Compex WP54G 6E User Manual

Page 1
Page 2
© Copyright 2006 Compex Systems Pte Ltd All Rights Reserved This document contains information, which is protected by copyright. Reproduction, adaptation or translation without prior permission is prohibited, except as allowed under the copyright laws.
Compex®, ReadyLINK® and MicroHub® are registered trademarks of Compex, Inc. Microsoft Windows and the Windows logo are the trad emarks of Microsoft Corp. NetWare is the registered trademark of Novell Inc. All other brand and product names are trademarks or registered trademarks of their respective owners. Notice: Copyrights © 2006 by Compex, Inc. All rights reserved. Reproduction, adaptation, or translati on without prior permi ssion of Compex, Inc. is prohibi ted, except as allowed under the copyright laws. Manual Revision by Daniel Manual Number: U-0496-V1.3C Version 1.3 September 2006
Disclaimer
Compex, Inc. provides this manual without warranty of any ki nd, expressed or implied, including but not limited to the implied warranties of merchantability and fitness for a particular purpose. Compex, Inc. may make improvements and/or changes to the product and/or specifications of the prod uct described in this manual, without prior notice. Compex, Inc will not be liable for any technical inaccuracies or typographi cal errors found in thi s guide. Changes ar e periodically made to the information contained herein and will be incorporated into later versions of the manual. The information contained is subject to change without prior noti c e.
Your Feedback
We value your feedback. If you find any errors in this user’s manual, or if you have suggestions on improving, we would like to hear from you. Please contact us at:
Fax: (65) 62809947 Email:
Page 3
iii
FCC NOTICE
This device has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are desi gned to provide reasonable protection against harmful interference in a residential installation. This device generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instru ctions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this device does cause harmful interference to radio or television reception, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiv ing antenna. Connect the computer i nto an outlet on a circuit different from that to which
the receiver is connected. Increase the separation between the computer and receiver. Consult the dealer or an experienced radio/TV technician for help.
Caution: Any changes or modifications not expressly approv ed by the grantee of this device could void the user's authority to operate the equipment.
FCC Compliance Statement: This device complies with Part 15 of the FCC Rules. Operation is subject to the foll o wing two conditions: This device may not cause harmful interference, and This device must accept any interference received, including interference that may cause undesired operation.
This device must accept any interference received, including interference that may cause undesired operation.
Products that contain a rad io transm itter are labelled with FCC I D and may al so carry the FCC logo.
Caution: Exposure to Radio Frequency Radiation.
To comply with the FCC RF exposure compliance requirements, the following antenna installation and device operating configurati ons m u st be satisfied: a. For configurations using the integral antenna, the separation distance
between the antenna(s) and any person’s body (including hands, wrists,
feet and ankles) must be at least 2.5cm (1 inch). b. For configurations using an approved external antenna, the separation
distance between the antenna and any person’s body (including hands,
wrists, feet and ankles) must be at least 20cm (8 inch).
Page 4
iv
The transmitter shall not be coll ocated wi th other transm itters or antennas.
ICES 003 Statement This Class B digital apparatus complies with Canadian ICES-003.
Declaration of Conformity
Compex, Inc. declares the following: Product Name: Wireless Access Point with Integrated PoE Model No.: WP54G conforms to the following Product Standards: This device complies with the Electromagnetic Compatibility Directive (89/336/EEC) issued by the Commission of the European Community. Compliance with this directive implies conformity to the following European Norms (in brackets are the equivalent international standards.)
Electromagnetic Interference (Conduction and Radiation)
: EN 55022 (CISPR 22)
Electromagnetic Immunity
: EN 55024 (IEC61000-4-2, 3,4,5,6,8,11)
Low Voltage Directive:
EN 60 950: 1992+A1: 1993+A2: 1993+A3: 1995+A4:
1996+A11: 1997.
Therefore, this product is in conformity with the following regional standards:
FCC Class B: following the provisions of FCC Part 15 directi ve, CE Mark: following the provisions of the EC directive.
Compex, Inc. also declares that: The wireless card in this product complies with the R&TTE Directi ve (1999/5/EC) issued by the Commission of the European Community. Compliance with this directive implies conformity to the foll owing:
EMC Standards:
FCC: 47 CFR Part 15, Subpart B, 47 CFR Part 15, Subpart C
(Section 15.247); CE: EN 300 328-2, EN 300 826 (EN 301 489-17)
Therefore, this product is in conformity with the following regional standards:
FCC Class B: following the provisions of FCC Part 15 directi ve, CE Mark: following the provisions of the EC directive.
Page 5
v
Technical Support Information
The warranty information and registration form are found in the Quick Install Guide.
For technical support, you may contact Compex or its subsidiaries. For your convenience, you may also seek techni cal assistance from the l ocal distributor , or from the authorized dealer/reseller that you have purchased this product from. For technical support by email, write to
Refer to the table below for the nearest Technical Support Centres:
Technical Support Centres
Contact the technical support centre that servi ces your location.
U.S.A., Canada, Latin America and South America
Write
Compex, Inc. 840 Columbia Street, Suite B Brea, CA 92821, USA
Call
Fax
Tel: Tel: Fax:
+1 (714) 482-0333 (8 a.m.-5 p.m. Pacific time) +1 (800) 279-8891 (Ext.122 Technical Support) +1 (714) 482-0332
Asia, Australia, New Zealand, Middle East and the rest of the World
Write
Compex Systems Pte Ltd 135, Joo Seng Road #08-01, PM Industrial Building Singapore 368363
Call
Tel: Tel: Fax:
(65) 6286-1805 (8 a.m.-5 p.m. local time) (65) 6286-2086 (Ext.199 Technical Support) (65) 6283-8337
Internet access/
E-mail: FTPsite:
[email protected] ftp.compex.com.sg
Website: http://www.cpx.com or http://www.compex.com.sg
Fax
Page 6
vi
About This Document
The product described in this document, Wireless Access Point with I ntegrated PoE, WP54G is a licensed product of Compex Systems Pte Ltd. This document contains instructions for installing, configuring and using WP54G. It also gives an overview of the key applicati ons and the networking concepts with respect to the product.
This documentation is for both Network Administrators and the end user who possesses some basic knowledge in the networking structure and protocols.
It makes a few assumptions that th e host computer has already been installed with TCP/IP and already up & running and accessing the Internet. Procedures for Windows 98SE/ME/2000/XP operating systems are included in this document. However, for other operating system, you may need to refer to your operati ng system’s documentation for networking.
How to Use this Document
This document may become superseded, i n which case you may find its latest version at:
http://www.compex.com.sg
The document is written in such a way th at you as a user will find it convenient to find specific information pertai ning to the product. It comprises of chapters that explain in detai ls on the installation and confi g uration of WP54G.
Firmware
This manual is written based on Firmware version 2.02
Page 7
vii
Conventions
In this document, special conventions are used to help and present the information clearly. The Wireless Access Point with Integrated PoE is often referred to as WP54G or Access Point in this document. Below is a list of conventions used throughout.
NOTE
This section will consist of important features or instructions
CAUTION
This section concerns risk of injury, system damage or loss of data
WARNING
This section concerns risk of severe injury
References on Menu Command, Push Button, Radio Button, LED and Label appear in Bold. For example, “Click on Ok.”
Page 8
viii
Copyrights © 2006 Compex Systems Pte Ltd ................................................................ i
Trademark Infor mation ..................................................................................................... i
Disclaimer............................................................................................................................ i
Your F eedback...................................................................................................................i
FCC NOTICE........................................................................................................................ii
Declaration of Conformity ...............................................................................................ii
Technical Supp ort Info rmation.......................................................................................iii
About This D ocument...................................................................................................... iv
How to Use th i s Do c u m e nt............................................................................................. iv
Firmware............................................................................................................................iv
Conventions...................................................................................................................... iv
CHAPTER 1: PRODUCT OVERVIEW..............................................1
Introduction...............................................................................................................1
Features and Benefits..............................................................................................2
When to use which mode ......................................................................................3
Access Point Mo de............................................................................................3
Access Point Client Mod e ................................................................................4
CHAPTER 2: HARDWARE INS TALLATION.....................................5
Setup Requirements ................................................................................................5
Hardware Installation ..............................................................................................5
OPTION On e: Using power adapter to supply p ower to the unit..............5
OPTION Two: Using PoE to supply po wer to the u nit....................................7
Optional: Mounting on the Wall....................................................................10
CHAPTER 3: ACCESS TO WEB-BASED INTERFACE ...................11
Access to the Web interface with uConfi g.......................................................11
Manual access to web-based interface via Internet Explorer......................15
CHAPTER 4: COMMON CONFIGURATION ..............................20
Manage ment Port Setup......................................................................................20
Setti ng up your LAN.........................................................................................21
To view the active DHCP leases....................................................................24
To reserve specific IP addresses for predetermined DHCP clients..........25
WLAN Setup ............................................................................................................28
To configur e the Basic setup of the wireless mode ...................................29
Page 9
ix
To configure the Security setup of the wireless mode ...............................43
To configur e the Advanced s etup of the wireless mode.........................43
Statistics..............................................................................................................46
STP Setu p..................................................................................................................48
MAC Filtering...........................................................................................................53
Add a MAC address to the MAC Address List............................................54
Delete a MAC address from all access points. ..........................................57
Delete a MAC address from individual access point................................59
Edit MAC address from the MAC Address List............................................61
CHAPTER 5: WLAN SE CURITY.....................................................63
How to se t up WEP.................................................................................................64
How to se t up WPA-Personal ................................................................................66
How to set up 802.1x/RADIUS...............................................................................68
How to set up WPA Enter prise ..............................................................................70
CHAPTER 6: WI RE LE SS EXTENDED FEATURES ............................73
Virtual AP (Multiple SSID).......................................................................................73
Preferred APs (Only available in Client Mode).................................................75
Long Distance Parameters...................................................................................76
Point-to-Point & Point-to-MultiPoint Setup .........................................................79
CHAPTER 7: SYSTE M UTILITIES .....................................................82
Using th e SYSTEM TOOLS Men u............................................................................82
System Identity..................................................................................................82
System Clock Setup.........................................................................................84
Firmwa re Up grade...........................................................................................85
Backup or Reset S ettings ................................................................................87
Reboot System..................................................................................................90
Change Password............................................................................................91
Logout................................................................................................................92
Using th e HELP menu.............................................................................................93
Get Technical Sup p or t....................................................................................93
About System....................................................................................................94
Page 10
x
APPENDIX I: FIRMWARE RECOVERY .........................................95
APPEND IX II: TCP/ IP CONFIGURATION.....................................97
For Wind ows 95/ 9 8/ 98 S E/M E /N T ....................................................................97
For Windows XP/2000.......................................................................................99
APPENDIX III: PANEL VIEWS & DESCRIPTIONS........................102
APPENDIX IV: VIRTUAL AP (MULTI-SSID) FAQ.........................105
APPENDIX V: TECHNICAL SPECIFICATIONS ...........................109
Page 11
1
CChhaapptteerr 11:: PPrroodduucctt O
Ovveerrvviieeww
I
I
NNTTRROODDUUCCTTIIOON
N
The high-performance access point (AP) is designed for enterprise and public access applications. Embedded with the Atheros chipset, it boasts network robustness, stability and wider network coverage. Based on 802.11g, the access point supports high­speed data transmission of up to 54Mbps in the 2.4GHz frequency band.
The access point is capable of operating in different
modes: Access Point and Access Point Client, which makes it suitable for a wide variety of wireless applications, including long-distance deployments.
Equipped with an SMA connector for external antenna support, the access point provides a wider coverage for your network. Moreov er, its integra ted Power over E thernet (PoE) allows the access point to be used in areas where power outlets are not readily available.
To protect your security and privacy, the access point is armed with many enhanced wireless security features such as Wi-Fi Protected Access (WPA), WPA2 (with Advanced Encryption Standard encryption) MAC Address Filtering, IEEE 802.1x Authentication and 64/128-bit WEP (Wired Equivalent Privacy) to ensure privacy for the heterogeneous mix of users within the same wireless network.
The access point also incorporates a unique set of advanced features such as: Virtual AP to deliver multiple services; Long-Range parameter fine-tuning which provide the access point wi th the ability to au to-calculate pa rameters such as slot time, ACK ti me-out and CTS time-out to achieve a longer range; and Spanning Tree Protocol (STP) which provides extra redundancy and the ability to auto-reconfigure when there are changes in the network topology.
Page 12
2
F
F
EEAATTUURREESS AANNDD
B
B
EENNEEFFIITTS
S
The access point has been designed for high performance and offers a rich suite of features, with which you shoul d acquaint yourself to be able to exploit your access point’s full potential.
Virtual AP (Multiple SSID)
Virtual AP implements mSSID (Multi-SSID) This allows a single wireless card to be set up with multiple virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes.
Highly Secured Wireless Network
The access point supports the highest available wireless security standard: Wi-Fi Protected Access 2. WPA2 has two different modes: WPA2-PSK for SOHO users and WPA2-EAP for Enterprise users. The access point also supports IEEE 802.1x for secure and centralized user-based authentication. Wireless clients are thus required to authenticate through highly secure methods like EAP-TLS, EAP-TTLS, and EAP-PEAP, in order to obtain access to the network.
Smart Select
This feature will automati cally scan and recommend the best channel that the access point can utili ze.
uConfig Utility
Compex’s exclusive uConfig utility allows users to access the user-friendly Web configuration interfac e of the access point without having to chang e the TCP/IP setup of the workstation.
STP
Spanning-Tree Protocol provides path redundancy while preventing undesirable loops in the network. It forces certain redundant data paths into a standby (blocked) state. If one network segment in the Spanning-Tree Protocol becomes unreachable, or if Spanning-Tree Protocol costs chang e, the spanning-tree algorithm reconfigures the spanning-tree topology and re-establishes the link by activating the standby path.
Point-to-Point & Point-to-MultiPoint Support
Point-to-Point and Point-to-MultiPoint communication between different buildings enables you to bridge wireless clients that are kilometres apart while unifying the networks.
Page 13
3
W
W
HHEENN TTOO UUSSEE WWHHIICCHH MMOODDE
E
The access point is v ersatile in the sense that i t may operate in 2 di fferent types of modes: Access Point Mode and Client Mode.
This section presents a brief outline of the different network applications that can be accommodated through the different modes of the access point.
A
A
CCCCEESSSS
P
P
OOIINNTT
M
M
OODDE
E
This is the default mode of the access point. The Access Point mode enables you to bridge wireless clients to access the wired network infrastru cture and to communicate with each other.
In the example above, the wireless users will be able to access the file server connected to the switch through the access point in Access Poi nt m ode.
Page 14
4
A
A
CCCCEESSSS
P
P
OOIINNTT
C
C
LLIIEENNTT
M
M
OODDE
E
In Access Point Client mode, the device acts as a wireless client. When connected to an access point, it will create a network link between the Ethernet network connected at this cli ent device, and the wireless and Ethern et network connected at the access point.
In this mode it can only connect with an access point. Other wireless clients cannot connect with it directly unless connected to the same access point ­allowing them to communicate with al l devices connec ted at th e Ethern et port of the WP54G.
In the example above, the workgroup PCs will be able to access the printer connected to the access point in Access Point Client mode.
Page 15
5
CChhaapptteerr 22:: HHaarrddwwaarree IInnssttaallllaattiioonn
S
S
EETTUUPP
R
R
EEQQUUIIRREEMMEENNTTS
S
Before starting, please verify that the fol lowing is available: CAT5/5e networking cable At least one computer is installed with a Web browser and a wired or wireless
network interface adapter
TCP/IP protocol is installed and IP address parameters are properly configured
on all your network’s nodes
H
H
AARRDDWWAARREE
I
I
NNSSTTAALLLLAATTIIOON
N
The access point can be p owered using either the power adap ter provided or a PoE Injector. The installation process for both options is described below.
OOPPTTIIOONN O
O
NNE
E
:: U
U
SSIINNGG PPOOWWEERR AADDAAPPTTEERR TTOO SSUUPPPPLLYY PPOOWWEERR TTOO TTHHEE UUNNIITT
SStteepp 11::
Connect the external antenna to the SMA connector of the access poi nt.
Page 16
6
SStteepp 22::
Insert one end of the Ethernet cable to any of the Ethernet ports on your access point, and the other end of the cable to your PC’s Ethernet network adapter.
SStteepp 33::
Attach the power adapter to the main electrical supply, and connect the power plug into the socket of the access point.
SStteepp 44::
Turn ON the power supply and power ON your PC. Notice that the LEDs: Power and Port 1 or 2 (depending on which port you have connected the RJ45 Ethernet cable to) have lighted up. This indicates that connection has been established successfully between your access point and your PC.
PC
Page 17
7
OOPPTTIIOONN T
T
WWO
O
:: U
U
SSIINNGG
P
P
O
O
EE
TTOO SSUUPPPPLLYY PPOOWWEERR TTOO TTHHEE UUNNIIT
T
The access point is fully compati ble with a Power-Ov er-Ethernet (PoE) kit. A PoE accessory supplies operational power to th e wireless AP via the Ethernet cable connection.
Users who have already purchased a PoE and who wish to use it to supply power to the access point may follow the installation procedures shown below:
SStteepp 11::
Connect the external antenna to the SMA connector of the access poi nt.
SStteepp 22::
Use an RJ45 Ethernet cable to connec t one end of the cable to the LAN OUT port of the Injector and the other end to Ethernet port 1 of the access point.
Page 18
8
SStteepp 33::
Next, connect the RJ45 Ethernet cable attached to the PoE Injector to your PC’s Ethernet network adapter.
Once you have finished config uring your access point, you can connect the PoE Injector’s RJ45 Ethernet cable to your network device, such as to a switch or hub.
SStteepp 44::
Connect the power adapter supplied in the PoE kit to the main electrical supply and the power plug into the socket of the injector.
Note:
The voltage and current supplied to the po wer adapter and the PoE kit power adapter are different. Do not interchange the power adapters.
Page 19
9
SStteepp 55::
Turn on your power supply. Notice that the Power LED has lighted up. This indicates that the access point is receiving power through the Compex PoE Injector. Notice also that the corresponding port LEDs have lighted up. This indicates that connection between your access point and your PC has been established.
Page 20
10
O
O
PPTTIIOONNAAL
L
:: M
M
OOUUNNTTIINNGG OONN TTHHEE
W
W
AALLL
L
SStteepp 11::
Screw the mount onto the unit.
SStteepp 22::
Align the unit and mount to the wall. Use the mount as a guide, make 2 marks and drill 2 holes into the wall.
SStteepp 33::
Next, secure the unit and mount to the wall.
Page 21
11
CChhaapptteerr 33:: AAcccceessss ttoo W
Weebb--bbaasseedd
IInntteerrffaaccee
There are two methods to access to the web-based Interface of the access point:
Through our Compex Utility – uConfig
You can access to the web-based interface directly without the need to assign a different IP address to your PC.
By entering the IP address of the access point in the address bar of Internet
Explorer
You need to assign an IP address to your PC, such as 192.168.168.x, where x can take any value from 2 to 254, so that it is in the same subnet as the access point.
A
A
CCCCEESSSS TTOO TTHHEE
W
W
EEBB IINNTTEERRFFAACCEE WWIITTHH U
U
C
C
OONNFFIIG
G
Compex has developed a powerful uConfig utility that has been desi gned to give you direct access to the Web interface.
SStteepp 11::
Insert the Product CD into your CD-ROM drive. The CD will run automatically.
SStteepp 22::
From the Utilities section, select to install the uConfig utility to your hard disk.
Page 22
12
SStteepp 33::
When the utility has been installed, double-click on the uConfig icon. The following screen will appear, click on the Yes button to proc eed .
SStteepp 44::
Select WWPP5544GG in the CCoommppeexx PPrroodduuccttss LLiisstt section and click on the OO
ppeenn WWeeb
b
button. To retrieve and display the latest device(s) in the list, click on the
R
R
eeffrreessh
h button.
Page 23
13
SStteepp 55::
Do not exit the uConfig program whil e accessing to the web-based interface. This will disconnect you from the device. Click on the OK button to proceed.
SStteepp 66::
At the login page, press the LLOOGGIINN!! button to enter the configuration page. The default password is “password”.
Page 24
14
SStteepp 77::
You will then reach the home page of the access point’s web-based interface.
Page 25
15
M
M
AANNUUAALL AACCCCEESSSS TTOO WWEEB
B
-
-
BBAASSEEDD IINNTTEERRFFAACCEE VVIIAA
I
I
NNTTEERRNNEETT
E
E
XXPPLLOORREER
R
For this method, you need to assign an IP address to your PC so that it belongs to the same subnet as your access point. In this example, we are using Windows XP for illustration. For Windows 98/98SE/2000/NT/ME, kindly refer to Appendix II “TCP/IP Configuration”.
SStteepp 11::
Go to your desktop, right-click on My Network Places icon and select Properties.
SStteepp 22::
Go to your network adapter icon, right-click and select Properties.
Page 26
16
SStteepp 33::
Highlight Internet Protocol (TCP/IP) and click on the PPrrooppeerrttiieess button.
SStteepp 44::
Select the radio button for Use the following IP address. Enter the IP Address and Subnet Mask as 192.168.168.x and 255.255.255.0, where x can be any number from 2 to 254, except 1. In this example, we are using 192.168.168.160 as the static IP Address.
Page 27
17
SStteepp 55::
Click on the OOKK button to close all windows.
SStteepp 66::
Next, in order to check if the IP address has been correctly assigned to your PC, go to Start menu, Accessories, select Command Prompt and type the command ipconfig/all.
Your PC is now ready to configure the access point.
SStteepp 77::
Launch your Web browser. Under the Tools tab, select Internet Options.
Page 28
18
SStteepp 88::
Open the Connections tab and in the LAN Settings section, disable all the option boxes. Click on the OOKK button to update the changes.
SStteepp 99::
At the Address bar, enter http://192.168.168.1 and press Enter on your keyboard.
SStteepp 1100::
At the login page, click on the LLOOGGIINN!! button to enter the configuration pages.
Page 29
19
You will then reach the home page of the access point’s Web interface.
Page 30
20
CChhaapptteerr 44:: CCoom
m
m
moonn CCoonnffiigguurraattiioonn
This chapter illustrates the following features, which are available in ALL
the
operating modes of the access point, unless stated otherwise.
• Management Port
• WLAN Basic Setup
• WLAN Security
• STP Setup
• SNMP
• MAC Filtering
• Antenna Alignment
M
M
AANNAAGGEEMMEENNTT
P
P
OORRTT
S
S
EETTUUP
P
This section shows you how to customize the parameters of the ac cess point to suit the needs of your network. It also explai ns how to make use of the built-in DHCP server of the access point.
Page 31
21
S
S
EETTTTIINNGG UUPP YYOOUURR
LLAANN
You can opt to adjust the default values of the access point and customize them to your network settings.
SStteepp 11::
Click on Management Port from the CONFIGURATION menu. In the Management Port Setup page, refer to the table bel ow to replace the
default settings of the access point with appropri ate values to suit the needs of your network.
SStteepp 22::
Click on the AAppppllyy button to save your new parameters.
Page 32
22
This table descri bes the parameters that can be modifi ed in the Management
Port Setup page.
Parameters Description
IP Address When the DHCP server of the access point is enabled (unless you
set a different DHCP Gateway IP Address), this LAN IP Address would be allocated as the Default Gateway of the DHCP client.
The IP address of your access point is set by default to
192.168.168.1.
Network Mask The Network Mask serves to identify the subnet in which your
access point resides. The default network mask is 255.255.255.0.
Management Gateway IP
(Optional) As a bridge Access Point, the access point does not usually communicate with devices on other IP subnets. However, the Management Gateway here acts as the equivalent of the Default Gateway of a PC, to allow the access point to communicate with devices on different subnets. For instance, if you want to access the access point from the Internet or from a router on the LAN, enter the router IP address in the Management Gateway IP field.
The Management Gateway IP address of your access point is set to nil by default.
The next two fields (DHCP Start IP Address and DHCP End IP Address) allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN.
DHCP Start IP Address
This is the first IP address that the DHCP server will assign. The value that you input here should belong to the same subnet as your access point. For example, if the IP address and network mask of your access point are 192.168.168.1 and 255.255.255.0 respectively, the DHCP Start IP Address should be 192.168.168.X, where X can take any value from 2 to 254. It is pre-set to
192.168.168.100.
DHCP End IP Address
This is the last IP address that the DHCP server can assign. It should also belong to the same subnet as your access point. For instance, if the IP address and network mask of your access point are 192.168.168.1 and 255.255.255.0 respectively, the DHCP End IP Address should be 192.168.168.X, where X can take any value from 2 to 254. It is pre-set as 192.168.168.254.
Page 33
23
Parameters Description
DHCP Gateway IP Address
Though usually, the DHCP server also acts as the Default Gateway of the DHCP client, the access point gives you the option to define a different Gateway IP Address, which will be allocated as the Default Gateway IP of the DHCP client. The DHCP client will thus receive its dynamic IP address from the access point but will access to the Internet or to the other LAN through the Default Ga teway defin ed by the DHCP Gateway IP Address.
For instance, if the access point is used in Access Point Client mode and connects to an Internet gateway, X, a PC wired to the access point will be unable to obtain a dynamic IP address directly from X. But if you can enable the DHCP server of the access point and set the IP address of X as the DHCP Gateway IP Address, the PC will then obtain its IP address from the access point and access the Internet through X.
Always use these DNS servers
Enable this checkbox if you want the access point to only use the DNS server(s) you have specified below.
Primary DNS IP Address
Your ISP usually p rovides the IP address of the DNS server.
Secondary DNS IP Address
This optional field is reserved for the IP address of a secondary DNS server.
DHCP Server If you disable the DHCP server, you will need to manually
configure the TCP/IP parameters of each computer in your network.
Page 34
24
T
T
OO VVIIEEWW TTHHEE AACCTTIIVVEE
DDHHCCPP
LLEEAASSEES
S
The following will guide you to a page display of the active IP address leases that have been allocated by the buil t-in DHCP server of the access point.
SStteepp 11::
Click on Management Port from the CONFIGURATION menu.
SStteepp 22::
Go to the Advanced DHCP Server Options section, click on the SShhooww AAccttiivvee
DDHHCCPP lleeaassees
s button.
The DHCP Active Leases table displays:
• The Host Name of the DHCP client
• The IP Address that has been allocated to the DHCP client
• Its Hardware (MAC) Address
• The Lease Expired Time.
NOTE
Invalid date and time displayed in the Lease Expired Time column indicates that the clock of your acc ess poi nt has not b een proper ly set. Please refer to the SYSTEM TOOLS section for more details on how to set the system clock.
Page 35
25
T
T
OO RREESSEERRVVEE SSPPEECCIIFFIICC
IIPP
AADDDDRREESSSSEESS FFOORR PPRREEDDEETTEERRMMIINNEEDD
DDHHCCPP
CCLLIIEENNTTS
S
Making an IP address reservation lets you inform the DHCP server to exclude that specific address from the pool of free IP addresses it draws on for dynami c IP address allocation.
For instance, if you set up a publicly accessible FTP/HTTP server within your private LAN, while that server would require a fixed IP address, you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
The following shows you how to reserve a particular IP address.
SStteepp 11::
From the Advanced DHCP Server Options section, click on the DDHHCCPP SSeerrvveerr
RReesseerrvvaattiioonnss
button.
SStteepp 22::
Click on AAdddd button.
Page 36
26
SStteepp 33::
Fill in: The host portion of the IP Address to reserve. The Hardware Address, in pairs of two hex values
Press the AAppppllyy button to make your new entry effective.
The DHCP Server Reservations page will then be refreshed to illustrate the currently reserved IP addresses.
Page 37
27
D
D
EELLEETTEE
DDHHCCPP S
S
EERRVVEERR RREESSEERRVVAATTIIOON
N
If you do not need the DHCP server to reserve an IP address anymore, you can delete the DHCP Server Reservation.
SStteepp 11::
Click on the reserved IP address that you wish to delete, e.g. 192.168.168.20.
SStteepp 22::
Click on the DDeelleettee button.
The DHCP Server Reservations table will then be refreshed to reflect your changes.
Page 38
28
WWLLAANN S
S
EETTUUP
P
This section shows how to perform the following functions:
Basic
:
This function performs a basic setup of the operation modes.
Security
:
This function performs data encryption and protection for the router. Kindly refer to Chapter 5 on WLAN Security for details.
Advanced
: This function furthers the basic configuration of the router by setting the sy stem’ s additional parameters: Virtual AP and Long Distance Parameters.
Kindly refer to Chapter 6 on Wireless Extended Features for details.
Statistics
: This function uses the Scan Feature to monitor and interpret the statistics data collected.
MAC Filtering
(only applicable to Access Point mode):
MAC Filtering acts as a security measure by restricting the users accessing to the network through their MAC address.
Antenna Alignment
:
It is a tool for aligning outdoor antenna between 2 access points over long distances. The signal level can be checked from the web page and also from the DIAG LED indicator.
Page 39
29
T
T
OO CCOONNFFIIGGUURREE TTHHEE
B
B
AASSIICC SSEETTUUPP OOFF TTHHEE WWIIRREELLEESSSS MMOODDE
E
The following will guide you to configure the basi c setup of the wireless mode you have selected.
SStteepp 11::
Click on WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu. You will see the sub- menus expanded under WWLLAANN SSeettuupp. Click on BBaassiicc. The default operating mode of Access point is the Access Point mode.
SStteepp 22:: ((OOppttiioonnaall:: CChhaannggee CCuurrrreenntt mmooddee))
If you wish to change the current mode of your access point, click on
CChhaanngge
e, select your OOppeerraattiioonn MMooddee and click on the AAppppllyy button to
access the setup page of your selected mode. Then you are prompted to reboot the access point so as to activate the mode setting.
Page 40
30
Page 41
31
SStteepp 33::
Enter the parameters in thei r respective fields, click on the AAppppllyy button and reboot your device to let your changes take effec t.
Note that the WWLLAANN BBaassiicc SSeettuupp pages for the modes are different.
Example: WWLLAANN BBaassiicc SSeettuupp page for CClliieenntt MMoodd
e
e
Example: WWLLAANN BBaassiicc SSeettuupp page for AAcccceessss PPooiinntt
Page 42
32
This table describes the parameters that can be modified in the WLAN Basic
Setup page.
Parameters Description
The Current Mode The default operating mode of the access point is the
Access Point mode. The router can operate in two
modes: Access Point mode Client mode
You can toggle the mode by clicking on the CChhaannggee button.
ESSID Enter a preferred name for the wireless network. Your
wireless clients must be configured with the same ESSID. This case-sensitive entry can consi st of a maximum of 32
characters.
Site Survey
A list of wireless devices that are detected by your access point in the WLAN. Information such as MAC address, channel, SSID, algorithm and signal strength can be found in the listing.
Wireless Profile A selection of network environment types in which to
operate the access point:
•
880022..1111bb oonnlly
y
This mode supports wireless B clients with data rates of up to 11Mbps in the frequency range of 2.4GHz.
•
880022..1111bb//gg mmiixxeed
d
This mode supports both wireless B and G clients.
•
880022..1111gg oonnlly
y
This mode supports wireless-G clients that offer transmission rates of up to 54Mbps in the 2.4GHz frequency band.
Country Choose the Country where you are located.
Page 43
33
Channel (Only in AP mode)
This option allows you to select a frequ ency channel for the wireless communication.
Tx Rate Allow you to choose the rate of data transmi ssion from 2
Mbps to Auto.
Closed System The access point will not broadcast its WLAN name
(ESSID) when Closed system is enabled. By default Closed system is disabled.
Act as RootAP
The access point will connect with one or multiple clients to create a point-to-point and point-to-multi-point connections network with 2 or more APs.
This connection method is fully compliant with 802.1h standards.
NOTE
A Repeater AP can connect to an AP only if the option
is set or
checked in the AP setup. Similarly, if a second Repeater AP is to be
connected to this first Repeater AP to extend the distance and coverage further ,
the option
on the first Repeater AP must be set or checked before this second Repeater AP can connect to it.
VLANID
Select and specify the VLANID. This is a number to identify the different virtual network segments to which the network devices are grouped.
This can be any number from 1 to 4094.
Channel Survey
A list of channels that are detected by your access point in the WLAN. Information such as frequency, channel, MyQuality, NeighQuality, APCount and Recommendation can be found in the listing.
The Access Point mode supports this feature.
Page 44
34
S
S
CCAANN FFOORR
S
S
IITTEE
S
S
UURRVVEEYY
((O
O
NNLLYY
F
F
OORR
C
C
LLIIEENNTT
M
M
OODDE
E
))
SStteepp 11::
In the Mode Setup page, click on the SSiittee SSuurrvveeyy button.
The Site Survey provides a list of the MAC addresses (BSSID) and SSID of neighbouring access points detected, the Chan (channels), Auth (Authentication), Alg (Algorithm) used, and the strength of the Signal received.
Page 45
35
SStteepp 22::
To connect the WP54G-client to one of the access points detected: Select the radio button corresponding to the access point you want to connect to.
SStteepp 33::
Click on the AAppppllyy button to effect the change and return to the setup page.
SStteepp 44::
Click on the RReeffrreesshh button to update this screen.
This table describes the read-only parameters of neighbouring access points that can be viewed from the Site Survey page.
Parameters Description
Bssid In an infrastructure wireless network, the BSSID refers to
the wireless MAC address of the access point.
SSID Refers to the network name that uniquely identifies the
network to which the access point is connected.
Chan Refers to the channel being used for transmissi on.
Auth Refers to the types of authentic ation, such as WPA , WPA-
PSK, etc being used by the access point.
Alg Refers to the types of algorithm, such as WEP, TKIP, etc
being used by the access point.
Signal Describes the strength of the signal received in
percentage.
Page 46
36
S
S
HHOOWW
L
L
IINNKK
I
I
NNFFOORRMMAATTIIOONN
((O
O
NNLLYY
F
F
OORR
C
C
LLIIEENNTT
M
M
OODDE
E
))
SStteepp 11::
To view the connection status when WP54G-client is linked to another access point, click on the SShhooww LLiinnkk IInnffoorrmmaattiioonn button.
The Link Information table illustrates the following data:
Page 47
37
This table describes the parameters that can be viewed from the Link
Information page.
Parameters Description
State Refers to the MAC address of the BSS (AP to which the
WP54G-client is connected).
Current Channel The channel that is being presently used for transmission.
Tx Rate The rate of data transmission in Mbps. Signal Strength Given in percentage, showing the intensity of the signal
received.
Page 48
38
S
S
CCAANN FFOORR
C
C
HHAANNNNEELL
S
S
UURRVVEEYY
(
(
AAVVAAIILLAABBLLEE
F
F
OORR
A
A
CCCCEESSSS
P
P
OOIINNTT
M
M
OODDEE
))
Channel Survey provides a li st of all channels that are supported by th e access point. This feature will show relative interference of all channels and recommend the least congested channel. When the users want to scan for and find the best channel, they can use Channel Survey.
SStteepp 11::
In the MMooddee SSeettuupp page, click on the CChhaannnneell SSuurrvveeyy button.
The CChhaannnneell SSuurrvveeyy provides a list of the FFrreeqq (frequency) and CChhaannnneell of the access point detected, the AAPPCCoouunntt, MMyyQQuuaalliittyy (your access point’s interference from your access point’s channel signal) received and
NNeeiig
g
hhQQuuaalliitty
y (interference from the neighbouring access points’ channel
signals) received.
Page 49
39
The values indicate the level of interference. The higher the value, the higher the interference. If the value is zero, there is no interference.
To connect the WP54G-client to one of the channels detected, select the radio button corresponding to the channel you want to connect to.
SStteepp 22::
Click on the AAppppllyy button to effect the change and return to the setup page.
SStteepp 33::
Click on the RReeffrreesshh button to update this screen.
Page 50
40
This table describes the read-only parameters of all channels that can be viewed from the Channel Survey page.
Parameters Description
Freq Refers to the frequency of the channel at which your
access point is operating.
Channel Refers to the channel of the access point bei ng used for
transmission depending on its origin of country.
MyQuality
Indicates the interference level of the respective channel with this AP. The lower the value, the less interference.
APCount Refers to the total numbe r of access points operating at
the current channel.
NeighQuality
Indicates the interference level with those discovered APs at those respective channels. The lower the value, the less interference.
Recommendation
Indicates the best channel for the AP device to use in its current environment.
Page 51
41
A
A
NNTTEENNNNAA
A
A
LLIIGGNNMMEENNTT
(
(
AAVVAAIILLAABBLLEE
F
F
OORR
A
A
LLLL
M
M
OODDEESS
))
The Antenna Alignment feature in the access point is designed to precisely align the antenna over such a long distance so that the connectivity communication between your access point and another remote or neighbouring access point could be improved as indicated by higher signal strength.
SStteepp 11::
Click on WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu. You wi ll see the sub- menus expanded under WWLLAANN SSeettuupp. Click on AAnntteennnnaa AAlliiggnnmmeenntt. The
AAnntteennnnaa AAlliiggnnmmeennt
t page can act as a diagnostic tool to check the
communication with a remote device. The remote AP MAC Address is preset to all zeros by default.
SStteepp 22::
If you wish to specify the MAC address of the remote AP , key in the field next to RReemmoottee AAPP AAddddrreessss ((ooppttiioonn)), followed by executing the SSttaarrtt button. Then the pop-up status screen will show up, allowing you to monitor the signal strength received from the remote access points.
If there is no specified AP with its MAC address you have keyed in, the screen below will show on the right. To abort or key in the MAC address of the other available remote AP, click on the SSttoopp button.
Page 52
42
NOTE
If no MAC address is entered, the Antenna Alignment tool will make use of the SSID to align the antenna. Please m ake sure that the correct SSID is entered. If more than one access point (AP) share the same SSID, the Antenna Alignment tool will show the strongest signal AP.
The DIAG LED indicates the signal strength as described below:
Signal Strength (RSSI Value)
Status of DIAG LED
Above 20 Stays turned ON
Between 19 and 17
Flashes 6 times
Between 17 and 14 Flashes 3 times
Between 13 and 10
Flashes ONCE
Below 10 Turns OFF
NOTE
The signal strength of below RSSI of 10 is not recommended for outdoor long distance connection.
!
NOTE: To ensure pr oper func tionali ty of the device , select to Stop after performing antenna alignm ent. Alternativ ely, you may also reboot the device.
Page 53
43
T
T
OO CCOONNFFIIGGUURREE TTHHEE
S
S
EECCUURRIITTYY SSEETTUUPP OOFF TTHHEE WWIIRREELLEESSSS MMOODDE
E
Please refer to Chapter 5 on WLAN Security for details on setting the different security modes of the access point.
T
T
OO CCOONNFFIIGGUURREE TTHHEE
A
A
DDVVAANNCCEEDD SSEETTUUPP OOFF TTHHEE WWIIRREELLEESSSS MMOODDEE
The following will guide you to configure the advanced setup of the wireless mode you have selected.
SStteepp 11::
Double-click on WLAN Setup from the CONFIGURATION menu to expand into the four sub-menus. From here, click on Advanced.
SStteepp 22::
In the WLAN Advanced Setup page, enter the parameters.
SStteepp 33::
Click on the Apply button to update the changes.
Page 54
44
This table describes the parameters that can be modified in the WLAN
Advanced Setup page.
Parameters Description
Beacon Interval (Only in Access Point mode)
The Beacon Interval is the amount of time between beacon transmissions. A beacon is a guidance signal sent by the access point to announce its presence to other devices in the network.
Before a client enters the power-sav e mode, it needs the beacon interval to know when to wake up to receiv e the beacon (and learn whether th ere are buffered frames at the access point).
Data Beacon Rate (DTIM) (Only in Access Point mode)
The Data Beacon Rate (DTIM) determines how often the beacon contains a delivery traffic indication message (DTIM). The DTIM identifies which clients (in power-save mode) have data frames waiting for them in the access point’s buffer.
If the beacon period is set at 100 (default value), and the data beacon rate is set at 1 (default value), then the access point sends a beacon containing a DTIM every 100 Kμsecs (1 Kμsec equals 1,024 μsec).
RTS/CTS Threshold The RTS/CTS Threshold v alue determines the mi nimum size
of a packet in bytes that would trigger the RTS/CTS mechanism.
Frag Threshold The Frag Threshold v alue indi cates the maxi mum si ze that
a packet can reach without being fragmented. This value extends from 256 to 2346 bytes, where a value
of 0 indicates that all the packets should be transmitted using RTS.
Transmit Power The Transmit Power drop-down list lets you pick from a
range of transmission power.
Radio Off When Ethernet Link Down
The Radio Off When Ethernet Link Down function detects when the Ethernet link is down and disables the radio card automatically.
Page 55
45
Antenna Control
The Antenna Control function allows you to control whether to use the:
• Main antenna
• Aux (auxiliary) antenna
• Auto (Default), to monitor the signal from each
antenna and automatically switch to the one with better signal
NOTE
The values illustrated in the examples are suggested values for their respective parameters.
Page 56
46
S
S
TTAATTIISSTTIICCS
S
The following shows you the information on the wireless device that is connected to the WLAN.
I
I
NN
AAPP
MMOODDE
E
SStteepp 11::
Double-click on WLAN Setup from the CONFIGURATION menu. You will see the sub-menus expanded under WLAN Setup. Click on Statistics.
Wireless clients that are connected to the WLAN are shown in the WLAN Station List.
SStteepp 22::
Click on the RReeffrreesshh button to get the lates t information on the avai lability of wireless clients in the wireless network.
SStteepp 33::
To check the details on individual wirel ess client, click on the MAC Address in the WLAN Station List.
The following screen will show the statistics of the selected wireless client.
Page 57
47
I
I
NN
C
C
LLIIEENNTT MMOODDE
E
SStteepp 11::
Double-click on WLAN Setup from the CONFIGURATION menu. You will see the sub-menus expanded under WLAN Setup. Click on Statistics.
In Client mode, you are not al lowed to vi ew other wireless cli ents’ statisti cs. To view other wireless clients information, you need to change to Access Point mode.
Page 58
48
SSTTPP S
S
EETTUUP
P
Spanning Tree Protocol (STP) is a link management protocol that helps to prevent undesirable loops occurs in the network. For an Ethernet network to function properly, only one active path can exist between two stations. If a loop exists in the network topol ogy, duplication of messages will occur and this might confuse the forwarding algorithm and allow duplicate frames to be forwarded.
In short, the main purpose of activating STP is to prevent looping when you have redundant paths in the network. Without activating STP, redundant topology will cause broadcast storming.
To establish path redundancy, STP creates a
tree that spans all of the devices in an extended network, forcing redundant paths into a standby, or blocked, state, but establishing the redundant links as a backup in case the active link
Page 59
49
should fail. If STP costs change, or if one network segment in the STP becomes unreachable, the spanning tree algorithm reconfigures the spanning tree topology and re-establishes the connection by activating the standby path. Without spanning tree in place, it is possible that more than one connection may be simultaneously live, which could result in an endless loop of traffic on the
LAN.
Spanning-Tree Protocol operation is transparent to end stations, which are unaware whether they are connec ted to a single LAN segment or a switched LAN of multiple segments.
The path with the smallest cost wil l be used and extra redundant paths will be disabled.
To explain the effect of STP on the wireless clients , we will compare 2 separate scenarios.
Page 60
50
Scenario #1 – (No STP)
Referring to the illustration below, if the Spanning Tree Protocol (STP) is not implemented in a network, all clients (Notebook#1 , #2, #3 & #4,) can access to one another, resulting in low level of data security. Due to the redundant paths found in this network, broadcast packets will be duplicated and forwarded endlessly resulting in a broadcast storm.
Page 61
51
Scenario #2 – (With STP)
When STP is enabled, extra redundant network paths between APs will be disabled, hence preventing multi ple active network paths in-between any two APs.
If one of the APs is down, the STP algorithm will reactivate one of the redundant paths so that the network connection will not be lost.
All wireless users will be able to communicate with each other if they are associated to the APs that are in the same zone.
Page 62
52
SStteepp 11::
Click on SSTTPP SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu.
SStteepp 22::
Select EEnnaabbllee from the SSTTPP SSttaattuuss radio button, fill in the fields, and cli ck on the AAppppllyy button to update the changes.
Priority: (Default: 32768, Range: 0 – 65535) This is the relative priority. The lowest priority will be elected as the root.
Hello Time: (Default: 2, Range: 1 – 10) This is the hello time. Every (this number) seconds, a hello packet is sent out by. Hello packets are used to communicate information about the topology throughout the entire STP network.
Forward Delay: (Default: 15, Range: 4 – 30) The forward delay is the time that is spent i n the listening and learning state.
Max Age: (Default: 20, Range: 6 – 40) The max age timer control s the m aximum length of time that pass es befor e a port saves its configuration information.
Page 63
53
MMAACC F
F
IILLTTEERRIINNG
G
MAC Filtering acts as a securi ty measure by controlling the users accessing to the network through their MAC address. Each WLAN or radi o card supports up to 16 virtual access points and has i ts own MAC address listing. The client MAC addresses entries can be set apply to all, or to only selected virtual access points.
!
NOTE: MAC Filtering will not filter any MAC address from Ethernet port.
Page 64
54
A
A
DDDD AA
MMAACC
AADDDDRREESSSS TTOO TTHHEE
MMAACC A
A
DDDDRREESSSS
L
L
IISST
T
..
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp((aa//bb//gg)). MAC Address Filtering page displays.
In this page you may also set the MAC Filtering Status to EEnnaabbllee or DDiissaabbllee for access points and set the Policy to either AA
cccceepptt
or DDeennyy MAC
addresses.
MAC Filtering set to EEnnaabbllee with Policy to AAcccceepptt only the MAC addresses in the MAC Filter Address List and deny all other MAC addresses.
MAC Filtering set to EEnnaabbllee with Policy to DDeennyy all the MAC addresses in the MAC Filter Address List and accept all other MAC addresses.
MAC Filtering set to DDiissaabbllee. Whether Policy is set to
EEnnaabblle
e or DDeennyy does not matter.
MAC Filtering set to DDiissaabbllee. Whether Policy is set to
EEnnaabblle
e or DDeennyy does not matter.
Click EEddiitt. (This displays the MAC Address List of individual virtual access points.)
Page 65
55
SStteepp 22::
MAC Filter Address List page displays. Click the AAdddd button.
SStteepp 33::
Add MAC Address page displays.
Page 66
56
SStteepp 44::
Enter the MAC Address of the client in the format xx-xx-xx-xx-xx-xx, where x can take any value in the range 0-9 or a-f.
Enter the Comment. This describes the MAC Address you have entered. To apply to all virtual access points: Check AAppppllyy ttoo AAllll.
To apply to specific virtual access point: Select the checkb ox of the corresponding AP.
Click the AAppppllyy button.
SStteepp 55::
MAC Filter Address List page displays with updated MAC Address List.
Page 67
57
NOTE
Please reboot to effect all changes and new MAC address entries.
D
D
EELLEETTEE AA
MMAACC
AADDDDRREESSSS FFRROOMM AALLLL AACCCCEESSSS PPOOIINNTTS
S
..
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp((aa//bb//gg)). MAC Address Filtering page displays.
Click VViieeww CCoommpplleettee MMAACC
LLiisstt.
.
(This displays the MAC Address List of the radio card.)
Page 68
58
SStteepp 22::
MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete.
Click the DDeelleettee button.
SStteepp 33::
MAC Filter Address List page displays with updated MAC Address List.
Page 69
59
D
D
EELLEETTEE AA
MMAACC
AADDDDRREESSSS FFRROOMM IINNDDIIVVIIDDUUAALL AACCCCEESSSS PPOOIINNT
T
..
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp((aa//bb//gg)). MAC Address Filtering page displays.
Click EEddiitt for the corresponding access point.
Page 70
60
SStteepp 22::
MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete.
Click the DDeelleettee button.
SStteepp 33::
MAC Filter Address List page displays with updated MAC Address List.
Page 71
61
E
E
DDIITT
MMAACC
AADDDDRREESSSS FFRROOMM TTHHEE
MMAACC A
A
DDDDRREESSSS
L
L
IISST
T
..
SStteepp 11::
Select MMAACC FFiilltteerriinngg from WWLLAANN SSeettuupp((aa//bb//gg)). MAC Address Filtering page displays.
Click EEddiitt.
SStteepp 22::
MAC Filter Address List page displays. Select the MAC address to edit.
Page 72
62
SStteepp 33::
The Edit MAC Address page displays. Edit the MAC address settings accordingly.
Click SSaavvee.
SStteepp 44::
MAC Filter Address List page displays with updated MAC Address List.
Page 73
63
CChhaapptteerr 55:: W
WLLAANN SSeeccuurriittyy
This section illustrates how to make your WLAN more secure. All the nodes in your network MUST
share the same wireless settings to be able to communicate. We will illustrate how to configure each type of security mode individually. To start with, follow the common preliminary steps described below to select
the most appropriate security approach for protecting your wireless communications.
SStteepp 11::
Click on WLAN Setup from the CONFIGURATION menu to select Security.
SStteepp 22::
Make a selection from the Security Mode drop down menu. The Security Mode is set to NONE by default.
Click on the AAppppllyy button.
Page 74
64
H
H
OOWW TTOO SSEETT UUPP
WWEEPP
The guidelines below will help you to set up the access point for using WEP.
At the WEP Setup page,
Page 75
65
SStteepp 11::
Specify the key entry type, by selecting either:
Use Hexadecimal: Use ASCII
SStteepp 22::
Select the Transmission Key from the pull down menu:
Key 1 Key 2 Key 3 Key 4
The access point lets you define up to four different transmission keys. It defines a set of shared keys for network security . You must enter at least one WEP key to enable security using a shared key.
SStteepp 33::
Select the length of each encryption key:
64- bit WEP
10 hexadecimal or 5 ASCII Text
128-bit WEP
26 hexadecimal or 13 ASCI I Text
To clear the values that you had entered in the field, click on the RReesseett button.
Click on the AAppppllyy button and reboot your access point
Page 76
66
H
H
OOWW TTOO SSEETT UUPP
WWPPAA--P
P
EERRSSOONNAAL
L
(Only available in Access Point mode) The guidelines below will help you to set up the access poi nt for using WPA-PSK. Please follow the steps below if you have activated WPA-Personal, WPA2- Personal or WPA-Personal-AUTO security modes.
At the WPA1/2-PSK Setup page,
SStteepp 11::
Specify the key entry type, by selecting either:
Passphrase (Alphanumeric characters) Hexadecimal
SStteepp 22::
Fill in the WPA-PSK (Pre-Shared network Key): If you are using the Passphrase format, your entry can consist of a minimum of 8 alphanumeric characters or a maximum of 63 alphanumeric characters.
Otherwise, when using the Hexadecimal format, your entry MUST
consist of 64
hexadecimal characters.
Page 77
67
SStteepp 22::
For WPA-Personal
Set the CCiipphheerr TTyyppee to TTKKIIPP. WPA replaces WEP with a strong encry ption tec hnology cal led Temporal K ey Integrity Protocol (TKIP) with Message Integrity Check (MIC).
For WPA2-Personal
Set the CCiipphheerr TTyyppee to AAEESS. Advanced Encryption Standard (AES) is a stronger symmetric 128-bit block data encryption technique. AES is a requirement of WPA2 under the IEEE
802.11i standard.
For WPA-Personal-AUTO
Set the CCiipphheerr TTyyppee to AAuu
tto
o to allow the access point to automatically
detect the cipher type to use.
SStteepp 33::
Enter the GTK (Group Transient Key) Updates. This is the length of time after which the access point will automatically generate a new shared key to secure multicast/broadcast tr affic among all stations that are communicating with it. By default, the value is 600 seconds.
SStteepp 44::
Press the AAppppllyy button and reboot your system, after which your settings will become effective.
Page 78
68
H
H
OOWW TTOO SSEETT UUPP
880022..1
1
X
X
//RRAADDIIUUSS
(Only available in Access Point mode) The guidelines below will help you to set up the access point for using
802.1x/RADIUS.
At the IEEE 802.1x Setup page,
SStteepp 11::
Key in the IP address of the Primary RADIUS Server in your WLAN. You can optionally add in the IP address of a Secondary RADIUS Server, if any.
The RADIUS authenti c ati on server M UST
be in the same subnet as your access
point.
SStteepp 22::
By default, the value for Authentication Port number is 1812. You can leave this value as it is. This value must be set to be the same as the one in the RADIUS server.
SStteepp 33::
By default, the value for Accounting Port number is 1813. You can leave this value as it is. This v alue must be set to be the s ame as the one in the RA DIUS server.
Page 79
69
SStteepp 44::
Enter the Shared Secret Key in the field provided.
SStteepp 55::
By default, the Broadcast Key Rotation is set as 600 seconds. You may leave this value as its default setting.
SStteepp 66::
Select the length of each encryption key:
64- bit
10 hexadecimal or 5 ASCII Text
128-bit
26 hexadecimal or 13 ASCI I Text
SStteepp 77::
Press the AAppppllyy button and reboot your system, after which your settings will become effective.
Page 80
70
H
H
OOWW TTOO SSEETT UUPP
WWPPAA E
E
NNTTEERRPPRRIISSEE
(Only Access Point mode supports WPA2-EAP and WPA-EAP-AUTO)
The guidelines below will help you to set up the access point for using WPA-
Enterprise. Please follow the steps below if you have selected the
WPA or WPA1-
Enterprise, WPA2- Enterpri se or WPA- Enterprise -AUTO.
At the WPA1/2-EAP Setup page,
SStteepp 11::
Key in the IP address of the Primary RADIUS Server in your WLAN. You can optionally add in the IP address of a Secondary RADIUS Server, if
any. The RADIUS authentication server MUST
be in the same subnet as your
access point.
SStteepp 22::
By default, the value for Authentication Port number is 1812. You can either leave this value as it is or key in a different Authentication Port but it MUST match the corresponding port of the RADIUS server.
Page 81
71
SStteepp 33::
By default, the value for Accounting Port is 1813. You can leave this value as it is. This value must be set to be the same as the one in the RADIUS server.
SStteepp 44::
Enter the Shared Secret Key used to validate client-server RADIUS communications.
SStteepp 55::
Select the length of each encryption key:
64- bit
10 hexadecimal or 5 ASCII Text
128-bit
26 hexadecimal or 13 ASCI I Text
For WPA-Enterprise
Set the CCiipphheerr TTyyppee to TTKKIIPP. WPA replaces WEP with a strong encry ption tec hnology cal led Temporal K ey Integrity Protocol (TKIP) with Message Integrity Check (MIC).
For WPA2-
Enterprise
Set the CCiipphheerr TTyyppee to AAEESS. Advanced Encryption Standard (AES) is a symmetric 128-bit block data encryption technique. It is a requirement of WPA2 under the IEEE 802.11i standard.
For WPA-
Enterprise -AUTO
Set the CCiipphheerr TTyyppee to AAuuttoo to allow the access point to automatically detect the cipher type to use.
Page 82
72
SStteepp 66::
Enter the GTK (Group Transient Key) Updates. This is the length of time after which the access point will automatically generate a new shared key to secure multicast/broadcast tr affic among all stations that are communicating with it. By default, the value is 600 seconds.
SStteepp 77::
Press the AAppppllyy button and reboot your system, after which your settings will become effective.
Page 83
73
CChhaapptteerr 66:: W
Wiirreelleessss EExxtteennddeedd FFeeaattuurreess
This section illustrates how to confi gure the wireless extended features. To start with, follow the common preliminary steps described below.
V
V
IIRRTTUUAALL
AAPP ((M
M
UULLTTIIPPLLEE
SSSSIIDD))
Virtual AP implements mSSID (Multi-SSI D) whereby a single wireless card can be setup with up to 16 virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes. Virtual AP delivers multiple serv ices by VLAN segmentati on: making the network think there are many SSI Ds available and chan neling each conn ection through different VLANs to the respective virtual network segments on the Ethernet network.
How it Works
When WLAN PC 1 connects to VAP 1 its packets are channeled to VLAN 10 group where only services connected to Port 2 and Port 3 are available to this wireless connection.
It is similar for WLAN PC 2 and WLAN PC 3. Although they connect to the sam e radio card as WLAN PC 1, WLAN PC 2 can only access the services available at Port 6 and Port 7 and WLAN PC 3 can only access the services avail able at Port 10 and Port 11.Follow these steps to setu p Virtual AP. Follo w these steps to setup Virtual AP.
For more information on Virtual AP (Multi ple SSID) please refer to A ppendix IV: Virtual AP (Multiple SSID) FAQ
Page 84
74
Follow these steps to setup Virtual AP.
Virtual AP
1. Click on WLAN Setup (a/b/g) from the
CONFIGURATION menu.
2. Select Virtual AP.
Virtual AP List page displays.
• Click Apply to register changes.
• Click Clear to clear Virtual AP List.
• Click Ba ck to return to WLAN Basic
Setup page.
• Select the Delete option beside any Virtual APs you wish to delete.
Click Add to goto add Virtual AP page.
1. Enter ESSID name.
2. Settings:
• VLAN ID
• Closed System
• RootAP
3. Select Security Mode
4. Click Apply to make
changes or click Back to return to Virtual AP List page.
1
2
3
Page 85
75
P
P
RREEFFEERRRREEDD
AAP
P
SS
((O
O
NNLLYY AAVVAAIILLAABBLLEE IINN
C
C
LLIIEENNTT
M
M
OODDE
E
))
When there is more than one AP with the same SSID, the Preferr ed APs function allows you define the MAC address of the AP s in order of preference. The MAC address at the top of the Prefe rred APs list has the hi ghest connecti on preference, and the MAC address at the bottom has the lowest connection preference.
Follow these steps to specify your preferred APs.
Preferred APs
1. Click on WLAN Setup from the
CONFIGURATION menu.
2. Select Preferred APs.
1. Enter the MAC addresses of the
preferred APs.
2. Click Apply to effect the
settings.
1
2
Page 86
76
L
L
OONNGG
D
D
IISSTTAANNCCEE
P
P
AARRAAMMEETTEERRS
S
This setup allows the WP54G to calculate and display suggested values for certain parameters to use to ensure that wireless communication takes place efficiently and effortlessly between physically distant APs. The following steps demonstrate how to configure the Long Distance Parameters.
SStteepp 11::
From WLAN Setup under Configuration, click on Advanced, which shows the WLAN Advanced Setup page.
SStteepp 22::
Go to the Extended Features section, and click on the LLoonngg DDiissttaannccee
PPaarraammeetteerrs
s button.
Page 87
77
SStteepp 33::
As illustrated on the Long Distance Parameters Setup page, the Outdoor feature is disabled by default. Select Enable from the pull down menu.
SStteepp 44::
The access point can automati cally calculate the values of the parameters to input based on the distance between your access point and the other wireless device. Enter the distance in meters and click on Show Reference Data.
Page 88
78
SStteepp 55::
You can enter the parameters accordin g to the recommended v alues in the pop-up window, click on the AAppppllyy button to update the changes.
This table describes the par ameters that can be modifi ed in the Long Distance
Parameters page.
Parameters Description
Outdoor The Outdoor parameter is disabled by default. If set to
Enable, the Outdoor parameters will be configured for outdoor communication over short or long distances as specified.
Distance This parameter determines the distance between the
access point and the remote access point. It should be entered in meters.
Slot Time Time is slotted and each unit of time is called one slot
time.
ACK Timeout This parameter determines the timeout allowed for the
sending client to receive the ac knowledgment response from the receiving client. If no ackno wl edgment packet is received within this period, the sender will assume the receiver has not received the packet and will attempt to re-send.
CTS Timeout This Clear-to-Send time is the ti me the wireless sender will
wait for a CTS packet signaling that the channel is idle and it can start data transmission. If no CTS packet is received within this period, the sender will assume the channel is busy and will wait before trying to send again.
Page 89
79
P
P
OOIINNT
T
-
-
TTO
O
--P
P
OOIINNTT
&& P
P
OOIINNT
T
-
-
TTO
O
--M
M
UULLTTI
I
P
P
OOIINNTT
S
S
EETTUUP
P
You can implement Point-to-Point connection by simply setting one access point as RootAP in Access Point mode and setting the other access points to Transparent Client mode.
You can set a root access point and a transparent client to allow point-to-point communication between different buildings and enable you to bridge wireless clients that are kilom etres apart while unifying the networks. Or you can set a root access point and multi ple transparent clients to allow point-to-m ultiple­point communicati on between the access poi nt located at a facility and several other access points installed in any direction from that facility.
Follow these steps to setup RootAP
RRoooottAAPP SStteepp 11::
Click on WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu. You wi ll see the sub- menus expanded under WWLLAANN SSeettuupp. Click on BBaassiicc.
Ensure that TThhee CCuurrrr
eenntt MMooddee
is set to AAcccceessss PPooiinntt.
To change TThhee CCuurrrreenntt MMooddee, please refer to: Common Configuration – WLAN Setup - To Configure the Basic Setup of the Wireless Mode.
Page 90
80
RRoooottAAPP SStteepp 22::
Select AAcctt aass RRoooottAAPP, click on the AAppppllyy button and reboot your device to let your changes take effect.
Page 91
81
Follow these steps to setup Transparent Client/s.
TTrraannssppaarreenntt CClliieenntt SStteepp::
Click on WWLLAANN SSeettuupp from the CCOONNFFIIGGUURRAATTIIOONN menu. You wi ll see the sub- menus expanded under WWLLAANN SSeettuupp. Click on BBaassiicc.
Ensure that TThhee CCuurrrr
eenntt MMooddee
is set to TTrraannssppaarreenntt CClliieenntt.
To change TThhee CCuurrrreenntt MMooddee, please refer to: Common Configuration – WLAN Setup - To Configure the Basic Setup of the Wireless Mode.
Repeat Transparent Client step to add more points to the Point-to-MultiPoint connection.
Page 92
82
CChhaapptteerr 77:: SSyysstteem
m UUttiilliittiieess
This chapter provides guidelines in using: The SYSTEM TOOLS menu The HELP menu
U
U
SSIINNGG TTHHEE
SSYYSSTTEEMM TTOOOOLLSS M
M
EENNU
U
S
S
YYSSTTEEMM
I
I
DDEENNTTIITTY
Y
If your network operates with sev eral access points, you would find it useful to have a means of identifying each indivi dual device.
You can define the System Identity of the access point to be uniquely identifiable as follows:
SStteepp 11::
Click on System Identity from the SYSTEM TOOLS menu.
Page 93
83
SStteepp 22::
Enter a unique name in the System Name field.
SStteepp 33::
Fill in the name of a person to contact in the System Contact field.
SStteepp 44::
Fill up the System Location field. If there are mul tiple devices in your network or building, this entry might help to identify the device location.
SStteepp 55::
Click on the AAppppllyy button to effect the changes.
Page 94
84
S
S
YYSSTTEEMM
C
C
LLOOCCKK
S
S
EETTUUP
P
SStteepp 11::
Click on System Clock Setup from the SYSTEM TOOLS menu.
SStteepp 22::
Select the appropriate time zone from the Select to Change the Time Zone for the Router Location drop-down list.
SStteepp 33::
Enable the Auto Time Setting (SNTP) radio button. SNTP stands for Simple Network Time Protocol and is used to synchronise computer clocks.
SStteepp 44::
Fill in the Time Servers field and click on the Apply button to effect the changes.
Page 95
85
F
F
IIRRMMWWAARREE
U
U
PPGGRRAADDE
E
Keep your access point updated with the latest cap abili ties by downloadi ng its latest firmware revision from either of Compex’s corporate web sites at www.compex.com.sg or www.cpx.com before following the next steps. You can check the types and version of your fi rmware by clicking on About System from the HELP menu.
To begin with, ensure that you hav e downloaded the latest firmware onto yo ur local hard disk drive.
SStteepp 11::
Click on Firmware Upgrade from the SYSTEM TOOLS menu.
SStteepp 22::
Click on the BBrroowwssee button to locate the file.
SStteepp 33::
Click on the UUppggrraaddee button.
Page 96
86
Follow the instructions giv en during the upgrading process.
SStteepp 44::
You need to reboot the system after the firmware upgrade.
NOTE
The firmware upgrade process must NOT be interrupted otherwise the device might become unusable.
Page 97
87
B
B
AACCKKUUPP OORR
R
R
EESSEETT
S
S
EETTTTIINNGGS
S
You may choose to save the current configuration profi l e, to make a backup of it onto your hard disk, to restore an earlier profile saved on file or to reset the access point back to its default settings.
R
R
EESSEETT YYOOUURR SSEETTTTIINNGGS
S
SStteepp 11::
Click on Backup or Reset Settings from the SYSTEM TOOLS menu.
SStteepp 22::
To discard configurations made and restore the access point to its initial factory settings, click on RReesseett button.
SStteepp 33::
The system will prompt you to reboot your device. Click on the RReebboooott button to proceed.
Page 98
88
B
B
AACCKKUUPP YYOOUURR
S
S
EETTTTIINNGGS
S
SStteepp 11::
Click on Backup or Reset Settings from the SYSTEM TOOLS menu.
SStteepp 22::
If you want to back up the current settings of your access point onto your hard disk drive, cli c k on the BBaacckkuupp button.
SStteepp 33::
Next, save your configuration file to your local disk.
Page 99
89
R
R
EESSTTOORREE YYOOUURR
S
S
EETTTTIINNGGS
S
SStteepp 11::
Click on Backup or Reset Settings from the SYSTEM TOOLS menu.
SStteepp 22::
If you want to store back the settings that you had previously saved, click on the BBrroowwssee…… button. Proceed to the folder where you saved your configuration file.
Click on the RReessttoorree button and the system will prompt you to reboot your device.
Page 100
90
R
R
EEBBOOOOTT
S
S
YYSSTTEEM
M
Most of the changes you make to the system’s settings require a system reboot before the new parameters can take effect.
SStteepp 11::
Click on Reboot System from the SYSTEM TOOLS menu.
SStteepp 22::
Click on the RReebboooott button.
SStteepp 33::
Wait for the system to reboot and the login page will be displayed.
Loading...