AvaLAN Wireless AW900FS User Manual

AvaLAN
WIRELESS
High
Security
Supplement
User Manual Supplement
forAvaLAN Wireless Radios
with FIPS 140-2 Security
Industrial-grade, long-range wireless Ethernet systems
USER’S MANUAL
High Security Supplement
If you have an AvaLAN radio with FIPS 140-2 Security, this supplement to the User Manual provides instructions for setting up the encryption. Please disregard the AES Encryption instructions in the regular manual: This supercedes them. A feature of the level of security provided is that there is no way to change the encryption method or key through the radio's interface. A separate port must be used.
To program the encryption characteristics of your AvaLAN radio, a PC must be connected to the USB port on the side of the case:
User’s Manual
The PC must have two critical pieces of software installed:
1. A driver that provides a virtual COM port through the USB connection. Such a driver is already included with Windows XP, Vista or 7 and should automatically be located and loaded when the
USB connection is rst made.
2. A Crypto Module Interface utility that can be downloaded from our website, www.avalanwireless.
com. Look for it on the Downloads page under the Support tab. The le is a zip archive containing an installer for the utility. Unzip and run it to install the utility on your PC.
If you prefer to use a computer with a non-Windows operating system, it is also possible to program the module with a virtual COM port driver and a generic terminal emulator. Contact AvaLAN Technical Support for help with this feature.
The person having access to the programming interface is referred to by the FIPS 140-2 Standard as
the Crypto Ocer. As the Crypto Ocder, part of the responsibility for data security rests with your
choice of a strong login password and encryption key. You should program the encryption modules in both radios of your wireless link at the same time and on the bench prior to deployment. (This is much more convenient than climbing a pole with a laptop strapped around your neck.) Make sure you do not lose the login password and encryption key because they cannot be retrieved from the modules in any fashion.
Technical Support (650) 384-0000
PAGE 2
www.avalanwireless.com
High Security Supplement
User’s Manual
Step by step programming procedure:
1. Turn o the power for the radio and connect the AW140 module's USB port to your computer using a USB mini
B cable.
2. Run the Crypto Module Interface utility on your PC. You should see a startup window like this, with everything greyed out except the Connect button and a dropdown list of COM ports. Usually there will be just one. If there are more, repeat Step 1 to determine which COM port applies to this radio by seeing it disappear and reappear in the list.
3. Choose the correct COM port and press the Connect button. The utility window will then show a successful connection by activating the Login and Reset choices and displaying "Module Connected" in the status box.
4. If you know the Crypto Ocer password and want to change the encryption key,
choose Login. if you are initializing the module for the rst time or wish to reset
both the password and key, choose Reset. After a warning popup, you will be able
to enter a new Crypto Ocer password. This must be between 8 and 32 characters
and may include letters, numbers and symbols and is case-dependent. If you forget the password, there is no way to retrieve it. You will need to reset the module and begin again. If you know the password and have logged in, you may change it by clicking "Change Password."
5. Next, you will be provided with a popup to enter the encryption key and method
(128, 192 or 256-bit). (You will be forced here if you are resetting, or can choose
"Input Key" after logging in. The encryption key is a hexadecimal number, 32 digits
for 128-bit encryption, 48 digits for 192-bit and 64 digits for 256-bit. Enter the digits as 0 - 9 and a - f or A - F (case independent). If you enter fewer than the specied number of digits (not recommended), the remainder will be padded with zeros.
6. Once the encryption module has been programmed, you may login to access the other features. "Self Test
Results" will simply display "Self Test Passed" in the status box. If it does not, contact AvaLAN Technical Support. Module Firmware Version displays that information in the status box and may be
useful to the aforementioned AvaLAN Technical Support sta.
7. When you are nished with the conguration of the encryption module, disconnect
the USB cable.
Technical Support (650) 384-0000
PAGE 3
www.avalanwireless.com
AvaLAN
WIRELESS
900 MHz Industrial Wireless Ethernet Radios
Industrial-grade, long-range wireless Ethernet systems
AW900FS
USER’S MANUAL
AW900FS
Thank you for your purchase of the AW900FS Indoor Wireless Ethernet Radio.
The AW900FS includes: (1) AW900FS radio in extruded aluminum box (1) AW2-900 2.5dBi omnidirectional antenna
(1) AW-12VPS 12 VDC Power Supply (USA plug only) (1) USB Cable
TABLE OF CONTENTS
Quick Start Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Operational Summary Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Physical Setup Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Digital Setup Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
LCD Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Technical Specications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Radio Status Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Antenna Alignment Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Transmitter to Reciever Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Abbreviation Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
User’s Manual
Professional installation is required. The radio equipment described in this guide emits radio frequency energy. Although the power level is low, the concentrated
energy from a directional antenna may pose a health hazard. Do not allow people to come closer than 23 cm (9 inches) to the antenna when the transmitter is
operating in indoor or outdoor environments. More information on RF exposure is on the Internet at www.fcc.gov/oet/info/documents/bulletins
If you have any questions when conguring your AvaLAN system, the best place to get answers is
to visit www.avalanwireless.com. You will also nd the latest updates there. If more assistance is needed, send email to support@avalanwireless.com.
To speak to a live technician, please call technical support at the number below during normal business hours.
© by AvaLAN Wireless Systems Inc. All rights reserved.
Revision 09.5.2014
125A Castle Drive
Madison, AL 35758
Sales and Technical Support: (650) 384-0000
Technical Support (650) 384-0000
PAGE 5
www.avalanwireless.com
AW900FS
User’s Manual
Compatible Accessories
Antennas
AW11-900
900 MHz Directional 11 dBI
YAGI Antenna
AW5M-900
900 MHz Omnidirectional
5 dBI Magnetic Antenna
Accessories
AW15-900
900 MHz Directional 15 dBI
YAGI Antenna
AW5P-900
900 MHz Omnidirectional
15 dBI Pole Antenna
AW-12VA
Auto Adapter Lightning Arrestor
AW-RFx900
x = 4ft, 10ft, 25ft or 50ft
900 MHz Antenna Extension
Cable
Technical Support (650) 384-0000
AW-LA
Warranty
AW-Warranty-900
These items can be found on our website, www.avalanwireless.com
PAGE 6
www.avalanwireless.com
AW900FS
User’s Manual
Quick Start Guide
PROGRAMMING:
Step 1. Gather the AvaLAN radios, power supplies, 2x CAT5 cables and a computer with an RJ45
Ethernet interface.
Step 2. Set the 128-256bit encryption key. Use this key for all radios in the group. Refer to pages 1-3
for instructions to complete this step.
Step 3. Connect the radios one at a time directly to the PC via an Ethernet cable. Set your computer
to an IP address of 192.168.17.1 (refer to page 6 for detailed instructions). Enter the radio’s default IP address* of 192.168.17.17 into a web browser.
Step 4. Enter the password and click login. The default password is “password”.
Step 5. Toggle to select the device type - Access Point or Subscriber Unit. An access point (AP) can
communicate with up to 4 Subscriber Units (SU).
For each SU:
Record the Radio Address (Ex. 00.17.3A) for the AP steps below. The Radio Address is shown
for 5 seconds on the LCD display during of the boot up of the radio and is also displayed on the Browser interface in Device Information section.
Click the Subscriber Unit button.
Set the Subscriber’s ID as 1,2,3 or 4. Record this ID for the AP steps below.
Set the Transmit Power to the LEGAL level with respect to the Antenna Gain and Cable length
– See page 11 for instructions to congure per FCC/IC power limits.
Set the administrator Password.
Set the IP address to a unique value (Ex. 192.168.17.20). This IP address is only used to
manage the radio but all other Ethernet packets will transparently pass through the radios regardless of their subnet.
For the AP:
Enter the Radio Address (see prior steps above) of each SU into the matching Subscriber ID
eld that was assigned in the prior step.
Click the check box of each SU that will be active in the network (this is typically checked
for all SUs but can be unchecked to increase throughput when an SU is known to be inactive.
Set the Transmit Power to the LEGAL level with respect to the Antenna Gain and Cable length
– See page 11 for instructions to congure per FCC/IC power limits.
Set the administrator Password.
Set the IP address to a unique value (Ex. 192.168.17.30). This IP address is only used to
manage the radio but all other Ethernet packets will transparently pass through the radios
Technical Support (650) 384-0000
PAGE 7
www.avalanwireless.com
Loading...
+ 14 hidden pages