3e Technologies 528 Wireless Video Server User Manual 2004120 3e Technologies FCC Test Report R0 00

3e Technologies International, Inc. Wireless Video Server 2004120 3e Technologies FCC Test Report R0 00

Contents

Manual 2

3e-528 Wireless Video Server  Chapter 3: Access Point Conguration38                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  39SNMP AgentThe SNMP Agent setup screen (shown on the previous screen) allows you to set up an SNMP Agent. The agent is a software module that collects and stores management information for use in a network management system. The 3e-528's integrated SNMP agent software module translates the device’s management information into a common form for interpretation by the SNMP Manager, which usually resides on a network administrator’s computer.  The SNMP Manager function interacts with the SNMP Agent to execute ap-plications to control and manage object variables (interface features and devices) in the gateway. Common forms of managed information include number of pack-ets received on an interface, port status, dropped packets, and so forth. SNMP is a simple request and response protocol, allowing the manager to interact with the agent to either•  Get - Allows the manager to Read information about an object variable•  Set - Allows the manager to Write values for object variables within an agent’s control, or •  Trap - Allows the manager to Capture  information and send an alert about some pre-selected event to a specic destination.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration38                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  39The SNMP conguration consists of several elds, which are explained below:•  Community –The Community eld for Get (Read Only), Set (Read & Write), and Trap is simply the SNMP terminology for “password” for those functions. •  Source –The IP address or name where the information is obtained.•  Access Control –Denes the level of management interaction permit-ted.If using SNMPv3, enter a username (minimum of eight characters), authen-tication type with key and data encryption type with a key. If FIPS mode, only SHA and AES are supported. This conguration information will also need to be entered in your MIB manager setup.User ManagementList All UsersThe List All Users screen simply lists the Crypto Ofcer and administrator accounts congured for the unit.If you click on Edit, the User Management — Edit User screen appears.  On this screen you can edit the user ID, password, role, and note elds.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration40                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  41Add New UserThe Add New User screen allows you to add new administrators and crypto ofcers, assigning and conrming the password for the administrator.The screen shown above is the screen as it will appear in FIPS 140-2 mode.  The Password complexity check and the Minimal Password length are established on the User Management — Password Policy screen. Password Policy (FIPS Mode Only)The Password Policy screen allows you to enable a Password Complex-ity Check when you are in FIPS 140-2 mode. The denition of a complex pass-word is a password that contains characters from 3 of the following 4 groups: uppercase letters, lowercase letters, numerals, and symbols. If enabled, you must also select minimum password length. Click Apply to save your selection.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration40                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  41Monitoring/ReportsThis section gives you a variety of lists and status reports. Most of these are self-explanatory.System StatusThis screen displays the status of the 3e-528 Device and Network Interface Details and the Routing Table.There are some pop-up informational menus that give detailed information about CPU, PCI, Interrupts, Process, and Interfaces.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration42                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  43Bridging StatusThis screen displays the Ethernet Port STP Status, Wireless Port STP Status, and Wireless Bridging Information.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration42                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  43Wireless ClientsThe Wireless Clients report screen displays the MAC Address of all wire-less clients and their signal strength and transmit rate. The screen shown here emulates the FIPS 140-2 setup and contains a column for EMCON response. This column is not displayed in non-FIPS mode.  The EMCON feature is only works with the 3e-010F Crypto Client in FIPS mode. If Transmit power is disabled, either by setting TX Pwr Mode to Off on the management screen or by using the RF Manager (Chapter 7), the Wireless Clients screen will show the results from each associated client in the EMCON Response column. If the client responds to the "disable" command, a Yes is displayed. If the column contains a No, this can mean either:•  the client didn't receive the command, or•  the client is no longer in the areas, or•  the client software doesn't support the RF management feature.This status information remains active for 5 minutes after the clients are disabled.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration44                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  45Once the transmit power is re-enabled and clients re-associate to the AP, EMCON information is maintained for them. If a new client that wasn't associ-ated previously associates with the AP after the EMCON mode, its EMCON status appears as "-", which indicates the status record is not applicable.Adjacent AP ListThe Adjacent AP list shows all the APs on the network. If you select the check box next to any AP shown and click the Make Trusted button, the AP will thereafter be accepted by the 3e-528 as a trusted AP.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration44                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  45DHCP Client ListThe DHCP client list displays all clients currently connected to the 3e-528 via DHCP server, including their hostnames, IP addresses, and MAC Addresses.The DHCP Client list will continue to collect entries. To remove entries from the list, check mark the Revoke Entry selection and click Remove to conrm the action.System LogThe system log displays system facility messages with date and time stamp. These are messages documenting functions performed internal to the system, based on the system’s functionality. Generally, the Administrator would only use this information if trained as or working with a eld engineer or as information provided to technical support.The System log will continue to accumulate listings. If you wish to clear list-ings manually, use the Clear button.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration46                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  47Web Access LogThe Web Access Log displays system facility messages with date and time stamp for any actions involving web access. For example, this log records when you set encryption mode, change operating mode, etc., using the web browser. It establishes a running record regarding what actions were performed and by whom.The Web access  log will continue to accumulate listings. If you wish to clear listings manually, use the Clear button.Network Activity LogThe Network Activity Log keeps a detailed log of all activities on the net-work which can be useful to the network administration staff.The  Network Activities  log will continue to accumulate listings. If you wish to clear listings manually, use the Clear button.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration46                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  47System AdministrationThe System administration screens contain administrative functions. The screens and functions are detailed in the following section. Firmware UpgradeThe System Upgrade utility is a functionality built into the 3e-528 for updates to the device’s rmware as they become available. When a new upgrade le becomes available, nd it and upload it to the 3e-528 from this screen. There is also a conguration le transfer option which allows the system conguration le from one AP to be transferred to another AP, in order to mini-mize the administration of the APs. Only conguration parameters that can be shared between APs are downloaded in the conguration le. WAN IP address and hostname are not transferred in the conguration le. Only Crypto Ofcer can access this function.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration48                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  49Factory DefaultThe System Administration — Factory Default screen is used to reset the AP to its factory settings.The "Restore" button is a fallback troubleshooting function that should only be used to reset to original settings. Only Crypto Ofcer has access to the Restore button.Remote LoggingThe System Administration —Remote Logging screen allows you to for-ward the syslog data from each machine to a central remote logging server. You can nd more information about syslogd by searching for "syslogd" in an Internet search engine (such as Google®) to nd a version compatible with your operating system. If you enable Remote Logging, input a System Log Server IP Address and System Log Server Port. Click Apply to accept these values.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration48                            29000142-001 A3e-528 Wireless Video Server  Chapter 3: Access Point Conguration29000142-001 A  49RebootThe Reboot utility allows you to reboot the 3e-528 without changing any preset functionality. Both Crypto Ofcers and Administrators have access to this function.UtilitiesThis screen gives you ready access to two useful utilities: Ping and Tracer-oute. Simply enter the IP Address or hostname you wish to ping or traceroute and click either the Ping or Traceroute button, as appropriate.
3e-528 Wireless Video Server  Chapter 3: Access Point Conguration50                            29000142-001 AThis page intentionally left blank.
3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            51Chapter 4: Video CongurationThe 3e-528 contains a video server that provides the capability to link four analog video cameras to the system. The video input is obtained from the cameras through the BNC connectors. The video image can be accessed through a built-in web server after the IP address of the video board has been congured. The instructions describing how to congure the IP address follow.NOTE: The video server card is manufactured by Axis Communica-tions. For detailed setup information, please refer to Axis 2400+ Admin Manual.IP Address Conguration for the Video Server CardThe following is needed to set up the video server:•  Video camera•  PC•  3e-528•  LAN cables•  MAC address of the video card server (This MAC can be found on a label outside of the unit)Note: If using static IP address, the PC and the 3e-528 wireless video server (AP) need to have an IP conguration that allows them to commu-nicate with each other.1.  Connect a PC to the WAN port using an Ethernet cable.2.  Using a unique IP address—one that is consistent with the system setup—congure the video server IP address by running the fol-lowing command from the command prompt:arp -s<desired IP address><MAC address of the video server>
3e-528 Wireless Video Server  Chapter 4: Video Conguration52                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            53For example:Note: This command needs to be run with two minutes after the unit has been turned on.Soon after completing the "arp" command, run a "ping" command with packet length of 408 bytes to the IP address of the video server. The 3e-528 will need to be powered for the video server to be set up with the IP address.Example:Once you get a reply from the video server, it is ready to be used. If the video server came with a precongured static IP address that is known, and you want to change it, you can use the Web-based adminis-tration tools provided by the video server.Video AccessTo access the video image, open a browser, and enter the IP of the video server in the address eld. If this is the rst time the video server is accessed from a PC using the Internet Explorer, the ActiveX installation dialog would come up if ActiveX is not installed. As shown below. The ActiveX component provides the video imaging capabilities to the PC, therefore the video image won’t be displayed if ActiveX is not installed. If the browser being used is Netscape, ActiveX is not necessary.To enable the updating of images in Microsoft Internet Explorer, set your browser to allow ActiveX controls and perform a once-only instal-lation of Axis’ ActiveX component onto your workstation as prompted. If your working environment restricts additional software components, you can congure the video server to use a Java applet for updating the images. To do so you need to access the administration tools page, click on the “Video Server” icon, then on “Layout”, and nally uncheck “Show Admin Button”.
3e-528 Wireless Video Server  Chapter 4: Video Conguration52                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            53When accessing the video server interface for the rst time, the Wel-come Window would appear. The Installation Wizard Icon   in this window walks you through the required steps to set up the video server completely. All of the steps covered with the wizard can also be accessed directly with the administration tools as detailed below. Once the video has been completely setup the following window will appear when accessing it from the browser.
3e-528 Wireless Video Server  Chapter 4: Video Conguration54                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            55Video Administration ToolsThe administration tools provide the means of setting up the video image as well as all the functionality related to the Video server, including security, network and serial (PTZ) settings.To access the administration tools you need to know the video server address, as congured above. First, input the precongured video server address in the URL line on the browser. This will access the main Page for the Axis Server. (i.e. http://192.168.1.15). From there, the administra-tion tools can be accessed by clicking in the "Admin Overview" button. Note: The security settings can be set so the "Admin Overview" button is not displayed in the main page. In that case the administration tools can be accessed by typing the IP address followed by “/admin/” (i.e. http://192.168.1.15/admin/). Once you are logged in into the administration page (as shown be-low), the different components are displayed as icons on the page. To congure each component simply click on the respective icon.
3e-528 Wireless Video Server  Chapter 4: Video Conguration54                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            55The Admin Overview window gives an overview of the different components and features that can be set up through the user interface. Some of the most relevant features will be explained in more detail below. More information can be obtained by clicking the on-line help icon. This button is available in all of the pages of the web-based inter-face, and provides basic information about the different settings and features. Application Wizard  Through this wizard you can enable the 3e-528 to upload images to a remote server through FTP, or by SMTP.  It allows image uploading based on alarms or by time intervals. The image upload frequency can be set from fractions of second units to hour units, and also considering days of the week. SMTP is only per-mitted for a frequency slower than one image per minute.When SMTP is checked, the image would be sent as a jpeg email at-tachment, while FTP would save the le in the specied upload path of the le structure of the FTP server. Video Server General Settings  The Video Server icon gives access to the general settings for the video server, including: date & time, user accounts, web interface layout, log les, and the option to setting the unit to factory default values.The video server card is supplied with one pre-congured Admin-istrator user name and password, set to root and pass, respectively. The Administrator password must be changed to prevent unauthorized access to the Admin Tools and/or product images, as dened in the Security Set-tings. Administrators can choose not to display the Administration Tools and other navigational buttons from the user interface. Selecting this feature ultimately means that the Administration tools can then only be accessed by entering the full Admin address into the browser’s URL eld; for example: http://192.168.21.10/admin/. To disable this button in the application page click on “Layout” and then uncheck “Show Admin But-ton”.
3e-528 Wireless Video Server  Chapter 4: Video Conguration56                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            57Network Settings  This button opens the Network Settings dialog, which allows con-guration of the TCP/IP, DNS, SMTP, bandwidth usage, and dynamic IP address notication. This last one is used as a way to give notication of changes in the IP address when DHCP is used.  You can be notied through FTP, SMTP or HTTP. Video Settings  This camera icon provides the means to adjust the video image reso-lution and compression as well as the detection of the specic video modulation. In addition to this, when the Pan/Tilt/Zoom driver has been installed, this dialog gives the ability to access the driver specic settings, such as preset positions, movement speed, and others, depending of what is supported by the camera or driver. The image settings give the possibility to change the resolution of the image as well as the compression level for it. It also allows setting the image as color or black and white. The compression level can be set from 0 to 100. The lowest the compression level the better the quality. Keep in mind that less compression implies more data to be transmitted, hence more bandwidth is used. Notes: •  A red cross X by the camera icon, it means that the is no camera connection, or that there is a problem with the camera or cable.•  A Camera-with-pan-tilt icon is displayed only if the camera for the chosen source is connected to a previously congured Pan Tilt Serial Port from the drop-down dialog. •  A Disabled icon indicates that the Administrator has disabled the video source from the Video Settings page.COM Port Settings The COM port settings for the Video server are not used in the 3e-528 unit. The two serial ports provided by the Video Card are disabled. A serial server card is included in the system to provide four serial ports to control the pan/tilt/zoom function. The conguration of this serial server card is detailed in the next section.
3e-528 Wireless Video Server  Chapter 4: Video Conguration56                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            57Pan/Tilt/Zoom (PTZ) CongurationThe 3e-528 unit encloses a serial server card (Device Master RTS) that gives access to four serial ports over the network. These serial ports can be used for camera Pan/Tilt/Zoom purposes, or to connect other type of device with a different function.When the driver for the serial server card (NS-Link) is installed in a host PC, four virtual COM ports are created in that PC. Each virtual COM port allows serial transfers, just like a normal COM port, to each serial port across the network. NS-Link is also available for Linux machines, providing TTY functionality just like a normal serial interface.This way, a particular software driver for a specic camera, can access the camera through across the network seamlessly providing that such driver is designed to interface with the camera using a COM port of the PC. The Device Master RTS is manufactured by Comtrol. To get more information, software updates, or drivers, please visithttp://www.comtrol.com/.CongurationThe IP conguration of the serial server card can be changed from the precongured setting by accessing the device through a web interface or by establishing a Telnet connection. For both cases, the precongured IP address needs to be known.With Telnet access, only the IP conguration can be changed, while the web access provides more possibilities for conguration of the serial server card. The precongured IP address for the serial server card is 192.168.254.30. A PC connected to the WAN port of the 3e-528 can access the web interface of the serial card by typing the IP address on a web browser http://192.168.254.30. Please note that the IP conguration of the PC needs to be setup correctly. Likewise, the PC can access the serial server card by typing “telnet 192.168.254.30” on a command prompt.
3e-528 Wireless Video Server  Chapter 4: Video Conguration58                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            59IP Setup through Telnet:To set up a new IP address using telnet, a command prompt needs to be opened in the PC with access to the WAN port of the 3e-528. 1.   In the command prompt type “telnet 192.168.254.30 [enter]”2.   The system will prompt for a password. By default, this password is blank, so just press the “enter” key.3.   Once logged in the system, type the command “ip” follow by the IP address wanted, the subnet mask, and the gateway IP.   Example: “ip 192.168.254.90 255.255.255.0 192.168.254.1 [enter]”4.   Once the system accepts this command, you need to enter “reset” so the new IP is nally congured. Note: after this Telnet won’t respond, so you need to hit “Crt+[“ and type “quit”.
3e-528 Wireless Video Server  Chapter 4: Video Conguration58                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            59Setup through Web Interface:A web browser can be used to set up a new IP address, and change other setting such as baud rate, parity bits, etc., in the serial server card. 1.   Type the IP address of the serial port in the web browser address bar. ( http://192.168.254.30 for the precongured IP address). A web page showing general information of the device, shown in the following picture, should open up:
3e-528 Wireless Video Server  Chapter 4: Video Conguration60                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            612.  To congure the network settings click on the “Congure Net-work” link. A window like the one shown bellow should open up:3.   To change the IP address conguration, simply type in the new IP address, Netmask, and default Gateway and hit “save”. Also, the serial server provides IP conguration using DHCP. 4.   To congure the serial ports, click on de desired port link (e.g., Port 1) in the main page. This action should bring up the following web page:
3e-528 Wireless Video Server  Chapter 4: Video Conguration60                            29000142-001 A3e-528 Wireless Video Server  Chapter 4: Video Conguration29000142-001 A                            61 5.   This page lets the user change all the possible settings for the serial port including Baud Rate, Mode (RS-232/485/422), etc. For video server applications, only the upper part of the menu needs to be managed. The “Connection Conguration” should be whatever the default is, unless a serial tunnel through the net, with another serial server card as endpoint needs to be established for a special application. This tunnel is like a serial to serial interface through the network.For further information on setting up the serial server card (Device-Master RTS) please refer to the Comtrol documentation enclosed with the 3e-528, or go the website http://support.comtrol.com/download.asp, and under “Product” select “Ethernet” and then DeviceMaster RTS.
3e-528 Wireless Video Server  Chapter 4: Video Conguration62                            29000142-001 AThis page intentionally left blank.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            63Chapter 5: Bridge CongurationIntroductionIn the 3e-528, wireless bridging is used to set up three independent wireless bridge connections. Since wireless bridging provides a mecha-nism for APs to collaborate, it is possible to extend the basic service set (BSS) of a standalone AP and to connect two separate LANs without installing any cabling.The 3e-528 features three bridging ports interconnected to each other internally. The rst bridging port, accessible from the CONFIG 1 port, can also act as an access point. The other two bridging ports, accessible from CONFIG 2 and CONFIG 3, possess dual 802.11b/g cards.The wireless bridging function in the 3e-528 supports a number of bridging congurations. We discuss some of the most popular settings in this chapter:•   Point-to-point bridging of 2 Ethernet Links•   Point-to-multipoint bridging of several Ethernet links•   Repeater mode When bridging is enabled, the 3e-528 allows remote access of video images as long as the bridging network and video server are properly set up.Before setting up the bridges, all the WAN interfaces in the three bridging units need to be congured. By default, the IP address of the three bridging units are set to 192.168.254.254. They need to be set up to either get the IP address from DHCP or by assigning a static IP address to each of them. The access point is part of the rst bridge and is accessible from CON-FIG 1. Refer to Chapter 3.  To set up the WAN interface in the other two bridging units, perform the same procedure using CONFIG 2 and CON-FIG 3. After logging on to the GUI, the WAN settings can be changed by going to the System Conguration — WAN screen.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration64                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            65General Bridge SetupWireless bridging is a function that is congured in addition to basic access point and/or video server setup. If you will be using the 3e-528 solely as a bridge, some of the settings you may have selected for access point use will not be necessary. If setting up as a wireless bridge during initial setup, use the LAN Port directly wired by Ethernet cable to a laptop to set the appropriate settings. The management screens that you may need to modify, regard-less of what type of bridging mode you choose, will be in the Wireless Conguration section of the navigation bar. The Wireless Conguration — Bridging screen contains wireless bridging information including the channel number, Tx rate, Tx power, spanning tree protocol (802.1d) enable/disable, and remote BSSID. This page is important in setting up your bridge conguration. Spanning Tree Protocol should be enabled if there is any possibility that a bridging loop could occur. If you are certain that there is no possibility that a bridging loop will occur, you should disable Spanning Tree Protocol, because the bridge will be more efcient (faster) without it. However, if not sure, the safest solution is to enable Spanning Tree Protocol.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration64                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            65In the upper right-hand corner of the Wireless Bridge — General screen there is a button called Monitoring. If you click on this button, a pop-up window will appear (Wireless Bridge Information). If you select Enable refresh, you can set the bridge refresh interval from 5 seconds to 30 minutes. BRIDGING GENERAL SETTINGS OPTIONSWireless Mode 802.11b/g Mixed This is the only option available.Tx Rate AUTO, 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54 MbpsWhen set to AUTO, the card attempts to select the optimal rate for the channel. If a xed rate is used, the card will only transmit at that rate. Channel No 1 (2.412 GHz)2 (2.417 GHz)3 (2.422 GHz)4 (2.427 GHz)5 (2.432 GHz)6 (2.437 GHz)7 (2.442 GHz)8 (2.447 GHz)9 (2.452 GHz)10 (2.457 GHz)11 (2.462 GHz)Sets the channel frequency for the wireless bridge.Tx Pwr Mode OFFFIXED,AUTOThe Tx Pwr Mode defaults to AUTO, giving the largest range of radio transmission available under ambient conditions. The wireless bridge's broad-cast range can be limited by setting the Tx Pwr Mode to Fixed and choosing from 1-8 for Fixed Pwr Level. If you want to prevent any radio fre-quency transmission from the wireless bridge, set the Tx Pwr Mode to OFF. This will not turn off RF transmissions from any associated wireless devices (only turns off bridge), but they will not be able to communicate with the wireless bridge when the Tx Pwr Mode is off.Fixed Pwr Level1, 2, 3, 4, 5, 6, 7, 8 Select a range when Tx Pwr Mode is set to FIXED.  Level 1 is the shortest distance (Level 1=7dBm) and Level 8 is the longest  (Level 8=15dBm)Spanning Tree Protocol (STP) Enable/Disable Enable STP if there is any possibility that a bridg-ing loop could occur. If you are certain that there is no possibility that a bridging loop will occur, then disable STP. The bridge will be more efcient (faster) without it. If you are not sure, the safest solution is to enable STP.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration66                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            67Signal Strength LED MACAllows you to set the number of one of the Remote APs which will be listed at the bottom of the screen once the system is operational.BSSID Enter hexadeci-mal numbersAdd the MAC address of the remote bridge. The remote bridge's MAC address will appear at the bottom of the screen.Note You can enter a note that denes the location of the remote bridge.The Wireless Conguration — Bridging Encryption screen is used to congure static encryption keys for the wireless bridge. This is an impor-tant page to set up to ensure that your bridge is working correctly. The encryption key that you use on this screen must be the same in order for communication to occur. And on this screen you can only select either a static 192-bit 3DES key or an AES key of either 128-bit, 192-bit, or 256-bit. Important: The wireless bridge only starts to work after the encryp-tion settings are applied. Even if no encryption is going to be used, you still need to select None and apply.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration66                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            67Bridge Antenna AlignmentTo align the bridge antennas using 3e-528's software, perform the fol-lowing steps:1.  Go to the Wireless Conguration — Bridging screen. At the bot-tom of this screen select the bridge channel from the Remote AP's MAC Address list.2.  Click on the Monitoring button at the top of the screen and select enable refresh and set the bridge refresh interval.3.  View the Monitoring window while adjusting the bridge antenna direction to obtain the maximum signal strength.The following sections describe the setup for three types of bridging conguration: point-to-point, point-to-multipoint, or, lastly, repeater.Setting Up Bridging TypePoint-to-Point Bridge CongurationA point-to-point link is a direct connection between two, and only two, locations or nodes.      For the two bridges that are to be linked to communicate properly, they must be set up with identical options in the setup screens.For instance, the bridges must have the same channel number. Span-ning Tree Protocol may be set to Enable, if there is any possibility of a bridging loop, or to Disable (which is more efcient) if there's no possibil-ity of a bridging loop. Each bridge must contain the other's BSSID. (The BSSID of each is equivalent to the MAC address contained on the Wire-less Conguration — Bridging setup page. Data entry is not case sensi-tive.) Finally, the wireless bridging encryption must be set to the appro-priate type and key length and must be identical on each bridge.The following chart shows sample settings.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration68                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            69Point-to-Point Bridging Setup GuideDirection Bridge 1 Bridge 2Wireless Conguration – Bridging Wireless Mode 802.11b/g Mixed 802.11b/g MixedTx Rate AUTO AUTOChannel No 11 (must be the same as Bridge 2)11 (must be the same as Bridge 1)Tx Power Auto AutoSpanning Tree Protocol Enable (or Disable if no bridging loop possible)Enable (or Disable if no bridging loop possible)Bridge signal strength LED port Enter from list at the bottom of the screenEnter from list at the bottom of the screenBSSID Add Bridge 2 MAC Add Bridge 1 MACWireless Conguration – Bridging EncryptionWireless Conguration – Bridging EncryptionSelect appropriate key type/length and value. Must be the same key as Bridge 2.Select appropriate key type/length and value. Must be the same key as Bridge 1.The following sequence walks you through the setup of bridge 1. Bridge 2 would duplicate this procedure, with the BSSID of bridge 2 be-ing the MAC address of bridge 1 and vice versa.First, navigate to the Wireless Conguration — General screen and select a channel number that does not conict with the AP channel num-ber. Leave the TX Pwr Mode in AUTO position at this time. If there is a wireless LAN on the AP WLAN card, information would be set as dis-cussed in Chapter 3.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration68                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            69Navigate to the Wireless Conguration — Bridging screen. In the rst section: General, you will see the MAC Address of the bridging card. This is used as the BSSID on Bridge 2.Wireless Mode is 802.11b/g Mixed. Set the Tx Rate to AUTO. Chan-nel Number must be set the same for each bridge to communicate. TX Pwr Mode can be left on Auto unless the power needs to be regulated. Set Spanning Tree Protocol to Enable unless you are sure that there is no chance of a loop. Bridge signal strength LED port allows you to set the number of one of the Remote APs which will be listed in section 3 at the bottom of the screen once the system is operational. Click Apply to accept your changes but remain on that screen.In the second section on the Wireless Conguration — Bridging screen, add the BSSID of the remote bridge. The BSSID corresponds to that bridge’s MAC address. Data entry is not case sensitive. You may also enter a note that denes the location of the remote bridge. Then click Add to accept. The remote bridge’s BSSID will now appear in the third section of the page. If, at some time you wish to delete the entry, simply click the check box next to it and conrm by clicking Delete.Next, navigate to Wireless Conguration — Bridging Encryption. Select the appropriate key type and length and the key value. The encryp-tion key value and type for Bridge 1 must be the same as for Bridge 2. For wireless bridging, only AES and 3DES are available for encryption.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration70                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            71You must complete the conguration of your Bridge 1 by following the general instructions in Chapter 3 of this guide to establish any other required conguration options such as General, WAN and LAN settings.Congure Bridge 2 following the instructions given for Bridge 1 above.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration70                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            71Point-to-Multipoint Bridge CongurationA point-to-multipoint conguration allows you to set up three or more 3e-528 access points in bridging mode and accomplish bridging between three or more locations wirelessly. For the bridges that are to be linked to communicate properly, they have to be set up with compatible commands in their setup screens.For instance, all bridges must have the same channel number.  Span-ning Tree Protocol will usually be set to Enable. If congured as in the diagram following, Bridge 1 must contain all of the others' BSSIDs, while Bridge 2 ~ n must only contain Bridge 1's BSSID. (The BSSID of each is equivalent to the MAC address found on the Wireless Conguration — Bridging page. Enter only hexadecimal numbers, no colons. Data entry is not case sensitive.) Finally, the wireless bridging encryption of each must be set to the appropriate type and key length and must be the same on all.Because the 3e-528 has two separate WLAN cards, one for the AP and one for the Bridge, each bridge can have a WLAN on the 802.11b/g proto-col with no loss of efciency in bridging if you wish.The following diagram represents a point-to-multipoint setup, which might be of use where a company's network spans several buildings within a campus-like setting.     Follow the steps of the procedure outlined in the point-to-point bridge section. The chart following describes the basic attributes.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration72                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            73Point-to-Multipoint Bridging Setup GuideDirection Bridge 1 Bridge 2 ~ nWireless Conguration – Bridging Wireless Mode 802.11b/g Mixed 802.11b/g MixedTx Rate AUTO AUTOChannel No 11 (must be the same as Bridge 2~n)11 (must be the same as Bridge 2~n)Tx Pwr Mode Auto AutoSpanning Tree Protocol Must be enabled Must be enabledBridge signal strength LED port Enter from list at the bot-tom of the screenEnter from list at the bottom of the screenBSSID Add Bridge 2~n MAC Add Bride 1 MACWireless Conguration – Bridging EncryptionWireless Conguration – Bridging EncryptionSelect appropriate key type/length and value. Must be the same key as Bridge 2~n.Select appropriate key type/length and value. Must be the same key as Bridge 1.The above recommended setup requires only Bridge 1 to be set in point-to-multipoint mode. It is possible to set all bridges in point-to-multipoint mode, in which case , each bridge would have to contain the BSSID for each of the other bridges and Spanning Tree Protocol must be Enabled.As stated previously, complete any other setup screens following gen-eral instructions in Chapter 3.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration72                            29000142-001 A3e-528 Wireless Video Server  Chapter 5: Bridge Conguration29000142-001 A                            73Repeater Bridge CongurationA repeater setup can be used to extend the wireless signal from one bridge connected to an Ethernet LAN wirelessly so that another bridge can control a wireless LAN at a distance.       Repeater Bridging Setup GuideDirection Bridge 1 Bridge 2 Bridge 3Wireless Conguration – BridgingWireless Mode 802.11b/g Mixed 802.11b/g Mixed 802.11b/g MixedTx Rate AUTO AUTO AUTOChannel No 11 11 11Tx Power Mode Auto  Auto AutoSpanning Tree Protocol (STP)Enable (or Diable if no bridging loop possible)Enable (or Diable if no bridging loop possible)Enable (or Diable if no bridging loop possible)Bridge signal strength LED portEnter from list at the bottom of the screenEnter from list at the bottom of the screenEnter from list at the bottom of the screenBSSID Add Bridge 2's MACAdd Bridge 1's and Bridge 3's MACAdd Bridge 2's MACWireless Conguration – Bridging EncryptionWireless Congu-ration – Bridging EncryptionSelect appropriate key type/length and enter key value. Must be the same as that on the other 2 Bridges.Select appropriate key type/length and enter key value. Must be the same as that on the other 2 Bridges.Select appropriate key type/length and enter key value. Must be the same as that on the other 2 Bridges.With this conguration, each bridge can control a wireless LAN. All wireless clients must have the same SSID as the bridges on the AP card channel. All clients can roam between the three bridges.All other setup screens should be completed following the guidelines in Chapter 3.
3e-528 Wireless Video Server  Chapter 5: Bridge Conguration74                            29000142-001 AThis page intentionally left blank.
3e-528 Wireless Video Server  Chapter 6: The RF Manager Function29000142-001 A  75Chapter 6: The RF Manager FunctionIntroductionThis chapter addresses a function of the 3e-528 which facilitates remote management and programming of the Radio Frequency function for multiple 3e-528s located on a common network. This function allows you to remotely manage the Radio Frequency Power levels. For each AP selected, the RF Manager can remotely disable the AP's transmit power and, in turn, the transmit power of each client that is associated with it. The basic architecture is shown in the chart below. RF ManagerDisable Tx PowerClient 1: Disable Tx PowerClient 2: Disable Tx PowerClient 2: AcknowledgesDisabling PowerClient 1: AcknowledgesDisabling Power~~10 seconds afterRF Manager RequestClient 1 Disables PowerClient 2 Disables PowerAP Disables PowerAccess Point Client 1 Client 2CAUTION: You can not use this utility if you are using dynamic IP address assignment on your wireless network. We recommend that you have your LAN Administrator set a range of static IP Ad-dresses and that you change the WAN IP Address on each gateway to one of this range of IP Addresses as part of your setup process.
3e-528 Wireless Video Server  Chapter 6: The RF Manager Function76                    29000142-001 A3e-528 Wireless Video Server  Chapter 6: The RF Manager Function29000142-001 A  77How to Access the RF Manager FunctionThe RF Manager can be installed from the CD that came with the 3e-528 Install Kit to the desktop of anyone who needs to manage the wireless LAN.Click on RF Manager on the Installation CD main menu to start the autoinstall. If, for any reason, the autoinstall function doesn't initiate, open a window from the My Computer icon on your desktop to your CD drive and double-click the 3E-RFMGR.EXE icon in the RF Manager folder on the CD.     Once the RF Manager is installed, use the path Start -> Programs -> 3e-RF Manager and click on 3e-RF Manager.The main RF Manager screen will appear on your desktop.
3e-528 Wireless Video Server  Chapter 6: The RF Manager Function76                    29000142-001 A3e-528 Wireless Video Server  Chapter 6: The RF Manager Function29000142-001 A  77How to Program the RF ManagerBefore you are able to remotely manage access points, you need to program the RF Manager by putting the static IP Address of APs you want to manage in a conguration le.Click on the Browse button. This will open a window with some sample les that you can edit. You should edit the contents of SampleRadioOn.3eti and SampleRadioOff.3eti.To see the contents of one of these les, simply right click the le name and select Open from the dropdown menu. Because the le has an extension (3eti) which Windows is not yet familiar with, the very rst time you attempt to open it, Windows will ask you what program you want to open it with, as shown in the screen on the following page. Choose a text editor that you are comfortable with, such as Wordpad. In future, Windows will open all les with the exten-sion of 3eti with the text editor you have chosen. You will be able to edit the le and save it without changing the le properties.
3e-528 Wireless Video Server  Chapter 6: The RF Manager Function78                    29000142-001 A3e-528 Wireless Video Server  Chapter 6: The RF Manager Function29000142-001 A  79You can now edit the le by adding the IP addresses of the 3e-528s that you want to manage, each in a pair of brackets [ ].The two les SampleRadioOn.3eti and SampleRadioOff.3eti must be edited as a minimum. This will permit you to turn all the APs on or off at will. You can save them to another le name if you wish (maintaining the same le extension.)  Note, if you turn all APs off and then re-enable transmit power, be aware that the clients, which have also been turned off, will have to be individually re-engaged, either by rebooting or by re-inserting the PC Card.You can customize les to control only certain APs or groups of APs. Each AP that you group into a conguration le must have the same Ad-min Password.The following gives you a sample of the code that you can use from the SampleRadioOn.3eti le.Sample of coding in SampleRadioOn.3eti le# This Sample Conguration le shows how to turn the radio# to a xed level on all units[all]Wireless Tx Pwr Mode:=Fixed#For FIPS units use the following#Gateway Access Mode:=HTTPS#Gateway Username:=CryptoOfcer#Each unit that you want to turn on should be listed here#First unit[192.168.15.1]Wireless Fixed Pwr Level:=2#Next unit[192.168.15.2]Wireless Fixed Pwr Level:=2
3e-528 Wireless Video Server  Chapter 6: The RF Manager Function78                    29000142-001 A3e-528 Wireless Video Server  Chapter 6: The RF Manager Function29000142-001 A  79Once you have edited the le, save it. You can now update the APs you have included in your conguration les from an Ethernet connec-tion on your network.To test out the les you have edited, on the main RF Manager screen, browse to and select the le that you want to use to manage your APs. That le name should now appear in the Conguration File window.Now enter the  Password for that group of APs.Finally, hit the Congure button. The Congure Status window will keep you informed of the progress of the update.If your update has been successful, you should see a message that indicates you have successfully set all conguration items.
3e-528 Wireless Video Server  Chapter 6: The RF Manager Function80                    29000142-001 AIf any part of your update has failed, the Congure Status window will show you that it has failed in part or in whole and direct you to the area of the conguration le that you need to x.
3e-528 Wireless Video Server  Chapter 7: Technical Support29000142-001 A                            81Chapter 7: Technical SupportManufacturer’s StatementThe 3e-528  is provided with warranty. It is not desired or expected that the user open the device. If malfunction is experienced and all exter-nal causes are eliminated, the user should return the unit to the manufac-turer and replace it with a functioning unit. If you are experiencing trouble with this unit, the point of contact is:support@3eti.comor visit our website atwww.3eti.comRadio Frequency Interference RequirementsThis device has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the Federal Communications Commission’s Rules and Regulations. The FCC IDs for the 3e-528 are QVT-5258 and QVT-WLAN_MP1. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.The maximum limit for an omni-directional antenna is 5dBi and the maximum limit for a directional antenna is 14dBi.Installation should be accomplished using the authorized cables and/or connectors provided with the device or available from the manufacturer/distributor for use with this device. Changes or modica-tions not expressly approved by the manufacturer or party responsible for this FCC compliance could void the user’s authority to operate the equip-ment.
3e-528 WirelessVideo Server  Chapter 7: Technical Support82                            29000142-001 AChannel Separation and WLAN CardsThere are four WLAN cards in the 3e-528. One is used for the Access Point function; the other three are used for the Bridges. Channel Separa-tion is required to reduce interference between the AP and Bridge WLAN cards. It is recommended that you set the bridges to channels 1, 6, and 11, and set the AP to channel 3, 4, 8, or 9 in order to optimize performance.
3e-528 Wireless Video Server  Glossary29000142-001 A                            G-aGlossary3DESAlso referred to as Triple DES, a mode of the DES encryption algorithm that encrypts data three times.802.11802.11 refers to a family of specications developed by the IEEE for wireless LAN technol-ogy. 802.11 species an over-the-air interface between a wireless client and a base station or between two wireless clients. The IEEE accepted the specication in 1997. 802.11b (also referred to as 802.11 High Rate or WiFi)802.11b is an extension to 802.11 that applies to wireless LANs and provides 11 Mbps transmission (with a fallback to 5.5, 2 and 1 Mbps) in the 2.4 GHz band. 802.11b uses only DSSS. 802.11b was a 1999 ratication to the original 802.11 standard, allowing wireless functionality comparable to Ethernet. 802.11g802.11g applies to wireless LANs and provides 20-54 Mbps in the 2.4 GHz band. Because 802.11g is backwards-compatible with 802.11b, it is a popular component in WLAN con-struction. 802.11g uses OFDM (orthogonal frequency division multiplexing) technology.Access PointAn access point is a gateway set up to allow a group of LAN users access to another group or a main group. The access point doesn’t use the DHCP server function and therefore ac-cepts IP address assignment from the controlling network. AESShort for Advanced Encryption Standard, a symmetric 128-bit block data encryption tech-nique developed by Belgian cryptographers Joan Daemen and Vincent Rijmen. The U.S government adopted the algorithm as its encryption technique in October 2000, replacing the DES encryption it used. AES works at multiple network layers simultaneously. BridgeA device that connects two local-area networks (LANs), or two segments of the same LAN that use the same protocol, such as Ethernet or Token-Ring.DHCPShort for Dynamic Host Conguration Protocol, DHCP is a protocol for assigning dy-namic IP addresses to devices on a network. With dynamic addressing, a device can have a different IP address every time it connects to the network. In some systems, the device’s IP address can even change while it is still connected. DHCP also supports a mix of static and dynamic IP addresses. Dynamic addressing simplies network administration because the software keeps track of IP addresses rather than requiring an administrator to manage the task. This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address. Many ISPs use dynamic IP addressing for dial-up users. NMS (Network Management Station)Includes such management software as HP Openview and IBM Netview.
3e-528 Wireless Video Server  GlossaryG-b                          29000142-001 APC CardA computer device packaged in a small card about the size of a credit card and con-forming to the PCMCIA standard.PDA (Personal Digital Assistant)A handheld device.SNMPSimple Network Management ProtocolSSIDA Network ID unique to a network. Only clients and access points that share the same SSID are able to communicate with each other. This string is case-sensitive. Wireless LANs offer several security options, but increasing the security also means increasing the time spent managing the system. Encryption is the key. The biggest threat is from intruders coming into the LAN. You set a seven-digit alphanumeric security code, called an SSID, in each wireless device and they thereafter operate as a group.TKIPTemporal Key Integrity Protocol. TKIP is a protocol used in WPA. It scrambles the keys using a hashing algorithm and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with.VPN (Virtual Private Network)A VPN uses encryption and other security mechanisms to ensure that only authorized us-ers can access the network and that the data cannot be intercepted. WLAN (Wireless Local Area Network)A  type of local-area network that uses high-frequency radio waves rather than wires to communicate between nodes. WPAWPA stands for WiFi Protected Access. It’s an interim standard developed by the WiFi Alliance pending full ratication of the 802.11i standard, to protect the wired band and improve upon the old WEP encryption standard.

Navigation menu