Comtec FT213 User Manual

Page 1
FT200 Series Wireless Access Point
Model FT213
User’s Manual
1
Page 2
Table of Content
CHAPTER 1: INTRODUCTION----------------------------------------------------------------------------------------------------4
OVERVIEW ----------------------------------------------------------------------------------------------------------------------------------- 4 KEY FEATURES ----------------------------------------------------------------------------------------------------------------------------- 4 PREPARATION FOR USE -------------------------------------------------------------------------------------------------------------------5 MINIMUM SYSTEM AND COMPONENT REQUIREMENTS--------------------------------------------------------------------------------6
CHAPTER 2: BASIC INSTALLATION AND SECURITIES------------------------------------------------------------7
OPERATING DISTANCE TIPS --------------------------------------------------------------------------------------------------------------7 DEFAULT FACTORY SETTINGS------------------------------------------------------------------------------------------------------------ 7 GETTING TO KNOW WIRELESS SECURITY OPTIONS----------------------------------------------------------------------------------8
Security Precautions---------------------------------------------------------------------------------------------------------------- 8
SECURITY OPTIONS ------------------------------------------------------------------------------------------------------------------------8 INSTALLING FT213 ACCESS POINT------------------------------------------------------------------------------------------------------9 DEPLOY THE FT213 ACCESS POINT -------------------------------------------------------------------------------------------------- 10
CHAPTER 3: GENERAL INFORMATION------------------------------------------------------------------------------------11
INFORMATION-------------------------------------------------------------------------------------------------------------------------------11
CONNECTION ------------------------------------------------------------------------------------------------------------------------------ 12 STATISTICS --------------------------------------------------------------------------------------------------------------------------------- 13
CHAPTER 4: COPIOUS FUNCTIONALITIES----------------------------------------------------------------------------- 14
TIME SERVER --------------------------------------------------------------------------------------------------------------------------- 14 BRIDGE/ROUTER MODE------------------------------------------------------------------------------------------------------------- 14 ANY IP------------------------------------------------------------------------------------------------------------------------------------ 15 UNDERSTANDING RADIUS SETTINGS ----------------------------------------------------------------------------------------- 16 FIREWALL MANAGEMENT------------------------------------------------------------------------------------------------------------ 18 VIRTUAL SERVER ---------------------------------------------------------------------------------------------------------------------- 19
CHAPTER 5: WIRELESS SETUP ----------------------------------------------------------------------------------------------- 21
OPERATING MODE--------------------------------------------------------------------------------------------------------------------- 21 VAP / VLAN SETTINGS------------------------------------------------------------------------------------------------------------ 22
Overview --------------------------------------------------------------------------------------------------------------------------- 22
UNDERSTANDING WEP/WPA SECURITY OPTIONS ----------------------------------------------------------------------- 24 ACCESS CONTROL---------------------------------------------------------------------------------------------------------------------- 24 WDS MODE ----------------------------------------------------------------------------------------------------------------------------- 25 SMART WDS---------------------------------------------------------------------------------------------------------------------------- 26 ADVANCED SETTINGS ---------------------------------------------------------------------------------------------------------------- 27
Wi-Fi Multi-media (WMM) ------------------------------------------------------------------------------------------------ 27 Super-G and Turbo-A wireless parameters------------------------------------------------------------------- 28
CHAPTER 6: SITE SURVEY AND LINK TEST---------------------------------------------------------------------------- 29
SITE SURVEY---------------------------------------------------------------------------------------------------------------------------- 29 LINK TEST ------------------------------------------------------------------------------------------------------------------------------- 29
CHAPTER 7: MANAGEMENT----------------------------------------------------------------------------------------------------- 31
CHANGE PASSWORD------------------------------------------------------------------------------------------------------------------ 31 REMOTE MANAGEMENT -------------------------------------------------------------------------------------------------------------- 31 UPGRADE FIRMWARE----------------------------------------------------------------------------------------------------------------- 37 BACKUP / RESTORE SETTINGS---------------------------------------------------------------------------------------------------- 38 EVENT LOG------------------------------------------------------------------------------------------------------------------------------- 39 REBOOT AP------------------------------------------------------------------------------------------------------------------------------ 40
CHAPTER 8: WARRANTY INFORMATION ------------------------------------------------------------------------------- 41
2
Page 3
FCC STATEMENT----------------------------------------------------------------------------------------------------------------------- 42
CHAPTER 10: TECHNICAL SUPPORT -------------------------------------------------------------------------------------- 43
3
Page 4
Chapter 1: Introduction
This manual covers the installation and operation of the Comtec’s FT213 Wireless Access Point. This Access Point provides a secure, affordable, and easy-to-use wireless LAN solution that combines flexibility with the enterprise-class features required by networking professionals. This chapter gives an overview of the enterprises-class access point, as well as its key features. In addition, we detail about the hardware description, system requirement and basic installation.
Overview
FT213 access point distinguishes herself by one built-in mini-PCI card, providing wired and wireless two ports in a bigger infrastructure. Typically, VAP functionality allows a single network AP to behave as “8” number of virtual network APs. This does away with the limitation by the sheer number of Ethernet connections that need APs acting as a proxy. WMM prioritizes traffic demands from different applications and extends Wi-Fi’s high quality end-user experience from data connectivity to voice, music, and video applications under a wide variety of environment. This Access points serves as the connection point between wireless and wired networks or as the center point of a stand-alone wireless network. In large installations, wireless users within radio range of an access point can roam throughout a facility while maintaining seamless, uninterrupted access to the network. You can configure and monitor FT213 using the command-line interface (CLI), the browser-based management system, or Simple Network Management Protocol (SNMP). Networks are useful tools for sharing computer resources. You can access one printer from different computers and access data located on another computer's hard drive. Networks are eve n used for playing multipla yer video games. So , networks are not only useful in homes and offices , th ey c an also be fun. Use the instructions in t his Guide to help you connect FT213, set it up, and configure it to bridge your di fferent networks.
Key Features
FT213 is use-friendly and provides solid wireless and networking support. The following standards and conventions are supported:
• Standards Compliant. The Wireless Access Point complies with the IEEE 802.11a/b/g for Wireless LANs.
• WEP support. Support for WEP is included 64-bit, 128-bit, and 152-bit keys.
• DHCP Client Support. DHCP Server provides a dynamic IP address to PCs and other devices upon request. The FT213 can act as a client and obtain information from your DHPC server.
• RADIUS Accounting - Enable accounting on FT213 to send accounting data about wireless client devices to a RADIUS server on your network.
• SNMP Support. Support for Simple Network Management Protocol (SNMP) Management Information Base (MIB) management.
• Multiple op erating modes: Access point Station Adapter Wireless Bridge. Wireless Repeater
4
Page 5
Inter-building
• Repeater mode—Configure FT213 as a wireless repeater to extend the c overage area of your wireless network.
• VAPs Assign Multi-SSIDs on your access point (one SSID per VAP) to differentiate policies and services among users forming a wide variety of VLANs.
• QoS Use this feature to support qual ity of s ervice fo r prioritizing tr affic from th e Ethernet to FT213. FT213 also supports the voice-prioritization schemes used by 802.11a/b/g wireless phones.
• Transmit Power Control Supports settable transmit power l evels to adjust co verage cell size, r anging from full, half(50%), quarter(25%) eighth(12.5%) and min
• Atheros Super AG Mode: Super AG mode enables the transmission up to 108Mbps
• Multiple security settings per VLAN with up to 8 VLANs Security settings for multiple groups – so employees, guests and contractors now easily and securely share the same infrastructure
• Access Control. The Access Control MAC address filtering feature can ensure that only trusted wireless stations can use the to gain access to your LAN.
• Hidden Mode The SSID is not broadcast assuring only clients configured with the correct SSID can connect.
Preparation for Use
The Comtec's FT213 Wireless Access Point requires physical mounting and installation on the site, follow ing a pres cribed pla cem en t design to ensure optimum operation and roaming. The FT213 operates with Power ov er Ethernet (PoE) which requ ires the installation of a separate Power injector which “injects” DC current into the Cat5 cable.
The FT213 package includes the following items:
• The FT213 Wireless Access Point
• POE Power Injector
• AC Power Cord
• Mast Mounting Kit & Screw
• Documentation as PDF files (on CD-ROM)
• Quick installation guide
The FT213 can be mounted outdoor on a high post to achieve the best bridge result. If mounted outdoor , the outdoor protection kit must be used to prevent lightning damage.
Minimum System and Component Requirements
The FT213 is designed to be attached to the Mast at appropriate locations. To complete the configuration, you should have at least the following components:
• Access to at least one laptop or PC with an Ethernet card and cable t hat can b e used to complete the initial configuration of the unit.
5
Page 6
• A Web browser progr am (such as Microsoft Internet Explorer 6.0 or later, or Netscape
4.78 or later) installed on the PC or laptop you will be using to configure the Access Point.
• TCP/IP Protocol (usually comes installed on any Windows PC.)
Chapter 2: Basic Installation and Securities
6
Page 7
This chapter explains how to place and connect the Comtec’s Access Point. In addition, the security features are elaborated. Note
Yo u need to prepare these three things before you can establis h a connection through your wireless access point.
• A location for the that conforms to the Observing Placement and Range Guidelines below.
• The wireless access point connected to your LAN through a device such as a hub, switch, router, or Cable/DSL gateway.
• One or more computers with properly configured 802.11a/b/g.
Operating Distance Tips
The range of your wireless connection is significantly determined by the physical placement of FT213. To optimize the results, place your wireless access point:
• Near the center of the area in which your PCs will operate.
• In an elevated l ocation s uch as a high shelf where the wirelessly c onnected PCs have line-of-sight access (even if through walls).
• Away from sources of interference, such as PCs, microwaves, and 2.4 GHz cordless phones. • Away from large metal surfaces.
• Putting the antenna in a vertical position provides best side-to-side cover age. Putting the antenna in a horizontal position provides best up-and-down coverage.
• If using multiple access points, it is better if adjacent access points use different r adio frequency Channels to reduce interference. The recommended Channel spacing between adjacent access points is 5 Channels (for example, use Cha nnels 1 and 6, or 6 and 11).
Default Factory Settings
We’ll detail about FT213 default factory settings below. Factory Default Restore will enable you to restore these defaults.
FEATURE FACTORY DEFAULT SETTINGS
User Name (case sensitive) admin Password (case sensitive) passwor d Access Point Name APxxxxxx(xxxxxx represents the last 6 digits of
MAC address) Country / Region United States Router Mode Bridge IP T ype static IP
7
Page 8
IP Addr ess 192.168.1 .1 IP Subnet Mask 255.255.255.0 Default Gate way 0.0.0.0 Operating Mode Access Point Wireless Mode 802.11a Channel / Frequency 52 / 5.260GHz
Getting To Know Wireless Security Options
Comtec wants to make wireless networking as safe and easy for you as possible. The current generation of products provides several network security features, but they require specific action on your part for implementation. So, keep the following in mind whenever you are setting up or using your wireless network.
Security Precautions
The following is a complete list of security precautions to take as shown in this User’s Manual. (at least steps 1 through 5 should be followed):
1. Change the default SSID.
2. Disable SSID Broadcast.
3. Change the default passw or d f or t he Administrator account.
4. Enable MAC Address Filtering.
5. Change the SSID periodically.
6. Use the highes t encry ption al gorithm possible. Use WPA if it is available. Please note that this may reduce your network performance.
7. Change the WEP encryption keys periodically.
To ensure network security, steps one through four should be followed, at least. Wireless networks are easy to find. Hackers know that in order to join a wireless network, wireless networking products first listen for “beacon messages”. These messages can be easily decrypted and contain much of the network’s information, such as the network’s SSID (Service Set Identifier).
Security Options
There are several ways you can enhance the security of your wireless network:
• Restrict Access Based on MAC address. You can restrict access to only trusted clients so that unknown clients cannot wirelessly connect to the FT213. MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed.
• Use WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared Key authentication and WEP data encryption will block all but the most determined eavesdropper.
• Use WPA or WPA-PSK. Wi-Fi Protected Access (WPA) data encryption provides data
WPA makes it virtually impossible to compromise.
• Enable Wir eless Security Separator
The associated wireless clients will not be able to communicate with each other if this
feature is enabled. The default setting is Disable.
8
Page 9
Installing FT213 Access Point
Before installing, you should mak e sure that Ethernet network is perf ectly working. Y ou will be connecting the FT213 to the Ethernet network so that computers with 10/100 Fast Ethernet adapters will communicate computers on the Ethernet.
SETUP THE ACCESS POINT Tip
Before mounting the FT213 in a high location, first set up and test the FT213 to verify wired network connectivity. a. Prepare a computer with an Ethernet adapter . If this computer is already part of your
network, record its TCP/IP configuration settings.
b. Configure the computer with a static IP address of 192.168.1.x (x cannot be 1)and
255.255.255.0 for the Subnet Mask.
c. Connect an Ethernet cable from the FT213 to the computer. d. Turn on your computer, connect the power adapter to the FT213
CONFIGURE LAN AND WIRELESS ACCESS
Configure the Ethernet port for LAN access
• Connect to the FT213 by opening your browser and entering http://192.168.1.1 in the address field. A login window like the one shown below opens:
Figure: 2-1 login window
When prompted, please enter admin for Name and password for password, Clicking
9
Page 10
Login now, it will navigate you into FT213’s homepage-----General Information will be shown below.
Figure: 2-2 general information
Deploy the FT213 Acces s Point
a. Disconnect the FT213 and position it where you will deploy it. The best location is
elevated, such as wall mounted or on the top of a cubicle, at the center of your wireless coverage area, and within line of sight of all the mobile devices.
b. Lift the antenna on either side so that they are vertical.
Note: Consult the antenna positioning and wireless mode configuration information in the Advanced Configuration chapter of the Reference Manual.
c. Connect an Ethernet cable from your FT213 Access Point to a LAN port on your router,
switch, or hub.
d. Connect the power adapter to the wireless access point and plug the power adapter
in to a power outlet.
10
Page 11
Chapter 3: General Information
General information gives you a basic concept of the FT213 Access Point.
Information
Figure: 3-1 general information
We’ll elaborate the information from the FT213’s homepage Access Point Name: You may assign any device name to FT213. This name is only
used by FT213 administrator for identification purposes. Unique, memorable names are helpful, especially if you are employing multiple access points on the same network. The default name is APxxxxxx..
MAC Address: Short for Media Access Control address, a hardware address that
uniquely identifies each node of a network.
Country/Region: This field identifies the region where the FT213 can be used. It may
not be legal to operate the wireless features of the wireless access point in a region other than one of those identified in this field. The default country is the United States.
Firmware Version: Firmware is s tored in a flash memory and can be upgrade d easily ,
using your Web browser, and can be upgraded via ftp server or ftp server. IP T ype: By default, the FT213 is configured as static IP Address.
IP Address: The IP address must be unique to your network. The default IP address is
192.168.1.1
11
Page 12
Note T o associate FT213 to your PC, make sure the PC IP address need to be matched the AP .
For instance, the FT213 is 192.168.1.1, and your PC IP should be 192.168.1. X.
Subnet Mask: The Subnet Mask must be the same as that set on the LAN that your
Access Point is connected to. The default is 255.255.255.0.
Operating Mode: provides five modes, Access Point, Station, bridge, repeater and
inter-building.
Access Point: Act as a standard 802.11a/b/g. The default mode is Access Point. Station: Perform as a client station associated to other APs. Be sure that they share the
same SSID when connected.
Bridge: The F T213 acts as a bridge connecting APs. Two bridge modes are available
below.
Point-to-Multi-Point Bridge:Select this only if this is the “Master” for a group of
bridges. The other bridge must use this MAC address. They then send all traffic to this “Master”, rather than communicate directly with each other. WEP should be used to protect this traffic.
Wireless Repeater: In this mode, the FT213 can co mmunica te with ano ther wirel ess
station or wireless bridge. You can enter the MAC address of both adjacent repeaters in the fields provided to communicate with other wireless bridge or use SSID to communicate with other wireless station. WEP should be used to protect this communication.
Wireless Mode: Select the desired wireless operating mode. The default mode is
802.11a.
Channel: This field identifies which operating frequency will be used. Security Profiles: This provides a list of virtual APs derived from FT213 Virtual AP,
spelling out profile name, SSID, MAC, security, and status.
Connection
Under the Information heading, click the connection link to view the connection status shown below.
Figure: 3-2 connection status
Note If the wireless access point is rebooted, the table data is lost until the wireless access
point rediscovers the devices.
12
Page 13
T
T
Statistics
The statistics provide various LAN and WAN statistics.
Figure: 3-3 statistics
Field Description
Wired Ethernet
Wireless
Packets
Bytes The number of bytes sent since the was
Unicast Packets The Unicast packets sent since the was
Broadcast Packets
Multicast Packets The Multicast packets sent s ince th e was
Total Packets The Wireless packets sent since the was
Total Bytes The Wireless bytes sent since the was
he number of packets sent since the
was restarted.
restarted.
restarted.
he Broadcast packets sent since the
was restarted.
restarted.
restarted.
restarted.
13
Page 14
Chapter 4: Copious Functionalities
The versatile FT213 access point provides various, applicable functions.
Time Server
By click Basic Settings, the “Basic Settings” will appear shown below.
Figure: 4-1 Basic settings
The FT213 allows you to synchronize the time between your network and time server by using NTP Time Server. Time Sever provides correct and cur rent time in any world tim e zone, country or major city. Accurate adjustments for Daylight Saving Time (or Summer Time ) are made according to each location's rules and laws. Time Server Port: This field identifies the time server port like 123. Time Zone: Select the time zone location for your setting. Current Time: This field identifies the current time in your specific time Zone.
Bridge/Router Mode
From the system setup, click IP Settings, you’ll be navigated into the WAN/LAN Settings.
14
Page 15
Figure: 4-2 WAN/LAN settings
FT213 can be figured as bridge mode and router mode.
Bridge Mode
Under Bridge Mode, the FT213 will act as a pass-through bridging your network, by associating with various devices. This can extend your radius of your ne twork. Spanning T ree: Enabling spanning tree can prev ent undesirable loops in the network, ensuring a smooth running network. By default, the function is enabled.
Router Mode
Under Router Mode, the FT213 has two ports, WAN port and LAN ports. If your network has a requirement to use a diff erent IP ad dres sing scheme, yo u c an make those changes in this menu. Thes e settings are on ly required if the Refresh” is chosen. Remember to click Apply to save your changes.
Any IP
If IP address has slipped your mind, any IP functionality can relieve your anxiety. Enabling any IP, you’ll feel free to enter IP Address, IP Subnet Mask and Gateway, enjoying internet surf. Please refer to the diagram below.
15
Page 16
Take the steps to activate the functionality.
STA1
PC
DUT
Any IP Enabled
STA2
Configure the FT213 as router mode. Make sure your station connected to the AP. Set correct IP parameters for the AP. Enable any IP
Understanding RADIUS Settings
RADIUS is a server for remote user authentication and accounting. It can be used on any network that needs a centralized authentication and/or accounting service for its workstations. From the system Setup, click Radius Settings, the RADIUS Settings will display as below.
Figure: 4-3 Radius settings
You will also have to fill in the following Radius server settings:
• Primary Radius Server IP Address
16
Page 17
This field is required. Enter the IP address of the Radius Server o n your LAN or WA N..
• Secondary Radius Server IP Address
This field is optional. Enter the IP address of the Secondary Radius Server on your LAN.
• Radius Port
Enter the port number used for connections to the Radius Server.
• Radius Shared Key
Enter the desired value for the Radius shared k ey . This key enables the client to log in to the Radius server and must match the value used on the Radius server.
•Radius Accounting Option
The Radius Accounting option can be enabled so that you can track various information like who connected to the network, when they connected , how long they were connected, how much network traffic they generated, and so on.
HTTP Redirect
Currently market campaign has a stake in the future of you r company , so that plugging your products on website is a basic step for your goods. The FT213 access point has insight into your need. Enabling HTTP Redircet, you can enter the company website (for example, http://www.google.com web that first appear when someone is surfing on internet , vi a a station conn e ct ed to your AP for internet surf.
The following is the HTTP Redirect Settings.
). It is your desired
FT213
STA2 STA1
Figure: 4-4 HTTP Redirect settings URL Enter your desired website in this field. Be sure to click “Apply” to save the configuration.
Note
17
Page 18
Be sure to your AP connected to the internet when using HTTP Redirect.
Firewall Management
Today’s companies rely on highly networked, secure computing environments to efficiently and safely conduct business. Firewalls are a key component of any secure network. Firewalls are configured to allow “desired” traffic in and to keep “undesired” traffic out. The FT213 access point is also qualified for firewall management. Please see the diagram below. Acting as a firewall, the AP will filter your undesired data and protocols, only delivering the “wanted” for your PC. Click the firewall link and you’ll be navigated to Firewall Management interface.
Figure: 4-5 firewall management
Before applying the firewall management, you need enable firewall. Here we’ll discuss Firewall.
• Name
Enter your desired firewall rule name in this field.
• Allow
This field identifies which pac kets hav e IP address es specified b y you, are a llowed to transmit at your LAN.
• Deny
This field identifies w hich pac kets ha ve I P addres ses spec ified by you, are ban ned to transmit at your LAN.
• Interfa c e
This is optional, WAN or LAN.
• Destination This specifies where packets are bound for.
• IP Range Start
18
Page 19
This specifies the starting-point of your specific IP addresses.
• IP Range End
This specifies the ending-point of your specific IP addresses.
• Protocol
This is optional, TCP, DCP, ICMP or *. Select which protocol you want to perform “Allow” or “Deny”.
Note * indicates you restrict no protocol to perform “Allow” or “Deny”.
• Port Range
This specifies your IP port range.
Schedule
You c an set time when your AP performs firewall management, by enabling “from”. Alternatively, if you desire your AP to perform firewall management for a long time,
please enable “always”. When completing all firewall rules configuration, please click Add Rule. Firewall Rule List will appear below.
Figure: 4-6 FT213 firewall list
Virtual Server
Note Virtual server can be enabled only under router mode.
The FT213 access point distinguishes by acting as a virtual server. This most cost-effective serv er virtualization technology is engineered for heteroge neous network. Please refer to the following diagram. Under router mode, designed for the virtual server, the AP is wirelessly coupled to FTP server, mail server and log server on LAN port; on WAN port, the AP is coupled to PC.
STA1: FTP Server
PC1
HUB
WAN Port
AP
LAN Port
AP
19
STA2: Mail Server
STA3: Log Server
Page 20
The AP is the virtual server, so that you ha ve access to download files, enjoy e-mails or undertake others, only via your PC.
Figure: 4-7 virtual server management
We’ll discuss virtual elements below.
•Name
Enter the virtual server’s name in this field.
•Private IP
This specifies the IP Address at your LAN.
•Protocol Type
This field is optional. Select TCP or UDP.
•Private Port
This specifies your LAN port.
•Public Port
This specifies your WAN port.
Schedule
You can set time-limit when your AP acts as a virtual server, by enabling “from”.
Alternatively, if you desire your AP to act as a virtual server for a long time, please
enable “always”. When completing configuration of your virtual server, please click “Add Rule” to save the setting.
•Virtual Server List
This provides you with the detailed list of virtual servers.
20
Page 21
Chapter 5: Wireless Setup
This chapter focuses on the FT213 access point’s powerful wireless function. Basic Settings The versatile FT213 access point proves adequate to five operating modes for your various purposes.
Figure: 5-1
Operating Mode
FT213 is capable of five operating modes, access point, station adapter, wireless bridge, wireless repeater, and wireless inter-building.
•Access Point
Any 802.11a/b/g wireless station can communicate with it by correct SSID.
•Wireless bridge
In this mode, the FT213 only communicates with another bridge-mode wireless
station. Y ou must enter the MAC address (physical address) of the other bridge-mode
wireless station in the field provided. WEP should be used to protect this
communication.
•Point to Multi-Point Bridge
Select this only if this FT213 is the “Master” for a group of bridge-mode wireless
stations. The other bridge-mode wireless stations must be set to Point-to-Point
Bridge mode, using this FT213 MAC address. They then send all traffic to this “Master” ,
rather than communicate directly with each other . WEP should be used to protect t his
traffic.
• Wireless Repeat e r.
In this half-duplex mode, the FT213 can communicate with another wireless bridge
and wireless station. You must enter the MAC address of both adjacent wireless
bridges in the fields provided. WEP should be used to protect this communication.
•Inter-building
This is Comtec own brand of WDS mode. Under this mode, FT213 will automatically
connect XI-1500, without manually entering MAC address for each other.
21
Page 22
•SSID
The SSID is the unique name shared among all de vices in a wireless network. It is
case-sensitive, must not exceed 32 alphanumeric characters, and may be any
keyboard character. Make sure this setting is the same for all devices in your wireless
network. The default SSID name is wireless.
•BSSID
A group of Wireless Stations and a si ngle access point, al l using the sam e ID (SSID),
form a Basic Service Set.
Using the same SSID is essential. Devices with different SSIDs are unable to
communicate with each other. However, some access points allow conne ct ions from
wireless stations which have their SSID set to “any” or whose SSID is blank (null).
•Wireless Mode
Select the desired wireless operating mode. The options are:
11a only – Only 802.11a wireless stations can be used.
Auto (11g/b) – Both 802.11g and 802.11b wireless stations can be used.
11g only - Only 802.11g wireless stations can be used.
11b only - All 802.11b wireless stations can be used. 802.11g wireless stations can
still be used if they can operate in 802.11b mode.
• Channel. This field identifies which operating frequency will be used. It should not be
necessary to change the wireless channel unless you notice interference problems or
setting up the FT213 near another access point.
• Data Rate. Shows the available transmit data rate of the wireless network. The default
is Best.
• Output Power. Set the transmit signal strength of FT213. The options are full, half,
quarter, eighth, and min. Decrease the transmit power if more than one AP is
collocated using the same channel frequency. The default is Full.
Station Mode Flow Control
• Uplink Speed Limit (1-1687): It indicates the transmission rate.
VAP / VLAN Settings
Overview
As the number of data-based syste ms increas e, it becomes more and mo re diffic ult to provide the network infrastructure (due to the sheer number of Ethernet connections that need to be provided) from the perspective of co st, space, and wire manag ement . Luckily, the advent technology called VLAN (Virtual Local Area Network) can achieve her mission. Now it is possible for these multi devices to be multi devices in function without the need for multiple physical network APs. See the diagram below.
22
Page 23
S
S
S
V
V
V
Switc
UnTag UnTag UnTag
h
Tagged
DUT
ETH1 ETH2 ETHn
LAN 1
LAN 2
LAN n
TA1
Under this mode, the FT213 access point can be have as 8 virtual Wireless LAN infrastructures. You can specify unique SSID for these different infrastructures. For example, VLAN1 contains ETH1 and STA1, VLAN2 contains ETH2 and STA2, an d so on. However, they al l share the same and unde rtake different tasks. Some VL ANs can be used for guest Internet access, others for enterprise users, and administrators can be put on a high security VLAN with enhanced firewall permissions. All this can be achieved using a single infrastructure to emulate up to 8 infrastructures. The AP does this by assigning each of the 8 VLANs it’ s own SSI D , so you wil l think yo u are looking at up to 8different wireless networks.
TA2
TAn
Figure 5-2
You can configure each profile by clicking “Edit”. Such configuration as configuring profile name, SSID, enabling “broadcast SSID”, or doing security.
23
Page 24
Understanding WEP/WPA Security Options
The following elaborate WEP/WPA security options. Field Description Network Authentication
Encryption Strength
Security Encryption (WEP) Keys
WPA-PSK (Wi-Fi Protected Access Pre-Shared Key)
WPA2-PSK Identical to WPA-PSK with the exception of the wa y to encryption
WPA-PSK &
WPA 2-PSK
Yo u have two authentication options.
• Open System: No authentication is imposed to the AP. However, if the 802.1x option is configured, authentication of connections can be performed by a RADIUS server.
• Shared: this is for shared key authentication. Data is encrypted. You can select the following data encryption options: Disabled 64- 128- or 152-bit WEP With Open System Authentication and 64- 128- or 152-bit WEP Data Encryption with Shared Key authentication WEP enabled, you can manually enter the four data encryption keys or enable Passphrase to generate the keys automatically. These values must be matched between all Clients and access points at your LAN (key 1 must be the s ame for all, key 2 must be the same for all, etc.) Two ways to create WEP encryption keys:
• Passphrase. Passphrase fu nction s as au tomat icall y case- sensi tive ch aracter s. However not all wireless adapters support passphrase key generation.
• Manual. These values are not case sensitive. 64-bit WEP: enter 10 hexadecimal digits (any combination of 0-9, a-f, or A-F). 128-bit WEP: enter 26 hexadecimal digits (any combination of 0-9, a-f, or A-F). 152-bit WEP: enter 32 hexadecimal digits (any combination of 0-9, a-f, or A-F). WPA Pre-Shared-Key uses a pre-shared key to perform the authentication and generate the initial data encryption keys. Then, it dynamically varies the encryption key. It uses Temporal Key Integrity Protocol (TKIP) for encryption keys. However not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 d o i ncl ud e the cl ie nt so ft war e t ha t su p po rts WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA.
keys. WPA2-PSK uses Advanced Encryption Standard(AES) for encryption keys. You may have the option of WPA-PSK associated with TKIP. Alternatively, you can select WPA2-PSK associated with AES.
Access Control
Authentication by username and password is only part of the st ory. Freq uently you want to let people in based on somet hing other than who they are. So mething such as where they are coming from. Restricting access based on something other than the identity of the user is generally referred to as Access Control.
24
Page 25
Figure: 5-3
You can restrict access to only trusted STAs so that unknown STAs cannot wirelessly connect to the FT213 by turning Access Control on. By entering MAC Address of new stations, you can manually add the stations to allow them to be connected to the FT213.
WDS Mode
In a Wireless Distribution System (WDS) mode, multiple access points can be configured to operate in the WDS m ode to int er -connec t wired LAN s egments that are attached to the FT213 access point. Up to four devices can be connected to the FT213.
25
Page 26
Figure: 5-4
Local MAC Address:
This field provides the FT213 MAC address.
Remote MAC Address:
Enter the MAC Address of your desired devices connected to the FT213 in WDS Mode.
Uplink Speed Limit:
You can specify the transmission rate between the FT213 and other devices by
entering the value in uplink speed limit. The most speed available is
1687 ×64Kbps=105.4375Mbps
Smart WDS
Under bridge mode, enabling smart WDS, the FT213 access point can sniff other FT213 around him and automatically connect those that work in the same channel. WDS Service Group ID If two APs share the same group ID, they will be automatically connected. Smart WDS can be activated on the premise that APs must be FT213.
Advanced Settings
26
Page 27
The default advanced wireless LAN parameters usually streamline your work.
Figure: 5-5
Wi-Fi Multi-media (WMM)
Currently interest and demand for multimedia applications and advanced capabilities are growing quickly. In the residential market, Voice over Internet Protocol (VoIP), video streaming, music streaming, and interactive gaming are among the most anticipated applications. In enterprise and public networks, support for VoIP, real time streaming of audio and video content, as well as traffic management, allows network owners to invent advanced methods to offer a richer and more diverse set of services. WMM prioritizes traffic demands from different applications and extends Wi-Fi’s high quality end-user experience from data connectivity to voice, music, and video applications under a wide variety of environment and traffic conditions. WMM defines four access categories (voice, video, best effort, and background) that are used to prioritize traffic so that these applications have access to the necessary network resources. When your STA connect to the FT213, you can enjoy high-quality multimedia function at your LAN, by enabling WMM. Note
Before enabling WMM, make sure your stations must also support WMM. Further, your operating system must be Windows XP with Service Pack 2.
Super-G and Turbo-A wireless parameters
27
Page 28
Enabling super-G or Turbo-A, your transmission rate could reach up to 108Mbps. The following describes the advanced wireless parameters.
Field Description
RTS Threshold The packet size used to determine
whether it should use the CSMA/CD (Carrier Sense Multiple Access with Collision Detection) or the CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance) mechanism for packet transmission.
Fragmentation Length This is the maximum packet size use d f or
fragmentation. Packets larger than the size programmed in this field will be fragmented. The Fragment Threshold value must be larger than the RTS Threshold value.
Beacon Interval Specifies the data beacon rate between 20
and 1000.
DTIM Interval The Delivery Traffic Indication Message
specifies the data beacon rate between 1 and 255.
Preamble Type A long transmit preamble may provide a
more reliable connectio n or sligh tly longer range. A short transmit preamble gives better performance. Long is the default
Antenna Select the desired antenna for
transmitting and receiving. Auto is the default.
28
Page 29
Chapter 6: Site Survey and Link Test
Site Survey
Figure: 6-1
Site Survey provides you w ith a table of adjac ent APs connec ted to your FT213 , when it acts as a station. I n terms of each connected A P , Site Survey offers you their personal information, including SSID, BSSID, RSSI, channel mode, connection status and encryption.
Link Test
To optimize the communication between your LAN, link test is designed to test the parameters that indicates communication quality.
Figure: 6-2
29
Page 30
We’ll discuss parameters in link test.
RF Cable Loss(0-10):
This indicates RF loss in cables, ranging from 0 to 10.
Local Antenna Gain(0-99):
This indicates extended coverage provided by the local , for an existing 802.11a/b/g
wireless local area network (WLAN), ranging from o to 99.
Remote Antenna Gain((0-99):
This indicates extended coverage provided by the remote , for an existing
802.11a/b/g wireless local area network (WLAN).ranging from o to 99.
Test Interval (1-60000):This provides testing time Test Packet Size (64-1514):
This tests the size of packet transmitted between the two access points, ranging from
64 to 1514
Test Time (60-86400):
This specifies how long the linking test will last ranging from 60 to 86400.
30
Page 31
Chapter 7: Management
This chapter describes how to manage your FT213 access point.
Change Password
Figure: 7-1 Yo u can have your desired password by changing password. Ta ke the followin g ste p s to change passwo rd.
•Enter your currently-used password in the current field.
•Enter your new password in the New Password field.
•Re-enter the new password to confirm it in the Repeat New Password field. Finally, click “Apply” to save the change. Also, if you desire to restore to the factory-set password, please click “Yes”. The default setting is disabled.
Remote Management
FT213 provides remote management to manage and diagnose your network.
31
Page 32
Figure: 7-2
SSH
Secure Shell (SSH) is a progr am that prov ides a cryptographically secure replacement for Telnet that is considered the de facto protocol for remote logins. SSH runs in the Application Layer of the TCP/IP stack. SSH provides a secure connection over the Internet providing strong user authentication. SSH protects the privacy of transmitted data (such as passwords, binary data, and administra tive commands) by encrypting it. SSH clients make SSH relatively easy to use and are available on most computers including those that run Windows or a type of UNIX. SSH clients are also available on some handheld devices. SSH on FT213 is enabled by default. When user manager is enabled, SSH uses the same usernames and passwords established by the user manager. The applicability of SS H for the FT213 access point allows y ou to hav e insight into your LAN. Note
If your computer does not have t he SSH client installed, you must procure and install it before you can proceed. You can download the latest SSH client from the following site: http://ssh.com/
.
Ta ke the followin g ste ps to man age the FT213 via SSH.. From the Putty Configuration, enter IP address in host name field and port number in port field. Also, select SSH as protocol.
32
Page 33
Figure: 7-3 Press Open, and the screen below should appear.
Figure: 7-4 The login name is admin and password is the default password. After successful login, the screen should show the APdcb325>. In this example, the APdcb325 is the FT213 access point name.. Enter help to display the SSH command help.
33
Page 34
SNMP SNMP (simple network management protocol) is a distributed-management protocol. Via SNMP, you have access to administrate your remotely . R ead Community Name: Y ou have access to read rather than write.The default name is public. Write Community Name: The d efault name is private. Take the steps below to manage your FT213 via SNMP. Enter ftp 192.168.1.1
, then in turn enter admin and password, and finally enter get
Jupiter. mib to get Jupiter. MIB. (The FT213’s software is called Jupiter.)
Figure: 7-5 From MIB Compiler interface, open jupter .mib a nd compile t he file by ena bling compile Jupiter mib on tools menu. Save the compiled files to your disk.
34
Page 35
Figure: 7-6 Load the file to SNMP station. Your screen will appear.
35
Page 36
Figure: 7-7 4 Changing settings with the database query page Follow these steps to change an access point setting from the Database Query page: Step 1 Click Get. The current value for the setting appears in the Value field. Step 2 Modify the value in the Value field. Step 3 Click Set. The new value is set on FT213.
36
Page 37
Upgrade Firmware
Note When uploading software to the FT213 Access Point, it is important not to interrupt the
Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, the upload may fail, corrupt the software, and render the FT213 completely inoperable.
The software of the FT213 is stored in FLASH memory, and can be upgraded as new software is released by . Upgrade files can be downloaded fr om Comtec's Web site. If the upgrade file is compressed (.ZIP file), you must first extract the image (.RM G) file before sending it to the wireless access point. The upgrade file can be sent using your browser. Note
The Web browser used to upload new firmware into the FT213 must support HTTP uploads, such as Microsoft Internet Explorer 6.0 or above, or Netscape Navigator 4.78 or above.
1. Download the new software file from www.com tec.com.tw
and unzip it.
2. From the main menu Managem ent section, click the Upgr ade Firmware link to displa y
the screen above.
3. In the Upgrade Firmware menu, click the Browse button and browse to the location
of the image (.RMG) upgrade file.
4. Click Upload. When the upload completes, your wireless access point will
automatically restart. The upgrade process typically takes about one minute. In some cases, you may need to reconfigure the wireless access point after upgrading.
, save it to your hard disk,
37
Page 38
Backup / Restore Settings
FT213 access point provides backup and restore for file mana gement.
Figure: 7-8 You ha ve access to back up the currently settings by enabling FT213’s Backup function.
Retrieve:
Retrieve button allows you to retrieve yo ur backup files.
Restore:
This button can be used to clear ALL data and restore ALL settings to the factory default values.
38
Page 39
Event Log
If you have a SysLog server on your LAN, enable the SysLog option. Event Log offers you activity log information.
Figure: 7-9
• SysLog Server IP address: FT213 will send all the SysLog to the specified IP address if SysLog opti on i s enabl ed. Default: 0.0.0.0
• Port: The port numb er configured in the SysLog server on your network. Defau lt: 514
39
Page 40
Reboot AP
In some cases, if you want to reboot FT213, click Y es and then apply . FT213 will reboot.
Figure: 7-10
40
Page 41
Chapter 8: Warranty Information
LIMITED WARRANTY
Comtec warrants to You that, for a period of one year (the “Warranty Period”), your ’s Product will be substantially free of defects in materials and workmanship under normal use. Your exclusive remedy and ' entire liability under this warranty will be for at its option to repair or replace the Product or refund Your purchase price less any rebates. This limited warranty extends only to the original purchaser. If the Product proves defective during t he W arranty P eriod call Technical Support in order to obtain a Return Authorization Number, if applicable. BE SURE TO HAVE YOUR PROOF OF PURCHASE ON HAND WHEN CALLING. If You are requested to return the Product, mark the Return Authorization Number clearly on the outside of the package and include a copy of your original proof of purchase. RETURN REQUESTS CANNOT BE PROCESSED WITHOUT PROOF OF PURCHASE. You are responsible for shipping defective Products to pays for UPS Ground shipping from back to You only. ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE ARE LIMITED TO THE DURATION OF THE WARRANTY PERIOD. ALL OTHER EXPRESS OR IMPLIED CONDITIONS, REPRESENT ATIONS ANDW ARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF NON-INFRINGEMENT, ARE DISCLAIMED. Some jurisdictions do not allow limitations on how long an implied warranty lasts, so the above limitation may not apply to You. This warranty gives you specific legal rights, and You may also have other rights which vary by jurisdiction. This warranty does not apply if the Product (a) has been altered, except by , (b) has not been installed, operated, r epaired, or ma intained in acco rdance with instructions supplied by , or (c) has been subjected to abnormal physical or electrical stress, misuse, negligence, or accident. In addition, due to the continual development of new techniques for intruding upon and attacking networks, does not warrant that the Product will be free of vulnerability to intrusion or attack. TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT WILL BE LIABLE FOR ANY LOST DATA, REVENUE OR PROFIT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, REGARDLESS OF THE THEORY OF LIABILITY (INCLUDING NEGLIGENCE), ARISING OUT OF OR RELA TED TO THE USE OF OR INABILITY TO USE THE PRODUCT (INCLUDING ANY SOFTWARE), EVEN IF FT213 HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL ’ LIABILITY EXCEED THE AMOUNT PAID BY YOU FOR THE PRODUCT. The foregoing limitations will apply e ven if a ny warr anty or r emedy provided under this Agr eement fails of its essential purpose. Some jurisdictions do not allow the exclusion or li mitation of incidental or consequential damages, so the above limitation or exclusion may not apply to You. Please direct all inquiries to: sales@comtec.com.tw
41
Page 42
Chapter 9: Regulatory Information
FCC Statement
This product has been tested and complies with the specific ations for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guar antee tha t interferenc e will no t occur in a pa rticular installation . If this equipment does cause harmful interference to radio or television reception, which is found by turning the equ ipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
• Reorient or rel o cate the receiving antenna
• Increase the separation between the equipment or devices
• Connect the equipment to an outlet other than the receiver's
• Consult a dealer or an experienced radio/TV technician for assistance FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limit s set forth for an uncontrolled environment. This equipm ent should be installed and oper ated with minimum distance 20cm between the radiator and your body. This transmitter must not be co-located or operating in conjuction with any other antenna or transmitter. To maintain compliance with FCC RF exposure compliance requirements, please follow operation instruction as documented in this manual. Safety Notices Do not use this product near water , for example, in a wet basement or near a swimming pool. Avoid using this product during an e lectr ical storm. There may be a remote risk of electric shock from lightning. Operation is subject to the following two conditions:
1. This device may not cause interference and
2. This device must accept any interference, including interference that may cause undesired operation of the device.
42
Page 43
Chapter 10: Technical Support
Manufacturer’s Statement
The FT213 is provided with warranty. It is not desired or expected that the user open the device. If malfunction is experienced and all external caus es are eliminated, the user should return the unit to the manufacturer and replace it with a functioning unit. If you are experiencing trouble with this unit, the point of contact is: support@comtec.com.tw +886-2-8221 8815 (Monday - Friday, 9am to 6pm EST) or visit our website at www.comtec.com.tw
43
Loading...