No part of this work may be reproduced in any form or by any means – graphic, electronic or
mechanical, including photocopying, recording, taping or storage in an information retrieval system –
without prior written permission of the copyright owner.
The trademarks, logos and service marks ("Marks") displayed herein are the property of Foundry or
other third parties. You are not permitted to use these Marks without the prior written consent of
Foundry or such appropriate third party.
Foundry Networks, BigIron, FastIron, IronView, JetCore, NetIron, ServerIron, TurboIron, IronWare, EdgeIron,
IronPoint, the Iron family of marks and the Foundry Logo are trademarks or registered trademarks of
Foundry Networks, Inc. in the United States and other countries.
All other trademarks mentioned in this document are the property of their respective owners.
Page 3
Compliances
FCC - Class B
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in
a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment
does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected
• Consult the dealer or an experienced radio/TV technician for help
FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate this equipment. This device complies with Part 15 of the FCC Rules.
Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2)
this device must accept any interference received, including interference that may cause undesired operation.
IMPORTANT NOTE:
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This
equipment should be installed and operated with a minimum distance of 20 centimeters (8 inches) between the
radiator and your body. This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
FCC Channel Use Statement:
The equipment version marketed in US is restricted to usage of the channels 1- 11 only.
Wireless 2.4 Ghz and 5 GHz Band Statements:
As the IronPoint can operate in the 5150-5250 MHz frequency band it is limited by the FCC, Industry Canada
and some other countries to indoor use only so as to reduce the potential for harmful interference to co-channel
Mobile Satellite systems.
High power radars are allocated as primary users (meaning they have priority) of the 5250-5350 MHz and
5650-5850 MHz bands. These radars could cause interference and/or damage to the IronPoint when used in
Canada.
The term “IC:” before the radio certification number only signifies that Industry Canada technical specifications
were met.
This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus as set
out in the interference-causing equipment standard entitled “Digital Apparatus,” ICES-003 of Industry Canada.
Cet appareil numérique respecte les limites de bruits radioélectriques applicables aux appareils numériques de
Classe B prescrites dans la norme sur le matérial brouilleur: “Appareils Numériques,” NMB-003 édictée par
l’Industrie.
Japan VCCI Class B
EC Declaration of Conformity
Contact Foundry Networks at:
Foundry Networks, Inc.
2100 Gold Street
P.O. Box 649100
San Jose, CA 95164-9100
Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of
the European Union (1999/5/EC). This equipment meets the following conformance standards:
• EN 60950 (IEC 60950) - Product Safety
• EN 301 893 - Technical requirements for 5 GHz radio equipment
• EN 300 328 - Technical requirements for 2.4 GHz radio equipment
• EN 301 489-1 / EN 301 489-17 - EMC requirements for radio equipment
0560
Countries of Operation & Conditions of Use in the European Community
This device is intended to be operated in all countries of the European Community. It is intended only for indoor
use. License requirements and allowed channels of operation apply in some countries as described below:
Note: The user must use the configuration utility provided with this product to ensure the channels
of operation are in conformance with the spectrum usage rules for European Community countries
as described below.
• This device requires that the user or installer properly enter the current country of operation in the Command
Line Interface (CLI) as described in the user guide, before operating this device.
• This device will automatically limit the allowable channels determined by the current country of operation.
Incorrectly entering the country of operation may result in illegal operation and may cause harmful interference
to other system. The user is obligated to ensure the device is operating according to the channel limitations,
indoor/outdoor restrictions and license requirements for each European Community country as described in
this document.
• This device employs a radar detection feature required for European Community operation in the 5 GHz band.
This feature is automatically enabled when the country of operation is correctly configured for any European
Community country. The presence of nearby radar operation may result in temporary interruption of operation
of this device. The radar detection feature will automatically restart operation on a channel free of radar.
• The 5 GHz Turbo Mode feature is not allowed for operation in any European Community country. The current
setting for this feature is found in the 5 GHz 802.11a Radio Settings Window as described in the user guide.
• The 5 GHz radio's AutoChannelSelect/SmartSelect setting described in the user guide must always remain
enabled to ensure that automatic 5 GHz channel selection complies with European requirements. The current
setting for this feature is found in the 5 GHz 802.11a Radio Settings Window as described in the user guide.
• This device is restricted to indoor use when operated in the European Community using the 5.15 - 5.35 GHz
band: Channels 36, 40, 44, 48, 52, 56, 60, 64. See table below for allowed 5 GHz channels by country.
• This device is restricted for indoor use when operated in all countries of the European Community using the
2.4 GHz band: Channels 1 - 13.
Operation Using 5 GHz Channels in the European Community
The user/installer must use the provided configuration utility to check the current channel of operation and make
necessary configuration changes to ensure operation occurs in conformance with European National spectrum
usage laws as described below and elsewhere in this document.
Allowed 5GHz Channels in Each European Community Country
Allowed Frequency BandsAllowed Channel NumbersCountries
* Outdoor operation is not allowed using 5.15-5.35 GHz bands (Channels 36 to 64).
By selecting the appropriate country codes detailed on page 4-10 of this guide you will ensure the device operates within the frequency restrictions detailed above. You are responsible for ensuring the device is used
indoors-only and for private use only as applicable
The end-user must operate this device in accordance with European regulatory requirements for Transmit
Power Control. This device employs Transmit Power Control (TPC) to reduce the potential for interference to
other communication systems operating in the 5 GHz frequency bands. The TPC feature implemented in this
wireless LAN device must be configured by the end-user when operating in any European Community country.
The required configuration procedure for TPC is found in the user guide for this product.
Note: The TPC procedure should be repeated when relocating this wireless device within the
current wireless network or to a wireless network in a new location.
Declaration of Conformity in Languages of the European Community
EnglishHereby, Foundry Networks, declares that this Radio LAN device is in compliance with the
essential requirements and other relevant provisions of Directive 1999/5/EC.
FinnishValmistaja Foundry Networks vakuuttaa täten että Radio LAN device tyyppinen laite on
direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen
mukainen.
DutchHierbij verklaart Foundry Networks dat het toestel Radio LAN device in overeenstemming
is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG
Bij deze Foundry Networks dat deze Radio LAN device voldoet aan de essentiële eisen en
aan de overige relevante bepalingen van Richtlijn 1999/5/EC.
FrenchPar la présente Foundry Networks déclare que l'appareil Radio LAN device est conforme
aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE
SwedishHärmed intygar Foundry Networks att denna Radio LAN device står I överensstämmelse
med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av
direktiv 1999/5/EG.
DanishUndertegnede Foundry Networks erklærer herved, at følgende udstyr Radio LAN device
overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF
GermanHiermit erklärt Foundry Networks, dass sich dieser/diese/dieses Radio LAN device in
Übereinstimmung mit den grundlegenden Anforderungen und den anderen relevanten
Vorschriften der Richtlinie 1999/5/EG befindet". (BMWi)
Hiermit erklärt Foundry Networks die Übereinstimmung des Gerätes Radio LAN device mit
den grundlegenden Anforderungen und den anderen relevanten Festlegungen der
Richtlinie 1999/5/EG. (Wien)
GreekΜε την παρουσα Foundry Networks δηλωνει οτι radio LAN device συµµορφωνεται προσ
ItalianCon la presente Foundry Networks dichiara che questo Radio LAN device è conforme ai
requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.
SpanishPor medio de la presente Foundry Networks declara que el Radio LAN device cumple con
los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la
Directiva 1999/5/CE
PortugueseFoundry Networks declara que este Radio LAN device está conforme com os requisitos
essenciais e outras disposições da Directiva 1999/5/CE.
Australia/New Zealand AS/NZS 4771
ACN 066 352010
Contact Foundry Networks at:
Foundry Networks, Inc.
2100 Gold Street
P.O. Box 649100
San Jose, CA 95164-9100
Safety Compliance
Power Cord Safety
Please read the following safety information carefully before installing the access point:
WARNING:Installation and removal of the unit must be carried out by qualified personnel only.
• The unit must be connected to an earthed (grounded) outlet to comply with international safety standards.
• Do not connect the unit to an A.C. outlet (power supply) without an earth (ground) connection.
• The appliance coupler (the connector to the unit and not the wall plug) must have a configuration for mating
with an EN 60320/IEC 320 appliance inlet.
• The socket outlet must be near to the unit and easily accessible. You can only remove power from the unit by
disconnecting the power cord from the outlet.
• This unit operates under SELV (Safety Extra Low Voltage) conditions according to
IEC 60950. The conditions are only maintained if the equipment to which it is connected also operates under
SELV conditions.
France and Peru only
This unit cannot be powered from IT
†
supplies. If your supplies are of IT type, this unit must be powered by 230
V (2P+T) via an isolation transformer ratio 1:1, with the secondary connection point labelled Neutral, connected
directly to earth (ground).
†
Impédance à la terre
Power Cord Set
U.S.A. and CanadaThe cord set must be UL-approved and CSA certified.
The minimum specifications for the flexible cord are:
- No. 18 AWG - not longer than 2 meters, or 16 AWG.
- Type SV or SJ
- 3-conductor
The cord set must have a rated current capacity of at least 10 A
The attachment plug must be an earth-grounding type with NEMA 5-15P (15 A, 125
V) or NEMA 6-15P (15 A, 250 V) configuration.
DenmarkThe supply plug must comply with Section 107-2-D1, Standard DK2-1a or DK2-5a.
SwitzerlandThe supply plug must comply with SEV/ASE 1011.
U.K.The supply plug must comply with BS1363 (3-pin 13 A) and be fitted with a 5 A fuse
which complies with BS1362.
The mains cord must be <HAR> or <BASEC> marked and be of type
HO3VVF3GO.75 (minimum).
EuropeThe supply plug must comply with CEE7/7 (“SCHUKO”).
The mains cord must be <HAR> or <BASEC> marked and be of type
HO3VVF3GO.75 (minimum).
IEC-320 receptacle.
Veuillez lire à fond l'information de la sécurité suivante avant d'installer le access point:
AVERTISSEMENT:L’installation et la dépose de ce groupe doivent être confiés à un personnel
qualifié.
• Ne branchez pas votre appareil sur une prise secteur (alimentation électrique) lorsqu'il n'y a pas de connexion
de mise à la terre (mise à la masse).
• Vous devez raccorder ce groupe à une sortie mise à la terre (mise à la masse) afin de respecter les normes
internationales de sécurité.
• Le coupleur d’appareil (le connecteur du groupe et non pas la prise murale) doit respecter une configuration
qui permet un branchement sur une entrée d’appareil EN 60320/IEC 320.
• La prise secteur doit se trouver à proximité de l’appareil et son accès doit être facile. Vous ne pouvez mettre
l’appareil hors circuit qu’en débranchant son cordon électrique au niveau de cette prise.
• L’appareil fonctionne à une tension extrêmement basse de sécurité qui est conforme à la norme IEC 60950.
Ces conditions ne sont maintenues que si l’équipement auquel il est raccordé fonctionne dans les mêmes
conditions.
France et Pérou uniquement:
Ce groupe ne peut pas être alimenté par un dispositif à impédance à la terre. Si vos alimentations sont du type
impédance à la terre, ce groupe doit être alimenté par une tension de 230 V (2 P+T) par le biais d’un transformateur d’isolement à rapport 1:1, avec un point secondaire de connexion portant l’appellation Neutre et avec
raccordement direct à la terre (masse).
Cordon électrique - Il doit être agréé dans le pays d’utilisation
Etats-Unis et Canada:Le cordon doit avoir reçu l’homologation des UL et un certificat de la CSA.
Les spe'cifications minimales pour un cable flexible sont AWG No. 18, ouAWG No. 16
pour un cable de longueur infe'rieure a` 2 me'tres.
- type SV ou SJ
- 3 conducteurs
Le cordon doit être en mesure d’acheminer un courant nominal d’au moins 10 A.
La prise femelle de branchement doit être du type à mise à la terre (mise à la masse)
et respecter la configuration NEMA 5-15P (15 A, 125 V) ou NEMA 6-15P (15 A, 250
V).
Danemark:La prise mâle d’alimentation doit respecter la section 107-2 D1 de la norme DK2 1a
ou DK2 5a.
Suisse:La prise mâle d’alimentation doit respecter la norme SEV/ASE 1011.
EuropeLa prise secteur doit être conforme aux normes CEE 7/7 (“SCHUKO”)
LE cordon secteur doit porter la mention <HAR> ou <BASEC> et doit être de type
HO3VVF3GO.75 (minimum).
Bitte unbedingt vor dem Einbauen des access point die folgenden Sicherheitsanweisungen durchlesen:
WARNUNG: Die Installation und der Ausbau des Geräts darf nur durch Fachpersonal erfolgen.
• Das Gerät sollte nicht an eine ungeerdete Wechselstromsteckdose angeschlossen werden.
• Das Gerät muß an eine geerdete Steckdose angeschlossen werden, welche die internationalen
Sicherheitsnormen erfüllt.
• Der Gerätestecker (der Anschluß an das Gerät, nicht der Wandsteckdosenstecker) muß einen gemäß EN
60320/IEC 320 konfigurierten Geräteeingang haben.
• Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich sein. Die Stromversorgung des Geräts
kann nur durch Herausziehen des Gerätenetzkabels aus der Netzsteckdose unterbrochen werden.
• Der Betrieb dieses Geräts erfolgt unter den SELV-Bedingungen (Sicherheitskleinstspannung) gemäß IEC
60950. Diese Bedingungen sind nur gegeben, wenn auch die an das Gerät angeschlossenen Geräte unter
SELV-Bedingungen betrieben werden.
Stromkabel. Dies muss von dem Land, in dem es benutzt wird geprüft werden:
SchweizDieser Stromstecker muß die SEV/ASE 1011Bestimmungen einhalten.
EuropeDas Netzkabel muß vom Typ HO3VVF3GO.75 (Mindestanforderung) sein und die
Aufschrift <HAR> oder <BASEC> tragen.
Der Netzstecker muß die Norm CEE 7/7 erfüllen (”SCHUKO”).
The IronPoint™ 200 Access Point is a device that allows wireless clients to connect to your
enterprise network. It is a full-featured access point that can be managed as a single device or by
using IronView Network Manager, a network management tool that manages several Foundry
devices on a network.
This guide presents the procedures for installing the IronPoint™ 200 Access Point.
Audience
This guide is for system administrators with a working knowledge of wireless networks and network
management and who is familiar with switching and networking concepts.
Nomenclature
This guide uses the following typographical conventions to show information:
Warning:A warning calls your attention to a possible hazard that can cause injury or death.
Caution: A caution calls your attention to a possible hazard that can damage equipment.
Note: A note emphasizes an important fact or calls your attention to a dependency.
How to Get Help
If you need assistance, Foundry Networks is committed to ensuring that your investment in our
products remains cost-effective by offering a variety of support options.
Foundry Networks Technical Support
Foundry Networks technical support will ensure that the fast and easy access that you have come to
expect from your Foundry Networks products will be maintained.
Web Access
Point your browser to the kp.foundrynet.com to access the Foundry Knowledge Portal.
Note: Check with your sales account representative to determine how to obtain a valid user name
Technical requests can also be sent to the e-mail address: support@foundrynet.com
Telephone Access
◆1.877.TURBOCALL (887.2622): United States
◆1.408.586.1881: Outside the United States
Warranty Coverage
Contact Foundry Networks using any of the methods listed above for information about the standard
and extended warranties.
Related Publications
Refer to the Foundry IronPoint User Guide for instructions on how to configure and manage the
access point.
What’s New in this Edition
Information for disabling the Automatic Discovery and Configuration feature if you do not want to use
that feature has been added to this guide. Refer to “Adding the IronPoint Access Point to the
Network” on page 4-10.
Foundry’s IronPoint 200 is an IEEE 802.11a/g enterprise wireless access point that provides highspeed data communications between the wired LAN and fixed, portable or mobile devices equipped
with an 802.11a, 802.11b, or 802.11g wireless network card.
The access point offers full network management capabilities through a command line interface for
initial configuration and troubleshooting, a Web interface, and Simple Network Management tools.
The IEEE 802.11a/g standard uses a radio modulation technique known as Orthogonal Frequency
Division Multiplexing (OFDM), and a shared collision domain (CSMA/CA). It operates at the 5 GHz
Unlicensed National Information Infrastructure (UNII) band for connections to 802.11a clients, and at
2.4 GHz for connections to 802.11g clients.
IEEE 802.11g includes backward compatibility with the IEEE 802.11b standard. IEEE 802.11b also
operates at 2.4 GHz, but uses Direct Sequence Spread Spectrum (DSSS) modulation technology to
achieve a communication rate of up to 11 Mbps.
The access point also supports a 54 Mbps half-duplex connection to Ethernet networks for each
active channel (up to 108 Mbps in turbo mode on the 802.11a interface).
Management Options
The
IronPoint 200
also includes a built-in network management agent that allows the access point to be managed inband using SNMP, with a Web browser, or remotely via Telnet and SSH. The access point provides
an RS-232 DCE serial port (DB-9 connector) on the front panel for out-of-band management. A PC
may be connected to this port
serial cable. (See “Console Port Pin Assignments” on page B-3 for wiring options.)
contains LEDs for “at-a- glance” monitoring of wireless and network port status. It
for configuration and monitoring out-of band via a
straight-through
For a detailed description of the access point’s management features, refer to the Foundry IronPoint 200 User Guide.
The IronPoint 200 access point has one 10BASE-T/100BASE-TX RJ-45 Ethernet port that can be
attached directly to a 10BASE-T/100BASE-TX wired network. The wired network must conform to
the IEEE 802.3 or 802.3u specifications.
The Ethernet port uses an MDI (i.e., internal straight-through) pin configuration. You can therefore
use straight-through twisted-pair cable to connect this port to most network interconnection devices,
such as a switch or router, that provide MDI-X ports. However, when connecting the access point to
a workstation or other device that does not have MDI-X ports, you must use a crossover twisted-pair
cable.
The access point appears as an Ethernet node and performs a bridging function by moving packets
from the wired network to remote workstations in the wireless infrastructure.
Note: The RJ-45 port supports Power over Ethernet (PoE) based on the IEEE 802.3af standard.
Refer to the description for the “Power Connector” for information on supplying power to the access
point’s network port from a network device, such as a switch, that provides Power over Ethernet
(PoE).
Antennas
The IronPoint 200 access point includes two integrated antennas for wireless communications. The
signal transmitted from both antennas is identical, but only the best signal received on one of the
antennas is used. The antennas transmit the outgoing signal as a toroidal sphere (doughnut
shaped), so the antennas should be adjusted to different angles to provide better coverage. For
further information, see “Installing the IronPoint Access Point” on page 4-1.
Optional External Antenna
To extend the access point’s radio coverage area, an optional 2.4 GHz high-gain antenna (for
802.11b and/or 802.11g clients) can be attached to a connection socket that is provided on one
antenna. When an external antenna is connected, the access point automatically disables the two
integrated antennas and uses only the external antenna.
Figure 2-2. An Example of an Optional External Antenna for the IronPoint 200
The access point includes a Kensington security slot on the rear panel. You can prevent
unauthorized removal of the access point in several ways: by wrapping Foundry’s locking clamp (lock
not provided) or by using a Kensington security cable (not provided).
Console Port
This port is used to connect a console device to the access point through a serial cable. This
connection is described under “Console Port Pin Assignments” on page B-3. The console device can
be a PC or workstation running a VT-100 terminal emulator, or a VT-100 terminal.
Reset Button
This button is used to reset the access point or restore the factory default configuration. If you hold
down the button for less than 5 seconds, the access point will perform a hardware reset. If you hold
down the button for 5 seconds or more, any configuration changes you may have made are removed,
and the factory default configuration is restored to the access point.
Power Connector
The access point does not have a power switch. It is powered on when connected to the AC power
adapter, and the power adapter is connected to a power source. The access point automatically
adjusts to any voltage between 100-240 volts at 50 or 60 Hz. No voltage range settings are required.
The access point may also receive Power over Ethernet (PoE) from a switch or other network device
that supplies power over the network cable based on the IEEE 802.3af standard.
Note that if the access point is connected to a PoE source device and also connected to a local
power source through the AC power adapter, PoE will be disabled.
The wireless solution supports a stand-alone wireless network configuration as well as an integrated
configuration with 10/100 Mbps Ethernet LANs.
Wireless network cards, adapters, and access points can be configured as:
•Ad hoc for departmental, SOHO, or enterprise LANs
•Infrastructure for wireless LANs
•Infrastructure wireless LAN for roaming wireless PCs
The 802.11b and 802.11g frequency band which operates at 2.4 GHz can easily encounter
interference from other 2.4 GHz devices, such as other 802.11b or g wireless devices, cordless
phones and microwave ovens. If you experience poor wireless LAN performance, try the following
measures:
•Limit any possible sources of radio interference within the service area
•Increase the distance between neighboring access points
•Decrease the signal strength of neighboring access points
•Increase the channel separation of neighboring access points (e.g., up to 3 channels of
separation for 802.11b, up to 4 channels for 802.11a, or up to 5 channels for 802.11g)
Ad Hoc Wireless LAN (no Access point or Bridge)
An ad hoc wireless LAN consists of a group of computers, each equipped with a wireless adapter,
connected via radio signals as an independent wireless LAN. Computers in a specific ad hoc
wireless LAN must therefore be configured to the same radio channel.
The access point is designed to provide access to a wired LAN for wireless workstations. An
integrated wired/wireless LAN is called an Infrastructure configuration. A Basic Service Set (BSS)
consists of a group of wireless PC users and an access point that is directly connected to the wired
LAN. Each wireless PC in this BSS can talk to any computer in its wireless group via a radio link, or
access other computers or network resources in the wired LAN infrastructure via the access point.
The infrastructure configuration not only extends the accessibility of wireless PCs to the wired LAN,
but also increases the effective wireless transmission range for wireless PCs by passing their signal
through one or more access points.
A wireless infrastructure can be used for access to a central database, or for a connection between
mobile workers, as shown in the following figure.
Infrastructure Wireless LAN for Roaming Wireless PCs
The Basic Service Set (BSS) defines the communications domain for each access point and its
associated wireless clients. The BSS ID is a 48-bit binary number based on the access point’s
wireless MAC address, and is set automatically and transparently as clients associate with the
access point. The BSS ID is used in frames sent between the access point and its clients to identify
traffic in the service area.
The BSS ID is only set by the access point, never by its clients. The clients only need to set the
Service Set Identifier (SSID) that identifies the service set provided by one or more access points.
The SSID can be manually configured by the clients, can be detected in an access point’s beacon, or
can be obtained by querying for the identity of the nearest access point. For clients that do not need
to roam, set the SSID for the wireless card to that used by the access point to which you want to
connect.
A wireless infrastructure can also support roaming for mobile workers. More than one access point
can be configured to create an Extended Service Set (ESS). By placing the access points so that a
continuous coverage area is created, wireless users within this ESS can roam freely. All wireless
network cards and access points within a specific ESS must be configured with the same SSID.
This section presents procedures for installing the Foundry AP access point.
Unpacking the IronPoint Access Point
Unpack the Foundry AP access point and make sure the following components are included in the
box:
•One IronPoint 200 access point
•One External Power supply and power cable
•RS-232 console cable
•IronPoint 200 access point mounting bracket with lock clamp
•2 fasteners
•CD-ROM containing the IronPoint Access Point manuals, drivers, and utility
•4 adhesive feet
Installing the IronPoint Access Point
Select a location to install the Foundry AP access point. The best location is at the center of your
wireless coverage area, within the line of sight of all wireless devices. The access point can be
placed on a horizontal surface or mounted on the wall, with or without the mounting bracket. It can
also be mounted on a suspended ceiling.
Note: For safety reasons, make sure ventilation holes on the access point are positioned
horizontally, not vertically. Allow at least 1 inch (2.54 centimeters) clearance around the ventilation
holes for proper ventilation.
Placing the Access Point on a Desktop or Shelf
Do the following if you want to mount the access point on a horizontal surface, such as a desktop or
shelf:
1. Attach the four adhesive feet to the bottom panel of the access point (Figure 4-1).
2. Set the access point on its four rubber feet on the desktop, shelf, or flat surface, making sure
there is enough clearance around the ventilation holes for proper air flow. For safety reasons,
make sure ventilation holes on the access point are positioned horizontally, not vertically.
3. For best coverage, position the antennas along different axes, such as 45 to 90 degrees apart
from each other.
Attaching the Access Point to a Wall without the Mounting Bracket
Do the following if you want to mount the access point on a wall without the mounting bracket:
1. Use the template in Figure 4-2 to mark the holes for the two slotted key mounting screws on the
wall.
2. Install the two screws for the slotted key mounting holes on the wall.
3. Position the slotted mounting holes on the back of the access point over the screws.
4. Slide the access point across the screws so the screws move into the narrow part of the slotted
mounting holes. For safety reasons, make sure ventilation holes on the access point are
positioned horizontally, not vertically.
5. For best coverage, position the antennas along different axes, such as 45 to 90 degrees apart
Attaching the Access Point to a Wall Using the Mounting Bracket
Do the following to attach the access point to the wall using the mounting bracket:
1. Use the template in Figure 4-2 to mark the holes for the mounting screws on the wall.
2. Install the mounting screws for the two slotted key mounting holes on the wall, but leave
approximately 1/4 inch of clearance between the wall and the screw head.
3. Install the mounting bracket on the wall by aligning the slotted key mounting holes on the
mounting bracket with the screws on the wall (Figure 4-3).
4. Slide the mounting bracket across the screws to move the screws into the narrow part of the
mounting holes.
5. Tighten the screws to secure the mounting bracket in place.
6. Install the mounting screw at the bottom of the bracket.
7. Install the access point into the mounting bracket by aligning the two rear tabs on the mounting
brackets with the two rear rectangular holes on the access point (Figure 4-4). For safety reasons,
make sure ventilation holes on the access point are positioned horizontally, not vertically.
8. Press the access point into the mounting bracket until it snaps into place. The clip locks the
access point in place.
9. For best coverage, position the antennas along different axes, such as 45 to 90 degrees apart
You can lock the access point on the mounting bracket by doing the following:
Note: The access point comes with a lock clamp, but you must purchase your own lock.
1. Complete the steps in the previous sections to attach the access point to a wall or suspended
ceiling using the mounting bracket. Make sure the access point is installed in the mounting
bracket.
2. Put the lock clamp key into the top of the access point's lock hole.
3. Turn the lock clamp key to the horizontal position (about a 90 degree turn). (The key only turns
only in one direction.)
4. Push the lock key down to the bottom of the lock groove towards the mounting bracket.
5. Line up the lock clamp with the lock clamp key.
6. Insert a lock into the hole of the locking clamp and lock it into place.
Figure 4-6. Locking the Access Point
1. Insert Key
2. Tur n Ke y
3. Slide clamp over Key
4. Secure with pad lock
Installing the External Antenna
You can install an external antenna to extend the access point's coverage area. If you install the
external antenna while live sessions are on the access point, those sessions will be terminated.
To install the external antenna:
1. Remove the rubber grommet from the access point's right integrated antenna to expose the
4. Connect the power adapter cable to the 5V DC power socket on the access point and the other
end of the cable to a power source.
CAUTION: Use ONLY the power adapter supplied with this access point. Otherwise, the product
may be damaged.
Adding the IronPoint Access Point to the Network
The access point’s country code and TCP/IP address information must be configured before an
access point can be managed or added to a network. Configuring the correct country code allows
the access point to use the necessary channels and frequencies assigned to your country's wireless
frequency regulations. This must be done prior to using the access point for the first time as the
802.11a and 802.11b/g radios cannot be enabled until the country code has been configured.
Note: Country regulations for wireless products differ from country to country. The access points
may be shipped with the country code already preset, as required by the country, or set to the
default setting of "99." If your country code is pre-set (for example, for United States, Canada,
Japan, and New Zealand), you are prohibited from changing this setting. If country code on your
access point is set to "99," then you may set the country code, but you can set it only to the country
in which the access point is to be used.
It is very important to follow these instructions carefully. Selection of the wrong country code for your
device could result in the device operating outside of authorized frequency/power allocations and
lead to possible legal action by the regulatory authority in your country.
Although Foundry has attempted to provide accurate information in these materials, Foundry
assumes no legal responsibility for the accuracy or completeness of the information. Please note
that Foundry's product information does not constitute or contain any guarantee, warranty or legally
binding representation, unless expressly identified as such in a duly signed writing.
Foundry's IronPoint access point uses TCP/IP to communicate with the management consoles. By
using TCP/IP, you can place access points anywhere in the enterprise and manage them from a
single central location. IronPoint access points do not need to be physically connected to any
wireless LAN switch to be managed.
You can configure the access point’s TCP/IP address information using the Automatic Discovery and
Configuration (ADC) or without using ADC. ADC allows you to rapidly configure a number of access
points, straight out of the box, by mapping an access point’s MAC address to an IP address, subnet
mask, and default gateway that are defined on an IronPoint-FES interface. Once the access point is
attached to the IronPoint-FES, the switch assigns the predefined IP address, subnet mask, and
default gateway to the access point with the matching MAC address.
Software release 01.3.00 and later contains the ADC feature and is shipped with the ADC feature
enabled. If you want to use ADC to configure TCP/IP address information, refer to the IronView Network Manager User Guide for details.
If you do not want to use ADC, you must override ADC at power-up, so you can enter TCP/IP
information. Do the following:
1. Once the access point powers up, a prompt to override ADC appears. Enter the following ADC
override login ID and password on your PC console to override ADC:
5. Configure the TCP/IP address. The default IP address for the access point is 169.254.1.1 with a
255.255.0.0 subnet mask and a default gateway of 169.254.1.254. To change the access point's
IP address, for example, to 192.168.1.10 with a 24-bit subnet mask and a default gateway of
ip address <ip-address> <subnet-mask> <default-gateway>
6. Confirm the Country Code and TCP/IP settings with the show system command. Do not
proceed unless the information displayed is correct. For example, to confirm the country code of
the United Kingdom and the TCP/IP address of 192.168.8.10/24, enter:
Foundry AP # show system
Syntax: show system
The command displays the following information:
Foundry AP # show system
System Information
============================================================
Serial Number : SACC1200KA
System Up time : 0 days, 0 hours, 5 minutes, 25 seconds
System Name : Foundry AP
System Location :
System Contact : Contact
System Country Code : GB - UNITED KINGDOM
MAC Address : 00-0C-DB-813-882
IP Address : 192.168.8.10
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.8.254
VLAN State : DISABLED
Management VLAN ID(AP): 1
IAPP State : ENABLED
DHCP Client : DISABLED
HTTP Server : ENABLED
HTTP Server Port : 80
HTTPS Server : ENABLED
HTTPS Server Port : 443
Slot Status : Dual band(a/g)
Software Version : 01.2.03.00Tw8
SSH Server : ENABLED
SSH Server Port : 22
Telnet Server : ENABLED
============================================================
7. Power down the access point.
8. Connect one end of the Ethernet cable to the RJ-45 connector on the access point.
IronPoint 200
connected to any Ethernet network device, such as a hub or switch.
Twisted-Pair Cable
The access point’s Ethernet port connection requires an unshielded twisted-pair (UTP) cable with
RJ-45 connectors at both ends. For 100BASE-TX connections, Category 5 or better cable is
required; for 10BASE-T, Category 3 or better cable can be used.
is designed to connect a wired Ethernet network to wireless clients. It can be
Cabling Guidelines
The RJ-45 port on the access point uses an MDI pin configuration. You must use straight-through
cable for network connections to hubs or switches that only have MDI-X ports, and crossover cable
for network connections to PCs, servers or other devices that only have MDI ports. However, if
connecting to a device port that supports auto-MDI/MDI-X operation, you can use either straightthrough or crossover cable.
See Appendix B for further information on cabling.
Caution: Do not plug a phone jack connector into the RJ-45 port. This will damage the access point.
Use only twisted-pair cables with RJ-45 connectors that conform to FCC standards.
Status LED is Off•External power supply may be disconnected. Check connections between
the access point, the power adapter, and the wall outlet.
•If using PoE, verify that access point’s RJ-45 port is attached to a PoE
source device, that the PoE source device is powered on, and that PoE
power is enabled on the port attached to the access point.
•Contact Technical Support.
Link LED is Off•Verify that the access point and attached device is powered on.
•Be sure the cable is plugged into both the access point and corresponding
device.
•Verify that the proper cable type is used and its length does not exceed
specified limits.
•Check the cable connections for possible defects. Replace the cable if
necessary.
Installation
Verify that all system components have been properly installed. If one or more components appear
to be malfunctioning (such as the power cord or network cabling), test them in an alternate
environment where you are sure that all the other components are functioning properly.
Console Access
If you cannot access the command line interface via a serial port connection, check the following
items before you contact Technical Support:
•Be sure you have set the terminal emulator program to VT100 compatible, 8 data bits, 1 stop bit,
no parity and 9600 bps.
•Check that the serial cable conforms to the pin-out connections provided in Appendix B.
If the access point cannot be configured using the CLI via Telnet or SSH v2, a Web browser using
HTTP or HTTPS, or SNMP v2 or v3 software, check the following items before you contact Technical
Support.
If the access point cannot be configured using the CLI via Telnet, a Web browser, or SNMP software,
check the following items before you contact Technical Support:
•Be sure to have configured the access point with a valid IP address, subnet mask and default
gateway.
•If VLANs are enabled on the access point, the management station should be configured to send
tagged frames with a VLAN ID that matches the access point’s native VLAN (default VLAN 1).
However, to manage the access point from a wireless client, the AP Management Filter should
be disabled.
•Check that you have a valid network connection to the access point and that the Ethernet port or
the wireless interface that you are using has not been disabled.
•If you are connecting to the access point through the wired Ethernet interface, check the network
cabling between the management station and the access point. If you are connecting to access
point from a wireless client, ensure that you have a valid connection to the access point.
•If you cannot connect using Telnet, you may have exceeded the maximum number of concurrent
Telnet sessions permitted (i.e, four sessions). Try connecting again at a later time.
Wireless Client Network Access
If wireless clients cannot access the network, check the following before you contact Technical
Support:
•Be sure the access point and the wireless clients are configured with the same Service Set ID
(SSID).
•If authentication or encryption are enabled, ensure that the wireless clients are properly
configured with the appropriate pre-shared key, authentication, or encryption keys. The wireless
client's NIC must have the necessary drivers to support the security and authentication methods
configured on the access point.
•If authentication is being performed through a RADIUS server, ensure that the clients are properly
configured on the RADIUS server.
•If authentication is being performed through IEEE 802.1x, be sure the wireless users have
installed and properly configured 802.1x client software.
•If MAC address filtering is enabled, be sure the client’s address is included in the local filtering
database or on the RADIUS server database.
•If the wireless clients are roaming between access points, make sure that all the access points
and wireless devices in the Extended Service Set (ESS) are configured to the same SSID, and
authentication method.
•Check the configuration matrix for the most commonly used authentication and encryption
combinations in the Quick Installation and Getting Started Guide to ensure that the access point
is correctly configured.
Lost Password
The only way to recover a lost password is by setting the access point to its default configuration.
Refer to the section “Reset the Access Point Default Settings” for instructions.
Reset the Access Point Default Settings
If all other recovery measures fail and the access point is still not functioning properly, take any of
these steps:
•Reset the access point’s hardware using the console interface, Web interface, or through a power
reset.
•Reset the access point to its default configuration by pressing the reset button on the back panel
for 5 seconds or more. Then use the default user name “admin” with the password “admin” to
access the management interface.
The maximum distances posted in the tables below are actual tested distance thresholds. However,
in any environment there are many variables, such as barrier composition and construction, and
local environmental interference, that may impact radio performance and cause you to experience
distance thresholds far lower than those specified.
10BASE-TCat. 3 or better 100-ohm UTP100 m (328 ft)RJ-45
100BASE-TXCat. 5 or better 100-ohm UTP100 m (328 ft)RJ-45
Twisted-Pair Cable and Pin Assignments
Appendix B
Cables
CAUTION: DO NOT plug a phone jack connector into any RJ-45 port. Use only twisted-pair cables
with RJ-45 connectors that conform with FCC standards.
For 100BASE-TX/10BASE-T connections, a twisted-pair cable must have two pairs of wires. Each
wire pair is identified by two different colors. For example, one wire might be green and the other,
green with white stripes. Also, an RJ-45 connector must be attached to both ends of the cable.
CAUTION: Each wire pair must be attached to the RJ-45 connectors in a specific orientation.
Figure B-1 illustrates how the pins on the RJ-45 connector are numbered. Be sure to hold the
connectors in the same orientation when attaching the wires to the pins.
Use unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections:
100-ohm Category 3 or better cable for 10 Mbps connections, or 100-ohm Category 5 or better cable
for 100 Mbps connections. Also be sure
exceed 100 meters (328 feet).
The RJ-45 port on the access point is wired with MDI pinouts. This means that you must use
crossover cables for connections to PCs or servers, and straight-through cable for connections to
switches or hubs. However, when connecting to devices that support automatic MDI/MDI-X pinout
configuration, you can use either straight-through or crossover cable.
Data is carried on the standard two wire pairs (pins 1, 2, 3, and 6), and PoE power is supplied using
the two previously spare pairs (pins 4, 5, 7, and 8).
PinMDI Signal Name
1Transmit Data plus (TD+)
2Transmit Data minus (TD-)
3Receive Data plus (RD+)
4GND (Positive V
5GND (Positive V
6Receive Data minus (RD-)
7-48V feeding power (Negative V
8-48V feeding power (Negative V
Note: The “+” and “-” signs represent the polarity of the wires that
make up each wire pair.
port
port
that the length of any twisted-pair connection does not
)
)
)
port
)
port
Straight-Through Wiring
Because the 10/100 Mbps port on the access point uses an MDI pin configuration, you must use
“straight-through” cable for network connections to hubs or switches that only have MDI-X ports.
However, if the device to which you are connecting supports auto-MDIX operation, you can use
either “straight-through” or “crossover” cable.
Because the 10/100 Mbps port on the access point uses an MDI pin configuration, you must use
“crossover” cable for network connections to PCs, servers or other end nodes that only have MDI
ports. However, if the device to which you are connecting supports auto-MDIX operation, you can
use either “straight-through” or “crossover” cable.
Figure B-3. Crossover Wiring
EIA/TIA 568B RJ-45 WiringStandard
10/100BASE-TX Crossover Cable
White/Orange Stripe
Orange
End A
1
2
3
4
5
6
7
8
White/Green Stripe
Blue
White/Blue Stripe
Green
White/Brown Stripe
Brown
1
2
3
4
5
6
7
8
End B
Cables
Console Port Pin Assignments
The DB-9 serial port on the IronPoint 200 is used to connect to the access point for out-of-band
management. The access point’s command-line interface can be accessed from a terminal or a PC
running a terminal emulation program.
Connect the console cable (included) to the RS-232 console port to access the command-line
interface. You can manage the access point using the console port, the Web interface, or SNMP
management software. Refer to the Foundry IronPoint 200 User Guide for more information.
The pin assignments used to connect to the console port are described in the following figure and
table.
Signal (access point serial port)PinSignal (management console port)
Unused1Unused
TXD (transmit data)2RXD (receive data)
RXD (receive data)3TXD (transmit data)
Unused4Unused
GND (ground)5GND (ground)
Unused6Unused
CTS (clear to send)7RTS (request to send)
RTS (request to send)8CTS (clear to send)
Unused9Unused
Note: The left hand column pin assignments are for the male DB-9 connector on the access point. Pin 2
(TXD or “transmit data”) must emerge on the management console’s end of the connection as RXD
(“receive data”). Pin 7 (CTS or “clear to send”) must emerge on the management console’s end of the
connection as RTS (“request to send”).
The serial port’s configuration requirements are as follows:
Input: 100-240 VAC, 50-60 Hz
Output: 5.1 VDC, 3 A
Power consumption: 13.2 watts
PoE (DC)
Input voltage: -48 VDC, 0.27 A, 12.96 watts
Note: Power can also be provided to the access point through the Ethernet port based on
IEEE 802.3af Power over Ethernet (PoE) specifications. When both PoE is provided and the adapter
is plugged in, PoE will be turned off.
Physical Size
21.83 x 13.73 x 3.27 cm (8.60 x 5.40 x 1.29 in)
Weight
0.80 kg (1.76 lbs)
LED Indicators
Status (power), Link (Ethernet link/activity), Radio a
and Radio b/g (wireless link/activity)
Network Management
Web-browser, RS232 console, Telnet, SNMP
Temperature
Operating: 0 to 50
Storage: 0 to 70
Humidity
15% to 95% (non-condensing)
Compliances
FCC Class B (US)
ICES-003 (Canada)
RTTED 1999/5/EC
VCCI (Japan)
RCR STD-33A
°C (32 to 122 °F)
°C (32 to 158 °F)
Radio Signal Certification
FCC Part 15C 15.247, 15.207 (2.4 GHz)
FCC part 15E 15.407 (5 GHz)
RSS-210 (Canada)
EN 301.893, EN 300.328, EN 301.489-1, EN 301.489-17
MPT RCR std.33 (D33 1~13 Channel, T66 Channel 14)
IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better UTP cable.
100BASE-TX
IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 or better UTP
cable.
Access Point
An internetworking device that seamlessly connects wired and wireless networks. Access points
attached to a wired network, support the creation of multiple radio cells that enable roaming
throughout a facility.
Ad Hoc
A group of computers connected as an independent wireless network, without an access point.
Authentication
The process to verify the identity of a client requesting network access. IEEE 802.11 specifies two
forms of authentication: open system and shared key.
Backbone
The core infrastructure of a network. The portion of the network that transports information from one
central location to another central location where it is unloaded onto a local system.
Basic Service Set (BSS)
A coverage area for two or more 802.11-compliant, wireless stations.
CSMA/CA
Carrier Sense Multiple Access with Collision Avoidance.
Distributed System (DS)
Enables mobile device support by providing the logical services necessary to handle address to
destination mapping and seamless integration of multiple BSSs.
Provides a framework for passing configuration information to hosts on a TCP/IP network. DHCP is
based on the Bootstrap Protocol (BOOTP), adding the capability of automatic allocation of reusable
network addresses and additional configuration options.
Extended Service Set (ESS)
More than one wireless cell can be configured with the same Service Set Identifier to allow mobile
users can roam between different cells with the Extended Service Set.
Ethernet
A network communication system developed and standardized by DEC, Intel, and Xerox, using
baseband transmission, CSMA/CD access, logical bus topology, and coaxial cable. The successor
IEEE 802.3 standard provides for integration into the OSI model and extends the physical layer and
media with repeaters and implementations that operate on fiber, thin coax and twisted-pair cable.
Fast Ethernet
A 100 Mbps network communication system based on Ethernet and the CSMA/CD access method.
IEEE
Institute of Electrical and Electronic Engineers.
IEEE 802.11a
A wireless standard that supports high-speed communications in the 5 GHz band using Orthogonal
Frequency Division Multiplexing (OFDM). The standard supports data rates of 6, 12, 24, and 54
Mbps.
IEEE 802.11b
A wireless standard that supports wireless communications in the 2.4 GHz band using Direct
Sequence Spread Spectrum (DSSS). The standard provides for data rates of 1, 2, 5.5, and 11 Mbps.
IEEE 802.11g
A wireless standard that supports wireless communications in the 2.4 GHz band using supports
high-speed communications in the 5 GHz band using Orthogonal Frequency Division Multiplexing
(OFDM). The standard provides for data rates of 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps. IEEE 802.11g
is also backward compatible with IEEE 802.11b.
IEEE 802.1x
Port Authentication controls access to the switch ports by requiring users to first enter a user ID and
password for authentication.
IEEE 802.3
Defines carrier sense multiple access with collision detection (CSMA/CD) access method and
physical layer specifications.
IEEE 802.3u
Defines CSMA/CD access method and physical layer specifications for 100BASE-TX and
100BASE-FX Fast Ethernet.
Infrastructure
An integrated wireless and wired LAN is called an infrastructure configuration.
Light emitting diode used for monitoring a device or network condition.
Local Area Network (LAN)
A group of interconnected computer and support devices.
MAC Address
The physical layer address used to uniquely identify network nodes.
Power over Ethernet (PoE)
A specification for providing both power and data to low-power network devices using a single
Category 5 Ethernet cable. PoE provides greater flexibility in the locating of access point’s and
network devices, and significantly decreased installation costs.
RADIUS
A logon authentication protocol that uses software running on a central server to control access to
the network.
RJ-45 Connector
A connector for twisted-pair wiring.
Glossary
Roaming
A wireless LAN mobile user moves around an ESS and maintains a continuous connection to the
infrastructure network.
Service Set Identifier (SSID)
An identifier that is attached to packets sent over the wireless LAN and functions as a password for
joining a particular radio cell; i.e., Basic Service Set (BSS).
Simple Network Management Protocol (SNMP)
The application protocol in the Internet suite of protocols which offers network management
services.
Transmission Control Protocol/Internet Protocol (TCP/IP)
Protocol suite that includes TCP as the primary transport protocol, and IP as the network layer
protocol.
UTP
Unshielded twisted-pair cable.
Virtual LAN (VLAN)
A Virtual LAN is a collection of network nodes that share the same collision domain regardless of
their physical location or connection point in the network. A VLAN serves as a logical workgroup with
no physical barriers, and allows users to share information and resources as though located on the
same LAN.
Web-based 2-2
maximum distances A-4
MDI, RJ-45 pin configuration 2-3
mounting the unit
on a desktop or shelf 4-1
on a wall 4-2
N
network
connections 5-1
topologies 3-1
network topologies 3-1
infrastructure 3-2
infrastructure for roaming 3-3
O
OFDM 2-2
operating frequency C-1
out-of-band management 2-2
P
password, support 1-1
pin assignments B-1
100BASE-TX/10BASE-T B-2
console port B-3
DB-9 B-3
PoE 2-3
specifications C-2
ports, connecting to 5-1
Power over Ethernet See PoE
power supply, specifications C-2
power, connecting to 4-10
problems, troubleshooting A-1
rear panel of switch 2-1
reset button 2-5
RJ-45 port connections 5-1
RJ-45 ports 2-3
roaming in wireless LANs 3-3
RS-232 port 2-2
S
serial cable 2-2
serial port 2-2
site location 4-1
SNMP agent 2-2
status LEDs 2-4
straight-through cable B-2
straight-through serial cable 2-2
support, technical 1-1
switching