SkyPilot SkyExtender DualBand Installation and Setup Guide
FCC Radio Frequency Interference Statement SkyExtender DualBand FCC Number: RV7-DBE1010 This equipment has been tested and found to comply with the limits for a class B digital device, pursuant to part 90 of the FCC Rules. These limits are designed to provide reasonable protection against interference in a residential installation.
Contents About This Guide 5 1 Overview 7 2 Your SkyExtender DualBand kit 9 3 Installing SkyExtender DualBand 11 4 Configuring SkyExtender DualBand 5 Configuration Tool Reference A Connecting to the Access Point Command-Line Interface 73 B Manually Updating Access Point Software 79 C WLAN Configuration Types 15 45 81
About This Guide This guide provides directions for installing and setting up a SkyPilot™ SkyExtender™ DualBand, which can provide access point services for users of 802.1x wireless (Wi-Fi) networks. This guide assumes administrator-level knowledge of IP networks and a familiarity with configuring wireless devices.
SkyPilot SkyExtender DualBand Installation and Setup Guide 6
1 Overview SkyExtender DualBand is a dual-radio solution that combines SkyPilot’s longrange, high-capacity 5 GHz mesh backhaul with a high-powered 802.11b/g access point that lets service providers and municipalities offer standard Wi-Fi services over great distances, for targeted hot zones or dense, ubiquitous coverage patterns.
Default access point configuration The SkyExtender DualBand access point is set up to provide Wi-Fi access right out of the box. The access point includes a preconfigured WLAN with the SSID (service set identifier) SkyPilotDualBand, providing WPA-PSK (Wi-Fi protected access – pre-shared key) protection. Users attempting to connect to the SkyPilotDualBand WLAN must provide a password (publicpublic by default).
2 Your SkyExtender DualBand Kit The SkyPilot SkyExtender DualBand™ kit provides everything you need to install the device and configure it as both an extender for your wireless mesh network and an 802.11b/g Wi-Fi access point. Contents of kit The SkyPilot SkyExtender DualBand kit includes: o A SkyPilot SkyExtender DualBand. The SkyExtender DualBand integrates a SkyExtender with a high-powered Wi-Fi 802.11b/g access point. o A pair of 2.4 GHz antennas.
Each SkyExtender DualBand has 32 MAC addresses assigned to it. The MAC address of the SkyExtender’s 5 GHz radio (as seen from the SkyGateway™) is printed on the label affixed to the base of the SkyExtender DualBand. The MAC address for the access point is 1 less than the MAC address of the SkyExtender’s 5 GHz radio. The MAC addresses reserved for use by WLAN SSIDs (basic SSIDs, or BSSIDs) begin with the MAC address on the label at the bottom of the SkyExtender DualBand minus-31.
3 Installing SkyExtender DualBand This chapter provides instructions for planning and performing the physical installation of the SkyExtender DualBand. Planning your installation When choosing a site for the SkyExtender DualBand, consider the radio frequency (RF) environment and the physical layout of the area. Trees, buildings, and hills can impede a wireless signal. When assessing a site, examine the overall topology of the wireless path for possible obstructions, existing or planned.
1 Mount the SkyExtender DualBand. Follow the instructions provided in the SkyPilot SkyGateway/SkyExtender Installation Guide. Make sure that you allow enough clearance for the 2.4 GHz antennas you’ll attach to the bottom of the SkyExtender. 2 Connect the 2.4 GHz antennas. The access point requires attachment of the two 2.4 GHz antennas included with the device. Screw the antennas onto the standard N connectors on the underside of the SkyExtender DualBand. Figure 1.
3 Connect the SkyExtender DualBand to the power supply. Connect the Ethernet straight-through cable (provided) between the power injector and the Ethernet port on the base of the SkyExtender DualBand. Plug the AC adapter into the power injector. Figure 2. Providing power to the SkyExtender DualBand NOTE The external Ethernet port on the SkyExtender DualBand is limited to providing power to the device; it cannot handle data traffic.
When the Link LED turns steady green and the Activity LED is off, the SkyExtender DualBand is initialized and listening for hello signals from other devices. When both LEDs are steady, the SkyExtender DualBand is successfully connected to the wireless network. The sequence takes about 15 minutes while waiting to acquire a GPS signal. (The SkyExtender DualBand must have access to a GPS signal to complete the sequence.
4 Configuring SkyExtender DualBand After installing the SkyExtender DualBand, you need to provide both the SkyExtender and access point components of the device with configuration information that they need for network operations. This chapter tells you how to use the SkyPilot EMS software to configure the SkyExtender DualBand for both mesh networking and Wi-Fi operation.
choice of two modes for provisioning devices with configurations: automatic or manual. Automatic provisioning requires the use of SkyPilot EMS software to create configurations that an unattended central server can distribute to devices on the wireless mesh network. Although automatic provisioning requires more setup time than manual provisioning, it greatly simplifies the administration of a growing network.
Setting up a Radius server for authenticating users If you plan configure your SkyExtender DualBand access point for WPA, you must first configure a Radius server with the following: o The IP address and shared secret of the SkyExtender DualBand access point. o EAP-PEAP/MSCHAPv2 and EAP-TTLS/PAP or MSCHAPv2 (not EAP-TLS) suitable for WPA. Your Radius supplier can provide instructions. o A Users database with user names and passwords.
To start the EMS client software: 1 From the client computer, open the C:\SkyPilot\EMS\bin\ directory. 2 Double-click the startsemsclient.bat application icon. 3 At the prompt, enter the user name and password. The default user name is admin; the default password is admin. The application starts, displaying the main menu. Figure 3. EMS client window The taskbar on the left side of the window expands to show options for using the EMS applications: SkyProvision and SkyControl™.
Adding software images Using the SkyProvision application, you can view the software images that the provisioning server will use to configure the new device and then add any as needed. 1 Open the SkyProvision Software Maintenance pane.
Figure 5. Add Software dialog box Select a software image from the list and click OK. The selected image now appears in the Software Maintenance list. Repeat step 2 to add additional software images. Specifying a domain After adding any software images as necessary, you need to specify a domain for the SkyExtender DualBand that’s consistent with the domain assigned to the SkyGateway operating as a hub for the wireless mesh network. 1 Open the SkyProvision Domain pane.
Figure 6. Domain list 2 Add a domain. Click the Add button below the Domain list to open the Add Domain dialog box. Figure 7. Add Domain dialog box Enter a domain name and number, and then click OK. (The Comment field is optional.) The domain now appears in the Domain list.
Creating a node profile After confirming the availability of software images and the correct domain, your next step is to create a node profile for the SkyExtender DualBand. 1 Open the Node Profile pane. In the taskbar, double-click SkyProvision > Node Profile. The Node Profile pane appears, listing existing node profiles. Figure 8. Node Profile list 2 Add a new node profile. Click the Add button below the Node Profile list to display the Add Node Profile dialog box.
Figure 9. Add Node Profile dialog box Use the provided fields and pull-down menus to specify general operating parameters for the profile, including a profile name, software images, domain, Ethernet status, and operating frequency. Click OK to save the settings. The new node profile now appears in the Node Profile list. Creating a node After creating the node profile, you can specify the SkyExtender DualBand as a new node on the wireless mesh network.
Figure 10. Node Maintenance list 2 Add a new node. Click the Add button below the Node Maintenance list to display the Add Node dialog box. (Asterisks identify required fields.
Figure 11. Add Node dialog box Use the MAC Address fields to enter the SkyExtender DualBand MAC address, which is printed on a label affixed to the base of the device. From the Node Type pull-down menu, choose SkyExtender DualBand. From the Node Profile pull-down menu, choose a node profile. Add any other information you want to include in the node description and click OK. The new node now appears in the Node Maintenance list. Figure 12 shows an example.
Figure 12. Node Maintenance list with SkyExtender DualBand node Because you specified the new node as a SkyExtender DualBand, access point options for the device are now available in the taskbar. See the SkyPilot Network Administration Guide provided on the SkyPilot Networks Software CD for more information on using the EMS application to configure SkyExtender DualBand for network operations on a SkyPilot wireless mesh network.
The information pane lists any existing access point security profiles. Figure 13. Access Point Security Profile list If the pane lists a profile that you want to use, go to step 3. If you need to create a profile, go to step 2. 2 Add a new access point security profile. Click the Add button below the profile list to display the Add Access Point Security Profile dialog box. (Asterisks identify required fields.
Figure 14. Add Access Point Security Profile dialog box Use the provided fields and pull-down menus to give the profile a name, specify login session parameters, enable a Telnet server, and choose logging and management options. Click OK to save the profile, which now appears in the list of access point security profiles.
authenticate users. If the profile does not exist, you must create it before you can complete configuration of the access point for WPA. NOTE 1 The configuration of a Radius server for authenticating Wi-Fi users varies, depending on the vendor solution, and is outside the scope of this document. View existing Radius profiles. In the taskbar, double-click SkyProvision > DualBand Access Point > Access Point Radius Profile. The information pane displays any existing access point Radius profiles.
Figure 16. Add Access Point Radius Profile dialog box Use the provided fields and pull-down menus to give the profile a name, enter the IP address of the primary host, provide a shared secret, and identify authentication and accounting ports. In the Primary Host fields, enter the primary Radius server IP address. Use the Primary Shared Secret field to supply the shared secret string specified in the Radius server’s client configuration.
Creating a WLAN SSID profile for open configuration An open (unprotected) configuration allows anyone with Wi-Fi capability to connect to the wireless network via the SkyExtender DualBand access point. An open configuration doesn’t include any mechanism for authenticating users at the network layer, thereby making it easy for users to connect to the WLAN. There are obvious security concerns for an open configuration.
If the pane lists an access point WLAN SSID profile that you can use to configure an open access Wi-Fi network, skip to the section “Creating an access point profile” on page 38. If you need to create an access point WLAN SSID profile, continue with step 2. 2 Add a new WLAN SSID profile. Click the Add button below the profile list to display the Add Access Point WLAN SSID Profile dialog box. (Asterisks identify required fields.) Figure 18.
To make the WLAN visible to users searching for wireless networks, choose Enable from the Broadcast SSID pull-down menu. (This should be enabled in almost all instances.) Make the WLAN operational by choosing Active from the SSID Status pulldown menu. If Active is not chosen, the access point won’t announce the SSID or respond to requests by clients to associate with the WLAN. Make the WLAN an open network by choosing None from the Security Policy pull-down menu. Figure 19.
Figure 20. Access Point WLAN SSID Profile list with new profile Repeat step 2 to add additional WLAN SSID profiles. With a WLAN SSID profile for open access available, complete the access point configuration by going to the section “Creating an access point profile” on page 38. Creating a WLAN SSID profile for WPA A Wi-Fi protected access (WPA) configuration for the SkyExtender DualBand authenticates Wi-Fi network users via a Radius server. WPA uses the IEEE 802.
In the taskbar, double-click SkyProvision > DualBand Access Point > Access Point WLAN SID Profile. The information pane displays any existing WLAN SSID profiles. Figure 21 shows an example. Figure 21. Access Point WLAN SSID Profile list If the pane lists an access point WLAN SSID profile that you can use to configure a protected access Wi-Fi network, skip to the next section. If you need to create an access point WLAN SSID profile, continue with step 2. 2 Add a new WLAN SSID profile.
Figure 22. Add Access Point WLAN SSID Profile dialog box (top half) Enter a unique name for the WLAN in the WLAN SSID field. (You cannot create multiple SSIDs with the same name.) To direct all traffic on the WLAN to a particular VLAN, enter an ID number in the VLAN ID field. (If you aren’t using VLANs, enter 0 in this field.) NOTE If you’re setting up multiple WLAN SSIDs with different security policies or multiple IP address spaces, the use of VLANs is highly recommended.
Choose additional security settings in the Security area. (Do not enable Pre-Shared Key.) NOTE Typically, you won’t use a pre-shared key (PSK) for public access networks. If you want to employ encryption and key management mechanisms that are more stringent than WEP (Wired Equivalent Privacy), use Radius-based WPA instead of WPA-PSK. Figure 23.
Figure 24. Access Point WLAN SSID Profile list with new profile Repeat step 2 to add additional WLAN SSID profiles. Creating an access point profile Complete the access point configuration by creating an access point profile. 1 Open the Access Point Profile pane. In the taskbar, double-click SkyProvision > DualBand Access Point > Access Point Profile. The Access Point Profile pane appears, listing any existing access point profiles.
Figure 25. Access Point Profile list (empty) 2 Add a new access point profile. Click the Add button below the Access Point Profile list to display the Add Access Point Profile dialog box. (Asterisks identify required fields.) Figure 26.
Use the provided fields and pull-down menus to give the profile a name, choose a software image, choose an access point security profile, and (if using WPA) specify an access point Radius profile. Click OK to save the settings. The new profile now appears in the Access Point Profile list. Figure 27. Access Point Profile list with new profile Viewing the access point nodes SkyProvision automatically creates the access point node from the access point profile you supplied.
Figure 28. Access Point list For each access point, SkyProvision shows current information, including the MAC address, name, profile assignment, and creation date. Verifying the new node To verify that the newly configured SkyExtender DualBand is configured as a network node, use the SkyControl application to view a graphical representation of the device as part of the domain to which you assigned it. 1 View the node in the domain map.
Figure 29. SkyControl domain view 2 View the device details. Double-click the SkyExtender DualBand icon to display a Device Details window for the device. The window displays current settings for the device, including its MAC address, IP address, and network status. Figure 30 shows an example. Figure 30.
3 Click Close. Provisioning the SkyExtender DualBand The access point configuration you created in SkyProvision is automatically sent to the SkyExtender DualBand the next time the device is polled by the network. For more information on using SkyControl to set polling intervals and other provisioning parameters, see the SkyPilot Network Administration Guide.
5 Using the Access Point Configuration Tool This chapter explains how to manually configure a SkyExtender DualBand access point with the Web-based configuration tool on board in the access point. Manual configuration using an on-board configuration tool is provided as an alternative to automatic configuration via the provisioning server and SkyPilot EMS software. You’ll learn how to connect to the tool and use it to set operating and access parameters for the Wi-Fi network.
If you set a management VLAN for the SkyExtender component of the SkyExtender DualBand via the EMS client or a manual configuration, the SkyExtender DualBand access point automatically uses the same VLAN as the SkyExtender component to manage access point communications. If no management VLAN is set for the SkyExtender component, you cannot set up a management VLAN for only the access point component.
You’ll use this IP address to connect to the access point over the SkyPilot wireless mesh network. NOTE 3 You can also configure the DHCP server to provide a specific address based on the MAC address of the access point—that is, 1 less than the MAC address that’s visible on the label affixed to the bottom of the SkyExtender DualBand. Confirm that you can communicate with the access point within the SkyExtender DualBand. Ping the address you identified in step 2.
NOTE The SkyExtender DualBand does not have to be connected to a SkyPilot mesh network while you’re configuring it for access point operations via an 802.11b/g wireless connection. If the SkyExtender DualBand is also connected to the wireless mesh network and is receiving an IP address from a DHCP server, you’ll have to view the DHCP log to identify the IP address. To connect to the access point from the Wi-Fi network: 1 Set up your host computer’s 802.
Command-Line Interface ,” for instructions on verifying the address of the access point from a serial console. Starting the configuration tool To run the configuration tool, you need the current address of the access point component of the SkyExtender DualBand. (The default IP address of the access point is 198.68.0.3.) If the access point was assigned an IP address by a DHCP server, it must be within the address space the DHCP server uses to populate devices.
Figure 32. Prompt for user name and password 2 Log in by entering the default user name (admin) and password (public). A summary page appears, displaying the current status of the access point. The next section shows an example and explains the information displayed. The configuration tool provides a navigation bar on the left side. To navigate to a page, click the corresponding item in the bar. You create and modify configurations by using tool pages to enter data and select configuration options.
Figure 34. Information Summary page AP Name. The name assigned to the access point. Network IP Address. The IP address of the access point, assigned by DHCP or provided as a static address. (The default is 192.168.0.3.) Software Version. The version of the software running on the access point. Up Time. The amount of time since the access point was last booted. System Time.
Figure 35. Access Point Configuration page After modifying the access point configuration settings, click the Save or Save to flash and activate button at the top or bottom of the page: o Click Save to save your changes to volatile RAM on the access point. A message confirms the change in configuration. o Click Save to flash and activate to save your changes to flash (nonvolatile) memory and instantly update the SkyExtender DualBand access point’s active configuration.
Figure 36. Name and address fields on Access Point Configuration page AP Name. A name to be given to the access point. (This name is for user convenience; it has no relation with the device address.) Location. A location name for the access point. (The location name is also for user convenience; it has no effect on the device address.) Server IP. An IP address to be used for managing the access point. It should be in the same network segment as the management IP address for the SkyExtender.
TFTP Server Address. Overrides Provisioning TFTP Server Address. (Leave blank for now.) Management HTTP Server Address. Overrides Provisioning HTTP Server Address. (Leave blank for now.) VLAN ID. A read-only field that automatically denotes the same VLAN as the SkyExtender’s management VLAN. If there is no management VLAN, this field shows 0. NTP Server. xxx.
Maximum Remote Session. Use this field to enter the number of simultaneous remote SSH or Telnet sessions that are allowed. If the value is 0, unlimited sessions are allowed. Remote Session Idle Timeout. Use this field to specify how long (in minutes) an SSH or Telnet session will stay connected without activity. If the value is 0, the idle timeout is unlimited. Peer to Peer. Check to block Layer 2 broadcast and ARP traffic between wireless clients.
Primary Host. An IP address for the primary Radius server that will authenticate users of any 802.1x/WPA WLANs. Secret. The shared secret that is configured in the primary Radius server and is used to authenticate the access point to the Radius server. Authentication Port. A TCP/UDP port for primary Radius server authentication services. The port number you supply must be the one on which the primary Radius server is configured for authentication.
nonoverlapping channels unless you plan to implement special channel reuse patterns and possess the requisite technical knowledge. Dual Antenna Diversity. Check to enable antenna diversity. WLANs page Clicking WLAN Settings in the configuration tool navigation bar takes you to the WLANs page, which lets you view and configure wireless networks (also known as virtual access points or multiple SSIDs).
After making edits on the WLAN Details page, click Save to save your changes to volatile RAM on the access point, or Save to flash and activate to save them to flash memory and instantly update the access point’s active configuration. After a save, the WLANs page reappears, displaying the new WLAN or updated details of the edited WLAN.
know the SSID and are able to configure their client software to connect to the SSID. (Enable this option for most cases.) Default Quality of Service. Use this menu to choose one of three 802.1p Quality of Service (QoS) levels. The access point does not enforce the selected QoS level; it simply sets the 802.1p tag for the selected level on all traffic that enters the WLAN. The mapping of the QoS pull-down options to 802.1p user priority is: Gold = 6, Silver = 3, and Bronze = 0. Figure 42.
Figure 43. WLAN Details page showing DHCP Server Type menu If you choose Relay, a new field, DHCP Server IP, appears in an area labeled DHCP Relay Parameters. Use this field to supply the IP address of the authoritative DHCP server for the network. Figure 44. DHCP Relay Parameters area of WLAN Details page If you choose Server from the DHCP Server Type menu, a DHCP Server Parameters area appears that lists additional fields for configuring a local DHCP server for use by the WLAN.
Figure 45. DHCP Server Parameters area of WLAN Details page IP Start Range. A starting address for the IP address pool supplied by the DHCP server—for example, 192.168.10.100. IP Stop Range. An end address for the IP address pool—for example, 192.168.10.254. Subnet Mask. A subnet mask for this network segment—for example, 255.255.255.0. Broadcast Address. An IP address for IP broadcasts on this network segment. Gateway. The IP address of the default gateway/router for this network segment. DNS 1.
DNS 3. The IP address of the tertiary DNS resolver for this network. Domain. A default domain name for this network. Lease Time. The length of time each DHCP lease remains valid before renewal is necessary. Security Policy menu Use the Security Policy menu on the WLAN Details page to specify the types of encryption and authentication you want the WLAN to use. Figure 46. WLAN Details page showing Security Policy menu The choices are: o None. An open network (no authentication or encryption). o Static WEP.
o 802.1X. Authentication via 802.1x/EAP. This scheme uses encryption with dynamic WEP (the WEP key is unique per session and is automatically changed at a periodic rate via Radius re-authentication). This is the preferred option for older clients that do not support WPA. WPA is the best choice unless there are specific CPE requirements. NOTE 802.1x requires you to configure at least one Radius server on the Access Point Configuration page. If 802.
o WPA-TKIP. Authentication via 802.1x/EAP, and encryption via TKIP (Temporal Key Integrity Protocol), a hardened version of the older WEP standard. The key is updated automatically and transparently with DES (Data Encryption Standard) or AES (Advanced Encryption Standard) encryption. This option provides the highest level of security, but it requires users to have a WPA client (which is built into recent versions of Windows XP, Mac OS X, and Linux).
not very useful to service providers, however, since one password is shared by all subscribers (so it’s not very secret). Always enable Pre-Shared Key for WPA-PSK. SNMP Server Settings page Clicking SNMP Settings in the configuration tool navigation bar takes you to the SNMP Server Settings page. Use this page to configure the access point for SNMP operations. Figure 49.
SNMP v1/v2 Communities area The SNMPv1/v2 Communities area of the SNMP Server Settings page displays existing SNMP communities and provides commands for editing, deleting, or creating communities. Clicking New after SNMPv1/v2 Communities displays the Community page, where you can configure a new SNMPv1 or SNMPv2 community. Figure 50. SNMPv1/v2 Community page Community Name. Sets the SNMPv1/v2 community name. IP Address.
Clicking New after SNMPv3 Users displays the SNMPv3 User Setting page, where you can set the SNMPv3 parameters. Figure 51. SNMPv3 User Setting page SNMPv3 User Name. A user name for logging in to the SNMPv3 agent. Authentication Protocol. A choice of None, HMAC-MD5, or HMAC-SHA. If HMACMD5 or HMAC-SHA is chosen, two new fields appear that require you to fill in the password used to authenticate the user name. Figure 52. SNMPv3 User Setting page showing authentication password fields Privacy Protocol.
Figure 53. SNMPv3 User Setting page showing privacy password fields Access Mode. Allows this SNMPv3 user to have read-only or read-write access. Status. Enabled or disables this SNMPv3 user. Web Admin Management page Clicking Web Admin Settings in the configuration tool navigation bar takes you to the Web Admin Management page. Use this page to view and modify the parameters that control Web access to the configuration tool: management port, user name, and password.
Figure 54. Web Admin Management page To modify a Web access parameter, click the radio button that corresponds to the parameter you want to change. After modifying the Web Admin configuration settings, click Save to save your changes to volatile RAM on the access point, or Save to flash and activate to save them to flash memory and instantly update the access point’s active configuration. (You can also save all configuration changes to flash memory from the Configuration Management Commands page.
Figure 55. Change Management Port Change Admin Password. Click this button to assign a new password for Web access to the configuration tool. When this option is selected, password entry and confirmation fields appear. Figure 56. Change Admin Password Disable/Enable Web Administration. When this option is selected, radio buttons for disabling or enabling Web access of the configuration tool appear. Click the appropriate button.
Figure 57. Disable Web Administration Message Log page Clicking Message Log in the configuration tool navigation bar takes you to the Message Log page. Use this page to display a log of recent events—a snapshot of the most recent syslog output. The page is updated each time you click Message Log in the navigation bar or click the Reload button on the page. Figure 58 shows an example. Figure 58.
Configuration Management Commands page Clicking Commands in the configuration tool navigation bar takes you to the Configuration Management Commands page. Use the commands on this page to save configuration changes to volatile RAM or to activate configuration changes by saving them to flash (nonvolatile) memory. You can also reboot the access point from this page. Figure 59. Configuration Management Commands page Choose a command by clicking the corresponding radio button.
A Connecting to the Access Point Command-Line Interface This appendix describes tells you how to access the command-line interface of the access point in order to troubleshoot the device. Typically, you will use this technique to confirm the IP address of the access point component of the SkyPilot DualBand. You can connect to the access point command-line interface via Telnet over a wireless network connection.
From your Telnet application, open a connection to the access point. 3 Log in by entering the default user name (admin) and password (public) at the command prompt. Once you’re logged in, you can use the command-line interface to set configuration parameters or retrieve the IP address of the access point 4 Get the IP address of the access point.
B Manually Updating the Access Point Firmware This appendix describes how to manually update the firmware in your SkyExtender DualBand access point. 1 Use FTP client software to download the firmware image from the SkyPilot FTP site to a host computer. The image file is available on the FTP site as a binary file that you can identify by the prefix and version number in its name—for example, SkyAP.2.0.16.bin.
4 Upload the image file you renamed firmware.img. FTP to the IP address of the access point and upload the firmware image. Run the FTP client in the same directory as where the firmware image file is currently residing. NOTE Do not turn off power to the access point or otherwise interrupt the updating of the firmware. The following is an example of a command-line exchange in a firmware update. # ftp 192.168.0.3 Connected to 192.168.0.3 220 Simple FTPd welcomes you. Name (192.168.0.
C WLAN Configuration Types The appendix describes the two WLAN configuration types: open (unprotected) configuration and Wi-Fi protected access (WPA). Open configuration An open configuration allows anyone with Wi-Fi capability to connect to the wireless network via the SkyExtender DualBand access point. An open configuration doesn’t include any mechanism for authenticating users at the network layer.
Internet applications such as email, SSH, FTP, or chat clients. Open access also makes the network more vulnerable to unauthorized access and malicious actions (including denial-of-service attacks) than WPA-secured networks. Wi-Fi protected access (WPA) Wi-Fi protected access (WPA) is an industry-standard mechanism and protocol that requires users to be authenticated before they can have access to the wireless network. (See http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access for more information.
NOTE The configuration of a Radius server for authenticating Wi-Fi users depends on third-party solutions and is outside the scope of this document.
