Cambium Networks XS35004 XS-3500 Wireless LAN Array User Manual xirrus

Xirrus, Inc. XS-3500 Wireless LAN Array xirrus

Users Manual Part 5

Wireless LAN ArrayThe Command Line Interface 169USAGE GUIDELINESSetting Gigabit2 Interface parameters will automatically set the Gigabit1 parameters to the same values for failover purposes.EXAMPLETo set the IP address of the gigabit Ethernet interfaces: config-interface gig2((config-gig1/2)# ip addr 192.168.39.186 mask 255.255.255.0Figure 101. CLI: Setting the IP Address for the Gigabit 2 InterfaceSEE ALSOconfig-interface gig1config-interface eth0
Wireless LAN Array170 The Command Line InterfacehostnameDESCRIPTIONSets the host name for this Array—available from the config command mode.SYNTAXhostname <hname> “hostname string”PARAMETERSNone.DEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo set the hostname for the Xirrus Array:(config)# hostname Xirrus_Array_3900Figure 102. CLI: Setting the Host Name of the ArrayThe hostname is displayed immediately below the command line, as follows:Xirrus_Array_3900(config)#
Wireless LAN ArrayThe Command Line Interface 171SEE ALSONone.iapDESCRIPTIONChanges the configuration of a specific Integrated Access Point (IAP) radio interface—available from the config-interface command mode. Groups of interfaces can be accessed via the following interface commands.ziap number: Configuration for a specific IAP. The prompt will change to: IAP number (config-iap-a12)#.zglobal_a_settings: Common configuration for all 802.11a IAPs. The prompt will change to: (config-iap-global-a)#.zglobal_bg_settings: Common configuration for all 802.11b/g IAPs. The prompt will change to: (config-iap-global-bg)#.zglobal_settings: Common configuration for all IAPs. The prompt will change to: (config-iap-global)#.SYNTAXinterface iap <IAP number> {channel <cnum> | description <dot11desc> | down | up | cellsize {small | medium | large} | rx-threshold <thresrx> | tx-power <powertx>} }PARAMETERScellsize Cell size settingchannel Channel numberdescription Name to identify this IAP (up to 32 characters)down Shut down (disable) this IAPrx-threshold Deferred threshold (receive sensitivity)tx-power Maximum transmit powerup Bring up (enable) this IAPdot11a Set 802.11a modedot11bg Set 802.11b/g mode (only available on abg1, 2, 3, 4)antenna Select the antenna for the IAPinternal Internal directional 2.4GHz antenna
Wireless LAN Array172 The Command Line Interfacemonitor Internal omni-directional monitor antenna (available on abg2 IAP only)external Select the external antenna (Available on IAP abg1, abg3, and abg4 only)DEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo set the cell size to large for the integrated access point a12:(config-iap)# a12(config-iap-a12)# cellsize largeFigure 103. CLI: Setting the Cell Size of an IAPSEE ALSOiap global_a_settingsiap global_bg_settingsiap global_settingsshow iap all
Wireless LAN ArrayThe Command Line Interface 173iap global_settingsDESCRIPTIONMakes global configuration changes to all Integrated Access Point (IAP) radio interfaces—available from the config-interface command mode.This command allows configuration changes to all IAP interfaces. Other global settings can be made for specific groups of IAPs by using one of the below parameters in the interface IAP command mode:ziap number: Configuration for a specific IAP. The prompt will change to: IAP number (config-iap-a12)#zglobal_a_settings: Common configuration for all 802.11a IAPs. The prompt will change to: (config-iap-global-a)#zglobal_bg_settings: Common configuration for all 802.11b/g IAPs. The prompt will change to: (config-iap-global-bg)#zglobal_settings: Common configuration for all IAPs. The prompt will change to: (config-iap-global)#SYNTAXiap global_settings {all_down | all_up | [no] rogue_detect [ on | off | add <ssa> {approved | known} | del <ssd> | list ] | auto_channel [no][power_up [ on | off ] | schedule [<ts>]] | long-retries <lrl> | short-retries <srl> | cellsize {small | medium | large} | rx-threshold <thresrx> | tx-power <powertx> | beacon-rate <brate> | beacon-dtim <bdtim> | inactive-time <at> | reauth-period <ht> | led {disable | enable {iap_up | associated}} | led_activity {beacon | tx_data | rx_data | tx_mgmt | rx_mgmt | broadcast | probe_req | assoc}}PARAMETERSled Enable or disable the IAP ledsdisable Do not turn IAP leds onenable Turn an IAP led on when up (default) or when a station is associatediap_up Turn an IAP led on when the IAP is upassociated Turn an IAP led on when at least one station is associated with it
Wireless LAN Array174 The Command Line Interfaceled_activity Set IAP led behavior based on certain conditionsbeacon Blink an IAP led when a beacon is transmittedtx_data Blink an IAP led when a data frame is transmittedrx_data Blink an IAP led when a data frame is receivedtx_mgmt Blink an IAP led when a management frame is transmittedrx_mgmt Blink an IAP led when a management frame is receivedbroadcast Blink an IAP led when a broadcast frame is transmittedprobe_req Blink an IAP led when a probe request is receivedassoc Blink an IAP led heartbeat when stations are associatedbeacon-rate Time between beacons in kilo-microseconds (Kusec)beacon-dtim Beacons between Delivery Traffic Indication Messages (DTIM)all_down Shut down (disable) all IAPsall_up Bring up (enable) all IAPsshort-retries Short retry limitlong-retries Long retry limitinactive-time Time that an AP tracks an inactive stationreauth-period Time between 802.1x re-authentication attemptsrogue_detect Enable/disable rogue AP detection on IAP abg2 on Enable rogue AP detectionoff Disable rogue AP detectionadd Add SSID to rogue databasedel Delete SSID from rogue databaseapproved Mark SSID as approved (stop reporting and displaying)known Mark SSID as known (stop reporting but display with an *)list List rogue databasecellsize Cell size settingsmall Small cell sizemedium Medium cell sizelarge Large cell sizerx-threshold Deferred thresholdtx-power Maximum transmit power
Wireless LAN ArrayThe Command Line Interface 175auto_channel Automatically assign channels to all IAPspower_up Automatically run automatic channel assignment at power upschedule Run automatic channel assignment at scheduled time(s)on Enable autochannel at power upoff Disable autochannel at power upDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo enable all the radio interfaces:(config-iap)# global_settings(config-iap-global)# all_upFigure 104. CLI: Enabling All Radio InterfacesSEE ALSOiap global_a_settingsiap global_bg_settingsiap global_settingsshow iap all
Wireless LAN Array176 The Command Line Interfaceiap global_a_settingsDESCRIPTIONMakes global configuration changes to all 802.11a Integrated Access Point (IAP) radio interfaces—available from the Config->Interface command mode.This command allows configuration changes to all 802.11a IAP interfaces. Other global settings can be made for specific groups of IAPs by using one of the following parameters in the interface IAP command mode:ziap number: Configuration for a specific IAP. The prompt will change to: IAP number (config-iap-a12)#zglobal_bg_settings: Common configuration for all 802.11b/g IAPs. The prompt will change to: (config-iap-global-bg)#zglobal_settings: Common configuration for all IAPs. The prompt will change to: (config-iap-global)#SYNTAXiap global_a_settings {all_down | all_up | rts-threshold <rtst> | frag-threshold <fragt> | auto_channel | cellsize {small | medium | large} | rx-threshold <thresrx> | tx-power <powertx> | rates {defaults | optimize_range | optimize_throughput | { basic { <br1> [<br2> [<br3> [<br4> [<br5> [<br6> [<br7> [<br8>]]]]]]]} | supported { [<sr1> [<sr2> [<sr3> [<sr4> [<sr5> [<sr6> [<sr7> [<sr8>]]]]]]]]}}}}PARAMETERSfrag-threshold 802.11a fragmentation threshold packet size above which a packet will be fragmentedrts-threshold 802.11a RTS threshold packet size above which an RTS is issued before sendingauto_channel Automatically assign channels to 802.11a IAPsrates Set allowed 802.11a data rates by listing the rates that will be used ( 6, 9, 12, 18, 24, 36, 48, 54, etc.) basic Set 802.11a basic (required) rates by listing the rates a client must support to associatesupported Set the 802.11a supported (accepted) ratesdefaults Use the default 802.11a rates
Wireless LAN ArrayThe Command Line Interface 177optimize_range Set 802.11a rates for the best rangeoptimize_throughput Set 802.11a rates for the best throughputall_down Shut down (disable) all 802.11a IAPsall_up Bring up (enable) all 802.11a IAPscellsize Cell size settingsmall Small cell sizemedium Medium cell sizelarge Large cell sizerx-threshold Deferred threshold, packets with a lower signal strength that the rx-threshold will be ignoredtx-power Maximum transmit power in dBparameter (-100,0) thresrx Deferred threshold valueparameter (0,20) powertx Maximum transmit valueDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo enable all 802.11a radio interfaces:((config-iap)# global_a_settings(config-iap-global-a)# all_upFigure 105. CLI: Enabling All 802.11a Radio Interfaces
Wireless LAN Array178 The Command Line InterfaceSEE ALSOiap global_bg_settingsiap global_settingsshow iap alliap global_bg_settingsDESCRIPTIONMakes global configuration changes to all 802.11bg Integrated Access Point (IAP) radio interfaces—available via the Config-> Interface command mode.This command allows configuration changes to all 802.11bg IAP interfaces. Other global settings can be made for specific groups of IAPs by using one of the below parameters in the Interface IAP command mode::ziap number: Configuration for a specific IAP. The prompt will change to: IAP number (config-iap-a12)#zglobal_bg_settings: Common configuration for all 802.11b/g IAPs. The prompt will change to: (config-iap-global-bg)#zglobal_settings: Common configuration for all IAPs. The prompt will change to: (config-iap-global)#SYNTAXIAPGlobalBG {all_down | all_up | slot_time {short_slot | long_slot} | [no] dot11g_protect [on | off] | [no] dot11g_only [on | off] | cellsize {small | medium | large} | rx-threshold <thresrx> | tx-power <powertx> | preamble {short_preamble | long_preamble} | auto_channel | rts-threshold <rtst> | frag-threshold <fragt> | rates {defaults | optimize_range | optimize_throughput | { basic { <br1> [<br2> [<br3> [<br4> [<br5> [<br6> [<br7> [<br8> [<br9> [<br10> [<br11> [<br12>]]]]]]]]]]]} | supported { [<sr1> [<sr2> [<sr3> [<sr4> [<sr5> [<sr6> [<sr7> [<sr8> [<sr9> [<sr10> [<sr11> [<sr12>]]]]]]]]]]]]}}}}
Wireless LAN ArrayThe Command Line Interface 179PARAMETERSfrag-threshold 802.11b/g fragmentation threshold packet size above which a packet will be fragmented rts-threshold 802.11b/g RTS threshold packet size above which an RTS is issued before sendingauto_channel Automatically assign channels to 802.11b/g IAPsrates Set allowed 802.11b/g bit ratesbasic Set 802.11b/g basic (required) rates supported Set 802.11b/g supported (accepted) rates defaults Set default 802.11b/g rates optimize_range Set 802.11b/g rates for best range optimize_throughput Set 802.11b/g rates for best throughput all_down Shut down (disable) all 802.11b/g IAPs all_up Bring up (enable) all 802.11b/g IAPs preamble Set 802.11b preamble length short_preamble Enable cck short preamble (56 sync bits) long_preamble Use only cck long preamble (128 sync bits) slot_time Set 802.11b/g slot timeshort_slot Enable short slot time (9 us)long_slot Use only long slot time (20 us)dot11g_protect Enable or disable 802.11g protectiondot11g_only Enable or disable 802.11g only modeon Enable 802.11g only (or protection) modeoff D i s a b l e 8 0 2 . 1 1 g o n l y ( o r p r o t e c t i o n ) m o d ecellsize Cell size settingsmall Small cell size medium Medium cell sizelarge Large cell size rx-threshold Deferred threshold (receive sensitivity) tx-power Maximum transmit powerDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.
Wireless LAN Array180 The Command Line InterfaceSEE ALSONone.locationDESCRIPTIONDefines the location description for this Xirrus Array—available from the config command mode.SYNTAXlocation <locname>PARAMETERSlocname Input location name for this ArrayDEFAULTSNone.USAGE GUIDELINESQuotes must be used around the location text if spaces are used between words. Typing location with no parameters will clear any set value.EXAMPLETo set the location description for the Xirrus Array:(config)# location “Building 11 Floor 2"SEE ALSONone.
Wireless LAN ArrayThe Command Line Interface 181moreDESCRIPTIONLists the contents of a file, one screen at a time.SYNTAXMore <file name>PARAMETERS<file name> The file name for which to display the contentsDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.SEE ALSONone.radius-serverDESCRIPTIONConfigures the external or internal (local) radius server settings—available from the Config-> radius-server command modeSYNTAXradius-server [no] external [ {on | off | ip <pri_ip> | port <pri_port> | secret [enc] [<pri_secret>] | timeout <tmout>}@ ] | secondary [ {ip [<sec_ip>] | port [<sec_port>] | secret [enc] [<sec_secret>]}] | [no] internal [ {on | off | {add <aid> password [enc] <passwd> ssid <ss>} | del <did>} ]
Wireless LAN Array182 The Command Line InterfacePARAMETERSexternal Configure the primary external RADIUS server parametersPrompt will change to (config-radius-external)# secondary Configure the secondary external RADIUS server parametersPrompt will change to (config-radius-secondary)# ip IP address of the RADIUS serverport Authentication port of the RADIUS server secret Shared secret for the RADIUS server enc Enter encrypted shared secret for the RADIUS serveron Enable external RADIUS server off Disable external RADIUS server timeout Timeout (in seconds) before the server is retried after it initially failed internal Configure internal RADIUS server parameterson Enable internal RADIUS server off Disable internal RADIUS server add Add this user del Delete this userpassword User password enc Enter encrypted password ssid SSID with which the user is allowed to associateshow Display current radius server settingsDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.SEE ALSONone.
Wireless LAN ArrayThe Command Line Interface 183rebootDESCRIPTIONReboots the Xirrus Array.SYNTAXreboot PARAMETERSNone.DEFAULTSNone.USAGE GUIDELINESWhen rebooting the Array, you must respond to the following prompts:zThe system will prompt you to save any unsaved configuration changes. zThe system will prompt you to confirm the reboot action.EXAMPLETo reboot the Xirrus Array type the following. Xirrus_WLAN_Array(config)# rebootDo you want to save changes to flash? [yes/no]: yare you sure you want to reboot? [yes/no]: ySEE ALSONone.
Wireless LAN Array184 The Command Line InterfaceresetDESCRIPTIONResets all settings to the factory defaults, then reboots the Xirrus Array.SYNTAXreset PARAMETERSNone.DEFAULTSNone.USAGE GUIDELINESWhen you enter the reset command, the system will prompt you to confirm the reset action.EXAMPLETo reset the Xirrus Array back to factory defaults, type:Xirrus_WLAN_Array(config)# resetAre you sure you want to reset to factory settings and reboot? [yes/no]:ySEE ALSOrebootrun-scriptDESCRIPTIONRun a CLI command script.SYNTAXrun-script <file name>PARAMETERS<file name> name of command script file
Wireless LAN ArrayThe Command Line Interface 185DEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.SEE ALSONone.run-testsDESCRIPTIONRuns network diagnostic tests from the run-test command mode—available from the config-run-tests command mode.SYNTAXtraceroute <tracename> | ping <pingname>PARAMETERStraceroute <IP Address or DNS name> Run a trace on IP route or DNS nameping <IP Address or DNS name> Execute ping utilityDEFAULTSNone.USAGE GUIDELINESYou access the run-tests command mode from the config mode.
Wireless LAN Array186 The Command Line InterfaceEXAMPLETo test connectivity to a client device at IP address 192.168.0.2 type:(config)# run-tests(config-run-test)# ping 192.168.0.2Figure 106. CLI: Testing Client ConnectivityTo view the network routing to another device use traceroute:(config)# run-tests(config-run-test)# traceroute 192.168.0.2Figure 107. CLI: Viewing the Routing to a ClientSEE ALSONone.
Wireless LAN ArrayThe Command Line Interface 187saveDESCRIPTIONPermanently saves the current configuration so that changes will be available at the next system boot.SYNTAXsavePARAMETERSNone.DEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo permanently save the current configuration, type:Xirrus_WLAN_Array(config)# saveSEE ALSONone.securityDESCRIPTIONSet wireless and other security parameters for the Xirrus Array. Available via the config-security command mode.There are two options available from the Security command mode:zwep: Set WEP encryption parameterszwpa: Set WPA encryption parameters
Wireless LAN Array188 The Command Line InterfaceSYNTAXwep { on | off | default_key <keyid> | key {<keynum> size [not_set | <wepsz> { ascii | hex | enc } <keystr> ] } }PARAMETERSon Enable WEP encryptionoff Disable WEP encryptionkey Set static WEP key number 1-4size Key size (40 or 128 bits, default = 128)ascii ASCII charactershex Hex digitsenc Encrypted formdefault_key Default key ID 1-4SYNTAXwpa { on | off | rekey { never | <ti> } | { no ] tkip [ on | off } | [ no ] aes [ on | off ] | [ no ] eap [ on | off ] | [ no ] psk [ on | off ] | passphrase { not_set | <pstr> | enc <epstr> }}PARAMETERSon Enable WPA encryptionoff Disable WPA encryptionrekey Time interval for rekeying broadcast encryption keysnever Disable rekeying broadcast encryption keystkip Enable or disable Temporal Key Integrity Protocol (TKIP)on Enable TKIPoff Disable TKIPaes Enable or disable AES in counter mode with CBC-MAC (CCMP)on Enable AESoff Disable AESeap Enable or disable 802.1x EAPon Enable EAPoff Disable EAPpsk Enable or disable Pre-Shared Key (PSK)on Enable PSKoff Disable PSKpassphrase WPA PSK (Pre-Shared Key) passphrase
Wireless LAN ArrayThe Command Line Interface 189enc Enter an encrypted form of the passphrase in double quotesDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo disable WEP encryption, type:(config)# security(config-security) wep(config-security-wep) offFigure 108. CLI: Disabling WEP EncryptionSEE ALSONone.
Wireless LAN Array190 The Command Line InterfaceshowDESCRIPTIONDisplays settings and information, and is useful when verifying the current configuration of the Array.SYNTAXshow [ acl| admin | array_info | console | contact_info | date_time | dhcp_server | diff | dns | ethernet | external_radius | factory_config | iap | internal_radius | log | rogue_ap | running_config | saved_config | security | snmp | ssid | startup_config | stations | statistics ]PARAMETERSacl Display access control listadmin Display administrator accounts listarray_info Display system informationconsole Display terminal settingscontact_info Display contact informationdate_time Display date and time settings summarydhcp_server Display internal DHCP server settings summarydiff Display the differences between configurationsdns Display DNS summaryethernet Display eth0 and gig1/gig2 interface summaryexternal_radius Display external RADIUS server settings summaryfactory_config Display the array configuration from the factoryiap Display IAP configuration summaryinternal_radius Display all users defined for the embedded RADIUS serverlog Display the event logrogue_ap Display rogue AP informationrunning_config Display the array configuration that is currently runningsaved_config Display the array configuration that was last savedsecurity Display security settings summarysnmp Display SNMP summaryssid Display SSID summarystartup_config Display the array configuration from the last boot
Wireless LAN ArrayThe Command Line Interface 191stations Display station (client) informationstatistics Display interface statisticsDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLETo display the current security settings, type:(config)# security(config-security) showFigure 109. CLI: Displaying the Current Security SettingsSEE ALSONone.
Wireless LAN Array192 The Command Line InterfacesnmpDESCRIPTIONConfigures SNMP (Simple Network Management Protocol). This command is available from the config->snmp command mode.SYNTAXsnmp {on | off | [no] trap [enable | disable] | host [<thsnmp>] | port <tpsnmp> | community <csnmp>}PARAMETERSon E n a b l e S N M P off D i s a b l e S N M P host S N M P t r a p I P a d d r e s s o r h o s t n a m e port S N M P t r a p p o r t community S N M P c o m m u n i t y s t r i n g N o t e n o s p a c e s o r special characters may be used trap S e n d t r a p s f o r a u t h e n t i c a t i o n f a i l u r e s no D i s a b l e s e l e c t e d f e a t u r e enable E n a b l e t r a p s disable D i s a b l e t r a p s DEFAULTSSNMP is disabled by default.USAGE GUIDELINESSNMP community string cannot have spaces or special characters.EXAMPLENone.SEE ALSONone.
Wireless LAN ArrayThe Command Line Interface 193sshDESCRIPTIONEnables or disables ssh (secure shell) access to the Command Line Interface.SYNTAXssh {on | off}PARAMETERSon Enable ssh accessoff Disable ssh access DEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.SEE ALSOtelnet.
Wireless LAN Array194 The Command Line InterfacesyslogDESCRIPTIONConfigures the syslog server settings. This command is available from the config->syslog command mode.SYNTAXsyslog {on | off | {ipsyslog <ip address> | [no] console [on | off] | level <slev> | buffered <logfilesz> | show}}PARAMETERSon E n a b l e S y s l o g s e r v e roff Disable Syslog serveripsyslog <ip address> Syslog IP address (in A.B.C.D format)level S y s l o g m e s s a g e l e v e l ( l o g a l l m e s s a g e s w i t h this level and lower)buffered Set the size of the local Syslog fileconsole Enable or disable display of Syslog messages on the console no Disable console feature on Enable Syslog messages on the console off Disable Syslog messages on the consoleshow Show current syslog messagesDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.SEE ALSONone.
Wireless LAN ArrayThe Command Line Interface 195telnetDESCRIPTIONEnables or disables telnet access to the Command Line Interface.SYNTAXtelnet {on | off}PARAMETERSon Enable telnet accessoff Disable telnet accessDEFAULTSNone.USAGE GUIDELINESNone.EXAMPLENone.SEE ALSONone.
Wireless LAN Array196 The Command Line InterfaceUse this space for your notes ...
Wireless LAN Array197Appendices
Wireless LAN Array198Page is intentionally blank
Wireless LAN ArrayAppendix A: Servicing the Xirrus Array 199Appendix A: Servicing the Xirrus ArrayThis chapter contains procedures for servicing the Xirrus Array, including the removal and reinstallation of major hardware components. Section headings for this chapter include:z“Removing the Access Panel” on page 200z“Reinstalling the Access Panel” on page 202z“Replacing the FLASH Memory Module” on page 203z“Replacing the Main System Memory” on page 204z“Replacing the Integrated Access Point Radio Module” on page 205z“Replacing the Power Supply Module” on page 207!!Always turn OFF the Array’s power switch and disconnect the AC power cord before attempting to remove or replace components. Never work on the unit with the power connected.You must be grounded and the work surface must be static-free.Figure 110. Disconnecting Power from the Array#Most service activities are performed with the Array placed face-down on a flat work surface. To avoid damaging the finished enclosure, we recommend using a protective material between the work surface and the unit (a clean sheet of paper will do the trick).Power switchAC power cord receptacle
Wireless LAN Array200 Appendix A: Servicing the Xirrus ArrayRemoving the Access PanelUse this procedure when you want to remove the system’s access panel. You must remove this panel whenever you need to service the internal components of the Array.1. Turn OFF the Array’s main power switch.2. Disconnect the AC power cord from the Array.3. Place the Array face-down on a flat surface. Avoid moving the unit to reduce the risk of damage (scratching) to the finished enclosure.4. Remove the screws (3 places) that secure the access panel to the main body of the Array.Figure 111. Removing the Access Panel ScrewsScrewScrewScrew
Wireless LAN ArrayAppendix A: Servicing the Xirrus Array 2015. Lift up the access panel to reveal the main system board.Figure 112. Removing the Access Panel6. Disconnect the connectors to the power supply and the fan.Figure 113. Disconnecting the Power Supply and Fan7. The access panel can now be safely removed.Lift up the access panelPower supply connectorFan connector
Wireless LAN Array202 Appendix A: Servicing the Xirrus ArrayReinstalling the Access PanelUse this procedure when you need to reinstall the access panel after servicing the XS-3900’s internal components.1. Reconnect the fan and power supply.Figure 114. Reconnecting the Fan and Power Supply2. Reinstall the access panel and secure the panel with the three screws.Figure 115. Reinstalling the Access Panel3. Reconnect the AC power cord and turn ON the main power switch.Power supply connectorFan connectorScrew!Do not overtightenScrew!Do not overtightenScrew!Do not overtighten
Wireless LAN ArrayAppendix A: Servicing the Xirrus Array 203Replacing the FLASH Memory ModuleUse this procedure when you want to replace the system’s FLASH memory module.1. Remove the system’s access panel. Refer to “Removing the Access Panel” on page 200.2. Remove the FLASH memory module, taking care not to “wiggle” the module and risk damaging the connection points.Figure 116. Removing the FLASH Memory Module3. The removal procedure is complete. You can now reinstall the FLASH memory module (or install a new module).FLASH memory module
Wireless LAN Array204 Appendix A: Servicing the Xirrus Array4. Reinstall the access panel (refer to “Reinstalling the Access Panel” on page 202).Replacing the Main System MemoryUse this procedure when you want to replace the main system memory.1. Remove the access panel (refer to “Removing the Access Panel” on page 200).2. Remove the DIMM memory module, taking care not to “wiggle” the module and risk damaging the connection points.Figure 117. Removing the DIMM Memory Module3. The removal procedure is complete. You can now reinstall the DIMM memory module (or install a new module). Ensure that the DIMM memory module is seated evenly and the locking tabs are in the upright position.4. Reinstall the access panel (refer to “Reinstalling the Access Panel” on page 202).#The DIMM memory module is keyed to fit in its socket in one direction only.DIMM memory modulePush down on the two locking tabs to release the DIMM memory module
Wireless LAN ArrayAppendix A: Servicing the Xirrus Array 205Replacing the Integrated Access Point Radio ModuleUse this procedure when you want to replace the integrated access point radio module.1. Remove the access panel (refer to “Removing the Access Panel” on page 200).2. Remove the nylon locking screws (8 places) that secure the chassis cover to the main body of the XS-3900.Figure 118. Removing the Chassis Cover Nylon Screws3. Lift and remove the chassis cover.Figure 119. Removing the Chassis CoverNylon screws (8 places)Remove the chassis cover
Wireless LAN Array206 Appendix A: Servicing the Xirrus Array4. Lift the edge of the integrated access point module.Figure 120. Lifting the Integrated Access Point Module5. Slide the integrated access point module away from the unit to disconnect it from the main system board.Figure 121. Disconnect the Integrated Access Point Module6. The removal procedure is complete. You can now reinstall the integrated access point module (or install a new module).Lift here (do not force)Disconnect the module
Wireless LAN ArrayAppendix A: Servicing the Xirrus Array 2077. Reinstall the chassis cover (see warnings).8. Reinstall the nylon locking screws (8 places) to secure the chassis cover in place—do not overtighten.9. Reinstall the access panel (refer to “Reinstalling the Access Panel” on page 202).Replacing the Power Supply ModuleUse this procedure when you want to replace the power supply module.1. Remove the access panel (refer to “Removing the Access Panel” on page 200).2. Because the power supply unit is molded into the access panel, you must install a new access panel assembly (with the power supply attached). Refer to “Reinstalling the Access Panel” on page 202.Figure 122. Installing a New Access Panel (with Power Supply)!!When reinstalling the chassis cover, take care to align the cover correctly to avoid damaging the antenna modules. Do not force the chassis cover onto the body of the unit.Do not overtighten the nylon locking screws.Access panel (with power supply and fan)
Wireless LAN Array208 Appendix A: Servicing the Xirrus ArrayUse this space for your notes ...
Wireless LAN ArrayAppendix B: Quick Reference Guide 209Appendix B: Quick Reference GuideThis chapter contains product reference information. Use this chapter to locate the information you need quickly and efficiently. Section headings for this chapter include:z“Review of WMI Pages” on page 209z“Factory Default Settings” on page 213z“Keyboard Shortcuts” on page 219Review of WMI PagesThis section provides a review of the product’s WMI pages, with a brief explanation of their function and content. Click on any of the listed pages to go to the corresponding procedure at the referenced destination.Page FunctionArray Status Provides a snapshot of the global configuration settings for all Array network interfaces and radios.Express Setup Establish global configuration settings that will enable basic XS-3900 functionality.Network Interfaces Provides a snapshot of the configuration settings currently established for the network interfaces.Network Settings Establish basic configuration settings for the network interfaces.Network Statistics Provides statistical data associated with network interfaces and their activity.DHCP Settings Enable or disable DHCP (Dynamic Host Configuration Protocol) server functionality.
Wireless LAN Array210 Appendix B: Quick Reference GuideDNS Settings Set up a DNS server (or multiple servers), if you want to offer clients associating with the Array the ability to use meaningful domain names (URLs) instead of numerical IP addresses.IAP Interfaces Provides a snapshot of global configuration data associated with radios.IAP Settings Enable or disable radios, define the wireless mode for each radio, establish the transmit and receive parameters, and define global settings for the beacon interval and DTIM period.Global Settings Establish global IAP (radio) settings. Global IAP settings include enabling or disabling all radios (regardless of their operating mode).Global Settings .11a Establish global 802.11a IAP (radio) settings.Global Settings .11bg Establish global 802.11b/g IAP (radio) settings.IAP LED Settings Set the behavior of LEDs.Statistics Provides an overview of statistical data associated with individual radios.Page Function
Wireless LAN ArrayAppendix B: Quick Reference Guide 211SSID Provides a snapshot of SSID (Service Set IDentifier) assignments. It includes the SSID name, whether or not an SSID is visible on the network, any security and QoS parameters defined for each SSID, associated VLAN IDs, guest access, and radio availability per SSID.SSID Management Manage SSIDs (create, modify or delete). It also allows you to assign security parameters and VLANs on a per SSID basis.Security Provides a snapshot of Array global security configuration parameters, including administration accounts, ACL values, WEP/WPA/WPA2 status, and RADIUS configuration settings.Security Management Establish the security parameters for your wireless network, including WEP, WPA and RADIUS authentication.Radius Server Set up the XS-3900’s internal RADIUS server, or set up an external RADIUS server for user authentication.Radius User Create, delete and manage RADIUS user accounts.MAC Access List Create new MAC-based Access Control Lists (ACLs), delete existing ACLs, and add, remove, or restore MAC addresses.Admin Management Manage network administrator accounts (create, modify or delete), restore accounts, or limit account access to a read only status.Page Function
Wireless LAN Array212 Appendix B: Quick Reference GuideRogue AP List Displays rogue APs, according to the sort list you select (either Unknown, Known or Approved).Rogue Control List Establishes a control list for rogue APs, based on a type that you define.Stations Displays stations that are currently associated with the Array.Services Provides a current status of Syslog and SNMP services.Time Settings Synchronizes the Array’s clock with a universal clock from an NTP server.System Log Enable or disable the Syslog server, define the server’s IP address, and set the level for Syslog reporting.SNMP Enable or disable SNMP and define the SNMP parameters.Array Info Displays the current status of the Array.Tools Ping the Array and obtain a status of the unit’s performance.Show Config Displays the configuration settings (Current/Saved/Start) for the Array.Event Log Provides an event log for the network.Page Function
Wireless LAN ArrayAppendix B: Quick Reference Guide 213Factory Default SettingsThe following tables show the Array’s factory default settings.Network InterfacesSerialGigabit 1 and Gigabit 2Setting Default ValueBaud Rate 115200Word Size 8 bitsStop Bits 1Parity No parityTime Out 10 secondsSetting Default ValueEnabled YesDHCP Bind YesDefault IP Address 10.0.1.2Default IP Mask 255.0.0.0Default Gateway NoneAuto Negotiate OnDuplex FullSpeed 1000 MbpsMTU Size 1504Management Enabled Yes
Wireless LAN Array214 Appendix B: Quick Reference GuideFast EthernetIntegrated Access Points (IAPs)Setting Default ValueEnabled YesDHCP Bind YesDefault IP Address 10.0.1.1Default IP Mask 255.0.0.0Default Gateway NoneAuto Negotiate OnDuplex FullSpeed 100 MbpsMTU Size 1500Management Enabled YesSetting Default ValueAntenna 0Mode 11a for a1 to a1211g for abg1 to abg4Channel AutoMaximum Transmit Power 0Cell Size Medium
Wireless LAN ArrayAppendix B: Quick Reference Guide 215Server SettingsDHCPExternal RADIUSSetting Default ValueEnabled NoMaximum Lease Time 300 minutesDefault Lease Time 300 minutesIP Start Range 192.168.1.100IP End Range 192.168.1.200Setting Default ValueEnabled YesPrimary Server 0.0.0.0Primary Port 1812Primary Secret xirrusSecondary Server null (no IP address)Secondary Port 1812Secondary Secret null (no secret)Time Out (before primary server is retired) 600 seconds
Wireless LAN Array216 Appendix B: Quick Reference GuideInternal RADIUSNTPSyslogSNMPSetting Default ValueEnabled NoThe user database is cleared upon reset to the factory defaults. For the Internal RADIUS Server you have a maximum of 200 entries.Setting Default ValueEnabled NoPrimary time.nist.govSecondary 192.6.15.29Setting Default ValueEnabled NoSetting Default ValueEnabled NoCommunity String xirrusTrap Host null (no setting)Trap Port 162Authorization Fail Port 1
Wireless LAN ArrayAppendix B: Quick Reference Guide 217Default SSIDEncryptionSetting Default ValueID xirrusVLAN NoneEncryption OffEncryption Type NoneQoS NoneEnabled YesSetting Default ValueEnabled YesWEP Keys null (all 4 keys)WEP Key Length null (all 4 keys)Default Key ID 0WPA Enabled NoTKIP Enabled YesAES Enabled NoEAP Enabled YesPSK Enabled NoPass Phrase nullGroup Rekey 600
Wireless LAN Array218 Appendix B: Quick Reference GuideAdministrator Account and PasswordManagementSetting Default ValueID adminPassword adminSetting Default ValueTelnet OnSSH On
Wireless LAN ArrayAppendix B: Quick Reference Guide 219Keyboard ShortcutsThe following table shows the most common keyboard shortcuts.Action ShortcutCut selected data and place it on the clipboard. Ctrl + XCopy selected data to the clipboard. Ctrl + CPaste data from the clipboard into a document (at the insertion point). Ctrl + VCopy the active window to the clipboard. Alt + Print ScreenCopy the entire desktop image to the clipboard. Print ScreenAbort an action at any time. EscGo back to the previous screen. bAccess the Help screen. ?
Wireless LAN Array220 Appendix B: Quick Reference GuideUse this space for your notes ...
Wireless LAN ArrayAppendix C: Technical Support 221Appendix C: Technical SupportThis chapter provides valuable support information that can help you resolve technical difficulties. Before contacting Xirrus, review all sections in this chapter and try to determine if your problem resides with the Array or your network infrastructure. Section headings for this chapter include:z“General Hints and Tips” on page 221z“Frequently Asked Questions” on page 222z“Contact Information” on page 228General Hints and TipsThis section provides some useful tips that will optimize the reliability and performance of your Xirrus Arrays.zThe Array requires careful handling. For best performance, units should be mounted in a dust-free and temperature-controlled environment.zIf using multiple Arrays at the same location, we recommend maintaining a distance of at least 50 feet between units.zKeep the Array away from electrical devices or appliances that generate RF noise. Because the Array is generally mounted on ceilings, be aware of its position relative to lighting (especially fluorescent lighting).zIf using AC power, each Array requires its own dedicated AC power outlet. Do not attempt to “piggy-back” AC power to multiple units. If deploying multiple units, consider using the optional Xirrus Remote DC Power System (XP-3100).zIf you are deploying multiple units, ensure that the “clock face” of all units is aligned in the same direction.zThe Array should only be used with Wi-Fi certified client devices.
Wireless LAN Array222 Appendix C: Technical SupportFrequently Asked QuestionsThis section answers some of the most frequently asked questions, organized by functional area.Multiple SSIDsQ. What Are BSSIDs and SSIDs?A. BSSID (Basic Service Set Identifier) refers to an individual access point radio and its associated clients. The identifier is the MAC address of the access point radio that forms the BSS.A group of BSSs can be formed to allow stations in one BSS to communicate to stations in another BSS by way of a backbone that interconnects each access point.The Extended Service Set (ESS) refers to the group of BSSIDs that are grouped together to form one ESS. The ESSID (often referred to as SSID or “wireless network name”) identifies the Extended Service Set. Clients must associate to a single ESS at any given time. Clients ignore traffic from other Extended Service Sets that do not have the same SSID.Legacy access points typically support one SSID per access point. Xirrus Wireless LAN Arrays support the ability for multiple SSIDs to be defined and used simultaneously.Q. What would I use SSIDs for?A. The creation of different wireless network names allows system administrators to separate types of users with different requirements. The following policies can be tied to an SSID:zMinimum security required to join this SSID.zThe wireless Quality of Service (QoS) desired for this SSID.zThe wired VLAN associated with this SSID.As an example, one SSID named accounting might require the highest level of security, while another SSID named guests might have low security requirements.
Wireless LAN ArrayAppendix C: Technical Support 223Another example may define an SSID named voice that supports voice over Wireless LAN phones with the highest possible Quality of Service (QoS) definition. This type of SSID might also forward traffic to specific VLANs on the wired network.Q. How do I set up SSIDs?A. Use the following procedure as a guideline. For more detailed information, go to “SSID” on page 107.1. From the Web Management Interface, go to the SSID Management page.2. Select Yes to make the SSID visible to all clients on the network. Although the XS-3900 will not broadcast SSIDs that are hidden, clients can still associate to a hidden SSID if they know the SSID name to connect to it.3. Select the minimum security that will be required by users for this SSID.4. If desired (optional), select a Quality of Service (QoS) setting for this SSID. The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID wireless traffic.5. If desired (optional), select a VLAN that you want this traffic to be forwarded to on the wired network.6. If desired (optional), you can select which radios this SSID will not be available on—the default is to make this SSID available on all radios.7. Click on the Apply button to apply your changes to this session.8. Click on the Save button to save your changes.9. If you need to edit any of the SSID settings, you can do so from the SSID Management page.
Wireless LAN Array224 Appendix C: Technical SupportSecurityQ. How do I know my management session is secure?A. Follow these guidelines:zAdministrator passwordsAlways change the default administrator password (the default is admin), and choose a strong replacement password. When appropriate, issue read only administrator accounts.zSSH versus TelnetBe aware that Telnet is not secure over network connections and should be used only with a direct serial port connection. When connecting to the unit’s Command Line Interface over a network connection, you must use a Secure SHell (SSH) utility. The most commonly used freeware providing SSH tools is PuTTY.zConfiguration auditingDo not change approved configuration settings. The optional Xirrus Wireless Management System (XM-3300) offers powerful management features for small or large XS-3900 deployments, and can audit your configuration settings automatically. In addition, using the XM-3300 eliminates the need for an FTP server.Q. Which wireless data encryption method should I use?A. Wireless data encryption prevents eavesdropping on data being transmitted or received over the airwaves. The XS-3900 allows you to establish the following data encryption configuration options:zOpenThis option offers no data encryption and is not recommended, though you might choose this option if clients are required to use a VPN connection through a secure SSH utility, like PuTTy.
Wireless LAN ArrayAppendix C: Technical Support 225zWEP (Wired Equivalent Privacy)This option provides minimal protection (though much better than using an open network). An early standard for wireless data encryption and supported by all Wi-Fi certified equipment, WEP is vulnerable to hacking and is therefore not recommended for use by Enterprise networks.zWPA (Wi-Fi Protected Access)This is a much stronger encryption model than WEP and uses TKIP (Temporal Key Integrity Protocol) with AES (Advanced Encryption Standard) to prevent WEP cracks.TKIP solves security issues with WEP. It also allows you to establish encryption keys on a per-user-basis, with key rotation for added security. In addition, TKIP provides Message Integrity Check (MIC) functionality and prevents active attacks on the wireless network.AES is the strongest encryption standard and is used by government agencies; however, old legacy hardware may not be capable of supporting the AES mode (it probably won’t work on older wireless clients). Because AES is the strongest encryption standard currently available, it is highly recommended for Enterprise networks.Any of the above encryption modes can be used (and can be used at the same time).Q. Which user authentication method should I use?A. User authentication ensures that users are who they say they are. For this purpose, the Array allows you to choose between the following user authentication methods:zPre-Shared KeyUsers must manually enter a key (pass phrase) on the client side of the wireless network that matches the key stored by the administrator in the XS-3900.
Wireless LAN Array226 Appendix C: Technical SupportzRADIUS 802.1x with EAP802.1x uses a RADIUS server to authenticate large numbers of clients, and can handle different EAP (Extensible Authentication Protocol) authentication methods, including EAP-TLS, EAP-TTLS and EAP-PEAP. The RADIUS server can be internal (provided by the XS-3900) or external. An external RADIUS server offers more functionality and is recommended for large Enterprise deployments.When using this method, user names and passwords must be entered into the RADIUS server for user authentication.zMAC Address ACLs (Access Control Lists)MAC address ACLs provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network. Access Control Lists work well when there are a limited number of users—in this case, enter the MAC addresses of each user in the Allow list. In the event of a lost or stolen MAC adapter, enter the affected MAC address in the Deny list.Q. Why do I need to authenticate my XS-3900 units?A. When deploying multiple Arrays, you may need to define which units are part of which wireless network (for example, if you are establishing more than one network). In this case, you need to employ the Xirrus Wireless Management System (XM-3300) which can authenticate your Arrays automatically and ensure that only authorized units are associated with the defined wireless network.Q. What is rogue AP (Access Point) detection?A. The Xirrus Array has a dedicated radio (abg/4) which constantly scans the local wireless environment for rogue APs (non-Xirrus devices that are not part of your wireless network), unencrypted transmissions, and other security issues. Administrators can then classify each rogue AP and ensure that these devices do not interrupt or interfere with the network.
Wireless LAN ArrayAppendix C: Technical Support 227VLAN SupportQ. What Are VLANs?A. VLANs (Virtual Local Area Networks) are a logical grouping of network devices that share a common network broadcast domain. Members of a particular VLAN can be on any segment of the physical network but logically only members of a particular VLAN can see each other.VLANs are defined and implemented using the wired network switches that are VLAN capable. Packets are tagged for transmission on a particular VLAN according to the IEEE 802.1Q standard, with VLAN switches processing packets according to the tag.Q. What would I use VLANs for?A. Logically separating different types of users, systems, applications, or other logical division aids in performance and management of different network devices. Different VLANs can also be assigned with different packet priorities to prioritize packets from one VLAN over packets from another VLAN.VLANs are managed by software settings—instead of physically plugging in and moving network cables and users—which helps to ease network management tasks.Q. What are Wireless VLANs?A. Wireless VLANs allow similar functionality to the wired VLAN definitions and extend the operation of wired VLANs to the wireless side of the network.Wireless VLANs can be mapped to wireless SSIDs so that traffic from wired VLANs can be sent to wireless users of a particular SSID. The reverse is also true, where wireless traffic originating from a particular SSID can be tagged for transmission on a particular wired VLAN.Sixteen SSIDs can be defined on the XS-3900, allowing a total of sixteen VLANs to be accessed (one per SSID).
Wireless LAN Array228 Appendix C: Technical SupportAs an example, to provide guest user access an SSID of guest might be created. This SSID could be mapped to a wired VLAN that segregates unknown users from the rest of the wired network and restricts them to Internet access only. Wireless users could then associate to the wireless network via the guest SSID and obtain access to the Internet through the selected VLAN, but would be able to access other privileged network resources.Contact InformationXirrus, Inc. is located in Westlake Village, California, just 45 minutes northwest of downtown Los Angeles and 45 minutes southeast of Santa Barbara.Xirrus, Inc.370 North Westlake Blvd, Suite 200Westlake Village, CA 91362USATel: 1.805.497.0955Fax: 1.805.449.1180www.xirrus.com
Wireless LAN ArrayGlossary of Terms 229Glossary of Terms802.11aA supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 5 GHz and data rates of up to 54 Mbps.802.11bA supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 2.4 GHz and data rates of up to 11 Mbps.802.11dA supplement to the Media Access Control (MAC) layer in 802.11 to promote worldwide use of 802.11 WLANs. It allows Access Points to communicate information on the permissible radio channels with acceptable power levels for user devices. Because the 802.11 standards cannot legally operate in some countries, 802.11d adds features and restrictions to allow WLANs to operate within the rules of these countries.802.11gA supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 2.4 GHz and data rates of up to 54 Mbps.802.1QAn IEEE standard for MAC layer frame tagging (also known as encapsulation). Frame tagging uniquely assigns a user-defined ID to each frame. It also enables a switch to communicate VLAN membership information across multiple (and multi-vendor) devices by frame tagging.AES(Advanced Encryption Standard) A data encryption scheme that uses three different key sizes (128-bit, 192-bit, and 256-bit). AES was adopted by the U.S. government in 2002 as the encryption standard for protecting sensitive but unclassified electronic data.
Wireless LAN Array230 Glossary of TermsauthenticationThe process that a station, device, or user employs to announce its identify to the network which validates it. IEEE 802.11 specifies two forms of authentication, open system and shared key.bandwidthSpecifies the amount of the frequency spectrum that is usable for data transfer. In other words, it identifies the maximum data rate a signal can attain on the medium without encountering significant attenuation (loss of power).beacon intervalWhen a device in a wireless network sends a beacon, it includes with it a beacon interval, which specifies the period of time before it will send the beacon again. The interval tells receiving devices on the network how long they can wait in low power mode before waking up to handle the beacon. Network administrators can adjust the beacon interval—usually measured in milliseconds (ms) or its equivalent, kilo-microseconds (Kmsec).bit rateThe transmission rate of binary symbols ('0' and '1'), equal to the total number of bits transmitted in one second.BSS(Basic Service Set) When a WLAN is operating in infrastructure mode, each access point and its connected devices are called the Basic Service Set.BSSIDThe unique identifier for an access point in a BSS network. See also, SSID.cellThe basic geographical unit of a cellular communications system. Service coverage of a given area is based on an interlocking network of cells, each with a radio base station (transmitter/receiver) at its center. The size of each cell is determined by the terrain and forecasted number of users.
Wireless LAN ArrayGlossary of Terms 231channelA specific portion of the radio spectrum—the channels allotted to one of the wireless networking protocols. For example, 802.11b and 802.11g use 14 channels in the 2.4 GHz band, only 3 of which don't overlap (1, 6, and 11). In the 5 GHz band, 802.11a uses 8 channels for indoor use and 4 for outdoor use, none of which overlap.CoS(Class of Service) A category based on the type of user, type of application, or some other criteria that QoS systems can use to provide differentiated classes of service.default gatewayThe gateway in a network that a computer will use to access another network if a gateway is not specified for use. In a network using subnets, a default gateway is the router that forwards traffic to a destination outside of the subnet of the transmitting device.DHCP(Dynamic Host Configuration Protocol) A method for dynamically assigning IP addresses to devices on a network. DHCP issues IP addresses automatically within a specified range to client devices when they are first powered up.DHCP leaseThe DHCP lease is the amount of time that the DHCP server grants to the DHCP client for permission to use a particular IP address. A typical DHCP server allows its administrator to set the lease time.DNS(Domain Name System) A system that maps meaningful domain names with complex numeric IP addresses. DNS is actually a separate network—if one DNS server cannot translate a domain name, it will ask a second or third until a server is found with the correct IP address.
Wireless LAN Array232 Glossary of TermsdomainThe main name/Internet address of a user's Internet site as registered with the InterNIC organization, which handles domain registration on the Internet. For example, the “domain” address for Xirrus is: http://www.xirrus.com, broken down as follows:zhttp:// represents the Hyper Text Teleprocessing Protocol used by all Web pages.zwww is a reference to the World Wide Web.zxirrus refers to the company.zcom specifies that the domain belongs to a commercial enterprise.DTIM(Delivery Traffic Indication Message) A DTIM is a signal sent as part of a beacon by an access point to a client device in sleep mode, alerting the device to a packet awaiting delivery.EAP(Extensible Authentication Protocol) When you log on to the Internet, you're most likely establishing a PPP connection via a remote access server. The password, key, or other device you use to prove that you are authorized to do so is controlled via PPP's Link Control Protocol (LCP). However, LCP is somewhat inflexible because it has to specify an authentication device early in the process. EAP allows the system to gather more information from the user before deciding which authenticator to use. It is called extensible because it allows more authenticator types than LCP (for example, passwords and public keys).EDCF(Enhanced Distributed Coordinator Function) A QoS extension which uses the same contention-based access mechanism as current devices but adds “offset contention windows” that separate high priority packets from low priority packets (by assigning a larger random backoff window to lower priorities than to higher priorities). The result is “statistical priority,” where high-priority packets usually are transmitted before low-priority packets.encapsulationA way of wrapping protocols such as TCP/IP, AppleTalk, and NetBEUI in Ethernet frames so they can traverse an Ethernet network and be unwrapped when they reach the destination computer.
Wireless LAN ArrayGlossary of Terms 233encryptionAny procedure used in cryptography to translate data into a form that can be decrypted and read only by its intended receiver.Fast EthernetA version of standard Ethernet that runs at 100 Mbps rather than 10 Mbps.FCC(Federal Communications Commission) US wireless regulatory authority. The FCC was established by the Communications Act of 1934 and is charged with regulating Interstate and International communications by radio, television, wire, satellite and cable.frameA packet encapsulated to travel on a physical medium, like Ethernet or Wi-Fi. If a packet is like a shipping container, a frame is the boat on which the shipping container is loaded. Gigabit 1The primary Gigabit Ethernet interface. See also, Gigabit Ethernet.Gigabit 2The secondary Gigabit Ethernet interface. See also, Gigabit Ethernet.Gigabit EthernetThe newest version of Ethernet, with data transfer rates of 1 Gigabit (1,000 Mbps).host nameThe unique name that identifies a computer on a network. On the Internet, the host name is in the form comp.xyz.net. If there is only one Internet site the host name is the same as the domain name. One computer can have more than one host name if it hosts more than one Internet site (for example, home.xyz.net and comp.xyz.net. In this case, comp and home are the host names and xyz.net is the domain name.IPsecA Layer 3 authentication and encryption protocol. Used to secure VPNs.
Wireless LAN Array234 Glossary of TermsMAC address(Media Access Control Address) A 6-byte hexadecimal address assigned by a manufacturer to a device.Mbps(Megabits per second) A standard measure for data transmission speeds (for example, the rate at which information travels over the Internet). 1 Mbps denotes one million bits per second.MTU(Maximum Transmission Unit) The largest physical packet size—measured in bytes—that a network can transmit. Any messages larger than the MTU are divided into smaller packets before being sent. Every network has a different MTU, which is set by the network administrator. Ideally, you want the MTU to be the same as the smallest MTU of all the networks between your machine and a message's final destination. Otherwise, if your messages are larger than one of the intervening MTUs, they will get broken up (fragmented), which slows down transmission speeds.NTP(Network Time Protocol) An Internet standard protocol (built on top of TCP/IP) that ensures the accurate synchronization (to the millisecond) of computer clock times in a network of computers. Running as a continuous background client program on a computer, NTP sends periodic time requests to servers, obtaining server time stamps and using them to adjust the client's clock.packetData sent over a network is broken down into many small pieces—packets—by the Transmission Control Protocol layer of TCP/IP. Each packet contains the address of its destination as well the data. Packets may be sent on any number of routes to their destination, where they are reassembled into the original data. This system is optimal for connectionless networks, such as the Internet, where there are no fixed connections between two locations.PLCP(Physical Layer Convergence Protocol) Defined by IEEE 802.6, a protocol specified within the Transmission Convergence layer that defines exactly how cells are formatted within a data stream for a particular type of transmission facility.
Wireless LAN ArrayGlossary of Terms 235preamblePreamble (sometimes called a header) is a section of data at the head of a packet that contains information that the access point and client devices need when sending and receiving packets. PLCP has two structures, a long and a short preamble. All compliant 802.11b systems have to support the long preamble. The short preamble option is provided in the standard to improve the efficiency of a network's throughput when transmitting special data, such as voice, VoIP (Voice-over IP) and streaming video.private keyIn cryptography, one of a pair of keys (one public and one private) that are created with the same algorithm for encrypting and decrypting messages and digital signatures. The private key is provided only to the requestor and never shared. The requestor uses the private key to decrypt text that has been encrypted with the public key by someone else.PSK(Pre-Shared Key) A TKIP passphrase used to protect your network traffic in WPA.public keyIn cryptography, one of a pair of keys (one public and one private) that are created with the same algorithm for encrypting and decrypting messages and digital signatures. The public key is made publicly available for encryption and decryption.QoS(Quality of Service) QoS can be used to describe any number of ways in which a network provider guarantees a service's performance, such as an average or minimum throughput rate.RADIUS(Remote Authentication Dial-In User Service) A client-server security protocol, developed to authenticate, authorize, and account for dial-up users. The RADIUS server stores user profiles, which include passwords and authorization attributes.RDPS(Remote Distribution Power Supply) A Xirrus proprietary power supply used for delivering power from a remote source to the Xirrus family of products.
Wireless LAN Array236 Glossary of TermsRemote DC Power System (XP-3100)An optional Xirrus proprietary product that provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.RSSI(Received Signal Strength Indicator) A measure of the energy observed by an antenna when receiving a signal.SDMA(Spatial Division Multiple Access) A wireless communications mode that optimizes the use of the radio spectrum and minimizes cost by taking advantage of the directional properties of antennas. The antennas are highly directional, allowing duplicate frequencies to be used for multiple zones.SNMP(Simple Network Management Protocol) A standard protocol that regulates network management over the Internet.SNTP(Simple Network Time Protocol) A simplified version of NTP. SNTP can be used when the ultimate performance of the full NTP implementation described in RFC 1305 is not needed or justified.SSH(Secure SHell) Developed by SSH Communications Security, Secure Shell is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. SSH protects a network from attacks, such as IP spoofing, IP source routing, and DNS spoofing. Attackers who has managed to take over a network can only force SSH to disconnect—they cannot “play back” the traffic or hijack the connection when encryption is enabled. When using SSH's slogin (instead of rlogin) the entire login session, including transmission of password, is encrypted making it almost impossible for an outsider to collect passwords.
Wireless LAN ArrayGlossary of Terms 237SSID(Service Set IDentifier) Every wireless network or network subset (such as a BSS) has a unique identifier called an SSID. Every device connected to that part of the network uses the same SSID to identify itself as part of the family—when it wants to gain access to the network or verify the origin of a data packet it is sending over the network. In short, it is the unique name shared among all devices in a WLAN.subnet maskA mask used to determine what subnet an IP address belongs to. An IP address has two components: (1) the network address and (2) the host address. For example, consider the IP address 150.215.017.009. Assuming this is part of a Class B network, the first two numbers (150.215) represent the Class B network address, and the second two numbers (017.009) identify a particular host on this network.TKIP(Temporal Key Integrity Protocol) Provides improved data encryption by scrambling the keys using a hashing algorithm and, by adding an integrity-checking feature, ensures that the encryption keys haven’t been tampered with.transmit powerThe amount of power used by a radio transceiver to send the signal out. Transmit power is generally measured in milliwatts, which you can convert to dBm.VLAN(Virtual LAN) A group of devices that communicate as a single network, even though they are physically located on different LAN segments. Because VLANs are based on logical rather than physical connections, they are extremely flexible. A device that is moved to another location can remain on the same VLAN without any hardware reconfiguration.
Wireless LAN Array238 Glossary of TermsVLAN tagging(Virtual LAN tagging) Static port-based VLANs were originally the only way to segment a network without using routing, but these port-based VLANs could only be implemented on a single switch (or switches) cabled together. Routing was required to transfer traffic between unconnected switches. As an alternative to routing, some vendors created proprietary schemes for sharing VLAN information across switches. These methods would only operate on that vendor's equipment and were not an acceptable way to implement VLANs. With the adoption of the 802.1Q standard, traffic can be confined to VLANs that exist on multiple switches from different vendors. This interoperability and traffic containment across different switches is the result of a switch's ability to use and recognize 802.1Q tag headers—called VLAN tagging. Switches that implement 802.1Q tagging add this tag header to the frame directly after the destination and source MAC addresses. The tag header indicates:1. That the packet has a tag.2. Whether the packet should have priority over other packets.3. Which VLAN it belongs to, so that the switch can forward or filter it correctly.WEP(Wired Equivalent Privacy) An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. The Wired Equivalent Privacy generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers.Wi-Fi AllianceA nonprofit international association formed in 1999 to certify interoperability of wireless Local Area Network products based on IEEE 802.11 specification. The goal of the Wi-Fi Alliance's members is to enhance the user experience through product interoperability.Wireless LAN Array (XS-3900)A Xirrus proprietary high capacity wireless access point utilizing multiple channels, specifically designed for the Enterprise market.Wireless Management System (XM-3300)A Xirrus proprietary product used for managing large XS-3900 deployments from a centralized Web-based interface.
Wireless LAN ArrayGlossary of Terms 239WPA(Wi-Fi Protected Access) A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP as an encryption method and 802.1X for authentication.XM-3300The Xirrus Wireless Management System (XM-3300) is a Xirrus proprietary product used for managing large XS-3900 deployments from a centralized Web-based interface.XP-3100The Xirrus Remote DC Power System (XP-3100) is an optional Xirrus proprietary product that provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.XS-3900The Xirrus Wireless LAN Array (XS-3900) is a high capacity, multi-wireless access point specifically designed for the Enterprise market.
Wireless LAN Array240 Glossary of TermsUse this space for your notes ...
Wireless LAN ArrayIndex 241IndexNumerics802.11a 11802.11a/b/g 11802.11b/g 11802.11e 12802.11p 12802.11q 12Aaccess panelreinstalling 202removing 200AES 12authentication 12Bbeam distribution 11benefits 10Cchannelsnon-overlapping 12character restrictions 68chassis cover 205CLITelnet connection 143Command Line Interface 143commandsCLI 143configuration changesapplying 68contact information 228coverageextended 11critical messages 67Ddefault settings 213deploymentease of 12DHCP server 23, 85DIMM modulereplacing 204DNS settings 87EEAP-MDS 12EAP-TLS 12EAP-TTLS 12encryption 12event log 142event messages 67express setup 54, 73external RADIUS server 802.1x 23Ffactory default settings 213FAQs 222features 10FLASH memoryreplacing 203frequently asked questions 222FTP server 23Gglossary of terms 229Hhelp button 68HyperTerminal 22Iinstallation 21, 197installing the MCAP-3616 41
Wireless LAN Array242 Indexmounting the unit 43requirements 21unpacking the unit 40workflow 39installation workflow 39integrated radio modulereplacing 205interfacesWeb 65Internet Explorer 22Kkey features 10keyboard shortcuts 219Llogging 133, 142logging in 69MMIC 12mounting the unit 43NNetscape Navigator 22networkinterfaces 79settings 80statistics 84network installation 21, 197non-overlapping channels 12Ooverview 6Ppassword 69PEAP 12performance 10power cord 200power outlet 21power supplyreplacing 207power switch 200print button 68product installation 21, 197product overview 6product specifications 13, 17PuTTy 22QQoS 12Quality of Service 12quick reference guide 209Rradio distribution 10RADIUS server 23, 118, 120rogue detection 11SSecure Shell 22security 6, 12, 112management 113RADIUS server 118, 120serial port 22services 130servicing the unit 197SNMP 9, 135specifications 13, 17SSH 22SSIDmanagement 107statistics 84status bar 68system log 133system memory
Wireless LAN ArrayIndex 243replacing 204Ttechnical supportcontact information 228frequently asked questions 222Telnetestablishing a connection 143TKIP 12tools 138Uunpacking the unit 40user interface 65VVoWLAN 12Wwarning messages 67Web interface 65structure and navigation 67WEP 12workflow 39WPA2 6XXirrus Management System 6, 9, 12, 23Xirrus Remote Power System 21, 23XMS 6, 9, 12, 23XRPS 21, 23XS 3900management 69
Wireless LAN Array244 IndexPage is intentionally blank

Navigation menu