Intermec MobileLAN access WA2XG System Manual

System Manual

MobileLAN™ access
WA2XG

Intermec Technologies Corporation

Corporate Headquarters
6001 36th Ave. W.
Everett, WA 98203
U.S.A.

www.intermec.com

The information contained herein is proprietary and is provided solely for the purpose of allowing customers
to operate and service Intermec-manufactured equipment and is not to be released, reproduced, or used for
any other purpose without written permission of Intermec.

Information and specifications contained in this document are subject to change without prior notice and do
not represent a commitment on the part of Intermec Technologies Corporation.

© 2004 - 2005 by Intermec Technologies Corporation. All rights reserved.

The word Intermec, the Intermec logo, Norand, ArciTech, CrossBar, Data Collection Browser, dcBrowser,
Duratherm, EasyCoder, EasyLAN, Enterprise Wireless LAN, EZBuilder, Fingerprint, i-gistics, INCA (under
license), InterDriver, Intermec Printer Network Manager, IRL, JANUS, LabelShop, Mobile Framework,
MobileLAN, Nor*Ware, Pen*Key, Precision Print, PrintSet, RoutePower, TE 2000, Trakker Antares, UAP,
Universal Access Point, and Virtual Wedge are either trademarks or registered trademarks of Intermec
Technologies Corporation.

Wi-Fi is a registered certification mark of the Wi-Fi Alliance.

Microsoft, Windows, and the Windows logo are registered trademarks of Microsoft Corporation in the
United States and/or other countries.

Throughout this manual, trademarked names may be used. Rather than put a trademark (™ or ®) symbol in
every occurrence of a trademarked name, we state that we are using the names only in an editorial fashion,
and to the benefit of the trademark owner, with no intention of infringement.

There are U.S. and foreign patents pending.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit.
(www.opensssl.org/).

This product includes cryptographic software written by Eric Young ([e-mail]).

ii MobileLAN access WA2XG System Manual

Document Change Record

This page records changes to this document. The document was originally released as version 001.

Version Date Description of Change

002 07/2005 Added information about the new features of software release 3.01, including support for

dual 802.11g radios, wireless bridging, wireless hops, and antenna diversity.

MobileLAN access WA2X System Manual iii

iv MobileLAN access WA2XG System Manual

Contents

Getting Started............................................................................................................................... 1

1

Contents

Before You Begin.................................................................................................................xi

Safety Summary......................................................................................................xi

Safety Icons .......................................................................................................... xii

Global Services and Support................................................................................. xii

Who Should Read This Document? .................................................................... xiii

Related Documents ............................................................................................. xiii

Patent Information .............................................................................................. xiii

Overview of the MobileLAN access Products ...................................................................... 2

Features .................................................................................................................. 4

What’s New for Software Releases 3.01?................................................................. 5

Understanding the LEDs........................................................................................ 6

Understanding the Ports......................................................................................... 7

How the Access Point Fits in Your Network........................................................................ 9

Using One Access Point in a Simple Wireless Network .......................................... 9

Example - Configuring an 802.11g Access Point ..................................... 10

Using Multiple Access Points and Roaming Wireless End Devices ....................... 11

Example - Configuring an 802.11g Access Point with Roaming End

Devices................................................................................................ 12

Using an Access Point as a WAP........................................................................... 13

Example - Configuring an 802.11g WAP With Roaming End Devices ... 15

Using Access Points to Create a Point-to-Point Bridge ......................................... 16

Example - Configuring an 802.11g Bridge .............................................. 19

Using Dual Radio Access Points for Redundancy ................................................. 20

Configuring the Access Point (Setting the IP Address)....................................................... 21

Using the MobileLAN access Utility..................................................................... 21

Using a Communications Program....................................................................... 23

Using a Web Browser Interface............................................................................. 25

Using a Telnet Session.......................................................................................... 27

Setting the Clock.................................................................................................. 28

Saving Configuration Changes........................................................................................... 30

Using a Web Browser Interface............................................................................. 31

Using a Telnet Session.......................................................................................... 32

Installing the Access Points .................................................................................................. 33

2

Installation Guidelines....................................................................................................... 34

Microwave Ovens................................................................................................. 34

Cordless Telephones............................................................................................. 34

Other Access Points.............................................................................................. 35

MobileLAN access WA2XG System Manual

v

Contents

Installing the WA21G ....................................................................................................... 35

Connecting the WA21G to Your Wired LAN ...................................................... 36

Connecting the WA21G to Power........................................................................ 36

Installing the WA22G ....................................................................................................... 37

Connecting the WA22G to Your Wired LAN and Power..................................... 37

Connecting to Your Fiber Optic Network......................................................................... 38

Using and Purchasing the Required Patch Cord and Adapter ............................... 38

Connecting to an MT-RJ Network....................................................................... 39

Connecting to an SC Network ............................................................................. 40

Connecting to an ST Network.............................................................................. 41

Connecting Power Over Ethernet...................................................................................... 42

External Antenna Placement Guidelines ............................................................................ 43

Positioning Antennas for 802.11g Radios ............................................................. 44

Positioning Antennas for Dual Radio Access Points................................. 44

Positioning Stacked Antennas for Dual Radio Access Points.................... 45

About Antenna Diversity for 802.11g Radios .......................................... 46

3

4

Configuring the Ethernet Network .................................................................................. 47

Configuring the TCP/IP Settings ...................................................................................... 48

Using IPv6 Addresses............................................................................................ 50

Configuring the Access Point as a DHCP Client .................................................. 51

Configuring the Access Point as a DHCP Server .................................................. 53

Supported DHCP Server Options ........................................................... 56

Unsupported DHCP Server Options....................................................... 56

About Network Address Translation (NAT)............................................ 57

Configuring the Access Point to Send ARP Requests ............................................ 58

Configuring Other Ethernet or Fiber Optic Settings.......................................................... 58

Configuring the Ethernet Static Address Table ..................................................... 60

Configuring Ethernet Filters................................................................................. 61

Using Ethernet Received Frame Type Filters ........................................... 61

Using Predefined Received Subtype Filters .............................................. 63

Customizing Received Subtype Filters ..................................................... 64

Configuring Advanced Received Filters ................................................... 66

Configuring the Radios............................................................................................................ 75

Configuring the 802.11g Radio ......................................................................................... 76

Configuring Advanced Parameters........................................................................ 80

Configuring Inbound Filters................................................................................. 82

Applying Hot Settings .......................................................................................... 84

vi

MobileLAN access WA2XG System Manual

5

Contents

Configuring the Spanning Tree.......................................................................................... 85

About the Access Point Spanning Tree .............................................................................. 86

About the Primary LAN and the Root Access Point.............................................. 87

About Secondary LANs and Designated Bridges................................................... 88

About Ethernet Bridging/Data Link Tunneling.................................................... 89

About Routable and Non-Routable Network Protocols........................................ 91

Configuring the Spanning Tree Parameters ....................................................................... 91

About IP Tunnels .............................................................................................................. 94

Creating IP Tunnels ............................................................................................. 96

Using One IP Multicast Address for Multiple IP Tunnels .................................... 98

How Frames Are Forwarded Through IP Tunnels................................................ 99

Outbound Frames ................................................................................. 100

Inbound Frames .................................................................................... 100

Frame Types That Are Never Forwarded............................................... 101

Configuring IP Tunnels................................................................................................... 102

Configuring the IP Address List.......................................................................... 103

Configuring IP Tunnel Filters ............................................................................ 104

Using IP Tunnel Transmit Frame Type Filters...................................... 104

Using Predefined Transmit Subtype Filters............................................ 106

Customizing Transmit Subtype Filters .................................................. 107

6

Filter Examples................................................................................................................ 109

Example 1........................................................................................................... 110

Example 2........................................................................................................... 110

Example 3........................................................................................................... 111

Example 4........................................................................................................... 112

Comparing IP Tunnels to Mobile IP ............................................................................... 112

Configuring Global Parameters ....................................................................................... 113

Configuring Global Flooding ............................................................................. 113

Configuring Global RF Parameters..................................................................... 115

Configuring Security............................................................................................................... 119

Understanding Security ................................................................................................... 120

When You Configure Different SSIDs With Different Security Settings ............ 122

When You Include Multiple RADIUS Servers on the RADIUS Server List........ 123

Controlling Access to Access Point Menus....................................................................... 124

Enabling Access Methods ................................................................................... 124

Setting Up Logins............................................................................................... 126

Configuring the Access Point to Use a Password Server ......................... 127

Changing the Default Login .................................................................. 128

Creating a Secure Spanning Tree ..................................................................................... 130

MobileLAN access WA2XG System Manual

vii

7

Contents

Enabling Secure Communications Between Access Points and End Devices .................... 132

Using an Access Control List (ACL) ................................................................... 132

Configuring VLANs ........................................................................................... 134

Configuring WEP 64/128 Security..................................................................... 137

Implementing an 802.1x Security Solution......................................................... 139

Configuring the Access Point as an Authenticator.................................. 140

Enabling Secure Communications Between Access Points ..................... 142

Configuring Wi-Fi Protected Access (WPA) Security ......................................... 145

Configuring WPA - PSK Security.......................................................... 148

Configuring WPA - 802.1x Security...................................................... 149

Configuring the Embedded Authentication Server (EAS)................................ 151

About the Embedded Authentication Server (EAS).......................................................... 152

About Certificates............................................................................................................ 152

Understanding Which Access Points Need Certificates....................................... 153

Understanding Which Certificates Are Installed by Default................................ 153

Viewing the Certificates Installed on an Access Point.......................................... 154

Installing and Uninstalling Certificates............................................................... 154

8

Configuring the EAS ....................................................................................................... 156

Enabling the EAS ............................................................................................... 156

Configuring the Database................................................................................... 158

Using the Rejected List ....................................................................................... 159

Adding Entries to the Database.............................................................. 160

Clearing the Rejected List...................................................................... 161

Exporting and Importing Databases ................................................................... 161

Managing, Troubleshooting, and Upgrading Access Points .......................... 165

Managing the Access Points............................................................................................. 166

Using the Wavelink Avalanche Client Management System................................ 166

Configuring Your Access Points to Use Avalanche................................. 167

Managing Your Access Points Using Avalanche..................................... 168

Important Information When Using Avalanche..................................... 169

Using Simple Network Management Protocol (SNMP) ..................................... 170

Maintaining the Access Points ......................................................................................... 173

Viewing AP Connections.................................................................................... 173

Viewing AP Neighbors ....................................................................................... 176

Viewing Port Statistics........................................................................................ 177

Viewing DHCP Status ....................................................................................... 178

Viewing the Events Log ...................................................................................... 179

Viewing the About This Access Point Screen ...................................................... 180

Using the LEDs to Locate Access Points............................................................. 181

Restoring the Access Point to the Default Configuration .................................... 181

Using the MobileLAN access Utility...................................................... 181

Using the Web Browser Interface .......................................................... 182

viii

MobileLAN access WA2XG System Manual

Contents

Troubleshooting the Access Points................................................................................... 183

Using the Configuration Error Messages ............................................................ 183

Calling Intermec Technical Support................................................................... 187

Troubleshooting With the LEDs ........................................................................ 188

General Troubleshooting.................................................................................... 189

Troubleshooting the Radios................................................................................ 191

Using LEDs........................................................................................... 191

Using a Communications Program or a Telnet Session.......................... 192

Using Radio MAC Ping ........................................................................ 192

Using ICMP Echo................................................................................. 194

Troubleshooting Security.................................................................................... 195

Viewing the Security Events Log............................................................ 195

Exporting the Security Events Log......................................................... 196

General Security Troubleshooting ......................................................... 197

Recovering a Failed Access Point ........................................................................ 197

Using the MobileLAN access Utility...................................................... 198

Using a Windows NT4/2000/XP PC .................................................... 199

Upgrading the Access Points............................................................................................ 200

Using the MobileLAN access Utility................................................................... 201

Using a Web Browser Interface........................................................................... 203

Troubleshooting the Upgrade............................................................................. 204

9

Additional Access Point Features.................................................................................... 205

Configuring and Managing the Telnet Gateway Appliance (TGAP)................................ 206

Using the Instant On Server (EasyADC Only) ................................................................ 209

Verifying the Instant On Server is Enabled ......................................................... 209

Accessing the Memory Card ............................................................................... 209

Understanding Transparent Files..................................................................................... 210

Using the AP Monitor ..................................................................................................... 210

Entering the AP Monitor.................................................................................... 210

Using AP Monitor Commands........................................................................... 211

Using Content Addressable Memory (CAM) Mode Commands......................... 212

Using Test Mode Commands............................................................................. 213

Using Service Mode Commands......................................................................... 214

Using Command Console Mode ..................................................................................... 217

Entering Command Console Mode.................................................................... 217

Using the Commands......................................................................................... 218

Using TFTP Commands .................................................................................... 219

Using sdvars Commands .................................................................................... 223

Creating Script Files ........................................................................................................ 227

Copying Files To and From the Access Point .................................................................. 229

MobileLAN access WA2XG System Manual

ix

A

B

Contents

Specifications.............................................................................................................................. 231

Specifications................................................................................................................... 232

802.11g Radio Specifications (Actiontec P/N 0832-0040-000) ....................................... 234

Antennas and Antenna Accessories................................................................................... 235

Default Settings ......................................................................................................................... 237

Default Settings ............................................................................................................... 238

TCP/IP Settings Menu Defaults......................................................................... 238

IPv6 Configuration Menu Defaults .................................................................... 239

DHCP Server Setup Menu Defaults................................................................... 239

802.11g Radio Menu Defaults............................................................................ 239

Spanning Tree Settings Menu Defaults............................................................... 241

Global Flooding Menu Defaults............................................................ 241

Global RF Parameters Menu Defaults ................................................... 242

Telnet Gateway Configuration Menu Defaults ................................................... 243

Ethernet Configuration Menu Defaults .............................................................. 243

Ethernet Received Filters Menu Defaults............................................... 243

IP Tunnels Menu Defaults ................................................................................. 245

IP Tunnel Transmit Filters Menu Defaults............................................ 245

Network Management Menu Defaults................................................................ 246

Instant On Menu Defaults .................................................................... 246

SNMPv3 Menu Defaults....................................................................... 246

Security Menu Defaults ...................................................................................... 247

Passwords Menu Defaults...................................................................... 247

802.11g Radio Security Menu Defaults ................................................. 247

RADIUS Server List Menu Defaults...................................................... 248

Spanning Tree Security Menu Defaults ................................................. 249

Embedded Authentication Server Menu Defaults .................................. 249

Glossary .......................................................................................................................................... 251

G

Index................................................................................................................................................. 261

I

x

MobileLAN access WA2XG System Manual

Before You Begin

This section provides you with safety information, technical support
information, and sources for additional product information.

Safety Summary

Your safety is extremely important. Read and follow all warnings and
cautions in this document before handling and operating Intermec
equipment. You can be seriously injured, and equipment and data can be
damaged if you do not follow the safety warnings and cautions.

Do not repair or adjust alone

Do not repair or adjust energized equipment alone under any
circumstances. Someone capable of providing first aid must always be
present for your safety.

First aid

Always obtain first aid or medical attention immediately after an injury.
Never neglect an injury, no matter how slight it seems.

Before You Begin

Resuscitation

Begin resuscitation immediately if someone is injured and stops breathing.
Any delay could result in death. To work on or near high voltage, you
should be familiar with approved industrial first aid methods.

Energized equipment

Never work on energized equipment unless authorized by a responsible
authority. Energized electrical equipment is dangerous. Electrical shock
from energized equipment can cause death. If you must perform
authorized emergency work on energized equipment, be sure that you
comply strictly with approved safety regulations.

MobileLAN access WA2XG System Manual

xi

Before You Begin

Safety Icons

This section explains how to identify and understand warnings, cautions,
and notes that are in this document.

A warning alerts you of an operating procedure, practice, condition,
or statement that must be strictly observed to avoid death or serious
injury to the persons working on the equipment.

A caution alerts you to an operating procedure, practice, condition, or
statement that must be strictly observed to prevent equipment damage
or destruction, or corruption or loss of data.

Note: Notes either provide extra information about a topic or contain

special instructions for handling a particular condition or set of
circumstances.

Global Services and Support

Warranty Information

To understand the warranty for your Intermec product, visit the Intermec
web site at www.intermec.com and click Service & Support. The
Intermec Global Sales & Service page appears. From the Service &

Support menu, move your pointer over Support, and then click
Warranty.

Disclaimer of warranties: The sample code included in this document is
presented for reference only. The code does not necessarily represent
complete, tested programs. The code is provided “as is with all faults.” All
warranties are expressly disclaimed, including the implied warranties of
merchantability and fitness for a particular purpose.

Web Support

Visit the Intermec web site at www.intermec.com to download our current
manuals in PDF format. To order printed versions of the Intermec
manuals, contact your local Intermec representative or distributor.

Visit the Intermec technical knowledge base (Knowledge Central) at
intermec.custhelp.com to review technical information or to request
technical support for your Intermec product.

Telephone Support

You can find information on Intermec telephone support services on the
Intermec web site at www.intermec.com/AIT. To find the correct
telephone support number for your country, click Contact.

xii

MobileLAN access WA2XG System Manual

Who Should Read This Document?

This manual is for the people who are responsible for installing, operating,
configuring, maintaining, and troubleshooting the MobileLAN access
WA21G and WA22G products. It also provides information about the
features of the WA21G and WA22G, the specifications and the default
configuration.

Before you install and configure an access point, you should be familiar
with your network and general networking terms, such as IP address.

Related Documents

The Intermec web site at www.intermec.com contains many of our
documents that you can download in PDF format.

To order printed versions of the Intermec manuals, contact your local
Intermec representative or distributor.

Patent Information

Before You Begin

Product is covered by one or more of the following patents: 4,910,794;
5,070,536; 5,295,154; 5,349,678; 5,394,436; 5,425,051; 5,428,636;
5,483,676; 5,504,746; 5,546,397; 5,574,979; 5,592,512; 5,680,633;
5,682,299; 5,696,903; 5,740,366; 5,790,536; 5,844,893; 5,862,171;
5,940,771; 5,960,344.

There may be other U.S. and foreign patents pending.

MobileLAN access WA2XG System Manual

xiii

Before You Begin

xiv

MobileLAN access WA2XG System Manual

Getting Started

1

This chapter introduces the MobileLAN™access WA2XG family of access
points, explains their features, and describes how you can use them to
expand your data collection network. This chapter covers these topics:

• Overview of the MobileLAN access products

• How the access point fits in your network

• Configuring the access point for the first time

• Saving configuration changes

MobileLAN access WA2XG System Manual 1

Chapter 1 — Getting Started

Overview of the MobileLAN access Products

Intermec’s MobileLAN™access WA2XG family of access points delivers
reliable and seamless wireless performance to almost any operational
environment. They are designed for standards-based connectivity and they
support industry standard IEEE 802.11g and 802.11b wireless
technologies.

The WA21G and WA22G with an IEEE 802.11g radio installed are
Wi-Fi certified for interoperability with other 802.11g and 802.11b
wireless LAN devices.

The access point can be configured as an access point, a wireless access
point (WAP), a point-to-point bridge, or a point-to-multipoint bridge.
Normally, an access point is connected to a wired local area network
(LAN) and provides network access for wireless end devices.

A WAP is not connected to a wired LAN; it receives data from wireless
end devices and forwards the data to an access point (that is connected to
the wired LAN). A WAP is useful in areas that do not support a wired
network connection.

A point-to-point bridge connects two wired LANs and is often used to
provide wireless communications in locations where running cable is
difficult, such as across roads or between buildings. A point-to-multipoint
bridge not only connects two wired LANs, but also communicates with
wireless end devices.

2 MobileLAN access WA2XG System Manual

Chapter 1 — Getting Started

Management and Configuration

MIB

DHCP

TCP/IP

TFTP

File

System

RS-232 Connector

HTTP

Configuration Port

SNMP

Agent

Telnet

Configuration

Settings

Forwarding

Database

Ethernet

Por t

Ethernet

Connector

Multiport Bridge

Spanning

Tree

Bridging

Radio

Por t 1

Antenna

Connectors

Connectors

Wireless ARP

Server

Radio

Por t 2

Antenna

IP

Por t

21XXT034.eps

On the left, this illustration shows the ways you can manage and configure the access point, and on the right,
it shows the access point’s general multiport bridge architecture.

Access points are multiport (Ethernet-to-wireless) bridges, and because
wireless end devices operate similarly to other Ethernet devices, all your
existing Ethernet applications will work with the wireless network without
any special networking software. Any access point, except the root access
point, can concurrently receive hello messages on its Ethernet port, its
radio port, and its IP tunnel port. However, an access point can use only
one port to attach to the network. Port priorities are structured as follows:

1 Ethernet

2 IP tunnel

3 Radio

Unlike the physical Ethernet and radio ports, the IP tunnel port does not
have its own output connector. It is a logical port that provides IP
encapsulation services for frames that must be routed to reach their
destinations. Once frames are encapsulated, they are transmitted or
received through the Ethernet or radio port.

Wireless end devices may use power management to maintain battery life.
These end devices periodically wake up to receive frames that arrived while
their radio was powered down. The access point automatically provides a
pending message delivery service that holds frames until the end device is
ready to receive them.

MobileLAN access WA2XG System Manual 3

Chapter 1 — Getting Started

Features

This table lists the features of the MobileLAN access WA2XG products.

MobileLAN access Feature Comparison

Feature WA21G WA22G

Access Point Yes Yes

Point-to-Point Bridge (Wireless Bridge) Yes Yes

Wireless Access Point (WAP) or Repeater Yes Yes

Secure Wireless Hops (SWAP) Yes Yes

Secure Wireless Hops (TLS or TTLS) Yes Yes

Radios 802.11g* 802.11g*

Dual Radio Support Yes Yes

Wi-Fi Compliant Yes Yes

Wi-Fi Protected Access (WPA) for

802.1x mode or PSK mode.

802.1x Authenticator Yes Yes

802.1x Authentication Server Yes Yes

Access Control List (ACL) Server Yes Yes

Password Server Yes Yes

Secure Web Browser Interface (HTTPS) Yes Yes

10BaseT/100BaseTx Yes Yes

Fiber Optics Yes Yes

Serial Port Yes Yes

Data Link Tunneling Yes Yes

IP Tunneling Yes** Yes**

Antenna Diversity Yes Yes

Non-incentive Antenna System Yes Yes

NEMA 4/IP 54 Protection Yes No

Power Supply AC No

Power Over Ethernet Yes Yes

Heater Option Yes No

*The 802.11g radio is sometimes referred to as the 802.11b/g radio because it can
be configured to communicate with any 802.11b and 802.11g radios that have the
same SSID and security settings.

Yes Yes

**If you are using IPv6 addressing, IP tunneling is not supported.

4 MobileLAN access WA2XG System Manual

Other features of all access points include:

• the ability to be managed by the Wavelink Avalanche client
management system, MobileLAN manager, a web browser, telnet, and
SNMP.

• the ability to be a DHCP server or client and a NAT server.

• the ability to be an ARP server.

• easy software distribution.

• advanced filtering of wired data traffic.

• enhanced power management for wireless end devices.

• fast roaming reliability for wireless end devices.

• basic WEP security for 802.11g radios.

What’s New for Software Releases 3.01?

Antenna diversity: The 802.11g radio now supports antenna diversity.

Chapter 1 — Getting Started

Support for dual 802.11g radios: The WA2XG now supports two

802.11g radios. An access point requires two radios before it can do point-

to-multipoint bridging and wireless hops.

Wireless bridging and wireless hops: The WA2XG with two radios now
supports wireless bridging and wireless hops.

Important Note: With this software release, a WA2XG can bridge a
primary LAN to a secondary LAN. If the designated bridge on the
secondary LAN has two radios, it can also communicate with wireless end
devices. However, even if the designated bridge has two radios, it cannot
bridge to another LAN. If you need the secondary LAN to bridge to
another secondary LAN, you must use another access point. For more
information, see Chapter 5, “Configuring the Spanning Tree.”

MobileLAN access WA2XG System Manual 5

Chapter 1 — Getting Started

Understanding the LEDs

The WA21G and WA22G have five LEDs. To understand the LEDs
during normal use, see the next table. To use the LEDs to help
troubleshoot the radios, see “Troubleshooting the Radios” on page 191.

LED Descriptions

Icon LED Description

Power Remains on when power is applied.

Wireless #1 Blinks when a frame is transmitted or received on the radio

Wireless #2 Blinks when a frame is transmitted or received on the radio

Wired LAN Blinks when a frame is transmitted or received on the

Intermec
Ready-to­Work™
Indicator

port for the radio installed in radio slot 1.

port for the radio installed in radio slot 2 (if a second radio is
installed).

Ethernet port.

Indicates the operational status of the access point. This blue
LED can be off, blinking, or on:

Off indicates that the access point is not operational or that it
has not been booted.

Blinking indicates that the access point is searching for the
root access point in the system.

On indicates that the access point either has found a root
access point or it has become the root access point. The access
point is now ready for use in your Intermec network.

Note: In the Spanning Tree Settings screen, you can
configure this LED to behave as if it were a Root/error LED.

Intermec

Wireless#1Wireless

Power

#2

Wired LAN

WA21G LEDs: This illustration shows the LEDs that are on the WA21G. For help
understanding these LEDs, see the LED Descriptions table on this page.

6 MobileLAN access WA2XG System Manual

Ready-to-Work
Indicator

Chapter 1 — Getting Started

Power

Wireless #1

Wireless #2

Wired LAN

WA22G LEDs: This illustration shows the LEDs that are on the WA22G. For help
understanding these LEDs, see the LED Descriptions table on the previous page.

Intermec

Ready-to-Work

Indicator

Understanding the Ports

The access point may have up to four ports.

Port Descriptions

Port Description

Power
(Not WA22G)

Serial Used with an RS-232 null-modem cable, this port connects the

Ethernet 10BaseT/100BaseTx port. Used with an appropriate cable, this

Fiber optic 100BaseFX port. You must use a patch cable with a female

To access the ports on the WA21G, you must remove the cable access
door.

Used with an appropriate power cable, this port connects the
access point to an AC power source.

access point to a terminal or PC to perform configuration.

port connects the access point to your Ethernet network. The
access point auto-negotiates with the device it is
communicating with so that the data rate is set at the highest
rate at which both devices can communicate.

MT-RJ connector to connect the access point to your MT-RJ,
SC, or ST fiber optic network.

MobileLAN access WA2XG System Manual 7

Chapter 1 — Getting Started

To remove the WA21G cable access door

1 Unscrew the two thumbscrews on the cable access door.

2 Remove the door.

Cable
access
door

Power port
(optional)

10BaseT/
100BaseTx

WA21G ports: This illustration shows the ports that are on the WA21G. For help
understanding these ports, see the Port Descriptions table on the previous page.

Ethernet port

Serial
port

Fiber optic
port

The WA22G ports are located on the bottom of the access point.

10BaseT/100BaseTx
Ethernet port

Fiber optic
port

WA22G ports: This illustration shows the ports that are on the WA22G. For help
understanding these ports, see the Port Descriptions table on the previous page.

Serial port

For more information on connecting the ports, see Chapter 2, “Installing
the Access Points.”

8 MobileLAN access WA2XG System Manual

How the Access Point Fits in Your Network

In general, the access point forwards data from wireless end devices to the
wired Ethernet network. Since both the WA21G and the WA22G have
two radios, you can also use them as point-to-multipoint bridges or as
WAPs.

Use the access point in the following locations and environments.

Which Access Point to Use for Your Environment

Access Point Environment

WA21G Use in locations where an access point is exposed to extreme

environments.

WA22G Use in most indoor environments.

The access point supports a variety of network configurations. These
configurations are explained in the next sections:

• Using One Access Point in a Simple Wireless Network (on page 9)

Chapter 1 — Getting Started

• Using Multiple Access Points and Roaming Wireless End Devices
(on page 11)

• Using an Access Point as a WAP (on page 13)

• Using Access Points to Create a Point-to-Point Bridge (on page 16)

• Using Dual Radio Access Points for Redundancy (on page 20)

Using One Access Point in a Simple Wireless Network

You can use an access point to extend your existing Ethernet network to
include wireless end devices. The access point connects directly to your
wired network and the end devices provide a wireless extension of the
wired LAN.

Host

Access
point

This illustration shows a simple wireless network with one access point and some
wireless end devices.

MobileLAN access WA2XG System Manual 9

Ethernet

Chapter 1 — Getting Started

In a simple wireless network, the access point that is connected to the
wired network serves as a transparent bridge between the wired network
and wireless end devices.

To install a simple wireless network

1 Configure the initial IP address. For help, see “Configuring the Access

Point” on page 21.

2 Install the access point. For help, see Chapter 2, “Installing the Access

Points.”

3 Configure the Ethernet network. For help, see Chapter 3, “Configuring

the Ethernet Network.”

4 Configure the radios. For help, see Chapter 4, “Configuring the

Radios.”

5 Decide what level of security you want to implement in your network.

For help, see Chapter 6, “Configuring Security.”

Example - Configuring an 802.11g Access Point

Host

Access
point

In this example, there is one 802.11g radio in the access point. Wireless end devices use
the access point to communicate with the host and other end devices.

Ethernet

Configuring 802.11g Access Point Parameters

Screen Parameter Access Point

802.11g Radio Node Type Master

SSID (Network Name) Manufacturing

Spanning Tree Settings Root Priority 5

Ethernet Bridging Enabled Checked

Intermec recommends that you always implement some type of security.

10 MobileLAN access WA2XG System Manual

Chapter 1 — Getting Started

Using Multiple Access Points and Roaming Wireless End Devices

For larger or more complex environments, you can install multiple access
points so wireless end devices can roam from one access point to another.
Multiple access points establish coverage areas or cells similar to those of a
cellular telephone network. End devices can connect with any access point
that is within range and belongs to the same wireless network.

Host

Ethernet

This illustration shows a wireless network with multiple access points. Wireless end
devices can roam between the access points to communicate with the host and other
end devices.

An end device initiates a roam when it attaches to a new access point. The
access point sends an attach message to the root access point, which in turn
forwards a detach message to the previous access point, allowing each
access point to update its forwarding database. Intermediate access points
monitor these exchanges and update their forwarding databases.

With the access point’s multichannel architecture, you can have more than
one access point within the same cell area to increase throughput and
provide redundancy. For more information, see “Using Dual Radio Access
Points for Redundancy” on page 20.

To install multiple access points with roaming end devices

1 Follow the instructions for installing a simple wireless network on page

9.

2 Configure the LAN ID. For help, see “Configuring the Spanning Tree

Parameters” on page 91.

3 Configure one of the access points to be a root access point. For help,

see “About the Primary LAN and the Root Access Point” on page 87.

MobileLAN access WA2XG System Manual 11

Chapter 1 — Getting Started

4 If your network has a switch that is not IEEE 802.1d-compliant and is

located between access points, configure data link tunneling. For help,
see “About Ethernet Bridging/Data Link Tunneling” on page 89.

Example - Configuring an 802.11g Access Point with Roaming End
Devices

Host

AP2

Ethernet

AP1

In this example, there is one 802.11g radio in each access point. Wireless end devices
can roam between the access points to communicate with the host and other end
devices.

AP3

Configuring 802.11g Access Points Parameters

Screen

802.11g
Radio

SSID Op3rat!ons Op3rat!ons Op3rat!ons

Spanning
Tree Settings

Root Priority 5 4 3

Ethernet Bridging

Secondary LAN

Parameter

Node Type Master Master Master

LAN ID 0 0 0

Enabled

Bridge Priority

AP1

802.11g
Radio (Root)

Checked Checked Checked

0 0 0

AP2

802.11g
Radio

AP3

802.11g
Radio

The access points communicate with each other through the spanning tree.
The wireless end devices are configured as stations with LAN ID set to 0
and SSID set to Op3rat!ons.

12 MobileLAN access WA2XG System Manual

Using an Access Point as a WAP

You can extend the range of your wireless network by configuring an
access point with two 802.11g radios as a wireless access point (WAP).
The WAP and the wireless end devices it communicates with comprise a
secondary LAN. You can position WAPs in strategic locations so they
receive data from end devices and then forward the data to the wired
network. This configuration can be useful when distance or physical layout
impedes radio reception and transmission.

Host

Chapter 1 — Getting Started

Access
point

WAP

Ethernet

This illustration shows a simple wireless network with one WAP. Wireless end devices
use the WAP to forward data to the access point, which forwards data to the host. If you
do not want end devices to be able to roam to the access point, use a different SSID for
the access point master radio and the WAP station radio.

WAPs send data from end devices to the access points via wireless hops.
Wireless hops are formed when data from end devices move from one
access point to another access point through the radio ports. The master
radio in the access point transmits hello messages, which allow the WAPs
to attach to the spanning tree in the same way as access points.

WAPs must be on the same IP subnet as the access point. Also, data from
wireless end devices should not go through more than three wireless hops
before it gets to an access point on the primary LAN.

The following procedure explains how to install a simple wireless network
with a WAP and no roaming end devices. For help installing a simple
wireless network with a WAP and roaming end devices, see the two
examples in the next sections.

To install a simple wireless network with a WAP and no roaming end devices

1 Follow the instructions for installing a simple wireless network on page

9.

2 Configure the LAN ID. For help, see “Configuring the Spanning Tree

Parameters” on page 91.

3 Configure the station radio in the WAP to communicate with one of

the master radio service sets in the access point:

a In the Navigation Menu, click the link corresponding to the station

MobileLAN access WA2XG System Manual 13

radio. The radio screen appears.

Chapter 1 — Getting Started

b In the Primary service set Node Type field, choose Station.

c In the Primary service set SSID (Network Name) field, type the

SSID that matches the SSID of the access point radio service set
(Step 1). In this example, the SSID is Manufacturing.

d Click Submit Changes to save your changes. The screen updates.

4 Configure a WAP master radio service set to communicate with the end

device radios.

Note: If you do not want the end devices to be able to roam to the
access point, you must configure the WAP master radio service set and
the end device radios with a unique SSID.

a In the Navigation Menu, click the link corresponding to the WAP

master radio. The radio screen appears.

b In the Frequency field, choose the radio frequency of your wireless

c In the Primary service set Node Type field, choose Master.

14 MobileLAN access WA2XG System Manual

network.

Chapter 1 — Getting Started

d In the Primary service set SSID (Network Name) field, type the

SSID that matches the SSID of the end device radios. In this
example, the SSID is Manufacturing.

e Click Submit Changes to save your changes.

5 Configure the access point to be a root access point. For help, see

“About the Primary LAN and the Root Access Point” on page 87.

6 Click Submit Changes to save your changes. To activate your changes,

in the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

Example - Configuring an 802.11g WAP With Roaming End Devices

Host

Access
point

WAP

Ethernet

In this example, there is one 802.11g radio in the access point and there are two 802.11g
radios (802.11g Radio-1 and 802.11g Radio-2) in the WAP. Wireless end devices can
roam between the WAP and the access point.

Configuring the 802.11g Access Point and WAP Parameters

Screen

Spanning Tree
Settings

Parameter

Node Type Master Master Station 802.11g Radio

SSID Manufacturing Manufacturing Manufacturing

LAN ID 11 11 11

Root Priority 5 0 (not applicable)

Ethernet Bridging Enabled Checked Checked (not applicable)

Access Point

802.11g

WAP

802.11g Radio-1

WAP

802.11g Radio-2

You need to configure the wireless end devices to have the same SSID
(Manufacturing), LAN ID (11), and frequency as the WAP master radio
(802.11g Radio-1). You do not need to configure any secondary LAN
settings because the WAP is not connected to a secondary LAN.

Intermec recommends that you always implement some type of security.

MobileLAN access WA2XG System Manual 15

Chapter 1 — Getting Started

Using Access Points to Create a Point-to-Point Bridge

You can use access points to create a point-to-point bridge between two
wired LANs. That is, you can have one access point wired to a primary
LAN in one building and have a second access point wired to a secondary
LAN in another building. This configuration lets wired and wireless end
devices in both buildings communicate with each other, which can be
useful in a campus environment or any other environment where
pavement or other objects prevent installation of a wired link.

Primary LAN

Host

Root

Designated
bridge

This illustration shows two simple wireless networks that are connected with access
points that are acting as point-to-point bridges.

Secondary LAN

Point-to-point bridges send data from end devices on the secondary LAN
to the root access point via wireless hops. Wireless hops are formed when
data from end devices move from one access point to another access point
through the radio ports. The master radio in the point-to-point bridge on
the primary LAN transmits hello messages, which allow the bridge on the
secondary LAN to attach to the spanning tree in the same way as access
points.

How many radios do you need in each access point?

• If you have an 802.11g network and the access points are simply acting
as point-to-point bridges, each access point only needs one radio.

• If you have an 802.11g network and you want the designated bridge to
also communicate with wireless end devices (point-to-multipoint), the
designated bridge must have two radios. The designated bridge master
radio must match the end device radios, and the station radio must
match the root master radio.

Important Note: Currently, a designated bridge cannot bridge to
another secondary LAN. If it has two radios, it can communicate to a
WAP or wireless end devices. If you need to bridge to another
secondary LAN, you must use two access points.

16 MobileLAN access WA2XG System Manual

Chapter 1 — Getting Started

Note: Data from wireless end devices should not go through more than
three wireless hops before it gets to an access point on the primary LAN.

You need to set the root priorities and secondary LAN bridge priorities for
the bridge on the primary LAN and for the bridge on the secondary LAN:

• On the primary LAN bridge, set the root priority to a number that is
greater than the root priority of the secondary LAN bridge. The access
points will not form a point-to-point bridge if the primary LAN bridge
has a lower root priority than the secondary LAN bridge.

• On the secondary LAN bridge, set the root priority to 0 and the
secondary LAN bridge priority to a number other than 0.

You may also need to adjust the flooding parameters. Here are some
recommendations:

• If there are no end devices on the secondary LAN, the bridge on the
secondary LAN can use the default flooding settings. The Secondary
LAN Flooding parameter is disabled.

• If there are end devices on the secondary LAN, the bridge on the
secondary LAN should have Secondary LAN Flooding parameter set to
Multicast. If you also want unicast flooding, you can set this parameter
to Enabled.

• If there are end devices on the secondary LAN and the end devices
communicate with end devices on another secondary LAN, the root
access point should have its Multicast Flooding parameter set to
Universal. This setting ensures that all ARP requests and multicast
traffic is distributed through a second or third hop.

To install a point-to-multipoint bridge

1 Follow the instructions for installing a simple wireless network on page

9.

2 Configure the LAN ID. For help, see “Configuring the Spanning Tree

Parameters” on page 91.

3 Configure one of the master radio service sets in the designated bridge

on the secondary LAN to communicate with the end device radios.

4 Configure the station radio in the designated bridge to communicate

with one of the master radio service sets in the point-to-point bridge on
the primary LAN.

a In the Navigation Menu, click the link corresponding to the station

MobileLAN access WA2XG System Manual 17

radio. The radio screen appears.

Chapter 1 — Getting Started

b In the Primary service set Node Type field, choose Station.

c In the Primary service set SSID (Network Name) field, type the

SSID that matches the SSID of the root access point radio service set
(Step 1). In this example, the SSID is Manufacturing.

d Click Submit Changes. The screen updates.

5 Configure the spanning tree settings for the designated bridge:

a In the Navigation Menu, click Spanning Tree Settings. The

Spanning Tree Settings screen appears.

b In the Root Priority field, enter 0.

c In the Secondary LAN Bridge Priority field, enter a number other

than 0.

d In the Secondary LAN Flooding field, choose Enabled.

6 Click Submit Changes to save your changes. To activate your changes,

in the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

18 MobileLAN access WA2XG System Manual

Chapter 1 — Getting Started

7 Configure the spanning tree settings for the point-to-point bridge on

the primary LAN:

a In the Navigation Menu, click Spanning Tree Settings. The

Spanning Tree Settings screen appears.

b In the Root Priority field, enter a number other than 0.

c In the Secondary LAN Bridge Priority field, enter 0.

d In the Secondary LAN Flooding field, choose Disabled.

8 Click Submit Changes to save your changes. To activate your changes,

in the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

Example - Configuring an 802.11g Bridge

Primary LAN

Host

Root

Designated
bridge

In this example, each access point only has one 802.11g radio. Since the designated
bridge only has a station radio, wireless end devices can only communicate with the
root access point. However, wired devices on the secondary LAN can communicate with
the primary LAN.

Secondary LAN

MobileLAN access WA2XG System Manual 19

Chapter 1 — Getting Started

Configuring 802.11g Point-to-Point Bridges Parameters

Screen

Spanning Tree
Settings

Parameter

Node Type Master Station 802.11g Radio

SSID Manufacturing Manufacturing

LAN ID 0 0

Root Priority 5 0

Ethernet Bridging
Enabled

Secondary LAN
Bridge Priority

Secondary LAN
Flooding

Intermec recommends that you always implement some type of security.

Using Dual Radio Access Points for Redundancy

During normal operations, end devices send frames to the master radio in
one of the access points, which bridges the frames to the wired network. If
a section of the wired network goes down, the master radio receives the
frames, and then the station radio forwards the frames to a master radio in
another access point that is within range.

Bridge
Primary LAN
(Root)

Checked Checked

0 1

Disabled Enabled

Bridge
Secondary LAN
(Designated Bridge)

In each access point, you need to configure one radio’s node type as a
Master, which communicates with the wireless end devices, and configure
the other radio’s node type as a Station, which communicates to another
access point with a master radio and within range.

Host

AP1 AP3

In this example, AP3 is a dual radio access point. It may be located on a loading dock or
other remote location. During normal operations, AP3 functions as a normal access
point, transmitting frames to and from the host. However, if the Ethernet connection is
disrupted, AP3 can function as a WAP and continue operations by transmitting frames
to a master radio in AP1. AP3 must be within range of AP1.

Ethernet

20 MobileLAN access WA2XG System Manual

Chapter 1 — Getting Started

To install dual radio access points for redundancy

• Follow the instructions for installing a simple wireless network with a
WAP on page 13.

Configuring the Access Point (Setting the IP Address)

The access point will work out of the box if you are using a DHCP server
to assign it an IP address. By default, the access point is configured to be a
DHCP client and will respond to offers from any DHCP server. However,
if you are not using a DHCP server to assign an IP address, you can use:

• the MobileLAN access Utility v2.0 (or later), but you need to know the
access point MAC address. You can download this utility from the
Intermec web site. This utility must be installed on a PC that is on the
same Ethernet segment and subnet as (or must be communicating
wirelessly with) the access point. For help, see the next section, “Using
the MobileLAN access Utility.”

• a communications program, such as HyperTerminal, which also
configures other parameters. This program must be installed on a PC
with an open serial port. For help, see “Using a Communications
Program” on page 23.

This manual assumes that you are using the MobileLAN access Utility or a
communications program for your initial configuration, and then using a
web browser interface to perform all other configurations. You can also
continue to use a communications program or you can start a telnet
session to configure the access point.

Using the MobileLAN access Utility

Note: If you are setting an IPv6 address, you must use a communications
program. For help, see “Using a Communications Program” on page 23.

The MobileLAN access Utility is an easy-to-use Microsoft® Windows™-
based utility that lets you:

• set the initial IPv4 address for the access point. This utility eliminates
the need to serially connect a PC to the access point to configure an IP
address.

• restore the access point settings to factory defaults. For help, see the
online help and “Restoring the Access Point to the Default
Configuration” on page 181.

• recover a failed access point. For help, see the online help and
“Recovering a Failed Access Point” on page 197.

• upgrade the access point software. For help, see the online help and
“Upgrading the Access Points” on page 200.

MobileLAN access WA2XG System Manual 21

Chapter 1 — Getting Started

After you configure the IP address, you can use a web browser or a telnet
session to complete the configuration.

To use the MobileLAN access Utility, you must have a PC that is running
Windows 95-OSR2/98SE/ME or Windows NT4/2000/XP.

Note: You need to install the MobileLAN access Utility on a PC that is on
the same IP subnet as the access point. Or you can install it on a PC that is
communicating wirelessly (configured to Intermec’s default radio settings)
to the access point. Before you use the utility, you must have an active
radio connection.

To use the MobileLAN access Utility

1 Use a web browser to navigate to www.intermec.com. From the Service

& Support menu, click Downloads. Choose Wireless: MobileLAN
access Utility to download the MobileLAN access Utility.

2 Extract the .zip file, double-click the .exe file, and then follow the

instructions that appear on your screen.

3 Start the utility. The MobileLAN access Utility main screen appears.

4 In the Select Task field, choose Set IP Address.

5 In the New IP Address field, enter the IP address.

6 In the Ethernet MAC Address field, enter the MAC address of the

access point. This address is located on the bottom of the access point.

7 Connect the access point to power. The access point has no On/Off

switch, so it boots as soon as you apply power.

8 Immediately click Set. The Status box lets you know when the IP

address has been set.

9 To continue configuring the access point using a web browser, from the

Actions menu choose Configure Access Point, and then enter the new
IP address of this access point.

Or, to close the utility, from the File menu choose Exit.

22 MobileLAN access WA2XG System Manual

For more help using the utility, from the Help menu choose Contents.

You are now ready to install the access point in your network. See
Chapter 2, “Installing the Access Points.”

Using a Communications Program

You can use a communications program (such as HyperTerminal) to set
the initial IPv4 or an IPv6 address for the access point. After you configure
the IP address, you can continue to use the communications program to
set other parameters or you can use a web browser or a telnet session to
complete the configuration.

To use a communications program, you must have

• a terminal or PC with an open serial port and the communications
program.

• an RS-232 null-modem cable. One end of this cable must be a 9-pin
socket connector to connect to the serial port on the access point.
Intermec offers a 9-socket to 9-socket null-modem cable (P/N 059167).
To order this cable, contact your local Intermec representative.

Chapter 1 — Getting Started

To use a communications program

1 Use the RS-232 null-modem cable to connect the serial port on the

access point to a serial port on your PC. You may need to remove the
serial port plug.

2 Start the communications program and configure the serial port

communications parameters on your PC, and then click OK. You
should configure the serial port communications parameters to:

Bits per second 9600

Data bits 8

Parity None

Stop bit 1

Flow control None

3 Connect the access point to power. The access point has no On/Off

switch, so it boots as soon as you apply power.

MobileLAN access WA2XG System Manual 23

Chapter 1 — Getting Started

4 Press Enter when the message “Starting system” appears on your PC

screen. The Username field appears.

5 In the Username field type the default user name Intermec, and then

press Enter. The user name is case sensitive.

6 In the Password field type the default password Intermec, and then press

Enter. The password is case sensitive. The Access Point Configuration
menu appears.

7 Press Enter to access the TCP/IP Settings menu.

8 If you are not using a DHCP server, you need to manually assign an IP

address. Configure these parameters in the TCP/IP Settings menu:

IP Address A unique IPv4 or IPv6 address.

IP Subnet Mask The subnet mask that matches the other devices in your

network.

IP Router (Gateway) If the access point will communicate with devices on

another subnet, enter the address of the router that will
forward frames.

24 MobileLAN access WA2XG System Manual

Or, if you are using a DHCP server to automatically assign an IP
address to your access point, configure these parameters in the TCP/IP

Settings menu:

DHCP Mode Set to <Use DHCP if IP Address is Zero>.

DHCP Server Name The name of the DHCP server that the access point is to

9 Press Esc to return to the Access Point Configuration menu.

10 Choose Save Configuration.

11 Choose Reboot.

When the access point is done rebooting, you are ready to install the access
point in your network. See Chapter 2, “Installing the Access Points.”

Using a Web Browser Interface

After you have set the initial IP address, you can configure, manage, and
troubleshoot the access point from a remote location using a web browser
interface. The web browser interface has been tested using Internet
Explorer. Remotely accessing the access point using other browsers may
provide unpredictable results. When using the web browser interface, keep
the following points in mind:

Chapter 1 — Getting Started

access for automatic address assignment. If no server
name is specified, the access point responds to offers from
any server.

• Your session terminates if you do not use it for 15 minutes.

• Command Console mode is not available.

Note: If you access the Internet using a proxy server, you must add the IP
address of the access point to your Exceptions list. The Exceptions list
contains the addresses that you do not want to use with a proxy server.

To use a web browser interface

1 Determine the IP address of the access point. If a DHCP server assigned

the IP address, you must get the IP address from the DHCP server.

2 Start the web browser application.

3 Access the access point using one of these methods:

• In the Address field (Internet Explorer) or in the Location field

(Netscape Communicator), enter the IP address, and press Enter.

• From the File menu, choose Open (Internet Explorer) or choose

Open Page (Netscape Communicator). In the field, enter the IP
address and press Enter.

MobileLAN access WA2XG System Manual 25

Chapter 1 — Getting Started

The Access Point Login screen appears.

4 If necessary, enter a user name and a password. The default user name is

Intermec and the default password is Intermec. You can define a user
name and password. For help, see “Setting Up Logins” on page 126.

Or you may want to log in to a secure session.

5 Click Login. The TCP/IP Settings screen appears.

Note: Although you can use several different methods to manage the

access point remotely, this manual assumes you are using a web browser.

26 MobileLAN access WA2XG System Manual

Using a Telnet Session

After you have set the initial IP address, you can configure, manage, and
troubleshoot the access point from a remote location using a telnet session.
Only one session can be active with the access point at a time. If your
session terminates abruptly or a new login screen appears, someone else
may have accessed the access point. Also, your session terminates if you do
not use it for 15 minutes.

To use a telnet session

1 Determine the IP address of the access point. If a DHCP server assigned

2 From a command prompt, type:

telnet IPaddress

Chapter 1 — Getting Started

the IP address, you must get the IP address from the DHCP server.

where IPaddress is the IP address of the access point.

3 Press Enter.

4 If necessary, enter the user name and press Enter. Then, enter the

password and press Enter. The default user name is Intermec and the
default password is Intermec. You can define a user name and password.
For help, see “Setting Up Logins” on page 126. The Access Point
Configuration menu appears.

MobileLAN access WA2XG System Manual 27

Chapter 1 — Getting Started

Setting the Clock

The access point has a date and time clock that you can configure. You
may also want to configure the Time Zone field so that users know the
origination of any time stamps.

You can also configure the root access point to periodically query an NTP
(Network Time Protocol) server or a SNTP (Simple Network Time
Protocol) server to set its clock. Then, the root access point acts as an
SNTP server to all other access points in the spanning tree and periodically
updates their clocks. NTP is widely used to synchronize computer clocks
in the Internet. It provides comprehensive mechanisms to access national
time and frequency dissemination services, organize the time­synchronization subnet, and adjust the local clock in each participating
subnet peer. SNTP is a simplified access strategy for servers and clients.
SNTP is designed to operate in a dedicated server configuration including
an integrated radio clock.

Note: You must configure an NTP or an SNTP server if you want the
access point to validate certificate dates.

To set the clock

1 In the access point header, click the date and time link. The Set Clock

screen appears.

2 In the Date field, enter the current date.

3 In the Time field, enter the current time.

4 Click Set. The clock is immediately set to the correct date and time.

5 (Optional) Configure a time zone stamp.

a In the Navigation Menu, click TCP/IP Settings. The TCP/IP

28 MobileLAN access WA2XG System Manual

Settings screen appears.

Chapter 1 — Getting Started

b In the Time Zone field, type:

xxxn[yyy]

where:

xxx is the time zone (for example, PST)

n is the offset from Greenwich Mean Time (GMT)

yyy is the optional identifier for daylight savings time

(for example PDT)

Note: Even if you use the optional identifier, you must change the
offset each time daylight savings time begins and ends.

c Click Submit Changes to save your changes. To activate your

changes, from the menu bar click Save/Discard Changes, and then
click Save Changes and Reboot. For help, see “Saving Configuration
Changes” in the next section.

To configure an NTP or SNTP server

1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings

screen appears.

2 In the SNTP Server Name field, enter an IP address or a DNS name of

an NTP or SNTP server.

MobileLAN access WA2XG System Manual 29

Chapter 1 — Getting Started

3 In the Time Zone field, type:

xxxn[yyy]

where:

xxx is the time zone (for example, PST)

n is the offset from Greenwich Mean Time (GMT)

yyy is the optional identifier for daylight savings time

(for example PDT)

Note: Even if you use the optional identifier, you must change the
offset each time daylight savings time begins and ends.

4 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes” in
the next section.

Saving Configuration Changes

As you are configuring the access point, you may want to move your
changes to the saved or active configuration file. As you hover over fields, a
text box shows you the saved value, active value, and default value.

When you are done configuring the access point, you may want to activate
your changes immediately or you may want to save the changes now and
activate them later. If you choose to activate the changes later, they will
become active the next time the access point is booted.

Access Point Configuration Files

Configuration
File

Default This configuration file is the factory default configuration. For

Current When you click Submit Changes, the access point updates the

Saved When you click Save/Discard Changes > Save Changes

Active When you click Save/Discard Changes > Save Changes and

Description

help, see “Restoring the Access Point to the Default
Configuration” on page 181.

current configuration file. The access point does not change the
saved or active configuration file. You can see a list of pending
changes when you click Save/Discard Changes.

without Reboot, the access point copies the current
configuration file to the saved configuration file. Having separate
files for the saved and active configurations lets you make
changes while the access point is running without interrupting
communication.

Reboot, the access point copies the saved configuration file to the
active configuration file. The active configuration file is the file
that the access point uses.

30 MobileLAN access WA2XG System Manual

Chapter 1 — Getting Started

Note: For the 802.11g radio, some of the advanced configuration
parameters let you immediately activate the changes without rebooting the
access point. For instructions, see “Applying Hot Settings” on page 84.

Using a Web Browser Interface

1 On the menu bar, click Save/Discard Changes.

This screen appears.

Click to use
your new

Click to use your
new configuration
now.

configuration
the next time
you reboot the
access point.

Lists possible con­figuration changes
you may still need
to make.

2 Resolve any error messages listed under the heading, “Possible

Configurations Errors.” For help, see “Using the Configuration Error
Messages” on page 183.

3 Verify that all your configuration changes appear in the Pending

Changes box.

4 Click Save Changes and Reboot to reboot the access point and

immediately use your new active configuration.

Or click Save Changes without Reboot. The access point saves the
configuration and continues to run its active configuration. You need to
reboot the access point when you want the saved configuration to
become the active configuration.

To discard the changes

Lists
configuration
changes you
have made.

• Click Discard Pending Changes.

MobileLAN access WA2XG System Manual 31

Chapter 1 — Getting Started

Using a Telnet Session

1 From the Access Point Configuration menu, choose Save

2 Choose Reboot to reboot the access point and immediately use your

Configuration.

new active configuration.

32 MobileLAN access WA2XG System Manual

Installing the Access Points

2

This chapter explains how to install the MobileLAN access WA2XG
family of access points in your data collection network, provides some tips
on how to position access points to improve your network performance,
and provides some external antenna guidelines. This chapter covers these
topics:

• Installation guidelines

• Installing the WA21G

• Installing the WA22G

• Connecting to your fiber optic network

• Connecting power over Ethernet

• External antenna placement guidelines

MobileLAN access WA2XG System Manual 33

Chapter 2 — Installing the Access Points

Installation Guidelines

Intermec recommends that you have an Intermec-certified RF specialist
conduct a site survey to determine the ideal locations for all your Intermec
wireless network devices. To conduct a proper site survey, you need to
have special equipment and training.

The following general practices should be followed in any installation:

• Locate access points centrally within areas requiring coverage.

• Overlap access point radio coverage areas to avoid coverage holes.

• Position the access point so that its LEDs are visible. The LEDs are
useful for troubleshooting.

• Install wired LAN cabling within node limit and cable length
limitations.

• Use an uninterruptible power supply (UPS) when AC power is not
reliable.

Microwave Ovens

Cordless Telephones

Proper antenna placement can help improve range. For information about
antenna options, contact your local Intermec representative. For more
guidelines, see “External Antenna Placement Guidelines” on page 43.

When determining ideal locations for the access points, be aware that you
may see network performance degradation from microwave ovens, cordless
telephones, and other access points. For more information, see the next
sections.

Microwave ovens operate in the same frequency band as 802.11g radios;
therefore, if you use a microwave oven within range of your wireless
network, you may notice network performance degradation. Both your
microwave oven and your wireless network will continue to function, but
you may want to consider relocating your microwave oven out of range of
your access point.

If you have an 802.11g radio in your access point, the radio may
experience interference from some cordless telephones. For optimal
performance, consider operating cordless telephones out of range of your
access points.

34 MobileLAN access WA2XG System Manual

Other Access Points

Access points that are configured for the same frequency and that are in
the same radio coverage area may interfere with each other and decrease
throughput. You can reduce the chance of interference by configuring
access points at least five channels apart, such as channels 1, 6, and 11.

Installing the WA21G

You can place the WA21G horizontally or vertically on a desk or counter.
If you want to mount the WA21G to a wall or beam using an Intermec
mounting bracket kit, you need one of these mounting kits:

• Mounting bracket kit (P/N 068918)

• Rotating mounting bracket kit (P/N 068751)

To order one of these kits, contact your Intermec representative.

To maintain the IP54 environmental rating, you must mount the WA21G
in either the horizontal or vertical position. If you order the WA21G with
the heater option, you must use one of the mounting bracket kits to
mount the WA21G with the LEDs facing down.

Chapter 2 — Installing the Access Points

A variety of external antenna options are available for the WA21G.
Contact your Intermec representative for information about the various
antenna options, including higher gain and directional antennas. For more
information about antennas and antenna accessories, see “Antennas and
Antenna Accessories” on page 235.

To install the WA21G

1 Attach the antenna or antennas. For more information, see “External

Antenna Placement Guidelines” on page 43.

2 Mount the WA21G. For help, see the MobileLAN access WA21G Quick

Start Guide and the instructions that shipped with the bracket kit.

3 Connect the WA21G to your wired LAN (unless you are using it as a

WAP). For help, see “Connecting the WA21G to Your Wired LAN” on
page 36.

4 Connect the WA21G to power. For help, see “Connecting the WA21G

to Power” on page 36.

When you are done installing the access points, you need to configure
them to communicate with your network.

MobileLAN access WA2XG System Manual 35

Chapter 2 — Installing the Access Points

Connecting the WA21G to Your Wired LAN

Unless you are using the WA21G as a WAP, you need to connect it to
your Ethernet or fiber optic network. For help connecting the WA21G to
your fiber optic network, see “Connecting to Your Fiber Optic Network”
on page 38.

To connect the WA21G to the Ethernet network

• Attach one end of the Ethernet cable to the 10BaseT/100BaseTx port
on the WA21G and attach the other end to your Ethernet network.

Or, if you are using power over Ethernet, attach one end of the Ethernet
cable to the 10BaseT/100BaseTx port on the WA21G and attach the
other end to a MobileLAN power bridge, a Cisco power bridge or
another 802.3af-compliant power bridge.

Connecting the WA21G to Power

The WA21G can be powered using the power over Ethernet (POE)
interface. The POE interface is compatible with the MobileLAN power
bridge, a Cisco power bridge, or another 802.3af-compliant power bridge.
For help, see “Connecting Power Over Ethernet” on page 42 and the
documentation that came with your power bridge.

Or, the WA21G with the power port option can be powered from an AC
power source. You can use a power cord to connect the WA21G directly
from the power port to an AC power outlet.

Note: When both POE and AC are applied, the WA21G is redundantly
powered and will continue to operate if one of the power sources fails.

To connect the WA21G power port to an AC power source

• Plug one end of the power cord into the power port on the WA21G and
plug the other end into an AC power outlet. The access point boots as
soon as you apply power.

36 MobileLAN access WA2XG System Manual

Installing the WA22G

You can place the WA22G horizontally on a desk or counter. The
WA22G also ships with a mounting bracket that lets you mount it
vertically to a wall. Additional mounting options that you can use with the
mounting bracket include a cubicle bracket that lets you mount the
WA22G on a cubicle wall or in a locking bracket.

• Cubicle bracket kit (P/N 069926)

• Locking bracket kit (P/N 070184)

To order one of these kits, contact your Intermec representative. Intermec
also offers a variety of antennas and antenna accessories. For more
information, see “Antennas and Antenna Accessories” on page 235.

To install the WA22G

1 Attach the antenna or antennas. For more information, see “External

Antenna Placement Guidelines” on page 43.

Chapter 2 — Installing the Access Points

2 Mount the WA22G. For help, see the MobileLAN access WA22G Quick

Start Guide and the instructions that shipped with the bracket kit.

3 Connect the WA22G to your wired LAN (unless you are using it as a

WAP). For help, see “Connecting the WA22G to Your Wired LAN and
Power” in the next section.

4 Connect the WA22G to power. For help, see “Connecting the WA22G

to Your Wired LAN and Power” in the next section.

When you are done installing the access points, you need to configure
them to communicate with your network.

Connecting the WA22G to Your Wired LAN and Power

Unless you are using the WA22G as a WAP, you must connect it to your
Ethernet or fiber optic network. For help connecting to your fiber optic
network, see “Connecting to Your Fiber Optic Network” on page 38.

To connect the WA22G to your Ethernet network and to power, you
must first connect it to a MobileLAN power bridge, a Cisco power bridge,
or another 802.3af-power bridge. For help, see “Connecting Power Over
Ethernet” on page 42 and the documentation that shipped with your
power bridge.

MobileLAN access WA2XG System Manual 37

Chapter 2 — Installing the Access Points

Connecting to Your Fiber Optic Network

Using appropriate patch cords and an adapter (as described in the next
section), you can connect your WA21G and WA22G to:

• an MT-RJ network.

• a square connector (SC) network.

• a straight tip (ST) network.

Using and Purchasing the Required Patch Cord and Adapter

To connect the access point to your fiber optic network, you must supply
a patch cord and an adapter.

The access point fiber optic port consists of a male MT-RJ connector
interface. Therefore, the patch cord must have a female MT-RJ connector
that you insert into the access point fiber optic port.

Note: Inserting a male MT-RJ connector into the fiber optic port may
result in unreliable operation because there is no internal mechanism to
ensure the alignment of the fiber when using male-to-male connectors.
Such a connection may temporarily provide some level of connectivity,
despite a high level of signal loss. However, any movement of the cable or
change in cable tension could cause complete loss of signal.

38 MobileLAN access WA2XG System Manual

Insert a female MT-RJ
connector into the
fiber optic port

Do not insert a male
MT-RJ connector into
the fiber optic port

Both the connector at the other end of the patch cord and the adapter you

k

select depend on the type of network to which the access point is
connected: MT-RJ, SC, or ST.

Patch cords and adapters are available from many different manufacturers.
For help choosing the proper patch cord and adapter, contact your local
Intermec representative.

Note: All cables must be multimode, 62.5/125 µm.

Connecting to an MT-RJ Network

To connect to an MT-RJ network, you need:

• a patch cord with a female MT-RJ connector to insert into the access
point’s male MT-RJ fiber optic port, and another female MT-RJ
connector to insert into the MT-RJ adapter.

• an adapter for connecting the patch cord to the MT-RJ network.

To connect to an MT-RJ network

Chapter 2 — Installing the Access Points

1 Remove any cable protectors attached to the patch cord and adapter.

2 Connect the access point to your network as shown in the next

illustration.

Female
MT-RJ connector

Female
MT-RJ connector

MT-RJ adapter

Patch cord

Note: The patch cord shown above must connect to the access point
with a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 38.

To
MT-RJ
networ

MobileLAN access WA2XG System Manual 39

Chapter 2 — Installing the Access Points

k

Connecting to an SC Network

To connect to an SC network, you need:

• a patch cord with a female MT-RJ connector to insert into the access
point’s male MT-RJ fiber optic port, and an SC connector to insert into
the SC adapter.

• an adapter for connecting the patch cord to an SC network.

To connect to an SC network

1 Remove any cable protectors attached to the patch cord and adapter.

2 Connect the access point to your network as shown in the next two

illustrations.

Female
MT-RJ connector

SC connector

SC adapter

Patch cord

SC connector

Note: The patch cord shown above must connect to the access point
with a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 38.

To SC
networ

40 MobileLAN access WA2XG System Manual

k

Female
MT-RJ connector

Patch cord

Chapter 2 — Installing the Access Points

SC connector

SC adapter

SC connector

To SC
networ

Note: The patch cord shown above must connect to the access point
with a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 38.

Connecting to an ST Network

To connect to an ST network, you need:

• a patch cord with a female MT-RJ connector to insert into the access
point’s male MT-RJ fiber optic port, and an ST connector to insert into
the ST adapter.

• an adapter for connecting the patch cord to the ST network.

To connect to an ST network

1 Remove any cable protectors attached to the patch cord and adapter.

2 Connect the access point to your network as shown in the next

illustration.

To SC
network

MobileLAN access WA2XG System Manual 41

Chapter 2 — Installing the Access Points

T

Female
MT-RJ connector

Patch cord

Note: The patch cord shown above must connect to the access point
with a female MT-RJ connector. For details, see “Using and Purchasing
the Required Patch Cord and Adapter” on page 38.

Connecting Power Over Ethernet

The WA22G is powered by power over Ethernet. The WA21G can be
powered by AC power or by power over Ethernet or both. For all access
points, you need a power bridge. For a list of the power bridges that
Intermec sells, contact your local Intermec representative.

o AC

MobileLAN
power bridge

ST connector

ST adapter

ST connector

To
ST network

To
ST network

Connecting WA22G Using Power Over Ethernet: This illustration shows how you
connect the WA22G to the MobileLAN power bridge with a typical Ethernet cable to run
power over Ethernet.

42 MobileLAN access WA2XG System Manual

r

e
w
o

™p

N

n

A

I

L

a

e

t

l

a

i

b

D

o

M

t
u

O

a

t

n

i

a

a

D

M

&
r
e

w

o

P

r

e
w
o

P

e

v

i
t
c

A

To Ethernet

To connect power over Ethernet

1 Install the power bridges. For help, see the documentation that shipped

with the power bridge.

2 Use an Ethernet cable to connect the power bridge to the Ethernet port

of the access point.

External Antenna Placement Guidelines

Antennas and their placement play a vital role when installing a wireless
network. Every wireless network environment presents its own unique
obstacles. Therefore, the exact range that you will achieve with each access
point is difficult to determine. Intermec recommends that you allow an
Intermec-certified RF specialist to perform a site survey before you install a
wireless network. For more information, contact your local Intermec
representative.

Radio signals may reflect off some obstacles and be absorbed by others. For
example, two radios may achieve up to 305 m (1,000 ft) of range if
positioned outdoors within line of sight, with no obstacles between them.
However, the same two radios may only achieve 152 m (500 ft) of range
when the RF signal has to travel through items such as cubicles. If the
signal must penetrate office walls, the signal range may decrease to 91 m
(300 ft).

Chapter 2 — Installing the Access Points

Using the proper antennas for your environment and placing them in the
proper areas can help improve range. For information about antenna
options, contact your local Intermec representative. Here are some general
guidelines for positioning antennas:

• Place the antenna as high as possible. In an office environment, try to
place it above cubicle walls.

• Keep the line-of-sight between the antennas and wireless end devices
clear of metal surfaces (like beams or girders) and large quantities of
paper products.

• Do not place a sheet of metal (such as a filing cabinet) between two
antennas.

These next sections provide detailed information about antenna placement
for those access points that can have more than one antenna.

MobileLAN access WA2XG System Manual 43

Chapter 2 — Installing the Access Points

Positioning Antennas for 802.11g Radios

The 802.11g radios have two ports: one is a transmit/receive port
(primary) and the other is a receive-only port (secondary). Intermec
recommends that you use two antennas for optimal performance of the
radios. If you only attach one antenna to the 802.11g radio, you must
attach it to the primary port.

Use antenna connectors 1 and 2 or 3 and 4 to attach antennas to the
send/receive ports.

Recommended Antenna Separation for Antenna Diversity

Location Recommended Antenna Separation

Highly reflective warehouse
environment

Moderately reflective warehouse
environment

Open/Office environment 1.22 m (4 ft) to 3.05 m (10 ft)

0.33 m (13 in) or 0.64 m (25 in)

0.64 m (25 in), 1.22 m (4 ft), or 1.83 m (6 ft)

Positioning Antennas for Dual Radio Access Points

The recommendations in the previous table apply to omni antennas; if you
are using directional antennas, you should increase the recommended
separation between the antennas:

• If your access point has two 802.11g radios, position the antennas for
one radio at least 3.05 m (10 ft) from the antennas for the other radio.

• If your access point has at least one 802.11g radio (the other radio may
be any radio), cable the antennas for the radio at least 3.05 m (10 ft)
from the access point.

44 MobileLAN access WA2XG System Manual

Chapter 2 — Installing the Access Points

Positioning Stacked Antennas for Dual Radio Access Points

Primary antenna
for Radio 1

Secondary antenna
for Radio 1

All four antennas

Access Point

are mounted along
a single axis.

Secondary antenna
for Radio 2

Primary antenna
for Radio 2

Using Stacked Antenna Positioning: As an alternative to the physical separation of
omni antennas, you can mount them along a single axis to minimize the antenna-to­antenna coupling.

MobileLAN access WA2XG System Manual 45

Chapter 2 — Installing the Access Points

About Antenna Diversity for 802.11g Radios

Antenna diversity lets you attach two antennas to one radio to increase the
odds of receiving a better signal on either of the antennas. If you are using
antenna diversity, placement of the antennas is critical because each
antenna has a particular function. Antennas placed too close together may
cause interference with each other. Antennas placed too far apart may not
be able to establish two-way communications with other radios.

To achieve optimum placement for the two antennas, you must place the
transmit/receive antenna so that it is within range of all the radios that the
receive-only antenna can hear. Note these important points:

• Use external antennas to achieve the recommended antenna separation
for placement of either omni or directional antennas.

• Position omni antennas for the 802.11g radio at least 0.61 m (2 ft)
apart.

• Position directional antennas so they point in the same direction.

• Position the antennas so that both antennas are within range of the
radios they need to communicate with.

• Do not position the two antennas around a corner or so that a wall is
between them.

• Follow the recommended antenna separation precisely when using the
closest distances. Movement of as little as 3.05 cm (1.2 in) may strongly
affect performance. You should choose the greatest distance possible
within the constraints of your environment.

46 MobileLAN access WA2XG System Manual

Configuring the Ethernet

3

This chapter explains how to configure the MobileLAN access WA2XG
family of access points so that they communicate with your Ethernet
network. This chapter explains:

• Configuring the TCP/IP settings

• Configuring other Ethernet or fiber optic settings

Network

MobileLAN access WA2XG System Manual 47

Chapter 3 — Configuring the Ethernet Network

Configuring the TCP/IP Settings

If you are using a DHCP server to automatically assign an IP address to
the access point, go to “Configuring the Access Point as a DHCP Client”
on page 51. If you are not using a DHCP server, you need to manually
assign some TCP/IP parameters.

Note: You should have already configured an IP address for the access
point. For help, see “Configuring the Access Point (Setting the IP
Address)” on page 21.

To configure the TCP/IP settings

1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings

screen appears.

2 Configure the TCP/IP settings. For help, see the next table.

3 If you are using IPv6 addresses, see “Using IPv6 Addresses” in the next

section.

4 If you want to configure the access point as a DHCP server, see

“Configuring the Access Point as a DHCP Server” on page 53.

5 If you want to configure the access point as a NAT server, see “About

Network Address Translation (NAT)” on page 57.

48 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

6 If you want to configure the access point to send ARP requests, see

“Configuring the Access Point to Send ARP Requests” on page 58.

7 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

TCP/IP Settings Descriptions

Parameter Explanation

IP Address Enter the IP address of the access point. In an IPv4 network, the IP

address has the form x.x.x.x, where x is a number from 0 to 255. For
help setting up IPv6 addresses, see “Using IPv6 Addresses” in the
next section.

IP Subnet Mask Enter the subnet mask that matches the other devices in your

network. In an IPv4 network, the subnet mask has the form x.x.x.x,
where x is a number from 0 to 255. For help setting up IPv6
addresses, see “Using IPv6 Addresses” in the next section.

If you use DHCP to obtain an IP address for this access point, the
subnet mask that is obtained from DHCP will supercede this one.

IP Router
(Gateway)

DNS Address 1 Enter the IP address of a domain name server that the access point

DNS Address 2 Enter the IP address of a domain name server that the access point

DNS Suffix 1 Enter a domain name suffix that will be appended to DNS names

DNS Suffix 2 Enter a domain name suffix that will be appended to DNS names

Enter the IP address of the router that will forward frames if the
access point will communicate with devices on another subnet. In an
IPv4 network, the IP address has the form x.x.x.x, where x is a
number from 0 to 255. For help setting up IPv6 addresses, see “Using
IPv6 Addresses” in the next section.

uses to resolve DNS names. If this access point is a DHCP server, this
DNS address will be distributed to DHCP clients. You can enter up
to two DNS addresses to be delivered to DHCP clients.

uses to resolve DNS names if the DNS server at DNS Address 1 is
not responding. If this access point is a DHCP server, this DNS
address will be distributed to DHCP clients.

that cannot be resolved. If the access point is a DHCP server, this is
the only DNS suffix that is delivered to DHCP clients.

For example, enter a suffix of UVW.COM. When you try to resolve
ABC, the DNS will look for ABC.UVW.COM.

that cannot be resolved either by themselves or using DNS suffix 1.

For example, enter a suffix of XYZ.COM. When you try to resolve
ABC, the DNS will first look for ABC.UVW.COM and then it will
look for ABC.XYZ.COM.

MobileLAN access WA2XG System Manual 49

Chapter 3 — Configuring the Ethernet Network

Using IPv6 Addresses

The access point supports IPv6 addresses. If your network supports using
IPv6 addresses, you can configure the access point with an IPv6 address,
forward packets from wireless end devices that have IPv6 addresses, and
participate in VLANs using IPv6 addresses.

Note: You cannot use IPv6 addressing with the MobileLAN access
Utility, IP tunnels, and SNMP.

The access point also supports networks that use both IPv4 and IPv6
addresses. In this case, you may find it helpful to check the Enable
Autoconfiguration check box and the access point will generate its own
TCP/IP settings or use whatever settings the router gives it. If you clear
this check box, you need to enter an IP address, subnet mask and router
using the IPv6 format.

To use IPv6 addresses

1 In the Navigation Menu, click TCP/IP Settings > IPv6

Configuration. The IPv6 Configuration screen appears.

2 Check the Enable IPv6 check box and then click Submit Changes.

3 Check the Enable Autoconfiguration check box to allow the access

point to generate its own TCP/IP settings or use whatever settings the
router gives it.

Or, to enter IPv6 parameters, clear the Enable Autoconfiguration
check box and then click Submit Changes. You can now enter values
for the IPv6 IP Address field, the IPv6 Subnet Mask field, and the
IPv6 Router field.

4 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

50 MobileLAN access WA2XG System Manual

Configuring the Access Point as a DHCP Client

You can use a DHCP server to automatically assign an IP address and
other TCP/IP settings to your access point; that is, the access point can act
as a DHCP client.

A DHCP client accepts offers from DHCP or BOOTP servers. Preference
is given to DHCP servers. If a BOOTP reply is received before a DHCP
offer, the access point waits 4 seconds. If a DHCP offer is received within
the 4 seconds, the DHCP offer is used and the BOOTP reply is ignored.
(BOOTP offers are treated like infinite DHCP leases.)

Note: You cannot configure the access point as both a DHCP server and a
DHCP client.

Note: If you are using the embedded authentication server feature, do not
configure the access point as a DHCP client.

To configure the access point as a DHCP client

Chapter 3 — Configuring the Ethernet Network

1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings

screen appears.

2 Configure the DHCP parameters to make this access point a DHCP

client. For help, see the next table.

MobileLAN access WA2XG System Manual 51

Chapter 3 — Configuring the Ethernet Network

Note: If you set DHCP Mode to Disable DHCP and the IP address
for this access point is all zeroes, all IP communications are disabled for
this access point.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

DHCP Client Parameter Descriptions

Parameter Explanation

DHCP Mode To configure the access point as a DHCP client, you must

DHCP Server Name Leave this field blank if you want the access point to respond

DHCP User Class Leave the field blank if you do not want the DHCP client to

DHCP Vendor Class Leave the field blank if you do not want the DHCP client to

DHCP for Access
Point Network

choose one of these options:

Always Use DHCP: The access point uses DHCP after every
reboot whether or not an infinite lease was granted in a
previous session. If this option is not selected, infinite leases
are stored in non-volatile memory and reused after each
reboot. (BOOTP is treated like an infinite lease.)

Use DHCP if IP Address is Zero: (Default.) The access
point uses DHCP only if the IP Address is set to all zeros. If
you choose this option, make sure that the IP address is all
zeroes.

to offers from any server.

Or enter the name of the DHCP server that this access point
accesses for information. This access point will not respond to
any other DHCP server.

include a user class identifier in its requests.

Or enter the DHCP user class identifier as defined in RFC

3004. When this access point acts as a DHCP client, the
string entered in this field is sent in DHCP option 77 in
DHCP request messages.

include the vendor class identifier in its requests.

Or enter the DHCP vendor class identifier as defined in RFC

2132. When this access point acts as a DHCP client, the
string entered in this field is sent in DHCP option 60 in
DHCP request messages.

Determines which DHCP servers may be used by access
points and wireless devices:

Use Any Available DHCP Server: Access points and wireless
devices may receive DHCP responses and addresses from any
available DHCP server.

52 MobileLAN access WA2XG System Manual

DHCP Client Parameter Descriptions (continued)

Parameter Explanation

DHCP for Access
Point Network
(continued)

Only Use Access Point DHCP Server: Access points and any
associated wireless devices may receive DHCP responses and
addresses only from an access point DHCP server. Currently,
the DHCP server must be located in the root access point. If
this option is selected and the root access point does not have
a DHCP server enabled, access points and wireless devices will
not be able to receive a DHCP address. You can use this
option, in combination with a DHCP user class, to segment a
network that has an existing DHCP server and an access point
DHCP server.

Configuring the Access Point as a DHCP Server

You can configure the access point as a simple DHCP server that provides
DHCP server functions for small installations where no other DHCP
server is available. The DHCP server will offer IP addresses and other
TCP/IP settings to any DHCP client it hears as long as a pool of
unallocated IP addresses is available. These clients may include other access
points, wireless end devices, wired hosts on the distribution LAN, or wired
hosts on secondary LANs.

Chapter 3 — Configuring the Ethernet Network

Note: If you configure the access point as a DHCP server, it is not
intended to replace a general purpose, configurable DHCP server, and it
makes no provisions for synchronizing DHCP policy between itself and
other DHCP servers. Customers with complex DHCP policy
requirements should use other DHCP server software.

Note: You cannot configure the access point as both a DHCP server and a
DHCP client.

To avoid a single point of failure, you can configure more than one access
point to be a DHCP server; however, the access points do not share
DHCP client databases. You should configure each DHCP server with a
different address pool from which to allocate client IP addresses.

To configure the access point as a DHCP server

1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings

screen appears.

MobileLAN access WA2XG System Manual 53

Chapter 3 — Configuring the Ethernet Network

2 Verify that the IP Address field, IP Subnet Mask field, and IP Router

field are configured. For help, see “Configuring the TCP/IP Settings”
on page 48.

3 Configure the DHCP parameters to make this access point a DHCP

server. For help, see the next table.

DHCP Server Parameter Descriptions

Parameter Explanation

DHCP Mode Choose This AP is a DHCP Server. The access point must

have a valid IP address and subnet mask.

DHCP Server Name Enter the name for this access point as a DHCP server.

DHCP User Class Leave the field blank if you want this access point to

respond to requests from any client.

Or enter the DHCP user class identifier as defined in RFC

3004. When this access point acts as a DHCP server, the
access point offers addresses to client requests only when the
client requests contain a matching user class identifier.

DHCP Vendor Class Leave the field blank if you want this access point to

respond to requests from any client.

Or enter the DHCP vendor class identifier as defined in
RFC 2132. When this access point acts as a DHCP server,
the access point offers addresses to client requests only when
the client requests contains a matching vendor class
identifier.

54 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

DHCP Server Parameter Descriptions (continued)

Parameter Explanation

DHCP for Access
Point Network

Determines which DHCP servers may be used by access
points and wireless devices:

Use Any Available DHCP Server: Access points and
wireless devices may receive DHCP responses and addresses
from any available DHCP server.

Only Use Access Point DHCP Server: Access points and
any associated wireless devices may receive DHCP responses
and addresses only from an access point DHCP server.
Currently, the DHCP server must be located in the root
access point. If this option is selected and the root access
point does not have a DHCP server enabled, access points
and wireless devices will not be able to receive a DHCP
address. You can use this option, in combination with a
DHCP user class, to segment a network that has an existing
DHCP server and an access point DHCP server.

4 Click Submit Changes to save your changes. DHCP Server Setup

appears in the menu.

5 In the Navigation Menu, click DHCP Server Setup. The DHCP

Server Setup screen appears.

6 Configure the DHCP server. For help, see the next table.

7 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

MobileLAN access WA2XG System Manual 55

Chapter 3 — Configuring the Ethernet Network

DHCP Server Setup Parameter Descriptions

Parameter Explanation

Low Address Enter the low IP address in the range of IP addresses available to the

High Address Enter the high IP address in the range of IP addresses available to

Lease Time Specifies the duration of the leases that are granted by the DHCP

Permanently
Save IP Address
Mappings

Display-only parameters

IP Subnet Mask Displays the subnet mask entered at the TCP/IP Settings screen.

IP Router
(Gateway)

DNS Address 1 Displays the IP address of the Domain Name Server. This address

DNS Address 2 Displays the IP address of the Domain Name Server. This address

NAT Status This informative entry lets you know if DHCP has been properly

DHCP server for distribution to DHCP clients.

If these addresses are not on the same subnet as the access point, the
access point will perform Network Address Translation (NAT) for
the clients to which it grants IP addresses.

the DHCP server for distribution to DHCP clients.

If these addresses are not on the same subnet as the access point, the
access point will perform Network Address Translation (NAT) for
the clients to which it grants IP addresses.

server. Enter the lease time in the format days:hours:minutes.

If you set the lease time to 0, infinite leases are granted.

If you check this check box, the DHCP server stores permanent
mappings of IP addresses to DHCP client identifiers. A DHCP
client is guaranteed to receive the same IP address each time it
requests an address even if the DHCP server reboots.

If you clear this check box, the DHCP server tries to grant clients
the same address each time, but that result is not guaranteed.

Displays the address of the IP Router.

will be used for name solution and will be distributed to DHCP
clients when this access point is a DHCP server.

will be used for name solution and will be distributed to DHCP
clients when this access point is a DHCP server.

configured, and if the range of addresses has automatically enabled
Network Address Translation (NAT).

Supported DHCP Server Options

When the access point is acting as a DHCP server, it issues IP address
leases to configure the IP address, along with the DNS addresses, DNS
suffixes, IP subnet mask, and IP router. These parameters will contain the
same values as those configured for the access point.

Unsupported DHCP Server Options

When the access point is acting as a DHCP server, it does not support any
DHCP options other than those listed. The DHCP server disregards any
DHCP options that are not explicitly required by the DHCP specification.
The DHCP server ignores all frames with a non-zero giaddr (gateway IP
address). The DHCP server only responds to requests from its own subnet.

56 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

About Network Address Translation (NAT)

NAT allows IP addresses to be used by more than one end device. The
access point can act as a NAT server, which instantaneously rewrites IP
addresses and port numbers in IP headers so that frames all appear to be
coming from (or going to) the single IP address of the access point instead
of the actual source or destination.

When an end device uses the access point as an IP router, the access point
replaces the IP header, which includes the device MAC address, IP source
address, and TCP/UDP port, with its own. You can configure the DHCP
server to indicate that the access point is the IP router when the server
allocates an IP address. Special consideration is given to changing the FTP
data connection TCP port number, which is in the body of the TCP
frame. After the frame source is modified, it is forwarded to the proper
subnet.

If the destination subnet is a different subnet from the one the access point
is on, the destination MAC address is changed to the IP router that has
been configured for the access point. If the destination subnet is the same
subnet as the one the access point is on, the access point converts the MAC
address to the MAC address that belongs to the destination IP address.
This may involve using ARP for MAC address discovery.

When the access point receives a frame with its IP address, it identifies the
need for address translation by inspecting the destination port number. If
the port number is within the pool reserved for NAT operation, it looks
up the original MAC address, IP address, and port number. The frame is
then modified and forwarded to the end device.

NAT operation is disabled or enabled automatically depending on the
continuous range of addresses you enter into the DHCP server. NAT is
disabled if the range of addresses to be given to DHCP clients is on the
same subnet as the access point. NAT is enabled if the range of addresses
to be given to DHCP clients is not on the same subnet as the access point;
thus, you are creating a virtual network and the DHCP server will also
perform NAT translation.

When NAT operation is enabled, the access point uses the low address in
the range of addresses as its own. The DHCP/NAT clients also use this
address as their router IP address. These clients can configure the access
point using this internal IP address or the normal external IP address.

To configure the access point as a NAT server

1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings

screen appears.

2 Verify that the IP Address field and IP Subnet Mask field are

configured. For help, see “Configuring the TCP/IP Settings” on page

48.

3 In the DHCP Mode field, choose This AP is a DHCP Server.

MobileLAN access WA2XG System Manual 57

Chapter 3 — Configuring the Ethernet Network

4 Click Submit Changes to save your changes.

5 Click DHCP Server Setup and enter a range of IP addresses that are

not on the same subnet as the access point.

6 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

Configuring the Access Point to Send ARP Requests

ARP requests are multicast frames, which means they are sent to all devices
on the Ethernet network. You can configure the access point to
periodically send an unsolicited ARP request to the IP router so that all
routers can update their routing tables. This ARP request lets a network
management program learn about the access point on the network by
querying routers. The auto ARP minutes parameter controls the time
interval between ARP requests.

If the address of the IP router is set to all zeroes, then the access point
sends an ARP request to its own IP address. Without this option, an access
point might not use its IP address for extended periods of time and the IP
address would expire from the router ARP table. If the IP address expires,
the network management program must ping all potential addresses on a
subnet to locate active IP addresses or require the user to enter a list. You
should not let the IP address for the access point expire.

To set the auto ARP period

1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings

screen appears.

2 In the Auto ARP Minutes field, enter a time period from 1 to 120

minutes. To disable this parameter, enter 0.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

Configuring Other Ethernet or Fiber Optic Settings

Many of the standard Ethernet or fiber optic settings are configured in the
TCP/IP Settings screen. For help, see “Configuring the TCP/IP Settings”
on page 48. In the Ethernet screen, you can set the port type, set the link
speed, and enable or disable the link status check.

To configure the Ethernet or fiber optic settings

1 In the Navigation Menu, click Ethernet. The Ethernet screen appears.

58 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

2 Configure the parameters. For help, see the next table.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

Ethernet Parameter Descriptions

Parameter Explanation

Port Type This field specifies the port that the access point uses to

communicate with the Ethernet network:

10/100 Mb Twisted-Pair: The access point communicates with the
Ethernet network through the Ethernet port.

100 Mb Fiber Optic: The access point communicates with the
Ethernet network through the fiber optic port.

Link Speed If Port Type is 100 Mb Fiber Optic, this field is automatically set

to 100 Mbps Fiber Optic (full duplex).

Choose the speed and duplex mode you want this port to use to
communicate with the Ethernet. If you want the access point to
auto-negotiate this field, choose Auto Select. Auto Select should
work for most networks.

Enable Link
Status Check

Check this check box if you want the access point to periodically
check its Ethernet connection. If it loses the connection, this access
point can no longer be the root access point and any end devices
that are connected to this access point (whether or not it is the root)
will roam to a different access point. The access point will attempt
to reconnect to the spanning tree through one of its radio ports.

Clear this check box if this access point must be the root access
point or if it is used as a WAP.

MobileLAN access WA2XG System Manual 59

Chapter 3 — Configuring the Ethernet Network

Configuring the Ethernet Static Address Table

If you have a secondary LAN, you should configure the Ethernet static
address table in the designated bridge or WAP on the secondary LAN.
This table contains all the MAC addresses on the secondary LAN that are
communicating with the primary LAN. You must enter the MAC
addresses of all devices on the secondary LAN that do not always initiate
communication.

If you choose not to configure this table, the designated bridge or WAP
may need to flood frames to the Ethernet and radio ports to learn the path
to the MAC address.

These addresses become permanent entries in the forwarding table of the
designated bridge or WAP.

To configure the Ethernet static address table

1 In the Navigation Menu, click Ethernet > Static Address Table. The

Static Address Table screen appears.

2 Enter up to 20 MAC addresses. MAC addresses consist of six hex pairs

that are separated by spaces, colons, or hyphens.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

60 MobileLAN access WA2XG System Manual

Configuring Ethernet Filters

You can set both Ethernet and IP tunnel filters, and you can create
protocol filters for both predefined and user-defined protocol types. In
addition, you can define arbitrary frame filters based on frame content.
Setting Ethernet filters prevents the Ethernet port from sending out
unnecessary traffic to the wireless network.

Ethernet frame type filter and predefined subtype filter settings override
customizable subtype filter settings. However, Intermec recommends that
when creating customizable subtype filters, you do not duplicate existing
frame type or predefined subtype filters or unexpected results may occur.

For more examples of using Ethernet filters and for help configuring IP
filters, see “Configuring IP Tunnel Filters” on page 104.

Using Ethernet Received Frame Type Filters

You can define filters for common networking protocols such as IP, Novell
IPX, and 802.2 LLC. You can also set filters that will pass only those
Ethernet frame types found on your network.

Chapter 3 — Configuring the Ethernet Network

You can set the default action for general and specific frame types. For
example, you cannot pass the DIX-Other EtherTypes frame parameter and
then use the subtype menus to pass only those specific DIX types that are
used in your radio network.

You can also set the scope for general and specific frame types. For
example, for DIX-IP-TCP ports, you cannot pass all frame types. Then, all
IP frames with the TCP type will be dropped even if specific TCP parts
are set to pass in the subtype menus.

Here is the action and scope you can set for each parameter:

Allow/Pass: Check or clear this check box. Check the check box to pass all
frames of that type. Clear the check box to drop all frames of that type.

Scope: Set scope to Unlisted or All. If you select All, then all frames of
that type are unconditionally passed or dropped, depending on the action
you specified. If you select Unlisted, then frames are passed or dropped
only if the frame type is not listed in the predefined or customizable tables.

To set received frame type filters

1 In the Navigation Menu, click Ethernet > Received Frame Type Filters.

The Received Frame Type Filters screen appears.

MobileLAN access WA2XG System Manual 61

Chapter 3 — Configuring the Ethernet Network

2 For each frame type field, check or clear the Allow/Pass check box to

configure if the frame types are allowed to pass or are dropped. If you
check the check box, the frame type is allowed to pass. For help, see the
next table.

3 For each frame type field, set the Scope field to Unlisted or All. For

help, see the next table.

4 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

5 If you set the Scope field to Unlisted for a frame type, you must also

configure predefined subtype filters or customizable subtype filters. For
help, see the next section, “Using Predefined Received Subtype Filters,”
or “Customizing Received Subtype Filters” on page 64.

Frame Type Filter Descriptions

Frame Type Explanation

DIX IP TCP Ports
DIX IP UDP Ports
SNAP IP TCP Ports
SNAP IP UDP Ports

DIX IP Other Protocols
SNAP IP Other Protocols

DIX IPX Sockets Novell NetWare protocol over Ethernet II frames.

SNAP IPX Sockets Novell NetWare protocol over 802.2 SNAP frames.

802.3 IPX Sockets Novell NetWare protocol over 802.3 RAW frames.

DIX Other Ethernet Types
SNAP Other Ethernet Types

Primary Internet Protocol Suite (IP) transport
protocols.

IP protocols other than TCP or User Datagram
Protocol (UDP).

DIX or SNAP registered protocols other than IP or
IPX.

62 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

Frame Type Filter Descriptions (continued)

Frame Type Explanation

802.2 IPX Sockets Novell running over 802.2 Logical Link Control
(LLC).

802.2 Other SAPs 802.2 SAPs other than IPX or SNAP.

Note: You should not filter HTTP, Telnet, SNMP, and ICMP frames if
you are using WAPs because these frame types are used for configuring,
troubleshooting, and upgrading WAPs.

Using Predefined Received Subtype Filters

You can configure the access point to pass or drop certain predefined
received frame subtypes.

To configure predefined received subtype filters

1 In the Navigation Menu, click Ethernet > Predefined Received

Subtype Filters. The Predefined Received Subtype Filters screen
appears.

2 For each frame subtype field, check or clear the Allow/Pass check box

to configure if the frame subtypes are allowed to pass or are dropped. If
you check the check box, the frame subtype is allowed to pass.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

MobileLAN access WA2XG System Manual 63

Chapter 3 — Configuring the Ethernet Network

Customizing Received Subtype Filters

You can configure the access point to pass or drop certain customized
received frame subtypes. You define the action, subtype, and value
parameters:

Allow/Pass: Check or clear this check box. Check this check box to pass
all frames of the subtype and value. Clear this check box to drop all frames
of the subtype and value.

SubType: Selects the frame subtype you wish to configure. For help
setting the subtype and value, see the Subtype Filter Descriptions table on
page 65.

Value: The value must be two hex pairs. When a match is found between
frame subtype and value, the specified action is taken.

To customize subtype filters

1 In the Navigation Menu, click Ethernet > Customizable Received

Subtype Filters. The Customizable Received Subtype Filters screen
appears.

2 For each subtype field, check or clear the Allow/Pass check box to

configure if the subtypes are allowed to pass or are dropped. If you
check the check box, the subtype is allowed to pass.

3 In the SubType field, choose the customizable frame subtype. For help,

see the next table.

4 In the Value field, enter the two hex pairs. For help, see the next table.

5 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

64 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

Subtype Filter Descriptions

SubType Value

DIX-IP-TCP-Port Port value in hexadecimal.

DIX-IP-UDP-Port Port value in hexadecimal.

DIX-IP-Protocol Protocol number in hexadecimal.

DIX-IPX-Socket Socket value in hexadecimal.

DIX-EtherType Specify the registered DIX type in hexadecimal.

SNAP-IP-TCP-Port Port value in hexadecimal.

SNAP-IP-UDP-Port Port value in hexadecimal.

SNAP-IP-Protocol Port value in hexadecimal.

SNAP-IPX-Socket Socket value in hexadecimal.

SNAP-EtherType SNAP type in hexadecimal. To filter on both SNAP type and

OUI, use advanced filters.

802.3-IPX-Socket Socket value in hexadecimal.

802.2-IPX-Socket Socket value in hexadecimal.

802.2-SAP 802.2 SAP in hexadecimal.

Example

This example shows you how to use customizable filters to allow only the
wireless end devices (DHCP clients) communicating with the access point
(DHCP server) to receive TCP/IP settings. This example prevents the
wireless end devices from receiving TCP/IP settings from another DHCP
server on the Ethernet network. It also prevents the access point from
providing TCP/IP settings to DHCP clients on the wired network.

For this example, set these customizable subtype filters.

MobileLAN access WA2XG System Manual 65

Chapter 3 — Configuring the Ethernet Network

Example – Customizable Received Subtype Filter

Filter Parameter Value Explanation

1 Allow/Pass Clear (drop)

Subtype DIX-IP-UDP-Port

Value 00 43

2 Allow/Pass Clear (drop)

Subtype DIX-IP-UDP-Port

Value 00 44

Configuring Advanced Received Filters

You can configure advanced received filters if you need more flexibility in
your filtering. Settings for advanced received filters execute after those for
other filters; that is, advanced received filters are only applied if the frame
has passed the other filters.

You can use filter values and filter expressions to minimize network traffic
over the wireless links; however, Intermec recommends that you use
advanced Ethernet filters only if you have an extensive understanding of
network frames and their contents. Use other existing filters whenever
possible.

This filter drops DHCP
responses to wireless end
devices communicating with
this access point.

This filter drops DHCP
requests from DHCP clients
on the Ethernet network.

Setting Filter Values

You can associate an ID with a pattern value by selecting a filter and then
entering an ID and a value. All values with the same value ID belong to
the same list.

To set the value ID and value

1 In the Navigation Menu, click Ethernet > Advanced Received Filters.

The Filter Values screen appears.

66 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

2 Enter up to 22 value IDs and values.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

Setting Filter Expressions

You can set filter expressions by specifying parameters for frame filters.
You can also create a filter expression, which is executed in ascending order
based on the ExprSeq values until the access point determines whether to
pass or drop the frame.

To set filter expressions

1 In the Navigation Menu, click Ethernet > Advanced Received Filters

> Filter Expressions. The Filter Expressions screen appears.

2 Configure the filter expressions parameters. For help, see the next table.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

MobileLAN access WA2XG System Manual 67

Chapter 3 — Configuring the Ethernet Network

Filter Expressions Parameter Descriptions

Parameter Explanation

ExprSeq
(Expression
Sequence)

Offset Identifies a point inside the frame where testing for the expression is to

Mask Applies a data pattern to the frame. If the data pattern in the mask

Op
(Operation)

Value ID Represents a value in the Filter Values menu. The bytes after the frame

Action Sets the action to Pass, Drop, or And. If you set the action to And, the

Indicates the order in which the filters will be executed. When you
change the parameter, the statements are reordered and renumbered so
the Expression Sequence order is maintained. The range is from 0 to

255.

This parameter works with the Action parameter; for example, if the
action is set to And, then the next sequence in another expression is
processed.

start. The range is from 0 to 65535.

matches the frame, then the specific action is performed. The mask
indicates the bits that are significant at the specified offset. A bit is
significant if a bit in the mask is set to one.

If this field is empty, the length of the field is determined by the
longest value in the Filter Values menu for the specified value ID.

The mask values are entered in 0 to 8 hexadecimal pairs.

Performs a logical operation when a data pattern matches a value in the
Filter Values menu to determine if the specified action should be
taken. Valid operations include: EQ (equal), NE (not equal), GT
(greater than), LT (less than or equal)

offset are compared to the data pattern indicated by the value. Value
ID can be from 0 to 255 and must match one or more value IDs in the
Filter Values menu.

filter expression with the next highest sequence is applied.

Example 1

This example shows you how to use Ethernet filters to filter all traffic that
passes through the access point to the wireless network except for traffic
for specified MAC addresses. These filters do not prevent wireless traffic
from reaching the Ethernet network. For this example, set these filter
values.

68 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

Example 1 - Filter Values

Value ID Value Description

1 ff ff ff ff ff ff Allows multicast traffic to enter the wireless

network, which is necessary for IP end devices to
communicate

2 00 02 2d 04 b7 a4 The MAC address of an end device you want to

be able to communicate.

3 00 02 2d 0d 54 25 The MAC address of an end device you want to

be able to communicate.

For this example, set these filter expressions.

MobileLAN access WA2XG System Manual 69

Chapter 3 — Configuring the Ethernet Network

Example 1 – Filter Expressions

Parameter Value Explanation

ExprSeq 10 The order that you want the expressions executed. You

Offset 0 Since the filter is applied to the destination address, which

Mask ff ff ff

ff ff ff

Op EQ Compares the value after the offset and mask are applied

Value ID 1 This filter expression applies to value ID 1 from the Filter

Action Pass If this filter expression is true, continue to the next

You must enter a filter expression for each Value ID in the Filter Values
menu. In this example, only the ExprSeq value and the Value ID value
change.

must have an expression for each Value ID that is listed in
the Filter Values menu.

is the first value in the frame, the offset is 0.

Compares the entire 6-byte destination address for an
exact match.

to the value of the Value ID from the Filter Values menu
to see if they are equal. (If the value at the offset equals the
specified value on the Filter Values menu, the frame is
multicast.)

Values menu.

expression.

Example 2

This example shows how to use Ethernet filters to discard all DIX IP
multicast frames except those from selected devices. Three entries have a
value ID of 3 to demonstrate how to enter a list. All entries with the same
value ID belong to the same list. For this example, set these filter values.

70 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

Example 2 - Filter Values

Value ID Value Description

1 08 00 Check for a DIX IP frame.

2 01 Check for a multicast frame.

3 00 c0 b2 00 00 01

00 c0 b2 00 00 02
00 c0 b2 00 00 03

Check for these specific MAC device addresses.

You must enter a filter expression for each Value ID in the Filter Values
menu. In this example, three expressions combine to form a single
compound expression. The compound expression forms an advanced filter
that drops all DIX IP multicast frames except those from the three
Ethernet stations whose addresses are listed on the Filter Values menu.

The default action is the opposite of the action specified in the last
expression. In this example, the action of the last expression is drop;
therefore, the default action is pass. Any frame that meets the conditions
specified in the advanced filter is passed.

Set the first filter expression as shown below.

MobileLAN access WA2XG System Manual 71

Chapter 3 — Configuring the Ethernet Network

Example 2 – First Filter Expression

Parameter Value Explanation

ExprSeq 1 The first expression that is executed. You must have an

Offset 0 Since the filter is applied to the destination address, which

Mask 01 Checks only the Ethernet multicast bit.

Op EQ Compares the value after the offset and mask are applied

Value ID 2 This filter expression applies to value ID 2 from the Filter

Action And If this filter expression is true, continue to the next

Set the second filter expression as shown below.

expression for each Value ID that is listed in the Filter
Values menu.

is the first value in the frame, the offset is 0.

to the value of the Value ID from the Filter Values menu
to see if they are equal. (If the value at the offset equals the
specified value on the Filter Values menu, the frame is
multicast.)

Values menu.

expression.

72 MobileLAN access WA2XG System Manual

Chapter 3 — Configuring the Ethernet Network

Example 2 – Second Filter Expression

Parameter Value Explanation

ExprSeq 2 The second expression that is executed.

Offset 12 Checks for the DIX IP frame type, which starts 12 bytes

from the destination address.

Mask ff ff Checks the 2-byte DIX IP frame type for an exact match.

Op EQ Compares the value after the offset and mask are applied

to the value of the Value ID from the Filter Values menu
to see if they are equal. (If the value at the offset equals the
specified value on the Filter Values menu, the frame is
DIX IP.)

Value ID 1 This filter expression applies to value ID 1 from the Filter

Values menu.

Action And If this filter expression is true, continue to the next

expression.

Set the third filter expression as shown below.

MobileLAN access WA2XG System Manual 73

Chapter 3 — Configuring the Ethernet Network

Example 2 – Third Filter Expression

Parameter Value Explanation

ExprSeq 3 The third expression that is executed.

Offset 6 Checks the source Ethernet address, which starts 6 bytes

Mask ff ff ff

ff ff ff

OP NE Compares the value after the offset and mask are applied to

Value ID 3 This filter expression applies to value ID 3 from the Filter

Action Drop If the source Ethernet address does not match any address in

from the destination address.

Checks the 6-byte source Ethernet address for an exact
match.

the value of the Value ID from the Filter Values menu to
see if they are not equal. (Compare the source Ethernet
address with the list of MAC addresses from the Filter
Values menu.)

Values menu.

the list on the Filter Values menu, then drop the frame.

74 MobileLAN access WA2XG System Manual

Configuring the Radios

4

This chapter explains how to configure the 802.11g radios in the
MobileLAN access WA2XG family of access points so that they
communicate with your wireless end devices. This chapter covers these
topics:

• About the 802.11g radio

• Configuring the 802.11g radio

MobileLAN access WA2XG System Manual 75

Chapter 4 — Configuring the Radios

Configuring the 802.11g Radio

You can configure the 802.11g radios to communicate with other 802.11g
and 802.11b radios that have the same:

• SSID (Network Name)

• Security

For each radio, you can assign up to four service sets, creating one primary
service set and up to three secondary service sets. The service sets share the
same Advanced Configuration and Inbound Filters settings, but you can
configure each service set for a different security environment. Multiple
service sets are used primarily to allow one physical radio to support
multiple virtual LANs (VLANs). For details about VLANs, see
“Configuring VLANs” on page 134.

Before you enable a mixed security environment, verify that your wireless
end devices perform active scanning. In active scanning, an end device
sends a probe request to the SSID that it wants to associate with.
Intermec’s newer end devices with newer 802.11g radios (such as the
CK30, CK31, and CV60) work in a mixed security environment.

End devices that perform passive scanning do not support a mixed security
environment. In passive scanning, an end device listens for beacons (sent
by the access point radio’s primary service set), picks one it likes, and then
associates with it. The beacons contain a security bit that advertises the
type of security the primary service set is using. If the end device’s security
setting does not match the beacon’s security bit, the end device cannot
associate.

For details, see “When You Configure Different SSIDs With Different
Security Settings” on page 122.

To configure the 802.11g radio

1 In the Navigation Menu, click 802.11g Radio. The 802.11g Radio

screen appears.

76 MobileLAN access WA2XG System Manual

Chapter 4 — Configuring the Radios

If your screen does not look like the previous one, your primary service
set may be configured as station (instead of master), so that the
secondary service sets are not available, as shown next.

2 Configure the parameters for the radio. For help, see the next table.

3 Configure the advanced parameters for the radio. For help, see

“Configuring Advanced Parameters” on page 80.

4 (Master only) Configure inbound filters. For help, see “Configuring

Inbound Filters” on page 82.

MobileLAN access WA2XG System Manual 77

Chapter 4 — Configuring the Radios

5 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

6 (Optional) Configure security by clicking Configure security settings

for this service set. For help, see Chapter 6, “Configuring Security.”

802.11g Radio Parameter Descriptions

Parameter Explanation

Frequency

(Master radio only)

Node Type Configure the 802.11g radio to master, station, or disabled:

SSID
(Network Name)

Member Limit Controls the maximum number of devices that can be associated

Choose the frequency that this access point uses to transmit and
receive frames. The available frequencies depend on the country
and the radio option configured on the access point. See the
“Worldwide Frequencies for 802.11g Radios” table on page 79.

You may want to use a single frequency to isolate the installation
to part of the band; for example, use a single frequency if other
wireless networks or microwave ovens are in the area.

For optimal performance of master radios in access points that
are in range of each other, configure the frequencies to be at least
five channels apart. For example, configure the frequency to use
channels 1, 6, and 11.

Master: The radio always operates in Master mode. The radio
becomes active to accept connections for wireless devices when
the access point joins the spanning tree. All service sets to be
configured for a VLAN must be set to Master.

Station: The radio always operates in Station mode. The radio
searches for an access point with an active Master mode radio to
connect to. If a connection is established, this link becomes a
possible connection to the root.

Disabled: The radio is disabled.

You can create up to four service sets for this radio by setting the
Node Type as follows:

• If the primary service set is Master, up to three secondary

SSIDs may be set to Master.

• If the primary SSID is Station, all secondary service sets are

disabled and do not appear on screen.

• If the primary service set is Disabled, all secondary service sets

(and the physical radio) are disabled.

Enter a unique SSID for each enabled service set. You can
configure up to four service sets for this radio. The SSID is case
sensitive and cannot be blank or more than 32 alphanumeric
characters.

802.11g radios can be configured to communicate with other

802.11g and/or 802.11b radios with the same SSIDs.

You need to assign the same SSID to the wireless end devices
that will connect to the radio.

with this radio (including the primary and secondary service
sets).

78 MobileLAN access WA2XG System Manual

Chapter 4 — Configuring the Radios

Worldwide Frequencies for 802.11g Radios

Channel FCC ETSI France Japan Israel

1 2412 2412 2412

2 2417 2417 2417

3 2422

(default)

4 2427 2427 2427

5 2432 2432 2432

6 2437 2437 2437

7 2442 2442 2442

8 2447 2447 2447

9 2452 2452 2452

10 2457 2457 2457 2457

11 2462 2462 2462

12 2467 2467 2467

13 2472 2472 2472

14 2484

2422
(default)

2422

(default)

2462

(default)

2422
(default)

The 802.11g channels that are allowed in a given country may change
without notice. Be sure you use only those frequencies that are permissible
in the given country. Note the following:

• FCC countries include the United States, Canada, China, Taiwan,
India, Thailand, Indonesia, Malaysia, Hong Kong, and most South
American countries.

• ETSI countries include all European Union countries except France. It
also includes Switzerland, Iceland, Norway, Czech Republic, Slovenia,
Slovakia, Turkey, Russia, and the United Arab Emirates.

• France, Mexico, and Singapore use the same channels.

MobileLAN access WA2XG System Manual 79

Chapter 4 — Configuring the Radios

Configuring Advanced Parameters

You can configure advanced parameters for the 802.11g radio primary
service set. These settings are shared by any secondary service sets defined
for the radio.

To configure advanced parameters

1 In the Navigation Menu, click 802.11g Radio > Advanced

Configuration. The Advanced Configuration screen appears.

2 Configure the advanced parameters. For help, see the next table.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”

on page 30.

Note: If the field name is marked with an asterisk (*), you can
immediately activate the changes without rebooting. For help, see
“Applying Hot Settings” on page 84.

80 MobileLAN access WA2XG System Manual

Chapter 4 — Configuring the Radios

Advanced Parameter Descriptions

Parameter Description

Client
Type/Performance

Power Output Level* Set the transmitted power level:

Enable Medium
Reservation

Reservation
Threshold

Fragmentation
Threshold

Specifies if this radio will communicate with 802.11b and/or

802.11g radios:

11b/11g with range reliability (Not Wi-Fi): Allows clients
with 802.11b or 802.11g radios. Parameters are adjusted for
longer range. Basic rates are 1 or 2 Mbps. Extended rates are 6,
12, or 24 Mbps. Data rates are 1, 2, 5.5, or 11 Mbps and
extended data rates are 6, 9, 12, 18, 24, 36, 48, or 54 Mbps.

11b/11g with Wi-Fi compatible rates: Allows clients with

802.11b or 802.11g radios. Basic rates are 1, 2, 5.5, or 11 Mbps.
Data rates are 1, 2, 5.5, or 11 Mbps. Extended data rates are 6,
9, 12, 18, 24, 36, 48, or 54 Mbps.

11g only for better throughput (Wi-Fi): Allows clients with

802.11g radios only. Basic rates are 1, 2, 5.5, or 11 Mbps.
Extended data rates are 6, 9, 12, 18, 24, 36, 48, or 54 Mbps.
Clients without extended rates capabilities are rejected.

11b/11g using 11b supported rates (Wi-Fi): Allows clients
with 802.11b or 802.11g radios. Clients that have mandatory
extended data rate requirements will not associate. Basic rates are
1 or 2 Mbps. Data rates are 1, 2, 5.5, or 11 Mbps.

Maximum: Sets the output power to the highest level supported
by the radio.

Medium: Sets the output power to 3 dB lower than the highest
level supported by the radio.

Low: Sets the output power to a level higher than the lowest
level supported by the radio.

Minimum: Sets the output power to the lowest level supported
by the radio.

Lowering the power output level reduces the radio coverage for
this area and reduces the range for this radio.

Determines if you want to set a reservation threshold.

Check this check box to set a threshold value. Click Submit
Changes, and the Reservation Threshold parameter appears.

If you clear this check box, you may improve network response
time in installations that usually send very small frames or that
have no hidden stations.

Appears only if the Enable Medium Reservation parameter is
checked.

If you enable medium reservation, you need to set a threshold
value, which is the largest data frame that can be transmitted
without reserving air time. Air time is normally reserved to help
prevent collisions with other transmitters.

Specifies the largest data frame that can be transmitted without
fragmentation. Range is 256 to 1600.

On certain radios, the fragmentation does not occur unless the
radio detects interference. Larger frame sizes can improve
throughput on a reliable connection. Smaller frame sizes can
improve throughput on a poor connection.

MobileLAN access WA2XG System Manual 81

Chapter 4 — Configuring the Radios

Advanced Parameter Descriptions (continued)

Parameter Description

Antenna control* Specifies whether the radio uses one or both antennas:

Mixed Mode
Performance*

Enable Data Rate
Fallback

Disallow SSID
(Network Name) of
‘ANY’

(Master radio only)

DTIM Period

(Master radio only)

Two Antennas: The radio selects the antenna with the best
reception for transmission and reception.

One Antenna: The radio uses only one antenna for transmission
and reception.

Gives more time to higher rate frames to maximize throughput
in the presence of low rate clients. Range is 0 to 2000.

Optimized for 802.11g clients: 802.11g transmissions are
maximized.

Optimized for 802.11g clients: 802.11b transmissions are
maximized.

Optimize Mixed (802.11b and 802.11g): Allows an optimal
mix of 802.11g and 802.11b transmissions.

Determines if you want the radio to drop to a slower data rate
when it has trouble communicating with another radio.

Intermec recommends that you leave this check box checked or
you may affect radio network performance. Clearing this check
box is only used when performing site surveys.

Determines if end devices that have their SSID set to ANY or are
left blank (empty) can associate with this radio.

Clear this check box to allow these end devices to associate with
this radio. Although this setting is 802.11 compliant, it is not
very secure.

Check this check box to prevent end devices with an SSID of
ANY or are left blank from associating with this radio.

Specifies the number of beacon periods to skip before including
a DTIM (delivery traffic indication message) in a beacon frame.
Range is 1 to 65535.

Setting a higher DTIM period may conserve battery life in an
end device, but it may increase response time.

Configuring Inbound Filters

You can configure inbound filters for the 802.11g radio primary service
set. These settings are shared by any secondary service sets defined for the
radio. You can filter different types of wireless traffic that it may receive.
You may want to use this feature by itself or with an access control list
(ACL) to help secure your network. If you clear all the check boxes, the
radio cannot communicate with any other radios.

You need to check the Allow IAPP check box if you want the access point
to be able to communicate with other access points and participate in the
spanning tree.

82 MobileLAN access WA2XG System Manual

Chapter 4 — Configuring the Radios

You can use this feature to form a secure wireless hop. Clear all check
boxes, except for the Allow IAPP check box.

Or you may want to use this feature in a terminal emulation environment
when you know the end devices are sending only UDP Plus or Wireless
Transport Protocol (WTP) frames. Check the Allow UDP Plus check box
or the Allow Wireless Transport Protocol check box and clear all other
check boxes (except the Allow IAPP check box). The access point master
radio will only accept the UDP Plus or WTP frames and discard all other
frames, which can make a more secure network.

Note: If any of the devices are also DHCP clients, you need to check the
Allow DHCP check box.

To configure inbound filters

1 In the Navigation Menu, click 802.11g Radio > Advanced

Configuration > Inbound Filters (Primary Only). The Inbound
Filters screen appears.

2 For each frame type, check or clear each check box. For help, see the

next table.

3 Click Submit Changes to save your changes. To activate your changes,

from the menu bar click Save/Discard Changes, and then click Save
Changes and Reboot. For help, see “Saving Configuration Changes”
on page 30.

MobileLAN access WA2XG System Manual 83

Chapter 4 — Configuring the Radios

802.11g Radio Inbound Filter Descriptions

Parameter Description

Allow IAPP Determines if this radio accepts IAPP (Inter Access Point

Allow Wireless
Transport Protocol
(WTP)

Allow UDP Plus
(UDP/IP Port 5555)

Allow DHCP Determines if this radio accepts DHCP frames. The DHCP

Allow All Other
Protocols

Applying Hot Settings

Protocol) frames from other access point station radios. The
IAPP frames must match Ethernet protocol 875c.

Determines if this radio accepts WTP frames from end devices.
The WTP frames must match Ethernet protocol 875b.

Determines if this radio accepts UDP Plus frames from end
devices. The UDP Plus frames must match the UDP network
port 5555 on the DCS 30X, Intermec Gateway, or ARP.

frames must match UDP destination port 67 and ARP. Check
this check box if the end devices are DHCP clients.

Determines if this radio accepts all other protocols that are not
filtered by one of the filters in this screen.

You can “hot set” the Power Output Level and Mixed Mode Performance
parameters for the 802.11g radio, which means that the new settings can
be immediately activated without rebooting the access point.

To apply hot settings

1 In the Navigation Menu, click 802.11g Radio > Advanced

Configuration and change the parameters as needed.

2 Click Submit Changes to save your changes to the “current”

configuration file (as defined on page 30).

3 In the Navigation Menu, click Apply Hot Settings to save your

changes to the “active” configuration file (as defined on page 30). The
Apply Hot Settings screen appears. This screen is read-only.

84 MobileLAN access WA2XG System Manual

Configuring the Spanning

5

This chapter explains how to configure the MobileLAN access WA2XG
family of access points so that they create a spanning tree topology. This
chapter covers these topics:

• About the access point spanning tree

• Configuring the spanning tree parameters

Tree

• About IP tunnels

• Configuring IP tunnels

• Filter examples

• Comparing IP tunnels to mobile IP

• Configuring global parameters

MobileLAN access WA2XG System Manual 85

Chapter 5 — Configuring the Spanning Tree

About the Access Point Spanning Tree

MobileLAN access WA2XG family of access points with the same LAN
ID arrange themselves into a self-organized network using a spanning tree
topology. The spanning tree provides efficient, loop-free forwarding of
frames through the network and allows efficient roaming of wireless end
devices. It contains at least a primary LAN and a root access point, but it
may also contain secondary LANs, designated bridges, and other access
points.

Host

Root

Primary LAN
(root IP subnet)

Designated
bridge

Secondary LAN

This spanning tree contains a root access point on the primary LAN and a designated
bridge on the secondary LAN.

(remote IP subnet)

Within the spanning tree, access points use Intermec’s IAPP (Inter Access
Point Protocol) or secure IAPP to communicate with each other across the
Ethernet network, over wireless secondary LANs, and through IP tunnels
to remote IP subnets. IAPP also enables fast roaming in an 802.11g
network using 802.1x security. Secure IAPP prevents unauthorized
MobileLAN access products from joining the spanning tree.

For example, when an end device roams to a new access point, the new
access point informs the old access points via the root access point that any
traffic for the end device needs to be routed to the new access point. As
end devices are added to or removed from the network, access points are
automatically updated so they can maintain reliable operation and
communication.

86 MobileLAN access WA2XG System Manual