Funkwerk W1002, WIx040, W1002n, WIx065, W2002 User Manual

Funkwerk Enterprise Communications GmbH
Manual
Manual
bintec
W1002/W1002n/W2002/WIx040/WIx065
Reference
Copyright© Version 6.0, 2009 Funkwerk Enterprise Communications GmbH
bintec W1002/W1002n/W2002/WIx040/WIx065 1
Manual Funkwerk Enterprise Communications GmbH
Aim and purpose
This document is part of the user manual for the installation and configuration of funkwerk devices. For the latest information and notes on the current software release, please also read our release notes, particularly if you are updating your software to a higher release version. You will find the latest release notes under www.funkwerk-ec.com .
Liability
This manual has been put together with the greatest possible care. However, the information con­tained in this manual is not a guarantee of the properties of your product. Funkwerk Enterprise Com­munications GmbH is only liable within the terms of its conditions of sale and supply and accepts no li­ability for technical inaccuracies and/or omissions.
The information in this manual can be changed without notice. You will find additional information and also release notes for funkwerk devices under www.funkwerk-ec.com .
Funkwerk devices make WAN connections as a possible function of the system configuration. You must monitor the product in order to avoid unwanted charges. Funkwerk Enterprise Communications GmbH accepts no responsibility for data loss, unwanted connection costs and damage caused by un­intended operation of the product.
Trademarks
funkwerk trademarks and the funkwerk logo, bintec trademarks and the bintec logo, artem trademarks and the artem logo, elmeg trademarks and the elmeg logo are registered trademarks of Funkwerk En­terprise Communications GmbH.
Company and product names mentioned are usually trademarks of the companies or manufacturers concerned.
Copyright
All rights reserved. No part of this manual may be reproduced or further processed in any way without the written consent of Funkwerk Enterprise Communications GmbH. The documentation may not be processed and, in particular, translated without the consent of Funkwerk Enterprise Communications GmbH.
You will find information on guidelines and standards in the declarations of conformity under
www.funkwerk-ec.com .
How to reach Funkwerk Enterprise Communications GmbH
Funkwerk Enterprise Communications GmbH, Südwestpark 94, D-90449 Nuremberg, Germany, Phone: +49 180 300 9191 0, Fax: +49 180 300 9193 0 Funkwerk Enterprise Communications France S.A.S., 6/8 Avenue de la Grande Lande, F-33174 Gradignan, France, Phone: +33 5 57 35 63 00, Fax: +33 5 56 89 14 05 Internet: www.funkwerk-ec.com
2 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH

Table of Contents

Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Chapter 2 About this guide. . . . . . . . . . . . . . . . . . . . . . . . . 3
Chapter 3 Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3.1 Setting Up and Connecting. . . . . . . . . . . . . . . . . . . . . . 6
3.2 Support information . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 4 Basic configuration . . . . . . . . . . . . . . . . . . . . . . 13
4.1 Presettings . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Table of Contents
4.1.1 Preconfigured data . . . . . . . . . . . . . . . . . . . . . . . . 13
4.1.2 Software update . . . . . . . . . . . . . . . . . . . . . . . . . 14
4.2 System requirements . . . . . . . . . . . . . . . . . . . . . . . 14
4.3 Preparations . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
4.3.1 Gathering data . . . . . . . . . . . . . . . . . . . . . . . . . . 15
4.3.2 Configuring a PC . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.4 IP configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 18
4.5 Modify system password. . . . . . . . . . . . . . . . . . . . . . 20
4.6 Setting up a wireless network . . . . . . . . . . . . . . . . . . . 21
4.7 Setting up a bridge link . . . . . . . . . . . . . . . . . . . . . . 21
4.8 Software Update . . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 5 Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Chapter 6 Technical data . . . . . . . . . . . . . . . . . . . . . . . . 26
bintec W1002/W1002n/W2002/WIx040/WIx065 i
Table of Contents Funkwerk Enterprise Communications GmbH
6.1 bintec W1002, bintec W1002n and bintec W2002 . . . . . . . . . . . 26
6.1.1 Scope of supply . . . . . . . . . . . . . . . . . . . . . . . . . 26
6.1.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 26
6.1.3 LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
6.1.4 Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
6.1.5 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . 34
6.1.6 Frequencies and channels . . . . . . . . . . . . . . . . . . . . . 35
6.2 bintec WI1040, WI2040 and WI3040 . . . . . . . . . . . . . . . . 36
6.2.1 Scope of supply . . . . . . . . . . . . . . . . . . . . . . . . . 36
6.2.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 37
6.2.3 LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
6.2.4 Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
6.2.5 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . 43
6.2.6 Frequencies and channels . . . . . . . . . . . . . . . . . . . . . 44
6.3 bintec WI1065, WI2065 and WI3065 . . . . . . . . . . . . . . . . 44
6.3.1 Scope of supply . . . . . . . . . . . . . . . . . . . . . . . . . 44
6.3.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 45
6.3.3 LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
6.3.4 Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
6.3.5 Pin Assignments . . . . . . . . . . . . . . . . . . . . . . . . . 50
6.3.6 Frequencies and channels . . . . . . . . . . . . . . . . . . . . . 52
Chapter 7 Access and configuration. . . . . . . . . . . . . . . . . . . 53
7.1 Access Options. . . . . . . . . . . . . . . . . . . . . . . . . . 53
7.1.1 Access via LAN . . . . . . . . . . . . . . . . . . . . . . . . . 53
7.1.2 Access via the Serial Interface . . . . . . . . . . . . . . . . . . . 56
7.2 Logging in . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
7.2.1 User names and passwords in ex works state . . . . . . . . . . . . 58
7.2.2 Logging in for Configuration . . . . . . . . . . . . . . . . . . . . 58
7.3 Configuration options . . . . . . . . . . . . . . . . . . . . . . . 59
ii bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
7.3.1 Funkwerk Configuration Interface for advanced users . . . . . . . . . 60
7.3.2 The Setup Tool for experts . . . . . . . . . . . . . . . . . . . . . 73
7.3.3 SNMP shell . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
7.4 BOOTmonitor . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Chapter 8 System management. . . . . . . . . . . . . . . . . . . . . 83
8.1 State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
8.2 Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 86
8.2.1 System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
8.2.2 Passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
8.2.3 Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . 90
8.2.4 System Licences . . . . . . . . . . . . . . . . . . . . . . . . . 94
8.3 Interface Mode / Bridge Groups. . . . . . . . . . . . . . . . . . . 96
Table of Contents
8.3.1 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
8.4 Administrative Access . . . . . . . . . . . . . . . . . . . . . . . 102
8.4.1 Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
8.4.2 SSH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
8.4.3 SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
8.5 Remote Authentication . . . . . . . . . . . . . . . . . . . . . . 108
8.5.1 RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
8.5.2 TACACS+ . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
8.5.3 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Chapter 9 Physical interfaces . . . . . . . . . . . . . . . . . . . . . 118
9.1 Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . 118
9.1.1 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 118
9.2 Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
9.2.1 Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
9.3 Relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
bintec W1002/W1002n/W2002/WIx040/WIx065 iii
Table of Contents Funkwerk Enterprise Communications GmbH
9.3.1 Relay configuration . . . . . . . . . . . . . . . . . . . . . . . . 125
Chapter 10 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
10.1 IP configuration. . . . . . . . . . . . . . . . . . . . . . . . . . 126
10.1.1 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
10.2 VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
10.2.1 VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
10.2.2 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 132
10.2.3 Administration . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Chapter 11 Wireless LAN . . . . . . . . . . . . . . . . . . . . . . . . 135
11.1 WLANx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
11.1.1 Radio Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 136
11.1.2 Virtual Service Sets . . . . . . . . . . . . . . . . . . . . . . . . 154
11.1.3 WDS Links. . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
11.1.4 Client Link . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
11.1.5 Bridge Links . . . . . . . . . . . . . . . . . . . . . . . . . . . 167
11.2 Administration . . . . . . . . . . . . . . . . . . . . . . . . . . 176
11.2.1 Basic settings . . . . . . . . . . . . . . . . . . . . . . . . . . 176
Chapter 12 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
12.1 Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
12.1.1 IP routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
12.1.2 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
12.2 NAT. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
12.2.1 NAT Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . 184
12.2.2 Portforwarding . . . . . . . . . . . . . . . . . . . . . . . . . . 185
12.3 RIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
12.3.1 RIP Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . 189
iv bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
12.3.2 RIP Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192
12.3.3 RIP Options . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
12.4 Load Balancing. . . . . . . . . . . . . . . . . . . . . . . . . . 197
12.4.1 Load Balancing Groups . . . . . . . . . . . . . . . . . . . . . . 198
12.5 Multicast. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
12.5.1 Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
12.5.2 IGMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
12.5.3 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
Chapter 13 WAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209
13.1 Internet + Dialup . . . . . . . . . . . . . . . . . . . . . . . . . 209
13.1.1 PPPoE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210
13.1.2 PPTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215
Table of Contents
13.2 Real Time Jitter Control . . . . . . . . . . . . . . . . . . . . . . 220
13.2.1 Controlled interfaces . . . . . . . . . . . . . . . . . . . . . . . 220
Chapter 14 VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
14.1 IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
14.1.1 IPSec Peers . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
14.1.2 Phase-1 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 227
14.1.3 Phase-2 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 234
14.1.4 IP Pools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238
14.1.5 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240
14.2 L2TP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
14.2.1 Tunnel Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . 243
14.2.2 User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
14.2.3 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
14.3 PPTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254
14.3.1 PPTP Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . 254
14.3.2 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260
bintec W1002/W1002n/W2002/WIx040/WIx065 v
Table of Contents Funkwerk Enterprise Communications GmbH
14.4 GRE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261
14.4.1 GRE Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . 261
14.5 Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . 263
14.5.1 Certificate list . . . . . . . . . . . . . . . . . . . . . . . . . . 264
14.5.2 CRLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
14.5.3 Certificate Servers . . . . . . . . . . . . . . . . . . . . . . . . 274
Chapter 15 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
15.1 Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
15.1.1 Filter rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
15.1.2 QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280
15.1.3 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282
15.2 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283
15.2.1 Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
15.3 Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
15.3.1 Address list . . . . . . . . . . . . . . . . . . . . . . . . . . . 285
15.3.2 Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286
15.4 Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
15.4.1 Service list . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
15.4.2 Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
Chapter 16 Local services. . . . . . . . . . . . . . . . . . . . . . . . 291
16.1 DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
16.1.1 Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 293
16.1.2 Static Hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . 296
16.1.3 Domain Forwarding . . . . . . . . . . . . . . . . . . . . . . . . 297
16.1.4 Cache. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299
16.1.5 Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . 301
16.2 DynDNS Client . . . . . . . . . . . . . . . . . . . . . . . . . . 302
vi bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
16.2.1 DynDNS Update . . . . . . . . . . . . . . . . . . . . . . . . . 302
16.2.2 DynDNS Provider. . . . . . . . . . . . . . . . . . . . . . . . . 304
16.3 DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . 306
16.3.1 DHCP Pool . . . . . . . . . . . . . . . . . . . . . . . . . . . 306
16.3.2 IP/MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . 309
16.3.3 DHCP Relay Setting . . . . . . . . . . . . . . . . . . . . . . . 310
16.4 Scheduling. . . . . . . . . . . . . . . . . . . . . . . . . . . . 311
16.4.1 Schedule . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312
16.4.2 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315
16.5 Surveillance . . . . . . . . . . . . . . . . . . . . . . . . . . . 316
16.5.1 Hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317
16.5.2 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 320
16.5.3 Temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . 322
16.5.4 Ping Generator . . . . . . . . . . . . . . . . . . . . . . . . . . 324
Table of Contents
16.6 Funkwerk Discovery . . . . . . . . . . . . . . . . . . . . . . . 325
16.6.1 Device discovery . . . . . . . . . . . . . . . . . . . . . . . . . 326
16.6.2 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
Chapter 17 Maintenance . . . . . . . . . . . . . . . . . . . . . . . . 331
17.1 Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
17.1.1 Ping Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
17.1.2 DNS Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332
17.1.3 Traceroute Test . . . . . . . . . . . . . . . . . . . . . . . . . 332
17.2 Software & Configuration . . . . . . . . . . . . . . . . . . . . . 333
17.2.1 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333
17.3 Reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337
17.3.1 System Reboot. . . . . . . . . . . . . . . . . . . . . . . . . . 337
Chapter 18 External Reporting . . . . . . . . . . . . . . . . . . . . . 339
bintec W1002/W1002n/W2002/WIx040/WIx065 vii
Table of Contents Funkwerk Enterprise Communications GmbH
18.1 Syslog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
18.1.1 Syslog Servers . . . . . . . . . . . . . . . . . . . . . . . . . . 339
18.2 IP Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . 341
18.2.1 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342
18.2.2 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342
18.3 E-mail alert . . . . . . . . . . . . . . . . . . . . . . . . . . . 344
18.3.1 E-mail Alert Server . . . . . . . . . . . . . . . . . . . . . . . . 344
18.3.2 E-mail Alert Receiver . . . . . . . . . . . . . . . . . . . . . . . 346
18.4 SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347
18.4.1 SNMP Trap Options. . . . . . . . . . . . . . . . . . . . . . . . 348
18.4.2 SNMP Trap Hosts . . . . . . . . . . . . . . . . . . . . . . . . 349
18.5 Activity Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . 350
18.5.1 Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
Chapter 19 Monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . 353
19.1 Internal Log . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
19.1.1 System messages . . . . . . . . . . . . . . . . . . . . . . . . 353
19.2 IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
19.2.1 IPSec Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . 354
19.2.2 IPSec Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . 356
19.3 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357
19.3.1 Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358
19.4 WLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
19.4.1 WLANx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359
19.4.2 VSS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
19.4.3 WDS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
19.4.4 Bridge Links . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
19.4.5 Client Links . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
19.5 Bridges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374
viii bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
19.5.1 br<x> . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375
19.5.2 sta<x> . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376
Table of Contents
Glossary. . . . . . . . . . . . . . . . . . . . . . . . . . . 377
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
bintec W1002/W1002n/W2002/WIx040/WIx065 ix
Table of Contents Funkwerk Enterprise Communications GmbH
x bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
Chapter 1 Introduction
The new generation access points are manufactured in an environmentally friendly way and meet the RoHS directive. They support the latest WLAN technology and are designed for use particularly in the professional environment.
Safety notices
The safety precautions brochure, which is supplied with your device, tells you what you need to take into consideration when using your access point.
Installation
How to connect your device is shown in chapter Installation on page 6.
Configuration
Chapter Basic configuration on page 13 also tells you what preliminary tasks are necessary for configuration. You will then be shown how you can access your device from a Windows PC using a current web browser and how to make basic settings.

1 Introduction

Password
If you are familiar with the configuration of bintec devices and you want to get started right away, all you really need to know is the preset user name and password.
User Name: admin
Password: funkwerk
Caution
Remember to change the password immediately when you log in to the device for the first time. All bintec devices are supplied with the same password, which means they are not protected against unauthorised access until you change the password. How to change the passwords is described in chapter Modify system password on page 20.
Possible Applications
To meet the different requirements relating to the various tasks, the access points have one, two or three wireless modules and two, three or four antennas, depending on the model, in order to optimise the range or illumination of the radio range even under difficult conditions. The wireless module offers operation modes Client, Access Point and Bridge.
bintec W1002/W1002n/W2002/WIx040/WIx065 1
1 Introduction Funkwerk Enterprise Communications GmbH
If a number of different applications are used, it is important to prioritise certain traffic flows. The devices in the bintec Wx002 and bintec WI series therefore support WMM (wireless multimedia). This enables voice or video data to be prioritised in order to ensure optimum transmission quality for time-critical applications.
Your access point supports the latest WLAN technology and is designed for use particularly in the professional environment. The devices in the robust WI series are specially optim­ised for use in difficult conditions in the industrial and outdoor sphere.
The WI series is available in two variants:
• Indoor Version with IP40 safety class (bintec WI1040, bintec WI2040 and bintec WI3040)
• Outdoor version with IP65 safety class (bintec WI1065, bintec WI2065 and bintec WI3065)
In addition to the radio standards 802.11b and 802.11g, the devices support 802.11a and its European version 802.11h, so that data can also be transmitted in the 5 GHz frequency range with data throughput of up to 54 mbps. This is required particularly for outdoor ap­plications to achieve bridge solutions if other applications are already running in the 2.4 GHz frequency range.
bintec W1002n also supports 802.11n (Draft 2.0), which used MIMO technology (Multiple Input Multiple Output) for data transmission that allows data transfer via WLAN over longer distances or with higher data rates. With bandwidth 20 MHz or 40 MHz a gross data rate of 150 Mbps or 300 Mbps is achieved.
The products also support modern procedures such as Multi SSID and VLAN, with which up to 16 virtual access points (8 SSIDs for bintec W1002n) can be mapped for each wire­less module. These can be mutually protected and therefore ensure e.g. restricted guest access for customers. Different safety levels and encryptions can be configured for each SSID.
To ensure security is not neglected, the devices support security standards 802.1x and
802.11i (WPA, WPA2). The secure configuration is carried out over HTTPS or SSH.
Used as a bridge, the devices support Automatic Bridge Mode and are able to protect bridge connection via TKIP and AES encryption.
WLAN Management
WLAN devices are designed for use with WiLMA. WiLMA, the WLAN management solu­tion from Funkwerk, offers a software application in a client/server architecture that allows you to centrally monitor, control and maintain all Funkwerk access points in medium and large wireless LANs.
2 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
Chapter 2 About this guide
Area of validity
This document is valid for bintec devices with system software as of software version 7.8.2 or 7.8.3 ( bintec W1002n).
The guide, which you have in front of you, contains the following chapters:
User's Guide - Reference
Chapter Description
Introduction You see an overview of the device along with its possible ap-
About this guide We explain the various components of this manual and how to
Installation This contains instructions for how to set up and connect your
Basic configuration This chapter provides a step-by-step guide to the basic func-
Technical data
Access and configura­tion
System management
Physical interfaces

2 About this guide

plications and configuration options.
use it.
device.
tions on your device.
This section contains a description of all the device's technical properties.
This includes explanations about the different access and con­figuration methods.
These chapters describe all configuration options of the Funk­werk Configuration Interface. The chapters are based on the navigation structure.
LAN
Wireless LAN
Routing
WAN
VPN
Firewall
Local services
bintec W1002/W1002n/W2002/WIx040/WIx065 3
2 About this guide Funkwerk Enterprise Communications GmbH
Chapter Description
Maintenance
External Reporting
Monitoring
Glossary
Index
To help you locate information easily, this user's guide uses the following visual aids:
List of visual aids
Icon Use
The glossary contains a reference to the most important tech­nical terms used in network technology.
The index lists all the key terms for operating the device and all the configuration options and gives page numbers so they can be found easily.
Indicates practical information.
Indicates general and important points.
Indicates a warning of risk level "Attention" (points out possible dangers that may cause damage to property if not observed).
Indicates a warning of risk level "Warning" (points out possible dangers that may cause physical injury or even death if not ob­served).
The following typographical elements are used to help you find and interpret the informa­tion in this user's guide:
Typographical elements
Typographical element Use
Menu->Submenu
File->Open
non-proportional, e.g.
ping 192.168.1.254
Indicates lists.
Indicates menus and sub-menus.
Indicates commands that you must enter as written.
4 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
Typographical element Use
2 About this guide
bold, e.g. Windows
Start menu bold, e.g. biboAdmLo-
ginTable
italic, e.g. none Indicates values that you enter or that can be configured.
Online: blue and italic, e.g.
www.funkwerk-ec.com
Indicates keys, key combinations and Windows terms.
Indicates fields.
Indicates hyperlinks.
bintec W1002/W1002n/W2002/WIx040/WIx065 5

3 Installation Funkwerk Enterprise Communications GmbH

Chapter 3 Installation
Caution
Please read the safety notices carefully before installing and starting up your device. These are supplied with the device.
Refer to chapter Technical data on page 26.

3.1 Setting Up and Connecting

Note
All you need for this are the cables and antennas supplied with the equipment.
The device can be fitted with various antenna systems. External, screw-on standard antennas can be used (optional).
The access points of the bintec WI series can be mounted on a mast (indoor and out­door version) or DIN rail (indoor version only). Optional theft protection is also avail­able for the indoor and outdoor versions.
For the bintec WI series devices, a screw terminal bar is included as standard for power supply.
Caution
The use of the wrong mains adapter may damage your device. Only use the mains ad­aptor supplied (only for bintec W1002, bintec W1002n and bintec W2002). If you re­quire foreign adapters/mains units, please contact our funkwerk service.
6 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
3 Installation
Fig. 2: Connection options bintec W1002, bintec W1002n and bintec W2002
bintec W1002/W1002n/W2002/WIx040/WIx065 7
3 Installation Funkwerk Enterprise Communications GmbH
Fig. 3: Connection options bintec WIx040 and bintec WIx060.
When setting up and connecting, carry out the steps in the following sequence (refer to the connection diagrams for the individual devices in chapter Technical data on page 26):
(1) Antennas
Screw the external standard antennas supplied on to the connections provided for this purpose. Put the antennas in the required position before tightening the screw nut. Once the screw nut has been tightened, it may not be possible to rotate the radiator any more. If two antennas are connected to the device, these must be installed at least 6 cm and preferably 12 cm apart so that antenna diversity can be used. In highly reflective environments, it may make sense to maintain an angle of 90° in the direction of the antennas. For this, arrange the antennas in a V shape.
(2) Installation
The access points can be fitted to the wall using brackets on the housing or can
8 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
used as a table-top device.
Wall mounting
To attach the device to the wall, use the brackets on the back of the housing. Op­tional wall mounting with theft protection is available.
Note
Before drilling, make sure that there are no building installations where you are drilling. If gas, electricity, water or waste water lines are damaged, you may endanger your life or damage property.
• Screw the mount to the wall with the 2 screws.
• Hang the device in the mount with the screw nut but do not tighten it. Make sure the device connections are accessible.
• Protect the device against theft with the lock supplied.
3 Installation
Fig. 4: Wall mounting straps for bintec W1002, bintec W1002n and bintec W2002
bintec W1002/W1002n/W2002/WIx040/WIx065 9
3 Installation Funkwerk Enterprise Communications GmbH
Fig. 5: Wall mounting of the bintec WIx040 (standard design, DIN rail or theft protection op­tional)
Fig. 6: Wall mounting of the bintec Wx065 (standard design and with theft protection)
Use as a table-top device
The access point can also be used as a table-top device. For this option, use the
10 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
four self-adhesive feet on the bottom of the device. Place your device on a solid, level base.
(3) LAN
For the standard configuration of your device via Ethernet, connect port ETH1 or ETH2 of your device to your LAN using the Ethernet cable supplied. The device automatically detects whether it is connected to a switch or directly to a PC. Use just one of the ports ETH1 and ETH2, the second port is used to cascade a number of devices. If you use both Ethernet connections on the same switch, loops may be formed. The standard patch cable (RJ45-RJ45) is symmetrical. It is therefore not possible to mix up the cable ends.
(4) Power connection
Connect the device to a mains socket using the mains adaptor supplied. Use the power cord supplied (or the screw strip terminal in the case of the WI series) and insert it in the appropriate socket on your device. Now plug the power cord into a power socket (100–240 V). The status LEDs signal that your device is correctly connected to the power supply.
Note
3 Installation
To limit power in the event of a fault, the 24-V DC supply for bintec WIx040 and bintec WIx065 must be protected with an externally fitted 2-A fuse.
Note
If the bintec WIx065 is installed outdoors, the lines laid outside the building are to be categorised as TNV1 electric circuits in accordance with EN60950, as their SELV level can also be overridden by transient overvoltage (e.g. during storms) during operation in line with the regulations. When wiring the connections, it is therefore necessary to make sure that protective measures against overvoltage are carried out where the cable enters the building, to ensure that the limit values of a SELV electric circuit are maintained in the building.
You can set up further connections as required:
• Setting up a serial connection: For alternative configuration possibilities, connect the seri-
al interface of your PC (COM1 or COM2) to the serial interface of the gateway (console). However, configuration via the serial interface is not provided by default.
The device is now ready for configuration.
bintec W1002/W1002n/W2002/WIx040/WIx065 11
3 Installation Funkwerk Enterprise Communications GmbH

3.2 Support information

If you have any questions on your new product or would like more information, you can reach the Support Centre of Funkwerk Enterprise Communications GmbH under the follow­ing call number or via the E-mail Hotline:
+49 911 9673 1550
hotline@funkwerk-ec.com
For detailed information on our support services, contact www.funkwerk-ec.com.
12 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
Chapter 4 Basic configuration
You can use the ComPoint Manager (IP address assignment) and the Funkwerk Config­uration Interface (other configuration steps) for the basic configuration of your device.
The basic configuration is explained below step-by-step. A detailed online help system gives you extra support.
This user’s guide assumes you have the following basic knowledge:
• Basic knowledge of network structure
• Knowledge of basic network terminology, such as server, client and IP address
• Basic knowledge of using Microsoft Windows operating systems
The CD also supplied includes all the tools that you need for the configuration and man­agement of your device.
You can find other useful applications on the Internet at www.funkwerk-ec.com.

4 Basic configuration

4.1 Presettings

4.1.1 Preconfigured data

You have three ways of accessing your device in your network to perform configuration tasks:
(a) Dynamic IP address
In ex works state, your device is set to DHCP client mode, which means that when it is connected to the network, it is automatically assigned an IP address if a DHCP server is run. You can then access your device for configuration purposes using the IP ad­dress assigned by the DHCP server. For information on determining the dynamically assigned IP address, please see your DHCP server documentation.
(b) Fallback IP address
If you do not run a DHCP server, you can connect your device directly to your configur­ation PC and then reach it using the following, predefined fallback IP configuration:
IP Address: 192.168.0.252
Netmask: 255.255.255.0
Make sure that the PC from which the configuration is performed has a suitable IP
bintec W1002/W1002n/W2002/WIx040/WIx065 13
4 Basic configuration Funkwerk Enterprise Communications GmbH
configuration (see Configuring a PC on page 17).
(c) Assigning a fixed IP address
You can use the ComPoint Manager to assign the required IP address to your device.
Note
Please note:
If your device has obtained an IP address dynamically from a DHCP server operated in your network for the basic configuration, the fallback IP address 192.168.0.252 is deleted automatically and your device will no longer function over this address.
However, if you have set up a connection to the device over the fallback IP address
192.168.0.252 or have assigned an IP address with the ComPoint Manager in the ba­sic configuration, you will only be able to access your device over this IP address. The device will no longer obtain an IP configuration dynamically over DHCP.
Use the following access data to configure your device in ex works state:
User Name: admin
Password: funkwerk
Note
All bintec devices are delivered with the same username and password. As long as the password remains unchanged, they are therefore not protected against unauthor­ized use. Make sure you change the passwords to prevent unauthorized access to your device! (see Modify system password on page 20).

4.1.2 Software update

Your device contains the version of the system software available at the time of production. More recent versions may have since been released. You can easily perform an update with the Funkwerk Configuration Interface using the Maintenance->Software & Config- uration menu. For a description of the procedure, see Software Update on page 23.

4.2 System requirements

For configuration, your PC must meet the following system requirements:
14 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH
• Microsoft Windows operating system Windows 2000 or higher
• Internet Explorer 6 or 7, Mozilla Firefox Version 1.2 or higher
• Installed network card (Ethernet)
• CD ROM drive
• Installed TCP/IP protocol
• High colour display (more than 256 colours) for correct representation of the graphics

4.3 Preparations

To prepare for configuration, you need to:
• Obtain the data required for the basic configuration.
• Check whether the PC from which you want to perform the configuration meets the ne­cessary requirements.

4.3.1 Gathering data

4 Basic configuration
The main data for the basic configuration can be gathered quickly, as no information is re­quired that needs in-depth network knowledge. If applicable, you can use the example val­ues.
Before you start the configuration, you should gather the data for the following purposes:
• IP configuration (obligatory if your device is in the ex works state)
• Optional: Configuration of a wireless network connection in Access Point mode
• Optional: Configuration of client links in Client Links mode
• Optional: Configuration of bridge links in Bridge mode.
The following table shows examples of possible values for the necessary data. You can enter your personal data in the "Your values" column, so that you can refer to these values later when needed.
If you configure a new network, you can use the given example values for IP addresses and netmasks. In cases of doubt, ask your system administrator.
Basic configuration
For a basic configuration of your gateway, you need information that relates to your net­work environment:
IP configuration of the access point
bintec W1002/W1002n/W2002/WIx040/WIx065 15
4 Basic configuration Funkwerk Enterprise Communications GmbH
Access data Example value Your values
IP address of your access point 192.168.0.252 Netmask of your access point 255.255.255.0
Access Point mode
If you run your device in Access Point mode, you can set up the required wireless net­works. To do this, you need the following data:
Configuration of a wireless network
Access data Example value Your values
Network Name (SSID) Funkwerk-ec Security Mode WPA-PSK Preshared Key supersecret
Access Client mode
If you run your device in Access Client mode, you can set up the required client links. To do this, you need the following data:
IP configuration of the access client
Access data Example value Your values
Network Name (SSID) Funkwerk-ec Security Mode WPA-PSK Preshared Key supersecret
Bridge mode
If you run your device in Bridge mode, you can either configure connections to other bridges manually or use the bridge link autoconfiguration function. For the manual configur­ation of a bridge link, you need the following data:
Configuration of a bridge link
Access data Example value Your values
Preshared Key bridgesecret MAC address of remote bridge 00:a0:f9:5a:42:53
To use the bridge link autoconfiguration function, proceed as described in the Automatic Configuration of a Bridge Link workshop and read the Wireless LAN chapter of the user's guide under WLAN1 -> Bridge Links -> Add.
16 bintec W1002/W1002n/W2002/WIx040/WIx065
Funkwerk Enterprise Communications GmbH

4.3.2 Configuring a PC

In order to reach your device via the network and to be able to carry out configuration, the PC used for the configuration has to satisfy some prerequisites.
• Make sure that the TCP/IP protocol is installed on the PC.
• Select the suitable IP configuration for your configuration PC.
The PC via which you want to configure the IP address for your device must be in the same network as your device.
Checking the Windows TCP/IP protocol
Proceed as follows to check whether you have installed the protocol: (1) Click the Windows Start button and then Settings -> Network and Dial-up Connec-
tions (Windows 2000) orControl Panel->Network and Internet Connections (Windows XP).
(2) Click on LAN Connection. (3) Click on Properties in the status window. (4) Look for the Internet Protocol (TCP/IP) entry in the list of network components.
4 Basic configuration
Installing the Windows TCP/IP protocol
If you cannot find the Internet Protocol (TCP/IP) entry, install the TCP/IP protocol as fol- lows:
(1) First click Properties, then Install in the status window of the LAN Connection. (2) Select the Protocol entry. (3) Click Add. (4) Select Internet Protocol (TCP/IP) and click on OK. (5) Follow the on-screen instructions and restart your PC when you have finished.
Allocating PC IP address
Allocate an IP address to your PC as follows: (1) Select Internet Protocol (TCP/IP) and click on Properties. (2) Choose Use following IP address and enter a suitable IP address, the matching net-
mask, your default gateway and your preferred DNS server.
If you run a DHCP server in your network, you can apply the default Windows setting Ob- tain IP address automatically and Obtain DNS server address automatically.
bintec W1002/W1002n/W2002/WIx040/WIx065 17
4 Basic configuration Funkwerk Enterprise Communications GmbH
Your PC should now meet all the prerequisites for the configuration of your device.

4.4 IP configuration

In the ex works state, your device is configured in DHCP Client mode and therefore dynam­ically receives an IP address if you run a DHCP server in your network. If this is not the case, connect your device directly to the configuration PC and use the fallback IP address
192.168.0.252.
Alternatively, you can assign your device the required fixed IP address by using the Com- Point Manager.
To do this, install the program from the CD provided on your configuration PC.
Proceed as follows:
(a) Place the CD provided in the CD-ROM drive of your configuration PC. The installation
wizard should start automatically. If it does not, open the following file on the CD using your file browser: starter.exe.
(b) Follow the instructions in the installation wizard.
Then carry out the following steps to configure an IP address for your device: (1) Start the ComPoint Manager from the Windows Start menu: Start -> Programs ->
funkwerk -> ComPoint Manager.
The following dialog box appears:
Fig. 7: ComPoint Manager initial screen
The ComPoint Manager detects the devices installed in the network.
(2) In the list, double click the MAC address of the device you want to configure.
If you do not know the MAC address of the device: A label containing the most im­portant device data, including the MAC address, is attached to the device.
18 bintec W1002/W1002n/W2002/WIx040/WIx065
Loading...
+ 407 hidden pages