User Manual Part 3

ManualsBrandsSymbol Technologies ManualsElectronicsSymbol Access Point

Table Of Contents

Command Line Interface Reference 8-5

AP51xx>admin>passwd

Description:

Changes the password for the admin login.

Syntax:

Example:

admin>passwd

Old Admin Password:******

New Admin Password:******

Verify Admin Password:******

Password successfully updated

For information on configuring passwords using the applet (GUI), see Setting Passwords on page 6-3.

passwd Changes the admin password for access point access. This requires typing the old admin password and entering a

new password and confirming it. Passwords can be up to 11 characters. The access point CLI treats the following as

invalid characters:

| " & , \ ' < >

In order to avoid problems when using the access point CLI, these characters should be avoided.

Summary of content (282 pages)

PAGE 1
Command Line Interface Reference 8-5 AP51xx>admin>passwd Description: Changes the password for the admin login. Syntax: passwd Changes the admin password for access point access. This requires typing the old admin password and entering a new password and confirming it. Passwords can be up to 11 characters. The access point CLI treats the following as invalid characters: | " & , \ ' < > In order to avoid problems when using the access point CLI, these characters should be avoided.
PAGE 2
8-6 AP-51xx Access Point Product Reference Guide AP51xx>admin>summary Description: Displays the access point’s system summary. Syntax: summary Displays a summary of high-level characteristics and settings for the WAN, LAN and WLAN. Example: admin>summary AP-51xx firmware version 1.1.0.0-xxx country code us serial number 00A0F8716A74 WLAN 1: WLAN Name WLAN1 ESS ID 101 Radio 11a, 11b/g VLAN VLAN1 Security Ploicy Default QoS Ploicy Default LAN1 Name: LAN1 LAN1 Mode: enable LAN1 IP: 0.0.0.
PAGE 3
Command Line Interface Reference 8-7 AP51xx>admin>.. Description: Displays the parent menu of the current menu. This command appears in all of the submenus under admin. In each case, it has the same function, to move up one level in the directory structure. Example: admin(network.lan)>..
PAGE 4
8-8 AP-51xx Access Point Product Reference Guide AP51xx>admin> / Description: Displays the root menu, that is, the top-level CLI menu. This command appears in all of the submenus under admin. In each case, it has the same function, to move up to the top level in the directory structure. Example: admin(network.
PAGE 5
Command Line Interface Reference 8-9 AP51xx>admin>save Description: Saves the configuration to system flash. The save command appears in all of the submenus under admin. In each case, it has the same function, to save the current configuration. Syntax: save Saves configuration settings. The save command works at all levels of the CLI. The save command must be issued before leaving the CLI for updated settings to be retained.
PAGE 6
8-10 AP-51xx Access Point Product Reference Guide AP51xx>admin>quit Description: Exits the command line interface session and terminates the session. The quit command appears in all of the submenus under admin. In each case, it has the same function, to exit out of the CLI. Once the quit command is executed, the login prompt displays again.
PAGE 7
Command Line Interface Reference 8-11 8.3 Network Commands AP51xx>admin(network)> Description: Displays the network submenu. The items available under this command are shown below. lan wan wireless firewall router .. / save quit Goes to the LAN submenu. Goes to the WAN submenu. Goes to the Wireless Configuration submenu. Goes to the firewall submenu. Goes to the router submenu. Goes to the parent menu. Goes to the root menu. Saves the current configuration to the system flash.
PAGE 8
-12 AP-51xx Access Point Product Reference Guide 8.3.1 Network LAN Commands AP51xx>admin(network.lan)> Description: Displays the LAN submenu. The items available under this command are shown below. show set bridge wlan-mapping dhcp type-filter .. / save quit Shows current access point LAN parameters. Sets LAN parameters. Goes to the mesh configuration submenu. Goes to the WLAN/Lan/Vlan Mapping submenu. Goes to the LAN DHCP submenu. Goes to the Ethernet Type Filter submenu. Goes to the parent menu.
PAGE 9
Command Line Interface Reference 8-13 AP51xx>admin(network.lan)> show Description: Displays the access point LAN settings. Syntax: show Shows the settings for the access point LAN1 and LAN2 interfaces. Example: admin(network.lan)>show LAN On Ethernet Port : LAN1 LAN Ethernet Timeout : disable 802.1x Port Authentication: Username : admin Password : ******** ** LAN1 Information ** LAN Name : LAN1 LAN Interface : enable 802.11q Trunking : disable LAN IP mode : DHCP client IP Address : 192.
PAGE 10
8-14 AP-51xx Access Point Product Reference Guide Primary DNS Server : 192.168.0.2 Secondary DNS Server : 192.168.0.3 WINS Server : 192.168.0.255 admin(network.lan)> For information on displaying LAN information using the applet (GUI), see Configuring the LAN Interface on page 5-1.
PAGE 11
Command Line Interface Reference 8-15 AP51xx>admin(network.lan)> set Description: Sets the LAN parameters for the LAN port. Syntax: set lan name ethernet-port-lan timeout trunking username passwd ip-mode ipadr mask dgw domain dns wins Enables or disables the access point LAN interface. Defines the LAN name by index. Defines which LAN (LAN 1 or LAN 2) is active on the Ethernet port.
PAGE 12
8-16 AP-51xx Access Point Product Reference Guide 8.3.1.1 Network LAN, Bridge Commands AP51xx>admin(network.lan.bridge)> Description: Displays the access point Bridge submenu. show set .. / save quit Displays the mesh configuration parameters for the access point’s LANs. Sets the mesh configuration parameters for the access point’s LANs.. Moves to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI and exits the session.
PAGE 13
Command Line Interface Reference 8-17 AP51xx>admin(network.lan.bridge)> show Description: Displays the mesh bridge configuration parameters for the access point’s LANs. Syntax: show Displays the mesh bridge configuration parameters for the access point’s LANs. Example: admin(network.lan.
PAGE 14
8-18 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.bridge)> set Description: Sets the mesh configuration parameters for the access point’s LANs. Syntax: set priority hello msgage fwddelay ageout Sets bridge priority time in seconds (0-65535) for specified LAN. Sets bridge hello time in seconds (0-10) for specified LAN.
PAGE 15
Command Line Interface Reference 8-19 8.3.1.2 Network LAN, WLAN-Mapping Commands AP51xx>admin(network.lan.wlan-mapping)> Description: Displays the WLAN/Lan/Vlan Mapping submenu. show set create edit delete lan-map vlan-map .. / save quit Displays the VLAN list currently defined for the access point. Sets the access point VLAN configuration. Creates a new access point VLAN. Edits the properties of an existing access point VLAN. Deletes a VLAN. Maps access point existing WLANs to an enabled LAN.
PAGE 16
8-20 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.wlan-mapping)> show Description: Displays the VLAN list currently defined for the access point.. These parameters are defined with the set command. Syntax: show name vlan-cfg lan-wlan wlan Displays the existing list of VLAN names. Shows WLAN-VLAN mapping and VLAN configuration. Displays a WLAN-LAN mapping summary. Displays the WLAN summary list. Example: admin(network.lan.
PAGE 17
Command Line Interface Reference 8-21 admin(network.lan.wlan-mapping)>show wlan WLAN1: WLAN Name :WLAN1 ESSID :101 Radio : VLAN : Security Policy :Default QoS Policy :Default For information on displaying the VLAN screens using the applet (GUI), see Configuring VLAN Support on page 5-4.
PAGE 18
8-22 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.wlan-mapping)> set Description: Sets VLAN parameters for the access point. Syntax: set mgmt- tag native-tag mode Defines the Management VLAN tag (1-4095). Sets the Native VLAN tag (1-4095). Sets WLAN VLAN mode (WLAN 1-16) to either dynamic or static. Example: admin(network.lan.wlan-mapping)>set mgmt-tag 1 admin(network.lan.wlan-mapping)>set native-tag 2 admin(network.lan.
PAGE 19
Command Line Interface Reference 8-23 AP51xx>admin(network.lan.wlan-mapping)> create Description: Creates a VLAN for the access point. Syntax: create vlan-id vlan-name Defines the VLAN ID (1-4095). Specifies the name of the VLAN (1-31 characters in length). Example: admin(network.lan.wlan-mapping)> admin(network.lan.wlan-mapping)>create 5 vlan-5 For information on creating VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4.
PAGE 20
8-24 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.wlan-mapping)> edit Description: Modifies a VLAN’s name and ID. Syntax: edit name id Modifies an exisiting VLAN name (1-31 characters in length) Modifies an existing VLAN ID (1-4095) characters in length). For information on editing VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4.
PAGE 21
Command Line Interface Reference 8-25 AP51xx>admin(network.lan.wlan-mapping)> delete Description: Deletes a specific VLAN or all VLANs. Syntax: delete < VLAN id> Deletes a specific VLAN ID (1-16). all Deletes all defined VLANs. For information on deleting VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4.
PAGE 22
8-26 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.wlan-mapping)> lan-map Description: Maps an access point VLAN to a WLAN. Syntax: .. lan-map Maps an existing WLAN to an enabled LAN. All names and IDs are case-sensitive. admin(network.lan.wlan-mapping)>lan-map wlan1 lan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4.
PAGE 23
Command Line Interface Reference 8-27 AP51xx>admin(network.lan.wlan-mapping)> vlan-map Description: Maps an access point VLAN to a WLAN. Syntax: vlan-map Maps an existing WLAN to an enabled LAN. All names and IDs are case-sensitive. admin(network.lan.wlan-mapping)>vlan-map wlan1 vlan1 For information on mapping VLANs using the applet (GUI), see Configuring VLAN Support on page 5-4.
PAGE 24
8-28 AP-51xx Access Point Product Reference Guide 8.3.1.3 Network LAN, DHCP Commands AP51xx>admin(network.lan.dhcp)> Description: Displays the access point DHCP submenu. The items available are displayed below. show set add delete list .. / save quit Displays DHCP parameters. Sets DHCP parameters. Adds static DHCP address assignments. Deletes static DHCP address assignments. Lists static DHCP address assignments. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash.
PAGE 25
Command Line Interface Reference 8-29 AP51xx>admin(network.lan.dhcp)> show Description: Shows DHCP parameter settings. Syntax: show Displays DHCP parameter settings for the access point. These parameters are defined with the set command. Example: admin(network.lan.dhcp)>show **LAN1 DHCP Information** DHCP Address Assignment Range: Starting IP Address Ending IP Address Lease Time : 192.168.0.100 : 192.168.0.
PAGE 26
8-30 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.dhcp)> set Description: Sets DHCP parameters for the LAN port. Syntax: set range lease Sets the DHCP assignment range from IP address to IP address for the specified LAN. Sets the DHCP lease time in seconds (1-999999) for the specified LAN. Example: admin(network.lan.dhcp)>set range 1 192.168.0.100 192.168.0.254 admin(network.lan.dhcp)>set lease 1 86400 admin(network.
PAGE 27
Command Line Interface Reference 8-31 AP51xx>admin(network.lan.dhcp)> add Description: Adds static DHCP address assignments. Syntax: add Adds a reserved static IP address to a MAC address for the specified LAN. Example: admin(network.lan.dhcp)>add 1 00A0F8112233 192.160.24.6 admin(network.lan.dhcp)>add 1 00A0F1112234 192.169.24.7 admin(network.lan.
PAGE 28
8-32 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.dhcp)> delete Description: Deletes static DHCP address assignments. Syntax: delete all Deletes the static DHCP address entry for the specified LAN. Deletes all static DHCP addresses. Example: admin(network.lan.
PAGE 29
Command Line Interface Reference 8-33 AP51xx>admin(network.lan.dhcp)> list Description: Lists static DHCP address assignments. Syntax: list Lists the static DHCP address assignments for the specified LAN. Example: admin(network.lan.dhcp)>list 1 ----------------------------------------------------------------------------Index MAC Address IP Address ----------------------------------------------------------------------------1 00A0F8112233 10.1.2.4 2 00A0F8102030 10.10.1.
PAGE 30
8-34 AP-51xx Access Point Product Reference Guide 8.3.1.4 Network Type Filter Commands AP51xx>admin(network.lan.type-filter)> Description: Displays the access point Type Filter submenu. The items available under this command include: e show set add delete .. / save quit Displays the current Ethernet Type exception list. Defines Ethernet Type Filter parameters. Adds an Ethernet Type Filter entry. Removes an Ethernet Type Filter entry. Goes to the parent menu. Goes to the root menu.
PAGE 31
Command Line Interface Reference 8-35 AP51xx>admin(network.lan.type-filter)> show Description: Displays the access point’s current Ethernet Type Filter configuration. Syntax: show Displays the existing Type-Filter configuration for the specified LAN. Example: admin(network.lan.
PAGE 32
8-36 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.type-filter)> set Description: Defines the access point Ethernet Type Filter configuration. Syntax: set mode allow or deny Allows or denies the access point from processing a specified Ethernet data type for the specified LAN. Example: admin(network.lan.type-filter)>set mode 1 allow For information on configuring the type filter settings using the applet (GUI), see Setting the Type Filter Configuration on page 5-13.
PAGE 33
Command Line Interface Reference 8-37 AP51xx>admin(network.lan.type-filter)> add Description: Adds an Ethernet Type Filter entry. Syntax: add Adds entered Ethernet Type to list of data types either allowed or denied access point processing permissions for the specified LAN. Example: admin(network.lan.type-filter)> admin(network.wireless.type-filter)>add 1 8137 admin(network.wireless.type-filter)>add 2 0806 admin(network.wireless.
PAGE 34
8-38 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.lan.type-filter)> delete Description: Removes an Ethernet Type Filter entry individually or the entire Type Filter list. Syntax: delete all Deletes the specified Ethernet Type index entry (1 through 16). Deletes all Ethernet Type entries currently in list. Example: admin(network.lan.type-filter)>delete 1 1 admin(network.lan.
PAGE 35
Command Line Interface Reference 8-39 8.3.2 Network WAN Commands AP51xx>admin(network.wan)> Description: Displays the WAN submenu. The items available under this command are shown below. show set nat vpn content .. / save quit Displays the access point WAN configuration and the access point’s current PPPoE configuration. Defines the access point’s WAN and PPPoE configuration. Displays the NAT submenu, wherein Network Address Translations (NAT) can be defined.
PAGE 36
8-40 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan)> show Description: Displays the access point WAN port parameters. Syntax: show Shows the general IP parameters for the WAN port along with settings for the WAN interface.. Example: admin(network.wan)>show Status : enable WAN DHCP Client Mode : disable IP address : 0.0.0.0 Network Mask : 0.0.0.0 Default Gateway : 10.10.1.1 Primary DNS Server : 0.0.0.0 Secondary DNS Server : 0.0.0.
PAGE 37
Command Line Interface Reference 8-41 AP51xx>admin(network.wan)> set Description: Defines the configuration of the access point WAN port. Syntax: set wan dhcp ipadr enable/disable enable/disable mask dgw dns pppoe mode user passwd ka idle type enable/disable enable/disable Enables or disables the access point WAN port. Enables or disables WAN DHCP Client mode.
PAGE 38
8-42 AP-51xx Access Point Product Reference Guide 8.3.2.1 Network WAN NAT Commands AP51xx>admin(network.wan.nat)> Description: Displays the NAT submenu. The items available under this command are shown below. show set add delete list .. / save quit Displays the access point’s current NAT parameters for the specified index. Defines the access point NAT settings. Adds NAT entries. Deletes NAT entries. Lists NAT entries. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash.
PAGE 39
Command Line Interface Reference 8-43 AP51xx>admin(network.wan.nat)> show Description: Displays access point NAT parameters. Syntax: show Displays access point NAT parameters for the specified NAT index. Example: admin(network.wan.nat)>show 2 WAN IP Mode : disable WAN IP Address : 157.235.91.2 NAT Type : 1-to-many One to many nat mapping : LAN1 LAN2 Inbound Mappings : Port Forwarding unspecified port forwarding mode : enable unspecified port fwd. ip address : 111.223.222.
PAGE 40
8-44 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan.nat)> set Description: Sets NAT inbound and outbound parameters. Syntax: set type ip inb outb mode enable/disable unspec-ip Sets the type of NAT translation for WAN address index (1-8) to (none, 1-to-1, or 1-to-many). Sets NAT IP mapping associated with WAN address to the specified IP address . Sets inbound NAT parameters.
PAGE 41
Command Line Interface Reference 8-45 AP51xx>admin(network.wan.nat)> add Description: Adds NAT entries.
PAGE 42
8-46 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan.nat)> delete Description: Deletes NAT entries. Syntax: delete all Deletes a specified NAT index entry associated with the WAN. Deletes all NAT entries associated with the WAN. Example: admin(network.wan.
PAGE 43
Command Line Interface Reference 8-47 AP51xx>admin(network.wan.nat)> list Description: Lists access point NAT entries for the specified index. Syntax: list Lists the inbound NAT entries associated with WAN port. Example: admin(network.wan.
PAGE 44
8-48 AP-51xx Access Point Product Reference Guide 8.3.2.2 Network WAN, VPN Commands AP51xx>admin(network.wan.vpn)> Description: Displays the VPN submenu. The items available under this command include: add set delete list reset stats ikestate .. / save quit Adds VPN tunnel entries. Sets key exchange parameters. Deletes VPN tunnel entries. Lists VPN tunnel entries Resets all VPN tunnels. Lists security association status for the VPN tunnels. Displays an Internet Key Exchange (IKE) summary.
PAGE 45
Command Line Interface Reference 8-49 AP51xx>admin(network.wan.vpn)> add Description: Adds a VPN tunnel entry. Syntax: add Creates a tunnel (1 to 13 characters) to gain access through local WAN IP from the remote subnet with address and subnet mask using the remote gateway . Example: admin(network.wan.vpn)>add 2 SJSharkey 209.235.44.31 206.107.22.46 255.255.255.224 206.107.22.
PAGE 46
8-50 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan.vpn)> set Description: Sets VPN entry parameters. Syntax: set type Sets the tunnel type to Auto or Manual for the specified tunnel name. authalgo Sets the authentication algorithm for to (None, MD5, or SHA1).
PAGE 47
Command Line Interface Reference 8-51 salife Defines the name of the tunnnel the Security Association Life Time <300-65535> applies to in seconds. ike opmode Sets the Operation Mode of IKE for to Main or Aggr(essive). myidtype Sets the Local ID type for IKE authentication for (1 to 13 characters) to (IP, FQDN, or UFQDN).
PAGE 48
8-52 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan.vpn)> delete Description: Deletes VPN tunnel entries. Syntax: delete all Deletes all VPN entries. Deletes VPN entries . Example: admin(network.wan.vpn)>list -------------------------------------------------------------------------Tunnel Name Type Remote IP/Mask Remote Gateway Local WAN IP -------------------------------------------------------------------------Eng2EngAnnex Manual 192.168.32.2/24 192.168.33.
PAGE 49
Command Line Interface Reference 8-53 AP51xx>admin(network.wan.vpn)> list Description: Lists VPN tunnel entries. Syntax: list Lists all tunnel entries. Lists detailed information about tunnel named . Note that the must match case with the name of the VPN tunnel entry Example: admin(network.wan.
PAGE 50
8-54 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan.vpn)> reset Description: Resets all of the access point’s VPN tunnels. Syntax: reset Resets all VPN tunnels. Example: admin(network.wan.vpn)>reset VPN tunnels reset. admin(network.wan.vpn)> For information on configuring VPN using the applet (GUI), see Configuring VPN Tunnels on page 6-33.
PAGE 51
Command Line Interface Reference 8-55 AP51xx>admin(network.wan.vpn)> stats Description: Lists statistics for all active tunnels. Syntax: stats Display statistics for all VPN tunnels. Example: admin(network.wan.
PAGE 52
8-56 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wan.vpn)> ikestate Description: Displays statistics for all active tunnels using Internet Key Exchange (IKE). Syntax: ikestate Displays status about Internet Key Exchange (IKE) for all tunnels. In particular, the table indicates whether IKE is connected for any of the tunnels, it provides the destination IP address, and the remaining lifetime of the IKE key. Example: admin(network.wan.
PAGE 53
Command Line Interface Reference 8-57 8.3.3 Network Wireless Commands AP51xx>admin(network.wireless) Description: Displays the access point wireless submenu. The items available under this command include: wlan security Displays the WLAN submenu used to create and configure up to 16 WLANs per access point. Displays the security submenu used to create encryption and authentication based security policies for use with access point WLANs.
PAGE 54
8-58 AP-51xx Access Point Product Reference Guide 8.3.3.1 Network WLAN Commands AP51xx>admin(network.wireless.wlan)> Description: Displays the access point wireless LAN (WLAN) submenu. The items available under this command include: e show create edit delete hotspot .. / save quit Displays the access point’s current WLAN configuration. Defines the parameters of a new WLAN. Modifies the properties of an existing WLAN. Deletes an existing WLAN. Displays the WLAN hotspot menu. Goes to the parent menu.
PAGE 55
Command Line Interface Reference 8-59 AP51xx>admin(network.wireless.wlan)> show Description: Displays the access point’s current WLAN configuration. Syntax: show summary wlan Displays the current configuration for existing WLANs. Displays the configuration for the requested WLAN (WLAN 1 through 16). Example: admin(network.wireless.wlan)>show summary WLAN1 WLAN Name : Lobby ESSID : 101 Radio : 11a, 11b/g VLAN : Security Policy : Default QoS Policy : Default admin(network.wireless.
PAGE 56
8-60 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.wlan)> create Description: Defines the parameters of a new WLAN. Syntax: sh create show set wlan ess wlan-name 11a 11bg mesh hotspot max-mu security acl passwd no-mu-mu sbeacon bcast qos add-wlan .. Displays newly created WLAN and policy number. Defines the ESSID for a target WLAN.
PAGE 57
Command Line Interface Reference 8-61 Accept Broadcast ESSID : disable QoS Policy : Default admin(network.wireless.wlan.create)>show security ---------------------------------------------------------------------Secu Policy Name Authen Encryption Associated WLANs ---------------------------------------------------------------------1 Default Manual no encrypt Front Lobby 2 WEP Demo Manual WEP 64 2nd Floor 3 Open Manual no encrypt 1st Floor admin(network.wireless.wlan.
PAGE 58
8-62 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.wlan)> edit Description: Edits the properties of an existing WLAN policy. Syntax: edit show set change .. Edits the properties of an existing WLAN policy. Displays the WLANs pamaters and summary. Edits the same WLAN parameters that can be modified using the create command. Completes the WLAN edits and exits the CLI session. Cancel the WLAN edits and exit the CLI session.
PAGE 59
Command Line Interface Reference 8-63 AP51xx>admin(network.wireless.wlan)> delete Description: Deletes an existing WLAN. Syntax: delete Deletes a target WLAN by name supplied. all Deletes all WLANs defined. For information on deleting a WLAN using the applet (GUI), see Creating/Editing Individual WLANs on page 5-24.
PAGE 60
8-64 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.wlan.hotspot)> Description: Displays the Hotspot submenu. The items available under this command include: e show redirection radius white-list save quit .. / Show hotspot parameters. Goes to the hotspot redirection menu. Goes to the hotspot Radius menu. Goes to the hotspot white-list menu. Saves the configuration to system flash. Quits the CLI. Goes to the parent menu. Goes to the root menu.
PAGE 61
Command Line Interface Reference 8-65 AP51xx>admin(network.wireless.wlan.hotspot)> show Description: Displays the current access point Rogue AP detection configuration. Syntax: show hotspot Shows hotspot parameters per wlan index (1-16). Example: admin(network.wireless.wlan.hotspot)>show hotspot 1 WLAN1 Hotspot Mode : enable Hotspot Page Location : default External Login URL : www.sjsharkey.com External Welcome URL : External Fail URL : Primary Server Ip adr :157.235.21.
PAGE 62
8-66 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.wlan.hotspot)> redirection Description: Goes to the hotspot redirection menu. Syntax: redirection set show save quit .. / Sets the hotspot http-re-direction by index (1-16) for the specified URL. Shows hotspot http-redirection details for specifiec index (1-16) for specified page (login, welcome, fail) and target URL.. Shows hotspot http-redirection details.
PAGE 63
Command Line Interface Reference 8-67 AP51xx>admin(network.wireless.wlan.hotspot)> radius Description: Goes to the hotspot Radius menu. Syntax: set show save quit .. / Sets the Radius hotspot configuration. Shows Radius hotspot server details. Saves the configuration to system flash. Quits the CLI. Goes to the parent menu. Goes to the root menu. For information on configuring the Hotspot options available to the access point using the applet (GUI), see Configuring WLAN Hotspot Support on page 5-39.
PAGE 64
8-68 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.wlan.hotspot.radius)> set Description: Sets the Radius hotspot configuration.
PAGE 65
Command Line Interface Reference 8-69 AP51xx>admin(network.wireless.wlan.hotspot.radius)> show Description: Shows Radius hotspot server details. Syntax: show radius Displays Radius hotspot server details per index (1-16) Example: admin(network.wireless.wlan.hotspot.radius)>show radius 1 Primary Server Ip adr : 157.235.12.12 Primary Server Port : 1812 Primary Server Secret : ****** Secondary Server Ip adr : 0.0.0.
PAGE 66
8-70 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.wlan.hotspot)> white-list Description: Goes to the hotspot white-list menu. Syntax: white-list add clear show save quit .. / Adds hotspot whitelist rules by index (1-16) for specified IP address. Clears hotspot whitelist rules for specified index (1-16). Shows hotspot whitelist rules for specified index (1-16). Saves the updated hotspot configuration to flash memory. Quits the CLI session. Goes to the parent menu.
PAGE 67
Command Line Interface Reference 8-71 8.3.3.2 Network Security Commands AP51xx>admin(network.wireless.security)> Description: Displays the access point wireless security submenu. The items available under this command include: show create edit delete .. / save quit Displays the access point’s current security configuration. Defines the parameters of a security policy. Edits the properties of an existing security policy. Removes a specific security policy. Goes to the parent menu. Goes to the root menu.
PAGE 68
8-72 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.security)> show Description: Displays the access point’s current security configuration. Syntax: show summary policy Displays list of existing security policies (1-16). Displays the specified security policy . Example: admin(network.wireless.
PAGE 69
Command Line Interface Reference 8-73 AP51xx>admin(network.wireless.security)> create Description: Defines the parameter of access point security policies.
PAGE 70
8-74 AP-51xx Access Point Product Reference Guide Syntax: create Defines the parameters of a security policy. show set Displays new or existing security policy parameters. sec-name Sets the name of the security policy. auth Sets the authentication type for WLAN to (none, eap, or kerberos). Note: Kerberos parameters are only in affect if "kerberos" is specified for the authentication method (set auth ). kerb realm Sets the Kerberos realm.
PAGE 71
Command Line Interface Reference 8-75 accounting adv retry Sets the maximum number of reauthentication retries (1-99). mode Enable or disable Radius accounting. server port secret timeout Set external Radius server IP address. Set external Radius server port number. Set external Radius server shared secret password. Defines MU timout period in seconds (1-255). retry Sets the maximum number of MU retries to (1-10).
PAGE 72
8-76 AP-51xx Access Point Product Reference Guide weppasskey keyguard The passkey used as a text abbreviation for the entire key length (4-32). index Selects the WEP/KeyGuard key (from one of the four potential values of (1-4). hex-key Sets the WEP/KeyGuard key for key index (1-4) for WLAN to . ascii-key Sets the WEP/KeyGuard key for key index (1-4) for WLAN to .
PAGE 73
Command Line Interface Reference 8-77 preauth Enables or disables preauthentication (fast roaming). add-policy Adds the policy and exits. .. Disregards the policy creation and exits the CLI session. For information on configuring the encryption and authentication options available to the access point using the applet (GUI), see Configuring Security Options on page 6-2.
PAGE 74
8-78 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.security.edit)> Description: Edits the properties of a specific security policy. Syntax: show set change .. Displays the new or modified security policy parameters. Edits security policy parameters. Completes policy changes and exits the session. Cancels the changes made and exits the session. Example: admin(network.wireless.security)>edit 1 admin(network.wireless.security.
PAGE 75
Command Line Interface Reference 8-79 AP51xx>admin(network.wireless.security)> delete Description: Deletes a specific security policy. Syntax: delete Removes the specified security policy for the list supported. Removes all security policies except the default policy. For information on configuring the encryption and authentication options available to the access point using the applet (GUI), see Configuring Security Options on page 6-2.
PAGE 76
8-80 AP-51xx Access Point Product Reference Guide 8.3.3.3 Network ACL Commands AP51xx>admin(network.wireless.acl)> Description: Displays the access point Mobile Unit Access Control List (ACL) submenu. The items available under this command include: show create edit delete .. / save quit Displays the access point’s current ACL configuration. Creates an MU ACL policy. Edits the properties of an existing MU ACL policy. Removes an MU ACL policy. Goes to the parent menu. Goes to the root menu.
PAGE 77
Command Line Interface Reference 8-81 AP51xx>admin(network.wireless.acl)> show Description: Displays the access point’s current ACL configuration. Syntax: show summary policy Displays the list of existing MU ACL policies. Displays the requested MU ACL index policy. Example: admin(network.wireless.
PAGE 78
8-82 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.acl)> create Description: Creates an MU ACL policy. Syntax: create show set add-addr delete add-policy .. acl-name mode Displays the parameters of a new ACL policy. Sets the MU ACL policy name. Sets the ACL mode for the defined index (1-16). Allowed MUs can access the access point managed LAN. Options are deny and allow. Adds specified MAC address to list of ACL MAC addresses.
PAGE 79
Command Line Interface Reference 8-83 AP51xx>admin(network.wireless.acl.edit)> Description: Edits the properties of an existing MU ACL policy. Syntax: show set add-addr delete change .. Displays MU ACL policy and its parameters. Modifies the properties of an existing MU ACL policy. Adds an MU ACL table entry. Deletes an MU ACL table entry, including starting and ending MAC address ranges. Completes the changes made and exits the session. Cancels the changes made and exits the session.
PAGE 80
8-84 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.acl)> delete Description: Removes an MU ACL policy. Syntax: delete all Deletes a partilcular MU ACL policy. Deletes all MU ACL policies. For information on configuring the ACL options available to the access point using the applet (GUI), see Configuring a WLAN Access Control List (ACL) on page 5-30.
PAGE 81
Command Line Interface Reference 8-85 8.3.3.4 Network Radio Configuration Commands AP51xx>admin(network.wireless.radio)> Description: Displays the access point Radio submenu. The items available under this command include: e show set radio1 radio2 .. / save quit Summarizes access point radio parameters at a high-level. Defines the access point radio configuration. Displays the 802.11b/g radio submenu. Displays the 802.11a radio submenu. Goes to the parent menu. Goes to the root menu.
PAGE 82
8-86 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio)> show Description: Displays the access point’s current radio configuration. Syntax: show Displays the access point’s current radio configuration. Example: admin(network.wireless.radio)>show Radio Configuration Radio 1 Name : Radio 1 Radio Mode : enable RF Band of Operation : 802.11b/g (2.
PAGE 83
Command Line Interface Reference 8-87 AP51xx>admin(network.wireless.radio)> set Description: Enables an access point Radio and defines the RF band of operation. Syntax: set 11a 11bg mesh-base mesh-max mesh-client mesh-wlan Enables or disables the access point’s 802.11a radio. Enables or disables the access point’s 802.11b/g radio. Enables or disables base bridge mode. Sets the maximum number of wireless bridge clients. Enables or Disables client bridge mode.
PAGE 84
8-88 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio.radio1)> Description: Displays a specific 802.11b/g radio submenu. The items available under this command include: Syntax: show set advanced mesh .. / save quit Displays 802.11b/g radio settings. Defines specific 802.11b/g radio parameters. Displays the Adavanced radio settings submenu. Goes to the Wireless AP Connections submenu. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash.
PAGE 85
Command Line Interface Reference 8-89 AP51xx>admin(network.wireless.radio.radio1)> show Description: Displays specific 802.11b/g radio settings. Syntax: show radio qos Displays specific 802.11b/g radio settings. Displays specific 802.11b/g radio WMM QoS settings. Example: admin(network.wireless.radio.radio1)>show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.
PAGE 86
8-90 AP-51xx Access Point Product Reference Guide admin(network.wireless.radio.radio1)>show qos Radio QOS Parameter Set 11g-default ----------------------------------------------------------------------------Access Category CWMin CWMax AIFSN TXOPs (32 usec) TXOPs ms ----------------------------------------------------------------------------Background 15 1023 7 0 0.000 Best Effort 15 63 3 31 0.992 Video 7 15 1 94 3.008 Voice 3 7 1 47 1.
PAGE 87
Command Line Interface Reference 8-91 AP51xx>admin(network.wireless.radio.802-11bg)> set Description: Defines specific 802.11b/g radio parameters. Syntax: set placement Defines the access point radio placement as indoors or outdoors. ch-mode Determines how the radio channel is selected. channel Defines the actual channel used by the radio. antenna Sets the radio antenna power power Defines the radio antenna power transmit level. bg-mode Enables or disables 802-11bg radio mode support.
PAGE 88
8-92 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio.802-11bg.advanced)> Description: Displays the advanced submenu for the 802.11b/g radio. The items available under this command include: Syntax: show set .. / save quit Displays advanced radio settings for the 802.11b/g radio. Defines advanced parameters for the 802.11b/g radio. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 89
Command Line Interface Reference 8-93 AP51xx>admin(network.wireless.radio.802-11bg.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802.11b/g radio. Syntax: show advanced wlan Displays advanced settings for the 802.11b/g radio. Displays WLAN summary list for the 802.11b/g radio. Example: admin(network.wireless.radio.802-11bg.
PAGE 90
8-94 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio.802-11bg.advanced)> set Description: Defines advanced parameters for the target 802.11b/g radio. Syntax: set wlan bss Defines advanced WLAN to BSSID mapping for the target radio. Sets the BSSID to primary WLAN definition. Example: admin(network.wireless.radio.802-11bg.advanced)>set wlan demoroom 1 admin(network.wireless.radio.802-11bg.
PAGE 91
Command Line Interface Reference 8-95 AP51xx>admin(network.wireless.radio.radio2)> Description: Displays a specific 802.11a radio submenu. The items available under this command include: Syntax: show set advanced mesh .. / save quit Displays 802.11a radio settings Defines specific 802.11a radio parameters. Displays the Advanced radio settings submenu. Goes to the Wireless AP Connections submenu. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 92
8-96 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio.802-11a)> show Description: Displays specific 802.11a radio settings. Syntax: show radio qos Displays specific 802.11a radio settings. Displays specific 802.11a radio WMM QoS settings. Example: admin(network.wireless.radio.802-11a)>show radio Radio Setting Information Placement : indoor MAC Address : 00A0F8715920 Radio Type : 802.
PAGE 93
Command Line Interface Reference 8-97 admin(network.wireless.radio.802-11a)>show qos Radio QOS Parameter Set: 11a default ----------------------------------------------------------------------------Access Category CWMin CWMax AIFSN TXOPs (32 sec) TXOPs ms ----------------------------------------------------------------------------Background 15 1023 7 0 0.000 Best Effort 15 63 3 31 0.992 Video 7 15 1 94 3.008 Voice 3 7 1 47 1.
PAGE 94
8-98 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio.802-11a)> set Description: Defines specific 802.11a radio parameters. Syntax: set placement Defines the access point radio placement as indoors or outdoors. ch-mode Determines how the radio channel is selected. channel Defines the actual channel used by the radio. antenna Sets the radio antenna power. power Defines the radio antenna power transmit level. rates Sets the supported radio transmit rates.
PAGE 95
Command Line Interface Reference 8-99 AP51xx>admin(network.wireless.radio.802-11a.advanced)> Description: Displays the advanced submenu for the 802-11a radio. The items available under this command include: Syntax: show set .. / save quit Displays advanced radio settings for the 802-11a radio. Defines advanced parameters for the 802-11a radio. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 96
8-100 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.radio.802-11a.advanced)> show Description: Displays the BSSID to WLAN mapping for the 802.11a radio. Syntax: show advanced wlan Displays advanced settings for the 802.11a radio. Displays WLAN summary list for 802.11a radio. Example: admin(network.wireless.radio.802-11a.
PAGE 97
Command Line Interface Reference 8-101 AP51xx>admin(network.wireless.radio.802-11a.advanced)> set Description: Defines advanced parameters for the target 802..11a radio. Syntax: set wlan bss Defines advanced WLAN to BSSID mapping for the target radio. Sets the BSSID to primary WLAN definition. Example: admin(network.wireless.radio.802-11a.advanced)>set wlan demoroom 1 admin(network.wireless.radio.802-11a.
PAGE 98
8-102 AP-51xx Access Point Product Reference Guide 8.3.3.5 Network Quality of Service (QoS) Commands AP51xx>admin(network.wireless.qos)> Description: Displays the access point Quality of Service (QoS) submenu. The items available under this command include: e show create edit delete .. / save quit Displays access point QoS policy information. Defines the parameters of the QoS policy. Edits the settings of an existing QoS policy. Removes an existing QoS policy. Goes to the parent menu.
PAGE 99
Command Line Interface Reference 8-103 AP51xx>admin(network.wireless.qos)> show Description: Displays the access point’s current QoS policy by summary or individual policy. Syntax: show summary policy Displays all exisiting QoS policies that have been defined. Displays the configuration for the requested QoS policy. Example: admin(network.wireless.
PAGE 100
8-104 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.qos.create)> Description: Defines an access point QoS policy. Syntax: show set qos-name vop mcast wmm-qos param-set cwmin cwmax aifsn txops default add-policy .. Displays QoS policy parameters. Sets the QoS name for the specified index entry.
PAGE 101
Command Line Interface Reference 8-105 AP51xx>admin(network.wireless.qos.edit)> Descripton: Edits the properties of an existing QoS policy. Syntax: show set qos-name vop mcast wmm-qos param-set cwmin cwmax aifsn txops default change .. Displays QoS policy parameters. Sets the QoS name for the specified index entry.
PAGE 102
8-106 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.qos)> delete Description: Removes a QoS policy. Syntax: delete Deletes the specified QoS polciy index, or all of the policies. For information on configuring the WLAN QoS options available to the access point using the applet (GUI), see Setting the WLAN Quality of Service (QoS) Policy on page 5-33.
PAGE 103
Command Line Interface Reference 8-107 8.3.3.6 Network Bandwith Management Commands AP51xx>admin(network.wireless.bandwidth)> Description: Displays the access point Bandwidth Management submenu. The items available under this command include: e show set .. / save quit Displays Bandwidth Management information for how data is processed by the access point. Defines Bandwidth Management parameters for the access point. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash.
PAGE 104
8-108 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.bandwidth)> show Description: Displays the access point’s current Bandwidth Management configuration. Syntax: show Displays the current Bandwidth Management configuration for defined WLANs and how they are weighted. Example: admin(network.wireless.
PAGE 105
Command Line Interface Reference 8-109 AP51xx>admin(network.wireless.bandwidth)> set Description: Defines the access point Bandwidth Management configuration. Syntax: set mode weight Defines bandwidth share mode of First In First Out , Round Robin or Weighted Round Robin Assigns a bandwidth share allocation for the WLAN when Weighted Round Robin is selected. The weighting is from 1-10.
PAGE 106
8-110 AP-51xx Access Point Product Reference Guide 8.3.3.7 Network Rogue-AP Commands AP51xx>admin(network.wireless.rogue-ap)> Description: Displays the Rogue AP submenu. The items available under this command include: e show set mu-scan allowed-list active-list rogue-list .. / save quit Displays the current access point Rogue AP detection configuration. Defines the Rogue AP detection method. Goes to the Rogue AP mu-uscan submenu. Goes to the Rogue AP Allowed List submenu.
PAGE 107
Command Line Interface Reference 8-111 AP51xx>admin(network.wireless.rogue-ap)> show Description: Displays the current access point Rogue AP detection configuration. Syntax: show Displays the current access point Rogue AP detection configuration. Example: admin(network.wireless.
PAGE 108
8-112 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.rogue-ap)> set Description: Defines the access point ACL rogue AP method. Syntax: set mu-scan interval on-channel detector-scan symbol-ap applst-ageout roglst-ageout Enables or disables to permit MUs to scan for rogue APs. Define an interval for associated MUs to beacon in attempting to locate rogue APs. Value not available unless mu-scan is enabled.
PAGE 109
Command Line Interface Reference 8-113 AP51xx>admin(network.wireless.rogue-ap.mu-scan)> Description: Displays the Rogue-AP mu-scan submenu. Syntax: show start .. / save quit Displays all APs located by the MU scan. Initiates scan immediately by the MU. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 110
8-114 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.rogue-ap.mu-scan)> start Description: Initiates an MU scan from a user provided MAC address. Syntax: start Initiates MU scan from user provided MAC address. For information on configuring the Rogue AP options available to the access point using the applet (GUI), see Configuring Rogue AP Detection on page 6-52.
PAGE 111
Command Line Interface Reference 8-115 AP51xx>admin(network.wireless.rogue-ap.mu-scan)> show Description: Displays the results of an MU scan. Syntax: show Displays all APs located by the MU scan. For information on configuring the Rogue AP options available to the access point using the applet (GUI), see Configuring Rogue AP Detection on page 6-52.
PAGE 112
8-116 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.rogue-ap.allowed-list)> Description: Displays the Rogue-AP allowed-list submenu. show add delete .. / save quit Displays the rogue AP allowed list Adds an AP MAC address and ESSID to the allowed list. Deletes an entry or all entries from the allowed list. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 113
Command Line Interface Reference 8-117 AP51xx>admin(network.wireless.rogue-ap.allowed-list)> show Description: Displays the Rogue AP allowed List. Syntax: show Displays the rogue-AP allowed list. Example: admin(network.wireless.rogue-ap.
PAGE 114
8-118 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.wireless.rogue-ap.allowed-list)> add Description: Adds an AP MAC address and ESSID to existing allowed list. Syntax: add Adds an AP MAC address and ESSID to existing allowed list. Use a “*” for any ESSID. Example: admin(network.wireless.rogue-ap.allowed-list)>add 00A0F83161BB 103 admin(network.wireless.rogue-ap.
PAGE 115
Command Line Interface Reference 8-119 AP51xx>admin(network.wireless.rogue-ap.allowed-list)> delete Description: Deletes an AP MAC address and ESSID to existing allowed list. Syntax: delete Deletes an AP MAC address and ESSID (or all addresses) from the allowed list. For information on configuring the Rogue AP options available to the access point using the applet (GUI), see Configuring Rogue AP Detection on page 6-52.
PAGE 116
8-120 AP-51xx Access Point Product Reference Guide 8.3.4 Network Firewall Commands AP51xx>admin(network.firewall)> Description: Displays the access point firewall submenu. The items available under this command include: show set access advanced .. / save quit Displays the access point’s current firewall configuration. Defines the access point’s firewall parameters. Enables/disables firewall permissions through the LAN and WAN ports. Displays interoperaility rules between the LAN and WAN ports.
PAGE 117
Command Line Interface Reference 8-121 AP51xx>admin(network.firewall)> show Description: Displays the access point firewall parameters. Syntax: show Shows all access point’s firewall settings. Example: admin(network.
PAGE 118
8-122 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.firewall)> set Description: Defines the access point firewall parameters. Syntax: set mode nat-timeout syn src win ftp ip seq mime len hdr filter Enables or disables the firewall. Defines the NAT timeout value. Enables or disables SYN flood attack check. Enables or disables source routing check. Enables or disables Winnuke attack check.
PAGE 119
Command Line Interface Reference 8-123 AP51xx>admin(network.firewall)> access Description: Enables or disables firewall permissions through LAN to WAN ports. Syntax: show set add delete list .. / save quit Displays LAN to WAN access rules. Sets LAN to WAN access rules. Adds LAN to WAN exception rules. Deletes LAN to WAN access exception rules. Displays LAN to WAN access exception rules. Goes to parent menu Goes to root menu. Saves configuration to system flash. Quits and exits the CLI session.
PAGE 120
8-124 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.firewall)> advanced Description: Displays whether an access point firewall rule is intended for inbound traffic to an interface or outbound traffic from that interface.. Syntax: show set import inbound outbound .. / save quit Shows advanced subnet access parameters. Sets advanced subnet access parameters. Imports rules from subnet access. Goes to the Inbound Firewall Rules submenu. Goes to the Outbound Firewall Rules submenu.
PAGE 121
Command Line Interface Reference 8-125 8.3.5 Network Router Commands AP51xx>admin(network.router)> Description: Displays the router submenu. The items available under this command are: show set add delete list .. / save quit Displays the existing access point router configuration. Sets the RIP parameters. Adds user-defined routes. Deletes user-defined routes. Lists user-defined routes. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 122
8-126 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.router)> show Description: Shows the access point route table. Syntax: show Shows the access point route table. Example: admin(network.router)>show routes ---------------------------------------------------------------------------index destination netmask gateway interface metric ---------------------------------------------------------------------------1 192.168.2.0 255.255.255.0 0.0.0.0 lan1 0 2 192.168.1.0 255.255.255.0 0.0.0.
PAGE 123
Command Line Interface Reference 8-127 AP51xx>admin(network.router)> set Description: Shows the access point route table. Syntax: set auth dir id key passwd type dgw-iface Sets the RIP authentication type. Sets RIP direction. Sets MD5 authetication ID. Sets MD5 authetication key. Sets the password for simple authentication. Defines the RIP type. Sets the default gateway interface.
PAGE 124
8-128 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.router)> add Description: Adds user-defined routes. Syntax: add Adds a route with destination IP address , IP netmask , destination gateway IP address , interface LAN1, LAN2 or WAN , and metric set to (1-15). Example: admin(network.router)>add 192.168.3.0 255.255.255.0 192.168.2.1 LAN 1 1 admin(network.
PAGE 125
Command Line Interface Reference 8-129 AP51xx>admin(network.router)> delete Description: Deletes user-defined routes. Syntax: delete all Deletes the user-defined route (1-20) from list. Deletes all user-defined routes. Example: admin(network.router)>list ---------------------------------------------------------------------------index destination netmask gateway interface metric ---------------------------------------------------------------------------1 192.168.2.0 255.255.255.0 192.168.0.
PAGE 126
8-130 AP-51xx Access Point Product Reference Guide AP51xx>admin(network.router)> list Description: Lists user-defined routes. Syntax: list Displays a list of user-defined routes. Example: admin(network.router)>list ---------------------------------------------------------------------------index destination netmask gateway interface metric ---------------------------------------------------------------------------1 192.168.2.0 255.255.255.0 192.168.0.1 lan1 1 2 192.168.1.0 255.255.255.0 0.0.0.
PAGE 127
Command Line Interface Reference 8-131 8.4 System Commands AP51xx>admin(system)> Description: Displays the System submenu. The items available under this command are shown below. restart show set debug lastpw exec access cmgr snmp ntp logs config fw-update .. / save quit Restarts the access point. Shows access point system parameter settings. Defines access point system parameter settings. Accesses access point password-protected debug information. Displays last debug password.
PAGE 128
8-132 AP-51xx Access Point Product Reference Guide AP51xx>admin(system)>restart Description: Restarts the access point access point. Syntax: restart Restarts the access point. Example: admin(system)>restart ********************************WARNING*********************************** ** Unsaved configuration changes will be lost when the access point is reset. ** Please be sure to save changes before resetting.
PAGE 129
Command Line Interface Reference 8-133 AP51xx>admin(system)>show Description: Displays high-level access point system information. Syntax: show Displays access point system information. Example: admin(system)>show system name : BldgC system location : Atlanta Field Office admin email address : johndoe@mycompany.com system uptime : 0 days 4 hours 41 minutes access point firmware version : 1.1.0.
PAGE 130
8-134 AP-51xx Access Point Product Reference Guide AP51xx>admin(system)>set Description: Sets access point system parameters. Syntax: ? set name loc email cc Sets the access point system name to (1 to 59 characters). The access point does not allow intermediate space characters between characters within the system name. For example, “AP51xx sales” must be changed to “AP51xxsales” to be a valid system name.
PAGE 131
Command Line Interface Reference 8-135 8.4.1 System Debug and Last Password Commands AP51xx>admin(system)>debug Description: Accesses access point debug information. This information is designed for field service use only, and should not be used by unqualified personnel. Example: admin(system)>debug Debug Password: access point MAC Address is 00:A0:F8:71:6A:74 Last Password was symbol12 AP51xx>admin(system)>lastpw Description: Displays the last debug password.
PAGE 132
8-136 AP-51xx Access Point Product Reference Guide 8.4.2 System Access Commands AP51xx>admin(system)>access Description: Displays the access point access submenu. show set .. / save quit Displays access point system access capabilities. Goes to the access point system access submenu. Goes to the parent menu. Goes to the root menu. Saves the current configuration to the access point system flash. Quits the CLI and exits the current session.
PAGE 133
Command Line Interface Reference 8-137 AP51xx>admin(system.access)>set Description: Defines the permissions to access the access point applet, CLI, SNMP as well as defining their timeout values. Syntax: set applet app-timeout cli ssh auth-timout inactivetimeout snmp admin-auth server port secret local/ RADIUS Defines the applet HTTP/HTTPS access parameters. Sets the applet timeout. Default is 300 Mins. Defines CLI Telnet access parameters.
PAGE 134
8-138 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.access)>show Description: Displays the current access point access permissions and timeout values. Syntax: show Shows all of the current system access settings for the access point.. Example: admin(system.
PAGE 135
Command Line Interface Reference 8-139 8.4.3 System Certificate Management Commands AP51xx>admin(system)>cmgr Description: Displays the Certificate Manager submenu. The items available under this command include: genreq delself loadself listself loadca delca listca showreq delprivkey listprivkey expcert impcert .. / save quit Generates a Certificate Request. Deletes a Self Certificate. Loads a Self Certificate signed by CA. Lists the self certificate loaded. Loads trusted certificate from CA.
PAGE 136
8-140 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.cmgr)> genreq Description: Generates a certificate request. Syntax: genreq [-ou ] [-on ] [-cn ] ...
PAGE 137
Command Line Interface Reference 8-141 AP51xx>admin(system.cmgr)> delself Description: ) Deletes a self certificate. Syntax: delself Deletes the self certificate named . Example: admin(system.cmgr)>delself MyCert2 For information on configuring self certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10.
PAGE 138
8-142 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.cmgr)> loadself Description: Loads a self certificate signed by the Certificate Authority. Syntax: loadself Load the self certificate signed by the CA with name . For information on configuring self certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10.
PAGE 139
Command Line Interface Reference 8-143 AP51xx>admin(system.cmgr)> listself Description: Lists the loaded self certificates. Syntax: listself Lists all self certificates that are loaded. For information on configuring self certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10.
PAGE 140
8-144 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.cmgr)> loadca Description: Loads a trusted certificate from the Certificate Authority. Syntax: loadca Loads the trusted certificate (in PEM format) that is pasted into the command line. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 141
Command Line Interface Reference 8-145 AP51xx>admin(system.cmgr)> delca Description: Deletes a trusted certificate. Syntax: delca Deletes the trusted certificate. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 142
8-146 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.cmgr)> listca Description: Lists the loaded trusted certificate. Syntax: listca Lists the loaded trusted certificates. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 143
Command Line Interface Reference 8-147 AP51xx>admin(system.cmgr)> showreq Description: Displays a certificate request in PEM format. Syntax: showreq Displays a certificate request named generated from the genreq command. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 144
8-148 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.cmgr)> delprivkey Description: Deletes a private key. Syntax: delprivkey Deletes private key named . For information on configuring certificate settings using the applet (GUI), see Creating Self Certificates for Accessing the VPN on page 4-10.
PAGE 145
Command Line Interface Reference 8-149 AP51xx>admin(system.cmgr)> listprivkey Description: Lists the names of private keys. Syntax: listprivkey Lists all private keys. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 146
8-150 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.cmgr)> expcert Description: Exports the certificaqte file. Syntax: expcert Exports the certificaqte file. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 147
Command Line Interface Reference 8-151 AP51xx>admin(system.cmgr)> impcert Description: Imports the target certificate file. Syntax: impcert Imports the target certificate file. For information on configuring certificate settings using the applet (GUI), see Importing a CA Certificate on page 4-8.
PAGE 148
8-152 AP-51xx Access Point Product Reference Guide 8.4.4 System SNMP Commands AP51xx>admin(system)> snmp Description: Displays the SNMP submenu. The items available under this command are shown below. access traps .. / save quit Goes to the SNMP access submenu. Goes to the SNMP traps submenu. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 149
Command Line Interface Reference 8-153 8.4.4.1 System SNMP Access Commands AP51xx>admin(system.snmp.access) Description: Displays the SNMP Access menu. The items available under this command are shown below. show add delete list .. / save quit Shows SNMP v3 engine ID. Adds SNMP access entries. Deletes SNMP access entries. Lists SNMP access entries. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 150
8-154 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.snmp.access)> show Description: Shows the SNMP v3 engine ID. Syntax: show eid Shows the SNMP v3 Engine ID. Example: admin(system.snmp.access)>show eid access point snmp v3 engine id : 000001846B8B4567F871AC68 admin(system.snmp.access)> For information on configuring SNMP access settings using the applet (GUI), see Configuring SNMP Access Control on page 4-22.
PAGE 151
Command Line Interface Reference 8-155 AP51xx>admin(system.snmp.access)> add Description: Adds SNMP access entries for specific v1v2 and v3 user definitions. Syntax: add acl v1v2c v3 Adds an entry to the SNMP access control list with as the starting IP address and and as the ending IP address.
PAGE 152
8-156 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.snmp.access)> delete Description: Deletes SNMP access entries for specific v1v2 and v3 user definitions. Syntax: delete acl v1v2c v3 all all all Deletes entry (1-10) from the access control list. Deletes all entries from the access control list. Deletes entry (1-10) from the v1/v2 configuration list. Deletes all entries from the v1/v2 configuration list.
PAGE 153
Command Line Interface Reference 8-157 AP51xx>admin(system.snmp.access)> list Description: Lists SNMP access entries. Syntax: list acl v1v2c v3 all Lists SNMP access control list entries. Lists SNMP v1/v2c configuration. Lists SNMP v3 user definition with index . Lists all SNMP v3 user definitions. Example: admin(system.snmp.
PAGE 154
8-158 AP-51xx Access Point Product Reference Guide 8.4.4.2 System SNMP Traps Commands AP51xx>admin(system.snmp.traps) Description: Displays the SNMP traps submenu. The items available under this command are shown below. show set add delete list .. / save quit Shows SNMP trap parameters. Sets SNMP trap parameters. Adds SNMP trap entries. Deletes SNMP trap entries. Lists SNMP trap entries. Goes to the parent menu. Goes to the root menu. Saves the configuration to system flash. Quits the CLI.
PAGE 155
Command Line Interface Reference 8-159 AP51xx>admin(system.snmp.traps)> show Description: Shows SNMP trap parameters. Syntax: show trap rate-trap Shows SNMP trap parameter settings. Shows SNMP rate-trap parameter settings. Example: admin(system.snmp.
PAGE 156
8-160 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.snmp.traps)> set Description: Sets SNMP trap parameters.
PAGE 157
Command Line Interface Reference 8-161 AP51xx>admin(system.snmp.traps)> add Description: Adds SNMP trap entries. Syntax: add v1v2 Adds an entry to the SNMP v1/v2 access list with the destination IP address set to , the destination UDP port set to , the community string set to (1 to 31 characters), and the SNMP version set to .
PAGE 158
8-162 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.snmp.traps)> delete Description: Deletes SNMP trap entries. Syntax: delete v1v2c v3 all all Deletes entry from the v1v2c access control list. Deletes all entries from the v1v2c access control list. Deletes entry from the v3 access control list. Deletes all entries from the v3 access control list. Example: admin(system.snmp.
PAGE 159
Command Line Interface Reference 8-163 AP51xx>admin(system.snmp.traps)> list Description: Lists SNMP trap entries. Syntax: list v1v2c v3 all Lists SNMP v1/v2c access entries. Lists SNMP v3 access entry . Lists all SNMP v3 access entries. Example: admin(system.snmp.traps)>add v1v2 203.223.24.2 162 mycomm v1 admin(system.snmp.
PAGE 160
8-164 AP-51xx Access Point Product Reference Guide 8.4.5 System Network Time Protocol (NTP) Commands AP51xx>admin(system)> ntp Description: Displays the NTP menu. The correct network time is required for numerous functions to be configured accuaretly on the access point. Syntax: set show date-zone zone-list set .. / save quit Shows NTP parameters settings. Show date, time and time zone. Displays list of time zones. Sets NTP parameters. Goes to the parent menu. Goes to the root menu.
PAGE 161
Command Line Interface Reference 8-165 AP51xx>admin(system.ntp)> show Description: Displays the NTP server configuration. Syntax: show Shows all NTP server settings. Example: admin(system.ntp)>show current time (UTC) : 2006-07-31 14:35:20 Time Zone: ntp mode : enable preferred Time server ip : 203.21.37.18 preferred Time server port : 123 first alternate server ip : 203.21.37.19 first alternate server port : 123 second alternate server ip : 0.0.0.
PAGE 162
8-166 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.ntp)> date-zone Description: Show date, time and time zone. Syntax: date-zone Show date, time and time zone. Example: admin(system.
PAGE 163
Command Line Interface Reference 8-167 AP51xx>admin(system.ntp)> zone-list Description: Displays an extensive list of time zones for countries around the world. Syntax: zone-list Displays list of time zones for every known zone. Example: admin(system.
PAGE 164
8-168 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.ntp)> set Description: Sets NTP parameters for access point clock synchronization. Syntax: set mode server port intrvl time zone Enables or disables NTP. Sets the NTP sever IP address. Defines the port number. Defines the clock synchronization interval used between the access point and the NTP server in minutes (15 - 65535). Sets the current system time.
PAGE 165
Command Line Interface Reference 8-169 8.4.6 System Log Commands AP51xx>admin(system)> logs Description: Displays the access point log submenu. Logging options include: Syntax: show set view delete send .. / save quit Shows logging options. Sets log options and parameters. Views system log. Deletes the system log. Sends log to the designated FTP Server. Goes to the parent menu. Goes to the root menu. Saves configuration to system flash. Quits the CLI.
PAGE 166
8-170 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.logs)> show Description: Displays the current access point logging settings. Syntax: show Displays the logging options. Example: admin(system.logs)>show log level : L6 Info syslog server logging : enable syslog server ip address : 192.168.0.102 For information on configuring logging settings using the applet (GUI), see Logging Configuration on page 4-34.
PAGE 167
Command Line Interface Reference 8-171 AP51xx>admin(system.logs)> set Description: Sets log options and parameters. Syntax: set level mode ipadr Sets the level of the events that will be logged. All events with a level at or above (L0-L7) will be saved to the system log. L0:Emergency L1:Alert L2:Critical L3:Errors L4:Warning L5:Notice L6:Info (default setting) L7:Debug Enables or disables syslog server logging. Sets the external syslog server IP address to (a.b.c.d).
PAGE 168
8-172 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.logs)> view Description: Displays the access point system log file. Syntax: view Displays the entire access point system log file. Example: admin(system.logs)>view Jan 7 16:14:00 (none) syslogd 1.4.1: restart (remote reception).
PAGE 169
Command Line Interface Reference 8-173 AP51xx>admin(system.logs)> delete Description: Deletes the log files. Syntax: delete Deletes the access point system log file. Example: admin(system.logs)>delete For information on configuring logging settings using the applet (GUI), see Logging Configuration on page 4-34.
PAGE 170
8-174 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.logs)> send Description: Sends log and core file to an FTP Server. Syntax: send Sends the system log file via FTP to a location specified with the set command. Refer to the command set under the AP51xx>admin(config) command for information on setting up an FTP server and login information. Example: admin(system.logs)>send File transfer : [ In progress ] File transfer : [ Done ] admin(system.
PAGE 171
Command Line Interface Reference 8-175 8.4.7 System Configuration-Update Commands AP51xx>admin(system.config)> Description: Displays the access point configuration update submenu. Syntax: default partial show set export import .. / save quit Restores the default access point configuration. Restores a partial default access point configuration. Shows import/export parameters. Sets import/export access point configuration parameters. Exports access point configuration to a designated system.
PAGE 172
8-176 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.config)> default Description: Restores the full access point factory default configuration. Syntax: default Restores the access point to the original (factory) configuration. Example: admin(system.config)>default Are you sure you want to default the configuration? : For information on importing/exporting access point configurations using the applet (GUI), see Importing/Exporting Configurations on page 4-36.
PAGE 173
Command Line Interface Reference 8-177 AP51xx>admin(system.config)> partial Description: Restores a partial factory default configuration. The access point’s LAN, WAN and SNMP settings are uneffected by the partial restore. Syntax: default Restores a partial access point configuration. Example: admin(system.
PAGE 174
8-178 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.config)> show Description: Displays import/export parameters for the access point configuration file. Syntax: show Shows all import/export parameters. Example: admin(system.config)>show cfg filename : cfg.txt cfg filepath : ftp/tftp server ip address : 192.168.0.
PAGE 175
Command Line Interface Reference 8-179 AP51xx>admin(system.config)> set Description: Sets the import/export parameters. Syntax: set file path server user passwd Sets the configuration file name (1 to 39 characters in length). Defines the path used for the configuration file upload. Sets the FTP/TFTP server IP address. Sets the FTP user name (1 to 39 characters in length). Sets the FTP password (1 to 39 characters in length). Example: admin(system.
PAGE 176
8-180 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.config)> export Description: Exports the configuration from the system. Syntax: export ftp tftp terminal Exports the access point configuration to the FTP server. Use the set command to set the server, user, password, and file name before using this command. Exports the access point configuration to the TFTP server. Use the set command to set the IP address for the TFTP server before using the command.
PAGE 177
Command Line Interface Reference 8-181 AP51xx>admin(system.config)> import Description: Imports the access point configuration to the access point. Errors could display as a result of invaid configuration parameters. Correct the sepcified lines and import the file again until the import operation is error free. Syntax: import ftp tftp Imports the access point configuration file from the FTP server. Use the set command to set the server, user, password, and file.
PAGE 178
8-182 AP-51xx Access Point Product Reference Guide 8.4.8 Firmware Update Commands AP51xx>admin(system)>fw-update Description: Displays the firmware update submenu. The items available under this command are shown below. NOTE The access point must complete the reboot process to successfully update the device firmware, regardless of whether the reboot is conducted uing the GUI or CLI interfaces. show set update .. / save quit Displays the current access point firmware update settings.
PAGE 179
Command Line Interface Reference 8-183 AP51xx>admin(system.fw-update)>show Description: Displays the current access point firmware update settings. Syntax: show Shows the current system firmware update settings for the access point. Example: admin(system.fw-update)>show automatic firmware upgrade automatic config upgrade automatic upgrade interface : enable : enable : WAN firmware filename firmware path ftp/tftp server ip address ftp user name ftp password : : : : : APFW.bin /tftpboot/ 168.197.2.
PAGE 180
8-184 AP-51xx Access Point Product Reference Guide AP51xx>admin(system.fw-update)>set Description: Defines access point firmware update settings and user permissions. Syntax: set fw-auto cfg-auto iface file path server user passwd When enabled, updates device firmware each time the firmware versions are found to be different between the access point and the specified firmware on the remote system.
PAGE 181
Command Line Interface Reference 8-185 AP51xx>admin(system.fw-update)>update Description: Executes the access point firmware update over the WAN or LAN port using either ftp or tftp. Syntax: update Defines the ftp ot tftp mode used to conduct the firmware update. Specifies whether the update is executed over the access point’s WAN, LAN1 or LAN2 interface .
PAGE 182
8-186 AP-51xx Access Point Product Reference Guide 8.5 Statistics Commands AP51xx>admin(stats) Description: Displays the access point statistics submenu. The items available under this command are: show send-cfg-ap send-cfg-all clear flash-all-leds echo ping .. / save quit Displays access point WLAN, MU, LAN and WAN statistics. Sends a config file to another access point within the known AP table. Sends a config file to all access points within the known AP table. Clears all statistic counters to zero.
PAGE 183
Command Line Interface Reference 8-187 AP51xx>admin(stats)> show Description: Displays access point system information. Syntax: show wan lan stp wlan s-wlan radio s-radio retry-hgram mu s-mu auth-mu wlap s-wlap known-ap Displays stats for the access point WAN port. Displays stats for the access point LAN port Displays LAN Spanning Tree Status Displays WLAN status and statistics summary. Displays status and statistics for an individual WLAN Displays a radio statistics transmit and receive summary.
PAGE 184
8-188 AP-51xx Access Point Product Reference Guide AP51xx>admin(stats)> send-cfg-ap Description: Copies the access point’s configuration to another access point within the known AP table. Syntax: send-cfg-ap Copies the access point’s configuration to the access points within the known AP table. Mesh configuration attributes do not get copied using this command and must be configured manually.
PAGE 185
Command Line Interface Reference 8-189 AP51xx>admin(stats)> send-cfg-all Description: Copies the access point’s configuration to all of the access points within the known AP table. Syntax: send-cfg-all Copies the access point’s configuration to all of the access points within the known AP table. Example: admin(stats)>send-cfg-all admin(stats)> NOTE The send-cfg-all command copies all existing configuration parameters except Mesh settings, LAN IP data, WAN IP data and DHCP Server parameter information.
PAGE 186
8-190 AP-51xx Access Point Product Reference Guide AP51xx>admin(stats)> clear Description: Clears the specified statistics counters to zero to begin new data calculations. Syntax: clear wan lan all-rf all-wlan wlan all-radio radio1 radio2 all-mu mu known-ap Clears WAN statistics counters. Clears LAN statistics counters. Clears all RF data. Clears all WLAN summary information. Clears individual WLAN statistic counters. Clears access point radio summary information.
PAGE 187
Command Line Interface Reference 8-191 AP51xx>admin(stats)> flash-all-leds Description: Starts and stops the illumination of a specified access point’s LEDs. Syntax: flash-all-leds Defines the Known AP index number of the target AP to flash. Begins or terminates the flash activity.
PAGE 188
8-192 AP-51xx Access Point Product Reference Guide AP51xx>admin(stats)> echo Description: Defines the echo test values used to conduct a ping test to an associated MU. Syntax: show list set start .. / quit Shows the Mobile Unit Statistics Summary. Defines echo test parameters and result. Determines echo test packet data. Begins echoing the defined station. Goes to parent menu. Goes to root menu. Quits CLI session.
PAGE 189
Command Line Interface Reference 8-193 AP51xx>admin.stats.echo)> show Description: Shows Mobile Unit Statistics Summary. Syntax: show Shows Mobile Unit Statistics Summary. Example: admin(stats.echo)>show ---------------------------------------------------------------------------Idx IP Address MAC Address WLAN Radio T-put ABS Retries ---------------------------------------------------------------------------1 192.168.2.
PAGE 190
8-194 AP-51xx Access Point Product Reference Guide AP51xx>admin.stats.echo)> list Description: Lists echo test parameters and results. Syntax: list Lists echo test parameters and results. Example: admin(stats.echo)>list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.echo)> For information on MU Echo and Ping tests using the applet (GUI), see Pinging Individual MUs on page 7-27.
PAGE 191
Command Line Interface Reference 8-195 AP51xx>admin.stats.echo)>set Description: Defines the parameters of the echo test. Syntax: set station request length data Defines MU target MAC address. Sets number of echo packets to transmit (1-539). Determines echo packet length in bytes (1-539). Defines the particular packet data. For information on MU Echo and Ping tests using the applet (GUI), see Pinging Individual MUs on page 7-27.
PAGE 192
8-196 AP-51xx Access Point Product Reference Guide AP51xx>admin.stats.echo)> start Description: Initiates the echo test. Syntax: start Initiates the echo test. Example: admin(stats.echo)>start admin(stats.echo)>list Station Address : 00A0F843AABB Number of Pings : 10 Packet Length : 100 Packet Data (in HEX) : 1 Number of MU Responses : 2 For information on MU Echo and Ping tests using the applet (GUI), see Pinging Individual MUs on page 7-27.
PAGE 193
Command Line Interface Reference 8-197 AP51xx>admin(stats)> ping Description: Defines the ping test values used to conduct a ping test to an AP with the same ESSID. Syntax: ping show list set start .. / quit Shows Known AP Summary details. Defines ping test packet length. Determines ping test packet data. Begins pinging the defined station. Goes to parent menu. Goes to root menu. Quits CLI session. For information on Known AP tests using the applet (GUI), see Pinging Individual MUs on page 7-27.
PAGE 194
8-198 AP-51xx Access Point Product Reference Guide AP51xx>admin.stats.ping)> show Description: Shows Known AP Summary Details. Syntax: show Shows Known AP Summary Details. Example: admin(stats.ping)>show ---------------------------------------------------------------------------Idx IP Address MAC Address MUs KBIOS Unit Name ---------------------------------------------------------------------------1 192.168.2.
PAGE 195
Command Line Interface Reference 8-199 AP51xx>admin.stats.ping)> list Description: Lists ping test parameters and results. Syntax: list Lists ping test parameters and results. Example: admin(stats.ping)>list Station Address : 00A0F8213434 Number of Pings : 10 Packet Length : 10 Packet Data (in HEX) : 55 admin(stats.ping)> For information on Known AP tests using the applet (GUI), see Pinging Individual MUs on page 7-27.
PAGE 196
8-200 AP-51xx Access Point Product Reference Guide AP51xx>admin.stats.ping)> set Description: Defines the parameters of the ping test. Syntax: set station request length data Defines the AP target MAC address. Sets number of ping packets to transmit (1-539). Determines ping packet length in bytes (1-539). Defines the particular packet data. Example: admin(stats.ping)>set station 00A0F843AABB admin(stats.ping)>set request 10 admin(stats.ping)>set length 100 admin(stats.ping)>set data 1 admin(stats.
PAGE 197
Command Line Interface Reference 8-201 AP51xx>admin.stats.echo)> start Description: Initiates the ping test. Syntax: start Initiates the ping test. Example: admin(stats.ping)>start admin(stats.ping)>list Station Address : 00A0F843AABB Number of Pings : 10 Packet Length : 100 Packet Data (in HEX) : 1 Number of AP Responses : 2 For information on Known AP tests using the applet (GUI), see Pinging Individual MUs on page 7-27.
PAGE 198
8-202 AP-51xx Access Point Product Reference Guide
PAGE 199
Configuring Mesh Networking 9.1 Mesh Networking Overview An AP-51xx can be configured in two modes to support the new mesh networking functionality. The access point can be set to a client bridge mode and/or a base bridge mode (which accepts connections from client bridges). Base bridge and client bridge mode can be used at the same time by an individual access point to optimally bridge traffic to other members of the mesh network and service associated MUs.
PAGE 200
9-2 AP-51xx Access Point Product Reference Guide access points configured as both a base and a client bridge function as repeaters to transmit data with associated MUs in their coverage area (client bridge mode) as well as forward traffic to other access points in the mesh network (base bridge mode). The number of access points and their intended function within the mesh network dictate whether they should be configured as base bridges, client bridges or both (repeaters).
PAGE 201
Configuring Mesh Networking If an access point is configured as a base bridge (but not as a client bridge) it operates normally at boot time. The base bridge supports connections made by other client bridges. The dual-radio model access point affords users better optimization of the mesh networking feature by enabling the access point to transmit to other mesh network members using one independent radio and transmit with associated MUs using the second independent radio.
PAGE 202
9-4 AP-51xx Access Point Product Reference Guide The access point in client bridge mode attempts to establish up to 3 simultaneous wireless connections. The second and third connections are established in the background while the system is running. The first connection needs to be established before the system starts bridging traffic.
PAGE 203
Configuring Mesh Networking preferred list, the user enters a priority for each bridge, resulting in the selection of the forwarding link. Limit the wireless client’s connections to reduce the number of hops required to get to the wired network. Use each radio’s "preferred" base bridge list to define which access points the client bridge connects to. For more information, see Configuring Mesh Networking Support on page 9-6. 9.1.
PAGE 204
9-6 AP-51xx Access Point Product Reference Guide to other access points. However, if using the Known AP Statistics screen’s Send Cfg to APs functionality, “auto-select” and preferred list” settings do not get imported. CAUTION When using the Import/Export screen to import a mesh supported configuration, do not import a base bridge configuration into an existing client bridge, as this could cause the mesh configuration to break. ! 9.
PAGE 205
Configuring Mesh Networking Verify the enabled LAN is named appropriately in respect to its intended function in supporting the mesh network. 3. Select Network Configuration -> LAN -> LAN1 or LAN2 from the AP-5131 menu tree. 4. Click the Mesh STP Configuration button on the bottom off the screen. 5.
PAGE 206
9-8 AP-51xx Access Point Product Reference Guide Hello Time The Hello Time is the time between each bridge protocol data unit sent. This time is equal to 2 seconds (sec) by default, but you can tune the time to be between 1 and 10 sec. If you drop the hello time from 2 sec to 1 sec, you double the number of bridge protocol data units sent/received by each bridge. The 802.1d specification recommends the Hello Time be set to a value less than half of the Max Message age value.
PAGE 207
Configuring Mesh Networking The Wireless Configuration screen displays with those existing WLANs displayed within the table. 2. Select the Create button to configure a new WLAN specifically to support mesh networking. An existing WLAN can be modified (or used as is) for mesh networking support by selecting it from the list of available WLANs and clicking the Edit button. 3. Assign an ESSID and Name to the WLAN that each access point will share when using this WLAN within their mesh network.
PAGE 208
9-10 AP-51xx Access Point Product Reference Guide Symbol recommends assigning a unique name to a WLAN supporting a mesh network to differentiate it from WLANs defined for non mesh support. The name assigned to the WLAN is what is selected from the Radio Configuration screen for use within the mesh network. NOTE It is possible to have different ESSID and WLAN assignments within a single mesh network (one set between the Base Bridge and repeater and another between the repeater and Client Bridge).
PAGE 209
Configuring Mesh Networking are typically not guest networks, wherein public assess is more important than data protection. Symbol also discourages user-based authentication schemes such as Kerberos and 802.1x EAP, as these authentication schemes are not supported within a mesh network. If none of the existing policies are suitable, select the Create button to the right of the Security Policy drop-down menu and configure a policy suitable for the mesh network.
PAGE 210
9-12 AP-51xx Access Point Product Reference Guide 10. Select the Use Secure Beacon checkbox to not transmit the AP- 5131’s ESSID amongst the access points and devices within the mesh network. If a hacker tries to find an ESSID via an MU, the AP- 5131’s ESSID does not display since the ESSID is not in the beacon. Symbol recommends keeping the option enabled to reduce the likelihood of hacking into the WLAN. 11.
PAGE 211
Configuring Mesh Networking To configure the access point radio for mesh networking support: NOTE The dual-radio model access point affords users better optimization of the mesh network feature by allowing the access point to transmit to other access points (in base or client bridge mode) using one independent radio and transmit with its associated devices using the second independent radio.
PAGE 212
9-14 AP-51xx Access Point Product Reference Guide 3. Select the Base Bridge checkbox to allow the access point radio to accept client bridge connections from other access points in client bridge mode. The base bridge is the acceptor of mesh network data from those client bridges within the mesh network and never the initiator. ! CAUTION A problem could arise if a Base Bridge’s Indoor channel is not available on an Outdoor Client Bridge's list of available channels.
PAGE 213
Configuring Mesh Networking If the Client Bridge checkbox has been selected, use the Mesh Network Name drop-down menu to select the WLAN (ESS) the client bridge uses to establish a wireless link. The default setting, is (WLAN1). Symbol recommends creating (and naming) a WLAN specifically for mesh networking support to differentiate the Mesh supported WLAN from non-Mesh supported WLANs.
PAGE 214
9-16 AP-51xx Access Point Product Reference Guide the user from selecting the order base bridges are added to the mesh network when one of the three associated base bridges becomes unavailable. NOTE Auto link selection is based on the RSSI and load. The client bridge will select the best available link when the Automatic Link Selection checkbox is selected. Symbol recommends you do not disable this option, as (when enabled) the access point will select the best base bridge for connection. 8.
PAGE 215
Configuring Mesh Networking 12. Highlight a MAC address from the Preferred Base Bridge List and click the Up button to assign that device’s MAC address a higher priority and a greater likelihood of joining the mesh network if an association with another device is lost. If a MAC address is not desirable as others but still worthy of being on the preferred list, select it, and click the Down button to decrease its likelihood of being selected as a member of the mesh network. 13.
PAGE 216
9-18 AP-51xx Access Point Product Reference Guide For additional information on configuring the access point’s radio, see Configuring the 802.11a or 802.11b/g Radio on page 5-47. For fictional use case involving an access point mesh network deployment within a shipping and receiving yard, see Usage Scenario - Trion Enterprises on page 9-19.
PAGE 217
Configuring Mesh Networking 9.3 Usage Scenario - Trion Enterprises Trion Enterprises is a new shipping and receiving company. Trion wants to create an outdoor wireless coverage area (in addition to its indoor wireless infrastructure) that can expand as they grow their business.
PAGE 218
9-20 AP-51xx Access Point Product Reference Guide 1. The Trion IT department verifies connectivity with both of the access points following the instructions in Testing Connectivity on page 3-11. 2. The Trion IT Department installs the AP1 on a wall with the antennas orienting outward into the shipping and receiving yard. The team then installs the AP2 on a wall on the receiving shack in the shipping yard.
PAGE 219
Configuring Mesh Networking 4. The Trion IT department verifies the LAN used to support the mesh network is enabled for both AP1 and AP2, (by selecting the Enable checkbox). NOTE In this fictional mesh network deployment for Trion Enterprises, AP1 and AP2 should both have the access point’s Ethernet Port mapped to the mesh LAN. However, there are some scenarios when this is not necessary.
PAGE 220
9-22 AP-51xx Access Point Product Reference Guide default of 15 seconds. Since only one additional access point is to be added to this point-topoint mesh network, the Forwarding Table Ageout value is also unchanged from its 100 second default setting. 8. The team clicks OK from within the Bridge STP Configuration screen and Apply from within the trion (LAN1) screen to save the settings. This step is repeated for AP2.
PAGE 221
Configuring Mesh Networking 10. The team selects the Edit button to revise (and rename) the existing WLAN specifically to support mesh networking. 11. The Trion IT team assigns the WLAN a unique ESSID (103) used by each new base bridge, client bridge and repeater joining the mesh network. 12. The team assigns the name of “trion mesh” to the WLAN so it will not be confused with other WLANs used in other areas of the Trion facility.
PAGE 222
9-24 AP-51xx Access Point Product Reference Guide 13. For AP1 the team selects the 802.11a checkbox. Enabling the 802.11a radio for the mesh WLAN and configuring a separate WLAN for MU traffic (using the 802.11b/g radio), allows the team the best channel utilization and throughput available since the 802.11a radio can be dedicated strictly to communications within the mesh network and the 802.11b/g radio can be dedicated to servicing the 802.11b/g MUs supporting the shipping and receiving yard.
PAGE 223
Configuring Mesh Networking 19. The Broadcast Key Rotation checkbox is selected, as the IT team plans to change the keys from time to time (for security purposes) and wants these keys to be broadcasted using the default interval 86400 seconds. 20. The IT team does not want to use a passphrase to represent the 256-bit keys, so the 256bit Key checkbox is selected, and the team enters 16 hexadecimal characters into each of the four fields displayed.
PAGE 224
9-26 AP-51xx Access Point Product Reference Guide 23. The IT team assigns the name of “trion mesh network” to the ACL to eliminate any confusion with the ACLs intended function 24. Since the range of client bridge MAC addresses for the shipping yard mesh network is known to the IT Team, they select the Deny drop-down menu option, as the team wants to deny access to all MAC addresses except their own known range of device MAC addresses. 25.
PAGE 225
Configuring Mesh Networking 26. The team decides to leave the Disallow MU to MU Communication checkbox unselected for the WLAN, as the team considers all MU traffic within the secure shipping and receiving yard known and not a threat to the initial 2 AP mesh network deployment. 27. The team selects the Use Secure Beacon checkbox from the Edit WLAN screen to not transmit the AP- 5131’s ESSID between AP1 and AP2.
PAGE 226
9-28 AP-51xx Access Point Product Reference Guide 31. The IT Team does not plan on supporting any legacy 802.11b voice enabled devices, so they leave the Support Voice prioritization checkbox unselected. 32. The IT Team selects 11ag-default from the drop-down menu to best describe the type of data proliferating the mesh network. With this setting selected, the Access Category settings do not need to be configured for the QoS policy. 33.
PAGE 227
Configuring Mesh Networking 37. For AP2, the IT Team enables both Radio 1 and Radio 2 and defines radio 1 as a client bridge. NOTE The Trion IT team is aware it is not a good idea to dedicate both radios (of a dual-radio model access point) to support mesh networking. They know it is possible to dedicate both radios of a single access point for mesh support, but the Trion team wants to dedicate the 802.11b/g radio for MU operation and the 802.11a radio for backhaul support.
PAGE 228
9-30 AP-51xx Access Point Product Reference Guide 41. The Trion IT Team clicks Apply within both the AP1 and AP2 Radio Configuration screens to complete the mesh network configuration of each AP1 and AP2 radio. The team does not worry about network disruption by applying the settings at this point, as AP1 and AP2 have not yet been deployed. However, in the future they are aware saving their mesh configuration will temporarily disrupt service within their mesh network.
PAGE 229
Configuring Mesh Networking broadcast range (see the illustration below). The Trion IT department follows the instructions in Wall Mounted Installations on page 2-14 to install AP3 and AP4. AP4 AP1 AP2 AP3 3. The Trion IT department selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The Trion IT department verifies the LAN used to support the mesh network is enabled for both AP3 and AP4, (by selecting the Enable checkbox). 5.
PAGE 230
9-32 AP-51xx Access Point Product Reference Guide 7. The Trion IT department leaves the Priority setting to at 32768 for AP3 and AP4 for both to defer to AP1 (which was assigned a priority of 1 for root designation) as the access point defining the mesh network configuration. The remainder of the Mesh STP Configuration settings are left unchanged from their default values. The team clicks OK from within the Mesh STP Configuration screen and Apply from within the trion (LAN1) screen to save the settings.
PAGE 231
Configuring Mesh Networking 9. The team selects the Edit button to revise (and rename) the existing default WLAN to support mesh networking. 10. The Trion IT team assigns AP3 and AP4 an ESSID of 103. Therefore, AP1 and AP2 should be able to “see” AP3 and AP4 as soon as they are deployed. 11. The team assigns the name of “trion mesh” to the WLAN to be consistent with the WLAN supporting mesh networking on AP1 and AP2. 12. The team selects the 802.11a Radio checkbox for both AP3 and AP4. Like AP1, the 802.
PAGE 232
9-34 AP-51xx Access Point Product Reference Guide 13. The team does not want any MUs connecting to the mesh WLAN, only the devices comprising the mesh network. Therefore, the team leaves the Maximum MUs field as is, and will use the Radio Configuration page to control the number of client bridge connections. 14. The team verifies the Enable Client Bridge Backhaul checkbox is selected for both AP3 and AP4 to ensure the WLAN is available in the WLAN drop-down menu within the Radio Configuration screen. 15.
PAGE 233
Configuring Mesh Networking 21. Now a QoS policy needs to be defined for the shipping and receiving mesh WLAN. The IT Team still envisions little (if any) video or voice traffic within the shipping as the MUs within primarily scan bar codes and upload data. This holds true for the QoS requirements for AP3 and AP4 as the required coverage area has grown, not the security, access permission or QoS considerations.
PAGE 234
9-36 AP-51xx Access Point Product Reference Guide 26. As with AP1 and AP2, the IT Team decides to not select the Advanced button within the AP3 and AP4 WLAP Client Bridge Settings field. 27. The Trion IT Team clicks Apply within both the AP3 and AP4 Radio Configuration screens to complete the mesh network configuration of each AP3 and AP4 radio.
PAGE 235
9-37 Configuring Mesh Networking 9.3.3 Adding 2 More Client Bridges to the Trion Network After an additional six months with their existing 4 access point mesh network, Trion Enterprises needs and approves the addition of two additional access points (AP5 and AP6) to be configured as client bridges.
PAGE 236
9-38 AP-51xx Access Point Product Reference Guide 3. The Trion IT department selects Network Configuration -> LAN from the AP-5131 menu tree. 4. The Trion IT department verifies the LAN used to support the mesh network is enabled for both AP5 and AP6, (by selecting the Enable checkbox). 5. The Trion IT department then selects Network Configuration -> LAN -> trion from the AP-5131 menu tree. 6. The IT team selects the Mesh STP Configuration button on the bottom of the screen.
PAGE 237
Configuring Mesh Networking 7. The Trion IT department leaves the Priority setting to at 32768 for AP5 and AP6 for both to defer to AP1 (which was assigned a priority of 1 for root designation) as the access point defining the mesh network configuration. The remainder of the Mesh STP Configuration settings are left unchanged from their default values. The team clicks OK from within the Mesh STP Configuration screen and Apply from within the trion (LAN1) screen to save the settings.
PAGE 238
9-40 AP-51xx Access Point Product Reference Guide 9. The team selects the Edit button to revise (and rename) the existing default WLAN to support mesh networking. 10. The Trion IT team assigns the WLAN an ESSID of 103 to be consistent with the trion mesh WLAN ESSID of the other four access points within the mesh network. 11. The team assigns the name of “trion mesh” to the WLAN to be consistent with the WLAN supporting mesh on APs 1-4. 12. The team selects the 802.11a Radio checkbox for both AP5 and AP6.
PAGE 239
Configuring Mesh Networking 13. The team still does not want any MUs connecting to the mesh WLAN, only the devices comprising the mesh network. Therefore, the team leaves the Maximum MUs field as is, and will use the Radio Configuration page to control the number of client bridge connections within the mesh WLAN. 14. The team verifies the Enable Client Bridge Backhaul checkbox is selected for both AP5 and AP6 to ensure the WLAN is available in the WLAN drop-down menu within the Radio Configuration screen.
PAGE 240
9-42 AP-51xx Access Point Product Reference Guide 22. The IT team selects Network Configuration -> Wireless -> Radio Configuration from the AP-5131 menu tree. The Radio Configuration screen displays. 23. For both AP5 and AP6, the IT Team enables Radio 1 and defines the radio as a client bridge. 24. For both AP5 and AP6, the IT Team uses the Mesh Network Name drop-down menu to assign the “trion mesh” WLAN to radio 1. 25.
PAGE 241
Technical Specifications This appendix provides technical specifications in the following areas: • • • • • Physical Characteristics Electrical Characteristics Radio Characteristics Antenna Specifications Country Codes
PAGE 242
A-2 AP-51xx Access Point Product Reference Guide A.1 Physical Characteristics A.1.1 AP-5131 Physical Characteristics The AP-5131 has the following physical characteristics: Dimensions 5.32 inches long x 9.45 inches wide x 1.77 inches thick. 135 mm long x 240 mm wide x 45 mm thick. Housing Metal, Plenum Housing (UL2043) Weight 1.95 lbs/0.88 Kg (single-radio model) 2.05 lbs/0.
PAGE 243
Technical Specifications A.1.2 AP-5181 Physical Characteristics The AP-5181 has the following physical characteristics: Dimensions TBD Housing TBD Weight TBD Operating Temperature 30 to 55° Celsius Storage Temperature 40 to 85° Celsius Altitude 8,000 feet/2438 m @ 28° Celsius (operating) 15,000 feet/4572 m @ 12° Celsius (storage) Vibration Vibration to withstand .
PAGE 244
A-4 AP-51xx Access Point Product Reference Guide A.2 Electrical Characteristics Both the AP-5131 and the AP-5181 access points have the following electrical characteristics: ! CAUTION An AP-5181 model access point cannot use the AP-5131 recommended Symbol 48-Volt Power Supply (Part No. 50-24000-050). However, Symbol does recommend the AP-PSBIAS-5181-01R model power supply for use the AP-5181. Operating Voltage 48Vdc (Nom) Operating Current 200mA (Peak) @ 48Vdc 170mA (Nom) @ 48Vdc A.
PAGE 245
Technical Specifications Radio Data Rates 802.11a radio 6, 9, 12, 18, 24, 36, 48, and 54 Mbit/Sec 802.11g radio 6, 9, 12, 18, 24, 36, 48, and 54 Mbit/Sec 802.11b radio 1, 2, 5.5, 11 Mbps Wireless Medium Direct Sequence Spread Spectrum (DSSS) Orthogonal Frequency Division Multiplexing (OFDM) A.4 Antenna Specifications The antenna suite differs between the AP-5131 and AP-5181 model access points. Ensure your have selected the correct model antenna before deploying the access point.
PAGE 246
A-6 AP-51xx Access Point Product Reference Guide Symbol Part Number Antenna Type Nominal Net Gain (dBi) ML-5299-WPNA1-01R Panel Antenna 13.0 ML-5299-HPA1-01R Wide-Band Omni-Directional Antenna 5.0 ML-2452-APA2-01 Dual-Band 4.0 A.4.1.3 AP-5131 Additional Antenna Components The following table lists the Symbol part number for various antenna accessories. This table also includes the loss for each accessory at both 2.4 and 5.2 GHz. Item Symbol Part Number Loss (db) @ 2.
PAGE 247
Technical Specifications Item Connector1 Connector2 Length (meters) Cable Type 25JK N-M N-M 7.62 RG-8 50JK N-M N-M 15.24 RG-8 100JK N-M N-M 30.48 RG-8 A.4.2 AP-5181 Antenna Specifications TBD A.
PAGE 248
A-8 AP-51xx Access Point Product Reference Guide Czech Rep.
PAGE 249
Technical Specifications Mexico MX Morocco MA Nambia NA Netherlands NL A-9
PAGE 250
A-10 AP-51xx Access Point Product Reference Guide
PAGE 251
Usage Scenarios This appendix provides practical usage scenarios for many of the access point’s key features. This information should be referenced as a supplement to the information contained within this access point Product Reference Guide. The following scenarios are described: • • Configuring Automatic Updates using a DHCP or Linux BootP Server Configuration Configuring an IPSEC Tunnel and VPN FAQs B.
PAGE 252
B-2 AP-51xx Access Point Product Reference Guide B.1.1 Windows - DHCP Server Configuration See the following sections for information on these DHCP server configurations in the Windows environment: • • • Embedded Options - Using Option 43 Global Options - Using Extended/Standard Options DHCP Priorities B.1.1.
PAGE 253
Usage Scenarios e. Add the following 3 new options under AP5131 Options class: Code Data type Access point TFTP Server IP Address (Note: Use any one option) 181 186 IP address String Access point Firmware File Name 187 String Access point Config File Name (Note: Use any one option) 129 188 String String f. Highlight Scope Options from the tree and select Configure Options. g. Go to the Advanced tab.
PAGE 254
B-4 AP-51xx Access Point Product Reference Guide To configure Global options using extended/standard options: 1. Set the Windows DHCP Server and access point on the same Ethernet segment. 2. Configure the Windows based DHCP Server as follows: a. Highlight the Server Domain Name (for example, apfw.symbol.com). From the Action menu, select Set Predefined Options. b.
PAGE 255
Usage Scenarios • Verify the file versions within the access point’s System Settings screen. B.1.1.3 DHCP Priorities The following flowchart indicates the priorities used by the access point when the DHCP server is configured for options. -------------------------------------------------------------------------------------------- If the DHCP Server is configured for options 186 and 66 (to assign TFTP Server IP addresses) the access point uses the IP address configured for option 186.
PAGE 256
B-6 AP-51xx Access Point Product Reference Guide B.1.2 Linux - BootP Server Configuration See the following sections for information on these BootP server configurations in the Linux environment: • • BootP Options BootP Priorities B.1.2.1 BootP Options This section contains instructions for the automatic update of the access point firmware and configuration file using a BootP Server.
PAGE 257
Usage Scenarios Using options 66, 67 and 129: A P -5 1 3 1 :h a = 0 0 a 0 f8 8 a a 6 d 8 \ < LA N M A C A d d re ss> :sm = 2 5 5 .2 5 5 .2 5 5 .0 \ < S u b n e t M a sk> :ip = 1 5 7 .2 3 5 .9 3 .1 2 8 \ < IP A d d re ss > :g w = 1 5 7 .2 3 5 .9 3 .2 \ < g a te w a y> :T 6 6 = ”1 5 7 .2 3 5 .9 3 .2 5 0 ”\ < T FT P S e rve r IP > :T 6 7 = "a p fw .b in "\ < Firm w a re file > :T 1 2 9 = "cfg .tx t": < C o n fig u ra tio n file > Using options sa, bf and 136: AP-5131:ha=00a0f88aa6d8\ :sm =255.255.255.0\ :ip=
PAGE 258
B-8 AP-51xx Access Point Product Reference Guide B.1.2.2 BootP Priorities The following flowchart displays the priorities used by the access point when the BootP server is configured for multiple options: If the BootP Server is configured for options 186 and 66 (to assign TFTP server IP addresses) the access point uses the IP address configured for option 186.
PAGE 259
Usage Scenarios For this usage scenario, the following components are required: • 2 AP-5131 or AP-5181 model access points • 1 PC on each side of the access point’s LAN. To configure a VPN tunnel between two access points: 1. 2. 3. 4. Ensure the WAN ports are connected via the internet. On access point #1, select WAN -> VPN from the main menu tree. Click Add to add the tunnel to the list. Enter a tunnel name (tunnel names do not need to match). 5.
PAGE 260
B-10 AP-51xx Access Point Product Reference Guide NOTE For this example, Auto IKE Key Exchange is used. Any key exchange can be used, depending on the security needed, as long as both devices on each end of the tunnel are configured exactly the same. 9. Select the Auto (IKE) Key Exchange checkbox. 10. Select the Auto Key Settings button. 11. For the ESP Type, select ESP with Authentication and use AES 128-bit as the ESP Encryption Algorithm. Click OK. 12. Select the IKE Settings button.
PAGE 261
Usage Scenarios 13. Select Pre Shared Key (PSK) from the IKE Authentication Mode drop-down menu. 14. Enter a Passphrase. Passphrases must match on both VPN devices. NOTE Ensure the IKE authentication Passphrase is the same as the Pre-shared key on the Cisco PIX device. 15. Select AES 128-bit as the IKE Encryption Algorithm. 16. Select Group 2 as the Diffie -Hellman Group. Click OK. This will take you back to the VPN screen. 17. Click Apply to make the changes 18. Check the VPN Status screen.
PAGE 262
B-12 AP-51xx Access Point Product Reference Guide 19. On access point #2/ Device #2, repeat the same procedure. However, replace access point #2 information with access point #1 information. 20. Once both tunnels are established, ping each side of the tunnel to ensure connectivity. B.2.2 Configuring a Cisco VPN Device This section includes general instructions for configuring a Cisco PIX Firewall 506 series device.
PAGE 263
Usage Scenarios B.2.3 Frequently Asked VPN Questions The following are common questions that arise when configuring a VPN tunnel using the access point. • Question 1: Does the access point IPSec tunnel support multiple subnets on the other end of a VPN concentrator? Yes. The access point can access multiple subnets on the other end of the VPN Concentrator from the access point's Local LAN Subnet by: • Creating multiple VPN Tunnels. The AP supports a maximum of 25 tunnels.
PAGE 264
B-14 AP-51xx Access Point Product Reference Guide • Question 2: Even if a wildcard entry of "0.0.0.0" is entered in the Remote Subnet field in the VPN configuration page, can the AP access multiple subnets on the other end of a VPN concentrator for the APs LAN/WAN side? No. Using a "0.0.0.0" wildcard is an unsupported configuration. In order to access multiple subnets, the steps in Question #1 must be followed.
PAGE 265
Usage Scenarios Yes. • Question 6: Can an IPSec tunnel over a PPPoE connection be established - such as a PPPoE enabled DSL link? Yes. The access point supports tunneling when using a PPPoE username and password. • Question 7: Can I setup an access point so clients can access both the WAN normally and only use the VPN when talking to specific networks? Yes. Only packets that match the VPN Tunnel Settings will be sent through the VPN tunnel.
PAGE 266
B-16 AP-51xx Access Point Product Reference Guide • UFQDN - tries to match the user entered remote ID data string to the email address field of the received certificate. • Question 9: I am using a direct cable connection between my two VPN gateways for testing and cannot get a tunnel established, yet it works when I set them up across another network or router. Why? The packet processing architecture of the access point VPN solution requires the WAN default gateway to work properly.
PAGE 267
Usage Scenarios • Question 11: I still can't get my tunnel to work after attempting to initiate traffic between the two subnets. What now? Try the following troubleshooting tips: • • Verify you can ping each of the remote Gateway IP addresses from clients on either side. Failed pings can indicate general network connection problems. • Pinging the internal gateway address of the remote subnet should run the ping through the tunnel as well.
PAGE 268
B-18 AP-51xx Access Point Product Reference Guide Scr Dst Transport UDP Scr port 1:65535 Dst port 500 Rev NAT None These three rules should be configured above all other rules (default or user defined). When Advanced LAN Access is used, certain inbound/outbound rules need to be configured to control incoming/outgoing packet flow for IPSec to work properly (with Advanced LAN Access).
PAGE 269
Usage Scenarios • • The interface parameter has been removed from the Auto Update configuration feature. The WAN interface now has http/telnet/https/ssh connectivity enabled by default.
PAGE 270
B-20 AP-51xx Access Point Product Reference Guide
PAGE 271
Customer Support Symbol Technologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact for any technical problem, question or support issue involving Symbol products. If the Symbol Customer Support specialists cannot solve a problem, access to all technical disciplines within Symbol becomes available for further assistance and support.
PAGE 272
C-2 AP-51xx Access Point Product Reference Guide North American Contacts Inside North America: Symbol Technologies, Inc. One Symbol Plaza Holtsville, New York 11742-1300 Telephone: 1-631-738-2400/1-800-SCAN 234 Fax: 1-631-738-5990 Symbol Support Center (for warranty and service information): telephone: 1-800-653-5350 fax: (631) 738-5410 Email: support@symbol.
PAGE 273
Customer Support Web Support Sites MySymbolCare http://www.symbol.com/services/msc/msc.html Symbol Services Homepage http://symbol.com/services Manual Updates http://symbol.com/legacy_manuals/wire/accesspoints.html Symbol Developer Program http://devzone.symbol.com Additional Information Obtain additional information by contacting Symbol at: 1-800-722-6234, inside North America +1-516-738-5200, in/outside North America http://www.symbol.
PAGE 274
C-4 AP-51xx Access Point Product Reference Guide
PAGE 275
Index Numerics 2.4 GHz antennas. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-5 32735 Heading 2 1.1.11 Symbol NetVision Phone/Spectralink Voice Prioritization. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-17 A access options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-25 Access Point CAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-17 encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12 PSP . . . . . . . . . . . .
PAGE 276
IN-6 AP-5131 Access Point Product Reference Guide B Bandwidth Management . . . . . . . . . . . . . . . . . . . . . . . 5-55 basic device configuration . . . . . . . . . . . . . . . . . . . . . . . 3-3 beacon. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-17 CAM stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-17 PSP stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-17 BSSID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 277
IN-7 H hardware installation. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 I importing certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8 importing/exporting configurations. . . . . . . . . . . . . . . 4-36 installation, ceiling . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-18 installation, ceiling T-Bar. . . . . . . . . . . . . . . . . . . . . . . 2-16 installation, desk mounting . . . . . . . . . . . . . . . . . . . . . 2-12 installation, wall mounting . . . . . .
PAGE 278
IN-8 AP-5131 Access Point Product Reference Guide Q QoS support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-10 Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . . 1-10 R radio options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7 radio, retry histogram . . . . . . . . . . . . . . . . . . . . . . . . . . 7-21 radio, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-17 restore default configuration . . . . . . .
PAGE 279
IN-9 W wall mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14 WAN port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7 WAN, configuring . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-14 WAN, port forwarding . . . . . . . . . . . . . . . . . . . . . . . . . 5-21 WAN, statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-12 WEP encryption .
PAGE 280
IN-10 AP-5131 Access Point Product Reference Guide
PAGE 281
PAGE 282
Symbol Technologies, Inc. One Symbol Plaza Holtsville, New York 11742-1300 http://www.symbol.