Cambium Networks XS37008 XS-3700 Wireless LAN Array User Manual xirrus certification

Xirrus, Inc. XS-3700 Wireless LAN Array xirrus certification

Contents

Users Manual Revised April 25 2005

XS3900/3700WirelessWirelessWirelessWirelessWirelessLAN ArrayLAN ArrayLAN ArrayLAN ArrayLAN ArrayUser’s GuideApril 12th, 2005DRAFT RELEASE (C)
Copyright © 2005 Xirrus, Inc.370 North Westlake Blvd, Suite 200Westlake Village, CA 91362USAwww.xirrus.comAll rights reserved. This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus, Inc.Part Number: 800-0006-001(Rev. A)Wireless LAN ArrayXS-3900, XS-3700, XS-3500
Trademarksis a trademark of Xirrus, Inc. All other trademarks and brand names are marks of their respective holders.NoticesFCC NoticeThis device complies with Part 15 of the FCC Rules, with operation subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause unwanted operation.This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate RF energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following safety measures:zReorient or relocate the receiving antenna.zIncrease the separation between the equipment and the receiver.zConsult the dealer or an experienced wireless technician for help.Use of a shielded twisted pair (STP) cable must be used for all Ethernet connections in order to comply with EMC requirements.RF Radiation Hazard WarningTo ensure compliance with FCC RF exposure requirements, this device must be installed in a location where the antennas of the device will have a minimum distance of at least 25 cm (9.84 inches) from all persons. Using higher gain antennas and types of antennas not certified for use with this product is not allowed. The device shall not be co-located with another transmitter.Non-Modification StatementUnauthorized changes or modifications to the device are not permitted. Use only the supplied internal antenna, or external antennas supplied by the manufacturer. Modifications to the device will void the warranty and may violate FCC regulations. Please go to the Xirrus Web site for a list of all approved antennas.Indoor UseThis product has been designed for indoor use. Operation of channels in the 5250MHz to 5350MHz band is permitted indoors only to reduce the potential for harmful interference to co-channel mobile satellite systems.
Maximum Antenna GainCurrently, the maximum antenna gain is limited to 6dBi for operation in the 5250MHz to 5350MHz band and 5725MHz to 5825MHz band and must not exceed maximum EIRP limits set by the FCC / Industry Canada.High Power RadarsHigh power radars are allocated as primary users (meaning they have priority) in the 5250MHz to 5350MHz and 5650MHz to 5850MHz bands. These radars could cause interference and/or damage to LELAN devices used in Canada.Industry Canada Notice and MarkingThis Class A digital apparatus complies with Canadian ICES-003.Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.The term “IC:” before the radio certification number only signifies that Industry Canada technical specifications were met.Safety WarningsTranslated safety warnings appear on the following page. !Safety WarningsRead all user documentation before powering this device. All Xirrus interconnected equipment should be contained indoors. This product is not suitable for outdoor operation. Please verify the integrity of the system ground prior to installing Xirrus equipment. Additionally, verify that the ambient operating temperature does not exceed 50°C.!Explosive Device Proximity WarningDo not operate the XS-3900 unit near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use.!Lightning Activity WarningDo not work on the XS-3900 or connect or disconnect cables during periods of lightning activity.!Circuit Breaker WarningThe XS-3900 relies on the building’s installation for over current protection. Ensure that a fuse or circuit breaker no larger than 120 VAC, 15A (U.S.) or 240 VAC, 10A (International) is used on all current-carrying conductors.
Translated Safety WarningsAvertissements de Sécurité!SécuritéLisez l'ensemble de la documentation utilisateur avant de mettre cet appareil sous tension. Tous les équipements Xirrus interconnectés doivent être installés en intérieur. Ce produit n'est pas conçu pour être utilisé en extérieur. Veuillez vérifier l'intégrité de la terre du système avant d'installer des équipements Xirrus. Vérifiez également que la température de fonctionnement ambiante n'excède pas 50°C.!Proximité d'appareils explosifsN'utilisez pas l'unité XS-3900 à proximité d'amorces non blindées ou dans un environnement explosif, à moins que l'appareil n'ait été spécifiquement modifié pour un tel usage.!FoudreN'utilisez pas l'unité XS-3900 et ne branchez pas ou ne débranchez pas de câbles en cas de foudre.!DisjoncteurL'unité XS-3900 dépend de l'installation du bâtiment pour ce qui est de la protection contre les surintensités. Assurez-vous qu'un fusible ou qu'un disjoncteur de 120 Vca, 15 A (États-Unis) ou de 240 Vca, 10 A (International) maximum est utilisé sur tous les conducteurs de courant.
Software License AgreementPLEASE READ THIS SOFTWARE LICENSE AGREEMENT CAREFULLYBEFORE DOWNLOADING OR USING THE SOFTWARE. BY USING ANY LICENSED MATERIALS OR THE EQUIPMENT THATCONTAINS THIS PRODUCT, YOU ACKNOWLDEGE THAT YOU HAVEREAD AND UNDERSTOOD ALL THE TERMS AND CONDITIONS OF THISAGREEMENT AND THAT YOU ARE CONSENTING TO BE BOUND BY THISAGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THISAGREEMENT, RETURN THE UNUSED PRODUCT TO THE PLACE OFPURCHASE FOR A FULL REFUND.Single User License Grant: Xirrus, Inc. ("Xirrus") and its suppliers grant toCustomer ("Customer") a nonexclusive and nontransferable license to use theXirrus software and related documentation ("Software") in object code form solelyon a single central processing unit owned or leased by Customer or otherwiseembedded in equipment provided by Xirrus.Multiple-Users License Grant: Xirrus Inc. ("Xirrus") and its suppliers grant toCustomer ("Customer") a nonexclusive and nontransferable license to use theXirrus software and related documentation ("Software") in object code form: (i)installed in a single location on a hard disk or other storage device on up to thenumber of computers owned or leased by Customer for which Customer has paida license fee ("Permitted Number of Computers"); or (ii) provided the Software isconfigured for network use, installed on a single file server for use on a singlelocal area network for either (but not both) of the following purposes: (a)permanent installation onto a hard disk or other storage device on up to thePermitted Number of Computers; or (b) use of the Software over such network,provided the number of computers connected to the server does not exceed thePermitted Number of Computers. Customer agrees to (i) only use the programscontained in the Software for which Customer has paid a license fee (or in the caseof an evaluation copy, those programs Customer is authorized to evaluate), (ii)not use any component of the Software or Equipment other than solely inconjunction with operation of the Software and as applicable, Equipment, (iii)unbundle any component of the Software or Equipment, (iv) use any componentof the Software for the development of or in conjunction with any softwareapplication intended for resale that employs any such component, (v) use theLicensed Materials or Equipment in life support systems, human implantation,nuclear facilities or systems or any other application where failure could lead to aloss of life or catastrophic property damage, or (vi) cause or permit any thirdparty to do any of the foregoing. Xirrus may provide updates, corrections,enhancements, modifications or bug fixes for the Software ("Updates") toLicensee. Any such Update shall be deemed part of the Software and subject tothe license and all other terms and conditions hereunder.
Customer grants to Xirrus or its independent accountants the right to examine itsbooks, records and accounts during Customer's normal business hours to verifycompliance with the above provisions. In the event such audit discloses that thePermitted Number of Computers is exceeded, Customer shall promptly pay toXirrus the appropriate license fee for the additional computers or users. At Xirrus'option, Xirrus may terminate this license for failure to pay the required licensefee. Customer may make one (1) archival copy of the Software provided Customeraffixes to such copy all copyright, confidentiality, and proprietary notices thatappear on the original.EXCEPT AS EXPRESSLY AUTHORIZED ABOVE, CUSTOMER SHALL NOT:COPY, IN WHOLE OR IN PART, SOFTWARE OR DOCUMENTATION;MODIFY THE SOFTWARE; REVERSE COMPILE OR REVERSE ASSEMBLE ALLOR ANY PORTION OF THE SOFTWARE; OR RENT, LEASE, DISTRIBUTE,SELL, OR CREATE DERIVATIVE WORKS OF THE SOFTWARE.Customer agrees that aspects of the licensed materials, including the specificdesign and structure of individual programs, constitute trade secrets and/orcopyrighted material of Xirrus. Customer agrees not to disclose, provide, orotherwise make available such trade secrets or copyrighted material in any formto any third party without the prior written consent of Xirrus. Customer agrees toimplement reasonable security measures to protect such trade secrets andcopyrighted material. Title to Software and documentation shall remain solelywith Xirrus.OWNERSHIP. Xirrus or its suppliers own and shall retain all right, title andinterest (including without limitation all intellectual property rights) in and to theSoftware and any Update, whether or not made by Xirrus. Licenseeacknowledges that the licenses granted under this Agreement do not provideLicensee with title to or ownership of the Software, but only a right of limited useunder the terms and conditions of this Agreement. All information or feedbackprovided by Licensee to Xirrus with respect to the Software or Equipment shall beXirrus' property and deemed confidential information of Xirrus.LIMITED WARRANTY. Xirrus warrants that for a period of ninety (90) days frompurchase (i) the media on which the Software is furnished will be free of defects inmaterials and workmanship under normal use, and (ii) the Software substantiallyconforms to its published specifications. Except for the foregoing, the Software isprovided AS IS. This limited warranty extends only to Customer as the originallicensee. Customer's exclusive remedy and the entire liability of Xirrus and itssuppliers under this limited warranty will be, at Xirrus' or its service center'soption, repair, replacement, or refund (if a standalone product) of the Software. Inno event does Xirrus warrant that the Software is error free or that Customer willbe able to operate the Software without problems or interruptions.
This warranty does not apply if the software (a) has been altered, except byXirrus, (b) has not been installed, operated, repaired, or maintained in accordancewith instructions supplied by Xirrus, (c) has been subjected to abnormal physicalor electrical stress, misuse, negligence, or accident, or (d) is used in ultra-hazardous activities.DISCLAIMER. EXCEPT AS SPECIFIED IN THIS WARRANTY, ALL EXPRESSOR IMPLIED CONDITIONS, REPRESENTATIONS, AND WARRANTIESINCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OFMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE,OR TRADE PRACTICE, ARE HEREBY EXCLUDED TO THE EXTENTALLOWED BY APPLICABLE LAW.IN NO EVENT WILL XIRRUS OR ITS SUPPLIERS BE LIABLE FOR ANY LOSTREVENUE, PROFIT, OR DATA, OR FOR SPECIAL, INDIRECT,CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE DAMAGES HOWEVERCAUSED AND REGARDLESS OF THE THEORY OF LIABILITY ARISING OUTOF THE USE OF OR INABILITY TO USE THE SOFTWARE EVEN IF XIRRUS ORITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCHDAMAGES. In no event shall Xirrus' or its suppliers' liability to Customer,whether in contract, tort (including negligence), or otherwise, exceed the pricepaid by Customer. The foregoing limitations shall apply even if the above-statedwarranty fails of its essential purpose. SOME STATES DO NOT ALLOWLIMITATION OR EXCLUSION OF LIABILITY FOR CONSEQUENTIAL ORINCIDENTAL DAMAGES. The above warranty DOES NOT apply to any beta software, any software madeavailable for testing or demonstration purposes, any temporary software modulesor any software for which Xirrus does not receive a license fee. All such softwareproducts are provided AS IS without any warranty whatsoever. This License is effective until terminated. Customer may terminate this License atany time by destroying all copies of Software including any documentation. ThisLicense will terminate immediately without notice from Xirrus if Customer failsto comply with any provision of this License. Upon termination, Customer mustdestroy all copies of Software. Software, including technical data, is subject to U.S. export control laws,including the U.S. Export Administration Act and its associated regulations, andmay be subject to export or import regulations in other countries. Customeragrees to comply strictly with all such regulations and acknowledges that it hasthe responsibility to obtain licenses to export, re-export, or import Software.
This License shall be governed by and construed in accordance with the laws ofthe State of California, United States of America, as if performed wholly withinthe state and without giving effect to the principles of conflict of law. Customermay not assign or transfer any of its rights or delegate any of its obligations underthis agreement. No delay, failure or waiver by either party to exercise any right orremedy under this agreement shall operate to waive any exercise of such right orremedy or any other right or remedy. If any portion hereof is found to be void orunenforceable, the remaining provisions of this License shall remain in full forceand effect. This License constitutes the entire License between the parties withrespect to the use of the Software. Restricted Rights - Xirrus' software is provided to non-Department of Defenseagencies with RESTRICTED RIGHTS and its supporting documentation isprovided with LIMITED RIGHTS. Use, duplication, or disclosure by theGovernment is subject to the restrictions as set forth in subparagraph "C" of theCommercial Computer Software - Restricted Rights clause at FAR 52.227-19. Inthe event the sale is to a Department of Defense agency, the government's rightsin software, supporting documentation, and technical data are governed by therestrictions in the Technical Data Commercial Items clause at DFARS 252.227-7015 and DFARS 227.7202. Manufacturer is Xirrus, Inc. 370 North Westlake Blvd,Suite 200 Westlake Village, CA 91362. PROPRIETARY NOTICES. Customer shall maintain and reproduce allcopyright and other proprietary notices on all copies of the Software in the sameform and manner that such notices are included on the Software.
Wireless LAN ArrayTable of Contents iTable of ContentsAll topics listed in this Table of Contents are “clickable,” which means you can instantly jump to any selected topic with a click of your mouse button. Items that do not appear in the TOC list—they are part of the Front Matter, prior to this Table of Contents—include the following:zTrademarkszNoticeszSafety WarningszTranslated Safety WarningszSoftware License AgreementList of Figures..................................................................................... viiIntroduction ......................................................................................... 1The Xirrus Family of Products ............................................................................... 1Nomenclature .................................................................................................... 2About this User’s Guide .......................................................................................... 2Organization ...................................................................................................... 2Notes and Cautions .......................................................................................... 4Screen Images .................................................................................................... 4Your User’s Guide as a PDF Document ........................................................ 4Hyperlinks ......................................................................................................... 4Why Choose the Wireless LAN Array? ................................................................ 5Product Overview .................................................................................................... 6Enterprise Class Security ................................................................................. 6Deployment Flexibility .................................................................................... 7Remote DC Power System (Optional) .................................................... 8Enterprise Class Management ........................................................................ 9Key Features and Benefits ..................................................................................... 10High Capacity and High Performance ........................................................ 10Extended Coverage ......................................................................................... 11Non-Overlapping Channels .......................................................................... 12Secure Wireless Access .................................................................................. 12Wi-Fi Standards Compliance ........................................................................ 12
Wireless LAN Arrayii Table of ContentsApplications Enablement .............................................................................. 12SDMA Optimization ...................................................................................... 12Easy Deployment ............................................................................................ 12Product Specifications (XS-3900) ......................................................................... 13Installing the XS-3900..................................................................... 17Installation Prerequisites ...................................................................................... 17Optional Network Components ................................................................... 19Client Requirements ....................................................................................... 19Planning Your Installation .................................................................................... 20General Deployment Considerations .......................................................... 20Coverage and Capacity Planning ................................................................. 21Placement .................................................................................................. 21RF Patterns ................................................................................................ 22Calculating Areas .................................................................................... 23Capacity and Cell Sizes ........................................................................... 24Sample 802.11a Cells ............................................................................... 25Fine Tuning Cell Sizes ............................................................................. 26Roaming Considerations ........................................................................ 26Allocating Channels ................................................................................ 27Deployment Examples ............................................................................ 28Failover Planning ............................................................................................ 29Unit Failover Protection .......................................................................... 29Port Failover Protection .......................................................................... 30Switch Failover Protection ..................................................................... 30Power Planning ............................................................................................... 31AC Power .................................................................................................. 31Remote Distributed DC Power .............................................................. 31Security Planning ............................................................................................ 31Wireless Encryption ................................................................................ 31Authentication ......................................................................................... 32Network Management Planning .................................................................. 33Deployment Summary ................................................................................... 34Installation Workflow ........................................................................................... 35Unpacking the XS-3900 ......................................................................................... 36Installing the XS-3900 ............................................................................................ 37Choosing a Location ....................................................................................... 37
Wireless LAN ArrayTable of Contents iiiWiring Considerations ............................................................................ 37Mounting the Unit .......................................................................................... 38Attaching the T-Bar Clips ....................................................................... 39Installing the Mounting Plate ................................................................ 40Connecting the Cables ............................................................................ 41Attaching the Array to the Mounting Plate ......................................... 42Dismounting the Array ........................................................................... 43Powering Up the XS-3900 ..................................................................................... 44Establishing Communication with the Array .................................................... 46Using the Serial Port ....................................................................................... 46Using the Ethernet Ports ................................................................................ 46Logging In ........................................................................................................ 46Performing the Express Setup Procedure ........................................................... 47The Web Management Interface ................................................... 53An Overview .......................................................................................................... 53Content ............................................................................................................. 54Structure ........................................................................................................... 55Status Bar .................................................................................................. 56Applying Configuration Changes ................................................................ 56Character Restrictions .................................................................................... 56Configuring the XS-3900................................................................. 57Logging In ............................................................................................................... 57Making Configuration Changes to the XS-3900 ................................................ 58Array Status ..................................................................................................... 58Express Setup .................................................................................................. 61Network Interfaces ......................................................................................... 66Network Settings ..................................................................................... 67VLAN Settings ......................................................................................... 71Network Statistics .................................................................................... 74DHCP Server Settings ............................................................................. 75DNS Settings ............................................................................................. 76IAP Interfaces .................................................................................................. 78IAP Settings .............................................................................................. 79Global Settings ......................................................................................... 82Global Settings .11a ................................................................................. 84
Wireless LAN Arrayiv Table of ContentsGlobal Settings .11bg ............................................................................... 86IAP LED Settings ..................................................................................... 88Statistics ..................................................................................................... 89Statistics (for specific radios) .................................................................. 90SSID Management .......................................................................................... 92Understanding SSIDs .............................................................................. 92Create SSID ............................................................................................... 94Edit SSID ................................................................................................... 95Security ............................................................................................................. 97Security Management ............................................................................. 98Radius Server ......................................................................................... 103Radius User ............................................................................................ 105MAC Access List .................................................................................... 106Create Admin ......................................................................................... 108Edit Admin ............................................................................................. 109Users ............................................................................................................... 110Services ........................................................................................................... 111System Log ............................................................................................. 112SNMP ...................................................................................................... 113Software .......................................................................................................... 114Tools ................................................................................................................ 115Event Log ....................................................................................................... 116The Command Line Interface ...................................................... 117Establishing a Secure Shell (SSH) Connection ................................................. 117Basic Commands .................................................................................................. 118Help ................................................................................................................ 118Tab Key ........................................................................................................... 118? Key ............................................................................................................... 118Save ................................................................................................................. 118Command Modes ................................................................................................. 118Configure Mode ............................................................................................ 118SSID Mode ..................................................................................................... 118Radius Mode .................................................................................................. 119Run Test Mode .............................................................................................. 119Selecting Interfaces .............................................................................................. 119Command Line Keywords ................................................................................. 120
Wireless LAN ArrayTable of Contents vInterface Selection ......................................................................................... 121Interface Configuration ................................................................................ 122Radio Configuration ..................................................................................... 126Beacon Information ...................................................................................... 136System Administration ................................................................................ 137System Testing .............................................................................................. 142Security ........................................................................................................... 143Station Timeouts ........................................................................................... 148SSID Configuration ....................................................................................... 149DNS Configuration ....................................................................................... 150NTP Configuration ....................................................................................... 151DHCP Configuration .................................................................................... 152Syslog Configuration .................................................................................... 153SNMP Configuration .................................................................................... 155Filters .............................................................................................................. 156Radius Configuration ................................................................................... 157Reports ............................................................................................................ 158Data Handling ............................................................................................... 160Data Clearance .............................................................................................. 160Show Information ......................................................................................... 161Remove Configuration ................................................................................. 164Help ................................................................................................................ 168Appendix A: Quick Reference Guide ................................................................169Review of WMI Pages ......................................................................................... 169Alphabetical Listing of CLI Keywords ............................................................. 173Factory Default Settings ...................................................................................... 178Network Interfaces ....................................................................................... 178Serial ........................................................................................................ 178Gigabit 1 and Gigabit 2 ......................................................................... 178Fast Ethernet ........................................................................................... 179Integrated Access Points (IAPs) .................................................................. 179Server Settings ............................................................................................... 180DHCP ...................................................................................................... 180External RADIUS ................................................................................... 180Internal RADIUS .................................................................................... 181NTP .......................................................................................................... 181Syslog ...................................................................................................... 181
Wireless LAN Arrayvi Table of ContentsSNMP .............................................................................................................. 181Default SSID .................................................................................................. 182Encryption ...................................................................................................... 182Administrator Account and Password ...................................................... 183Management .................................................................................................. 183Keyboard Shortcuts ............................................................................................. 184Appendix B: Technical Support .........................................................................185General Hints and Tips ....................................................................................... 185Frequently Asked Questions .............................................................................. 186Multiple SSIDs ............................................................................................... 186Security ........................................................................................................... 188VLAN Support .............................................................................................. 191Contact Information ............................................................................................ 193Glossary of Terms.......................................................................... 195Index................................................................................................ 207
Wireless LAN ArrayList of Figures viiList of FiguresFigure 1. Adobe Acrobat (Version 6 and above) .................................................... 4Figure 2. XS-3900......................................................................................................... 6Figure 3. Wireless Coverage Patterns ...................................................................... 7Figure 4. Remote DC Power Distribution................................................................ 8Figure 5. WMI: Array Status Page............................................................................ 9Figure 6. Layout of IAPs (XS-3900)......................................................................... 10Figure 7. Antenna Patterns ...................................................................................... 11Figure 8. Wall Thickness Considerations .............................................................. 20Figure 9. Unit Placement.......................................................................................... 21Figure 10. Full (Normal) Coverage........................................................................... 22Figure 11. Adjusting RF Patterns.............................................................................. 22Figure 12. Custom Coverage ..................................................................................... 23Figure 13. Calculating the Area of a Circle.............................................................. 23Figure 14. Sample 802.11a Cells ................................................................................ 25Figure 15. Transmit Power......................................................................................... 26Figure 16. Overlapping Cells..................................................................................... 26Figure 17. Allocating Channels Manually............................................................... 27Figure 18. Deployment Scenario (54 Mbps)—Per Sector ...................................... 28Figure 19. Deployment Scenario (36 Mbps)—Per Sector ...................................... 28Figure 20. Deployment Scenario (18 Mbps)—Per Sector ...................................... 29Figure 21. Unit Failover Protection........................................................................... 29Figure 22. Port Failover Protection........................................................................... 30Figure 23. Switch Failover Protection ...................................................................... 30Figure 24. Installation Workflow .............................................................................. 35Figure 25. Attaching the T-Bar Clips........................................................................ 39Figure 26. Installing the Mounting Plate ................................................................. 40Figure 27. Connecting the Cables ............................................................................. 41Figure 28. Attaching the Unit.................................................................................... 42Figure 29. IAP (Radio) Positions............................................................................... 43Figure 30. LED Locations........................................................................................... 44Figure 31. WMI: IAP LED Settings Page ................................................................. 45Figure 32. Network Interface Ports........................................................................... 46Figure 33. WMI: Express Setup Page (Part 1) ......................................................... 47Figure 34. WMI: Express Setup Page (Part 2) ......................................................... 48
Wireless LAN Arrayviii List of FiguresFigure 35. Enabling the NTP Feature ....................................................................... 51Figure 36. Web Management Interface .................................................................... 53Figure 37. WMI: Frames............................................................................................. 55Figure 38. WMI: Status Bar ........................................................................................ 56Figure 39. WMI: Logging In to the XS-3900 ............................................................ 57Figure 40. WMI: Array Status Page .......................................................................... 58Figure 41. Linked Items.............................................................................................. 59Figure 42. WMI: Disabled Device (Partial View).................................................... 59Figure 43. IAP Cells .................................................................................................... 60Figure 44. WMI: Express Setup Page (Part 1) ......................................................... 61Figure 45. WMI: Express Setup Page (Part 2) ......................................................... 62Figure 46. Enabling the NTP Feature ....................................................................... 65Figure 47. WMI: Network Interfaces Page .............................................................. 66Figure 48. WMI: Network Settings Page (Part 1).................................................... 67Figure 49. WMI: Network Settings Page (Part 2).................................................... 68Figure 50. Network Interface Ports........................................................................... 68Figure 51. WMI: VLAN Settings Page...................................................................... 71Figure 52. WMI: Network Statistics Page................................................................ 74Figure 53. WMI: DHCP Settings Page...................................................................... 75Figure 54. WMI: DNS Settings Page......................................................................... 76Figure 55. WMI: IAP Interfaces Page ....................................................................... 78Figure 56. WMI: IAP Settings Page .......................................................................... 79Figure 57. WMI: Global Settings Page...................................................................... 82Figure 58. WMI: Global Settings .11a Page.............................................................. 84Figure 59. WMI: Global Settings .11bg Page ........................................................... 86Figure 60. WMI: IAP LED Settings Page ................................................................. 88Figure 61. WMI: Statistics Page................................................................................. 89Figure 62. WMI: Statistics IAP abg3 Page (Part 1).................................................. 90Figure 63. WMI: Statistics IAP abg3 Page (Part 2).................................................. 91Figure 64. WMI: SSID Management Page ............................................................... 92Figure 65. WMI: Create SSID Page ........................................................................... 94Figure 66. WMI: Edit SSID Page ............................................................................... 95Figure 67. WMI: Security Page.................................................................................. 97Figure 68. WMI: Security Management Page.......................................................... 98Figure 69. WMI: Radius Server Page...................................................................... 103Figure 70. WMI: Radius User Page......................................................................... 105Figure 71. WMI: MAC Access List Page................................................................ 106
Wireless LAN ArrayList of Figures ixFigure 72. WMI: Create/Delete Admin Page........................................................ 108Figure 73. WMI: Edit Admin Page ......................................................................... 109Figure 74. WMI: Users Page .................................................................................... 110Figure 75. WMI: Services Page................................................................................ 111Figure 76. WMI: System Log Page.......................................................................... 112Figure 77. WMI: SNMP Page................................................................................... 113Figure 78. WMI: Software Page............................................................................... 114Figure 79. WMI: Tools Page..................................................................................... 115Figure 80. WMI: Event Log Page ............................................................................ 116Figure 81. Command Line Interface....................................................................... 117
Wireless LAN Arrayx List of Figures
Wireless LAN ArrayIntroduction 1IntroductionThis chapter introduces the Wireless LAN Array, including an overview of its key features and benefits, and a detailed listing of the product’s physical, environmental, technology and regulatory specifications. Section headings for this chapter include:zThe Xirrus Family of ProductszAbout this User’s GuidezProduct OverviewzKey Features and BenefitszProduct Specifications (XS-3900)The Xirrus Family of ProductsThe Xirrus family of products includes the following items:zXirrus Wireless LAN Array (XS-3900 / XS-3700 / XS-3500)The Wireless WLAN array is specifically designed for the Enterprise market. There are three versions of this product, each with a different wireless capacity—sixteen IAPs (Integrated Access Points—radios) with the XS-3900, eight IAPs with the XS-3700, and four IAPs with the XS-3500.This User’s Guide documents the high capacity XS-3900, and where there are operational differences between the three models these differences are highlighted.zXirrus Wireless Management System (XM-3300)The XM-3300 is used for managing large XS-3900 deployments from a centralized Web-based interface. The XM-3300 is occasionally referred to in this User’s Guide; however, if you need detailed information about this product, refer to the XM-3300 User’s Guide, part number 800-0007-001.zXirrus Remote DC Power System (XP-3100)The XP-3100 provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.
Wireless LAN Array2 IntroductionNomenclatureThroughout this User’s Guide, the Wireless LAN Array is also referred to as the XS-3900, or simply the XS. In some instances, the terms product, unit, array, or Xirrus array are also used. When discussing wireless network environments in which the XS is employed, the most commonly used reference is the system.The Xirrus Wireless Management System (XM-3300) and the Xirrus Remote DC Power System (XP-3100) are referred to as the XM-3300 and XP-3100, or XM and XP respectively.About this User’s GuideThis User’s Guide provides detailed information and procedures that will enable wireless network administrators to install, configure and manage the Xirrus array so that end users can take full advantage of the product’s features and functionality without technical assistance.OrganizationTopics and procedures are organized by function under the following chapter headings: zIntroductionProvides a brief introduction to wireless technology, an overview of the product, including its key features and benefits, and presents the product specifications.zInstalling the XS-3900Defines the prerequisites for deploying and installing the XS-3900 and provides instructions to help you plan and complete a successful installation.zThe Web Management InterfaceOffers an overview of the product’s embedded Web Management Interface, including its content and structure. It also emphasizes what you need to do to ensure that any configuration changes you make are applied, and provides a list of restricted characters.
Wireless LAN ArrayIntroduction 3zConfiguring the XS-3900Contains procedures for configuring the XS-3900 using its embedded Web Management Interface. It also includes instructions for logging in to the XS-3900 with your Web browser, and procedures for upgrading the system firmware and resetting the XS-3900 to its factory defaults.zThe Command Line InterfaceProvides instructions for configuring the XS-3900 using keywords and commands via its embedded Command Line Interface—with examples and syntax conventions—and includes a procedure for establishing a Secure Shell (SSH) connection to the product.zAppendix A: Servicing the XS-3900Contains procedures for servicing the XS-3900, including the removal and reinstallation of major hardware components.zAppendix A: Quick Reference GuideContains product reference information, including a review of the Web Management Interface pages and their content, an alphabetical listing of keywords available with the Command Line Interface, the product’s factory default settings, a sample event log, and some useful keyboard shortcuts.zAppendix B: Technical SupportOffers guidance to resolve technical issues, including some general hints and tips to enhance your product experience, and a procedure for isolating problems within an XS-enabled wireless network. Also includes Frequently Asked Questions (FAQs), a table of error messages generated by the product, and Xirrus contact information.zGlossary of TermsProvides an explanation of terms directly related to Xirrus product technology, organized alphabetically.zIndexThe index is a valuable information search tool. Use the index to locate specific topics discussed in this User’s Guide. Simply click on any page number in the index to jump to the referenced topic.
Wireless LAN Array4 IntroductionNotes and CautionsThe following symbols are used throughout this User’s Guide:Screen ImagesSome screen images of the Web Management Interface have been modified for clarity. For example, an image may have been cropped to highlight a specific area of the screen, and/or sample data may be included in some fields.Your User’s Guide as a PDF DocumentThis User’s Guide is made available as a secure PDF (Portable Document Format) file and can be viewed using the Adobe® Acrobat Reader® product. It cannot be edited or modified. If you don’t have Acrobat Reader, you can downloaded it free-of-charge from: http://www.adobe.com.HyperlinksIf you click on body text that appears in the color TEAL (with the exception of headings or notes) the embedded hyperlink within the text will immediately take you to the referenced destination. All internal and external cross-references, including page numbers within the List of Figures and the Index, have associated hyperlinks. After “jumping” to a referenced topic, if you want to return to the previous page (reference source), simply click on Acrobat’s previous page button.Figure 1. Adobe Acrobat (Version 6 and above)#This symbol is used for general notes that provide useful supplemental information.!This symbol is used for cautions. Cautions provide critical information that may adversely affect the performance of the product.Previous page button
Wireless LAN ArrayIntroduction 5Why Choose the Wireless LAN Array?In 2003 there were approximately 30,000 Wireless Local Area Networks (WLANs) operating in the public domain. Research suggests that the number will more than quadruple by 2006. Enterprise WLANs in the private sector are also becoming increasingly common as businesses strive for greater flexibility in the workplace and the need for employee mobility rises. The only requirements for an effective wireless deployment are a power source, a couple of screws, and an imagination.Wireless LAN is also fully compatible with standard Ethernet protocols, so connectivity with existing wired infrastructures is transparent to users—they can still access and use the same applications and network services that they use when plugged into the company’s wired LAN infrastructure (it’s only the plug that no longer exists).Wireless LAN has come a long way in the past few years and now offers the performance, reliability and security that Enterprise customers have come to expect from their networks. The technology is being driven by three major IEEE standards:z802.11aOperates in the 5 GHz range with a maximum speed of 54 Mbps.z802.11bOperates in the 2.4 GHz range with a maximum speed of 11 Mbps. It has a range of about 100 meters indoors and 300 meters outdoors.z802.11gSupports a higher transmission speed of 54 Mbps in the 2.4 GHz range and is backwards compatible with 802.11b.Whether you’re a small company with just a handful of employees, or a large corporation with thousands, wireless has the scalability and flexibility to serve your needs.
Wireless LAN Array6 IntroductionProduct OverviewPart of the family of Xirrus products, the Wireless LAN Array (XS-3900) is a high capacity, multi-mode WLAN array designed for the Enterprise market, with twice the range and up to sixteen times the capacity of competitive wireless products.Figure 2. XS-3900The XS-3900 is Wi-Fi® compliant and simultaneously supports 802.11a, 802.11b and 802.11g clients. Enterprise class features such as VLAN support and multiple SSID capability enable robust network compatibility and a high level of scalability and system control. The optional Xirrus Wireless Management System (XM-3300) allows global management of hundreds of arrays from a central location.The smaller XS-3700 and XS-3500 versions of the Wireless LAN Array have a correspondingly lower capacity than the XS-3900.Enterprise Class SecurityThe latest and most effective wireless encryption security standards, including WPA2 (Wi-Fi Protected Access 2) with 802.11i AES (Advanced Encryption Standard) are provided with the XS-3900. In addition, the use of 802.1x with an embedded RADIUS server (or external RADIUS servers) ensures user authentication—multiple arrays can authenticate to the optional XM-3300 ensuring only authorized Xirrus Wireless LAN Arrays become part of the wireless network. Rogue AP detection and site monitoring is performed in the background by the XS-3900 automatically.
Wireless LAN ArrayIntroduction 7Deployment FlexibilityXirrus’ unique multi-radio architecture generates 360 degrees of sectored high-gain 802.11a/b/g coverage that provides extended range and the highest possible data rates for a large volume of clients. Each sector can be controlled automatically or manually, creating a pattern of wireless coverage perfectly tailored to individual customer needs. For example:Figure 3. Wireless Coverage PatternsFigure 2 depicts the following two scenarios:zFull pattern coverageAll radios are activated with coverage spanning 360 degrees. If within range, clients will always receive coverage regardless of their geographic position relative to the XS-3900.zPartial pattern coverageIf desired, the XS-3900 can be deployed close to an exterior wall. In this case, half of all available radios have been deactivated to prevent redundant signals from “bleeding” beyond the site’s perimeter wall. This configuration may also be used in those cases where you want to restrict wireless coverage to selected areas of the building’s interior.outside wall
Wireless LAN Array8 IntroductionRemote DC Power System (Optional)The Xirrus Remote DC Power System (XP-3100) provides distributed DC power to your XS-3900 (DC version) deployments, eliminating the need to provide an AC power outlet in close proximity to the unit(s).In the following example, DC power is supplied to four Xirrus Arrays while utilizing only one AC power outlet.Figure 4. Remote DC Power DistributionAC Input to XP-3100DC Output to Xirrus ArraysXP-3100
Wireless LAN ArrayIntroduction 9Enterprise Class Management The XS-3900 can be configured with its default RF settings, or the RF settings can be customized using the array’s embedded Web Management Interface (WMI). The WMI enables easy configuration and control from a graphical console, along with a full compliment of troubleshooting tools, reports and statistics.Figure 5. WMI: Array Status PageIn addition, a fully featured Command Line Interface (CLI) offers IT professionals a familiar management and control environment. SNMP (Simple Network Management Protocol) is also supported to allow management from an SNMP compliant management tool, such as the optional Xirrus Wireless Management System.#For deployments of more than two XS units, we recommend that you use the Xirrus Wireless Management System (XM-3300). The XM-3300 offers a rich set of features for fine control over large deployments.
Wireless LAN Array10 IntroductionKey Features and BenefitsThis section describes some of the key product features and the benefits you can expect when deploying the XS-3900.High Capacity and High PerformanceThe XS-3900 easily handles time-sensitive traffic, such as voice, and can enable wireless connectivity for nearly 1,000 users. The unit includes two Gigabit uplink ports for connection to the wired network. A total of sixteen IAPs provides a maximum wireless capacity of 864 Mbps, which offers ample reserves for the high demands of current and future applications. Of the sixteen IAPs, twelve operate in the 802.11a mode and four operate in any combination of 802.11a, 802.11b and 802.11g.If desired, IAP (radio) abg2 can also be configured in RF monitoring and rogue AP detection mode.Figure 6. Layout of IAPs (XS-3900)a1abg1a2a3a4abg2 (RF monitoring)a5a6a7abg3a8a9a10abg4a11a12Mode(s) IAP number
Wireless LAN ArrayIntroduction 11Extended CoverageOne XS-3900 solution enables you to replace up to sixteen access points—fifteen IAP radios with integrated directional antennas provide increased wireless range and enhanced data rates in all directions. With an XS deployed, far fewer access points are needed for your wireless network. Radio abg2 (see Figure 6) can be switched to use an integrated omnidirectional antenna—for listening only—and can be dedicated to the tasks of site monitoring and rogue AP detection.Figure 7. Antenna PatternsXSXSXS802.11a (directional) 802.11a/b/g (directional)802.11a/b/g (omnidirectional)
Wireless LAN Array12 IntroductionNon-Overlapping ChannelsComplete use of non-overlapping channels limits interference and delivers maximum capacity. On the XS-3900, all 16 non-overlapping channels are fully utilized across the 5Ghz and 2.4Ghz spectrums (12 across the 5GHz spectrum and 4 across the 2.4GHz spectrum).Secure Wireless AccessMultiple layers of authentication and encryption ensure secure data transmissions. The XS-3900 is 802.11i compliant with encryption support for 64 bit and 128 bit WEP, TKIP and AES.Authentication support is provided via 802.1x, including PEAP, EAP-TLS, and EAP-TTLS.Wi-Fi Standards ComplianceFully meets the requirements of 802.11a/b/g standards, and guaranteed interoperability with all other Wi-Fi products certified by the Wi-Fi Alliance.Applications EnablementQoS (Quality of Service) functionality combined with true switch capabilities enable high density Voice over Wireless LAN deployments. Compliant with 802.11e (final draft), 802.1p and 802.1q standards.SDMA OptimizationSDMA (Spatial Division Multiple Access) technology provides full 360° coverage while allowing independent channel and power output customization. Also supports fast inter-zone handoffs for time-sensitive applications and roaming support.Easy DeploymentThe Xirrus Wireless Management System (XM-3300) offers real time monitoring and management capabilities of the wireless network—ideal for the Enterprise market. It also allows you to import floor plans to help you plan your deployment. The XM-3300 chassis has a plenum rated, lockable and tamper resistant case.
Wireless LAN ArrayIntroduction 13Product Specifications (XS-3900)Element SpecificationsNumber of Users Maximum of 64 associated users per radio1024 users per arrayPhysical Diameter: 12.9 inches (32.77 cm)Height: 2.53 inches (6.43 cm)Weight: 8lbs (3.63 kg)Environmental Operating Temperature:-10°C to 50°C0% to 90% relative humidity (non-condensing)Storage Temperature:-20°C to 60°C5% to 95% relative humidity (non-condensing)Operating Altitude:2000 meters (6561 feet)System 825 MHz CPU128MB RAM, expandable512MB system flash, expandableExpansion slot for future optionsElectrical Input Power (AC version): 90VAC to 265VAC at 47Hz to 63HzInput Power (DC version): 48VDCInterfaces Serial:1 x RS232 – RJ45 connectorEthernet Interfaces:2 x Gigabit 100/1000 Mbps w/failover1 x Fast Ethernet 10/100 MbpsStatus LEDs:System status, Ethernet, Radio
Wireless LAN Array14 IntroductionManagement Web-based HTTPSSNMP v3CLI via SSHv2FTPTFTPSerialProprietaryXirrus Wireless Management SystemSyslog reporting for alerts/alarmsNetworking DHCP client, DHCP server, NTP clientRFCVLAN Support 802.1Q, P VLANSupports up to 16 VLANsMultiple SSID SupportAllows up to 16 separate SSIDs to be defined with map security, VLAN, QoS and guest access settings for each SSIDPerformance Client Load BalancingAutomatic load balancing between system radiosQuality of Service:802.1P wired traffic prioritization802.11e wireless prioritizationMAP CoS to TCIDFair queuing of downstream trafficElement Specifications
Wireless LAN ArrayIntroduction 15Security Wireless Security:WEP 40bit/128bit encryptionWPA with TKIP and AES encryptionMisappropriated APs automatically reset to factory defaults (requires the Xirrus Wireless Management System)Rogue AP detection, with alerts and classificationDenial of Service (DoS) attack detectionMAC address spoofing preventionUser and System Authentication:WPA Pre-Shared Key authenticationEmbedded RADIUS Server802.1x EAP-TLS802.1x EAP-TTLS802.1x PEAPExternal RADIUS serversAuthentication of Xirrus APs to the Xirrus Management System (XM-3300)Element Specifications
Wireless LAN Array16 IntroductionWireless Number of Radios:12 x 802.11a radios4 x 802.11a/b/g radiosWireless Standards:802.11a/b/g and g-only mode802.11d, 802.11e (draft), 802.11iChannel Selection:ManualAutomaticFrequency Bands:11a: 5.15-5.25 GHz (UNII 1)11a: 5.15-5.25 GHz (TELEC)11a: 5.25-5.35 GHz (UNII 2)11a: 5.470-5.725 (ETSI)11a: 5.725-5825 GHz (UNII 3)11b/g: 2.412-2.462 GHz (FCC)11b/g: 2.412-2.472 GHz (ETSI)11b/g: 2.412-2.484 GHz (TELEC)Antenna:Internal 6dBi sectorized antennaExternal RP-TNC connectorRadio Approvals:FCC (United States)EN 301.893 (Europe)Compliance UL / cUL 60950 and EN 60950FCC Part 15.107 and 15109, Class AEN 301.489 (Europe)Warranty One yearElement Specifications
Wireless LAN ArrayInstalling the XS-3900 17Installing the XS-3900This chapter defines the prerequisites for installing the XS-3900 and provides instructions to help you complete a successful installation. Section headings for this chapter include:zInstallation PrerequisiteszPlanning Your InstallationzInstallation WorkflowzUnpacking the XS-3900zInstalling the XS-3900zPowering Up the XS-3900zPerforming the Express Setup ProcedurezThis ends the Express Setup procedure.Installation PrerequisitesYour XS-3900 deployment requires the presence of hardware and services in the host wired/wireless network, including:zDedicated AC power outletUnless you are using the Xirrus Remote DC Power System (XP-3100) with the DC version of the XS-3900, you need a dedicated power outlet to supply AC power to each unit deployed at the site. If you are using the optional XP-3100, then DC power is supplied to all units and only one AC outlet is required for the XP-3100.zEthernet portYou need at least one 10/100/1000 BaseT port to establish wired Gigabit Ethernet connectivity (via the product’s Gigabit 1 or Gigabit 2 port) and one 10/100 BaseT port (if desired) for wired Fast Ethernet connectivity.zSecure Shell (SSH) utilityTo establish secure remote command line access to the XS-3900, you need a Secure Shell (SSH) utility, such as PuTTY.
Wireless LAN Array18 Installing the XS-3900zSecure Web browserEither Internet Explorer (version 6.0 or higher), Netscape Navigator (version 7.0 or higher), or Mozilla Firefox (version 1.01 or higher) and it must be available on the same subnet as the XS-3900. A secure Web browser is required for Web-based management of the XS-3900.zSerial connection capabilityTo connect directly to the console port on the XS-3900, your computer must be equipped with a male 9-pin serial port and terminal emulation software (for example, HyperTerminal).Use the following settings when establishing a serial connection:Bits per second 115,200Data bits 8Parity NoneStop bits 1Flow control None
Wireless LAN ArrayInstalling the XS-3900 19Optional Network ComponentsThe following network components are optional.zDHCP serverTo distribute IP addresses and ancillary information to your XS-3900.zXirrus Wireless Management System (XM-3300)The optional XM-3300 offers powerful management features for small or large XS-3900 deployments.zXirrus Remote DC Power System (XP-3100)The optional XP-3100 provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.zExternal RADIUS serverAlthough your XS-3900 comes with an embedded RADIUS server, for 802.1x authentication in large deployments you may want to add an external RADIUS server.Client RequirementsThe XS-3900 should only be used with Wi-Fi certified client devices.
Wireless LAN Array20 Installing the XS-3900Planning Your InstallationThis section provides guidelines and examples to help you plan your XS-3900 deployment to achieve the best overall coverage and performance. We recommend you conduct a site survey to determine the best location and settings for each XS-3900 unit you install.General Deployment ConsiderationsThe XS-3900’s unique multi-radio architecture generates 360 degrees of sectored high-gain 802.11a/b/g coverage that provides extended range. However, the number, thickness and location of walls, ceilings or other objects that the wireless signals must pass through may affect the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise at your location. To maximize wireless range, follow these basic guidelines:1. Keep the number of walls and ceilings between the XS-3900 and your receiving devices to a minimum—each wall or ceiling can reduce the wireless range from between 3 and 90 feet (1 to 30 meters). Position your devices so that the number of walls or ceilings is minimized.2. Be aware of the direct line between each device. For example, a wall that is 1.5 feet thick (half a meter) at 90° is actually almost 3 feet thick (or 1 meter) when viewed at a 45° angle. At an acute 2° degree angle the same wall is over 42 feet (or 14 meters) thick! For best reception, try to ensure that your wireless devices are positioned so that signals will travel straight through a wall or ceiling.Figure 8. Wall Thickness Considerations90° 45°1.5 feet< 3 feet> 42 feet2°
Wireless LAN ArrayInstalling the XS-3900 213. Building materials can make all the difference. For example, solid metal doors or aluminum wall studs may adversely effect wireless signals. Try to position wireless client devices so that the signal passes through drywall (between studs) or open doorways and not other materials.Coverage and Capacity PlanningThis section considers coverage and capacity for your deployment(s), including placement options, RF patterns and cell sizes, area calculations, roaming considerations, and channel allocations.PlacementUse the following guidelines when considering placement options:1. The best placement option for the XS-3900 is ceiling-mounted within an open plan environment (cubicles rather than fixed walls).2. Keep the XS-3900 away from electrical devices or appliances that generate RF noise. Because the XS-3900 is generally mounted on ceilings, be aware of its position relative to lighting (especially fluorescent lighting)—we recommend maintaining a distance of at least 3 to 6 feet (or 1 to 2 meters).3. If using multiple XS-3900s at the same location, we recommend maintaining a distance of at least 100 feet between units.Figure 9. Unit Placement≥ 100 ft≥ 100 ft≥ 100 ft
Wireless LAN Array22 Installing the XS-3900RF PatternsThe XS-3900 allows you to control—automatically or manually—the pattern of wireless coverage that best suits your deployment needs. You can choose to operate with full coverage, half coverage, or custom coverage (by enabling or disabling individual sectors).Full (Normal) CoverageIn normal operation, the XS-3900 provides a full 360 degrees of coverage.Figure 10. Full (Normal) CoverageHalf CoverageIf installing a unit close to an exterior wall, you can deactivate half of the radios to prevent redundant signals from “bleeding” beyond the wall and extending service into public areas. The same principle applies if you want to restrict service to an adjacent room within the site.Figure 11. Adjusting RF Patternsoutside wall
Wireless LAN ArrayInstalling the XS-3900 23Custom CoverageWhere there are highly reflective objects in close proximity to the XS-3900, you can turn off specific radios to avoid interference and feedback.Figure 12. Custom CoverageCalculating AreasBefore we discuss cell sizes, it is useful to know how to calculate the area of a circle (because the XS-3900 radiates a full 360 degrees). The area of a circle is equal to pi (π) times the square of the radius, where pi is equal to 3.14. The following graphic calculates the area of a circle with a radius of 20 feet. Figure 13. Calculating the Area of a Circleobjectreflective20 ft3.14 x 202 = 1,256 sq ft
Wireless LAN Array24 Installing the XS-3900Capacity and Cell SizesCell sizes should be calculated based on the number of users, the applications being used (for example, data/video/voice), and the number of XS-3900 units available at the location. The capacity of a cell is defined as the minimum data rate desired for each sector multiplied by the total number of sectors being used.The following chart shows the maximum recommended cell sizes for each data rate.Min. DesiredData Rate(Mbps)11a Cell Size 11b/g Cell SizeRadius(feet) Area(sq. feet) Radius(feet) Area(sq. feet)54 104 33,962 130 53,06648 195 119,398 228 163,23036 260 212,264 325 331,66224 293 269,566 357 400,19018 325 331,662 422 559,18412 357.5 401,312 455 650,0589 390 477,594 468 687,7356 423 561,837 487 744,71111 0 0 520 849,0565.5 0 0 546 936,0842 0 0 572 1,027,3581 0 0 585 1,074,586
Wireless LAN ArrayInstalling the XS-3900 25Sample 802.11a CellsThe following 802.11a sample cells illustrate the coverage area and minimum throughput you can expect (per sector) based on the size of each cell. Notice how the throughput increases as the cell size decreases, and vice versa.Figure 14. Sample 802.11a Cells68 ft98 ft165 ft54 Mbps per sector36 Mbps per sector18 Mbps per sector14,520 sq ft30,157 sq ft85,487 sq ft
Wireless LAN Array26 Installing the XS-3900Fine Tuning Cell SizesAdjusting the transmit power allows you to fine tune cell sizes. There are three settings—Large, Medium, or Small (the default is Medium). If you are installing many units in close proximity to each other, reduce the transmit power to avoid excessive interference with other arrays or installed APs. See also, “IAP Settings” on page 79.Figure 15. Transmit PowerRoaming ConsiderationsCells should overlap approximately 10 - 15% to accommodate client roaming.Figure 16. Overlapping CellsLargeMediumSmallROAMING10 - 15% overlap
Wireless LAN ArrayInstalling the XS-3900 27Allocating ChannelsBecause the XS-3900 is a multi-channel device, allocating the best channels to radios is important if peak performance is to be maintained.Automatic Channel SelectionWe recommend that you allow the XS-3900 to make intelligent channel allocation decisions automatically. In the automatic mode, channels are allocated dynamically, driven by changes in the environment.Manual Channel SelectionYou can manually assign channels on a per radio basis, though manual selection is not recommended (and not necessary).To avoid co-channel interference, do not select adjacent channels for radios that are physically next to each other.Figure 17. Allocating Channels ManuallyMaintain channel separation
Wireless LAN Array28 Installing the XS-3900Deployment ExamplesThe following examples employ 802.11a cells, each offering minimum throughputs of 54 Mbps, 36 Mbps, and 18 Mbps per sector respectively, and assume a floor plan covering a total area of about 60,000 square feet.Figure 18. Deployment Scenario (54 Mbps)—Per SectorFigure 19. Deployment Scenario (36 Mbps)—Per Sector
Wireless LAN ArrayInstalling the XS-3900 29Figure 20. Deployment Scenario (18 Mbps)—Per SectorFailover PlanningThis section discusses failover protection at the unit and port levels.Unit Failover ProtectionIn the rare event that an XS-3900 becomes unavailable, it is suggested that you deploy a backup unit. Backup units monitor primary units via an Ethernet switch and continue to provide wireless services in the event that the primary unit becomes unavailable. Any XS-3900 can be set up as a backup unit. Backup units should be located near primary units.Figure 21. Unit Failover ProtectionPrimaryActive mode Offline mode until neededBackupheartbeat monitorEthernet switch
Wireless LAN Array30 Installing the XS-3900Port Failover ProtectionTo ensure that service is continued in the event of a port failure, you can utilize all three XS-3900 ports (Fast Ethernet, Gigabit 1 and Gigabit 2) simultaneously.Figure 22. Port Failover ProtectionSwitch Failover ProtectionTo ensure that service is continued in the event of a switch failure, you can connect XS-3900 units to more than one Ethernet switch.Figure 23. Switch Failover Protection#Gigabit Ethernet connections must be on the same subnet.Ethernet switchMultiple port connectionsEthernet switch Backup switchEthernet connections
Wireless LAN ArrayInstalling the XS-3900 31Power PlanningThis section discusses the AC and DC power options.AC PowerThe AC power option requires a direct connection between the XS-3900 and a dedicated AC power outlet. The power cord is provided with the unit.Remote Distributed DC PowerTo deliver DC power to the XS-3900, you must have the optional Xirrus Remote DC Power System (XP-3100) and a Xirrus Array that supports DC power—see Figure 4 on page 8 . The XP-3100 provides DC power to multiple XS-3900 units from a single source, and requires only one AC power outlet.Depending on the type of cable used, XS-3900 units can be located up to 600 feet from the XP-3100. In addition, the XP-3100 can be plugged into a UPS to prevent power failure to all XS-3900 units in the network.When using CAT5 cable, DC power can be provided up to a distance of 300 feet.Security PlanningThis section offers some useful guidelines for defining your preferred encryption and authentication method. For additional information, go to the Security section of “Frequently Asked Questions” on page 186.Wireless EncryptionEncryption ensures that no user can decipher another user’s data transmitted over the airwaves. There are three encryption options available to you, including:zWEP-40bit or WEP-128bitBecause WEP is vulnerable to cracks, we recommend that you only use this for legacy devices that cannot support a stronger encryption type.zWi-Fi Protected AccessThis is much more secure than WEP and uses TKIP for encryption.
Wireless LAN Array32 Installing the XS-3900zWi-Fi Protected Access 2 This is government-grade encryption—available on most new client adapters—and uses the AES–CCM encryption mode (Advanced Encryption Standard–Counter Mode).AuthenticationAuthentication ensures users are who they say they are, and occurs when users attempt to join the wireless network and periodically there after. The following authentication methods are available with the XS-3900:zRADIUS 802.1x 802.1x uses a remote RADIUS server to authenticate large numbers of clients, and can handle different authentication methods (EAP-TLS, EAP-TTLS EAP-PEAP).zXirrus internal RADIUS serverIncludes all the core functionality of a full RADIUS server built into the Xirrus XS-3900. Recommended for smaller numbers of users (about 100 or less).zPre-Shared KeyUses a pass-phrase or key that is manually distributed to all authorized users. The same passphrase is given to client devices and entered into each Xirrus array.zMAC Access Control Lists (ACLs)MAC access control lists provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network, and can be used in addition to any of the above authentication methods. ACLs are good for embedded devices, like printers and bar-code scanners (though MAC addresses can be spoofed). The XS-3900 supports 512 ACL entries.
Wireless LAN ArrayInstalling the XS-3900 33Network Management PlanningNetwork management can be performed using any of the following methods:zCommand Line Interface, using an SSH (Secure Shell) utility, like PuTTY.zWeb-based management, using the XS-3900 unit’s embedded Web Management Interface (WMI). This method provides configuration and basic monitoring tools, and is good for small deployments (one or two units).zWeb-based management, using the optional Xirrus Wireless Management System (XM-3300). The XM-3300 is used for managing large XS-3900 deployments from a centralized Web-based interface and offers the following features:Layer 3 appliance  Globally manage large numbers of XS-3900 units Seamless view of the entire wireless network Easily configure large numbers of XS-3900 units  Rogue AP monitoring Easily manage system-wide firmware updates  Monitor performance and trendsAggregation of alerts and alarms
Wireless LAN Array34 Installing the XS-3900Deployment SummaryThe following table summarizes your deployment options for small and large deployments.Function Number of XS-3900 UnitsOne or Two Three or MorePower ACDC (with XP-3100)ACDC (with XP-3100)UPS backup(recommended)Failover Recommended Highly recommendedVLANs OptionalRequired for guest accessOptional use,Can be used to put all APs on one VLAN or map to existing VLAN schemeRequired for Guest AccessEncryption WPA with TKIP (recommended)PSK or 802.1x WPA2 with AES (recommended)802.1x keyingAuthentication Internal RADIUS serverPre-Shared KeyExternal RADIUS serverManagement Internal WMIInternal CLIXM-3300XM-3300
Wireless LAN ArrayInstalling the XS-3900 35Installation WorkflowThis workflow illustrates the steps that are required to install and configure the XS-3900 successfully. Review this flowchart before attempting to install the unit on a customer’s network.Figure 24. Installation WorkflowDetermine the number of Arrays neededChoose the location(s) for your XS-3900 unit(s)AC DCInstall the mounting plateConnect the cables and turn on the powerVerify that the Ethernet link and radio LEDs are functioning correctlyPerform the Express Setup procedureRun AC power and Ethernet cables Run DC power and Ethernet cablesAC or DC power?
Wireless LAN Array36 Installing the XS-3900Unpacking the XS-3900When you unpack your XS-3900, you will find the following items in the carton:Item QuantityXirrus Wireless LAN Array (XS-3900) module 1AC power cord 1Mounting plate 1Mounting screws 4Screw anchors 4Tile grid mounting clamps 4Clamp nuts 4Mounting template 1End User License Agreement (EULA) 1CD-ROM containing:This User’s Guide in PDF formatREADME file1Quick Install Guide 1Registration Card 1
Wireless LAN ArrayInstalling the XS-3900 37Installing the XS-3900This section provides instructions for installing the XS-3900 unit.Choosing a LocationBased on coverage, capacity and deployment examples discussed earlier in this chapter, choose a location for your XS-3900 that will provide the best results for your needs. The XS-3900 was designed to be mounted on a ceiling where the unit is unobtrusive and wireless transmissions can travel unimpeded throughout open plan areas. Choose a location that is central to your users.Wiring ConsiderationsUnless you are using the Xirrus Remote DC Power System (XP-3100) with the DC version of the XS-3900, an AC power outlet must be available to the XS-3900 (an AC power cord is provided with each unit). If you are using the XP-3100 to distribute DC power to multiple XS-3900 units, go to “Remote DC Power System (Optional)” on page 8.Once you have determined the best location for your XS-3900, you must run cables to the location for the following services:PowerzDedicated AC powerzDC power (if using the XP-3100)NetworkzGigabit 1zGigabit 2 (optional)zFast Ethernet (optional)zSerial cable (see note)#When the unit’s IP address is unknown or a network connection has not been established, the serial cable is used for connecting directly with the Command Line Interface (CLI) via HyperTerminal. When a network connection is established, the XS-3900 can be managed from any of the available network connections, either Fast Ethernet, Gigabit 1 or Gigabit 2.
Wireless LAN Array38 Installing the XS-3900Mounting the UnitMost offices have drop-down acoustical ceiling tiles set into a standard grid. The XS-3900 has been designed to enable mounting to a tiled ceiling via a mounting plate and clamps that attach to the grid. Once the mounting plate is attached, the XS-3900 simply rotates onto the plate (similar to a smoke detector). Once the unit is mounted it can be removed and re-attached easily, without the need for tools or modifications to the original installation.This section assumes that you are mounting the XS-3900 to a tiled ceiling. If your ceiling is not tiled, the mounting plate can be attached directly to the ceiling with the screws and anchors provided (without using the tile grid mounting clamps).
Wireless LAN ArrayInstalling the XS-3900 39Attaching the T-Bar ClipsThe T-bar clips are used to create four mounting points on the ceiling tile grid for the XS-3900 mounting plate. Use the mounting template (provided) to find the correct location for all four clamps. To attach the clamps, simply twist the clamps onto the grid and tighten the screw post with a screwdriver.Figure 25. Attaching the T-Bar ClipsCeiling tile gridT-bar clips (4 places)Tighten the screw postTemplate
Wireless LAN Array40 Installing the XS-3900Installing the Mounting PlateIf necessary, orient the mounting plate (see “Attaching the T-Bar Clips” on page 39) and locate the plate on the four screw posts. Secure the mounting plate to the four clamps using the nuts provided. Once the mounting plate is secured, cut an access hole in the ceiling tile for the cables.Figure 26. Installing the Mounting PlateTile gridMounting PlateCut an access hole here
Wireless LAN ArrayInstalling the XS-3900 41Connecting the CablesFeed the power and Ethernet cables through the access hole in the tile and the mounting plate, then connect the cables to the unit. See also, “Wiring Considerations” on page 37.Figure 27. Connecting the CablesWhen the cables are connected, turn on the power switch—before attaching the unit to the mounting plate (next step). Verify that the Ethernet link LED lights and the LED boot sequence begins. The radio LEDs on the front of the unit will illuminate in rotation, indicating that the XS-3900 software is loading and the unit is functioning correctly.
Wireless LAN Array42 Installing the XS-3900Attaching the Array to the Mounting PlateAlign the port recess on the XS-3900 with the access hole in the mounting plate, then connect the XS-3900 with the lugs on the mounting plate (4 places) and turn the XS-3900 clockwise to lock the unit into place (similar to a smoke detector).Figure 28. Attaching the UnitFor added security, there is a locking bracket incorporated into the mounting plate, which will accept a small luggage-style padlock (if desired). There is also a Kensington lock slot located near the Ethernet ports. In addition, the mounting plate incorporates a positive locking tab that prevents the unit from being inadvertently released.
Wireless LAN ArrayInstalling the XS-3900 43Now that the XS-3900 is physically installed, you must run the Express Setup procedure from the unit’s Web Management Interface to enable the radios and establish initial system configuration settings. Go to “Powering Up the XS-3900” on page 44.Dismounting the ArrayTo dismount the array, place your fingers so as to increase the space between the array and the mounting plate at the positions indicated by the decals on the mounting plate—these are aligned with IAPs (radios) abg1 and abg3, as indicated on the clock-face of the array.Figure 29. IAP (Radio) Positionsa1abg1a2a3a4abg2a5a6a7abg3a8a9a10abg4a11a12
Wireless LAN Array44 Installing the XS-3900Powering Up the XS-3900When powering up, the array follows a specific sequence of LED patterns showing the boot progress, and following a successful boot will provide extensive status information. The normal boot sequence is as follows:1. The green status LED will light first, showing a steady flashing while the unit boots. In the event of a boot failure, this LED will change to flashing red.2. The Ethernet Link/Activity LEDs on the underside of the array will light for those ports connected to the network.3. All IAP radio LEDs will light simultaneously.4. While the array is booting, a sequential LED pattern will cycle through all the radio LEDs.5. When the array completes boot, the status LED will show a steady green, and all radio lights will show the current state of those radios.Figure 30. LED LocationsStatus LEDIAP LEDs (x16)
Wireless LAN ArrayInstalling the XS-3900 45Once the unit is fully booted the default IAP LED display will be as follows:zIAP radio LEDs that are enabled will show a steady orange for 802.11a radios, or green for 802.11b/g radios.zOnce a client associates with an individual IAP, that LED will show a slow flash (heartbeat) pattern.zWhen data is transmitted or received by an IAP, that IAP’s LED will flash. The rate of flashing changes with the number of packets sent or received per second—the LED will flash more quickly with a greater number of packets per second and more slowly with lower numbers of packets per second.These settings may be altered or disabled entirely for diagnostic purposes or for personal preference. Changes are made via the array’s Command Line Interface or the Web Management Interface—refer to “IAP LED Settings” on page 88.Figure 31. WMI: IAP LED Settings Page
Wireless LAN Array46 Installing the XS-3900Establishing Communication with the ArrayThe XS-3900 can be configured through the Command Line Interface (CLI) or the graphical Web Management Interface (WMI). You can use the CLI via the serial management port, the Fast Ethernet port, or either of the Gigabit Ethernet ports. You can use the WMI via any of the array’s Ethernet ports.Figure 32. Network Interface PortsUsing the Serial PortIf using the serial port to make your connection, use serial settings of 8 bits, no parity, 1 stop bit (8N1) and a speed setting of 115200 baud. Use the communication package of your choice.Using the Ethernet PortsIf the array is booted and does not receive DHCP addresses on either the Fast Ethernet or Gigabit Ethernet ports, the Fast Ethernet port will default to an IP address of 10.0.0.1 and both Gigabit Ethernet ports will default to 10.0.1.2.If the array is connected to a network that provides DHCP addresses, the IP address can be determined by the following two methods:1. Examine the DHCP tables on the server and find the addresses assigned to the array (Xirrus MAC addresses begin with 000F7D).2. Query the array using the CLI via the serial port. Use the show summary ethernet command to view the IP addresses assigned to each port.Logging InWhen logging in to the array, use the default user name and password (the default for both is admin).SerialFast EthernetGigabit 1Gigabit 2
Wireless LAN ArrayInstalling the XS-3900 47Performing the Express Setup ProcedureThe Express Setup procedure allows you to establish global configuration settings that will enable basic XS-3900 functionality. Any changes you make on this page will affect all radios. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 33. WMI: Express Setup Page (Part 1)more ...
Wireless LAN Array48 Installing the XS-3900Figure 34. WMI: Express Setup Page (Part 2)Procedure for Performing an Express Setup1. Host Name: Specify a unique host name for this XS-3900 unit. The host name is used to identify the XS-3900 on the network. Use a name that will be meaningful within your network environment, up to 64 alphanumeric characters.2. Location Information: Enter a brief but meaningful description that accurately defines the physical location of this XS-3900 unit. In an environment where multiple units are installed, clear definitions for their locations are important if you want to identify a specific unit.3. Admin Contact: Enter the name and contact information of the person who is responsible for administering this XS-3900 unit at the designated location.4. Country of Operation: To ensure that the array remains in compliance with local regulatory laws, the Country of Operation is set at the factory and cannot be changed.5. IAP Status: This option provides a button that allows you to enable all radios. Simply click on the Enable All Radios button to enable all radios for this Wireless LAN Array.... continued
Wireless LAN ArrayInstalling the XS-3900 496. Configure the Fast Ethernet, Gigabit 1 and Gigabit 2 network interfaces. The fields for each of these interfaces are the same, and include:a. MAC Address: This field displays the hardware MAC address for the network interface and cannot be changed.b. Enable Interface: Choose Yes to enable this network interface, or choose No to disable the interface.c. Allow Management on Interface: Choose Yes to allow management of the array via this network interface, or choose No to deny all management privileges for this interface.d. Configuration Server Protocol: Choose DHCP to instruct the array to use DHCP to assign IP addresses to the array’s Ethernet interfaces, or choose Static IP if you intend to enter IP addresses manually. If you choose the Static IP option, you must enter the following information:zIP Address: Enter a valid IP address for this array. To use any of the remote connections (Web, SNMP, or SSH), a valid IP address must be used.zIP Subnet Mask: Enter a valid IP address for the subnet mask (the default is 255.255.255.0). The subnet mask defines the number of IP addresses that are available on the routed subnet where the array is located.zDefault Gateway: Enter a valid IP address for the default gateway. This is the IP address of the router that the array uses to forward data to other networks.7. SSID (Wireless Network Name): Enter a unique SSID, up to 32 characters. The SSID (Service Set Identifier) is a unique name that identifies a wireless network. All devices attempting to connect to a specific WLAN must use the same SSID. The default is “xirrus.”For additional information about SSIDs, go to the Multiple SSIDs section of “Frequently Asked Questions” on page 186.
Wireless LAN Array50 Installing the XS-39008. Wireless Security: Select the desired wireless security scheme (WEP or WPA). Make your selection from the choices available in the pull-down list.WEP (Wired Equivalent Privacy)An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. WEP generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers.WPA (Wi-Fi Protected Access)A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP or AES as an encryption method and 802.1X for authentication. WPA is the stronger of the two wireless security schemes.For more information about security, including a full review of all security options and settings, go to “Security Management” on page 98.9. Wireless Key/Passphrase: Depending on the wireless security scheme you selected, enter a unique WEP key or WPA passphrase.a. Confirm Key/Passphrase: If you entered a WEP key or WPA passphrase, confirm it here.10. New Admin Password: If desired, enter a new administration password for managing this array. Choose a password that is not obvious, and one that you can remember. If you forget your password, you must reset the array to its factory defaults so that the password is reset to admin (its default setting).a. Confirm Admin Password: If you entered a new administration password, confirm the new password here.#Security settings will only take effect if they are assigned to a specific SSID. Refer to “SSID Management” on page 92.
Wireless LAN ArrayInstalling the XS-3900 5111. Adjust Time (hrs:min:sec): Check this box if you want to adjust the current system time. When the box is checked, the time fields become active. Enter the revised time (hours, minutes, seconds, am/pm) in the corresponding fields. If you don’t want to adjust the current time, this box should be left unchecked (default).12. Adjust Date (day/month/year): Check this box if you want to adjust the current system date. When the box is checked, the date fields become active. Enter the revised date (day, month, year) in the corresponding fields. If you don’t want to adjust the current date, this box should be left unchecked (default).13. Auto Adjust Daylight Savings: Check this box if you want the system to adjust for daylight savings automatically, otherwise leave this box unchecked (default).14. Use NTP (IP Address): Check this box if you want to use an NTP (Network Time Protocol) server to synchronize the array’s clock. This ensures that syslog time-stamping is maintained across all units. Without an NTP server assigned (no universal clock), each array will use its own internal clock and stamp times accordingly, which may result in discrepancies. When this box is checked, the NTP and NTP 2 IP address fields become active. If you don’t want to use an NTP server, leave this box unchecked (default), otherwise enter the IP address or DNS name of the NTP server.Figure 35. Enabling the NTP Featurea. NTP 2 (IP Address): If you enabled the NTP option and the site is using a secondary NTP server, enter the IP address or DNS name of the secondary NTP server.NTP enabled
Wireless LAN Array52 Installing the XS-390015. Click on the Apply button to apply the new settings to this session16. Click on the Save button to save your changes (otherwise your new settings will not take effect).This ends the Express Setup procedure.
Wireless LAN ArrayThe Web Management Interface 53The Web Management InterfaceThis chapter provides an overview of the XS-3900’s embedded Web Management Interface (WMI), used for establishing your network’s configuration settings and wireless operating parameters. Section headings for this chapter include:zAn OverviewAn OverviewThe WMI is an easy-to-use graphical interface to your XS-3900. It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively.Figure 36. Web Management Interface
Wireless LAN Array54 The Web Management InterfaceContentThe content of the WMI has been organized by function and hierarchy, shown here in list form. You can click on any item in the list to jump to the referenced destination.Array StatusExpress SetupNetwork InterfacesNetwork SettingsVLAN SettingsNetwork StatisticsDHCP Server SettingsDNS SettingsIAP InterfacesIAP SettingsGlobal SettingsGlobal Settings .11aGlobal Settings .11bgIAP LED SettingsSSID ManagementCreate SSIDEdit SSIDSecuritySecurity ManagementRadius ServerRadius UserMAC Access ListCreate AdminEdit AdminUsersServicesSystem LogSNMPSoftwareToolsEvent Log
Wireless LAN ArrayThe Web Management Interface 55StructureThe WMI has been designed with simplicity in mind, making navigation quick and easy. In the following example, you’ll see that pages are divided into left and right frames. The left frame contains configuration elements organized by function (for example, radio interfaces, security, etc.), and where these functions are sub-divided there is an associated pull-down menu. Also included in the left frame are three counters that provide a running total of messages generated by the syslog subsystem during your session—organized into Critical, Warning and Event messages.Figure 37. WMI: FramesThe right frame contains the configuration parameters for the XS-3900. This is where you input data (if you want to make changes) or review the XS-3900’s current status and activity.Left frame Right frameMessage countersPull-down menu
Wireless LAN Array56 The Web Management InterfaceStatus BarBelow the configuration frames you will find a status bar containing information about this XS-3900 unit, including:zLocation—displays the location information assigned to the unit.zHost name—the host name assigned to this unit.zNetwork interface IP address—the IP address of the network interface that is currently being used.Also included in the status bar is a Print button and a Help button. Click on the Print button to send a print file of the active page to your local printer, or click on the Help button to go to the XS-3900’s online help system.Figure 38. WMI: Status BarApplying Configuration ChangesWhen you have defined all your settings on any WMI configuration page, you must click on the Apply button for the changes to take effect in the current session. Click on the Save button to write your changes (for future sessions).Character RestrictionsWhen inputting strings in the WMI (for example, assigning SSIDs, host name, password, etc.), use only common alphanumeric characters. Do not use any of the following characters:&<>' “/ \Status informationPrint buttonHelp button
Wireless LAN ArrayConfiguring the XS-3900 57Configuring the XS-3900This chapter covers configuration and management tasks using the product’s embedded Web Management Interface (WMI). It also includes a procedure for logging in to the XS-3900 with your Web browser. Section headings for this chapter include:zLogging InzMaking Configuration Changes to the XS-3900Logging InUse this procedure to log in to the WMI via your Web browser.1. Establish a network connection and open your Web browser.2. Connect to the XS-3900 via its default IP address (10.0.1.1).3. When connected to the XS-3900, a login prompt appears on your screen. The default login user name and password is admin (for both). Login names and passwords are case-sensitive.4. To log in to the XS-3900’s Web Management Interface, enter admin when prompted for a user name and password.Figure 39. WMI: Logging In to the XS-3900
Wireless LAN Array58 Configuring the XS-3900Making Configuration Changes to the XS-3900This section has been organized into functional areas that reflect the flow and content of the WMI. Configuration instructions to the XS-3900 require you to input data in one or more of the following formats:zSpecifying data (for example, IP addresses, descriptions, etc.).zMaking selections from pull-down lists.zChoosing an option by clicking on a radio button (for example, on/off).zClicking on a check box to activate/deactivate a feature.zClicking on a button to confirm a command or apply your changes.Array StatusThis is a status only page that provides a snapshot of the global configuration settings for all XS-3900 network interfaces and radios. You must go to the appropriate configuration page to make changes to any of the settings displayed here (configuration changes cannot be made from this page).Figure 40. WMI: Array Status Page
Wireless LAN ArrayConfiguring the XS-3900 59The Array Status page is sub-divided into the Network Interface and IAP Interface (radio) sections and provides you with the following information:zAll devices: A listing of the available Network Interfaces and IAPs with each item containing a link to the associated configuration page. Linked items are shown UNDERLINED. For example:Figure 41. Linked ItemszAll devices: The current status of each device, whether enabled or disabled. Devices that are disabled are shown in RED. For example:Figure 42. WMI: Disabled Device (Partial View)zNetwork Interface devices:zThe Management column indicates whether the network interface device is enabled or disabled. Network interfaces are enabled or disabled on the Network Settings page.zThe Configuration column shows how each network interface obtains its IP address—either dynamically via DHCP or entered manually by you (static configuration) on the Network Settings page.These items are linkedDisabled devices are shown in RED
Wireless LAN Array60 Configuring the XS-3900zThe IP Address column shows the current IP address being used by each network interface device.zIAP Interface devices:zThe Channel column shows on which channel each IAP (radio) is operating. Channel selections are made on the IAP Settings page from a pull-menu. To avoid co-channel interference, adjacent radios should not be using adjacent channels.zThe Cell Size column indicates which cell size setting is currently active for each radio—either small, medium, large or manually defined by you. The cell size of a radio is a function of its transmit power and determines the radio’s overall coverage. Cell sizes are defined on the IAP Settings page. For additional information about cell sizes and the importance of planning for and defining the optimum sizes for your array, go to “Coverage and Capacity Planning” on page 21.Figure 43. IAP CellszThe Associated Users column informs you how many users are currently associated with each radio. The high-capacity XS-3900 can handle up to 64 concurrent users per individual IAP radio (or 960 users per array).
Wireless LAN ArrayConfiguring the XS-3900 61Express SetupThis page allows you to establish global configuration settings that will enable basic XS-3900 functionality. Any changes you make on this page will affect all radios. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 44. WMI: Express Setup Page (Part 1)more ...
Wireless LAN Array62 Configuring the XS-3900Figure 45. WMI: Express Setup Page (Part 2)Procedure for Performing an Express Setup1. Host Name: Specify a unique host name for this XS-3900 unit. The host name is used to identify the XS-3900 on the network. Use a name that will be meaningful within your network environment, up to 64 alphanumeric characters.2. Location Information: Enter a brief but meaningful description that accurately defines the physical location of this XS-3900 unit. In an environment where multiple units are installed, clear definitions for their locations are important if you want to identify a specific unit.3. Admin Contact: Enter the name and contact information of the person who is responsible for administering this XS-3900 unit at the designated location.4. Country of Operation: To ensure that the array remains in compliance with local regulatory laws, the Country of Operation is set at the factory and cannot be changed.5. IAP Status: This option provides a button that allows you to enable all radios. Simply click on the Enable All Radios button to enable all radios for this Wireless LAN Array.... continued
Wireless LAN ArrayConfiguring the XS-3900 636. Configure the Fast Ethernet, Gigabit 1 and Gigabit 2 network interfaces. The fields for each of these interfaces are the same, and include:a. MAC Address: This field displays the hardware MAC address for the network interface and cannot be changed.b. Enable Interface: Choose Yes to enable this network interface, or choose No to disable the interface.c. Allow Management on Interface: Choose Yes to allow management of the array via this network interface, or choose No to deny all management privileges for this interface.d. Configuration Server Protocol: Choose DHCP to instruct the array to use DHCP to assign IP addresses to the array’s Ethernet interfaces, or choose Static IP if you intend to enter IP addresses manually. If you choose the Static IP option, you must enter the following information:zIP Address: Enter a valid IP address for this array. To use any of the remote connections (Web, SNMP, or SSH), a valid IP address must be used.zIP Subnet Mask: Enter a valid IP address for the subnet mask (the default is 255.255.255.0). The subnet mask defines the number of IP addresses that are available on the routed subnet where the array is located.zDefault Gateway: Enter a valid IP address for the default gateway. This is the IP address of the router that the array uses to forward data to other networks.7. SSID (Wireless Network Name): Enter a unique SSID, up to 32 characters. The SSID (Service Set Identifier) is a unique name that identifies a wireless network. All devices attempting to connect to a specific WLAN must use the same SSID. The default is “xirrus.”For additional information about SSIDs, go to the Multiple SSIDs section of “Frequently Asked Questions” on page 186.
Wireless LAN Array64 Configuring the XS-39008. Wireless Security: Select the desired wireless security scheme (WEP or WPA). Make your selection from the choices available in the pull-down list.WEP (Wired Equivalent Privacy)An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. WEP generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers.WPA (Wi-Fi Protected Access)A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP or AES as an encryption method and 802.1X for authentication. WPA is the stronger of the two wireless security schemes.For more information about security, including a full review of all security options and settings, go to“Security Management” on page 98.9. Wireless Key/Passphrase: Depending on the wireless security scheme you selected, enter a unique WEP key or WPA passphrase.a. Confirm Key/Passphrase: If you entered a WEP key or WPA passphrase, confirm it here.10. New Admin Password: If desired, enter a new administration password for managing this array. Choose a password that is not obvious, and one that you can remember. If you forget your password, you must reset the array to its factory defaults so that the password is reset to admin (its default setting).a. Confirm Admin Password: If you entered a new administration password, confirm the new password here.11. Adjust Time (hrs:min:sec): Check this box if you want to adjust the current system time. When the box is checked, the time fields become active. Enter the revised time (hours, minutes, seconds, am/pm) in the corresponding fields. If you don’t want to adjust the current time, this box should be left unchecked (default).
Wireless LAN ArrayConfiguring the XS-3900 6512. Adjust Date (day/month/year): Check this box if you want to adjust the current system date. When the box is checked, the date fields become active. Enter the revised date (day, month, year) in the corresponding fields. If you don’t want to adjust the current date, this box should be left unchecked (default).13. Auto Adjust Daylight Savings: Check this box if you want the system to adjust for daylight savings automatically, otherwise leave this box unchecked (default).14. Use NTP (IP Address): Check this box if you want to use an NTP (Network Time Protocol) server to synchronize the array’s clock. This ensures that syslog time-stamping is maintained across all units. Without an NTP server assigned (no universal clock), each array will use its own internal clock and stamp times accordingly, which may result in discrepancies. When this box is checked, the NTP and NTP 2 IP address fields become active. If you don’t want to use an NTP server, leave this box unchecked (default), otherwise enter the IP address or DNS name of the NTP server.Figure 46. Enabling the NTP Featurea. NTP 2 (IP Address): If you enabled the NTP option and the site is using a secondary NTP server, enter the IP address or DNS name of the secondary NTP server.15. Click on the Apply button to apply the new settings to this session16. Click on the Save button to save your changes (otherwise your new settings will not take effect).This ends the Express Setup procedure.NTP enabled
Wireless LAN Array66 Configuring the XS-3900Network InterfacesThis is a status only page that provides a snapshot of the configuration settings currently established for the 10/100 Fast Ethernet interface and the 10/100/1000 Gigabit 1 and Gigabit 2 interfaces. You must go to the appropriate configuration page to make changes to any of the settings displayed here (configuration changes cannot be made from this page).You can click on any item in the Interface column to “jump” to the associated configuration page.Figure 47. WMI: Network Interfaces PageWMI pages that allow you to change or view configuration settings associated with the network interfaces include:z“Network Settings” on page 67.z“VLAN Settings” on page 71.z“Network Statistics” on page 74.z“DHCP Server Settings” on page 75.z“DNS Settings” on page 76.
Wireless LAN ArrayConfiguring the XS-3900 67Network SettingsThis page allows you to establish configuration settings for the 10/100 Fast Ethernet interface and the 10/100/1000 Gigabit 1 and Gigabit 2 interfaces.When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 48. WMI: Network Settings Page (Part 1)#Gigabit 2 settings will “mirror” Gigabit 1 settings (except for MAC addresses) and cannot be configured separately.more ...
Wireless LAN Array68 Configuring the XS-3900Figure 49. WMI: Network Settings Page (Part 2)Network Interface PortsThe following diagram shows the location of each network interface port on the underside of the XS-3900.Figure 50. Network Interface Ports... continuedSerialFast EthernetGigabit 1Gigabit 2
Wireless LAN ArrayConfiguring the XS-3900 69Procedure for Configuring the Network Interfaces1. Configure the Fast Ethernet, Gigabit 1 and Gigabit 2 network interfaces. The fields for each of these interfaces are the same, and include:a. MAC Address: This field shows the MAC address for this array. The MAC (hardware) address is used to identify the Xirrus array to the wired network. The MAC address is a static value and cannot be changed.b. Enable Interface: Choose Yes to enable this network interface (Fast Ethernet, Gigabit 1 or Gigabit 2), or choose No to disable the interface.c. Allow Management on Interface: Choose Yes to allow management of this array via the selected network interface, or choose No to deny all management privileges for this interface.d. Auto Negotiate: This feature allows the array to negotiate the best transmission rates automatically. Choose Yes to enable this feature, or choose No to disable this feature—the default is enabled. If you disable the Auto Negotiate feature, you must define the Duplex and Speed options manually (otherwise these options are not available).zDuplex: Full-duplex refers to the transmission of data in two directions simultaneously (for example, a telephone is a full-duplex device because both parties can talk and be heard at the same time). In contrast, half-duplex allows data transmission in one direction at a time only (for example, a walkie-talkie is a half-duplex device because it allows only one party to talk at any one time). If the Auto-Negotiate feature is disabled, you can manually choose Half or Full duplex for your data transmission preference.zSpeed: If the Auto-Negotiate feature is disabled, you can manually choose the desired data transmission speed from the pull-down list, either Fast Ethernet or Gigabit.
Wireless LAN Array70 Configuring the XS-3900e. MTU Size: Specify the MTU (Maximum Transmission Unit) size. When you specify the MTU, you are defining—in bytes—the largest physical packet size that the network can transmit. Any messages larger than the MTU that you specify here are divided into smaller packets before being sent. The default is 1000 bytes.f. Encapsulation: Choose either dot1H (802.1H) or snap (SNAP) as the Ethernet encapsulation type.g. Configuration Server Protocol: Choose DHCP to instruct the XS-3900 to use DHCP when assigning IP addresses to the array, or choose Static IP if you intend to enter IP addresses manually.zIP Address: If you selected the Static IP option, enter a valid IP address for this XS-3900 unit. To use any of the remote connections (Web, SNMP, or SSH), a valid IP address must be established.zIP Subnet Mask: If you selected the Static IP option, enter a valid IP address for the subnet mask (the default for Class C is 255.255.255.0). The subnet mask defines the number of IP addresses that are available on the routed subnet where the XS-3900 is located.zDefault Gateway: If you selected the Static IP option, enter a valid IP address for the default gateway. This is the IP address of the router that the XS-3900 uses to transmit data to other networks.2. Click on the Apply button to apply the new settings to this session.3. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN ArrayConfiguring the XS-3900 71VLAN SettingsThis page allows you to add or remove VLANs, associate VLANs to a specific network interface, and enable VLAN tagging of outgoing traffic. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 51. WMI: VLAN Settings PageUnderstanding VLANsA VLAN (Virtual LAN) is a switch network that is logically segmented—by functions, project teams, or applications rather than on a physical or geographical basis. For example, all workstations and servers used by a particular workgroup team can be connected to the same VLAN, regardless of their physical connections to the network, or the fact that they might be intermingled with other teams. You use VLANs to reconfigure the network through software rather than physically unplugging and moving devices or wires.A VLAN can be thought of as a broadcast domain that exists within a defined set of switches. A VLAN consists of a number of end systems, either hosts or network equipment (for example, bridges and routers), connected by a single bridging domain.
Wireless LAN Array72 Configuring the XS-3900The bridging domain is supported on various pieces of network equipment, such as LAN switches, that operate bridging protocols between them with a separate group for each VLAN.VLANs provide the segmentation services traditionally provided by routers in LAN configurations. VLANs address scalability, security, and network management. You should consider several key issues when designing and building switched LAN networks:zLAN segmentationzSecurityzBroadcast controlzPerformancezNetwork managementzCommunication between VLANsYou extend VLANs into a wireless LAN by adding IEEE 802.11Q tag awareness to the Xirrus array. Frames destined for different VLANs are transmitted by the array wirelessly on different SSIDs. Conversely, packets coming from a client associated with a certain VLAN are 802.11Q tagged before they are forwarded onto the wired network.Procedure for Configuring VLANs1. New VLAN ID: Enter a new VLAN ID number (between 0 and 4012) that matches your network’s VLAN scheme.2. VLAN Description: Enter a meaningful description for this VLAN.3. Tag Outgoing: Check this box if you want to enable VLAN tagging of outgoing traffic.4. Network Interface: Select the interface you want to associate to this VLAN. Make your selection from the choices available in the pull-down list—either Fast Ethernet, Gigabit 1 or Gigabit 2.
Wireless LAN ArrayConfiguring the XS-3900 735. VLAN Management: This list shows the VLANs that are currently assigned to the array. Each time you create a VLAN, the new VLAN is listed here. To delete a VLAN, select the VLAN from the list and click on the Delete VLAN button.6. Click on the Apply button to apply the new settings to this session.7. Click on the Save button to save your changes (otherwise your new settings will not take effect).8. VLANs you defined can now be assigned to specific SSIDs.
Wireless LAN Array74 Configuring the XS-3900Network StatisticsThis is a status only page that allows you to review statistical data associated with each network interface and its activity. You can Refresh the data (update the page with the latest information) or Clear the data (reset all content to zero and begin counting again) at any time by clicking on the appropriate button. If you are experiencing problems, you may also want to print this page for your records.Figure 52. WMI: Network Statistics Page
Wireless LAN ArrayConfiguring the XS-3900 75DHCP Server SettingsThis page allows you to enable/disable DHCP (Dynamic Host Configuration Protocol) server functionality. DHCP allows the array to provide wireless clients with IP addresses and other networking information. The DHCP server will not provide DHCP services to the wired side of the network.If you enable the DHCP server, you need to define the DHCP lease time (default and maximum) and establish the IP address range that the DHCP server can use. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 53. WMI: DHCP Settings PageProcedure for Configuring the DHCP Server1. Enable DHCP Server: Choose Yes to enable DHCP services, or choose No to disable DHCP services.2. Default Lease (seconds): This field defines the default DHCP lease time (in seconds). The factory default is 300 seconds, but you can change the default at any time.3. Maximum Lease (seconds): Enter a value (in seconds) to define the maximum allowable DHCP lease time. The default is 300 seconds.
Wireless LAN Array76 Configuring the XS-39004. Starting IP Range: Enter an IP address to define the start of the IP range that will be used by the DHCP server.5. End IP Range: Enter an IP address to define the end of the IP range that will be used by the DHCP server. The DHCP server will only use IP addresses that fall between the start and end range that you define on this page.6. Click on the Apply button to apply the new settings to this session.7. Click on the Save button to save your changes (otherwise your new settings will not take effect).DNS SettingsThis page allows you to establish your DNS (Domain Name System) settings. At least one DNS server must be set up if you want to offer clients associating with this XS-3900 the ability to use meaningful host names instead of numerical IP addresses. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 54. WMI: DNS Settings Page
Wireless LAN ArrayConfiguring the XS-3900 77Procedure for Configuring DNS Servers1. DNS Host Name: Enter a valid DNS host name.2. DNS Domain: Enter the DNS domain name.3. DNS Server 1: Enter the IP address of the primary DNS server.4. DNS Server 2: Enter the IP address of the secondary DNS server.5. DNS Server 3: Enter the IP address of the tertiary DNS server.6. Click on the Apply button to apply the new settings to this session.7. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN Array78 Configuring the XS-3900IAP InterfacesThis is a status only page that allows you to review configuration data associated with each Integrated Access Point (radio). It includes a list of which IAP radios are enabled, the channel that each radio is currently using, cell sizes, and how many users are currently associated with each radio. There are no configuration options available on this page, but if you are experiencing problems or simply reviewing the radio assignments, you may want to print this page for your records.You can click on any item in the IAP column to “jump” to the associated configuration page.Figure 55. WMI: IAP Interfaces Page
Wireless LAN ArrayConfiguring the XS-3900 79IAP SettingsThis page allows you to enable/disable Integrated Access Points (radios), define the wireless mode for each radio, specify the channel to be used and the cell size for each radio, establish transmit/receive parameters, and select antennas. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes. To see a diagram of the layout and naming of radios, go to Figure 6 on page 10.Figure 56. WMI: IAP Settings PageProcedure for Auto Configuring IAPs (Radios)You can auto-configure radios by clicking on the Auto Configure button on the relevant WMI page (auto configuration only applies to enabled radios):zFor all radios, go to the Global Settings page.zFor all 802.11a radios, go to the Global Settings .11a page.zFor all 802.11b/g radios, go to the Global Settings .11bg page.
Wireless LAN Array80 Configuring the XS-3900Procedure for Manually Configuring IAPs (Radios)1. In the Enabled column, check the box of a corresponding radio to enable the radio, or uncheck the box if you want to disable the radio.2. In the Mode column, select the wireless mode for this radio from the choices available in the pull-down menu (either .11a or .11b/g).3. In the Channel column, select the channel you want this radio to use from the channels available in the pull-down list.The sample pull-down list shown here is for the abg2 radio with its mode set to .11b/g. Any channels appearing in the list that are shown in RED are not recommended.4. In the Cell Size column, choose either Small, Medium, or Large to define the desired pre-configured cell size, or choose Manual to define the wireless cell size manually. If you choose Manual, you must specify the transmit and receive power—in dB—in the Tx Power dB (transmit) and Rx dB (receive) fields.The number of users and their applications are major drivers of bandwidth requirements. The network architect must account for the number of users within the XS-3900’s cell diameter.In a large office, or where user density is high, you should choose Small cells to achieve a higher data rate, since walls and other objects will not define the cells naturally.For additional information about cell sizes, go to “Coverage and Capacity Planning” on page 21.
Wireless LAN ArrayConfiguring the XS-3900 815. In the Antenna Select column, choose the antenna you want this radio to use from the pull-down list. The list of available antennas will be different, depending on the wireless mode you selected for the radio.The sample pull-down list shown here is for an 11a radio. In cases where the configuration of the array limits the antenna choice (for example, if no external antenna is available), the Antenna Select column is greyed out.6. Click on the Apply button to apply the new settings to this session.7. Click on the Save button to save your changes (otherwise your new settings will not take effect at the next reboot).
Wireless LAN Array82 Configuring the XS-3900Global SettingsThis page allows you to establish global IAP (radio) settings. Global IAP settings include enabling or disabling all radios (regardless of their operating mode), auto-configuring channel allocations, enabling or disabling the Beacon World Mode and EDCF, specifying the short and long retry limits, and defining the beacon interval and DTIM period. Changes you make on this page are applied to all IAPs (radios), without exception.Figure 57. WMI: Global Settings PageProcedure for Configuring Global IAP Settings1. IAP Status: Click on the Enable All IAPs button to enable all radios for this array, or click on the Disable All IAPs button to disable all radios.2. Channel Configuration: Click on the Auto Configure button to instruct the array to determine the best channel allocation settings for each radio and select the channel automatically, based on changes in the environment. This is the recommended method for channel allocations.
Wireless LAN ArrayConfiguring the XS-3900 833. Beacon World Mode: World Mode is a feature based on 802.11d. When this feature is enabled, the XS-3900 beacons out to client devices the correct legal set of channels and transmit power settings for the defined country code. This feature eliminates concerns about misconfigured client adapters because they will automatically know the correct channel set when communicating with the XS-3900. To enable the Beacon World Mode feature, choose Yes, or choose No to disable this feature. The default is disabled.4. Enable EDCF: This feature allows for enhanced packet transmissions per IEEE 802.11e specifications and can improve throughput. Choose Yes to enable EDCF, or choose No to disable this feature.5. Short Retry Limit: This attribute indicates the maximum number of transmission attempts for a frame, the length of which is less than or equal to the RTS Threshold, before a failure condition is indicated. The default value is 7. Enter a new value (1 to 128) in the Short Retry Limit field if you want to increase or decrease this attribute.6. Long Retry Limit: This attribute indicates the maximum number of transmission attempts for a frame, the length of which is greater than the RTS Threshold, before a failure condition is indicated. The default value is 4. Enter a new value (1 to 128) in the Long Retry Limit field if you want to increase or decrease this attribute.7. Beacon Interval: When the XS-3900 sends a beacon, it includes with it a beacon interval, which specifies the period of time before it will send the beacon again. Enter the desired value in the Beacon Interval field, between 20 and 1000. The value you enter here is applied to all radios.
Wireless LAN Array84 Configuring the XS-39008. DTIM Period: A DTIM (Delivery Traffic Indication Message) is a signal sent as part of a beacon by the XS-3900 to a client device in sleep mode, alerting the device to a packet awaiting delivery. Enter the desired value in the DTIM Period field, between 1 and 255. The value you enter here is applied to all radios.9. Click on the Apply button to apply the new settings to this session.10. Click on the Save button to save your changes (otherwise your new settings will not take effect).Global Settings .11aThis page allows you to establish global 802.11a IAP (radio) settings. These settings include enabling or disabling 802.11a radios and making the data rates a required parameter, enabling or disabling all 802.11a radios, auto-configuration of channel allocations for all 802.11a radios, and specifying the fragmentation and RTS thresholds for all 802.11a radios.Figure 58. WMI: Global Settings .11a Page
Wireless LAN ArrayConfiguring the XS-3900 85Procedure for Configuring Global 802.11a IAP Settings1. 802.11a Data Rates: The arrays allow you to enable or disable specific data rates for all 802.11a radios.zEnabled: Allow use of this data rate.zRequired: Clients must support this data rate to associate with the network.In addition, you can make a specific data rate (for example, 12 Mbps) a required data rate, which means the 802.11a radios are required to support this data rate.2. .11a IAP Status: Click on the Enable 802.11a IAPs button to enable all 802.11a radios for this array, or click on the Disable 802.11a IAPs button to disable all 802.11a radios.3. Channel Configuration: Click on the Auto Configure button to instruct the array to determine the best channel allocation settings for each 802.11a radio and select the channel automatically, based on changes in the environment. This is the recommended method for 802.11a channel allocations.4. Fragmentation Threshold: This is the maximum size for directed data packets transmitted over the 802.11a radio. Larger frames fragment into several packets, their maximum size defined by the value you enter here. Enter the desired Fragmentation Threshold value in this field, between 256 and 2346).5. RTS Threshold: The RTS (Request To Send) Threshold specifies the packet size. Packets larger than the RTS threshold will use CTS/RTS prior to transmitting the packet—useful for larger packets to help ensure the success of their transmission. Enter a value between 1 and 2347.6. Click on the Apply button to apply the new settings to this session.7. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN Array86 Configuring the XS-3900Global Settings .11bgThis page allows you to establish global 802.11a IAP (radio) settings. These settings include enabling or disabling 802.11a radios and making the data rates a required parameter, enabling or disabling all 802.11a radios, auto-configuration of channel allocations for all 802.11a radios, and specifying the fragmentation and RTS thresholds for all 802.11a radios.Figure 59. WMI: Global Settings .11bg PageProcedure for Configuring Global 802.11b/g IAP Settings1. 802.11g Data Rates: The arrays allow you to enable or disable specific data rates for all 802.11g radios.zEnabled: Allow use of this data rate.zRequired: Clients must support this data rate to associate with the network.In addition, you can make a specific data rate (for example, 12 Mbps) a required data rate, which means the 802.11a radios are required to support this data rate.
Wireless LAN ArrayConfiguring the XS-3900 872. 802.11b Data Rates: This task is similar to Step 1, but these data rates apply only to 802.11b radios.3. .11bg IAP Status: Click on the Enable 802.11b/g IAPs button to enable all 802.11b/g radios for this array, or click on the Disable 802.11b/g IAPs button to disable all 802.11b/g radios.4. Channel Configuration: Click on the Auto Configure button to instruct the array to determine the best channel allocation settings for each 802.11b/g radio and select the channel automatically, based on changes in the environment. This is the recommended method for 802.11b/g channel allocations.5. Fragmentation Threshold: This is the maximum size for directed data packets transmitted over the 802.11b/g radio. Larger frames fragment into several packets, their maximum size defined by the value you enter here. Enter the desired Fragmentation Threshold value in this field, between 256 and 2346).6. RTS Threshold: The RTS (Request To Send) Threshold specifies the packet size. Packets larger than the RTS threshold will use CTS/RTS prior to transmitting the packet—useful for larger packets to help ensure the success of their transmission. Enter a value between 1 and 2347.7. Click on the Apply button to apply the new settings to this session.8. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN Array88 Configuring the XS-3900IAP LED SettingsThis page allows you to set up the array’s IAP LEDs, including enabling or disabling the LED status functionality and assigning behavior preferences to the LEDs.Figure 60. WMI: IAP LED Settings PageProcedure for Configuring the IAP LEDs1. LED Status: Choose Enabled to enable LED status functionality, or choose Disabled to disable the LEDs.2. LED Trigger: This option determines which event triggers the LEDs, either when a radio is enabled or when a radio first associates with the network. Choose On Radio Enabled or On First Association, as desired.3. LED Blink Behavior: This option allows you to select when the IAP LEDs blink, based on the activities you check here. From the choices available, select one or more activities to trigger when the LEDs blink.
Wireless LAN ArrayConfiguring the XS-3900 89StatisticsThis is a status only page that provides an overview of the statistical data associated with individual radios. For more detailed information about a specific radio, simply click on any radio in the left column, or go to the statistics page for the desired radio (for example, Statistics IAP abg4). You can Refresh or Clear the data on this page at any time by clicking on the appropriate button. If you are experiencing problems, you may also want to print this page for your records.Figure 61. WMI: Statistics Page
Wireless LAN Array90 Configuring the XS-3900Statistics (for specific radios)These pages provide a detailed statistical summary of each radio’s performance, displayed either numerically or by percentage (your choice). The following image shows an example of the Statistics IAP abg3 page (for the abg3 radio). The default Statistics Type is NUMERIC, but you can change this to PERCENTAGE from the pull-down menu at the top of the page. In addition, you can Refresh or Clear the data on this page at any time by clicking on the appropriate button.Figure 62. WMI: Statistics IAP abg3 Page (Part 1)more ...
Wireless LAN ArrayConfiguring the XS-3900 91Figure 63. WMI: Statistics IAP abg3 Page (Part 2)... continued
Wireless LAN Array92 Configuring the XS-3900SSID ManagementThis is a status only page that allows you to review SSID (Service Set IDentifier) assignments. It includes the SSID name, whether or not an SSID is visible on the network, any security and QoS parameters defined for each SSID, associated VLAN IDs, and radio availability per SSID. There are no configuration options available on this page, but if you are experiencing problems or reviewing SSID management parameters, you may want to print this page for your records.For information to help you understand SSIDs and how multiple SSIDs are managed by the XS-3900, go to the Multiple SSIDs section of “Frequently Asked Questions” on page 186.Figure 64. WMI: SSID Management PageUnderstanding SSIDsThe SSID (Service Set Identifier) is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSIDs. SSIDs are case-sensitive and can contain up to 32 alphanumeric characters (do not include spaces when defining SSIDs).
Wireless LAN ArrayConfiguring the XS-3900 93Multiple SSIDsA BSSID (Basic SSID) refers to an individual access point radio and its associated clients. The identifier is the MAC address of the access point radio that forms the BSS. A group of BSSs can be formed to allow stations in one BSS to communicate to stations in another BSS by way of a backbone that interconnects each access point.The Extended Service Set (ESS) refers to the group of BSSIDs that are grouped together to form one ESS. The ESSID (often referred to as SSID or “wireless network name”) identifies the Extended Service Set. Clients must associate to a single ESS at any given time. Clients ignore traffic from other Extended Service Sets that do not have the same SSID.Legacy access points typically support one SSID per access point. Xirrus Wireless LAN Arrays support the ability for multiple SSIDs to be defined and used simultaneously.Using SSIDsThe creation of different wireless network names allows system administrators to separate types of users with different requirements. The following policies can be tied to an SSID:zMinimum security required to join this SSID.zThe wireless Quality of Service (QoS) desired for this SSID.zThe wired VLAN associated with this SSID.As an example, one SSID named accounting might require the highest level of security, while another SSID named guests might have low security requirements.Another example may define an SSID named voice that supports voice over Wireless LAN phones with the highest possible Quality of Service (QoS) definition. This type of SSID might also forward traffic to specific VLANs on the wired network
Wireless LAN Array94 Configuring the XS-3900Create SSIDThis page allows you to create and manage SSIDs, and assign security parameters and VLANs on a per SSID basis. When finished, click on the Save button to save your changes, otherwise your changes will not take effect.Figure 65. WMI: Create SSID PageProcedure for Creating SSIDs1. New SSID: Enter a new SSID definition.2. Security: From the pull-down list, choose the security that will be required by users for this SSID, either Open, WEP or WPA. The Open option provides no security and is not recommended. For an overview of the security options, go to “Security Planning” on page 31.3. Qos Priority: From the pull-down list, select a Quality of Service (QoS) setting. The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID wireless traffic. This step is optional.4. VLAN ID: From the pull-down list, select a VLAN that you want this traffic to be forwarded to on the wired network. This step is optional.
Wireless LAN ArrayConfiguring the XS-3900 955. Click on the Create SSID button to create this SSID. The SSID you just created will appear in the SSID List on the Edit SSID page.6. Click on the Save button to save your changes (otherwise your new settings will not take effect).Edit SSIDThis page allows you to edit existing SSIDs, and reassign security parameters and VLANs on a per SSID basis. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 66. WMI: Edit SSID PageProcedure for Editing or Deleting SSIDs1. SSID: Choose the SSID that you want to edit or delete from the list. If you are deleting a selected SSID, click on the Delete SSID button, otherwise go to Step 2.2. Public SSID: Click on the Assign Public button to make the selected SSID visible to all clients on the network. Although the XS-3900 will not broadcast SSIDs that are hidden, clients can still associate to a hidden SSID if they know the SSID name to connect to it. Choose No if you do not want this SSID to be visible on the network.
Wireless LAN Array96 Configuring the XS-39003. Security: From the pull-down list, choose the security that will be required by users for the selected SSID—either Open, WEP or WPA. The Open option provides no security and is not recommended. For an overview of the security options, go to “Security Planning” on page 31.4. QoS Priority: From the pull-down list, select a Quality of Service (QoS) setting. The QoS setting you define here will prioritize wireless traffic for the selected SSID over other SSID wireless traffic. This step is optional.5. VLAN ID: From the pull-down list, select a VLAN that you want this traffic to be forwarded to on the wired network. This step is optional.6. Click on the Apply button to apply the new settings to this session.7. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN ArrayConfiguring the XS-3900 97SecurityThis is a status only page that allows you to review the array’s security parameters. It includes the assigned network administration accounts, Access Control List (ACL) values, WEP and WPA status, and RADIUS configuration settings. There are no configuration options available on this page, but if you are experiencing issues with security, you may want to print this page for your records.For additional information about wireless network security, refer to:z“Security Planning” on page 31.zThe Security section of “Frequently Asked Questions” on page 186.Figure 67. WMI: Security Page
Wireless LAN Array98 Configuring the XS-3900Security ManagementThis page allows you to establish the security parameters for your wireless network, including WEP, WPA and RADIUS authentication. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.For additional information about wireless network security, refer to “Security Planning” on page 31.Figure 68. WMI: Security Management PageUnderstanding SecurityThe Xirrus Wireless LAN Array incorporates many security features that administrators can configure. After initially installing an array, always change the default administrator password (the default is admin), and choose a strong replacement password (a strong password contains letters, numbers and special characters). When appropriate, issue read only administrator accounts.
Wireless LAN ArrayConfiguring the XS-3900 99Other security considerations include:zSSH versus Telnet: Be aware that Telnet is not secure over network connections and should be used only with a direct serial port connection. When connecting to the unit’s Command Line Interface over a network connection, you must use a Secure SHell (SSH) utility. The most commonly used freeware providing SSH tools is PuTTY.zConfiguration auditing: The optional Xirrus Wireless Management System (XM-3300) offers powerful management features for small or large XS-3900 deployments, and can audit your configuration settings automatically. In addition, using the XM-3300 eliminates the need for an FTP server.zChoosing an encryption method: Wireless data encryption prevents eavesdropping on data being transmitted or received over the airwaves. The XS-3900 allows you to establish the following data encryption configuration options:zOpen—this option offers no data encryption and is not recommended, though you might choose this option if clients are required to use a VPN connection through a secure SSH utility, like PuTTy.zWEP (Wired Equivalent Privacy)—this option provides minimal protection (though much better than using an open network). An early standard for wireless data encryption and supported by all Wi-Fi certified equipment, WEP is vulnerable to hacking and is therefore not recommended for use by Enterprise networks.zWPA (Wi-Fi Protected Access)—this is a much stronger encryption model than WEP and uses TKIP (Temporal Key Integrity Protocol) with AES (Advanced Encryption Standard) to prevent WEP cracks.TKIP solves security issues with WEP. It also allows you to establish encryption keys on a per-user-basis, with key rotation for added security. In addition, TKIP provides Message Integrity Check (MIC) functionality and prevents active attacks on the wireless network.
Wireless LAN Array100 Configuring the XS-3900AES is the strongest encryption standard and is used by government agencies; however, old legacy hardware may not be capable of supporting the AES mode (it probably won’t work on older wireless clients). Because AES is the strongest encryption standard currently available, it is highly recommended for Enterprise networks.Any of the above encryption modes can be used, but only one may be used per SSID. If multiple security methods are needed, you must define multiple SSIDs.zChoosing an authentication method: User authentication ensures that users are who they say they are. For this purpose, the XS-3900 allows you to choose between the following user authentication methods:zPre-Shared Key—users must manually enter a key (passphrase) on the client side of the wireless network that matches the key stored by the administrator in the XS-3900.This method should be used only for smaller networks when a RADIUS server is unavailable. If PSK must be used, choose a strong passphrase containing at least 12 characters (20 is preferred). Always use a combination of letters, numbers and special characters. Never use English words separated by spaces.zRADIUS 802.1x with EAP—802.1x uses a RADIUS server to authenticate large numbers of clients, and can handle different EAP (Extensible Authentication Protocol) authentication methods, including EAP-TLS, EAP-TTLS and EAP-PEAP. The RADIUS server can be internal (provided by the XS-3900) or external. An external RADIUS server offers more functionality and security, and is recommended for large deployments. When using this method, user names and passwords must be entered into the RADIUS server for user authentication.The XS-3900 will accept up to 512 ACL entries.
Wireless LAN ArrayConfiguring the XS-3900 101zMAC Address ACLs (Access Control Lists)—MAC address ACLs provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network. Access Control Lists work well when there are a limited number of users—in this case, enter the MAC addresses of each user in the Allow list. In the event of a lost or stolen MAC adapter, enter the affected MAC address in the Deny list.Procedure for Configuring Network Security1. WPA Enabled: Choose Yes to enable WPA (Wi-Fi Protected Access), or choose No to disable WPA.2. TKIP Enabled: Choose Yes to enable TKIP (Temporal Key Integrity Protocol), or choose No to disable TKIP.3. AES Enabled: Choose Yes to enable AES (Advanced Encryption Standard), or choose No to disable AES.4. WPA Group Rekey Time (in seconds): Enter a value to specify the group rekey time (in seconds). The default is 600.5. PSK Authentication: Choose Yes to enable PSK (Pre-Shared Key) authentication, or choose No to disable PSK.6. WPA Preshared Key / Verify Key: If you enabled PSK, enter a passphrase here, then re-enter the passphrase to verify that you typed it correctly.7. EAP Authentication: Choose Yes to enable EAP (Extensible Authentication Protocol) or choose No to disable EAP.8. WEP Enabled: Choose Yes to enable WEP (Wired Equivalent Privacy) or choose No to disable WEP.#A RADIUS server must be defined to use EAP.
Wireless LAN Array102 Configuring the XS-39009. Key Length / Mode: If you enabled WEP, choose the desired key length (either 40 or 128) and the mode (either ASCII or Hex) from the pull-down lists. You must now provide the encryption key(s).a. Encryption Key 1 / Verify Key 1: Enter an encryption key of the length specified (either 40 or 128 characters), then re-enter the key to verify that you typed it correctly.b. Encryption Key 2 / Verify Key 2 (optional): If desired, enter a second encryption key, then re-enter the key to verify that you typed it correctly.c. Encryption Key 3 / Verify Key 3 (optional): If desired, enter a third encryption key, then re-enter the key to verify that you typed it correctly.d. Encryption Key 4 / Verify Key 4 (optional): If desired, enter a fourth encryption key, then re-enter the key to verify that you typed it correctly.10. Default Key: Choose which key you want to assign as the default key. Make your selection from the pull-down list.11. Click on the Apply button to apply the new settings to this session.12. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN ArrayConfiguring the XS-3900 103Radius ServerThis page allows you to set up the array’s internal RADIUS server, or define the use of an external RADIUS server for user authentication.When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 69. WMI: Radius Server PageProcedure for Configuring Radius Servers1. Radius Server Mode: Choose Internal if you want to use the XS-3900’s internal RADIUS server, or choose External to use an external RADIUS server.2. Primary IP Address: If you are using an external RADIUS server, enter the primary server’s IP address.3. Radius Primary Port Number: If you are using an external RADIUS server, enter the primary port number.#The internal RADIUS server will only authenticate wireless clients that want to associate to the array. This can be useful if an external RADIUS server is not available.
Wireless LAN Array104 Configuring the XS-39004. Secondary IP Address (optional): If desired, enter the secondary RADIUS server’s IP address.If the primary RADIUS server becomes off-line, the array will “failover” to the secondary RADIUS server (defined here).5. Radius Secondary Port Number: If desired, enter the secondary port number.6. Radius Timeout: Define the maximum idle time (in seconds) before the RADIUS session times out. The default is 600 seconds.7. Primary Shared Secret / Verify Secret: If you are using RADIUS, enter the primary shared secret, then re-enter the primary shared secret to verify that you typed it correctly.8. Secondary Shared Secret / Verify Secret: If you are using RADIUS, enter the secondary shared secret, then re-enter the secondary shared secret to verify that you typed it correctly.9. Click on the Apply button to apply the new settings to this session.10. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN ArrayConfiguring the XS-3900 105Radius UserThis page allows you to create, delete and manage local RADIUS user accounts. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 70. WMI: Radius User PageProcedure for Configuring Radius Users1. New User Name: Enter a new RADIUS user name.2. User Password: Enter a password for this user.3. Verify Password: Re-enter the user password to verify that you typed it correctly.4. SSID (Network Name): Choose an SSID from the pull-down list.5. Click on the Create User button to add this user to the list.
Wireless LAN Array106 Configuring the XS-39006. User Name: If you want to edit an existing RADIUS user account, choose the user from the pull-down list. You must now enter the user password and select an SSID.a. User Password: Enter the password of the user account you want to edit.b. Verify Password: Re-enter the password to verify that you typed it correctly.c. SSID (Network Name): Choose an SSID from the pull-down list.7. User Management: You can delete users by selecting the user from the list and clicking on the Delete User button.8. Click on the Save button to save your changes (otherwise your new settings will not take effect).MAC Access ListThis page allows you to create new MAC access lists, delete existing lists, and add/remove MAC addresses. When finished, click on the Save button to save your changes.Figure 71. WMI: MAC Access List Page
Wireless LAN ArrayConfiguring the XS-3900 107Procedure for Configuring MAC Access Lists1. MAC Access List Type: Select the MAC Access List type—either Disabled, Allow List or Deny List, then click on the Apply Edit button to apply your changes.zAllow List: Only allows these MAC addresses to associate to the array.zDeny List: Allows all MAC addresses except the addresses defined in this list.2. New MAC Address: If you want to add a MAC address to the ACL, enter the new MAC address here, then click on the Add MAC button. The MAC address is added to the ACL.3. MAC Access List Management: You can delete a MAC Access List by selecting the list you want to delete then clicking on the Delete ACL button.4. Click on the Save button to save your changes (otherwise your new settings will not take effect).#In addition to these lists, other authentication methods (for example, RADIUS) are still enforced for users.
Wireless LAN Array108 Configuring the XS-3900Create AdminThis page allows you to create and manage network administrator accounts. It also allows you to limit account access to a read only status. When finished, click on the Save button to save your changes.Figure 72. WMI: Create/Delete Admin PageProcedure for Creating Network Administrator Accounts1. New Admin ID: Enter a meaningful description for this new network administrator ID.2. Read Only: Choose Yes to restrict this administrator ID to read only status, or choose No if you want to give this administrator ID full read/write privileges. In the read only mode, administrators cannot save changes to configurations.3. Admin Password: Enter a password for this ID.4. Verify Password: Re-enter the password in this field to verify that you typed the password correctly. If you do not re-enter the correct password, an error message is displayed).
Wireless LAN ArrayConfiguring the XS-3900 1095. Click on the Create Admin button to add this administrator ID to the list.6. Click on the Save button to save your changes (otherwise your new settings will not take effect).Edit AdminThis page allows you to edit or delete existing administrator accounts. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 73. WMI: Edit Admin PageProcedure for Modifying Network Administrator Accounts1. Admin ID: Choose the administrator ID you want to edit or delete from the list. If you are deleting the selecting administrator ID, click on the Delete Admin button, otherwise go to Step 2.2. Read Only: Choose Yes to restrict the selected administrator ID to read only status, or choose No if you want to give this administrator ID full privileges.
Wireless LAN Array110 Configuring the XS-39003. Admin Password / Verify Password: Enter the password for the selected administrator ID in the left field, then re-enter the password in the right field (the two fields must match).4. Click on the Apply button to apply the new settings to this session.5. Click on the Save button to save your changes (otherwise your new settings will not take effect).UsersThis is a status only page that allows you to review the users currently associated with the network. You can choose how you want to sort the information that is displayed by choosing a sort option from the pull-down list.There are no configuration options available on this page, but if you are experiencing issues with network users, you may want to print this page for your records.Figure 74. WMI: Users Page
Wireless LAN ArrayConfiguring the XS-3900 111ServicesThis is a status only page that allows you to review the current status of syslog and SNMP services. There are no configuration options available on this page, but if you are experiencing issues with network services, you may want to print this page for your records.Figure 75. WMI: Services Page
Wireless LAN Array112 Configuring the XS-3900System LogThis page allows you to enable or disable the Syslog server, define the server’s IP address, and set the level for Syslog reporting—the Syslog service will send Syslog messages to the defined Syslog server. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 76. WMI: System Log PageProcedure for Configuring Syslog1. Enable Syslog Server: Choose Yes to enable Syslog functionality, or choose No to disable this feature.2. Server IP Address: If you enabled Syslog, enter the IP address of the Syslog server.3. Syslog Server Level: Choose the level of Syslog reporting from the pull-down list (between 0 and 7).4. Click on the Apply button to apply the new settings to this session.5. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN ArrayConfiguring the XS-3900 113SNMPThis page allows you to enable or disable SNMP and define the SNMP parameters. SNMP allows remote management of the array by the Xirrus Management System (XM-3300), or other SNMP-based management system. When finished, click on the Apply button to apply the new settings to this session, then click on the Save button to save your changes.Figure 77. WMI: SNMP PageProcedure for Configuring SNMP1. Enable SNMP: Choose Yes to enable SNMP functionality, or choose No to disable this feature.2. SNMP Link IP Address: Enter the IP address of the SNMP link.3. Tra p P or t: Enter the trap port.4. Community String: Enter the community string.5. Click on the Apply button to apply the new settings to this session.6. Click on the Save button to save your changes (otherwise your new settings will not take effect).
Wireless LAN Array114 Configuring the XS-3900SoftwareThis page displays the current system software version, the array’s serial number, and the array’s controller version. It also allows you to upgrade the system software.Procedure for Upgrading the System Firmware1. Download the software upgrade file to your local PC.2. From the WMI, go to the Software page. This page allows you to upgrade the system firmware.Figure 78. WMI: Software Page3. Software Upgrade: Enter the name of the upgrade file, then click on the Browse button to locate the file.4. Click on the Upload button to upgrade the system software.5. Reboot the array for the new software to take effect—the array must be rebooted for the new software to become active.
Wireless LAN ArrayConfiguring the XS-3900 115ToolsThis page allows you to reset the system’s configuration parameters to their factory default values, reboot the system, and ping other IP addresses for diagnostic purposes.Figure 79. WMI: Tools PageProcedure for Configuring System Tools1. System Configuration Reset: Click on the Reset button to reset the system’s current configuration settings to the factory default values—all previous configuration settings will be lost.2. System Reboot: Click on the Reboot button to reboot the system—you must reboot the array.3. System Tools: Choose Trace Route or Ping.4. IP Address: Enter the IP address of the target device.5. Timeout: Enter a value (in seconds) before the action times out.6. Click on the Execute button to perform the test. Results are displayed in the Output frame.
Wireless LAN Array116 Configuring the XS-3900Event LogThis is a status only page that allows you to review the event log. System alerts and messages are displayed on this page. There are no configuration options available on this page, but if you are experiencing issues with the network, you may want to print this page for your records.Figure 80. WMI: Event Log Page
Wireless LAN ArrayThe Command Line Interface 117The Command Line InterfaceThis chapter covers configuration and management tasks using the product’s Command Line Interface (CLI), and includes a procedure for establishing a Telnet connection to the XS-3900. Section headings for this chapter include:zEstablishing a Secure Shell (SSH) ConnectionzBasic CommandszCommand ModeszSelecting InterfaceszCommand Line KeywordszInterface SelectionEstablishing a Secure Shell (SSH) ConnectionUse this procedure to initialize the system and log in to the Command Line Interface (CLI) via a Secure Shell (SSH) utility, such as PuTTY.1. Start your SSH session and communicate with the XS-3900 via its default IP address (10.0.1.1).When connected to the XS-3900, a login prompt appears on your screen. The default login user name and password is admin (for both). Login names and passwords are case-sensitive.2. Enter admin when prompted for a user name and password. You are now logged in to the XS-3900’s Command Line Interface.Figure 81. Command Line Interface
Wireless LAN Array118 The Command Line InterfaceBasic CommandsHelp To get help at any point type help or ?.Tab KeyThe Tab Key allows auto-completion of commands such that only a few unique characters need to be entered followed by the Tab Key, which will automatically fill in the rest of the command.? KeyThe ? key displays the list of available commands at any point of typing in the command line.Save You must type save to save the current configuration to flash memory so that changes are kept when the array is rebooted.Command ModesConfigure Mode Allows major functional changes to interfaces and configuration.Requires Read/Write Administrator PrivilegeXirrus-Array# configureXirrus-Array(config)#The prompt will change to show the current mode in parentheses.SSID ModeAllows configuration changes to SSID definitions.Requires Read/Write Administrator PrivilegeFrom configure mode type ssid <ENTER>Xirrus-Array(config)# ssidXirrus-Array(config-SSID)#
Wireless LAN ArrayThe Command Line Interface 119Radius ModeAllows configuration changes to the internal RADIUS server.Requires Read/Write Administrator PrivilegeFrom configure mode type radius <ENTER>Xirrus-Array(config)# radiusXirrus-Array(config-radsrv)# Run Test ModeAllows configuration and execution of tests Requires Read/Write Administrator PrivilegeFrom configure mode type run-tests <ENTER>Xirrus-Array(config)# run-testsXirrus-Array(Run Test)#Selecting InterfacesFrom the configure mode select the desired interface.interface {console | iap | gig1 | gig2 | eth0};console asyncronous serial console portiap integrated access point interfacegig1 gigabit Ethernet interfacegig2 gigabit Ethernet interfaceeth0 10/100 Ethernet interfaceExample: Xirrus-Array(config)# interface iapXirrus-Array(config-iap)#
Wireless LAN Array120 The Command Line InterfaceCommand Line KeywordsThis section provides a brief description of available keywords, including any user-defined parameters associated with the keyword. An example of the keyword’s usage is also provided. Keywords are grouped by function. If you need to find a specific keyword, go to “Alphabetical Listing of CLI Keywords” on page 173 and click on the keyword—you will be taken to the keyword definition within this section. Functional groups in this section include:zInterface SelectionzInterface ConfigurationzRadio ConfigurationzBeacon InformationzSystem AdministrationzSystem TestingzSecurityzStation TimeoutszSSID ConfigurationzDNS ConfigurationzNTP ConfigurationzDHCP ConfigurationzSyslog ConfigurationzSNMP ConfigurationzFilterszRadius ConfigurationzReportszData HandlingzData ClearancezShow InformationzRemove ConfigurationzHelp
Wireless LAN ArrayThe Command Line Interface 121Interface SelectionThe following keywords are used when choosing an interface.dot11adot11gfastegigabitinterfacelineDescription: Select 802.11a WLAN interfaceUsage: interface { dot11a }Parameters: noneDescription: Select 802.11g WLAN interfaceUsage: interface { dot11g }Parameters: noneDescription: Select 10/100 Fast Ethernet interfaceUsage: interface { faste }Parameters: noneDescription: Select 10/100/1000 Gigabit Ethernet interfaceUsage: interface { gigabit }Parameters: noneDescription: Select the interface you want to configureUsage: interface { line | dot11a | dot11g | gigabit | faste }Parameters: noneDescription: Select the asynchronous serial portUsage: interface { line }Parameters: none
Wireless LAN Array122 The Command Line InterfaceInterface ConfigurationThe following keywords are used for configuring the selected interface (assumes the interface has already been selected).autoduplexbaudbytesizedefDescription: Select the duplex mode automaticallyUsage: <genum> | <fenum> { autoduplex }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)Description: Set the asynchronous port baud rateUsage: <linenum> { baud <brate> }Parameters: <linenum> defines which asynchronous interface is used<brate> defines the range for the baud rate, between 2,400 and 19,200 bpsDescription: Define the asynchronous port word sizeUsage: <linenum> { bytesize <bsz> }Parameters: <linenum> defines which asynchronous interface is used<bsz> defines the byte/word size, either 7 or 8, where:7 = 7 bits, 8 = 8 bitsDescription: Reset the interface to the default valuesUsage: <genum> | <fenum> { def }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<mtusz> defines the maximum allowable Maximum Transmission Unit (MTU) , between 64 and 1794
Wireless LAN ArrayThe Command Line Interface 123dhcpbinddownfullduplexgatewayDescription: Obtain a DHCP address for this interfaceUsage: <genum> | <fenum> { dhcpbind <dbind> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<dbind> defines how the IP address is generated, either 0 or 1, where:0 = Use static IP address, 1 = Use DHCP to get IP addressDescription: Shut down this interfaceUsage: <genum> | <fenum> { down }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)Description: Select the full duplex modeUsage: <genum> | <fenum> { fullduplex }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)Description: Define a gateway IP addressUsage: <genum> | <fenum> { gateway <gway> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<gway> defines a valid gateway IP address
Wireless LAN Array124 The Command Line Interfacehalfduplexip-addrmanagementmaskDescription: Select the half duplex modeUsage: <genum> | <fenum> { halfduplex }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be 0)Description: Define a static IP addressUsage: <genum> | <fenum> { ip-addr <statip> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<statip> defines a valid static IP addressDescription: Allow management on this interfaceUsage: <genum> | <fenum> { management <mgmt> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<mgmt> selects management or no management, where:0 = No, 1 = YesDescription: Define the subnet mask IP addressUsage: <genum> | <fenum> { mask <ipmask> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<ipmask> defines a valid subnet mask IP address
Wireless LAN ArrayThe Command Line Interface 125mtuparityspeedstopbitsDescription: Set the maximum allowable MTU sizeUsage: <genum> | <fenum> { mtu <mtusz> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<mtusz> defines the maximum allowable MTU size, between 64 and 1794Description: Establish the asynchronous port’s parityUsage: <linenum> { parity <prty> }Parameters: <linenum> defines which asynchronous interface is used<prty> defines the parity, either 0, 1 or 2, where:0 = No parity, 1 = Odd parity, 2 = Even parityDescription: Set the Ethernet interface speedUsage: <genum> | <fenum> { speed <spdsel> }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)<spdsel> defines the link speed, either 0 or 1, where:0 = 100 Mbps, 1 = 1000 MbpsDescription: Set the asynchronous port’s number of stop bitsUsage: <linenum> { stopbits <sbit> }Parameters: <linenum> defines which asynchronous interface is used<sbit> defines the number of stop bits, either 0, 1 or 2
Wireless LAN Array126 The Command Line InterfaceupRadio ConfigurationThe following keywords are used when configuring the XS-3900’s radios (assumes the interface has already been selected).antennaantennaexternalbasic1basic11basic12Description: Bring up this interfaceUsage: <genum> | <fenum> { up }Parameters: <genum> defines the Gigabit interface, either 1 or 2, where:1 = Primary, 2 = Secondary<fenum> defines the Fast Ethernet interface (must be zero)Description: Set the direction for this radio antennaUsage: <rnum> { antenna }Parameters: <rnum> defines the radio number, between 1 and 16Description: Show the external antenna settingsUsage: <rnum> { antennaexternal }Parameters: <rnum> defines the radio number, between 1 and 16Description: Require 1 Mbps rateUsage: <rnum> { basic1 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Require 11 Mbps rateUsage: <rnum> { basic11 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Require 12 Mbps rateUsage: <rnum> { basic12 }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN ArrayThe Command Line Interface 127basic18basic2basic24basic36basic48basic5basic54Description: Require 18 Mbps rateUsage: <rnum> { basic18 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Require 2 Mbps rateUsage: <rnum> { basic2 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Require 24 Mbps rateUsage: <rnum> { basic24 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Require 36 Mbps rateUsage: <rnum> { basic36 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Require 48 Mbps rateUsage: <rnum> { basic48 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Require 5 Mbps rateUsage: <rnum> { basic5 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Require 54 Mbps rateUsage: <rnum> { basic54 }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN Array128 The Command Line Interfacebasic6basic9ccacell-sizechannelnumconfigureDescription: Require 6 Mbps rateUsage: <rnum> { basic6 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Require 9 Mbps rateUsage: <rnum> { basic9 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Employ Clear Channel Assessment functionUsage: <rnum> { cca <ccadb> }Parameters: <rnum> defines the radio number, between 1 and 16<ccadb> is a number between 0 and 60 to define the floor noise level in dB incrementsDescription: Define cell sizeUsage: <rnum> { cell-size <cszset> }Parameters: <rnum> defines the radio number, between 1 and 16<cszset> is defined as either 0, 1 or 2, where:0 = smallest, 1 = medium, 2 = largestDescription: Define static channel settingUsage: <rnum> { channelnum <cnum> }Parameters: <rnum> defines the radio number, between 1 and 16<cnum> defines the static channel numberDescription: Configure each radio individuallyUsage: <rnum> { configure }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN ArrayThe Command Line Interface 129default_ratesdescriptiondot11gonlydot11preambledownedcfenable1Description: Set default ratesUsage: <rnum> { default_rates }Parameters: <rnum> defines the radio number, between 1 and 16Description: Specify a name to identify this interfaceUsage: <rnum> { description <dot11desc> }Parameters: <rnum> defines the radio number, between 1 and 16<dot11desc> is defined as a string of up to 50 alphanumeric charactersDescription: Enable support for 802.11g onlyUsage: <rnum> { dot11gonly }Parameters: <rnum> defines the radio number, between 1 and 16Description: Define the preambleUsage: <rnum> { dot11preamble }Parameters: <rnum> defines the radio number, between 1 and 16Description: Shut down (disable) this radio interfaceUsage: <rnum> { down }Parameters: <rnum> defines the radio number, between 1 and 16Description: Enable EDCF supportUsage: <rnum> { edcf }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 1 Mbps rateUsage: <rnum> { enable1 }Parameters: <rnum> defines the radio number, between 13 and 16
Wireless LAN Array130 The Command Line Interfaceenable11enable12enable18enable2enable24enable36enable48Description: Allow 11 Mbps rateUsage: <rnum> { enable11 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Allow 12 Mbps rateUsage: <rnum> { enable12 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 18 Mbps rateUsage: <rnum> { enable18 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 2 Mbps rateUsage: <rnum> { enable2 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Allow 24 Mbps rateUsage: <rnum> { enable24 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 36 Mbps rateUsage: <rnum> { enable36 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 48 Mbps rateUsage: <rnum> { enable48 }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN ArrayThe Command Line Interface 131enable5enable54enable6enable9frag-thresholdleast_congestedlong-retry-limitDescription: Allow 5 Mbps rateUsage: <rnum> { enable5 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Allow 54 Mbps rateUsage: <rnum> { enable54 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 6 Mbps rateUsage: <rnum> { enable6 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Allow 9 Mbps rateUsage: <rnum> { enable9 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Define the fragmentation thresholdUsage: <rnum> { frag-threshold <fragt> }Parameters: <rnum> defines the radio number, between 1 and 16<fragt> defines the fragment sizeDescription: Scan for the best frequencyUsage: <rnum> { least_congested }Parameters: <rnum> defines the radio number, between 1 and 16Description: Specify the long retry limitUsage: <rnum> { long-retry-limit <lrl> }Parameters: <rnum> defines the radio number, between 1 and 16<lrl> defines the long retry limit
Wireless LAN Array132 The Command Line Interfacemax-client-txpwroffonprelongpreshortrangerate1Description: Limit the client’s maximum transmit powerUsage: <rnum> { max-client-txpwr <mcp> }Parameters: <rnum> defines the radio number, between 1 and 16<mcp> specifies a number (in milliwatts)Description: Turn OFF this featureUsage: <rnum> { off }Parameters: <rnum> defines the radio number, between 1 and 16Description: Turn ON this featureUsage: <rnum> { on }Parameters: <rnum> defines the radio number, between 1 and 16Description: Enable long preamble for the selected radioUsage: <rnum> { prelong }Parameters: <rnum> defines the radio number, between 1 and 16Description: Enable short preamble for the selected radioUsage: <rnum> { preshort }Parameters: <rnum> defines the radio number, between 1 and 16Description: Set rates for best rangeUsage: <rnum> { range }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 1 Mbps rateUsage: <rnum> { rate1 }Parameters: <rnum> defines the radio number, between 13 and 16
Wireless LAN ArrayThe Command Line Interface 133rate11rate12rate18rate2rate24rate36rate48Description: Configure the 11 Mbps rateUsage: <rnum> { rate11 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Configure the 12 Mbps rateUsage: <rnum> { rate12 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 18 Mbps rateUsage: <rnum> { rate18 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 2 Mbps rateUsage: <rnum> { rate2 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Configure the 24 Mbps rateUsage: <rnum> { rate24 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 36 Mbps rateUsage: <rnum> { rate36 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 48 Mbps rateUsage: <rnum> { rate48 }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN Array134 The Command Line Interfacerate5rate54rate6rate9receivingrts-thresholdRxdiversityDescription: Configure the 5 Mbps rateUsage: <rnum> { rate5 }Parameters: <rnum> defines the radio number, between 13 and 16Description: Configure the 54 Mbps rateUsage: <rnum> { rate54 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 6 Mbps rateUsage: <rnum> { rate6 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the 9 Mbps rateUsage: <rnum> { rate9 }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the input antennaUsage: <rnum> { receiving }Parameters: <rnum> defines the radio number, between 1 and 16Description: Define the RTS thresholdUsage: <rnum> { rts-threshold <rtst> }Parameters: <rnum> defines the radio number, between 1 and 16<rtst> defines the packet size at which the device issues a Request to Send (RTS) before sending the packetDescription: Choose the antenna with the best signalUsage: <rnum> { Rxdiversity }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN ArrayThe Command Line Interface 135RxleftRxrightshort-retry-limitspeedthroughputtransmitingTxdiversityDescription: Specify the left antennaUsage: <rnum> { Rxleft }Parameters: <rnum> defines the radio number, between 1 and 16Description: Specify the right antennaUsage: <rnum> { Rxright }Parameters: <rnum> defines the radio number, between 1 and 16Description: Define t short retry limitUsage: <rnum> { short-retry-limit <srl> }Parameters: <rnum> defines the radio number, between 1 and 16<srl> defines the short retry limitDescription: Set allowed radio bit ratesUsage: <rnum> { speed }Parameters: <rnum> defines the radio number, between 1 and 16Description: Set rates for best throughputUsage: <rnum> { throughput }Parameters: <rnum> defines the radio number, between 1 and 16Description: Configure the output antennaUsage: <rnum> { transmiting }Parameters: <rnum> defines the radio number, between 1 and 16Description: Choose the antenna with the best signalUsage: <rnum> { Txdiversity }Parameters: <rnum> defines the radio number, between 1 and 16
Wireless LAN Array136 The Command Line InterfaceTxlefttx-pwrTxrightupworldbeaconBeacon InformationThe following keywords are used when establishing beacon information.beaconDescription: Specify the left antennaUsage: <rnum> { Txleft }Parameters: <rnum> defines the radio number, between 1 and 16Description: Define the transmit power settingsUsage: <rnum> { tx-pwr <pwrset> }Parameters: <rnum> defines the radio number, between 1 and 16<pwrset> is defined as either 0, 1 or 2, where:0 = quarter, 1 = half, 2 = maximumDescription: Specify the right antennaUsage: <rnum> { Txright }Parameters: <rnum> defines the radio number, between 1 and 16Description: Bring up (enable) this radio interfaceUsage: <rnum> { up }Parameters: <rnum> defines the radio number, between 1 and 16Description: Enable support for world mode beaconsUsage: <rnum> { worldbeacon }Parameters: <rnum> defines the radio number, between 1 and 16Description: Establish beacon informationUsage: beacon { period | DTIM-rate }Parameters: none
Wireless LAN ArrayThe Command Line Interface 137DTIM-rateperiodSystem AdministrationThe following keywords are used for system administration tasks.administratorclock-setcontact-infoDescription: Determine beacon periods before the Delivery Traffic Indication Message (DTIM) is sentUsage: beacon { DTIM-rate <beaconr> }Parameters: <beaconr> defines the period between DTIM frames, in Kusecs (kilo microseconds), where 1 Kusec = 1024 microsecondsDescription: Establish the amount of time between beaconsUsage: beacon { period <beaconp> }Parameters: <beaconp> defines the period between beacons, in Kusecs (kilo microseconds), where 1 Kusec = 1024 microsecondsDescription: Define the administrator access parametersUsage: administrator { defpw | userid <uid> }Parameters: <uid> enter a unique user IDDescription: Set the date/time within the XS-3900Usage: clock-set <curdate>Parameters: <curdate> defines the current date and time, specified in the following format: MMDDhhmmYYYYDescription: Define the contact information for assistance on this XS-3900Usage: contact-info { name <conname> | email <emailcontact>| telephone <contele> }Parameters: <conname> defines the contact name, up to 50 characters<emailcontact> defines the email address of the contact, up to 50 characters<contele> defines the telephone number of the contact
Wireless LAN Array138 The Command Line Interfacecopydefault-gatewaydefpwdhcp-serverdirdomain-nameDescription: Copy a file to another fileUsage: copy <fromfile> <tofile>Parameters: <fromfile> specifies the originating file<tofile> specifies the destination fileDescription: Define the default gateway IP addressUsage: ip { default-gateway <defgtwy> }Parameters: <defgtwy> specifies the default gateway IP address Description: Define the default password, up to 50 charactersUsage: administrator { defpw }Parameters: noneDescription: Define the DHCP server IP addressUsage: ip { dhcp-server <dhcpservr> }Parameters: <dhcpservr> specifies the DHCP server IP addressDescription: List the directory contentsUsage: dirParameters: noneDescription: Define the domain site nameUsage: ip { domain-name <domainnm>}Parameters: <domainnm> specifies the domain name for unqualified hosts
Wireless LAN ArrayThe Command Line Interface 139emaileraseftphostnameiplocationDescription: Define an email address for assistance on this XS-3900Usage: contact-info { email <emailcontact> }Parameters: <emailcontact> defines the email address of the contact, up to 50 charactersDescription: Delete a file from the flash file systemUsage: erase <erasefile>Parameters: <erasefile> specifies the target file to eraseDescription: Open an FTP connection with a remote serverUsage: ftp <addr>Parameters: <addr> specifies the host name or IP address of the FTP serverDescription: Define a hostname for this XS-3900Usage: hostname <hname>Parameters: <hname> defines the host name given to this XS-3900Description: Define the IP command setUsage: ip { default-gateway <defgtwy> | dhcp-server <dhcpservr> | name-server <nameservr> | domain-name <domainnm>}Parameters: <defgtwy> specifies the default gateway IP address <dhcpservr> specifies the DHCP server IP address<nameservr> specifies the DNS host name<domainnm> specifies the domain name for unqualified hostsDescription: Define the location for this XS-3900Usage: location <locname>Parameters: <locname> defines the location assigned to this XS-3900
Wireless LAN Array140 The Command Line Interfacelogoutmodelmorenamename-serverradiosrebootDescription: Log out the current administratorUsage: logoutParameters: noneDescription: Get model numberUsage: show-version { model }Parameters: noneDescription: Get more (list file)Usage: more <morefile>Parameters: <morefile> specifies the target file to listDescription: Define a contact name for assistance on this XS-3900Usage: contact-info { name <conname> }Parameters: <conname> defines the contact name, up to 50 charactersDescription: Define the DNS host nameUsage: ip { name-server <nameservr> }Parameters: <nameservr> specifies the DNS host nameDescription: Get radio board version numbersUsage: show-version { radios }Parameters: noneDescription: Reboot the XS-3900Usage: rebootParameters: none
Wireless LAN ArrayThe Command Line Interface 141reloadresetserialshow-versionshut-downsoftwareuseridDescription: Reload and reset the XS-3900Usage: reloadParameters: noneDescription: Reset the XS-3900 to its factory defaultsUsage: resetParameters: noneDescription: Get serial numberUsage: show-version { serial }Parameters: noneDescription: Get system version informationUsage: show-version { model | serial | software | radios }Parameters: noneDescription: Shut down the entire systemUsage: shut-downParameters: noneDescription: Get software versionUsage: show-version { software }Parameters: noneDescription: Define individual user IDsUsage: administrator { userid <uid> }Parameters: <uid> enter a unique user ID
Wireless LAN Array142 The Command Line InterfaceSystem TestingThe following keywords are used for system testing.ledlinktestpingrun-testsDescription: Run LED testsUsage: run-tests { led <ledtst> }Parameters: <ledtst> specifies the LED to test (defined by LED number, 0 to 9—refer to “Now that the XS-3900 is physically installed, you must run the Express Setup procedure from the unit’s Web Management Interface to enable the radios and establish initial system configuration settings. Go to “Powering Up the XS-3900” on page 44.” on page 43)Description: Run link testsUsage: run-tests { linktest <ltest> }Parameters: <linktest> specifies the link test, 1 through 4, where:1 = tbd, 2 = tbd, 3 = tbd, 4 = tbdDescription: Execute the ping utilityUsage: run-tests { ping <pingname> }Parameters: <pingname> specifies target IP address or DNS name to pingDescription: Run a selected testUsage: run-tests { traceroute <tracename> | ping <pingname> | led <ledtst> | linktest <ltest> }
Wireless LAN ArrayThe Command Line Interface 143tracerouteSecurityThe following keywords are used for system security.all11aall11gallradiosbroadcastkeyParameters: <tracename> specifies target IP address or DNS name to trace<pingname> specifies target IP address or DNS name to ping<ledtst> specifies the LED to test (defined by LED number, 0 to 9—refer to “Now that the XS-3900 is physically installed, you must run the Express Setup procedure from the unit’s Web Management Interface to enable the radios and establish initial system configuration settings. Go to “Powering Up the XS-3900” on page 44.” on page 43)<linktest> specifies the link test, 1 through 4, where:1 = tbd, 2 = tbd, 3 = tbd, 4 = tbdDescription: Run a trace on an IP route or DNS nameUsage: run-tests { traceroute <tracename> }Parameters: <tracename> specifies target IP address or DNS name to traceDescription: Specify that any settings will apply to all 802.11a radiosUsage: security { radioid { all11a }}Parameters: noneDescription: Specify that any settings will apply to all 802.11g radiosUsage: security { radioid { all11g }}Parameters: noneDescription: Specify that any settings will apply to all radiosUsage: security { radioid { allradios }}Parameters: noneDescription: Use the encryption key during broadcast
Wireless LAN Array144 The Command Line Interfacecapabilitychangechangeciphersclient-timeoutdot1xencryptionUsage: security { radioid { all11g { broadcastkey }}}Parameters: noneDescription: Issue a new key if the previous non-key STA disassociates, or the first non-key STA associates (optional)Usage: security { radioid { all11g { capabilitychange }}}Parameters: noneDescription: Specify the time between key rotations (optional)Usage: security { radioid { all11g { change <chgsecs> }}}Parameters: <chgsecs> sets the time (in seconds) between key rotationsDescription: Enable a cipher suite for encryptionUsage: security { radioid { allradios { encryption { ciphers { tkip { tkipwep40 }}}}}}Parameters: noneDescription: Define a timeout period while waiting for a client stationUsage: security { radioid { all11g { client-timeout <ct01x> }}}Parameters: <ct01x> sets the client time out, in seconds from 1 to 65555Description: Specify the 802.1x STA timeout parametersUsage: security { radioid { all11g { dot1x }}}Parameters: noneDescription: Define which WEP key will be used for data encryptionUsage: security { radioid { allradios { encryption <keynum> }}}Parameters: <keynum> specifies the encryption key number, 1 to 4
Wireless LAN ArrayThe Command Line Interface 145keyhashmandatoryDescription: Use encryption key hashingUsage: security { radioid { allradios { encryption { ciphers { tkip { tkipwep40 { keyhash }}}}}}}Parameters: noneDescription: Force station to use encryption to communicate with the XS-3900Usage: security { radioid { allradios { encryption { mandatory }}}}Parameters: none
Wireless LAN Array146 The Command Line Interfacemembershipterminationmicoptionaloptkeyhashradioidreauth-periodDescription: Specify the time between key rotations (optional)Usage: security { radioid { all11g { membershiptermination }}}Parameters: noneDescription: Use the Message Integrity Check (MIC) functionUsage: security { radioid { allradios { encryption { ciphers { tkip { tkipwep40 { mic }}}}}}}Parameters: noneDescription: Allow station to communicate with the XS-3900 with or without encryptionUsage: security { radioid { allradios { encryption { optional }}}}Parameters: noneDescription: Use encryption key hashing (optional)Usage: security { radioid { allradios { encryption { optional { optkeyhash }}}}}Parameters: noneDescription: Choose which radio (or all radios)Usage: security { radioid { allradios | all11a | all11g | <radionum> }}}Parameters: <radionum> specifies the radio number (1 to 16)Description: Define the reauthentication period, in secondsUsage: security { radioid { all11g { reauth-period <reauthper> }}}Parameters: <reauthper> specifies the time before the next authentication attempt, between 1 and 65555 seconds
Wireless LAN ArrayThe Command Line Interface 147securityservertkiptkipwep128tkipwep40wepDescription: Set the security parameters for the XS-3900’s radiosUsage: security { radioid { allradios { encryption <keynum> }}}Parameters: <keynum> specifies the encryption key number, 1 to 4Description: Use the RADIUS server's reauthentication value instead of “reauth-period” valueUsage: security { radioid { all11g { server }}}Parameters: noneDescription: Specify TKIP as the cipher suiteUsage: security { radioid { allradios { encryption { ciphers { tkip { tkipwep40 }}}}}}Parameters: noneDescription: Use 128 bit WEP with the TKIP cipher suiteUsage: security { radioid { allradios { encryption { ciphers { tkip { tkipwep128 }}}}}}Parameters: noneDescription: Use 40 bit WEP with the TKIP cipher suiteUsage: security { radioid { allradios { encryption { ciphers { tkip { tkipwep40 }}}}}}Parameters: noneDescription: Select the encryption type when configured for WEPUsage: security { radioid { allradios { encryption { wep }}}}Parameters: none
Wireless LAN Array148 The Command Line Interfacewep128wep40Station TimeoutsThe following keywords are used for establishing STA timeouts.activity-timeoutreauth-periodsta-timeoutsDescription: Use 128 bit WEP encryptionUsage: security { radioid { allradios { encryption { wep128 }}}}Parameters: noneDescription: Use 40 bit WEP encryptionUsage: security { radioid { allradios { encryption { wep40 }}}} Parameters: noneDescription: Set the time period before the XS-3900 flags an inactive stationUsage: sta-timeouts { activity-timeout <at> }Parameters: <at> specifies the time, in seconds, before the system flags an inactive STADescription: Set the period after a station fails to authenticate before allowing more attemptsUsage: sta-timeouts { reauth-period <ht> }Parameters: <ht> specifies the time, in seconds, before the next authentication attemptDescription: Set the station timeoutsUsage: sta-timeouts { activity-timeout <at> | reauth-period <ht> }Parameters: <at> specifies the time, in seconds, before the system flags an inactive STA<ht> specifies the time, in seconds, before the next authentication attempt
Wireless LAN ArrayThe Command Line Interface 149SSID ConfigurationThe following keywords are used for establishing SSID parameters.adddelpolicyqos-ssidssidDescription: Add this SSIDUsage: ssid-manager { ssid <ss> { add }}Parameters: <ss> specifies the SSID, up to 32 charactersDescription: Delete this SSIDUsage: ssid-manager { ssid <ss> { del }}Parameters: <ss> specifies the SSID, up to 32 charactersDescription: Define the policy associated with this SSIDUsage: ssid-manager { ssid <ss> { policy <sp> }}Parameters: <ss> specifies the SSID, up to 32 characters<sp>specifies the policy for this SSID, either 0, 1, 2 or 3, where:0 = Open, 1 = MAC Auth., 2 = EAP Auth., 3 = GuestDescription: Define QoS associated with this SSIDUsage: ssid-manager { ssid <ss> { qos-ssid <qs> }}Parameters: <ss> specifies the SSID, up to 32 characters<qs> identifies the QoS for this SSIDDescription: Define this SSIDUsage: ssid-manager { ssid <ss> { add }Parameters: <ss> specifies the SSID, up to 32 characters
Wireless LAN Array150 The Command Line Interfacessid-brdcstssid-managervlanDNS ConfigurationThe following keywords are used for establishing the DNS parameters.dnsdomainDescription: Specify if you want to broadcast this SSIDUsage: ssid-manager { ssid <ss> { ssid-brdcst <sb> }}Parameters: <ss> specifies the SSID, up to 32 characters<sb> specifies if you want to broadcast this SSID, either 0 or 1, where:0 = No, 1 = YesDescription: Set up SSID for a specific radio or the complete systemUsage: ssid-manager { ssid <ss> { add }Parameters: <ss> specifies the SSID, up to 32 charactersDescription: Define a VLAN ID associated with this SSIDUsage: ssid-manager { ssid <ss> { vlan <sv> }}Parameters: <sv> identifies the VLAN for this SSIDDescription: Configure DNS settingsUsage: dns { hostname <hname> }Parameters: <hname> specifies the host nameDescription: Enter your domain nameUsage: dns { domain <dom> }Parameters: <dom> specifies your domain name, for example:www.mydomain.com
Wireless LAN ArrayThe Command Line Interface 151hostnameserver1server2server3NTP ConfigurationThe following keywords are used for establishing the NTP parameters.disableenableDescription: Enter your host nameUsage: dns { hostname <hname> }Parameters: <hname> specifies the host nameDescription: Enter the primary DNS serverUsage: dns { server1 <srv1> }Parameters: <srv1> specifies the primary DNS serverDescription: Enter the primary DNS serverUsage: dns { server2 <srv2> }Parameters: <srv2> specifies the secondary DNS serverDescription: Enter the tertiary DNS serverUsage: dns { server3 <srv3> }Parameters: <srv3> specifies the tertiary DNS serverDescription: Disable NTP servicesUsage: ntp { disable }Parameters: noneDescription: Enable NTP servicesUsage: ntp { enable }Parameters: none
Wireless LAN Array152 The Command Line Interfacentppri-ntssec-ntsDHCP ConfigurationThe following keywords are used for establishing the DHCP parameters.configuredefault-leasedhcpDescription: Enable/disable or configure NTP servicesUsage: ntp { enable | disable }Parameters: noneDescription: Establish the primary NTP server IP address or DNS nameUsage: ntp { pri-nts <pntp> }Parameters: <pntp> specifies the IP address or DNS name (primary)Description: Establish the secondary NTP server IP address or DNS nameUsage: ntp { sec-nts <sntp> }Parameters: <sntp> specifies the IP address or DNS name (secondary)Description: Configure DHCP servicesUsage: dhcp { configure { start-ip-range <sipr> }}Parameters: <sipr> specifies the starting IP addressDescription: Define the default lease periodUsage: dhcp { configure { default-lease <defl> }}Parameters: <defl> specifies the default lease period, in minutesDescription: Enable/disable or configure DHCP servicesUsage: dhcp { enable | disable | configure { start-ip-range <sipr> }}Parameters: <sipr> specifies the starting IP address
Wireless LAN ArrayThe Command Line Interface 153disableenableend-ip-rangemax-leasestart-ip-rangeSyslog ConfigurationThe following keywords are used for establishing the Syslog parameters.bufferedDescription: Disable DHCP servicesUsage: dhcp { disable }Parameters: noneDescription: Enable DHCP servicesUsage: dhcp { enable }Parameters: noneDescription: Define the DHCP server’s ending IP addressUsage: dhcp { configure { end-ip-range <eipr> }}Parameters: <eipr> specifies the ending IP addressDescription: Define the maximum allowable lease periodUsage: dhcp { configure { max-lease <maxl> }}Parameters: <maxl> specifies the maximum allowable lease period, in minutesDescription: Define the DHCP server’s starting IP addressUsage: dhcp { configure { start-ip-range <sipr> }}Parameters: <sipr> specifies the starting IP addressDescription: Set the size of the local Syslog fileUsage: syslog { buffered <logfilesz> }Parameters: <logfilesz> sets the number of records the local Syslog file holds before wrapping around
Wireless LAN Array154 The Command Line InterfaceconfigureconsoleipsysloglevelonsyslogDescription: Configure Syslog servicesUsage: syslog { configure { ipsyslog <slip> }}Parameters: <slip> specifies the Syslog server IP addressDescription: Display syslog messages on your consoleUsage: syslog { configure { ipsyslog <slip> }}Parameters: <slip> specifies the Syslog server IP addressDescription: Define the Syslog server IP addressUsage: syslog { console }Parameters: noneDescription: Log all messages with the level you define hereUsage: syslog { level <slev> }Parameters: <slev> defines the syslog capture levelDescription: Turn on Syslog servicesUsage: syslog { on }Parameters: noneDescription: Turn on/off or configure Syslog servicesUsage: syslog { on | configure { ipsyslog <slip> }}Parameters: <slip> specifies the Syslog server IP address
Wireless LAN ArrayThe Command Line Interface 155SNMP ConfigurationThe following keywords are used for establishing the SNMP parameters.communitydisableenablesnmpsnmptasnmptpDescription: Define the SNMP communnityUsage: snmp { community <csnmp> }Parameters: <csnmp> specifies the SNMP Community string (letters and number only, no spaces or special characters)Description: Disable SNMP servicesUsage: snmp { disable }Parameters: noneDescription: Enable SNMP servicesUsage: snmp { enable }Parameters: noneDescription: Enable/disable or configure SNMP servicesUsage: snmp { enable | disable | snmpti <tisnmp> }Parameters: <tisnmp> specifies the SNMP trap IP addressDescription: Send traps for authorization failuresUsage: snmp { snmpta <tasnmp> }Parameters: <tasnmp> specifies whether or not to send traps, either 1 or 2, where:1 = Send, 2= Don’t sendDescription: Define the SNMP trap portUsage: snmp { snmptp <tpsnmp> }Parameters: <tpsnmp> specifies the SNMP trap port
Wireless LAN Array156 The Command Line InterfacesnmptiFiltersThe following keywords are used for setting up filters.configuredisableenablefiltersDescription: Define the SNMP trap IP addressUsage: snmp { snmpti <tisnmp> }Parameters: <tisnmp> specifies the SNMP trap IP addressDescription: Configure filtersUsage: filters { configure }Parameters: noneDescription: Disable filtersUsage: filters { disable }Parameters: noneDescription: Enable filtersUsage: filters { enable }Parameters: noneDescription: Enable/disable or configure filtersUsage: filters { enable | disable | configure }Parameters: none
Wireless LAN ArrayThe Command Line Interface 157Radius ConfigurationThe following keywords are used for configuring Radius services.client-timeoutconfiguredot1xradiusradius-ipradius-portDescription: Define 802.1x reply time from a client stationUsage: radius { radius-server { dot1x { client-timeout <cto1x> }}}Parameters: <cto1x> specifies the time (in seconds) waiting for a client station 802.1x reply before timing outDescription: Configure Radius server parametersUsage: radius { radius-server { configure { radius-ip <radip> }}}Parameters: <radip> specifies the IP address of the Radius serverDescription: Define 802.1x client (STA) settingsUsage: radius { radius-server { configure { dot1x }}}Parameters: noneDescription: Configure Radius servicesUsage: radius { radius-server { configure { radius-ip <radip> }}}Parameters: <radip> specifies the IP address of the Radius serverDescription: Define the Radius server IP addressUsage: radius { radius-server { configure { radius-ip <radip> }}}Parameters: <radip> specifies the IP address of the Radius serverDescription: Define the Radius authentication portUsage: radius { radius-server { configure { radius-port <radport> }}}Parameters: <radport> specifies the Radius authentication port
Wireless LAN Array158 The Command Line Interfaceradius-secretradius-serverreauth-periodserverReportsThe following keywords are used for generating reports.assocclearDescription: Define the Radius shared secretUsage: radius { radius-server { configure { radius-secret <radsecret> }}}Parameters: <radsecret> specifies the Radius shared secretDescription: Configure the Radius serverUsage: radius { radius-server { configure { radius-ip <radip> }}}Parameters: <radip> specifies the IP address of the Radius serverDescription: Specify the elapsed time before allowing a client station to reattempt authenticationUsage: radius { radius-server { dot1x { reauth-period <reauthper> }}}Parameters: <reauthper> specifies the amount of time (in seconds) after a timeout you wait before allowing a client station to retry authenticationDescription: Use the “reauth-period” configured in the RADIUS serverUsage: radius { radius-server { dot1x { server }}}Parameters: noneDescription: Discover the number of devices associated with this XS-3900Usage: reports { assoc }Parameters: noneDescription: Clear all stored values for the selected interfaceUsage: reports { clear { GigE <gnum> }}Parameters: <gnum> defines the gigabit interface number, either 0 or 1
Wireless LAN ArrayThe Command Line Interface 159configuredisableDot11enableGigEnum-apnum-ClientDescription: Configure and request reports for the selected interfaceUsage: reports { configure { Dot11 <rnum> }}Parameters: <rnum> defines the radio number, between 1 and 16Description: Disable report generationUsage: reports { disable }Parameters: noneDescription: Generate reports for the selected radioUsage: reports { configure { Dot11 <rnum> }}Parameters: <rnum> defines the radio number, between 1 and 16Description: Enable report generationUsage: reports { enable }Parameters: noneDescription: Generate reports for the selected gigabit interfaceUsage: reports { configure { GigE <gnum> }}Parameters: <gnum> defines the gigabit interface number, either 0 or 1Description: Discover the number of AP devices associated with this XS-3900Usage: reports { num-ap }Parameters: noneDescription: Discover the number of clients associated with this XS-3900Usage: reports { num-Client }Parameters: none
Wireless LAN Array160 The Command Line InterfacereportsData HandlingThe following keywords are used for defining how data is handled by the system.packetpayload-encapsulationretriesData ClearanceThe following keywords are used for clearing or removing data from selected elements.clearDescription: Enable/disable or configure report generationUsage: reports { enable | disable | configure | clear }}}Parameters: noneDescription: Define global packet commandsUsage: packet { retries <pktretry> | payload-encapsulation <encap1> }Parameters: <pktretry> specifies the packet retry value<encap1> choose either dot1H or snapDescription: Define the type of encapsulation to useUsage: packet { payload-encapsulation <encap1> }Parameters: <encap1> choose either dot1H or snapDescription: Define the maximum number of retries for sending a packetUsage: packet { retries <pktretry> }Parameters: <pktretry> specifies the packet retry valueDescription: Remove/clear requested elementsUsage: clear { dot11 { client <stamacaddr> }}Parameters: <stamacaddr> specifies the MAC address of a client station you want to disassociate
Wireless LAN ArrayThe Command Line Interface 161clientdot11statisticsShow InformationThe following keywords are used for displaying system information.adjacent-apcarrier-busyDescription: Designates a client station to deauthenticateUsage: clear { dot11 { client <stamacaddr> }}Parameters: <stamacaddr> specifies the MAC address of a client station you want to disassociateDescription: Designates a wireless interfaceUsage: clear { dot11 { client <stamacaddr> }}Parameters: <stamacaddr> specifies the MAC address of a client station you want to disassociateDescription: Designates accumulated counters, such as amount of data transmissionsUsage: clear { dot11 { statistics <statmac> }}Parameters: <statmac> specifies the MAC address of a client station from which you want clear all statistical dataDescription: Select all adjacent APs that are members of a WDS roaming neighborhoodUsage: show { dot11 { adjacent-ap }}Parameters: noneDescription: Show the percentage of CCA that is busyUsage: show { carrier-busy }Parameters: none
Wireless LAN Array162 The Command Line Interfacecontrollersdot11dot11radiofileflashhostsinfoDescription: Display radio baseband informationUsage: show { controllers { dot11radio <contnum> }}Parameters: <contnum> specifies the radio ID or number (1 to 16)Description: Select the wireless interfaceUsage: show { dot11 { adjacent-ap }}Parameters: noneDescription: Select a specific radioUsage: show { controllers { dot11radio <contnum> }}Parameters: <contnum> specifies the radio ID or number (1 to 16)Description: Display the individual file sizeUsage: show { file { info <showfnm> }Parameters: <showfnm> specifies the individual file nameDescription: Display the flash size and free spaceUsage: show { flash }Parameters: noneDescription: Display cached host namesUsage: show { hosts }Parameters: noneDescription: Displayinformation that is specific to an individual file nameUsage: show { file { info <showfnm> }Parameters: <showfnm> specifies the individual file name
Wireless LAN ArrayThe Command Line Interface 163interfacelinelocal-serverradiusrunning_configshowstartup_configDescription: Display all available interface informationUsage: show { interface }Parameters: noneDescription: Display the terminal statusUsage: show { line }Parameters: noneDescription: Display the embedded RADIUS server on this XS-3900Usage: show { radius { local-server { statistics }}}Parameters: noneDescription: Display the Radius server informationUsage: show { radius { local-server { statistics }}}Parameters: noneDescription: Display the configuration the XS-3900 is currently executingUsage: show { running_config }Parameters: noneDescription: Display current information about the selected itemUsage: show { version }Parameters: noneDescription: Display the configuration the XS-3900 booted fromUsage: show { startup_config }Parameters: none
Wireless LAN Array164 The Command Line Interfacestatisticssystem-filesusersversionRemove ConfigurationThe following keywords are used to remove/disable existing configurations.activity-timeoutauthenticationDescription: Display statistics for this embedded RADIUS serverUsage: show { radius { local-server { statistics }}}Parameters: noneDescription: List all system file names and sizesUsage: show { file { system-files }}Parameters: noneDescription: Display user informationUsage: show { users }Parameters: noneDescription: Display the system version informationUsage: show { version }Parameters: noneDescription: Set the client inactivity timeout to the default valueUsage: no { dot11 { activity-timeout }}Parameters: noneDescription: Disable all authentication support (open system)Usage: no { security { authentication }}Parameters: none
Wireless LAN ArrayThe Command Line Interface 165beaconclientclient-timeoutdhcp-serverdomain-lookupdot11Description: Disable all beacon supportUsage: no { dot11 { beacon }}Parameters: noneDescription: Reset to default the maximum power a client can transmit (this will be advertised by the XS-3900)Usage: no { dot11 { power { client }}}Parameters: noneDescription: Set to default the amount of time a client must wait for a EAP responseUsage: no { dot1x { client-timeout }}Parameters: noneDescription: Disable DHCP servicesUsage: no { ip { dhcp-server }}Parameters: noneDescription: Disable all DNS serversUsage: no { ip { domain-lookup }}Parameters: noneDescription: Make the “no” command specific to the WLANUsage: no { dot11 { activity-timeout }}Parameters: none
Wireless LAN Array166 The Command Line Interfacedot1xencryptionholdoff-timehttp-porthttp-serveripDescription: Make the “no” command specific to 802.1x componentsUsage: no { dot1x { client-timeout }}Parameters: noneDescription: Disable all encryptionUsage: no { dot11 { encryption }}Parameters: noneDescription: Set to default the amount of time to wait for client authenticationUsage: no { dot11 { holdoff-time }}Parameters: noneDescription: Set the HTTP port to the default value of 80Usage: no { ip { http-port }}Parameters: noneDescription: Disable internal Web services (the Web-based configuration will be disabled)Usage: no { ip { http-server }}Parameters: noneDescription: Define IP’s to apply the no (removal) commandUsage: no { ip { dhcp-server }}Parameters: none
Wireless LAN ArrayThe Command Line Interface 167localname-servernopowerpreambleradioreauth-periodDescription: Reset to default the maximum power the AP can transmitUsage: no { dot11 { power { local }}}Parameters: noneDescription: Disable this specific DNS server by IP addressUsage: no { ip { name-server <nsip> }}Parameters: <nsip> specifies the IP address of the target name server to disableDescription: Disable if enabled, or set to default valueUsage: no { ip { dhcp-server }}Parameters: noneDescription: Reset power settings to their default valuesUsage: no { dot11 { power { client }}}Parameters: noneDescription: Reset preamble to the deaultUsage: no { dot11 { preamble }}Parameters: noneDescription: Disable a specific radioUsage: no { dot11 { radio <noradionum> }}Parameters: <noradionum> specifies the target radio to disable (1-16)Description: Set the number of authentication retries to defaultUsage: no { reauth-period }Parameters: none
Wireless LAN Array168 The Command Line InterfacertssecurityssidsyslogworldmodeHelpThe following keyword is used to provide a description of the interactive Help system.helpDescription: Disable RTS supportUsage: no { dot11 { rts }}Parameters: noneDescription: Disable security commands or reset to defaultsUsage: no { security { authentication }}Parameters: noneDescription: Remove a specific SSIDUsage: no { dot11 { ssid <nossid> }}Parameters: <nossid> specifies the target SSID to remove from the systemDescription: Disable the Syslog servicesUsage: no { ip { syslog }}Parameters: noneDescription: Disable world modeUsage: no { worldmode }Parameters: noneDescription: Provide a description of the Help systemUsage: helpParameters: none
Wireless LAN ArrayAppendix A: Quick Reference Guide 169Appendix A: Quick Reference GuideThis chapter contains XS-3900 product reference information. Use this chapter to locate the information you need quickly and efficiently. Section headings for this chapter include:zReview of WMI PageszAlphabetical Listing of CLI KeywordszFactory Default SettingszKeyboard ShortcutszKeyboard ShortcutsReview of WMI PagesThis section provides a review of the product’s WMI pages, with a brief explanation of their function and content. Click on any of the listed pages to go to the corresponding procedure at the referenced destination.Page FunctionArray Status Provides a snapshot of the global configuration settings for all XS-3900 network interfaces and radios.Express Setup Establish global configuration settings that will enable basic XS-3900 functionality.Network Interfaces Provides a snapshot of the configuration settings currently established for the network interfaces.Network Settings Establish basic configuration settings for the network interfaces.VLAN Settings Add or remove VLANs, associate VLANs to a specific network interface, and enable VLAN tagging of outgoing traffic.
Wireless LAN Array170 Appendix A: Quick Reference GuideNetwork Statistics Provides statistical data associated with network interfaces and their activity.DHCP Server Settings Enable or disable DHCP (Dynamic Host Configuration Protocol) server functionality.DNS Settings Set up a DNS server (or multiple servers), if you want to offer clients associating with the XS-3900 the ability to use meaningful domain names (URLs) instead of numerical IP addresses.IAP Interfaces Provides a snapshot of global configuration data associated with radios.IAP Settings Enable or disable radios, define the wireless mode for each radio, establish the transmit and receive parameters, and define global settings for the beacon interval and DTIM period.Global Settings Establish global IAP (radio) settings. Global IAP settings include enabling or disabling all radios (regardless of their operating mode).Global Settings .11a Establish global 802.11a IAP (radio) settings.Global Settings .11bg Establish global 802.11b/g IAP (radio) settings.IAP LED Settings Set the behavior of LEDs.Statistics Provides an overview of statistical data associated with individual radios.Page Function
Wireless LAN ArrayAppendix A: Quick Reference Guide 171SSID Management Provides a snapshot of SSID (Service Set IDentifier) assignments. It includes the SSID name, whether or not an SSID is visible on the network, any security and QoS parameters defined for each SSID, associated VLAN IDs, guest access, and radio availability per SSID.Create SSID Create, delete (or restore) and manage SSIDs. It also allows you to assign security parameters and VLANs on a per SSID basis.Edit SSID Edit existing SSIDs and reassign security parameters and VLANs on a per SSID basis.Security Provides a snapshot of XS-3900 global security configuration parameters, including administration accounts, ACL values, WEP/WPA/WPA2 status, and RADIUS configuration settings.Security Management Establish the security parameters for your wireless network, including WEP, WPA and RADIUS authentication.Radius Server Set up the XS-3900’s internal RADIUS server, or set up an external RADIUS server for user authentication.Radius User Create, delete and manage RADIUS user accounts.MAC Access List Create new MAC-based Access Control Lists (ACLs), delete existing ACLs, and add, remove, or restore MAC addresses.Page Function
Wireless LAN Array172 Appendix A: Quick Reference GuideCreate Admin Create new network administrator accounts, delete existing accounts, or restore accounts. It also allows you to limit account access to a read only status.Edit Admin Edit existing network administrator accounts, change passwords, and re-define whether an account is limited to a read only status.Users Provides a snapshot of users currently associated with the network.Services Provides a current status of Syslog and SNMP services.System Log Enable or disable the Syslog server, define the server’s IP address, and set the level for Syslog reporting.SNMP Enable or disable SNMP and define the SNMP parameters.Software Upgrade the system firmware.Tools Ping the XS-3900 and obtain a status of the unit’s performance.Event Log Provides an event log for the wireless network.Page Function
Wireless LAN ArrayAppendix A: Quick Reference Guide 173Alphabetical Listing of CLI KeywordsThis section provides a listing of all available CLI keywords, sorted alphabetically. Where the same keyword appear multiple times, the functional areas that it pertains to are also included (italicized). Click on any keyword to jump to the referenced destination.Aactivity-timeout station timeoutsactivity-timeout remove config.addadjacent-apadministratorall11aall11gallradiosantennaantennaexternalassocauthenticationautoduplexBbasic1basic11basic12basic18basic2basic24basic36basic48basic5basic54basic6basic9baudbeacon beacon informationbeacon remove config.broadcastkeybufferedbytesizeCcapabilitychangecarrier-busyccacell-sizechangechannelnumciphersclear radius config.clear data clearanceclient data clearanceclient remove config.client-timeout securityclient-timeout radius config.client-timeout remove config.clock-setcommunityconfigure radio config.configure dhcp config.configure syslog config.configure filtersconfigure radius config.configure reportsconsole
Wireless LAN Array174 Appendix A: Quick Reference Guidecontact-infocontrollerscopyDdefdefault-gatewaydefault-leasedefault_ratesdefpwdeldescriptiondhcpdhcpbinddhcp-server system admin.dhcp-server remove config.dirdisable ntp config.disable dhcp config.disable snmp config.disable filtersdisable reportsdnsdomaindomain-lookupdomain-nameDot11dot11 data clearancedot11 show informationdot11 remove config.dot11adot11gdot11gonlydot11preambledot11radiodot1x securitydot1x radius config.dot1x remove config.down interface config.down radio config.DTIM-rateEedcfemailenable ntp config.enable dhcp config.enable snmp config.enable filtersenable reportsenable1enable11enable12enable18enable2enable24enable36enable48enable5enable54enable6enable9encryption securityencryption remove config.end-ip-rangeeraseFfastefile
Wireless LAN ArrayAppendix A: Quick Reference Guide 175filtersflashfrag-thresholdftpfullduplexGgatewaygigabitGigEHhalfduplexhelpholdoff-timehostname system admin.hostname dns config.hostshttp-porthttp-serverIinfointerface interface selectioninterface show informationip system config.ip remove config.ip-addripsyslogKkeyhashLleast_congestedledlevelline interface selectionline show informationlinktestlocallocal-serverlocationlogoutlong-retry-limitMmanagementmandatorymaskmax-client-txpwrmax-leasemembershipterminationmicmodelmoremtuNnamename-server system admin.name-server remove config.nontpnum-apnum-ClientOoffon radio configuration
Wireless LAN Array176 Appendix A: Quick Reference Guideon syslog configurationoptionaloptkeyhashPpacketparitypayload-encapsulationperiodpingpolicypowerpreambleprelongpreshortpri-ntsQqos-ssidRradioradioidradiosradius radius config.radius show informationradius-ipradius-portradius-secretradius-serverrangerate1rate11rate12rate18rate2rate24rate36rate48rate5rate54rate6rate9reauth-period securityreauth-period station timeoutsreauth-period radius config.reauth-period remove config.rebootreceivingreloadreportsresetretriesrtsrts-thresholdrunning_configrun-testsRxdiversityRxleftRxrightSsec-ntssecurity securitysecurity remove config.serialserver securityserver radius config.server1server2
Wireless LAN ArrayAppendix A: Quick Reference Guide 177server3short-retry-limitshowshow-versionshut-downsnmpsnmptasnmptpsnmptisoftwarespeed interface config.speed radio config.ssid ssid config.ssid remove comfig.ssid-brdcstssid-managerstartup_configstart-ip-rangesta-timeoutsstatistics data clearancestatistics show informationstopbitssyslog syslog config.syslog remove config.system-filesTthroughputtkiptkipwep128tkipwep40traceroutetransmitingTxdiversityTxlefttx-pwrTxrightUup interface config.up radio config.useridusersVversionvlanWwepwep128wep40worldbeaconworldmode
Wireless LAN Array178 Appendix A: Quick Reference GuideFactory Default SettingsThe following tables show the XS-3900’s factory default settings.Network InterfacesSerialGigabit 1 and Gigabit 2Setting Default ValueBaud Rate 115200Word Size 8 bitsStop Bits 1Parity No parityTime Out 10 secondsSetting Default ValueEnabled YesDHCP Bind YesDefault IP Address 10.0.1.2Default IP Mask 255.0.0.0Default Gateway NoneAuto Negotiate OnDuplex FullSpeed 1000 MbpsMTU Size 1500Management Enabled Yes
Wireless LAN ArrayAppendix A: Quick Reference Guide 179Fast EthernetIntegrated Access Points (IAPs)Setting Default ValueEnabled YesDHCP Bind YesDefault IP Address 10.0.1.1Default IP Mask 255.0.0.0Default Gateway NoneAuto Negotiate OnDuplex FullSpeed 100 MbpsMTU Size 1500Management Enabled YesSetting Default ValueAntenna 0Mode 11a for a1 to a1211g for abg1 to abg4Channel AutoMaximum Transmit Power 0Cell Size Medium
Wireless LAN Array180 Appendix A: Quick Reference GuideServer SettingsDHCPExternal RADIUSSetting Default ValueEnabled NoMaximum Lease Time 300 minutesDefault Lease Time 300 minutesIP Start Range 192.168.1.1IP End Range 192.168.1.100Setting Default ValueEnabled YesPrimary Server 0.0.0.0Primary Port 1812Primary Secret xirrusSecondary Server null (no IP address)Secondary Port 1812Secondary Secret null (no secret)Time Out (before primary server is retired) 600 seconds
Wireless LAN ArrayAppendix A: Quick Reference Guide 181Internal RADIUSNTPSyslogSNMPSetting Default ValueEnabled NoThe user database is cleared upon reset to the factory defaults. For the Internal RADIUS Server you have a maximum of 200 entries.Setting Default ValueEnabled NoPrimary time.nist.govSecondary 192.6.15.29Setting Default ValueEnabled NoSetting Default ValueEnabled NoCoomunity String xirrusTrap Host null (no setting)Trap Port 162Authorization Fail Port 1
Wireless LAN Array182 Appendix A: Quick Reference GuideDefault SSIDEncryptionSetting Default ValueID xirrusVLAN NoneEncryption OffEncryption Type NoneQoS NoneEnabled YesSetting Default ValueEnabled YesWEP Keys null (all 4 keys)WEP Key Length null (all 4 keys)Default Key ID 0WPA Enabled NoTKIP Enabled YesAES Enabled NoEAP Enabled YesPSK Enabled NoPass Phrase nullGroup Rekey 600
Wireless LAN ArrayAppendix A: Quick Reference Guide 183Administrator Account and PasswordManagementSetting Default ValueID adminPassword adminSetting Default ValueTelnet OnSSH On
Wireless LAN Array184 Appendix A: Quick Reference GuideKeyboard ShortcutsThe following table shows the most common keyboard shortcuts.Action ShortcutCut selected data and place it on the clipboard. Ctrl + XCopy selected data to the clipboard. Ctrl + CPaste data from the clipboard into a document (at the insertion point). Ctrl + VCopy the active window to the clipboard. Alt + Print ScreenCopy the entire desktop image to the clipboard. Print ScreenAbort an action at any time. EscGo back to the previous screen. bAccess the Help screen. ?
Wireless LAN ArrayAppendix B: Technical Support 185Appendix B: Technical SupportThis chapter provides valuable support information that can help you resolve technical difficulties. Before contacting Xirrus, review all sections in this chapter and try to determine if your problem resides with XS-3900 or your network infrastructure. Section headings for this chapter include:zGeneral Hints and TipszFrequently Asked QuestionszFrequently Asked QuestionszContact InformationzContact InformationGeneral Hints and TipsThis section provides some useful tips that will optimize the reliability and performance of your XS-3900 unit(s).zThe XS-3900 requires careful handling. For best performance, units should be mounted in a dust-free and temperature-controlled environment.zIf using multiple XS-3900s at the same location, we recommend maintaining a distance of at least 50 feet between units.zKeep the XS-3900 away from electrical devices or appliances that generate RF noise. Because the XS-3900 is generally mounted on ceilings, be aware of its position relative to lighting (especially fluorescent lighting).zIf using AC power, each XS-3900 unit requires its own dedicated AC power outlet. Do not attempt to “piggy-back” AC power to multiple units. If deploying multiple units, consider using the optional Xirrus Remote DC Power System (XP-3100).zIf you are deploying multiple units, ensure that the “clock face” of all units is aligned in the same direction.zThe XS-3900 should only be used with Wi-Fi certified client devices.
Wireless LAN Array186 Appendix B: Technical SupportFrequently Asked QuestionsThis section answers some of the most frequently asked questions, organized by functional area.Multiple SSIDsQ. What Are BSSIDs and SSIDs?A. BSSID (Basic Service Set Identifier) refers to an individual access point radio and its associated clients. The identifier is the MAC address of the access point radio that forms the BSS.A group of BSSs can be formed to allow stations in one BSS to communicate to stations in another BSS by way of a backbone that interconnects each access point.The Extended Service Set (ESS) refers to the group of BSSIDs that are grouped together to form one ESS. The ESSID (often referred to as SSID or “wireless network name”) identifies the Extended Service Set. Clients must associate to a single ESS at any given time. Clients ignore traffic from other Extended Service Sets that do not have the same SSID.Legacy access points typically support one SSID per access point. Xirrus Wireless LAN Arrays support the ability for multiple SSIDs to be defined and used simultaneously.Q. What would I use SSIDs for?A. The creation of different wireless network names allows system administrators to separate types of users with different requirements. The following policies can be tied to an SSID:zMinimum security required to join this SSID.zThe wireless Quality of Service (QoS) desired for this SSID.zThe wired VLAN associated with this SSID.As an example, one SSID named accounting might require the highest level of security, while another SSID named guests might have low security requirements.
Wireless LAN ArrayAppendix B: Technical Support 187Another example may define an SSID named voice that supports voice over Wireless LAN phones with the highest possible Quality of Service (QoS) definition. This type of SSID might also forward traffic to specific VLANs on the wired network.Q. How do I set up SSIDs?A. Use the following procedure as a guideline. For more detailed information, go to “SSID Management” on page 92.1. From the Web Management Interface, go to the Create SSID page.2. Select Yes to make the SSID visible to all clients on the network. Although the XS-3900 will not broadcast SSIDs that are hidden, clients can still associate to a hidden SSID if they know the SSID name to connect to it.3. Select the minimum security that will be required by users for this SSID.4. If desired (optional), select a Quality of Service (QoS) setting for this SSID. The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID wireless traffic.5. If desired (optional), select a VLAN that you want this traffic to be forwarded to on the wired network.6. If desired (optional), you can select which radios this SSID will not be available on—the default is to make this SSID available on all radios.7. Click on the Apply button to apply your changes to this session.8. Click on the Save button to save your changes.9. If you need to edit any of the SSID settings, you can do so from the Edit SSID page.
Wireless LAN Array188 Appendix B: Technical SupportSecurityQ. How do I know my management session is secure?A. Follow these guidelines:zAdministrator passwordsAlways change the default administrator password (the default is admin), and choose a strong replacement password. When appropriate, issue read only administrator accounts.zSSH versus TelnetBe aware that Telnet is not secure over network connections and should be used only with a direct serial port connection. When connecting to the unit’s Command Line Interface over a network connection, you must use a Secure SHell (SSH) utility. The most commonly used freeware providing SSH tools is PuTTY.zConfiguration auditingDo not change approved configuration settings. The optional Xirrus Wireless Management System (XM-3300) offers powerful management features for small or large XS-3900 deployments, and can audit your configuration settings automatically. In addition, using the XM-3300 eliminates the need for an FTP server.Q. Which wireless data encryption method should I use?A. Wireless data encryption prevents eavesdropping on data being transmitted or received over the airwaves. The XS-3900 allows you to establish the following data encryption configuration options:zOpenThis option offers no data encryption and is not recommended, though you might choose this option if clients are required to use a VPN connection through a secure SSH utility, like PuTTy.
Wireless LAN ArrayAppendix B: Technical Support 189zWEP (Wired Equivalent Privacy)This option provides minimal protection (though much better than using an open network). An early standard for wireless data encryption and supported by all Wi-Fi certified equipment, WEP is vulnerable to hacking and is therefore not recommended for use by Enterprise networks.zWPA (Wi-Fi Protected Access)This is a much stronger encryption model than WEP and uses TKIP (Temporal Key Integrity Protocol) with AES (Advanced Encryption Standard) to prevent WEP cracks.TKIP solves security issues with WEP. It also allows you to establish encryption keys on a per-user-basis, with key rotation for added security. In addition, TKIP provides Message Integrity Check (MIC) functionality and prevents active attacks on the wireless network.AES is the strongest encryption standard and is used by government agencies; however, old legacy hardware may not be capable of supporting the AES mode (it probably won’t work on older wireless clients). Because AES is the strongest encryption standard currently available, it is highly recommended for Enterprise networks.Any of the above encryption modes can be used (and can be used at the same time).Q. Which user authentication method should I use?A. User authentication ensures that users are who they say they are. For this purpose, the XS-3900 allows you to choose between the following user authentication methods:zPre-Shared KeyUsers must manually enter a key (pass phrase) on the client side of the wireless network that matches the key stored by the administrator in the XS-3900.
Wireless LAN Array190 Appendix B: Technical SupportzRADIUS 802.1x with EAP802.1x uses a RADIUS server to authenticate large numbers of clients, and can handle different EAP (Extensible Authentication Protocol) authentication methods, including EAP-TLS, EAP-TTLS and EAP-PEAP. The RADIUS server can be internal (provided by the XS-3900) or external. An external RADIUS server offers more functionality and is recommended for large Enterprise deployments.When using this method, user names and passwords must be entered into the RADIUS server for user authentication.zMAC Address ACLs (Access Control Lists)MAC address ACLs provide a list of client adapter MAC addresses that are allowed or denied access to the wireless network. Access Control Lists work well when there are a limited number of users—in this case, enter the MAC addresses of each user in the Allow list. In the event of a lost or stolen MAC adapter, enter the affected MAC address in the Deny list.Q. Why do I need to authenticate my XS-3900 units?A. When deploying multiple XS-3900 units, you may need to define which units are part of which wireless network (for example, if you are establishing more than one network). In this case, you need to employ the Xirrus Wireless Management System (XM-3300) which can authenticate your XS-3900 units automatically and ensure that only authorized units are associated with the defined wireless network.Q. What is rogue AP (Access Point) detection?A. The XS-3900 has a dedicated radio (abg/4) which constantly scans the local wireless environment for rogue APs (non-Xirrus devices that are not part of your wireless network), unencrypted transmissions, and other security issues. Administrators can then classify each rogue AP and ensure that these devices do not interrupt or interfere with the network.
Wireless LAN ArrayAppendix B: Technical Support 191VLAN SupportQ. What Are VLANs?A. VLANs (Virtual Local Area Networks) are a logical grouping of network devices that share a common network broadcast domain. Members of a particular VLAN can be on any segment of the physical network but logically only members of a particular VLAN can see each other.VLANs are defined and implemented using the wired network switches that are VLAN capable. Packets are tagged for transmission on a particular VLAN according to the IEEE 802.1Q standard, with VLAN switches processing packets according to the tag.Q. What would I use VLANs for?A. Logically separating different types of users, systems, applications, or other logical division aids in performance and management of different network devices. Different VLANs can also be assigned with different packet priorities to prioritize packets from one VLAN over packets from another VLAN.VLANs are managed by software settings—instead of physically plugging in and moving network cables and users—which helps to ease network management tasks.Q. What are Wireless VLANs?A. Wireless VLANs allow similar functionality to the wired VLAN definitions and extend the operation of wired VLANs to the wireless side of the network.Wireless VLANs can be mapped to wireless SSIDs so that traffic from wired VLANs can be sent to wireless users of a particular SSID. The reverse is also true, where wireless traffic originating from a particular SSID can be tagged for transmission on a particular wired VLAN.Sixteen SSIDs can be defined on the XS-3900, allowing a total of sixteen VLANs to be accessed (one per SSID).
Wireless LAN Array192 Appendix B: Technical SupportAs an example, to provide guest user access an SSID of guest might be created. This SSID could be mapped to a wired VLAN that segregates unknown users from the rest of the wired network and restricts them to Internet access only. Wireless users could then associate to the wireless network via the guest SSID and obtain access to the Internet through the selected VLAN, but would be able to access other privileged network resources.Q. How do I set up Wireless VLANs?A. Use the following procedure as a guideline. For more detailed information, go to “VLAN Settings” on page 71.1. From the Web Management Interface, go to the VLAN Settings page.2. Create a new VLAN by defining the same VLAN ID as the one you are using on the wired network.3. If desired (optional), assign a description to this VLAN.4. Select the wired Ethernet interface that this VLAN is defined for.5. Select Tag Outgoing Packets.6. Go to the SSID Management menu and either create a new SSID or edit an existing SSID. From the SSID property page, choose the desired VLAN for this SSID.7. Click on the Apply button to apply your changes to this session.8. Click on the Save button to save your changes.
Wireless LAN ArrayAppendix B: Technical Support 193Contact InformationXirrus, Inc. is located in Westlake Village, California, just 45 minutes northwest of downtown Los Angeles and 45 minutes southeast of Santa Barbara.Xirrus, Inc.370 North Westlake Blvd, Suite 200Westlake Village, CA 91362USATel: 1.805.497.0955Fax: 1.805.449.1180www.xirrus.com
Wireless LAN Array194 Appendix B: Technical SupportUse this space for your notes ...
Wireless LAN ArrayGlossary of Terms 195Glossary of Terms802.11aA supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 5 GHz and data rates of up to 54 Mbps.802.11bA supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 2.4 GHz and data rates of up to 11 Mbps.802.11dA supplement to the Media Access Control (MAC) layer in 802.11 to promote worldwide use of 802.11 WLANs. It allows Access Points to communicate information on the permissible radio channels with acceptable power levels for user devices. Because the 802.11 standards cannot legally operate in some countries, 802.11d adds features and restrictions to allow WLANs to operate within the rules of these countries.802.11gA supplement to the IEEE 802.11 WLAN specification that describes radio transmissions at a frequency of 2.4 GHz and data rates of up to 54 Mbps.802.1QAn IEEE standard for MAC layer frame tagging (also known as encapsulation). Frame tagging uniquely assigns a user-defined ID to each frame. It also enables a switch to communicate VLAN membership information across multiple (and multi-vendor) devices by frame tagging.AES(Advanced Encryption Standard) A data encryption scheme that uses three different key sizes (128-bit, 192-bit, and 256-bit). AES was adopted by the U.S. government in 2002 as the encryption standard for protecting sensitive but unclassified electronic data.
Wireless LAN Array196 Glossary of TermsauthenticationThe process that a station, device, or user employs to announce its identify to the network which validates it. IEEE 802.11 specifies two forms of authentication, open system and shared key.bandwidthSpecifies the amount of the frequency spectrum that is usable for data transfer. In other words, it identifies the maximum data rate a signal can attain on the medium without encountering significant attenuation (loss of power).beacon intervalWhen a device in a wireless network sends a beacon, it includes with it a beacon interval, which specifies the period of time before it will send the beacon again. The interval tells receiving devices on the network how long they can wait in low power mode before waking up to handle the beacon. Network administrators can adjust the beacon interval—usually measured in milliseconds (ms) or its equivalent, kilo-microseconds (Kmsec).bit rateThe transmission rate of binary symbols ('0' and '1'), equal to the total number of bits transmitted in one second.BSS(Basic Service Set) When a WLAN is operating in infrastructure mode, each access point and its connected devices are called the Basic Service Set.BSSIDThe unique identifier for an access point in a BSS network. See also, SSID.cellThe basic geographical unit of a cellular communications system. Service coverage of a given area is based on an interlocking network of cells, each with a radio base station (transmitter/receiver) at its center. The size of each cell is determined by the terrain and forecasted number of users.
Wireless LAN ArrayGlossary of Terms 197channelA specific portion of the radio spectrum—the channels allotted to one of the wireless networking protocols. For example, 802.11b and 802.11g use 14 channels in the 2.4 GHz band, only 3 of which don't overlap (1, 6, and 11). In the 5 GHz band, 802.11a uses 8 channels for indoor use and 4 for outdoor use, none of which overlap.CoS(Class of Service) A category based on the type of user, type of application, or some other criteria that QoS systems can use to provide differentiated classes of service.default gatewayThe gateway in a network that a computer will use to access another network if a gateway is not specified for use. In a network using subnets, a default gateway is the router that forwards traffic to a destination outside of the subnet of the transmitting device.DHCP(Dynamic Host Configuration Protocol) A method for dynamically assigning IP addresses to devices on a network. DHCP issues IP addresses automatically within a specified range to client devices when they are first powered up.DHCP leaseThe DHCP lease is the amount of time that the DHCP server grants to the DHCP client for permission to use a particular IP address. A typical DHCP server allows its administrator to set the lease time.DNS(Domain Name System) A system that maps meaningful domain names with complex numeric IP addresses. DNS is actually a separate network—if one DNS server cannot translate a domain name, it will ask a second or third until a server is found with the correct IP address.
Wireless LAN Array198 Glossary of TermsdomainThe main name/Internet address of a user's Internet site as registered with the InterNIC organization, which handles domain registration on the Internet. For example, the “domain” address for Xirrus is: http://www.xirrus.com, broken down as follows:zhttp:// represents the Hyper Text Teleprocessing Protocol used by all Web pages.zwww is a reference to the World Wide Web.zxirrus refers to the company.zcom specifies that the domain belongs to a commercial enterprise.DTIM(Delivery Traffic Indication Message) A DTIM is a signal sent as part of a beacon by an access point to a client device in sleep mode, alerting the device to a packet awaiting delivery.EAP(Extensible Authentication Protocol) When you log on to the Internet, you're most likely establishing a PPP connection via a remote access server. The password, key, or other device you use to prove that you are authorized to do so is controlled via PPP's Link Control Protocol (LCP). However, LCP is somewhat inflexible because it has to specify an authentication device early in the process. EAP allows the system to gather more information from the user before deciding which authenticator to use. It is called extensible because it allows more authenticator types than LCP (for example, passwords and public keys).EDCF(Enhanced Distributed Coordinator Function) A QoS extension which uses the same contention-based access mechanism as current devices but adds “offset contention windows” that separate high priority packets from low priority packets (by assigning a larger random backoff window to lower priorities than to higher priorities). The result is “statistical priority,” where high-priority packets usually are transmitted before low-priority packets.encapsulationA way of wrapping protocols such as TCP/IP, AppleTalk, and NetBEUI in Ethernet frames so they can traverse an Ethernet network and be unwrapped when they reach the destination computer.
Wireless LAN ArrayGlossary of Terms 199encryptionAny procedure used in cryptography to translate data into a form that can be decrypted and read only by its intended receiver.Fast EthernetA version of standard Ethernet that runs at 100 Mbps rather than 10 Mbps.FCC(Federal Communications Commission) US wireless regulatory authority. The FCC was established by the Communications Act of 1934 and is charged with regulating Interstate and International communications by radio, television, wire, satellite and cable.frameA packet encapsulated to travel on a physical medium, like Ethernet or Wi-Fi. If a packet is like a shipping container, a frame is the boat on which the shipping container is loaded. Gigabit 1The primary Gigabit Ethernet interface. See also, Gigabit Ethernet.Gigabit 2The secondary Gigabit Ethernet interface. See also, Gigabit Ethernet.Gigabit EthernetThe newest version of Ethernet, with data transfer rates of 1 Gigabit (1,000 Mbps).host nameThe unique name that identifies a computer on a network. On the Internet, the host name is in the form comp.xyz.net. If there is only one Internet site the host name is the same as the domain name. One computer can have more than one host name if it hosts more than one Internet site (for example, home.xyz.net and comp.xyz.net. In this case, comp and home are the host names and xyz.net is the domain name.IPsecA Layer 3 authentication and encryption protocol. Used to secure VPNs.
Wireless LAN Array200 Glossary of TermsMAC address(Media Access Control Address) A 6-byte hexadecimal address assigned by a manufacturer to a device.Mbps(Megabits per second) A standard measure for data transmission speeds (for example, the rate at which information travels over the Internet). 1 Mbps denotes one million bits per second.MTU(Maximum Transmission Unit) The largest physical packet size—measured in bytes—that a network can transmit. Any messages larger than the MTU are divided into smaller packets before being sent. Every network has a different MTU, which is set by the network administrator. Ideally, you want the MTU to be the same as the smallest MTU of all the networks between your machine and a message's final destination. Otherwise, if your messages are larger than one of the intervening MTUs, they will get broken up (fragmented), which slows down transmission speeds.NTP(Network Time Protocol) An Internet standard protocol (built on top of TCP/IP) that ensures the accurate synchronization (to the millisecond) of computer clock times in a network of computers. Running as a continuous background client program on a computer, NTP sends periodic time requests to servers, obtaining server time stamps and using them to adjust the client's clock.packetData sent over a network is broken down into many small pieces—packets—by the Transmission Control Protocol layer of TCP/IP. Each packet contains the address of its destination as well the data. Packets may be sent on any number of routes to their destination, where they are reassembled into the original data. This system is optimal for connectionless networks, such as the Internet, where there are no fixed connections between two locations.PLCP(Physical Layer Convergence Protocol) Defined by IEEE 802.6, a protocol specified within the Transmission Convergence layer that defines exactly how cells are formatted within a data stream for a particular type of transmission facility.
Wireless LAN ArrayGlossary of Terms 201preamblePreamble (sometimes called a header) is a section of data at the head of a packet that contains information that the access point and client devices need when sending and receiving packets. PLCP has two structures, a long and a short preamble. All compliant 802.11b systems have to support the long preamble. The short preamble option is provided in the standard to improve the efficiency of a network's throughput when transmitting special data, such as voice, VoIP (Voice-over IP) and streaming video.private keyIn cryptography, one of a pair of keys (one public and one private) that are created with the same algorithm for encrypting and decrypting messages and digital signatures. The private key is provided only to the requestor and never shared. The requestor uses the private key to decrypt text that has been encrypted with the public key by someone else.PSK(Pre-Shared Key) A TKIP passphrase used to protect your network traffic in WPA.public keyIn cryptography, one of a pair of keys (one public and one private) that are created with the same algorithm for encrypting and decrypting messages and digital signatures. The public key is made publicly available for encryption and decryption.QoS(Quality of Service) QoS can be used to describe any number of ways in which a network provider guarantees a service's performance, such as an average or minimum throughput rate.RADIUS(Remote Authentication Dial-In User Service) A client-server security protocol, developed to authenticate, authorize, and account for dial-up users. The RADIUS server stores user profiles, which include passwords and authorization attributes.RDPS(Remote Distribution Power Supply) A Xirrus proprietary power supply used for delivering power from a remote source to the Xirrus family of products.
Wireless LAN Array202 Glossary of TermsRemote DC Power System (XP-3100)An optional Xirrus proprietary product that provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.RSSI(Received Signal Strength Indicator) A measure of the energy observed by an antenna when receiving a signal.SDMA(Spatial Division Multiple Access) A wireless communications mode that optimizes the use of the radio spectrum and minimizes cost by taking advantage of the directional properties of antennas. The antennas are highly directional, allowing duplicate frequencies to be used for multiple zones.SNMP(Simple Network Management Protocol) A standard protocol that regulates network management over the Internet.SNTP(Simple Network Time Protocol) A simplified version of NTP. SNTP can be used when the ultimate performance of the full NTP implementation described in RFC 1305 is not needed or justified.SSH(Secure SHell) Developed by SSH Communications Security, Secure Shell is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. SSH protects a network from attacks, such as IP spoofing, IP source routing, and DNS spoofing. Attackers who has managed to take over a network can only force SSH to disconnect—they cannot “play back” the traffic or hijack the connection when encryption is enabled. When using SSH's slogin (instead of rlogin) the entire login session, including transmission of password, is encrypted making it almost impossible for an outsider to collect passwords.
Wireless LAN ArrayGlossary of Terms 203SSID(Service Set IDentifier) Every wireless network or network subset (such as a BSS) has a unique identifier called an SSID. Every device connected to that part of the network uses the same SSID to identify itself as part of the family—when it wants to gain access to the network or verify the origin of a data packet it is sending over the network. In short, it is the unique name shared among all devices in a WLAN.subnet maskA mask used to determine what subnet an IP address belongs to. An IP address has two components: (1) the network address and (2) the host address. For example, consider the IP address 150.215.017.009. Assuming this is part of a Class B network, the first two numbers (150.215) represent the Class B network address, and the second two numbers (017.009) identify a particular host on this network.TKIP(Temporal Key Integrity Protocol) Provides improved data encryption by scrambling the keys using a hashing algorithm and, by adding an integrity-checking feature, ensures that the encryption keys haven’t been tampered with.transmit powerThe amount of power used by a radio transceiver to send the signal out. Transmit power is generally measured in milliwatts, which you can convert to dBm.VLAN(Virtual LAN) A group of devices that communicate as a single network, even though they are physically located on different LAN segments. Because VLANs are based on logical rather than physical connections, they are extremely flexible. A device that is moved to another location can remain on the same VLAN without any hardware reconfiguration.
Wireless LAN Array204 Glossary of TermsVLAN tagging(Virtual LAN tagging) Static port-based VLANs were originally the only way to segment a network without using routing, but these port-based VLANs could only be implemented on a single switch (or switches) cabled together. Routing was required to transfer traffic between unconnected switches. As an alternative to routing, some vendors created proprietary schemes for sharing VLAN information across switches. These methods would only operate on that vendor's equipment and were not an acceptable way to implement VLANs. With the adoption of the 802.1Q standard, traffic can be confined to VLANs that exist on multiple switches from different vendors. This interoperability and traffic containment across different switches is the result of a switch's ability to use and recognize 802.1Q tag headers—called VLAN tagging. Switches that implement 802.1Q tagging add this tag header to the frame directly after the destination and source MAC addresses. The tag header indicates:1. That the packet has a tag.2. Whether the packet should have priority over other packets.3. Which VLAN it belongs to, so that the switch can forward or filter it correctly.WEP(Wired Equivalent Privacy) An optional IEEE 802.11 function that offers frame transmission privacy similar to a wired network. The Wired Equivalent Privacy generates secret shared encryption keys that both source and destination stations can use to alter frame bits to avoid disclosure to eavesdroppers.Wi-Fi AllianceA nonprofit international association formed in 1999 to certify interoperability of wireless Local Area Network products based on IEEE 802.11 specification. The goal of the Wi-Fi Alliance's members is to enhance the user experience through product interoperability.Wireless LAN Array (XS-3900)A Xirrus proprietary high capacity wireless access point utilizing multiple channels, specifically designed for the Enterprise market.Wireless Management System (XM-3300)A Xirrus proprietary product used for managing large XS-3900 deployments from a centralized Web-based interface.
Wireless LAN ArrayGlossary of Terms 205WPA(Wi-Fi Protected Access) A Wi-Fi Alliance standard that contains a subset of the IEEE 802.11i standard, using TKIP as an encryption method and 802.1X for authentication.XM-3300The Xirrus Wireless Management System (XM-3300) is a Xirrus proprietary product used for managing large XS-3900 deployments from a centralized Web-based interface.XP-3100The Xirrus Remote DC Power System (XP-3100) is an optional Xirrus proprietary product that provides distributed DC power to multiple XS-3900 units, eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS.XS-3900The Xirrus Wireless LAN Array (XS-3900) is a high capacity, multi-wireless access point specifically designed for the Enterprise market.
Wireless LAN Array206 Glossary of TermsUse this space for your notes ...
Wireless LAN ArrayIndex 207IndexNumerics802.11a 11802.11a/b/g 11802.11b/g 11802.11e 12802.11p 12802.11q 12AAES 12authentication 12Bbeam distribution 11benefits 10Cchannelsnon-overlapping 12character restrictions 56CLIcommands 120beacon information 136data clearance 160data handling 160DHCP configuration 152DNS configuration 150filters 156help 168interface configuration 122interface selection 121NTP configuration 151radio configuration 126Radius services 157remove configuration 164reports 158security 143show information 161SNMP configuration 155SSID configuration 149station timeouts 148Syslog configuration 153system administration 137system testing 142testing 142Telnet connection 117Command Line Interface 117commandsalphabetical listing of 173CLI 117compliance 12configuration changesapplying 56contact information 193coverageextended 11critical messages 55Ddefault settings 178deploymentease of 12DHCP server 19, 75DNS settings 76EEAP-MDS 12EAP-TLS 12EAP-TTLS 12encryption 12event log 116
Wireless LAN Array208 Indexevent messages 55express setup 47, 61external RADIUS server 802.1x 19Ffactory default settings 178FAQs 186features 10frequently asked questions 186FTP server 19Gglossary of terms 195Hhelp button 56HyperTerminal 18Iinstallation 17installing the MCAP-3616 37mounting the unit 38requirements 17unpacking the unit 36workflow 35installation workflow 35interfacesWeb 53Internet Explorer 18Kkey features 10keyboard shortcuts 184keywords 120Llogging 112, 116logging in 57MMIC 12mounting the unit 38NNetscape Navigator 18networkinterfaces 66settings 67statistics 74VLAN settings 71network installation 17non-overlapping channels 12Ooverview 6Ppassword 57PEAP 12performance 10power outlet 17print button 56product installation 17product overview 6product specifications 13PuTTy 17QQoS 12Quality of Service 12quick reference guide 169Rradio distribution 10RADIUS server 19, 103, 105rogue detection 11
Wireless LAN ArrayIndex 209SSecure Shell 17security 6, 12, 97management 98RADIUS server 103, 105serial port 18services 111SNMP 9, 113software 114specifications 13SSH 17SSIDcreating 94deleting 94editing 95management 92statistics 74status bar 56system log 112Ttechnical supportcontact information 193frequently asked questions 186Telnetestablishing a connection 117TKIP 12tools 115Uunpacking the unit 36user interface 53users 110VVLAN settings 71VoWLAN 12Wwarning messages 55Web interface 53structure and navigation 55WEP 12Wi-Fi compliance 12workflow 35WPA2 6XXirrus Management System 6, 9, 12, 19Xirrus Remote Power System 17, 19XMS 6, 9, 12, 19XRPS 17, 19XS 3900management 57
Wireless LAN Array210 Index

Navigation menu