How it Works
Ruckus Wireless
Loading...
ZoneFlex 7321
Quick Setup Manual
2 pgs474.32 Kb0
User Manual
138 pgs2.37 Mb0
User Manual
128 pgs2.18 Mb0
User Manual
193 pgs7.68 Mb0

Ruckus Wireless ZoneFlex, ZoneFlex 2942, ZoneFlex 7942, ZoneFlex 7962, ZoneFlex 7341 User Manual

...
Download
Page 1
Ruckus Wireless™ ZoneFlex
™
Indoor Access Point
Release 9.4 User Guide
For the following indoor ZoneFlex AP models:
■ ZoneFlex 2942 802.11g Smart Wi-Fi Access Point
■ ZoneFlex 7962 Dual Band 802.11n Smart Wi-Fi Access Point
■ ZoneFlex 7363 Dual Band 802.11n Smart Wi-Fi Access Point
■ ZoneFlex 7982 Dual Band 802.11n Smart Wi-Fi Access Point
Part Number 800-70379-001 Published March 2012
www.ruckuswireless.com
Page 2
Page 3
i
About This Guide
Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . i
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ii
Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ii
1
Introducing the ZoneFlex Access Point
Overview of the ZoneFlex Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Unpacking the ZoneFlex Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Getting to Know the Access Point Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
ZoneFlex 2942/7942 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
ZoneFlex 7962 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
ZoneFlex 7341 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
ZoneFlex 7343 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
ZoneFlex 7363 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
ZoneFlex 7321 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
ZoneFlex 7982 Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
2
Installing the Access Point
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Prepare the Required Hardware and Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Perform a Site Survey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Determine the Optimal Mounting Location and Orientation . . . . . . . . . . . . . . . 29
Step 1: Preconfigure the Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Configuring for Management by ZoneDirector . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Configuring for Standalone Operation or for Management by FlexMaster . . . . 36
Step 2: Verify Access Point Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Connect the Access Point to the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Associate a Wireless Client with the Access Point . . . . . . . . . . . . . . . . . . . . . . . . 43
Check the LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Check the TR069 Status (FlexMaster Management Only) . . . . . . . . . . . . . . . . . . 44
Contents
Page 4
ii
Disconnect the Access Point from the Network . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Step 3: Deploy the Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
1. Choose a Location for the Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
2. Connect the Access Point to a Power Source and the Network . . . . . . . . . . . 46
Troubleshooting Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
3
Navigating the Web Interface
Logging Into the ZoneFlex Web Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Navigating the Web Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
If You Are Using a Dual Band ZoneFlex Access Point. . . . . . . . . . . . . . . . . . . . . . . . .51
4
Configuring the Access Point
Configuring Device Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Configuring Internet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
VLAN Settings Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Configuring NTP Server and Management VLAN . . . . . . . . . . . . . . . . . . . . . . . . 56
Default IP Addressing Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Obtaining and Assigning an IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Configuring L2TP Connection Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configuring Local Subnets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Configuring Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Configuring Common Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Configuring Wireless # Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Configuring Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82
Setting Ethernet Port Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Working with 802.1X on Wired Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Working with Port-Based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Configuring Hotspot Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
Customizing Hotspot Optional Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Creating a Hotspot Walled Garden . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Allowing Unrestricted Access by MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . 93
5
Managing the Access Point
Viewing Current Device Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
Viewing Current Internet Connection Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .97
Page 5
iii
Viewing Current Local Subnet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98
Viewing Current Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99
Viewing Associated Wireless Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
Changing the Administrative Login Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101
Enabling Other Management Access Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102
Viewing FlexMaster Management Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Pointing the AP to FlexMaster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Working with Event Logs and Syslog Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
Enabling Logging and Sending Event Logs to a Syslog Server . . . . . . . . . . . . . 108
Sending a Copy of the Log File to Ruckus Wireless Support . . . . . . . . . . . . . . . 109
Saving a Copy of the Current Log to Your Computer . . . . . . . . . . . . . . . . . . . . 109
Upgrading the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110
Upgrading Manually via FTP or TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Upgrading Manually via the Web . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Upgrading Manually via Local File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Scheduling Automatic Upgrades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Rebooting the Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112
Resetting the Access Point to Factory Defaults. . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
Running Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114
Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116
Index
Page 6
iv
Page 7
i
About This Guide
About This Guide
This guide describes how to install, configure, and manage the Ruckus Wireless™ ZoneFlex
™
Access Point. This guide is written for those responsible for installing and managing network equipment. Consequently, it assumes that the reader has basic working knowledge of local area networking, wireless networking, and wireless devices.
NOTE: If release notes are shipped with your product and the information there differs from the information in this guide, follow the instructions in the release notes.
Most user guides and release notes are available in Adobe Acrobat Reader Portable Document Format (PDF) or HTML on the Ruckus Wireless Support Web site at:
http://support.ruckuswireless.com/
Document Conventions
Ta bl e 1 and Table 2 list the text and notice conventions that are used throughout this
guide.
Tabl e 1 . Text C o n v e n tio n s
Convention Description Example
monospace
Represents information as it appears on screen
[Device name]>
monospace bold
Represents information that you enter
[Device name]> set ipaddr 10.0.0.12
default font bold
Keyboard keys, software buttons, and field names
On the Start menu, click All Programs.
italics
Screen or page names Click Advanced Settings.
The Advanced Settings page appears.
Page 8
ii
About This Guide
Related Documentation
In addition to this User Guide, each ZoneFlex Access Point documentation set includes the following:
■ Quick Start Guide: Provides essential installation and configuration information to
help you get the AP up and running within minutes.
■ Online Help: Provides instructions for performing tasks using the Access Point’s
Web interface. The online help is accessible from within the Web interface.
■ Release Notes: Provide information about the current software release, including
new features, enhancements, and known issues.
NOTE: If you will be managing your ZoneFlex Access Points using ZoneDirector, refer to the ZoneDirector User Guide (available from the Ruckus Wireless website).
Documentation Feedback
Ruckus Wireless is interested in improving its documentation and welcomes your comments and suggestions. You can email your comments to Ruckus Wireless at:
[email protected]
When contacting us, please include the following information:
■ Document title
■ Document part number (on the cover page)
■ Page number (if appropriate)
For example:
■ Ruckus Wireless ZoneFlex Indoor Access Point Release 9.4 User Guide
■ Part number: 800-70379-001
■ Page 88
Table 2. Notice Conventions
Icon Notice Type Description
Information Information that describes
important features or instructions
Caution Information that alerts you to
potential loss of data or potential damage to an application, system, or device
Warning Information that alerts you to
potential personal injury
Page 9
1
1
Introducing the ZoneFlex Access Point
Overview of the ZoneFlex Access Point
Congratulations on your purchase of the Ruckus Wireless ZoneFlex Access Point! ZoneFlex Access Points are the industry’s most easy to use, yet robust and feature­rich Wi-Fi Access Points designed to bring power and simplicity together for large­scale indoor deployments.
Your ZoneFlex Access Point uses BeamFlex™, a patented antenna technology from Ruckus Wireless that allows wireless signals to navigate around interference, extend wireless signal range, and increase speeds and capacity for wireless networks. The BeamFlex™ antenna system consists of an array of up to fourteen high-gain direc­tional antenna elements that allow ZoneFlex Access Points to find quality signal paths in a changing environment, and sustain the baseline performance required for supporting data, audio and video applications.
Your ZoneFlex Access Point can be deployed in standalone mode or as part of the ZoneFlex Smart WLAN system, in which it can be managed by either FlexMaster or ZoneDirector WLAN controller.
NOTE: For more information on the ZoneFlex system (including FlexMaster and ZoneDirector), BeamFlex, and other Ruckus Wireless technologies, visit
www.ruckuswireless.com
.
In This Chapter
Overview of the ZoneFlex Access Point
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Unpacking the ZoneFlex Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Getting to Know the Access Point Features
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Page 10
2
Introducing the ZoneFlex Access Point
Unpacking the ZoneFlex Access Point
Unpacking the ZoneFlex Access Point
1. Open the Access Point package, and then carefully remove the contents.
2. Return all packing materials to the shipping box, and put the box away in a dry
location.
3. Verify that all items listed in Package Contents
below are included in the package. Check each item for damage. If any item is damaged or missing, notify your authorized Ruckus Wireless sales representative.
Package Contents
A complete Access Point package contains all of the items listed below:
■ ZoneFlex Access Point
■ Software License Agreement/Product Warranty Statement
■ Quick Setup Guide
■ (Ethernet cables, power adapters and mounting kits are optional accessories that
may or may not be included depending on the SKU purchased)
Getting to Know the Access Point Features
This section identifies the physical features of each ZoneFlex Access Point model that is discussed in this guide. Before you begin the installation process, Ruckus Wireless recommends that you become familiar with these features.
■ ZoneFlex 2942/7942 Access Point
■ ZoneFlex 7962 Access Point
■ ZoneFlex 7341 Access Point
■ ZoneFlex 7343 Access Point
■ ZoneFlex 7363 Access Point
■ ZoneFlex 7321 Access Point
■ ZoneFlex 7982 Access Point
NOTE: This User Guide does not include information on ZoneFlex Outdoor Access Points, ZoneFlex 7731 Wireless Bridge, or ZoneFlex 7025 Multimedia Wi-Fi Wall Switch. For information on those ZoneFlex models (along with Ruckus Wireless MediaFlex and MetroFlex product lines, and FlexMaster server), refer to their respec­tive documentation available from support.ruckuswireless.com
.
Page 11
3
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
ZoneFlex 2942/7942 Access Point
The side panel of ZoneFlex 2942/7942 features four LED indicators that can be used to assess both device and network status. The rear view displays the connector panel, which includes the LAN ports and the optional external antenna connection. Refer to the following illustrations and tables to learn more.
Side Panel Features
The ZoneFlex 2942/7942 chassis includes a Kensington lock (on the side of the unit opposite the OPT and DIR LEDs) and a lockable “sliding door” (shown in Figure 1
) that hides and protects the rear connector I/O panel and status LEDs. As your AP may be placed in a public location, the lock and door mechanisms can help prevent tampering or theft.
Figure 1. ZoneFlex 2942/7942 side panel features
Tabl e 3
lists the various LED states on ZoneFlex 2942/7942 and describes what each LED state means. It also describes how to use the HARD RESET button and other elements on the side panel.
Table 3. ZoneFlex 2942/7942 side panel elements
Number LED/Button Name Description
1 OPT LED Not used in this model
6
5
1
2
3
4
7
8
Page 12
4
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
2 DIR LED • Off: The Access Point is not being managed by
ZoneDirector (standalone mode).
• Green: The Access Point is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds):
The Access Point is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The Access Point is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
3 AIR LED • Off: The WLAN service is down.
• Green: The AP is functioning as a Root AP (RAP) or Mesh AP (MAP), and the uplink signal is good.
• Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink.
• Fast flashing green (two flashes every second): The Access Point is functioning as a Mesh AP and the wireless signal to its uplink AP is fair.
4 WLAN LED •Off: The WLAN service is down.
• Amber: The WLAN is up, but no clients are associated and no downlink MAPs are connected.
• Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected.
• Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated.
• Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected, and at least one client is associated.
5 HARD RESET
Button
Pushing and quickly releasing this button reboots the AP. Pushing and holding it for six seconds resets the AP to factory defaults.
6 Sliding Door Protects the ports, buttons, and connector on rear
panel
Table 3. ZoneFlex 2942/7942 side panel elements
Number LED/Button Name Description
Page 13
5
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel Features
Figure 2 shows the rear panel of the ZoneFlex 2942/7942. For a description of each
rear panel part, refer to Tab l e 4
.
Figure 2. ZoneFlex 2942/7942 rear panel features
WARNING: For units with Power over Ethernet (PoE). These products and all inter- connected equipment must be installed indoors within the same building, including the associated LAN connections, as defined by Environment A of the IEEE 802.3af Standard.
7 Kensington Lock The Kensington lock feature, located on the
opposite side of the unit from the pictured LEDs, is designed to prevent the sliding door from opening, thus locking the unit. The Kensington lock works with a Kensington MicroSaver lock.
8 Power LED (front) • Off: Off
• Red: Boot up in process
• Green: On
Table 3. ZoneFlex 2942/7942 side panel elements
Number LED/Button Name Description
1
2 3
4
5
6
Page 14
6
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
CAUTION: The external antenna connectors are for indoor use only. Do not connect
them to outdoor antennas.
Table 4. ZoneFlex 2942/7942 rear panel elements
Number Item Name Description
1 Power Connect the power adapter to this socket. (Input
110-240V AC, Output 12V 1.0A DC). Power can also be supplied via 10/100 PoE port.
2 Lock Hasp The lock hasp works with a cable or Ruckus mounts.
The recommended lock type is Masterlock 120 series (D, T, Q, KAD types).
3 External RP-SMA
Connector
• ZoneFlex 2942: One external antenna connector
• ZoneFlex 7942: None
4 LAN Ports • ZoneFlex 2942: Two RJ-45 ports, supporting 10/
100 PoE (Power over Ethernet) and 10/100Mbps connections.
• ZoneFlex 7942: Two RJ-45 ports, supporting 10/ 100/1000 PoE (Power over Ethernet) and 10/100/ 1000Mbps connections.
Each Ethernet port has two LEDs, which indicate the type of device that is connected to the port.
5 OPTIONAL Button Not active in this model at this time.
6 SOFT RESET
Button
Used to reset the AP. This is a normal reset and does not reset the AP back to factory defaults.
Table 5. Behavior of Ethernet port LEDs on ZoneFlex 2942/7942
LEDs Description
Off Not connected
Steady flashing Amber + Green Connected to 10Mbps device
Steady flashing Amber Connected to 100Mbps device
Steady flashing Green Connected to 1000Mbps device
Intermittent flashing Amber + Green
Connected to 10Mbps device, and passing traffic
Intermittent flashing Amber Connected to 100Mbps device, passing traffic
Intermittent flashing Green Connected to 1000Mbps device, passing traffic
Page 15
7
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
ZoneFlex 7962 Access Point
The physical features of ZoneFlex 7962 are very similar to ZoneFlex 2942/7942. It uses the same dome-type chassis with the sliding door and Kensington lock on the side panel. There are slight differences, however, in the side panel and rear panel elements. Refer to the illustrations below for more information.
Side Panel Features
Figure 3 illustrates the side panel features of the ZoneFlex 7962. For a description of
each rear panel part, refer to Tab le 6
.
Figure 3. ZoneFlex 7962 side panel
Table 6. ZoneFlex 7962 side panel elements
Number LED/Button Name Description
1 OPT LED Not used in this model
1
2
3
4
5
6
7
8
Page 16
8
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
2 DIR LED • Off: The Access Point is not being managed by
ZoneDirector (standalone mode).
• Green: The Access Point is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds):
The Access Point is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The Access Point is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
3 2.4G LED (WLAN) • Off: The WLAN service is down.
• Green: The WLAN service is up, at least one client is associated, and signal quality is good (RSSI >=
15).
• Flashing green (two flashes every second): The WLAN service is up but no clients are associated.
• Amber: The WLAN service is up, at least one client is associated, but signal quality is poor (RSSI < 15).
4 5G LED (WLAN) •Off: The WLAN service is down.
• Green: The WLAN service is up, at least one client is associated (standalone), or at least one downlink MAP is connected (RAP), or uplink RAP is connected (MAP), and signal quality is good (RSSI >= 15).
• Fast flashing green (two flashes every second): The WLAN service is up but no clients are associated (standalone), no downlink MAPs are connected (RAP), or no uplink RAP is connected (MAP).
• Amber: The WLAN service is up, at least one wireless client is associated (standalone), or at least one downlink MAP is connected (RAP), or uplink RAP is connected (MAP), but signal quality is poor (RSSI < 15).
Table 6. ZoneFlex 7962 side panel elements
Number LED/Button Name Description
Page 17
9
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
5 HARD RESET
Button
Pushing and quickly releasing this internal button reboots the AP. Pushing and holding it for six seconds resets the AP to factory default settings.
CAUTION! Resetting the AP to factory default settings will erase all settings that you configured previously.
6 Sliding Door Protects the ports, buttons, and connector on the
rear panel
7 Kensington Lock The Kensington lock feature, located on the
opposite side of the unit from the pictured LEDs, is designed to prevent the sliding door from opening, thus locking the unit. The Kensington lock works with a Kensington MicroSaver lock.
8 Power LED (front) • Off: Off.
• Amber: Boot up in process.
• Green: On.
Table 6. ZoneFlex 7962 side panel elements
Number LED/Button Name Description
Page 18
10
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel Features
Figure 4 shows the rear panel of the ZoneFlex 7962. For a description of each rear
panel part, refer to Table 7
.
Figure 4. ZoneFlex 7962 rear panel features
Table 7. ZoneFlex 7962 rear panel elements
Number Item Name Description
1 Power Connect the power adapter to this socket. (Input
110-240V AC, Output 12V 1.0A DC). Power can also be supplied via the 10/100/1000 PoE port.
2 Lock Hasp The lock hasp works with a cable or Ruckus Wireless
mounts. The recommended lock type is Masterlock 120 series (D, T, Q, KAD types).
3 LAN Ports Two RJ-45 ports, one for a 10/100/1000 PoE (Power
over Ethernet) connection and another for a 10/100/ 1000Mbps connection.
Each Ethernet port has two LEDs, which indicate the type of device that is connected to the port.
• Flashing green + amber: 10Mbps Layer 2 device
• Flashing amber: 100Mbps Layer 2 device
• Flashing green: 1000Mbps Layer 2 device
1
2 3
4
5
Page 19
11
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
ZoneFlex 7341 Access Point
ZoneFlex 7341 features five LEDs on its front panel, and buttons and connectors on its rear panel.
Front Panel
Figure 5 shows the front panel of the ZoneFlex 7341. For a description of each front
panel part, refer to Table 8
.
Figure 5. ZoneFlex 7341 front panel
4 OPTIONAL Button Not active in this model at this time.
5 SOFT RESET
Button
Use to reset AP. This is a normal reset and does not set AP back to factory defaults.
Table 8. ZoneFlex 7341 front panel elements
LED Description
PWR LED • Off: Off.
• Red: Boot up in process.
• Green: On.
OPT LED Not used in this model
Table 7. ZoneFlex 7962 rear panel elements
Number Item Name Description
P
Page 20
12
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
DIR LED • Off: The Access Point is not being managed by
ZoneDirector (standalone mode).
• Green: The Access Point is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds): The Access Point is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The Access Point is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
WLAN LED • Off: The WLAN service is down.
• Amber: The WLAN service is up and no clients are associated (standalone), or no wireless clients and no downlink MAPs are connected (RAP).
• Green: The WLAN service is up and at least one wireless client is associated. If Mesh is enabled, no downlink MAPs are connected.
• Fast flashing green: The WLAN service is up, at least one client is associated, and at least one Mesh downlink is connected.
• Slow flashing green: At least one Mesh downlink is connected, and no clients are associated.
AIR LED • Off: The WLAN service is down.
• Green: The AP is functioning as a RAP or MAP and the uplink signal is good.
• Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink.
• Fast flashing green (two flashes every second): The AP is functioning as a MAP and the wireless signal to its uplink AP is fair.
Table 8. ZoneFlex 7341 front panel elements
LED Description
Page 21
13
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel
Figure 6 shows the rear panel of the ZoneFlex 7341. For a description of each rear
panel part, refer to Table 9
.
Figure 6. ZoneFlex 7341 rear panel
ZoneFlex 7343 Access Point
ZoneFlex 7343 features five LEDs on its front panel, and buttons and connectors on its rear panel.
Front Panel
Figure 7 shows the front panel of the ZoneFlex 7343. For a description of each front
panel part, refer to Table 10
.
Table 9. ZoneFlex 7341 rear panel elements
Number Item Name Description
1 OPT Button Not active in this model at this time.
2 HARD RESET Button Pressing, and then quickly releasing this internal
button reboots the AP. Pressing and holding it for six seconds resets the AP to factory default settings.
CAUTION! Resetting the AP to factory default settings will erase all settings that you configured previously.
3 10/100/1000 PoE
Port
One RJ-45 port for a 10/100/1000 PoE (Power over Ethernet, 802.3af) connection.
4 Power Connect the power adapter (12 VDC/1.25A) to this
socket. Power can also be supplied via the 10/100/ 1000 PoE (802.3af) port.
1
2
3
4
Page 22
14
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Figure 7. ZoneFlex 7343 front panel
Table 10. ZoneFlex 7343 front panel elements
LED Description
PWR LED • Off: Off.
• Red: Boot up in process.
• Green: On.
OPT LED Not used in this model
DIR LED • Off: The Access Point is not being managed by
ZoneDirector (standalone mode).
• Green: The Access Point is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds): The Access Point is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The Access Point is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
Page 23
15
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
WLAN LED • Off: The WLAN service is down.
• Amber: The WLAN service is up and no clients are associated (standalone), or no wireless clients and no downlink MAPs are connected (RAP).
• Green: The WLAN service is up and at least one wireless client is associated. If Mesh is enabled, no downlink MAPs are connected.
• Fast flashing green: The WLAN service is up, at least one client is associated, and at least one Mesh downlink is connected.
• Slow flashing green: At least one Mesh downlink is connected, and no clients are associated.
AIR LED • Off: The WLAN service is down.
• Green: The AP is functioning as a RAP or MAP and the uplink signal is good.
• Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink.
• Fast flashing green (two flashes every second): The AP is functioning as a MAP and the wireless signal to its uplink AP is fair.
Table 10. ZoneFlex 7343 front panel elements
LED Description
Page 24
16
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel
Figure 8 shows the rear panel of the ZoneFlex 7343. For a description of each rear
panel part, refer to Table 11
.
Figure 8. ZoneFlex 7343 rear panel
Table 11. ZoneFlex 7343 rear panel elements
Number Item Name Description
1 OPT Button Not active in this model at this time.
2 HARD RESET Button Pressing, and then quickly releasing this internal
button reboots the AP. Pressing and holding it for six seconds resets the AP to factory default settings.
CAUTION! Resetting the AP to factory default settings will erase all settings that you configured previously.
3 10/100 Ports (2) Two RJ-45 ports for 10/100Mbps connections.
4 10/100/1000 PoE
Port
One RJ-45 port for a 10/100/1000 PoE (Power over Ethernet, 802.3af) connection.
5 Power Connect the power adapter (12 VDC/1.25A) to this
socket. Power can also be supplied via the 10/100/ 1000 PoE (802.3af) port.
1
2
3
4
5
Page 25
17
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
ZoneFlex 7363 Access Point
ZoneFlex 7363 features five LEDs on its front panel, and buttons and connectors on its rear panel.
Front Panel
Figure 9 shows the front panel of the ZoneFlex 7363. For a description of each front
panel part, refer to Table 12
.
Figure 9. ZoneFlex 7363 front panel
Table 12. ZoneFlex 7363 front panel elements
LED Description
PWR LED • Off: Off.
• Amber: Boot up in process.
• Green: On.
OPT LED Not used in this model
DIR LED • Off: The AP is not being managed by
ZoneDirector (standalone mode).
• Green: The AP is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds): The AP is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The AP is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
Page 26
18
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
2.4G LED (WLAN) • Off: The WLAN service is down.
• Green: The WLAN service is up, at least one client is associated, and signal quality is good (RSSI >= 15).
• Flashing green (two flashes every second): The WLAN service is up but no clients are associated.
• Amber: The WLAN service is up, at least one client is associated, but signal quality is poor (RSSI < 15).
5G LED (WLAN) •Off: The WLAN service is down.
• Green: The WLAN service is up, at least one client is associated (standalone), or at least one downlink MAP is connected (RAP), or uplink RAP is connected (MAP), and signal quality is good (RSSI >= 15).
• Fast flashing green (two flashes every second): The WLAN service is up but no clients are associated (standalone), no downlink MAPs are connected (RAP), or no uplink RAP is connected (MAP).
• Amber: The WLAN service is up, at least one wireless client is associated (standalone), or at least one downlink MAP is connected (RAP), or uplink RAP is connected (MAP), but signal quality is poor (RSSI < 15).
Table 12. ZoneFlex 7363 front panel elements
LED Description
Page 27
19
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel
Figure 10 shows the rear panel of the ZoneFlex 7363. For a description of each rear
panel part, refer to Table 13
.
Figure 10. ZoneFlex 7363 rear panel
Table 13. ZoneFlex 7363 rear panel elements
Number Item Name Description
1 OPT Button Not active in this model at this time.
2 HARD RESET Button Pressing, and then quickly releasing this internal
button reboots the AP. Pressing and holding it for six seconds resets the AP to factory default settings.
CAUTION! Resetting the AP to factory default settings will erase all settings that you configured previously.
3 10/100 Ports (2) Two RJ-45 ports for 10/100Mbps connections
4 10/100/1000 PoE
Port
One RJ-45 port for a 10/100/1000 PoE (Power over Ethernet, 802.3af) connection
5 Power Connect the power adapter (12 VDC/1.25A) to this
socket. Power can also be supplied via the 10/100/ 1000 PoE (802.3af) port.
1
2
3
4
5
Page 28
20
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
ZoneFlex 7321 Access Point
ZoneFlex 7321 features five LEDs on its front panel, and buttons and connectors on its rear panel.
Front Panel
Figure 11 shows the front panel of the ZoneFlex 7321. For a description of each front
panel part, refer to Table 14
.
Figure 11. ZoneFlex 7321 front panel
Table 14. ZoneFlex 7321 front panel elements
LED Description
PWR LED • Off: Off.
• Red: Boot up in process.
• Green: On.
AIR LED • Off: The Access Point is operating as a
Standalone or RootAP
• Green: The AP is functioning as a Mesh AP (MAP), and the wireless signal to its uplink AP is good
• Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless signal to its uplink AP is fair.
• Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink.
Page 29
21
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
DIR LED • Off: The AP is not being managed by
ZoneDirector (standalone mode).
• Green: The AP is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds): The AP is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The AP is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
2.4G LED (WLAN) • Off: The WLAN service is down.
• Amber: The WLAN is up, but no clients are associated and no downlink MAPs are connected.
• Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected
• Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated
• Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected, and at least one client is associated
5G LED (WLAN) • Off: The WLAN service is down
• Amber: The WLAN is up, but no clients are associated and no downlink MAPs are connected
• Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected
• Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated
• Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected, and at least one client is associated
Table 14. ZoneFlex 7321 front panel elements
LED Description
Page 30
22
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel
Figure 12 shows the rear panel of ZoneFlex 7321. For a description of each rear panel
part, refer to Table 15
.
Figure 12. ZoneFlex 7321 rear panel
Table 15. ZoneFlex 7321 rear panel elements
Number Item Name Description
1 10/100/1000 PoE
Port
One RJ-45 port for a 10/100/1000 PoE (Power over Ethernet, 802.3af) connection
2 RESET Button Pressing, and then quickly releasing this internal
button reboots the AP. Pressing and holding it for six seconds resets the AP to factory default settings.
CAUTION! Resetting the AP to factory default settings will erase all settings that you configured previously.
3 Power Connect the power adapter (12 VDC/1.25A) to this
socket. Power can also be supplied via the 10/100/ 1000 PoE (802.3af) port.
1
2
3
Page 31
23
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
ZoneFlex 7982 Access Point
ZoneFlex 7982 features five LEDs on its front panel, and buttons and connectors on its rear panel.
Front Panel
Figure 13 shows the front panel of the ZoneFlex 7982. For a description of each front
panel part, refer to Table 16
.
Figure 13. ZoneFlex 7982 front panel
Table 16. ZoneFlex 7982 front panel elements
LED Description
Power LED • Off: Off.
• Red: Boot up in process.
• Green: On.
DIR LED • Off: The AP is not being managed by
ZoneDirector (standalone mode).
• Green: The AP is being managed by ZoneDirector.
• Slow flashing green (one flash every two seconds): The AP is being managed by ZoneDirector, but is currently unable to communicate with ZoneDirector.
• Fast flashing green (two flashes every second): The AP is being managed by ZoneDirector and is currently receiving configuration settings (provisioning) or a firmware update.
Page 32
24
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
AIR LED • Off: The Access Point is operating as a
Standalone or RootAP.
• Green: The AP is functioning as a Mesh AP (MAP), and the wireless signal to its uplink AP is good.
• Fast flashing green (two flashes every second): The AP is functioning as a Mesh AP (MAP), and the wireless signal to its uplink AP is fair.
• Slow flashing green (one flash every two seconds): Mesh networking is enabled, but the AP is still searching for a mesh uplink.
2.4GHz LED • Off: The WLAN service is down.
• Green: The WLAN is up and at least one client is associated.
• Amber: The WLAN is up. No clients are associated.
5GHz LED • Off: The WLAN service is down.
• Amber: The WLAN is up, but no clients or downlink MAPs are associated/connected.
• Green: The WLAN is up and at least one client is associated. No downlink MAPs are connected.
• Slow flashing green (one flash every two seconds): The WLAN is up and at least one downlink MAP is connected. No clients are associated.
• Fast flashing green (two flashes every second): The WLAN is up, at least one downlink MAP is connected, and at least one client is associated.
Table 16. ZoneFlex 7982 front panel elements
LED Description
Page 33
25
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Rear Panel
Figure 14 shows the rear panel of the ZoneFlex 7982. For a description of each rear
panel part, refer to Table 17
.
Figure 14. ZoneFlex 7982 rear panel
Table 17. ZoneFlex 7982 rear panel elements
Number Item Name Description
1 10/100 Port One RJ-45 port for a 10/100 connection
2 10/100/1000 PoE
Port
One RJ-45 port for a 10/100/1000 PoE (Power over Ethernet, 802.3af) connection
3 Power Connect the power adapter (12 VDC/1.25A) to this
socket. Power can also be supplied via the 10/100/ 1000 PoE (802.3af) port.
4 RESET Button Pressing, and then quickly releasing this internal
button reboots the AP. Pressing and holding it for six seconds resets the AP to factory default settings.
CAUTION! Resetting the AP to factory default settings will erase all settings that you configured previously.
2
3
4
1
Page 34
26
Introducing the ZoneFlex Access Point
Getting to Know the Access Point Features
Page 35
27
2
Installing the Access Point
Before You Begin
Before starting with the installation, make sure that you have the required items for the installation ready. In addition, verify that the wireless stations on the network have the required components for wireless communication with the Access Point.
This section describes the pre-installation tasks that you need to perform.
Prepare the Required Hardware and Tools
You must supply the following tools and equipment:
■ A notebook computer running Windows (2000/XP/Vista/7) with one wireless
802.11a/b/g/n network card and one Ethernet card installed
■ A modem (DSL or cable), router, or other device provided by your Internet Service
Provider, that brings Internet access to your site
■ (Optional) A network switch or a DSL/Internet gateway device.
NOTE: If the AP is deployed with ZoneDirector, follow the instructions in the Zone- Director Quick Setup Guide, and connect the AP to your Ethernet network.
In This Chapter
Before You Begin
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Step 1: Preconfigure the Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Step 2: Verify Access Point Operation
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Step 3: Deploy the Access Point
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Troubleshooting Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
Page 36
28
Installing the Access Point
Before You Begin
Perform a Site Survey
Before installing the Access Point, perform a site survey to determine the optimal Access Point placement for maximum range, coverage, and network performance. When performing a site survey, consider the following factors:
■ Data rates: Range is generally inversely proportional to data rates. The maximum
radio range is achieved at the lowest workable data rate. Higher data rates will generally be achieved at closer distances.
■ Antenna type and placement: Proper antenna configuration is a critical factor in
maximizing radio range. As a general rule, radio range is increased by mounting the antennas higher off of the ground.
■ Physical environment: Clear or open areas provide better radio range than closed
or filled areas. The less cluttered the operating environment, the greater the wireless range.
■ Obstructions, building materials, and sources of interference: Physical obstruc-
tions, such as concrete pillars, steel beams and filing cabinets can block or hinder wireless communication. Avoid installing the Access Point in a location where there is an obstruction between sending and receiving devices. A number of machines and electronic devices that emit radio waves – cranes, wireless phones, microwave ovens, satellite dishes – interfere with and block wireless signals. Building materials used in construction also influence radio signal penetration. For example, drywall construction permits greater range than concrete blocks.
For more Access Point placement guidelines, refer to “
Determine the Optimal
Mounting Location and Orientation”.
Page 37
29
Installing the Access Point
Before You Begin
Determine the Optimal Mounting Location and Orientation
The location and orientation that you choose for the Access Point play a critical role in the performance of your wireless network. In general, Ruckus Wireless recommends installing the Access Point away from obstructions and sources of interference and ensuring that the top of the Access Point is pointing in the general direction of its wireless clients.
The recommended orientation differs slightly depending on the Access Point model. See the following sections according to your particular model:
• ZoneFlex 2942, 7942, 7962 Orientation
• ZoneFlex 7341, 7343, 7363, 7321 and 7982 Orientation
ZoneFlex 2942, 7942, 7962 Orientation
The dome-shaped ZoneFlex APs (2942, 7942, 7962) have a wider horizontal plane coverage area (when mounted on the ceiling or desktop) compared to the other ZoneFlex APs.
Figure 15. Recommended orientation for maximum horizontal plane coverage
Limited
Reach
Excellent
Reach
Excellent
Reach
Good Reach
Page 38
30
Installing the Access Point
Before You Begin
Figure 16. Recommended orientation for maximum vertical plane coverage
Figure 17. Recommended orientation for maximum mesh coverage
Good
Reach
Excellent
Reach
Excellent
Reach
Limited
Reach
Excellent
Reach
Excellent
Reach
Excellent
Reach
Good Reach
Good Reach
Limited
Reach
Limited
Reach
Page 39
31
Installing the Access Point
Before You Begin
ZoneFlex 7341, 7343, 7363, 7321 and 7982 Orientation
ZoneFlex 7341, 7343, 7363, 7321 and 7982 have a more rounded coverage area and less horizontal range (when mounted horizontally) compared to the dome-shaped ZoneFlex 2942, 7942 and 7962 APs.
Figure 18. ZoneFlex 7341/7343/7363/7321/7982 recommended ceiling mounting
orientation
When wall mounted, ZoneFlex 7341, 7343, 7363, 7321 and 7982 should be staggered to maximize coverage.
Limited
Reach
Limited
Reach
Excellent
Reach
Excellent
Reach
Excellent
Reach
Page 40
32
Installing the Access Point
Before You Begin
Figure 19. ZoneFlex 7341/7343/7363/7321/7982 recommended wall mounting
orientation
Excellent
Reach
Excellent
Reach
Excellent
Reach
Limited
Reach
Page 41
33
Installing the Access Point
Before You Begin
Figure 20. ZoneFlex 7341/7343/7363/7321/7982 wall mounting in a corridor (top
view)
Excellent
Reach
Excellent
Reach
Limited
Reach
Limited
Reach
Limited
Reach
Excellent
Reach
Excellent
Reach
Page 42
34
Installing the Access Point
Step 1: Preconfigure the Access Point
Step 1: Preconfigure the Access Point
The procedure for completing the Access Point’s essential configuration depends on whether you want it to be managed by either ZoneDirector or FlexMaster or to operate as a standalone Access Point. Refer to the section that is relevant to your deployment:
■ Configuring for Management by ZoneDirector
■ Configuring for Standalone Operation or for Management by FlexMaster
Configuring for Management by ZoneDirector
If ZoneDirector is installed on the network, you do not need to preconfigure the Access Point. Simply connect the Access Point to same Layer 2 subnet as ZoneDirector, and when the Access Point starts up, it will discover and register with ZoneDirector automatically.
NOTE: In addition to using Layer 2 auto discovery to enable the Access Point to register with ZoneDirector, you can also use DHCP Option 43 or DNS. For more information, refer to the ZoneDirector User Guide.
CAUTION: If you use this method, make sure that you do not change the IP address
of ZoneDirector after the AP discovers and registers with it. If you change the ZoneDirector IP address, the AP will no longer be able to communicate with it and will be unable to rediscover it.
CAUTION: If you configure an AP for management by ZoneDirector and later decide
that you want it to be a standalone AP, you will need to factory reset the AP.
Before starting this procedure, check the label on the back panel of the Access Point, and write down the MAC address of the Access Point. You will need the MAC address to identify the Access Point on the ZoneDirector Web interface.
What You Will Need
Before starting with the configuration task, make sure that you have the following requirements ready:
■ A computer from which you can access the ZoneDirector Web interface
■ A Web browser such as Google Chrome, Mozilla Firefox 2.0 (or later) or Microsoft
Internet Explorer 6.0 (or later) installed on the administrative computer
■ One Cat5e foil screened twisted pair (FTP) solid Ethernet cable
■ Your ZoneFlex Access Point and its power adapter (or a PoE injector/PoE switch
to supply Power Over Ethernet to the Access Point)
Page 43
35
Installing the Access Point
Step 1: Preconfigure the Access Point
1. Connect the Access Point to a Power Source
1. Connect the power jack to the power connector on the rear panel of your ZoneFlex
Access Point.
2. Connect the power adapter to a power source.
3. Verify that the power LED on the Access Point is green.
You have completed connecting the Access Point to a power source.
NOTE: If using PoE, you do not need to connect a power adapter to the AP. Simply provide PoE power to the to the port labeled “10/100/1000 PoE” and connect the PoE injector/switch to the same subnet as ZoneDirector.
NOTE: If using PoE and Gigabit Ethernet, ensure that you use Cat5e or better Ethernet cables.
2. Connect the Access Point to the Same Subnet as ZoneDirector
1. Connect one end of an Ethernet cable to a LAN (RJ-45) port on the rear panel of
the Access Point.
2. Connect the other end of the Ethernet cable to the same Layer 2 subnet as ZoneDirector. The same Layer 2 subnet means that there should not be any router between the Access Point and ZoneDirector.
3. Log into the ZoneDirector Web interface, and then go to the Monitor > Access Points page.
4. Look for the MAC address of the Access Point, and then check its Status column.
• If automatic approval is enabled, the Status column should show Connected.
• If automatic approval is disabled, click the Allow link that is on the same
row as the Access Point’s MAC address. This allows the Access Point to register with ZoneDirector.
When the Status column shows Connected, this indicates that the Access Point has successfully registered with ZoneDirector and that it can now be moved to its destination Layer 2 or Layer 3 network.
3. Disconnect the Access Point from the Power Source
1. Disconnect the Access Point from the power source.
2. Verify that the power LED on the rear panel of the Access Point is off.
3. Continue to “Connect the Access Point to the Network” on page 43.
Page 44
36
Installing the Access Point
Step 1: Preconfigure the Access Point
Configuring for Standalone Operation or for Management by FlexMaster
This section describes the steps you need to complete to set up the AP in standalone mode or to be managed by Ruckus Wireless FlexMaster server, if you have one installed on the network.
What You Will Need
Before starting with the configuration task, make sure that you have the following requirements ready:
■ An administrative computer (notebook computer) running Microsoft Windows
(2000/XP/Vista/7)
■ A Web browser such as Google Chrome, Mozilla Firefox 2.0 (or later) or Microsoft
Internet Explorer 6.0 (or later) installed on the administrative computer
■ One Cat5e foil screened twisted pair (FTP) solid Ethernet cable
1. Prepare the Administrative Computer
NOTE: The following procedure is applicable if the administrative computer is
running Windows XP or Windows 7. If you are using a different operating system, refer to the documentation that was shipped with your operating system for information on how to modify the computer’s IP address settings.
1. On your Windows XP or Windows 7 computer, open the Network Connections (or Network and Dial-up Connections) control panel according to how the Start menu is set up:
• On Windows XP, click Start > Control Panel > Network Connections.
• On Windows 7, click Start > Control Panel > Network and Internet >
Network and Sharing Center > Change Adapter Settings.
2. When the Network Connections window appears, right-click the icon for Local Area Connection, and then click Properties.
NOTE: Make sure that you configure the Local Area Connection properties, not the
Wireless Network Connection properties.
3. When the Local Area Connection Properties dialog box appears, select Internet Protocol (TCP/IP) (TCP/IPv4 in Windows 7) from the scrolling list, and then click Properties. The Internet Protocol (TCP/IP) Properties dialog box appears.
4. Write down all of the currently active network settings. You will need this informa-
tion later when you restore your computer to its current network configuration.
Page 45
37
Installing the Access Point
Step 1: Preconfigure the Access Point
5. Click Use the following IP address, and then configure the IP address settings with the values listed in Table 1 8
. For a sample configuration, refer to Figure 21.
You can leave the Default Gateway and DNS server fields blank.
6. Click OK to save your changes and close the TCP/IP Properties dialog box.
7. Click OK again to close the Local Area Connection Properties dialog box.
Windows saves the IP address settings that you have configured.
Figure 21. Sample configuration in the Internet Protocol (TCP/IP) Properties
dialog box
2. Connect the Access Point to the Administrative
Computer
1. Connect one end of an Ethernet cable to an Ethernet port on the Access Point,
and then connect the other end to the administrative computer’s Ethernet port.
2. Provide power to the AP using either an AC adapter or a PoE injector or switch, as described in “
1. Connect the Access Point to a Power Source” above.
Table 18. Configure your computer’s IP address settings
IP address 192.168.0.22 (or any address in the 192.168.0.x
network—with the exception of 192.168.0.1, which is the default IP address assigned to the Access Point)
Subnet mask 255.255.255.0
Page 46
38
Installing the Access Point
Step 1: Preconfigure the Access Point
3. Log Into the Access Point’s Web Interface
1. On the administrative computer, open a Web browser window.
2. In the address or location bar, type the following address:
https://192.168.0.1
3. Press <Enter> on the keyboard to connect to the Access Point’s Web interface. A security alert message appears.
4. Click Yes or OK (depending on the browser) to continue. The Access Point’s login page appears.
Figure 22. The ZoneFlex Access Point login page
5. In User name, type super.
6. In Password, type sp-admin.
7. Click Log In. The Web interface appears, displaying the Status > Device page.
8. Continue to “
4. Configure the Wireless Settings” below.
4. Configure the Wireless Settings
To complete this step, you will need to configure the settings on the Common tab and at least one Wireless # tab. These are the essential wireless settings that will enable wireless devices on the network to associate with the Access Point.
Page 47
39
Installing the Access Point
Step 1: Preconfigure the Access Point
For your reference, the default wireless settings on the Access Point are listed in Tab l e
19.
Configure Common Wireless Settings
1. On the left menu of the Web interface, click Configuration > Wireless (Radio
2.4G or Radio 5G on dual band APs). The Configuration > Common page
appears.
NOTE: For dual band APs (ZoneFlex 7962, 7363 and 7982), the two radios (2.4GHz and 5GHz) need to be configured separately on the Web interface. To configure the common wireless settings, click Configuration > Radio 2.4G or Radio 5G. The rest of the configuration procedures are the same as for other models.
2. Verify that the common wireless settings are configured as listed in Table 20.
3. If you made any changes to the Common tab, click Update Settings.
Table 19. Default wireless settings
Setting Default Value
SSID (network name) Wireless 1 to Wireless 8 (2.4 Ghz Radio)
Wireless 9 to Wireless 16 (5 GHz Radio ­only available on dual radio APs)
Encryption (security) Disabled on all WLANs
Default management IP address 192.168.0.1
Table 20. Common wireless configuration
Setting Recommended Value
Channel SmartSelect
Country Code • If you purchased the Access Point in the United
States, this value is fixed to United States at the factory and is not user configurable.
• If you purchased the Access Point outside the United States, verify that the value is set to your country or region. Selecting the correct country code ensures that the Access Point uses only the radio channels allowed in your country or region.
Note for dual band AP users: The two radios on dual band APs are always configured with the same country code setting. If you change the country code for Radio 1, for example, the same change will be applied automatically to Radio 2.
Page 48
40
Installing the Access Point
Step 1: Preconfigure the Access Point
4. Continue to “Configure Wireless # Settings” below.
Figure 23. The Configuration > Wireless > Common tab
Configure Wireless # Settings
1. Click one of the Wireless # tabs.
2. In Wireless Availability, click Enabled.
3. In Broadcast SSID, click Enabled.
4. Clear the SSID box, and then type a unique and descriptive name that you want
to call this wireless network.
For example, you can type Ruckus Wireless AP. This SSID is the name that will help users identify this wireless network in their wireless network connection application.
NOTE: You may also configure other wireless settings on this and other Wireless # tabs (in addition to the settings described above), although it is not necessary for completing the Access Point installation.
5. Click Update Settings.
You have completed configuring the basic wireless settings of the Access Point.
Page 49
41
Installing the Access Point
Step 1: Preconfigure the Access Point
Figure 24. The Configuration > Wireless > Wireless 1 tab
(Optional) Set the FlexMaster Server Address
If you have a FlexMaster server installed on the network and you intend to use FlexMaster to manage the Access Point, you can set the FlexMaster server address at this point. Before starting this procedure, make sure you obtain the correct FlexMaster server URL.
NOTE: In addition to setting the FlexMaster server URL manually on the Access Point, you can also use DHCP Option 43 or DNS to point the Access Point to the FlexMaster server. For more information, refer to the FlexMaster User Guide.
1. On the menu, click Administration > Management.
2. Scroll down the page to the TR069 / SNMP Management Choice section.
3. Verify that the Auto option is selected.
4. In FlexMaster Server URL, type the URL of the FlexMaster server on the network.
You can use either http or https to connect to the URL and include either the host name or IP address of the FlexMaster server in the URL. The following are examples of valid FlexMaster server URLs:
http://flexmaster/intune/server
https://flexmaster/intune/server
http://192.168.20.1/intune/server
Page 50
42
Installing the Access Point
Step 1: Preconfigure the Access Point
https://192.168.20.1/intune/server
5. Click Update Settings to save your changes.
You have completed setting the FlexMaster server address on the Access Point.
Figure 25. Type the FlexMaster server URL
NOTE: Instructions on how to verify that the Access Point and FlexMaster can communicate with each other are provided in “
Check the TR069 Status (FlexMaster
Management Only)” on page 44.
5. Disconnect the Access Point from the Administrative Computer
1. Disconnect the Access Point from the power source.
2. Verify that the power LED on the Access Point is off.
3. Disconnect the Ethernet cable from the administrative computer’s Ethernet port.
6. Restore the Administrative Computer’s Network Settings
1. On your Admin computer, open the Network Connections (or Network and Dial- up Connections) control panel according to how the Start menu is set up:
Page 51
43
Installing the Access Point
Step 2: Verify Access Point Operation
• On Windows 7, click Start > Control Panel > Network and Internet >
Network and Sharing Center > Change Adapter Settings.
• On Windows XP, click Start > Control Panel > Network Connections.
2. When the Network Connections window appears, right-click the icon for Local Area Connection, and then click Properties.
3. When the Local Area Connection Properties dialog box appears, select Internet Protocol (TCP/IP) (TCP/IPv4 in Windows 7) from the list, and then click Proper­ties. The TCP/IP Properties dialog box appears.
4. Restore the computer’s network settings by typing the original IP address settings in the TCP/IP Properties dialog box.
5. On the TCP/IP Properties dialog box, click OK to close it.
6. Click OK again to close the Local Area Connection Properties dialog box.
You are now ready to connect the Access Point to your network.
Step 2: Verify Access Point Operation
Before deploying the Access Point in your environment, Ruckus Wireless strongly recommends that you verify that the Access Point is operating correctly. To do this, you will need to connect the Access Point to your live network temporarily and make sure that the network connection works and that wireless clients are able to associate with the Access Point and connect to your network and the Internet.
NOTE: The network and power connections that you will be making in this step are temporary.
Connect the Access Point to the Network
1. Connect the Ethernet cable from a LAN (RJ-45) port on the Access Point to your
network’s router or switch.
2. Reconnect the Access Point to a power source.
You have completed connecting the Access Point to your live network. Perform the tasks described in the following sections to verify that the Access Point is operating normally.
Associate a Wireless Client with the Access Point
1. On the administrative computer, verify that the wireless interface is enabled. On
Windows XP, click All Programs > Connect To > Wireless Network Connection to enable the wireless interface. (Other operating systems are similar).
2. Connect your admin computer to the wireless network:
Page 52
44
Installing the Access Point
Step 2: Verify Access Point Operation
• Windows XP: In the system tray, right-click the (Wireless Network Connec-
tion) icon, and then click View Available Wireless Networks.
• Windows 7: Left click the icon.
3. In the list of available wireless networks, click the network with the same SSID as you configured in “
Configure Wireless # Settings” on page 40. For example, if you
set the SSID to Ruckus Wireless AP, click the wireless network named Ruckus
Wireless AP.
4. Click Connect.
Your wireless client connects to the wireless network. After the wireless client connects to the wireless network successfully, the wireless client icon in the system tray changes to (on Windows XP) or (on Windows 7).
Check the LEDs
Perform a spot-check using the LEDs to verify that the Access Point is operating normally. Refer to the following sections for information on how to check the LEDs on each ZoneFlex AP model.
Single Radio APs (ZoneFlex 2942/7942/7341/7343/
7321)
If the single radio Access Point is operating normally and your wireless client was able to associate with it:
■ The WLAN LED is green.
■ If you do not have Ruckus Wireless ZoneDirector on the network, the DIR LED is
off. This indicates that the Access Point is operating in standalone mode. If there is a ZoneDirector device on the network, the DIR LED is green.
Dual Radio APs (ZoneFlex 7363/7962/7982)
If the dual radio Access Point is operating normally and your wireless client was able to associate with it:
■ The 2.4G or 5G LED is green.
■ If you do not have Ruckus Wireless ZoneDirector on the network, the DIR LED is
off. This indicates that the Access Point is operating in standalone mode. If there is a ZoneDirector device on the network, the DIR LED is green.
Check the TR069 Status (FlexMaster Management Only)
If you configured the Access Point to report to a FlexMaster server on the network, make sure you verify that it can successfully communicate with the FlexMaster server. You can do this by checking the TR069 status on the Access Point’s Web interface.
Page 53
45
Installing the Access Point
Step 2: Verify Access Point Operation
1. Log in to the Access Point’s Web interface.
2. Go to the Administration > Management page.
3. Scroll down to the TR069 Status section.
4. Check the value for Last successful contact. If it shows a date in green, this
indicates that the Access Point was able to successfully communicate with Flex­Master.
Disconnect the Access Point from the Network
1. Disconnect the Access Point from the power source.
2. Disconnect the Ethernet cable that runs to the Access Point’s RJ45 port from your
network’s router or switch.
You are now ready to deploy the Access Point to its permanent mounting location.
Page 54
46
Installing the Access Point
Step 3: Deploy the Access Point
Step 3: Deploy the Access Point
In this step, you will place the Access Point in a suitable location on the network and connect it to a power source and to your network environment.
1. Choose a Location for the Access Point
You can install the Access Point on a flat surface (for example, on a desktop or tabletop) or mount it on a wall or ceiling. When choosing a location for the Access Point, ensure that the location:
■ Allows easy viewing of the LEDs and access to the connectors, if necessary.
■ Is centrally located to the wireless clients that will be connecting to the Access
Point. A suitable location might be on top of a cabinet or similar furniture to optimize wireless connections to clients in both horizontal and vertical directions, allowing wider coverage.
When positioning your Access Point, ensure that:
■ It is out of direct sunlight and away from sources of heat.
■ Cabling is away from power lines, fluorescent lighting fixtures, and sources of
electrical noise such as radios, transmitters and broadband amplifiers.
■ There are no thick walls or metal shielding between the Access Point and the
wireless stations.
■ Water or moisture cannot enter the case of the unit.
■ Air flow around the unit and through the vents in the side of the case is not
restricted.
Review the recommendations in “
Determine the Optimal Mounting Location and
Orientation” on page 29 for help in choosing a suitable location for the Access Point.
2. Connect the Access Point to a Power Source and
the Network
Once you have placed the Access Point at its installation location, you are ready to connect it to a power source and the network.
NOTE: If your ZoneFlex model supports PoE, you can also supply power to the AP from a PoE switch or injector. For information on how to make the PoE connections, refer to the documentation that was shipped with the PoE switch or injector.
CAUTION: If you will be using PoE, you must use a Cat-5e or better Ethernet cable
for the PoE connection.
1. Connect the power jack to the power connector on the rear panel of your ZoneFlex Access Point.
Page 55
47
Installing the Access Point
Troubleshooting Installation
2. Connect the power adapter to a power source.
3. Obtain an Ethernet cable that is long enough to connect the Access Point to your
network’s router, switch, or hub.
4. Connect one end to a LAN port on the AP, and then connect the other end to your network’s router, switch, or hub.
5. Verify that the power LED on the Access Point is green.
Congratulations! You have completed setting up the Access Point on your network. To learn how to configure and manage the Access Point, continue reading the next chapters.
Troubleshooting Installation
If the startup sequence does not work, verify that the network name (SSID) and security settings (if you enabled them) on the AP match the settings on your wireless device.
■ Disconnect the AP from the power source, wait 5 seconds, reconnect it, and then
wait 60 seconds before attempting a reconnection.
■ Disconnect and reconnect the AP and the PC.
■ Replace the Ethernet cable with a new one if the relevant LAN port LED is not
illuminated. (LEDs in each port light up during a successful connection.)
If all else fails, you can reset the AP to its factory defaults (and start over).
1. Insert a straightened-out paper clip into the reset button hole.
2. Press and hold the Reset button for at least eight (8) seconds.
You can now reconnect your computer directly to the AP (as described in “
2. Connect the Access Point to the Administrative Computer” on page 37), and then start over
with installation, using the default network settings.
Page 56
48
Installing the Access Point
Troubleshooting Installation
Page 57
49
3
Navigating the Web Interface
Logging Into the ZoneFlex Web Interface
If you need to manage your AP, you do it with the features of the ZoneFlex Web interface (which you already used to set up the AP for use).
If your ZoneFlex network will be managed by a Ruckus Wireless ZoneDirector, you can manage APs through ZoneDirector rather than logging into each AP’s Web interface individually.
NOTE: The following procedure assumes that you know the static IP address of the AP (now in use), or you have some means of determining the dynamic IP address in use by the AP. The PC you use for AP administration should be on the management VLAN, if VLANs are used in your network.
To log into the Web interface
1. On the PC, open a Web browser window.
2. In the address or location bar, type the IP address of the AP. Default IP address for
standalone ZoneFlex APs:
192.168.0.1
3. Press <Enter> to connect to the Web interface.
4. If a Windows security alert dialog box appears, click OK/Yes to proceed. The
Ruckus Wireless Admin login page appears.
5. In Username, type super.
6. In Password, type sp-admin.
7. Click Login.
The ZoneFlex Access Point Web interface appears.
In This Chapter
Logging Into the ZoneFlex Web Interface
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Navigating the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Page 58
50
Navigating the Web Interface
Navigating the Web Interface
Navigating the Web Interface
You manage the Access Point through a Web browser-based interface that you can access from any networked computer. Table 21
lists the Web interface features that
are identified in Figure 26
.
Figure 26. Elements of the ZoneFlex AP Web Interface
Menu
Workspace
Help Button
Tabs
Log Out Button
Table 21. ZoneFlex AP Web interface elements
Element Description
Menu Under each category (Status, Configuration, etc.)
are options that, when clicked, open the related workspace in the area to the right.
Tabs Contains additional options for the configuration
page. For example, the Configuration > Wireless page includes one tab for common wireless configuration and eight tabs for each of the available WLANs.
Workspace This large area displays features, options and
indicators relevant to your menu bar choices.
Logout Button Click this button to log out of the AP.
Page 59
51
Navigating the Web Interface
If You Are Using a Dual Band ZoneFlex Access Point
If You Are Using a Dual Band ZoneFlex Access Point
If your ZoneFlex AP model is 7363/7962/7982, note that elements on the Web interface menu are slightly different from the other (single band) ZoneFlex AP models.
Dual band ZoneFlex APs have one 2.4GHz radio (for 802.11b/g/n clients) and one 5GHz radio (for 802.11a/n clients). The wireless settings for these two radios need to be configured separately, which is why the dual band AP Web interface has the Radio
2.4G and Radio 5G menu items, instead of a single Wireless menu item in other models.
Figure 27
highlights the differences between the ZoneFlex 2942 and ZoneFlex 7962
menus.
Figure 27. Menu items are slightly different in single band APs (left) and dual band
ZoneFlex AP models (right)
Help Button Click this button to open a help window with
information related specifically to the options currently displayed in the workspace.
Table 21. ZoneFlex AP Web interface elements
Element Description
Page 60
52
Navigating the Web Interface
If You Are Using a Dual Band ZoneFlex Access Point
Page 61
53
4
Configuring the Access Point
This chapter provides instructions for configuring ZoneFlex Access Points in a stand­alone configuration. If you will be managing your ZoneFlex network using ZoneDi­rector refer to the ZoneDirector User Manual, available in PDF format from the Ruckus website, at http://support.ruckuswireless.com/documents
.
In This Chapter
Configuring Device Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Configuring Internet Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Configuring Local Subnets
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Configuring Wireless Settings
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Configuring Ethernet Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Configuring Hotspot Service
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
Page 62
54
Configuring the Access Point
Configuring Device Settings
Configuring Device Settings
Device settings refer to the device name, temperature update, location and service provider login settings. (Temperature update is only available on certain ZoneFlex models.)
Figure 28. The Configuration > Device page
To configure the device settings
1. Go to Configuration > Device. The Configuration > Device page appears.
2. In Device Name, type a new name for the device or leave as is to accept the default
device name (RuckusAP). The device name identifies the Access Point among other devices on the network.
3. Optionally, enter Device Location and GPS Coordinates to keep track of the physical location of the AP. In Temperature Update (specific models only), enter the interval (in seconds) to record the internal temperature of the device.
4. Under Service Provider Login, change the login information as required:
• Username: Type the name that you want to use for logging into the Web
interface. The default user name is super.
• Password: Type the new password that you want to use. The default password
is sp-admin. The password must consist of six to 32 alphanumeric characters only.
• Confirm New Password: Retype the new password to confirm.
Page 63
55
Configuring the Access Point
Configuring Internet Settings
5. Click Update Settings to save and apply your changes.
Configuring Internet Settings
Internet settings define how the Access Point connects to your local area network and to the Internet. This section describes how to view and configure the Access Point’s Internet settings. Topics discussed include:
■ VLAN Settings Overview
■ Configuring NTP Server and Management VLAN
■ Default IP Addressing Behavior
■ Obtaining and Assigning an IP Address
■ Configuring L2TP Connection Settings
Figure 29. The Configuration > Internet page
VLAN Settings Overview
A Ruckus Wireless access point is essentially a network switch with the capability to service Wi-Fi connections. As such, like many advanced switches, Ruckus APs conform to the IEEE 802.1Q standard -- the standard that defines virtual LANs. In an 802.1Q switch, the concept of VLANs is always present. If a packet arrives without an 802.1Q header, it is assigned to the “native VLAN” or “untag VLAN.”
Page 64
56
Configuring the Access Point
Configuring Internet Settings
Each of the AP’s wireless interfaces can be assigned a single VLAN. When a packet enters the AP through its wireless interface, the packet is assigned to the Access VLAN configured on the Configuration > Wireless page (by default, 1).
AP Ethernet ports however, can be configured to pass all VLAN traffic (Trunk Ports) or multiple specific VLANs (General ports).
The VLAN displayed in the Web interface shows the AP’s view of the VLAN environ­ment; when a packet arrives at an AP’s Ethernet port, the port’s VLAN configuration helps determine if the packet is accepted or not (VLAN membership), and assign a default VLAN (untagged VLAN) if the packet contains no 802.1Q header.
In general, if your network has VLANs deployed already, you should apply VLAN configuration to Ruckus APs so that the configuration across the network is consistent.
Configuring NTP Server and Management VLAN
NTP Server
A Network Time Protocol (NTP) Server should be configured to ensure that the Access Point maintains the correct time. The default Ruckus Wireless NTP Server (ntp.ruck­uswireless.com) can be used if you do not have an NTP server on your network.
If you want the AP to contact a different NTP server, you can do so by going to Configuration > Internet and entering the host name in NTP Server at the top of the page.
Management VLAN
CAUTION: Changing the Management VLAN will cause you to be immediately
disconnected from the Web interface if the computer you are using is not on the same VLAN. Do not change the Management VLAN unless your admin PC is on the same VLAN, or you will be disconnected and unable to connect again without factory resetting the AP.
If you want to place this AP’s management traffic into a management VLAN, enter the VLAN ID in the Management VLAN field and click Update Settings.
Default IP Addressing Behavior
By default, the Access Point is configured to automatically obtain an IPv4 address from a DHCP server on the network. If the Access Point does not detect a DHCP server, it automatically assigns itself the static IP address 192.168.0.1 to make it easier for you to preconfigure and deploy it on your network.
For IPv6, the Auto Configuration setting serves the same purpose as DHCP. The default static IPv6 address is fc00::1.
Page 65
57
Configuring the Access Point
Configuring Internet Settings
Obtaining and Assigning an IP Address
There are three methods of assigning IP addresses to the Access Point:
■ DHCP / Auto Configuration
■ Static IP
■ PPPoE
DHCP / Auto Configuration
If you leave the Access Point at its default configuration, it will attempt to obtain an IPv4 address from a DHCP server on the network.
In an IPv6 network environment, the AP will attempt to obtain an IPv6 address from an IPv6 Auto Configuration server.
Renewing and Releasing DHCP
This task should be performed only if you have access to the DHCP server or have some way to determine what IP address has been assigned to the AP. It serves as a troubleshooting technique when IP addresses to one or more networked devices prove to be unusable or in conflict with others, or when the AP loses its DHCP-assigned IP address for some reason.
Figure 30. Renew or Release DHCP
To renew or release the DHCP server-assigned IP address
1. Go to Status > Internet.
Page 66
58
Configuring the Access Point
Configuring Internet Settings
2. Review the current settings.
3. If the current Connection Type is DHCP, you will be able to see the currently-
assigned IP address and subnet mask listed below.
• To force the AP to release its DHCP-assigned IP address, click Release DHCP.
This will disconnect the user from Web interface as the system reverts to its default IP address. Log in to the device using the default IP address (192.168.0.1) and click on Renew DHCP to request a new lease from the DHCP server.
• Click Renew DHCP to request a new IP address lease from the DHCP server.
Note: The IP address may or may not change depending on the lease time offered to this device.
4. Click Update Settings to save your settings.
Static IP
There are at least two instances when you would want to configure a static IP address for the Access Point:
■ If the current IP address that the Access Point is using consistently conflicts with
that of another device on the network.
■ If you want to switch from DHCP to static IP addressing, for use in managing or
maintaining the Access Point.
Unless you are able to determine the IP address assigned by the DHCP/Auto Config­uration server to the Access Point, it may prove helpful for anyone needing adminis­trative access to assign a static IP address.
To assign a static IP address to the AP
1. Go to Configuration > Internet. The Configuration > Internet page appears.
2. You can configure static addresses for IPv4, IPv6 or both. The AP will maintain both
sets of IP address settings if both are configured.
3. In IPv4 Connection Type or IPv6 Connection Type, select Static IP.
4. When the Internet Connection Settings options appear, you can make changes to
the following settings:
• Primary DNS Server: The IP address of the primary Domain Name System
(DNS) server.
• Secondary DNS Server: The IP address of the secondary Domain Name
System (DNS) server.
•IPv4/IPv6 Address: Enter the static IP address that you want to assign to the
AP in either IPv4 (dot-decimal) or IPv6 (colon-separated) format.
• Subnet Mask (IPv4)/Prefix Length (IPv6): Enter the subnet mask or prefix
length for the network.
• Gateway: Enter the gateway IP address of the Internet interface.
5. Click Update Settings to save your changes.
Page 67
59
Configuring the Access Point
Configuring Internet Settings
PPPoE
Point to Point Protocol over Ethernet (PPPoE) is a Layer 2 protocol which uses the PPP (Point to Point) protocol to connect a client system to a server system over a one to one network link. All traffic for a PPPoE connected client must go through the PPPoE server to reach the client. A PPPoE server can therefore be used to route, NAT, firewall, and perform QoS traffic shaping.
If a PPPoE server is used to distribute Internet access to subscribers, the Access Point can be configured with a PPPoE username and password to authenticate with the PPPoE server.
PPPoE is available only for the IPv4 connection type; PPPoE is not supported in IPv6 environments.
To set the IPv4 connection type to PPPoE
1. Go to Configuration > Internet.
2. Under IPv4 Connection Type, select PPPoE.
3. Enter an IPv4 Primary DNS Server address. Secondary DNS server is optional.
4. Enter a PPPoE Username.
5. Enter a PPPoE Password.
6. Retype the password in PPPoE Password Confirmation.
7. Click Update Settings to save your changes.
Configuring L2TP Connection Settings
You can implement transparent bridging with ZoneFlex through the use of L2TP (Layer 2 Tunneling Protocol) tunneling. By tunneling traffic from a ZoneFlex AP to a central­ized data center, access controllers with policy enforcement software can apply rules and services. In a typical WLAN implementation, these rules include a captive portal to authenticate users’ credentials.
In the case of L2TP, the ZoneFlex AP functions as a remote bridge. As such, it forwards traffic into PPP sessions over the L2TP tunnel. This implementation ensures that you have complete visibility into MAC addresses of users, as individual Wi-Fi clients are essentially placed (bridged) onto the ISP’s core network.
Page 68
60
Configuring the Access Point
Configuring Internet Settings
Figure 31. L2TP Connection
To configure L2TP tunneling
1. Go to Configuration > Internet.
2. Under L2TP Connection, click Enable.
3. In L2TP Network Server IP Address, type the IP address of the L2TP network
server (LNS) to which the device will connect.
4. In L2TP Network Server Password, type the L2TP server password.
5. If your network requires PPP authentication, configure the following fields under
L2TP/PPP Authentication:
• Username: Type your appropriate PPP user name.
• Password: Type the password appropriate to the account.
• L2TP Tunnel Untag VLAN ID: Enter the Untag VLAN ID for the L2TP tunnel.
6. In Close WLAN When Tunnel Fail, select Enable if you want to disable the WLAN when the tunnel connection is lost. This prevents clients from remaining seemingly connected to the WLAN but without Internet connectivity.
7. Click Update Settings to save your settings.
Page 69
61
Configuring the Access Point
Configuring Local Subnets
Configuring Local Subnets
ZoneFlex Access Points can be configured to provide routing/network address trans­lation (NAT) functionality by using the Local Subnets feature. When a Local Subnet is enabled, the standalone AP plays the role of a gateway router with the ability to manage its own subnets, providing DHCP server and DNS cache functions for both wired and wireless clients. These clients can be assigned private IP addresses from a user-defined address pool. Traffic from the client station in private address space appears on the outside as if generated by the AP itself. In this way, the AP performs Layer 3 packet forwarding not only for Hotspot/WISPr usage, but for standard usage as well.
Up to four IP subnets can be configured per AP, each with its own VLAN and address range which cannot conflict with one other.
To configure a local subnet for router mode support
1. Go to Configuration > Local Subnets. The four tabs at the top (Local Subnet 1 -
4) allow you to configure each of the four subnets independently.
2. Click Enabled next to Subnet. The local subnet configuration options appear.
3. In Local IP Address, enter an IP address for the gateway. The default address for
Subnet 1 is 192.168.40.1. This address can be used to access the AP’s Web interface for configuration and monitoring from devices connected to this subnet.
4. In Subnet Mask, typically you would want to leave the setting at its default value (255.255.255.0) for a Class C subnet with an address pool of up to 254 addresses. An error appears if you enter an invalid IP/netmask combination.
5. In DHCP Server, click Enabled if you want to enable DHCP for this subnet. Starting Address and Maximum DHCP Users fields appear.
6. In Starting Address, enter an address in the same subnet as the Local IP Address (e.g., 192.168.40.2).
7. In Maximum DHCP Users, enter the maximum number of clients that can be assigned addresses by DHCP in this subnet (valid values are 1-253 if the default subnet mask is used).
8. In Access VLAN, enter a VLAN ID to segment client traffic arriving from this subnet from other network traffic. (Example: if you use the default 192.168.40.1 address range, you would generally want to use “40” as the VLAN for this subnet.)
9. Click Update Settings to save your changes. The local subnet is created imme­diately and can now be applied to WLANs or Ethernet ports from their respective configuration pages.
Page 70
62
Configuring the Access Point
Configuring Wireless Settings
Figure 32. Configuring local subnets and enabling router mode
Configuring Wireless Settings
This section describes how to configure the wireless settings of the Access Point. There are two types of wireless settings that you need to configure:
■ Configuring Common Wireless Settings: Includes the wireless mode, country
code, and advanced wireless settings, such as the wireless transmit power and wireless protection mode. These settings are applied to all WLANs.
■ Configuring Wireless # Settings: The Wireless # tabs (“Wireless 1” through
“Wireless 8” on the 2.4GHz radio and “Wireless 9” through “Wireless 16” on the 5GHz radio) provide settings for customizing each WLAN individually.
Refer to the sections below for instructions on how to configure each set of wireless settings.
Configuring Common Wireless Settings
Common wireless settings are settings that are applied to all WLANs. On single radio APs, go to Configuration > Wireless. On dual radio APs, you configure these settings for the 2.4GHz and 5GHz radios independently by going to Configuration > Radio
2.4G or Configuration > Radio 5G.
Page 71
63
Configuring the Access Point
Configuring Wireless Settings
Figure 33. The Configuration > Wireless > Common page
To configure the wireless settings common to all WLANs
1. Go to Configuration > Wireless. The Configuration > Wireless > Common page
appears.
NOTE: If you are using a ZoneFlex 7363/7962/7982, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Make changes to the common wireless settings listed in the table below.
Setting Description
Radio Network (Dual radio APs only) Allows you to change the
name of the 2.4GHz and 5GHz radios (default: “Radio 2.4G” and “Radio 5G”).
Page 72
64
Configuring the Access Point
Configuring Wireless Settings
Wireless Mode On 802.11b/g APs:
The wireless mode options include the following:
• Auto-Select: Allows both 802.11g- and
802.11b-compliant devices to connect to the network. This is the default setting.
• 2.4GHz 54 Mbps (For faster 802.11g devices only): Allows only 802.11g-compliant devices to join the network.
• 2.4GHz 11Mbps (For slower 802.11b devices only): Allows only 802.11b-compliant devices to join the network.
On dual radio 802.11n APs:
On dual radio 802.11n APs, the wireless mode is determined by radio; i.e., for the 2.4GHz radio, the mode is set to 2.4GHz (802.11b/g/n), while for the 5GHz radio, the mode is set to 5GHz (802.11a/n).
On ZoneFlex 7321:
ZoneFlex 7321 is a single radio 802.11n AP capable of operating in either 2.4 or 5GHz mode. Use this setting to select 2.4GHz or 5GHz mode. See Figure 34
.
Channel This option lets you select the channel used by the
network. You can choose SmartSelect, or choose one of a specific number of channels. If you choose SmartSelect, the AP automatically selects the best channel (encountering the least interference) to transmit the signal.
Channel Width (11n APs only) On 802.11n Access Points, the option to choose
40MHz channel width provides (theoretically) double the data capacity of the channel. However, wider channel width means fewer channels available, and more interference with other wireless signals.
Country Code This option (if enabled) lets you select your
country or region code.
Advanced Settings Refer to “Reviewing Common Advanced
Settings” on page 66.
AeroScout RFID Select Enabled to enable AeroScout RFID tag
detection.
Page 73
65
Configuring the Access Point
Configuring Wireless Settings
CAUTION: Selecting the incorrect country or region may result in violation of appli-
cable laws. If you purchased the Access Point in the United States, you do not need to set the country code manually. Ruckus Wireless devices that are sold in the US are preconfigured with the correct country code and this setting is non-configurable.
3. If you are using AeroScout Tags in your organization to locate assets or personnel, you can use your ZoneFlex AP to relay location or presence data from the AeroScout Tags to the AeroScout Engine via Wi-Fi.
To enable the AP to relay AeroScout data, click the Enable option in AeroScout- RFID tag detection.
To check the status of the AeroScout communication agent (which relays location data from AeroScout Tags to the AeroScout Engine), go to the Status > Wireless page. Refer to “
Viewing Current Wireless Settings” on page 99 for more informa-
tion.
NOTE: For other AeroScout-related configuration, refer to the AeroScout documen­tation that was shipped with your AeroScout Tag and AeroScout Engine.
NOTE: If ZoneDirector exists on the network, you can enable AeroScout RFID tag detection on all its managed APs at once. Refer to the ZoneDirector online help for more information.
4. Click Update Settings to save your settings.
External Antenna NOTE: This option only appears if you are using
the ZoneFlex 2942 AP.
The ZoneFlex 2942 AP provides an external antenna port, in case you want to attach an external antenna to extend the range of your wireless network. To enable the AP to use the external antenna, select the Enabled option in this section. This option is disabled by default.
Page 74
66
Configuring the Access Point
Configuring Wireless Settings
Figure 34. The ZoneFlex 7321 can be configured to operate in either 2.4GHz or
5GHz mode
Reviewing Common Advanced Settings
Advanced wireless settings should only be changed by an experienced administrator. Incorrect settings can severely impact wireless performance. It is recommended that the default settings be retained for best performance.
CAUTION: To fully benefit from the Access Point’s capabilities, it is advisable not to
change these values unless absolutely necessary.
Page 75
67
Configuring the Access Point
Configuring Wireless Settings
Figure 35. The Configuration > Wireless > Advanced > Common page
To configure the advanced common options
1. On the Configuration > Wireless page, click Edit Common Settings. The
Configuration > Wireless > Advanced > Common page appears.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G > Edit Common Settings.
2. Configure the advanced settings listed in Table 22 as required.
Page 76
68
Configuring the Access Point
Configuring Wireless Settings
Table 22. Advanced wireless common settings
3. Click Update Settings to save and apply the changes.
Option Description
Transmit Power The default setting is Full. Select the level of
transmit power from the drop-down menu. This option sets the maximum transmit power level relative to the predefined power (this value differs according to the current country code).
Protection Mode (Inactive by default.) If you activate
protection, you control how 802.11 devices know when they should communicate with another device. This is important in a mixed environment of both 802.11b and 802.11g/ 11n clients.
WARNING: Activating this option (and configuring the settings) boosts the interoperability of 802.11b and 802.11g/11n devices but will severely decrease performance.
• CTS-only: Choose this option to force all destination devices to acknowledge their ability to receive data when a transmission is initiated. Use this option for compliance with the Wi-Fi Alliance certification.
• RTS/CTS: Choose this option to force both sending and receiving devices to confirm a data exchange on both ends before proceeding.
Page 77
69
Configuring the Access Point
Configuring Wireless Settings
Configuring Wireless # Settings
The Access Point provides up to eight wireless LANs per radio that can be individually configured to provide different kinds of services for different kinds of wireless clients, traffic types or different user groups. Each WLAN can be configured with separate security settings, VLANs, access controls and rate limiting policies, among other settings.
Figure 36. Wireless # settings
To configure wireless settings
1. Go to Configuration > Wireless. The Configuration > Wireless > Common page
appears.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Click one of the eight Wireless (#) tabs. The Configuration > Wireless > Wireless
[#] page appears.
3. Review the WLAN options listed in Table 23
, and then make changes as required.
Page 78
70
Configuring the Access Point
Configuring Wireless Settings
Table 23. WLAN options
Option Description
Wireless Network This wireless network name is for management purposes
only, and is not visible to the user.
Wireless Availability This option controls whether or not the wireless network is
available to users (Off or On).
Broadcast SSID This option controls whether or not the WLAN SSID is
visible to anyone looking for wireless networks. Disabling (hiding) the SSID requires the user to be told the correct SSID before they can connect to your network.
SSID This is the publicly-broadcast “name” of your wireless
network. SSIDs can contain up to 32 alphanumeric characters and are case-sensitive. The maximum SSID length can only contain between 2 and 32 characters, including characters from ! (char 33) to ~ (char 126).
Threshold Settings This button opens a page where you can configure the
Protection Mode you activated on the Configuration > Wireless > Advanced > Wireless [#] page. If Protection Mode is not active, ignore this option.
For more information, see “
Setting Threshold Options” on
page 78.
Rate Limiting This button opens a page where you can configure upload
and download limits per station. For more information, see
“
Rate Limiting” on page 79.
Access Control This button opens a page where you can configure access
controls for the WLAN. For more information, see
“
Controlling Access to the Wireless Network” on page 80.
Packet Forwarding Isolated: Selecting Isolated causes the traffic from this
WLAN to terminate at the Access Point.
Bridge to WAN: The default setting, Bridge to WAN forwards packets arriving on this WLAN to the WAN (uplink) port and eventually to their external destinations using Layer 2 forwarding.
Local Subnet NAT and Route to WAN: This setting allows routing of wireless packets to their destinations using Layer 3 network address translation (NAT).
Bridge to L2TP Tunnel: Uses Layer 2 Tunneling Protocol to deliver packets encapsulated with an L2TP header in UDP datagrams.
Page 79
71
Configuring the Access Point
Configuring Wireless Settings
4. When you are finished, click Update Settings to save and apply the changes. A confirmation message appears at the top of this page.
5. Click Go back to Wireless Configuration to reopen the previous page.
Hotspot Service Select a Hotspot configuration from the list to enable
Hotspot service on this WLAN, if you have configured it from the Configuration > Hotspot page. See “
Configuring
Hotspot Service” on page 88.
Local Subnet This option appears if you have selected Local Subnet NAT
and Route to WAN under Packet Forwarding, and allows you to choose which subnet this WLAN’s traffic will be part of. You must have previously configured a subnet from the Configuration > Local Subnets page before it becomes available here.
Access VLAN Enter a VLAN ID to segment all traffic arriving from this
WLAN to a specified VLAN. Default is 1.
Dynamic VLAN This setting is available only with WPA encryption and
802.1X authentication. Dynamic VLAN allows the dynamic assignment of VLANs to clients based on RADIUS attributes. Enable this option only if your RADIUS server is configured to segment clients using dynamic VLAN.
DHCP Option 82 When this option is enabled on an SSID, additional
information will be encapsulated in DHCP option 82 and inserted into DHCP request packets. Current format of option 82 is:
Circuit ID sub-option: WLAN:<IFNAME>:<VLAN>:<SSID>:<MODEL>: <HOSTNAME>:<DEVMAC>
This option supports the ability for a service provider to allocate IP addresses intelligently by considering information on the origin of the IP allocation request.
Encryption Method By default, all data exchanges on your wireless network are
not encrypted, but you can select an encryption method in this option, and use the extra workspace features that appear to fine-tune the encryption settings.
Ruckus Wireless strongly recommends using WPA as the encryption method as WEP has been proven to be easily circumvented.
For more information, see either “
Using WEP” on page 72
or “
Using WPA” on page 73.
Page 80
72
Configuring the Access Point
Configuring Wireless Settings
Using WEP
Wired Equivalent Privacy (WEP) is a security algorithm for 802.11 wireless networks designed to provide data confidentiality comparable to that of a wired network. WEP uses a pre-shared key for encrypting data frames that is shared among all users of the wireless network. For this reason and others, WEP has been discredited as a security mechanism and should be avoided in favor of WPA if at all possible.
CAUTION: WEP encryption has been proven to be easily circumvented. Therefore,
Ruckus Wireless recommends using WPA whenever possible, and only use WEP if your client devices do not support WPA.
CAUTION: Using WEP encryption limits the performance of the AP to 802.11g rates.
If you select WEP encryption for a WLAN, wireless devices that are capable of faster
802.11n transfer rates will be limited to 802.11g rates.
Figure 37. WEP settings
To configure WLAN-specific WEP encryption settings
1. Go to Configuration > Wireless. The Configuration > Wireless > Common page
appears.
Page 81
73
Configuring the Access Point
Configuring Wireless Settings
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Click the Wireless # tab that you want to configure. The Configuration > Wireless
> Wireless[#] page appears.
3. Click the Encryption Method menu, and then click WEP. An additional set of WEP­specific encryption options appear on this page.
4. Review the encryption settings listed in Table 2 4
, and then make changes as
required.
Table 24. WEP Options
5. Click Update Settings to save and apply the changes. A confirmation message appears at the top of the page.
6. Click Go back to Wireless Configuration to reopen the previous page.
Using WPA
Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) are two security protocols developed by the Wi-Fi Alliance in response to the weaknesses of WEP.
Encryption Setting Description
Authentication Mode Open is the only authentication mode
available with WEP encryption.
Encryption Strength • 64 bit: Specify the key with 10 hexadecimal
digits or 5 ASCII characters.
• 128 bit: Specify the key with 26 hexadecimal digits or 13 ASCII characters. The 128-bit cryptography is stronger privacy protection for your network and is recommended if you use WEP.
Key Entry Method • Hexadecimal: The encryption key only
accepts hexadecimal characters (0-9, A-F).
• ASCII Text: The encryption key accepts ASCII characters.
WEP Key Enter the key manually according to the Key
Entry Method and Encryption Strength settings.
Key Index Choose the index, from “1” to “4”, that the
WEP key is to be stored in.
Page 82
74
Configuring the Access Point
Configuring Wireless Settings
Selecting WPA as the Encryption Method allows you to choose WPA version, WPA Authentication and WPA Algorithm. This section discusses WPA-PSK (pre-shared key). For information on WPA-Enterprise (WPA-802.1X), see “
Customizing 802.1X Settings”
on page 76
.
Use of WPA-PSK (also known as WPA-Personal) allows automatic key generation based on a single passphrase. WPA-PSK provides strong security for home and small offices and does not require a RADIUS server, but may not be supported on older wireless devices. In some cases, the older devices can be upgraded with adapters to take advantage of WPA-PSK.
If you configure the WLAN with WPA-PSK, wireless users will not be able to connect to your WLAN unless their devices support WPA-PSK and are configured with the same passphrase.
Figure 38. WPA settings
To configure WPA encryption settings
1. Go to Configuration > Wireless. The Configuration > Wireless > Common page
appears.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Click the Wireless # tab that you want to configure. The Configuration > Wireless
> Wireless[#] page appears.
Page 83
75
Configuring the Access Point
Configuring Wireless Settings
3. Click the Encryption Method menu, and then click WPA. An additional set of WPA-specific options appear on this page.
4. Review the encryption settings listed in Table 2 5
, and then make changes as
preferred.
Table 25. Encryption settings
Encryption Setting Description
WPA Version Your options are WPA, WPA2 or WPA Auto.
• WPA (Wi-Fi Protected Access) is the replacement security standard adopted by the Wi-Fi Alliance in response to the security weaknesses of WEP. WPA was developed as an interim measure prior to the ratification of the 802.11i standard, which introduced WPA2.
• WPA2 provides stronger wireless security than WPA and is the recommended option. However, older wireless clients may not be compatible with WPA2. For example, WPA2 support on Windows XP requires a Microsoft patch and is only available on Windows XP with Service pack 2 or later.
• WPA-Auto allows both WPA and WPA2 devices to operate on the same WLAN.
WPA Authentication PSK (Pre-Shared Key) mode is suitable for home or
personal use. 802.1X mode uses a RADIUS server to verify user identity. The auto mode offers both options for the wireless client to choose from.
For more information on how to configure the 802.1X mode, refer to “
Customizing 802.1X Settings” on
page 76.
Page 84
76
Configuring the Access Point
Configuring Wireless Settings
5. Click Update Settings to save and apply the changes. A confirmation message appears at the top of the page.
6. Click Go back to Wireless Configuration to reopen the previous page.
Customizing 802.1X Settings
CAUTION: Do not customize these options unless you are an experienced network
administrator or are under the guidance of an IT/support professional.
If you choose WPA as the encryption method, you have the option to set up the Access Point to act as an 802.1X proxy, utilizing external authentication sources such as a RADIUS server.
In 802.1X authentication, the supplicant sends access request messages along with credentials, such as user name / password or digital certificate, to an authenticator, which forwards the credentials to the authentication server for verification. The supplicant (client device) remains in an unauthorized state until verification has been received. In unauthorized state, only 802.1X traffic is allowed; all other traffic, such as DHCP and HTTP traffic, is dropped. For its wireless interfaces, the Access Point can serve as the authenticator communicating between the supplicant and the authenti­cation server.
WPA Algorithm • TKIP: Temporal Key Integrity Protocol is an older
encryption algorithm that provides stronger security than a shared WEP key, but not as strong as the newer AES algorithm.
• AES: AES (Advanced Encryption Standard) replaces TKIP as the default (and recommended) encryption algorithm for modern wireless LANs.
• Auto: Auto allows both encryption algorithms to be used on the same WLAN. When Auto is selected, the wireless client decides whether TKIP or AES will be used. Note however that allowing TKIP will reduce the performance of the WLAN (as broadcast packets will be limited to slower transfer rates), and is therefore not recommended.
Passphrase
Enter a new passphrase between 8 and 32 characters long, using any combination of printable characters (letters, numbers, hyphens and underscores).
Page 85
77
Configuring the Access Point
Configuring Wireless Settings
Figure 39. 802.1X settings
To configure 802.1X authentication settings on a WLAN
1. Go to Configuration > Wireless. The Configuration > Wireless > Common page
appears.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Click a Wireless # tab to configure. The Configuration > Wireless > Wireless[#]
page appears.
3. Click the Encryption Method menu, then click WPA. The basic set of WPA-specific encryption options appears on the page.
4. Select 802.1X as the WPA Authentication mode. Additional options appear.
5. Configure the following settings to customize your 802.1X authentication:
• RADIUS NAS-ID: Enter the network ID assigned to your RADIUS server.
• Authentication Server [-Required-]: Enter the information needed to estab-
lish a connection between the Access Point and the RADIUS server.
• Accounting Server [-Optional-]: Enter the information needed to establish
this connection.
6. Click Update Settings to save and apply the changes. A confirmation message appears at the top of this page.
Page 86
78
Configuring the Access Point
Configuring Wireless Settings
7. Click Go back to Wireless Configuration to reopen the previous page.
Setting Threshold Options
The following options allow you to fine-tune the “Protection Mode” behavior, set previously on the Configuration > Wireless > Advanced > Common page. After activating a Protection Mode, you can open each Wireless tab and customize the threshold settings, which determine what is put into effect and when.
CAUTION: Do not customize these options unless you are an experienced network
administrator or are under the guidance of an IT/support professional.
To customize Protection Mode (Threshold) settings
1. Go to Configuration > Wireless. The Configuration > Wireless > Common page
appears.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Click the tab for the Wireless # (WLAN) that you want to configure. The Configu-
ration > Wireless > Wireless [#] page appears.
3. Look for Threshold Settings, and then click Edit Settings. The Configuration > Wireless > Advanced > Wireless [#] page appears.
4. Review the options listed in Table 26
, and then make any needed changes.
Table 26. Threshold options
Option Description
Beacon Interval (The default value is 100.) The value indicates the
frequency interval of the beacon in milliseconds. A beacon is a broadcast packet sent by the AP to synchronize the wireless network.
Data Beacon Rate (The default value is 1.) The value indicates the interval
of the Delivery Traffic Indication Message (DTIM). This is a countdown field that the device uses to inform its clients of the next window for listening to broadcast or multicast messages.
RTS/CTS Threshold (The default value is 65535.) This option determines at
what packet length the RTS/CTS function is triggered. A lower threshold may be necessary in an environment with excessive signal noise or hidden nodes, but may result in some performance degradation.
Page 87
79
Configuring the Access Point
Configuring Wireless Settings
5. Click Update Settings to save and apply the changes. A confirmation message appears at the top of the page.
You have completed configuring the threshold options. To reopen the previous page, click the Go back to Wireless Configuration link.
Figure 40. Threshold settings
Rate Limiting
Rate Limiting allows you to cap the per client data transfer rates for a specific WLAN.
To enable per station rate limits
1. Go to Configuration > Wireless.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Select the WLAN that you want to configure from the tabs at the top of the page.
3. Click the Edit Settings button next to Rate Limiting. The Rate Limiting page
appears.
4. Set the maximum Downlink and Uplink rate per station.
5. The table below updates to show the maximum transfer rate per station for each
traffic type.
Page 88
80
Configuring the Access Point
Configuring Wireless Settings
6. Click Update Settings to save your changes.
Figure 41. Limit per station traffic rates on a specific WLAN
Controlling Access to the Wireless Network
Access Control enables you to specify the stations are allowed to join (associate with) your wireless networks. Access controls can be configured for each WLAN from its respective Wireless # tab.
Access Control Options
This section describes the options that you can use to control access to the wireless network.
■ Disabling WLAN Access Restrictions: If you select Disable WLAN access restric-
tions, then MAC-address-based restrictions on which stations can join the WLAN are disabled; thus, any station can join. If the WLAN uses encryption, then the station must still supply the correct encryption passphrase. The Access Controls table is hidden if the current mode is Disable WLAN access restrictions.
■ Allowing Only Stations Listed in the Access Controls Table: If you select Allow
only stations listed in the Access Controls Table, then stations entered into the access-controls table are allowed but all others are disallowed. To add MAC addresses, see “
Changing the Access Controls for a WLAN” on page 81.
Page 89
81
Configuring the Access Point
Configuring Wireless Settings
■ Denying Only Stations Listed in the Access Controls Table: If you select Deny
only stations listed in the Access Controls Table, then stations entered into the access-controls table are disallowed but all others are allowed. To add MAC addresses, see “
Changing the Access Controls for a WLAN” on page 81.
Changing the Access Controls for a WLAN
By default, the Disable WLAN access restrictions option is selected, which allows any wireless station to gain access to the wireless network. If you want to change this setting, follow the instructions below.
Figure 42. Access control settings
To edit the ACL
1. Go to Configuration > Wireless.
NOTE: If you are using a ZoneFlex 7363/7962/7982 AP, go to Configuration > Radio
2.4G or Configuration > Radio 5G.
2. Click the Wireless # tab for which you want to configure the access control
settings.
3. Click the Edit Settings button next to Access Control.
4. Select the radio button for the desired access control. (For a description of the
options, see “
Access Control Options” in the previous section.) The Access
Controls Table appears.
Page 90
82
Configuring the Access Point
Configuring Ethernet Ports
5. To add a MAC address to the Access Control table, click the Add new entry button.
6. Fill out the following text boxes:
• Address: Six text boxes appear in which you enter the desired MAC address,
in hexadecimal digit form, two characters in each box. You can specify a full 12-hex-digit MAC address or enter “wildcard” characters for “don't care” digits. Allowable hex-digit characters are 0-9, a-f, and A-F. Most address-tags and software where you find MAC addresses listed include colons or dashes to separate the address-pairs; that is provided for you on the web page, so do not enter the colons or dashes.
Supported wildcard characters include “x”, “X” and blank (space character). Wildcards are useful when you want to specify all MAC addresses from a given manufacturer. For example, by specifying only the Organizationally Unique Identifier (the first six hexadecimal digits of any MAC address from that manufacturer is its OUI) saves you having to enter all 24 million of them (the table size is limited in the AP/Router to 128 entries). Some manufacturers produce devices using more than one OUI, in which case you may need to enter each applicable one.
7. Click Update to save your changes. Assuming all parameters you entered are acceptable, that row will be added to the table.
You have completed adding an entry to the MAC address table. If you have additional MAC addresses you want included, click Add new entry, and then repeat these steps until you have entered all the stations you want. There is a limit of 128 rows.
Removing a MAC Address
To remove a MAC address from the ACL table, click the Cancel button under the Remove column, and then click Update. The ACL table refreshes, and the MAC address that you deleted disappears from the table.
Configuring Ethernet Ports
The Ethernet Ports configuration page allows you to define how the Access Point’s Ethernet ports behave. You can disable ports entirely, define trunking and packet forwarding behavior, configure 802.1X authentication settings, and configure VLAN settings for each port individually from this page.
Page 91
83
Configuring the Access Point
Configuring Ethernet Ports
Figure 43. The Configuration > Ethernet Ports page
To configure LAN ports
1. Go to Configuration > Ethernet Ports.
2. Review the following table and make changes as needed for each of the ports
labeled PORT 1 through PORT 4 (depending on AP model), which correspond to the AP’s Ethernet ports.
Setting Description
Enable All Ethernet ports are enabled by default.
Unchecking this box next to a port disables that port entirely. If you do not want to provide wired access through the AP, uncheck (clear) the Enable box next to each LAN port.
Port Type See “
Setting Ethernet Port Type” on page 85 for
more detailed information.
■ Trunk port: This port passes all VLAN traffic.
■ Access Port: This port provides network
access.
■ General Port: User-defined VLAN member-
ship.
Page 92
84
Configuring the Access Point
Configuring Ethernet Ports
Packet Forwarding Isolated: Selecting Isolated causes the traffic
from this port to terminate at the Access Point.
Bridge to WAN: The default setting, Bridge to WAN forwards packets arriving on this port to the WAN (uplink) port and eventually to their external destinations using Layer 2 forwarding.
Local Subnet NAT and Route to WAN: This setting allows routing of packets to their destinations using Layer 3 network address translation (NAT).
Bridge to L2TP Tunnel: Uses Layer 2 Tunneling Protocol to deliver packets encapsulated with an L2TP header in UDP datagrams.
Local Subnet This option appears if you have selected Local
Subnet and Route to WAN under Packet Forwarding, and you have selected Access Port as
the port type. This option allows you to select which subnet this port’s traffic will be part of. You must have previously configured a subnet from the Configuration > Local Subnets page before it becomes available here.
802.1X Configure the port as an 802.1X authenticator or supplicant. The following options are available:
■ Disabled: No 802.1X controls are applied to
this port.
■ Authenticator (Port-based): Only one of the
attached MAC hosts must be authorized for all hosts to be granted access to the network.
■ Authenticator (MAC-based): Each MAC host
is individually authenticated.
■ Supplicant: The port acts as a supplicant to
an upstream authenticator. Configure a port as Supplicant if the port is a Trunk Port used to connect the AP to a LAN switch.
See “
Working with 802.1X on Wired Ethernet
Ports” on page 86 for more information.
Page 93
85
Configuring the Access Point
Configuring Ethernet Ports
3. Click Update Settings to save your changes.
Setting Ethernet Port Type
ZoneFlex AP Ethernet ports can be configured as one of the following port types:
■ Trunk P o rt
■ Access Port
■ General Port
Trunk Port
Trunk Ports forward and receive tagged and untagged frames and are used for bridging switch ports together. The Trunk port is a member of all VLANs that exist on the switch, and all VLAN-tagged traffic arriving on the port is seen. If an untagged frame is received on a Trunk port, the frame is associated with the Untag VLAN (also known as “native VLAN”, by default, 1).
If a port is configured as a Trunk port, the Untag ID field can be used to define the Untag VLAN--the VLAN that the switch uses for forwarding/filtering purposes when a frame arrives without an 802.1Q header.
VLAN Untag ID: Enter a valid VLAN ID in this field to
segment traffic arriving on this port to a specific VLAN. Default is 1. Valid VLAN entries are 1-4094.
Members: Displays the VLAN membership of the port. (Membership is configurable only for the General port type.)
See “
Working with Port-Based VLANs” on
page 88 for more information.
Insert DHCP Option 82 When this option is enabled for an Ethernet port,
additional information will be encapsulated in DHCP option 82 and inserted into DHCP request packets.
Current format of option 82 is:
Circuit ID sub-option: ETH:<IFNAME>:<VLAN>:N/A: <MODEL>:<HOSTNAME>:<DEVMAC>
This option supports the ability for a service provider to allocate IP addresses intelligently by considering information on the origin of the IP allocation request.
Page 94
86
Configuring the Access Point
Configuring Ethernet Ports
Access Port
Access Ports are used to provide network access. Traffic arriving on different Access Ports can be segmented into different logical networks (VLANs) using the Untag VLAN ID field. Access Ports are members of only one VLAN--the VLAN that is configured in the Untag VLAN field.
General Port
The General Port can be configured to support multiple tagged VLANs and one untagged VLAN. As Trunk Ports by definition are members of all VLANs, the General Port is the only port type for which membership is user configurable.
Working with 802.1X on Wired Ethernet Ports
802.1X authentication consists of the following three components:
■ Supplicant: The supplicant sends access request messages along with credentials,
such as user name / password or digital certificate, to an authenticator, which forwards the credentials to the authentication server for verification.
■ Authenticator: The authenticator challenges the identity of the supplicant, then
passes its credentials to the AAA server. If the credentials are accepted the supplicant is allowed access.
■ Authentication Server (AAA Server): The AAA server verifies the supplicant’s
credentials and permits or rejects its request for access.
For wired 802.1X, a Ruckus AP’s Ethernet port can be configured as either an Authenticator or as a Supplicant, depending on which port type is selected. Ta b l e 27 and Table 28
describe the 802.1X roles available by port type.
Table 27. Authenticator support by port type
Table 28. Supplicant support by port type
The following considerations apply:
Trunk Port Access Port General Port
Port-based mode X X X
MAC-based mode X
Trunk Port Access Port General Port
Supplicant X
Page 95
87
Configuring the Access Point
Configuring Ethernet Ports
■ A single port can not be configured as both an Authenticator and Supplicant at
the same time.
■ Only one port per AP can be configured as a Supplicant.
■ If the AP is connecting to a switch port with 802.1X authentication enabled, the
AP’s port type should be configured as a Trunk Port and its role should be configured as Supplicant. The switch port should be configured as a Trunk port in Port-based Authenticator mode.
■ If there are multiple devices connected to an AP port (through a downstream
switch), the port can be configured as either Port-based or MAC-based Authen­ticator. In Port-based mode, only one of the attached MAC hosts must be
authorized for all hosts to be granted access to the network. In MAC-based mode, each MAC host is individually authenticated.
■ If a Trunk Port is configured as a Supplicant, a user name and password must be
entered to authenticate the port to the 802.1X aware LAN switch.
■ If an Access Port is configured as an Authenticator, the administrator must define
the RADIUS server that the Authenticator will communicate with. All Ethernet ports of a single AP are configured with the same RADIUS server.
Enable MAC authentication bypass: If MAC authentication bypass is enabled, the port first attempts to authenticate the attached device by MAC address, and if that fails, it will try to authenticate the device using 802.1X.
Page 96
88
Configuring the Access Point
Configuring Hotspot Service
Working with Port-Based VLANs
The Access Point provides options for segmenting all incoming traffic (both wireless and wired Ethernet traffic) into specific VLANs. There are two ways to segment incoming traffic into VLANs:
■ Each of the wireless interfaces (SSIDs) can be configured with a specific Access
VLAN ID: (Configuration > Wireless > Wireless [#] > Access VLAN).
■ Each of the LAN ports can be configured with an Untag VLAN ID (Configuration
> Ethernet Ports > VLAN > Untag ID).
For Ethernet ports, the behavior of the Untag VLAN ID depends on the Port Type selected. If the port is configured as a Trunk port, it will include all VLANs (1-4094) in its membership. The VLAN Untag ID field (default = 1) can be used to redefine the “Native VLAN” for the port.
If the Ethernet port is configured as an Access Port, it can be configured with only one Untag VLAN ID and its membership includes only that one VLAN.
If the Ethernet port is configured as a General Port, it can be configured to include multiple VLANs in its membership and one Untag VLAN.
Configuring Hotspot Service
Hotspot service can be deployed on standalone ZoneFlex APs through the Web interface. At a minimum, you must configure a login redirect URL and a RADIUS server to which users will be authenticated. Additional options and controls are provided on subsequent pages.
To enable Hotspot service
1. Go to Configuration > Hotspot.
2. Click Enabled next to Hotspot Service.
3. Review the settings in table Table 29
, and make changes as needed.
Table 29. Hotspot configuration settings
Setting Description
UAM IP Address Specify the IP address of the UAM service.
Redirect unauth. user to Redirect unauthenticated users to the specified URL
(login page).
Page 97
89
Configuring the Access Point
Configuring Hotspot Service
4. Click Update Settings to save your changes.
You have completed the minimum settings for providing Hotspot service on this AP. Additional configuration options are available using the Edit Settings buttons at the bottom of the page.
After user is authenticated
Select where you want to redirect the user after successful authentication.
• Redirect to the above URL: return to the login URL configured above.
• Redirect to the URL the user intended to visit: upon successful authentication, go directly to the URL that the user originally entered (typically the browser’s home page).
• Redirect to: specify a URL to which users are redirected after authentication. This can be used to redirect users to a “Login Successful” page, or a page that offers connection time information or a Logout button.
Primary RADIUS Server Enter the IP address of the primary RADIUS server against
which users will be authenticated (required).
Secondary RADIUS Server Enter the IP address of the secondary RADIUS server, if
one is available (optional).
RADIUS Server Secret Enter the shared secret for communication with the
RADIUS server (required).
Setting Description
Page 98
90
Configuring the Access Point
Configuring Hotspot Service
Figure 44. Minimum configuration settings for providing Hotspot service
Customizing Hotspot Optional Settings
Optional Hotspot settings include a number of options for fine-tuning your Hotspot service, such as maximum session time, grace period, accounting update interval, etc.
The following Hotspot options can be configured from the Configuration > Hotspot
> More Options page:
Table 30. Optional Hotspot settings
Setting Description
Temporarily block user after __ unsuccessful login attempts
Specifiy the maximum number of repeated authentication failures allowed.
Redirect temp. blocked user toEnter a redirect URL to which blocked users will be
redirected.
MAC Authentication If enabled, the Hotspot service will attempt to
authenticate users based on their MAC addresses if the local Hotspot authentication has failed. If enabled, an optional MAC authentication password can be entered. If no password is specified, the system will use the client’s MAC address as the password.
Page 99
91
Configuring the Access Point
Configuring Hotspot Service
NAS ID Specify the Network Access Server identifier of this
device. The NAS-ID attribute is sent in RADIUS access and accounting request messages. It can also be used as location identification when NAS­IP-Address cannot be used for this purpose.
WISPr Location ID Specify the Hotspot location identifier. This value
is provided in the RADIUS access and accounting requests. It is recommended that the value is in the form of "isocc=<ISO_Country_Code>,
cc=<E.164_Country_Code>,ac=<E.164_Ar ea_Code>,network=<SSID/ZONE>".
WISPr Location Name Specify the hotspot location and operator's name.
This value is provided in the RADIUS access and accounting requests. It is recommended that the value is in the form of "<HOTSPOT_OPERATOR_NAME>,<Location".
Location Description Specify the description of location. This value is
provided in the HTTP redirection.
Accounting Update Interval Specify the interval for RADIUS accouting requests.
Interim Redirect Interval Specify the interval after which users will be
redirected to the login URL.
Maximum Session Time Enter the maximum session time in minutes.
Grace Period Specify the maximum time that a user may
disconnect from the Hotspot service and return without the need to login again.
UAM Port with HTTP TCP port to bind to for authenticating clients using
HTTP.
UAM Port with HTTPS TCP port to bind to for authenticating clients using
HTTPS.
RADIUS Disconnect Port UDP port to listen to for accepting RADIUS
disconnect requests.
Swap Input and Output Counters
Swap the value of input counters (packets, octets and giga words) and output counters in RADIUS accounting requests. This option is mainly for backward compatibility with existing Chillispot deployments.
Encode User Password Encode user password with challenge string, if
UAM secret is not specified; otherwise, encode user password with both challenge string and UAM secret.
Page 100
92
Configuring the Access Point
Configuring Hotspot Service
Figure 45. Configuring optional Hotspot options
Creating a Hotspot Walled Garden
You can use the Hotspot Walled Garden rules to designate network destinations (host address or subnet) that users can access without going through authentication. A Walled Garden is a limited environment to which an unauthenticated user is given access for the purpose of setting up an account. After the account is established, the user is allowed out of the Walled Garden. URLs will be resolved to an IP address (up to four). Users will not be able to click through to other URLs that may be presented on a page if that page is hosted on a server with a different IP address. Avoid using common URLs that are translated into many IP addresses (such as www.yahoo.com), as users may be redirected to reauthenticate when they navigate through the page.
To create Walled Garden rules
1. Go to Configuration > Hotspot > Walled Garden.
2. Click Add New Entry. A field entitled Walled Garden Hosts appears.
3. In Walled Garden Host, enter a host name, IP address, network segment (e.g.,
192.168.1.0/24) or a domain name. If a domain name is entered, it will be resolved every 5 minutes.
UAM Shared Secret The UAM Shared Secret is the shared secret
between this Access Point and the HTTP server for the Redirection URL. This setting is optional.
Loading...
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use