Extricom EXRP-20 802.11a/b/g Access Point User Manual Manual
Extricom Ltd 802.11a/b/g Access Point Manual
Extricom >
Manual
Version 3.1
EXTRICOM WLAN SYSTEM
USER GUIDE
EXSW-800
EXSW-1200
EXSW-2400
EXRP-20
EXRP-40
EXRE-10
Copyright
No part of this publication may be reproduced, stored in a retrieval system or transmitted, in any
form or by any means, photocopying, recording or otherwise, without prior written consent of
Extricom Ltd. No patent liability is assumed with respect to the use of the information contained
herein.
While every precaution has been taken in the preparation of this publication, Extricom Ltd. assumes
no responsibility for errors or omissions. The information contained in this publication and features
described herein are subject to change without notice. Extricom Ltd. reserves the right at any time
and without notice, to make changes in the product.
Copyright © 2007 Extricom Ltd. All rights reserved. The products described herein are protected
by U.S. Patents and may be protected by other foreign patents, or pending applications.
Important Notice:
Read this user manual and safety instructions before installing and operating the
Extricom WLAN system.
Disclaimer
Extricom makes no representations or warranties, whether express or implied, that the
Extricom wireless local area network (WLAN) system or any component thereof shall meet
the purchaser’s operating requirements or that system operation will be uninterrupted or
errorfree. All WLANs, including the Extricom WLAN system, can potentially be affected by
outside sources of interference such as other broadcasting devices, radiation, device immunity
level, and other external sources of interference.
The Extricom WLAN System User Guide i
Declaration of Conformity
Manufacturer’s Name: Extricom Ltd.
Declares under our sole responsibility that the products:
Product Names: Extricom EXSW-800 & EXSW-1200 & EXSW-2400 & EXRE -10
Conform(s) to the following standard(s) or other normative document(s):
EMC: FCC Part 15 Class B
EN 300386
VCCI V-3/2001.04
ANATEL Resolution 237
Safety: EN 60950-1
UL 60950-1
IEC 60950-1
ANATEL Resolution 238
Environmental: EU Directive 2002/95/EC of January 27, 2003, on the Restriction of the Use of
Certain Hazardous Substances in Electrical and Electronic Equipment (RoHS)
ii Declaration of Conformity
Manufacturer’s Name: Extricom Ltd.
Declares under our sole responsibility that the product:
Product Name: Extricom EXRP-20 & EXRP-40
Conforms to the following standard(s) or other normative document(s):
EMC: FCC Part 15 Class B
EN 301489
VCCI V-3/2001.04.
Radio: FCC Part 15 C
FCC Part 15 E
EN 300328
EN 301893
Japan Type Certificate: Article 2, clause 1
ANTEL Resolution 365
Safety: EN 60950-1
UL 60950-1
IEC 60950-1
Environmental: EU Directive 2002/95/EC of January 27, 2003, on the Restriction of the Use of
Certain Hazardous Substances in Electrical and Electronic Equipment (RoHS)
This device complies with Part 15 of the FCC Rules. Operation is subject to the
following two conditions:
• The device may not cause harmful interference
• This device must accept any interference received, including
interference that may cause undesired operation.
!
This equipment has been approved for mobile applications where the equipment
should be used at distances greater than 20cm from the human body (with the
exception of hands, wrists, feet and ankles). Operation at distances less than 20 cm
is strictly prohibited.
Changes or modification to device not expressly approved by Extricom LTD is
strictly prohibited and could avoid the user's authority to operate the equipment.
ii Table of Contents
Table of Contents
About This Guide..................................................................................................1
Audience..........................................................................................................................1
Conventions.....................................................................................................................1
Safety Precautions ...........................................................................................................1
Chapter 1 Introduction to the Extricom Wireless LAN System ........................................3
Overview of the Extricom WLAN System .....................................................................3
Features and Benefits ......................................................................................................4
Summary.......................................................................................................................6
Overview of the Extricom Switches................................................................................7
Overview of the Extricom Access Point .........................................................................9
Overview of the Extricom Repeater..............................................................................10
Chapter 2 Installing the Extricom WLAN System ............................................................13
Unpacking the Extricom WLAN System ......................................................................13
Additional Equipment Needed ......................................................................................13
Determining the Location of the Extricom Access Points ............................................14
The Extricom EXSW-800/1200/2400 Switch ...............................................................14
The Extricom Access Points..........................................................................................16
The Extricom Repeater..................................................................................................18
Connecting the Switch and Access Points.....................................................................19
Mounting the Access Points (Optional) ........................................................................19
Chapter 3 Configuring the Extricom WLAN System .......................................................21
Using the Extricom Web Configuration Pages..............................................................22
Configuring the LAN Parameters..................................................................................24
Configuring the WLAN Parameters..............................................................................26
Configuring SSIDs ........................................................................................................30
Configuring Security Definitions ..................................................................................35
Advanced Configuration of the Extricom WLAN Architecture....................................39
Centralized Configuration Settings ...............................................................................44
The Extricom WLAN System User Guide iii
Access Points Powering ................................................................................................46
Configuration of the Extricom WLAN Architecture Utilities.......................................48
Viewing the System Configuration File .....................................................................49
Configuration File Backup..........................................................................................49
Uploading a New Configuration File..........................................................................50
Restoring System Defaults..........................................................................................50
Upgrading the Extricom Firmware .............................................................................50
Rebooting the Extricom Switch..................................................................................51
Reconfigure Switch - Smart Configuration ................................................................51
Setting the Time and Date...........................................................................................51
Setting Passwords in the Extricom Switch....................................................................53
Viewing Reports and Events Log..................................................................................53
Viewing a Summary of the Updated Configuration......................................................54
Viewing Extricom Information .....................................................................................56
Chapter 4 Troubleshooting ..................................................................................................57
Appendix A Specifications...................................................................................................... 59
Extricom Switch Specifications ....................................................................................59
Extricom Access Point Specifications...........................................................................61
Extricom PoE Range extender specificathion ...............................................................64
Appendix B Access Point Mounting Template..................................................................... 65
The Extricom WLAN System User Guide 1
About This Guide
This guide provides detailed instructions for installing, configuring, and troubleshooting the
Extricom EXSW-800/1200/2400 WLAN switches and Extricom EXRP-20/40UltraThin™ Access
Point (AP) .
Audience
This guide is intended for enterprise IT managers and system installers who are familiar with
installing and configuring networks.
Conventions
This is a note. It provides additional information to users.
-
This is a caution. A caution warns of possible damage to the equipment if a
procedure is not followed correctly.
!
A warning alerts you to important operating instructions.
Safety Precautions
Follow the instructions in the guide to ensure proper installation and operation of the switch and
APs.
!
The use of wireless devices is limited to the constraints imposed by local laws.
Operate the switch and APs in an indoor environment.
Disconnect the switch and APs from power sources before servicing.
2 Introduction to the Extricom Wireless LAN System
The switch and AP enclosure must not be opened by anyone other than an authorized
service representative.
To comply with FCC RF exposure compliance requirements, maintain a minimal separation
distance of at least 20 cm/8 inches between the AP and all persons.
The switch contains an internal battery.
!
Always replace the battery with the same type to avoid the risk of explosion.
Dispose of used battery according to the instructions provided with the new battery.
The Extricom WLAN System User Guide 3
Chapter 1
Introduction to the Extricom Wireless
LAN System
A Wireless Local Area Network (WLAN) based on the IEEE 802.11 standard enables laptops,
PDAs, phones, and other “Wi-Fi” equipped devices to wirelessly connect to the enterprise network.
However, large scale deployments of traditional cell-based WLANs, in which each access point
(AP) operates on a different channel than that of adjacent APs, have been hindered by issues such as
poor coverage, low capacity, high-latency mobility, and expensive interference analysis or site
survey and maintenance costs.
Extricom’s WLAN, on the other hand, is a completely new solution. Referred to as the Interference-
Free™ architecture, it eliminates the coverage and capacity trade-offs of traditional cell-based
WLAN architecture. In addition, the need for cell planning and interference analysis, a highly
expensive aspect of owning a WLAN, is also eliminated. Finally, Extricom’s innovative approach
does away with most WLAN maintenance tasks. Extricom’s WLAN System is specifically designed
to provide increased network capacity, seamless mobility, high level of security, and easy
installation and configuration.
Overview of the Extricom WLAN System
The Extricom WLAN consists of a wireless switch (EXSW-800/1200/2400) connected to a set of
UltraThin™ APs (EXRP-20/40). The Extricom WLAN system eliminates the concept of cell-
planning and replaces it with the “channel blanket” topology. In this topology, each Wi-Fi radio
channel is used on every access point to create continuous “blankets” of coverage. By using multi-
radio APs, the Extricom system is able to create multiple overlapping channel blankets from the
same physical set of devices, as illustrated in Figure 1.
4 Introduction to the Extricom Wireless LAN System
Figure 1. Two Channel Blanket Coverage
The Extricom solution is based on a fully centralized WLAN architecture, in which the switch
makes all of the decisions for packet delivery on the wireless network. In this configuration, the
access points (APs) simply function as radios, with no software, storage capability, or IP address.
Even the basics of connecting are different: clients associate directly with the switch, not with the
AP. The AP acts as an “RF conduit” to rapidly funnel traffic between the clients and the switch. The
Extricom architecture has essentially centralized the 802.11 logic in the switch, while distributing
the wireless electronics in the APs.
Centralization of the Wi-Fi environment enables enterprises to deploy 802.11a/b/g channels at every
AP, creating multiple overlapping “channel blankets” that leverage each of the radios in the multi-
radio UltraThin AP. Each channel’s bandwidth is delivered across the blanket’s service area (i.e. the
combined coverage of all APs connected to the switch), with interference-free operation and
consistent capacity throughout.
As the client moves throughout the blanket, different APs will be in the best position to serve the
client at different times. The switch always uses the uplink and downlink path that is optimal to
serve the client. While this is going on “behind the scenes,” the client never experiences an AP-to-
AP handoff (i.e. de-association and re-association), resulting in seamless mobility.
Within each channel blanket, the switch avoids co-channel interference by permitting multiple APs
to simultaneously transmit on the same channel only if they won’t interfere with each other. This is
the essence of the TrueReuse™ functionality.
Features and Benefits
Extricom’s WLAN system solution offers the following features:
Ease of deployment - No cell planning
Extricom’s architecture requires no cell planning and experiences no constraints due to RF
interference or channelization. Consequently, Extricom APs can be deployed wherever needed,
in any density or even varying density, to meet the desired end-client service level (stipulated in
terms of connection rate). The traditional site survey is therefore reduced to just physical
equipment installation planning.
The Extricom WLAN System User Guide 5
Multi-Layer WLAN
Using multiple radio Access Points, a single set of APs enables deployment of multiple high-
data-rate channel blankets with overlapping coverage, resulting in multiplied aggregate
capacity. Separate channel blankets also offer the unique ability to guarantee Quality of Service
by physically segregating different user types, traffic, and roles onto different channels.
Same band operation
The Extricom WLAN system enables two WLAN channels, in the same band (e.g. Channel 1
and 6 in 2.4 GHz), to be simultaneously used within the same AP, to form overlapping channel
blankets using the same physical set of APs.
TrueReuse bandwidth
TrueReuse technology multiplies the bandwidth of a standard 802.11 channel by dynamically
optimizing the reuse of each frequency. Within a channel blanket, up to three APs are permitted
to simultaneously transmit on the same channel, when the TrueReuse algorithm determines that
they can do this without causing each other co-channel interference.
Zero-latency mobility
In an Extricom WLAN, wireless device remains on the same channel everywhere within the
channel blanket. Inter-AP handoffs delays or packet loss do not occur as the client moves across
the range of different APs.
WiFi collaboration
Extricom’s patented WiFi Collaboration technology in which all APs are able to receive on the
same channel, provides uplink path diversity for client transmissions, making the system highly
resistant to RF instabilities and outside interference.
Dense AP deployment
In an Extricom WLAN, APs can be deployed in any density convenient to the enterprise, to
achieve both blanket coverage and a guaranteed communications rate to all users. In fact, while
cell-based solutions shy away from dense deployments because of their inherent RF obstacles,
Extricom’s system performance actually increases with AP density.
Wire-line quality VoWLAN
Extricom’s Interference-Free architecture is perfectly suited for VoWLAN providing
zero-latency mobility, voice and data separation, reduced power consumption, and high RF
resiliency, all together resulting in superior voice performance.
IEEE 802.11i support
Extricom’s products support WEP-64, WEP-128, WPA-TKIP, WPA2-AES (CCMP)
encryption. The authentication modes supported include: RADIUS (802.1x) and WPA
Pre-Shared Key (PSK).
Power save
Full power conservation management is enabled for associated mobile devices over unicast,
multicast, and broadcast frames. For multicast and broadcast frames, the DTIM (Delivery
Traffic Indicator Message) period is configurable.
Centralized configuration
New switches are added to the network via a single Web interface either manually by the user,
or automatically using an Extricom protocol.
6 Introduction to the Extricom Wireless LAN System
System redundancy
Extricom enables full redundancy by connecting two switches in parallel to different APs over
the same area. The switchover parameters are user-configurable, and the Active to Standby
switchover is seamless to the user.
SNMP traps
The Extricom system supports SNMP traps, enabling the user to determine the status of the
system, including the status of APs and Redundancy statuses.
Rogue AP Detection
The Extricom system supports Rogue AP detection and reporting without the need for
additional hardware. By using one radio in each of the multi-radio APs, the Extricom Rogue AP
solution delivers the benefits of a dedicated security sensor network, without the costs of such a
physical overlay.
Multiple RADIUS & RADIUS Redundancy
The Extricom system supports multiple RADIUS servers, enabling the user to set redundancy
between these RADIUS servers.
Network Time Protocol (NTP)
The Extricom system supports synchronization of the system clock over the network, thereby
ensuring accurate local time keeping with reference to radio and atomic clocks located on the
Intranet and/or Internet.
Fast Handoff (Opportunistic Key Caching)
The Extricom system speeds up the handoff of 802.11i WLAN stations between Extricom
switches by use of Extricom’s inter switch protocol. This technique enables the client to avoid
repetitive 802.1x authentications, thereby enabling faster transition between Access Points
connected to different switches with minimal session interruption.
Summary
The Extricom WLAN eliminates the cost and complexity of cell planning and site surveys for
interference analysis. The Multi-Layered blankets provide high-capacity, zero latency (seamless)
mobility, high level of security and ease of deployment wireless network.
The Extricom WLAN System User Guide 7
Overview of the Extricom Switches
The Extricom EXSW-800 the EXSW-1200 and the EXSW-2400 switches provide central control
and configuration of the WLAN. The switches implement the Interference-Free architecture in the
Extricom WLAN. The WLAN switches are connected to EXRP-20 or the EXRP-40 access points to
form Extricom WALN network.
The EXSW-800 switch can connect up to 8 EXRP-20 APs each with two 802.11a/b/g radios, to
provide two channel blankets.
The EXSW-1200 and the EXSW-2400 can connect to the EXRP-20 or the EXRP-40 APs, the
EXSW-1200 can connect to 12 while the EXSW-2400 switch can connect up to 24 APs. Each with
two or four 802.11a/b/g radios, to provide two or four channel blankets.
Figure 2. Extricom EXSW-2400 Switch
Figure 3 Extricom EXSW-1200 Switch
The Extricom EXSW-1200 is derived from the EXSW-2400, it is based on the same
Hardware and Software , however , it supports 12 instead of 24 WLAN ports
8 Introduction to the Extricom Wireless LAN System
Figure 4. Extricom EXSW-800 Switch
Configuring a switch and its associated set of APs is as simple as configuring a single traditional
AP, greatly reducing the effort required to deploy and maintain the WLAN.
The minimal configuration required for the switch is done via a dedicated secured Web interface.
The Extricom WLAN System User Guide 9
Overview of the Extricom Access Point
Extricom’s EXRP-20 and EXRP-40 UltraThin APs are high-bandwidth devices, containing standard
802.11 radio devices. The EXRP-20 contain two radio devices while the EXRP-40 contain four
radio devices
Since the APs have no software, they require no configuration. This makes them fully
interchangeable, enabling truly plug-and-play installation. If stolen, the APs do not pose a security
risk, since all encryption is performed in the switch.
With all intelligence residing in the WLAN switch, APs may be placed as close together as
necessary to provide high-quality, high-speed connectivity from all locations within the enterprise.
APs are connected to the Extricom WLAN Switch via standard Cat5e/6 cables. Since the APs are
powered by the standard 802.3af Power over Ethernet (PoE), only a single Cat5e/6 cable connection
is required to support two simultaneous radios.
Figure 5. Extricom EXRP-20 AP
Current software version on the WLAN switch only support two channel blankets, as
such when the EXRP-40 is connected, only two radio devices on this access point
will operate. Future versions will support full configuration
Extricom APs only function when they are directly connected to Extricom switches.
10 Introduction to the Extricom Wireless LAN System
Overview of the Extricom Repeater
The EXRE-10 Power Over Ethernet (PoE) Range Extender is a unique product that doubles the
standard range of PoE, from the baseline 100 meters to a full 200 meters. It can be used both as a
standalone to extend the reach of PoE installations that are limited power source UL approved, and
as a complement to Extricom’s award-winning Interference-Free™ Wireless LAN (WLAN)
System. When used in WLAN implementations, the EXRE-10 enables Extricom UltraThin™
Access Points to be connected using standard Cat5e/6 cable up to 200 meters from the Extricom
WLAN Switch.
Continuing Extricom’s tradition of deployment simplicity, the EXRE-10 PoE Range Extender sits
in-line on the Ethernet cable and does not require an external power feed. The Range Extender
receives its power from the original PoE injector in the switch or from a PoE injector/power supply,
while it simultaneously injects PoE to the extended cable
Figure 6 Extricom EXRE-10 PoE Range Extender
The Extricom WLAN System User Guide 11
A Typical Extricom Wireless Network Topology
Extricom’s switch is connected to the wired LAN, and the APs spread throughout the enterprise.
Figure 7 displays a typical Extricom enterprise topology, consisting of an Extricom switch and
eight APs.
Figure 7. Typical Extricom Typology
Extricom uses standard WLAN protocols (IEEE 802.11). As a result, any 802.11a/b/g standard
wireless device can work seamlessly with the Extricom system.
The Extricom WLAN System User Guide 13
Chapter 2
Installing the Extricom WLAN System
This chapter provides instructions for unpacking and installing the Extricom WLAN system.
Unpacking the Extricom WLAN System
The Extricom WLAN system is shipped with the following:
One Extricom switch.
CD which contains The Extricom WLAN System User Guide and Release Notes.
APs (the number of APs is based on customer order and provided in separate boxes) are
shipped as part of the overall order.
Additional Equipment Needed
The following additional equipment is required for installing the Extricom WLAN system:
One CAT-5e/6 cable for each AP.
One CAT-5e/6 cable for connecting the WLAN switch uplink to the LAN switch.
Two stainless steel pan head 8x1-1/4" self-tapping Phillips screws for mounting each AP
(optional).
One power cable - For connecting power to the switch, use an AC power supply cord that
has a standard plug and a C-13 connector that conforms to the following minimal
requirements:
Approx. AWG: 16
Strand 31/32
Power Rating: 10 A
-
Use of a poorly grounded or ungrounded power cable may damage the switch.
14 Installing the Extricom WLAN System
Determining the Location of the Extricom Access
Points
Before installing the switch and access points, plan the placement of the APs. Before permanently
mounting the APs, it is recommended to test the network (using a laptop client) to identify potential
coverage holes. If such a problem exists, relocate an AP or add additional APs to resolve the
coverage hole.
The APs should be placed in a stable, secure location, such as on top of a closet or bookshelf, or
mounted on a wall.
The switch should be placed near the distribution point of the LAN line. This is usually in the
communications closet of your enterprise.
The Extricom EXSW-800/1200/2400 Switch
The Extricom EXSW-800 switch has 10 connectors and 4 LED types on the front panel (refer to
Figure 6).
The Extricom EXSW-2400 switch has 27 connectors and 4 LED types on the front panel (refer to
Figure 9).
Figure 8. Extricom EXSW-800 Switch
Figure 9. Extricom EXSW-2400 Switch
Table 1 describes the front panel and connectors of Extricom EXSW-800/2400 switches.
The Extricom WLAN System User Guide 15
Table 1. Extricom EXSW-800/1200/2400 Switch Connectors
Connectors Description
Console Serial connector – only to be used by, or as instructed by Extricom
personnel for troubleshooting, support, or maintenance. Can be
accessed using a Null modem cable.
EXSW-800
LAN
EXSW-
1200/2400
LAN1, LAN2
RJ-45 connectors – used to connect the switch to the wired LANs. On
EXSW-1200/2400 these connectors provide redundancy and load
sharing between them.
LAN2 is not currently active pending future development.
WLAN RJ-45 connectors – used to connect Extricom APs to the switch.
-
Do not connect any device other than Extricom APs to
the WLAN ports.
These ports provide 802.3AF PoE compatible power.
Maximum current: 270 mA, 48 volts.
Table 2 describes the front panel LEDs of Extricom EXSW-800/1200/2400 switches.
Table 2. Extricom EXSW-800/1200/2400 Switch LEDs
LEDs Color Description
Power Green On/off
LAN, LAN1, LAN2
Link/Act Green
On indicates connection to the LAN network
Blinking indicates activity in the LAN network connection
Off indicates no connection to the LAN network
EXSW-800
100M
Orange
On – 100Mbps full duplex
Off – 10Mbps
EXSW-
1200/2400
100/1000
Orange
On – 100Mbps full duplex
Blinking – 1000Mbps full duplex
1000Mbps is not currently active pending future
development.
WLAN
Link Green
On indicates connection to the WLAN AP
Blinking indicates activity over the connection to the WLAN
AP
Off indicates no connection to the WLAN AP
16 Installing the Extricom WLAN System
The Extricom Access Points
Extricom APs have two connectors located on the side of the device and four LEDs located on the
top of the device.
LEDs
WLAN Connector
Power Connection
LEDs
WLAN Connector
Power Connection
Figure 10. Extricom AP
Table 3 describes the Extricom Access Point connectors.
Table 3. Extricom AP Connectors
Connectors Description
Power
External power is not required for most
applications. Power is supplied through the
Ethernet (PoE).
In case of an external power requirement by the application,
use UL Listed LPS (Limited Power Source) or NEC Class
II adapter. Rating – Input: 90-240VAC 0.8A max. Output:
48VDC 0.56A max.
-
Due to regulatory requirements and pending
certification process for the power supply
connector - external power supply should not be
used.
WLAN RJ-45 connector – used to connect the Extricom AP to the
Extricom switch. Power is provided by the Extricom switch
to the AP when directly connected to it.
The Extricom WLAN System User Guide 17
Table 4. Extricom EXRP-20 AP LEDs
LEDs Color Description
Radio 1 Green 1st Radio is active
Red 1st Radio is malfunctioning
Off 1st Radio is off
Radio 2 Green 2nd Radio is active
Red 2nd Radio is malfunctioning
Off 2nd Radio is off
LAN Green (flashing) Connection to Extricom switch is active
Off Not active
Power Green On/Off
Table 5 Extricom EXRP-40 AP LEDs
LEDs Color Description
Radio 1 Green 1st Radio is active
Red 1st Radio is malfunctioning
Off 1st Radio is off
Radio 2 Green 2nd Radio is active
Red 2nd Radio is malfunctioning
Off 3rd Radio is off
Radio 3 Green 3rd Radio is active
Red 3rd Radio is malfunctioning
Off 3rd Radio is off
Radio 4 Green 4th Radio is active
Red 4th Radio is malfunctioning
Off 4th Radio is off
Radio 3 and 4 are not supported in this release
18 Installing the Extricom WLAN System
The Extricom Repeater
The Extricom EXRE-10 PoE Range Extender has two 10/100 Baest Ethernet interface with 803.3af
Power over Ethernet support.
LEDs Color Description
LAN-1 Green (flashing) Connection to Extricom switch is active
Off Not active
LAN-2 Green (flashing) Connection to AP is active
Off Not active
Power Green On/Off
LEDs
Ethernet
The Extricom WLAN System User Guide 19
Connecting the Switch and Access Points
Extricom’s switch is connected to the wired LAN and the APs that are located throughout the
enterprise.
To connect the switch and access points:
1. Using a CAT-5e/6 100/1000Mbps cable, connect the switch RJ-45 LAN connector (located on
the front panel of the switch, (refer to Figure 9) to the LAN switch.
2. Using a CAT-5e/6 cable, connect each AP (refer to Figure 9) to one of the switch’s RJ-45
WLAN connectors
3. Connect the power cable to the power connector located on the rear panel of the switch, and
plug the other end of the power cable into a power source.
4. Verify that the Power LEDs on both the switch and connected APs are green.
Additional APs can be connected/disconnected while the switch is active.
Mounting the Access Points (Optional)
Extricom APs can be mounted on the wall. To mount the APs, you will need two stainless steel pan
head 8x1-1/4" self-tapping Phillips screws.
To mount the Access Points:
1. Place the installation template (refer to Access Point Mounting Template on page 65) on the
wall where you want to mount the AP.
2. Mark the "Point for Drilling" locations on the wall.
3. Screw the two stainless steel pan head 8x1-1/4" self-tapping Phillips screws into the wall
leaving enough of the screws protruding to enable you to hook the AP over the screw.
4. Align the holes on the back of the Access Point with the screws and slip the AP into place.
Position the Access Point so that the connectors are on the bottom left corner of the
AP.
The Extricom WLAN System User Guide 21
Chapter 3
Configuring the Extricom WLAN
System
After connecting the switch and AP, configure the Extricom WLAN system through Extricom’s
web configuration GUI using a terminal or PC connected to the same LAN as the switch.
To access the Extricom web configuration pages:
1. In your Web browser, enter the following: https://<IP address of the switch>
where <IP address of the switch> is the IP address of the switch provided with your
purchase (for example, the URL should be https://1.2.3.4 if the IP address of the switch is
1.2.3.4).
If you did not receive a switch IP address with the switch, the factory default value
for the switch IP address is 192.168.1.254.
If you are using the default IP settings, do not place a router between the user PC and
the switch.
The Login page appears.
Figure 11. Login Page
2. Enter your user name and password (as provided by your system installer) and click OK. The
Summary page appears.
22 Configuring the Extricom WLAN System
If you did not receive a user name and password with your switch, use the following
factory default user name and password:
user name: admin
password: Switch1
The user name and password are case-sensitive.
Using the Extricom Web Configuration Pages
The Extricom Web configuration pages have three main areas:
The navigation tree.
The menu bar.
The work area.
Figure 12. Typical Web Configuration Page
Navigation
Tree
Menu Bar
Work area
The Extricom WLAN System User Guide 23
The navigation tree provides access to the following Extricom Web configuration pages:
LAN Configuration – used for configuring LAN parameters.
WLAN Configuration – used for configuring WLAN parameters.
SSID & Security – used for configuring SSID and security parameters and/or passwords and
external RADIUS servers and their timeouts for redundancy.
Advanced Features– used for configuring redundancy, SNMP and Rogue AP detection
parameters.
Centralized Configuration – used for configuration and control of remote switches from a
Master switch
Access Points – used for powering and activating/deactivating connected APs.
Utilities – used for viewing the system configuration file, or to restore system default
settings, upgrade the switch firmware, set the time and date manually or automatically, and
reboot the switch.
Password Management – used for changing system passwords
Reports & Events – used for viewing system events and performance reports.
Summary – provides a comprehensive summary of the system configuration.
About – provides basic information about the Extricom WLAN system firmware versions.
Alternatively, you can access the:
Summary page by clicking Summary in the menu bar.
About page by clicking About in the menu bar.
The work area displays the configuration pages selected in the navigation tree. Use this area to
configure the Extricom parameters.
After changing the values of the configuration parameters on a web configuration page, you must
click Update to save the new configuration. An update status message appears at the top and
bottom of the page informing you if the update was successful (refer to Figure 13). If the update
was not successful, a description of the problem is displayed (refer to Figure 14).
Figure 13. Successful Update Message Figure 14. Unsuccessful Update Message
The new configuration only takes effect after rebooting the switch (refer to
Rebooting the Extricom Switch on page 46).
24 Configuring the Extricom WLAN System
Configuring the LAN Parameters
In the LAN Configuration page, you can configure the following:
The LAN IP address and network mask, as well as a backup address and mask.
The LAN interface VLAN tag IDs.
The default gateway.
The address of the System Log and how often (if at all) the log is written to.
The address of the Monitor Log and how often (if at all) the log is written to.
.
To configure the LAN parameters:
1. Click LAN Configuration in the navigation tree. The LAN Configuration page appears (refer to
Figure 15).
Figure 15. LAN Configuration Page
The Extricom WLAN System User Guide 25
2. Configure the LAN parameters. Refer to Table 6 for a description of the LAN parameters.
Table 6. LAN Configuration Parameters
Field Description
IP Address Enter the main IP address of the Extricom Switch.
Network Mask Enter the network mask address.
VLAN VLAN tag ID for VLAN access to the switch
2nd IP Address Enter the backup IP address of the Extricom Switch.
2nd Network Mask Enter the backup network mask address.
2nd VLAN 2nd VLAN tag ID for VLAN access to the switch.
Default Gateway Enter the default gateway address.
The default gateway must be on the same
subnet as 1st or 2nd IP address.
Switch name A textual descriptor of the switch. Up to 32 characters.
Monitor On The Monitor Log is only relevant for a dedicated network
status monitoring tool that is not provided with the
switch. By default, this option should not be checked.
Check this option only if you are using the
Extricom dedicated network monitoring tool,
otherwise unnecessary data packets are sent
through the Ethernet.
Monitor Address Enter the address of the Monitor Log if using the
Extricom dedicated network monitoring tool.
Monitor Interval
(sec)
Specify how often information is sent to the Monitor
Log. If using the dedicated network status monitoring
tool, 1 second is the recommended interval.
Configure this parameter only if using the
dedicated network monitoring tool.
Syslog On Check the Syslog On option to record system information
in the System Log.
In most common operational scenarios, this
option should be unchecked (unless used for
troubleshooting).
Syslog Address Enter the IP address of the computer to send the System
Log.
26 Configuring the Extricom WLAN System
Field Description
Syslog Interval (sec) Specify how often information is sent to the System Log.
3600 seconds is the recommend default interval.
If you detect a problem, you can decrease
the Syslog Interval to receive updates more
frequently.
3. Click Update to save the configuration.
The new configuration only takes effect after rebooting or reconfiguring the switch
(refer to Rebooting the Extricom Switch on page 51).
Configuring the WLAN Parameters
In the WLAN Configuration page, one can configure the following WLAN parameters for each
Radio (Radio 1 or Radio 2):
Channel options.
Data rates.
SSIDs.
There are up to 16 different SSIDs per channel.
Refer to Configuring SSIDs on page 30 for an explanation of the relationships
between radios, channels, SSIDs, and VLANs.
To configure WLAN parameters:
1. Click WLAN Configuration in the navigation tree. The WLAN Configuration page appears
(refer to Figure 16).
2. Select the “Country / Regulatory Domain” which meets your locale from the list.
3. Click the Radio tab for which you want to configure the WLAN parameters.
4. Configure the WLAN parameters. Refer to table 6 for a description of the WLAN parameters.
The Extricom WLAN System User Guide 27
Figure 16. WLAN Configuration Page
28 Configuring the Extricom WLAN System
Table 7. WLAN Configuration Parameters
Field Description
Channel Options
Enable Check this box if you want to enable the radio.
WLAN Mode Select the WLAN mode. Possible options are:
802.11a
802.11b
802.11g for pure mode
802.11b/g for mixed mode
Since the Extricom solution can support
two simultaneous channels in the same
frequency band, selecting the WLAN
mode enables the Extricom solution to
offer same band capability. This means
that both radios can be set to:
1. 802.11a & 802.11a
2. 802.11b & 802.11b
3. 802.11b & 802.11g
4. 802.11g & 802.11g
5. 802.11b/g & 802.11b/g
And any other combination.
Channel Select the channel. The options available are based
on the country and WLAN mode.
Maximum Retries Select the number of times to try to resend a packet
if the transmission of the packet fails.
Allow Rate
Adaptation
Check this box if you want to enable rate adaptation.
All enabled rates participate in the rate
adaptation..
The Extricom WLAN System User Guide 29
Field Description
Rates
Configuration
For each of the data rates listed, select whether the
rate is Basic, Optional, or Disabled.
When configuring the data rates, you should
consider the data rate capabilities of the wireless
devices in your enterprise.
Basic – The Basic data rates are usually the data
rates that the vast majority of your wireless
devices can support. Only wireless devices that
support all the Basic data rates will be connected
to the WLAN system. Therefore, it is
recommended that you configure a minimal
number of Basic data rates that the vast majority
or all your wireless devices can support. When
working in Mixed Mode, there should be at least
one Basic data rate from the 802.11b rates.
Optional – If you configure a data rate as
Optional, the network will provide that data rate
to wireless devices that can support it.
Disabled – Disabled data rates are not available
to wireless devices.
Since the Extricom WLAN system allows
for dense deployment of APs it is
recommended where applicable, to
disable low data rates. Not doing so could
possibly lead to an “edge user” effect, in
which a client reduces aggregate network
throughput by moving to the edge of the
coverage area.
Short Preamble: This option becomes available only when selecting
802.11b as the WLAN mode. In this case, mark the
checkbox to allow a short preamble.
Setup SSIDs
Assigned SSIDs Displays the list of SSIDs assigned to the channel.
Remove from
Channel
To remove an SSID from the channel, select an
SSID and check the Remove from Channel option.
The SSID is removed from the Assigned SSIDs list,
and appears on the Unassigned SSIDs list after
clicking Update.
In the Extricom WLAN system, a single
channel can support up to 16 different
SSIDs.
30 Configuring the Extricom WLAN System
Field Description
Unassigned SSIDs Displays the list of SSIDs not assigned to the
channel.
Add to Channel To add an unassigned SSID to the channel, select an
SSID from the Unassigned SSIDs list and check the
Add to Channel option. The selected SSID is
removed from the Unassigned SSIDs list and added
to the Assigned SSIDs list after clicking Update.
New SSID To create a new SSID and assign it to the selected
channel, enter a unique SSID name and check the
Create and Assign option. The new SSID is added to
the Assigned SSIDs list after clicking Update.
The character Space may be used in SSID
name.
Create and Assign Check to assign the new SSID. The new SSID is
added to the Assigned SSIDs list after clicking
Update.
All SSIDs Displays a list of all SSIDs configured for the
switch.
Delete Permanently To delete an SSID from the switch, select an SSID
from the All SSIDs list and check the Delete
Permanently option. The SSID is removed from any
list on which it appears after clicking Update.
5. Click Update to save the configuration.
The new configuration only takes affect after rebooting or reconfiguring the
Extricom Switch (refer to Rebooting the Extricom Switch on page 51).
6. To configure WLAN parameters for another radio, click the tab for that radio, configure the
WLAN parameters, and click Update to save the configuration.
7. To configure SSID and security settings, click Edit SSID & Security Setting. Refer to
Configuring SSIDs on page 30, and Configuring Security Definitions on page 35.
To configure SSID and security settings, you can also click SSID & Security in the
navigation tree.
Configuring SSIDs
An SSID (Service Set Identifier) is the name of the network. Wireless devices must connect to a
specific SSID which determines the pre-defined set of privileges, settings, and limitations (such as
security definitions, access privileges, VLAN assignments, etc.) of the network. Each channel can
support multiple SSIDs, thus creating “virtual” networks on the same channel.
The Extricom WLAN System User Guide 31
The following is the data structure used by the Extricom system:
Each radio is assigned one channel.
Each channel can support up to 16 different SSIDs.
Each SSID can be associated with a VLAN tag.
The same SSID name cannot be repeated for different channels.
Table 8 shows this data structure with an example of possible channel, SSID and VLAN tag
assignments.
Table 8. Data Structure Example
Access Point Channel SSID VLAN tag
Network1 1
Network2 2
… …
… …
Network15 15
First Radio 1
Network16 16
Network17 17
Network18 18
… …
… …
Network31 31
Second Radio 6
Network32 32
In the SSID & Security page, SSID Options section, the following SSID parameters can be
configured to:
Allow Default SSID.
Display SSID in Beacon.
Allow Store & Forward.
Allow Inter-Ess Store & Forward
Enable Multicast
ARP Caching
Assign a VLAN to the SSID.
Set a disassociation timeout.
Set DTIM period.
32 Configuring the Extricom WLAN System
To configure the SSID parameters:
1. Click SSID & Security in the navigation tree. The SSID & Security page appears (refer to
Figure 17).
Figure 17. SSID & Security Page
The Extricom WLAN System User Guide 33
2. Configure the SSID parameters. Refer to Table 9 for a description of the SSID parameters.
Table 9. SSID Parameters
Field Description
SSID
Choose SSID Select an SSID from the Choose SSID dropdown
list.
To add/remove SSIDs from this list, click WLAN
Configuration (refer to table 6).
SSID Options
Allow Default SSID If this option is enabled, a wireless device will be
allowed to connect even without requesting a
specific SSID (i.e., “default” or “any” SSID) to the
Extricom WLAN. If this option is disabled, then a
wireless device needs to connect to a specific SSID
in the Extricom WLAN.
Display SSID in
Beacon
This option provides an additional (though limited)
level of security. The AP sends out a beacon with
information about the network. If this option is
enabled, the SSID appears in the beacon. If disabled,
the SSID does not appear in the beacon.
Allow Store &
Forward
If this option is enabled, two wireless devices
connected to the Extricom WLAN with the same
SSID can communicate and transfer data to each
other without going through a router. Traffic
between wireless devices will not be forwarded to
the LAN switch.
If this option is disabled, all traffic goes through the
LAN switch. Wireless devices will not be able to
communicate without going through a router. This
could be used by IT managers to apply security
settings or various policies in the LAN network.
Disabling Allow Store & Forward disables
the Allow Inter Store & Forward option.
34 Configuring the Extricom WLAN System
Field Description
Allow Inter Store &
Forward
If this option is enabled, two wireless devices
connected to the Extricom WLAN with different
SSIDs will be able to communicate with each other
without going through a router. Traffic between
wireless devices will not be forwarded to the LAN
switch.
This option must be enabled on both SSIDs.
In order for wireless devices, associated to
different SSIDs, to be able to communicate
with each other, the SSIDs must be defined
on the same VLAN (or no VLAN at all).
If this option is disabled, all traffic goes through the
LAN switch. This could be used by IT managers to
apply security settings or various policies in the
LAN network.
Enable Multicast This option, when enabled, provides support of
multicast and broadcast packets for the selected
SSID. Multicast and/or broadcast packets shall be
transmitted from all APs.
ARP Caching This option, when enabled, provides an immediate
response to ARP requests directed towards WLAN
stations associated with the selected SSID. The
Switch answers on behalf of the WLAN stations.
VLAN Enter a VLAN tag to assign to the SSID. Assigning
a VLAN to an SSID enables you to control a
wireless devices’ privileges through the existing
wired network definitions.
Disassociation
Timeout
Enter the amount of time (in seconds) a wireless
device can remain inactive (no data sent to or from
the wireless device) before automatically
disconnecting from the network.
DTIM Period The period of time after which broadcast and
multicast packets are transmitted to mobile clients in
the Active Power Management mode.
Select the DTIM period for the selected SSID. This
is relevant for clients that want to utilize the power
management capability. The possible values are 1-5.
The default is 3.
A high DTIM value may cause these
clients to loose connection with the
network.
The remaining parameters in the SSID & Security page are described in Configuring
Security Definitions on page 30).
The Extricom WLAN System User Guide 35
3. Click Update to save the configuration.
The new configuration only takes affect after rebooting the switch (refer to
Rebooting the Extricom Switch on page 46).
Configuring Security Definitions
In the SSID & Security page Encryption & Authentication section (refer to Figure 17), the following
security definitions can be configured:
Type of encryption.
Type of authentication.
With some configurations, you can use encryption without authentication. However,
for a higher level of security, it is recommended to use both encryption and
authentication.
Extricom system eases the configuration of the SSID security parameters by
providing a list of available combinations of Encryption and Authentication protocols
Security definitions are configured for each SSID individually.
To configure the security definitions:
1. Click SSID & Security in the navigation tree. The SSID & Security page appears (refer to
Figure 17).
2. Select the SSID from the Choose SSID dropdown list for which you want to configure the
security definitions.
3. Configure the security definitions for the selected SSID. Refer to Table 10 for a description of
the Security parameters.
36 Configuring the Extricom WLAN System
Table 10. Security Definition Parameters
Field Description
Encryption & Authentication
Choose method Define the method of encryption and authentication.
A combination of encryption and authentication methods may be
selected from the options detailed in the drop-down list.
Encryption cipher
There are three types of encryption ciphers available:
WEP64 – Wired Equivalent Privacy (802.11 encryption
protocol). This is a very basic encryption level. (AKA WEP40)
WEP128 – This encryption is similar to WEP64, but the WEP
keys are longer. (AKA WEP104)
TKIP – Temporal Key Integrity Protocol. This is a more secure
and more advanced method of encryption as a part of the WPA
standard.
AES (CCMP) – Advanced Encryption Standard.(Cipher Block
Chaining Message Authentication Code Protocol) is currently
the most advanced and secured method of WiFi encryption and
is part of 802.11i (WPA2) standard.
Authentication method
Authentication is used to identify if a wireless device is authorized
to connect to the WLAN, and verifies the wireless device’s
identity. Authentication methods (such as specific EAP methods
available in the WPA/WPA2 (RADIUS) option) also verify that the
association process is secured. Authentication utilizing
WPA/WPA2 (RADIUS) can also support encryption key changes.
The following methods are available:
802.1x – if the cipher is WEP or WEP104
WPA/WPA2-PSK or WPA/WPA2 (RADIUS) – if the cipher is
TKIP or AES
Supported protocols: EAP, TLS, TTLS, PEAP, LEAP and MD5
When choosing the encryption cipher and authentication
methods, one should take into account wireless devices’
capabilities.
Any security combination (Encryption and Authentication) can be
selected by the user as a combination of the list and the check
boxes.
The Extricom system supports “WPA2 Mixed Mode”.
This mode permits the coexistence of WPA and WPA2
clients on the same SSID. WPA2 mixed mode allows
“Old” WLAN clients with “New” WLAN clients on
the same SSID during transition period.
The Extricom WLAN System User Guide 37
Field Description
WEP Keys The WEP Keys area is only enabled if the cipher selected in the
Choose Method field is WEP or WEP104. In the WEP Keys area,
you define the WEP Key that is used for encrypting or decrypting.
You can define all four WEP keys. For each key you define, select
the input format (ASCII or HEX) and enter the key according to
the following table:
Cipher ASCII HEX
WEP64
(or WEP64+802.1x)
5 characters 10 digits
WEP128
(or WEP128+802.1x)
13
characters
26 digits
Transmission Key Select the WEP64/WEP128 key to be used for transmitting the
data from the AP.
WPA The WPA area is only enabled if the cipher selected in the Choose
Method field is WPA/WPA2 TKIP/AES.
WPA-PSK If WPA/WPA2 with Pre-Shared key authentication is used, the
WPA-PSK field is enabled. In this case, select one of the
following input formats, and enter the corresponding key listed:
For ASCII, enter 8-63 characters.
For HEX, enter 64 digits.
WPA/RADIUS
Re-key Interval Enter the amount of time (in seconds) that elapses before the
Group Key is changed.
RADIUS Define the RADIUS servers parameters if:
The cipher is WEP64/WEP128, and the 802.1x authentication
method is selected.
The cipher is TKIP/AES, and the WPA/WPA2 (RADIUS)
authentication method is selected.
Server Address Enter the address of the RADIUS server.
Use Server # 1 if only one server is used. Use
consecutive servers if several servers are used.
Server Port Enter the RADIUS server port.
Server Password Enter the RADIUS server password.
Server Timeout Enter the time which the Extricom switch waits for the RADIUS
server response.
38 Configuring the Extricom WLAN System
Encryption and Authentication methods.
The “Choose Method” drop down list in “Encryption & Authentication” displays the following
items for user selection:
None
WEP64 (Open)
WEP128 (Open)
WEP64 & 802.1x Authentication
WEP128 & 802.1x Authentication
WPA/WPA2 TKIP/AES & Pre Shared Key Authentication
WPA/WPA2 TKIP/AES & 802.1x Authentication
When the “WPA2 Only” is checked, only Clients with WPA2 support are allowed access to the
WLAN.
When the “AES Only” is checked, only Clients with AES support are allowed access to the WLAN.
Cisco LEAP protocol (not CMIC & CKIP) is supported under “WEPxxx & 802.1x Authentication”.
Multiple RADIUS and RADIUS redundancy
RADIUS is a common authentication protocol utilized by the 802.1x security standard (often used
in wireless networks). Although RADIUS was not initially intended to be a wireless security
authentication method, it improves the WEP encryption key standard, in conjunction with other
security methods such as EAP-PEAP.
In an enterprise environment several RADIUS servers may be used for backup and also for serving
different geographical locations. Up to four different RADIUS servers can be defined for each
SSID. RADIUS redundancy is based on the assumption that the user database is identical in all
RADIUS servers and that users are listed in all servers with the same credentials.
Switch over from one RADIUS server to another takes place after consecutive failures of the server.
The order of priorities is 1 to 4.
4. Click Update to save the configuration.
The new configuration only takes affect after rebooting or reconfiguring the switch
(refer to Rebooting the Extricom Switch on page 51).
The Extricom WLAN System User Guide 39
Advanced Configuration of the Extricom WLAN
Architecture
The advanced configuration page of Extricom WLAN includes two tabs:
Advanced
Rogue
Advanced Tab
The Advanced tab includes the capability to configure the following:
Redundancy parameters.
SNMP parameters.
In redundancy mode, two identical switches (H/W and configuration) are installed with the same
number of connected APs.
One of the switches is configured as the Main switch, while the second is in Stand-by mode, and
can switch over as soon as the switch-over conditions are met.
Figure 18. Redundancy deployment
To configure the Advanced Features parameters:
1. Click Advanced Features in the navigation tree. The Advanced configuration page appears
(refer to Figure 19 ).
2. Select Advanced tab for configuring redundancy and/or SNMP parameters
3. Configure the redundancy, and SNMP parameters. Refer to Table 11 for a description of the
Advanced Features configuration information.
Main Stand-by
40 Configuring the Extricom WLAN System
4. Select Rogue tab for configuring Rogue AP detection and parameters (refer to Figure 20).
5. Configure Rogue AP parameters. Refer to table 11 for a description of the Rogue AP
configuration information
Figure 21 Advanced Features
Table 12. Advanced Configuration Tab
Field Description
Redundancy Status Enables designating pairs of switches, one as active and one as
standby.
Monitored IP The IP address of the other switch.
Reference IP The IP address of a reference network element. This is used to
test connectivity to the LAN.
Keep Alive Interval The interval in mSec between the Keep Alive packets.
Keep Alive Check
Threshold
The number of lost keep-alive packets before switching to the
stand-by switch.
The Extricom WLAN System User Guide 41
Field Description
SNMP
Enable Traps Check this option to enable SNMP traps.
Community name Enter the community name.
Manager IP Enter the manager’s IP address.
At present, the following Traps are sent from the Extricom switch to the device on the LAN running the
SNMP manager.
1. Client <Client MAC> has associated to <SSID> - This trap is sent after successful association
with the client MAC address and the SSID the client associated to.
2. Client <Client MAC> has disassociated from <SSID>. Reason: <Reason> - This trap is sent
after client disassociation/disconnection from an SSID. The reason code is an 802.11 reason code.
3. Key error! Client: <Client MAC> - SSID: <SSID> - Cipher suite: <Cipher> - This trap is sent in
case of any key error during four-way handshake (MIC error) or as a result of any key error when
receiving data from client..
4. New Rogue Detected <BSSID><Port><Radio><Channel><RSSI> - This trap is sent when a
new Rogue AP is detected. The trap includes the AP’s BSSID, the switch port which detected the
Rogue AP, the channel of the Rogue AP and the Rogue AP signal level (RSSI).
5. Rogue Updated <BSSID><Port><Radio><Channel><RSSI> - This trap is sent when an existing
previously detected Rogue AP is re-detected with change in one of its parameters. The trap
includes the AP’s BSSID, the switch port which detected the Rogue AP, the channel of the Rogue
AP and the Rogue AP signal level (RSSI).
6. Rogue Removed <BSSID><Port><Radio><Channel><RSSI> - This trap is sent when a new
Rogue AP is detected. The trap includes the AP’s BSSID, the switch port which detected the
Rogue AP, the channel of the Rogue AP and the Rogue AP signal level (RSSI).
7. RADIUS Timeout <ESSID><# of timeouts> - This trap is sent when the RADIUS timeout had
elapsed and includes the ESSID and the number of timeouts that occurred.
8. RADIUS Redundancy Selection Changed <ESSID><#of RADIUS>to<# of RADIUS> - This
trap is sent when the RADIUS selection has been changed from one server to another, and
includes the ESSID, the number of the previous server and the number of the new server.
9. No RADIUS <ESSID> - This trap is sent when the last RADIUS server failed and includes the
ESSID.
10. Configured and connected APs of channel [<channel number>] - This trap provides a summary
of all APs and their status. This trap is typically sent after an event of AP removal or connection
from/to the switch.
11. AP <ap number in hex base> has been connected - This trap is typically sent after an event of
connecting an AP to the switch.
12. AP <ap number in hex base> has been disconnected - This trap is typically sent after an event of
disconnecting an AP from the switch.
13. Reference Host is up – This trap is sent when the Reference host is up and active. Sent by the
Main switch.
14. Reference Host is down - This trap is sent when the Reference host is down. Sent by the Main
Switch.
15. Standby Switch is up - This trap is sent when the Standby Switch is up & active.
16. Standby Switch is down - This trap is sent when the Standby Switch is down.
17. Inactive - Reference Host is down - This trap is sent when the Reference host is down, and hence
the Main switch becomes inactive.
42 Configuring the Extricom WLAN System
18. Inactive Standby Switch - Main Switch is up - This trap is sent when the Main Switch becomes
active again and hence the Standby Switch becomes inactive (Switch over).
19. Main Switch is active again - This trap is sent when the Main Switch changes status from inactive
to active and regains the Main switch status.
20. Failure detected in Main Switch - Switching Over. - This trap is sent when the Main Switch is
about to go down and the Standby Switch is becoming Active.
Rogue Tab
A “Rogue” AP is an AP which is connected to an organization’s wired LAN without proper authorization.
Such an AP represents a security hazard since the organization cannot control that AP’s over-the-air
security measures.
Rogue APs pose threats to the enterprise. These threats vary and may include any of the following:
• WEP keys cracking.
• Password hijacking.
• IP and MAC spoofing.
• Channel jamming.
To configure Rogue AP detection parameters refer to Table 13: Rogue AP Tab and Figure 22
Table 13: Rogue AP Tab
Field Description
Enable Enables Rogue AP detection function
When Rogue AP detection is enabled the 2nd
radio is not used for service.
Allowed BSSIDs
Displays a list of authorized APs (White List)
Remove Removes checked BSSIDs from the white list.
Edit Provides capability of editing the white list
Add BSSID
Add Adds the BSSID in the text box to the white list. BSSIDs may
be added from events log.
The Extricom WLAN System User Guide 43
Figure 22: Rogue AP configuration.
44 Configuring the Extricom WLAN System
Centralized Configuration Settings
Centralized Configuration allows managing a group of identical Extricom switches (slaves) from
one single master switch. The user should decide which switch will act as master. Extricom
Switches have a built-in mechanism to discover the presence of other switches. In addition, the user
is given the ability to manually configure the entries in the table of switches.
Configuration changes on the master switch are propagated to the slave switches via a secured
mechanism. For this authentication scheme to work, the slave switches need to obtain a copy of the
master's public key prior to the centralized configuration. This is done in the initial phase of the
switch’s configuration by first retrieving the master's public key and then uploading it to the
designated slave switches.
Figure 23. Central Configuration Page
The Extricom WLAN System User Guide 45
To configure Centralized Configuration parameters:
Initial Setup
1. Configure the LAN settings on the master switch
2. Generate an SSH key pair on the master switch. This is done by clicking on the Update
button next to the generate New SSH Keys.
3. Retrieve the SSH public key from the master switch and save it in a file on your PC.
4. Manually configure each of the slave switches’ LAN settings, and continue by uploading
the previously saved master's public key on every slave you wish to manage. This allows
the slave switch to be configured only by the master switch which generated the public key.
Figure 24. Central Configuration Page
Slave Switch Configuration
1. On the master switch, open the Centralized Configuration web page and click on the
Update button in the Switches Table section. This will retrieve and generate the slave
switches’ information and all the relevant dialog boxes will be filled with data.
2. Slave switches can be added to the switches table by creating a new entry. Simply enter the
new switch name and its IP address, and continue by clicking on the Update button.
3. Configure a slave switch, i.e. Copy the configuration file of the master with appropriate
changes to the slave.
Figure 25. Action options
4. Reboot the slave switches.
46 Configuring the Extricom WLAN System
Access Points Powering
The only configuration required for APs in the Extricom WLAN architecture is activation or
deactivation of specified AP ports..
To access the Access Points page:
Click on the Access Points in the navigation tree. The APs configuration page appears
(refer to Figure 26).
Figure 26. APs Configuration Page
To configure APs:
Configure the APs and click Update. Refer to Table 14 for a description of the APs
configuration information.
The Extricom WLAN System User Guide 47
Table 14. AP Configuration Page
Field Description
Active APs Checked boxes indicate ports with attached and configured APs.
If a port is “powered” but not “active”, the AP is
malfunctioning. This field is read-only.
Powered APs Checked boxes indicate ports with attached and powered-on
APs. Un-checking a box will turn off the power on the AP. The
box must be re-checked to enable the port.
You do not need to reboot the switch for changes in AP configuration to take effect.
(The Access Points page of the EXSW-2400 displays 24 check boxes.)
48 Configuring the Extricom WLAN System
Configuration of the Extricom WLAN Architecture
Utilities
The utilities page includes two tabs and serves the following function:
Viewing the System Configuration File.
Uploading a new Configuration File (replace existing).
Upgrading the Extricom Firmware.
Reconfiguring the Extricom system
Rebooting the Extricom switch.
Setting the Time and Date (separate tab).
To access the Utilities configuration pages:
Click Utilities in the navigation tree. The Utilities configuration page appears (refer to
Figure 27).
The Extricom WLAN System User Guide 49
Figure 27. Utilities Configuration Page
Viewing the System Configuration File
The system configuration file contains all of the parameters that are configurable through the
configuration utility.
To view the system configuration:
1. In the Configuration section of the Utilities configuration page, click Configuration file. The
system configuration file appears in your Web browser.
2. Review the configuration in the XML file.
To return to the Extricom web configuration pages, click Back in your Web browser.
Configuration File Backup
You can create a backup file of the current configuration to upload in the future. This is an optional
procedure.
50 Configuring the Extricom WLAN System
To back up a configuration file:
1. In the Show Configuration section of the Utilities page, right-click Configuration file and select
Save Target As. The File Download dialog box opens, and then the Save As dialog box opens.
2. Select the location in which to save the configuration file and click Save. The configuration file
will be saved to the selected location.
Uploading a New Configuration File
A previously saved configuration file can be uploaded (e.g., a file saved for backup purposes).
To upload a new configuration file:
1. Backup the current XML configuration.
2. In the Upload Configuration section of the Utilities configuration page, click Browse and
browse to the location of the configuration file that you want to upload. The file’s path appears
in the Upload Configuration field.
3. Click Update to update the configuration.
4. Click Reboot at the bottom of the page to reboot the switch.
Make sure that you are uploading a valid configuration file.
Restoring System Defaults
Restores the switch to its default configuration.
To restore system defaults:
In the Utilities page, Configuration section Restore Defaults, click Update. The switch’s
defaults are restored.
Upgrading the Extricom Firmware
Extricom firmware can be easily upgraded using Upgrade Firmware.
To upgrade the Extricom firmware:
1. Download the upgrade to your computer from the CD supplied with your purchase.
or
Obtain an upgrade file from the Extricom’s website, http://www.extricom.com. Click the
Partners link on the menu bar at the top of the Extricom home page and log in using your
username and password.
2. Create a backup of the XML file that contains the current configuration.
3. In the Upgrade Firmware section of the Utilities configuration page, click Browse and browse
to the location of the upgraded firmware. The file’s path appears in the Upgrade Firmware field.
The Extricom WLAN System User Guide 51
4. Click Update to upgrade the firmware.
5. Reboot the switch (refer to Rebooting the Extricom Switch on page 46).
The firmware upgrade file is GNU zipped (gzip). Some Internet browsers are
configured to automatically unzip files when downloading. Verify that this option is
disabled so that the upgrade file remains zipped after downloading.
Rebooting the Extricom Switch
You must reboot the switch to activate any changes you make to the switch configuration.
To reboot the Extricom switch:
1. In the Reboot Switch section of the Utilities configuration page, click Reboot.
2. A new screen opens, prompting you “Are you sure you want to reboot?”.
3. Click Reboot to reboot.
Reconfigure Switch - Smart Configuration
Not every change in the Extricom switch’s configuration requires system reboot. Some parameters
can be changed and will take effect immediately. This button checks whether a full reboot is
required. In case reboot is not required, the update will take effect immediately.
Setting the Time and Date
Extricom system supports two ways of setting Date and Time (refer to Figure 28)
To manually set the time and date on your Extricom Switch:
1. In the Set Time & Date tab of the Utilities configuration page, select Manually.
2. Enter the time and date in the format hh:mm:ss dd-mm-yy.
3. Click Update to save the configuration.
To set the time and date on your Extricom Switch using NTP protocol:
1. In the Set Time & Date section of the Utilities configuration page, enter the time and date in the
format hh:mm:ss dd-mm-yy.
2. Click Update to save the configuration.
52 Configuring the Extricom WLAN System
Figure 29. Setting Date and Time
The Extricom WLAN System User Guide 53
Setting Passwords in the Extricom Switch
Passwords are set according to user levels. Refer to Table 15 for a description of the user access
levels and their default passwords.
Table 15. Default Passwords
User Access
Level
Privileges Default
Password
admin Accessing the Web configuration. Switch1
The ‘operator’ and ‘root’ passwords are used when accessing the switch for
maintenance and service purposes. Changing these passwords should be performed
only by an Engineer authorized by Extricom.
!
For security purposes, it is important that all the passwords (including operator
and root passwords) be changed from the default values when the switch is first
installed, as well as periodically updated.
!
Record all passwords and store them in a safe location.
To set and change a password for the Extricom switch:
1. Click Password Management in the navigation tree to open the Password Management page.
2. Enter the user access level whose password you want to change.
3. Enter the current password.
4. Enter the new password.
5. Re-type the new password.
Viewing Reports and Events Log
The Reports & Events page provides performance reports and list of events.
To view Reports & Events:
1. Click Reports & Events in the navigation tree.
2. Select Reports tab to view True Reuse performance. The screen is updated every second.
3. Select Events tab to view events. Hit refresh in order to see new events.
54 Configuring the Extricom WLAN System
Viewing a Summary of the Updated Configuration
The Summary page provides a summary of the current configuration.
To view a summary of the updated configuration:
4. Click Summary in the navigation tree.
or
Click Summary in the menu bar.
The Summary page appears (refer to Figure 30).
Figure 30. Summary Page
Refer to Table 16 for a description of the summary information.
The Extricom WLAN System User Guide 55
Table 16. Summary Page
Field Description
Date Displays the date and time the summary was created.
Uptime Displays the amount of time the switch has been active.
LAN Configuration
IP Address Displays the IP address of the switch.
MAC address Displays the base MAC address of the switch near the MAC address.
Regulatory
Domain
Displays the regulatory domain name currently in use by the switch.
Network Mask Displays the network mask.
Default Gateway Displays the default gateway IP address.
SNMP Server Displays the IP address of the SNMP server
Syslog Server Displays the IP address of the syslog server.
WLAN Configuration
Radio 1 Radio 2
Wlan mode
Displays the WLAN mode for
Radio 1
(802.11a, 802.11b, or 802.11g).
Displays the WLAN mode for
Radio 2
(802.11a, 802.11b, or 802.11g).
Channel Displays the channel for Radio 1. Displays the channel for Radio 2.
SSIDs (vlan)
Displays the SSIDs and their
related VLANs, defined and
assigned to Radio 1.
Displays the SSIDs and their
related VLANs, defined and
assigned to Radio 2.
True Reuse Displays TrueReuse status
Other SSIDs Displays other SSIDs that are defined but are not assigned to a
specific Radio.
Access Points (1-8/24)
Active Access
Points
List of the active APs.
Power-On
Access Points
List of APs powered via Power over Ethernet.
56 Configuring the Extricom WLAN System
Viewing Extricom Information
Information about firmware versions currently installed in the Extricom Wireless LAN system can
be viewed in the About page.
To view Extricom information:
Click About in the navigation tree.
or
Click About in the menu bar.
The About page appears.
The Extricom WLAN System User Guide 57
Chapter 4
Troubleshooting
Table 17 lists possible problems you may encounter with your WLAN and provides possible
solutions. If after attempting the solutions you are still experiencing difficulties, contact Extricom
customer support.
Table 17. Troubleshooting
Problem Solution
The AP Power LED
is not lit.
Verify that the AP Ethernet cable is connected to the switch and to
the AP. The APs get PoE from the switch.
Verify that the AP is not turned off in the Access Points Web
configuration page (refer to page 57).
A wireless device
can’t associate a
specific SSID
Verify that the wireless device supports the same 802.11 standard
as configured for the SSID (802.11/a/b/g).
Verify that the wireless device is set to connect to the specific
SSID.
Verify that the wireless device supports the security standard used
by the SSID, e.g., WEP.
Verify that the security settings are configured to use the same
authentication method.
If the Radius Server is used, verify that the wireless device is
registered and has the necessary authorization.
Cannot connect to
the Extricom web
configuration pages
Verify that the switch is connected to the LAN.
Verify that the correct IP address is used.
Low data rates
Verify that the switch was not mistakenly configured to use low
data rates.
Verify that there is no additional cause of interference (e.g., an
additional WLAN network in the same proximity using the same
frequencies as the Extricom WLAN, or that there are no cordless
phones using the same frequencies, or microwave oven
interference).
58 Troubleshooting
Problem Solution
Wireless devices
disconnect in a
specific location
Verify that there is no additional cause of interference (e.g., an
additional WLAN network in the same proximity using the same
frequencies as the Extricom WLAN, or that there are no cordless
phones using the same frequencies, or microwave oven
interference).
Add an additional AP to cover the area. Plug another AP into the
switch, or relocate an existing Access Point.
Cannot access the
switch’s Web
configuration GUI
Verify that the workstation on which the Web browser is running is
connected to the same LAN as the switch.
Verify that the URL entered for the switch begins with https.
The Extricom WLAN System User Guide 59
Appendix A
Specifications
Extricom Switch Specifications
Standards
WLAN IEEE 802.11a, 5GHz
IEEE 802.11b, 2.4GHz (short/long preamble support)
IEEE 802.11g, 2.4GHz (pure mode)
IEEE 802.11b/g, 2.4GHz (mixed mode)
Ethernet IEEE 802.3x, full/half duplex
IEEE 802.1q, VLAN tagging
Interfaces
APs
EXSW-2400 – 24x 100BaseT Ethernet with IEEE 802.3af PoE
(out of band)
EXSW-1200 – 12x 100BaseT Ethernet with IEEE 802.3af PoE
(out of band)
EXSW-800 – 8x 100BaseT Ethernet with IEEE 802.3af PoE
(out of band)
Wired LAN
EXSW-1200/2400 – 2x 1000/100BaseT Ethernet
EXSW-800 – 1x 100/10BaseT Ethernet
LAN2 and 1000Mbps are not currently active
pending future development.
Wireless Performance
Channels Up to 2 simultaneous WLAN channels
Capacity Up to 108Mbps Aggregate WLAN connection-rate (2 channel
blankets, each with 54 Mbps)
Inter-AP handoff 0 ms intra-switch
Management
User Interface Secure Web-based Graphical User Interface (GUI)
SNMP Traps, using SNMP Version 2c
Logging Remote and local SYSLOG
60 Specifications
Upgrades Firmware upgrade through Web from anywhere in the LAN.
Security
Encryption WEP-64
WEP-128
WPA-TKIP/AES (CCMP)
WPA2-TKIP/AES (CCMP)
Authentication 802.1x (RADIUS)
WPA/WPA2 pre-shared key
MAC Address-based ACL
EAP, TLS, TTLS, LEAP, PEAP, MD5
SSID & VLAN
SSID 16 SSIDs per channel
VLANs 4095 Ethernet VLANs
SSID to VLAN mapping
Regulations Approval
Safety UL 60950-1
EN 60950-1
IEC 60950-1
ANATEL Resolution 237
EMC FCC Part 15 Class B
EN 300386 Part B
VCCI Technical Requirements, V-3/2001.04
ANATEL Resolution 238
Physical Properties
Installation options Rackmount (19" 1U)
Desktop
LEDs Power
LAN Activity
WLAN Port Activity
Power PoE (IEEE 802.3af): 15W
PoE to WLAN ports: 15W for each port
Environmental
Operational Temperature: 0°C to 45°C (32°F to 122°F)
Humidity: 0% to 90%, non-condensing
Storage Temperature: - 20°C to +70°C (-49°F to 185°F)
Humidity: 0% to 90%, non-condensing
The Extricom WLAN System User Guide 61
Extricom Access Point Specifications
WLAN Standards
IEEE 802.11a, 5GHz
IEEE 802.11b, 2.4GHz (short/long preamble support)
IEEE 802.11g, 2.4GHz (pure mode)
IEEE 802.11b/g, 2.4GHz (mixed mode)
Spectrum
Number of simultaneous channels Up to two (four in EXRP-40)
802.11a 5.15-5.25 GHz
5.25-5.35 GHz
5.505-5.725 GHz
5.725-5.850 GHz
Available channels limited by local regulation
802.11b 2.400-2.497 GHz
Available channels limited by local regulation
802.11g 2.400-2.483 GHz
Available channels limited by local regulation
Transmission Power
802.11a Max: 17 dBm (limited by local regulation)
802.11b Max: 17 dBm
802.11g Max: 15 dBm
Supported Rates
802.11a 6, 9, 12, 18, 24, 36, 48 and 54 Mbps
802.11g 6, 9, 12, 18, 24, 36, 48 and 54 Mbps
802.11b 1, 2, 5.5, and 11 Mbps
62 Specifications
Receive Sensitivity
802.11a: 6 Mbps: -88 dBm
9 Mbps: -87 dBm
12 Mbps: -86 dBm
18 Mbps: -84 dBm
24 Mbps: -81 dBm
36 Mbps: -77 dBm
48 Mbps: -73 dBm
54 Mbps: -69 dBm
802.11b/g 1 Mbps: -91 dBm
2 Mbps: -88 dBm
5.5 Mbps: -87 dBm
11 Mbps: -85 dBm
6 Mbps: -89 dBm
9 Mbps: -88 dBm
12 Mbps: -87 dBm
18 Mbps: -85 dBm
24 Mbps: -82 dBm
36 Mbps: -79 dBm
48 Mbps: -74 dBm
54 Mbps: -71 dBm
Typical Range (single AP)
802.11a 18 Mbps: 45.7 m (150 ft.)
6 Mbps: 64 m (210 ft.)
802.11b/g 11 Mbps: 48.8 m (160 ft.)
5.5 Mbps: 73.2 m (240 ft.)
2 Mbps: 103.6 m (340 ft.)
1 Mbps: 152.4 m (500 ft.)
18 Mbps: 45.7 m (150 ft.)
6 Mbps: 61 m (200 ft.)
Regulations Approval
Safety UL 60950
EN 60950
IEC 60950
The Extricom WLAN System User Guide 63
EMC FCC Part 15 sub part B
EN 301
EN 300328
EN 300440
ENV 301893
EN 300386 Part B
VCCI V-2/2001.04
Access
(including modular approval)
FCC Part 15 C
FCC Part 15 E
EN 300 328
EN 301 893
EN 300 489
Japan Type Certificate: Article 2, clause 1, Items 19, 19-2,
19-3, 19-13
Physical Properties
Dimensions (W x H x D) 195mm x 150mm x 50mm (7.67" x 5.9" x 2")
Weight 400gr (0.8 lb.)
Installation options Horizontal (desktop)
Vertical (wall mount)
LEDs Power
LAN Activity
2 x WLAN Activity (2 colors)
Power PoE (IEEE 802.3af): 15W
Power Supply (optional): 48VDC @ 400mA
Environmental
Operational Temperature: 0°C to 45°C (32°F to 122°F)
Humidity: 0% to 90%, non-condensing
Storage Temperature: - 20°C to +70°C (-49°F to 185°F)
Humidity: 0% to 90%, non-condensing
64 Specifications
Extricom PoE Range extender specificathion
Regulations Approval
EMC FCC Part 15 Sub Part B
EN 300386
VCC TECH Reg V-3/2001-04
Physical Properties
Dimensions (W x H x D) 100*20*75mm 4.4 * 0.8 * 3"
Weight 200gr (0.5 lb.)
Installation options Horizontal (desktop)
Vertical (wall mount)
LEDs Power
2xLAN Activity
Power 1.5 watts
Environmental
Operational Temperature: 0°C to 45°C (32°F to 122°F)
Humidity: 0% to 90%, non-condensing
Storage Temperature: - 20°C to +70°C (-49°F to 185°F)
Humidity: 0% to 90%, non-condensing
The Extricom WLAN System User Guide 65
Appendix B
Access Point Mounting Template
Figure 31. Access Point Mounting Template
4.25 inches
10.7
cm.
Important Note: Due to variations in printers, when printing this page,
printer Page Scaling should be set to “None” or diagram may be
automatically reduced in size. As a double-check, make sure distance
between drill points is as indicated above.
66 About This Guide