User's Manual

ManualsBrandsUTStarcom Telecom ManualsElectronicsAccess Point

WA3001 Indoor AP

Wireless Access Point

USER GUIDE

Release: 1.1

Doc. Code: L3 DW09 1000 02 010 00

UTStarcom, Inc.

Summary of content (252 pages)

PAGE 1
WA3001 Indoor AP Wireless Access Point USER GUIDE Release: 1.1 Doc. Code: L3 DW09 1000 02 010 00 UTStarcom, Inc.
PAGE 2
PAGE 3
Copyright © 2004 UTStarcom, Inc. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without prior, express and written permission from UTStarcom, Inc. UTStarcom, Inc. reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of UTStarcom, Inc. to provide notification of such revision or changes.
PAGE 4
PAGE 5
Regulatory statement (FCC) The users manual or instruction manual for an intentional or unintentional radiator shall caution the user that changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. IMPORTANT NOTE (CO-LOCATION) FCC RF Radiation Exposure Statement: This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment.
PAGE 6
15.105(b) Information of the responsible party for a DoC product The identification of the product: Product Name: Wireless Access Point Model: WA3001 Technical Support: Technical Support in the US: UTStarcom Telecom Co., Ltd. UTStarcom, Inc. Address: NO.88 Wenhua Road, Hangzhou PRC 310012 Address: 1275 Harbor Bay Parkway Alameda, CA 94502 USA Telephone : 0571-88862342-3524 Telephone: 1 (866) 663-3266 Email: cbshi@utstar.com Email: ips@utstar.com 15.
PAGE 7
Regulatory statement (CE R&TTE) European standards dictate maximum radiated transmit power of 100mW EIRP and frequency range 2.400-2.4835GHz; In France, the equipment must be restricted to the 2.44652.4835GHz frequency range and must be restricted to indoor use.
PAGE 8
• EN 300 328 V.1.4.1 (2003-04) • EN 301 489-1 V.1.3.1 (2001-09) / EN 301 489-17 V.1.1.
PAGE 9
PAGE 10
Contents 1 Product Introduction ..................................................................... 1 Product Introduction..................................................................................... 2 Product Features ......................................................................................... 3 2 System Application........................................................................ 5 Wireless Network Access (MiniPCI Network Card).......................................
PAGE 11
ii Hardware Installation ..................................................................................15 System Access ...........................................................................................16 Firmware Description..................................................................................18 4 Web-based Configuration Introduction......................................21 Configuration Flow......................................................................................
PAGE 12
iii NAT Configuration ..................................................................................... 67 NAPT Mode ........................................................................................... 68 Basic NAT Mode .................................................................................... 70 Isolation&filter Configuration ...................................................................... 71 MAC Management.........................................................................
PAGE 13
iv AP in Router Mode (Case 1).....................................................................106 AP in Router Mode (Case 2).....................................................................111 9 CLI Command Set ......................................................................117 EXEC Commands ....................................................................................117 Debug ...................................................................................................
PAGE 14
v Disable................................................................................................. 123 Erase Config ........................................................................................ 123 Clear ARP............................................................................................ 124 Clear DHCP Binding ............................................................................ 124 Clear DHCP Statistics ..................................................................
PAGE 15
vi DHCP-Pool ...........................................................................................131 DHCP-Server Host................................................................................131 Dot1x Authentication Enable / Disable ..................................................132 Dot1x Authentication Mode ...................................................................132 Dot1x Encryption-Mode.........................................................................
PAGE 16
vii Isolation ............................................................................................... 144 Load-Balance Enable/Disable .............................................................. 144 Load-Balance Mode ............................................................................. 145 MAC Age Time..................................................................................... 145 MAC Black-List ....................................................................................
PAGE 17
viii RADIUS-Acctserver Info .......................................................................154 RADIUS-Authserver {Enable | Disable} .................................................155 RADIUS-Authserver Extra.....................................................................155 RADIUS-Authserver Host......................................................................155 RADIUS-Authserver Info .......................................................................156 RADIUS-Server Dead-Time ....
PAGE 18
ix VLAN Default VID ................................................................................ 164 VLAN Employee Default VID................................................................ 164 VLAN Enable/Disable........................................................................... 165 VLAN Mode.......................................................................................... 165 VLAN port-vid.......................................................................................
PAGE 19
x IP Address ............................................................................................174 Wireless Port Configuration Level.............................................................174 Beacon Interval.....................................................................................174 Basic Rate ............................................................................................175 Fragment Threshold...........................................................................
PAGE 20
xi WPA Groupkey-Update-Interval ........................................................... 184 Optimize-108g Enable/Disable ............................................................. 185 Webserver Mode ..................................................................................... 185 Enable/Disable..................................................................................... 185 IP-Filter Enable/Disable........................................................................
PAGE 21
xii Show Debug_Module............................................................................192 Net-Security Rate-Limit Enable/Disable ................................................193 Net-Security Syn-Cache Enable/Disable ...............................................193 Net-Security Attack-Defense Enable/Disable ........................................193 Show Net-Security ................................................................................193 Ipstack Debug............................
PAGE 22
xiii Show NAT Translation ......................................................................... 201 Show NAT Configuration...................................................................... 202 Show Managed-Interface ..................................................................... 202 Show IP-Route..................................................................................... 203 Show Access-List Configuration...........................................................
PAGE 23
xiv Show VLAN Binding..............................................................................210 Show IAPP Configuration......................................................................211 10 Troubleshooting .........................................................................213 11 Technical Specifications............................................................215 12 Acronyms and Abbreviations....................................................
PAGE 24
xv List of Figures Figure 1 Single-cell Wireless Network Topology .................................................. 6 Figure 2 Multi-APs with different ESS_IDs in Separate Networks Topology ......... 6 Figure 3 Multi-APs within a Network Topology ..................................................... 7 Figure 4 Extension of Wired Network Topology.................................................... 8 Figure 5 Repeater Point-to-Point Mode Network Topology...................................
PAGE 25
xvi Figure 20 Advanced Configuration Part II ...........................................................36 Figure 21 Basic Config - Wireless Port Config ....................................................40 Figure 22 Wireless Port Configuration ................................................................43 Figure 23 DHCP Server Configuration ................................................................46 Figure 24 WAN Port Configuration Interface ....................................................
PAGE 26
xvii Figure 43 Initiating Configuration File Erase Message ....................................... 82 Figure 44 Debug Configuration .......................................................................... 83 Figure 45 Interface Statistics.............................................................................. 86 Figure 46 DHCP Server Statistics ...................................................................... 88 Figure 47 DHCP Relay Statistics ..................................................
PAGE 27
xviii List of Tables Table 1 WA3001 Front Panel LED Indicators ......................................................13 Table 2 Wireless Frequency Channel Default Setting..........................................19 Table 3 Configuration Menu in Bridge Mode .......................................................23 Table 4 Configuration Menu in Router Mode .......................................................24 Table 5 Wireless Port 1 Interface Specification ................................................
PAGE 28
xix Table 18 RADIUS Client Statistics Window Description...................................... 94 Table 19 Online User Information Window Description....................................... 98 Table 20 Troubleshooting................................................................................. 213 Table 21 WA3001 AP Technical Specifications ................................................
PAGE 29
PAGE 30
1 1 Product Introduction WA3001 is a switch-like WLAN Access Point that offers industry-leading performance/price ratio and a comprehensive feature set. It is designed especially for a Wireless Internet Service Provider (WISP) that provides Wireless Internet services - including hotspot and corporate deployment planning. WA3001 supports IEEE802.11b and 802.11g, SNMP centralized network management, authentication and billing systems.
PAGE 31
2 Chapter 1 Product Introduction elimination of blind spots. UTStarcom has made rapid progress on all of these areas utilizing the latest XR and Super G technology. Product Introduction Port Introduction: - One 10/100M Ethernet WAN port - Four 10/100M Ethernet LAN ports - One Mini-PCI socket supports Type III PC card - One hot pluggable CardBus socket supports Type II PC card - One RS-232 port for management and console Compliance: - IEEE 802.3X, duplex 10BaseT, 100BaseTX ports - IEEE802.
PAGE 32
Chapter 1 Product Introduction 3 Connector: - 10/100Base-TX port: RJ-45 - Management console ports: RS-232 Product Features • 6M/s throughput rate • Supports 802.3af inline power supply (PoE) • Compatible with 802.11b and 802.11g • Supports four adjustable RF power levels (10mw–20mw– 50mw-100mw) • Supports 64/128-bit WEP Encryption • Supports 802.
PAGE 33
4 Chapter 1 Product Introduction • Supports user-access load-share (roundrobin& leastconn&hash) and control based on flow and user number • Supports NAT or any IP • Supports link-test (default-gateway is unavailable for WA3001) • Supports Repeater mode (dual mode) • Super G maximize network throughput, peak flow is able to reach the wire LAN throughput at 10/100M.
PAGE 34
2 2 System Application WA3001 is built with both regular AP (miniPCI network card) and Repeater (CardBus adapters) functions. As a Repeater, from network coverage point of view, the AP can be configured in point-to-point (P2P) mode or point-to-multiple points (P2MP) mode (one AP connects with up to four APs). As a regular adapter, the AP can be configured as a single-cell network, a multi-cell network, or an extension of wired network.
PAGE 35
6 Chapter 2 System Application Figure 1 Single-cell Wireless Network Topology Multiple APs in Separate Networks Multiple APs can coexist as separate networks in the same site without interference by using different ESS_IDs. E.g.
PAGE 36
Chapter 2 System Application 7 Multiple APs within a Network Multiple APs wired together provide a network with a better coverage area and performance - by using the same ESS_ID. E.g. Within a company, each department accesses a public file server through its own AP. Figure 3 Multi-APs within a Network Topology Extension of Wired Network AP can connect to the wired network through WAN ports, or connect to wireless clients through wireless ports. E.g.
PAGE 37
8 Chapter 2 System Application Figure 4 Extension of Wired Network Topology Repeater Mode (CardBus Adapter) Point-to-Point Mode Point-to-Point mode is used to connect two networks in WLAN application. E.g.: In a campus, using WA3001’s point-to-point mode to connect two buildings in a separate wired network. In this mode, AP must to be configured with a cardBus adapter to function as a repeater.
PAGE 38
Chapter 2 System Application 9 Figure 5 Repeater Point-to-Point Mode Network Topology Point-to-Multiple Points Mode In WLAN application, point-to-multiple points mode dramatically expands network coverage and quickly establishes the connectivity among existing networks.
PAGE 39
10 Chapter 2 System Application Repeater + AP Combined Network Capable of being a wireless entrance for wireless clients, or a repeater of a wired network, the WA3001 expands network coverage easily via wireless connection.
PAGE 40
Hardware Installation 3 3 Package Contents Before using this AP, check the accessories in the box. If you find anything missing or the documentation set is incomplete, contact your local dealer immediately.
PAGE 41
12 Chapter 3 Hardware Installation - Support local DC 12V/1.25A Note: The two power supply modes cannot be used simultaneously. In PoE power supply mode, RJ45 4/5(+)7/8(-) connects to WAN port.
PAGE 42
Chapter 3 Hardware Installation 13 Table 1 shows the list of LED indicators (from left to right) on the front panel along with their activity status and descriptions Table 1 WA3001 Front Panel LED Indicators LED Indicators Status Description POWER Lighting in green Lights when power is being supplied well AP Lighting in green Lights when AP is able to be connected by clients WLAN Blinking in green LAN LINK Blinking in green Lighting in green Off: No wireless channel Blinking: with wireless
PAGE 43
14 Chapter 3 Hardware Installation The following table lists the items on side panel (1) (from left to right) Interface Description Console port RS-232 connector for LAN management RESET Restore button to reboot/reset the AP to its default settings LAN Four LAN ports to access Ethernet, RJ-45 connector Figure 10 WA3001 Side View (2) The following table lists the items on the side panel (2) (from left to right) Interface Description WAN WAN port used for uplink connection.
PAGE 44
Chapter 3 Hardware Installation 15 Product Top View Figure 11 WA3001 Top View WA3001 AP’s rubber top shown in Figure 11 is for installing a Wireless LAN CardBus Adapter. Hardware Installation Steps: 1. Location: Place the AP in an appropriate place in a room. 2. Antenna: Screw two antennae into both side of the AP 3. Install bracket (or put the AP on the table directly) 4.
PAGE 45
16 Chapter 3 Hardware Installation Figure 12 Installation Diagram System Access Network management methods: - Through LAN port: connects PC to LAN port that can identify the connection automatically, use crossover or straight-through network cable - Through WAN port: connects PC to WAN port, use crossover network cable - Through wireless port: installs a wireless network card into PC and find AP through Windows IE.
PAGE 46
Chapter 3 Hardware Installation 17 System default IP address: - WAN port: 192.168.1.1/255.255.255.0 - LAN port: 172.18.37.1/255.255.255.0 Default user name and password: - Administrator: User name: admin Password: admin - Guest: User name: guest Password: guest System access procedure: 1 Connects the power adapter to an AP 2 Makes sure that the connection between PC and AP’s LAN port is connected. 3 Configures PC network card’s IP address to 172.18.37.100/255.255.255.
PAGE 47
18 Chapter 3 Hardware Installation 5 Use the default user name and password to logon User name: admin Password: admin Figure 13 Logon Window Firmware Description The default setting of WA3001 firmware is different according to the nation-wide regulation of wireless frequency channel. The AP configuration of this manual applies to China area only. The values listed in Table 2 are wireless frequency channel default settings of other areas.
PAGE 48
Chapter 3 Hardware Installation Table 2 Wireless Frequency Channel Default Setting Nor t h Eur ope/ ETSI Amer i ca/ FCC Operation Channel 2.412-2.462GHz 2.412-2.472GHz Frequency Channel 1-11 (Default: 1) 1-13 (Default: 1) Default Power RF Mode b: 40mw (16dBm) Mode g: 25mw (14.5dBm) / 70mw (18.
PAGE 49
PAGE 50
4 4 Web-based Configuration Introduction Configuration Flow Figure 14 Configuration Flow Chart Logon Configuration & Apply Save & Reboot System Configuration Introduction Log on the system, select an operation mode and configure the ports accordingly. In Router mode, WAN port configuration depends on the retrieval of IP address (Either DHCP server or DHCP client is provided). In Bridge mode, configuration is not required for the WAN port.
PAGE 51
22 Chapter 4 Web-based Configuration Introduction The LAN port must be configured in both modes based on the IP address. In wireless mode, configure the wireless port and its channel attributes.
PAGE 52
Chapter 4 Web-based Configuration Introduction Bridge/Router Mode Introduction Table 3 Configuration Menu in Bridge Mode Main Menu Logon Guide Basic Config Advanced Config System Config Statistic Sub Menu 23
PAGE 53
24 Chapter 4 Web-based Configuration Introduction Table 4 Configuration Menu in Router Mode Main Menu Sub Menu Logon / Guide / Basic Config Advanced Config System Config
PAGE 54
Chapter 4 Web-based Configuration Introduction Main Menu 25 Sub Menu Statistic Description: • Wireless port configuration - The system is able to configure two wireless network cards at the same time. The default assumes a Mini PC card on Wireless port 2. - Configure the 802.11b attributes for the wireless port - Activate WDS mode to implement Repeater functions - Activate WEP encryption to provide data transmission security.
PAGE 55
26 Chapter 4 Web-based Configuration Introduction • DHCP Server configuration - Configure the DHCP server when the AP needs to allocate an IP address to its clients - Configure the DHCP address field attributes, or keep the default attributes - DHCP Client configuration - Configure the DHCP client when the AP needs to allocate an IP address to a client through the remote DHCP server • Authentication - Activate the option for 802.
PAGE 56
Chapter 4 Web-based Configuration Introduction 27 • Route configuration - In Router mode, users can define AP’s next route • ARP management - Provides information about network equipment connected to the AP intended for users • MAC filter configuration - Manages the accessed users based on MAC.
PAGE 57
28 Chapter 4 Web-based Configuration Introduction Logon the System Access Methods: Enter the default IP address in the browser’s logon field, then enter the default user name and password. Interface: Figure 15 Logon Successful Description: • General introduction The left panel is the function link area.
PAGE 58
Chapter 4 Web-based Configuration Introduction 29 • Left panel introduction - Logon: log on the system - Guide: A brief instructional guide describes the basic system configuration of WA3001 step by step.
PAGE 59
30 Chapter 4 Web-based Configuration Introduction - : Presses to apply a configuration changes. Some configurations are applied only after saving and rebooting the AP. A corresponding prompt window will be popped up. - : refreshes the interface. - : restores the default parameters.
PAGE 60
Chapter 4 Web-based Configuration Introduction 31 Description: - Press to save the system configuration changes - Press to apply the configuration.
PAGE 61
PAGE 62
Web-based Configuration 5 5 This chapter introduces all Web-based configuration steps.
PAGE 63
34 Chapter 5 Web-based Configuration Figure 18 Basic Configuration Basi c Conf i gur at i on Basi c Mode Wi r el ess 1 Wi r el ess 2 ( opt i on) Br i dge / Rout e SSI D Channel Channel Reboot WEP enabl e/ di sabl e WEP enabl e/ di sabl e Save conf i gur at i o n SSI D WEP key WEP key Key t ype Key t ype Key 1 Key 1 WAN LAN Dynami c/ St at i c I P I P addr ess St at i c I P addr ess I P Mask St at i c I P mask Enabl e/ Di sabl e DHCP DHCP ser ver/ Rel ay/ None I P addr ess Gat
PAGE 64
Chapter 5 Web-based Configuration 35 Figure 19 Advanced Configuration Part I Advance configuration (1) MAC Filter ARP NAT Wireless port 1 performance Wireless port 2 performance Enable / Disable Beacon Interval Beacon Interval Basic/NAPT DTIM interval DTIM interval Start IP/ End IP Power Power Boradcast limit map Basic rate Basic rate Isolation redirect TX rate TX rate timeout fragment threshold fragment threshold rts/cts threshold rts/cts threshold MAC age MAC filter Enable/
PAGE 65
36 Chapter 5 Web-based Configuration Figure 20 Advanced Configuration Part II Advance (2) Authentication RADIUS Client Wireless 1 WD S SMS Re-authperiod DOT1X enable/ disable Host server Dynamic user WDS enable/ disable (PTP/ PTMP) Server timeout Initialize Accounting key Static user Peer MAC Supplicant timeout Max-request Authentication key Tx-period Reauthentication Dead time Quite period Re-authenticate retransmit Authentication mode MAX request times Time out Encryption mode
PAGE 66
Chapter 5 Web-based Configuration 2. 37 Click , set AP operation mode to “Bridge Mode” Description: If AP is used as Layer 2 bridging, choose the Bridge mode. If AP involves in Layer 3 communication, choose the Router mode. 1. Click to set LAN interface IP address, the default address is 172.18.37.1/255.255.255.
PAGE 67
38 Chapter 5 Web-based Configuration 2. Click to set wireless SSID and Channel, the default SSID is “UT” and the default channel is “1” Description: In a planned AP wireless network, SSID is a service ID which is assigned to the AP by the system administrator. Only a wireless network card with a configured ESSID can get connection from the AP. ESSID has the maximum of 32 characters.
PAGE 68
Chapter 5 Web-based Configuration 39 channel is normally set to 1, 6, 11 or 1, 7, 13, hence the interaction is reduced in most of the situations. 1. Click to complete the Guide configuration 2.
PAGE 69
40 Chapter 5 Web-based Configuration Figure 21 Basic Config - Wireless Port Config Description: Table 5 Wireless Port 1 Interface Specification Field Description Default Value MAC Address Wireless network card MAC address / Uplink Detect Detect the uplink Disabled
PAGE 70
Chapter 5 Web-based Configuration Field Description 41 Default Value ESSID ESSID is a service ID assigned to an AP by the system admin. Only a wireless network card with a configured ESSID can get connection from AP. ESSID has maximum of 32 characters UT Mode 3 optional modes are 802.11b/g, 802.11b and 802.11g. Select b/g compatible mode to get connection through traditional wireless network card in b mode 802.11b/g Frequency Channel Display AP’s current channel.
PAGE 71
42 Chapter 5 Web-based Configuration - Hexadecimal Table 6 WA3001 WEP Encryption Configuration Encryption Mode WEP-64 Alphabetical Uses any 5 alphanumeric characters between “a-z”, “A-Z” and “0-9”. HEX 10 hexadecimal digits between “a-f”, “A-F” and “0-9” with prefix “0x” E.g. 0x11AA22BB33 E.g. MyKey WEP-128 Uses any 13 alphanumeric characters between “a-z”, “A-Z” and “0-9”. 26 hexadecimal digits between “a-f”, “A-F” and “0-9” with prefix “0x” E.g.0X00112233445566778899AABBCC E.g.
PAGE 72
Chapter 5 Web-based Configuration Figure 22 Wireless Port Configuration Description: Table 7 Wireless Port 2 Interface Specification Field Description Default Value Beacon Interval Interval between Beacon packets; the Beacon packet contains network card information, duration of broadcast to the wireless network.
PAGE 73
44 Chapter 5 Web-based Configuration Field Power Description Transmitting power of the AP wireless port. Default Value 100mw Possible values are: 10mw, 20mw, 50mw, 100mw Tx Rate Transmission rate. auto The range of selectable values is decided based on the wireless mode set in the basic config. If Auto is chosen, the network card will select the current optimum rate. Possible values are: 11Mbit/s, 5.5Mbit/s, 2Mbit/s, 1Mbit/s, Auto.
PAGE 74
Chapter 5 Web-based Configuration Field Fragment Threshold Description Fragment Threshold mechanism is used to improve the efficiency in a high volume wireless network. It defines the limit of data packages size. Any package with bigger size than the value will be fragmented into several smaller packages within a range of 256-2346 bytes. Suggestion: do not modify the value 45 Default Value 2346 User can configure all items in table 5-3, but usually “Antenna”, “Power” and “Tx Rate” are configurable.
PAGE 75
46 Chapter 5 Web-based Configuration Interface: Figure 23 DHCP Server Configuration Detailed Instructions: - When DHCP Server is enabled, the system automatically displays the following configuration interface - When DHCP Relay is enabled, the system automatically displays the following configuration interface
PAGE 76
Chapter 5 Web-based Configuration Table 8 DHCP Server Configuration Specification Field Description Default Value LAN Status IP Address IP address 172.18.37.1 Subnet Mask Subnet mask 255.255.255.
PAGE 77
48 Chapter 5 Web-based Configuration Field Trusted DHCP Server1-3 Description Default Value Trusted DHCP server settings, total 3 servers can be set Description: When DHCP Server is enabled - When DHCP server is enabled, it allocates IP address to a Client or AP through LAN port - The subnet mask of DHCP Server IP address pool must be less than the network mask used in LAN interface - Able to allocate maximum of 1024 addresses from IP address pool, including reserved addresses When DHCP Relay i
PAGE 78
Chapter 5 Web-based Configuration Configure WAN interface when AP is in Router mode Access Method: Click the “Basic Config/WAN Interface” link on the left panel Interface: Figure 24 WAN Port Configuration Interface 49
PAGE 79
50 Chapter 5 Web-based Configuration Table 9 WAN Interface Configuration Specification Field Description Default Value WAN Interface Status IP address IP address 192.168.1.1 Subnet mask Subnet mask 255.255.255.0 PPPoE Status PPPoE Status Disconnected DHCP Client Status DHCP Client Status Disabled WAN IP Address Configuration IP Address Obtain Methods 1. PPPoE mode 2. Obtain address automatically using DHCP Specified IP address mode; IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 3.
PAGE 80
Chapter 5 Web-based Configuration Field Config Trusted DHCP Server Description 51 Default Value Perform Trusted DHCP Server Configuration to obtain IP address through DHCP server Detailed Instructions: Click the “Trusted DHCP Server” link to show the following configuration interface Figure 25 Trusted DHCP Server Configuration Description: Up to 5-trusted DHCP servers can be configured In Figure 25, enter DHCP server’s IP address into the input field.
PAGE 81
52 Chapter 5 Web-based Configuration LAN Interface Configuration Objective: User needs to perform LAN interface configuration regardless AP working mode. Access Method: Click the “Basic Config/LAN Interface” link.
PAGE 82
Chapter 5 Web-based Configuration 53 Table 10 LAN Interface Specification Field Description Default Value LAN Interface Enable the interface Enable the interface Enable IP address IP address 172.18.37.1 Subnet mask Subnet mask 255.255.255.0 Radius Client Objective: Provides accounting service to AP subscribers when AP is in Router mode. Access Method: Click the “Advanced Config/Radius Client” link on the left panel.
PAGE 83
54 Chapter 5 Web-based Configuration Figure 27 Radius Client Configuration Interface Interface Description: Table 11 Radius Client Configuration Specification Field Description Default Value Radius Server Enable Server1-3 Enable or disable Radius server, up to 3 servers can be configured Server host address Server host address Authentication Port Authentication Port between AP and Server Disable 0
PAGE 84
Chapter 5 Web-based Configuration Field Accounting POrt Description Accounting Port between AP and Server Default Value 0 Key Config Authentication Key Authentication Key between AP and Server Accounting Key Accounting Key between AP and Server Periods Config Server dead time Server timeout time Server transmit times If the request sent to the Radius Server does not get a response within Timeout value, the request is re-sent to the server until the number of re-tries reaches the value set in the Tr
PAGE 85
56 Chapter 5 Web-based Configuration Click the “Advanced Config/Authentication” link on the left panel Configuration Interface:
PAGE 86
Chapter 5 Web-based Configuration Figure 28 802.
PAGE 87
58 Chapter 5 Web-based Configuration Table 12 802.1x Configuration Specification Field Description Default Value User Authentication Config 802.1x Authentication Enable or Disable 802.1x Authentication disable Authentication Mode Authentication mode options: none, local, remote, local-remote, remote-local none Encryption Mode Encryption mode between wireless terminals and AP. Options: CHAP, PAP PAP Max online user number Max online user number. Options: 1-256 0 802.
PAGE 88
Chapter 5 Web-based Configuration Field Description 59 Default Value Supplication timeout Interval between retries of sending a request frame from AP to Client (second). If within the Timeout period the Client does not respond to the AP’s request, the AP will re-send the request frame. Possible values: 1-65535 seconds.
PAGE 89
60 Chapter 5 Web-based Configuration Field Max Request times for EAP Description Maximum number of retries to send a Request-challenge request from AP to client under EAP authentication (Resending because the Response-challenge was not received). Possible values: 1-2.
PAGE 90
Chapter 5 Web-based Configuration 61 Description: Available Functionality: - Global user configuration parameters (LAN interface and Wireless connected clients), e.g. enable or disable 802.1x authentication, authentication mode, encryption mode, max online user number - Global 802.1x authentication, authentication parameters configuration - Specify authenticated users, initialize authenticated users and re-authenticated users Server-AP-Client User Management Objective: After 802.
PAGE 91
62 Chapter 5 Web-based Configuration Figure 29 Dynamic User Configuration Interface Configuration Description: Detailed Instructions: • Add a new dynamic user Enter User name and Password, and then click . A new entry will be added in the table as shown below. User ID is automatically generated by the system.
PAGE 92
Chapter 5 Web-based Configuration 63 Enable: enables a specific dynamic user and allows the user to access Disable: disables a specific dynamic user and prohibits the user access Delete: deletes a specific dynamic user and removes the user information from the database Static Users Access Method: Click the “Advanced Config/Subscriber” link on the left panel, choose “Static user” Configuration Interface:
PAGE 93
64 Chapter 5 Web-based Configuration Figure 30 Static User Configuration Interface Configuration Description: Detailed Instructions: • Add a new static user Enter static user’s PC MAC address, and then click . A new user entry will be added in the table as shown below. User ID is automatically generated.
PAGE 94
Chapter 5 Web-based Configuration 65 Disable: disables a specific static user and prohibits the user access Delete: deletes a specific static user and removes the user information from the database ARP Management Access Method: Click the “Advance Config/ARP” link on the left panel Configuration Interface: Figure 31 ARP Configuration Interface Configuration Description:
PAGE 95
66 Chapter 5 Web-based Configuration Refer to the detailed instructions given below to speed up AP data transmission through configure the static ARP table.
PAGE 96
Chapter 5 Web-based Configuration Interface Description: Figure 33 Table 5-1 Route Configuration Interface Spec Field Description IP address Route’s beginning IP address Mask Route’s beginning Subnet mask Next Hop Route’s next hop address NAT Configuration Access Method: Click the “Advanced Config/NAT” link on the left panel Configuration Interface: Figure 34 NAT Configuration Interface Interface Description: 67
PAGE 97
68 Chapter 5 Web-based Configuration Figure 35 Table 5-2 NAT Configuration Specification Field Description Default Value Enable NAT Enable or Disable NAT Disable NAT Mode Two NAT modes are available after enable NAT, NAPT mode and Basic NAT mode NAPT NAT Timeout NAT timeout options: 13600 seconds 120 NAT Interface inside NAT Interface inside LAN Port NAT Interface outside NAT Interface outside WAN port Configuration Description: When NAT is enabled, select NAPT mode.
PAGE 98
Chapter 5 Web-based Configuration 69 Click the “Advanced Config/NAT Advance” link, then click “NAT” on the left and click “NAT Pool” on the right Configuration Interface: Configuration Description: Detailed Instructions: • Add a port based MAP Input the values in the “Add Local IP Address”, “Add Global Port” fields, click
PAGE 99
70 Chapter 5 Web-based Configuration • Delete a port based MAP Press to delete a port based MAP Basic NAT Mode Access Method: Click the “Advanced Config/NAT Advance” link, then click “NAT” link on the left, click “NAT Static Map” link on the right Configuration Interface: Figure 36 NAT Static MAP Configuration Interface Configuration Description: Detailed Instructions:
PAGE 100
Chapter 5 Web-based Configuration • 71 Change NAT address pool Input the values in the “NAT Pool Start IP” and “NAT Pool Mask” fields, and then click • Add new IP Address based static MAP Input the values in the “Add local IP Address” and “Add Global IP Address” fields, then click • Delete static MAP Click to delete a static MAP Isolation&filter Configuration Access Method: Click the “Advanced/MAC Filter” link on the left panel Configuration Interface:
PAGE 101
72 Chapter 5 Web-based Configuration Figure 37 Isolation&filter Configuration Interface Interface Description: Table 13 MAC Filter Configuration Specification Field Description Isolation: 3 types of isolations: -LAN-Wireless Isolation LAN-wireless isolation Default Value Disable Isolation LAN isolation Wireless Isolation -LAN Isolation -Wireless Isolation Config broadcast limit Broadcast limit options: 0-65535。 64
PAGE 102
Chapter 5 Web-based Configuration Field Description Load balance Two modes of Load Balance: 73 Default Value Disable User based – based on the number of AP’s users Flux based – based on AP’s throughput Add a MAC address to black List MAC address black list. The clients in the black list are not allowed to access AP White list MAC address white list.
PAGE 103
74 Chapter 5 Web-based Configuration Configuration Interface: Figure 38 MAC Table Configuration Interface Configuration Description: Detailed Instructions: • MAC Age time: - Value range: 10-65535 - Default value: 300 seconds • Add a MAC address to static MAC table: - MAC address: input format: 00:03:7F:BF:08:80 - Port: Originated port number of the transferred data - Click
PAGE 104
Chapter 5 Web-based Configuration • Remove MAC address: click 75
PAGE 105
PAGE 106
Web-based System 6 6 Configuration This chapter primarily covers the following: • Viewing System Information • Changing Password • Managing File System • Debug Configuration Viewing System Information Access Method: Click “System Config/System” on the left panel.
PAGE 107
78 Chapter 6 Web-based System Configuration Description: The system information includes the following fields: - Product Serial No. - Hardware version - Software version Changing Password Access Method: Click “System Config/Change Password” on the left panel.
PAGE 108
Chapter 6 Web-based System Configuration 79 Two types of users can log into the system: admin and guest. An “admin” has the privilege to perform all operations to the device, including information browse, configuration and modification and so on; while a “guest” only has the privilege to browse information. An “admin” can modify passwords for all users in the system; while a “guest” can only modify his own password. Managing File System Access Method: Click “System Config/File System” on the left panel.
PAGE 109
80 Chapter 6 Web-based System Configuration Figure 41 File System
PAGE 110
Chapter 6 Web-based System Configuration 81 Description: Table 14 File System Window Description Fields Description Erase Config File from AP Erases the current configuration file from the AP. Download new image from Host Downloads a new image (VxWorks.Z) from a host. Download new Config file from Host Downloads a new configuration file from host. Upload image to Host Uploads an image to a host Upload Config File to Host Uploads a configuration file to a host.
PAGE 111
82 Chapter 6 Web-based System Configuration Figure 42 Confirm Configuration File Erase Figure 43 Initiating Configuration File Erase Message Click to confirm the erasing; click to reboot the system and initiate the configuration. Do not click on the left to save the configuration. For system file (including image and configuration file) management, specify the host IP address and the system file path and file name. Currently, the configuration file only supports TXT format.
PAGE 112
Chapter 6 Web-based System Configuration 83 Click “System Config/Debug Config” on the left panel. Configuration Interface: Figure 44 Debug Configuration Description: Through debug configuration, the user can view the following information via CLI and SNMP: Configurable items are: 802.1X, SMI, RADIUS Client, DHCP Client, DHCP Server, DHCP Relay, IP Stack, NAT, Bridge, 802.1 and Web. Configurable types are: Error, Warning and Trace.
PAGE 113
PAGE 114
7 7 Performance Statistics Interface Statistics Access Method: Click “Statistic/Interface” on the left panel.
PAGE 115
86 Chapter 7 Performance Statistics Figure 45 Interface Statistics Table 15 Interface Statistics Window Description Fields Description WAN/LAN Interface Description MTU (Maximum Transmission Unit) Packets in MS are based on Ethernet standards. The MTU value is 1500. Packets received Number of packets received via the WAN/LAN interface.
PAGE 116
Chapter 7 Performance Statistics Fields 87 Description Total bytes received Total number of bytes received via the WAN/LAN interface. Error packets received Number of error packets received via the WAN/LAN interface. Dropped packets Number of packets dropped by the WAN/LAN interface. Packets sent Number of packets sent from the WAN/LAN interface. Total bytes sent Number of bytes sent from the WAN/LAN interface. Error bytes sent Number of error bytes sent from the WAN/LAN interface.
PAGE 117
88 Chapter 7 Performance Statistics Figure 46 DHCP Server Statistics Description: Table 16 DHCP Server Statistics Window Description Fields Description DHCP Server Statistics Free bindings Number of Free Binding IP addresses provided by the DHCP server. Auto bindings Number of Auto Binding IP addresses. Discover packets Number of Discovery packets received from the DHCP workstation by the DHCP server during the discovery period.
PAGE 118
Chapter 7 Performance Statistics Fields 89 Description Decline packets Number of Decline packets received from the DHCP workstation by the DHCP server during the selection period. Inform packets Number of Inform packets of configuration information request sent from the DHCP workstation to the DHCP server. Invalid packets Number of invalid communication packets between the DHCP workstation and the DHCP server.
PAGE 119
90 Chapter 7 Performance Statistics Fields Clean Description Click this button to clean the statistics of the system. Theory: DHCP service operation theory: The communication method between the DHCP workstation and server is depending upon whether it is the first time that the DHCP workstation logs into the network.
PAGE 120
Chapter 7 Performance Statistics 91 The third period is a selection period when the DHCP workstation selects the IP address offered by one DHCP server. If multiple DHCP servers send “dhcp offer” messages to the DHCP workstation, the DHCP workstation will accept only the first received “dhcp offer” message, and broadcast one “dhcp request” message as response, which includes the selected DHCP server request IP address.
PAGE 121
92 Chapter 7 Performance Statistics Figure 47 DHCP Relay Statistics Description: Table 17 DHCP Relay Statistics Window Description Fields Description DHCP Relay Statistics Discover packets Number of Discover packets sent from the DHCP workstation to the DHCP server via the AP during the discovery period. Request packets Number of Request packets sent from the DHCP workstation to the DHCP server via the AP during the selection period.
PAGE 122
Chapter 7 Performance Statistics Fields 93 Description Release packets Number of Release packets initiated by the DHCP workstation, and forwarded by the AP to the DHCP server, releasing IP addresses used by DHCP workstation. Decline packets Number of Decline packets sent from the DHCP workstation to the DHCP server via the AP to decline IP address Offer response(s) from DHCP server(s). Inform packets Number of Inform packets sent from the DHCP workstation to the DHCP server via the AP.
PAGE 123
94 Chapter 7 Performance Statistics Configuration Interface: Figure 48 RADIUS Client Statistics Description: Table 18 RADIUS Client Statistics Window Description Fields Description From client to server Request packets Number of Request packets sent by the RADIUS Client. Account start packets Number of Account Start packets sent by the RADIUS Client. Account stop packets Number of Account Stop packets sent by the RADIUS Client.
PAGE 124
Chapter 7 Performance Statistics 95 Fields Description Account update packets Number of Account Update packets sent by the RADIUS Client. Retransmit packets Number of retransmitted packets sent by the RADIUS Client. From server to client Accept packets Number of Accept packets received by the RADIUS Client. Reject packets Number of Reject packets received by the RADIUS Client. Response packets Number of Response packets received by the RADIUS Client.
PAGE 125
96 Chapter 7 Performance Statistics Figure 49 ARP Table Description: The ARP table fields include IP address, MAC address and ARP table obtaining type. The type can be “dynamic” or “static”. The obtaining type is dynamic only when the ARP entry is learnt during the AP packet forwarding period. The obtaining type is static only when the ARP entry is added manually. To prevent the ARP table information from aging, click to maintain the table.
PAGE 126
Chapter 7 Performance Statistics 97 Figure 50 Route Table Description: The ARP table information in the AP includes the following fields: IP address and mask: The destination network segment and its subnet mask for the route. Next hop: The IP address of the next hop router’s ingress. Interface: The egress on the AP from which the route reaches the destination router. Type: Dynamic network route or dynamic host route. Online User Information Access Method: Click “Statistic/Online user” on the left panel.
PAGE 127
98 Chapter 7 Performance Statistics Configuration Interface: Figure 51 Online User Information Description: Table 19 Online User Information Window Description Fields Description User ID It is a unique ID automatically generated by the system when adding a new user. User Name The name of the online user. Auth Type The authentication type for the online user. Auth Mode The authentication mode for the online user. Status The status of the online user.
PAGE 128
Chapter 7 Performance Statistics 99 MAC Address Access Method: Click “Statistic/MAC address” on the left panel. Configuration Interface: Figure 52 MAC Address Description: The MAC address information includes the following fields: MAC address, learning type, forwarding port (WAN port or LAN port), pass time and age time (aging time for the MAC address). For example: The pass time in the first line of the window shown in 錯誤! 找不到參照來源。 is 0, which means the MAC address is connected to the AP all the time.
PAGE 129
100 Chapter 7 Performance Statistics In the third line, the age time for the MAC address “00:04:23:85:39:5e” is 300 seconds, the pass time is 2 seconds, then the remaining life time for this MAC address is 298 seconds.
PAGE 130
8 8 Web-based Configuration Examples AP in Bridge Mode Objective: To establish a wireless network to provide wireless access for subscribers. The AP works only as a bridge. Data is transmitted between the AP and clients by WEP encryption.
PAGE 131
102 Chapter 8 Web-based Configuration Examples 1. After completing the hardware installation, launch the WEB configuration interface. - According to the above network topology, use a network cable (straight-through or crossover) to connect the PC and the AP’s LAN interface. Set the PC IP address as 172.18.37.X/255.255.255.0. The default IP address of the AP LAN interface is 172.18.37.1 - Input http://172.18.37.1 in the PC browser. Use “admin” for both username and password to log in to the system 2.
PAGE 132
Chapter 8 Web-based Configuration Examples - 103 Configure the IP address for the LAN interface.
PAGE 133
104 Chapter 8 Web-based Configuration Examples - Configure the SSID for the WLAN port and select a channel. Default value can also be used. Click to display the window as shown below: - Click , and the AP will reboot. After the rebooting is complete, the configuration will be valid 3. Configure the WNIC SSID to enable the communication with the AP.
PAGE 134
Chapter 8 Web-based Configuration Examples 4. 105 Now the AP can communicate with the PC Set the WEP encryption between the AP and Client WNIC. - Click “Basic Config/Wireless Port” to display the window as shown below; enable WEP encryption with 64-bit, select “Alphabetical” key format and enter “mykey” as the key1 value - Click .
PAGE 135
106 Chapter 8 Web-based Configuration Examples AP in Router Mode (Case 1) Objective: To establish a medium-scale network for a company, where the AP acts as an authenticator, AC as an authentication agent and the remote server as RADIUS authentication and accounting server. The AP obtains the IP address via the remote DHCP server.
PAGE 136
Chapter 8 Web-based Configuration Examples 107 management when it works as a DHCP relay. Configure two dynamic subscribers and one static subscriber Network Topology: Radi us Ser ver AC 上行口 AP1 AP2 IP M A N DHCP Ser ver Commercial 企业大楼Building Detailed Instructions: (Consider AP1 as an example) 5. Click “Basic/DHCP Server” to display the “DHCP Server” window. Enable “DHCP Relay” and configure the trust server for DHCP relay.
PAGE 137
108 Chapter 8 Web-based Configuration Examples 6. Configure 802.1x authentication. Click “Advanced Config/Authentication” to display the “Authentication” window. Enable 802.1x authentication, set the authentication mode to “remote” and set the maximum number of online users to “10”.
PAGE 138
Chapter 8 Web-based Configuration Examples 7. 109 Click “Advanced Config/RADIUS Client” to display the “RADIUS Client” window. Configure the RADIUS server and its parameters.
PAGE 139
110 Chapter 8 Web-based Configuration Examples 8. Click “Advanced Config/NAT” to display the “NAT” window. Enable NAT and perform advanced NAT configuration. 9. Click “Advanced Config/Subscriber” to add dynamic subscribers and static subscribers.
PAGE 140
Chapter 8 Web-based Configuration Examples 111 AP in Router Mode (Case 2) Objective: To establish a small-scale network for a company with low investment and strong functionality. The number of subscribers is no more than 20. The BRAS (Broadband Remote Access Server) aggregates the authentication and accounting information. Enable NAT and PPPoE server.
PAGE 141
112 Chapter 8 Web-based Configuration Examples BRAS Detailed Instructions: (Consider AP1 as an example) 1. Click “Basic Config/WAN Interface” to display the “WAN Interface” window. Enable PPPoE.
PAGE 142
Chapter 8 Web-based Configuration Examples 2. 113 Click “Basic Config/DHCP server” to display the “DHCP Server” window. Enable the DHCP server for the LAN interface.
PAGE 143
114 Chapter 8 Web-based Configuration Examples 3. Click “Basic Config/Wireless port” to display the “Wireless Port” window. Configure WEP Encryption. 4. Click “Advanced Config/Isolation&Filter” to display the “Isolation and Filter” window. Enable user based load balance.
PAGE 144
Chapter 8 Web-based Configuration Examples 5. 115 Configure 802.1x authentication. Click “Advanced Config/Authentication” to display the “Authentication” window. Enable 802.1x authentication, set the authentication mode to “local” and the maximum number of online users to “10”.
PAGE 145
PAGE 146
9 9 CLI Command Set The version is 2.0. EXEC Commands Debug This command is used for field debug support and can be performed only by an administrator. Syntax: debug Access level: 10 Explanation: Use this command to reach the debug level. Enable Use this command to reach the privileged EXEC level.
PAGE 147
118 Chapter 9 CLI Command Set Clear Use this command to clear the screen. It can be used at any configuration level. Syntax: clear Access level: 0 End Use this command to return to the privileged EXEC mode from any CLI level except EXEC level. This command can be used at any configuration level except EXEC level. Syntax: end Access level: 0 Exit Use this command to return one level back. Use “exit all” to return to EXEC level. This command can be used at any configuration level.
PAGE 148
Chapter 9 CLI Command Set 119 History Use this command to show the history substitution buffer contents. This command can be used at any configuration level. Syntax: history Access level: 0 Explanation: Use this command to show the command history contents. Logout Use this command to terminate a terminal session. It can be used at any configuration level. Syntax: logout Access level: 0 Ping Use this command to test the network layer connectivity between source and destination address.
PAGE 149
120 Chapter 9 CLI Command Set Quit Use this command to return to the EXEC mode from any CLI level. This command can be used at any configuration level. Syntax: quit Access level: 0 Show The show commands are described in Section 6. Tree Use this command to show the command tree. It can be used at any configuration level. Syntax: tree Access level: 0 Write Memory Use this command to save the running configuration into the configuration file. This command can be used at any configuration level.
PAGE 150
Chapter 9 CLI Command Set 121 Access level: 2 Explanation: Use this command to configuration into the startup-config file. save the running Privileged EXEC Commands Configure Use this command to reach the global CONFIG level. Syntax: configure {terminal} Access level: 1 Copy Config to TFTP Use this command to upload a copy of the configuration file to the designated TFTP server.
PAGE 151
122 Chapter 9 CLI Command Set Copy Config from TFTP Use this command to download a copy of the configuration file from the designated TFTP server. Syntax: copy config from tftp Possible value: ip-address: IP address of the TFTP server filename: Up to 32 characters for the designated file name on the TFTP server Access level: 2 Copy Image From TFTP Use this command to download a copy of the software image from TFTP server.
PAGE 152
Chapter 9 CLI Command Set 123 Copy Image to TFTP Use this command to download a copy of the software image to the TFTP server.
PAGE 153
124 Chapter 9 CLI Command Set Clear ARP Use this command to reset the ARP table. Syntax: clear arp Access level: 2 Explanation: Use this command to clear the ARP table or delete all dynamic entries. Clear DHCP Binding Use this command to delete one or all automatic address binding(s) from the Dynamic Host Configuration Protocol (DHCP) Server database.
PAGE 154
Chapter 9 CLI Command Set 125 Clear DHCP Statistics Use this command to reset all Dynamic Host Configuration Protocol (DHCP) Server counters or Relay counters. Syntax: clear dhcp statistics [relay | server] Default value: Relay and server’s statistics Access level: 2 Clear Dot1x Statistics Use this command to reset all 802.1x counters. Syntax: clear dot1x statistics Access level: 2 Explanation: Use this command to clear DOT1X statistics. Clear RADIUS Use this command to reset all radius counters.
PAGE 155
126 Chapter 9 CLI Command Set Explanation: Use this command to clear RADIUS client statistics. Clear MAC Use this command to reset the MAC table. Syntax: clear mac Access level: 2 Clear NAT Use this command to clear all NAT entries. Syntax: clear nat Access level: 2 Clear NAT Translation Use this command to clear NAT translation entries. Syntax: clear nat Access level: 2 Kill Use this command to terminate a CLI session.
PAGE 156
Chapter 9 CLI Command Set Syntax: kill Possible value: session-id: 0 - 4 Access level: 2 Reboot Use this command to reboot the system. Syntax: reboot Access level: 2 Auto-config Enable/Disable Use this command to enable or disable auto configuration. Syntax: auto-config enable/disable Access level: 2 Global Config Commands AP-Mode Use this command to select AP work mode.
PAGE 157
128 Chapter 9 CLI Command Set Access level: 2 ARP Entry Use this command to add/delete an ARP entry.
PAGE 158
Chapter 9 CLI Command Set 129 Console Baud-Rate Use this command to set the baud rate of the console interface. After the configuration is changed, the connection to the current console-interface user will be lost. Syntax: console baud-rate no console baud-rate Possible value: value: {9600|19200|38400|57600|115200} Default value: 9600 Access level: 2 Console Timeout Use this command to set the aging time how long the console will be logout without any input.
PAGE 159
130 Chapter 9 CLI Command Set Access level: 2 Explanation: Use this command to set the console aging time. DHCP Service Use the dhcp service global configuration command to select the DHCP configuration. Use the no form of this command to disable the DHCP service. Syntax: dhcp service {server| relay} no dhcp service Possible value: Server or relay Access level: 2 DHCP-Client Enable /Disable Use this command to enable or disable the DHCP client feature.
PAGE 160
Chapter 9 CLI Command Set 131 DHCP-Client Trust Use this command to set the trusted DHCP server IP addresses. (Up to 5) Syntax: [no] dhcp-client trust Possible value: ip-address: IP address of DHCP server Access level: 2 DHCP-Pool Use the dhcp-pool global configuration command to configure Dynamic Host Configuration Protocol (DHCP) address pool on the DHCP Server and enter the domain’s DHCP pool configuration mode. Use the no form of this command to remove the address pool.
PAGE 161
132 Chapter 9 CLI Command Set Syntax: [no]dhcp-server host (Up to 3) Possible value: ip address Access level: 2 Dot1x Authentication Enable / Disable Use this command to authentication function. enable or disable the DOT1X Syntax: dot1x authentication {enable|disable} Possible value: Port: lan, wlan1, wlan2 Default value: disable Access level: 2 Dot1x Authentication Mode Use this command to set the authentication mode for this AP.
PAGE 162
Chapter 9 CLI Command Set 133 Mode: local, remote, local-remote, remote-local Default value: local-remote Access level: 2 Dot1x Encryption-Mode Use this command to set the authentication encryption mode for each port. Syntax: dot1x encryption-mode {chap|pap} no dot1x encryption-mode Possible value: Port: lan, wlan1, wlan2 chap|pap: keyword default value: pap Access level: 2 Dot1x Initialize Use this command to initialize an 802.1x’s user based on the user ID.
PAGE 163
134 Chapter 9 CLI Command Set Possible value: : 1-256 Access level: 2 Explanation: Use this command to initialize the DOT1X subscriber status. Dot1x Max-Req Use this command to set the maximum number of times that the device sends an Extensible Authentication Protocol (EAP) – (request /identity frame (no response is received)) before restarting the authentication process. Use the no form of this command to return to the default setting.
PAGE 164
Chapter 9 CLI Command Set 135 exchange (for example, the client provided an invalid password). Use the no form of this command to return to the default setting. During the quiet period, the switch does not accept or initiate any authentication requests. The user should change only the default value of this command to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers.
PAGE 165
136 Chapter 9 CLI Command Set re-authentication attempts (re-authperiod) and automatic reauthentication. Syntax: dot1x re-authenticate Possible value: userid: 1-256 Access level: 2 Explanation: Use this command to manually initiate a reauthentication for a subscriber at once. Dot1x Re-Authentication Use this command to enable periodic re-authentication of the client. Use the no form of this command to return to the default setting.
PAGE 166
Chapter 9 CLI Command Set 137 Dot1x Re-Authperiod Use this command to set the number of seconds between reauthentication attempts. Use the no form of this command to return to the default setting. The dot1x re-authperiod configuration command affects the behavior of the device only if the user has enabled periodic re-authentication by using the dot1x re-authentication configuration command.
PAGE 167
138 Chapter 9 CLI Command Set Packets. Use the no form of this command to return to the default setting. The authentication server notifies the back-end authenticator each time it receives a transport layer packet. When the back-end authenticator does not receive a notification after sending a packet, the back-end authenticator waits for certain time period (i.e. set time period) and then retransmits the packet.
PAGE 168
Chapter 9 CLI Command Set 139 Syntax: dot1x supplicant-timeout no dot1x supplicant-timeout Possible value: 1-65535s Default value: 30s Access level: 2 Explanation: Use this command to set dot1x supplicant timeout. Dot1x TX-Period Use this command to set the number of seconds that the device waits for a response to an Extensible Authentication Protocol (EAP)-request /identity frame from the client before retransmitting the request.
PAGE 169
140 Chapter 9 CLI Command Set Access level: 2 Explanation: Use this command to set dot1x tx-period. Dynamic-User Add or delete a dynamic user for local authentication Syntax: dynamic-user {name } {password } no dynamic-user {name } Possible value: name: no longer than 32 characters; passwd: no longer than 32 characters Access level: 2 Explanation: Use this command to create/delete a local authentication user in the database.
PAGE 170
Chapter 9 CLI Command Set 141 Explanation: Use this command to enable/disable an account in the database Ethernet-Port Use this command to enter the Ethernet port configuration level. Syntax: ethernet-port Possible value: ports: wan, lan1 lan2 lan3 lan4 Access level: 1 Hostname Use this command to set the host name of the current system for prompting.
PAGE 171
142 Chapter 9 CLI Command Set Access level: 2 Interface Use this command to access the interface CONFIG level of the CLI. Syntax: interface ethernet {lan | wan} Possible value: lan: Enters the LAN interface, wan: Enters the WAN interface. Access level: 2 IP Default-Route Use the ip default-route global configuration command to define a default gateway (router) when IP routing is disabled. Syntax: ip default-route no ip default-route Possible value: ip-address: IP address of the router.
PAGE 172
Chapter 9 CLI Command Set 143 Explanation: Use this command to set the default route for this AP. IP RADIUS Source-Interface To force RADIUS to use the IP address of a specified interface for all outgoing RADIUS packets, use the ip radius sourceinterface global configuration command. Syntax: ip radius source-interface {wan | lan} no ip radius source-interface Access level: 2 Explanation: Use this command to set the RADIUS source interface.
PAGE 173
144 Chapter 9 CLI Command Set ipaddr: This parameter identifies the destination IP address of the static route. mask: This parameter identifies the destination prefix mask of the static route. next-hop: This parameter identifies the IP address of the next hop that can be used to reach the network. Access level: 2 Isolation Use this command to set isolation between the subscribers. No parameter means to isolate all.
PAGE 174
Chapter 9 CLI Command Set 145 Load-Balance Mode Use this command to set load-balance mode. Syntax: load-balance mode {user-base | flux-base} Default Value: user-base Access level: 2 MAC Age Time Use this command to set the aging period for all MAC address entries in the address table of the switch. Syntax: mac age time Possible value: value: 10~65535 seconds Default value: 300 seconds Access level: 2 MAC Black-List Use this command to add/delete a MAC black list entry.
PAGE 175
146 Chapter 9 CLI Command Set Access level: 2 Max-Online-User Use this command to set the maximum number of online users this AP permits. Syntax: max-online-user no max-online-user Possible value: Port: lan,wlan1,wlan2 Count: 1-256 Default value: count: 256 Access level: 2 NAT Enable/Disable Use this command to enable or disable NAT.
PAGE 176
Chapter 9 CLI Command Set 147 NAT Interface Use this command to specify the interface attached to NAT. Syntax: nat interface {inside | outside} Default value: inside: lan(downlink) outside: wan (uplink) Access level: 2 NAT Map Use this command to configure static entries of address mapping for basic NAT. Syntax: [no] nat map Possible value: local-ip: Private IP address inside NAT . global-ip: Global IP address outside NAT.
PAGE 177
148 Chapter 9 CLI Command Set NAT Mode Use this command to set NAT mode. Syntax: nat mode {napt|basic} Default value: napt Access level:2 NAT Pool Use this command to configure address pool for dynamic NAT. Syntax: [no] nat pool Possible value: start-ip: Specifies the IP address at the beginning of the pool range. ip-mask: Specifies the network mask associated with the address pool. Access level: 2 NAT Redirect Use this command to configure static entry of host redirection for NAPT.
PAGE 178
Chapter 9 CLI Command Set 149 Syntax: [no] nat redirect Possible value: global_port: Destination port number of incoming packets. local_ip: Private IP address to be redirected. Access level: 2 NAT Timeout Use this command to set the age timeout for all NAT entries. Syntax: nat timeout Possible value: secs: 1-3600 Default value: 120 Access level: 2 Operator Access level Use this command to change the user’s access level.
PAGE 179
150 Chapter 9 CLI Command Set Possible value: user-name: Up to 16 alphanumeric characters for the user name access-level: 10 – Administrator 2 – Power configuration access 1 – Port-configuration access 0 – Read-only access Access level: 10 Operator Add / Delete Use this command to add/delete a user account.
PAGE 180
Chapter 9 CLI Command Set 151 2 – Power configuration access 1 – Port configuration access 0 – Read only access access-mode: Telnet, console or web. Multiple values can be input. Access level: 10 Note: When the operator {level } {mode } command is entered, the system displays “Enter new password: ” and “Confirm new password: ” in next line, the user should input the correct password.
PAGE 181
152 Chapter 9 CLI Command Set password: ” and “Confirm new password: ” in next line, the user should input the correct password. PPPoE Auto-Connect Disable/Enable Use this command to set auto connect to the PPPOE server when the AP boots successfully. Syntax: pppoe auto-connect {disable|enable} Access level: 2 PPPoE Connect Use this command to connect to the PPPOE server. Syntax: pppoe connect Access level: 2 PPPoE Disconnect Use this command to disconnect from the PPPOE server.
PAGE 182
Chapter 9 CLI Command Set 153 Syntax: pppoe user {name } {password } Possible value: name: up to 30 characters; pwd: up to 30 characters. Access level: 2 RADIUS-Acctserver {Enable | Disable} Use this command to enable/disable a designated accounting server. Syntax: radius-acctserver {enable | disable} [first | second | third] Access level: 2 RADIUS-Acctserver Host Use the radius-acctserver host global configuration command to specify a RADIUS accounting server host.
PAGE 183
154 Chapter 9 CLI Command Set Access level: 2 RADIUS-Acctserver Info Use this command to set the designated accounting server’s parameter(s). Use the no form of this command to set the designated accounting server’s parameter(s) as default value(s).
PAGE 184
Chapter 9 CLI Command Set 155 RADIUS-Authserver {Enable | Disable} Use this command authentication server. to enable/disable the designated Syntax: radius-authserver {enable | disable} [first | second | third] Access level: 2 RADIUS-Authserver Extra Use this command to set authentication radius server’s additional attribute.
PAGE 185
156 Chapter 9 CLI Command Set no radius-authserver host {first | second | third} Possible Value: ip-address: IP address of the RADIUS authentication server host. Access level: 2 RADIUS-Authserver Info Use this command to set the designated authentication server’s parameter(s). Use the no form of this command to set the designated authentication server’s parameter(s) as default value(s).
PAGE 186
Chapter 9 CLI Command Set 157 retransmit: 1-6; default value: 3 Access level: 2 RADIUS-Server Dead-Time To improve RADIUS response time when some servers might be unavailable, use the radius-server dead-time global configuration command to cause the unavailable servers to be skipped immediately. Use the no form to set the dead time to 5 minutes. Syntax: radius-server dead-time no radius-server dead-time Possible value: minutes: 1-1440 minutes (24 hours). Default value: 5.
PAGE 187
158 Chapter 9 CLI Command Set no radius-server retransmit Possible Value: retries: 1-6 Default Value: 3 times Access level: 2 RADIUS-Server Timeout Use this command to set the interval a router waits for a server host to reply. Use the no form to restore the default value. Syntax: radius-server timeout no radius-server timeout Possible Value: seconds: 1-16 Default: 5 seconds Access level: 2 SNMP Client Use this command to set SNMP client IP address.
PAGE 188
Chapter 9 CLI Command Set 159 SNMP Server Community Use this command to set SNMP server community. Syntax: snmp server commnunity {ro | rw} no snmp server commnunity Possible value: community: up to 64 characters Default value: ro community: public; rw community: private.
PAGE 189
160 Chapter 9 CLI Command Set Default value: SNMP agent is enabled Access level: 2 SNMP Server Location Use this command to set SNMP server location string. Syntax: snmp server location Possible value: any text up to 255 characters Access level: 2 SNMP Server Sysname Use this command to set SNMP server system name string.
PAGE 190
Chapter 9 CLI Command Set 161 Possible value: N/A Default value: trap is enable Access level: 2 SNMP Server Trap Host Use this command to set SNMP trap host. Syntax: snmp server trap host [community ] [port][version] no snmp server trap host Default value: community :public Port:162 Version: v2 Static-MAC-Address Use this command to define or remove a MAC address in the static filtering database.
PAGE 191
162 Chapter 9 CLI Command Set Static-User Use this command to add or delete a static user. Syntax: static-user {mac } no static-user {mac } Access level: 2 Static-User Enable / Disable Use this command to enable or disable a static user. Syntax: static-user {mac } <[enable]/[disable] Possible value: mac-addr: xx:xx:xx:xx:xx:xx Default value: disable Access level: 2 Telnet Client Use this command to set which IP address (subnet) can or cannot access the device via telnet.
PAGE 192
Chapter 9 CLI Command Set 163 Access level: 2 Telnet Server Enable / Disable Use this command to enable/disable the telnet server. Syntax: telnet server {enable|disable} Default value: disable Access level: 2 Telnet Timeout Use this command to set the aging time how long the Telnet will be logout without any user input.
PAGE 193
164 Chapter 9 CLI Command Set User-Force-Offline Use this command to force the subscriber to be off-line. Syntax: user-force-offline Possible value: userid:1-256 Access level: 2 VLAN Default VID Use this command to set default VLAN VID. The command will be valid if the VLAN module is available. Syntax: vlan default-vid no vlan default-vid Possible value: vid: 1-4094 Default value: 1 Access level: 2 VLAN Employee Default VID Use this command to set default VLAN employee VID.
PAGE 194
Chapter 9 CLI Command Set 165 Syntax: vlan employee default-vid no vlan employee default-vid Possible value: vid: 1-4094 Default value: 1 Access level: 2 VLAN Enable/Disable Use this command to enable or disable VLAN. The command will be valid if the VLAN module is available. Syntax: vlan {enable|disable} Access level: 2 Explanation: Use this command to enable or disable VLAN VLAN Mode Use this command to set VLAN work mode.
PAGE 195
166 Chapter 9 CLI Command Set Default value: user-based Access level: 2 VLAN port-vid Use this command to set the designated port’s vid. Syntax: vlan port-vid {lan|wlan1|wlan2} no vlan port-vid {lan|wlan1|wlan2} Possible values: Vid range:1-4094 Default value:1 Access level: 2 Explanation: Use this command to set the vid of designated port when work on port-based mode. VLAN Tag Disable Use this command to disable VLAN tag. The command will be valid if the VLAN module is available.
PAGE 196
Chapter 9 CLI Command Set 167 VLAN Tag Enable Use this command to enable VLAN tag. The command will be valid if the VLAN module is available. Syntax: vlan tag enable Access level: 2 VLAN Visitor Default Vid Use this command to set default VLAN visitor VID. The command will be valid if the VLAN module is available.
PAGE 197
168 Chapter 9 CLI Command Set Syntax: webserver Access level: 2 Wireless-Port Use this command to enter the wireless card configuration level. Syntax: wireless-port Possible value: ports: 1-2 Access level: 1 DHCP-pool Configuration Mode DNS-Server Use the dns-server DHCP pool configuration command to specify the Domain Name System (DNS) IP servers available to a Dynamic Host Configuration Protocol (DHCP) client. To remove the DNS server list, use the no form of this command.
PAGE 198
Chapter 9 CLI Command Set 169 Possible value: address: Specifies the IP address of a DNS server. One IP address is required. The user can specify up to four addresses in one command line. address2...address4: (Optional) Specifies up to four addresses in the command line Default value: If DNS IP servers are not configured for a DHCP client, the client cannot correlate host names to the IP addresses. Access level : 2 Explanation: Use this command to set/remove DNS server(s).
PAGE 199
170 Chapter 9 CLI Command Set high-address: (Optional) The last IP address in the excluded address range Default value: All IP pool addresses are assignable.. Access level : 2 Explanation: Use this command to exclude or remove the excluded IP address from the pool. Gateway Use the gateway DHCP pool configuration command to specify the default gateway for a Dynamic Host Configuration Protocol (DHCP) client. To remove the default gateway, use the no form of this command.
PAGE 200
Chapter 9 CLI Command Set 171 Lease Use the lease DHCP pool configuration command to configure the duration of the lease for an IP address that is assigned by a Dynamic Host Configuration Protocol (DHCP) Server to a DHCP client. To restore the default value, use the no form of this command.
PAGE 201
172 Chapter 9 CLI Command Set Explanation: Use this command to set lease for an IP address that is assigned from the DHCP server. Network Use the network DHCP pool configuration command to configure the subnet number and mask for a Dynamic Host Configuration Protocol (DHCP) address pool on a DHCP Server. To remove the subnet number and mask, use the no form of this command.
PAGE 202
Chapter 9 CLI Command Set 173 Syntax: manual-binding no manual-binding Access level: 2 Explanation: Use this command to bind an IP address to a MAC address. Ethernet Port configuration level Speed-duplex Use this command to modify the speed and duplex mode for the port. Syntax: speed-duplex {auto | 10-full | 10-half | 100-full | 100half} Default value: auto Access level: 2 Interface Mode Commands Disable Use this command to disable an interface.
PAGE 203
174 Chapter 9 CLI Command Set Access level: 2 Enable Used this command to enable an interface. Syntax: enable Access level: 2 IP Address Use the ip address command in the interface configuration command mode to assign/remove an IP address for an interface on a router. Syntax: ip address no ip address Access level: 2 Wireless Port Configuration Level Beacon Interval Use this command to set the beacon interval based on 802.
PAGE 204
Chapter 9 CLI Command Set 175 no beacon interval Possible value: times: 20-1000 Default value: 100 Access level: 2 Explanation: Use this command to set wireless card beacon frame send interval Basic Rate Use this command to set the transmission rate of this wireless card Syntax: basic rate < 2 | 11|12|g > Possible value: value: 2: 1,2Mbit/s at b mode or b/g mode 11: 1,2,5.5,11Mbit/s at b mode or b/g mode 12: 6, 9,12.
PAGE 205
176 Chapter 9 CLI Command Set Fragment Threshold Use this command to set the fragment threshold. If the TX MSDU’s length is larger than the threshold, the mechanism is enabled. Syntax: fragment threshold < value> Possible value: value: 256-2346 Default value: 2346 Access level: 2 Frequency-Channel Use this command to set the work frequency channel based on 802.
PAGE 206
Chapter 9 CLI Command Set 177 DTIM Interval Use this command to set the DTIM (Delivery Traffic Indication Message) interval based on 802.
PAGE 207
178 Chapter 9 CLI Command Set RTS-CTS Threshold Use this command to set RTS/CTS threshold. If the TX MPDU’s length is larger than the threshold, the mechanism is enabled. Syntax: rts-cts threshold < value> Possible value: value: 0-2347 Default value: 2347 Access level: 2 SSID Use this command to set the network name of the wireless card.
PAGE 208
Chapter 9 CLI Command Set 179 Tx Rate Use this command to set TX rate used for AP to send unicast frame. Auto means the AP will auto-select the TX Rate according to self algorithm. Syntax: tx rate < value> Possible value: value: 1, 2, 5.
PAGE 209
180 Chapter 9 CLI Command Set Explanation: Use this command to set wireless mode. WDS-Mode Enable / Disable Use this command to set the wireless card work mode: either AP or WDS. When it is enabled, the wireless card supports WDS mode Use this command to set repeater work mode, either PTP or PTMP. When it is enabled, the wireless card supports PTMP mode and enables the WDS mode.
PAGE 210
Chapter 9 CLI Command Set 181 no wds peer mac [ ] Access level: 2 Explanation: Use this command to set toward AP MAC address on this card. WEP Encryption Enable / Disable Use this command to enable WEP encryption. Syntax: wep encryption Default value: disable Access level: 2 WEP Encryption Key Use this command to set the first WEP key.
PAGE 211
182 Chapter 9 CLI Command Set Default WEP-Key Use this command to set the default WEP key based on 802.11. Syntax: default wep-key < number> Possible value: number: 1-4 Default value: 1 Access level: 2 Explanation: Use this command to set wireless WEP key for this card WEP-Key-Format Use this command to set WEP key format. Syntax: wep-key-format < hex | ascii > Possible value: string: hex or ascii Access level: 2 WEP-Key-Length Use this command to set WEP key length.
PAGE 212
Chapter 9 CLI Command Set Possible value: string: 64 or 128 Default value: 64 Access level: 2 Antenna Use this command to select antenna. Syntax: antenna {ant-a | ant-b | both} Default value: both Access level: 2 WPA Mode Use this command to set WPA authentication mode.
PAGE 213
184 Chapter 9 CLI Command Set WPA Encryp-Mode Use this command to set WPA encryption mode. Syntax: wpa encryp-mode {aes|tkip|auto } Possible value: aes|tkip|auto :keywords Default value: auto Access level: 2 WPA Psk-Passphrase Use this command to set WPA pre-shared key. Syntax: wpa psk-passphrase Possible value: string: Alphanumeric, length range: 8-63 Access level: 2 WPA Groupkey-Update-Interval Use this command to set WPA group key update interval.
PAGE 214
Chapter 9 CLI Command Set 185 Possible value: value range:0(means no update), 30- 65535 seconds Default value: 1800 seconds Access level: 2 Optimize-108g Enable/Disable Use this command to enable or disable 108g optimization. Syntax:optimize-108g enable/disable Access level: 2 Webserver Mode Enable/Disable Use this command to enable or disable the web server. Syntax: enable/disable Access level: 2 Explanation: Use this command to enable or disable the web server.
PAGE 215
186 Chapter 9 CLI Command Set IP-Filter Enable/Disable Use this command to enable or disable the web server’s IP-filter. Syntax: ip-filter enable/disable Access level: 2 Explanation: Use this command to enable or disable the web server’s IP-filter. IP-Filter Client Use this command to set IP-filter’s IP address.
PAGE 216
Chapter 9 CLI Command Set Possible value: port: wan,lan,wlan Access level: 2 IAPP Mode Enable/Disable Use this command to enable or disable IAPP. Syntax: enable/disable Access level: 2 ESP Enable/Disable Use this command to enable or disable ESP. Syntax: esp enable/disable Access level: 2 Mode Use this command to set IAPP mode.
PAGE 217
188 Chapter 9 CLI Command Set no mode Possible value: local|remote: keywords Default value: remote Access level: 2 Map Use this command to set IAPP map entry. Syntax: map (max 64 entries) no map Access level: 2 Explanation: Use this command to add or delete IAPP map entry. Secret Use this command to set IAPP secret.
PAGE 218
Chapter 9 CLI Command Set 189 Debug Mode Ping Use this command to test the network layer connectivity between source and destination address. This command is a global command and can be used at any configuration level. Syntax: ping [times ] [packet-size ] Possible value: ip-address: Specifies the network layer destination address . Times: Specifies the packets to send. Possible values are 110000. packets-size: Specifies the data size of ICMP packet. 0-65000.
PAGE 219
190 Chapter 9 CLI Command Set no debug-module [module-name] Possible value: module name: DOT1X, SMI, RADIUS, DHCPS, DHCPR, DHCPC, IP, NAT, BRIDGE,DOT11, WEB, CLI, SNMP, TELETE, L2TP, PPP, PPPOEC level: ERROR, WAINING, TRACE Access level: 2 NAT Logging Use this command to set NAT logging information.
PAGE 220
Chapter 9 CLI Command Set 191 Access level: 2 Sys-Function Use this command to execute some system function. Syntax: sys-function Possible value: function-name: i, arpShow, ifShow, inetstatShow, ipstatShow, netStackDataPoolShow, netStackSysPoolShow, mbufShow, hostShow, routeShow, routeStatShow, udpstatShow, tcpstatShow, icmpstatShow, CPUReport Access level: 2 Show Version Use this command to display internal version.
PAGE 221
192 Chapter 9 CLI Command Set Software version: 1.1.1.0 Create date: Feb 9 2004, 13:49:59 Show Memory Use this command to display the memory information. Syntax: show memory Access level: 2 Explanation: Show NAT Run Use this command to display NAT running configuration Syntax: show nat run Access level: 2 Show Debug_Module Use this command to display debug module status.
PAGE 222
Chapter 9 CLI Command Set 193 Net-Security Rate-Limit Enable/Disable Use this command to enable/disable the rate limit. Syntax: rate-limit enable/disable Possible value: N/A Access level: 0 Net-Security Syn-Cache Enable/Disable Use this command to enable/disable SYN cache. Syntax: syn-cache enable/disable Access level: 0 Net-Security Attack-Defense Enable/Disable Use this command to enable/disable the network attack defense.
PAGE 223
194 Chapter 9 CLI Command Set Syntax: show net-security Access level: 0 Explanation: Execute this command, and the following will be displayed: Rate Limit Status SYN Cache Status : Enable : Disable Network Attack Defense : Disable Ipstack Debug Use this command to enable IP stack print packet information. Syntax: ipstack-debug no ipstack-debug Possible value: module: IP, ICMP, TCP, UDP, IGMP Access level: 0 Show Ipstack-Debug Use this command to display the IP stack debug status.
PAGE 224
Chapter 9 CLI Command Set 195 Explanation: Execute this command, and the following will be displayed: IP debug : On ICMP debug : Off TCP : On UDP IGMP debug debug debug : Off : On Show Show ARP Use this command to display ARP entries. Syntax: show arp Access level: 0 Show Console Use this command to display the console config information, such as baud-rate, console session time-out and so on.
PAGE 225
196 Chapter 9 CLI Command Set Execute this command, and the following will be displayed: Baud rate : 9600 Timeout : 30 minutes Parity : no Data bits :8 Stop bits :1 Flow control : disable Show DHCP-Client Use this command to display the DHCP client configuration. Syntax: show dhcp-client Access level: 0 Explanation: Execute this command, and the following will be displayed: DHCP status DHCP server : enable : DHCP trusted server: 1.1.1.
PAGE 226
Chapter 9 CLI Command Set 197 Syntax: show dhcp service Access level: 0 Show DHCP Binding Use this command to display address bindings on Dynamic Host Configuration Protocol (DHCP) server. Syntax: show dhcp binding [ip-address] | [manual ] | [ auto] Possible value: ip-address: Specifies the IP address of the DHCP client for which bindings will be displayed Manual: Displays only manual binding’s address Auto: Displays only auto binding’s address Default value: All address bindings are shown.
PAGE 227
198 Chapter 9 CLI Command Set Show DHCP Server Use this command to display DHCP server’s configuration parameters. Syntax: show dhcp server Access level:0 Show DHCP Statistics Use this command to display Dynamic Host Configuration Protocol (DHCP) Server statistics.
PAGE 228
Chapter 9 CLI Command Set 199 Show Dot1x Statistics Use this command to display the statistics of 802.1x. Syntax: show dot1x statistics Access level : 0 Show Flash Use this command to list the flash code information, such as version number, size and so on. Syntax: show flash Access level: 0 Explanation: Execute this command, and the following will be displayed: /image
2000-01-16 21:31:26 /image/3001A.
PAGE 229
200 Chapter 9 CLI Command Set Syntax: show dot1x authentication configuration Access level: 0 Show MAC Use this command to display the MAC addresses.
PAGE 230
Chapter 9 CLI Command Set 201 Show MAC Black-List Use this command to display the black MAC list. Syntax: show mac black-list Access level: 2 Show MAC White-List Use this command to display the white MAC list. Syntax: show mac white-list Access level: 2 Show NAT Translation Use this command to display the currently active NAT translations.
PAGE 231
202 Chapter 9 CLI Command Set Show NAT Configuration Use this command to display all NAT configuration information.
PAGE 232
Chapter 9 CLI Command Set MAC address IP address 203 : : Subnet mask : Default gateway : (wan only) Show IP-Route Use this command to display the static or all route entries. Syntax: show ip-route [static] Access level: 0 Show Access-List Configuration Use this command to display the access-list configuration.
PAGE 233
204 Chapter 9 CLI Command Set Explanation: Execute this command, and the following will be displayed: Port Link State Protected AutoCap SpeedDuplex 1 up enable ----- 100-full PVID Pri FlowCtrl 1 0 disable Show RADIUS Configuration Use this command to show the radius configuration information summary. Syntax: show radius configuration Access level: 0 Show RADIUS Statistics Use this command to show the statistics of radius client.
PAGE 234
Chapter 9 CLI Command Set 205 Syntax: show sms user {name | mac | {all | dynamic | static}} [parameters]] Possible value: parameters : [lock] Access level : 0 Show SMS Online-User Use this command to show the online user ‘s information. Syntax: show sms online-user Access level : 0 Show Wireless-Port Use this command to show the wireless port configuration information.
PAGE 235
206 Chapter 9 CLI Command Set Syntax: show system Access level: 0 Explanation: Execute this command, and the following will be displayed: Serial number System uptime seconds : 000008c42671 : 0 days 21 hours 27 minutes 5 Console baudrate : 9600 Board temperature : 48.0 (C) Hardware version : 1.0.0 Software version : 1.0.0 Show Telnet Use this command to display all the telnet configuration information, such as the telnet server’s status, telnet mode, telnet session time-out and so on.
PAGE 236
Chapter 9 CLI Command Set 207 Telnet server status : Enable Telnet session timeout : 30 minute(s) Show SNMP Server Configuration Use this command to disable SNMP server configuration, including trap configuration. Syntax: show snmp server configuration Access level: 0 Show AP-Mode Use this command to display the AP work mode. Syntax: show ap-mode Access level: 0 Show Load-Balance Configuration Use this command to show the load balance configuration.
PAGE 237
208 Chapter 9 CLI Command Set Show Who Use this command to display the login operator. Syntax: show who Access level: 0 Show Running-Config Use this command to display the running configuration. Syntax: show running-config Access level: 0 Show Startup Use this command to display the startup configuration. Syntax: show startup Access level: 0 Show WPA Configuration Use this command to display the WPA configuration.
PAGE 238
Chapter 9 CLI Command Set 209 Access level: 0 Explanation: Execute this command, and the following will be displayed: wpa auth mode encryption mode gtk update interval : wpa : tkip : 1800 seconds wpa-psk passphrase : abcdefg Show Webserver Use this command to display the WEB Server configuration. Syntax: show webserver Access level: 0 Explanation: Execute this command, and the following will be displayed: WEB Status : enable Show VLAN Configuration Use this command to display VLAN configuration.
PAGE 239
210 Chapter 9 CLI Command Set Access level: 0 Explanation: Execute this command, and the following will be displayed: VLAN Status : enable VLAN Tag Status VLAN Default vid : enable :1 Show VLAN Binding Use this command to display VLAN binding. This command will be valid if the VLAN module is available.
PAGE 240
Chapter 9 CLI Command Set Show IAPP Configuration Use this command to display IAPP configuration. Syntax: show iapp configuration Access level: 0 Explanation: Execute this command, and the following will be displayed: IAPP config status : enable IAPP running status : UP IAPP mode : local ESP mode : enable IAPP secret : ********* IAPP map: MAC IP ---------------------------------------------00:00:00:00:00:01 00:00:00:00:00:02 172.18.32.5 172.18.32.
PAGE 241
PAGE 242
Troubleshooting 10 10 When the user has trouble using the AP, the starting point to troubleshoot the problem with the AP is to look at its LED activity. Table 20 is provided to assist the user in diagnosing and solving the operational problems. Table 20 Troubleshooting PWR AP WLAN Green Green LED LED on Green blinks LED stays on On Off LAN Green LED blinks LINK Green LED stays on Description/Action No action is required. - Off - No LAN activity. No action is required. Power problem.
PAGE 243
214 Chapter 10 Troubleshooting PWR AP Off Green LED Green blinks LED stays on Green LED blinks Green LED blinks WLAN Off - LAN Off - LINK Description/Action Off Hardware failure or AP freezes. Contact the product supplier. - Software failure. Upgrade the software via Windows IE or console (hyper terminal). WLAN initialization failure. Green LED blinks - - Green LED blinks - - Examine whether the wireless equipment has been installed correctly. Ethernet initialization failure.
PAGE 244
11 11 Technical Specifications Table 21 WA3001 AP Technical Specifications Type WA3001 2.4GHz(802.11g) 108Mbps enterprise class wireless access node Description -IEEE 802.11 -IEEE 802.11b Standard Compliance -IEEE 802.11g -IEEE 802.3 -IEEE 802.11i -IEEE 802.3af Interfaces Ethernet WAN Interface One 10/100Mbps interface (RJ45) Ethernet LAN Interface Four 10/100Mbps interfaces (RJ45) Console Interface Auto rate scaling One RS-232 Console interface Super G™: 108Mbps 802.
PAGE 245
216 Chapter 11 Technical Specifications Type Security WA3001 64, 128bits WEP 802.1X (EAP-MD5, EAP-TLS, PEAP, CHAP, PAP) WPA (TKIP，AES) WAPI MAC address access control Subscriber isolation Authentication Supports 802.1x and RADIUS Client Supports DHCP Server and DHCP Client Supports PPOE transparent transmission WDS PtP(Point-to-Point) Bridge L2 roaming IAPP NAT Supported Management Web-based management PtMP(Point-to-Multi-point) Bridge Telnet CLI SNMP v.
PAGE 246
Chapter 11 Technical Specifications Type Reception sensitivity 217 WA3001 -73dBm @ 108Mbps, PER < 8%, OFDM -73dBm @ 54Mbps, PER < 8%, ODFM -90dBm @ 11Mbps, PER < 8%, CCK -92dBm @ 6Mbps, PER < 8%, OFDM -95dBm @ 1Mbps, PER < 8%, DBPSK Operational frequency range Channels Transmit Power 2.4GHz~2.4835GHz ISM Band Europe/FCC: 2.412～ 2.462GHz(11 channels) China/Europe/ETSI: 2.412~2.
PAGE 247
218 Chapter 11 Technical Specifications Type Weight Antenna LEDs Environmental WA3001 450g External, various antennae can be assembled.
PAGE 248
12 12 Acronyms and Abbreviations AC Access Controller AS Authentication Server BRAS Broadband Remote Access Server CLI Command Line Interface DHCP Dynamic Host Configuration Protocol DTIM Delivery Traffic Indication Message EAP Extensible Authentication Protocol ESSID Extended Service Set Identifier IEEE Institute of Electrical and Electronics Engineering LAN Local Area Network MAC Media Access Control MD5 Message Digest Algorithm 5
PAGE 249
220 Chapter 12 Acronyms and Abbreviations MIB Management Information Base MII Media Independent Interface MTU Maximum Transmission Unit NAS Network Access Server NAPT Network Address Port Translation NAT Network Address Translation NMS Network Management System OAM Operation Administration and Maintenance PD Powered Device PoE Power over Ethernet PPPoE PPP over Ethernet PSE Power Sourcing Equipment PtMP Point-to-Multi-Point PtP Point-to-Point RADIUS Remote Authentication Dial
PAGE 250
Chapter 12 Acronyms and Abbreviations SNMP Simple Network Management Protocol WEP Wired Equivalent Privacy WLAN Wireless Local Area Network WNIC Wireless Network Interface Card 221
PAGE 251
PAGE 252
UTStarcom, Inc. USA 1275 Harbor Bay Parkway Alameda, CA 94502, USA Tel: 510-864-8800 Fax: 510-864-8802 http://www.utstar.