D-link DWL-8600AP User Manual

Unified Access Point (AP) Administrator’s Guide

Product Model : DWL-8600AP
Unified Wired & Wireless Access System Release 1.0 December 2009
©Copyright 2009. All rights reserved.
D-Link UAP Software User Manual
Software User Manual D-Link UAP

TABLE OF CONTENTS

Section 1: About This Document .....................................................................................11
Document Organization............................................................................................................................. 11
Additional Documentation......................................................................................................................... 11
Document Conventions............................................................................................................................. 12
Online Help, Supported Browsers, and Limitations ............................................................................... 13
Section 2: Getting Started.................................................................................................14
Administrator’s Computer Requirements................................................................................................ 15
Wireless Client Requirements .................................................................................................................. 16
Dynamic and Static IP Addressing on the AP ......................................................................................... 16
Recovering an IP Address .................................................................................................................... 16
Discovering a Dynamically Assigned IP Address.................................................................................. 17
Installing the UAP ...................................................................................................................................... 17
Basic Settings ............................................................................................................................................ 20
Connecting to the AP Web Interface by Using the IPv6 Address ......................................................... 21
Using the CLI to View the IP Address ...................................................................................................... 21
Configuring the Ethernet Settings............................................................................................................ 22
Using the CLI to Configure Ethernet Settings ....................................................................................... 23
Configuring IEEE 802.1X Authentication ................................................................................................. 24
Using the CLI to Configure 802.1X Authentication Information ............................................................ 24
Verifying the Installation ........................................................................................................................... 25
Configuring Security on the Wireless Access Point............................................................................... 26
Section 3: Viewing Access Point Status..........................................................................27
Viewing Interface Status............................................................................................................................ 27
Wired Settings (Internal Interface) ........................................................................................................ 27
Wireless Settings .................................................................................................................................. 28
Viewing Events ........................................................................................................................................... 28
Configuring Persistent Logging Options ............................................................................................... 29
Configuring the Log Relay Host for Kernel Messages .......................................................................... 30
Enabling or Disabling the Log Relay Host on the Events Page ............................................................ 30
Viewing Transmit and Receive Statistics ................................................................................................ 31
Viewing Associated Wireless Client Information .................................................................................... 32
34CSFP6XXUAP-SWUM100-D13 Page 3
D-Link UAP Software User Manual
Link Integrity Monitoring ........................................................................................................................33
Viewing Neighboring Access Points ........................................................................................................34
Viewing Managed AP DHCP Information.................................................................................................. 36
Section 4: Managing the Access Point ........................................................................... 37
Ethernet Settings ........................................................................................................................................ 37
Wireless Settings ........................................................................................................................................ 40
Using the 802.11h Wireless Mode......................................................................................................... 42
Modifying Radio Settings...........................................................................................................................43
Virtual Access Point Settings.................................................................................................................... 46
None (Plain-text)....................................................................................................................................50
Static WEP ............................................................................................................................................51
Static WEP Rules ........................................................................................................................... 52
IEEE 802.1X .......................................................................................................................................... 52
WPA Personal ....................................................................................................................................... 54
WPA Enterprise ..................................................................................................................................... 55
Configuring the Wireless Distribution System ........................................................................................ 56
WEP on WDS Links...............................................................................................................................59
WPA/PSK on WDS Links ......................................................................................................................59
Controlling Access by MAC Authentication ............................................................................................60
Configuring a MAC Filter and Station List on the AP.............................................................................60
Configuring MAC Authentication on the RADIUS Server ......................................................................61
Configuring Load Balancing...................................................................................................................... 62
Managed Access Point Overview.............................................................................................................. 63
Transitioning Between Modes ...............................................................................................................63
Configuring Managed Access Point Settings ........................................................................................64
Configuring 802.1X Authentication...........................................................................................................65
Creating a Management Access Control List .......................................................................................... 66
Section 5: Configuring Access Point Services .............................................................. 67
Configuring the Web Server Settings....................................................................................................... 67
Configuring SNMP on the Access Point................................................................................................... 68
Setting the SSH Status............................................................................................................................... 71
Setting the Telnet Status............................................................................................................................71
Configuring Quality of Service (QoS) ....................................................................................................... 72
Enabling the Network Time Protocol Server............................................................................................ 76
Page 4 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
Section 6: Configuring SNMPv3.......................................................................................77
Configuring SNMPv3 Views ...................................................................................................................... 77
Configuring SNMPv3 Groups.................................................................................................................... 78
Configuring SNMPv3 Users ...................................................................................................................... 80
Configuring SNMPv3 Targets.................................................................................................................... 81
Section 7: Maintaining the Access Point .........................................................................82
Saving the Current Configuration to a Backup File................................................................................ 82
Restoring the Configuration from a Previously Saved File.................................................................... 83
Maintenance ............................................................................................................................................... 84
Resetting the Factory Default Configuration ......................................................................................... 84
Rebooting the Access Point.................................................................................................................. 85
Upgrading the Firmware............................................................................................................................ 85
Section 8: Configuring Client Quality of Service ............................................................87
Configuring VAP QoS Parameters............................................................................................................ 87
Managing Client QoS ACLs....................................................................................................................... 89
IPv4 ACLs ............................................................................................................................................. 89
ACL Configuration Process................................................................................................................... 89
Creating a DiffServ Class Map .................................................................................................................. 94
Defining DiffServ ................................................................................................................................... 94
Creating a DiffServ Policy Map ................................................................................................................. 99
Client QoS Status ..................................................................................................................................... 101
Section 9: Clustering Multiple APs ................................................................................103
Managing Access Points in the Cluster ................................................................................................. 103
Clustering Single and Dual Radio APs ............................................................................................... 103
Viewing and Configuring Cluster Members.........................................................................................103
Removing an Access Point from the Cluster.......................................................................................105
Adding an Access Point to a Cluster................................................................................................... 105
Navigating to Configuration Information for a Specific AP .................................................................. 105
Navigating to an AP by Using its IP Address in a URL ....................................................................... 106
Managing Cluster Sessions .................................................................................................................... 106
Sorting Session Information................................................................................................................ 107
Configuring and Viewing Channel Management Settings.................................................................... 107
Stopping/Starting Automatic Channel Assignment ............................................................................. 108
34CSFP6XXUAP-SWUM100-D13 Page 5
D-Link UAP Software User Manual
Viewing Current Channel Assignments and Setting Locks .................................................................109
Viewing the Last Proposed Set of Changes ........................................................................................109
Configuring Advanced Settings ...........................................................................................................109
Viewing Wireless Neighborhood Information ........................................................................................ 110
Viewing Details for a Cluster Member .................................................................................................113
Appendix A: Default AP Settings................................................................................... 114
Appendix B: Configuration Examples........................................................................... 116
Configuring a VAP ....................................................................................................................................116
VAP Configuration from the Web Interface .........................................................................................116
VAP Configuration from the CLI ..........................................................................................................117
VAP Configuration Using SNMP .........................................................................................................117
Configuring Radio Settings .....................................................................................................................119
Radio Configuration from the Web Interface .......................................................................................119
Radio Configuration from the CLI ........................................................................................................120
Radio Configuration Using SNMP .......................................................................................................121
Configuring the Wireless Distribution System ...................................................................................... 121
WDS Configuration from the Web Interface ........................................................................................121
WDS Configuration from the CLI .........................................................................................................123
WDS Configuration Using SNMP ........................................................................................................123
Clustering Access Points ........................................................................................................................124
Clustering APs by Using the Web Interface ........................................................................................124
Clustering APs by Using the CLI ......................................................................................................... 125
Clustering APs by Using SNMP ..........................................................................................................125
Configuring Client QoS ............................................................................................................................ 126
Configuring QoS by Using the Web Interface......................................................................................126
ACL Configuration ........................................................................................................................ 126
DiffServ Configuration .................................................................................................................. 128
ACL Configuration ........................................................................................................................ 131
DiffServ Configuration .................................................................................................................. 131
ACL Configuration ........................................................................................................................ 132
DiffServ Configuration .................................................................................................................. 134
Page 6 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP

LIST OF FIGURES

Figure 1: Administrator UI Online Help ........................................................................................................... 13
Figure 2: Viewing Interface Status .................................................................................................................. 27
Figure 3: Viewing Events ................................................................................................................................ 28
Figure 4: Persistent Logging Options.............................................................................................................. 29
Figure 5: Log Relay Host ................................................................................................................................ 30
Figure 6: Viewing Traffic Statistics.................................................................................................................. 31
Figure 7: Viewing Client Association Information............................................................................................ 32
Figure 8: Viewing Neighboring Access Points ................................................................................................ 34
Figure 9: Ethernet Settings ............................................................................................................................. 38
Figure 10: Wireless Interface Configuration...................................................................................................... 40
Figure 11: Configuring Radio Settings .............................................................................................................. 43
Figure 12: Setting Up Virtual Access Points ..................................................................................................... 48
Figure 13: Configuring WDS Settings ............................................................................................................... 57
Figure 14: Configuring MAC Authentication...................................................................................................... 60
Figure 15: Configuring Load Balancing............................................................................................................. 62
Figure 16: Configuring Managed Access Point Settings................................................................................... 64
Figure 17: IEEE 802.1X Authentication ............................................................................................................ 65
Figure 18: Management ACL............................................................................................................................ 66
Figure 19: Configuring Web Server Settings .................................................................................................... 67
Figure 20: Modifying SNMP Settings ................................................................................................................ 69
Figure 21: SSH Status ...................................................................................................................................... 71
Figure 22: Telnet Status.................................................................................................................................... 71
Figure 23: Configuring QoS Settings ................................................................................................................ 73
Figure 24: Enabling Network Time Protocol Server.......................................................................................... 76
Figure 25: SNMPv3 Views ................................................................................................................................ 77
Figure 26: SNMPv3 Groups.............................................................................................................................. 79
Figure 27: SNMPv3 Users ................................................................................................................................ 80
Figure 28: SNMPv3 Target ............................................................................................................................... 81
Figure 29: Maintenance .................................................................................................................................... 84
Figure 30: VAP QoS Parameters ...................................................................................................................... 88
Figure 31: Client QoS ACL ............................................................................................................................... 90
Figure 32: Client QoS DiffServ Class Map........................................................................................................ 95
Figure 33: Client QoS DiffServ Policy Map ..................................................................................................... 100
34CSFP6XXUAP-SWUM100-D13 Page 7
D-Link UAP Software User Manual
Figure 34: Client QoS Status...........................................................................................................................101
Figure 35: Cluster Information and Member Configuration ............................................................................. 104
Figure 36: Session Management ....................................................................................................................106
Figure 37: Channel Management ....................................................................................................................108
Figure 38: Wireless Neighborhood ..................................................................................................................111
Figure 39: Details for a Cluster Member AP....................................................................................................113
Page 8 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP

LIST OF TABLES

Table 1: Typographical Conventions ............................................................................................................. 12
Table 2: Requirements for the Administrator’s Computer.............................................................................. 15
Table 3: Requirements for Wireless Clients .................................................................................................. 16
Table 4: Basic Settings Page......................................................................................................................... 20
Table 5: CLI Commands for Ethernet Setting................................................................................................ 23
Table 6: CLI Commands for the 802.1X Supplicant ...................................................................................... 24
Table 7: Logging Options............................................................................................................................... 29
Table 8: Log Relay Host ................................................................................................................................ 30
Table 9: Transmit/Receive............................................................................................................................. 32
Table 10: Associated Clients ........................................................................................................................... 33
Table 11: Neighboring Access Points.............................................................................................................. 35
Table 12: Ethernet Settings Page.................................................................................................................... 38
Table 13: Wireless Settings ............................................................................................................................. 41
Table 14: Radio Settings ................................................................................................................................. 44
Table 15: Virtual Access Point Settings........................................................................................................... 48
Table 16: Static WEP....................................................................................................................................... 51
Table 17: IEEE 802.1X .................................................................................................................................... 53
Table 18: WPA Personal ................................................................................................................................. 54
Table 19: WPA Enterprise ............................................................................................................................... 55
Table 20: WDS Settings .................................................................................................................................. 58
Table 21: WEP on WDS Links ......................................................................................................................... 59
Table 22: WPA/PSK on WDS Links................................................................................................................. 59
Table 23: MAC Authentication ......................................................................................................................... 61
Table 24: RADIUS Server Attributes for MAC Authentication ......................................................................... 61
Table 25: Load Balancing ................................................................................................................................ 62
Table 26: Managed Access Point .................................................................................................................... 64
Table 27: IEEE 802.1X Supplicant Authentication........................................................................................... 65
Table 28: Management ACL............................................................................................................................ 66
Table 29: Web Server Settings ........................................................................................................................ 68
Table 30: SNMP Settings ................................................................................................................................ 69
Table 31: SSH Settings ................................................................................................................................... 71
Table 32: Telnet Settings................................................................................................................................. 72
Table 33: QoS Settings.................................................................................................................................... 73
34CSFP6XXUAP-SWUM100-D13 Page 9
D-Link UAP Software User Manual
Table 34: SNTP Settings..................................................................................................................................76
Table 35: SNMPv3 Views ................................................................................................................................78
Table 36: SNMPv3 Groups .............................................................................................................................. 79
Table 37: SNMP v3 Users................................................................................................................................80
Table 38: SNMPv3 Targets .............................................................................................................................. 81
Table 39: VAP QoS Parameters ...................................................................................................................... 88
Table 40: ACL Configuration ............................................................................................................................ 90
Table 41: DiffServ Class Map ..........................................................................................................................95
Table 42: DiffServ Policy Map ........................................................................................................................100
Table 43: Client QoS Status...........................................................................................................................102
Table 44: Access Points in the Cluster ..........................................................................................................104
Table 45: Clustering Options..........................................................................................................................105
Table 46: Session Management ....................................................................................................................107
Table 47: Channel Assignments .................................................................................................................... 109
Table 48: Last Proposed Changes.................................................................................................................109
Table 49: Advanced Channel Management Settings .....................................................................................110
Table 50: Wireless Neighborhood Information............................................................................................... 111
Table 51: Cluster Member Details..................................................................................................................113
Table 52: UAP Default Settings .....................................................................................................................114
Page 10 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP

Section 1: About This Document

This guide describes setup, configuration, administration and maintenance for the D-Link® Unified Access Point (UAP) on a wireless network.

DOCUMENT ORGANIZATION

The
Unified Access Point Administrator’s Guide
Section 1: “About This Document” on page 11
Section 2: “Getting Started” on page 14
Section 3: “Viewing Access Point Status” on page 27
Section 4: “Managing the Access Point” on page 37
Section 5: “Configuring Access Point Services” on page 67
Section 6: “Configuring SNMPv3” on page 77
Section 7: “Maintaining the Access Point” on page 82
Section 8: “Configuring Client Quality of Service” on page 87
Section 9: “Clustering Multiple APs” on page 103
Appendix A “Default AP Settings” on page 114
Appendix B “Configuration Examples” on page 116
contains the following sections:

ADDITIONAL DOCUMENTATION

The following documents are also available for the D-Link UAP.
The
The
34CSFP6XXUAP-SWUM100-D13 About This Document Page 11
Unified Access Point CLI Command Reference
Unified Access Point Release Notes
describe known issues and limitations.
contains information about using the UAP command-line interface.
D-Link UAP Software User Manual

DOCUMENT CONVENTIONS

This section describes the conventions this document uses.
Note: A note provides more information about a feature or technology and cross-references to related topics.
Caution! A caution provides information about critical aspects of AP configuration, combinations of settings,
events, or procedures that can adversely affect network connectivity, security, and so on.
The following table describes the typographical conventions used in this guide.
Table 1: Typographical Conventions
Symbol Example Description
Bold Click Update to save your
settings.
Blue Text See “Document Conventions”
on page 12.
Menu titles, page names, and button names
Hyperlinked text.
courier font WLAN-AP# show network Screen text, file names, commands, user-typed
command-line entries
courier font italics value Command parameter, which might be a variable or fixed
<> Angle brackets <value> Indicates a parameter is a variable. You must enter a
[ ] Square brackets [value] Indicates an optional fixed parameter.
[< >] Angle brackets within square brackets
{} curly braces {choice1 | choice2} Indicates that you must select a parameter from the list of
| Vertical bars choice1 | choice2 Separates the mutually exclusive choices.
[{}] Braces within square brackets
[<value>] Indicates an optional variable.
[{choice1 | choice2}] Indicate a choice within an optional element.
value.
value in place of the brackets and text inside them.
choices.
Page 12 Document Conventions 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
ONLINE HELP, SUPPORTED BROWSERS, AND LIMITATIONS
Online help for the UAP Administration Web pages provides information about all fields and features available from the user interface (UI). The information in the online help is a subset of the information available in the
Administrator’s Guide
Online help information corresponds to each page on the UAP Administration UI.
For information about the settings on the current page, click the link on the right side of a page or the More... link at the bottom of the help panel on the UI.
The following figure shows an example of the online help available from the links on the user interface.
.
Unified Access Point
Figure 1: Administrator UI Online Help

34CSFP6XXUAP-SWUM100-D13 Online Help, Supported Browsers, and Limitations Page 13

D-Link UAP Software User Manual

Section 2: Getting Started

The D-Link UAP provides continuous, high-speed access between wireless devices and Ethernet devices. It is an advanced, standards-based solution for wireless networking in businesses of any size. The UAP enables wireless local area network (WLAN) deployment while providing state-of-the-art wireless networking features.
The UAP can operate in two modes: Standalone Mode or Managed Mode. In Standalone Mode, the UAP acts as an individual access point in the network, and you manage it by using the Administrator Web User Interface (UI), command-line interface (CLI), or SNMP. In Managed Mode, the UAP is part of the D-Link Unified Access System, and you manage it by using the D-Link Unified Switch. If an AP is in Managed Mode, the Administrator Web UI, Telnet, SSH, and SNMP services are disabled.
This document describes how to perform the setup, management, and maintenance of the UAP in Standalone Mode. For information about configuring the AP in Managed Mode by using the D-Link Unified Switch, see the the switch.
Before you power on a new UAP, review the following sections to check required hardware and software components, client configurations, and compatibility issues. Make sure you have everything you need for a successful launch and test of your new or extended wireless network.
Administrator Guide
for
This section contains the following topics:
Administrator’s Computer Requirements
Wireless Client Requirements
Dynamic and Static IP Addressing on the AP
Installing the UAP
Basic Settings
Using the CLI to View the IP Address
Configuring the Ethernet Settings
Configuring IEEE 802.1X Authentication
Verifying the Installation
Configuring Security on the Wireless Access Point
To manage the UAP by using the Web interface or by using the CLI through Telnet or SSH, the AP needs an IP address. If you use VLANs or IEEE 802.1X Authentication (port security) on your network, you might need to configure additional settings on the AP before it can connect to the network.
Note: The WLAN AP is not designed to function as a gateway to the Internet. To connect your WLAN to other LANs or the Internet, you need a gateway device.
Page 14 Getting Started 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
ADMINISTRATORS COMPUTER REQUIREMENTS
The following table describes the minimum requirements for the administrator’s computer for configuration and administration of the UAP through a Web-based user interface (UI).
Table 2: Requirements for the Administrator’s Computer
Required Software or Component Description
Serial or Ethernet Connection to the Access Point
Wireless Connection to the Network After initial configuration and launch of the first access point on your new
Web Browser and Operating System Configuration and administration of the UAP is provided through a Web-based
Security Settings Ensure that security is disabled on the wireless client used to initially configure
The computer used to configure the first access point must be connected to the access point by a serial cable or an Ethernet cable.
wireless network, you can make subsequent configuration changes through the Administration Web pages using a wireless connection to the internal network. For wireless connection to the access point, your administration device will need Wi-Fi capability similar to that of any wireless client:
Portable or built-in Wi-Fi client adapter that supports one or more of the IEEE
802.11 modes in which you plan to run the access point. Wireless client software configured to associate with the UAP.
user interface hosted on the access point. We recommend using one of the following supported Web browsers to access the access point Administration Web pages:
Microsoft for either major version) on Microsoft Windows 2000
Netscape Mozilla 1.7.x on Redhat® Linux® version 2.4 or later
The administration Web browser must have JavaScript™ enabled to support the interactive features of the administration interface.
the access point.
®
Internet Explorer® version 5.5 or 6.x (with up-to-date patch level
®
XP or Microsoft Windows

34CSFP6XXUAP-SWUM100-D13 Administrator’s Computer Requirements Page 15

D-Link UAP Software User Manual
WIRELESS CLIENT REQUIREMENTS
The UAP provides wireless access to any client with a properly configured Wi-Fi client adapter for the 802.11 mode in which the access point is running. The UAP supports multiple client operating systems. Clients can be laptop or desktop computers, personal digital assistants (PDAs), or any other hand-held, portable or stationary device equipped with a Wi-Fi adapter and supporting drivers.
In order to connect to the access point, wireless clients need the software and hardware described in the following table.
Table 3: Requirements for Wireless Clients
Required Component Description
Wi-Fi Client Adapter Portable or built-in Wi-Fi client adapter that supports one or more of the IEEE 802.11 modes
Wireless Client Software Client software, such as Microsoft Windows Supplicant, configured to associate with the UAP.
Client Security Settings Security should be disabled on the client used to do initial configuration of the access point.
in which you plan to run the access point. (IEEE 802.11a, 802.11b, 802.11g, and 802.11n modes are supported.)
If the Security mode on the access point is set to anything other than plain text, wireless clients will need to set a profile to the authentication mode used by the access point and provide a valid username and password, certificate, or similar user identity proof. Security modes are Static WEP, IEEE 802.1X, WPA with RADIUS server, and WPA-PSK.
For information about configuring security on the access point, see “Virtual Access Point
Settings” on page 46.

DYNAMIC AND STATIC IP ADDRESSING ON THE AP

When you power on the access point, the built-in DHCP client searches for a DHCP server on the network in order to obtain an IP Address and other network information. If the AP does not find a DHCP server on the network, the AP continues to use its default Static IP Address (10.90.90.91) until you re-assign it a new static IP address (and specify a static IP addressing policy) or until the AP successfully receives network information from a DHCP server.
To change the connection type and assign a static IP address by using the CLI, see “Configuring the Ethernet Settings” on
page 22 or, by using the Web UI, see “Ethernet Settings” on page 37.
Caution! If you do not have a DHCP server on your internal network, and do not plan to use one, the first thing you must do after powering on the access point is change the connection type from DHCP to static IP. You can either assign a new static IP address to the AP or continue using the default address. We recommend assigning a new static IP address so that if you bring up another WLAN AP on the same network, the IP address for each AP will be unique.

RECOVERING AN IP ADDRESS

If you experience trouble communicating with the access point, you can recover a static IP address by resetting the AP configuration to the factory defaults (see “Resetting the Factory Default Configuration” on page 84), or you can get a dynamically assigned address by connecting the AP to a network that has a DHCP server.

Page 16 Wireless Client Requirements 34CSFP6XXUAP-SWUM100-D13

Software User Manual D-Link UAP

DISCOVERING A DYNAMICALLY ASSIGNED IP ADDRESS

If you have access to the DHCP server on your network and know the MAC address of your AP, you can view the new IP address associated with the MAC address of the AP.
If you do not have access to the DHCP server that assigned the IP address to the AP or do not know the MAC address of the AP, you might need to use the CLI to find out what the new IP address is. For information about how to discover a dynamically assigned IP address, see “Using the CLI to View the IP Address” on page 21.

INSTALLING THE UAP

To access the Administration Web UI, you enter the IP address of the AP into a Web browser. You can use the default IP address of the AP (10.90.90.91) to log on to the AP and assign a static IP address, or you can use a DHCP server on you network to assign network information to the AP. The DHCP client on the AP is enabled by default.
To install the UAP, use the following steps:
1. Connect the AP to an administrative PC by using a LAN connection or a direct-cable connection.
To use a LAN connection, connect one end of an Ethernet cable to the network port on the access point and the other end to the same hub where your PC is connected, as shown in the following figure.
The hub or switch you use must permit broadcast signals from the access point to reach all other devices on the network.
To use a direct-cable connection, connect one end of an Ethernet straight-through or crossover cable to the network port on the access point and the other end of the cable to the Ethernet port on the PC, as shown in the following figure. You can also use a serial cable to connect the serial port on the AP to a serial port on the administrative computer.
For initial configuration with a direct Ethernet connection and no DHCP server, be sure to set your PC to a static IP address in the same subnet as the default IP address on the access point. (The default IP address for the access point is 10.90.90.91.)
If you use this method, you will need to reconfigure the cabling for subsequent startup and deployment of the access
34CSFP6XXUAP-SWUM100-D13 Installing the UAP Page 17
D-Link UAP Software User Manual
point so that the access point is no longer connected directly to the PC but instead is connected to the LAN (either by using a hub or directly).
Note: It is possible to detect access points on the network with a wireless connection. However, we strongly advise against using this method. In most environments you may have no way of knowing whether you are actually connecting to the intended AP. Also, many of the initial configuration changes required will cause you to lose connectivity with the AP over a wireless connection.
2. Connect the power adapter to the power port on the back of the access point, and then plug the other end of the power cord into a power outlet.
3. Use your Web browser to log on to the UAP Administration Web pages.
- If the AP did not acquire an IP address from a DHCP server on your network, enter 10.90.90.91 in the address field
of your browser, which is the default IP address of the AP.
- If you used a DHCP server on your network to automatically configure network information for the AP, enter the new
IP address of the AP into the Web browser.
- If you used a DHCP server and you do not know the new IP address of the AP, use the following procedures to
obtain the information:
a. Connect a serial cable from the administrative computer to the AP and use a terminal emulation program to access
the command-line interface (CLI).
b. At the login prompt, enter admin for the user name and admin for the password. At the command prompt, enter get
management
- The command output displays the IP address of the AP. Enter this address in the address field of your browser. For
a more detailed explanation about how to log on to the CLI by using the console port, see
IP Address” on page 21.
4. When prompted, enter admin for the user name and admin for the password, then click OK.
“Using the CLI to View the
When you first log in, the Basic Settings page for UAP administration is displayed, as the following figure shows. This page is also accessible from the Tools > Basic Settings menu.
Page 18 Installing the UAP 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
5. Verify the settings on the Basic Settings page.
Review access point description and provide a new administrator password for the access point if you do not want to use the default password, which is admin.
•Click the Update button to activate the wireless network with these new settings.
Note: The changes you make are not saved or applied until you click Update. Changing some access point settings might cause the AP to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change access point settings when WLAN traffic is low.
For more information about the fields and configuration options on the Basic Settings page, see “Basic Settings” on
page 20.
6. If you do not have a DHCP server on the management network and do not plan to use one, you must change the Connection Type from DHCP to Static IP.
You can either assign a new Static IP address to the AP or continue using the default address. We recommend assigning a new Static IP address so that if you bring up another UAP on the same network, the IP address for each AP will be unique. To change the connection type and assign a static IP address, see “Configuring the Ethernet Settings” on
page 22 (CLI) or “Ethernet Settings” on page 37 (Web).
34CSFP6XXUAP-SWUM100-D13 Installing the UAP Page 19
D-Link UAP Software User Manual
7. If your network uses VLANs, you might need to configure the management VLAN ID or untagged VLAN ID on the UAP in order for it to work with your network.
For information about how to configure VLAN information, see “Configuring the Ethernet Settings” on page 22 (CLI) or
“Ethernet Settings” on page 37 (Web).
8. If your network uses IEEE 802.1X port security for network access control, you must configure the 802.1X supplicant information on the AP.
For information about how to configure the 802.1X user name and password, see “Configuring IEEE 802.1X
Authentication” on page 24.

BASIC SETTINGS

From the Basic Settings page, you can view various information about the UAP, including IP and MAC address information, and configure the administrator password for the UAP. Tabl e 4 describes the fields and configuration options on the Basic
Settings page.
Table 4: Basic Settings Page
Field Description
IP Address Shows the IP address assigned to the AP. This field is not editable on this page because the IP
address is already assigned (either by DHCP, or statically through the Ethernet Settings page).
IPv6 Address Shows the IPv6 address assigned to the AP. This field is not editable on this page because the IP
IPv6 Link Local Address
MAC Address Shows the MAC address of the AP. The address shown here is the MAC address associated with
Firmware Version Shows version information about the firmware currently installed on the AP. As new versions of the
Product Identifier Identifies the AP hardware model.
Hardware Version Identifies the AP hardware version.
Device Name Generic name to identify the type of hardware.
Device Description Provides information about the product hardware.
Current Password Enter the current administrator password. You must correctly enter the current password before you
New Password Enter a new administrator password. The characters you enter are displayed as bullet characters to
Confirm New Password
address is already assigned (either by DHCPv6, or statically through the Ethernet Settings page).
Shows the IPv6 Link Local address, which is the IPv6 address used by the local physical link. The link local address is not configurable and is assigned by using the IPv6 Neighbor Discovery process.
the management interface. This is the address by which the AP is known externally to other networks.
WLAN AP firmware become available, you can upgrade the firmware on your APs.
are able to change it.
prevent others from seeing your password as you type. The administrator password must be an alphanumeric string of up to 8 characters. Do not use
special characters or spaces.
Note:
As an immediate first step in securing your wireless network, we recommend that you
change the administrator password from the default.
Re-enter the new administrator password to confirm that you typed it as intended.
Page 20 Basic Settings 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
Table 4: Basic Settings Page
Field Description
Baud Rate Select a baud rate for the serial port connection. The baud rate on the AP must match the baud rate
System Name Enter a name for the AP. This name appears only on the Basic Settings page and is a name to
System Contact Enter the name, e-mail address, or phone number of the person to contact regarding issues related
System Location Enter the physical location of the AP, for example Conference Room A.
on the terminal or terminal emulator to connect to the AP command-line interface (CLI) by using a serial (console) connection.
The following baud rates are available:
9600
19200
38400
57600
115200
identify the AP to the administrator. Use up to 64 alphanumeric characters, for example My AP.
to the AP.

CONNECTING TO THE AP WEB INTERFACE BY USING THE IPV6 ADDRESS

To connect to the AP by using the IPv6 global address or IPv6 link local address, you must enter the AP address into your browser in a special format.
Note: The following instructions and examples work with Microsoft Internet Explorer 7 (IE7) and might not work with other browsers.
To connect to an IPv6 global address, add square brackets around the IPv6 address. For example, if the AP global IPv6 address is 2520::230:abff:fe00:2420, type the following address into the IE7 address field: http://[2520::230:abff:fe00:2420].
To connect to the iPv6 link local address, replace the colons (:) with hyphens (-), add the interface number preceded with an "s," then add ".ipv6-literal.net." For example, if the AP link local address is fe80::230:abff:fe00:2420, and the Windows interface is defined as "%6," type the following address into the IE7 address field: http://fe80--230-abff-fe00-2420s6.ipv6­literal.net.
USING THE CLI TO VIEW THE IP ADDRESS
The DHCP client on the UAP is enabled by default. If you connect the UAP to a network with a DHCP server, the AP automatically acquires an IP address. To manage the UAP by using the Administrator UI, you must enter the IP address of the access point into a Web browser.
If a DHCP server on your network assigns an IP address to the UAP, and you do not know the IP address, use the following steps to view the IP address of the UAP:
1. Using a null-modem cable, connect a VT100/ANSI terminal or a workstation to the console (serial) port.
If you attached a PC, Apple, or UNIX workstation, start a terminal-emulation program, such as HyperTerminal or TeraTerm.
2. Configure the terminal-emulation program to use the following settings:

34CSFP6XXUAP-SWUM100-D13 Using the CLI to View the IP Address Page 21

D-Link UAP Software User Manual
Baud rate: 115200 bps
Data bits: 8
Parity: none
Stop bit: 1
Flow control: none
3. Press the return key, and a login prompt should appear.
The login name is admin. The default password is admin. After a successful login, the screen shows the (
Access Point Name
4. At the login prompt, enter get management.
Information similar to the following prints to the screen.
)# prompt.
CONFIGURING THE ETHERNET SETTINGS
The default Ethernet settings, which include DHCP and VLAN information, might not work for all networks.
By default, the DHCP client on the UAP automatically broadcasts requests for network information. If you want to use a static IP address, you must disable the DHCP client and manually configure the IP address and other network information.
The management VLAN is VLAN 1 by default. This VLAN is also the default untagged VLAN. If you already have a management VLAN configured on your network with a different VLAN ID, you must change the VLAN ID of the management VLAN on the access point.
For information about using the Web interface to configure the Ethernet settings, see “Ethernet Settings” on page 37. You can also use the CLI to configure the Ethernet settings, which the following section describes.

Page 22 Configuring the Ethernet Settings 34CSFP6XXUAP-SWUM100-D13

Software User Manual D-Link UAP

USING THE CLI TO CONFIGURE ETHERNET SETTINGS

Use the commands shown in the following table to view and set values for the Ethernet (wired) interface. For more information about each setting, see the description for the field in Table 12 on page 38.
Table 5: CLI Commands for Ethernet Setting
Action Command
Get the DNS Name get host id
Set the DNS Name set host id
For example:
set host id vicky-ap
Get Current Settings for the Ethernet (Wired) Internal Interface
Set the management VLAN ID set management vlan-id
View untagged VLAN information get untagged-vlan
Enable the untagged VLAN set untagged-vlan status up
Disable the untagged VLAN set untagged-vlan status down
Set the untagged VLAN ID set untagged-vlan vlan-id
View the connection type get management dhcp-status
Use DHCP as the connection type set management dhcp-client status up
Use a Static IP as the connection type set management dhcp-client status down
Set the Static IP address set management static-ip <ip_address>
Set a Subnet Mask set management static-mask
Set the Default Gateway
View the DNS Nameserver mode Dynamic= up Manual=down
Set DNS Nameservers to Use Static IP Addresses (Dynamic to Manual Mode)
Set DNS Nameservers to Use DHCP IP Addressing (Manual to Dynamic Mode)
get management
Example: set management static-ip 10.10.12.221
Example: set management static-mask 255.255.255.0
set static-ip-route gateway
Example: set static-ip-route gateway 10.10.12.1
get host dns-via-dhcp
set host dns-via-dhcp down set host static-dns-1 <ip_address> set host static-dns-2 <ip_address>
Example: set host static-dns-1 192.168.23.45
set host dns-via-dhcp up
<host_name>
<1-4094>
<1-4094>
<netmask>
<ip_address>
34CSFP6XXUAP-SWUM100-D13 Configuring the Ethernet Settings Page 23
D-Link UAP Software User Manual
In the following example, the administrator uses the CLI to set the management VLAN ID to 123 and to disable the untagged VLAN so that all traffic is tagged with a VLAN ID.
D-Link-WLAN-AP# set management vlan-id 123 D-Link-WLAN-AP# set untagged-vlan status down
D-Link-WLAN-AP# get management Property Value
------------------------------
vlan-id 123 interface brvlan123 static-ip 10.90.90.91 static-mask 255.0.0.0 ip 10.254.24.43 mask 255.255.248.0 mac 00:02:BC:00:14:E8 dhcp-status up
D-Link-WLAN-AP# get untagged-vlan Property Value
---------------
vlan-id 1 status down D-Link-WLAN-AP#

CONFIGURING IEEE 802.1X AUTHENTICATION

On networks that use IEEE 802.1X, port-based network access control, a supplicant (client) cannot gain access to the network until the 802.1X authenticator grants access. If your network uses 802.1X, you must configure 802.1X authentication information that the AP can supply to the authenticator.
If your network uses IEEE 802.1X see “Configuring 802.1X Authentication” on page 65 for information about how to configure
802.1X by using the Web interface.

USING THE CLI TO CONFIGURE 802.1X AUTHENTICATION INFORMATION

The following table shows the commands used to configure the 802.1X supplicant information using the CLI.
Table 6: CLI Commands for the 802.1X Supplicant
Action Command
View 802.1X supplicant settings get dot1x-supplicant
Enable 802.1X supplicant set dot1x-supplicant status up
Disable 802.1X supplicant set dot1x-supplicant status down
Set the 802.1X user name set dot1x-supplicant user
Set the 802.1s password set dot1x-supplicant password
<name>
<password>
In the following example, the administrator enables the 802.1X supplicant and sets the user name to wlanAP and the password to test1234.
Page 24 Configuring IEEE 802.1X Authentication 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
D-Link-WLAN-AP# set dot1x-supplicant status up D-Link-WLAN-AP# set dot1x-supplicant user wlanAP D-Link-WLAN-AP# set dot1x-supplicant password test1234 D-Link-WLAN-AP# get dot1x-supplicant Property Value
---------------­status up user wlanAP
VERIFYING THE INSTALLATION
Make sure the access point is connected to the LAN and associate some wireless clients with the network. Once you have tested the basics of your wireless network, you can enable more security and fine-tune the AP by modifying advanced configuration features.
1. Connect the access point to the LAN.
If you configured the access point and administrator PC by connecting both into a network hub, then your access point is already connected to the LAN. The next step is to test some wireless clients.
If you configured the access point by using a direct cable connection from your computer to the access point, do the following procedures:
a. Disconnect the cable from the computer and the access point.
b. Connect an Ethernet cable from the access point to the LAN.
c. Connect your computer to the LAN by using an Ethernet cable or a wireless card.
2. Test LAN connectivity with wireless clients.
Test the UAP by trying to detect it and associate with it from some wireless client devices. For information about requirements for these clients, see “Wireless Client Requirements” on page 16.
3. Secure and configure the access point by using advanced features.
Once the wireless network is up and you can connect to the AP with some wireless clients, you can add in layers of security, create multiple virtual access points (VAPs), and configure performance settings.
Note: The WLAN AP is not designed for multiple, simultaneous configuration changes. If more than one administrator is logged onto the Administration Web pages and making changes to the configuration, there is no guarantee that all configuration changes specified by multiple users will be applied.
By default, no security is in place on the access point, so any wireless client can associate with it and access your LAN. An important next step is to configure security, as described in “Virtual Access Point Settings” on page 46.

34CSFP6XXUAP-SWUM100-D13 Verifying the Installation Page 25

D-Link UAP Software User Manual
CONFIGURING SECURITY ON THE WIRELESS ACCESS POINT
You configure secure wireless client access by configuring security for each virtual access point (VAP) that you enable. You can configure up to 16 VAPs per radio that simulate multiple APs in one physical access point. By default, only one VAP is enabled. For each VAP, you can configure a unique security mode to control wireless client access.
Each radio has 16 VAPs, with VAP IDs from 0-15. By default, only VAP 0 on each radio is enabled. VAP0 has the following default settings:
VLAN ID: 1
Broadcast SSID: Enabled
SSID: dlink1
Security: None
MAC Authentication Type: None
Redirect Mode: None
All other VAPs are disabled by default. The default SSID for VAPs 1–15 is dlinkx where x is the VAP ID.
To prevent unauthorized access to the UAP, we recommend that you select and configure a security option other than None for the default VAP and for each VAP that you enable.
For information about how to configure the security settings on each VAP, see “Virtual Access Point Settings” on page 46.

Page 26 Configuring Security on the Wireless Access Point 34CSFP6XXUAP-SWUM100-D13

Software User Manual D-Link UAP

Section 3: Viewing Access Point Status

This section describes the information you can view from the tabs under the Status heading on the navigation tree of the UAP Web UI. This section contains the following subsections:

Viewing Interface Status

Viewing Events
Viewing Transmit and Receive Statistics
Viewing Associated Wireless Client Information
Viewing Neighboring Access Points
Viewing Managed AP DHCP Information
VIEWING INTERFACE STATUS
To monitor Ethernet LAN and wireless LAN (WLAN) settings, click the Interfaces tab.
Figure 2: Viewing Interface Status
This page displays the current settings of the UAP. It displays the Wired Settings and the Wireless Settings.

WIRED SETTINGS (INTERNAL INTERFACE)

The Internal interface includes the Ethernet MAC Address, Management VLAN ID, IP Address (IPv4 and IPv6), Subnet
Mask, and DNS information. If you want to change any of these settings, click the Edit link. After you click Edit, you are
redirected to the Ethernet Settings page.
34CSFP6XXUAP-SWUM100-D13 Viewing Access Point Status Page 27
D-Link UAP Software User Manual
For information about configuring these settings, see “Configuring the Ethernet Settings” on page 22.

WIRELESS SETTINGS

The Radio Interface includes the Radio Mode and Channel. The Wireless Settings section also shows the MAC address (read-only) associated with each radio interface.
If you want to change the Radio Mode or Channel settings, click the Edit link. After you click Edit, you are redirected to the Wireless Settings page.
For information about configuring these settings, see “Wireless Settings” on page 40 and “Modifying Radio Settings” on
page 43.

VIEWING EVENTS

The Events page shows real-time system events on the AP such as wireless clients associating with the AP and being authenticated.
To view system events, click the Events tab.
Figure 3: Viewing Events
From the Events page, you can view the most recent events generated by this AP and configure logging settings. You can enable and configure persistent logging to write system event logs to non-volatile memory so that the events are not erased when the system reboots. This page also gives you the option of enabling a remote log relay host to capture all system events and errors in a Kernel Log.
Page 28 Viewing Events 34CSFP6XXUAP-SWUM100-D13
Software User Manual D-Link UAP
Note: The AP acquires its date and time information using the network time protocol (NTP). This data is reported in UTC format (also known as Greenwich Mean Time). You need to convert the reported time to your local time. For information on setting the network time protocol, see “Enabling the Network Time Protocol Server” on page 76.

CONFIGURING PERSISTENT LOGGING OPTIONS

If the system unexpectedly reboots, log messages can be useful to diagnose the cause. However, log messages are erased when the system reboots unless you enable persistent logging.
Caution! Enabling persistent logging can wear out the flash (non-volatile) memory and degrade network performance. You should only enable persistent logging to debug a problem. Make sure you disable persistent logging after you finish debugging the problem.
To configure persistent logging on the Events page, set the persistence, severity, and depth options as described in Tab le 7, and then click Update.
Figure 4: Persistent Logging Options
Table 7: Logging Options
Field Description
Persistence Choose Enabled to save system logs to non-volatile memory so that the logs are not
Severity Specify the severity level of the log messages to write to non-volatile memory. For
Depth You can store up to 128 messages in non-volatile memory. Once the number you
erased when the AP reboots. Choose Disabled to save system logs to volatile memory. Logs in volatile memory are deleted when the system reboots.
example, if you specify 2, critical, alert, and emergency logs are written to non-volatile memory. Error messages with a severity level of 3–7 are written to volatile memory.
0—emergency
1—alert
2—critical
3—error
4—warning
5—notice
6—info
7—debug
configure in this field is reached, the oldest log event is overwritten by the new log event.
34CSFP6XXUAP-SWUM100-D13 Viewing Events Page 29
D-Link UAP Software User Manual
Note: To apply your changes, click Apply. Changing some settings might cause the AP to stop and restart system processes. If this happens, wireless clients will temporarily lose connectivity. We recommend that you change AP settings when WLAN traffic is low.

CONFIGURING THE LOG RELAY HOST FOR KERNEL MESSAGES

The Kernel Log is a comprehensive list of system events (shown in the System Log) and kernel messages such as error conditions, like dropping frames.
You cannot view kernel log messages directly from the Administration Web UI for an AP. You must first set up a remote server running a syslog process and acting as a syslog log relay host on your network. Then, you can configure the UAP to send syslog messages to the remote server.
Remote log server collection for AP syslog messages provides the following features:
Allows aggregation of syslog messages from multiple APs
Stores a longer history of messages than kept on a single AP
Triggers scripted management operations and alerts
To use Kernel Log relaying, you must configure a remote server to receive the syslog messages. The procedure to configure a remote log host depends on the type of system you use as the remote host.
Note: The syslog process will default to use port 514. We recommend keeping this default port. However; If you choose to reconfigure the log port, make sure that the port number you assign to syslog is not being used by another process.

ENABLING OR DISABLING THE LOG RELAY HOST ON THE EVENTS PAGE

To enable and configure Log Relaying on the Events page, set the Log Relay options as described in the following table, and then click Apply.
Figure 5: Log Relay Host
Table 8: Log Relay Host
Field Description
Relay Log Select Enabled to allow the UAP to send log messages to a remote host. Select Disabled to keep
Relay Host Specify the IP Address or DNS name of the remote log server.
Page 30 Viewing Events 34CSFP6XXUAP-SWUM100-D13
all log messages on the local system.
Loading...
+ 105 hidden pages