The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their res pec tive manufacturers.
Disclaimer
Information in this document is subject to cha nge witho ut no tic e and doe s no t repres e nt a commitme nt o n the par t of
Moxa.
Moxa provides this document as is, without warranty of any kind, either expressed or implied, including, but not limited
to, its particular purpose. Moxa reserves the rig ht to make improvements and/or changes to this manual, or to the
products and/or the programs described in this manual , at any time .
Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no responsibility for
its use, or for any infringements on the rights of third parties that m ay res ult fr om its use.
This product might include unintentional tec hnic a l o r typographical errors. Changes are periodically made to the
information herein to correct such errors, and these changes are incorporated into new editions of the publica tio n.
2. Getting Star ted.................................................................................................................................. 2-1
First-time Installation and Configuration ................................................................................................ 2-2
Function Map ..................................................................................................................................... 2-4
3. Web Console Configuration ............................................................................................................... 3-1
Web Browser Configuration .................................................................................................................. 3-2
Status ............................................................................................................................................. 3-47
Wireless Status ......................................................................................................................... 3-47
System Log .............................................................................................................................. 3-48
Serial Data Log (AWK-1127 Only)................................................................................................ 3-48
Power Status ............................................................................................................................ 3-48
Configuration by Telnet and SSH Consoles ............................................................................................. 5-3
Configuration by Web Browser with HTTPS/SSL ...................................................................................... 5-4
Disabling Telnet and Browser Acces s ..................................................................................................... 5-5
A. References ........................................................................................................................................ A-1
Fragment ........................................................................................................................................... A-2
The AirWorks AWK-1121/1127 enables wireless users to access network resources wirelessly. The
AWK-1121/1127 is rated to operate at temperatures ranging from 0 to 60°C for standard mode ls and -40 to
75°C for wide temperature models, and is rugged enough for any harsh industrial env ironment.
The following topics are covered in this chapter:
Overview
Package Checklist
Product Features
Functional Design
LED Indicators
Beeper
Reset Button
AWK-1121/1127 Introduction
1-2
NOTE
The above items
customized version
www.ipc2u.ru
www.moxa.pro
Overview
The AWK-1121/1127 Client is ideal for applications that are hard to wire, too expensive to wire, or use mobile
equipment that connects to a TCP/IP network. The AWK-1121/1127 can operate at temperatures ranging from
0 to 60°C for standard models and -40 to 75°C fo r wide temperature models , and is rug ged e nough for any
harsh industrial environment. Ins talla tio n is e asy , with eithe r DIN-Rail mounting or wall mounting in
distribution boxes. The DIN-Rail/wall mounting capability, wide operating temperature range, and IP30
housing with LED indicators make the AWK-1121/1127 a convenient yet reliable solution for any industrial
wireless application.
Package Checklist
Moxa’s AWK-1121/1127 is shipped with the following items. If any of these items is missing or damaged ,
please contact your customer service representative for assistan ce.
• AWK-1121/1127
• Swivel-type antenna (2dBi, RP-SMA, 2.4&5GHz)
• Quick Installation Guide
• Software CD
• Moxa Product Warranty Card
• Resistive terminator
• Protective cap
come with the standard AWK-1121/1127 model, but the package contents may vary for
s.
Product Features
• IEEE802.11a/b/g compliant
• Dedicated client
• Advanced wireless security:
64-bit and 128-bit WEP/WPA/WPA2
SSID Hiding/IEEE 802. 1X/RADIUS
Packet access control & filtering
Standard Models: 0 to 60°C (32 to 140°F)
Wide Temp. Models:
Storage Temperature:
Ambient Relative Humidity:
Power Requirements
Input
Ethernet (IEEE 802.3af
compliant
Connector:
Power Consumption:
•
• 0.
Reverse Polarity
Regulatory Approv a ls
Safety:
Radio:
EMC:
Note: Please check Moxa
Warranty
Warranty Period:
Details:
ATTENTION
•
1121/1127 is NOT a portable mobile device and should be located at least 20 cm away from the
•
trained technician should be enlisted to
www.ipc2u.ru
www.moxa.pro
1, RS-232/422/485, DB9 male connector (AWK-1127 only)
RS-232 (RJ45-type)
PWR, FAULT, STATE, signal strength, WLAN, LAN
400 g (AWK-1121), 410 g (AWK -1127)
-1121: 50 x 115 x 70 mm (2.0 x 4.5 x 2.8 in)
-1127: 50 x 127 x 70 mm (2.0 x 5.0 x 2.8 in)
DIN-Rail mounting, wall mounting (with op tional kit)
(AWK-1127 Only)
5, 6, 7, 8
1, 1.5, 2
None, Even, Odd, Space, Mark
RTS/CTS, XON/XOFF
50 bps to 921.6 Kbps
256 KB
-232: DSR, RT S , G N D, TxD, RxD, DCD, CTS, DTR
-422: Tx+, Tx-, Rx+, Rx-, GND
-485 (2-wire): Data+, Data- and GND
-485 (4-wire): Tx+, Rx+, Tx-, Rx+ and GND
-40 to 75°C (-40 to 167°F)
-40 to 85°C (-40 to 185°F)
5% to 95% (non-condensing)
Voltage: 12 to 48 VDC, redundant dual DC power inputs or 48 VDC Power-over-
, PoE model only)
4-pin removable terminal block
0.16 to 0.55 A @ 12 to 48 VDC
28 A @ 24 VDC
Protection: Present
EN60950-1, UL60950-1
EN 300 328, EN 301 893, DSPR (Ja pan)
EN 301 489-1/-17, FCC Part 15, EN 55022/55024
’s website for the most up-to-date certification status.
5 years
See www.moxa.com/warranty
The AWK-
human body.
The AWK-1121/1127 is NOT designed for the general public. A well-
ensure safe deployment of AWK -1121/1127 units, and to establish a wireless network.
AWK-1121/1127 Introduction
1-5
ATTENTION
T
interval
uncontrollable
recover the
www.ipc2u.ru
www.moxa.pro
Functional Design
LED Indicators
The LEDs on the front panel of the AWK-1121/1127 provide a quick and easy means of determining the current
operational status and wireless se ttings.
The FAULT LED indicates system failures and user-configured events. If the AWK-1121/1127 cannot retrieve
the IP addres s from a DHCP serve r or if there is an IP conflict, the FAULT LED will blink at one second intervals.
The SIGNAL LEDs indicate signal strength.
he FAULT, SIGNAL, STATE and WLAN LEDs lighting up simultaneously and blinking at one second
s indicates that the system has fai le d to boo t. This may be due to improper op eratio n o r an
factor, such as an unexpected shutdown dur ing f irmw are update. Instructions on how to
firmware can be found in Appendix B in the “Firmware Recovery” section.
Beeper
The beeper emits two short beeps when the system is ready.
AWK-1121/1127 Introduction
1-6
www.ipc2u.ru
www.moxa.pro
Reset Button
The RESET button is located on the back panel of the AWK-1121/1127. You can reboot the AWK-1121/1127 or
reset it to factory default settings by press ing the RESET button with a pointed object such as an unfo lde d
paper clip.
• System reboot: Hold the RESET button down for under 5 seco nds a nd then rele a se.
• Reset to factory defaults: Hold the RESET button down for more than 5 seconds until the STATE LED
starts blinking green. Rele ase the button to reset the AWK-1121/1127.
www.ipc2u.ru
www.moxa.pro
2
2. Getting Started
This chapter explains how to install Moxa’s AirWorks AWK-1121/1127 for the first time, and quickly set up your
wireless network and test whether the conne c tio n is running well. The function guide provide s a convenie nt
means of determining which functions you need to u s e.
The following topics are covered in this chapter:
First-time Installation and Conf iguration
Function Map
AWK-1121/1127 Getting Started
2-2
NOTE
After you
AWK
192.168.127.253
NOTE
Default user name and password:
For security reasons, we strongly recommend changing the default password. To do so,
Maintenance
www.ipc2u.ru
www.moxa.pro
First-time Installation and Configuration
Before installing the AWK-1121/1127, make sure that all items in the Package Checklist are in the box. You will
need access to a notebook computer or PC equipped with an Ethernet port. The AWK-1121/1127 has a default
IP address that must be used when connecting to the devic e for the fir s t time.
• Step 1: Select the power source.
The AWK-1121/1127 may be powered by a DC power input or PoE (Power over Ethernet, PoE model only).
• Step 2: Connect the AWK-1121/1127 to a notebook or PC.
Since the AWK-1121/1127 supports MDI/MDI-X auto-sensing, either a straight-through or crossover cable
may be used to connect to a computer. The LAN port LED indicator will lig ht up whe n a connection is
established.
• Step 3: Set up the computer’s IP address.
Choose an IP address on the same subnet as the AWK-1121/1127. Since the AWK-1121/1127’s default IP
address is 192.168.127.253, and the subnet mask is 255.255.255.0, you should set the IP address of
the computer to 192.168.127.xxx.
• Step 4: Use the web-based manager to configure the AWK-1121/1127
select Maintenance Load Factory Defaults and click the Activate button, the
-1121/1127 will be reset to factory default setting s and the IP address will be reset to
.
Open your computer’s web browser and type http://192.168.127.253 in the address field to access the
homepage of the web-based Network Manager. Before the homepage opens, you will need to enter the user
name and password as shown in the following figure. For first-time configuration, e nter the defa ult us er
name and password and then click on the Login button:
User Name: adminPassword: root
Password, and then follow the on-screen instructions to change the password.
select
AWK-1121/1127 Getting Started
2-3
NOTE
After you click
and a
blinking reminder will be shown on the upper
To
after you change the settings. About 30
seconds are needed for the
www.ipc2u.ru
www.moxa.pro
activate the changes click Restart and then Save and Restart
• Step 5: Test communications.
The following section describes one test method that can be used to verify a network connection has been
established.
Submit to apply changes the web page will refresh (Updated) will appear on the page
-right corner of the web page:
AWK-1121/1127 to complete the reboot procedure.
Communication Testing
After installing the AWK-1121/1127 a simple test may be run against an AP to make sure the AWK-1121/1127
has properly established a wireless connection and is functioning normally. In the example below, an
AWK-3121 is used as the primary access point.
How to Test an AWK-1121/1127 for Network Connectivity
Connect an AP-configured AWK-3121 (or another access point) to Notebo ok A. Connect an AWK-1121/1127 to
Notebook B. Config ure the AWK-1121/1127 and AWK-3121 for the same SSID, and set their IP addresses as
below.
After setting up the testing environment, open a DOS window on notebook B. At the prompt, type:
ping <IP address of notebook A>
and then press Enter. A “Reply from IP address …” response means the communicatio n was succe ssful. A
“Request timed out” response means the communication failed. In this case, be sur e to first reche ck the
configuration to make sure the connectio ns are corre c t.
AWK-1121/1127 Getting Started
2-4
wireless
Note: These advanced functions a r e all optional.
oriented device management functions
www.ipc2u.ru
www.moxa.pro
Function Map
Quick overview of the AWK-1121/1127’s
information
Basic settings for administering the
AWK-1121/1127
Essential settings related to establishing a
network
Advanced features to support additional network
management and secure wired and wireless
communication
Serial port settings to support add itional serial
to wireless connectivity
Note: These settings are only available for
AWK-1127
Applicationto set up events, traps, and reactions via e-mail
and SNMP notification
Note: These functions are all optional.
Real-time status information for monitoring and
maintaining network performance, advanced
services, and device management functions.
www.ipc2u.ru
www.moxa.pro
3
3. Web Console Configuration
In this chapter, we explain all aspects of web-based console configuration. Moxa’s easy-to-use management
functions help you set up your AWK-1121/1127 and make it ea sy t o establish and maintain your wireless
network.
The following topics are covered in this chapter:
Web Browser Configuration
Overview
Basic Settings
System Info Settings
Ne tw ork Settings
Time Settings
Wireless Settings
O p er ation Mode
WLAN
Advanced Setting s
Packet Filters
S NMP Ag e nt
Link Fault Pass-Through
Serial Port Settings (AWK-1127 Only)
O p er ation Modes
C o m munic a tio n Pa r amete rs
D ata B uff eri ng /Log
Auto Warning Setti ng s
System Log
Syslog
E-mail
Trap
Status
Wireless Status
System Log
S erial Data Log (AWK-1127 Only)
Power Status
Maintenance
Console Settings
Ping
Firmware Upgrade
Config Import/Export
Loading Factory Defaults
Password
Mis c . S e tting s
Save Configuration
Restart
Logout
AWK-1121/1127 Web Console Confi guration
3-2
NOTE
To use
s management and monitoring functions from a PC host connected to the same
LAN as
are on the same
logical subnet. Similarly, if
ings, you must make sure
your PC host is on the management VLAN.
The Moxa
www.ipc2u.ru
www.moxa.pro
Web Browser Configuration
Moxa AWK-1121/1127’s web browser interface provides a conve nie nt way to modif y its co nf iguration and
access the built-in monitoring and network administration functions. The reco mme nde d web bro wse r is
Microsoft
®
Internet Explorer with JVM (Java Virtual Machi ne ) installed .
1. Open your web browser (e.g., Internet Explorer) and type the AWK-1121/1127’s IP address in the address
2. The Web Console Login page will open. Enter the password (default Username = admin; default Password
the AWK-1121/1127’
the AWK-1121/1127, you must make sure that the PC host and the AWK-1121/1127
the AWK-1121/1127 is configured for other VLAN sett
AWK-1121/1127’s default IP is 192.168.127.253.
Follow these steps to access the AWK-1121/1127’s web-based console management interface.
field. Press Enter to establish the conne c tion.
= root) and then click Login to continue.
3. You may need to wait a few moments for the web page to download to your computer. Note that the Model
name and IP address of your AWK-1121/1127 are both shown in the title bar of the web page. This
information can be used to help you identify multiple AWK-1121/1127 units.
4. Use the menu tree on the left side of the window to open the functi o n pages to acce ss each of the
AWK-1121/1127’s functions.
AWK-1121/1127 Web Console Confi guration
3-3
NOTE
The model name of
code. The country code
AWK
appears
NOTE
For security reasons, you will need to log back into the
www.ipc2u.ru
www.moxa.pro
In the following paragraphs, we describe each AWK-1121/1127 management function in detail. A quick
overview is available in this manual in the “Function Map” section of Chapter 2.
-1121/1127-EU as an example in the following figures. (The country code and model name that
on your computer screen may be different than the one shown here.)
Overview
The Overview page summarizes the AWK-1121/1127’s current status. The information is categoriz ed into
several groups: System Info, Device Info, and 802.11 Info.
the AWK-1121/1127 is shown as AWK-1121/1127-XX, where XX indicates the country
indicates the AWK-1121/1127 version and which bandwidth it uses. We use
AWK-1121/1127 after a 5-minute time-out.
Click on SSID for more detailed 802.11 information, as shown in the following fig ure.
AWK-1121/1127 Web Console Confi guration
3-4
_<Serial
information about whom to contact in order to resolve
www.ipc2u.ru
www.moxa.pro
Basic Settings
The Basic Settings group includes the most commonly used settings required by administrators to maintain and
control the AWK-1121/1127.
System Info Settings
System Info labels (especially Device name) are display ed and included on the Overview page, in SNMP
information, and in alarm emails. Giving descriptive, unique labels to items under System Info makes it easier
to identify the different AWK-1121/1127 units connected to your network.
Device name
Setting Description Factory Defa ult
Max. 31 of characters This option is useful for specifying the role or application of
different AWK-1121/1127 units.
AWK-1121/1127
No. of this
AWK-1121/1127>
Device location
Setting Description Factory Defa ult
Max. of 31 characters Specifies the location of different AWK-1121/1127 units. None
Device description
Setting Description Factory Defa ult
Max. of 31 characters Use this space to record a more detailed description of the
Device contact information
Setting Description Factory Defa ult
Max. of 31 characters Provides
Network Settings
The Network Settings configuration panel allo ws yo u to modify the usual TCP/IP network parameters. An
explanation of each configuration item is given bel o w .
None
AWK-1121/1127
None
problems. Use this space to record contact informati o n of the
person responsible for maintaining this AWK-1121/1127.
AWK-1121/1127 Web Console Confi guration
3-5
Setting
Description
Factory Defa ult
is
LAN to an outside
your network. After
s address field instead of entering the IP address. The
NOTE
The
Local time
network does not have an Internet connection for
NTP server or there is no NTP server on the
LAN.
www.ipc2u.ru
www.moxa.pro
IP configuration
Setting Description Factory Defa ult
DHCP The AWK-1121/1127’s IP address will be assigned
automatically by the network’s DHCP server
Static Set up the AWK-1121/1127’s IP address manually.
IP address
Setting Description Factory Defa ult
AWK-1121/1127’s IP
address
Subnet mask
Identifies the AWK-1121/1127 o n a TCP/IP network. 192.168.127.253
Static
AWK-1121/1127’s
subnet mask
Gateway
Setting Description Factory Defa ult
AWK-1121/1127’s
default gateway
Primary/ Seco n d ar y DN S server
Setting Description Factory Defa ult
IP address of the
Primary/Secondary
DNS server
Time Settings
The AWK-1121/1127 has a time calibration function based on information from an NTP server or user specified
Date and Time information. Functions such as Auto warning c an add real-time inf or m ation to the message.
Identifies the type of network to which the AWK-1121/1127
connected (e.g., 255.255.0.0 for a Class B network, or
255.255.255.0 for a Class C network).
The IP address of the router that connects the
network.
The IP address of the DN S Server used by
entering the DNS Server’s IP address, you can input the
AWK-1121/1127’s URL (e.g., http://ap11.abc.com) in your
browser’
Secondary DNS server will be used if the Primary DNS server
fails to connect.
255.255.255.0
None
None
The Current local time shows the AWK-1121/1127’s system time when you open this web page. You can click
on the Set Time button to activate the updated date and time parameters. An “(Updated)” string will appear
to indicate that the change is complete. Local time settings will be immediately activated in the system without
running Save and Restart.
AWK-1121/1127 has a built-in real time clock (RTC). We strongly recommend that users update the
for the AWK-1121/1127 after the initial setup or a long-term shutdow n, esp e c ially w he n the
accessing the
AWK-1121/1127 Web Console Confi guration
3-6
GMT (Greenwich
ATTENTION
Changing the time zone will automatically
zone
the summer
the time is updated from
NOTE
Although it is more convenient to use dynamic bridging, there is a limitation
AP Client can only transmit
IP
of traffic
(such as IPX and AppleTalk) are not forwarded.
www.ipc2u.ru
www.moxa.pro
Current local time
Setting Description Factory Defa ult
User adjustable time The date and time parameters allow configuration of the local
time, with immediate activation.
Use 24-hour format: yyyy/mm/dd hh:mm:ss
Time zone
Setting Description Factory Defa ult
User selectable time
zone
The time zone setting allows conversion from
Mean Time) to local time.
None
GMT (Greenwich
Mean Time)
before setting the Current local time.
Daylight saving time
Setting Description Factory Defa ult
Enable/Disable Daylight saving time (also know as DST or summer time)
involves advancing clocks (usually 1 hour) during
time to provide an extra hour of daylight in the afternoon.
When Daylight saving time is enabled, the following parameters will be shown:
• Starts at: The date that daylight sav ing time be g ins .
• Stops at: The date that daylight saving time ends.
• Time offset: Indicates how many hours forward the clock should be advanced.
Time server 1/2
Setting Description Factory Defa ult
IP/Name of Time
Server 1/2
Query period
Setting Description Factory Defa ult
Query period time
(1 to 9999 seconds)
IP or Domain name of the NTP time server. The 2nd NTP server
will be used if the 1st NTP server fails to connect.
This parameter deter mines h ow often
the NTP server.
adjust the Current local time. You should configure the Time
Disabled
time.nist.gov
600 (seconds)
Wireless Settings
The essential settings for wi reless networks are presented in this function group. Settings must be properly set
before establishing your wireless network. Familiarize yourself with the following terms before starting the
configuration process:
The AWK-1121/1127 as a client can b e used as an Etherne t-to-wir e le s s (or LAN-to-WLA N) netw or k ad apter.
For example, a notebook computer equipped with an Ethernet adaptor but no wireless card can be connected
to this device with an Ethernet cable to provide wireless connectivity to another AP.
-based packets betwee n its wirel e s s interf ac e (WLAN) and Ethernet interface (LAN); other types
—the
AWK-1121/1127 Web Console Confi guration
3-7
www.ipc2u.ru
www.moxa.pro
Operation Mode
The AWK-1121/1127 is a dedicated WLAN client, so its only operation mode is client. Other client-based
operation modes may be added in the future firmware releases.
Wireless Enable
Setting Description Factory Defa ult
Enable/Disable The RF (Radio Frequency) module can be manually turned on or
off.
Enable
Operation Mode
Setting Description Factory Defa ult
Client The AWK-1121/1127 only operates as a wireless client. Client
WLAN
Basic Wireless Settings
The “WLAN Basic Setting Selection” panel is used to edit SSIDs and set the RF type. T he RF type selection will
configure the AWK-1121/1127 to either the 2.4GHz or 5GH z frequency band. An SSID is a unique identifier that
wireless networking devices use to establish and maintain wireless connectivity. Set the SSID parame ter to
match that of the APs you wish to connect to, so that the AWK-1121/1127 will associate with network defined
by the SSID.
AWK-1121/1127 Web Console Confi guration
3-8
NOTE
Click the “Site Survey” button to view information about available APs, as
If this
client is connecting to an AP, a brief disconnection will occur during site survey. You can click on the SSID of an
entity and bring the value
Click
for the client and AP
to be able to communicate with each other.
NOTE
The
SSIDs,
EU (for European
frequency bands) only connects
www.ipc2u.ru
www.moxa.pro
of its SSID onto the SSID field of the Basic Wirele s s Se tting s page .
the Refresh button to re-s c an and update the table.
shown in the following figure.
RF type
Setting Description Factory Defa ult
A Supports IEEE 802.11a standard only B/G Mixed
B Supports IEEE802.11b standard only
G Supports IEEE802.11g standard only
B/G Mixed Supports both of IEEE802.11b/g standards, but 802.11g can be
slowed down when 802.11b clients are on the network
SSID
Setting Description Factory Def a ult
Max. of 31 characters The SSID must be identical to the target AP
AWK-1121/1127-JP (for Japanese freq uency ba nds) connects o nl y APs wi th broadcast (i.e: not hidden)
in all IEEE802.11a channels and IEEE802.11g channels 1 to 11. The AWK-1121/1127-
APs with hidden SSIDs in all IEEE802.11b /g channe l s .
MOXA
AWK-1121/1127 Web Console Confi guration
3-9
www.ipc2u.ru
www.moxa.pro
WLAN Security Settings
The AWK-1121/1127 provides four standardized wireless security modes: Open, WEP (Wired Equivalent
Privacy), WPA (Wi-Fi Protected Access), and WPA2. Several security modes are availab l e in the
AWK-1121/1127 by selecting Security mode and WPA type:
• Open: No authentication, no data encryptio n.
• WEP: Static WEP (Wired Equivalent Privacy) keys must be configured manually.
• WPA/WPA2-Personal: Also known as WPA/WPA2-PSK. You will need to specify the Pre-Shared Key in the Passphrase field, which will be used by the TKIP or AES engine as a master key to generate keys that
actually encrypt outgoing packets and decryp t inc oming packets.
• WPA/WPA2-Enterprise: Also called WPA/WPA2-EAP (Extensible Authentication Protocol). In addition to
device-bas ed authe ntic ati o n, WPA /W PA 2-Enterprise enables user-based authentic ation via IEEE802.1X.
The AWK-1121/1127 can support three EAP methods: EAP-TLS, EAP-TTLS, and EAP-PEAP.
Security mode
Setting Description Factory Defa ult
Open No authentication Open
WEP Static WEP is used
WPA Fully supports IEEE802.11i with “TKIP/AES + 802.1X”
WPA2 Fully supports IEEE802.11i with “TKIP/AES + 802.1X”
Open
For security reasons, you should NOT set security mode to Open (or “Open System”), since authentication and
data encryption are NOT performed in Open (or “Open System” ) mode.
WEP
According to the IEEE802.11 standard , WEP can be used for authenticat i o n and data encryption to maintain
confidentiality. Shared (or Shared Key) authentication type is used if WEP authentication and data encryption
are both needed. Normally, Open (or Open System) authentication type is used when WEP data encryption is
run with authentication.
When WEP is enabled as a security mode, the length of a key (so-called WEP seed) can be specified as 64/128
bits, which is actually a 40/104-bit secret key with a 24-bit initialization vector. The AWK-1121/1127 provides
4 entities of WEP key settings that can be selected to use with Key index. The select ed key sett ing specifies the
key to be used as a send-key for encrypting traffic from the AP side to the wireless client side. All 4 WEP keys
are used as receive-keys to decrypt traffic from the wireless client side to the AP side.
The WEP key can be presented in two Key types, HEX and ASCII. Each ASCII character has 8 bits, so a 40-bit
(or 64-bit) WEP key contains 5 charac ter s , and a 104-bit (or 128-bit) key has 13 characters. In hex, each
character uses 4 bits, so a 40-bit key has 10 hex characters, and a 104-bit key has 26 hex characters.
AWK-1121/1127 Web Console Confi guration
3-10
RC4 encryption
www.ipc2u.ru
www.moxa.pro
Authentication type
Setting Description Factory Defa ult
Open Data encryption is enabled, but without authentication Open
Shared Data encryption and authentication are both e nabled.
Key type
Setting Description Factory Defa ult
HEX Specifies WEP keys in hex-decimal numb e r form HEX
ASCII Specifies WEP keys in ASCII form
A string that can be us ed as a WE P seed for the
engine.
None
WPA/WPA2-Personal
WPA (Wi-Fi Protected Access) and WPA2 represent significant improvements over the WEP encryption method.
WPA is a security standard based on 802.11i draft 3, while WPA2 is based on the fully ratified version of 802.11i.
The initial vector is transmitted, encrypted, and enhanced with its 48 bits, twice as long as WEP. The key is
regularly changed so that true session is secur ed.
Even though AES encryption is only include d in the WPA2 s tandar d, it is widely available in the WPA security
mode of some wireless APs and clients as well. The AWK-1121/1127 also supports AES algorithms in WPA and
WPA2 for better compatibility.
Personal versions of WPA/WPA2, also known a s WPA/WPA -PSK (Pre-Shared Key), provide a simple way of
encrypting a wireless connection for high confidentiality. A Passphrase is used as a basis for encryption
methods (or cipher types) in a WLAN connection. The passphrases should be complicated and as long as
possible. There must be at least 8of ASCII characters in the Passphrase, and it could go up to 63. For security
reasons, this p assp hras e sho uld only be disclosed to users who need it, and it should be changed regularly.
AWK-1121/1127 Web Console Confi guration
3-11
TKIP
Temporal Key Integrity Protocol is enable d
802.1X, which is much more commonly implemented.
Setting
Description
Factory Defa ult
www.ipc2u.ru
www.moxa.pro
WPA type
Setting Description Factory Defa ult
Personal Provides Pre-Shared Key-enabled WPA and WPA2 Personal
Enterprise Provides enterprise-level sec urity for WPA and WPA2
Encryption method
Setting Description Factory Defa ult
TKIP
AES Ad vance Encryption System is enabled
EAPOL Version
Setting Description Factory Defa ult
1 EAPOL version 1 was standardized in the 2001 version of
1
2 EAPOL version 2 was specified in 802.1X-2004.
Passphrase
Setting Description Factory Defa ult
8 to 63 characters Master key to generate keys for encryptio n and decryption None
WPA/WPA2-Enterprise
When used as a client, the AWK-1121/1127 can support three EAP methods (or EAP protocols): EAP-TLS,
EAP-TTLS, and EAP-PEAP, corresponding to WPA/WPA2-Enterp rise settings on the AP side.
EAP Protocol
TLS Specifies Transport Layer Security protocol TLS
TTLS Specifies Tunneled Transport Layer Security
PEAP Specifies Protected Extensible Authentication Protocol, or
Protected EAP
Before choosing the EAP protocol for your WPA/WPA2-Enterpise settings on the client end, please contact the
network administrator to make sure the system supports the protocol on the AP end. Detailed information on
these three popular EAP protocols is presented in the fo llo wing sections.
AWK-1121/1127 Web Console Confi guration
3-12
www.ipc2u.ru
www.moxa.pro
EAP-TLS
TLS is the standards-based successor to Secure Sock et La ye r (SSL ). It can establish a trusted communication
channel over a distrusted network. TLS provides mutual authentication through certificate exchange. EAP-TLS
is also secure t o use. You are required to submit a digital certificate to the authentication server for validation,
but the authentication server must also supply a certificate.
You can use Basic Wireless Settings WLAN Certificate Settings to import your W LAN certificate and
enable EAP-TLS on the client end.
• Certificate issued to: Shows the certificate user
• Certificate issued by: Shows the certificate issuer
• Certificate expiration date: Indicates when the certificate has expired
EAP-TTLS
It is usually much easier to re-use existing authenticatio n s ystems, such as a Windows domain or Active
Directory, LDAP directory, or Kerberos realm, rather than creating a parallel authentication system. As a result,
TTLS (Tunneled TLS) and PEAP (Protected EAP) are used to support the use of so-called “legacy authentication
methods.”
TTLS and PEAP work in a similar way. First, they establish a TLS tunnel (EAP-TLS for example), and validate
whether the network is trustworthy with digital certificates on the authentication server. This step establishes
a tunnel that protects the next step (or “inner” authentication), and consequently is sometimes referred to as
“outer” authentication. The TLS tunnel is then used to encrypt an older authentication protocol that
authenticates the user for the network.
As you can see, digital certificates are still need ed for outer authentication in a simplified form. Only a small
number of certificates are required, which can be generated by a small certificate authority. Certificate
reduction makes TTLS and PEAP much more popular than EAP-TLS.
The AWK-1121/1127 provides some non-cryptographic EAP methods, including PAP, CHAP, MS-CHAP, and
MS-CHAP-V2. These EAP methods are not recommended for direct use on wireless networks. However, they
may be useful as inner authentication method s with TTL S and PEAP.
Because the inner and outer authentications can use distinc t us e r name s in TTLS and PEAP, you can use an
anonymous user name for the outer authentication, with the true user name only shown through the encrypted
channel. Keep in mind that not all client software supports anonymous alteration. Confirm this with the network
administrator before you enable identity hiding in TTLS and PEAP.
AWK-1121/1127 Web Console Confi guration
3-13
www.ipc2u.ru
www.moxa.pro
TTLS Inner Authentication
Setting Description Factory Defa ult
PAP Password Authentication Protocol is used MS-CHAP-V2
CHAP Challeng e Hand s hake Authe ntic ati o n Protocol is used
MS-CHAP Microsoft CHAP is used
MS-CHAP-V2 Microsoft CHAP version 2 is used
Anonymous
Setting Description Factory Defa ult
Max. of 31 characters A distinct name used for outer authentication None
User name & Password
Setting Description Factory Defa ult
User name and password used in inner authentication None
PEAP
There are a few differences in the TTLS and PEAP inner authentication procedures. TTLS uses the encrypted
channel to exchange attribute-value pairs (AVPs), while PEAP uses the encrypted channel to start a second EAP
exchange inside of the tunnel. The AWK-1121/1127 provides MS-CHAP-V2 merely as an EAP method for inner
authentication.
AWK-1121/1127 Web Console Confi guration
3-14
Setting
Description
Factory Defa ult
Setting
Description
Factory Defa ult
NOTE
Transmission power
However, the
country,
regulatory limitations
Wireless Status
for
Setting
Description
Factory Defa ult
splitting and
www.ipc2u.ru
www.moxa.pro
Inner EAP protocol
Setting Description Factory Defa ult
MS-CHAP-V2 Microsoft CHAP version 2 is used MS-CHAP-V2
Anonymous
Setting Description Factory Defa ult
Max. of 31 characters A distinct name used for outer authentication None
User name & Password
Setting Description Factory Defa ult
User name and password used in inner authentication None
Advanced Wireless Settings
Additional wireless-related parameters are presented in this section to help you set up your wireless network
in detail.
Transmission Rate
Auto The AWK-1121/1127 senses and adjusts the data rate
automatically
Available rates Users can manually s e lect a targ e t trans mi s s io n data rate
Transmission Power
0 – 20 dBm The maximum power which the AWK may use for transmission 10 dBm
actual transmitted power depends on the radio module and other factors, such as the
the actual value of the transmission power that the AWK is currently using.
Fragmentation thr e s hol d
Fragment Length
(256 to 2346)
indicates the maximum value of transmission power which the user plans to use .
, and data rate. Please check the Transmission power in Status >
Specifies the maximum size a data packet before
creating another new packet
Auto
2346
AWK-1121/1127 Web Console Confi guration
3-15
etermines how large a packet can be before the Access Point
NOTE
Y
settings. By setting these parameters properly, you can better tune the performance of your wireless network.
WMM is a QoS standard for WLAN traffic. Voice and video data
www.ipc2u.ru
www.moxa.pro
RTS threshold
Setting Description Factory Defa ult
RTS/CTS Threshold
(256 to 2346)
ou can refer to the related glossaries in Appendix A for detailed information about the abov e -mentioned
Noise protection
Setting Description Factory Defa ult
Enable/Disable Adjusts the interference coping capability of the wireless signal.
Antenna
Setting Description Factory Defa ult
MAIN The MAIN antenna is used for wireless communication. Main
AUX The AUX antenna is used for wireless communication.
D
coordinates transmission and reception to ensure efficient
communication
This option should be enabled for communicatio n d is tanc e
under 500 meters, and should be disabled for communication
distances over 500 meters.
2346
Disable
Note: For installation flexibility, either the MAIN antenna (on the front panel) or the AUX antenna (on the top
panel) may be selected for use. Make sure the antenna connection matches the ante nna co nf i g ure d in the
AWK-1121/1127 interface.
To protect the connectors and RF module, all radio ports should be terminated by either an antenna or a
terminator. The use of the resistive terminator for term inating the unused antenna port is strongly
recommended.
WMM
Setting Description Factory Defa ult
Enable/Disable
will be given priority bandwidth when enabl e d with WMM
supported wireless clients.
Turbo Roaming
Setting Description Factory Defa ult
Enable/Disable Moxa’s Turbo Roaming can enable rapid handover when the
AWK-1121/1127, as a client, roams among a group of APs.
When Turbo Roaming is enabled, the RF type, AP alive check, and Scan channels will be shown as follows. RF
type shows the current RF type that this client is using. AP alive check will check if the AP connection is still
available. When this function is enabled, a check will be done every 10 ms. You can set up Scan c hanne ls for
the APs among which this client is going to roam. There are three Scan channels available. Note that the Scan
channels may need to be modified when the RF type is changed. (For example, channel 36 is not available in
B, G, or B/G Mix mode.)
Disable
Disable
AWK-1121/1127 Web Console Confi guration
3-16
NOTE
The WLAN certificate will
, it can still be
seen on
www.ipc2u.ru
www.moxa.pro
WLAN Certification Settings
When EAP-TLS is used, a WLAN Certificate will be required at the client end to support WPA/WPA2-Enterprise.
The AWK-1121/1127 can support the PKCS #12, also known as Personal Information Exc hange Syntax Standard, certificate formats that define file formats commonly used to store private keys with accompanying
public key certificates, protected with a password-based symmetric key.
Current Status displays information for the current WLAN certificate, which has been imported into the
AWK-1121/1127. Nothing will be shown if a certificate is not available.
Certificate issued to: Shows the certificate user
Certificate issued by: Shows the certificate issuer
Certificate expiration date: Indicates when the certificate has expired
You can import a new WLAN certificate in Import WLAN Certificate by following these steps, in order:
1. Input the correspo nding password (or key) in the Certificate private password field and then click
Submit to set the password.
2. The password will be displayed in the Certificate pr ivate p assword f ie ld. Click on the Browse button in Select certificat e/key file and select the certificate file.
3. Click Upload Certificate File to import the certificate file. If the import succeeds, you can see the
information uploaded in Current status. If it fails, you may need to return to step 1 to set the password
correctly and then import the certific ate fil e again.
Advanced Settings
remain after the AWK-1121/1127 reboots. Even though it is expired
the Current status.
Several advanced functions are available to increase the functionality of your AWK-1121/1127 and wireless
network system. The DHCP server helps you deploy wireless clients efficiently. Packet filters provide security
mechanisms, such as firewalls, in different netwo rk laye rs . Moreover, the AWK-1121/1127 s upports SNMP,
making network management easier.
Loading...
+ 67 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.