Hewlett Packard Enterprise WCB 200 User Manual

WCB-200

Admin Guide

Release 5.2 (October 2007) 43-10-0201-04

Colubris is a registered trademark, and the Colubris Networks logo, the tag line The Intelligent Wireless Networking Choice and TriPlane are trademarks of Colubris Networks, Inc., in the United States and other countries.

All other product and brand names are the service marks, trademarks, registered trademarks, or registered service marks of their respective owners.

Changes are periodically made to the information herein; these changes will be incorporated into new editions of the document.

Colubris Networks, Inc. 200 West Street Suite 300 Waltham, Massachusetts 02451-1121 UNITED STATES

Phone: +1 781 684 0001 Fax: +1 781 684 0009

Sales Information: sales@colubris.com Customer Support: support@colubris.com Training: training@colubris.com

www.colubris.com

The WCB-200 is a Wi-Fi Alliance authorized Wi-Fi CERTIFIED product.

WCB-200 Admin Guide 3 Contents

Contents

Chapter 1 Introduction 5

About this guide................................................................................6

Important terms..........................................................................6

Conventions ................................................................................6

Related documentation ...............................................................7

Product overview ..............................................................................7

Key capabilities ...........................................................................7

Typical deployment .....................................................................8

Product registration ..........................................................................9

Contacting Colubris Networks...........................................................9

Chapter 2 WCB-200 hardware 11

The WCB-200..................................................................................12

Package contents......................................................................12

Antennas...................................................................................12

Ports .........................................................................................12

Console port .......................................................................13

Reset button .............................................................................13

Status lights..............................................................................13

Installation ................................................................................14

Chapter 3 Getting started 15

Overview .........................................................................................16

Configuration procedure .................................................................16

A. Configure your computer................................................16

B. Start the WCB-200..........................................................16

C. Perform these initial login tasks .....................................16

D. Configure the wireless network ......................................17

E. Accessing the WCB.........................................................18

Chapter 4 Working with the WCB-200 19

Using the management tool ............................................................20

Starting the management tool...................................................20

Customizing management tool settings ....................................20

Administrator authentication...............................................20

Web server..........................................................................21

Security...............................................................................21

Auto-refresh........................................................................22

Web inactivity logout ..........................................................22

IP address configuration .................................................................22

Management IP address .................................................................23

Radio configuration ........................................................................24

Wireless range ..........................................................................24

Configuration ............................................................................25

Using station profiles to establish a connection..............................28

Adding or editing a profile.........................................................28

General ...............................................................................29

Wireless security ................................................................29

Key source ..........................................................................30

Encryption type ...................................................................31

Viewing APs in the neighborhood ...................................................31

Field descriptions......................................................................31

Handling unsupported traffic ..........................................................32

Connecting serial devices ...............................................................33

Configuring serial over TCP ......................................................33

TCP connection...................................................................34

Serial port ...........................................................................34

Port control.........................................................................35

Status .................................................................................35

DNS configuration ..........................................................................35

DNS servers........................................................................35

DNS advanced settings .......................................................35

Ethernet MAC cloning .....................................................................36

Act like a DHCP relay agent ......................................................37

IP forwarding ...........................................................................38

Using wireless security filters to restrict traffic...............................38

SNMP .............................................................................................39

Configuring SNMP settings.......................................................39

...........................................................................................39

Attributes ............................................................................39

Agent ..................................................................................40

Security...............................................................................40

Traps...................................................................................40

Managing certificates......................................................................40

802.1X certificates ....................................................................41

802.1x — Install TLS client certificate ................................41

802.1x — Manage TLS client certificates ...........................41

802.1x — Trusted CA certificates .......................................41

802.1x — Manage CA certificates.......................................42

Certificate stores .......................................................................42

Trusted CA certificate store.................................................42

Certificate and private key store ..........................................43

Certificate usage .......................................................................44

Changing the certificate assigned to a service ....................45

About certificate warnings ..................................................45

Configuration file management .......................................................46

Manual configuration file management .....................................46

Backup configuration ..........................................................46

Reset configuration.............................................................47

Restore configuration .........................................................47

Scheduled operations ...............................................................47

Managing the configuration file with cURL ...............................48

Uploading the configuration file ..........................................48

Downloading the configuration file .....................................49

Resetting the configuration to factory defaults ...................49

Firmware updates ...........................................................................50

Immediate update .....................................................................50

Scheduled update .....................................................................50

Updating firmware with cURL ...................................................51

Appendix A Regulatory information 53

Regulatory information ...................................................................54

USA: Federal Communications Commission (FCC)...................54

Caution! Exposure to Radio Frequency Radiation ...............54

Interference Statement .......................................................54

Canada: Industry Canada (IC) ...................................................55

Europe ......................................................................................55

WCB-200 Admin Guide 4 Contents

Information for the user ............................................................58

Health information ....................................................................58

Declarations of conformity........................................................59

Appendix B Resetting to factory defaults 61

Introduction ....................................................................................62

Using the reset switch ..............................................................62

Using the management tool ......................................................62

Chapter 1: Introduction

Contents

About this guide - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 6

Product overview - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 7

Introduction

Product registration- - - - - - - - - - - - - - - - - - - - - - - - - - - - 9

Contacting Colubris Networks- - - - - - - - - - - - - - - - - - - - - - - 9

WCB-200 Admin Guide 6 1 Introduction

About this guide

This guide explains how to install, configure, and operate the Colubris Networks WCB-200 (wireless client bridge) product.

Important terms

The following terms are used in this guide.

Term Description

AP Refers to access points including the Colubris MultiService Access Points

such as the MAP-630, MAP-320, and MAP-330.

Service controller Refers to the Colubris MSC-5000 and MSC-3000 series of controllers.

COS Colubris devices such as the WCB run the Colubris Operating System

(COS). References to specific versions of COS are made in the form “at COS x.x” as in “WCB-200 at COS 5.2.”

Conventions

This guide uses specific syntax when directing you to interact with the management tool user interface. Refer to this image for identification of key user-interface elements and then the table below showing example instructions:

Example directions in this guide What to do in the user interface

Select Wireless > Radio On the main menu select Wireless and

For Password specify secret22. In the field Password enter the text

then select Radio on the sub-menu.

secret22 exactly as shown.

WARNING: Warnings must be heeded to avoid death or physical injury and to avoid

hardware damage.

Caution: Cautions must be heeded to avoid loss of data or configuration

information and to avoid improperly-configured networks.

WCB-200 Admin Guide 71 Introduction

Product overview

The WCB-200 connects legacy Ethernet or serial communications stations to a wireless local area network (WLAN) with simplicity and security. The WCB-200 enables you to deploy electronic cash registers, servers, printers, and other devices in any location where a WLAN signal is available, eliminating the time and expense of installing Ethernet cables for network access.

The WCB-200 integrates into a Colubris Intelligent Mobility Solution and is interoperable with any IEEE 802.11 network infrastructure. The WCB-200 is not managed by a service controller.

Legacy client devices can be easily integrated into a WLAN using the WCB-200. The WCB-200 can bridge to the WLAN any Ethernet client device that runs a legacy networking protocol, thereby extending wireless network access to a wide range of DECnet, IPX, Appletalk, and other devices. An integrated serial-to-TCP/IP converter enables a TIA-232 asynchronous terminal device to communicate with a compatible station on the network.

The WCB-200 includes support for all 2.4 GHz or 5 GHz channels that are available within your regulatory domain. High-output power and antenna diversity ensure the best possible range and throughput. External antenna connectors can be used to attach high-gain antennas for specialized applications.

Strong enterprise-class layered security features protect the network from intrusions. The WCB200 radio interface includes an 802.1x supplicant for authentication by an access point and RADIUS server. Hardware-accelerated encryption provides high performance when using WPA2 (AES), WPA, or WEP security. The Management Tool web interface is protected using SSL.

Bidirectional Layer 2 and Layer 3 filters enable you to control access to WCB-200 interfaces and UDP port filtering controls access to network services.

The WCB-200 features comprehensive remote manageability, including full support as a managed node in the Colubris Networks Management System (CNMS). For ease of deployment and operation, you can configure the WCB-200 by way of an intuitive web user interface. Secure file transfer protocols simplify software maintenance. Support for SNMP enables integrated management using any enterprise network management system.

A rugged metal enclosure and mounting bracket provide installation flexibility. Its small size and plenum-rated enclosure enable the WCB-200 to be installed on a desktop, or it can be hidden from view in a ceiling.

Key capabilities

The Colubris Networks WCB-200 wireless client bridge offers the following key capabilities:

• Bridges an Ethernet LAN segment and a serial interface to a wireless network.

• Bridges Ethernet segments with up to 20 client stations.

• Converts a TIA-232 serial data stream to TCP/IP over WLAN.

WCB-200 Admin Guide 8 1 Introduction

• Provides enhanced security using configurable Ethernet MAC and protocol filters.

• Ensures wireless network privacy using WPA2, WPA, and WEP security and high performance

hardware-assisted AES, TKIP, WEP, encryption.

• Provides 802.1x PEAP, TLS, EAP-FAST, and TTLS authentication.

• Offers a configurable 802.11 a/b/g radio with external antenna connectors.

• Provides excellent distance performance from its 100mw radio and capability for antenna

diversity.

• Managed as a node on the Colubris Network Management System (CNMS)

• Can be included as part of a Colubris Intelligent Mobility Solution.

• Features a plenum-rated metal enclosure.

Typical deployment

The WCB-200 provides a wireless bridge to an AP such as a MAP-630, MAP-320, or MAP-330. This bridge can be used to:

• Connect up to 20 wired Ethernet devices to a wireless network. The WCB-200 provides MAC address translation for all traffic, enabling each wireless station to have its own IP address and to communicate across the network.

• Connect a serial device to a wireless network. The WCB-200 encapsulates the serial traffic in TCP packets for transport across the wireless bridge to a remote device.

Note: The Point-of-Sale terminal to Internet access is managed by a third-party application

You can use both options at the same time, as shown in the following diagram.

WCB-200 Admin Guide 91 Introduction

In this deployment, the WCB-200 provides a wireless link for several Ethernet devices and a serial Point-of-Sale terminal. An AP is used to provide the wireless network and the connection to a router. The router provides access to the Internet and also acts as the DHCP server. It assigns IP addresses to the WCB-200 and the two computers on the LAN. These addresses are all on the same subnet, 192.168.1.x.

Product registration

To register your product, go to www.colubris.com. On the home page select Support > Product Registration and follow the directions.

Contacting Colubris Networks

Customer support

support@colubris.com

1-866-241-8324 (toll-free) United States and Canada

+1 781-684-0001 All other locations

Training

training@colubris.com

Sales

sales@colubris.com

WCB-200 Admin Guide 10 1 Introduction

Chapter 2: WCB-200 hardware

Contents

The WCB-200 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 12

WCB-200 hardware

WCB-200 Admin Guide 12 2 WCB-200 hardware

The WCB-200

This chapter describes the WCB-200 hardware features and its installation.

Before permanently installing devices, it is recommended that you first become familiar with their basic functionality as described in “Chapter 3: Getting started” on page 15.

Caution: You must use shielded Ethernet cables for all connections.

Package contents

WCB-200, two 2.4-GHz (2-dBi) / 5-GHz (2-dBi) dual-band omnidirectional antennas, Documentation CD, power supply, mounting bracket, spring clip. The WCB-200 ships fully assembled and ready to operate.

Antennas

The WCB-200 has a single radio with two antennas for diversity. The Main antenna connector is located on the front panel and the Auxiliary antenna connector is located on the back panel.

The antenna connectors are reverse-polarity SMA jacks. Antennas or cable connectors must use RP-SMA plugs. Antennas can be mounted directly on the WCB-200 or an external antenna can be connected to the Main antenna connector.

Ports

The WCB-200 has a single 10/100 Mbps Ethernet port with an RJ-45 connector and a serial (Console) port with a DB-9 connector.

WCB-200 Admin Guide 13 2 WCB-200 hardware

Console port

The WCB-200 provides a DB-9 (female) Console (serial) port connector. The DB-9 connector (DCE) has pin assignments as follows:

To connect to a computer, use a standard (straight through) serial cable (male-to-female).

Reset button

Press and quickly release the button to reset the WCB-200. To reset to factory default settings, press and hold the reset button until the status lights flash three times, then release. For more information, see “Resetting to factory defaults” on page 61.

Status lights

The status lights provide the following information:

Light State Description

Power

Off The WCB-200 has no power.

Flashing The WCB-200 is starting up. If the power light

continues to flash after several minutes, it indicates that the firmware failed to load. Reset or power cycle the WCB-200. If this condition persists, contact Colubris Customer Support at

www.colubris.com.

Solid The WCB-200 is fully operational.

Off Port is not connected or there is no activity.

Ethernet

Wireless

Flashing Port is transmitting or receiving data.

On Stays on for a short period when the link is

established.

Blinking rapidly The WCB-200 is searching for an access point.

Flashing Wireless port is transmitting or receiving data.

WCB-200 Admin Guide 14 2 WCB-200 hardware

Installation

WARNING: SURGE PROTECTION AND GROUNDING: If you plan on connecting an

outdoor antenna to the WCB-200 make sure that proper lightning surge protection and grounding precautions are taken according to local electrical code. Failure to do so may result in personal injury, fire, equipment damage, or a voided warranty.

When mounting the WCB-200 on a wall or ceiling, ensure that the surface to which you attach the WCB-200 and the fasteners you use can support at least .9 kg (2 pounds). Allow extra weight for cables.

If needed, insert the spring clip into one of the screw holes in the mounting bracket as shown to provide a tighter fit.

If the WCB-200 is installed inside a plenum, plenum-rated cables and attachment hardware must be used. Only the WCB-200 and appropriate cabling can be located in the plenum.

Caution: Power supplies and PoE injectors available separately from Colubris

Networks cannot be installed inside a plenum.

Chapter 3: Getting started

Contents

Overview - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 16

Configuration procedure - - - - - - - - - - - - - - - - - - - - - - - - - 16

Getting started

WCB-200 Admin Guide 16 3 Getting started

Overview

This chapter walks you through the steps needed to initially configure the WCB-200.

Configuration procedure

Note: Do not power on Colubris Networks hardware until directed.

Caution: WIRELESS SECURITY: The WCB-200 ships with all wireless security options disabled.

Colubris strongly recommends that once the WCB-200 is installed, you enable a wireless security option to properly safeguard the wireless network from intruders.

A. Configure your computer

1. Connect the LAN port on your computer to the port on the WCB-200.

Note: The WCB-200 supports automatic crossover detection. However, problems can

occur when connected to older 10BaseT-only interfaces. Therefore a crossover cable may be needed when connecting to older network interface cards (NICs).

2. Configure your computer to use a static IP address in the range 192.168.1.2 to 192.168.1.254. The subnet mask of 255.255.255.0 is entered automatically. Set the default gateway to

192.168.1.1, and DNS server to 192.168.1.1.

For example, in Windows XP, use Control Panel > Network Connections > Local Area

Connection > Properties > Internet Protocol (TCP/IP) > Properties.

3. Disable any wireless connection.

B. Start the WCB-200

Connect the power supply or use an 802.3af PoE injector to power on the WCB-200.

C. Perform these initial login tasks

Note: The following procedure assumes that you the have a Colubris AP set to factory

default accessible to the WCB-200. If you are using a third-party AP, make sure that the parameters match those of the Colubris AP factory default, i.e.: SSID, open no security, etc.

1. In a web browser, open page: https://192.168.1.1.

2. You are prompted to accept a security certificate. To continue, proceed as follows: At the

security certificate prompt, in Microsoft Internet Explorer 7, select Continue to this website; in Firefox, select OK.

For information on how you can replace the Secure Sockets Layer (SSL) certificate that ships with the WCB-200 with one of your own, see “Managing certificates” in the WCB-200 Admin Guide.

3. On the Login page, specify admin for Username and Password and then select Login. The WCB-200 management tool home page opens.

4. On the License Agreement page, read and then select Accept License Agreement.

5. On the registration page, select Register Later. You can register by selecting Maintenance > Registration.

WCB-200 Admin Guide 17 3 Getting started

6. If presented with a Country prompt, choose the country in which this product will be used and select Save.

7. At the password prompt it is recommended that you change the password. Specify the new password and select Save. The management tool home page opens. In the illustration below, the Wireless > Radio menu and sub-menu have been selected. Key elements of the management tool user interface are defined as follows:

D. Configure the wireless network

1. Select Wireless > Station Profiles and click the Colubris Networks link. The Add/Edit Stations profile page opens.

2. Select General > Enabled.

3. Change the WLAN name (SSID) to match that of the wireless network to which you want to

connect.

Note: The Profile name is just a friendly name used for display purposes.

4. Under Wireless security, select the Authentication type and Encryption type that are required by the wireless network to which you want to connect.

Note: If the AP that you are trying to access does not broadcast its SSID, you will have

to select active scanning for the WCB-200 to connect to the AP.

5. Click Save. The WCB-200 should automatically establish a connection with the wireless

network and is now ready for operation.

By default, the WCB-200 operates as a DHCP client to obtain its IP address from a DHCP server. The network must have a DHCP server. Broadband routers typically include a DHCP server.

6. To check the connection to the wireless network, select Wireless > Overview. The Station State should indicate Associated.

WCB-200 Admin Guide 18 3 Getting started

Note: With DHCP enabled, the IP address of the WCB-200 may change, and you will

lose connection to the management tool. To reestablish a connection, see Accessing the WCB below.

E. Accessing the WCB

1. Configure your computer to obtain an IP address and DNS Server address automatically.

For example, in Windows XP, use Control Panel > Network Connections > Local Area Connection > Properties > Internet Protocol (TCP/IP) > Properties, and make sure that both the Obtain an IP address automatically and Obtain a DNS server address automatically are both checked.

2. Connect your computer to the same network as the WCB-200.

3. Look in the DHCP server log for the Ethernet Base MAC address shown on the WCB-200 label

and take note of the corresponding IP address.

4. Relaunch the WCB-200 management tool, this time using: https://<IP address discovered in previous step>, to access the WCB-200 management tool.

Note: It is also possible to assign a second, static, IP address to the WCB-200 for ease of

access to the management tool later. For information, see “Management IP address”

on page 23.

Chapter 4: Working with the WCB-200

Working with the WCB-200

Contents

Using the management tool- - - - - - - - - - - - - - - - - - - - - - - - 20

IP address configuration - - - - - - - - - - - - - - - - - - - - - - - - - 22

Management IP address - - - - - - - - - - - - - - - - - - - - - - - - - 23

Radio configuration - - - - - - - - - - - - - - - - - - - - - - - - - - - - 24

Using station profiles to establish a connection - - - - - - - - - - - - - - 28

Viewing APs in the neighborhood - - - - - - - - - - - - - - - - - - - - - 31

Handling unsupported traffic - - - - - - - - - - - - - - - - - - - - - - - 32

Connecting serial devices- - - - - - - - - - - - - - - - - - - - - - - - - 33

DNS configuration - - - - - - - - - - - - - - - - - - - - - - - - - - - - 35

Ethernet MAC cloning - - - - - - - - - - - - - - - - - - - - - - - - - - 36

Using wireless security filters to restrict traffic - - - - - - - - - - - - - - - 36

SNMP - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 36

Managing certificates - - - - - - - - - - - - - - - - - - - - - - - - - - - 40

Configuration file management - - - - - - - - - - - - - - - - - - - - - - 46

Firmware updates - - - - - - - - - - - - - - - - - - - - - - - - - - - - 50

+ 43 hidden pages