Alvarion 214486 User Manual

Download

BreezeMAX Wi²

and BreezeACCESS Wi²

System Manual

SW Version 4.3.4 March 2007 P/N 214486

Document History

Topic Description Date Issued

This is the document’s first Release March 2007

ii BreezeMAX Wi² and BreezeACCESS Wi² System Manual

Legal Rights

The material contained herein is proprietary, privileged, and confidential and

owned by Alvarion or its third party licensors. No disclosure thereof shall be made

to third parties without the express written permission of Alvarion Ltd.

Alvarion Ltd. reserves the right to alter the equipment specifications and

descriptions in this publication without prior notice. No part of this publication

shall be deemed to be part of any contract or warranty unless specifically

incorporated by reference into such contract or warranty.

Trade Names

Alvarion®, BreezeCOM®, WALKair®, WALKnet®, BreezeNET®, BreezeACCESS®,

BreezeMANAGE

BreezeLITE

services referenced here in are either registered trademarks, trademarks or

service marks of Alvarion Ltd.

Legal Rights

™

, BreezeLINK®, BreezeConfig™, BreezeMAX™, AlvariSTAR™,

™

, AlvariCRAFT™, MGW™, eMGW™and/or other products and/or

All other names are or may be the trademarks of their respective owners.

Statement of Conditions

The information contained in this manual is subject to change without notice.

Alvarion Ltd. shall not be liable for errors contained herein or for incidental or

consequential damages in connection with the furnishing, performance, or use of

this manual or equipment supplied with it.

Warranties and Disclaimers

All Alvarion Ltd. ("Alvarion") products purchased from Alvarion or through any of

Alvarion's authorized resellers are subject to the following warranty and product

liability terms and conditions.

Exclusive Warranty

(a) Alvarion warrants that the Product hardware it supplies and the tangible

media on which any software is installed, under normal use and conditions, will

be free from significant defects in materials and workmanship for a period of

fourteen (14) months from the date of shipment of a given Product to Purchaser

(the "Warranty Period"). Alvarion will, at its sole option and as Purchaser's sole

remedy, repair or replace any defective Product in accordance with Alvarion'

standard R&R procedure.

(b) With respect to the Firmware, Alvarion warrants the correct functionality

according to the attached documentation, for a period of fourteen (14) month from

BreezeMAX Wi² and BreezeACCESS Wi² System Manual iii

Legal Rights

Disclaimer

invoice date (the "Warranty Period")". During the Warranty Period, Alvarion may

release to its Customers firmware updates, which include additional performance

improvements and/or bug fixes, upon availability (the "Warranty"). Bug fixes,

temporary patches and/or workarounds may be supplied as Firmware updates.

Additional hardware, if required, to install or use Firmware updates must be

purchased by the Customer. Alvarion will be obligated to support solely the two (2)

most recent Software major releases.

ALVARION SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING

AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT IN THE PRODUCT

DOES NOT EXIST OR WAS CAUSED BY PURCHASER'S OR ANY THIRD

PERSON'S MISUSE, NEGLIGENCE, IMPROPER INSTALLATION OR IMPROPER

TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE

BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE,

LIGHTNING OR OTHER HAZARD.

(a) THE SUPPLIED UNITS SUPPORT 802.11 b/g ONLY.

(b) The Software is sold on an "AS IS" basis. Alvarion, its affiliates or its licensors

MAKE NO WARRANTIES, WHATSOEVER, WHETHER EXPRESS OR IMPLIED,

WITH RESPECT TO THE SOFTWARE AND THE ACCOMPANYING

DOCUMENTATION. ALVARION SPECIFICALLY DISCLAIMS ALL IMPLIED

WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

PURPOSE AND NON-INFRINGEMENT WITH RESPECT TO THE SOFTWARE.

UNITS OF PRODUCT (INCLUDING ALL THE SOFTWARE) DELIVERED TO

PURCHASER HEREUNDER ARE NOT FAULT-TOLERANT AND ARE NOT

DESIGNED, MANUFACTURED OR INTENDED FOR USE OR RESALE IN

APPLICATIONS WHERE THE FAILURE, MALFUNCTION OR INACCURACY OF

PRODUCTS CARRIES A RISK OF DEATH OR BODILY INJURY OR SEVERE

PHYSICAL OR ENVIRONMENTAL DAMAGE ("HIGH RISK ACTIVITIES"). HIGH

RISK ACTIVITIES MAY INCLUDE, BUT ARE NOT LIMITED TO, USE AS PART OF

ON-LINE CONTROL SYSTEMS IN HAZARDOUS ENVIRONMENTS REQUIRING

FAIL-SAFE PERFORMANCE, SUCH AS IN THE OPERATION OF NUCLEAR

FACILITIES, AIRCRAFT NAVIGATION OR COMMUNICATION SYSTEMS, AIR

TRAFFIC CONTROL, LIFE SUPPORT MACHINES, WEAPONS SYSTEMS OR

OTHER APPLICATIONS REPRESENTING A SIMILAR DEGREE OF POTENTIAL

HAZARD. ALVARION SPECIFICALLY DISCLAIMS ANY EXPRESS OR IMPLIED

WARRANTY OF FITNESS FOR HIGH RISK ACTIVITIES.

WARRANTIES ABOVE SHALL BE REPLACEMENT OR REFUND OF THE

PURCHASE PRICE AS SPECIFIED ABOVE, AT ALVARION'S OPTION. TO THE

iv BreezeMAX Wi² and BreezeACCESS Wi² System Manual

FULLEST EXTENT ALLOWED BY LAW, THE WARRANTIES AND REMEDIES SET

FORTH IN THIS AGREEMENT ARE EXCLUSIVE AND IN LIEU OF ALL OTHER

WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY

OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING BUT NOT

LIMITED TO WARRANTIES, TERMS OR CONDITIONS OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY,

CORRESPONDENCE WITH DESCRIPTION, NON-INFRINGEMENT, AND

ACCURACY OF INFORMATION GENERATED. ALL OF WHICH ARE EXPRESSLY

DISCLAIMED. ALVARION' WARRANTIES HEREIN RUN ONLY TO PURCHASER,

AND ARE NOT EXTENDED TO ANY THIRD PARTIES. ALVARION NEITHER

ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY

OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION,

MAINTENANCE OR USE OF ITS PRODUCTS.

Limitation of Liability

(a) ALVARION SHALL NOT BE LIABLE TO THE PURCHASER OR TO ANY THIRD

PARTY, FOR ANY LOSS OF PROFITS, LOSS OF USE, INTERRUPTION OF

BUSINESS OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE OR

CONSEQUENTIAL DAMAGES OF ANY KIND, WHETHER ARISING UNDER

BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY

OR OTHERWISE AND WHETHER BASED ON THIS AGREEMENT OR

OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Legal Rights

(b) TO THE EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL

THE LIABILITY FOR DAMAGES HEREUNDER OF ALVARION OR ITS EMPLOYEES

OR AGENTS EXCEED THE PURCHASE PRICE PAID FOR THE PRODUCT BY

PURCHASER, NOR SHALL THE AGGREGATE LIABILITY FOR DAMAGES TO ALL

PARTIES REGARDING ANY PRODUCT EXCEED THE PURCHASE PRICE PAID

FOR THAT PRODUCT BY THAT PARTY (EXCEPT IN THE CASE OF A BREACH OF

A PARTY'S CONFIDENTIALITY OBLIGATIONS).

BreezeMAX Wi² and BreezeACCESS Wi² System Manual v

Legal Rights

Outdoor Unit and Antenna Installation and Grounding

Ensure that outdoor units, antennas and supporting structures are properly

installed to eliminate any physical hazard to either people or property. Make sure

that the installation of the outdoor unit, antenna and cables is performed in

accordance with all relevant national and local building and safety codes. Even

where grounding is not mandatory according to applicable regulation and national

codes, it is highly recommended to ensure that the outdoor unit and the antenna

mast (when using external antenna) are grounded and suitable lightning

protection devices are used so as to provide protection against voltage surges and

static charges. In any event, Alvarion is not liable for any injury, damage or

regulation violations associated with or caused by installation, grounding or

lightning protection.

Disposal of Electronic and Electrical Waste

Pursuant to the WEEE EU Directive electronic and electrical waste must not be disposed of with unsorted waste. Please contact your local recycling authority for disposal of this product.

vi BreezeMAX Wi² and BreezeACCESS Wi² System Manual

Important Notice

This user manual is delivered subject to the following conditions and restrictions:

 This manual contains proprietary information belonging to Alvarion Ltd. Such

information is supplied solely for the purpose of assisting properly authorized

users of the respective Alvarion products.

 No part of its contents may be used for any other purpose, disclosed to any

person or firm or reproduced by any means, electronic and mechanical,

without the express prior written permission of Alvarion Ltd.

 The text and graphics are for the purpose of illustration and reference only.

The specifications on which they are based are subject to change without

notice.

 The software described in this document is furnished under a license. The

software may be used or copied only in accordance with the terms of that

license.

Legal Rights

 Information in this document is subject to change without notice.

 Corporate and individual names and data used in examples herein are

fictitious unless otherwise noted.

 Alvarion Ltd. reserves the right to alter the equipment specifications and

descriptions in this publication without prior notice. No part of this

publication shall be deemed to be part of any contract or warranty unless

specifically incorporated by reference into such contract or warranty.

 The information contained herein is merely descriptive in nature, and does not

constitute an offer for the sale of the product described herein.

 Any changes or modifications of equipment, including opening of the

equipment not expressly approved by Alvarion Ltd. will void equipment

warranty and any repair thereafter shall be charged for. It could also void the

user's authority to operate the equipment.

Some of the equipment provided by Alvarion and specified in this manual, is

manufactured and warranted by third parties. All such equipment must be

installed and handled in full compliance with the instructions provided by such

manufacturers as attached to this manual or provided thereafter by Alvarion or

BreezeMAX Wi² and BreezeACCESS Wi² System Manual vii

Legal Rights

the manufacturers. Non-compliance with such instructions may result in serious

damage and/or bodily harm and/or void the user's authority to operate the

equipment and/or revoke the warranty provided by such manufacturer.

viii BreezeMAX Wi² and BreezeACCESS Wi² System Manual

Compliances

NOTE

This section provides regulatory compliance details for the Access Point unit of the system. Refer to the relevant manual for compliance details of the SU-ODU unit.

Federal Communication Commission Interference Statement

This equipment has been tested and found to comply with the limits for a Class B

digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to

provide reasonable protection against harmful interference in a residential

installation. This equipment generates, uses and can radiate radio frequency

energy and, if not installed and used in accordance with the instructions, may

cause harmful interference to radio communications. However, there is no

guarantee that interference will not occur in a particular installation. If this

equipment does cause harmful interference to radio or television reception, which

can be determined by turning the equipment off and on, the user is encouraged to

try to correct the interference by one of the following measures:

Compliances

 Reorient or relocate the receiving antenna

 Increase the separation between the equipment and receiver

 Connect the equipment into an outlet on a circuit different from that to which

the receiver is connected

 Consult the dealer or an experienced radio/TV technician for help

FCC Caution: Any changes or modifications not expressly approved by the party

responsible for compliance could void the user’s authority to operate this

equipment. This device complies with Part 15 of the FCC Rules. Operation is

subject to the following two conditions: (1) This device may not cause harmful

interference, and (2) this device must accept any interference received, including

interference that may cause undesired operation.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual ix

Compliances

IMPORTANT NOTE: FCC Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an

uncontrolled environment. This equipment should be installed and operated with

a minimum distance of 20 centimeters (8 inches) between the radiator and your

body. This transmitter must not be co-located or operating in conjunction with

any other antenna or transmitter.

EC Conformance Declaration

Marking by the above symbol indicates compliance with the Essential

Requirements of the R&TTE Directive of the European Union (1999/5/EC). This

equipment meets the following conformance standards:

 EN 60950 (IEC 60950) - Product Safety

 EN 300 328 - Technical requirements for 2.4 GHz radio equipment

 EN 301 489-1 / EN 301 489-17 - EMC requirements for radio equipment

Countries of Operation & Conditions of Use in the European Community

This device is intended to be operated in all countries of the European

Community. Requirements for outdoor operation, license requirements and

allowed channels of operation apply in some countries as described below:

NOTE

The user must use the configuration utility provided with this product to ensure the channels of operation are in conformance with the spectrum usage rules for European Community countries as described below.

 This device requires that the user or installer properly enter the current

country of operation in the command line interface as described in the user

guide, before operating this device.

 This device will automatically limit the allowable channels determined by the

current country of operation. Incorrectly entering the country of operation may

result in illegal operation and may cause harmful interference to other system.

The user is obligated to ensure the device is operating according to the

channel limitations, outdoor restrictions and license requirements for each

European Community country as described in this document.

 This device may be operated in all countries of the European Community

using the 2.4 GHz band: Channels 1 - 13, except where noted below.

x BreezeMAX Wi² and BreezeACCESS Wi² System Manual

Compliances

 In Italy the end-user must apply for a license from the national spectrum

authority to operate this device outdoors.

 In Belgium outdoor operation is only permitted using the 2.46 - 2.4835

GHz band: Channel 13.

 In France outdoor operation is only permitted using the 2.4 - 2.454 GHz

band: Channels 1 - 7.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual xi

About This Manual

This manual describes the BreezeMAX Wi2 and BreezeACCESS Wi2 unit and

details how to install, operate and manage the access point.

This manual is intended for technicians responsible for installing, setting and

operating the BreezeMAX Wi

administrators responsible for managing the system.

This manual contains the following chapters and appendices:

 Chapter 1 - Product Description - Describes the Wi

functionality.

and BreezeACCESS Wi2, and for system

unit and its

 Chapter 2 - Installation - Describes how to install the Wi

connect to subscriber’s equipment.

 Chapter 3 - Initial Configuration - Describes how to initially configure the

access point in order to test basic link operation .

 Chapter 4 - System Configuration- Describes advanced configuration of the

the access point.

 Chapter 5 - Command Line Interface - Describes the command line interface

commands for configuring the access point.

 Appendix A - Troubleshooting

and how to

Chapter 1 - Product Description

1.1 Introduction................................................................................................................2

1.2 Specifications.............................................................................................................4

1.2.1 Radio.............................................................................................................4

1.2.2 Sensitivity......................................................................................................5

1.2.3 8 dBi Omni Antenna......................................................................................5

1.2.4 Configuration and Management....................................................................6

1.2.5 Mechanical....................................................................................................7

1.2.6 Electrical........................................................................................................7

1.2.7 Connectors and LEDs...................................................................................7

1.2.8 Environmental ..............................................................................................9

1.2.9 Standards Compliance..................................................................................9

Chapter 2 - Hardware Installation

2.1 Hardware Description..............................................................................................12

2.1.1 Bottom Panel...............................................................................................13

2.1.2 Top Panel....................................................................................................14

2.1.3 LED Indicators.............................................................................................14

2.2 Installation Requirements.......................................................................................16

2.2.1 Packing List.................................................................................................16

2.2.2 Additional/Optional Installation Requirements.............................................16

2.2.3 Guidelines for Positioning Wi².....................................................................18

2.3 Installation................................................................................................................19

2.3.1 Attaching the SU-ODU to the Mounting Plate.............................................19

Table of Contents

2.3.2 Attaching the Mounting Plate to the Wi² Unit...............................................21

2.3.3 Connecting the Wi² Unit to the SU-ODU.....................................................22

2.3.4 Preparing the Power Cable.........................................................................26

2.3.5 Mounting the Wi² Unit..................................................................................28

2.3.6 Connecting the Antenna(s)..........................................................................31

2.3.7 Connecting the Grounding Cables..............................................................31

2.3.8 Connecting to Power Source.......................................................................31

2.3.9 Configuration and Testing...........................................................................32

Chapter 3 - Initial Configuration

3.1 Introduction..............................................................................................................36

3.2 Initial Setup through the CLI...................................................................................37

3.2.1 Configuration via Telnet ..............................................................................37

3.2.2 Configuration via Console...........................................................................37

3.2.3 Initial Configuration Steps ...........................................................................38

3.3 Logging In.................................................................................................................40

Chapter 4 - System Configuration

4.1 Introduction..............................................................................................................44

4.2 BreezeMAX Backhauling Configuration ................................................................45

4.3 BreezeACCESS Backhauling Configuration .........................................................46

4.4 Advanced Configuration .........................................................................................47

4.4.1 System Identification...................................................................................48

4.4.2 TCP / IP Settings.........................................................................................49

4.4.3 RADIUS.......................................................................................................52

4.4.4 SSH Settings...............................................................................................55

4.4.5 Authentication..............................................................................................57

4.4.6 Filter Control ................................................................................................61

xvi BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual

Table of Contents

4.4.7 VLAN...........................................................................................................64

4.4.8 WDS Settings..............................................................................................66

4.4.9 AP Management..........................................................................................66

4.4.10 Administration..............................................................................................68

4.4.11 System Log .................................................................................................74

4.4.12 RSSI............................................................................................................78

4.5 SNMP.........................................................................................................................79

4.6 Radio Interface.........................................................................................................85

4.6.1 Radio Settings G (802.11g).........................................................................85

4.6.2 Security .....................................................................................................102

4.7 Status Information .................................................................................................120

4.7.1 Access Point Status ..................................................................................120

4.7.2 Station Status............................................................................................122

4.7.3 Event Logs ................................................................................................124

Chapter 5 - Command Line Interface

5.1 Using the Command Line Interface......................................................................129

5.1.1 Accessing the CLI .....................................................................................129

5.1.2 Console Connection..................................................................................129

5.1.3 Telnet Connection.....................................................................................129

5.2 Entering Commands..............................................................................................131

5.2.1 Keywords and Arguments.........................................................................131

5.2.2 Minimum Abbreviation...............................................................................131

5.2.3 Command Completion...............................................................................131

5.2.4 Getting Help on Commands......................................................................131

5.2.5 Partial Keyword Lookup ............................................................................132

5.2.6 Negating the Effect of Commands ............................................................132

BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual xvii

Table of Contents

5.2.7 Using Command History ...........................................................................133

5.2.8 Understanding Command Modes..............................................................133

5.2.9 Exec Commands.......................................................................................133

5.2.10 Configuration Commands..........................................................................134

5.2.11 Command Line Processing.......................................................................134

5.3 Command Groups..................................................................................................136

5.4 General Commands...............................................................................................138

5.4.1 configure....................................................................................................139

5.4.2 end ............................................................................................................139

5.4.3 exit.............................................................................................................140

5.4.4 ping............................................................................................................140

5.4.5 reset ..........................................................................................................141

5.4.6 show history ..............................................................................................141

5.4.7 show line ...................................................................................................142

5.5 System Management Commands.........................................................................143

5.5.1 country.......................................................................................................144

5.5.2 prompt.......................................................................................................145

5.5.3 system name.............................................................................................146

5.5.4 username ..................................................................................................146

5.5.5 password...................................................................................................147

5.5.6 ip ssh-server enable..................................................................................147

5.5.7 ip ssh-server port.......................................................................................148

5.5.8 ip telnet-server enable...............................................................................148

5.5.9 ip http port .................................................................................................148

5.5.10 ip http server..............................................................................................149

5.5.11 ip http session-timeout ..............................................................................149

xviii BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual

Table of Contents

5.5.12 ip https port................................................................................................150

5.5.13 ip https server............................................................................................150

5.5.14 APmgmtIP.................................................................................................151

5.5.15 APmgmtUI.................................................................................................152

5.5.16 show apmanagement................................................................................152

5.5.17 show system..............................................................................................153

5.5.18 show version .............................................................................................154

5.5.19 show config ...............................................................................................155

5.5.20 show hardware..........................................................................................160

5.6 System Logging Commands.................................................................................161

5.6.1 logging on..................................................................................................161

5.6.2 logging host...............................................................................................161

5.6.3 logging console .........................................................................................162

5.6.4 logging level ..............................................................................................162

5.6.5 logging facility-type....................................................................................163

5.6.6 logging clear..............................................................................................164

5.6.7 show logging .............................................................................................164

5.6.8 show event-log..........................................................................................165

5.7 System Clock Commands.....................................................................................166

5.7.1 sntp-server ip.............................................................................................166

5.7.2 sntp-server enable.....................................................................................167

5.7.3 sntp-server date-time ................................................................................167

5.7.4 sntp-server daylight-saving .......................................................................168

5.7.5 sntp-server timezone.................................................................................168

5.7.6 show sntp..................................................................................................169

5.8 DHCP Relay Commands........................................................................................170

BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual xix

Table of Contents

5.8.1 dhcp-relay enable......................................................................................170

5.8.2 dhcp-relay..................................................................................................170

5.8.3 show dhcp-relay........................................................................................171

5.9 SNMP Commands..................................................................................................172

5.9.1 snmp-server community............................................................................172

5.9.2 snmp-server contact..................................................................................173

5.9.3 snmp-server location.................................................................................173

5.9.4 snmp-server enable server........................................................................174

5.9.5 snmp-server host ......................................................................................174

5.9.6 snmp-server trap.......................................................................................175

5.9.7 snmp-server engine-id...............................................................................176

5.9.8 snmp-server user ......................................................................................177

5.9.9 snmp-server targets ..................................................................................178

5.9.10 snmp-server filter.......................................................................................178

5.9.11 snmp-server filter-assignments.................................................................179

5.9.12 show snmp groups....................................................................................180

5.9.13 show snmp users ......................................................................................180

5.9.14 show snmp group-assignments.................................................................181

5.9.15 show snmp target......................................................................................181

5.9.16 show snmp filter ........................................................................................182

5.9.17 show snmp filter-assignments...................................................................182

5.9.18 show snmp................................................................................................183

5.10 Flash/File Commands............................................................................................185

5.10.1 bootfile.......................................................................................................185

5.10.2 copy .......................................................................................................... 185

5.10.3 delete.........................................................................................................186

xx BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual

Table of Contents

5.10.4 dir ..............................................................................................................187

5.10.5 show bootfile .............................................................................................188

5.11 RADIUS Client ........................................................................................................189

5.11.1 radius-server address................................................................................189

5.11.2 radius-server port......................................................................................190

5.11.3 radius-server key.......................................................................................190

5.11.4 radius-server retransmit ............................................................................190

5.11.5 radius-server timeout.................................................................................191

5.11.6 radius-server port-accounting....................................................................191

5.11.7 radius-server timeout-interim.....................................................................192

5.11.8 radius-server radius-mac-format...............................................................192

5.11.9 radius-server vlan-format ..........................................................................193

5.11.10 show radius...............................................................................................193

5.12 802.1X Authentication............................................................................................195

5.12.1 802.1x........................................................................................................195

5.12.2 802.1x-supplicant enable ..........................................................................196

5.12.3 802.1x-supplicant user..............................................................................196

5.12.4 show authentication...................................................................................197

5.13 MAC Address Authentication ...............................................................................198

5.13.1 address filter default..................................................................................198

5.13.2 address filter entry.....................................................................................199

5.13.3 address filter delete...................................................................................199

5.13.4 mac-authentication server.........................................................................200

5.13.5 mac-authentication session-timeout..........................................................200

5.14 Filtering Commands ..............................................................................................202

5.14.1 filter local-bridge........................................................................................203

BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual xxi

Table of Contents

5.14.2 filter ap-manage ........................................................................................203

5.14.3 filter uplink enable .....................................................................................203

5.14.4 filter uplink.................................................................................................204

5.14.5 filter ethernet-type enable..........................................................................204

5.14.6 filter ethernet-type protocol........................................................................205

5.14.7 show filters ................................................................................................206

5.15 WDS Bridge Commands........................................................................................207

5.16 Spanning Tree Commands....................................................................................208

5.17 Ethernet Interface Commands..............................................................................209

5.17.1 interface ethernet ......................................................................................209

5.17.2 dns server..................................................................................................209

5.17.3 ip address.................................................................................................. 210

5.17.4 ip dhcp .......................................................................................................211

5.17.5 speed-duplex.............................................................................................211

5.17.6 shutdown...................................................................................................212

5.17.7 show interface ethernet.............................................................................212

5.18 Wireless Interface Commands..............................................................................214

5.18.1 interface wireless.......................................................................................215

5.18.2 vap.............................................................................................................215

5.18.3 speed.........................................................................................................216

5.18.4 multicast-data-rate.....................................................................................216

5.18.5 channel......................................................................................................218

5.18.6 transmit-power...........................................................................................218

5.18.7 radio-mode................................................................................................219

5.18.8 preamble ...................................................................................................219

5.18.9 antenna control..........................................................................................220

xxii BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual

Table of Contents

5.18.10 antenna id..................................................................................................220

5.18.11 antenna location........................................................................................221

5.18.12 beacon-interval ..........................................................................................221

5.18.13 dtim-period ................................................................................................222

5.18.14 fragmentation-length .................................................................................222

5.18.15 rts-threshold ..............................................................................................223

5.18.16 super-g......................................................................................................224

5.18.17 description.................................................................................................224

5.18.18 ssid............................................................................................................224

5.18.19 closed-system ...........................................................................................225

5.18.20 max-association ........................................................................................225

5.18.21 assoc-timeout-interval...............................................................................226

5.18.22 auth-timeout-value.....................................................................................226

5.18.23 shutdown...................................................................................................226

5.18.24 show interface wireless.............................................................................227

5.18.25 show station ..............................................................................................229

5.19 Rogue AP Detection Commands..........................................................................231

5.19.1 rogue-ap enable........................................................................................231

5.19.2 rogue-ap authenticate ...............................................................................232

5.19.3 rogue-ap duration......................................................................................232

5.19.4 rogue-ap interval .......................................................................................233

5.19.5 rogue-ap scan ...........................................................................................233

5.19.6 show rogue-ap...........................................................................................234

5.20 Wireless Security Commands...............................................................................235

5.20.1 auth ...........................................................................................................235

5.20.2 encryption..................................................................................................237

BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual xxiii

Table of Contents

5.20.3 key............................................................................................................. 237

5.20.4 transmit-key...............................................................................................238

5.20.5 cipher-suite................................................................................................239

5.20.6 mic_mode..................................................................................................240

5.20.7 wpa-pre-shared-key ..................................................................................240

5.20.8 pmksa-lifetime...........................................................................................241

5.20.9 pre-authentication......................................................................................241

5.21 Link Integrity Commands......................................................................................243

5.21.1 link-integrity ping-detect ............................................................................243

5.21.2 link-integrity ping-host ...............................................................................244

5.21.3 link-integrity ping-interval...........................................................................244

5.21.4 link-integrity ping-fail-retry.........................................................................244

5.21.5 link-integrity ethernet-detect......................................................................245

5.21.6 show link-integrity......................................................................................245

5.22 IAPP Commands....................................................................................................246

5.22.1 iapp............................................................................................................246

5.23 VLAN Commands...................................................................................................247

5.23.1 vlan............................................................................................................247

5.23.2 management-vlanid...................................................................................248

5.23.3 vlan-id........................................................................................................248

5.24 WMM Commands...................................................................................................250

5.24.1 wmm..........................................................................................................250

5.24.2 wmm-acknowledge-policy.........................................................................250

5.24.3 wmmparam................................................................................................251

Appendix A - Troubleshooting

Glossary................................................................................................257

xxiv BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual

Table of Contents

Index.....................................................................................................263

BreezeMAX Wi2 and BreezeACCESS VL Wi2 System Manual xxv

Chapter 1 - Product Description

In This Chapter:

 “Introduction” on page 2

 “Specifications” on page 4

Chapter 1 - Product Description

1.1 Introduction

Alvarion's Wi² suite of converged solutions, including BreezeMAX Wi²and

BreezeACCESS Wi²("Wi²"), unites the advantages of the popular WiFi access with

the powerful capabilities of BreezeMAX or BreezeACCESS VL/4900

(“BreezeACCESS”) systems to provide cost-effective solutions for personal

broadband services.

The Wi² system comprises a self-contained combination of an advanced WiFi

access point and a BreezeMAX or BreezeACCESS SU-ODU that provides backhaul

connectivity. With its advanced roaming software, the Wi² can be deployed almost

anywhere to provide broadband mobility to standard WiFi (IEEE 802.11 b/g) end

user devices. Used in conjunction with Alvarion's market-leading BreezeMAX or

BreezeACCESS base stations, the Wi² can be used to expand the existing

capabilities of Alvarion's WiMAX and pre-WiMAX networks. Using the Wi², a

BreezeMAX or BreezeACCESS network can be used to provide personal

broadband services to high-end business as well as residential users equipped

with WiFi enabled devices such as laptops, PDAs, smart-phones, and portable

gaming devices. As a converged system, the Wi² also gives operators the ability to

seamlessly transition to a fully mobile WiMAX network with managed services for

personal broadband users.

Operating in both licensed and licensed-exempt frequencies, the Wi² system

leverages the easy availability of WiFi technology - along with the power and

robustness of BreezeMAX or BreezeACCESS broadband wireless access system -

to answer critical public and private sector needs such as traffic management,

video surveillance, public Internet access, homeland security, and various

nomadic applications.

The Wi² is a self-contained, robust all-outdoor system that comprises three

elements:

 A feature-rich WiFi (IEEE 802.11 b/g) Access Point (AP)

 A BreezeMAX/BreezeACCESS VL/BreezeACCESS 4900 SU-ODU (supplied

separately).

NOTE

In a BreezeACCESS VL/4900 backhauling link, an SU-54-BD model should be used.

2 System Description

Introduction

 A power supply module that provides power to both the WiFi AP and the

SU-ODU.

The Wi² system requires only a single connection to either AC or DC power. With

its easy installation and operation, high performance, and rich security and QoS

feature sets, the Wi² is an ideal solution for operators, municipalities and

communities looking to build metropolitan broadband networks or to integrate

WiFi hot zone capabilities into their existing broadband wireless access networks.

The result is personal broadband services ranging from public Internet access to

public safety and Intranet applications.

NOTE

This document describes how to install and manage the Wi² system, including the installation and connections of a BreezeMAX or BreezeACCESS SU-ODU when installed on the mounting plate of

the Wi2 system. For details on other installation options for the SU-ODU and how to manage it, refer to the relevant BreezeMAX or BreezeACCESS VL/4900 documents.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 3

Chapter 1 - Product Description

1.2 Specifications

1.2.1 Radio

Table 1-1: Radio Specifications

Item Description Radio Type Radio Mode Frequency Band Operating Channels

Channel Bandwidth Data Rates

Turbo Mode (802.11g Super G)

802.11b Radio Technology

802.11b Modulation Technique

802.11g Radio Technology

802.11g Modulation Technique

IEEE 802.11b/g

802.11b+g, 802.11b only, 802.11g only 2400-2497 MHz ETSI (EUR): 2412 ~ 2472 MHz(CH1-CH13)

MKK (Japan) 11b: 2412 ~ 2484 MHz (CH1-CH14) MKK (Japan) 11g: 2412 ~ 2472 MHz(CH1-CH13) France: 2457 ~ 2472 MHz(CH10-CH13)

20 MHz

802.11b: 1, 2, 5.5, 11 Mbps

802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps Dynamic (CH6) Direct Sequence-Spread Spectrum (DSSS)

Differential Binary Phase Shift Keying (DBPSK) @ 1 Mbps Differential Quadrature Phase Shift Keying (DQPSK) @ 2 Mbps Complementary Code Keying (CCK) @ 5.5 and 11 Mbps

Orthogonal Frequency Divisional Multiplexing (OFDM) Binary Phase Shift Keying (BPSK) @ 6 and 9 Mbps

Quadrature Phase Shift Keying (QPSK) @ 12 and 18 Mbps 16-Quadrature Amplitude Modulation (QAM) @ 24 & 36 Mbps 64-QAM @ 48 & 54 Mbps

FEC Coding Rates Max Tx Power

TPC (Transmit Power Control) Antenna Ports Antenna Diversity

4 System Description

1/2 2/3, 3/4 6 to 24 Mbps: 20dBm.

36 and 48 Mbps:19dBm. 54 Mbps: 18dBm

802.11b for all frequencies and all rates: 20dBm. 100%, 50%, 25%, 12.5%, Min. 2 x N-Type, 50 ohm

Rx antenna switching by energy sensing

1.2.2 Sensitivity

Table 1-2: Sensitivity

Data Rate Sensitivity (dBm)

802.11b, 1 Mbps -96

802.11b, 2 Mbps -93

802.11b, 5.5 Mbps -93

802.11b, 11 Mbps -90

802.11g, 6 Mbps -91

802.11g, 9 Mbps -90

802.11g, 12 Mbps -89

802.11g, 18 Mbps -88

802.11g, 24 Mbps -84

802.11g, 36 Mbps -80

Specifications

802.11g, 48 Mbps -75

802.11g, 54 Mbps -73

1.2.3 8 dBi Omni Antenna

Table 1-3: 8 dBi Omni Antenna

Item Description Antenna gain VSWR Antenna Polarization Horizontal Plane Vertical Plane Dimensions Weight

8 dBi 2:1 max Linear Vertical 360° 15° 52 cm x 1.9 cm diameter 340 g

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 5

Chapter 1 - Product Description

1.2.4 Configuration and Management

Table 1-4: Configuration and Management

Item Description Management options 

Web-based (HTTP/HTTPS)

 Telnet

 SSH

 SNMP

SNMP agent

V1 / V2c, supports 802.11 MIB, RFC-1213 MIB II and private MIB.

Management access  Local via Console port

 From the backhaul network

 From WiFi clients

Management access protection  Access Password

 Enable/Disable access from wireless clients

 Enable/Disable access using web/Telnet/SNMP

 Restrict access to authorized stations (by IP)

WiFi Clients Authentication  Local/RADIUS MAC List

 IEEE 802.1x

Encryption  WEP

 WPA/TKIP over 802.1x or PSK (Pre-shared Key)

 802.11i / WPA2 (AES-CCMP) over 802.1x or PSK

 Mixed WPA and WEP clients support

Allocation of IP parameters WiFi Multi-Media Support Software upgrade Configuration Upload/Download

Configurable or automatic (DHCP client) Four QoS levels using the WMM standard according to IEEE 802.11e HTTP/FTP/TFTP FTP/TFTP

6 System Description

1.2.5 Mechanical

Table 1-5: Mechanical Specificat io n s

Item Description

Specifications

Dimensions (excluding mounting plate and connectors)

Weight (excluding antennas, backhauling

CPE and mounting plate )

Weight of Mounting Plate AC Power Supply Mounting Plate Tilt Mounting Plate Rotation

1.2.6 Electrical

Table 1-6: Electrical Specifications

Type Details AC Power Supply DC Power supply AC/DC Power Switching

85-260VAC, 47-63Hz, maximum power consumption 2.5A 42 VDC to 60 VDC, maximum power consumption 3.5A When both AC and DC power sources are connected, AC power input will be

used as long as internal power supplies are working properly. The unit will switch to DC power source if AC power input fails, or the internal power supplies fail, and the DC power input is in the proper range.

240mm (W) X 261mm (H) X 171mm (D)

4.85 Kg

0.7 Kg 85-260VAC, 47-63Hz, maximum power consumption 2.5A

+/- 15

+/- 45

1.2.7 Connectors and LEDs

Table 1-7: Connectors and LEDs

Type Description AC IN SU

DC IN PoE

Console

Connection to AC mains. 3-pin power plug, Bulgin PX0732/S/07 Ethernet and power connection to backhauling CPE. RJ-45, in a weather protected service box

Ethernet and power connection to AP (PoE). RJ-45, in a weather protected service box Connection to DC power source. 2-pin power plug, Bulgin PX0736/S/07 Ethernet and power connection, 8-pins DIN jack 10/100Base-T, half/full duplex with auto-negotiation RS232 DTE, 8-pins DIN jack

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 7

Chapter 1 - Product Description

Table 1-7: Connectors and LEDs

Type Description LEDs  Power

 Link (Ethernet link integrity/activity)

 11b/g: 3 LEDs indicating wireless link activity

8 System Description

1.2.8 Environmental

Table 1-8: Environmental Specifications

Item Details

Specifications

Operating Temperature Storage Temperature Humidity Wat er Proof Solar Radiation protection Salt Transportation Storage shock Storage drop Wind operation Wind survival

-400C to 550C

-400C to 700C Maximum 95%. IP-67 IEC 60068-2-5 IEC 60068 part 2-52 ETS 300 019-2-2 Class 2.3 Pubic Transportation IEC 68-2-29 IEC 68-2-32 160 Km/hour 220 Km/hour

1.2.9 Standards Compliance

Table 1-9: Stan dards Compliance

Type Standard EMC 

EN55022 CE Class B

 FCC Class B Part 15

Safety  UL / CUL (CSA60950-1, UL60950-1)

 CE / CB (EN60950/IEC 60950-1)

Lightning

The unit withstand at +4KV of Input surge, 1.2usec rise/fall time, 50µsec duration, every 10 seconds, for all interfaces.

Radio  ETSI 300 328 (11b/g)

 ETSI 301 489 (DC power)

 FCC Part 15C 15.247/15.207 (11b/g)

 RS210 (Canada)

 TELEC

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 9

Chapter 2 - Hardware Installation

In This Chapter:

 “Hardware Description” on page 12

 “Installation Requirements” on page 16

 “Installation” on page 19

 “Attaching the SU-ODU to the Mounting Plate” on page 19

 “Attaching the Mounting Plate to the Wi² Unit” on page 21

 “Connecting the Wi² Unit to the SU-ODU” on page 22

 “Preparing the Power Cable” on page 26

 “Mounting the Wi² Unit” on page 28

 “Connecting the Antenna(s)” on page 31

 “Connecting the Grounding Cables” on page 31

 “Connecting to Power Source” on page 31

 “Configuration and Testing” on page 32

Chapter 2 - Hardware Installation

2.1 Hardware Description

The Wi² consists of a WiFi access point with an integrated power supply and

interface module that connects to either a BreezeMAX or BreezeACCESS outdoor

unit (SU-ODU) for backhaul and network management software. Each unit is

housed in a weatherproof enclosure for mounting outdoors.

Antenna Connectors (Top Panel)

Mounting Plate

Pole Mounting Bracket

LEDs

Grounding Stud

Connections (Bottom Panel)

Figure 2-1: Wi² Unit (without SU-ODU)

NOTE

The diagram in Figure 2-1 includes a mounting plate for an SU-ODU. (It does not show the actual SU-ODU). The SU-ODU can also be installed separately, in which case there is no need to attach the mounting plate to the Wi² unit.

12 Installation

2.1.1 Bottom Panel

Figure 2-2 shows the bottom panel of the Wi² unit and Table 2-1 lists the

components.

Hardware Description

Power Supply and Interface Module

WiFi Access Point (AP)

Figure 2-2: Bottom Panel (without the SU-ODU)

Table 2-1: Bottom Panel Components

Element Item Description

WiFi Access Point (AP) Console Port Cover Holder Holder for waterproof protection cover

for console port when port is not in use.

Console Port Connection to console port for system

management.

PoE Port An Ethernet cable connects the PoE port

to the AP port in the Power Supply and Interface Module.

Impermeability Test Screw Do not remove or loosen this screw.

Doing so may impair the sealing of the unit against moisture and humidity.

Power Supply and Interface Module

AC Power Plug 3-pin power plug for connection to AC

power source.

AP Port An Ethernet cable connects the AP port

to the PoE port in the AP.

SU Port Connection to BreezeMAX or

BreezeACCESS outdoor unit

DC Power Plug) 2-pin power plug for connection to DC

power source.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 13

Chapter 2 - Hardware Installation

2.1.2 Top Panel

Figure 2-3: Top Panel (without the SU-ODU)

Figure 2-3 shows the top panel of the Wi² unit with two N-type RF connectors for

external antennas.

2.1.3 LED Indicators

The Wi² includes eight status LED indicators. Figure 2-4 shows the LEDs and

Table 2-2 describes the system status.

Figure 2-4: LED Indicators

Table 2-2: LED Indicators

LED Status Description

11 b/g (three pairs of LEDs A Always on B Flashing Indicates packets received using 802.11b

modulation.

14 Installation

Table 2-2: LED Indicators

LED Status Description

C Flashing Indicates packets received using 802.11g

modulation.

Power On Green Indicates that the system is working

normally.

On Amber Indicates a power shutdown due to a low

temperature condition.

Link On Green Indicates a valid 10/100 Mbps Ethernet

cable link.

Hardware Description

Flashing Green

Indicates that the Wi² is transmitting or receiving data on a 10/100 Mbps Ethernet LAN. Flashing rate is proportional to network activity.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 15

Chapter 2 - Hardware Installation

2.2 Installation Requirements

This section describes all the supplies required to install the Wi² and the items

included in each installation package.

2.2.1 Packing List

The BreezeMAX Wi² and BreezeACCESS Wi² installation kit includes the following

components:

 Wi² unit

 SU-ODU mounting plate

 4 sets of M8 x 16 hex head screws + flat washers + spring washers

 4 sets of 1/4” x 1/2” hex head screws + flat washers + spring washers

 4 sets of M6 x 12 hex head screws + flat washers + spring washers

 Cable kit including a 55 cm category 5E Ethernet cable with two shielded

RJ-45 connectors, one with a metal service box, and a spare shielded RJ-45

connector.

 AC power connector

 2 x 9/16" (530 mm) metal bands

 3m Ethernet configuration cable (2 pairs, straight)

2.2.2 Additional/Optional Installation Requirements

 Category 5E cable* for connecting to an SU-ODU if installed separately

(maximum length 100m.)

 Rubber sealing cap for BreezeMAX or BreezeACCESS HW Revision E ODU

(supplied with SU-ODU)

 Service Box for BreezeACCESS HW Revision D or lower ODU (supplied with

SU-ODU).

16 Installation

Installation Requirements

 Crimping tool for RJ-45 connectors (if connecting to a BreezeACCESS ODU)

 RS232 console cable*

 8 dBi Omnidirectional antenna(s)*

 Sectoral antenna(s), including RF cable with N-Type connector*

 UL/CSA listed smooth circular power cable, 1.5mm to 2.5mm each. Outer

diameter 7mm to 9mm, UV resistant, temperatures range -40

C to +650C min.

Other specifications (such as oil resistance, no of wires) according to specific

installation requirements.

 A mains plug for connecting to AC mains

 Two terminal rings if connecting to a DC source

 Grounding cable with an appropriate termination.

 Installation tools and materials, including appropriate means for installing the

Wi² and antenna(s).

 A PC with an Ethernet NIC for configuring basic parameters of the WiFi AP and

the SU-ODU, and a b/g WiFi card for testing wireless connectivity to the AP.

 Wall - Tilt Pole Mounting kit* (page 28)

 DC power connector* (pack of 5)

 Waterproof covers for AC/DC socket* (pack of 5)

NOTE

Before starting to install the Wi² unit, check that you have all the necessary parts and accessories. Optional accessories marked with an asterisk (*) can be ordered from your supplier.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 17

Chapter 2 - Hardware Installation

2.2.3 Guidelines for Positioning Wi²

CAUTION

ONLY experienced installation professionals who are familiar with local building and safety codes and, wherever applicable, are licensed by the appropriate government regulatory authorities should install outdoor units and antennas.

Failure to do so may void the product warranty and may expose the end user or Service Provider to legal and financial liabilities. Alvarion and its resellers or distributors are not liable for injury, damage or regulation violations associated with the installation of Outdoor Units or antennas.

The Wi² should be mounted vertically on a 2"- 6" pole. Its location should enable

easy access to the unit and its connectors for installation and maintenance and

should have a clear or near line of sight to the area to be covered.

For best performance, the SU-ODU attached to the unit should have clear or near

line of sight to the base station. For further information about the optimal

installation location of the SU-ODU refer to the relevant manual.

18 Installation

Installation

2.3 Installation

The following sections describe how to install a Wi² unit, including attaching the

SU-ODU to the mounting plate, attaching the mounting plate to the Wi² unit,

connecting to the SU-ODU, pole mounting, connecting a grounding cable, and

connecting the antenna(s).

2.3.1 Attaching the SU-ODU to the Mounting Plate

IMPORTANT

The angle at which the SU-ODU is mounted on the Wi² can be adapted depending on the location of the Wi² unit in relation to the Base Station. Once attached, the mounting plate can be tilted either up or down. Before attaching the SU-ODU to the mounting plate, determine the direction of the tilt.

T o attach a BreezeMAX PRO-S ODU or BreezeACCESSSU-ODU with HW Revision E (octagonal) to the mounting plate:

NOTE

BreezeACCESS SU-ODU with HW Revision E is the new, smaller, octagonal ODU available in the

5.4 and 5.8 GHz bands. BreezeACCESS SU-ODUs with HW Revision D or lower are rectangular and slightly larger in size.

1 Determine the tilt direction of the SU-ODU. 2 Using the M8 x 16 hex head screws and the flat washers and spring washers

supplied, attach the SU-ODU to the mounting plate as shown in Figure 2-5 in

the direction marked.

3 Tighten the screws. Apply torque of 57 lb*in [6.4 N*m].

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 19

Chapter 2 - Hardware Installation

Figure 2-5: Attaching BreezeMAX PRO-S ODU or BreezeACCESSSU-ODU with HW Revision E to

Mounting Plate

NOTE

For information about polarization refer to the relevant manual.

To attach a BreezeACCESS SU-ODU with HW Revision D or lower (rectangular) to the mounting plate:

1 Determine the tilt direction of the SU-ODU. 2 Using the 1/4” x 1/2” hex head screws and the flat washers and spring

washers supplied, attach the SU-ODU to the mounting plate as shown in

Figure 2-6 in the direction marked.

3 Tighten the screws. Apply torque of 57 lb*in [6.4 N*m].

20 Installation

Installation

Figure 2-6: Attaching BreezeACCESS SU-ODU with HW Revision D or lower to Mounting Plate

NOTE

Sometimes, physical circumstance require that the SU-ODU be located at a distance from the Wi² unit and not attached to the mounting plate. For further information see the section on SU-ODU mounting in the relevant manual.

2.3.2 Attaching the Mounting Plate to the Wi² Unit

1 Hold the mounting plate with SU-ODU attached so the tilt label faces the tilt

direction that you have decided upon (see Section 2.3.1).

2 Using the M6 x 12 hex head screws and the flat washers and spring washers

supplied, attach the mounting plate to the Wi² unit as shown in Figure 2-7.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 21

Chapter 2 - Hardware Installation

Figure 2-7: Attaching the Mounting Plate to the Wi² Unit

3 Adjust the tilt angle according to the scale marked on the mounting plate and

tighten the screws. Apply torque of 57 lb*in [6.4 N*m].

2.3.3 Connecting the Wi² Unit to the SU-ODU

NOTE

The Wi² installation kit includes a Category 5E Ethernet cable, suitable for connecting to BreezeMAX PRO-S ODU. For instructions on how to adapt the Ethernet cable for connecting to a BreezeACCESS SU-ODU with HW revision D or lower refer to

the Ethernet Cable for Connecting to BreezeACCESS SU-ODU” on page 2-24

2.3.3.1 Connecting to BreezeMAX PRO-S ODU

1 The rubber sealing cap (supplied with the SU-ODU) has a special groove

allowing to insert an ethernet cable with an already assembled RJ-45

connector through the cap. To expose the groove, lightly squeeze the cap (see

Figure 2-8). Carefully insert the end of the 55 cm category 5E Ethernet cable

without the service box through the groove.

“Section 2.3.3.2, “Adapting

22 Installation

Installation

groove

Figure 2-8: Sealing Cap

2 Expose the RJ-45 connector under the sealing cap on the Ethernet cable and

connect to the SU-ODU RJ-45 connector (Figure 2-9).

Figure 2-9: Connecting the SU-ODU connector and inserting the Sealing Cap

3 Put the sealing cap back in its place. Make sure that the small protrusion on

the side of the cap fits inside the hole on the connector's protective body.

4 Connect the other end of the Ethernet cable to the SU port on the Wi² unit. 5 Verify that the O-ring supplied with the service box kit is in place, attach the

service box to the unit and tighten the top nut.

6 Use appropriate sealing material to protect the connection to the SU-ODU

against moisture and humidity. Use removable sealing material to enable

future access to the connector.

NOTE

Use high quality sealing material such as Scotch® 130C Linerless Rubber Splicing T ape from 3M to ensure IP-67 compliant protection against dust and water.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 23

Chapter 2 - Hardware Installation

2.3.3.2 Adapting the Ethernet Cable for Connecting to BreezeACCESS SU-ODU

The 55 cm Ethernet cable supplied with the unit has crossed Ethernet

connections which have to be adapted for connecting the unit to a BreezeACCESS

ODU:

1 Cut the cable as close as possible to the connector that should be connected to

the ODU (the end without the service box).

2 Use a crimp tool for RJ-45 connectors to prepare the wires. Insert them into

the appropriate pins of the spare RJ-45 connector supplied with the unit and

use the tool to crimp the connector. Make sure to do the following:

 Remove as small a length as possible of the external jacket. Verify that the

external jacket is well inside the sealing cover when connected to the unit,

to ensure good sealing.

 Pull back the shield drain wire before inserting the cable into the RJ-45

connector, to ensure a good connection with the connector's shield after

crimping.

The cable should provide straight pin-to-pin connections on both ends.

Figure 2-10 shows the required wire pair connections:

Figure 2-10: Ethernet Connector Pin Assignments

The color codes used in the standard cable supplied by with the unit are listed in

Table 2-3:

24 Installation

Installation

Table 2-3: Cable Color Codes

Wire color Pin

Blue 1 Blue/white 2 Orange 3 Orange/white 6 Brown 4 Brown/white 5 Green 7 Green/white 8

2.3.3.3 Connecting to BreezeACCESS ODU with HW Revision E

1 Adapt the cable as described in Section 2.3.3.2 2 Connect the cable to the ODU as described in Section 2.3.3.1.

2.3.3.4 Connecting to BreezeACCESS ODU with HW Revision D or Lower

1 Cut the cable as close as possible to the connector that should be connected to

the ODU (the end without the service box).

2 Route the cable through the service box supplied with the SU-ODU. 3 Connect the spare RJ-45 connector, supplied with the cable kit, as described

in step 2 of Section 2.3.3.2

4 Connect the Ethernet cable to the SU-ODU RJ-45 connector. 5 Make sure that the external jacket of the cable is well inside the service box to

guarantee a good seal.

6 Verify that the O-ring of the service box kit is in place, attach the service box to

the unit and tighten the top nut.

7 Connect the other end of the cable to the SU port on the Wi² unit. 8 Make sure that the external jacket of the cable is well inside the service box to

guarantee a good seal. Verify that the O-ring supplied with the service box is in

place, attach the service box to the unit and tighten the top nut.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 25

Chapter 2 - Hardware Installation

2.3.4 Preparing the Power Cable

CAUTION

Electric Shock Hazard. Only a licensed electrician should connect the power plug. All mains used outdoors, in damp or wet conditions, should be supplied from a correctly fused

source and protected according to applicable local regulations.

To prepare the power cable:

1 Use a UL/CSA listed smooth circular power cable, 1.5mm to 2.5mm each.

Outer diameter 7mm to 9mm, UV resistant, temperature range -40°C to +

65°C (-40°F to +149°F) minimum. Other specifications (such as oil resistance,

no of wires) according to specific installation requirements.

2 Use a cap assembly tool to unscrew the locking ring. 3 Thread the cable through component parts as shown in Figure 2-11.

NOTE

Figure 2-11

shows an AC power jack. The DC power jack is similar, but has only two sockets.

26 Installation

Installation

Figure 2-11: Preparing the Power Cable

4 Strip insulation from wires as shown in Figure 2-11. 5 Insert bare wire ends into the terminals and fully tighten the screws. The wires

should be connected as shown below:

AC DC

Brown Phase ~ Red +

Blue Neutral 0 Black -

Yellow/green Grounding

6 Draw cable back until socket insert is correctly seated in D-shaped location in

the main body. Tighten the Gland nut. Screw back the locking ring using the

cap assembly tool.

7 For an AC cable, connect a mains plug to the other end of the cable. For a DC

cable, connect the appropriate termination.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 27

Chapter 2 - Hardware Installation

2.3.5 Mounting the Wi² Unit

To pole mount the Wi² unit:

1 With the bottom panel of the unit facing downwards, thread the two 9/16"

wide metal bands supplied through the brackets on the sides of the unit.

2 Rotate the mounting bracket, so that the Wi² faces the Base Station.

NOTE

The mounting bracket can be rotat ed up to 45o in any direction.

3 Secure the Wi² unit to a pole as shown in Figure 2-12.

Figure 2-12: Pole Mounting the Wi²

2.3.5.1 Mounting the Wi² Using the Tilt Accessory

The Wi² can also be installed on a wall or on a non-vertical pole using an optional

tilt accessory kit. The tilt accessory kit (Figure 2-13) includes:

 A mounting bracket

 3 metal bands for attaching the bracket to a pole

 Screws for attaching the bracket to a wall

28 Installation

 A 50 cm pole (diameter 6.03 cm)

 Screws for attaching the pole to mounting bracket

Installation

Figure 2-13: Tilt Accessory Kit

To mount the tilt accessory on a wall:

1 Place the bracket on the wall and use as a template to mark the position of the

holes to be drilled for the screws .

2 Remove the bracket from the wall and drill a hole in each of the locations

marked.

3 Insert anchors into the holes. 4 Hold the bracket over the holes and insert a screw into each of the holes in the

bracket, and screw into the anchors in the wall. Secure the bracket to the wall,

making sure that the screw heads are as level with the bracket as possible.

To mount the tilt accessory on a non-vertical pole:

 Thread the metal bands provides with the tilt accessory through the slits in

the bracket and attach to the pole as shown in Figure 2-14.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 29

Chapter 2 - Hardware Installation

Figure 2-14: Mounting Tilt Accessory on Non-Vertical Pole

To mount the Wi² using the tilt accessory:

1 Mount the tilt accessory bracket on the wall or pole as described above. 2 Using the screws provided attach the pole to the tilt accessory bracket. 3 Using a spirit level, adjust the angle of the pole until it is vertical and tighten

the screws to hold in place.

4 Secure the Wi² to the pole as described in “Mounting the Wi² Unit” on page 28.

Figure 2-15: Wi² Mounting Using the Tilt Accessory

30 Installation

2.3.6 Connecting the Antenna(s)

To connect an external antenna:

1 Connect the external antenna directly to the N-type connector on the top panel

of the Wi² unit.

NOTE

When connecting only one antenna, connect it to the right antenna connector. (When looking at the unit from the side of the SU-ODU with the antenna connectors facing upwards, this is the connector on the right.)

2 Set the antenna options for corresponding antenna through the user interface

(Section 5.18.10).

CAUTION

Installation

If using antennas other than the Omni 8, make sure you do not exceed local radio regulations.

2.3.7 Connecting the Grounding Cables

To connect the grounding cables:

1 Connect a grounding cable to the grounding stud on theWi² unit and tighten

the grounding screw firmly.

2 Connect a grounding cable to the grounding stud on the SU-ODU and tighten

the grounding screw firmly.

3 Connect the other ends of the grounding cables to a good ground (earth)

connection.

CAUTION

Be sure that grounding is available and that it meets local and national electrical codes. For additional lightning protection, use lightning rods, lightning arrestors, or surge suppressors.

2.3.8 Connecting to Power Source

1 Connect the power cable (see Section 2.3.4) to the power socket on the unit

and to the mains supply.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 31

Chapter 2 - Hardware Installation

CAUTION

The Wi² can be connected to either an AC or DC power source, or to both. By default the DC plug is covered with a waterproof sealing cap which must be removed before connecting to the power cable. Any socket that is NOT in use must always be protected from moisture and must be covered with a waterproof sealing cap.

2 Check that the LED on the Wi² is green indicating that the system is working

normally.

2.3.9 Configuration and Testing

2.3.9.1 Configuring the SU-ODU

1 Disconnect the cable connecting the WiFi Access Point (AP) from the AP

connector on the Power Supply and Interface module.

2 Connect a PC to the AP connector using the 3 m configuration cable (straight)

supplied with the unit.

3 Verify that the SU-ODU is connected to the SU connector on the Power Supply

and Interface module.

4 Using Telnet, connect to the SU-ODU and configure its parameters. For

configuration details refer to the relevant manual.

5 Verify that the SU-ODU is operating properly and that it connects to the base

station. For details on verifying proper operation and connectivity refer to the

relevant manual.

2.3.9.2 Configuring the Wi²

1 Disconnect the configuration cable from the unit and reconnect the cable

between the WiFi Access Point (AP) and the AP connector of the Power Supply

and Interface module.

2 Disconnect the cable connected to the SU connector on the Power Supply and

Interface module.

3 Connect a PC to the SU connector using the 3 m configuration cable.

NOTE

Alternatively, instead of disconnecting the SU connector , you can connect a PC to the Console port of the AP with a console cable (ordered separately) and complete all the configuration using CLI.

4 Using Telnet, log in, and set the country code (available only via CLI) and the

AP IP address as outlined in Chapter 3 - "Initial Configuration".

32 Installation

Installation

5 Complete the configuration of the AP, using either CLI as outlined in Chapter

5 - "Command Line Interface" or the web-based interface as outlined in

Chapter 4 - "System Configuration".

NOTE

At least one VAP must be enabled and Antenna ID must be configured to enable transmissions.

6 Disconnect the configuration cable from the Wi² unit and reconnect the cable

between the SU-ODU and the SU connector of the Power Supply and Interface

module.

7 Using the WiFi client (802.11b/g), locate the Wi² and verify complete

connectivity to the backbone network.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 33

Chapter 3 - Initial Configuration

In This Chapter:

 “Introduction” on page 36

 “Initial Setup through the CLI” on page 37

 “Configuration via Telnet” on page 37

 “Configuration via Console” on page 37

 “Initial Configuration Steps” on page 38

 “Logging In” on page 40

Chapter 3 - Initial Configuration

3.1 Introduction

The Access Point (AP) unit offers a variety of management options, including a

web-based interface, Telnet, SSH, SNMP and a direct connection to the console

port.

The initial configuration steps can be made through the web browser interface or

CLI.

36 Commissioning

3.2 Initial Setup through the CLI

For a description of how to use the CLI, see “Using the Command Line Interface”

on page 129. For a list of all the CLI commands and detailed information on using

the CLI, refer to “Command Groups” on page 136.

3.2.1 Configuration via Telnet

By default, use the Telnet option to configure the unit. The AP uses the default

address 192.168.1.1. This address may not be compatible with your network. You

will therefore have to use the command line interface (CLI) to assign an IP address

that is compatible with your network as described on page 38.

Use the category 5 Ethernet data cable (2 pairs, straight) provided to connect the

SU port on the Wi² unit to your PC and Telnet the unit to start the initial setup.

3.2.2 Configuration via Console

Initial Setup through the CLI

The Wi² has a console port that enables a connection to a PC or terminal for

monitoring and configuration. Attach a VT100-compatible terminal, or a PC

running a terminal emulation program to the Wi² using an RS232 console cable.

To connect to the console port:

1 Connect the console cable to the serial port on a terminal, or a PC running

terminal emulation software.

2 Connect the other end of the cable to the console port on the Wi² unit. 3 Make sure the terminal emulation software is set as follows:-:

 Select the appropriate serial port (COM port 1 or 2).

 Set the data rate to 9600 baud.

 Set the data format to 8 data bits, 1 stop bit, and no parity.

 Set flow control to none.

 Set the emulation mode to VT100.

 When using HyperTerminal, select Terminal keys, not Windows keys.

4 Once you have set up the terminal correctly, press the [Enter] key to initiate

the console connection. The console login screen is displayed.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 37

Chapter 3 - Initial Configuration

3.2.3 Initial Configuration Steps

Logging In – Enter admin for the user name. The default password is null, so just

press [Enter] at the password prompt. The CLI prompt appears displaying

Enterprise AP#.

Username: admin Password: Enterprise AP#

Setting the Country Code – You must use the CLI to set the country code.

Setting the country code restricts operation of the AP to the radio channels and

transmit power levels permitted for wireless networks in the specified country.

Type exit to leave configuration mode. Then type country? to display the list of

countries. Select the code for your country, and enter the country command

again, following by your country code (e.g., tw for Taiwan).

Enterprise AP#country tw Enterprise AP#

Setting the IP Address – By default, the AP is configured to obtain IP address

settings from a DHCP server. If a DHCP server is not available, the IP address

defaults to 192.168.1.1, which may not be compatible with your network. You will

therefore have to use the command line interface (CLI) to assign an IP address

that is compatible with your network.

Type configure to enter configuration mode, then type interface ethernet to

access the Ethernet interface-configuration mode.

Enterprise AP#configure Enterprise AP(config)#interface ethernet Enterprise AP(config-if)#

First type no ip dhcp to disable DHCP client mode. Then type ip address and the

ip-address netmask gateway, where ip-address is the AP’s IP address, netmask is

the network mask for the network, and gateway is the default gateway router.

Check with your system administrator to obtain an IP address that is compatible

with your network.

Enterprise AP(if-ethernet)#no ip dhcp Enterprise AP(if-ethernet)#ip address 192.168.2.2 255.255.255.0 192.168.2.254 Enterprise AP(if-ethernet)#

38 Commissioning

Initial Setup through the CLI

After configuring the AP’s IP parameters, you can access the management

interface from anywhere within the attached network. The command line interface

can also be accessed using Telnet from any computer attached to the network.

NOTE

Command examples shown later in this manual use the console prompt to Enterprise AP.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 39

Chapter 3 - Initial Configuration

3.3 Logging In

There are a few basic steps you need to complete to connect the AP to your

corporate network, and provide network access to wireless clients.

The AP can be managed by any computer using a web browser (Internet Explorer

5.0 or above, or Netscape 6.2 or above).

To Log in:

1 Enter the default IP address http://192.168.1.1. Figure 3-1 is displayed.

Figure 3-1: Login

2 Enter the username admin. 3 The password is null, so leave blank and click LOGIN. 4 The home page (Figure 3-2) is displayed.

40 Commissioning

Figure 3-2: Home Page

NOTE

For information on configuring a user name and password, see page 68.

Logging In

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 41

Chapter 4 - System Configuration

In This Chapter:

 “Introduction” on page 44

 “BreezeMAX Backhauling Configuration” on page 45

 “BreezeACCESS Backhauling Configuration” on page 46

 “Advanced Configuration” on page 47

 “SNMP” on page 79

 “Radio Interface” on page 85

 “Status Information” on page 120

Chapter 4 - System Configuration

4.1 Introduction

Before continuing with advanced configuration, first complete the initial

configuration steps described in Chapter 3 to set up an IP address for the Access

Point (AP) unit.

The AP unit can be managed by any computer using a web browser (Internet

Explorer 5.0 or above, or Netscape 6.2 or above). Enter the configured IP address

of the AP unit, or use the default address: http://192.168.1.1.

Enter the default user name admin in the Log In Dialog Box (Figure 3-1) and click

displayed

Figure 4-1: Advanced Setup

The information in this chapter is organized to reflect the structure of the web

screens for easy reference. However, it is recommended that you configure a user

name and password as the first step under Administration to control management

access to this device (Section 4.4.10).

44 Operation

BreezeMAX Backhauling Configuration

4.2 BreezeMAX Backhauling Configuration

Note the following when using BreezeMAX for backhauling:

1 If VLANs are used by the AP (VLAN Classification enabled):

 Maximum number of VLAN IDs behind the SU is 16

 The recommended configuration of BreezeMAX services is:

¾ Transparent service

¾ VLAN list is empty or specific VLANs in list (Hybrid Mode is Off)

¾ No Access VLAN

2 If VLANs are not used by the AP (VLAN Classification disabled), the

recommended configuration for BreezeMAX services is:

 Transparent service

 Access VLAN may be used

 VLAN List is empty or Hybrid Mode On.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 45

Chapter 4 - System Configuration

4.3 BreezeACCESS Backhauling Configuration

Note the following when using BreezeACCESS for backhauling:

1 If VLANs are used by the AP (VLAN Classification enabled):

 In the SU Access Link should not be used.

 The AU can operate in either Hybrid or Trunk Link (Q in Q should not be

used)

2 If VLANs are not used by the AP (VLAN Classification disabled):

 AU and SU should operate in Hybrid Link

 No Management VLAN

 No Data VLAN

46 Operation

Advanced Configuration

4.4 Advanced Configuration

The Advanced Configuration pages include the following options.

Table 4-1: Menu

Menu Description Page

System Configures basic administrative and client access 48

Identification Specifies the host name 48 TCP / IP Settings Configures the IP address, subnet mask, gateway, and domain name servers 49 RADIUS Configures the RADIUS server for wireless client authentication and accounting 52 SSH Settings Configures Secure Shell management access 55 Authentication Configures 802.1X client authentication, with an option for MAC address

authentication

Filter Control Filters communications between wireless clients, access to the management

interface from wireless clients, and traffic matching specific Ethernet protocol

types VLAN Enables VLAN support and sets the management VLAN ID 64 WDS Settings Not applicable for current release 66 AP Management Configures access to management interfaces 66 Administration Configures user name and password for management

from local file, FTP or TFTP server;

defaults; and resets the AP System Log Controls logging of error messages; sets the system clock via SNTP server or

manual configuration RSSI Not applicable for current release 78 SNMP Configures SNMP settings 79

Radio Interface G Configures the IEEE 802.11g interface 85

Radio Settings Configures common radio signal parameters and other settings for each VAP

interface

resets configuration settings to factory

access; upgrades software

Security Enables each VAP interface, sets the SSID, and configures wireless security 102

Status Displays information about the access point and wireless clients 120

AP Status Displays configuration settings for the basic system and the wireless interface 120 Station Status Shows the wireless clients currently associated with the access point 122 Event Logs Shows log messages stored in memory 124

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 47

Chapter 4 - System Configuration

NOTE

This chapter may include references to features that are not applicable to the current release such as Radio A, WDS Settings and RSSI.

4.4.1 System Identification

The system name can be left with the default setting. However, modifying this

parameter enables you to easily identify different devices in your network.

Figure 4-2: Identification

System Name – An alias for the AP, enabling the device to be uniquely identified

on the network. (Default: BlueSecure BSAP-1600; Range: 1-32 characters)

48 Operation

Advanced Configuration

4.4.1.0.1 CLI Commands for System Identification

Enter the global configuration mode, and use the system name command to

specify a new system name. Return to the Exec mode, and use the show system

command to display the changes to the system identification settings.

Enterprise AP#config 139 Enter configuration commands, one per line. Enterprise AP(config)#system name R&D Enterprise AP(config)#end 139 Enterprise AP#show system 153

System Information ============================================================== Serial Number : 0000000000 System Up time : 2 days, 4 hours, 33 minutes, 38 seconds System Name : R&D System Location : System Contact : Contact System Country Code System Country Code Radio G MAC Address : 00-12-CF-12-34-95 IP Address : 192.168.1.2 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.1.254 VLAN State : DISABLED Management VLAN ID(AP): 1 IAPP State : ENABLED DHCP Client : DISABLED HTTP Server : ENABLED HTTP Server Port : 80 HTTP Session Timeout : 300 sec(s) HTTPS Server : ENABLED HTTPS Server Port : 443 Slot Status : 802.11g only Boot Rom Version : v2.1.6 Software Version : v4.3.3.8b02 SSH Server : ENABLED SSH Server Port : 22 Telnet Server : ENABLED DHCP Relay : DISABLED ==============================================================

146

Enterprise AP#

4.4.2 TCP / IP Settings

Configuring the AP with an IP address expands your ability to manage the AP. A

number of features depend on IP addressing to operate.

NOTE

You can use the web browser interface to access IP addressing only if the AP already has an IP address that is accessible through your network.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 49

Chapter 4 - System Configuration

By default, the AP is automatically configured with IP settings from a Dynamic

Host Configuration Protocol (DHCP) server. However, if you are not using a DHCP

server to configure IP addressing, use the CLI to manually configure the initial IP

values (see page 38). Once you have network access to the AP, you can use the

web browser interface to modify the initial IP configuration, if necessary.

NOTE

If there is no DHCP server on your network, or DHCP fails, the AP will automatically start up with a default IP address of 192.168.1.1.

Figure 4-3: TCP/IP Settings

DHCP Client (Enable) – Select this option to obtain the IP settings for the AP from a

DHCP (Dynamic Host Configuration Protocol) server. The IP address, subnet

mask, default gateway, and Domain Name Server (DNS) address are dynamically

assigned to the AP by the network DHCP server. (Default: Enabled)

DHCP Client (Disable) – Select this option to manually configure a static address

for the AP.

 IP Address: The IP address of the AP. Valid IP addresses consist of four

decimal numbers, 0 to 255, separated by periods.

 Subnet Mask: The mask that identifies the host address bits used for routing

to specific subnets.

50 Operation

Advanced Configuration

 Default Gateway: The default gateway is the IP address of the router for the

AP, which is used if the requested destination address is not on the local

subnet.

If you have management stations, DNS, RADIUS, or other network servers

located on another subnet, type the IP address of the default gateway router in

the text field provided. Otherwise, leave the address as all zeros (0.0.0.0).

 Primary and Secondary DNS Address: The IP address of Domain Name Servers

on the network. A DNS maps numerical IP addresses to domain names and

can be used to identify network hosts by familiar names instead of the IP

addresses.

If you have one or more DNS servers located on the local network, type the IP

addresses in the text fields provided. Otherwise, leave the addresses as all

zeros (0.0.0.0).

4.4.2.0.1 CLI Commands for TCP/IP Settings

From the global configuration mode, enter the interface configuration mode with

the interface ethernet command. Use the ip dhcp command to enable the DHCP

client, or no ip dhcp to disable it. To manually configure an address, specify the

new IP address, subnet mask, and default gateway using the ip address

command. To specify DNS server addresses use the dns server command and use

the show interface ethernet command from the Exec mode to display the

current IP settings.

Enterprise AP(config)#interface ethernet 209 Enter Ethernet configuration commands, one per line. Enterprise AP(if-ethernet)#no ip dhcp Enterprise AP(if-ethernet)#ip address 192.168.1.2

255.255.255.0 192.168.1.253 Enterprise AP(if-ethernet)#dns primary-server 192.168.1.55 209 Enterprise AP(if-ethernet)#dns secondary-server 10.1.0.55 209 Enterprise AP(config)#end 139 Enterprise AP#show interface ethernet 212 Ethernet Interface Information ======================================== IP Address : 192.168.1.2 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.1.253 Primary DNS : 192.168.1.55 Secondary DNS : 10.1.0.55 Admin status : Up Operational status : Up ======================================== Enterprise AP#

211

210

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 51

Chapter 4 - System Configuration

4.4.3 RADIUS

Remote Authentication Dial-in User Service (RADIUS) is an authentication

protocol that uses software running on a central server to control access to

RADIUS-aware devices on the network. An authentication server contains a

database of user credentials for each user that requires access to the network.

A primary RADIUS server must be specified for the AP to implement IEEE 802.1X

network access control and WiFi Protected Access (WPA) wireless security. A

secondary RADIUS server may also be specified as a backup should the primary

server fail or become inaccessible.

In addition, the configured RADIUS server can also act as a RADIUS Accounting

server and receive user-session accounting information from the AP. RADIUS

Accounting can be used to provide valuable information on user activity in the

network.

NOTE

This manual assumes that you have already configured RADIUS server(s) to support the AP. Configuration of RADIUS server software is beyond the scope of this manul, refer to the documentation provided with the RADIUS server software.

52 Operation

Advanced Configuration

Figure 4-4: RADIUS

MAC Address Format – MAC addresses can be specified in one of four formats,

using no delimiter, with a single dash delimiter, with multiple dash delimiters,

and with multiple colon delimiters.

VLAN ID Format – A VLAN ID (a number between 1 and 4094) can be assigned to

each client after successful authentication using IEEE 802.1X and a central

RADIUS server. The user VLAN IDs must be configured on the RADIUS server for

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 53

Chapter 4 - System Configuration

each user authorized to access the network. VLAN IDs can be entered as

hexadecimal numbers or as ASCII strings.

Primary Radius Server Setup – Configure the following settings to use RADIUS

authentication on the AP.

 Radius Status: Enabling Radius Status allows the settings of RADIUS

authentication. (Default: Enable)

 IP Address: Specifies the IP address or host name of the RADIUS server.

 Port: The UDP port number used by the RADIUS server for authentication

messages. (Range: 1024-65535; Default: 1812)

 Key: A shared text string used to encrypt messages between the AP and the

RADIUS server. Be sure that the same text string is specified on the RADIUS

server. Do not use blank spaces in the string. (Maximum length: 255

characters)

 Timeout: Number of seconds the AP waits for a reply from the RADIUS server

before resending a request. (Range: 1-60 seconds; Default: 5)

 Retransmit attempts: The number of times the AP tries to resend a request to

the RADIUS server before authentication fails. (Range: 1-30; Default: 3)

 Accounting Port: The RADIUS Accounting server UDP port used for accounting

messages. (Range: 0 or 1024-65535; Default: 0, disabled)

 Interim Update Timeout: The interval between transmitting accounting updates

to the RADIUS server. (Range: 60-86400; Default: 3600 seconds)

NOTE

For the Timeout and Retransmit attempts fields, accept the default values unless you experience problems connecting to the RADIUS server over the network.

Secondary Radius Server Setup – Configure a secondary RADIUS server to provide

a backup in case the primary server fails. The AP uses the secondary server if the

primary server fails or becomes inaccessible. Once the AP switches over to the

secondary server, it periodically attempts to establish communication again with

primary server. If communication with the primary server is re-established, the

secondary server reverts to a backup role.

54 Operation

Advanced Configuration

4.4.3.0.1 CLI Commands for RADIUS

From the global configuration mode, use the radius-server address command to

specify the address of the primary or secondary RADIUS servers. (The following

example configures the settings for the primary RADIUS server.) Configure the

other parameters for the RADIUS server. Then use the show radius command

from the Exec mode to display the current settings for the primary and secondary

RADIUS servers.

Enterprise AP(config)#radius-server address 192.168.1.25 189 Enterprise AP(config)#radius-server port 181 190 Enterprise AP(config)#radius-server key green 190 Enterprise AP(config)#radius-server timeout 10 191 Enterprise AP(config)#radius-server retransmit 5 190 Enterprise AP(config)#radius-server port-accounting 1813 191 Enterprise AP(config)#radius-server timeout-interim 500 192 Enterprise AP(config)#exit Enterprise AP#show radius 193

Radius Server Information ======================================== IP : 192.168.1.25 Port : 181 Key : ***** Retransmit : 5 Timeout : 10 Radius MAC format : no-delimiter Radius VLAN format : HEX ========================================

Radius Secondary Server Information ======================================== IP : 0.0.0.0 Port : 1812 Key : ***** Retransmit : 3 Timeout : 5 Radius MAC format : no-delimiter Radius VLAN format : HEX ======================================== Enterprise AP#

4.4.4 SSH Settings

Telnet is a remote management tool that can be used to configure the AP from

anywhere in the network. However, Telnet is not secure from hostile attacks. The

Secure Shell (SSH) can act as a secure replacement for Telnet. The SSH protocol

uses generated public keys to encrypt all data transfers passing between the AP

and SSH-enabled management station clients and ensures that data traveling

over the network arrives unaltered. Clients can then securely use the local user

name and password for access authentication.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 55

Chapter 4 - System Configuration

SSH client software needs to be installed on the management station to access the

AP for management via the SSH protocol.

NOTE



The AP supports only SSH version 2.0.

 After boot up, the SSH server needs about two minutes to generate host encryption keys. The

SSH server is disabled while the keys are being generated.

Figure 4-5: SSH Settings

4.4.4.1 SSH Settings

Telnet Server Status – Enables or disables the Telnet server. (Default: Enabled)

SSH Server Status – Enables or disables the SSH server. (Default: Enabled)

SSH Server Port – Sets the UDP port for the SSH server. (Range: 1-65535;

Default: 22)

4.4.4.1.1 CLI Commands for SSH

To enable the SSH server, use the ip ssh-server enable command from the CLI

Ethernet interface configuration mode. To set the SSH server UDP port, use the ip

ssh-server port command. To view the current settings, use the show system

command from the CLI Exec mode (not shown in the following example).

Enterprise AP(if-ethernet)#no ip telnet-server 148 Enterprise AP(if-ethernet)#ip ssh-server enable 147 Enterprise AP(if-ethernet)#ip ssh-server port 1124 148 Enterprise AP(if-ethernet)#exit Enterprise AP(config)#

56 Operation

4.4.5 Authentication

Wireless clients can be authenticated for network access by checking their MAC

address against the local database configured on the AP, or by using a database

configured on a central RADIUS server. Alternatively, authentication can be

implemented using the IEEE 802.1X network access control protocol.

A client’s MAC address provides relatively weak user authentication, since MAC

addresses can be easily captured and used by another station to break into the

network. Using 802.1X provides more robust user authentication using user

names and passwords or digital certificates. You can configure the access point to

use both MAC address and 802.1X authentication, with client station MAC

authentication occurring prior to IEEE 802.1X authentication. However, it is

better to choose one or the other, as appropriate.

Take note of the following points before configuring MAC address or 802.1X

authentication:

Advanced Configuration

 Use MAC address authentication for a small network with a limited number of

users. MAC addresses can be manually configured on the AP itself without the

need to set up a RADIUS server, but managing a large number of MAC

addresses across many APs is very cumbersome. A RADIUS server can be used

to centrally manage a larger database of user MAC addresses.

 Use IEEE 802.1X authentication for networks with a larger number of users

and where security is the most important issue. When using 802.1X

authentication, a RADIUS server is required in the wired network to centrally

manage the credentials of the wireless clients. It also provides a mechanism

for enhanced network security using dynamic encryption key rotation or WiFi

Protected Access (WPA).

NOTE

If you configure RADIUS MAC authentication together with 802.1X, RADIUS MAC address authentication is performed prior to 802.1X authentication. If RADIUS MAC authentication succeeds, then 802.1X authentication is performed. If RADIUS MAC authentication fails, 802.1X authentication is not performed.

 The AP can also operate in a 802.1X supplicant mode. This enables the AP

itself to be authenticated with a RADIUS server using a configured MD5 user

name and password. This prevents rogue APs from gaining access to the

network.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 57

Chapter 4 - System Configuration

Figure 4-6: Authentication

MAC Authentication – You can configure a list of the MAC addresses for wireless

clients that are authorized to access the network. This provides a basic level of

authentication for wireless clients attempting to gain access to the network. A

database of authorized MAC addresses can be stored locally on the AP or remotely

on a central RADIUS server. (Default: Disabled)

 Disabled: No checks are performed on an associating station’s MAC address.

 Local MAC: The MAC address of the associating station is compared against

the local database stored on the AP. Use the Local MAC Authentication section

of this web page to set up the local database, and configure all APs in the

wireless network service area with the same MAC address database.

 Radius MAC: The MAC address of the associating station is sent to a

configured RADIUS server for authentication. When using a RADIUS

authentication server for MAC address authentication, the server must first be

configured in the Radius window (see “RADIUS” on page 52). The database of

MAC addresses and filtering policy must be defined in the RADIUS server.

58 Operation

Advanced Configuration

NOTE

MAC addresses on the RADIUS server can be entered in four different formats (see “RADIUS”

on page 52

802.1X Supplicant – The AP can also operate in a 802.1X supplicant mode. This

enables the access point itself to be authenticated with a RADIUS server using a

configured MD5 user name and password. This prevents rogue APs from gaining

access to the network.

Local MAC Authentication – Configures the local MAC authentication database.

The MAC database provides a mechanism to take certain actions based on a

wireless client’s MAC address. The MAC list can be configured to allow or deny

network access to specific clients.

 System Default: Specifies a default action for all unknown MAC addresses

(that is, those not listed in the local MAC database).

 Deny: Blocks access for all MAC addresses except those listed in the local

database as “Allow.”

 Allow: Permits access for all MAC addresses except those listed in the local

database as “Deny.”

 MAC Authentication Settings: Enters specified MAC addresses and permissions

into the local MAC database.

 MAC Address: Physical address of a client. Enter six pairs of hexadecimal

digits separated by hyphens; for example, 00-90-D1-12-AB-89.

 Permission: Select Allow to permit access or Deny to block access. If Delete

is selected, the specified MAC address entry is removed from the database.

 Update: Enters the specified MAC address and permission setting into the

local database.

 MAC Authentication Table: Displays current entries in the local MAC database.

4.4.5.0.1 CLI Commands for Local MAC Authentication

Use the mac-authentication server command from the global configuration

mode to enable local MAC authentication. Use the mac-authentication

session-timeout command to set the authentication interval to enable web-based

authentication for service billing. Set the default action for MAC addresses not in

the local table using the address filter default command, then enter MAC

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 59

Chapter 4 - System Configuration

addresses in the local table using the address filter entry command. To remove

an entry from the table, use the address filter delete command. To display the

current settings, use the show authentication command from the Exec mode.

Enterprise AP(config)#mac-authentication server local 200 Enterprise AP(config)#mac-authentication session-timeout 5 200 Enterprise AP(config)#address filter default denied 198 Enterprise AP(config)#address filter entry 00-70-50-cc-99-1a denied 199 Enterprise AP(config)#address filter entry 00-70-50-cc-99-1b allowed Enterprise AP(config)#address filter entry 00-70-50-cc-99-1c allowed Enterprise AP(config)#address filter delete 00-70-50-cc-99-1c Enterprise AP(config)#exit Enterprise AP#show authentication

Authentication Information =========================================================== MAC Authentication Server : LOCAL MAC Auth Session Timeout Value : 0 min

802.1x supplicant : DISABLED

802.1x supplicant user : EMPTY

802.1x supplicant password : EMPTY Address Filtering : DENIED

199

197

System Default : ALLOW addresses not found in filter table. Filter Table

MAC Address Status

----------------- ---------00-70-50-cc-99-1a DENIED 00-70-50-cc-99-1b ALLOWED ========================================================= Enterprise AP#

4.4.5.0.2 CLI Commands for RADIUS MAC Authentication

Use the mac-authentication server command from the global configuration

mode to enable remote MAC authentication. Set the timeout value for

re-authentication using the mac- authentication session-timeout command. Be

sure to also configure connection settings for the RADIUS server (not shown in the

following example). To display the current settings, use the show authentication

command from the Exec mode.

60 Operation

Advanced Configuration

Enterprise AP(config)#mac-authentication server remote 200 Enterprise AP(config)#mac-authentication session-timeout 300 200 Enterprise AP(config)#exit Enterprise AP#show authentication 197

Authentication Information =========================================================== MAC Authentication Server : REMOTE MAC Auth Session Timeout Value : 300 min

802.1x supplicant : DISABLED

802.1x supplicant user : EMPTY

802.1x supplicant password : EMPTY Address Filtering : DENIED

System Default : DENY addresses not found in filter table. Filter Table

MAC Address Status

----------------- ---------00-70-50-cc-99-1a DENIED 00-70-50-cc-99-1b ALLOWED ========================================================= Enterprise AP#

4.4.5.0.3 CLI Command for 802.1x Supplicant

To configure the AP to operate as a 802.1X supplicant, first use the 802.1X

supplicant user command to set a user name and password for the AP, then use

the 802.1X supplicant command to enable the feature. To display the current

settings, use the show authentication command from the Exec mode (not shown

in the following example)

Enterprise AP(config)#802.1X supplicant user secureAP dot1xpass Enterprise AP(config)#802.1X supplicant 196 Enterprise AP(config)#

196

4.4.6 Filter Control

The AP can employ network traffic frame filtering to control access to network

resources and increase security. You can prevent communications between

wireless clients and prevent AP management from wireless clients. You can also

block specific Ethernet traffic from being forwarded by the AP.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 61

Chapter 4 - System Configuration

Figure 4-7: Filter Control

Inter Client STAs Communication Filter – Sets the global mode for

wireless-to-wireless communications between clients associated to Virtual AP

(VAP) interfaces on the AP. (Default: Disabled)

 Disabled: All clients can communicate with each other through the access

point.

 Prevent Intra VAP client communication: When enabled, clients associated with

a specific VAP interface cannot establish wireless communications with each

other. Clients can communicate with clients associated to other VAP

interfaces.

 Prevent Inter and Intra VAP client communication: When enabled, clients cannot

establish wireless communications with any other client, either those

associated to the same VAP interface or any other VAP interface.

AP Management Filter – Controls management access to the AP from wireless

clients. Management interfaces include the web, Telnet, or SNMP.

(Default: Enabled)

62 Operation

Advanced Configuration

 Disabled: Allows management access from wireless clients.

 Enabled: Blocks management access from wireless clients.

Uplink Port MAC Address Filtering Status – Prevents traffic with specified source

MAC addresses from being forwarded to wireless clients through the AP. You can

add a maximum of four MAC addresses to the filter table. (Default: Disabled)

 MAC Address: Specifies a MAC address to filter, in the form xx-xx-xx-xx-xx-xx.

 Permission: Adds or deletes a MAC address from the filtering table.

Ethernet Type Filter – Controls checks on the Ethernet type of all incoming and

outgoing Ethernet packets against the protocol filtering table. (Default: Disabled)

 Disabled: AP does not filter Ethernet protocol types.

 Enabled: AP filters Ethernet protocol types based on the configuration of

protocol types in the filter table. If the status of a protocol is set to ON, the

protocol is filtered from the AP.

NOTE

Ethernet protocol types not listed in the filtering table are always forwarded by the AP.

Ethernet Type Filter – Enables or disables Ethernet filtering on the port. (Default:

Disabled)

4.4.6.0.1 CLI Commands for Bridge Filtering

Use the filter local-bridge command from the global configuration mode to

prevent wireless-to-wireless communications through the AP. Use the filter

ap-manage command to restrict management access from wireless clients. To

configure Ethernet protocol filtering, use the filter ethernet-type enable

command to enable filtering and the filter ethernet-type protocol command to

define the protocols that you want to filter. To remove an entry from the table, use

the address filter delete command. To display the current settings, use the show

filters command from the Exec mode.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 63

Chapter 4 - System Configuration

Enterprise AP(config)#filter local-bridge 203 Enterprise AP(config)#filter ap-manage 203 Enterprise AP(config)#filter uplink enable 203 Enterprise AP(config)#filter uplink add 00-12-34-56-78-9a 204 Enterprise AP(config)#filter ethernet-type enable 204 Enterprise AP(config)#filter ethernet-type protocol ARP 205 Enterprise AP(config)#exit Enterprise AP#show filters 206

Protocol Filter Information ========================================================= Local Bridge :ENABLED AP Management :ENABLED Ethernet Type Filter :ENABLED

Enabled Protocol Filters

--------------------------------------------------------Protocol: ARP ISO: 0x0806 ========================================================= Enterprise AP#

4.4.7 VLAN

The AP can employ VLAN tagging support to control access to network resources

and increase security. VLANs separate traffic passing between the AP, associated

clients, and the wired network. There can be a VLAN assigned to each associated

client, a default VLAN for each VAP (Virtual Access Point) interface, and a

management VLAN for the AP.

Note the following points about the AP’s VLAN support:

 The management VLAN is for managing the AP through remote management

tools, such as the web interface, SSH, SNMP, or Telnet. The AP only accepts

management traffic that is tagged with the specified management VLAN ID.

 All wireless clients associated to the AP are assigned to a VLAN. If IEEE

802.1X is being used to authenticate wireless clients, specific VLAN IDs can be

configured on the RADIUS server to be assigned to each client. If a client is not

assigned to a specific VLAN or if 802.1X is not used, the client is assigned to

the default VLAN for the VAP interface with which it is associated. The AP only

allows traffic tagged with assigned VLAN IDs or default VLAN IDs to access

clients associated on each VAP interface.

 When VLAN support is enabled on the AP, traffic passed to the wired network

is tagged with the appropriate VLAN ID, either an assigned client VLAN ID,

default VLAN ID, or the management VLAN ID. Traffic received from the wired

network must also be tagged with one of these known VLAN IDs. Received

traffic that has an unknown VLAN ID or no VLAN tag is dropped.

64 Operation

Advanced Configuration

 When VLAN support is disabled, the AP does not tag traffic passed to the wired

network and ignores the VLAN tags on any received frames.

NOTE

Before enabling VLAN tagging on the AP, be sure to configure the backhaul system to support tagged VLAN frames from the AP’s management VLAN ID, default VLAN IDs, and other client VLAN IDs. Otherwise, connectivity to the AP will be lost when you enable the VLAN feature.

Using IEEE 802.1X and a central RADIUS server, up to 64 VLAN IDs can be

mapped to specific wireless clients, allowing users to remain within the same

VLAN as they move around a campus site. This feature can also be used to control

access to network resources from clients, thereby improving security.

A VLAN ID (1-4094) can be assigned to a client after successful IEEE 802.1X

authentication. The client VLAN IDs must be configured on the RADIUS server for

each user authorized to access the network. If a client does not have a configured

VLAN ID on the RADIUS server, the AP assigns the client to the configured default

VLAN ID for the VAP interface.

NOTE

When using IEEE 802.1X to dynamically assign VLAN IDs, the AP must have 802.1X authentication enabled and a RADIUS server configured. Wireless clients must also support 802.1X client software.

When setting up VLAN IDs for each user on the RADIUS server, be sure to use the

RADIUS attributes and values as indicated Table 4-2.

Table 4-2: RADIUS Attributes

Number RADIUS Attribute Value

64 Tunnel-Type VLAN (13) 65 Tunnel-Medium-Type 802 81 Tunnel-Private-Group-ID VLANID

(1 to 4094 as hexadecimal or string)

VLAN IDs on the RADIUS server can be entered as hexadecimal digits or a string

(see “radius-server vlan-format” on page 193).

NOTE

The specific configuration of RADIUS server software is beyond the scope of this manual. Refer to the documentation provided with the RADIUS server software.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 65

Chapter 4 - System Configuration

VLAN Classification – Enables or disables VLAN tagging support on the AP.

Native VLAN ID – The VLAN ID that traffic must have to be able to manage the AP.

(Range 1-4094; Default: 1)

Figure 4-8: VLAN Configuration

4.4.8 WDS Settings

WDS Settings is not applicable for the current release.

4.4.9 AP Management

The Web, Telnet, and SNMP management interfaces are enabled and open to all IP

addresses by default. To provide more security for management access to the AP,

specific interfaces can be disabled and management restricted to a single IP

address or a limited range of IP addresses.

Once you specify an IP address or range of addresses, access to management

interfaces is restricted to the specified addresses. If anyone tries to access a

management interface from an unauthorized address, the AP will reject the

connection.

66 Operation

Advanced Configuration

Figure 4-9: AP Management

UI Management – Enables or disables management access through Telnet, the

Web (HTTP), or SNMP interfaces. (Default: Enabled)

NOTE

Secure Web (HTTPS) connections are not affected by the UI Management or IP Management settings.

IP Management – Restricts management access to Telnet, Web, and SNMP

interfaces to specified IP addresses. (Default: Any IP)

 Any IP: Indicates that any IP address is allowed management access.

 Single IP: Specifies a single IP address that is allowed management access.

 Multiple IP: Specifies an address range as defined by the entered IP address

and subnet mask. For example, IP address 192.168.1.6 and subnet mask

255.255.255.0, defines all IP addresses from 192.168.1.6 to 192.168.1.254.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 67

Chapter 4 - System Configuration

4.4.9.0.1 CLI Commands for AP Management features.

Enterprise AP(config)#apmgmtip multiple 192.168.1.6 255.255.255.0 151 Enterprise AP(config)#apmgmtui SNMP enable 152

4.4.10 Administration

4.4.10.1 Changing the Password

Management access to the web and CLI interface on the AP is controlled through a

single user name and password. You can also gain additional access security by

using control filters (see “Filter Control” on page 61).

To protect access to the management interface, you need to change the default

user name and password as soon as possible. If the user name and password are

not changed, anyone having access to the AP can compromise AP and network

security. Once a new administrator has been configured, you can delete the

default admin user name from the system.

Figure 4-10: Administration

Username – The name of the user. The default name is admin. (Length: 3-16

characters, case sensitive)

New Password – The password for management access. (Length: 3-16 characters,

case sensitive)

Confirm New Password – Enter the password again for verification.

4.4.10.1.1 CLI Commands for Changing User Name and Password

Use the username and password commands from the CLI configuration mode.

Enterprise AP(config)#username bob 146 Enterprise AP(config)#password admin 147 Enterprise AP#

68 Operation

4.4.10.2 Setting the Timeout Interval

You can set the timeout interval for web access to the unit, after which the user

will have to re-enter the username and password.

Figure 4-11: Session Timeout for WEB

Session Timeout for WEB: Sets the time limit for an idle web interface session.

(Range: 0-1800 seconds; Default: 300 seconds; 0 is disabled)

4.4.10.2.1 CLI Command for the Web Session Timeout

Use the ip http session-timeout command from the CLI configuration mode.

Advanced Configuration

Enterprise AP(config)#ip http session-timeout 0 149 Enterprise AP(config)#

4.4.10.3 Upgrading Firmware

You can upgrade new AP software from a local file on the management

workstation, or from an FTP or TFTP server. New software may be provided

periodically from your distributor.

After upgrading new software, you must reboot the AP to implement the new code.

Until a reboot occurs, the AP will continue to run the software it was using before

the upgrade started. Also note that new software that is incompatible with the

current configuration automatically restores the AP to the factory default settings

when first activated after a reboot.

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 69

Chapter 4 - System Configuration

Figure 4-12: Firmware Upgrade

Before upgrading new software, verify that the AP is connected to the network and

has been configured with a compatible IP address and subnet mask.

If you need to download from an FTP or TFTP server, take the following additional

steps:

 Obtain the IP address of the FTP or TFTP server where the AP software is

stored.

 If upgrading from an FTP server, be sure that you have an account configured

on the server with a user name and password.

 If VLANs are configured on the AP, determine the VLAN ID with which the FTP

or TFTP server is associated, and then configure the management station, or

the network port to which it is attached, with the same VLAN ID. If you are

70 Operation

Advanced Configuration

managing the AP from a wireless client, the VLAN ID for the wireless client

must be configured on a RADIUS server.

Current version – Version number of runtime code.

Firmware Upgrade Local – Downloads an operation code image file from the web

management station to the AP using HTTP. Use the Browse button to locate the

image file locally on the management station and click Start Upgrade to proceed.

 New firmware file: Specifies the name of the code file on the server. The new

firmware file name should not contain slashes (\ or /), the leading letter of the

file name should not be a period (.), and the maximum length for file names is

32 characters for files on the access point. (Valid characters: A-Z, a-z, 0-9, “.”,

“-”, “_”)

Firmware Upgrade Remote – Downloads an operation code image file from a

specified remote FTP or TFTP server. After filling in the following fields, click Start

Upgrade to proceed.

 New firmware file: Specifies the name of the code file on the server.

firmware file name should not contain slashes (\ or /),

the leading letter of the

The new

file name should not be a period (.), and the maximum length for file names on

the FTP/TFTP server is 255 characters or 32 characters for files on the access

point. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”)

 IP Address: IP address or host name of FTP or TFTP server.

 Username: The user ID used for login on an FTP server.

 Password: The password used for login on an FTP server.

Configuration File Backup/Restore – Uploads the current AP configuration file to a

specified remote FTP or TFTP server. A configuration file can also be downloaded

to the AP to restore a specific configuration.

 Export/Import: Select Export to upload a file to an FTP/TFTP server. Select

Import to download a file from an FTP/TFTP server.

 Config file: Specifies the name of the configuration file, which must always be

"syscfg." A path on the server can be specified using “/” in the name, providing

the path already exists; for example, “myfolder/syscfg.” Other than to indicate

a path, the file name must not contain any slashes (\ or /), the leading letter

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 71

Chapter 4 - System Configuration

cannot be a period (.), and the maximum length for file names on the

FTP/TFTP server is 255 characters. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”)

 IP Address: IP address or host name of FTP or TFTP server.

 Username: The user ID used for login on an FTP server.

 Password: The password used for login on an FTP server.

Restore Factory Settings – Click the Restore button to reset the configuration

settings for the AP to the factory defaults and reboot the system. Note that all user

configured information will be lost. You will have to re-enter the default user name

(admin) to re-gain management access to this device.

Reboot Access Point – Click the Reset button to reboot the system.

NOTE

If you have upgraded system software, then you must reboot the AP to implement the new operation code. New software that is incompatible with the current configuration automatically restores the AP to default values when first activated after a reboot.

Upon uploading a new configuration file you will be prompted to either restore

factory settings, or reboot the unit.

Figure 4-13: New Configuration Warning

72 Operation

Advanced Configuration

4.4.10.3.1 CLI Commands for Downloading Software from a TFTP Server

Use the copy tftp file command from the Exec mode and then specify the file

type, name, and IP address of the TFTP server. When the download is complete,

the dir command can be used to check that the new file is present in the AP file

system. To run the new software, use the reset board command to reboot the AP.

Enterprise AP#copy tftp file 185

1. Application image

2. Config file

3. Boot block image Select the type of download<1,2,3>: [1]:1 TFTP Source file name:img.bin TFTP Server IP:192.168.1.19

Enterprise AP#dir File Name Type File Size

-------------------------- ---- ----------dflt-img.bin 2 1319939 img.bin 2 1629577 syscfg 5 17776 syscfg_bak 5 17776

262144 byte(s) available

Enterprise AP#reset board Reboot system now? <y/n>: y

187

141

BreezeMAX Wi² and BreezeACCESS Wi² System Manual 73

Chapter 4 - System Configuration

4.4.11 System Log

The AP can be configured to send event and error messages to a System Log

Server. The system clock can also be synchronized with a time server, so that all

the messages sent to the Syslog server are stamped with the correct time and

date.

Figure 4-14: System Log

4.4.11.1 Enabling System Logging

The AP supports a logging process that can control error messages saved to

memory or sent to a Syslog server. The logged messages serve as a valuable tool

for isolating AP and network problems.

System Log Setup – Enables the logging of error messages. (Default: Disable)

Server (1-4) – Enables the sending of log messages to a Syslog server host. Up to

four Syslog servers are supported on the AP. (Default: Disable)

Server Name/IP – The IP address or name of a Syslog server. (Default: 0.0.0.0)

UDP Port – The UDP port used by a Syslog server. (Range: 514 or 11024-65535;

Default: 514)

Logging Console – Enables the logging of error messages to the console.

(Default: Disable)

74 Operation

Alvarion 214486 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Compliances

About This Manual

Table of Contents

Chapter 1 - Product Description

1.1 Introduction

1.2 Specifications

1.2.1 Radio

1.2.2 Sensitivity

1.2.3 8 dBi Omni Antenna

1.2.4 Configuration and Management

1.2.5 Mechanical

1.2.6 Electrical

1.2.7 Connectors and LEDs

1.2.8 Environmental

1.2.9 Standards Compliance

Chapter 2 - Hardware Installation

2.1 Hardware Description

2.1.1 Bottom Panel

2.1.2 Top Panel

2.1.3 LED Indicators

2.2 Installation Requirements

2.2.1 Packing List

2.2.2 Additional/Optional Installation Requirements

2.3 Installation

2.3.1 Attaching the SU-ODU to the Mounting Plate

2.3.3.1 Connecting to BreezeMAX PRO-S ODU

2.3.3.2 Adapting the Ethernet Cable for Connecting to BreezeACCESS SU-ODU

2.3.3.3 Connecting to BreezeACCESS ODU with HW Revision E

2.3.3.4 Connecting to BreezeACCESS ODU with HW Revision D or Lower

2.3.4 Preparing the Power Cable

2.3.6 Connecting the Antenna(s)

2.3.7 Connecting the Grounding Cables

2.3.8 Connecting to Power Source

2.3.9 Configuration and Testing

2.3.9.1 Configuring the SU-ODU

Chapter 3 - Initial Configuration

3.1 Introduction

3.2 Initial Setup through the CLI

3.2.1 Configuration via Telnet

3.2.2 Configuration via Console

3.2.3 Initial Configuration Steps

3.3 Logging In

Chapter 4 - System Configuration

4.1 Introduction

4.2 BreezeMAX Backhauling Configuration

4.3 BreezeACCESS Backhauling Configuration

4.4 Advanced Configuration

4.4.1 System Identification

4.4.1.0.1 CLI Commands for System Identification

4.4.2 TCP / IP Settings

4.4.2.0.1 CLI Commands for TCP/IP Settings

4.4.3 RADIUS

4.4.3.0.1 CLI Commands for RADIUS

4.4.4 SSH Settings

4.4.4.1 SSH Settings

4.4.4.1.1 CLI Commands for SSH

4.4.5 Authentication

4.4.5.0.1 CLI Commands for Local MAC Authentication

4.4.5.0.2 CLI Commands for RADIUS MAC Authentication

4.4.5.0.3 CLI Command for 802.1x Supplicant

4.4.6 Filter Control

4.4.6.0.1 CLI Commands for Bridge Filtering

4.4.7 VLAN

4.4.8 WDS Settings

4.4.9 AP Management

4.4.9.0.1 CLI Commands for AP Management features.

4.4.10 Administration

4.4.10.1 Changing the Password

4.4.10.1.1 CLI Commands for Changing User Name and Password

4.4.10.2 Setting the Timeout Interval

4.4.10.2.1 CLI Command for the Web Session Timeout

4.4.10.3 Upgrading Firmware

4.4.10.3.1 CLI Commands for Downloading Software from a TFTP Server

4.4.11 System Log

4.4.11.1 Enabling System Logging