal characters (0-9 and A-F) or 5 ASCII characters (see ASCII Character Chart). — For 128-bit encryption, an encryption key is 26 hexadecimal characters or 13 ASCII characters. — For 152-bit encryption, an encryption key is 32 hexadecimal characters or 16 ASCII characters.
Advanced Configuration SSID/VLAN/Security AP-700 User Guide Figure 4-49 Security Profile Table - Add Entries 117
Advanced Configuration SSID/VLAN/Security AP-700 User Guide MAC Access The MAC Access sub-tab allows you to build a list of stations, identified by their MAC addresses, authorized to access the network through the AP. The list is stored inside each AP within your network. Note that you must reboot the AP for any changes to the MAC Access Control Table to take effect. Up to 1000 entries can be made in the table.
Advanced Configuration SSID/VLAN/Security AP-700 User Guide Wireless Each SSID can have its own Security Profile that defines its security mode, authentication mechanism, and encryption, so that customers can have multiple types of clients (non-WEP, WEP, 802.1x, WPA, WPA-PSK, 802.11i, 802.11i-PSK) on the same system separated per VLAN. See the Security Profile section for more information. Each SSID can support a unique VLAN.
Advanced Configuration SSID/VLAN/Security AP-700 User Guide • Enable: MAC addresses in the MAC Access Control List stored on the RADIUS server are blocked or allowed, based on the MAC ACL settings. If a higher priority authentication protocol is also enabled, the higher-priority settings will override the MAC ACL settings. See Authentication Protocol Hierarchy. • Disable: RADIUS MAC ACL settings are disabled. • Strict: RADIUS MAC ACL settings are enabled.
Advanced Configuration SSID/VLAN/Security AP-700 User Guide Figure 4-52 SSID/VLAN Edit Entries Screen (VLAN Tagging Disabled) 9. Enter a unique Network Name (SSID) between 1 and 32 characters. This parameter is mandatory. NOTE: Do not use quotation marks (single or double) in the Network Name; this will cause the AP to misinterpret the name. 10.Enter a unique VLAN ID. This parameter is mandatory. • A VLAN ID is a number from -1 to 4094. A value of -1 means that an entry is “untagged.
Advanced Configuration SSID/VLAN/Security AP-700 User Guide configured, then three SSIDs will be broadcast in individual beacons; the fourth and subsequent SSIDs will be combined in one beacon and will not be broadcast. If Closed System is set to Enable, the SSID will not be broadcast in the beacon. If Broadcast Unique Beacon is disabled, a combined beacon will be broadcast. NOTE: Enabling Broadcast Unique Beacon will lower the total throughput of the AP by 2-4%.
Advanced Configuration SSID/VLAN/Security AP-700 User Guide 3. Click Add to configure additional SSIDs, VLANs, and their associated security profiles and RADIUS server profiles, or click Edit to modify existing SSIDs. The Add Entries or Edit Entries screen appears. See Figure 4-54. Figure 4-54 SSID/VLAN Edit Entries Screen (VLAN Tagging Enabled) 4. Enter a unique Network Name (SSID) between 1 and 32 characters. This parameter is mandatory.
Advanced Configuration SSID/VLAN/Security • AP-700 User Guide The VLAN ID must match an ID used by your network; contact your network administrator if you need assistance defining the VLAN IDs. 6.
AP-700 User Guide 5 Monitoring This chapter discusses the following monitoring options: • Version: Provides version information for the Access Point’s system components. • ICMP: Displays statistics for Internet Control Message Protocol packets sent and received by the AP. • IP/ARP Table: Displays the AP’s IP Address Resolution table. • Learn Table: Displays the list of nodes that the AP has learned are on the network.
Monitoring Version AP-700 User Guide Version From the HTTP interface, click the Monitor button and select the Version tab. The list displayed provides you with information that may be pertinent when calling Technical Support. With this information, your Technical Support representative can verify compatibility issues and make sure the latest software are loaded. This screen displays the following information for each Access Point component: • Serial Number: The component’s serial number, if applicable.
Monitoring ICMP AP-700 User Guide ICMP This tab provides statistical information for both received and transmitted messages directed to the AP. Not all ICMP traffic on the network is counted in the ICMP (Internet Control Message Protocol) statistics.
Monitoring IP/ARP Table AP-700 User Guide IP/ARP Table This tab provides information based on the Address Resolution Protocol (ARP), which relates MAC Address and IP Addresses.
Monitoring Learn Table AP-700 User Guide Learn Table This tab displays information relating to network bridging. It reports the MAC address for each node that the device has learned is on the network and the interface on which the node was detected. There can be up 10,000 entries in the Learn Table.
Monitoring IAPP AP-700 User Guide IAPP This tab displays statistics relating to client handovers and communications between Access Points.
Monitoring RADIUS AP-700 User Guide RADIUS This tab provides RADIUS authentication, EAP/802.1x authentication, and accounting information for both the Primary and Backup RADIUS servers for each RADIUS Server Profile. NOTE: Separate RADIUS servers can be configured for each RADIUS Server Profile. Select the RADIUS Server Profile to view statistics on from the Select Server Profile drop-down menu.
Monitoring Interfaces AP-700 User Guide Interfaces This tab displays statistics for the Ethernet and wireless interfaces.
Monitoring Interfaces AP-700 User Guide • Ethernet Chipset (Ethernet): Identifies the chipset used to realize the interface. • Excessive Collisions (Ethernet): The number of frames for which transmission fails due to excessive collisions. • Failed ACK Count (Wireless): The number of times an acknowledgment (or ACK) is not received when expected. • Failed Count (Wireless): The number of packets not transmitted successfully due to too many transmit attempts.
Monitoring Interfaces AP-700 User Guide • Out Errors (Ethernet/Wireless): The number of outbound packets that could not be transmitted because of errors. • Out Non-unicast Packets (Ethernet/Wireless): The total number of packets that higher-level protocols requested be transmitted to a non-unicast (i.e., a subnetwork-broadcast orsubnetwork-multicast) address, including those that were discarded or not sent.
Monitoring Station Statistics AP-700 User Guide Station Statistics This tab displays information on wireless clients attached to the AP and on Wireless Distribution System. Enable the Monitoring Station Statistics feature (Station Statistics are disabled by default) by checking Enable Monitoring Station Statistics and click OK. You do not need to reboot the AP for the changes to take effect.
Monitoring Station Statistics AP-700 User Guide • Time since Last Frame Received: The time elapsed since the last frame from the associated wireless station (or WDS link partner) was received. • Number of Stations and WDS Links: The number of stations and WDS links monitored. The following stations statistics are available through SNMP: • Octets Received: The number of octets received from the associated wireless station (or WDS link partner) by the AP.
Monitoring Mesh Statistics AP-700 User Guide Mesh Statistics As the AP-700 does not support Mesh functionality, this tab contains no information. Visit www.proxim.com for information on Mesh.
AP-700 User Guide Commands 6 This chapter contains information on the following Command functions: • Introduction to File Transfer via TFTP or HTTP: Describes the available file transfer methods. • Update AP: Download files via TFTP or HTTP to the AP. • Retrieve File: Upload configuration files from the AP to a TFTP server. • Reboot: Reboot the AP in the specified number of seconds. • Reset: Reset all of the Access Point’s configuration settings to factory defaults.
Commands Introduction to File Transfer via TFTP or HTTP AP-700 User Guide Introduction to File Transfer via TFTP or HTTP There are two methods of transferring files to or from the AP: TFTP or HTTP (or HTTPS if enabled): • Downloading files (Configuration, AP Image, Bootloader, License, Private Key, Certificate, CLI Batch File) to the AP using one of these two methods is called “Updating the AP.” • Uploading files (Configuration, CLI Batch File, etc) from the AP is called “Retrieving Files.
Commands Update AP AP-700 User Guide Update AP Update AP via TFTP Use the Update AP via TFTP tab to download Configuration, AP Image, Bootloader files, Certificate and Private Key files, and CLI Batch File to the AP. A TFTP server must be running and configured to point to the directory containing the file. Figure 6-2 Update AP via TFTP Command Screen If you do not have a TFTP server installed on your system, install the TFTP server from the installation CD.
Commands Update AP – • AP-700 User Guide CLI Batch File: a CLI Batch file that contains CLI commands to configure the AP. This file will be executed by the AP immediately after being uploaded. See CLI Batch File for more information. File Operation: Select either Update AP or Update AP & Reboot. You should reboot the AP after downloading files. Update AP via HTTP Use the Update AP via HTTP tab to download Configuration, AP Image, Bootloader files, and Certificate and Private Key files to the AP.
Commands Update AP AP-700 User Guide Figure 6-4 Warning Message 4. Click OK to continue with the operation or Cancel to abort the operation. NOTE: An HTTP file transfer using SSL may take extra time. If the operation completes successfully the following screen appears. Figure 6-5 Update AP Successful If the operation did not complete successfully the following screen appears, and the reason for the failure is displayed.
Commands Retrieve File AP-700 User Guide Retrieve File Retrieve File via TFTP Use the Retrieve File via TFTP tab to upload files from the AP to the TFTP server. The TFTP server must be running and configured to point to the directory to which you want to copy the uploaded file. We suggest you assign the file a meaningful name, which may include version or location information. If you don’t have a TFTP server installed on your system, install the TFTP server from the installation CD.
Commands Retrieve File AP-700 User Guide Retrieve File via HTTP Use the Retrieve File via HTTP tab to retrieve configuration files, CLI Batch Files, or CLI Batch Logs from the AP. For more information on CLI Batch Files and CLI Batch Logs see CLI Batch File. 1. Select the type of file (Config, CLI Batch File, CLI Batch Log) from the File Type drop-down menu. 2. Click on the Retrieve File button to initiate the operation.
Commands Retrieve File AP-700 User Guide Figure 6-10 File Download Dialog Box 4. On clicking the Save button the Save As window displays. Select an appropriate filename and location and click OK.
Commands Reboot AP-700 User Guide Reboot Use the Reboot tab to save configuration changes (if any) and reset the AP. Enter a value between 0 and 65535 seconds; entering a value of 0 (zero) seconds causes an immediate reboot. Note that Reset, described below, does not save configuration changes. CAUTION: Rebooting the AP will cause all users who are currently connected to lose their connection to the network until the AP has completed the restart process and resumed operation.
Commands Reset AP-700 User Guide Reset Use the Reset tab to restore the AP to factory default conditions. Since this will reset the AP’s current IP address, a new IP address must be assigned. See Initialization for more information. CAUTION: Resetting the AP to its factory default configuration will permanently overwrite all changes that have made to the unit. The AP will reboot automatically after this command has been issued.
Commands Help Link AP-700 User Guide Help Link Use the Help tab to configure the location of the AP Help files. During initialization, the AP on-line help files are downloaded to the default location: C:/Program Files/ORiNOCO/AP700/HTML/index.htm. To enable the Help button on each page of the Web interface to access the help files, however, copy the entire Help folder to a web server, then specify the new HTTP path in the Help Link box.
AP-700 User Guide Troubleshooting 7 This chapter provides information on the following: • Troubleshooting Concepts • Symptoms and Solutions • Recovery Procedures • Related Applications NOTE: This section helps you locate problems related to the AP device setup. For details about RADIUS, TFTP, serial communication programs (such as HyperTerminal), Telnet applications, or web browsers, please see the documentation that came with the respective application for assistance.
Troubleshooting Symptoms and Solutions AP-700 User Guide Symptoms and Solutions Connectivity Issues Connectivity issues include any problem that prevents you from powering up or connecting to the AP. AP Unit Will Not Boot - No LED Activity 1. Make sure your power source is operating. 2. Make sure all cables are connected to the AP correctly. 3. If you are using PoE, make sure you are using a Category 5, foiled, twisted pair cable to power the AP. Serial Link Does Not Work 1.
Troubleshooting Symptoms and Solutions AP-700 User Guide 2. The AP only contacts a DHCP server during boot-up. If your network’s DHCP server is not available while the AP is booting, the device will use the default IP address (169.254.128.132). Reboot the AP once your DHCP server is on-line again or use the ScanTool to find the Access Point’s current IP address. 3.
Troubleshooting Symptoms and Solutions AP-700 User Guide 5. If you have a problem uploading a file, verify that the TFTP server is configured to allow uploads (typically the default setting is to allow only downloads). Client Connection Problems Client Software Finds No Connection Make sure you have configured your client software with the proper Network Name and Security settings. Network Names and WEP Keys are typically allocated and maintained by your network administrator.
Troubleshooting Symptoms and Solutions AP-700 User Guide CAUTION: The Forced Reload procedure disconnects all users and resets all values to factory defaults. Power-Over-Ethernet (PoE) The AP Does Not Work 1. Verify that you are using a standard UTP Category 5 cable. 2. Try a different port on the same PoE hub (remember to move the input port accordingly) – if it works, there is probably a faulty port or bad RJ-45 port connection. 3. If possible, try to connect the AP to a different PoE hub. 4.
Troubleshooting Recovery Procedures AP-700 User Guide Recovery Procedures The most common installation problems relate to IP addressing. For example, without the TFTP server IP Address, you will not be able to download a new AP Image to the AP. IP Address management is fundamental. We suggest you create a chart to document and validate the IP addresses for your system. If the password is lost or forgotten, you will need to reset the AP to default values.
Troubleshooting Recovery Procedures – AP-700 User Guide Download a New Image Using the Bootloader CLI Because the CLI option requires a physical connection to the unit’s serial port, Proxim recommends the ScanTool option.
Troubleshooting Recovery Procedures AP-700 User Guide You must also connect the AP to a computer with a standard serial cable and use a terminal client, such as HyperTerminal. From the terminal, enter CLI Commands to set the IP address and download an AP Image. Preparing to Download the AP Image Before starting, you need to know the Access Point’s IP address, subnet mask, the TFTP Server IP Address, and the AP Image file name.
Troubleshooting Recovery Procedures AP-700 User Guide [Device name]> show [Device name]> reboot The AP will reboot and then download the image file. You should see downloading activity begin after a few seconds within the TFTP server’s status screen. 8. When the download process is complete, configure the AP. Setting IP Address using Serial Port Use the following procedure to set an IP address over the serial port using the CLI. The network administrator typically provides the AP IP address.
Troubleshooting Recovery Procedures AP-700 User Guide Figure 7-1 Result of “show ip” CLI Command 6. Change the IP address and other network values using set and reboot CLI commands, similar to the example below (use your own IP address and subnet mask). Note that IP Address Type is set to Dynamic by default.
Troubleshooting Related Applications AP-700 User Guide Related Applications RADIUS Authentication Server If you enabled RADIUS Authentication on the AP, make sure that your network’s RADIUS servers are operational. Otherwise, clients will not be able to log in. There are several reasons the authentication server services might be unavailable, here are two typical things to check: • Make sure you have the proper RADIUS authentication server information setup configured in the AP.
AP-700 User Guide Command Line Interface (CLI) A This section discusses the following: • General Notes • Command Line Interface (CLI) Variations • CLI Command Types • Using Tables and Strings • Configuring the AP using CLI commands • CLI Monitoring Parameters • Parameter Tables • CLI Batch File CLI commands can be used to initialize, configure, and manage the Access Point. • CLI commands may be entered in real time through a keyboard or submitted with CLI scripts.
Command Line Interface (CLI) General Notes AP-700 User Guide General Notes Prerequisite Skills and Knowledge To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts, network access infrastructures, and client-server relationships. In addition, you should be familiar with software setup procedures for typical network operating systems and servers. Notation Conventions • Computer prompts are shown as constant width type.
Command Line Interface (CLI) General Notes Key Combination Tab ? AP-700 User Guide Operation Complete the command line List available commands CLI Error Messages The following table describes the error messages associated with improper inputs or expected CLI behavior.
Command Line Interface (CLI) Command Line Interface (CLI) Variations AP-700 User Guide Command Line Interface (CLI) Variations Administrators use the CLI to control Access Point operation and monitor network statistics. The AP supports two types of CLI: the Bootloader CLI and the normal CLI. The Bootloader CLI provides a limited command set, and is used when the current AP Image is bad or missing. The Bootloader CLI allows you to assign an IP Address and download a new image.
Command Line Interface (CLI) Command Line Interface (CLI) Variations AP-700 User Guide Figure A-2 Results of “show” bootloader CLI command 164
Command Line Interface (CLI) CLI Command Types AP-700 User Guide CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Controls. Operational CLI Commands These commands affect Access Point behavior, such as downloading, rebooting, and so on. After entering commands (and parameters, if any) press the Enter key to execute the Command Line.
Command Line Interface (CLI) CLI Command Types AP-700 User Guide Example 2. Display specific Commands To show all commands that start with specified letters, enter one or more letters, then ? with no space between letters and ?. [Device-Name]>s? Figure A-4 Result of “s?” CLI command Example 3. Display parameters for set and show Example 3a allows you to see every possible parameter for the set (or show) commands. Notice from example 3a that the list is very long.
Command Line Interface (CLI) CLI Command Types AP-700 User Guide Figure A-7 Result of “show iparp?” CLI command Example 4. Display Prompts for Successive Parameters Enter the command, a space, and then ?. Then, when the parameter prompt appears, enter the parameter value. The parameter is changed and a new CLI line is echoed with the new value (in the first part of the following example, the value is the IP Address of the TFTP server).
Command Line Interface (CLI) CLI Command Types AP-700 User Guide help Displays instructions on using control-key sequences for navigating a Command Line and displays command information and examples. 1. Using help as the only argument: [Device-Name]>help Figure A-8 Results of “help” CLI command 2. Complete command description and command usage can be provided by: [Device-Name]>help [Device-Name]> help history Shows content of Command History Buffer.
Command Line Interface (CLI) CLI Command Types AP-700 User Guide search Lists the parameters supported by the specified table. This list corresponds to the table information displayed in the HTTP interface. In this example, the CLI returns the list of parameters that make up an entry in the IP Access Table. [Device-Name]> search mgmtipaccesstbl Figure A-9 Results of “search mgmtipaccesstbl” CLI command upload Uploads a text-based configuration file from the AP to the TFTP Server.
Command Line Interface (CLI) CLI Command Types AP-700 User Guide [Device-Name]>show network [Device-Name]>show mgmtipaccesstbl “set” CLI Command Sets (modifies) the value of the specified parameter. To see a definition and syntax example, type only set and then press the Enter key. To see a list of available parameters, enter a space, then a question mark (?) after set (example: set?). Syntax: [Device-Name]>set [Device-Name]>set ...Command Line Interface (CLI) CLI Command Types AP-700 User Guide Example 2 - Create a table entry or row Use 0 (zero) as the index to a table when creating an entry. When creating a table row, only the mandatory table elements are required (comment is usually an optional table element). For optional table elements, the default value is generally applied if you do not specify a value.
Command Line Interface (CLI) CLI Command Types AP-700 User Guide Figure A-10 Results of “show network” and “show ip” CLI Commands Example 6 - Show Individual and Table Parameters 1. View a single parameter. Syntax: [Device-Name]>show Example: [Device-Name]> show ipaddr Displays the Access Point IP address. Figure A-11 Result of “show ipaddr” CLI Command 2. View all parameters in a table.
Command Line Interface (CLI) Using Tables and Strings AP-700 User Guide Using Tables and Strings Working with Tables Each table element (or parameter) must be specified, as in the example below. [Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0 Below are the rules for creating, modifying, enabling/disabling, and deleting table entries. • • • • Creation – The table name is required. – The table index is required – for table entry/instance creation the index is always zero (0).
Command Line Interface (CLI) Using Tables and Strings AP-700 User Guide The string delimiter does not have to be used for every string object. The single quote or double quote only has to be used for string objects that contain blank space characters. If the string object being used does not contain blank spaces, then the string delimiters, single or double quotes, mentioned in this section are not required.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Configuring the AP using CLI commands Log into the AP using HyperTerminal 1. Open your terminal emulation program (like HyperTerminal) and set the following connection properties: • Com Port: • Baud rate: 9600 • Data Bits: 8 • Stop bits: 1 • Flow Control: None • Parity: None 2.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Set Basic Configuration Parameters using CLI Commands There are a few basic configuration parameters that you may want to setup right away when you receive the AP. For example: • Set System Name, Location and Contact Information • Set Static IP Address for the AP • Download an AP Configuration File from your TFTP Server • Set up Auto Configuration • Set Network Names for the Wireless Interface • Enable 802.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide [Device-Name]>set snmprpasswd (SNMP read password) [Device-Name]>set snmprwpasswd (SNMP read/write) [Device-Name]>set snmpv3authpasswd (SNMPv3 authentication password) [Device-Name]>set snmpv3privpasswd (SNMPv3 privacy password) [Device-Name]>reboot 0 CAUTION: Proxim strongly urges you to change the default passwords to restrict access to your network devices to
Command Line Interface (CLI) Configuring the AP using CLI commands Country Code AP-700 User Guide Country Code Country Code Armenia AM Iceland IS Philippines PH Australia AU India IN Poland PL Austria AT Indonesia ID Portugal PT Azerbaijan AZ Ireland 5.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Perform the following commands to enable TX Power Control and set the transmit power level: [Device-Name]>set txpowercontrol enable [Device-Name]>set wif currentbackofftpcvalue <0-9 dBm1-35 dBm> Configure SSIDs (Network Names), VLANs, and Profiles Perform the following command to configure SSIDs and VLANS, and to assign Security and RADIUS Profiles.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide NOTE: The configuration filename and TFTP server IP address are configured only when the AP is configured for Static IP. If the AP is configured for Dynamic IP these parameters are not used and obtained from DHCP. The default filename is “config”. The default TFTP IP address is “169.254.128.133”.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Other Network Settings There are other configuration settings that you may want to set for the AP. Some of them are listed below.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Configure DHCP Relay Perform the following command to enable or disable DHCP Relay Agent Status. NOTE: You must have at least one entry in the DHCP Relay Server Table before you can set the DHCP Relay Status to Enable. [Device-Name]>set dhcprelaystatus enable Configure DHCP Relay Servers Perform the following command to configure and enable a DHCP Relay Server.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Shutdown/Resume Wireless Service [Device-Name]>set wif 3 wssstatus <1 (resume)/2 (shutdown)> Set Load Balancing Maximum Number of Clients [Device-Name]>set wif 3 lbmaxclients <1–63> Set the Multicast Rate (802.11a/b/g) [Device-Name]>set wif 3 multrate <6, 12, 24 (Mbits/sec)> Enable/Disable Super Mode (802.11a/g only) [Device-Name]>set wif 3 supermode Enable/Disable Turbo Mode (802.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Set Ethernet Speed and Transmission Mode [Device-Name]>set etherspeed (see below) [Device-Name]>reboot 0 Ethernet Speed and Transmission Mode 10 Mbits/sec - half duplex 10 Mbits/sec - full duplex 10 Mbits/sec - auto duplex 100 Mbits/sec - half duplex 100 Mbits/sec - full duplex Auto Speed - half duplex Auto Speed - auto duplex Value 10halfduplex 10fullduplex 10autoduplex 100halfduplex 100fullduplex autohalfduplex
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Set Telnet Session Timeouts [Device-Name]>set tellogintout
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Add an Entry to the MAC Access Control Table [Device-Name]>set macacltbl 0 macaddr status enable [Device-Name]>show macacltbl Disable or Delete an Entry in the MAC Access Control Table [Device-Name]>set macacltbl status [Device-Name]>show macacltbl NOTE: For larger networks that include multiple Access Points, you may prefer to maintain this list on a centralized location using the R
Command Line Interface (CLI) Configuring the AP using CLI commands Index Primary/Backup Profile Name Server Status Server Addressing Format IP Address/Host Name Destination Port VLAN Identifier MAC Address Format Response Time Maximum Retransmission . AP-700 User Guide : : : : : : : : : : : 1 Backup MAC Authentication notReady ipaddr 0.0.0.0 1812 -1 dashdelimited 3 3 : : : : : : : : : : : : : 4 Backup Management Access notReady ipaddr 0.0.0.0 1812 -1 dashdelimited 3 3 0 0 . .
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide To define the Configuration Reset Password to be used for configuration reset during boot up, enter the following command [Device-Name]>set configresetpasswd It is important to safely store the NOTE: It is important to safely store the configuration reset password.
Command Line Interface (CLI) Configuring the AP using CLI commands AP-700 User Guide Example: [Device-Name]>set secprofiletbl 5 secmode wpa status enable Configure a Security Profile with WPA-PSK Security Mode [Device-Name]>set secprofiletbl secmode wpa-psk passphrase status enable Example: [Device-Name]>set secprofiletbl 6 secmode wpa-psk passphrase 12345678 status enable Configure a Security Profile with 802.11i Security Mode [Device-Name]>set secprofiletbl secmode 802.
Command Line Interface (CLI) CLI Monitoring Parameters AP-700 User Guide CLI Monitoring Parameters Using the show command with the following table parameters will display operating statistics for the AP (these are the same statistics that are described in the Monitoring section). • staticmp: Displays the ICMP statistics. • statarptbl: Displays the IP ARP Table statistics. • statbridgetbl: Displays the Learn Table. • statiapp: Displays the IAPP statistics.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Parameter Tables Objects contain groups that contain both parameters and parameter tables. Use the following Tables to configure the Access Point.
Command Line Interface (CLI) Parameter Tables – • • • TCP/UDP Port Filtering - Filter IP packets based on TCP/UDP port Alarms Parameters – SNMP Table Host Table Parameters - Enter the list of IP addresses that will receive alarms from the AP – Syslog Parameters - Configure the AP to send Syslog information to network servers Bridge Parameters – Spanning Tree Parameters - Used to help prevent network loops – Storm Threshold Parameters - Set threshold for number of broadcast packets – Intra BSS S
Command Line Interface (CLI) Parameter Tables AP-700 User Guide System Parameters Name Type System Name Location Country Identifier* Group DisplayString DisplayString DisplayString Contact Name Contact E-mail Contact Phone DisplayString DisplayString DisplayString FLASH Backup Interval Flash Update Integer System OID Descriptor DisplayString DisplayString Up Time Integer System Security ID Emergency Restore to defaults DisplayString Value N/A User Defined User Defined See Country Identifiers
Command Line Interface (CLI) Parameter Tables Country Finland France Germany Greece Hungary Ireland Italy Latvia Lithuania Luxembourg Malta Netherlands Norway Poland Portugal Puerto Rico Russia Spain Sweden Switzerland United Kingdom/ Great Britain Indoor/Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor/
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Inventory Management Information The inventory management commands display advanced information about the AP’s installed components. You may be asked to report this information to a representative if you contact customer support.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide DNS Client for RADIUS Name Resolution Name DNS Client DNS Client status Primary DNS Server IP Address Secondary DNS Server IP Address Default Domain Name Type Access R RW CLI Parameter dns dnsstatus IpAddress Value N/A enable disable (default) User Defined RW dnspridnsipaddr IpAddress User Defined RW dnssecdnsipaddr Integer32 User Defined (up to 254 RW characters) dnsdomainname Group Integer DHCP Server Parameters Name DHCP Se
Command Line Interface (CLI) Parameter Tables AP-700 User Guide DHCP Relay Group The DHCP Relay Group allows you to enable or disable DHCP Relay Agent Status. Name DHCP Relay Group Status DHCP Relay Server Table Type Group Integer Value N/A enable disable N/A Table Access R RW CLI Parameter dhcprelay dhcprelaystatus R dhcprelaytbl DHCP Relay Server Table The DHCP Relay Server Table contains the commands to set the table entries.
Command Line Interface (CLI) Parameter Tables SNTP Parameters Name SNTP Group SNTP Status AP-700 User Guide Type Group Integer Primary Server Name or DisplayString IP Address Secondary Server Name DisplayString or IP Address Time Zone Integer Daylight Savings Time Integer Year Month Day Hour Minutes Seconds Addressing Format Integer32 Integer32 Integer32 Integer32 Integer32 Integer32 Integer Link Integrity Parameters Name Link Integrity Link Integrity Status Type Group Integer Link Integrity Poll I
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Interface Parameters Wireless Interface Parameters The wireless interface group parameter is wif. The wireless interface uses table index 3. Common Parameters to 802.11a and 802.
Command Line Interface (CLI) Parameter Tables Distance Between APs Medium Small Mini Micro AP-700 User Guide Receive Sensitivity Threshold (dBm) -86 -78 -70 -62 Transmit Defer Threshold (dBm) -62 -52 -42 -36 802.11a Specific Parameters Name Operating Frequency Channel Supported Data Rates Transmit Rate Type Octet String Integer32 Physical Layer Type Integer Regulatory Domain List DisplayString Super Mode Integer Turbo Mode*† Integer Integer Value Varies by regulatory domain and country.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide 802.11b Specific Parameters Name Operating Frequency Channel Integer Type Multicast Rate Integer Closed Wireless System Integer MAC Address Supported Data Rates PhyAddress Octet String Transmit Rate Integer32 Physical Layer Type Integer Regulatory Domain List DisplayString Value 1 - 14; available channels vary by regulatory domain/country; see Available Channels 1 Mbits/sec (1) 2 Mbits/sec (2) (default) 5.
Command Line Interface (CLI) Parameter Tables Name Transmit Rate Type Integer32 AP-700 User Guide Value For 802.11b-only mode: 0 (auto fallback; default) 1 Mbits/sec 2 Mbits/sec 5.5 Mbits/sec 11 Mbits/sec Access RW CLI Parameter txrate R R phytype regdomain RW supermode For 802.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Wireless Distribution System (WDS) Parameters Name WDS Table Port Index Status Partner MAC Address Type Table Integer Integer PhysAddress Value N/A 3.1 - 3.
Command Line Interface (CLI) Parameter Tables Name RADIUS EAP Profile RADIUS Accounting Profile QoS Policy AP-700 User Guide Type DisplayString DisplayString Value User defined User defined Access RW RW CLI Parameter radeapprofile radacctprofile Integer32 User defined RW qospolicy Ethernet Interface Parameters Name Ethernet Interface Speed Type Group Integer MAC Address PhyAddress Value N/A 1 (10halfduplex) 2 (10fullduplex) 3 (10autoduplex) 4 (100halfduplex) 5 (100fullduplex) 6 (autohalfduplex
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Management Parameters Secure Management Parameters Name Secure Management SNMP Parameters Name SNMP SNMP Management Interface Bitmask Type Integer Type Group Interface Bitmask Read Password DisplayString Read/Write Password DisplayString SNMPv3 Authentication Password DisplayString SNMPv3 Privacy Password DisplayString HTTP Parameters Name HTTP HTTP Management Interface Bitmask Type Group Interface Bitmask HTTP Password Display
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Telnet Parameters Name Telnet Telnet Management Interface Bitmask Type Group Interface Bitmask Telnet Port Integer Telnet Login Inactivity Time-out Telnet Session Idle Time-out Integer Integer Value N/A 0 or 2 = No interfaces (disable) 1 or 3 = Ethernet 4 or 6 = Wireless 5 or 7 = All interfaces (default is 7) User Defined 23 (default) 30 - 300 seconds 60 sec (default) 60 - 36000 seconds 900 sec (default) Access R RW CLI Parameter teln
Command Line Interface (CLI) Parameter Tables Name SSH Public Host Key Fingerprint SSH Host Key Status AP-700 User Guide Type DisplayString Value AP Generated Access RW CLI Parameter sshkeyfprint Integer create delete RW sshkeystatus The AP SSH feature, open-SSH, confirms to the SSH protocol, and supports SSH version 2. The following SSH clients have been verified to interoperate with the AP’s server. The following table lists the clients, version number, and the website of the client.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide IP Access Table Parameters When creating table entries, you may either specify the argument name followed by argument value or simply enter the argument value. When only the argument value is specified, then enter the values in the order depicted by the following table. CLI applies default values to the omitted arguments. Due to the nature of the information, the only argument that can be omitted is the “comment” argument.
Command Line Interface (CLI) Parameter Tables Name Static MAC Address on Wired Network Static MAC Address Mask on Wired Network Static MAC Address on Wireless Network Static MAC Address Mask on Wireless Network Comment (optional) Status (optional) AP-700 User Guide Type PhysAddress Value User Defined Access RW CLI Parameter wiredmacaddr PhysAddress User Defined RW wiredmask PhysAddress User Defined RW wirelessmacaddr PhysAddress User Defined RW wirelessmask DisplayString Integer max 255 c
Command Line Interface (CLI) Parameter Tables AP-700 User Guide TCP/UDP Port Filtering Table The following parameters are used to configure TCP/UDP Port filters.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Name Password Type DisplayString Comment (optional) DisplayString Status (optional) Integer Value User Defined (up to 64 characters) User Defined (up to 254 characters) enable (default) disable delete Access W CLI Parameter passwd RW cmt RW status Syslog Parameters The following parameters configure the Syslog settings.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Bridge Parameters Spanning Tree Parameters Name Spanning Tree Spanning Tree Status Type Group Integer Bridge Priority Integer Maximum Age Integer Hello Time Integer Forward Delay Integer Value N/A enable disable (default) 0 - 65535 32768 (default) 600 - 4000 (in 0.01 sec intervals; i.e., 6 to 40 seconds) 2000 (default) 100 - 1000 (1/100 second; i.e., 1 to 10 seconds); enter values in increments of 100 200 (default) 400 - 3000 (in 0.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Storm Threshold Table Name Storm Threshold Table Table Index Table Integer Type Broadcast Threshold Integer Multicast Threshold Integer Value N/A 1 = Ethernet 3 = Wireless 0 - 255 packets/sec (default is 0) 0 - 255 packets/sec (default is 0) Access R R CLI Parameter stmthrestbl index RW bcast RW mcast Intra BSS Subscriber Blocking The following parameters control the Intra BSS traffic feature, which prevent wireless clients that
Command Line Interface (CLI) Parameter Tables AP-700 User Guide RADIUS Parameters General RADIUS Parameters Name RADIUS Client Invalid Server Address Type Group Counter32 Value N/A N/A Access R R CLI Parameter radius radcliinvsvradd RADIUS Server Configuration Parameters NOTE: Use a server name only if you have enabled the DNS Client functionality. See DNS Client for RADIUS Name Resolution.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Security Parameters MAC Access Control Parameters Name MAC Address Control Status Type Group Integer Operation Type Integer Value N/A enable disable (default) passthru (default) block Access R RW RW CLI Parameter macacl aclstatus macacloptype MAC Access Control Table Name MAC Address Control Table Table Index MAC Address Comment (optional) Status (optional) Type Value Table N/A N/A PhysAddress DisplayString N/A User Defined User
Command Line Interface (CLI) Parameter Tables Name Hardware Configuration Reset Status Configuration Reset Password AP-700 User Guide Type Integer DisplayString Value enable (1) disable (2) User Defined Access R RW CLI Parameter hwconfigresetstatus configresetpasswd Security Profile Table The Security Profile Table allows you to configure security profiles. A maximum of 16 security profiles are supported.
Command Line Interface (CLI) Parameter Tables Key Length 128-bit 152-bit AP-700 User Guide Hexadecimal 26 characters (0 - F) 32 characters (0 - F) ASCII 13 alphanumeric characters 16 alphanumeric characters Each ASCII character corresponds to two hexadecimal digits. See ASCII Character Chart for ASCII/Hexadecimal correspondence.
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Enabling QoS Name QoS Status Type Object Status QoS Maximum Medium Threshold Integer Value enable disable (default) 50 - 90 Access RW CLI Parameter qosstatus RW qosmaximummediumthresh old Value Access N/A N/A R R RW RW CLI Parameter qos qospolicytbl index secindex policyname type RW RW mapindex markstatus RW status Configuring QoS Policies The QoS group manages the QoS policies: Name QoS Group QoS Policy Table Table Primary In
Command Line Interface (CLI) Parameter Tables AP-700 User Guide Specifying the Mapping between IP Precedence/DSCP Ranges and 802.1D Priorities The QoS IP DSCP to 802.1D Mapping Table specifies the mapping between IP Precedence/DSCP Ranges and 802.1D priorities. Name QoS IP DSCP to 802.1D Mapping Table Table Index (Primary Index) 802.
Command Line Interface (CLI) Parameter Tables Name CWmax AIFSN Tx OP Limit MSDU Lifetime AC Mandatory AP-700 User Guide Type Integer Integer Integer Integer Truth Value Value 0 - 65535 2 - 15 0 - 65535 0 - 500 true false Access RW RW RW RW RW CLI Parameter cwmax aifsn txoplimit msdulifetime acmandatory Examples: show qosedcatbl (or qosqapedcatbl) set qosedcatbl (or qosqapedcatbl) . For example: set qosedcatbl 3.
Command Line Interface (CLI) CLI Batch File AP-700 User Guide CLI Batch File A CLI Batch file is a user-editable file that lists a series of CLI set commands, that can be uploaded to the Access Point to change its configuration. The Access Point executes the CLI commands specified in the CLI Batch file after upload and the configuration gets changed accordingly. A CLI Batch file can also be used for Auto Configuration.
Command Line Interface (CLI) CLI Batch File AP-700 User Guide Reboot Behavior When a CLI Batch file contains a reboot command, the reboot will occur only after the entire CLI Batch file has been executed.
AP-700 User Guide B ASCII Character Chart You can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F, a-f (case sensitive), and punctuation marks. Each ASCII character corresponds to two hexadecimal digits. The table below lists the ASCII characters that you can use to configure WEP Encryption Keys. It also lists the Hexadecimal equivalent for each ASCII character.
AP-700 User Guide C Specifications • Software Features • Hardware Specifications • Available Channels Software Features The tables below list the software features available on the AP-700. • Number of Stations per BSS • Management Functions • Advanced Bridging Functions • Medium Access Control (MAC) Functions • Security Functions • Network Functions Number of Stations per BSS Feature Supported by AP-700 Without encryption up to 63 With WEP encryption up to 63 With 802.
Specifications Software Features AP-700 User Guide Advanced Bridging Functions Feature Supported by AP-700 IEEE 802.
Specifications Software Features AP-700 User Guide Security Functions Feature Supported by AP-700 Security Profiles per VLAN 3 RADIUS Profiles per VLAN 3 IEEE 802.11 WEP* 3 MAC Access Control 3 RADIUS MAC-based Access Control 3 IEEE 802.1x Authentication† 3 Multiple Authentication Server Support per VLAN‡ 3 Rogue Scanning to Detect Rogue Access Points and Clients 3 Per User Per Session (PUPS) Encryption § 3 Wi-Fi Protected Access (WPA)/802.
Specifications Hardware Specifications AP-700 User Guide Hardware Specifications Category Specification Physical Dimensions (H x W x L) 1 x 4.75 x 7.1 in (25 x 121 x 180 mm) Weight Unit: .65 lb (.295 kg) Power Supply: .45 lbs (.
Specifications Available Channels AP-700 User Guide Available Channels Available channels vary based on operational mode and country. To verify which channels are available for your product: 1. Locate the product model number on the underside of your AP unit or on the unit’s box. 2. Note the alphanumeric code following the number 8675. (e.g., 8675-EU) 3. See the following tables. • 802.11a/b/g Channels • WD SKU Channels by Country 802.11a/b/g Channels Mode Channel 802.
Specifications Available Channels AP-700 User Guide WD SKU Channels by Country Available channel bands depend on the selected country and mode of use (indoor/outdoor). The typical channels available in each 802.
Specifications Available Channels Country Malta Netherlands Norway Poland Portugal Russia Spain Sweden Switzerland United Kingdom/ Great Britain AP-700 User Guide Indoor/Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor/Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor Indoor Outdoor 802.11a L, M, H H L, M, H H L, M, H H L, M, H H L, M, H H L, M, H, U, ISM L, M, H H L, M, H H L, M, H H L, M, H H 802.
AP-700 User Guide Technical Services and Support D See the following sections: • Obtaining Technical Services and Support • Support Options – Proxim eService Web Site Support – Telephone Support – ServPak Support Obtaining Technical Services and Support If you are having trouble utilizing your Proxim product, please review this manual and the additional documentation provided with your product.
Technical Services and Support Support Options AP-700 User Guide Support Options Proxim eService Web Site Support The Proxim eService Web site is available 7x24x365 at http://support.proxim.com. On the Proxim eService Web Site, you can access the following services: • New Product Registration: Register your product for free support. • Open a Ticket or RMA: Open a ticket or RMA and receive an immediate reply. • Search Knowledgebase: Locate white papers, software upgrades, and technical information.
AP-700 User Guide Statement of Warranty E Warranty Coverage Proxim Wireless Corporation warrants that its Products are manufactured solely from new parts, conform substantially to specifications, and will be free of defects in material and workmanship for a Warranty Period of 1 year from the date of purchase.
Statement of Warranty Other Information AP-700 User Guide and shipping instructions. Buyer must return the defective Product to Proxim Wireless, properly packaged to prevent damage, shipping prepaid, with the RMA number prominently displayed on the outside of the container.