Page 1
◆
Installation
Access Points
®
AT-WA7500
AT-WA7501
and User’s
Guide
VERSION 2.2
PN 613-50496-00 Rev B
Page 2
Copyright © 2004 Allied Telesyn, Inc.
3200 North First Street, San Jose, CA 95134 USA
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc.
Microsoft is a registered trademark of Microsoft Corporation, Netscape Navigator is a registered trademark of Netscape
Communications Corporation. All other product names, company names, logos or other designations mentioned herein are
trademarks or registered trademarks of their respective owners.
Intermec is a registered trademark and MobileLAN is a trademark of Intermec Technologies Corporation.
Allied Telesyn, Inc. reserves the right to make changes in specifications and other information contained in this document without
prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesyn, Inc. be liable
for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or
related to this manual or the information contained herein, even if Allied Telesyn, Inc. has been advised of, known, or should have
known, the possibility of such damages.
Page 3
Contents
Preface ............................................................................................................................................................................... 7
Document Conventions ....................................................................................................................................................... 8
Where to Find Web-based Guides ...................................................................................................................................... 9
Contacting Allied Telesyn .................................................................................................................................................. 10
Online Support ...........................................................................................................................................................10
Email and Telephone Support ....................................................................................................................................10
Returning Products.....................................................................................................................................................10
For Sales or Corporate Information............................................................................................................................10
Management Software Updates .................................................................................................................................10
Chapter 1
Getting Started ................................................................................................................................................................ 11
Which Allied Telesyn Access Products Does This Manual Support? ................................................................................ 12
Overview of the AT-WA7500 and AT-WA7501 Access Point Products............................................................................. 13
Features .....................................................................................................................................................................15
What’s New for Software Releases 2.2?....................................................................................................................16
Understanding the LEDs ............................................................................................................................................17
Understanding the Ports.............................................................................................................................................19
How the Access Point Fits in Your Network ...................................................................................................................... 22
Using One Access Point in a Simple Wireless Network .............................................................................................22
Using Multiple Access Points and Roaming Wireless End Devices ...........................................................................24
Using an Access Point as a WAP ..............................................................................................................................27
Using Access Points to Create a Point-to-Point Bridge ..............................................................................................32
Using Dual Radio Access Points for Redundancy......................................................................................................37
Configuring the Access Point (Setting the IP Address) ..................................................................................................... 39
Using a Communications Program.............................................................................................................................39
Using a Web Browser Interface..................................................................................................................................41
Using a Telnet Session ..............................................................................................................................................43
Saving Configuration Changes .......................................................................................................................................... 45
Using a Web Browser Interface..................................................................................................................................45
Using a Telnet Session ..............................................................................................................................................47
Chapter 2
Installing the Access Points ..........................................................................................................................................49
Installation Guidelines ....................................................................................................................................................... 50
Microwave Ovens.......................................................................................................................................................50
Cordless Telephones .................................................................................................................................................50
Other Access Points...................................................................................................................................................51
Installing the AT-WA7501 .................................................................................................................................................. 52
Connecting the AT-WA7501 to Your Wired LAN........................................................................................................53
Connecting the AT-WA7501 to Power .......................................................................................................................53
Installing the AT-WA7500 .................................................................................................................................................. 54
Connecting the AT-WA7500 to Your Wired LAN and Power......................................................................................54
Connecting to Your Fiber Optic Network ........................................................................................................................... 55
Using and Purchasing the Required Patch Cord and Adapter ...................................................................................55
Connecting to an MT-RJ Network ..............................................................................................................................56
Connecting to an SC Network ....................................................................................................................................56
Connecting to an ST Network ....................................................................................................................................58
Connecting Power Over Ethernet...................................................................................................................................... 59
3
Page 4
Contents
External Antenna Placement Guidelines ...........................................................................................................................60
Positioning Antennas for 802.11g, 802.11b, and 802.11a Radios .............................................................................61
Chapter 3
Configuring the Ethernet Network ................................................................................................................................65
Configuring the TCP/IP Settings ........................................................................................................................................66
Configuring the Access Point as a DHCP Client ........................................................................................................68
Configuring the Access Point as a DHCP Server.......................................................................................................71
Configuring the Access Point to Send ARP Requests................................................................................................77
Configuring Other Ethernet or Fiber Optic Settings ...........................................................................................................79
Configuring the Ethernet Address Table.....................................................................................................................80
Configuring Ethernet Filters........................................................................................................................................81
Chapter 4
Configuring the Radios ..................................................................................................................................................99
About the Radios .............................................................................................................................................................100
Configuring the 802.11g Radio ........................................................................................................................................101
Configuring 802.11g Radio Advanced Parameters ..................................................................................................106
Configuring 802.11g Radio Inbound Filters ..............................................................................................................108
Applying Hot Settings ...............................................................................................................................................110
Configuring the 802.11b Radio ........................................................................................................................................112
Configuring 802.11b Radio Advanced Parameters ..................................................................................................114
Configuring 802.11b Radio Inbound Filters ..............................................................................................................117
Configuring the 802.11a Radio ........................................................................................................................................119
Configuring 802.11a Radio Advanced Parameters ..................................................................................................124
Configuring 802.11a Radio Inbound Filters ..............................................................................................................126
Chapter 5
Configuring the Spanning Tree ...................................................................................................................................129
About the Access Point Spanning Tree ...........................................................................................................................130
About the Primary LAN and the Root Access Point..................................................................................................131
About Secondary LANs and Designated Bridges .....................................................................................................132
About Ethernet Bridging/Data Link Tunneling...........................................................................................................134
About Routable and Non-Routable Network Protocols.............................................................................................135
Configuring the Spanning Tree Parameters ....................................................................................................................136
About IP Tunnels ............................................................................................................................................................. 140
Creating IP Tunnels ..................................................................................................................................................142
Using One IP Multicast Address for Multiple IP Tunnels ..........................................................................................143
How Frames Are Forwarded Through IP Tunnels ....................................................................................................145
Configuring IP Tunnels ....................................................................................................................................................148
Configuring the IP Address List ................................................................................................................................149
Configuring IP Tunnel Filters ....................................................................................................................................150
Filter Examples ................................................................................................................................................................157
Example 1.................................................................................................................................................................157
Example 2.................................................................................................................................................................158
Example 3.................................................................................................................................................................160
Example 4.................................................................................................................................................................160
Comparing IP Tunnels to Mobile IP .................................................................................................................................161
Configuring Global Parameters........................................................................................................................................163
Configuring Global Flooding .....................................................................................................................................163
Configuring Global RF Parameters...........................................................................................................................167
Chapter 6
Configuring Security ....................................................................................................................................................171
Understanding Security....................................................................................................................................................172
When You Include Multiple RADIUS Servers on the RADIUS Server List ...............................................................174
When You Specify the Security Options for Multiple SSIDs per Radio ....................................................................175
Controlling Access to Access Point Menus......................................................................................................................176
Enabling Access Methods ........................................................................................................................................176
Setting Up Logins .....................................................................................................................................................178
Creating a Secure Spanning Tree ...................................................................................................................................183
4
Page 5
AT-WA7500 and AT-7501 Installation and User’s Guide
Enabling Secure Communications Between Access Points and End Devices................................................................ 186
Using an Access Control List (ACL) .........................................................................................................................186
Configuring VLANs...................................................................................................................................................189
Configuring WEP 64/128/152 Security.....................................................................................................................191
Implementing an 802.1x Security Solution ...............................................................................................................194
Configuring Wi-Fi Protected Access (WPA) Security ...............................................................................................201
Chapter 7
Configuring the Embedded Authentication Server (EAS) ........................................................................................ 207
About the Embedded Authentication Server (EAS) ......................................................................................................... 208
About Certificates ............................................................................................................................................................209
Understanding Which Access Points Need Certificates...........................................................................................209
Understanding Which Certificates Are Installed by Default......................................................................................210
Viewing the Certificates Installed on an Access Point..............................................................................................210
Installing and Uninstalling Certificates......................................................................................................................211
Configuring the EAS ........................................................................................................................................................ 213
Enabling the EAS .....................................................................................................................................................213
Configuring the Database.........................................................................................................................................215
Using the Rejected List ............................................................................................................................................218
Exporting and Importing Databases .........................................................................................................................219
Chapter 8
Managing, Troubleshooting, and Upgrading Access Points .................................................................................... 223
Managing the Access Points ........................................................................................................................................... 224
Using the Wavelink Avalanche Client Management System ....................................................................................224
Using Simple Network Management Protocol (SNMP) ............................................................................................229
Maintaining the Access Points.........................................................................................................................................231
Viewing AP Connections ..........................................................................................................................................231
Viewing AP Neighbors..............................................................................................................................................234
Viewing Port Statistics..............................................................................................................................................237
Viewing DHCP Status ............................................................................................................
Viewing the Events Log............................................................................................................................................240
Viewing the About This Access Point Screen...........................................................................................................241
Using the LEDs to Locate Access Points .................................................................................................................242
Restoring the Access Point to the Default Configuration..........................................................................................243
Troubleshooting the Access Points .................................................................................................................................245
Using the Configuration Error Messages..................................................................................................................245
Troubleshooting With the LEDs................................................................................................................................250
General Troubleshooting..........................................................................................................................................252
Troubleshooting the Radios .....................................................................................................................................256
Troubleshooting Security..........................................................................................................................................260
Recovering a Failed Access Point............................................................................................................................263
Upgrading the Access Points .......................................................................................................................................... 266
Using a Web Browser Interface................................................................................................................................266
Troubleshooting the Upgrade ...................................................................................................................................267
..................................239
Chapter 9
Additional Access Point Features ...............................................................................................................................269
Understanding the Access Point Segments .................................................................................................................... 270
Understanding Transparent Files .................................................................................................................................... 271
Using the AP Monitor....................................................................................................................................................... 272
Entering the AP Monitor ...........................................................................................................................................272
Using AP Monitor Commands ..................................................................................................................................273
Using Content Addressable Memory (CAM) Mode Commands ...............................................................................275
Using Test Mode Commands .......................................................................................................
Using Service Mode Commands..............................................................................................................................277
Using Command Console Mode......................................................................................................................................284
Entering Command Console Mode ..........................................................................................................................284
Using the Commands...............................................................................................................................................284
Using TFTP Commands...........................................................................................................................................288
Using sdvars Commands .........................................................................................................................................293
............................276
5
Page 6
Contents
Creating Script Files.........................................................................................................................................................298
New Sample Script for Upgrading an Access Point..................................................................................................298
Legacy Sample Script for Upgrading Any Access Point ...........................................................................................300
Copying Files To and From the Access Point..................................................................................................................301
Importing or Exporting an EAS RADIUS Database File ...........................................................................................302
Transferring Files Using Your Web Browser ............................................................................................................303
Viewing and Copying Files Using Your Web Browser ..............................................................................................304
Transferring Files to and from a TFTP Server..........................................................................................................305
Starting or Stopping the TFTP Server ......................................................................................................................306
Automatically Upgrading Software............................................................................................................................306
Appendix A
Specifications ............................................................................................................................................................... 309
AT-7500 Access Point .....................................................................................................................................................309
AT-7501 Access Point .....................................................................................................................................................311
Radio Specifications ........................................................................................................................................................313
IEEE 802.11g ...........................................................................................................................................................313
IEEE 802.11b ...........................................................................................................................................................313
IEEE 802.11a ...........................................................................................................................................................314
Appendix B
Default Settings .............................................................................................................................................................317
TCP/IP Settings Menu Defaults .......................................................................................................................................318
DHCP Server Setup Menu Defaults.................................................................................................................................320
IEEE 802.11g Radio Menu Defaults ................................................................................................................................321
IEEE 802.11b Radio Menu Defaults ...............................................................................................
IEEE 802.11a Radio Menu Defaults ................................................................................................................................325
Spanning Tree Settings Menu Defaults ...........................................................................................................................327
Global Flooding Menu Defaults........................................................................................................................................328
Global RF Parameters Menu Defaults .............................................................................................................................329
Telnet Gateway Configuration Menu Defaults .................................................................................................................331
Ethernet Configuration Menu Defaults.............................................................................................................................332
Ethernet Advanced Filters Menu Defaults ................................................................................................................332
IP Tunnels Menu Defaults................................................................................................................................................335
Tunnels Filter Menu Defaults....................................................................................................................................335
Network Management Menu Defaults..............................................................................................................................337
Instant On Menu Defaults.........................................................................................................................................337
Security Menu Defaults.................................................................................................................................................... 338
Passwords Menu Defaults........................................................................................................................................338
IEEE 802.11 (b or a) Radio Security Menu Defaults ................................................................................................339
RADIUS Server List Menu Defaults..........................................................................................................................340
Spanning Tree Security Menu Defaults ....................................................................................................................341
Embedded Authentication Server Menu Defaults.....................................................................................................341
................................. 323
Appendix C
Glossary ........................................................................................................................................................................343
6
Page 7
Preface
This manual provides you with information about the features of the Allied
Telesyn AT-WA7500 and AT-WA7501 access points with software release
2.0 (or later). This manual also describes how to install, configure, operate,
maintain, and troubleshoot the access points.
7
Page 8
Preface
Document Conventions
This document uses the following conventions:
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
8
Page 9
Where to Find Web-based Guides
The installation and user guides for all Allied Telesyn products are
available in Portable Document Format (PDF) from on our web site at
www.alliedtelesyn.com. You can view the documents on-line or
download them onto a local workstation or server.
AT-WA7500 and AT-WA7501 Installation and User’s Guide
9
Page 10
Preface
Contacting Allied Telesyn
This section provides Allied Telesyn contact information for technical
support as well as sales or corporate information.
Online Support You can request technical support online by accessing the Allied Telesyn
Knowledge Base from the following web site: www.alliedtelesyn.com/kb.
You can use the Knowledge Base to submit questions to our technical
support staff and review answers to previously asked questions.
Email and
Telephone
Support
Returning
Products
For Sales or
Corporate
Information
Management
Software Updates
For Technical Support via email or telephone, refer to the Support &
Services section of the Allied Telesyn web site: www.alliedtelesyn.com.
Products for return or repair must first be assigned a Return Materials
Authorization (RMA) number. A product sent to Allied Telesyn without a
RMA number will be returned to the sender at the sender’s expense.
To obtain a RMA number, contact Allied Telesyn’s Technical Support at
our web site: www.alliedtelesyn.com.
You can contact Allied Telesyn for sales or corporate information at our
web site: www.alliedtelesyn.com. To find the contact information for your
country, select Contact Us -> Worldwide Contacts.
You can download new releases of management software for our
managed products from either of the following Internet sites:
❑ Allied Telesyn web site: www.alliedtelesyn.com
❑ Allied Telesyn FTP server: ftp://ftp.alliedtelesyn.com
10
To download new software from the Allied Telesyn FTP server using your
workstation’s command prompt, you need FTP client software and you
must log in to the server. Enter “anonymous” as the user name and your
email address for the password.
Page 11
Chapter 1
Getting Started
This chapter introduces the Allied Telesyn AT-WA7500 and AT-WA7501
access points, explains their features, and describes how you can use
them to expand your data collection network. This chapter covers these
topics:
“Which Allied Telesyn Access Products Does This Manual Support?”
on page 12
“Overview of the AT-WA7500 and AT-WA7501 Access Point Products”
on page 13
“How the Access Point Fits in Your Network” on page 22
“Configuring the Access Point (Setting the IP Address)” on page 39
“Saving Configuration Changes” on page 45
11
Page 12
Chapter 1: Getting Started
Which Allied Telesyn Access Products Does This Manual Support?
This system manual supports the AT-WA7500 and AT-WA7501 access
points with software release 2.2.
12
Page 13
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Overview of the AT-WA7500 and AT-WA7501 Access Point Products
The Allied Telesyn AT-WA7500 and AT-WA7501 access points deliver
reliable and seamless wireless performance to almost any operational
environment. They are designed for standards-based connectivity and
they support industry standard IEEE 802.11g, 802.11b, and 802.11a
wireless technologies.
The AT-WA7500 and AT-WA7501 access points with an IEEE 802.11g
radio installed are Wi-Fi certified for interoperability with other 802.11g and
802.11b wireless LAN devices.
The AT-WA7500 and AT-WA7501 access points with an IEEE 802.11g
radio installed are Wi-Fi® certified for interoperability with other 802.11b
and 802.11g wireless LAN devices.
The AT-WA7500 and AT-WA7501 access points with an IEEE 802.11b
radio installed are Wi-Fi certified for interoperability with other 802.11b
wireless LAN devices.
The AT-WA7500 and AT-WA7501 access points with an IEEE 802.11a
radio installed are Wi-Fi certified for interoperability with other 802.11a
wireless LAN devices.
The Allied Telesyn access family consists of these access points:
AT-WA7500
AT-WA7501
The access point can be configured as an access point or as a point-topoint or point-to-multipoint bridge. Normally, an access point is connected
to a wired local area network (LAN) and provides network access for
wireless end devices. A point-to-point bridge connects two wired LANs
and is often used to provide wireless communications in locations where
running cable is difficult, such as across roads or between buildings. A
point-to-multipoint bridge not only connects two wired LANs, but also
communicates with wireless end devices.
An access point can also be configured as a wireless access point (WAP)
or repeater. A WAP is not connected to a wired LAN; it receives data from
wireless end devices and forwards the data to an access point (that is
connected to the wired LAN). A WAP is useful in areas that do not support
a wired network connection.
13
Page 14
Chapter 1: Getting Started
On the left, this illustration shows the ways you can manage and configure
the access point, and on the right, it shows the access point’s general
multiport bridge architecture.
Management and Configuration
MIB
DHCP
TCP/IP
TFTP
File
System
RS-232 Connector
HTTP
Configuration Port
DHCP
Agent
Telnet
Configuration
Settings
Multiport Bridge
Forwarding
Database
Ethernet
Port
Ethernet
Connection
Spanning
Tree
Radio
Port 1
Antenna
Connection
Wireless ARP
Server
Bridging
Radio
Port 2
Antenna
Connection
Figure 1. Access Point Architecture
IP
Port
Access points are multiport (Ethernet-to-wireless) bridges, and because
wireless end devices operate similarly to other Ethernet devices, all your
existing Ethernet applications will work with the wireless network without
any special networking software. Any access point, except the root access
point, can concurrently receive hello messages on its Ethernet port, its
radio port, and its IP tunnel port. However, an access point can use only
one port to attach to the network. Port priorities are structured as follows:
1. Ethernet
2. IP tunnel
3. Radio
Unlike the physical Ethernet and radio ports, the IP tunnel port does not
have its own output connector. It is a logical port that provides IP
encapsulation services for frames that must be routed to reach their
destinations. Once frames are encapsulated, they are transmitted or
received through the Ethernet or radio port.
Wireless end devices may use power management to maintain battery life.
These end devices periodically wake up to receive frames that arrived
while their radio was powered down. The access point automatically
14
Page 15
AT-WA7500 and AT-WA7501 Installation and User’s Guide
provides a pending message delivery service that holds frames until the
end device is ready to receive them.
Features This table lists the features of the access points.
Table 1. Access Point Feature Comparison
Feature AT-WA7500 AT-WA7501
Access Point Yes Yes
Point-to-Point Bridge (Wireless
Yes * Yes *
Bridge)
Wireless Access Point (WAP) or
Yes * Yes *
Repeater
Secure Wireless Hops (SWAP) Yes Yes
Secure Wireless Hops (TLS or
Yes Yes
TTLS)
Radios 802.11g**
802.11b
802.11a
802.11g**
802.11b
802.11a
Dual Radio Support Yes Yes
Wi-Fi Compliant Yes Yes
Wi-Fi Protected Access (WPA) for
Yes Yes
802.1x mode or PSK mode.
802.1x Authenticator Yes Yes
802.1x Authentication Server Yes Yes
Access Control List (ACL) Server Yes Yes
Password Server Yes Yes
Secure Web Browser Interface
Yes Yes
(HTTPS)
10BaseT/100BaseTx Yes Yes
Fiber Optics Option No Yes
Serial Port Yes Yes
Data Link Tunneling Yes Yes
IP Tunneling Yes Yes
Antenna Diversity Not yet Not yet
Non-incentive Antenna System Yes Yes
15
Page 16
Chapter 1: Getting Started
Table 1. Access Point Feature Comparison (Continued)
Feature AT-WA7500 AT-WA7501
NEMA 4/IP 54 Protection No Yes
Power Supply No AC
Power Over Ethernet Yes Yes
Heater Option No Yes
* Currently, the 802.11g radio does not support wireless bridging and
wireless hops.
** The 802.11g radio is sometimes referred to as the 802.11b/g radio
because it can be configured to communicate with any 802.11b and
802.11g radios that have the same SSID and security settings. For details,
see “About the Radios” on page 100.
Other features of all access points include:
What’s New for
Software Releases
2.2?
the ability to be managed by the Wavelink Avalanche client
management system, Allied Telesyn manager, a web browser, telnet,
and SNMP.
the ability to be a DHCP server or client and a NAT server.
the ability to be an ARP server.
easy software distribution.
advanced filtering of wired data traffic.
enhanced power management for wireless end devices.
fast roaming reliability for wireless end devices.
load balancing.
basic WEP 64, WEP 128, or WEP 152 security for 802.11g, 802.11b,
or 802.11a radios.
New features include these items:
802.11g radio: This radio can communicate with other 802.11g and
802.11b radios. The 802.11g radio is also called the 802.11b/g radio.
Currently, this radio does not support wireless hops and wireless bridging.
It does not support antenna diversity. You cannot configure it to only
communicate with other 802.11g radios.
16
Wi-Fi Protected Access (WPA) support: For 802.11g and 802.11a radios,
WPA is a strongly enhanced, interoperable Wi-Fi security that addresses
many of the vulnerabilities of Wired Equivalent Privacy (WEP) security.
Page 17
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Multiple Service Sets: For 802.11g and 802.11a radios, you can assign up
to four service sets (and four SSIDs) to each radio, allowing each radio to
handle traffic for up to four separate virtual LANs (VLANs).
Telnet Gateway APpliance (TGAP): This feature lets the access point act
as a gateway for up to 128 TE2000 clients to communicate with up to eight
hosts. Using the TGAP also offers client session persistence.
Enhanced DHCP Server: You can configure the access point DHCP
server to provide IP addresses to only Allied Telesyn devices. This feature
helps prevent unauthorized access to the wireless network. You can also
configure the DHCP server to always provide the same IP address to a
DHCP client each time it requests one.
Instant On Server: This server provides the device-level distribution of
firmware, applications, and settings to wireless end devices that have the
Instant On client installed. Currently, this feature can only be used in
EasyADC systems.
Understanding
the LEDs
The AT-WA7500 and AT-WA7501 access points have five LEDs. To
understand the LEDs during normal use, see the next table. To use the
LEDs to help troubleshoot the radios, see “Troubleshooting the Radios” on
page 256.
Table 2. LED Descriptions
Icon LED Description
Power Remains on when power is applied.
Wireless #1 Blinks when a frame is transmitted or
received on the radio port for the radio
installed in radio slot 1.
Wireless #2 Blinks when a frame is transmitted or
received on the radio port for the radio
installed in radio slot 2 (if a second radio
is installed).
Wired LAN Blinks when a frame is transmitted or
received on the Ethernet port.
Root/error Blinks if this device is configured as the
root. It remains on if an error is detected.
17
Page 18
Chapter 1: Getting Started
This illustration shows the LEDs that are on the AT-WA7501 access point.
For help understanding these LEDs, see the LED Descriptions table on
page 17.
Allied Telesyn
Readiness
Indicator
Power
Wireless#1Wireless
#2
Wired LAN
Figure 2. AT-WA7501 LEDs
This illustration shows the LEDs that are on the AT-WA7500 access point.
For help understanding these LEDs, see the LED Descriptions table on
page 17.
Universal Access Point
Power
Wireless #1
Wireless #2
™
Wired LAN
Allied Telesyn
Readiness
Indicator
18
Figure 3. AT-WA7500 LEDs
Page 19
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Understanding
the Ports
The access point may have up to four ports.
Table 3. Port Descriptions
Port Description
Power (Not AT-WA7500,
optional AT-WA7501)
Serial Used with an RS-232 null-modem cable,
Ethernet 10BaseT/100BaseTx port. Used with an
Fiber optic (Not
AT-WA7500, optional
AT-WA7501)
Used with an appropriate power cable,
this port connects the access point to an
AC power source.
this port connects the access point to a
terminal or PC to perform configuration.
appropriate cable, this port connects the
access point to your Ethernet network.
The access point auto-negotiates with the
device it is communicating with so that the
data rate is set at the highest rate at which
both devices can communicate.
Optional 100BaseFX port. You must use a
patch cable with a female MT-RJ
connector to connect the access point to
your MT-RJ, SC, or ST fiber optic
network.
To access the ports on the AT-WA7501, you must remove the cable
access door.
To remove the AT-WA7501 cable access door
1. Unscrew the two thumbscrews on the cable access door.
2. Remove the door.
19
Page 20
Chapter 1: Getting Started
This illustration shows the ports that are on the AT-WA7501. For help
understanding these ports, see the Port Descriptions table on page 19.
Cable
access
door
Power port
(optional)
10BaseT/
100BaseTx
Ethernet port
Serial
port
Fiber optic
port (optional)
Figure 4. AT-WA7501 Ports
20
Page 21
AT-WA7500 and AT-WA7501 Installation and User’s Guide
The AT-WA7500 ports are located on the bottom of the access point. This
illustration shows the ports that are on the AT-WA7500. For help
understanding these ports, see the Port Descriptions table on page 19.
10BaseT/100BaseTx
Ethernet port
Serial port
Figure 5. AT-WA7500 Ports
For more information on connecting the ports, see Chapter 2, “Getting
Started” on page 11.
21
Page 22
Chapter 1: Getting Started
How the Access Point Fits in Your Network
In general, the access point forwards data from wireless end devices to
the wired Ethernet network. You can also use the access point as a pointto-point bridge, or if your access point has two radios, you can use it as a
point-to-multipoint bridge or a WAP. Use the access point in the following
locations and environments.
Table 4. Access Point Environments
Access Point Environment
AT-WA7500 Use in most indoor environments.
AT-WA7501 Use in locations where an access point is
exposed to extreme environments.
The access point supports a variety of network configurations. These
configurations are explained in the following sections:
Using One Access
Point in a Simple
Wireless Network
“Using One Access Point in a Simple Wireless Network” on page 22
“Using Multiple Access Points and Roaming Wireless End Devices” on
page 24
“Using an Access Point as a WAP” on page 27
“Using Access Points to Create a Point-to-Point Bridge” on page 32
“Using Dual Radio Access Points for Redundancy” on page 37
You can use an access point to extend your existing Ethernet network to
include wireless end devices. The access point connects directly to your
wired network and the end devices provide a wireless extension of the
wired LAN.
This illustration shows a simple wireless network with one access point
and some wireless end devices.
Host
22
Access
point
Ethernet
Figure 6. Simple Wireless Network
Page 23
AT-WA7500 and AT-WA7501 Installation and User’s Guide
In a simple wireless network, the access point that is connected to the
wired network serves as a transparent bridge between the wired network
and wireless end devices.
To install a simple wireless network
1. Configure the initial IP address. For help, see ““Configuring the Access
Point (Setting the IP Address)” on page 39.
2. Install the access point. For help, see Chapter 2, “Getting Started” on
page 11.
3. Configure the Ethernet network. For help, see Chapter 3, “Configuring
the Ethernet Network” on page 65.
4. Configure the radios. For help, see Chapter 4, “Configuring the
Radios” on page 99.
5. Decide what level of security you want to implement in your network.
For help, see Chapter 6, “Configuring Security” on page 171.
23
Page 24
Chapter 1: Getting Started
Example - Configuring an 802.11g Access Point
Host
Access
point
Ethernet
Figure 7. 802.11g Access Point
Table 5. 802.11g Access Point Parameter Settings
Screen Parameter Access Point
Using Multiple
Access Points and
Roaming
Wireless End
Devices
802.11g Radio Node Type Master
SSID (Network
Name)
Spanning Tree
Settings
Allied Telesyn recommends that you always implement some type of
security.
For larger or more complex environments, you can install multiple access
points so wireless end devices can roam from one access point to
another. Multiple access points establish coverage areas or cells similar to
those of a cellular telephone network. End devices can connect with any
access point that is within range and belongs to the same wireless
network.
Root Priority 5
Ethernet Bridging
Enabled
Manufacturing
Checked
24
Page 25
AT-WA7500 and AT-WA7501 Installation and User’s Guide
This illustration shows a wireless network with multiple access points.
Wireless end devices can roam between the access points to
communicate with the host and other end devices.
Host
Ethernet
Figure 8. Multiple Access Points with Roaming End Devices
An end device initiates a roam when it attaches to a new access point. The
access point sends an attach message to the root access point, which in
turn forwards a detach message to the previous access point, allowing
each access point to update its forwarding database. Intermediate access
points monitor these exchanges and update their forwarding databases.
With the access point’s multichannel architecture, you can have more than
one access point within the same cell area to increase throughput and
provide redundancy. For more information, see “Using Dual Radio Access
Points for Redundancy” on page 37.
To install multiple access points with roaming end devices
1. Follow the instructions for installing a simple wireless network in “Using
One Access Point in a Simple Wireless Network” on page 22.
2. Configure the LAN ID. For help, see “Configuring the Spanning Tree
Parameters” on page 136.
3. Configure one of the access points to be a root access point. For help,
see “About the Primary LAN and the Root Access Point” on page 131.
4. If your network has a switch that is not IEEE 802.1d-compliant and is
located between access points, configure data link tunneling. For help,
see “About Ethernet Bridging/Data Link Tunneling” on page 134.
25
Page 26
Chapter 1: Getting Started
Example - Configuring an 802.11g Access Point with Roaming End
Devices
In this example, there is one 802.11g radio in each access point. Wireless
end devices can roam between the access points to communicate with the
host and other end devices.
Host
AP2
Ethernet
Figure 9. 802.11g Access Point with Roaming End Devices
Table 6. 802.11g Access Points Parameter Settings
Screen Parameter
802.11g
Node Type Master Master Master
Radio
SSID Op3rat!ons Op3rat!ons Op3rat!ons
Spanning
LAN ID000
Tree
Settings
Root
Priority
AP1
AP1
802.11g
Radio
(Root)
AP3
AP2
802.11g
Radio
AP3
802.11g
Radio
543
26
Ethernet
Bridging
Enabled
Secondary
LAN Bridge
Priority
Checked Checked Checked
000
Page 27
AT-WA7500 and AT-WA7501 Installation and User’s Guide
The access points communicate with each other through the spanning
tree. The wireless end devices are configured as stations with LAN ID set
to 0 and SSID set to Op3rat!ons.
Using an Access
Point as a WAP
You can extend the range of your wireless network by configuring a dual
radio access point as a wireless access point (WAP). The WAP and the
wireless end devices it communicates with comprise a secondary LAN.
You can position WAPs in strategic locations so they receive data from
end devices and then forward the data to the wired network. This
configuration can be useful when distance or physical layout impedes
radio reception and transmission
This illustration shows a simple wireless network with one access point
and one WAP. Wireless end devices use the WAP to forward data to the
access point.
Host
Access
point
WAP
Ethernet
Figure 10. Access Point as a WAP
WAPs send data from end devices to the access points via wireless hops.
Wireless hops are formed when data from end devices move from one
access point to another access point through the radio ports. The master
radio in the access point transmits hello messages, which allow the WAPs
to attach to the spanning tree in the same way as access points.
The number of radios required in the WAP depends on the type of radio
installed:
If you have an 802.11a radio, the WAP only needs one radio because
this radio can simultaneously be a master and a station. This radio will
create wireless hops automatically when it cannot communicate to the
wired network.
If you have an 802.11g or 802.11b radio, the WAP must contain two
radios: one configured as master and one as station. The WAP master
radio must match the end devices radios, and the WAP station radio
must match the master radio in the access point.
Note
Currently, 802.11g networks cannot use WAPs because this radio
does not support wireless hops.
27
Page 28
Chapter 1: Getting Started
WAPs must be on the same IP subnet as the access point. Also, data from
wireless end devices should not go through more than three wireless hops
before it gets to an access point on the primary LAN.
The following procedure explains how to install a simple wireless network
with a WAP and no roaming end devices. For help installing a simple
wireless network with a WAP and roaming end devices, see the two
examples in the next sections.
To install a simple wireless network with a WAP and no roaming end
devices
1. Follow the instructions for installing a simple wireless network in the
section “Using One Access Point in a Simple Wireless Network” on
page 22.
2. Configure the LAN ID. For help, see “Configuring the Spanning Tree
Parameters” on page 136.
3. (802.11g and 802.11b) Configure the station radio in the WAP:
a. From the main menu, click the link corresponding to the station
radio. The radio screen appears.
b. In the Primary service set Node Type field, choose Station.
c. In the Primary service set SSID (Network Name) field, type the
SSID. In this example, the SSID is Manufacturing.
d. Click Submit Changes to save your changes. The screen updates.
4. To activate your changes, from the menu bar click Save/Discard
Changes, and then click Save Changes and Reboot. For help, see
“Saving Configuration Changes” on page 45.
5. Configure the master radio in the WAP to communicate with the end
devices. For help, see Chapter 4, “Configuring the Radios” on
page 99.
28
Page 29
AT-WA7500 and AT-WA7501 Installation and User’s Guide
6. Configure the master radio in the access point:
a. From the main menu, click the link corresponding to the master
radio. The radio screen appears.
b. Make sure the Allow Wireless Access Points field is On Primary.
c. In the Primary service set Node Type field, choose Master.
d. In the Primary service set SSID (Network Name) field, type the
SSID. In this example, the SSID is Manufacturing.
7. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
8. Configure the access point to be a root access point. For help, see
“About the Primary LAN and the Root Access Point” on page 131.
9. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
29
Page 30
Chapter 1: Getting Started
Example - Configuring an 802.11b WAP With Roaming End Devices
In this example, there is one 802.11b radio in the access point and there
are two 802.11b radios (802.11b Radio-1 and 802.11b Radio-2) in the
WAP. Wireless end devices can roam between the WAP and the access
point.
Host
Access
point
WAP
Ethernet
Figure 11. 802.11b WAP with Roaming End Devices
Table 7. 802.11b Access Point and WAP Parameter Settings
Screen Parameter
802.11b
Radio
Allow
Wireless
Access
Point
802.11b
WAP
802.11b
Radio-1
802.11b
Radio-2
On Primary (not
applicable)
WAP
Access
Points
Node Type Master Master Station
SSID ATILAN ATILAN ATILAN
Spanning
LAN ID 11 11 11
Tree
Settings
Root
Priority
Ethernet
Bridging
50(not
applicable)
Checked Checked (not
applicable)
Enabled
You need to configure the wireless end devices to have the same SSID,
LAN ID, and frequency as the WAP master radio (802.11b Radio-1). You
do not need to configure any secondary LAN settings because the WAP is
not connected to a secondary LAN.
30
Allied Telesyn recommends that you always implement some type of
security.
Page 31
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Example - Configuring an 802.11a WAP With Roaming End Devices
In this example, there is one 802.11a radio in the access point and there is
one 802.11a radio in the WAP. Wireless end devices can roam between
the WAP and the access point.
Host
Access
point
WAP
Ethernet
Figure 12. 802.11a WAP with Roaming End Devices
Table 8. 802.11a Access Point and WAP Parameter Settings
Screen Parameter
802.11a
Radio
Allow Wireless Access
Points
Access
Point
802.11a
WAP
802.11a
On Primary
Node Type Master Master
SSID ATILAN ATILAN
Spanning
LAN ID 11 11
Tree
Settings
Root Priority 5 0
Ethernet Bridging Enabled Checked Checked
Secondary LAN Bridge
00
Priority
You need to configure the wireless end devices to have the same SSID,
LAN ID, and frequency as the WAP radio. You do not need to configure
any secondary LAN settings because the WAP is not connected to a
secondary LAN.
Allied Telesyn recommends that you always implement some type of
security.
31
Page 32
Chapter 1: Getting Started
Using Access
Points to Create a
Point-to-Point
Bridge
You can use access points to create a point-to-point bridge between two
wired LANs. That is, you can have one access point wired to a primary
LAN in one building and have a second access point wired to a secondary
LAN in another building. This configuration lets wired and wireless end
devices in both buildings communicate with each other, which can be
useful in a campus environment or any other environment where
pavement or other objects prevent installation of a wired link.
This illustration shows two simple wireless networks that are connected
with access points that are acting as point-to-point bridges.
Secondary LAN
Host
Primary LAN
Root
Designated
bridge
Figure 13. Access Points as Point-to-Point Bridges
Point-to-point bridges send data from end devices on the secondary LAN
to the root access point via wireless hops. Wireless hops are formed when
data from end devices move from one access point to another access
point through the radio ports. The master radio in the point-to-point bridge
on the primary LAN transmits hello messages, which allow the bridge on
the secondary LAN to attach to the spanning tree in the same way as
access points.
How many radios do you need in each access point?
If you have an 802.11a network, each access point only needs one
radio.
If you have an 802.11g or 802.11b network and the access points are
simply acting as point-to-point bridges, each access point only needs
one radio.
If you have an 802.11g or 802.11b network and you want the
designated bridge to also communicate with wireless end devices
(point-to-multipoint), the designated bridge must have two radios. The
designated bridge master radio must match the end device radios, and
the station radio must match the root master radio.
32
Note
Currently, 802.11g networks cannot use point-to-point bridges
because this radio does not support wireless bridging.
Page 33
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Data from wireless end devices should not go through more than three
wireless hops before it gets to an access point on the primary LAN.
You need to set the root priorities and secondary LAN bridge priorities for
the bridge on the primary LAN and for the bridge on the secondary LAN:
On the primary LAN bridge, set the root priority to a number that is
greater than the root priority of the secondary LAN bridge. The access
points will not form a point-to-point bridge if the primary LAN bridge
has a lower root priority than the secondary LAN bridge.
On the secondary LAN bridge, set the root priority to 0 and the
secondary LAN bridge priority to a number other than 0.
You may also need to adjust the flooding parameters. Here are some
recommendations:
If there are no end devices on the secondary LAN, the bridge on the
secondary LAN can use the default flooding settings. The Secondary
LAN Flooding parameter is disabled.
If there are end devices on the secondary LAN, the bridge on the
secondary LAN should have Secondary LAN Flooding parameter set
to Multicast. If you also want unicast flooding, you can set this
parameter to Enabled.
If there are end devices on the secondary LAN and the end devices
communicate with end devices on another secondary LAN, the root
access point should have its Multicast Flooding parameter set to
Universal. This setting ensures that all ARP requests and multicast
traffic is distributed through a second or third hop.
To install a point-to-point or a point-to-multipoint bridge
1. Follow the instructions for installing a simple wireless network in the
section “Using One Access Point in a Simple Wireless Network” on
page 22.
2. Configure the LAN ID. For help, see “Configuring the Spanning Tree
Parameters” on page 136.
3. (802.11g and 802.11b) Configure the station radio in the point-to-point
bridge on the secondary LAN:
a. From the main menu, click the link corresponding to the station
radio. The radio screen appears.
b. In the Primary service set Node Type field, choose Station.
c. In the Primary service set SSID (Network Name) field, type the
SSID. In this example, the SSID is Manufacturing.
d. Click Submit Changes. The screen updates.
33
Page 34
Chapter 1: Getting Started
4. Configure the spanning tree settings for the point-to-point bridge on
the secondary LAN:
a. From the main menu, click Spanning Tree Settings. The Spanning
Tree Settings screen appears.
b. In the Root Priority field, enter 0.
c. In the Secondary LAN Bridge Priority field, enter a number other
than zero.
d. In the Secondary LAN Flooding field, choose Enabled.
5. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
6. Configure the master radio in the point-to-point bridge on the primary
LAN:
a. From the main menu, click the link corresponding to the master
radio. The radio screen appears.
b. Make sure the Allow Wireless Access Points field is On Primary.
c. In the Primary service set Node Type field, choose Master.
34
d. In the Primary service set SSID (Network Name) field, type the
SSID. In this example, the SSID is Manufacturing.
e. Click Submit Changes.
Page 35
AT-WA7500 and AT-WA7501 Installation and User’s Guide
7. Configure the spanning tree settings for the point-to-point bridge on the
primary LAN:
a. From the main menu, click Spanning Tree Settings. The Spanning
Tree Settings screen appears.
b. In the Root Priority field, enter a number other than 0.
c. In the Secondary LAN Bridge Priority field, enter 0.
d. In the Secondary LAN Flooding field, choose Disabled.
8. If the roaming end devices will be roaming across an IP router, you
must configure IP tunnels. For help, see “Configuring IP Tunnels” on
page 148.
9. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Example - Configuring an 802.11g Bridge
In this example, each access point only has one 802.11g radio. Since the
designated bridge only has a station radio, wireless end devices can only
communicate with the root access point. However, wired devices on the
secondary LAN can communicate with the primary LAN.
Secondary LAN
Host
Primary LAN
Root
Designated
bridge
Figure 14. 802.11g Bridge
35
Page 36
Chapter 1: Getting Started
Table 9. 802.11g Point-to-Point Bridges Parameter Settings
Bridge
Screen Parameter
Primary LAN
(Root)
Bridge
Secondary
LAN
(Designated
Bridge)
802.11g
Radio
Allow Wireless Access
Points
On Primary (not
applicable)
Node Type Master Station
Spanning
Tree
Settings
SSID Manufactur-
ing
LAN ID 0 0
Root Priority 5 0
Ethernet Bridging
Checked Checked
Manufacturing
Enabled
Secondary LAN Bridge
01
Priority
Secondary LAN Bridge
Disabled Enabled
Flooding
Allied Telesyn recommends that you implement some type of security.
Example - Configuring an 802.11a Bridge
36
In this example, each access point only has one 802.11a radio. Since the
802.11a radio can function as a master and a station, wireless end
devices can communicate with either access point.
Secondary LAN
Host
Primary LAN
Root
Designated
bridge
Figure 15. 802.11a Point-to-Point Bridges
Page 37
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Table 10. 802.11a Point-to-Point Bridges Parameter Settings
Bridge
Screen Parameter
Primary LAN
(Root)
(Designated
Bridge
Secondary
LAN
Bridge)
Using Dual Radio
Access Points for
Redundancy
802.11a
Radio
Spanning
Tree
Settings
Allied Telesyn recommends that you always implement some type of
security.
You can configure AT-WA7500 units and AT-WA7501 units that have two
802.11g radios, two 802.11b radios, or two 802.11a radios to provide
redundancy for your network.
Allow Wireless Access
Points
Node Type Master Master
SSID Manufactur-
LAN ID 11 11
Root Priority 5 0
Ethernet Bridging
Enabled
Secondary LAN Bridge
Priority
Secondary LAN Bridge
Flooding
On Primary On Primary
Manufactur-
ing
Checked Checked
01
Disabled Enabled
ing
Note
Currently, the AT-WA7500 and AT-WA7501 do not support two
802.11g radios.
During normal operations, end devices send frames to the master radio in
one of the access points, which bridges the frames to the wired network. If
a section of the wired network goes down, the master radio receives the
frames, and then the station radio forwards the frames to a master radio in
another access point that is within range.
In each access point, you need to configure one radio’s node type as a
Master, which communicates with the wireless end devices, and configure
the other radio’s node type as a Station, which communicates to another
access point with a master radio and within range.
37
Page 38
Chapter 1: Getting Started
In this example, AP3 is a dual radio access point. It may be located on a
loading dock or other remote location. During normal operations, AP3
functions as a normal access point, transmitting frames to and from the
host. However, if the Ethernet connection is disrupted, AP3 can function
as a WAP and continue operations by transmitting frames to a master
radio in AP1. AP3 must be within range of AP1.
Host
AP1 AP3
Ethernet
Figure 16. Dual Radio Access Points
To install dual radio access points for redundancy
Follow the instructions for installing a simple wireless network with a
WAP on page 27.
38
Page 39
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Configuring the Access Point (Setting the IP Address)
The access point will work out of the box if you are using a DHCP server to
assign it an IP address. By default, the access point is configured to be a
DHCP client and will respond to offers from any DHCP server. However, if
you are not using a DHCP server to assign an IP address, you can use a
communications program, such as HyperTerminal, which also configures
other parameters. This program must be installed on a PC with an open
serial port. For help, see “Using a Communications Program” on page 39.
This manual assumes that you are using a communications program for
your initial configuration, and then using a web browser interface to
perform all other configurations. You can also continue to use a
communications program or you can start a telnet session to configure the
access point.
Using a
Communications
Program
You can use a communications program (such as HyperTerminal) to set
the initial IP address for the access point. After you configure the IP
address, you can continue to use the communications program to set
other parameters or you can use a web browser or a telnet session to
complete the configuration.
To use a communications program, you must have
a terminal or PC with an open serial port and the communications
program.
an RS-232 null-modem cable. One end of this cable must be a 9-pin
socket connector to connect to the serial port on the access point.
To use a communications program
1. Use the RS-232 null-modem cable to connect the serial port on the
access point to a serial port on your PC. You may need to remove the
serial port plug.
2. Start the communications program and configure the serial port
communications parameters on your PC, and then click OK. You
should configure the serial port communications parameters to:
Bits per second 9600
Data bits 8
Parity None
Stop bit 1
Flow control None
3. Connect the access point to power. The access point has no On/Off
switch, so it boots as soon as you apply power.
39
Page 40
Chapter 1: Getting Started
4. Press Enter when the message “Starting system” appears on your PC
screen. The Username field appears.
5. In the Username field type the default user name “atilan”, and then
press Enter. The user name is case sensitive.
6. In the Password field type the default password “atilan”, and then
press Enter. The password is case sensitive. The Access Point
Configuration menu appears.
40
Page 41
AT-WA7500 and AT-WA7501 Installation and User’s Guide
7. Press Enter to access the TCP/IP Settings menu.
8. If you are not using a DHCP server, you need to manually assign an IP
address. Configure these parameters in the TCP/IP Settings menu:
IP Address - A unique IP address.
IP Subnet Mask - The subnet mask that matches the other devices
in your network.
IP Router (Gateway) - If the access point will communicate with
devices on another subnet, enter the address of the router that will
forward frames.
Or, if you are using a DHCP server to automatically assign an IP
address to your access point, configure these parameters in the TCP/
IP Settings menu:
DHCP Mode - Set to <Use DHCP if IP Address is Zero>.
DHCP Server Name - The name of the DHCP server that the
access point is to access for automatic address assignment. If no
server name is specified, the access point responds to offers from
any server.
Using a Web
Browser
Interface
9. Press Esc to return to the Access Point Configuration menu.
10. Choose Save Configuration.
11. Choose Reboot.
When the access point is done rebooting, you are ready to install the
access point in your network. See Chapter 2, “Installing the Access
Points” on page 49.
After you have set the initial IP address, you can configure, manage, and
troubleshoot the access point from a remote location using a web browser
interface. The web browser interface has been tested using Internet
Explorer. Remotely accessing the access point using other browsers may
provide unpredictable results. When using the web browser interface,
keep the following points in mind:
Your session terminates if you do not use it for 15 minutes.
Command Console mode is not available.
Note
If you access the Internet using a proxy server, you must add the IP
address of the access point to your Exceptions list. The Exceptions
list contains the addresses that you do not want to use with a proxy
server.
41
Page 42
Chapter 1: Getting Started
To use a web browser interface
1. Determine the IP address of the access point. If a DHCP server
assigned the IP address, you must get the IP address from the DHCP
server.
2. Start the web browser application.
3. Access the access point using one of these methods:
In the Address field (Internet Explorer) or in the Location field
(Netscape Communicator), enter the IP address, and press Enter.
From the File menu, choose Open (Internet Explorer) or choose
Open Page (Netscape Communicator). In the field, enter the IP
address and press Enter.
The Access Point Login screen appears.
42
4. If necessary, enter a user name and a password. The default user
name is “atilan” and the default password is “atilan”. You can define a
user name and password. For help, see “Setting Up Logins” on
page 178.
Or you may want to log in to a secure session.
Page 43
AT-WA7500 and AT-WA7501 Installation and User’s Guide
5. Click Login. The TCP/IP Settings screen appears.
Using a Telnet
Session
Your web browser session is established.
Note
Although you can use several different methods to manage the
access point remotely, this manual assumes you are using a web
browser.
After you have configured the IP address, you can configure, manage, and
troubleshoot the access point from a remote location using a telnet
session.
Only one session can be active with the access point at a time. If you
session terminates abruptly or a new login screen appears, someone else
may have accessed the access point. Also, your session terminates if you
do not use it for 15 minutes.
To use a telnet session
1. Determine the IP address of the access point. If a DHCP server
assigned the IP address, you must get the IP address from the DHCP
server.
43
Page 44
Chapter 1: Getting Started
2. From a command prompt, type: telnet IPaddress where IPaddress is
the IP address of the access point.
3. Press Enter.
4. If necessary, enter the user name and press Enter. Then, enter the
password and press Enter. The default user name is “atilan” and the
default password is “atilan”. You can define a user name and
password. For help, see “Setting Up Logins” on page 178. The Access
Point Configuration menu appears.
44
Your telnet session is established.
Page 45
Saving Configuration Changes
When you are done configuring the access point, you may want to activate
your changes immediately or you may want to save the changes now and
activate them later. If you choose to activate the changes later, they will
become active the next time the access point is booted.
Configuration File Description
Default This configuration file is the factory default
Current When you click Submit Changes, the access
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Table 11. Access Point Configuration Files
configuration. For help, see “Restoring the
Access Point to the Default Configuration” on
page 243.
point updates the current configuration file. The
access point does not change the active
configuration file. You can see a list of pending
changes when you click Save/Discard Changes.
Having separate files for the current and active
configurations lets you make changes while the
access point is running without interrupting
communication.
Using a Web
Browser
Interface
Active When you click Save/Discard Changes > Save
Changes and Reboot, the access point copies
the current configuration file to the active
configuration file. The active configuration file is
the file that the access point uses.
Note
For the 802.11g radio, when you configure some of the advanced
configuration parameters, you can immediately activate the changes
without rebooting the access point. For instructions, see “Applying
Hot Settings” on page 110.
1. On the menu bar, click Save/Discard Changes.
45
Page 46
Chapter 1: Getting Started
This screen appears.
Select to use new configuration
settings immediately
Select to use new configuration
settings the next time you reboot
the access point
Lists possible configuration
changes that still need
to be made
46
Lists configuration changes
that have been made
2. Resolve any error messages listed under the heading Possible
Configurations Errors. For help, see “Using the Configuration Error
Messages” on page 245.
3. Verify that all your configuration changes appear in the Pending
Changes box.
4. Click Save Changes and Reboot to reboot the access point and
immediately use your new active configuration.
Or click Save Changes without Reboot. The access point saves the
changes to its current configuration and continues to run its active
configuration. You need to reboot the access point when you want the
current configuration to become the active configuration.
Page 47
AT-WA7500 and AT-WA7501 Installation and User’s Guide
To discard the changes
Click Discard Pending Changes.
Using a Telnet
Session
1. From the Access Point Configuration menu, choose Save
Configuration.
2. Choose Reboot to reboot the access point and immediately use your
new active configuration.
47
Page 48
Chapter 1: Getting Started
48
Page 49
Chapter 2
Installing the Access Points
This chapter explains how to install the Allied Telesyn AT-WA7500 and
AT-WA7501 access points in your data collection network, provides some
tips on how to position access points to improve your network
performance, and provides some external antenna guidelines. This
chapter covers these topics:
“Installation Guidelines” on page 50
“Installing the AT-WA7501” on page 52
“Installing the AT-WA7500” on page 54
“Connecting to Your Fiber Optic Network” on page 55
“Connecting Power Over Ethernet” on page 59
“External Antenna Placement Guidelines” on page 60
Section I: Basic Features 49
Page 50
Chapter 2: Installing the Access Points
Installation Guidelines
Allied Telesyn recommends that you have an Allied Telesyn-certified RF
specialist conduct a site survey to determine the ideal locations for all your
Allied Telesyn wireless network devices. To conduct a proper site survey,
you need to have special equipment and training.
The following general practices should be followed in any installation:
Locate access points centrally within areas requiring coverage.
Overlap access point radio coverage areas to avoid coverage holes.
Position the access point so that its LEDs are visible. The LEDs are
useful for troubleshooting.
Install wired LAN cabling within node limit and cable length limitations.
Use an uninterruptible power supply (UPS) when AC power is not
reliable.
Proper antenna placement can help improve range. For information about
antenna options, contact your local Allied Telesyn representative. For
more guidelines, see “External Antenna Placement Guidelines” on
page 60.
When determining ideal locations for the access points, be aware that you
may see network performance degradation from microwave ovens,
cordless telephones, and other access points. For more information, see
the next sections.
Note
Microwave ovens, cordless telephones, and other access points do
not degrade the network performance of the 802.11a radio.
Microwave Ovens Microwave ovens operate in the same frequency band as 802.11g and
802.11b radios; therefore, if you use a microwave oven within range of
your wireless network, you may notice network performance degradation.
Both your microwave oven and your wireless network will continue to
function, but you may want to consider relocating your microwave oven
out of range of your access point.
50
Cordless
Telephones
If you have an 802.11g or 802.11b radio in your access point, the radio
may experience interference from some cordless telephones. For optimal
performance, consider operating cordless telephones out of range of your
access points.
Page 51
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Other Access
Points
Access points that are configured for the same frequency and that are in
the same radio coverage area may interfere with each other and decrease
throughput. You can reduce the chance of interference by configuring
access points at least five channels apart, such as channels 1, 6, and 11.
51
Page 52
Chapter 2: Installing the Access Points
Installing the AT-WA7501
You can place the AT-WA7501 horizontally or vertically on a desk or
counter. If you want to mount the AT-WA7501 to a wall or beam using an
Allied Telesyn mounting bracket kit, you need one of these mounting kits:
Mounting bracket kit
Rotating mounting bracket kit
To order one of these kits, contact your Allied Telesyn representative.
To maintain the IP54 environmental rating, you must mount the
AT-WA7501 in either the horizontal or vertical position. If you order the
AT-WA7501 with the heater option, you must use one of the mounting
bracket kits to mount the AT-WA7501 with the LEDs facing down.
A variety of external antenna options are available for the AT-WA7501.
Contact your Allied Telesyn representative for information about the
various antenna options, including higher gain and directional antennas.
For more information about antennas and antenna accessories, see
“Antennas and Antenna Accessories” on page 247.
To install the AT-WA7501, do the following procedure:
1. Attach the antenna or antennas. For more information, see “External
Antenna Placement Guidelines” on page 60.
Note
If the AT-WA7501 has an 802.11a full-range radio, you must use the
antennas that are already attached to the antenna connectors.
2. Mount the AT-WA7501. For help see the AT-WA7501 Quick Install
Guide and the instructions that shipped with the bracket kit.
3. Connect the AT-WA7501 to your wired LAN (unless you are using it as
a WAP). For help, see “Connecting the AT-WA7501 to Your Wired
LAN” on page 53.
4. Connect the AT-WA7501 to power. For help, see “Connecting the
AT-WA7501 to Power” on page 53.
When you are done installing the access points, you need to configure
them to communicate with your network.
52
Page 53
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Connecting the
AT-WA7501 to
Your Wired LAN
Connecting the
AT-WA7501 to
Power
Unless you are using the AT-WA7501 as a WAP, you need to connect it to
your Ethernet or fiber optic network. To connect the AT-WA7501 to your
fiber optic network, you must have a AT-WA7501 with the fiber optic
option. For help, see “Connecting to Your Fiber Optic Network” on
page 55.
To connect the AT-WA7501 to the Ethernet network
Attach one end of the Ethernet cable to the 10BaseT/100BaseTx port
on the AT-WA7501 and attach the other end to your Ethernet network
or a power bridge (if you are using power over Ethernet), a Cisco
power bridge or another 802.3af-compliant power bridge.
If your AT-WA7501 has the internal power supply option, you can use a
power cord to connect the AT-WA7501 directly to an AC power outlet.
Caution
You must use the appropriate Allied Telesyn power supply with
these devices or equipment damage may occur.
Attention: Vous devez utiliser la source d’alimentation Allied Telesyn
adéquate avec cet appareil sinon vous risquez d’endommager
l’équipement.
If you are using the power over Ethernet option, you must have the power
bridge or another 802.3af-compliant power bridge. For help, see
“Connecting Power Over Ethernet” on page 59 and the documentation that
came with your power bridge.
To connect the AT-WA7501 to power
Plug one end of the power cord into the power port on the AT-WA7501
and plug the other end into an AC power outlet. The access point
boots as soon as you apply power.
53
Page 54
Chapter 2: Installing the Access Points
Installing the AT-WA7500
You can place the AT-WA7500 horizontally on a desk or counter. The
AT-WA7500 also ships with a mounting bracket that lets you mount it
vertically to a wall. Additional mounting options that you can use with the
mounting bracket include a cubicle bracket that lets you mount the
AT-WA7500 on a cubicle wall or in a locking bracket.
Cubicle bracket kit
Locking bracket kit
To order one of these kits, contact your Allied Telesyn representative.
Allied Telesyn also offers a variety of antennas and antenna accessories.
For more information, see “Antennas and Antenna Accessories” on page
247.
To install the AT-WA7500, do the following:
1. Attach the antenna or antennas. For more information, see “External
Antenna Placement Guidelines” on page 60.
Connecting the
AT-WA7500 to
Your Wired LAN
and Power
Note
If the AT-WA7500 has an 802.11a full-range radio, you must use the
antennas that are already attached to the antenna connectors.
2. Mount the AT-WA7500. For help see the AT-WA7500 Quick Install
Guide and the instructions that shipped with the bracket kit.
3. Connect the AT-WA7500 to your wired LAN (unless you are using it as
a WAP). For help, see “Connecting the AT-WA7500 to Your Wired
LAN and Power” on page 54.
4. Connect the AT-WA7500 to power. For help, see “Connecting the
AT-WA7500 to Your Wired LAN and Power” on page 54.
When you are done installing the access points, you need to configure
them to communicate with your network.
Unless you are using the AT-WA7500 as a WAP, you must connect it to
your Ethernet network. To connect the AT-WA7500 to your Ethernet
network and to power, you must first connect it to a power bridge or
another 802.3af-power bridge. For help, see “Connecting Power Over
Ethernet” on page 59 and the documentation that shipped with your power
bridge.
54
Page 55
Connecting to Your Fiber Optic Network
You can order your AT-WA7501 access point with a fiber optic option.
Using an appropriate patch cord and adapter (as described in the next
section), you can connect your access point to:
an MT-RJ network.
a square connector (SC) network.
a straight tip (ST) network.
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Using and
Purchasing the
Required Patch
Cord and
Adapter
To access
To connect the access point with the fiber optic option to your fiber optic
network, you must have a patch cord and an adapter.
The access point fiber optic port consists of a male MT-RJ connector
interface. Therefore, the patch cord must have a female MT-RJ connector
that you insert into the access point fiber optic port.
point
Insert a female MT-RJ
connector into the
fiber optic port
To access
point
Do not insert a male
MT-RJ connector into
the fiber optic port
Figure 1. Patch Cord
Note
Inserting a male MT-RJ connector into the fiber optic port may result
in unreliable operation because there is no internal mechanism to
ensure the alignment of the fiber when using male-to-male
connectors. Such a connection may temporarily provide some level
of connectivity, despite a high level of signal loss. However, any
movement of the cable or change in cable tension could cause
complete loss of signal.
Both the connector at the other end of the patch cord and the adapter you
select depend on the type of network to which the access point is
connected: MT-RJ, SC, or ST.
Patch cords and adapters are available from many different
manufacturers. For help choosing the proper patch cord and adapter,
contact your local Allied Telesyn representative.
55
Page 56
Chapter 2: Installing the Access Points
k
Note
All cables must be multimode, 62.5/125 µm.
Connecting to an
MT-RJ Network
To connect to an MT-RJ network, you need:
a patch cord with a female MT-RJ connector to insert into the access
point’s male MT-RJ fiber optic port, and another female MT-RJ
connector to insert into the MT-RJ adapter.
an adapter for connecting the patch cord to the MT-RJ network.
To connect to an MT-RJ network
1. Remove any cable protectors attached to the patch cord and adapter.
2. Connect the access point to your network as shown in the next
illustration.
Female
MT-RJ connector
Female
To access point
Patch cord
MT-RJ connector
MT-RJ adapter
To
MT-RJ
networ
Connecting to an
SC Network
56
Figure 2. Connecting to an MT-RJ Network
Note
The patch cord shown above must connect to the access point with
a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 55.
To connect to an SC network, you need:
a patch cord with a female MT-RJ connector to insert into the access
point’s male MT-RJ fiber optic port, and an SC connector to insert into
the SC adapter.
an adapter for connecting the patch cord to an SC network.
To connect to an SC network
1. Remove any cable protectors attached to the patch cord and adapter.
Page 57
AT-WA7500 and AT-WA7501 Installation and User’s Guide
k
k
2. Connect the access point to your network as shown in the next two
illustrations.
Female
MT-RJ connector
To access point
Note
The patch cord shown above must connect to the access point with
a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 55.
To access point
Patch cord
Female
MT-RJ connector
SC connector
SC adapter
SC connector
To SC
networ
SC connector
SC adapter
SC connector
Patch cord
To SC
networ
To SC
network
Note
The patch cord shown above must connect to the access point with
a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 55.
57
Page 58
Chapter 2: Installing the Access Points
k
Connecting to an
ST Network
To connect to an ST network, you need:
a patch cord with a female MT-RJ connector to insert into the access
point’s male MT-RJ fiber optic port, and an ST connector to insert into
the ST adapter.
an adapter for connecting the patch cord to the ST network.
To connect to an ST network
1. Remove any cable protectors attached to the patch cord and adapter.
2. Connect the access point to your network as shown in the next
illustration.
Female
MT-RJ connector
To access point
Patch cord
ST connector
ST adapter
ST connector
To
ST networ
To
ST network
Note
The patch cord shown above must connect to the access point with
a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 55.
58
Page 59
Connecting Power Over Ethernet
T
The AT-WA7500 is powered by power over Ethernet. The AT-WA7501
can be powered by AC power or by power over Ethernet or both. For all
access points, you need a power bridge. For a list of the power bridges
that Allied Telesyn sells, contact your local Allied Telesyn representative.
This illustration shows how you connect the AT-WA7500 to a power bridge
with a typical Ethernet cable to run power over Ethernet.
o AC
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Power bridge
Data In
Main
Power & Data Out
Power
Active
To Ethernet
Figure 3. Power Over Ethernet
To connect power over Ethernet
1. Install the power bridges. For help, see the documentation that
shipped with the power bridge.
2. Use an Ethernet cable to connect the power bridge to the Ethernet port
of the access point.
59
Page 60
Chapter 2: Installing the Access Points
External Antenna Placement Guidelines
Note
Currently, the 802.11g radio with software release 2.2 does not
support antenna diversity. Depending on which radio slots contain
radios, you only connect antennas to the primary connectors (2 and
4).
Antennas and their placement play a vital role when installing a wireless
network. Every wireless network environment presents its own unique
obstacles. Therefore, the exact range that you will achieve with each
access point is difficult to determine. Allied Telesyn recommends that you
allow an Allied Telesyn-certified RF specialist to perform a site survey
before you install a wireless network. For more information, contact your
local Allied Telesyn representative.
Radio signals may reflect off some obstacles and be absorbed by others.
For example, two radios may achieve up to 305 m (1,000 ft) of range if
positioned outdoors within line of sight, with no obstacles between them.
However, the same two radios may only achieve 152 m (500 ft) of range
when the RF signal has to travel through items such as cubicles. If the
signal must penetrate office walls, the signal range may decrease to 91 m
(300 ft).
Using the proper antennas for your environment and placing them in the
proper areas can help improve range. For information about antenna
options, contact your local Allied Telesyn representative. Here are some
general guidelines for positioning antennas:
Place the antenna as high as possible. In an office environment, try to
place it above cubicle walls.
Keep the line-of-sight between the antennas and wireless end devices
clear of metal surfaces (like beams or girders) and large quantities of
paper products.
Do not place a sheet of metal (such as a filing cabinet) between two
antennas.
These next sections provide detailed information about antenna
placement for those access points that can have more than one antenna.
60
Page 61
AT-WA7500 and AT-WA7501 Installation and User’s Guide
Positioning
Antennas for
802.11g, 802.11b,
and 802.11a
Radios
The 802.11g and 802.11b radios have two ports: one is a transmit/receive
port (primary) and the other is a receive-only port (secondary). The
802.11a radios have two ports; both ports are transmit/receive ports. Allied
Telesyn recommends that you use two antennas for optimal performance
of the radios. If you only attach one antenna to the 802.11g or 802.11b
radio, you must attach it to the primary port.
Use antenna connectors 1 and 2 or 3 and 4 to attach antennas to the
send/receive ports.
Table 1. Recommended Antenna Separation for Antenna Diversity
Location Recommended Antenna Separation
Highly reflective
warehouse environment
Moderately reflective
warehouse environment
Open/Office environment 1.22 m (4 ft) to 3.05 m (10 ft)
0.33 m (13 in) or 0.64 m (25 in)
0.64 m (25 in), 1.22 m (4 ft), or 1.83 m (6
ft)
Positioning Antennas for Dual Radio Access Points
The recommendations in the previous table apply to omni antennas; if you
are using directional antennas, you should increase the recommended
separation between the antennas:
If your access point has two 802.11g, two 802.11b, or two 802.11a
radios, position the antennas for one radio at least 3.05 m (10 ft) from
the antennas for the other radio.
If your access point has at least one 802.11g, one 802.11b, or one
802.11a radio (the other radio may be any radio), cable the antennas
for the radio at least 3.05 m (10 ft) from the access point.
If your access point has an 802.11a full-range radio and either an
802.11g radio or an 802.11b radio, cable the antennas for the 802.11g
or 802.11b at least 3.05 m (10 ft) from the access point.
If your access point has an 802.11a mid-range radio and either an
802.11g radio or an 802.11b radio, cable the antennas for one of the
radios at least 3.05 m (10 ft) from the access point.
61
Page 62
Chapter 2: Installing the Access Points
Stacked Antenna Positioning for Dual Radio Access Points
As an alternative to the physical separation of omni antennas, you can
mount them along a single axis to minimize the antenna-to-antenna
coupling.
Primary antenna
for Radio 1
Secondary antenna
for Radio 1
All four antennas
Access Point
are mounted along
a single axis.
Secondary antenna
for Radio 2
Primary antenna
for Radio 2
Differences in Antenna Diversity Among 802.11b and 802.11a Radios
Antenna diversity works differently for 802.11b radios than for the 802.11a
radio. Currently, the 802.11g radio with software release 2.2 does not
support antenna diversity.
Antenna Diversity for 802.11b
Antenna diversity lets you attach two antennas to one radio to increase the
odds of receiving a better signal on either of the antennas. The 802.11b
radio features antenna diversity. If you are using antenna diversity,
placement of the antennas is critical because each antenna has a
particular function. Antennas placed too close together may cause
interference with each other. Antennas placed too far apart may not be
able to establish two-way communications with other radios.
62
Page 63
AT-WA7500 and AT-WA7501 Installation and User’s Guide
To achieve optimum placement for the two antennas, you must place the
transmit/receive antenna so that it is within range of all the radios that the
receive-only antenna can hear. Note these important points:
Use external antennas to achieve the recommended antenna
separation for placement of either omni or directional antennas.
Position omni antennas for the 802.11b radio at least 0.61 m (2 ft)
apart.
Position directional antennas so they point in the same direction.
Position the antennas so that both antennas are within range of the
radios they need to communicate with.
Do not position the two antennas around a corner or so that a wall is
between them.
Follow the recommended antenna separation precisely when using the
closest distances. Movement of as little as 3.05 cm (1.2 in) may
strongly affect performance. You should choose the greatest distance
possible within the constraints of your environment.
Antenna Diversity for 802.11a
The 802.11a radio diversity operation is enabled by the AP Configuration
Menu. When antenna diversity is enabled, the second port can both
transmit and receive. This feature can be used to provide redundant
coverage of the same area covered by the primary antenna or can be
configured to cover a separate area. This allows directional antennas to be
pointed toward different areas or for the second antenna to be placed on
the other side of the wall.
63
Page 64
Chapter 2: Installing the Access Points
64
Page 65
Chapter 3
Configuring the Ethernet Network
This chapter explains how to configure the AT-WA7500 and AT-WA7501
access points so that they communicate with your Ethernet network. This
chapter explains:
“Configuring the TCP/IP Settings” on page 66
“Configuring Other Ethernet or Fiber Optic Settings” on page 79
“Configuring Ethernet Filters” on page 81
65
Page 66
Chapter 3: Configuring the Ethernet Network
Configuring the TCP/IP Settings
If you are using a DHCP server to automatically assign an IP address to
the access point, go to “Configuring the Access Point as a DHCP Client”
on page 68. If you are not using a DHCP server, you need to manually
assign some TCP/IP parameters.
Note
You should have already configured an IP address for the access
point. For help, see “Configuring the Access Point (Setting the IP
Address)” on page 39.
To configure the TCP/IP settings
1. From the menu, click TCP/IP Settings. The TCP/IP Settings screen
appears.
66
2. Configure the TCP/IP settings. For help, see the next table.
3. If you want to configure the access point as a DHCP server, see
“Configuring the Access Point as a DHCP Server” on page 71.
Page 67
AT-7500 and AT-WA7501 Installation and User’s Guide
4. If you want to configure the access point as a NAT server, see “About
Network Address Translation (NAT)” on page 76.
5. If you want to configure the access point to send ARP requests, see
“Configuring the Access Point to Send ARP Requests” on page 77.
6. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Table 1. TCP/IP Settings Descriptions
Parameter Explanation
IP Address Enter the IP address of the access point. The IP
address has the form x.x.x.x, where x is a number
from 0 to 255.
IP Subnet Mask Enter the subnet mask that matches the other
devices in your network. The subnet mask has
the form x.x.x.x, where x is a number from 0 to
255.
If you use DHCP to obtain an IP address for this
access point, the subnet mask that is obtained
from DHCP will supersede this one.
IP Router
(Gateway)
Enter the IP address of the router that will forward
frames if the access point will communicate with
devices on another subnet. The IP address has
the form x.x.x.x, where x is a number from 0 to
255.
DNS Address 1 Enter the IP address of a domain name server
that the access point uses to resolve DNS
names. If this access point is a DHCP server, this
DNS address will be distributed to DHCP clients.
You can enter up to two DNS addresses to be
delivered to DHCP clients.
DNS Address 2 Enter the IP address of a domain name server
that the access point uses to resolve DNS names
if the DNS server at DNS Address 1 is not
responding. If this access point is a DHCP server,
this DNS address will be distributed to DHCP
clients.
67
Page 68
Chapter 3: Configuring the Ethernet Network
DNS Suffix 1 Enter a domain name suffix that will be appended
DNS Suffix 2 Enter a domain name suffix that will be appended
Table 1. TCP/IP Settings Descriptions (Continued)
Parameter Explanation
to DNS names that cannot be resolved. If the
access point is a DHCP server, this is the only
DNS suffix that is delivered to DHCP clients.
For example, enter a suffix of UVW.COM. When
you try to resolve ABC, the DNS will look for
ABC.UVW.COM.
to DNS names that cannot be resolved either by
themselves or using DNS suffix 1.
For example, enter a suffix of XYZ.COM. When
you try to resolve ABC, the DNS will first look for
ABC.UVW.COM and then it will look for
ABC.XYZ.COM.
Configuring the
Access Point as a
DHCP Client
You can use a DHCP server to automatically assign an IP address and
other TCP/IP settings to your access point; that is, the access point can
act as a DHCP client.
A DHCP client accepts offers from DHCP or BOOTP servers. Preference
is given to DHCP servers. If a BOOTP reply is received before a DHCP
offer, the access point waits 4 seconds. If a DHCP offer is received within
the 4 seconds, the DHCP offer is used and the BOOTP reply is ignored.
(BOOTP offers are treated like infinite DHCP leases.)
Note
You cannot configure the access point as both a DHCP server and a
DHCP client.
Note
If you are using the embedded authentication server feature, do not
configure the access point as a DHCP client.
68
Page 69
AT-7500 and AT-WA7501 Installation and User’s Guide
To configure the access point as a DHCP client
1. From the menu, click TCP/IP Settings. The TCP/IP Settings screen
appears.
2. Configure the DHCP parameters to make this access point a DHCP
client. For help, see the next table.
Note
If you set DHCP Mode to Disable DHCP and the IP address for this
access point is 0.0.0.0, all IP communications are disabled for this
access point.
69
Page 70
Chapter 3: Configuring the Ethernet Network
3. Click Submit Changes to save your changes. To activate your
DHCP Mode To configure the access point as a DHCP client,
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Table 2. DHCP Client Parameter Descriptions
Parameter Explanation
you must choose one of these options:
Always Use DHCP: The access point uses DHCP
after every reboot whether or not an infinite lease
was granted in a previous session. If this option is
not selected, infinite leases are stored in nonvolatile memory and reused after each reboot.
(BOOTP is treated like an infinite lease.)
Use DHCP if IP Address is Zero: (Default.) The
access point uses DHCP only if the IP Address is
0.0.0.0. If you choose this option, make sure that
the IP Address is 0.0.0.0.
DHCP Server
Name
Leave this field blank if you want the access point
to respond to offers from any server.
Or enter the name of the DHCP server that this
access point accesses for information. This
access point will not respond to any other DHCP
server.
DHCP User Class Leave the field blank if you do not want the DHCP
client to include a user class identifier in its
requests.
Or enter the DHCP user class identifier as
defined in RFC 3004. When this access point
acts as a DHCP client, the string entered in this
field is sent in DHCP option 77 in DHCP request
messages.
DHCP Vendor
Class
Leave the field blank if you do not want the DHCP
client to include the vendor class identifier in its
requests.
Or enter the DHCP vendor class identifier as
defined in RFC 2132. When this access point
acts as a DHCP client, the string entered in this
field is sent in DHCP option 60 in DHCP request
messages.
70
Page 71
AT-7500 and AT-WA7501 Installation and User’s Guide
Table 2. DHCP Client Parameter Descriptions (Continued)
Parameter Explanation
Configuring the
Access Point as a
DHCP Server
DHCP for Access
Point Network
You can configure the access point as a simple DHCP server that provides
DHCP server functions for small installations where no other DHCP server
is available. The DHCP server will offer IP addresses and other TCP/IP
settings to any DHCP client it hears as long as a pool of unallocated IP
addresses is available. These clients may include other access points,
wireless end devices, wired hosts on the distribution LAN, or wired hosts
on secondary LANs.
Determines which DHCP servers may be used by
access points and wireless devices:
Use Any Available DHCP Server: Access points
and wireless devices may receive DHCP
responses and addresses from any available
DHCP server.
Only Use Access Point DHCP Server: Access
points and any associated wireless devices may
receive DHCP responses and addresses only
from an access point DHCP server. Currently, the
DHCP server must be located in the root access
point. If this option is selected and the root
access point does not have a DHCP server
enabled, access points and wireless devices will
not be able to receive a DHCP address. You can
use this option, in combination with a DHCP user
class, to segment a network that has an existing
DHCP server and an access point DHCP server.
Note
If you configure the access point as a DHCP server, it is not
intended to replace a general purpose, configurable DHCP server,
and it makes no provisions for synchronizing DHCP policy between
itself and other DHCP servers. Customers with complex DHCP
policy requirements should use other DHCP server software.
Note
You cannot configure the access point as both a DHCP server and a
DHCP client.
71
Page 72
Chapter 3: Configuring the Ethernet Network
To avoid a single point of failure, you can configure more than one access
point to be a DHCP server; however, the access points do not share
DHCP client databases. You should configure each DHCP server with a
different address pool from which to allocate client IP addresses.
To configure the access point as a DHCP server
1. From the menu, click TCP/IP Settings. The TCP/IP Settings screen
appears.
72
2. Verify that the IP Address field, IP Subnet Mask field, and IP Router
field are configured. For help, see “Configuring the TCP/IP Settings”
on page 66.
3. Configure the DHCP parameters to make this access point a DHCP
server. For help, see the next table.
Table 3. DHCP Server Parameter Descriptions
Parameter Explanation
DHCP Mode Choose This AP is a DHCP Server. The access
point must have a valid IP address and subnet
mask.
DHCP Server
Name
Enter the name for this access point as a DHCP
server.
Page 73
AT-7500 and AT-WA7501 Installation and User’s Guide
Table 3. DHCP Server Parameter Descriptions (Continued)
Parameter Explanation
DHCP User Class Leave the field blank if you want this access point
to respond to requests from any client.
Or enter the DHCP user class identifier as
defined in RFC 3004. When this access point
acts as a DHCP server, the access point offers
addresses to client requests only when the client
requests contain a matching user class identifier.
DHCP Vendor
Class
DHCP for Access
Point Network
Leave the field blank if you want this access point
to respond to requests from any client.
Or enter the DHCP vendor class identifier as
defined in RFC 2132. When this access point
acts as a DHCP server, the access point offers
addresses to client requests only when the client
requests contains a matching vendor class
identifier.
Determines which DHCP servers may be used by
access points and wireless devices:
Use Any Available DHCP Server: Access points
and wireless devices may receive DHCP
responses and addresses from any available
DHCP server.
Only Use Access Point DHCP Server: Access
points and any associated wireless devices may
receive DHCP responses and addresses only
from an access point DHCP server. Currently, the
DHCP server must be located in the root access
point. If this option is selected and the root
access point does not have a DHCP server
enabled, access points and wireless devices will
not be able to receive a DHCP address. You can
use this option, in combination with a DHCP user
class, to segment a network that has an existing
DHCP server and an access point DHCP server.
73
Page 74
Chapter 3: Configuring the Ethernet Network
4. Click Submit Changes to save your changes. DHCP Server Setup
5. From the menu, click DHCP Server Setup. The DHCP Server Setup
appears in the menu.
screen appears.
6. Configure the DHCP server. For help, see the next table.
7. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Table 4. DHCP Server Setup Parameter Descriptions
Parameter Explanation
Low Address Enter the low IP address in the range of IP
addresses available to the DHCP server for
distribution to DHCP clients.
If these addresses are not on the same subnet as
the access point, the access point will perform
Network Address Translation (NAT) for the clients
to which it grants IP addresses.
74
Page 75
AT-7500 and AT-WA7501 Installation and User’s Guide
Table 4. DHCP Server Setup Parameter Descriptions (Continued)
Parameter Explanation
High Address Enter the high IP address in the range of IP
addresses available to the DHCP server for
distribution to DHCP clients.
If these addresses are not on the same subnet as
the access point, the access point will perform
Network Address Translation (NAT) for the clients
to which it grants IP addresses.
Lease Time Specifies the duration of the leases that are
granted by the DHCP server. Enter the lease time
in the format days:hours:minutes.
If you set the lease time to 0, infinite leases are
granted.
Permanently Save
IP Address
Mappings
If you check this check box, the DHCP server
stores permanent mappings of IP addresses to
DHCP client identifiers. A DHCP client is
guaranteed to receive the same IP address each
time it requests an address even if the DHCP
server reboots.
If you clear this check box, the DHCP server tries
to grant clients the same address each time, but
that result is not guaranteed.
Display-only parameters
IP Subnet Mask Displays the subnet mask entered at the TCP/IP
Settings screen.
IP Router
Displays the address of the IP Router.
(Gateway)
DNS Address 1 Displays the IP address of the Domain Name
Server. This address will be used for name
solution and will be distributed to DHCP clients
when this access point is a DHCP server.
DNS Address 2 Displays the IP address of the Domain Name
Server. This address will be used for name
solution and will be distributed to DHCP clients
when this access point is a DHCP server.
NAT Status This informative entry lets you know if DHCP has
been properly configured, and if the range of
addresses has automatically enabled Network
Address Translation (NAT).
75
Page 76
Chapter 3: Configuring the Ethernet Network
Supported DHCP Server Options
When the access point is acting as a DHCP server, it issues IP address
leases to configure the IP address, along with the DNS addresses, DNS
suffixes, IP subnet mask, and IP router. These parameters will contain the
same values as those configured for the access point.
Unsupported DHCP Server Options
When the access point is acting as a DHCP server, it does not support any
DHCP options other than those listed. The DHCP server disregards any
DHCP options that are not explicitly required by the DHCP specification.
The DHCP server ignores all frames with a non-zero giaddr (gateway IP
address). The DHCP server only responds to requests from its own
subnet.
About Network Address Translation (NAT)
NAT allows IP addresses to be used by more than one end device. The
access point can act as a NAT server, which instantaneously rewrites IP
addresses and port numbers in IP headers so that frames all appear to be
coming from (or going to) the single IP address of the access point instead
of the actual source or destination.
When an end device uses the access point as an IP router, the access
point replaces the IP header, which includes the device MAC address, IP
source address, and TCP/UDP port, with its own. You can configure the
DHCP server to indicate that the access point is the IP router when the
server allocates an IP address. Special consideration is given to changing
the FTP data connection TCP port number, which is in the body of the
TCP frame. After the frame source is modified, it is forwarded to the
proper subnet.
If the destination subnet is a different subnet from the one the access point
is on, the destination MAC address is changed to the IP router that has
been configured for the access point. If the destination subnet is the same
subnet as the one the access point is on, the access point converts the
MAC address to the MAC address that belongs to the destination IP
address. This may involve using ARP for MAC address discovery.
When the access point receives a frame with its IP address, it identifies
the need for address translation by inspecting the destination port number.
If the port number is within the pool reserved for NAT operation, it looks up
the original MAC address, IP address, and port number. The frame is then
modified and forwarded to the end device.
NAT operation is disabled or enabled automatically depending on the
continuous range of addresses you enter into the DHCP server. NAT is
disabled if the range of addresses to be given to DHCP clients is on the
76
Page 77
AT-7500 and AT-WA7501 Installation and User’s Guide
same subnet as the access point. NAT is enabled if the range of
addresses to be given to DHCP clients is not on the same subnet as the
access point; thus, you are creating a virtual network and the DHCP server
will also perform NAT translation.
When NAT operation is enabled, the access point uses the low address in
the range of addresses as its own. The DHCP/NAT clients also use this
address as their router IP address. These clients can configure the access
point using this internal IP address or the normal external IP address.
To configure the access point as a NAT server
1. From the menu, click TCP/IP Settings. The TCP/IP Settings screen
appears.
2. Verify that the IP Address field and IP Subnet Mask field are
configured. For help, see “Configuring the TCP/IP Settings” on
page 66.
3. In the DHCP Mode field, choose This AP is a DHCP Server.
Configuring the
Access Point to
Send ARP
Requests
4. Click Submit Changes to save your changes.
5. Click DHCP Server Setup and enter a range of IP addresses that are
not on the same subnet as the access point.
6. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
ARP requests are multicast frames, which means they are sent to all
devices on the Ethernet network. You can configure the access point to
periodically send an unsolicited ARP request to the IP router so that all
routers can update their routing tables. This ARP request lets a network
management program learn about the access point on the network by
querying routers. The auto ARP minutes parameter controls the time
interval between ARP requests.
If the address of the IP router is 0.0.0.0, then the access point sends an
ARP request to its own IP address. Without this option, an access point
might not use its IP address for extended periods of time and the IP
address would expire from the router ARP table. If the IP address expires,
the network management program must ping all potential addresses on a
subnet to locate active IP addresses or require the user to enter a list. You
should not let the IP address for the access point expire.
To set the auto ARP period
1. From the menu, click TCP/IP Settings. The TCP/IP Settings screen
appears.
77
Page 78
Chapter 3: Configuring the Ethernet Network
2. In the Auto ARP Minutes field, enter a time period from 1 to 120
3. Click Submit Changes to save your changes. To activate your
minutes. To disable this parameter, enter 0.
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
78
Page 79
AT-7500 and AT-WA7501 Installation and User’s Guide
Configuring Other Ethernet or Fiber Optic Settings
Many of the standard Ethernet or fiber optic settings are configured in the
TCP/IP Settings screen. For help, see “Configuring the TCP/IP Settings”
on page 66. In the Ethernet screen, you can set the port type, set the link
speed, and enable or disable the link status check.
To configure the Ethernet or fiber optic settings
1. From the main menu, click Ethernet. The Ethernet screen appears.
2. Configure the parameters. For help, see the next table.
3. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
79
Page 80
Chapter 3: Configuring the Ethernet Network
Port Type Appears only if the access point has a fiber optic
Link Speed If Port Type is 100 Mb Fiber Optic, this field is
Table 5. Ethernet Parameter Descriptions
Parameter Explanation
port.
This field specifies the port that the access point
uses to communicate with the Ethernet network:
10/100 Mb Twisted-Pair: The access point
communicates with the Ethernet network through
the Ethernet port.
100 Mb Fiber Optic: The access point
communicates with the Ethernet network through
the fiber optic port.
automatically set to 100 Mbps Fiber Optic (full
duplex).
Configuring the
Ethernet Address
Table
Choose the speed and duplex mode you want
this port to use to communicate with the Ethernet.
If you want the access point to auto-negotiate this
field, choose Auto Select. Auto Select should
work for most networks.
Enable Link Status
Check
If you have a secondary LAN, you should configure the Ethernet address
table in the designated bridge or WAP on the secondary LAN. This table
contains all the MAC addresses on the secondary LAN that are
communicating with the primary LAN. You must enter the MAC addresses
of all devices on the secondary LAN that do not always initiate
communication.
Check this check box if you want the access point
to periodically check its Ethernet connection. If it
loses the connection, this access point can no
longer be the root access point and any end
devices that are connected to this access point
(whether or not it is the root) will roam to a
different access point. The access point will
attempt to reconnect to the spanning tree through
one of its radio ports.
Clear this check box if this access point must be
the root access point or if it is used as a WAP.
80
Page 81
AT-7500 and AT-WA7501 Installation and User’s Guide
If you choose not to configure this table, the designated bridge or WAP
may need to flood frames to the Ethernet and radio ports to learn the path
to the MAC address.
These addresses become permanent entries in the forwarding table of the
designated bridge or WAP.
To configure the Ethernet address table
1. From the main menu, click Ethernet > Address Table. The Address
Table screen appears.
Configuring
Ethernet Filters
2. Enter up to 20 MAC addresses. MAC addresses consist of six hex
pairs that are separated by spaces, colons, or hyphens.
3. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
You can set both Ethernet and IP tunnel filters, and you can create
protocol filters for both predefined and user-defined protocol types. In
addition, you can define arbitrary frame filters based on frame content.
Setting Ethernet filters prevents the Ethernet port from sending out
unnecessary traffic to the wireless network.
Ethernet frame type filter and predefined subtype filter settings override
customizable subtype filter settings. However, Allied Telesyn recommends
that when creating customizable subtype filters, you do not duplicate
existing frame type or predefined subtype filters or unexpected results may
occur.
81
Page 82
Chapter 3: Configuring the Ethernet Network
For more examples of using Ethernet filters and for help configuring IP
filters, see “Configuring IP Tunnel Filters” on page 150.
Using Ethernet Frame Type Filters
You can define filters for common networking protocols such as IP, Novell
IPX, and 802.2 LLC. You can also set filters that will pass only those
Ethernet frame types found on your network.
You can set the default action for general and specific frame types. For
example, you cannot pass the DIX-Other EtherTypes frame parameter
and then use the subtype menus to pass only those specific DIX types that
are used in your radio network.
You can also set the scope for general and specific frame types. For
example, for DIX-IP-TCP ports, you cannot pass all frame types. Then, all
IP frames with the TCP type will be dropped even if specific TCP parts are
set to pass in the subtype menus.
Here is the action and scope you can set for each parameter:
Allow/Pass: Check or clear this check box. Check the check box to pass
all frames of that type. Clear the check box to drop all frames of that type.
Scope: Set scope to Unlisted or All. If you select All, then all frames of that
type are unconditionally passed or dropped, depending on the action you
specified. If you select Unlisted, then frames are passed or dropped only if
the frame type is not listed in the predefined or customizable tables.
82
Page 83
AT-7500 and AT-WA7501 Installation and User’s Guide
To set frame type filters
1. From the main menu, click Ethernet > Frame Type Filters. The Frame
Type Filters screen appears.
2. For each frame type field, check or clear the Allow/Pass check box to
configure if the frame types are allowed to pass or are dropped. If you
check the check box, the frame type is allowed to pass. For help, see
the next table.
3. For each frame type field, set the Scope field to Unlisted or All. For
help, see the next table.
4. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
83
Page 84
Chapter 3: Configuring the Ethernet Network
5. If you set the Scope field to Unlisted for any of the frame types, you
must also configure predefined subtype filters or customizable subtype
filters. For help, see the next section, “Using Predefined Subtype
Filters” on page 85 or “Customizing Subtype Filters” on page 85.
Table 6. Frame Type Filter Descriptions
Frame Type Explanation
DIX IP TCP Ports
DIX IP UDP Ports
Primary Internet Protocol Suite (IP)
transport protocols.
SNAP IP TCP Ports
SNAP IP UDP Ports
DIX IP Other Protocols
SNAP IP Other Protocols
IP protocols other than TCP or User
Datagram Protocol (UDP).
DIX IPX Sockets Novell NetWare protocol over Ethernet II
frames.
SNAP IPX Sockets Novell NetWare protocol over 802.2
SNAP frames.
802.3 IPX Sockets Novell NetWare protocol over 802.3 RAW
frames.
DIX Other Ethernet Types
SNAP Other Ethernet
DIX or SNAP registered protocols other
than IP or IPX.
Types
802.2 IPX Sockets Novell running over 802.2 Logical Link
Control (LLC).
802.2 Other SAPs 802.2 SAPs other than IPX or SNAP.
84
Note
You should not filter HTTP, Telnet, SNMP, and ICMP frames if you
are using WAPs because these frame types are used for
configuring, troubleshooting, and upgrading WAPs.
Page 85
AT-7500 and AT-WA7501 Installation and User’s Guide
Using Predefined Subtype Filters
You can configure the access point to pass or drop certain predefined
frame subtypes.
To configure predefined subtype filters
1. From the main menu, click Ethernet > Predefined Subtype Filters. The
Predefined Subtype Filters screen appears.
2. For each frame subtype field, check or clear the Allow/Pass check box
to configure if the frame subtypes are allowed to pass or are dropped.
If you check the check box, the frame subtype is allowed to pass.
3. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Customizing Subtype Filters
You can configure the access point to pass or drop certain customized
frame subtypes. You define the action, subtype, and value parameters:
Allow/Pass: Check or clear this check box. Check this check box to pass
all frames of the subtype and value. Clear this check box to drop all frames
of the subtype and value.
SubType: Selects the frame subtype you wish to configure. For help
setting the subtype and value, see the Table 7, ”Subtype Filter
Descriptions” on page 86.
85
Page 86
Chapter 3: Configuring the Ethernet Network
Value: The value must be two hex pairs. When a match is found between
frame subtype and value, the specified action is taken.
To customize subtype filters
1. From the main menu, click Ethernet > Customizable Subtype Filters.
The Customizable Subtype Filters screen appears.
2. For each subtype field, check or clear the Allow/Pass check box to
configure if the subtypes are allowed to pass or are dropped. If you
check the check box, the subtype is allowed to pass.
3. In the SubType field, choose the customizable frame subtype. For
help, see the next table.
4. In the Value field, enter the two hex pairs. For help, see the next table.
5. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Table 7. Subtype Filter Descriptions
SubType Value
DIX-IP-TCP-Port Port value in hexadecimal.
DIX-IP-UDP-Port Port value in hexadecimal.
DIX-IP-Protocol Protocol number in hexadecimal.
DIX-IPX-Socket Socket value in hexadecimal.
86
Page 87
AT-7500 and AT-WA7501 Installation and User’s Guide
Table 7. Subtype Filter Descriptions (Continued)
SubType Value
DIX-EtherType Specify the registered DIX type in hexadecimal.
SNAP-IP-TCP-Port Port value in hexadecimal.
SNAP-IP-UDP-Port Port value in hexadecimal.
SNAP-IP-Protocol Port value in hexadecimal.
SNAP-IPX-Socket Socket value in hexadecimal.
SNAP-EtherType SNAP type in hexadecimal. To filter on both
SNAP type and OUI, use advanced filters.
802.3-IPX-Socket Socket value in hexadecimal.
802.2-IPX-Socket Socket value in hexadecimal.
802.2-SAP 802.2 SAP in hexadecimal.
Example
This example shows you how to use customizable filters to allow only the
wireless end devices (DHCP clients) communicating with the access point
(DHCP server) to receive TCP/IP settings. This example prevents the
wireless end devices from receiving TCP/IP settings from another DHCP
server on the Ethernet network. It also prevents the access point from
providing TCP/IP settings to DHCP clients on the wired network.
For this example, set these customizable subtype filters.
87
Page 88
Chapter 3: Configuring the Ethernet Network
1 Allow/Pass Clear (drop) This filter drops
2 Allow/Pass Clear (drop) This filter drops
Table 8. Example – Customizable Subtype Filter
Filter Parameter Value Explanation
Subtype DIX-IP-UDP-
Port
Value 00 43
DHCP
responses to
wireless end
devices
communicating
with this access
point.
DHCP requests
Subtype DIX-IP-UDP-
Port
Value 00 44
from DHCP
clients on the
Ethernet
network.
Configuring Advanced Filters
You can configure advanced filters if you need more flexibility in your
filtering. Settings for advanced filters execute after those for other filters;
that is, advanced filters are only applied if the frame has passed the other
filters.
You can use filter values and filter expressions to minimize network traffic
over the wireless links; however, Allied Telesyn recommends that you use
advanced Ethernet filters only if you have an extensive understanding of
network frames and their contents. Use other existing filters whenever
possible.
Setting Filter Values
You can associate an ID with a pattern value by selecting a filter and then
entering an ID and a value. All values with the same value ID belong to the
same list.
To set the value ID and value
1. From the main menu, click Ethernet > Advanced Filters. The Filter
Values screen appears.
88
Page 89
AT-7500 and AT-WA7501 Installation and User’s Guide
2. Enter up to 22 value IDs and values.
3. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Setting Filter Expressions
You can set filter expressions by specifying parameters for frame filters.
You can also create a filter expression, which is executed in ascending
order based on the ExprSeq values until the access point determines
whether to pass or drop the frame.
To set filter expressions
1. From the main menu, click Ethernet > Advanced Filters > Filter
Expressions. The Filter Expressions screen appears.
89
Page 90
Chapter 3: Configuring the Ethernet Network
2. Configure the filter expressions parameters. For help, see the next
table.
3. Click Submit Changes to save your changes. To activate your
changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” on page 45.
Table 9. Filter Expressions Parameter Descriptions
Parameter Explanation
ExprSeq
(Expression
Sequence)
Indicates the order in which the filters will be
executed. When you change the parameter, the
statements are reordered and renumbered so the
Expression Sequence order is maintained. The
range is from 0 to 255.
This parameter works with the Action parameter;
for example, if the action is set to And, then the
next sequence in another expression is
processed.
Offset Identifies a point inside the frame where testing
for the expression is to start. The range is from 0
to 65535.
90
Page 91
AT-7500 and AT-WA7501 Installation and User’s Guide
Table 9. Filter Expressions Parameter Descriptions (Continued)
Parameter Explanation
Mask Applies a data pattern to the frame. If the data
pattern in the mask matches the frame, then the
specific action is performed. The mask indicates
the bits that are significant at the specified offset.
A bit is significant if a bit in the mask is set to one.
If this field is empty, the length of the field is
determined by the longest value in the Filter
Values menu for the specified value ID.
The mask values are entered in 0 to 8
hexadecimal pairs.
Op (Operation) Performs a logical operation when a data pattern
matches a value in the Filter Values menu to
determine if the specified action should be taken.
Valid operations include: EQ (equal), NE (not
equal), GT (greater than), LT (less than or equal)
Value ID Represents a value in the Filter Values menu.
The bytes after the frame offset are compared to
the data pattern indicated by the value. Value ID
can be from 0 to 255 and must match one or
more value IDs in the Filter Values menu.
Action Sets the action to Pass, Drop, or And. If you set
the action to And, the filter expression with the
next highest sequence is applied.
Example 1
This example shows you how to use Ethernet filters to filter all traffic that
passes through the access point to the wireless network except for traffic
for specified MAC addresses. These filters do not prevent wireless traffic
from reaching the Ethernet network. For this example, set these filter
values.
91
Page 92
Chapter 3: Configuring the Ethernet Network
Table 10. Example 1 - Filter Values
Value ID Value Description
1 ff ff ff ff ff ff Allows multicast traffic to enter the
wireless network, which is necessary for
IP end devices to communicate
2 00 02 2d 04
b7 a4
3 00 02 2d 0d
54 25
The MAC address of an end device you
want to be able to communicate.
The MAC address of an end device you
want to be able to communicate.
92
Page 93
AT-7500 and AT-WA7501 Installation and User’s Guide
For this example, set these filter expressions.
Table 11. Example 1 – Filter Expressions
Parameter Value Explanation
ExprSeq 10 The order that you want the expressions
executed. You must have an expression
for each Value ID that is listed in the Filter
Values menu.
Offset 0 Since the filter is applied to the destination
address, which is the first value in the
frame, the offset is 0.
Mask ff ff ff ff ff ff Compares the entire 6-byte destination
address for an exact match.
Op EQ Compares the value after the offset and
mask are applied to the value of the Value
ID from the Filter Values menu to see if
they are equal. (If the value at the offset
equals the specified value on the Filter
Values menu, the frame is multicast.)
Value ID 1 This filter expression applies to value ID 1
from the Filter Values menu.
Action Pass If this filter expression is true, continue to
the next expression.
93
Page 94
Chapter 3: Configuring the Ethernet Network
You must enter a filter expression for each Value ID in the Filter Values
menu. In this example, only the ExprSeq value and the Value ID value
change.
Example 2
This example shows how to use Ethernet filters to discard all DIX IP
multicast frames except those from selected devices. Three entries have a
value ID of 3 to demonstrate how to enter a list. All entries with the same
value ID belong to the same list. For this example, set these filter values.
94
Table 12. Example 2 - Filter Values
Value ID Value Description
1 08 00 Check for a DIX IP frame.
2 01 Check for a multicast frame.
3 00 c0 b2 00 00 01
Check for these specific MAC
device addresses.
00 c0 b2 00 00 02
00 c0 b2 00 00 03
You must enter a filter expression for each Value ID in the Filter Values
menu. In this example, three expressions combine to form a single
compound expression. The compound expression forms an advanced
filter that drops all DIX IP multicast frames except those from the three
Page 95
AT-7500 and AT-WA7501 Installation and User’s Guide
Ethernet stations whose addresses are listed on the Filter Values menu.
The default action is the opposite of the action specified in the last
expression. In this example, the action of the last expression is drop;
therefore, the default action is pass. Any frame that meets the conditions
specified in the advanced filter is passed.
Set the first filter expression as shown below.
Table 13. Example 2 – First Filter Expression
Parameter Value Explanation
ExprSeq 1 The first expression that is executed. You
must have an expression for each Value
ID that is listed in the Filter Values menu.
Offset 0 Since the filter is applied to the destination
address, which is the first value in the
frame, the offset is 0.
Mask 01 Checks only the Ethernet multicast bit.
Op EQ Compares the value after the offset and
mask are applied to the value of the Value
ID from the Filter Values menu to see if
they are equal. (If the value at the offset
equals the specified value on the Filter
Values menu, the frame is multicast.)
95
Page 96
Chapter 3: Configuring the Ethernet Network
Parameter Value Explanation
Value ID 2 This filter expression applies to value ID 2
Action And If this filter expression is true, continue to
Set the second filter expression as shown below.
Table 13. Example 2 – First Filter Expression (Continued)
from the Filter Values menu.
the next expression.
96
Table 14. Example 2 – Second Filter Expression
Parameter Value Explanation
ExprSeq 2 The second expression that is executed.
Offset 12 Checks for the DIX IP frame type, which
starts 12 bytes from the destination
address.
Mask ff ff Checks the 2-byte DIX IP frame type for
an exact match.
Page 97
AT-7500 and AT-WA7501 Installation and User’s Guide
Table 14. Example 2 – Second Filter Expression (Continued)
Parameter Value Explanation
Op EQ Compares the value after the offset and
mask are applied to the value of the Value
ID from the Filter Values menu to see if
they are equal. (If the value at the offset
equals the specified value on the Filter
Values menu, the frame is DIX IP.)
Value ID 1 This filter expression applies to value ID 1
from the Filter Values menu.
Action And If this filter expression is true, continue to
the next expression.
Set the third filter expression as shown below.
Table 15. Example 2 – Third Filter Expression
Parameter Value Explanation
ExprSeq 3 The third expression that is executed.
Offset 6 Checks the source Ethernet address,
which starts 6 bytes from the destination
address.
97
Page 98
Chapter 3: Configuring the Ethernet Network
Parameter Value Explanation
Mask ff ff ff ff ff ff Checks the 6-byte source Ethernet
OP NE Compares the value after the offset and
Value ID 3 This filter expression applies to value ID 3
Action Drop If the source Ethernet address does not
Table 15. Example 2 – Third Filter Expression (Continued)
address for an exact match.
mask are applied to the value of the Value
ID from the Filter Values menu to see if
they are not equal. (Compare the source
Ethernet address with the list of MAC
addresses from the Filter Values menu.)
from the Filter Values menu.
match any address in the list on the Filter
Values menu, then drop the frame.
98
Page 99
Chapter 4
Configuring the Radios
This chapter explains how to configure the radios in the AT-WA7500 and
AT-WA7501 access points so that they communicate with your wireless
end devices. This chapter covers these topics:
“About the Radios” on page 100
“Configuring the 802.11g Radio” on page 101
“Configuring the 802.11b Radio” on page 112
“Configuring the 802.11a Radio” on page 119
99
Page 100
Chapter 4: Configuring the Radios
About the Radios
The AT-WA7500 and AT-WA7501 access products may contain one or
two radios. You can use access points that contain two different types of
radios to support two different types of wireless networks, such as legacy
networks. You can use access points with two of the same type of radios
as WAPs, as point-to-multipoint bridges, to increase throughput in a busy
network, or to provide redundancy.
Currently, you cannot have two 802.11g radios or have one 802.11g radio
and one 802.11b radio in the access points.
The 802.11g radio is sometimes referred to as the 802.11b/g radio
because it can be configured to communicate with any 802.11b and
802.11g radios that have the same SSID and security settings.
The next sections explain how to configure the radios that are in your
access point. Only the radios actually installed in your access point appear
in the configuration menus.
100
Loading...