NOTE: Only qualifi ed pe rsonnel should perform ins tallation proced ures .
NOTICE
Enterasys Networks and its licensors r eserve the right to mak e changes in specifications and other information
contained in this document with out prior notice. The rea der should in all cases consult Enterasys Networks to
determine whether any such changes have been made.
The hardware, firm w are, or software described in this manual is subject to change without notice.
IN NO EVENT SHALL ENTERASYS NETWORKS AND ITS LICENSORS BE LIABLE FOR ANY INCIDENTAL ,
INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO
LOST PROFITS) ARISING OUT OF OR RELATE D TO THIS MANUAL OR THE INFORMA TION CONT AINED IN IT,
EVEN IF ENTERASYS NETWORKS AND ITS LICENSORS HAVE BEEN ADVISED OF, KNOWN, OR SHOULD
HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES
All Ri ghts Reser v ed. Printed in the United States of America.
Enter a sys Net w o rk s
35 Indu strial Way
Rochester, NH 03867
Part Number: 9033731-02
Enteras ys , En teras ys Net work s, RoamA bo ut and t he Roam Abo ut log o ar e t rad emar ks or r egi s tered tr ade mar ks
of Enterasys Networks, In c.
Apple, the Apple logo, Macintosh, and PowerBook are trademarks or registered trademarks of Appl e
Computer, Inc.
Micro soft, Windows, an d Windows NT are either tradema rks or registered trademarks of Mi crosoft
Corporation.
PC Card i s a trademark of PCMCIA.
All other trade m arks and registered trademarks are th e property of their respective holders.
Web Site: http://www.enterasys.com/wireless
i
Page 4
Notice
FCC Notice
Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of
the FCC Rules. These limits are designe d to prov ide reas ona bl e protec ti on against harmful inte rfe re nce in a residen tia l
installation. This equipment gene r a tes, uses and ca n r a diate radio fr equency energy and, if not installed and us ed in
accorda nce with the instructions, may cause harmful interference to radio communica tions. However, there i s no guar antee
that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television recept ion, which can be determined by turning the equipment off and on, the use r is encouraged t o try to correct
the interference by one or more of the following measures :
•Reorient o r relocate the rece iving antenna.
•Increase the separation between the equi pment and receiver.
•Connect t he equipment int o an outlet on a circuit different from that to wh ich the receiver i s c onnected.
•Consult the dealer or an experienced radio/TV technician for help.
CAUTION: Changes or mod ifications m ade to th is device w hich are not expre s s ly approved by the
party responsible for compliance could void the user’s authority to operate the equipment.
Industry Canada (Canada) - Class B Computing Device:
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numéri que de la classe B est conforme à la norme NMB-003 du Canada.
Europe - EC De cl ara ti on of C on f orm i t y
This device complies with Low Voltage Directive 73/23/EEC and EMC Directive 89/336/EEC.
VCCI Notice
This is a Class B product based on the standard of the Voluntary Control Council for Interference from Information
Technolo gy Equipment (VCCI). If this is us ed near a radio or tel evision receiver in a domes tic environmen t, it may cause
radio interference. I nstall and use the equipment according to the instruction manual.
Wichtige Sicherheitshinweise (Germany)
1.Bitt e les e n Si e di es e Hinwe is e s or gfält ig dur c h.
2.Heben Sie diese Anleitung f ür den s päteren Gebr auch auf.
3.Vor jedem Re inigen ist das Gerät vom Stromnetz zu trennen. Verwenden Sie keine Flüssigoder Aerosolr einiger. Am
besten ei gnet sich ein an gefeuchtetes Tuch zur Reinigung.
4.Die Netzansc hlu ßsteckdose soll nahe dem G erät angebracht und leic ht zugänglic h s ein.
5.Das Gerät ist vor Feuchtigkeit zu schützen.
ii
Page 5
Notice
6.B ei der Aufstellung des Gerätes ist auf sicheren Stand zu achten. Ein Kippen oder Fallen könnte Bes chädigungen
hervorrufen.
7.Die Belüft ungsöffn ungen dienen der Luftzirkulation, di e da s G erät vor Überhi tzung schü tzt. Sorgen Sie dafür, daß
diese Öffnungen nicht abgedeckt werden.
8.Beachten Sie beim Anschluß an das Stromnetz die A ns chlußwerte.
9.Verlegen Si e die Netzansch lußleitung so, daß nieman d darüber fallen kann. Es sollte auch nichts auf der Leitung
abgestellt w e rden .
10. Alle Hinw eise und Warnung en, die sich am Gerä t befinden, sind zu beachten.
11. Wird das Gerät über einen längeren Zeitraum nicht benutzt, sollten Sie es vom Stromnetz trennen. Somit wird im Falle
einer Üb er s pannung eine B eschädigung vermieden.
12. Durch di e Lüftungsöffnunge n dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen. Dies könnte
einen Brand bzw. elektri s chen Schlag aus lösen.
13. Öffnen s ie niemals das Gerät. Das Gerät darf aus Gründen der elektr ischen Sicherheit nur von authorisiertem
Servicepersonal geöffnet werden.
14. W e nn fol gende Si tuat ione n auft ret en ist das Gerät vom Str omnet z zu tren nen und von eine r qual ifizi ert en Se rvices tel le
zu überprüfen:
15. Stellen Sie sicher, das die Stromver s orgung dies es G e r a tes nach der E N 60950 gepruft i s t. Die Spg.Versorgu ngs teilAusgabewerte sollten +5V-Gleichstrom 2.A sein.
English Translation:
1.P lease read these instructions carefully.
2.Keep this manual for future reference.
3.B efore cleaning, unplug the power source. Do not use liquid or aerosol cl eaners. For best results, use a moist cl oth for
cleaning.
4.T he power jack should be close to the device and easily accessible.
5.Do not e xpose the de vice to hum i dity.
6.W hen setting up the device, make su re it is located on a s olid, even surface. Tilting and falls may cause damage.
7.T he vent ilati on openin gs are desi gn ed for ai r circu lation , which prot ects th e device from overhe atin g. Make su re not to
cover or bl ock these ope nings.
8.W hen connectin g to a power source, pay attenti on to the correct power values.
9.Do not put the power cabl e where pe o pl e can fall over it. D o not put an y thin g on the cabl e .
10. Pay attention to all notices and warnings on the device.
11. If you do not us e the device for a longer while, unplug the power cor d. This preven ts damage in case of powe r s urges.
12. Make sure no liquids or any items get into the device through the ventilation openings.
13. Never open the device. For reasons of electrical safety, the device must only be open ed by authorized service
personnel.
14. In the foll owing s it uations , unp lug th e dev ice from the powe r source and hav e it chec ked by a quali fied servi ce stati on:
a. Power cord or powe r pl ug is damaged.
b. Liquid has gotten into the device.
c. The device was exposed to humi dity .
d. If the device does not function according to the operation manual, or you cannot improve its condition with the help
of the manual.
iii
Page 6
Notice
e. The device has been dropp ed and/or the casing is damaged.
f. If the device shows clear signs of a defect .
15. Make sure that the power source of this device complies with EN 60950. The power supply output values should be
+5V DC 2.4A.
The sound pressure level at the workplace according to DIN 45 635 Par t 1000 is 70dB(A) or less.
Restrictions for EU/EFTA Countries to R&TTE Directive:
AUSBDKFIN
FDGRIRE
ILUXNLP
ESUK
M em b e r stat es in E U w i th r est ric tiv e us e for this pro du c t a re
crossed out !
Les états membres de l'Union Européenne avec une
utili s a tion re st rictiv e de ce produ it so nt rayés !
Mitgliedsstaaten der EU mit eingeschränkten
Nutzungsrechten für dieses Produkt sind herausgestrichen
Gli Stati membri nella Comunità Europea (EU) con
restrizioni sull'uso di questi prodotti sono contrassegnati di
seguito!
CH
Important Notice:
Low power radio LAN product operating in 2.4 GHz band
for Home and Office environments.
Notice Importante:
Produit réseau local radi o bass e puissance opérant dans la bande de fréquence
2,4GHz pour les enviro nnements bureautiques et résidentie l les.
Wichtige Mitteilung
Low Power FunkLAN Produkt für den Home - und
Office-Ber ei ch, das im 2.4GHz Ban d arbei tet.
Nota Importante:
Apparati R adi o LAN a bassa potenza, operanti a 2. 4G H z, per ambienti
domestico ed uff i c io.
- Belgie BGebruik bu iten gebo uw al leen op kana len 11 (2462 MHz) , 12 (246 7 MHz) , en
13 (247 2 MHz).
Voor privé-gebruik buiten gebouw ove r publieke grond over afstand kleiner
dan 300m geen
registr ati e bij B IP T /IBPT nodig; voor gebr uik ove r afstan d grot er dan 30 0m is
wel reg istr ati e bi j BIPT/IBPT nodi g. Voor pub liek gebr uik buit en g ebo uwen i s
licentie van BIPT/IBPT verplicht. Vo or registratie of licentie kunt u contact
opnemen m et BIPT.
iv
Page 7
- Belgi um BFor outdoor usage onl y channel 11 (2462 MHz) , 12 (2467 MHz), and 13
(247 2 MHz) ar e a l lowe d.
For privat e u sage out si de build in gs acro ss pub lic g roun ds ov er le ss th an 300m
no special registration with IBPT/BIPT i s required. Registration to IBPT/BIP T
is required for private usage outside buildings across public grounds over
more than 300m. An IBPT/BIPT licence is required for
public us age outside building. For registra ti on and license please contact
IBPT/BIPT.
- Belgique BL’utilisation en extérieur est autorisé sur le canal 11 (2462 MHz), 12 (2467
MHz), et 13 (2472 MHz).
Dans le cas d’une utili s atio n pri vée , à l’ext é rie ur d’ un bâtim en t, au -d essu s
d’un espa ce public, aucun enregistrement n’est nécess aire pour une distance
de moins de 300m. Pour une distance supé r ieure à 300m un enregistrement
auprès de l’IBPT est requise. Pour une utilisation publique à l’extérieur de
bâtiments, une licence de l ’IBP T est requise. Po ur les enregistrements et
licences, veuillez contacter l’IBPT.
- France F:Bande de fr équence restr e inte : seul s les canaux 10, 11, 12, 13 (2457, 2462,
2467, et 2472 MHz respectivement) doivent être utilisés en France.
Toute utilisation, qu'elle soit intérieure ou extérieure, est soumise à autorisation. Vous pouv ez contacter l'A utorité de Régulation des Télécommuniations
(http://www.art-telecom.fr
) pour la procédure à suivre.
Notice
- France F:Restricted frequency band: only c hannels 10, 11, 12, 13 (2457, 2462, 2467,
and 2472 MHz res pectively) may be used in Franc e . License requi red for
every installation, i ndoor and outdoor installations. Please contact ART for
procedur e to follow.
- Deutschland D:Anmeldung im Ou tdoor-Bereich notw ending, aber nicht genehmigungspflichtig. Bitte mit Händler die Vorgehensweise abstimmen.
- Germany D:License required for outdoor installations. Check with reseller for procedure
to follow
- Italia I:E' necess aria la concessione ministeriale anche per l'us o interno.
Verificare con i rivenditori la procedura da seguire.
L'uso per installazione in esterni non e' permessa.
- Italy I: Lice n se requ ire d for indoo r use . Us e with outd oor installations no t al lo wed.
- the Netherlands NLLicense required for outdoor installations. Check with reseller for procedure
to follow.
- Nederlands NLLicenti e verplicht vo or gebruik met bu itenantennes . Neem contact op met
verkoper voor juiste procedure
v
Page 8
Notice
Europe – EU Declaration of Conformity
Hereby ENTERASYS Networ ksTM declares that this RoamAbout IEEE 802.11 PC Card is in compliance with the essential
requir em ents and other relevant provisions of Directive 1999/5/EC, Dire ctive 89/336/EEC, and Directive 73/2 3/EEC.
ENTERASYS Networks
direktiivin 89/336/EEC ja direktiivin 73/23/EEC oleellisten vaatimusten ja sitä koskevien näiden direktiivien muiden
ehtojen mukainen.
ENTE RA SYS Networ ks
aux dispositions relatives à la directive 1999/5/EC, la directive 89/336/EEC, et à la directive 73/23/EEC.
TM
vakuut ta a tät en ett ä RoamAbo ut IE EE 802. 11 PC Ca rd tyypp in en l aite on d ire ktiivi n 19 99/5 /EY,
TM
déclare que la carte PC RoamAbout IEEE 802.11 est conforme aux conditions esse ntielles et
CAUTION: Contains information essential to avoid
personal injury, or damage to the equipment.
NOTE
NOTE: Calls th e read er’s atte n ti on to an y ite m of
information that may be of special import anc e.
ix
Page 12
Preface
Getting Help
For additional support related to this device or document, contact Enterasys Networks using one of
the following me thods:
World Wide Web: http://www.enterasys.com/wireless
Phone: North America: (603) 332-9400
Europe: 353 61 701 910
Asia: +800 8827-2878
Internet mail: support@enterasys.c om
To send comments or suggestions concerning this document, contact the Enterasys
Networks Tech nical Writing Department via the following e-mail
address: TechWriting@enterasys.com
Make sure you include the docu m ent Part Number in the e-mai l message.
Before cal lin g Ente ra sys N etw orks, pleas e ha ve the followin g info rm ati o n ready:
•Y our Enterasys Networks service contract number
•A description of the problem
•A description of any action(s) already taken to resolve the problem
•The serial and revision numbers of all involved Enterasys Networks products in the network
•A description of your networ k environment (for example, layout and cable type)
•Network load and frame size at the time of trouble (if known)
•The device history (for example, have you returned the device before, is this a recurring
problem)
•Any previous Return Material Authorization (RMA) numbers
x
Page 13
This chapter provides an overview of the RoamAbout R1 and its features. Refer to the
RoamAbout R1 SOHO Access Point Setup and Installation Guide for specification
information.
In This Chapter
Information in this chapter is presented as follows:
TopicPage
Overview1-1
Features1-2
Chapter 1
Introduction
Access and Application Support1-3
LAN Connections1-5
Wireless Connections1-6
Internet Connections1-7
Printer Connections1-7
Overview
The RoamAbout R1 provides Internet access to multiple users by sharing a single-user
account. Th e RoamAbout R1 serves as an access point, and includes a
(Wide Area Network) interface which allows you to connect to ADSL, xDSL, cable
or an ISDN TA or PSTN analog modem. The
protect ion and Virtual Privat e Netwo rk ( VPN) services. It also provides print services for
any client at tached to a LAN (Local Area Network) port.
RoamAbout R1
provides
dual-port WAN
modem,
extensive firewall
1-1
Page 14
Features
You can connec t the RoamAbout R1 to the Internet, or to a remote site, using its RJ-45
WAN port or RS-232 serial port . The RoamAbout R1 can also be connec ted directly to your
PC, or to a LAN (local area network), usi ng any of the three Fast Ethernet LAN ports or
through the wireless interface. It can also function as a print server.
The RoamAbout R1 supports dial-on-demand for ISDN/PSTN service by autom atically
connecting to the Internet when there are requests, and terminat ing the connection if no
further reque sts occur. This dual-po rt design al so supports fail-over Inte rnet access through
the secondary WAN port (i.e., the serial port can be used for primary or backup Internet
access).
Features
The RoamAbout R1 offers the following features :
•Internet connection to ADSL, xDSL, or Cable modem via a 10 Mbps WAN port
•Internet connection to ISDN TA or PSTN modem via an RS-232 console port
•Local network connection via 10/1 00 Mbps Ethernet ports or 11 Mbps wireless
interface (supporting up to 32 mobil e us ers )
•802.11b Compliant – interoperable with multiple vendors
•Supports 40-bit and 128-bit WEP (Wired Equivalent Priv acy)
•Built-in Print Server for any client attached to the LAN
•DHCP (Dynamic Host Configuration Protocol) for dynamic IP configuration, and
DNS for domain name mapping
•Firewall with client privile ges, hacker prevention, and NAT (Network Address
Translation)
NAT also enables mul ti-user access wit h a single-user accoun t, and virtual server
functionality (provid ing protected acces s to Internet services such as Web, FTP, mail
and Telnet)
•Virtual Private Network support us ing PPTP (Point-to-Point Tunneling Protocol),
L2TP (Layer Two Tunneling Protocol) or IPSecurity pass-through
•User-definable application sensing tunne l supports applications requiring multiple
connections
•Supports CHAP (Challenge Handshake Authentication Protocol) for dial-up
identification
•Supports PPP (Point-to-Point Protocol) dial-in connection using the standard dial-up
program
•Easy setup throu gh a Java-enabled Web browser on operating systems that support
TCP/IP
1-2
Page 15
Access and Application Support
Many advanced a pplications are provided by the RoamAbout R1, such as:
•Flexible LAN Access
The RoamAbout R1 pro vides connectivi ty to 10/100 Mbps wired device s, as well as 11
Mbps wirele ss mobile user s. The wireless interface ma kes it easy to create a network in
difficul t-to-wire environmen ts, a nd to provide quick acces s to datab ases for wire les s users.
•Internet Access
The RoamAbout R1 supports Internet ac ce ss through an xDSL, Cable, ISDN or PSTN
connection. Many DSL provi ders use PPPoE to establish communications wit h end users.
The RoamAbout R1 includes a built-i n client for PPPoE which el iminates the need to install
this service on your computer.
•Shared IP Address
The RoamAbout R1 pro vides Internet access f or up to 32 us ers with a shared IP address.
Multiple users on your network can browse the Web at the same time using only one ISP
account.
Access and Application Support
•Virtual Server
If you have a fi xed IP addre ss, you can s et u p t he Roam About R1 to act as a virtua l host f or
network address translation. Remote users can access various s ervices at your site using a
constant IP address. Then, dependi ng on the requested service (or port numb er), the
RoamAbout R1 can route the request to the appropriate server (at another internal IP
address). Thi s se cure s your network from direct attack by hacker s , and provides more
flexible management by allowing you to change internal IP addresses without affecting
outside access to your networ k.
•User-Definable Application Sensing Tunnel
You can define special applicat ions that require multiple connections such as Internet
gaming, videoconferencing, and Internet telephony. The RoamAbout R1 senses the
application type and opens a multi - port tunnel for it.
•DMZ Host Support
DMZ (Demilitarized Zone) allows you to open up a client PC for two-way unrestricted
Internet acces s. For example, you would use th is feat ure i f yo u ha ve a cli ent P C tha t cannot
run an Internet application properly from behind the NAT firewall or after configuring the
special applications feature. Using this feature creates a security risk and s hould only be
used as a last reso r t .
1-3
Page 16
Access and Application Support
•Security
The RoamAbout R1 supports security features that can de ny Internet access to specified
users, or filter all requests for specific services. The RoamAbout R1’s firewall can also
block common hacke r attac ks, i ncludi ng IP Spoofi ng, Land Atta ck , Ping of Dea th, IP with
zero length, Smurf Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP
SYN flooding.
•Virtual Private Network
The RoamAbout R1 supports three of the most commonl y used VPN prot ocols – PPTP,
L2TP and IPSec. These protocols allow remote users to establish a secure connection to
their corporat e ne twork. If your service provid er supports VPNs, then any of these
protocols ca n be us ed to create an authenticated and encrypted tunnel for passing secure
data over the Internet (i.e., a traditionally shared data network). The VPN protocols
supported by the RoamAbout R1 are briefly described below.
— Point-to-Point Tunneling Protoco l – Pro vides a secure tunnel for remote
client access to a PPTP security gateway. PPTP includes provisions for call
origination and flow control required by ISPs.
— Layer Two Tunneling Protocol – Includes most of the feat ures provided by
PPTP, but has less overhead and is more suited for managed networks.
— IP Security – Provides IP network-layer encryption. IPSec can support large
encrypti on networks (such as the Internet) by using digital certificates for
device authentication.
1-4
Page 17
LAN Connections
The three LAN ports on the RoamAbout R1 can auto-negotiate the connection speed to
10 Mbps Ethernet or 100 Mbps Fast Ethernet, as well as the transmission mode to
half-dupl ex or full-duplex. These LAN ports also support auto-configurat ion for pin signals
(auto-MDI/MDI-X) that allows you to use straight-through cable for connecting the
RoamAbout R1 to any network device. Refer to the RoamAbout R1 SOHO Setup and Installation Guide.
Use twiste d-pair cable to connect any of the three LAN ports on the RoamAbout R1 to an
Ethernet adapter on your PC. Otherwise, you can cascade any of LAN ports on the
RoamAbout R1 to an Ethernet h ub or switch, and then connect your PC (or other network
equipment) to the hub or switch.
Figure 1-1: LAN Connection
LAN Connections
RESET
PRINTERC OM
23
5V
2A MAX
1
WAN
1-5
Page 18
Wireless Connections
Wireless Connections
Install a PC Card in each computer that will be connected to the Interne t or your local
network via radio s ignals.
Rotate bot h antennas on the back of the RoamAbout R1 to the desired pos ition. For more
effective coverage, position one antenna along th e vert ical axis and the other a long the
horizontal axis. Place the RoamAbout R1 in a position that is located in the center of
wireless network. Normally, the higher you place the antenna ,
Computers equipped with PC Cards can communicate with each other as an independent
wireless LAN by configuri ng ea ch co mputer to the same radio channel. However, the
RoamAbout R1 can provide access to your wired/wireless LAN, or to the Internet, for all
wireles s workstations. Each wireless PC in this network infras tr ucture ca n talk to any
computer in the wireless group via a radio li nk, or access other computers or network
resources in the wired LAN infrastructure or over the Internet via the RoamAbout R1.
The wireless infrastructure configurati on not only extends the accessibi lity of wireless P Cs
to the wired LAN, but also doubles the effective wireless transmission range for wireless
PCs by retransmitting incoming radio signals through the RoamAbout R1.
your
the better the performance.
A wireless inf ras tructure can be used for access to a central database, or for co nnection
between mobil e worke r s, as shown in Figure 1-2.
Figure 1-2: WLAN Configuration Example
Wired to Wireless
Network Extension
Internet
PC
Internet
Access
Device
RoamAbout R1
Notebook
3
2
k
n
i
L
1
N
A
L
y
t
i
v
i
t
c
A
N
A
W
N
A
L
W
R
W
P
Wired LAN
1-6
Page 19
Internet Connections
If Internet services are provided through an xDSL or cable modem, use unshielded or
shielded twi sted-pair Ethernet cable (Category 3 or greater) with RJ-45 plugs to conn ect the
broadband modem directly to the WAN port on the RoamAbout R1. Use either
straight-t hrough or c rossover cable depending o n the port type provide d by the modem.
ISDN
or PSTN service, attach the access device to the RS-232 serial port on the
RoamAbout R1. Refer to the RoamAbout R1 SOHO Access Point Setup and Installation
Guide
Figure 1-3: WAN Connection Example
Internet Connections
For
ISDN TA/
PSTN Modem
Printer Connections
If you connect a printer to the RoamAbout R1, all the computer users connected to your
LAN can have access to t he printe r. Conne ct a stand ard paralle l printe r cable to th e Printer
port on the RoamAbout R1, an d configu re the print er server as described i n the RoamAbout R1 SOHO Access Point Setup and Installation Guide.
PRINTERC OM
RESET
ISP
(Primary or
Backup)
WAN123
(Primary)
5V
2A MAX
DSL/Cable
Modem
ISP
1-7
Page 20
Page 21
Configuring the RoamAbout R1
A Web browser is used to configure the RoamAbout R1, view statistics, and to monitor
network activity. The RoamAbout R1 can be configured by any Java-supported browser,
including Int ernet Explore r Version 5. 0 (or higher) a nd Netscape Navigator Vers ion 4.0 (or
higher).
This manual assumes that you already set up the clients and installed the
NOTE
In This Chapter
RoamAbout R1. If not, please refer to the RoamAbout R1 SOHO Access
Point Set up and Ins tallatio n Guide for instructions.
Chapter 2
Information in this chapter is presented as follows:
TopicPage
Access Web Management2-2
RI Management Navigation2-2
Networking and Client Services2-4
Wireless Configuration2-6
Configuring Client Services2-7
Viewing Network and Device S t atus2-12
Using Tools2-12
2-1
Page 22
Access Web Management
Access Web Manageme nt
To access the RoamAbout R1’s management interface, ent er the IP address of the
RoamAbout R1 in your Web browser (http://192.168. 2.1). The Login screen prompts you
for a password. The default password is password.
The Main page li nks are used to navigate to other pages that display configuration
parameters and statistics. You can define system parameters, manage and control the
RoamAbout R1 and its ports, or monitor network conditions .
RI Management Navigation
The RoamAbout R1’s manag ement interface includes four key pages – Setup, Status, Tools
and Help. The Status and Hel p pages provide general information on the current s ettings
and how to configure the RoamAbout R1. The Setup page is used to configu re the LAN,
WAN and wireless interface , as well as other adva nce d functions. While the Tools page is
used to reset the RoamAbout R1, restore the factory settings, or upgrade firmware.
Once a configurati on change has been made on a page, be sure to click on the Save button
located at the bottom of the page to sav e the new configuration cha nge.
To ensure a proper screen refresh after a command entry, be sure that
NOTE
Internet E xplorer 5.0 is confi gured as follows: Unde r the page Tools /
Internet Options / General / Temporary Internet Files / Settings, the setting for Check for newer versions of stored pages should be Every vi si t
to the page.
Setup Page Options
The Setup page allows you to configure TCP/IP se ttings and client se rvices. Table 2-1
provides brief descriptions of the options.
Table 2-1: Setup Page
Setup Page Description
Change Passw or dSets the passwo rd for admin istrat or access.
Set Time ZoneSets the local time zone.
LANSets the T CP /IP configuration for the RoamAbout R1 LAN
interf ace and all DHC P c lients.
WANSpecifie s the Internet connection type: DHCP host
2-2
configuration, fixed IP and gateway address, PPPoE
configuration, or dial-up modem .
Page 23
RI Management Navigation
Setup Page Description
DNSSpecifies DNS servers to use for domain name resolution.
WirelessConfigures the radio frequency, domain, and encryptio n for
wireless communications.
Advanced SettingsConfigures a variety of packet fil tering and special ized
functions, including:
•Firewall
•NAT
•Virtual Server
•Spec ia l A p p licati o n
•Virtual DMZ Host
•Remote Manageme n t
•Client Filtering
•MAC Filtering
Status Page
The Status page allow you to display conne ction status, key interface settings, and the
firmware and hardware version numbers. Table 2-2 provides brief descriptio ns of the
options.
Table 2-2: Status Page
Status Page Description
INTERNETDi sp lays WAN connection type and status.
ROAMABOUT R1Displays sy st em IP s ettings, the status for DHCP, NAT and
Firewa ll services , as well as the wir eless interf ace sett ings.
INFORMATIO NDisplays th e n u mber of attached clients, the firmware
versio ns, the physical MAC ad dress for each media
interface , as well as t he hardware ver sion an d serial nu mber.
Security LogDisplays a ny illegal attemp ts to access your network.
DHCP Client Log Displays information on all DHCP cli ents attached to your
network.
2-3
Page 24
Networking and Client Services
Networking and Client Services
Use the Setup page to configure the LAN interface (including TCP/IP parameters for the
RoamAbout R1’s gateway address, DHCP address pool for dynamic client address
allocation), the WAN connection options, DNS domain name mapping, the wireless
interface, and other advanced services.
You can use the Setup Wiz ard by cli cking on th e Start butto n at th e botto m of the f irst pa ge.
Change Password
Use this page to restrict management access based on a specific password. You need a
password to ac cess the configuration options provided by the Setup and Tools pages. By
default , the password is password. It is strongly recommended that you change the default
password as soo n as possible.T he Status and Help pages are not password prot ec ted.
Passwords can contain from 3 to12 alphanumeri c char ac ters, and are not case sens itive.
If your password is lost, or you cannot gain access to the management
NOTE
interface, press the Reset button on the back pane l for at le ast 5 seco nds to
restor e the factory defaults.
Set Time Zone
Set the time z one for the RoamAbout R1. This informa tion is used for log entries and client
filtering.
LAN Gateway and DHCP Settings
Configure the gateway address of the RoamAbout R1. To dynamically assign the IP
addres s for client PCs , enable the DHCP Server, set the lease time, and then specify the
address range. Also remember to configure all of your client PCs for dynamic address
allocation.
Valid IP addresses consist of four numbers, and are separated by period s. The f irs t three
fields ar e the net work portion, and can b e from 0–255 , while th e last fie ld is t he host porti on
and can be from 1–254. Do not include the gateway address of the RoamAbout R1 in the
client address pool.
2-4
Page 25
Networking and Client Services
WAN Configuration
Specify the WAN connection type required by your Internet Service Provider, then click
on More Configuration to provide detailed configuration parameters for the selected
connection type.
Specify one of th e first three options to configure a WAN connection thro ugh the RJ-45
port (i.e., a connection to an xDSL modem or Cable modem). Specify the Dial- u p on Demand option to configure a WAN connection through the serial port (i.e., a con nection
to an ISDN TA or PSTN modem).
If WAN connections are configured for both the RJ-45 and serial port, the
NOTE
serial port will be used as a backup Internet connection if the primary
RJ-45 WAN connection fails.
Dynamic IP Address – DHCP
The Host Name is optional, but may be re quired by some ISPs. The de fault MAC address
is set to the WAN’s
registering
determine the RoamAbout R1 ’s MAC addres s by clicki ng on Status in the Mai n page. You
can use the Clone MAC Address button to copy the MAC address of the Ethernet Card
installe d by your IS P (in your PC) and replace the WAN MAC address with this MAC
address.
for Internet service, and do not change it unless required by your ISP. You can
physical interface on the RoamAbout R1. Use this address when
Static IP Address – Fixed IP
If your Internet Service Provider assigned a fixed address, enter the assigned address and
subnet mask for the RoamAbout R1, then enter the gate way add r ess of your ISP.
You may need a fi xed add ress if you w ant t o prov ide Int erne t se rvices , s uch
NOTE
as a Web server or FTP server.
PPP over Ethernet – PPPoE
Enter the PPPoE user name and password assigned by your ISP. The Service Name is
normally optional, but may be required by some providers.
2-5
Page 26
Wireless Configuration
Dial-up on Demand – Modem
If you are accessing the Internet via an ISDN TA or PSTN modem
on the RoamAbout R1, then you must
•Check if you onl y use a dial-up modem to co nnect t o the Interne t. – If the serial port is
used for primary Internet access , select this item. If not selected, then this c onnection
will only be used for backup access if the primary WAN link fails.
•Dial-Up Servic e P hone Number – Enter the phone number your s ervice provider has
given to you for Internet access.
•Dial-Up Account Information – Enter your ISP account user name and password.
•Assigned ISP IP address – If you are assigned a dynamic IP address eve r y time you
dial up, select No for this item. However, if your IS P has assi gned a fixed IP address
for you to use, select Yes for this item and enter the IP address and subne t ma s k.
If your ISP has given you a secondary phone number, or if you have a
NOTE
secondar y Internet servic e account, the n fill in the relevant fields under
Secondary Dial-up.
specify your account information as described below.
attached to the serial port
DNS Configuration
Domain Name Servers are used to map an IP addres s to the equival ent domain na me (e.g.,
www.enterasys.com). Your ISP should provide the IP address for one or more domain
name servers. En ter those addresses on the page.
Wireless Configuration
To configure the RoamAbout R1 as a wireless access point for wireless clients (either
stationary or roaming), you need to define the radio channel, the domain identifier, and
encrypti on options.
To set up the wireles s channel and the network name, click on Wireless and then the
START button at the bott om of the first page, or you can sele ct Channel and Network
Name and Encryption from the Setup page.
Channel and Network Name
You must specify a common radio channel and Wireless Network Name (or SSID) to be
used by the RoamAbout R1 and all of your wireless clients. Be sure you configure all of
your clients to the same values.
2-6
Page 27
Configuring Client Services
Encryption
If you are transmitting sensiti ve data across wir eless channels, you sho uld enable
encryption. Encryption requires you to use the same set of encryption keys for the
RoamAbout R1 and a ll of your wirele ss clients. The RoamAbout s upports 40-bit or 128-bit
WEP (Wired Equivale nt P rivacy) encrypti on.
•The posit ion o f each key is import ant. The cl ients must e nte r the sa me ke y in t he sam e
positi on to com municate with the RoamAbout R1.
Wired Equivalent Privacy (WEP) protects data transmitted between
NOTE
wireless nodes, but does not protect any transmissions over your wired
network or over the Internet.
Configuring Client Services
The RoamAbo ut R1 incl udes a broad range of c lient s ervices, including f irewall pr otection,
network add ress transla tion, virt ual serv er, connecti on suppo rt for specia l applica tions, and
restr i cted Int ern et a cc ess for spec ifi ed c li ent s. You ca n co n figu re th es e fun ct io ns us ing the
Setup Wizard by clicking on Start, or by selecti ng specific items from the page.
Firewall Protection
The RoamAbout R1’ s fi rewall can block common hacker attacks, including IP Spoofing,
Land Attack , Ping of Dea th, IP wit h zero le ngt h, Smurf Att ack, UDP port lo opback, Snork
Attack, TCP null sc an, and T CP SYN flood ing. The firewall does not significantl y affe ct
system performance, so we advise leaving it enabled to protect your network users.
2-7
Page 28
Configuring Client Services
Network Address Translation – NAT
Network Addre ss Tra nslation ca n be used to g ive mu ltipl e use rs ac cess t o the I nterne t wit h
a single us er account, or to map the local ad d ress for an IP server (such as Web o r FTP) to
a public address. This secures your network from direct attack by hackers, and provides
more flexible management by allowing you to change internal IP addresses without
affecting outside access to your network.
NAT must be enabl ed to p rovid e multi-u ser acc ess to the Inte rnet , or to use
NOTE
the Virtual Server function.
Virtual Server
If you configure the RoamAbout R1 as a virtual server, remote users acces sing services
such as the Web or FTP at your local sit e via public IP addresses can be aut omatically
redirected to local servers conf igured with private IP addresses. Depending on the
requested servic e (TCP/UDP port number), the RoamAbout R1 redirects the external
service request to the appropriate server (located at another internal IP address ) .
The WAN interface must have a fixed IP address to utilize this function. For example, if
you set T ype/Publi c Port to TCP/8 0 (HTTP o r Web) and the Pri vate I P/Port to 192. 168.2. 2/
80, then al l HTTP re ques t from o utsid e use rs wil l be t ransfe rred to 192. 168.2. 2. The refore,
by just en te r in g th e IP Ad d res s provi d ed by the I S P, I nt er n e t users ca n ac cess the servi ce
they need at the loca l address to which you redirect them.
Some of the more common TCP service ports include:
•HTTP: 80
•FTP: 21
•Telnet: 23
•POP3: 110.
2-8
Page 29
Configuring Client Services
Enabling Special Applications
Some applications require multiple connections , such as Internet gaming,
videoconferencing, Internet telephon y and others. These applications may not work when
Network Address Translation (NAT) is enabled.
Specify the port normally associated with an application in the Trigger Port field, select
the prot ocol type as TCP or UDP, t hen enter the public ports a ssociated wi th the trigger por t
to open them for inbound traffic.
If an applicat ion still cannot function correctly after enabling multiple
NOTE
ports, you may have to open the client PC for full Inter net access using the
DMZ Host option.
Virtual DMZ Host
If you have a client PC that cannot run an Internet application properly from behind the
NAT firewall, or after configuring the Spe cial Applications function, you can open the
clien t u p to unr estri ct ed tw o - w ay I nt er n e t ac cess.
Adding a client to the DMZ (Demilitari zed Zone) may expose your local
network to a variety of security risks. Only use this option as a last resort.
Remote Management
By default , management access is only available to us ers on your local network. You can
manage the RoamAbout R1 from a remote host by adding the IP address of an admin istrator
in the Remote Management page.
NOTE
•If you spe cify an IP address of 0.0.0.0, an y ho st in your local n et work can
manage the RoamAbout R1.
•Only one management se ssion can be logged in at a time. You must log o ut
of the current session on the system before you can manage the
RoamAbout R1 from a different system.
Client Filtering
You can filter Internet access for local clients based on IP address, application type (i.e.,
HTTP port), and time of day.
2-9
Page 30
Configuring Client Services
MAC Filtering
You can filter Interne t ac ce ss for local wired and wireless clients base d on the MAC
address.
MAC Address Control
Every client that connects to the network has a unique MAC (Media Access Control)
address on his or her Ethernet adapter. An administrator can have more control- and more
security- over the network by specif ying which MAC addresses a re al lowed to access the
RoamAbout R1. You ca n enable this featu r e by selecting Enabled.
Connection Control
Connection control allows an admini strator to allow or deny cl ients access to th e
RoamAbout R1 and the Internet. Select Connection control to control whi ch of the wired
and wireless clients will be abl e to connect to the RoamAbout R1 and to the Internet. If a
client is denied connection to this device, it means that the client can’t access the Internet
and some network resources. Select to Allow or Deny clients whose MAC addr es ses are
not listed in the Control table.
•When a wired client is allowed to connect to the RoamAbout R1 it has full access to
the Internet and net wor k resources.
•When a wired client is not allowed to connect to the RoamAbout R1 it can
communicate with the other clients on the wired LAN, but cannot:
— Connect to the Internet
— Use the Print Server function
— Communicate with the clients on the wireless LAN
— Use the RoamAbout R1’s Web configuration
Associati on Contro l
The Association process is the exchange of information between wireless clients and a
wireless acc ess point to establish a link between them. A wireless client is capable of
transmitting and receivi ng data to an access point only after the association process is
successfully completed.
Association control allows an a dministrator t o allow or deny wire less clients from linking
to the RoamAbout R1. S elect Asso ci atio n cont ro l to control which of the wireles s clients
will be able to associate with the wireless LAN. If a client is denied association to the
wireless LAN, it means that the client can’ t s end or receive any data through the
RoamAbout R1. Choose Allow or Deny to allow o r deny clie nts whose MAC addr esses ar e
not listed in the Control table.
2-10
Page 31
Configuring Client Services
When a wireless client is allowed to associate with the wireless LAN and connect to the
RoamAbout R1, it has full access to the Internet and network resources.
When a wireless clien t is not allowed to as sociate with the wireless LAN, it cannot:
•Communicate with any other clients on the LAN (neither wired nor wireless )
•Connect to the Internet
•Use the Print Ser ver function
•Use the RoamAbout R1’s Web configuration
•Connect to the RoamAbout R1
When a wireless client is allowed to associate with the wireless LAN, but not connect to
the RoamAbout R1, it can comm unicate with o ther clie nts on the wi reless LAN, but cannot:
•Communicate with any client s on the wired LAN
•Connect to the Internet
•Use the Print Ser ver function
•Use the RoamAbout R1’s Web configuration
Association control has no aff ec t on wired clients.
2-11
Page 32
Viewing Network and Device Status
Viewing Network and Device Status
The Status page displ ays the c onnect ion st atus for the WAN, WLAN, and LAN int erfaces .
It also displa ys the firmware and ha rdware version numbe rs, ille gal attempts to access your
network, as wel l as all DHCP clients connec ted to your network.
The following information is displa yed on the page:
Field Description
INERNETDisplays connect ion type and status
.
ROAMABOUT R1 Displays system IP settings, the status for DHCP, NAT and
Firewa ll services , as well as the wir eless interf ace sett ings.
INFORMATIONDisplays the number of attached clients, the firmware versions,
the p hysical MAC ad dress for ea ch med ia int erfac e, as well as the
hardware version and serial number.
Security LogDisplays a ny illegal attempts to access your network.
DHCP Client Log Displays information on all DHCP cli ents on your network.
Using Tools
Use the Tools page to reboot, restore to factory defaults, and upgrade the firm ware .
Field Description
Reset RoamAbout R1Reboot s the RoamAbout R1 and retains the current SAVE D
Resto r e Factory
Defaults
Update FirmwareAllows you to check the Enterasys Networks Wireless Web
You can also reset the RoamAbout R1 back to its or iginal factory by pressing the Reset
button on the back panel for 5 seconds.
configuration settings.
Removes all configuration s ettings and restores the
RoamAbout R1 back to its original factory state.
site for upgrades and upgrade the RoamAbout R1 wit h the
new firmware.
2-12
Page 33
Appendix A
Problem Solving
This Appendix describes common probl ems you may encounter and possible solutions.
The RoamAbout R1 can be easily monitored through its panel indicators to ident ify
problems.
Troubleshooting Chart
SymptomAction
Power LED is OffThe External power supply has failed or is disconnected.
•Check connections between the RoamAbout R1, the
exter na l po w e r su p pl y, and the wa ll ou tle t.
•If the power indicator does not turn on when the pow er
cord is pl ugged in, you may have a pr oblem with the pow er
outlet, power co rd, or external power supply.
If th e u ni t pow ers of f aft er ru nning fo r a wh il e, ch eck f or lo ose
power c onne ct ions, power los se s o r surges at the p ower ou tlet .
If you still ca nn ot isolate the problem, the exter n al power
supply m ay be defect ive. In this case, contact Enterasys
Netwo rks T echnical Support for assistance.
Link LED is Off
•Verify tha t the RoamAbout R1 and attached device are
powered on.
•Verify tha t the cable is plugged into the RoamAbout R1
and the correspondi ng device.
•V e rify that the proper cable type is us ed and i ts lengt h does
not e xceed speci fied limits.
•Verify that the network i nterface on the attache d device is
configured for the proper com municati on speed and
duplex mode.
•Check the adapter on the atta ched device and cable
connections for possible defects. Replace the de fective
adapter or cable if necessary.
A-1
Page 34
Troubleshooting Chart
SymptomAction
Network Connec tion Problems
Cannot Pin g the
RoamAbou t R1 from the
attached LAN, or the
RoamAbou t R1 cannot
Ping any device on the
attached LAN
Wireless users cannot
access the RoamAbout R1
Managemen t Problems
Cannot connect using the
Web browser
•Verify that IP a ddr esse s ar e p rop erly c onf igur ed. For m os t
applic ations, you should use the RoamAbout R1’s DHCP
functi on t o d yna mic ally as sign IP ad dr esses t o any ho st on
the at tache d LAN . I f you m anual ly con figur e IP a ddr es ses
on the LAN, verify that the same network address
(network compone nt of the IP addre ss) and subnet m ask
are used for both the RoamAbout R1 and the attached
LAN devices.
•V e rify that the device you want to ping (or from w hich you
are pinging) has been configur ed for TCP/IP.
•Verify tha t the RoamAbout R1 and all w ireless users are
config ured to use the same r adio channe l, wirel ess doma in
(W ireless Network Name, SS ID ), and encryption keys.
•Verify tha t all wire less user s are within range of the
RoamAbout R1.
- Indoors: Up to 160 ft. (50 m)
- Outdoors: up to 480 ft. (50 m)
•V erify that the RoamAbout R1 was configured with a valid
IP address, subnet mask and def ault gateway.
•Verify that you have a valid network connection to the
RoamAbou t R1, and that the port you are using has not
been disabled.
•Check the network cabling between the management
station and the Ro am A b out R1.
•Verify that you logged out of the m anagement station that
you were pre vi ously u si ng to ma nage t he Roam Abou t R1.
If that session timed-out, you must log back int o that
manag em ent station and log out bef ore you can mana ge
the RoamA bout R1 from any other management statio n
Forgot or lost the
password
Printer Server
The prin ter cannot print or
prin ts illegible te xt.
A-2
Press the RESET button on t he rear panel for 5 second s to
resto re the fac tory de fa ults . The defaul t passwo rd is password.
Verify th at the pa rallel cable be tw een the R o am A b out R1 and
printer is connected, and in good condition
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.