The HP WL520 provides wireless access to network infrastructures. As wireless clients move from one coverage cell to another,
HP WL520 units automatically allow client roaming within the same subnet. Figure 1-1 illustrates a typical network
configuration.
To determine the best location for the Base Station units, we recommend conducting a Site Survey before placing the devices in
their final locations. For information about how to conduct a Site Survey, contact your local reseller.
Before the HP WL520 unit can be configured for your specific networking requirements, it must first be initialized. Initialization
consists of setting a static IP address and the appropriate IP mask for the HP WL520 unit so that you can recognize it once it is
located in your network.
From there, the network administrator can configure each unit according to the requirements for the network. The HP WL520
Enterprise Access Point (HP WL520) functions as a wireless network access point to data networks. HP WL520 networks
provide:
To be fully operational, the HP WL520 needs at least one HP Wireless LAN PC Card.
Q Seamless client roaming
Q Easy installation and operation
Q Over-the-air encryption of data
Q High speed network links
1-1
Manageme nt and Monitoring Capabilities
NOTE:
PC Cards are not included with your kit and must be ordered as separate items.
management and monitoring capabilities
management and monitoring capabilities
management and monitoring capabilitiesmanagement and monitoring capabilities
To configure the HP WL520 for your needs, set your specific network, wireless interface, and bridge parameters. The HTTP
(web browser) Interface provides easy configuration and management.
Wireless clients (computers connected to your network through a radio PC Card) use
access. Once connected, users can roam from one coverage cell to another while maintaining their connection.
There are three management and monitoring interfaces available to the network administrator to configure and manage the
HP WL520 device(s) in the network:
1. HTTP Interface
2. Command Line Interface
3. Full SNMP Configuration capabilities
http interface
http interface
http interfacehttp interface
The HTTP Interface (Web browser Interface) provides easy access to configuration settings and network statistics from any
computer in the network. Use the HTTP Interface through your LAN (switch, hub, etc.) through the Internet, or with a
"crossover" Ethernet cable connected directly to your computer’s Ethernet Port.
l
C ient Manager
software for network
command line interface
command line interface
command line interfacecommand line interface
The Command Line Interface (CLI) represents a set of keyboard commands and parameters used for configuring and
managing the HP WL520.
Users enter Command Statements, composed of CLI Commands and their associated parameters. Statements may be issued
from the keyboard for real time control, or from scripts that automate configuration.
download
For example, when downloading a file, administrators enter the
and file type parameters.
Q If necessary, use the CLI with your computer serial port to initialize the proper IP address for your network.
Q The CLI provides configuration and management access for most generic Telnet and Terminal clients. Use the CLI
through your computer serial port, over your LAN, through the Internet, or with a "crossover" Ethernet cable
connected directly to your computer.
Details of the CLI commands used to manage the HP WL520 device along with syntax and specific parameters names can be
found in
Using the Command Line Interface.
download CLI Command along with IP Address, file name,
downloaddownload
1-2
802.11b vers us 802.11a Networks
802.11b versus 802.11a networks
802.11b versus 802.11a networks
802.11b versus 802.11a networks802.11b versus 802.11a networks
The HP WL520 supports 802.11wireless connectivity through the use of an 802.11a-compliant 5 GHz and 802.11bcompliant 2.4 GHz radio technology. The IEEE 802.11a standard adds support for a high-speed wireless physical layer in the
5 GHz band using Orthogonal Frequency Division Multiplexing (OFDM). The standard requires support for data rates of 6,
12, 24, and 54 Mbits/s. The HP WL520 unit supports the following data rates: 6, 9, 12, 18, 24, 36, 54 Mbits/s. The IEEE
802.11b standard supports wireless physical layer in the 2.4 GHz band using Direct Sequence Spread Spectrum (DSSS). The
standard provides for data rates of 1, 2, 5.5, and 11 Mbits/s.
feature list
feature list
feature listfeature list
The IEEE standards that governs wireless communications are different for the 2.4 GHz band and the 5 GHz band. The table
below compares the software features supported for each type of card in the HP WL520 device:
feature
feature
fe r
featureatu e
Number of stations per BSS up to 250 up to 50
HTTP Server yes yes
Telnet / CLI yes yes
SNMP Agent yes yes
VLAN Support (2 User VLANs) yes yes
Emergency Reset to Default Configuration yes yes
DHCP Client yes yes
DHCP Server yes yes
TFTP yes yes
RADIUS Access Control yes yes
802.1X (EAP-MD5, EAP-TLS and EAP-TTLS) yes yes
802.1d bridging yes yes
MAC Access Control Table yes yes
Protocol Filtering yes yes
Multicast/Broadcast Storm Filtering yes yes
Proxy ARP yes yes
Configuration Support for MAC Features yes yes
ICMP Echo Response yes yes
Hardware Watchdog Timer yes yes
Roaming yes yes
Link Integrity yes yes
Automatic Channel Select yes yes
WEP yes yes
WEP Plus (Weak Key Avoidance) yes No client support for 802.11a
WDS Relay yes
Remote Link Test yes
Link Test Responder yes No client support for 802.11a
Medium Density Distribution yes
Distance between AP's yes
Ultra High Density yes
Closed System yes
Interference Robustness yes
Load Balancing yes No client support for 802.11a
AP List yes No client support for 802.11a
SpectraLink VoIP Support yes
Fragmentation yes
2hz
.4 g
2.4 ghz 5 gh5 ghz comments
2.4 ghz2.4
ghz
5 ghz5 ghz
z
comments
commentscomments
The HP WL520 device can be used with any combination of 802.11a and 802.11b radio cards. Note however, that only one
802.11a card with antenna adapter can be plugged into the HP WL520 unit at one time. You can have an 802.11a and an
802.11b card present in the HP WL520 device at the same time and 2.4 GHz and 5 GHz clients will be supported
simultaneously.
1-3
802.11b vers us 802.11a Networks
cell size and coverage area
cell size and coverage area
cell size and coverage areacell size and coverage area
The coverage area achieved with the 2.4 GHz card type is larger than that of a 5 GHz radio card. The transmit rate is higher
in the smaller (2.4 GHz) cell than the larger (5 GHz cell). The following illustrations depict the difference in cell sizes and the
way that cell size affects coverage area.
802.11a versus 802.11b Coverage Area 802.11a versus 802.11b Coverage Area
1-4
Installation and Initialization
auto channel select
auto channel select
auto channel selectauto channel select
The Access Point selects its own frequency channel, based on interference situation, bandwidth usage and adjacent channel
use, using the Auto Channel Select feature. This is beneficial when deploying HP WL520 units in a new environment or adding
an HP WL520 unit in an existing environment.
The default channel for the 5 GHz radio card is 52 - 5260 MHz. When a second HP WL520 unit is turned on in the vicinity of
the currently active HP WL520 device, the Auto Channel Select feature changes the frequency channel of the second unit so
there is no interference between the units. Multiple HP WL520 units can be turned on simultaneously to establish proper
channel selection.
installation and initialization installation and initialization
The HP WL520 is designed to support both 2.4 GHz (IEEE 802.11b) radio cards and 5 GHz (IEEE 802.11a) radio cards. The
5 GHz card for the HP WL520 has an antenna adapter which snaps into place on the existing wall mounting bracket. Refer to
the printed Quick Start Guide provided in you kit for instructions on installing the Base Station hardware and initializing the
unit for your network.
1-5
C
Conf ng the hp WL520 enterprise access point
CC
overview
overview
overviewoverview
in this chapter
in this chapter
in this chapterin this chapter
iguri
onfiguring the hp
onfiguring theonfiguring the hphp
Since each network is unique, the HP WL520 must be configured to operate in your network environment.
Most administrators use the HTTP Interface (web browser) for configuration; however, the Command Line Interface (CLI)
provides the same functionality by entering CLI Commands or scripts from Terminal and Telnet sessions. For information about
using the CLI, please refer to
In some scenarios described in this chapter, you need to make configuration choices (for example, which radio channel to use).
This guide explains each choice. When in doubt, we suggest you accept the default values.
Q Prerequisites
Q Set Basic Configuration Parameters
Q Download the latest software
– Setup your TFTP server
– Download updates to your TFTP server from the Web interface
– Backup your hp WL520 configuration file
– Copy a configuration file from another hp WL520 unit
Q Other Network Settings
– Configure the hp WL520 device as a DHCP Server
– Maintain 802.11b Client Connections using Link Integrity
– Set HTTP Interface Management Services
– Configure Serial Port Interface Settings
Q Other Security Configuration Settings
– Configure your MAC (Address) Access Control Table
– RADIUS Authentication Settings
– IEEE 802.1x Security Mode
Q If you encounter problems...
Using the Command Line Interface.
WL520
WL520WL520
enterprise access point
enterprise access pointenterprise access point
2
2
22
2-1
Prerequisites
prerequisites
prerequisites
prerequisitesprerequisites
Before configuring the HP WL520, you need to gather certain network information. The following section identifies the
information you need. A form has been provided at the end of this guide for you to document the configuration settings of
each of the HP WL520 units in your network. Refer to Recording Your Configuration Settings.
Network Name (SSID of the wireless cards) Each wireless interface of your HP WL520 must be given a Network Name before users can sign on.
(HTTP) Password Each HP WL520 requires a read/write password to access the web interface. The default password is
Authentication Method A primary authentication server may be configured; a backup authentication server is also optional. The
Authentication Server Shared Secret This is a kind of password shared between the HP WL520 and the RADIUS authentication server (so both
Authentication Server Authentication Port This is a port number (default is 1812) and is typically provided by the network administrator.
Client IP Address Pool Allocation Scheme The HP WL520 can automatically provide IP addresses to clients as they sign on. The network
DNS Server IP Address The network administrator typically provides this IP Address.
This is not the same as the System Name, which applies only to the HP WL520 unit. This may apply to
the isolated unit, the immediate, active network, or to multiple networks. The network administrator
typically provides the Network Name(s).
"public".
network administrator typically provides this information.
passwords must be the same), and is typically provided by the network administrator.
administrator typically provides the IP Pool range.
NOTE:
Client Manager software comes with the PC Cards used in wireless client computers. The current network profile on
the wireless client must contain a valid Network Name; in other words, one of the case-sensitive Network Names
defined in the HP WL520 PC Card "Wireless Interface" properties. For more information, please refer to the PC Card
documentation.
set basic configuration parameters
set basic configuration parameters
set basic configuration parametersset basic configuration parameters
Once you have a valid IP Address assigned to your HP WL520 and an Ethernet connection, use your web browser to
configure the HP WL520 through the Web Interface.
log in to the
log in to the hphp WL520 unit using the web interface
log in to thelog in to the hphp
1. Ensure any proxies are turned off. Open your browser and enter the IP Address. Press ENTER. Result: The HP WL520
Login screen appears.
WL520
WL520WL520
unit using the web interface
unit using the web interface unit using the web interface
ENTER
ENTERENTER
NOTE:
Leave the User Name field empty
2. Enter public in the Password field. Result: The System Status screen appears.
3. Click the Configure operation button. Result: The System Configuration screen appears. Each tab contains information
for specific configuration categories.
1
Figure 2-1
Figure 2--1 Configuration through the Web Interface
gur
Figure 2-1Fie 2 1
User Name
User NameUser Name
Password
PasswordPassword
Configure
ConfigureConfigure
2
Configuration through the Web Interface
Configuration through the Web Interface Configuration through the Web Interface
3
2-2
Set Basic Configuration Parameters
You are now ready to configure each HP WL520 category, depending on your system. In some cases, you will not need to
make any changes. If you are in doubt about any setting, we recommend that you use the default values.
Figure 2-2
Figure 2-2 Configuration Options
Figure 2-2Figure 2-2
To set properties for each category, click on the desired tab. Result: The selected configuration screen appears. Each
configuration screen allows you to select options, or enter, edit, and delete information.
In some cases, the HP WL520 reminds you that it must be rebooted for a change to take effect. In a given session, you can
wait to reboot until all changes have been made.
After entering or editing information on configuration screens, click OK to save changes, or click CanceCancel to restore previous
settings.
You will want to set up a few basic configuration parameters right away when you receive the HP WL520 unit. For example:
– System name and location
– Contact information for network administrator
– IP Address
– Communication rules for your wireless interface(s)
– Passwords for the different management interfaces (SNMP, Telnet, HTTP)
– If you need to upload the latest software, you will also want to setup your TFTP server to communicate with the
Configuration Options
Configuration Options Configuration Options
OK
OKOK
HP WL520 device. This process is described in downloading the latest software, under
l
CancelCancel
Setup your TFTP server.
2-3
set system name, location and contact information
set system name, location and contact information
set system name, location and contact informationset system name, location and contact information
Set Basic Configuration Parameters
Figure 2-3
Figure 2-3 System Configuration
Figure 2-3Figure 2-3
1. From the web interface, start by clicking on the Configure button, then the System tab.
2. Enter the name of the HP WL520 device, its location within your network or its physical location, such as “Front
set a static ip address for the
set a static ip address for the hp WL520 deevice
set a static ip address for the set a static ip address for the hphphp
1. Click on the Network tab and select the IP Address Assignment Type to Static.
2. Then enter a fixed IP Address for your HP WL520 unit, along with the IP mask and default gateway IP Address you
System Configuration
Sy io
System Configurationstem Configurat n
Configure
ConfigureConfigure
Lobby” or Engineering, the name, phone number and e-mail address of the person responsible for this device, and
OK
click OK.
OKOK
want to use.
Network
NetworkNetwork
WL520
WL520WL520
d vice
device device
IP Address Assignment Type
IP Address Assignment TypeIP Address Assignment Type
Static
StaticStatic
System
SystemSystem
NOTE:
The IP Mask of the HP WL520 unit needs to match the IP Mask of your network. If you are setting up the HP WL520
device from a client station, check the IP mask of your computer before proceeding.
3. Click OK when finished. The HP WL520 unit will need to be rebooted for the changes to take affect.
Figure 2-4
Figure 2-4 Neetwork IP Configuration
Figure 2-4Figure 2-4
Network IP Configuration
k IP io
Network IP Configuration N tworConfigurat n
2-4
Set Basic Configuration Parameters
set network names and encryption options
set network names and encryption options
set network names and encryption optionsset network names and encryption options
1. Select Network Names (SSID) for the PC Cards in wireless Slots A and/or B in the HP WL520 device. Client stations use
the Network Name of the PC Card to connect to the network through the HP WL520 unit.
At power up or insertion of either a 2.4 GHz or 5 GHz radio card, the HP WL520 software will automatically detect the
card type. The Configuration and Monitoring parameters displayed in the HTTP Interface will be updated accordingly. The
default values will be assigned.
Figure 2-5
Figure 2-5 Wireless Interface Configuration
r
Figure 2-5Figu e 2-5
The HP WL520 device can be used with any combination of 2.4 GHz (802.11b) and 5 GHz (802.11a) radio cards. Note
however, that only one 802.11a adapter card can be plugged into the HP WL520 unit at one time. You can have an
802.11a and an 802.11b card present in the HP WL520 device at the same time, and 2.4 GHz and 5 GHz clients will be
supported simultaneously.
Not all software features available for the 802.11b cards are available for the 802.11a cards.
2-5
set wep encryption for each wireless interface
set wep encryption for each wireless interface
set wep encryption for each wireless interfaceset wep encryption for each wireless interface
Set Basic Configuration Parameters
Figure 2-6
Figure 2--6 WEP EncryptionEP Enc on
Figure 2-6Figure 2 6
1. Click on the Security > Encryption tabs.
2. Click inside the check box to
3. Type in an
Wrypti
WEP Encryption WEP Encryption
Security > Encryption
Security > EncryptionSecurity > Encryption
enable WEP encryption on a wireless card.
enable WEP encryption
enable WEP encryptionenable WEP encryption
encryption key based on the type of card present in each slot.
encryption key
encryption keyencryption key
NOTE:
The HP WL520 device supports both 40- and 128-bit cards. 40-bit cards support key lengths of 5 alphanumeric
characters. 128-bit cards support key lengths of 13 alphanumeric characters.
4. Select which key to use for WEP encryption. Client stations must have the same encryption key to be able to
communicate with the HP WL520 device.
change passwords
change passwords
change passwordschange passwords
1. Click on the Management tab and change the default passwords for the SNMP, Telnet/CLI, and HTTP interfaces. The
default passwords for each interface is public.
Management
ManagementManagement
NOTE:
We strongly urge your to change the default passwords to restrict access to your network devices to authorized
personnel. We also recommend that you document your HP WL520 configuration using the work sheets provided for
you in Recording Your Configuration Settings. If you lose or forget your password settings, you can always perform
Reset to Factory Default procedure.
the
2-6
Download the latest software
download the latest software
download the latest software
download the latest softwaredownload the latest software
There are three types of files that can be downloaded to the HP WL520 from a TFTP server:
— img (AP software image or kernel)
— config (configuration file)
— bspbl (BSP/Bootloader firmware file)
The latest updates on software and documentation can be found on the HP web site at:
setup your tftp server
setup your tftp server
setup your tftp serversetup your tftp server
The “Trivial File Transfer Protocol” (TFTP) server allows you to transfer files across a network. You can upload files from the
HP WL520 for backup or copying, and you can download the files for configuration and AP Image upgrades. The TFTP
software is located on the HP WL520 Installation CD-ROM.
If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files
to/from the HP WL520. Remember that the TFTP server does not have to be local, so long as you have a valid TFTP IP
Address. TFTP does not have to be running for HP WL520 operations that do not transfer files.
After the TFTP server is installed:
Q Check to see that TFTP is configured to point to the directory containing the AP Image.
Q Make sure you have the proper TFTP server IP Address, the proper AP Image file name, and that the TFTP server is
download updates to your tftp server from the web interface
download updates to your tftp server from the web interface
download updates to your tftp server from the web interfacedownload updates to your tftp server from the web interface
1. Make sure the TFTP server is running and pointing to the directory containing the desired file.
2. Open the web interface of the HP WL520 device.
3. Click on the
4. Type in the IP address of your TFTP server.
5. Type in the file name and select the file type from the pull down menu.
6. Click
Figure 2-7
Figure 2-7 Download Software Image from TFTP Server
Figure 2-7Figure 2-7
Commands
Commands button; select the Download tab.
CommandsCommands
OK
OK to download this information from the TFTP server to the HP WL520 unit.
OK OK
Download Software Image from TFTP Server
Download Software Image from TFTP Server Download Software Image from TFTP Server
Download
DownloadDownload
2-7
Download the latest software
backup your
backup yourbackup yourhphphp
1. Make sure the TFTP server is running and pointing to the directory where you want to save the file.
2. Open the web interface of the HP WL520 device.
3. Click on the
4. Type in the IP address of your TFTP server.
5. Type in a descriptive name for your configuration file.
6. Select the file type as
7. Click OK to upload this information from your HP WL520 unit to the TFTP server, where it can be retrieved in the event
you reset your HP WL520 device to factory defaults at some time.
WL520
WL520 configuration filebackup your hp
WL52020
WL5
Commands
Commands button; select the Upload tab.
CommandsCommands
OK
OK OK
configuration file
configuration file configuration file
config from the pull down menu.
config
configconfig
Upload
UploadUpload
NOTE:
Record the name of this configuration file and the IP address of the HP WL520 unit so you can easily find it if you
need to download it.
copy a configuration file from another
copy a configuration file from another
copy a configuration file from another copy a configuration file from another hphp
You can configure multiple units using the same configuration file by uploading the configuration file from one HP WL520 unit
to the TFTP server, and then download the configuration file to other HP WL520 units.
WARNING:
!
o i ur o eDo not use a static IP address in this c nf g ati n l , otherwise you w l end up w th duplicate IP add e ses in your
network!
1. Check to ensure Dynamic IP address is enabled by clicking the Configure button and selecting the IPConfig tab. Then open
the Web interface from the HP WL520 unit with the desired configuration and click the
2. Select the
Upload tab and enter the IP address of your TFTP server.
Upload
UploadUpload
WL520
WL520WL520it unit unit
hp
unithp WL520 un
fiilir s
Configure
ConfigureConfigure
Commands
Commands button.
CommandsCommands
Figure 2-8
Figure 2-8 Upload Configuration File to TFTP Server
gur
Figure 2-8Fie 2-8
3. Enter the name of your configuration file and click
4. Wait for the file to transfer from the HP WL520 device to the TFTP server.
5. Access the HP WL520 unit to which you will download the configuration. A system window will notify you when this
process is complete. Confirm by clicking
6. Click on the Commands button, then select the Download tab.
7. Verify the IP address of your TFTP server and enter the name of the file you wish to transfer (refer to Step 3).
8. Set the file type to
9. The unit will need to be rebooted for the changes to take affect.
10. Repeat this procedure for all the HP WL520 units you want to configure using this specific file.
Upload Configuration File to TFTP Server
Upload Configuration File to TFTP Server Upload Configuration File to TFTP Server
Commands
CommandsCommands
config, and click OK. Click Download.
config
configconfig
OK
OKOK
OK.
OK
OKOK
OK
OK.
OKOK
Download
DownloadDownload
Download
DownloadDownload
2-8
Other Networ k Settings
other network settings
other network settings
other network settingsother network settings
You may want to set other configuration parameters for your HP WL520 unit, such as:
– Configure the HP WL520 device as a DHCP server
– Maintain 802.11b client connections using Link Integrity checking
– Change your Wireless Interface settings
– Configure which physical interface will be used to manage the HP WL520 unit
– Control access to the HP WL520 device using MAC Address authentication, WEP encryption or 802.1x security settings
Refer to
Configuring Advanced Features for more complex network settings.
configure the
configure the hphp WL520 device as a dhcp server
configure theconfigure thehphp
Use DHCP configuration to provide dynamic client IP Addresses from one or more IP Pool Tables. Enable the DHCP Server to
allow the HP WL520 to assign clients IP Addresses from IP Pool Tables. Deselect the Status check box to prevent client IP
Address assignment from the HP WL520.
WL520
WL520WL520
device as a dhcp server
device as a dhcp server device as a dhcp server
NOTE:
You must have at least one entry in the DHCP Server client IP Address assignment table before you can enable the
DHCP Server Status feature.
Figure 2-9
Figure 2-9 Network Configuration Screens - DHCP Server
Figure 2-9Figure 2-9
1. From the HTTP interface, click on the
2. Click on the
3. Enter the following information:
Network Configuration Screens - DHCP Server
Network Configuration Screens - DHCP Server Network Configuration Screens - DHCP Server
Add button in the IP Pool Table.
Add
AddAdd
— Start IP AddressS t I
———tar P Address
Start IP AddressStart IP Address
—End I Add
End IP Addresss
—
—
—
— Default Lease Time (optional) - the default time value for clients to retain the assigned IP Address. DHCP
—
—
—
P re s
End IP AddressEnd IP Address
Default Lease Time
Default Lease TimeDefault Lease Time
automatically renews IP Addresses without client notification. Default is 86400 seconds.
Maximum Lease Time (optional) - the maximum time value for clients to retain the assigned IP Address. DHCP
Maximum Lease Time
Maximum Lease TimeMaximum Lease Time
automatically renews IP Addresses without client notification. Default is 86400 seconds.
Comment (optional)
Comment
CommentComment
Status - IP Pools are enabled upon entry in the table. Use the Edit button to disable or delete existing table entries.
Status
StatusStatus
Configure
Configure button and select the Network > DHCP Server tabs.
ConfigureConfigure
Network > DHCP Server
Network > DHCP ServerNetwork > DHCP Server
Edit
EditEdit
2-9
Other Networ k Settings
4. Enter the Default Gateway IP Address, the Primary and Secondary DNS IP Addresses, and select the Enable DHCP Server
check box.
5. Reboot the HP WL520 unit for the changes to take affect.
maintain 802.11b client connections using link integrity
maintain 802.11b client connections using link integrity
maintain 802.11b client connections using link integritymaintain 802.11b client connections using link integrity
Default Gateway IP Address
Default Gateway IP AddressDefault Gateway IP Address
Primary
PrimaryPrimary
Secondary DNS IP Addresses
Secondary DNS IP AddressesSecondary DNS IP Addresses
Enable DHCP Server
Enable DHCP ServerEnable DHCP Server
NOTE:
This feature is only applicable to 2.4 GHz (802.11b) cards.
The Link Integrity feature checks the link between the HP WL520 and the nodes on the backbone. These nodes are listed by
their IP address on the Link Integrity IP Address Table, and serve as backup. If the link goes down, the client will connect to
another HP WL520 in your network that still communicates with the server.
Figure 2-10
Figure 2-10 Liink Integriitty
Figure 2-10Figure 2-10
configure link integrity
configure link integrity
configure link integrityconfigure link integrity
1. From the HTTP interface, click on the Configure button and select the Network > Link Integrity tabs.
2. Click the
3. Enter the IP Address of the host computer you want to check and add comments to identify the computer if you wish. This
Target IP Address is enabled as soon as it is entered in the table. Click
4. Set the following parameters as needed:
–
–
5. Click to select the
disable link integrity
disable link integrity
disable link integritydisable link integrity
Q To disable Link Integrity check for all clients, deselect the Enable Link Integrity check box.
Q To disable Link Integrity check to a certain host computer, click on the Edit button in the Tarrget IP Address Table and set the et I
Status
Status
StatusStatus
L nk Integr y
Link Integrity Link Integrity
Configure
ConfigureConfigure
Edit button in the Target IP Address Table.
Edit
EditEdit
Poll Interval - the interval between link integrity checks. Range is 500 - 15000 ms in increments of 500 ms; default is
Poll Interval
Poll IntervalPoll Interval
500 ms.
Poll Retransmissions - the number of times a poll should be retransmitted before the link is considered down.
Poll Retransmissions
Poll RetransmissionsPoll Retransmissions
Enable Link Integrity check box.
Enable Link Integrity
Enable Link IntegrityEnable Link Integrity
to Disable.
Target IP Address Table
Target IP Address TableTarget IP Address Table
Enable Link Integrity
Enable Link IntegrityEnable Link Integrity
Network > Link Integrity
Network > Link IntegrityNetwork > Link Integrity
OK.
OK
OKOK
Edit
EditEdit
TTTa g P Address Table
arget IP Address Tablearget IP Address Table
2-10
Change your Wireless Interface Settings
change your wireless interface settings
change your wireless interface settings
change your wireless interface settingschange your wireless interface settings
Depending on the type of wireless PC Card installed in the HP WL520 device, the configuration options will be different. Some
parameters are the same for 802.11a and 802.11b cards. Others are unique to each card type.
You can setup an HP WL520 unit using the following combinations of wireless cards:
1. single 802.11a card with the attached antenna adapter
2. single 802.11b card
3. two 802.11b cards (one in each slot)
4. one 802.11a card with attached antenna and one 802.11b card
– Network Name. Enter a Network Name for each PC Card. This is the same name used on client machines to connect using
Network NameNetwork Name
the Client Manager software.
Enable Auto Channel Select (ACS). By default this feature is enabled. The HP WL520 device will scan the area for other
Enable Auto Channel Select (ACS)
–
Enable Auto Channel Select (ACS)Enable Auto Channel Select (ACS)
HP WL520 devices and select a free or relatively unused communication channel. This helps prevent interference problems
and increases the performance of the network.
–
Frequency Channel. Use the pull-down menu to select the desired card frequency. Ensure nearby devices do not use the
Frequency Channel
Frequency ChannelFrequency Channel
same frequency. The Frequency Channels available will depend on the card type and the country of use. Refer to
Specifications for details.
– Transmit Rate. Use the pull-down menu to select a specific transmit rate for the 802.11a card. Choose between 6, 9, 12,
Transmit Rate
Transmit RateTransmit Rate
18, 24, 36, 48, 54 Mbits/s, or Auto Fallback. The Auto Fallback feature allows the HP WL520 unit to select the best
transmit rate based on the cell size.
–
DTIM Period. Deferred Traffic Indicator Map (DTIM) is used with clients that use power management. DTIM should be left at
DTIM Period
DTIM PeriodDTIM Period
the default value.
–
RTS/CTS Medium Reservation. This value affects message flow control, and should not be changed under normal
RTS/CTS Medium Reservation
RTS/CTS Medium ReservationRTS/CTS Medium Reservation
Enable Auto Channel Select (ACS). By default this feature is enabled. The HP WL520 device will scan the area for other
Enable Auto Channel Select (ACS)
Enable Auto Channel Select (ACS)Enable Auto Channel Select (ACS)
HP WL520 devices and select a free or relatively unused communication channel. This helps prevent interference problems
and increases the performance of the network. However, if you are setting up a Wireless Distribution System (WDS), it
must be disabled.
–
Frequency Channel. Use the pull-down menu to select the desired card frequency. Ensure nearby devices do not use the
Frequency Channel
Frequency ChannelFrequency Channel
same frequency. The Frequency Channels available will depend on the card type and the country of use. Refer to
Radio
Specifications for details.
–
Distance between APs. Set to Large, Medium, Small, Microcell or Minicell depending on the site survey for your system. The
Distance between APs
Distance between APsDistance between APs
distance value is related to the
Large
Medium
LargeLarge
MediumMedium
Multicast Rate (described next). In general, larger systems operate at a slower average rate.
Multicast Rate
Multicast RateMulticast Rate
Small
SmallSmall
Microcell
MicrocellMicrocell
Minicell
MinicellMinicell
This feature is only available for 802.11b wireless cards.
–
Multicast Rate. Set the rate at which Multicast messages may be sent. This value is related to the Distance between APs
Multicast Rate
Multicast RateMulticast Rate
Distance between APs
Distance between APsDistance between APs
parameter (described previously). This feature is only available for 802.11b wireless cards.
distance between aps
distance between aps multi cast r at e
distance between apsdistance between aps
Large 1 and 2 Mbits/sec
Medium 1, 2, and 5.5 Mbits/sec
Small 1, 2, 5.5 and 11 Mbits/sec
Minicell 1, 2, 5.5 and 11 Mbits/sec
Microcell 1, 2, 5.5 and 11 Mbits/sec
multicast rate
multicast ratemulticast rate
2-12
Change your Wireless Interface Settings
Enable Interference Robustness
– Enable Interference Robustness. Enable this option if other electrical devices in the 2.4 GHz range may be interfering with
the wireless signal. This feature is only available for 802.11b wireless cards.
–
Enable Closed System. Check this box to allow only clients configured with your specific Network Names to access the
Enable Closed System
Enable Closed SystemEnable Closed System
HP WL520. When disabled, a client configured with the Network Name “ANY” can connect to the HP WL520. This
feature is only available for 802.11b wireless cards.
Enable Load Balancing
– Enable Load Balancing. Enable this option so clients can evaluate which access point to associate with, based on current AP
Enable Load BalancingEnable Load Balancing
loads, to more evenly balance the load between APs. This feature is only available for systems using two 802.11b wireless
cards.
Enable Medium Density Distribution
–
Enable Medium Density Distribution. Enable this option to automatically notify client stations of roaming thresholds for the
Enable Medium Density DistributionEnable Medium Density Distribution
nearby APs. This feature is only available for 802.11b wireless cards.
auto channel select (acs)
auto channel select (acs)
auto channel select (acs)auto channel select (acs)
Auto Channel Select (ACS) tests available channels and selects one according to its signal strength. The channel range is set
by the regulatory agency responsible for your geographic region. Using a probe, the HP WL520 device scans appropriate
channels and selects the radio frequency channel with the best signal to noise ratio (i.e., signal strength). ACS is enabled by
default; however, if you plan to use WDS setup then you must disable ACS.
disabling acs
disabling acs
disabling acsdisabling acs
1. From the Web interface, select Configuration then click on the Interfaces tab.
2. Deselect the check box to disable Auto Channel Select.
3. Select a frequency channel from the drop-down menu. The clients automatically sense the channel and will configure
themselves to reassociate on the new channel.
Configuration
ConfigurationConfiguration
Interfaces
InterfacesInterfaces
WARNING:
!
s rilc l
enabling acs
enabling acs
enabling acsenabling acs
1. From the Web interface, select Configuration then click on the Interfaces tab.
2. Select the check box to
WARNING:
!
On changing the status you mu t eboot y u unit h c e t ro r , w i h w l disconnect all c i n s f om the HP WL520.
Configuration
ConfigurationConfiguration
Enable Auto Channel Select.
Enable Auto Channel Select
Enable Auto Channel SelectEnable Auto Channel Select
s rill
Interfaces
InterfacesInterfaces
e t rOn changing the status you mu t eboot your unit, which w l disconne t a l cli n s f om the HP WL520.
2-13
Change your Wireless Interface Settings
distance between aps
distance between aps
distance between apsdistance between aps
cells
cells
cellscells
The Distance between APs defines how far apart (physically) your HP WL520 devices are located, which in turn determines the
size of your cell. Cells of different sizes have different capacities and therefore suit different applications. For instance, a typical
office has many stations requiring high bandwidth and transmit rates for complex, high-speed data processing. In contrast, a
typical warehouse has a few forklifts requiring low bandwidth and transmit rates for simple transactions. Cell capacities are
compared in the following table, which shows small cells suit most offices, while large cells suit most warehouses:
small cell
small cell la lllarge cell
small cellsmall cell
Physically accommodates few stations Physically accommodates many stations
High cell bandwidth per station Lower cell bandwidth per station
High transmit rate Lower transmit rate
coverage
coverage
coveragecoverage
The number of access point units in a set area determines the network coverage for that area. A great number of access point
units covering a small area would be a high-density cell. Few access point units, or even a single unit covering the same small
area would result in a low-density cell, even though in both cases the actual area did not change- only the number of access
points covering the area changed.
In a typical office, smalls cells may have a ten foot (10’) diameter and an HP WL520 device every twenty feet (20’), which
would be considered high density. In contrast, large cells in a typical warehouse may have a ninety foot (90’) diameter and an
HP WL520 unit every two hundred feet (200’), considered low density.
rge ce
large celllarge cell
Figure 2-13
Figure 2-13Figure 2-13
set the distance between aps
set the distance between aps
set the distance between apsset the distance between aps
1. From the Web interface, click on the Configure button, select the Network > Interfaces tab.
2. Select the desired Wireless Slot tab.
3. Use the drop-down menu to set the
!
Loy vs. U tra High Dey Network
w Densit nsitFigure 2-13 Low Density vs. Ulltra High Density Network
Low Density vs. Ultra High Density NetworkLow Density vs. Ultra High Density Network
Wireless Slot
Wireless SlotWireless Slot
five values for the Distance between APs parameter (configurable for each Wireless NIC):
Large, Medium, Small, Minicell, and Microcell.
WARNING:
s
The Di tance between A s s ould not be appr x v y cP h o imated. It is calculated by means of a manual Site Sur e , in whi h
an HP WL520 unit is et up and c ien s a e te ted th o g t t e a ea to d te m i n l ength and co e a e n
local limits such as ph s c l inter er
sltrsr strv
y i a f ence a e in estigated.
rrF om these measu ements the appropriate cell si e and density is determined, and the optimum Di tance between
AP e u ements.
s is calculated to suit your particular business r q ir
Configure
ConfigureConfigure
Multicast rate for the appropriate card.The HP WL520 recognizes the following
Multicast rate
Multicast rateMulticast rate
Network >
Network >Network >
Interfaces
InterfacesInterfaces
u hou h r e r ine s g a r g , a d
rv
zs
2-14
Change your Wireless Interface Settings
multicast rate
multicast rate
multicast ratemulticast rate
The multicast rate measures how quickly information is transmitted across your network. This rate is approximated for a cell,
since physical proximity to the AP increases throughput. Stations closer to an AP actually have higher multicast rates than
stations in the same cell that are located farther from the AP. In addition, a small cell with several stations located close to the
access point can actually transmit information faster than a larger cell with only a few stations located farther from the
HP WL520 device.
11 Mbits/s
11 Mbits/s
11 Mbits/s11 Mbits/s
1 Mbit/s
1 Mbit/s
1 Mbit/s1 Mbit/s
Figure 2-14
Figure 2-14Figure 2-14
its/Mbs Mu ca t Rates
1 Mb s and 11 its/ ltiFigure 2-14 1 Mbits/s and 11 Mbits/s Multicasst Rates
1 Mbits/s and 11 Mbits/s Multicast Rates 1 Mbits/s and 11 Mbits/s Multicast Rates
NOTE:
There is an inter-dependent relationship between the Distance between APs and the Multicast Rate. In general, larger
systems operate at a lower average transmit rate.The variation between Multicast Rate and Distance between APs is
presented in the following table:
1.0 mbit/s
1.0 mbit/s
1.0 mbit
1.0 mbit/s/s
Large yes yes
Medium yes yes yes
Small yes yes yes yes
Minicell yes yes yes yes
Microcell yes yes yes yes
set the multicast rate
set the multicast rate
set the multicast rateset the multicast rate
1. From the Web interface, click on the Configure button, and select the Network > Interfaces tabs.
2. Select the
Wireless - Slot A or Wireless - Slot B tab depending on where your 802.11b card is installed.
Wireless - Slot A or Wireless - Slot B
Wireless - Slot A or Wireless - Slot BWireless - Slot A or Wireless - Slot B
3. Use the drop down menu to select a Multicast rate.
2.0 mbits/s
2.0 mbits/s
0 mbit
2.0 mbits/s2.s/s
Configure
ConfigureConfigure
Multicast
MulticastMulticast
5.5 mbits/s
5.5 mbits/s
5 mb
5.5 mbits/s5.its/s
1/s
1 mbits11 mbits/s
11 mbits/s11 mbits/s
Network > Interfaces
Network > InterfacesNetwork > Interfaces
NOTE:
The Distance between APs must be set before the Multicast Rate, because when you select the Distance between APs,
the appropriate range of Multicast values automatically populates the drop down menu.
must be set before
must be set beforemust be set before
2-15
ethernet settings
ethernet settings
ethernet settingsethernet settings
set ethernet speed and transmission mode
set ethernet speed and transmission mode
set ethernet speed and transmission modeset ethernet speed and transmission mode
Ethernet Settings
Figure 2-15
Figure 2-15Figure 2-15
Configuration
Configuration. Select the desired speed and transmission mode from the pull down menu. Half-duplex means that only one
ConfigurationConfiguration
side can broadcast at a time, full-duplex allows both sides to transmit, while auto-duplex selects the best transmission mode for
the given configuration. The recommended setting is auto-speed-auto-duplex.
Choose between:
Q 10 Mbit/s - half duplex, full duplex, or auto duplex
Q 100 Mbit/s - half duplex, full duplex, or auto duplex
Q auto speed - half duplex
Q auto speed - auto duplex
configure your management interfaces
configure your management interfaces
configure your management interfacesconfigure your management interfaces
Select which interfaces will be available through the Wireless, Ethernet, and Serial Port interfaces of the HP WL520 unit.
set http interface management servicesset http interface management services
From the drop-down menu, select which physical interface(s) can be used to manage the HP WL520 device using the HTTP
management interface.
Choose between:
— Disabled (all interfaces)
— Ethernet only enabled
— Wireless A only enabled
— Wireless B only enabled
— All Interfaces enabled
Enter the HTTP communication port number. Default is 80.
configure serial port interface settings
configure serial port interface settings
configure serial port interface settingsconfigure serial port interface settings
The serial port interface on the HP WL520 device is enabled at all times. You can set the following parameters as needed:
Baud Rate
Baud Rate. Select the serial port speed (bits per second). Choose between 2400, 4800, 9600, 19200, 38400, or 57600;
–
Baud RateBaud Rate
9600.
the default Baud Rate is
– Flow Control. Select either None (default) or Xon/Xoff (software controlled) data flow control.
Flow Control
Flow ControlFlow Control
9600
96009600
None
NoneNone
Xon/Xoff
Xon/XoffXon/Xoff
NOTE:
To avoid unexpected performance of your HP WL520, leave the setting Flow Control to its default value (none) unless
you are sure what this setting should be.
other security configuration settings
other security configuration settings
other security configuration settingsother security configuration settings
Control access to the HP WL520 device using MAC Address authentication, WEP encryption, or 802.1x security settings
configure your mac (address) access control table
configure your mac (address) access control table
configure your mac (address) access control table configure your mac (address) access control table
The MAC Authentication tab allows you to build a list of stations, identified by their MAC addresses, authorized to access the
HP WL520 device within your network. The list is stored inside each HP WL520 within your network.
Figure 2-17
Figure 2-17 Security Configuration Screen - MAC AuthenticationSecu nfi ion Sc t tion
Figure 2-17Figure 2-17
Enable MAC Access Control
Enable MAC Access Control. Check this box to enable the Control Table.
–
Enable MAC Access ControlEnable MAC Access Control
Operation Type
– Operation Type. Choose between Passthru and Block. This determines how the stations identified in the MAC Access
Operation TypeOperation Type
Control Table are filtered.
rity Co guratreen - MAC Au hentica
Security Configuration Screen - MAC Authentication Security Configuration Screen - MAC Authentication
Passthru
PassthruPassthru
Block
BlockBlock
2-17
Other Security Configuration Settings
add an entry to the mac access control table
add an entry to the mac access control table
add an entry to the mac access control tableadd an entry to the mac access control table
OK
OK.
OKOK
Add
AddAdd
1. Click the Add button in the MAC Access Control table.
2. Enter the MAC Address of the client station authorized to manage this HP WL520 device.
3. Add a comment as needed. Entries are automatically enabled.
disable or delete an entry in the mac access control table
disable or delete an entry in the mac access control table
disable or delete an entry in the mac access control tabledisable or delete an entry in the mac access control table
1. Click the Edit button in the MAC Access Control Table.
2. Select the MAC Address you want to disable or delete.
3. Click
NOTE:
For larger networks that include multiple HP WL520 devices, you may prefer to maintain this list on a centralized
location using the
Also, if your network includes a RADIUS Server, you can use this tab to define the IP Address of the server that contains a
central list of MAC Address values that identify the authorized stations that may access the wireless network. You must specify
information for at least the Primary RADIUS server. The Backup RADIUS server is optional.
RADIUS Authentication Settings.
NOTE:
Problems with RADIUS Server configuration or RADIUS Authentication should be referred to the RADIUS Server
developer.
Enable RADIUS MAC Access Control Status
Enable RADIUS MAC Access Control Status. Click inside the check box to provide authentication by the RADIUS server.
–
Enable RADIUS MAC Access Control StatusEnable RADIUS MAC Access Control Status
Deselect the check box to prevent use of the RADIUS server.
Authorization Lifetime (seconds). Enter the time, in seconds, each client session may be active before being automatically re-
IEEE 802.1x is a proposed standard that provides a means to authenticate and authorize network devices attached to a LAN
port. A port in the context of IEEE 802.1x is a point of attachment to the LAN, either a LAN jack for the case of a desktop PC,
or a laptop PC association with an Access Point device.
authentication process
authentication process
authentication processauthentication process
There are three main components in the authentication process. The standard refers to them as:
1. supplicant (client PC)
2. authenticator (Access Point)
3. authentication server (RADIUS server)
When using 802.1x Security Mode or Mixed mode (802.1x and WEP), you need to configure your Radius server for
authentication purposes.
Initially the unauthenticated client PC cannot send any data traffic through the HP WL520 device to other systems on the LAN.
Data traffic is always encrypted with a WEP key that the client PC receives after it has been authenticated. The HP WL520
device inhibits all data traffic from a particular client PC until the client PC is authenticated. Regardless of its authentication
status, a client PC can always exchange 802.1x messages in the clear with the HP WL520 unit.
The HP WL520 device acts as a pass-through device to facilitate communications between the client PC and the RADIUS
server. The HP WL520 unit and the client PC exchange 802.1x messages using an EAPOL protocol. Messages sent from the
client station are encapsulated by the HP WL520 device and transmitted to the RADIUS server using EAP extensions.
Upon receiving a reply EAP packet from the RADIUS, the message is typically forwarded to the client PC, after translating it
back to the EAPOL format. Negotiations take place between the client PC and the RADIUS server. In case of success, the
RADIUS server sends a per-session key to the HP WL520 device.
NOTE:
Currently, only the EAP type of EAP-TLS (smart card or certificate) is supported when using 802.1x security mode
only. In mixed mode, both the EAP-TLS and EAP-MD5 types are supported provided that the RADIUS server is also
configured to support both types.
Operating System MD5 TLS TTLS
Windows 98
Windows 98SE
Windows ME
Windows 2000
Windows XP
Click on the Encryption tab in the
to set the over-the-air encryption properties for each wireless card. In this procedure, “Slot A” refers to PC Card A, and “Slot B”
refers to PC Card B.
9 9 8
9 9 8
9 9 8
9 9 9
9 9 9
Security Configuration screen to set the 802.1x security mode for the HP WL520 and/or
2-19
Other Security Configuration Settings
The HP WL520 software offers several methods for configuring security settings:
1RVHFXULW\RUHQFU\SWLRQ
1RVVHFXULLWW\\RUUHQFU\SWLRQ
1.
1RVHFXULW\RUHQFU\SWLRQ
1RHFXURHQFU\SWLRQ
Set the 802.1x Security Mode to none and make sure the Encryption status is set to disable for both wireless interface
cards.
WEP encryption is the wireless equivalent of the security level available through a wired network. Select the 802.1x
Security Mode to
Depending on the card type, the Encryption Key Length will be 40- or 128-bits. This will determine the number of
characters allowed for each the Encryption Key. Select the encryption key length from the drop-down menu.
You can specify up to four encryption keys between 5 and 12 alphanumeric characters depending on the key length
supported by the PC Card in each slot. However, you will only use one key to encrypt data to be transmitted.
When you decide to use the 802.1x security mode, you must first configure the RADIUS server to receive an
authentication response. Your computer operating system must also be configured to receive and send authenticated
packets.
4.
0L[HGPRGHZLWK[DQG:(3HQFU\SWLRQ
0L[HGPRGHZLWK[DQG:(3HQFU\\SWLRQ
0L[HGPRGHZLWK[DQG:(3HQFU\SWLRQ
0L[HGPRGHZLWK[DQG:(3HQFUSWLRQ
With 802.1x security mode, an Encryption Key entry is not required, since this mode creates keys dynamically. In
Mixed mode, Encryption Keys 2-4 are not required.
5.
0L[HGPRGHDQG[5HNH\,QWHUYDO
0L[HGPRGHDQG[5HNH\,QWHUYDO
0L[HGPRGHDQG[5HNH\,QWHUYDO
The rekey feature determines how often your encryption key is changed (the interval between changes) and can be set
to any value between 60 - 65535 seconds. Compared with re-authentication, rekeying frustrates hacking attempts
without taxing system resources. Setting a fairly frequent rekey value (900 seconds=15 minutes) effectively protects
against intrusion without disrupting network activities.
none
none and enable the Encryption status for one or both wireless PC Cards.
nonenone
enable
enableenable
none
nonenone
O0L[HGPRGHDQG[5HNH\,QWHUYD
disable
disabledisable
setting up the
setting up the hp WL520 using 802.1x security mode
setting up thesetting up thehphphp
1. From the Web interface, select Security, then click on the Encryption tab.
2. Set the 802.1x Security Mode to 802.1x and click OK. Ignore the reboot message - this can be done when the entire
procedure is finished.
3. Select the RADIUS Authentication tab.
4. Enter the RADIUS server password in the Shared Secret and Confirm Shared Secret fields.
5. Enable the Primary RADIUS server.
6. Enter the IP Address for the Primary RADIUS server.
7. Enter the Destination Port. The default is 1812, however your RADIUS server provider may have another
communication port defined.
8. Define the Response Time and Response Maximum Retransmission values.
9. Reboot the HP WL520 device for these changes to take affect.
WL520
WL520WL520
using 802.1x security mode
using 802.1x security mode using 802.1x security mode
Figure 2-19
Figure 2-19 Security Configuration Screen - 802.1x Security ModeSec nf n S Sec