FreeWave Technologies PRW1001EC 802.11 an PCIe Module User Manual My

FreeWave Technologies Inc. 802.11 an PCIe Module My

Contents

User Manual

Part Number: LUM0063AARevision: 05/05/2014WavePoint 10eUser Manual
WarrantyFreeWave Technologies, Inc. warrants your FreeWave® Wireless Data Transceiver against defects in materials andmanufacturing for a period of one year from the date of shipment, depending on model number. In the event of aProduct failure due to materials or workmanship, FreeWave will, at its discretion, repair or replace the Product. Forevaluation of Warranty coverage, return the Product to FreeWave upon receiving a Return Material Authorization(RMA).FreeWave’s policy for handling WavePoint products returned due to a fault, after complaint is validated byFreeWave’s Customer Support, is to replace the product with a new or refurbished unit upon receipt of reportedfaulty product. This means failure analysis on said product will not be performed and reported to customers. Allfailed units will be bagged and tagged so they can be revisited in the event that FreeWave experiences a highdegree of failures or a trend. At which time, FreeWave will perform a root-cause analysis and take the appropriatecorrective actions. Any visual or external damage noted on returned units will be communicated back to customersand may void the warranty, at which time, a Purchase Order (PO) will be requested from the customer for productreplacementIn no event will FreeWave Technologies, Inc., its suppliers, or its licensors be liable for any damages arising fromthe use of or inability to use this Product. This includes business interruption, loss of business information, or otherloss which may arise from the use of this Product. OEM customer’s warranty periods can vary.Warranty Policy will not apply in the following circumstances:1. If Product repair, adjustments, or parts replacements are required due to accident, neglect, or unduephysical, electrical, or electromagnetic stress.2. If Product is used outside of FreeWave specifications as stated in the Product's data sheet.3. If Product has been modified, repaired, or altered by Customer unless FreeWave specifically authorizedsuch alterations in each instance in writing. This includes the addition of conformal coating.Special Rate Replacement OptionA special rate replacement option is offered to non-warranty returns or upgrades. The option to purchase thereplacement unit at this special rate is only valid for that RMA. The special replacement rate option expires if notexercised within 30 days of final disposition of RMA.FreeWave Technologies, Inc.5395 Pearl Parkway, Suite 100Boulder, CO 80301303.381.9200Toll Free: 1.866.923.6168Printed in the United States of America. Fax: 303.786.9948Copyright © 2014 by FreeWave Technologies, Inc. All rights reserved. www.freewave.comPage 2 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eRestricted RightsAny product names mentioned in this manual may be trademarks or registered trademarks of their respectivecompanies and are hereby acknowledged.This manual is for use by purchasers and other authorized users of FreeWave products.No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, orfor any purpose without the express written permission of FreeWave Technologies, Inc. FreeWave reserves theright to make changes to this manual without notice. FreeWave assumes no responsibility or liability for the use ofthis manual or the infringement of any copyright or other proprietary right.FreeWave Technologies, Inc. products may be subject to control by the Export Administration Regulations(EAR) and/or the International Traffic in Arms Regulations (ITAR). Export, re-export, or transfer of theseproducts without required authorization from the U.S. Department of Commerce, Bureau of Industry andSecurity, or the U.S. Department of State, Directorate of Defense Trade Controls, as applicable, is prohibited.Any party exporting, re-exporting, or transferring FreeWave products is responsible for obtaining allnecessary U.S. government authorizations required to ensure compliance with these and other applicableU.S. laws. Consult with your legal counsel for further guidance.FCC NotificationsThis device complies with part 15 of the FCC rules. Operation is subject to the following two conditions: 1) Thisdevice may not cause harmful interference and 2) this device must accept any interference received, includinginterference that may cause undesired operation.The content of this guide covers FreeWave Technologies, Inc. models sold under FCC ID: KNYPRW1001ER,KNYASM1101CR, KNYPRW1001EC.All models sold under the FCC ID(s) listed above must be installed professionally and are only approved for usewhen installed in devices produced by FreeWave Technologies or third party OEMs with the express writtenapproval of FreeWave Technologies, Inc. Changes or modifications should not be made to the device.IC NotificationsThis device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the followingtwo conditions: (1) this device may not cause interference, and (2) this device must accept any interference,including interference that may cause undesired operation of the device.Ce dispositif est conforme aux normes permis-exemptes du Canada RSS d'industrie. L'opération est sujette auxdeux conditions suivantes : (1) ce dispositif peut ne pas causer l'interférence, et (2) ce dispositif doit acceptern'importe quelle interférence, y compris l'interférence qui peut causer le fonctionnement peu désiré du dispositif.WavePoint™ Product SafetyPower Supply CableThe power supply cable is a 2-wire, size 22AWG.LUM0063AA Rev 05/05/2014 Page 3 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint™ Product SafetyScrew TorqueFor all connections, use these tightening torque minimum and maximum:lMinimum: 0.22 Nm.lMaximum: 0.25 Nm.WavePoint™ Conditions of Safe UselProvision shall be made to prevent the rated voltage from being exceeded by the transientdisturbances of more than 140% of the peak rated voltage.lThe WavePoint™shall be mounted in an ATEX certified enclosure with a minimumIP54 ingress protection rating (as defined in EN-60529).lThe WavePoint™cannot be used in an environment greater than pollution degree 2.Standards and EditionslEN 60079-0:2012+A11:2013lEN 60079-15:2010lIEC 60079-0, 6th EditionlIEC 60079-15, 4th EditionPage 4 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eTable of ContentsWavePoint™ Product Safety 3Power Supply Cable 3Screw Torque 4WavePoint™ Conditions of Safe Use 4Standards and Editions 4Preface 15Chapter 1: Introduction 17Key Features and Supported Protocols 18Wireless Operating Modes 18Available Network Services 18Device Management 18Network Security 19Requirements 19Installation Settings 19Equipment and Configuration 20Accessories 20Product Variations 21WavePoint 10e Labels 21Sample: Configuration Label 21Sample: Antenna Port Assignment Label 21WavePoint™ Components 22Data Connectors 22RF Connectors 23Certified Antennas 23LUM0063AA Rev 05/05/2014 Page 5 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint™ Product SafetyAntenna Installation Warning 23900MHz Antennas 242.4GHz Antennas 245GHz Antennas 25Antenna Installation 26Placement Considerations 26Transmit Power Settings 27RF Loss 27WavePoint™ EIRP Limits 28RF Considerations for 2.4GHz ISM Band 28Peak Power Output 28Point-to-Point Link 29Guidelines 29Point-to-Multi-Point Link 29RF Considerations for 900MHz ISM Band 30WavePoint™ GUI to Actual RF Power 30Connect Power 30Power Supply Cable 31Screw Torque 31Network Deployment Scenarios 31Wired Access 31Wireless Access 32Multiple Repeaters 32Connecting and Logging In 32Configuration Pages 34Page 6 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eSearching for Menus 35Chapter 2: Configuring Basic WavePoint™ Network Features 37Setting the Device IP Address and Subnet 38IPv4 Networks - Set the IP Address and Subnet 38Reserved Subnets 38Enabling and Configuring DHCP 39IPv4 Addressing - Enable and Configure DHCP 39Reserving IP Addresses 41Reserve IP Addresses in an IPv4 Network 41Delete a Specific LAN Reserved IP Address 41Delete all Reserved IP Addresses 42Using Multiple WANs or a Single WAN 42Indicate the Number of WANs in Use 42Configuring the WAN in an IPv4 Network 43Defining WAN Connections Using Static IP Addresses 43Defining WAN Connections Using DHCP 44Defining WAN Connections Using PPPoE 45Defining WAN Connections Using PPTP 46Setting the Device Mode 47Chapter 3: Additional Data Networking Features 49Defining Physical WAN Port Settings 49Setting Up Auto Fail-Over in Multi-WAN Environments 50Balancing Data Flow in Multi-WAN Environments 51Restricting the Traffic Type for Each WAN Port 52Configure a Traffic Restriction (Protocol Binding) for a WAN Port 53LUM0063AA Rev 05/05/2014 Page 7 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint™ Product SafetyEnable or Disable a Protocol Binding Configuration 54Delete a Protocol Binding Configuration 54Binding an IP Address to a MAC Address 54Data Routing 55Defining Static Routing Rules 55Define a Static IPv4 Route 56Delete an Existing Static Route 57Defining Routing Internet Protocol Rules 57Define RIP in IPv4 Networks 57Virtual Local Area Networks (VLANs) 58Enabling VLANs 59Defining VLANs in the Network 59Delete an Available VLAN 60Mapping VLANs to LAN Subnets 60Associating Port Traffic to a VLAN 62WaveMesh 64WaveMesh Methods 64Example: WaveMesh Routing Diagram 65WaveMesh using Auto Selection Method 66WaveMesh using Branch Selection Method 69WaveMesh using a List Selection Method 72Chapter 4: Configuring Wireless Access 79Example: Point-to-Point Configuration 79Configuring a Point-to-Point Network 80Point-to-Multipoint Configuration Examples 80Page 8 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eExample 1: Point-to-Multipoint 80Setup Procedure 80Example 2: Point-to-Multipoint 81Configuring Wireless Communication 82Defining Advanced Radio Settings 85Verify the Wireless Connection 88Enabling Virtual Access Points 89Change a Virtual Access Point's Settings 90Wireless Security 91Authorizing Wireless Access 91Restricting Access by MAC Address 92Set the ACL Policy Type 93Add or Edit MAC Addresses in the ACL List 93Delete a Device from the List 94Enabling Rogue Access Point Detection 94Review Devices that Attempted to Access the Network 94Defining EAP Authentication and External RADIUS Servers 95Configure the EAP Authentication 95Define an External RADIUS Server 96Scheduling When Wireless Connections are Available 97Define and Enable a Schedule for a Wireless Connection 97Disable a Schedule 98Chapter 5: Security 99Firewall Overview 99Firewall Basic Policies 99LUM0063AA Rev 05/05/2014 Page 9 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint™ Product SafetyDefault Outbound Policy 99Set the Outbound Traffic Policy 100Firewall Rules 100Creating Firewall Rules for IPv4 100Delete an IPv4 Firewall Rule 103Disable an IPv4 Firewall Rule 103Custom Services 103Configure Custom Service Settings 104Delete an Existing Custom Service 104VPN Passthrough 105Firewall Schedules 105Configuring Firewall Schedules 105Delete a Firewall Schedule 106Application Rules 107Configuring Application Rules 107Delete an Application Rule 108Application Rules Status 108VPN Tunnels and IPsec 109Configuring a VPN Tunnel with IPsec 109Configuring a Basic VPN Tunnel 109IPsec Policies 110Configuring an IPsec VPN Policy 111Configuring an Auto-policy that uses IKE to Perform Negotiations between Two VPNClients 114Configure Phase 2 Auto Policy Parameters 116Page 10 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eConfigure Phase 2 Manual Policy Parameters 117Delete an IPsec VPN Policy 118Edit the Default DHCP Range 119Chapter 6: Management and Administration 121Set Up Remote Access to the WAN Port 122User Access Management 122Users and Groups 123Users 123Groups 123Factory Defined Users 123admin 123guest 123Adding and Editing User Groups 124Default User Groups 124Define and Assign User Group Login Policies 125Define User Group Browser Policies 126Define User Group IP Policies 127Deleting User Groups Policies 128Delete a Single User Group Policy 128Delete all User Policies in a List 128Deleting User Groups 128Delete a User Group 128Delete all User Groups 129Adding and Editing Users 129Deleting Users 130LUM0063AA Rev 05/05/2014 Page 11 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint™ Product SafetySoftware Maintenance 130Upgrade the WavePoint 10e Software 130Back Up Configuration Settings 131Restore Configuration Settings 132Restoring Factory Default Settings 133Rebooting 133System Logging 134Set Up System Event Logging 134Logging Packet Traffic 135Log Packet Traffic in an IPv4 Network 136Sending Log Messages to Email Addresses 136Sending Logs to Syslog Servers 138Simple Network Management Protocol (SNMP) 139Authentication Certificates 139Adding Trusted Certificates (CA Certificates) 139Generating Self Certificate Requests 140Adding Active Self Certificates 141Deleting Certificates 142Delete a Single Certificate 142Delete all Certificates 142Setting the Date and Time 143Use an NTP Server to Set the Date and Time 143Manually Set the Date and Time 144System Statistics 144Chapter 7: Diagnostics and Troubleshooting 147Page 12 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eGeneral Troubleshooting 147Internet Connection and Browser Display 147Cannot Access the Configuration Pages from a Computer on the LAN 147Verifying the IP address of a Windows® Computer 148Configuration Changes are not Saving 148WavePoint 10e cannot Obtain an IP address from the ISP 148WavePoint 10e can Obtain an IP address but the PC is Unable to Load Internet Pages 149Date and Time 149The Date Shown in the Log Files is January 1, 1970 149The Time is off by One Hour 149Appendix A: Factory Default Settings 151Chapter B: Installation Instructions 153Attach the DIN Rail Bracket 154Attach the Mounting Flanges 154Appendix C: WavePoint™ Configurations 155WP10e-R100-100-100 155WP10e-S100-100-100 155WP10e-S200-101-100 155WP10e-T100-100-100 156WP10e-T200-101-100 156Appendix D: Bench Test Verification of WavePoint™ Configuration 157Required Materials 157RF Cabled Test Procedure 157Open Antenna Test Procedure 158Appendix E: WavePoint 10e Technical Specifications 161Glossary 165LUM0063AA Rev 05/05/2014 Page 13 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint™ Product SafetyIndex 167Page 14 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
PrefaceThis document provides information to configure and setup the WavePoint 10e device andincludes:lAn introduction to the WavePoint 10e device and its key features.lPhysical components of the device including its ports and LEDs.lConfiguring a basic WavePoint 10e network.lSetting up wireless access.lUsing a WavePoint 10e for local communication or as a Wi-Fi hotspot.lPerforming general administrative tasks (e.g., setting up users, defining the system time).lPerforming basic diagnostics, including troubleshooting tips.The WavePoint 10e has a variety of configurations for installation flexibility.Note: The information provided in this documentation assumes the user has a generalunderstanding of networking devices (e.g., routers, bridges, etc.) and Ethernet andRF communication.Contacting FreeWave Technical SupportFor up-to-date troubleshooting information, check the Support page at www.freewave.com.LUM0063AARev 05/05/2014 Page 15 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
PrefaceFreeWave provides technical support Monday through Friday, 7:30 AM to 5:30 PM Mountain Time(GMT -7).lCall toll-free at 1.866.923.6168.lIn Colorado, call 303.381.9200.lContact us through e-mail at moreinfo@freewave.com.Printing this DocumentThis document is set to print double-sided with a front cover and a back cover. Viewing thisdocument online with a PDF viewer, may show pages intentionally left blank to accommodate thedouble-sided printing.Documentation FeedbackSend comments or questions about this document's content to techpubs@freewave.com. In theemail, include the title of the document or the document's part number and revision letter (found inthe footer).Page 16 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionWavePoint 10e is a powerful, end-to-end wireless networking and communications platform. Itcomprises a product family of networking devices to solve network infrastructure andcommunications needs. The flexible WavePoint 10e platform delivers high-speed broadband datacommunications across an entire network and to any environment.WavePoint 10e provides:lFlexible installations on communication towers, rooftops, and street light poles withdiverse power and backhaul and antenna options.lMultiple applications such as voice, Internet access, video surveillance, sensory data, andSCADA.This chapter introduces WavePoint 10e and provides details about:LUM0063AARev 05/05/2014 Page 17 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionlKey Features and Supported Protocols on page 18lRequirements on page 19lAccessories on page 20lProduct Variations on page 21lCertified Antennas on page 23Key Features and Supported ProtocolsThe WavePoint 10e provides an industrial networking solution for a license-exempt market andincludes these features and standard networking technology and protocols.Wireless Operating ModesConfigurations for the WavePoint 10e include:lWireless mode: Access Point / Repeater / Client that can operate concurrently in the 900MHz, 2.4GHz, and 5GHz bands.lRouter mode: Network Address Translation (NAT) / Router / BridgeBoth the wireless mode and the router mode (called the Device Mode in theWavePoint™GUI) can be configured.For information about how WavePoint 10e fits into a network deployment, see NetworkDeployment Scenarios on page 31.Available Network ServicesThe networking services and protocols WavePoint 10e provides are:lConfigurable MTU and PMTU discoverywhen set up as an access point.lDHCP MAC filtering and MAC binding.lDHCP server or client.lDynamic DNS clients.lMulti-instance DHCP server on WLAN.lMultiple LAN subnets.lPPPoE, PPTP clientlRIPv1 and RIPv2.lStatic and dynamic IP addressing.lStatic and dynamic routing.lTCP, UDP, and ICMP protocols.lVLAN setup.lVPN Tunneling and Transport.Device ManagementEach WavePoint 10e is configured and monitored through a web browser interface.The management options are:Page 18 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elPolicy definition for when the WavePoint 10e is on and listening for network traffic.lRemote access and provisioning.lLogging services to monitor and track system performance using email logs, alerts, andexternal SYSLOG servers.lNetwork Time Protocol (NTP).lUnlimited users definition (subject to the network capacity).lOver the air firmware updates.Network SecurityThe security features WavePoint 10e provides to ensure the data passed through the network issecure are:lDevice certificateslHidden, guest, and maintenance SSIDslIPseclMAC address filteringlRADIUS for authenticationlRogue AP detectionlSSL and SSH secured managementlWPA, WPA2RequirementsImportant: Use the www.freewave.com/home/WavePointLogin site to downloadthe latest WavePoint 10e software. Updating the software to the latest versionprovides the best experience with WavePoint 10e.Installation SettingsAttention Network Administrator! Complete the information in this table.SSID: _____________________________ (8-64 ASCII characters. The SSID field is case sensitive.)Security Mode:Security Key: (This field is case sensitive.)IP Address:Subnet Mask:DHCP Setup Mode:Max Range: (2x the distance of the longest link in Km)LUM0063AA Rev 05/05/2014 Page 19 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionEquipment and ConfigurationThe equipment and configurations required prior to the initial WavePoint 10e setup and installationare:lA computer or laptop with:lWindows 7 operating system.lA web browser to access the web pages for configuration.lSupported browsers include: Microsoft Internet Explorer 9 and 10, Firefox 27,Google Chrome, Safari, and Opera.Note: Configuration pages are NOT optimized for browsers on mobile devices (e.g.,tablets, smart phones, etc.)lA device with wireless capability to verify the wireless connection.lA NEMA-4 rated enclosure (for outdoor installations only).lA screwdriver for attaching mounting brackets and power connector.FreeWave Recommends: A Path Study, as applicable, for the network site.AccessoriesThe items shipped in the box are:lThe WavePoint 10e device.lThe WavePoint 10e Quick Start Guide.lA CAT 5e Ethernet cable.lAn AC power adapter.These options are available and, if ordered, are included in the shipping box:lAn RJ-45-to-DB9 serial cable.lA mounting kit.Note: Mounting kits must be purchased separately.FreeWave Part Number DescriptionPOH0031AA DIN Rail Mounting KitPOH0030AA Wall Mount Bracket Kit (flange)Page 20 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eContact a FreeWave reseller or FreeWave Technical Support if the package is missing parts or anyparts were damaged during shipping.Note: Antennas are shipped separately.Product VariationsWavePoint™has a variety of configurations offering multiple feature sets. This manual describesthese features and indicates the features that are only available on certain models.To identify the variation and model number of the WavePoint 10e, see the product label on the backpanel.Note: For a list of features included in each model, see the WavePoint™ Configurationson page 155.WavePoint 10e LabelsThe labels on the back of the WavePoint 10e contain information about the device's portassignments and Configuration (CFG).Sample: Configuration LabelSample: Antenna Port Assignment LabelImportant: The information on the Antenna Port Assignment label is critical forcorrect antenna connections and operation of the WavePoint™device.LUM0063AA Rev 05/05/2014 Page 21 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionNote: The Port Assignment label designates which RF ports (the WavePoint™TNCconnectors) are used by which radio.WavePoint™ ComponentsData ConnectorsQuantity Connector4 RJ-45 connector for 4 Ethernet ports3RJ-45 connector for:l2 - RS-232l1 - RS-485Page 22 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eQuantity Connector1 Micro USB connector1 Power connector used for DC powerRF ConnectorsModule Maximum Connectors900MHz RF modules 2 TNC connectors for spatial diversity*2.4GHz RF modules 3 TNC connectors for 3x3 MIMO operation*5.8GHz RF modules 3 TNC connectors for 3x3 MIMO operation*Cellular module 1 RF connector – TNCGPS module 1 RF connector – TNC*One active RF port is a typical configuration.Note: Refer to the label on the WavePoint 10e to determine the exact RF Connectorconfiguration. A description of the labels are in WavePoint 10e Labels on page 21.Certified AntennasAWavePoint™can have multiple radio modules installed, each potentially operating at differentfrequencies. The model number reflects the number and frequency of the radios installed inside theWavePoint™device and determines the type of antennas that can be used.Important: The use of an antenna with a higher gain or a different type of antennaother than those approved requires new FCC approval and should not be used.Antenna Installation WarningImportant: This section provides the required FCC warning information for workingin proximity of the WavePoint™antennas.1. All antenna installation and servicing must be performed by qualified technical personnelonly.a. When servicing the antenna, or working at distances closer than those listed below,verify the transmitter has been disabled.b. Output is measured at the antenna terminal of the transmitter.LUM0063AA Rev 05/05/2014 Page 23 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: Introductionc. The antennas used for the WavePoint™must be fixed-mounted on outdoorpermanent structures to provide the minimum separation distances described in thisfiling for satisfying RF exposure compliance requirements.d. When applicable, RF exposure compliance may need to be addressed at the time oflicensing, as required by the responsible FCC Bureaus, including antenna co-locationrequirements of §1.1307(b)(3).2. Typically, the antenna connected to the transmitter is a directional (high gain) antenna,fixed-mounted on the side or top of a building, or on a tower.a. Depending upon the application and the gain of the antenna, the total composite powercould exceed 20 watts EIRP.b. The antenna location must only be accessible by qualified technical personnel.c. Under normal operating conditions, no other person can touch the antenna orapproach within 3.05 meters of the antenna.Note: These antennas have been approved for use with WavePoint 10e and thedesignated Tx Streams.900MHz AntennasNote: Separation minimum RF safety distances are required for FCC RF exposurecompliance.900 MHz AntennasType Antenna Model Gain No ofTx StreamsChannelSizeMinimum RFSafety DistanceOmni Wavelink - PRO902-11 11dBi 2 20 MHz 94cmYagi Wavelink - PRO890-16 16dBi 2 20 MHz 260cm2.4GHz AntennasNote: Separation minimum RF safety distances are required for FCC RF exposurecompliance.2.4GHz AntennasType Antenna Model Gain No ofTx StreamsChannelSizeMinimum RFSafety DistanceDipole 98618MNXX001 5dBi 3 20 MHz 20cmPage 24 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e2.4GHz AntennasType Antenna Model Gain No ofTx StreamsChannelSizeMinimum RFSafety Distance40 MHzOmni ZDAQJ2400-12 12dBi 120 MHz40 MHz20cmYagi YA240016 16dBi 120 MHz40 MHz20cm60 degree sectorRadioWavesSEC-25V-60-17HP17.5dBi 220 MHz40 MHz20cmDirectional Panel*SuperpassSPAPG2020.5dBi 220 MHz40 MHz25cmDish*RadioWavesSPD4 - 2.4NS27dBi 320 MHz40 MHz40cm*For radios deployed in the European Community under the CE mark, only antennas with a gain of17.5dBi or less may be used.5GHz AntennasNote: Separation minimum RF safety distances are required for FCC RF exposurecompliance.5GHz AntennasType Antenna Model Gain No ofTx StreamsChannelSizeMinimum RFSafety DistanceDipole 98618UNXX000 7dBi 120 MHz40 MHz20cmOmni ZDAQJ5800-12 12dBi 120 MHz40 MHz20cmYagi Y5815 15dBi 120 MHz40 MHz26cmLUM0063AA Rev 05/05/2014 Page 25 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: Introduction5GHz AntennasType Antenna Model Gain No ofTx StreamsChannelSizeMinimum RFSafety DistanceDirectional PanelRadioWavesFP2-5-2828.2dBi 220 MHz40 MHz71cmDishRadioWavesSPD4-5.2S34.9dBi 320 MHz40 MHz154cmAntenna InstallationAntennas must be professionally installed on a fixed, mounted, and permanent structure to satisfyRF exposure requirements.Warning! Any antenna placed outdoors must be properly grounded. Useextreme caution when installing antennas and follow ALL manufacturerinstructions included with the antenna.Mise en garde ! Toute antenne placée à l'extérieur doit être correctementmise à la terre. Soyez très prudent lors de l'installation d'antennes et suivretoutes les instructions du fabricant fournies avec l'antenne.Per FCC regulations, any antenna used with transceivers must be an approved antenna that hascomparable performance parameters.Placement ConsiderationsPlacement of the WavePoint 10e is likely to have a significant impact on its performance. The key tothe overall robustness of the RF link is the height and alignment of the antenna. Other antennas inclose proximity are a potential source of interference. See Diagnostics and Troubleshooting on page147 for more information.FreeWave Recommends: In general, FreeWave units with a higher antenna placement have abetter communications link.Use grid and dish antennas with low attenuation cable in lengths ranging from 3 to 100 feet.To help optimize an antenna location, have FreeWave complete a free Path Sitestudy.Contact a FreeWave sales representative for a Path Study form.Email the completed form to pathstudy@freewave.com.Page 26 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eTransmit Power SettingsThe Transmit Power parameter is the output power of the transceiver.Important: The information in this section describes the FCC maximum EquivalentIsotropically Radiated Power (EIRP) regulations.The transceiver output power level must be set to satisfy the maximum requirementsin the country the WavePoint 10e is installed in.The installer is responsible for ensuring that an installation is within EIRP emissionlimits.When setting up the network, consider the power gain that an antenna may add and the power lossthrough cabling. Adjust the Transmit Power on the transceiver so it does NOT exceed themaximum EIRP for the regulating body where WavePoint 10e is installed. Use the tables todetermine the correct Transmit Power parameter setting for each transceiver in the network.When calculating the power gain, use Equation 1 to determine the total output power at theantenna.Transceiver Output – Losses + Antenna Gain = Output Antenna PowerEquation 1Note: Loss calculations should include cable, connectors, surge protectors, etc.RF LossCable losses for high frequency systems are one of the main losses to consider in Equation 1.This table shows the RF loss at various cable lengths.Example: Using the information in the table, a cable as short as 25 feet can have anattenuation of almost 1dB.Cable TypeAttenuation(db/100 ft) Run Length (ft)Total RunAttenuation (dB)LMR400 3.93 25 1.0LMR500 3.154 25 0.8LMR600 2.518 25 0.6LMR900 1.709 25 0.4LUM0063AA Rev 05/05/2014 Page 27 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionWavePoint™ EIRP LimitsThis table provides a summary of the FCC limits for the different frequencies available inWavePoint™.Note: See the www.fcc.gov site for the most up-to-date information.EIRP LimitsFrequency BandPTPMax EIRP(dBm)PTPMax EIRP(watts)PTMPMax EIRP(dBm)PTMPMax EIRP(watts)900 ISM (902-928 MHz) 36 4 36 42.4 ISM (2.4 - 2.483.5GHz) 50 158 36 4UNII - 1 (5.15 - 5.25 GHz) 22 0.16 22 0.16UNII - 2a (5.25 - 5.35 GHz) 29 0.8 29 0.8UNII - 2c (5.470 - 5.725GHz) 29 0.8 29 0.8UNII - 3 (5.725 - 5.850GHz) 53 200 35 3.2RF Considerations for 2.4GHz ISM BandThe FCC regulations for 2.4GHz ISM Band are different for Point-to-Point (PTP) and Point-to-Multi-Point (PtMP) links.Peak Power OutputThe maximum peak output power of the intentional radiator cannot exceed 1.000 Watts.Digital Transmission Systems (MHz) Output Limit (Watts)2400-2483.5 1.000Important: Point-to-Point applications operating in the 2400-2483.5MHz band mayemploy transmitting antennas with directional gain greater than 6dBi provided themaximum peak output power of the intentional radiator is reduced by 1dB for every3dB that the directional gain of the antenna exceeds 6dBi.Page 28 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eExample:2.4GHz with a 24 inch dish has a maximum output of 24dBm.2.4GHz with a 27 inch dish has a maximum output of 23dBm.Point-to-Point LinkNote: The FCC permits a maximum of 36dBm EIRP when using a transmitter set to30dBm.However, for each 1dBm reduction in the transmitter power, the FCC permits anincrease in antenna gain of 3dBi.Extrapolating this rule through different maximum power settings on the WavePoint™providesthese guidelines.GuidelinesMaximum Powerfrom TransmitterMaximum AntennaGain (dBi)EIRP (dBm)30dBm 6 3629dBm 9 3828dBm 12 4027dBm 15 4226dBm 18 4425dBm 21 4624dBm 24 4823dBm 27 5022dBm 30 52Note: FreeWave has certified a dish antenna with a maximum gain of 27dBi.This sets the maximum EIRP of a FreeWave system to 50 EIRP.Dishes below 27dBi can be used with a corresponding reduction in total EIRP.Point-to-Multi-Point LinkFor Point-to-Multi-Point links, the FCC permits 1 Watt output power at the transceiver and 36dBm (4Watts) at the antenna.LUM0063AA Rev 05/05/2014 Page 29 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionRF Considerations for 900MHz ISM BandThe 900MHz links requires these special considerations:lA Path Study is needed to confirm the right RF characteristics of the link.lThe noise floor should be sampled at each site using similar antennas to the onesexpected to be deployed.WavePoint™ GUI to Actual RF PowerThis table identifies the WavePoint™GUI settings on the Advanced Radio window and theircorresponding actual power out of the radio.Note: Click Wireless LAN > Radios > Advanced to open the window.GUI Setting(dBm)Actual Tx Power Outof Radio (dBm)11 2310 229 218 207 196 185 17GUI Setting(dBm)Actual Tx Power Outof Radio (dBm)18 3017 2916 2815 2714 2613 2512 24Connect PowerUse either of these options to provide the WavePoint™power:Page 30 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elConnect a CAT 5e Ethernet cable from an 802.3at (PoE+) source to one or both of theEthernet PoE Connector ports on the left side of the connector panel.Note: Depending on the number of radios installed in the WavePoint 10e model,it may require power through both ports.Important: Power over Ethernet is only available on some models.lConnect a power supply to the green Standard Power port on the far right side of theconnector panel. The WavePoint 10e requires power between 10.5Vdc-30Vdc, 24W.Power Supply CableThe power supply cable is a 2-wire, size 22AWG.Screw TorqueFor all connections, use these tightening torque minimum and maximum:lMinimum: 0.22 Nm.lMaximum: 0.25 Nm.Network Deployment ScenariosWavePoint 10e can be installed in a network to provide both wired and wireless access in Point-to-Point and Point-to-Multipoint scenarios. This extends the Ethernet and real-time communication toremote parts of the network.These diagrams illustrate possible network deployment options for a WavePoint 10e using thesesymbols:Access PointClientRepeaterWired AccessThis provides a connection to a central office.LUM0063AA Rev 05/05/2014 Page 31 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionWireless AccessMultiple RepeatersWavePoint 10e provides wireless access by extending the distance of the network using back-to-back Repeaters:Connecting and Logging InWavePoint 10e uses web pages for configuration.Setup and configure the WavePoint 10e while it is in an easily accessible location.Note: These instructions assume the computer has a static IP address assigned.Change the computer's IP address to be within the same subnet as the defaultaddress of the WavePoint 10e (192.168.1.1).AWavePoint 10e from the factory has these user types:Page 32 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elAdministrator - Can view and change all configuration settings.lGuest - Can view configuration settings but cannot save changes.Connect WavePoint 10e to a ComputerImportant: Initial setup requires a wired connection.1. Verify the WavePoint 10e has power.2. On the WavePoint 10e Connector Panel, connect a CAT 5e Ethernet cable fromEthernet port 3 or 4 to a computer that has a web browser installed.Note: Use a command line to ping 192.168.1.1 to ensure the WavePoint™is ready foruse.Important: For 2.4 GHz WavePoint 10e devices, connect to a wireless connectionafter the WLAN settings are configured.3. On the connected computer, open a web browser.4. In the web browser's navigation bar, enter http://192.168.1.1.This is the WavePoint 10e factory default IP address.Note: If the IP address was changed, enter that IP address in the navigation bar of thebrowser to access the Configuration pages.5. Enter the default User Name (admin) and Password (freewave).User Names and Passwords are case sensitive.Login Type Default Login CredentialsAdministrator Username: adminPassword: freewaveGuest Username: guestPassword: freewaveNote: If the User Name or Password has changed, use the updated informationin the appropriate fields.6. Click Login to view the Configuration pages.7. Optional: See the Setting the Device IP Address and Subnet on page 38 procedure tochange the subnet address.LUM0063AA Rev 05/05/2014 Page 33 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 1: IntroductionConfiguration PagesEach WavePoint 10e is configured through a set of web pages visible after log in. Functionality andfeatures are grouped in the menus across the top of the page.WavePoint™ menusClick a menu to view the menu and its sub-menus with links to individual Configuration pages. Thepages are used to change each feature of the WavePoint™configuration.This image is an example of the Status > Logs menu.Example: Status > Logs Menu and sub-menusWhen navigating through the pages, the menu path (breadcrumbs) for the page isshown under the menu tabs to help identify the page:Example: BreadcrumbsPage 34 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eSearching for MenusSearch for a menu by menu keyword using the Menu Search field located below the Logoutbutton.WavePoint 10e searches and shows the menus that match the keywords entered in the field:Example: Menu Search fieldNote: The Auto Configure utility to configure the basic radio settings is not supported.LUM0063AA Rev 05/05/2014 Page 35 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 36 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring BasicWavePoint™ Network FeaturesThis chapter provides information about:lSetting an IP address that is unique in the network.lDefining the subnet.lConfiguring the optional DHCP server.lReserving IP addresses within an address pool.lEnabling, disabling, and configuring WAN ports and the wider network.lSetting the WavePoint 10e mode.LUM0063AARev 05/05/2014 Page 37 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring Basic WavePoint™ Network FeaturesSetting the Device IP Address and SubnetFor the WavePoint 10e to exist in the network, it must have a unique IP address and exist in thecorrect subnet.IPv4 Networks - Set the IP Address and SubnetReserved SubnetsImportant: WavePoint™has reserved subnets that cannot be used toadministrate the WavePoint™device. These subnets are reserved for (VirtualAccess Points) VAPs.The subnets that CANNOT be used are:l192.168.2.0/24l192.168.3.0/24l192.168.4.0/24Procedure1. Follow the procedures for Connecting and Logging In on page 322. On the Network menu, click LAN > LAN IPv4 Setup.3. In the IP Address Setup section, enter this information for the LAN:a. Enter a unique IP address for the device.The default setting is 192.168.1.1.b. The default setting for the Subnet Mask is 255.255.255.0.Accept the default setting unless subnetting is used.Example: If the default setting of 255.255.255.0 is kept, all devices in thenetwork must have addresses where the first three sections of the addressmatch, but the last section is unique.Addresses 10.0.1.201 and 10.0.1.202 are in the same subnet, but10.0.2.201 is not included in the subnet.c. The default option for the DHCP Setup Mode is DHCP None.If applicable, select either the DHCP Relay or DHCP Server option whenconfiguring the device as an Access Point.For more information about the DHCP Mode settings,see Enabling and ConfiguringDHCP on page 39.Page 38 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eImportant: Write down the updated IP address to access this device throughthe LAN or over a wireless connection.4. Click Save to save the changes or Cancel to clear any changes without saving.Note: When the IP address is changed and saved, the Configuration page no longerresponds because the IP address is saved to the WavePoint 10e and theconnection is lost.To reconnect, enter the new IP address in the web browser window, verifying thePC’s IP address is within the same subnet.Enabling and Configuring DHCPWhen configured and installed in a network as a router or a Network Address Translation (NAT)device, the WavePoint 10e functions as a Dynamic Host Configuration Protocol (DHCP) serverwhen enabled in DHCP mode. This provides TCP/IP configuration to computers connected to theLAN network.The device can also be set to receive its IP address from a third-party DHCPserver.IPv4 Addressing - Enable and Configure DHCP1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. Set the radio mode to an Access Point.See Configuring Wireless Communication on page 82 for instructions.4. On the Network menu, click LAN IPv4 Setup.5. In the DHCP Mode field, select a mode:lNone - The DHCP server is disabled.Select this option if:lanother device in the network is the DHCP server or the network settings aremanually configured for all devices in the network.lconfiguring the device as a client or repeater.lDHCP Server - The DHCP server is enabled and it assigns IP addresses:LUM0063AA Rev 05/05/2014 Page 39 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring Basic WavePoint™ Network Featureslwithin the range specified in the Starting IP Address and Ending IP Addressfields.ladditional TCP/IP settings to any LAN device that requests a DHCP address.lDHCP Relay - If enabled, LAN devices that request a DHCP address receive IPaddress leases and corresponding information from a DHCP server on a differentsubnet within the network.lWavePoint 10e routes the request to the Gateway IP address specified in theRelay Gateway field.lUse this setting for devices in a wireless network that request IP addresses froma third party DHCP server.6. If the DHCP Server is the mode selected in Step 5, change these parameters toconfigure the DHCP server:a. Enter a Starting IP Address as the first inclusive IP addresses in a pool ofaddresses the router can assign to a DHCP client.The default starting address is 192.168.1.100.Important: These addresses must be in the same IP addresssubnet as the router’s IP address.Note: Reserve part of the IP address range for devices with staticallyassigned IP addresses in the network.See Reserving IP Addresses on page 41 for more information.b. Enter an Ending IP Address as the last inclusive IP addresses in a pool ofaddresses the router can assign to a DHCP client.The default ending address is 192.168.1.254.c. If applicable, enter a Primary DNS Server and a Secondary DNS Server.If the network uses a DNS server, enter the IP addresses of the domain namesystem (DNS) servers, if available on the LAN.d. If applicable, enter the Domain Name of the DHCP server.e. Optional: If the network uses a WINS server, enter the IP address for the WINSserver or enter the server's IP address.f. Enter the Lease Time, in hours, an IP address is assigned or leased.Set this time as accurately as possible to ensure that unused IPaddresses are available for other requesting devices.7. Click Save to save the changes or Cancel to clear any changes without saving.Page 40 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eReserving IP AddressesIf a WavePoint 10e is used in the network as a DHCP server to assign IP addresses, reserve part ofthe IP address range for devices within the network for statically assigned IP addresses in thenetwork.When the WavePoint 10e receives a request from an IP address from a device in the network, itcompares the hardware address to the MAC addresses saved in the reserved IP addresses list.lIf a match exists, the WavePoint 10e assigns the requesting device the saved IPaddresses.lIf a match is NOT found, the WavePoint 10e assigns the requesting device an IP addressfrom the range set in the LAN setup page.Reserve IP Addresses in an IPv4 Network1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click LAN > LAN IPv4 Reserved IPs.The list of currently reserved IP addresses is shown.4. Below the list of addresses, click Add New LAN IPv4 Reserved IP.5. Enter the static IP Address to reserve.6. Enter the MAC Address WavePoint 10e looks for when trying to determine if arequesting device is assigned the corresponding IP address.7. Click Save to save the changes or Cancel to clear any changes without saving.Delete a Specific LAN Reserved IP Address1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click LAN > LAN IPv4 Reserved IPs.The list of currently reserved IP addresses is shown.4. Right-click the address to remove and click Delete.LUM0063AA Rev 05/05/2014 Page 41 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring Basic WavePoint™ Network FeaturesDelete all Reserved IP AddressesRight-click anywhere in the table and click Select All > Delete.Using Multiple WANs or a Single WANWavePoint 10e supports a maximum of two WANs. Setting up both WANs allows redundancy inthe WAN by setting up one WAN as a secondary to back up the first in case of a network failure.Using two WANs also allows balancing the data traffic load across multiple links. This can improvenetwork performance if the environment requires a large amount of data be passed across theWAN.Indicate the Number of WANs in Use1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN Mode.4. Select a Multi-WAN Use option:lAuto-Rollover Using WAN Port - Enables the auto-failover if there is an error inthe primary WAN.lSelect the WAN to use as the secondary, redundant network.lSet how WavePoint 10e determines if a failure has occurred.See Setting Up Auto Fail-Over in Multi-WAN Environments on page 50lLoad Balancing - Use to balance the data traffic load across both WANs.See Balancing Data Flow in Multi-WAN Environments on page 51 to select the typeof balancing to use.lUsing Only Single WAN Port - Enables only the WAN port selected in theadjacent drop-down list.Note: Selecting this option does not allow for redundancy or load balancingbetween two ports.5. Click Save to save the changes or Cancel to clear any changes without saving.Page 42 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eConfiguring the WAN in an IPv4 NetworkWavePoint 10e has two WAN ports that can be configured to have separate settings. Use thesettings on the WAN IPv4 pages to define the properties for each WAN port.Defining WAN Connections Using Static IP AddressesAssign a static IP address to the WavePoint 10e for WAN traffic.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN1 IPv4 Setup or WAN 2 IPv4 Setup.4. In the Connection Type field, click Static.5. In the Static IP section, enter this information for the static WAN connection:a. IP Address - Enter the static IP address assigned by the ISP.This address identifies the device to the ISP.b. Subnet Mask - Enter the IPv4 Subnet Mask provided by the ISP or NetworkAdministrator.c. Gateway IP Address - Enter the IP address of the ISP Gateway provided bythe ISP or Network Administrator.6. In the Domain Name System (DNS) Servers section, enter the IP address of thePrimary and Secondary DNS servers.A DNS server translates Internet names to numeric IP addresses.Note: If the ISP does not transfer the IP address, obtain the address from themand enter it manually into these fields.7. In the MAC Address section, select the method the ISP uses to determine the localEthernet address of this WAN port:lUse Default MAC - Select this option unless the ISP requires MAC authenticationand another MAC address has been previously registered with the ISP.lClone your PC's MAC - Select this option to assign the MAC address of thecomputer used to configure the WavePoint 10e.lUse this MAC - Select this option if the ISP assigned a MAC address to use.LUM0063AA Rev 05/05/2014 Page 43 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring Basic WavePoint™ Network FeatureslIn the MAC Address field, enter a MAC address in this format:XX:XX:XX:XX:XX:XXwhere X is a number from 0 to 9 or an alphabetical letter between A and F.8. Click Save to save the changes or Cancel to clear any changes without saving.Defining WAN Connections Using DHCPUsing DHCP, the WavePoint 10e can obtain its IP settings automatically from the ISP or DHCPserver.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN1 IPv4 Setup or WAN 2 IPv4 Setup.4. In the Connection Type field, click DHCP.5. In the Dynamic IP (DHCP) section, enter the Host Name to send to the DHCP server.The host-name string contains only the client's host name prefix.The server appends the DNS domain name or domain-name options, if any, to derive thefully qualified domain name.6. In the Domain Name System (DNS) Servers section, select how to convert Internetnames (e.g., www.freewave.com) to IP addresses to route traffic to the correct resourceson the WAN.lGet Dynamically from ISP - Select this option if the ISP did not assign a staticDNS IP address.lUse These DNS Servers - Select this option if the ISP assigned a static DNS IPaddress.lEnter the Primary and Secondary DNS servers in the designated fields.7. In the MAC Address section, select the method the ISP uses to determine the localEthernet address of this WAN port:lUse Default MAC - Select this option unless the ISP requires MAC authenticationand another MAC address has been previously registered with the ISP.lClone your PC's MAC - Select this option to assign the MAC address of thecomputer used to configure the WavePoint 10e.Page 44 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elUse this MAC - Select this option if the ISP assigned a MAC address to use.lIn the MAC Address field, enter a MAC address in this format:XX:XX:XX:XX:XX:XXwhere X is a number from 0 to 9 or an alphabetical letter between A and F.8. Click Save to save the changes or Cancel to clear any changes without saving.Defining WAN Connections Using PPPoESelect this Internet connection type if the ISP uses Point-to-Point Protocol over Ethernet (PPPoE) toestablish its network connections. If the ISP uses PPPoE to manage its Internet connectivity, aUsername, Password, and additional information are provided. Use this information when definingthe connection type.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN1 IPv4 Setup or WAN 2 IPv4 Setup.4. In the Connection Type field, click PPPoE.5. In the Address Mode field, select an option:lDynamic IP - Use if a static IP address has not been assigned.The ISP automatically assigns an IP address.lStatic IP - Use if the ISP has assigned a fixed (static or permanent) IP address.lEnter the IP address and the Subnet Mask in the designated fields6. Enter the Username and Password required to log in to the ISP.7. Optional: In the Service field, distinguish the two servers using the same Username andPassword combination.Note: With PPPoE, servers using IP addresses cannot be specified.However, the particular server to connect to can be specified in the Servicefield.8. Select the Authentication Type to use:lAuto-Negotiate lCHAPlMS-CHAP lMS-CHAPv2LUM0063AA Rev 05/05/2014 Page 45 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring Basic WavePoint™ Network FeatureslPAP9. Select a Reconnect Mode option:lAlways On - Select this option to leave the connection active.lOn Demand - Select this option to automatically end the connection if it is idle for aspecified number of minutes.lEnter the number of minutes in the Maximum Idle Time field.This feature is useful if the ISP charges based on the amount of connectiontime.10. Click Save to save the changes or Cancel to clear any changes without saving.Defining WAN Connections Using PPTPSelect this Internet connection type to create a virtual private network (VPN).Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN IPv4 Setup.4. In the Wan Type field, select the WAN port to configure.5. In the Address Mode field, select an option:lDynamic IP - Select this option if a static IP address has not been assigned.The ISP automatically assigns an IP address.lStatic IP - Select this option if the ISP has assigned a fixed (static or permanent) IPaddress.lEnter the IP address and the Subnet Mask in the designated fields6. Enter the Username and Password required to log in to the ISP.7. Optional: In the Service field, distinguish the two servers using the same Username andPassword combination.Note: With PPTP, servers using IP addresses cannot be specified.However, the particular server to connect to can be specified in the Servicefield.8. Select the Authentication Type to use:Page 46 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elAuto-Negotiate lCHAPlMS-CHAP lMS-CHAPv2lPAP9. Select a Reconnect Mode option:lAlways On - Select this option to leave the connection active.lOn Demand - Select this option to automatically end the connection if it is idle for aspecified number of minutes.lEnter the number of minutes in the Maximum Idle Time field.This feature is useful if the ISP charges based on the amount of connectiontime.10. In the Server Address field, enter the AAA radius server IP address.11. In the MPPE Encryption field, enter the AAA radius server encryption information.12. In the Split Tunnel field, enter the IP address of default gateway on remote network.13. Click Save to save the changes or Cancel to clear any changes without saving.Setting the Device ModeThe device mode establishes the routing mode between the LAN and the WAN.Note: All inbound firewall rules are deleted if the setting between NAT and Router ischanged.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click Network > Device Mode.4. Select a mode:lNAT - Network Address Translation (NAT) allows devices on a LAN to share asingle Internet connection.LUM0063AA Rev 05/05/2014 Page 47 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 2: Configuring Basic WavePoint™ Network FeatureslIn a NAT setup, devices on the LAN use a private IP address range. The WANport on the WavePoint 10e uses a single public IP address, hiding internal IPaddress from locations on the Internet.lSelect NAT if the Internet Service Provider (ISP) has provided only one IPaddress.lAssign any network device that connects through the WavePoint 10e an IPaddress in a private subnet (e.g., 192.168.1.99).lRouter - IP addresses on the LAN are not translated and are exposed on theInternet.lSelect this option if the ISP assigns an IP address for each device that connectsthrough the WavePoint 10e.lAssign any device that connects through the WavePoint 10e an IP address inthe same subnet as the WAN.lBridge - This option allows traffic from the LAN to the WAN without addresstranslation. The LAN and the WAN can be configured on different subnets.Note: For WavePoint 10e to function as a DHCP Relay, it must be configured asan Access Point and the device mode must be set to NAT.5. Click Save to save the changes or Cancel to clear any changes without saving.Page 48 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data NetworkingFeaturesDefining Physical WAN Port SettingsFor each of the two WAN ports, these settings can be controlled:lWhether the WavePoint 10e responds to accessibility requests.lThe data transmission size through the port.lThe control the port speed.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Remote Management.4. In the WANs Ping section, set the Respond to Ping field to On if the WavePoint 10eshould respond to accessibility requests from other devices.Note: Pings are used primarily for troubleshooting network communications.5. In the MTU Size field, select an option to set the maximum transmission allowed withoutfragmentation:LUM0063AARev 05/05/2014 Page 49 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeatureslDefault - 1500 bytes.lCustom - Enter the maximum transmission in bytes in the Custom MTU field6. In the Port Speed field, select an option:lAuto Sense - The optimal settings for the port are configured automatically basedon the device and the network.l10, 100 or 1000 Base T Half Duplex - Data traffic is only allowed in one directionat a time at the indicated speed (10 Mbps, 100 Mbps, and 1000 Mbps).l10, 100 or 1000 Base T Full Duplex - Data traffic is allowed in both directions(send and receive) at a time at the indicated speed (10 Mbps, 100 Mbps, and 1000Mbps).7. Click Save to save the changes or Cancel to clear any changes without saving.Setting Up Auto Fail-Over in Multi-WAN EnvironmentsIf both WANs are used on the WavePoint 10e, one WAN port can be set to be the primary port forall WAN traffic. The other WAN port is set as a back-up for redundancy purposes if the primary link isinterrupted.Note: Configure both WAN ports for the appropriate IP network (IPv4 or IPv6) prior toenabling and setting up the fail-over functionality.The port designated as the backup (redundant) port remains disconnected until the primary portexperiences a failure. At that time, the WavePoint 10e directs all WAN traffic to the redundant port.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN Mode.4. In the Multi-WAN Use section, click Auto Rollover Using WAN Port and select thebackup WAN from the drop-down list.Page 50 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e5. In the WAN Failure Detection Method section, complete the information that indicateswhen WAN traffic is rolled over to the selected WAN port:a. Select a Method option:lNone - There is no check for detecting WAN failures.lThis option is valid only if the WAN mode is set to Load Balancing.lDNS Lookup Using WAN DNS Servers - Detects failure of a WAN linkusing the DNS servers configured in the Network > WAN1 or WAN2 IPv4Setup pages.lDNS Lookup Using DNS Servers - Uses a specific DNS server fordetecting WAN failure.lEnter the IP addresses of the custom DNS servers for WAN1 andWAN2 in the fields provided.lPing the IP Addresses - Attempts to communicate with the IP addresseslisted in the WAN 1 and WAN 2 fields to determine if the primary WAN is stillconnected.b. Enter a Retry Interval that determines how frequently the WavePoint 10eruns the check selected in the Method field.c. In the Failover Threshold field, enter the number of times the check must failbefore the WAN traffic is directed to the redundant port.6. Click Save to save the changes or Cancel to clear any changes without saving.Balancing Data Flow in Multi-WAN EnvironmentsIf both WANs are used on the WavePoint 10e, use load balancing to take advantage of thebandwidth available on the WANs simultaneously.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > WAN Mode.4. In the Multi-WAN Use section, click Load Balancing and select a balancing method:lRound Robin - Use the bindings described in Restricting the Traffic Type for EachWAN Port on page 52 to direct traffic to specific WANs.LUM0063AA Rev 05/05/2014 Page 51 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesExample: If one WAN has a more robust link than the other, direct the low-latency information over that link and direct back ground information to the WANwith the less robust link.lSpill Over - Have the WAN 1 act as the primary link until a defined threshold set inStep 3 is reached. When the WAN reaches the defined threshold, the additionaldata is directed to WAN 2.5. If Spill Over is selected as the load balancing method, complete the SpilloverConfiguration section to further refine the distribution of data between the WANs:a. Enter the Load Tolerance percentage between 20 and 80 of the maximumbandwidth at which the data is sent to WAN 2.Example: Set this field to 50 and the Max Bandwidth field to 1500 bytes.When the bandwidth received on WAN 1 reaches 50 percent of 1500 bytes,or 750 bytes, any additional data is directed to WAN2.b. In the Max Bandwidth field, enter the number of bytes at which the data is sentto WAN 2.Example: Set this field to 1500 bytes and the Load Tolerance field to 50percent. When the bandwidth received on WAN 1 reaches 50 percent of 1500bytes, or 750 bytes, any additional data is directed to WAN2.6. Click Save to save the changes or Cancel to clear any changes without saving.Restricting the Traffic Type for Each WAN PortProtocol bindings ensure a defined type of traffic is always sent over one of the two configured WANinterfaces when more than one Gateway to the Internet is available.lA protocol binding configuration can be disabled at any time.See Enable or Disable a Protocol Binding Configuration on page 54lA protocol binding configuration can be deleted.See Delete a Protocol Binding Configuration on page 54.Page 52 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eConfigure a Traffic Restriction (Protocol Binding) for a WAN Port1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, select WAN > Protocol Bindings.The current list of protocol settings is shown.4. Do one of the following:lEdit an existing binding - Right-click the status in the Protocol Bindings tableand select Edit.lAdd a binding configuration - Click Add New Protocol Binding below theProtocol Bindings table.5. In the Service field, select one of the services available for Protocol Binding.6. In the Local Gateway field, select the port that sets the local Gateway for this protocolbinding (either Dedicated WAN or Configurable WAN).7. In the Source Network field, select the source of traffic on the port:lAny - Traffic can come from any network.lSingle Address - Limits traffic to one source.lEnter the IP address of the source in the field provided.lAddress Range - Allows computers within an IP address range to be a part of thesource network.lEnter the first and last addresses in the range in the fields provided.8. In the Destination Network field, select the destination of traffic on the port:lAny - Traffic can go to any network.lSingle Address - Limits traffic to one computer.lEnter the IP address of the computer in the field provided.lAddress Range - Allows computers within an IP address range to be a part of thedestination network.lEnter the first and last addresses in the range in the fields provided.9. Click Save to save the changes or Cancel to clear any changes without saving.LUM0063AA Rev 05/05/2014 Page 53 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesEnable or Disable a Protocol Binding Configuration1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > Protocol Bindings.In the Status field, the list of protocol settings are shown with the status of each setting.4. Right-click the binding and select Enable or Disable, as necessary.Delete a Protocol Binding Configuration1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click WAN > Protocol Bindings.In the Status field, the list of protocol settings are shown with the status of each setting.4. Right-click the binding to remove and click Delete.Binding an IP Address to a MAC AddressIf the WavePoint 10e is configured as a DHCP server, and there are devices that connect to it thatrequire static IP addresses, the device can be set to assign the same address to those devices eachtime they connect using IP MAC address binding.Binding an IP address assignment to a single MAC address replicates a static IPaddress, but is managed from a single location without having to physically assigneach device in the network a static IP.As data flows through the network, if the WavePoint 10e sees packets with a mismatch in the IPaddress or MAC address, it drops the packets.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click IP-MAC Binding Setup.The current list of bound IP addresses is shown.Page 54 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e4. Do one of the following:lEdit an existing binding rule - Right-click the address in the table and selectEdit.lAdd an IP-MAC binding rule - Click Add New IP-MAC Binding below thetable.5. In the Name field, enter a unique name.Note: The name is shown in drop-down lists and other areas of theConfiguration pages that reference bindings6. In the MAC Address field, enter the physical hardware address for the device associatedwith this binding rule.7. In the IP address field, enter the IP address for the device associated with this bindingrule.8. Set the Log Dropped Packets option to On to enable logging packets before they aredropped.9. Set the Associate with DHCP Reserved IP option to On to add the IP address to theReserved IP address list for the DHCP server.10. Click Save to save the changes or Cancel to clear any changes without saving.Data RoutingNote: Data routing applies to networks with more than two devices.Data can be defined how it is routed between the LAN and WAN in the network using:lstatic (fixed) routes.lthe Routing Information Protocol (RIP) which defines a dynamic route based on thenumber of hops to get to a network location.Defining Static Routing RulesA static route is a fixed path defined on a router that is added to the routing table. When there is achange in the network or a failure occurs between two network devices with static routing rules, datadoes not reroute through a different path.Note: Static routes are typically used in small networks or for lower bandwidth WANlinks.If the network is large, Static Routing is likely not optimal because each route andany redundant path information has to be added to each device in the networkLUM0063AA Rev 05/05/2014 Page 55 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesDefine a Static IPv4 Route1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click Routing > Static Route.4. Do one of the following:lEdit an existing Static Route - Right-click an existing Static Route and clickEdit.lAdd a new Static Route - Click Add New IPv4 Static Route below theAvailable IPv4 Static Route table.5. Enter a unique Name that defines the route's use.Note: The name entered here is shown in the Static Route table.6. Enter the Destination IP address of the destination device.7. Enter the Subnet Mask of the destination device.8. Select the physical network Interface this route is accessible through.9. Enter the IP address of the Gateway device that will route the data to the destinationdevice.Note: This could be a third-party router, a computer, or another WavePoint 10edevice.10. Use the Metric field to define the route's priority.If multiple routes to the same destination exist, the device uses the route with the lowestmetric.If this route is a direct connection, set to 1.99 is the maximum entry allowed.11. Change the Active field for the route to either On or Off.This selection indicates if the route is currently active (On) or inactive (Off).On activates this route.Off retains this routes as defined, but it is not active.12. Set the Private option to On to limit access to the LAN only.Note: Static routes set as Private are not forwarded to other routing tables in thenetwork if Routing Internet Protocol (RIP) is used.Page 56 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eFor more information about defining RIP settings, see Defining RoutingInternet Protocol Rules.13. ClickSave to save the changes and send them to the WavePoint 10e or click the Xin theupper right corner to clear any changes without saving.Delete an Existing Static Route1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Routing menu, click Static Route.The list of currently defined static routes is shown in the table4. Right-click the static route to remove and click Delete.To delete all the static routes, right-click anywhere in the table and clickSelect All > Delete.5. Click Save to save the changes or Cancel to clear any changes without saving.Defining Routing Internet Protocol RulesThe Routing Information Protocol (RIP) sends complete routing table information out to all activeinterfaces every 30 seconds and uses the hop count to determine the fastest way to reach a remotenetwork.RIP is typically used in larger networks because:lrouting table information is updated from a router automatically.lit does not require manual updates of routing information at each location in the networkwhen a device is added or replaced.The selected RIP version is dependent on the requirements for the specific network and whether therouting table information is sent as a broadcast or a multicast.Note: WavePoint 10e supports both RIPv1 and RIPv2.Define RIP in IPv4 Networks1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.LUM0063AA Rev 05/05/2014 Page 57 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking Features3. On the Network menu, click Routing > RIP.4. In the IPv4 RIP Configuration section, set the Enabled option to On.5. In the RIP Version field, select either RIPv1 or RIPv2.6. Select an Authentication method:lNone - No authentication is used when sending routing table information.lThis is the default setting for both RIP versions.lIt is the only option available if RIPv1 is selected. RIPv1 does not supportauthentication.lSimple - Includes a plain-text key in the transmitted packet.lThe receiving device uses the text key to authenticate the request.lIn the Authentication Key field, enter the plain-text key.lMD5 - Includes the key in an encoded checksum within the transmitted packet.lThe receiving device uses the key to verify the checksum.lIn the MD5 Key ID field, enter the unique MD5 key ID.lIn the MD5 Authentication Key field, enter the key. The encoding into thechecksum happens after you click Save.Important: Authentication requires all routers in a RIP network or subnet tohave the same Authentication Type and Key configured.If the keys do NOT match, the device rejects the packet.7. Click Save to save the changes or Cancel to clear any changes without saving.Virtual Local Area Networks (VLANs)Use WavePoint 10e to isolate areas of the larger network by allocating various traffic to VLANs. AWavePoint 10e VLAN has similar physical attributes as a LAN, and each VLAN is mapped to asubnet within the network so that associated traffic passes through a physical port to a VLAN.By default, VLANs are disabled in the WavePoint 10e. Follow these steps to configure VLANs inthe network:1. Enabling VLANs on page 592. Defining VLANs in the Network on page 593. Mapping VLANs to LAN Subnets on page 604. Associating Port Traffic to a VLAN on page 62Page 58 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eEnabling VLANsBy default, VLANs are disabled in the WavePoint 10e.VLANs must be enabled before configuring the VLANs through the WavePoint 10e.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click VLANs > Multi-VLANs Subnets.4. Set the Enable VLAN field to On.5. Click Save to save the changes or Cancel to clear any changes without saving.Defining VLANs in the NetworkWhen designing the network and its segmenting areas, define the potential VLANs using theVLANs > Available VLANs page.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click VLANs > Available VLANs.The list of currently defined VLANs is shown.4. Do one of the following:lEdit an existing VLAN - Right-click an existing VLAN and click Edit.lAdd a VLAN - Below the Available VLANs table, click Add New AvailableVLAN.5. In the Name field, enter a unique identifier used for management purposes.6. In the ID field, enter a numeric value associated with the VLAN.This value is used both for management and to update the Ethernet packet header formember device traffic forwarded through this VLAN.7. In the Inter-VLAN Routing Enabled field, select On to run traffic between other VLANsthat have this option set to On.LUM0063AA Rev 05/05/2014 Page 59 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesNote: After defining a VLAN configuration, only the Inter-VLAN Routing settingcan be changed.To change the Name or ID, delete the VLAN configuration and add a newone with the correct parameters.8. Click Save to save the changes or Cancel to clear any changes without saving.Delete an Available VLAN1. On the Network menu, click VLAN > Available VLANs.The list of defined VLANs is shown.2. Right-click the VLAN to remove and click Delete.To delete all VLANs other than the out of the box defaults, right-clickanywhere in the table and click Select All > Delete.Mapping VLANs to LAN SubnetslEach configured VLAN ID can map directly to a subnet within the LAN.lEach LAN port can be assigned a unique IP address.lA VLAN specific DHCP server can be configured to assign IP address leases to deviceson this VLAN.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click VLAN > Multi-VLAN Subnets.The available VLAN IDs are shown in the table.4. Right-click the VLAN ID to configure and click Edit.5. In the Multi-VLAN Subnet section, complete this subnet information:a. Enter the IP Address associated with the port assigned with this VLAN ID.b. Enter the Subnet Mask for the IP address.6. In the DHCP Setup section, select a VLAN-specific DHCP mode:lNone - The computers on the VLAN are configured with static IP addresses or areconfigured to use another DHCP server.Page 60 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elDHCP Server - The DHCP server is enabled for the VLAN. It assigns an IPaddress within the range specified in the Starting IP Address and Ending IPAddress fields to any network device that requests a DHCP address through theVLAN.lContinue with Step 7.lDHCP Relay - If enabled, devices in the VLAN that request a DHCP address canalso receive IP address leases and corresponding information from a DHCP serveron a different subnet.lIn the Relay Gateway field, enter the IP address of the remote DHCP server.lWhen VLAN devices make DHCP requests, the request is passed to theRelay Gateway IP address.lContinue with Step 7.7. If the DHCP Server was selected as the DHCP Setup mode in Step 6, set theseparameters to configure the VLAN-specific DHCP server:a. In the Starting IP Address field, enter the first inclusive IP addresses the servercan assign an address to.b. In the Ending IP Address field, enter the last inclusive IP addresses the servercan assign an address to.Important: These addresses must be in the same IP address subnetas the router’s VLAN IP address.c. If available, enter the Primary DNS Server and Secondary DNS Server IPaddresses of the domain name system (DNS) servers, if available on the VLAN.d. Optional: Enter the Domain Name of the DHCP server.e. Optional: Enter the WINS Server IP address or the Windows NetBIOS server if thenetwork has one.f. Enter the Lease Time, in hours, an IP address is assigned or leased, to a device inthe network.Set this time as accurately as possible to allow unused IP addressesto be available for other devices.8. ClickSave to save the changes and send them to the WavePoint 10e or click the Xin theupper right corner to clear any changes without saving.LUM0063AA Rev 05/05/2014 Page 61 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesAssociating Port Traffic to a VLANAssociate a physical port on the WavePoint 10e to a specific VLAN to tag the traffic that flows out ofa port to a specific VLAN ID.Note: The Enable VLAN option in the Network > VLAN > Multi-VLAN Subnetspage must be set to On to associate a port to a VLAN.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Network menu, click VLAN > Port Based VLANs.The current VLAN associations for both the LAN and WAN ports are shown.4. Right-click one of the physical ports or a WAN device and click Edit.5. In the Mode field, select a VLAN mode:lAccess - Isolates this port from other VLANs.lThis is the default setting.lAll data going into and out of the port is untagged.lTraffic through a port in Access mode appears like any other Ethernet frame.lGeneral - Allows the port to become a member of a user-selectable set of VLANs.lThe port sends and receives data that is tagged or untagged with a VLAN ID.lIf the data into the port is untagged, it is assigned the defined PVID.lAll tagged data sent out of the port with the same PVID is untagged.lTrunk - Multiplexes traffic for multiple VLANs over the same physical link.lAll data going into and out of the port is tagged.lUntagged data coming into the port is not forwarded, except for the defaultVLAN with a PVID of 1, which is untagged.6. If the Mode is set to General in the PVID field, enter the default VLAN ID assigned to theport or WAN device. This indicates the VLAN segment this port or WAN device isconnected to.7. If the Mode is set to General or Trunk, select the VLANs the traffic to or from this port canbe routed to.Page 62 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eThe available VLAN membership options are determined by the list of available VLANsthat have the Inter-VLAN Routing Enable option set to On.For more information, see Defining VLANs in the Network on page 59.8. ClickSave to save the changes and send them to the WavePoint 10e or click the Xin theupper right corner to clear any changes without saving.LUM0063AA Rev 05/05/2014 Page 63 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesWaveMeshUsing WavePoint™to create a WaveMesh provides:lA machine to machine (M2M) solution.lA self-healing environment.lMultiple paths for quicker response.lRedundancy support for the network.lFault tolerance.Important: Only the non-root devices can be changed.The WavePoint™configured in Client mode must be the endpoint of the networkfor M2M.WaveMesh MethodsThese are the methods for creating a WaveMesh:lWaveMesh using Auto Selection Method on page 66lWaveMesh using Branch Selection Method on page 69lWaveMesh using a List Selection Method on page 72Page 64 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eExample: WaveMesh Routing DiagramThis diagram provides a basic example of how the WaveMesh network functions.Important: The WaveMesh routing is a multi-route network.This diagram provides only two possible solutions.Example: WaveMesh Routing DiagramLUM0063AA Rev 05/05/2014 Page 65 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesWaveMesh using Auto Selection MethodThis procedure defines the WavePoint™WaveMesh using the default Auto Selection Method toallow the non-root device to locate the optimal route to the root device.1. On the Wireless LAN menu, click Parent Configuration.Wireless LAN > Parent Configuration menuThe Parent Selection Profile window opens.Parent Selection Profile window2. Right-click the device to configure.3. On the right-click menu, click Edit.Page 66 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eRight-click >Edit menuThe Parent Selection Profile Configuration dialog opens.Parent Selection Profile Configuration dialog4. Click the Selection Method list box arrow and select an option.In this procedure, accept the Auto default.lAuto - Accept this default to allow the non-root device to locate the optimal route tothe root device.Using Auto, the device can connect to any of the parents it sees in the network.lBranch - Select this option to define the number of hops the non-root device isrequired to use to locate the root device.This option forces the non-root device to use a specific path.LUM0063AA Rev 05/05/2014 Page 67 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesImportant: If the Branch is not configured correctly, it could cause anetwork failure if one device fails. Plan the paths carefully!lList – Select this option to use the MAC Addresses of the Repeaters to define apath to the root device.The MAC Addresses are listed in the preferred order.5. Click Save to accept the change and close the dialog.The Parent Selection Profile window returns showing the accepted Selection Methodassigned to the device.Parent Selection Profile window with a successful Auto WaveMeshPage 68 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eWaveMesh using Branch Selection MethodThis procedure establishes the WavePoint™WaveMesh using a defined number of hops the non-root device is required to use to locate the root device.1. On the Wireless LAN menu, click Parent Configuration.Wireless LAN > Parent Configuration menuThe Parent Selection Profile window opens.Parent Selection Profile window2. Right-click the device to configure.3. On the right-click menu, click Edit.LUM0063AA Rev 05/05/2014 Page 69 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesRight-click >Edit menuThe Parent Selection Profile Configuration dialog opens.4. Click the Selection Method list box arrow and select Branch.The Parent Selection Profile Configuration dialog refreshes.Parent Selection Profile Configuration dialog with Branch Selection Method5. In the Branch Length text box, enter the maximum number of hops the non-root device isrequired to use to locate the root device.The maximum is 10 hops.In this example procedure, change the Branch Length to 8Page 70 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e6. Click Save to accept the change and close the dialog.The Parent Selection Profile window returns showing the accepted Selection Methodassigned to the device.Parent Selection Profile window with a successful Branch WaveMeshLUM0063AA Rev 05/05/2014 Page 71 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesWaveMesh using a List Selection MethodThis procedure defines the WavePoint™WaveMesh using the MAC Addresses of the Repeatersto define a path to the root deviceNote: The MAC Addresses are listed in the preferred order.1. On the Administration menu, click Diagnostics > System Statistics.Administration > Diagnostics > System Statistics menuThe System Statistics window opens.2. Click the Interface Statistics Display button.Click the Interface Statistics Display button.The Interface Statistics dialog opens.Page 72 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eInterface Statistics dialog3. Scroll down the dialog to locate the vap10 (upstream) and vap11 (downstream)information.4. Highlight the VAP address to use in the WaveMesh.Note: The Interface Statistics dialog box shown here is only for theWavePoint™model WP10e-S100-100-100.Other WavePoint 10e devices will use different VAP number.Interface Statistics dialog box with highlighted VAP11 address.3. Press <Ctrl+C> to copy the address to the clipboard.This address is used in Step 10.4. On the Wireless LAN menu, click Parent Configuration.LUM0063AA Rev 05/05/2014 Page 73 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesWireless LAN > Parent Configuration menuThe Parent Selection Profile window opens.Parent Selection Profile window5. Right-click the device to configure.6. On the right-click menu, click Edit.Page 74 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eRight-click >Edit menuThe Parent Selection Profile Configuration dialog opens.7. Click the Selection Method list box arrow and select List.The Parent Selection Profile Configuration dialog refreshes with the MAC IDAddresses listed in the preferred order.8. Click the Preferred List list box arrow and select an option:lBest in List - Select this option to have the WavePoint™WaveMesh pick the bestparent MAC IDs out of the ones defined in that list.lThis picks the best route out of the list based on the Auto selection definedunder the Auto Schedule Method based on RSSI and hop count.Best in List is similar to the Auto Scheduled Method except that itallows exclusion of any parents the WavePoint™device is not to beconnected to.Using the Auto Scheduled Method, the device can connect to anyof the parents it sees in the network.lFollow List Priority - Select this option to have the WavePoint™WaveMeshroute through the connection list in chronological order (e.g., MAC ID 1 first, thenMAC ID 2, MAC ID 3, etc.)LUM0063AA Rev 05/05/2014 Page 75 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 3: Additional Data Networking FeaturesParent Selection Profile Configuration dialog with the Preferred List menu.9. In the designated MAC ID text box, highlight the default address.10. Press <Ctrl+V> to paste the copied VAP address (from Step 3) in the text box.Parent Selection Profile Configuration dialog with the changed MAC address.11. Click Save to accept the change and close the dialog.The Parent Selection Profile window returns showing the accepted Selection Methodassigned to the device.Page 76 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eParent Selection Profile window with a successful Best in List WaveMeshParent Selection Profile window with a successful Follow List Priority WaveMeshLUM0063AA Rev 05/05/2014 Page 77 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 78 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless AccessWavePoint 10e can provide connectivity between wired Ethernet networks and radio-equippedwireless devices using Orthogonal Frequency Division Multiplexing (OFDM).WavePoint 10e supports Point-to-Point (one-to-one communication link) wireless network types.WavePoint 10e will support the following additional functionality in the next release:lPoint-to-Multipoint - One-to-many communication link.Example: An Access Point communicating with multiple Clients andRepeaters.This chapter provides information about:lSetting up radios in network topographies.lSecuring the wireless network from potentially malicious attacks.lScheduling on and off times for an Access Point.Example: Point-to-Point ConfigurationPoint-to-Point networks are networks that pass information from Point A to Point B.In this example, data communication is directly between two points:LUM0063AARev 05/05/2014 Page 79 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless AccessConfiguring a Point-to-Point NetworkNote: Both components communicate using a 2.4 GHz radio.1. On the Wireless LAN > Radios > Basic page, set the AP to an Access Point.2. Configure the wireless security settings described in Configuring WirelessCommunication on page 82.3. On the Wireless LAN > Radios > Basic page, set the Client to Client mode.4. Configure the wireless security settings to match the AP described in ConfiguringWireless Communication on page 82.Point-to-Multipoint Configuration ExamplesMultipoint networks can be in any number of configurations. This section provides two examples toillustrate how to define the wireless settings on the WavePoint 10e Configuration pages.Example 1: Point-to-MultipointIn this example:lData from Host 1 routes through Repeater 1 back to the Access Point (AP).lData from Host 2 routes through Repeater 2 back to the AP.Example 1: Point-to-MultipointSetup ProcedureNote: All components communicate using a 2.4 GHz radio.Page 80 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e1. On the Wireless LAN > Radios > Basic page, set the Access Point.2. Configure the wireless security settings described in Configuring WirelessCommunication on page 82.3. On the Wireless LAN > Radios > Basic page, set Repeater 1 and Repeater 2 toRepeater mode.4. Configure the wireless security settings to match the AP described in ConfiguringWireless Communication on page 82.5. Set all components in the network to use the same Channel Width and Channel Size inthe Wireless LAN > Radios > Advanced page described in Defining Advanced RadioSettings on page 85.6. Verify the Max Distance parameter for each component is set to twice the distance (2xDistance) between it and the device to which it connects.Note: Additional advanced settings not described in this example may be required for thenetwork.Example 2: Point-to-MultipointIn this example:Note: Repeater 2 must be set to find Repeater 1 for this type of wireless network.lData from Host 1 routes directly to the AP.lData from Host 2 routes through Repeater 2 and Repeater 1 back to the AP.Example 2: Point-to-MultipointProcedureNote: All components communicate using a 2.4 GHz radio.LUM0063AA Rev 05/05/2014 Page 81 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Access1. On the Wireless LAN > Radios > Basic page, set the Access Point.2. Configure the wireless security settings described in Configuring WirelessCommunication on page 82.3. On the Wireless LAN > Radios > Basic page, set Repeater 1 and Repeater 2 toRepeater mode.4. Configure the wireless security settings to match the AP described in ConfiguringWireless Communication on page 82.5. On the Wireless LAN > Radios > Advanced page, set all components in the network touse the same Channel Width and Channel Size.This is described in Defining Advanced Radio Settings on page 85.6. Set the Max Distance parameter for each component to twice the distance (2x Distance)between it and the device it connects to.If the WaveMesh feature is activated, these optional selections can be made:a. On the Wireless LAN > Parent Configuration page, set Repeater 1 to select itsparent (the AP) using the Branch selection method and a branch length of 1(indicating a single hop).b. On the Wireless LAN > Parent Configuration page, set Repeater 2 to select itsparent (Repeater 1) using the Branch selection method and a branch length of 2(indicating 2 hops).Configuring Wireless CommunicationEach WavePoint 10e is configured with at least one radio for wireless communication. Using thebasic wireless settings, a WavePoint 10e can be configured as:la wireless Access Point (AP) in the network that other wireless devices communicate withthat have the same 802.11 adapter settings and are within range.la Repeater to extend the range of the network or as a Client at the ending point within thenetwork topology.The basic instructions apply to all radio configurations, regardless of network topography.Note: Verify the SSID, security method and security keys, channel, channel width, and802.11 mode are set the same on all devices in a wireless network to establish alink.By default, all WavePoint 10e devices are shipped with the same SSID andSecurity Key and will connect automatically.Page 82 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eFreeWave Recommends: For security, and to avoid duplication of neighboring network names, itis highly recommended that either the SSID or the Security Key be changed to a unique ID.For information about defining and enabling virtual APs, see Enabling Virtual Access Points on page89.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Radios > Basic.The Basic Radio table lists the available radios.4. Right-click the radio in the table to configure and click Edit.Radios are labeled 1, 2, 3, and 4.The label on the back panel of each WavePoint 10e identifies what type of radio isinstalled and which number corresponds to each installed radio.5. In the Mode field, select the device's role in the network:lAccess Point - Indicates this WavePoint 10e is the device in the wirelessnetwork.lMany network settings are provided to Repeaters and Clients from the AP.lRepeater -Repeaters communicate with the AP, another Repeater, or a Client.lThey are used to extend the physical distance of the network and allow wirelessclients to connect to wireless resources.lClient - Clients communicate with Repeaters or the AP in the network.lClients are the ending points in the network topography.6. Enter this information that identifies the AP in the wireless network:a. In the SSID field, enter a case sensitive, alphanumeric name that identifies thisdevice in a wireless access list.Note: All devices that attempt to connect to this wireless network must havethe same SSID.b. Optional: Enter the BSSID device's physical MAC address.LUM0063AA Rev 05/05/2014 Page 83 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Accessc. By default, the device is set to broadcast the wireless network name.Broadcasting the name allows other wireless devices to see the deviceautomatically.Set the Hide SSID option to Off to disable the broadcast.Note: Other wireless devices can still connect; however, they do notautomatically see this device in their access lists.7. In the Security field, select a security method for the wireless network:lOpen - This method requires no authentication to connect to the wireless deviceand provides no data encryption.Note: This is the least secure option and is NOT recommended.lWPA - This method uses the Temporal Key Integrity Protocol (TKIP) to connect tothe wireless device.lThis security method generates a new 128-bit key for each packet the devicetransmits.lEnter the security password in the Security Key field.Note: All other devices that access this device must use the key enteredhere.lWPA2 - This method uses CCMP, a strong AES encryption method, for securingdata over the network providing stronger security than WPA.lEnter the security password in the Security Key field.Note: All other devices that access this device must use the key enteredhere.lWPA2-Enterprise - This method is a type of WPA2 security, WPA2-Enterpriseuses an external RADIUS server to authenticate users.Note: For more information about defining RADIUS settings, see Defining EAPAuthentication and External RADIUS Servers on page 95.8. Optional: Set the AP Isolation field to Off to allow devices that connect to thisWavePoint 10e to connect with one another.This setting applies only if the device is configured as the Access Point in the Mode field.The default setting is On, devices can connect to this access point, but cannot connectdirectly to other connected devices.Page 84 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e9. Optional: In the Follow Schedules field, select a schedule from the list if schedules weredefined.10. Click Save to save the changes or Cancel to clear any changes without saving.11. On the Wireless LAN menu, click Radios > Advanced.The Advanced Radio table lists the radios available in the device.12. Right-click the radio to configure and click Edit.13. Complete these fields described in Defining Advanced Radio Settings on page 85:a. Mode (Modulation Scheme)b. Channelc. Channel Widthd. DistanceThere are additional fields available in the Advanced Radio settings thatare not required for basic setup but that may be helpful.14. Click Save to save the changes or Cancel to clear any changes without saving.Defining Advanced Radio SettingsWhen initially setting up a WavePoint 10e for wireless communication, review the settings in theWireless LAN > Radios > Advanced page to ensure the parameters are set to meet the needs ofthe network. The Channel and Channel Width fields should match across radios thatcommunicate in the network.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Radios > Advanced.4. Right-click the radio in the table to change and click Edit.Radios are labeled 1, 2, 3, and 4.The label on the back panel of each WavePoint 10e identifies what type of radio isinstalled and which number corresponds to each installed radio.LUM0063AA Rev 05/05/2014 Page 85 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Access5. In the Mode field, select the 802.11 Modulation Scheme to transmit packets from thisradio.6. Complete these radio settings using the fields provided:7. Select the frequency Channel the radio is set to broadcast and receive data on.Select Auto to let the system determine the best channel within thefrequency band to use based on the environmental noise levels for theavailable channels.8. Select the Channel Width (spacing) setting for the radio.The Channel Width is specific to 802.11n traffic.9. In the Tx Antennas field, select the number of transmit antennas to use.Note: If the WavePoint 10e in use does not support MIMO, set this field to 1toindicate a single transmit antenna.10. In the Rx Antennas field, select the number of transmit antennas to use.Note: If the WavePoint 10e in use does not support MIMO, set this field to 1toindicate a single transmit antenna.11. In the Rate field, select the rate that governs the transmission speed the radio uses after awireless link is negotiated.Note: The mode or modulation scheme and the number of transmit antennas inuse determine the available settings.Setting the rate to Auto allows the WavePoint 10e to determine the optimalrate to use based on environment conditions.NotesWith WavePoint 10e:l2.4 GHz & 5 GHz, when running 802.11n, can use a maximum of three antennas.l900 MHz can use only one antenna with a second antenna configured for Diversity.lIf the Tx Antenna field is set to 1or only a single antenna is detected, the 802.11nMCS index values in the drop-down menu range from 0 to 7.lIf the Tx Antenna field is set to 2, the 802.11n MCS index values in the drop-downmenu range from 0 to 15.Page 86 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elIf the Tx Antenna field is set to 3, the 802.11n MCS index values in the drop-downmenu range from 0 to 23.12. Select the maximum Parent Rate to use when connecting to the upstream device(Repeater or Access Point).This parameter is applicable to the WavePoint 10e set as either a Repeater or Client.Note: The available Parent Rate parameters are the same as in those availablein the Rate field.13. Select the radio's Transmit Power in dBm, based on the radio's intrinsic power range.When testing at a facility and devices are close in proximity to one another,set the Transmit Power parameter to a low number.When deploying the WavePoint 10e to the field, raise the Transmit Powernumber accordingly.14. Set the N only Mode option to On if legacy (802.11b or 802.11g) clients are NOT toconnect to this radio.Selecting On ensures that the radio's bandwidth is only available for clients connecting at802.11n rates.15. Set the Enable AMSDU option to Off to optimize throughput for small sized data packets.The 802.11n protocol uses this option to aggregate small size TCP packets.Note: Small frames with the same physical source and destinations are combinedto a larger frame to improve overall throughput by cutting down transmissionoverhead.16. Use the Power Constraint field to limit the maximum power that an Access Point orRepeater uses to communicate upstream.The setting in this field does not change the transmit power for downstreamcommunications.Example: Using this topography:The Transmit Power in the Access Point and Repeater is set to 31 dBm and isused for transmissions from the Access Point to the Repeater and from theRepeater to the Client (endpoint).The Repeater has a power constraint setting of 10 dBm, so transmissionLUM0063AA Rev 05/05/2014 Page 87 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Accessupstream from the Repeater to the Access Point are reduced to 10 dBm.This parameter is applicable only for radios set Access Point and Repeatermode.17. Enter the DTIM Interval that determines how often the Access Point sends notification ofthe buffered data.Note: A delivery traffic indication message (DTIM) is a map that informsRepeaters and Clients about the presence of buffered multicast/broadcastdata on the Access Point waiting to be sent.18. In the RTS Threshold field, enter the packet size in bytes that requires the WavePoint10e to check the transmitting frames to determine if a Request to Send (RTS)/Clear toSend (CTS) handshake is required with the receiving Client.The default value is 2346, which effectively disables RTS.Using a small value causes the device to send RTS packets more often,consuming more of the available bandwidth; therefore, reducing theapparent throughput of the network packets.19. In the Max Range field, enter, in kilometers, the distance between this WavePoint 10eand the farthest away device it is linking to.The maximum is 2 times the distance (2x Distance).20. Select the Country the WavePoint 10e is installed in.21. Click Save to save the changes or Cancel to clear any changes without saving.Verify the Wireless ConnectionWhile the WavePoint 10e is easily accessible, verify that the wireless connectionis active.Important: This procedure is only applicable to 2.4 GHz WavePoint™devices.1. Log out of the Configuration web pages.2. Close the web browser.3. Disconnect the Ethernet cable from the computer.4. Using a computer with wireless capability, establish a wireless connection using the SSIDand Security Key defined in the Basic Radio Settings page.Page 88 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e5. After the connection is established, open a web browser and enter the IP address in thebrowser navigation bar.The IP address was entered in the LAN Setup page.The Login page is shown when a successful wireless connection has been made.If there is no connection, see the Internet Connection and Browser Display on page 147Enabling Virtual Access PointsA Virtual Access Point (VAP) is similar to a VLAN, but in a wireless environment. VAPs are a way tosegment a wireless network so a single AP presents itself in the network as multiple APs.Connecting wireless Repeaters or Clients see a VAP as a unique and independent AP while it isactually a single, physical AP in the network.Using VAPs offer these advantages:lDiffering levels of security across the VAPs.lIsolate portions of the wireless network.A single WavePoint 10e can be used for multiple purposes, providing cost savingsand simplicity in designing the network.Each radio in the WavePoint 10e can have a maximum of three VAPs enabled. Each VAP enabledon a single radio uses the settings set for the radio in the Wireless LAN > Radios > Basic andWireless LAN > Radios > Advanced pages.Note: Enabling VAPs can impact the overall throughput available for a radio.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Virtual APs.The table lists the available VAPs for each radio and their status.4. Right-click a VAP in the list and click Enable.LUM0063AA Rev 05/05/2014 Page 89 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless AccessChange a Virtual Access Point's Settings1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Virtual APs.The table lists the available VAPs for each radio and their status.4. Right-click a VAP in the list and click Edit.5. Enter a unique AP Name to identify the VAP.Note: This name identifies the VAP on the Configuration pages, but is notbroadcast.6. In the SSID field, enter a case sensitive, alphanumeric name that identifies this VAP in awireless access list.A maximum of 32 characters are allowed.Note: All devices that attempt to connect to this VAP must have the same SSID.7. In the Security field, select a security method for the wireless network:lOpen - This method requires no authentication to connect to the wireless deviceand provides no data encryption.Note: This is the least secure option and is NOT recommended.lWPA - This method uses the Temporal Key Integrity Protocol (TKIP) to connect tothe wireless device.lThis security method generates a new 128-bit key for each packet the devicetransmits.lEnter the security password in the Security Key field.Important: All other devices that access this device must use the keyentered in the WPA field.lWPA2 - This method uses CCMP, a strong AES encryption method, for securingdata over the network providing stronger security than WPA.lEnter the security password in the Security Key field.Important: All other devices that access this device must use the keyentered in the WPA2 field.Page 90 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elWPA2-Enterprise - This method is a type of WPA2 security, WPA2-Enterpriseuses an external RADIUS server to authenticate users.Note: For more information about defining RADIUS settings, see Defining EAPAuthentication and External RADIUS Servers on page 95.8. Optional: Set the AP Isolation field to Off to allow devices that connect to this VAP to beable to connect with one another.The default setting is On, which means that devices can connect to this VAP, but cannotconnect directly to other connected devices.9. Click Save to save the changes or Cancel to clear any changes without saving.Wireless SecurityEnabling security filtering and user authentication are essential to secure the wireless data.WavePoint 10e supports a variety of consumer and enterprise security, encryption, andauthentication options.Authorizing Wireless AccessTo increase the security of the wireless LAN, define a list of devices that have access based on theirMAC addresses. Filtering MAC addresses restricts which devices can access the network;however, it does not secure the data broadcast over the wireless link.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Authorized AP List.The table shows MAC addresses already authorized for access.4. Do one of the following:lAdd - Click Add New Authorized AP below the Available Authorized AP table.lDelete - Right-click an existing Authorized AP and click Delete.lDelete All - Right-click anywhere in the table and click Select All > Delete.4. In the SSID field, enter the network name of the device to authorize.5. In the MAC Address field, enter the hardware address of the device to authorize.LUM0063AA Rev 05/05/2014 Page 91 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Access6. In the Security field, select a security method for the wireless network:lOpen - This method requires no authentication to connect to the wireless deviceand provides no data encryption.Note: This is the least secure option and is NOT recommended.lWPA - This method uses the Temporal Key Integrity Protocol (TKIP) to connect tothe wireless device.lThis security method generates a new 128-bit key for each packet the devicetransmits.lEnter the security password in the Security Key field.Important: All other devices that access this device must use the keyentered in the WPA field.lWPA2 - This method uses CCMP, a strong AES encryption method, for securingdata over the network providing stronger security than WPA.lEnter the security password in the Security Key field.Important: All other devices that access this device must use the keyentered in the WPA2 field.lWPA2-Enterprise - This method is a type of WPA2 security, WPA2-Enterpriseuses an external RADIUS server to authenticate users.Note: For more information about defining RADIUS settings, see DefiningEAP Authentication and External RADIUS Servers on page 95.lEncryption - This method is available when either WPA or WPA2 is selected inthe Security field.Select either the AES or TKIP method the device uses to access the network.Note: The selected security method should match the security method defined inthe Wireless LAN > Radios > Basic menu.7. ClickSave to save the changes and send them to the WavePoint 10e or click the Xin theupper right corner to clear any changes without saving.Restricting Access by MAC AddressTo increase the security of the wireless network, restrict access to the network to only specificdevices based on their hardware address, or MAC address. Creating an Access Control ListPage 92 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e(ACL) of MAC addresses allows access to the network and adds security against devices that havenot been granted access to the network.Important: The ACL does NOT secure the data that travels across the network..Important: If configuring the WavePoint 10e through a wireless connection whoseMAC address is NOT in the ACL, the connection is lost when the changes aresaved.This does include the laptop used to configure the WavePoint™device.Use a wired connection or access from a computer whose address is in the ACL toaccess the Configuration pages to make additional updates.Set the ACL Policy Type1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click ACL.4. Select a Policy Status:lOpen - Allows any wireless device with any MAC address to connect to thewireless network through the WavePoint 10e.This is the default.lAllow - Only permits MAC addresses in the List of MAC Addresses to connect tothe wireless network.lDeny - Prevents any devices with a MAC addresses in the List of MAC Addressesto connect to the wireless network.5. Click Save to save the changes or Cancel to clear any changes without saving.Add or Edit MAC Addresses in the ACL List1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click ACL.4. Click Add New MAC Address under the List of MAC Addresses table.LUM0063AA Rev 05/05/2014 Page 93 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Access5. In the MAC Address field, enter the MAC address of the device to grant network accessto.Note: MAC addresses are typically printed on a device's physical label.6. Click Save to save the changes or Cancel to clear any changes without saving.Delete a Device from the ListlRight-click an address in the table and click Delete.lRight-click anywhere in the table and click Select All > Delete.Enabling Rogue Access Point DetectionA rogue access point is any device that accesses the network without authorization. Rogue accesspoints often do not meet the wireless LAN security policies and can allow anyone with a wireless-enabled device to connect to the network.Enabling rogue detection identifies unauthorized wireless devices and prevents them fromaccessing the wireless network. WavePoint 10e collects a list of unauthorized devices thatattempted to access the network for review.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Rogue AP List.4. In the Radio field, select the radio to enable rogue detection on.Radios are labeled 1, 2, 3, and 4.The label on the back panel of each WavePoint 10e identifies what type of radio isinstalled and which number corresponds to each installed radio.5. Set the Enable Rogue AP Detection option to On to enable rogue detection for theselected radio.6. Click Save to save the changes or Cancel to clear any changes without saving.Review Devices that Attempted to Access the Network1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.Page 94 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Rogue AP List.The Rogue AP List at the bottom of the page identifies the:lSSID and MAC address of the unauthorized devices that attempted to access thewireless network.lSecurity mode set on the rogue device.lTime that has passed since the access attempt.Defining EAP Authentication and External RADIUS ServersIn wireless communications using the Extensible Authentication Protocol (EAP), users requestconnection to the wireless network through a WavePoint 10e. The WavePoint 10e then requeststhe user's identity and sends that identity to the RADIUS authentication server.If WPA-Enterprise is selected as the wireless security option in the Wireless LAN > Radios >Basic menu, a RADIUS server must be defined to authenticate and authorize users and devices toaccess the wireless network.Note: A RADIUS server is an external server that provides authentication for devicesand users trying to access the wireless network.Configure the EAP Authentication1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click RADIUS Settings.4. In the EAP Authentication Configuration section, complete these fields:a. Select the Outer EAP Method authentication used to establish a tunnel the UserName and Password are exchanged over.b. Enter the unique User Name for the user.c. Enter the unencrypted Anonymous ID that a Client must match to start anauthentication request.Note: Both EAP-TTLS and EAP-PEAP support anonymous identification,or identification hiding.An access point typically generates an EAP-Identity request used toLUM0063AA Rev 05/05/2014 Page 95 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless Accessestablish authentication and a connection.A Client may respond with only enough information so the RADIUSserver can process the request.d. Enter the unique Password a requester must send in an authentication request.Note: The password can contain alphanumeric characters, underscores(_), and dashes (-).e. Select the Inner Authentication method to establish a second layer of authorizinga client after the initial tunnel is established.f. Enter the EAP Server Name or IP address of the configured security server.5. Click Save to save the changes or Cancel to clear any changes without saving.Define an External RADIUS Server1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click RADIUS Settings.The current list of RADIUS servers are in the Radius Server section.4. Right-click the server name in the table and click Edit.5. Enter the Server IP address on the network where the authentication server is located.6. Enter the Port number the external server uses.7. Enter the Secret shared key the Access Point and the RADIUS server exchange duringan authentication attempt.8. Enter the Timeout, in seconds, authentication attempt is timed out after no response fromthe server.9. In the Retries field, enter the number of times authentication with this server is attemptedon event of server timeout.After this number of retry attempts fail, the authentication attempt is considered to havefailed.10. Click Save to save the changes or Cancel to clear any changes without saving.Page 96 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eScheduling When Wireless Connections are AvailableThe WavePoint 10e deployment may not require a wireless network connection to be available 24hours a day.If the wireless access is only required during certain portions of the day, define the hours in the daythe wireless network is available for use.This also helps to conserve power.Note: The defined schedules apply to every day of the week.Schedules for individual days cannot be defined.Define and Enable a Schedule for a Wireless Connection1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Wireless LAN Schedules.The SSIDs, including Virtual APs, are shown in the table.4. Right-click the SSID to define a schedule for and click Edit.5. Set the Active option to On.6. Use the HH,MM, and AM/PM dials to set the range of time the SSID is available.7. Place the mouse cursor over a single dial and use the mouse roller to move the correctnumber across the black line in the dial.Example: Select 7:00 AM in the Start Time field and 7:00 PM in the End Timefield, the wireless network is only accessible from 7:00 AM to 7:00 PM each day.8. Click Save to save the changes or Cancel to clear any changes without saving.The schedule is updated in the table as Enabled.LUM0063AA Rev 05/05/2014 Page 97 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 4: Configuring Wireless AccessDisable a Schedule1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Wireless LAN menu, click Wireless LAN Schedules.The SSIDs, including Virtual APs, are shown in the table as Enabled.4. In the schedule, right-click the SSID to disable.5. Set the Active option to Off.6. Click Save to save the changes or Cancel to clear any changes without saving.Page 98 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: SecurityThis chapter discusses these options for securing the traffic in the network:lFirewall setup including policies, rules, and scheduling.lRADIUS server setup.Firewall OverviewInbound rules govern access from the WAN to the LAN. Using firewall rules allows only specifiedlocal resources to be accessed from the Internet.By default, all access from the Internet is blocked from accessing the secure LAN, except inresponse to requests from the LAN. Outbound (LAN to WAN) rules restrict access to traffic leavingthe network, selectively allowing only specific local users to access outside resources.Firewall Basic PoliciesDefault Outbound PolicyThis configuration determines whether LAN users can access the Internet in the absence of specificallowed outbound rules.Use Allow Always as the default outbound policy to permit any outbound traffic topass through the firewall and reach the WAN.LUM0063AARev 05/05/2014 Page 99 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: SecuritySet the Outbound Traffic Policy1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > Basic Policies.The Basic Policies screen opens.4. Select an option:lAllow Always permits any outbound traffic to pass through the firewall and reachthe WAN.lBlock Always closely manages the outbound traffic.lThe Network Administrator must configure firewall and application rules topermit outbound traffic from LAN addresses5. Click Save to save the changes or Cancel to clear any changes without saving.Note: Verify the IPv6 features are enabled in the Network > IPv6 menu to set theoutbound policy for IPv6 networks.Firewall RulesCreating Firewall Rules for IPv41. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > IPv4 Firewall Rules.The IPv4 firewall rules are listed in the table.4. Do one of the following:lEdit an existing IPv4 Firewall Rule - Right-click an existing Firewall Rule andselect Edit.lAdd a new IPv4 Firewall Rule - Click IPv4 Add Firewall Rule below theAvailable IPv4 Firewall Rules table5. In the From Zone, enter the source of the traffic this firewall rule controls.lSecure (LAN) - Select this option if the traffic is coming from a secure location(from the LAN).Page 100 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elInsecure (WAN) - Select this option if the traffic is coming from a non-securelocation (from the WAN).6. In the To Zone, enter the destination of the traffic this firewall rule controls.Note: Traffic can only be sent to a secure location.7. Select a Service option from the drop down list or add an additional service on Firewall >Custom Services.The name usually indicates the type of traffic the rule covers (e.g., FTP, SSH, telnet, ping,etc.).8. Select an Action to be taken on the enabled rule:lAlways Block - Blocks the selected service all the time.lAlways Allow - Allows the selected service all the time.lBlock by schedule , otherwise Allow - Allow block access in conjunction with adefined schedule in the Schedule Configuration page.lAllow by schedule, otherwise block - Allow access in conjunction with a definedschedule in the Schedule Configuration page.9. Select a Source Hosts that originates the traffic for this firewall rule:lAny - The rule applies to all traffic from all hosts.lSingle - The rule applies to traffic from a single host.Enter the IP address of the host in the From field.lRange - The rule applies to traffic from a group of computers/devices within an IPaddress range.Enter the first IP address in the From field and enter the final IP address in the Tofield.10. Select a Destination Hosts that receives the traffic for this firewall rule:lAny - The rule applies to traffic destined to all hosts.lSingle - The rule applies to traffic destined for a single host.Enter the IP address of the host in the From field.lRange - The rule applies to traffic destined for a group of computers/devices withinan IP address range.Enter the first IP address in the From field and enter the final IP address in the Tofield.11. In the Log field, select the Never option button to disable logging.12. In the QoS Priority field, select one Type of Service option.This is the priority of the IP packets assigned for this service.LUM0063AA Rev 05/05/2014 Page 101 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: SecurityNote: The priorities are defined by Type of Service (TOS) in the Internet ProtocolSuite standards, RFC 1349.Service Type ToS DescriptionNormal Service 0 (zero) No special priority is given to the traffic.Minimize Cost 2 Transfer of data over a link that has a lower cost.Maximize Reliability 4 Transfer of data over a more reliable link with little or notransmission.Maximize Throughput 8Enables the importance of a high volume of data to betransferred during an interval even if the latency over thelink is high.Minimize Delay 16 Enables low latency for the packet to reach thedestination.13. In the Select Schedule field, select the applicable schedule.This field is visible when a selection is made in the Action field.14. In the Internal IP Address field, enter an IP address of the computer on the LAN hostingthe server.This field is visible in the Destination NAT Settings section when the source of thetraffic this firewall rule controls is set to INSECURE (WAN) in the From Zone field.15. Set the Enable Port Forwarding field to On to forward to the port specified in theTranslate Port Number field.This field is visible in the Destination NAT Settings section when the source of the trafficthis firewall rule controls is set to INSECURE (WAN) in the From Zone field.16. In the Translate Port Number field, enter the port number to use for port forwarding.This field is visible in the Destination NAT Settings section when the source of the trafficthis firewall rule controls is set to INSECURE (WAN) in the From Zone field.Example: If a computer on the local network side is running a telnet server onport 2000, then set the Enable Port Forwarding option to On and enter 2000 inthe Translate Port Number field.If the server is listening on the default port 23, then it could be disabled.17. In the External IP Address field, select the internet destination IP address used for thisfirewall rule: WAN1, WAN2, or Other.This field is visible in the Destination NAT Settings section when the source of the trafficthis firewall rule controls is set to INSECURE (WAN) in the From Zone field.Page 102 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eNote: If Other is selected, enter the IP address in the Other IP address field.18. Click Save to save the changes or Cancel to clear any changes without saving.Delete an IPv4 Firewall Rule1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > IPv4 Firewall Rules.The defined IPv4 firewall rules are listed in the table.4. Right click the IPv4 firewall rule to remove and click Delete.Note: Right-click anywhere in the table and click Select All > Delete to delete allthe IPv4 firewall rules.5. Click Save to save the changes or Cancel to clear any changes without saving.Disable an IPv4 Firewall Rule1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > IPv4 Firewall Rules.The defined IPv4 firewall rules are listed in the table.4. Right-click the IPv4 firewall rule to turn off and click Disable.Note: Right-click anywhere in the table and click Select All > Disable to disableall the IPv4 firewall rules5. Click Save to save the changes or Cancel to clear any changes without saving.Custom ServicesWhile common services use known TCP/UDP/TCP and UDP/ICMP/ICMPv6 ports, many custom oruncommon applications require traffic to be sent through the firewall. The parameters in this sectionallow the traffic type and static ports to be defined for a unique identifier and then create firewall rulesfor the user-defined service.LUM0063AA Rev 05/05/2014 Page 103 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: SecurityConfigure Custom Service Settings1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > Custom Services.The list of defined custom services is shown.4. Do one of the following:lEdit an existing Custom Service - Right-click an existing Custom Service andclick Edit.lAdd a new Custom Service - Click Add New Custom Service below theAvailable Custom Services table.5. Enter the Name of the service for identification and management purposes.6. Select a Type option the layer 3 (network layer) protocol that the service uses.7. In the ICMP Type field, enter the numeric value ranging between 0 and 40 for ICMP orranging between 1 and 255 for ICMPv6.This field is visible when the layer 3 protocol (in the Type field) is selected as ICMP orICMPv6.8. In the Port Type field, select whether the service covers a range of ports or multiple portsnot in a range.9. In the Start Port field, enter the first TCP, UDP, or TCP and UDP port in a range or portsthat the service uses.If the service uses only one port, enter the same port in the End Port and Start Portfields.10. In the End Port field, enter the last port in the range of ports that the service uses.If the service uses only one port, enter the same port in the End Port and Start Portfields.11. Enter the Ports this service supports separated by commas (,).This field is visible when the Multiple Ports option button is selected.12. Click Save to save the changes or Cancel to clear any changes without saving.Delete an Existing Custom Service1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.Page 104 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e3. On the Security menu, click Firewall > Custom Services.The defined custom services are listed in the table.4. Right click the custom service to remove and click Delete.Note: Right-click anywhere in the table and click Select All > Delete to delete allthe custom services.5. Click Save to save the changes or Cancel to clear any changes without saving.VPN PassthroughConfigure the device's firewall settings to allow outbound encrypted VPN traffic for IPsec, PPTP,and L2TP VPN tunnel connections. Enable the LAN-to-WAN pass through support on this page ascompared to creating a service-specific firewall outbound policy.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > VPN Passthrough.The VPN Passthrough Setup page opens.4. Set the IP Sec field to On to enable IPsec tunnels to pass through.5. Set the PPTP to On to enable PPTP tunnels to pass through.6. Set the L2TP to On to enable L2TP tunnels to pass through.7. Click Save to save the changes or Cancel to clear any changes without saving.Firewall SchedulesSchedules allow firewall rules to be enabled or disabled based on the time of day or day of the week.Defined schedules are available to select in the Firewall Rule Configuration page.Note: All schedules follow the time in the device's defined time zone.Configuring Firewall Schedules1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > Firewall Schedules.The defined Firewall Schedules are listed in the table.LUM0063AA Rev 05/05/2014 Page 105 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: Security4. Do one of the following:lEdit an existing Firewall Schedule - Right-click an existing Firewall Scheduleand click Edit.lAdd a new Firewall Schedule - Click Add New Schedule below the AvailableFirewall Schedules table.5. Enter a Name to identify the schedule.The name is shown on the Firewall Rules Configuration page.6. Set one or more of the Days to On to apply the schedule to the selected days.7. In the Time of Day field, select the Specific Times radio button to specify during whattime period the schedule will apply.8. Use the HH,MM, and AM/PM dials to set the schedule Start Time.This field is visible when the Specific Times radio button is selected.Note: Place the cursor over a single dial and use the mouse roller to move thecorrect number across the black line in the dial.The selected time populates in the Start Time field.9. Use the HH,MM, and AM/PM dials to set the schedule End Time.This field is visible when the Specific Times radio button is selected.Note: Place the cursor over a single dial and use the mouse roller to move thecorrect number across the black line in the dial.The selected time populates in the End Time field.10. Click Save to save the changes or Cancel to clear any changes without saving.Delete a Firewall Schedule1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > Firewall Schedules.The defined Firewall Schedules are listed in the table.4. Right-click the firewall schedule to remove and click Delete.Note: Right-click anywhere in the table and click Select All > Delete to delete allthe firewall schedules.5. Click Save to save the changes or Cancel to clear any changes without saving.Page 106 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eApplication RulesApplication rules are commonly referred to as port triggering rules. Port triggering allows computerson the LAN to request one or more ports to be forwarded to them.Port triggering waits for an outbound request from the private network on one of the definedoutgoing ports. It automatically sets up forwarding to the IP address the request was made from.When the application stops transmitting data over the port, the device waits for a timeout interval andthen closes the port or range of ports, making them available to other computers on the LAN.Example: If an IRC client on the private network makes a connection request throughport 6667 and sends its Username information to the IRC server.The IRC server sends an IDENT verification packet on port 113 to check the authenticityof the IRC client.In NAT mode, the device discards this packet since it does not know which computer tosend the request on port 113 to.A port triggering rule can define port 6667 (or the range: 6660 to 7000) as the outgoing(trigger) ports and port 113 as the incoming (response) port.Configuring Application Rules1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > Application Rules.The Application Rules table is shown.4. Do one of the following:lEdit an existing Application Rule - Right-click an existing Application Ruleand click Edit.lAdd a new Application Rule - Click Add New Application Rule below theAvailable Application Rules table.5. Enter a unique Name to identify the Application Rule.6. Set the Enable option to On to activate the application rule.7. Use the Protocol field to select whether the port uses the TCP or UDP.8. Select the Interface name on which the port triggering rule is configured.9. In the Outgoing (Trigger) Port Range Start and To fields, enter the port number orrange of port numbers that trigger this rule when a connection request from outgoingtraffic is made.LUM0063AA Rev 05/05/2014 Page 107 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: SecuritylThis is the port number or port number range the remote system uses to respond tothe request it receives.lIf the outgoing connection uses only one port, then:lboth the Start Port and End Port fields are the same port number.lspecify the same port number in both fields.10. In the Incoming (Response) Port Range Start and To fields, enter the port number orrange of port numbers that trigger this rule when a connection request from incomingtraffic is made.lThis is the port number or port number range the remote system uses to respond tothe request it receives.lIf the incoming connection uses only one port, then:lboth the Start Port and End Port fields are the same port number.lspecify the same port number in both fields.11. Click Save to save the changes or Cancel to clear any changes without saving.Delete an Application Rule1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click Firewall > Application Rules.The defined application rules are listed in the table4. Right-click the application rules to remove and click Delete.Note: Right-click anywhere in the table and click Select All > Delete to delete allthe application rules.5. Click Save to save the changes or Cancel to clear any changes without saving.Application Rules StatusThe Application Rules Status page provides information about the traffic related to the currentlydefined application rules. This information is available:lIP Address: The internal network IP address that triggered the application rule to beactive, and resulted in response ports being opened.lOpen Ports: The incoming response ports that have been opened through this firewallbased on the internal devices request.Page 108 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elTime Remaining (sec): The remaining time in seconds the open ports allows externaltraffic. This time is reset whenever traffic is sent from the LAN out on the trigger ports.VPN Tunnels and IPsecVPNs allow the exchange of data across the Internet through a tunnel including the security andpolicies defined in a private network. Using IP Security (IPsec), a dedicated connection withencryption is enabled across the Internet to the network between:lTwo GatewayslFrom a Client to a GatewayConfiguring a VPN Tunnel with IPsecUse the IPsec Configuration page to define a VPN tunnel for a Gateway connection or for remoteusers who access the network with VPN client software.The IPsec Configuration page simplifies creation of VPN tunnels by setting the VPNC (VPNConsortium) recommended defaults. The VPN (IKE phase 1 and phase 2) parameters chosen bythe IPsec Configuration are based on the VPN Consortium's (VPNC) recommendations.Note: More information about the VPNC recommendations can be found atwww.vpnc.org/vpn-standards.Configuring a Basic VPN Tunnel1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click VPN > IPsec Configuration.4. Enter a Name for the connection for management purposes.5. In the Select VPN Type field, select a tunnel type:lSite-to-Site - Create a Gateway tunnel to another VPN Gateway.lRemote Access - Create a tunnel to the WavePoint 10e for remote access.6. Enter the Pre-Shared Key, between 8 and 49 characters, that is shared between devicesfor authentication.Important: This key must be entered exactly the same here and on theremote VPN Gateway or Client.LUM0063AA Rev 05/05/2014 Page 109 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: Security7. Select a Remote Gateway Type to identify the remote Gateway by IP address or FQDN(Fully Qualified Domain Name).8. In the Remote WAN IP Address / FQDN field, enter the IP address or the Internet nameof the Gateway selected in the Remote Gateway Type field.Note: The Internet name is defined as the FQDN, such as vpn.FreeWave.com.9. Use the Local Gateway Type field to select how to identify the local Gateway.10. In the Local WAN IP Address / FQDN field, enter the IP address or the Internet name ofthe WAN interface of the Gateway selected in the Local Gateway Type field.Leave this field blank to use the same FQDN or IP address that is specifiedin the WAN configuration.11. Enter the Remote LAN IP Address of the default IP address of the core network.12. Enter the associated Remote LAN Subnet Mask for the remote LAN IP address.Note: This information is only applicable for IPv4 networks.13. Enter the Local LAN IP Address of the local LAN.14. Enter the associated Local LAN Subnet Mask for the local LAN IP address.Note: This information is only applicable for IPv4 networks.15. Click Save to save the changes or Cancel to clear any changes without saving.IPsec PoliciesWhen setting up a manual policy, only the Phase 1 (Manual Policy) parameters are required todefine the encryption and authentication key details. These parameters must be the same as on theremote peer. An auto IPsec policy uses IKE to automatically exchange keys between two IPsechosts. The Phase 1 (IKE) and Phase 2 (Auto Policy) details determine the tunnel security.The IPsec policy can be in Tunnel or Transport mode.lSelect Tunnel mode to pass traffic between two trusted networks through an untrustednetwork.lAccept the default Transport mode for end-to-end communication.Note: The VPN parameters chosen by the IPsec Configuration are based on the VPNConsortium's (VPNC) recommendations.More information on the VPNC recommendations can be found at:www.vpnc.org/vpn-standards.Page 110 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eConfiguring an IPsec VPN Policy1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click VPN > IPsec Policies.The IPsec VPN Policies table is shown.4. Do one of the following:lEdit an existing IPsec VPN Policy - Right-click an existing IPsec VPN Policyand click Edit.lAdd a new IPsec VPN Policy - Click Add New IPsec Policy below theAvailable IPsec VPN Policies table.5. Enter a Policy Name.6. Select one Policy Type:lAuto Policy – Some parameters for the VPN tunnel are generated automatically.Selecting Auto Policy requires that you use the IKE (Internet Key Exchange)protocol to perform negotiations between the two VPN Clients.lManual Policy – All settings (including the keys) for the VPN tunnel are manuallyentered for each Client. No third-party server or organization is involved.7. Select either an IPv4 or IPv6 IP Protocol Version .8. Select an IKE Version:Note: This field is visible when Auto Policy is selected in the Policy Type field.lIKEv1lIKEv2 – Reduces bandwidth requirements and includes EAP authentication.9. In the IPsec Mode select either:lTunnel – if IPsec communication is required between two gateways AND the LANhosts of the Gateway.Select this option to specify subnet, range, etc.lTransport – secure communication is required between two Gateways.lThe communication between only those two Gateways is secured.lSubnet, range, etc. options for this mode cannot be made.LUM0063AA Rev 05/05/2014 Page 111 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: Security10. If two WAN ports are configured to connect to an ISP, use the Select Local Gateway toselect the Gateway used as the local Endpoint for this IPsec tunnel.11. Select one option to identify the Remote Endpoint (IP) Gateway:lIP Address – Enter the IP Address of the Gateway in the IP Address/FQDNfield.lFQDN (Fully Qualified Domain Name) – Enter the IP Address of the FQDN in theIP Address/FQDN field.12. Set the Enable Mode Config field to On to enable the Mode Configuration feature.Mode configuration is similar to DHCP and is used to assign IP addresses to remote VPNclients.13. Set the Enable NetBIOS option to Off to disable NetBIOS broadcasts over the VPNtunnel.When enabled, NetBIOS broadcasts are allowed to travel over the VPN tunnel.Note: This field is visible when the IPsec Mode is set to Tunnel Mode.14. Set the Enable Rollover to On to allow rollover of the VPN when WAN Mode is set toAuto Rollover on the Network > WAN Mode page.15. In the Protocol field, select either:lAH – Guarantees connectionless integrity and data origin authentication of IPpackets.lESP – Enables data origin authenticity, integrity, and confidentiality protection ofpackets.16. Set the Enable DHCP field to either:lOn to allow VPN client connection to the device over IPsec and receive an assignedIP using DHCP.lOff to manually define the local and remote traffic selections for tunnel mode IPsecpolicies.Note: This field is visible when the IPsec Mode is set to Tunnel Mod.17. Select one Local IP identifier to provide for a Client.This field is visible when the IPsec Mode is set to Tunnel Mode and Enable DHCP is setto Off.lAny – Specifies the policy is for traffic from the given Endpoint (local or remote).Important: Selecting Any for both local and remote Endpoints is notvalid.Page 112 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elSingle - Limits the policy to one host.lRange - Allows computers within an IP range to connect to the VPN.lSubnet - Allows an entire subnet to connect to the VPN.Note: Avoid using overlapping subnets for remote or local traffic selectors.Using these subnets would require adding static routes on the router and thehosts.Example: Voice using Local Traffic Selector - 192.168.75.0/24 and RemoteTraffic Selector - 192.168.0.0./16.18. Enter the Local Start IP Address of the single host, or the start IP address to specify arange or the network address for a subnet of hosts that will be part of the VPN.Note: This field is visible when Single ,Range ,or Subnet is selected in theLocal IP field.19. Enter the Local End IP Address of the specified range of hosts that will be part of theVPN.This field is visible when Range is selected in the Local IP field.20. Enter the Local Subnet Mask to be part of the VPN.Note: This field is visible when Subnet is selected in the Local IP field.21. Select a Remote IP identifier to provide for a Client:This field is visible when the Enable DHCP is set to Off.The options are the same as the Local IP field in Step 17.22. Enter the Remote Start IP Address of the single host or the start IP address to specify arange or the network address for a subnet of hosts that are part of the VPN.Note: This field is visible when the Single ,Range. or Subnet is selected in theRemote IP field.23. Enter the Remote End IP address of the specified range of hosts that are part of theVPN.This field is visible when Range is selected in the Remote IP field.24. Enter the Remote Subnet Mask to be part of the VPN.This field is visible when Subnet is selected in the Remote IP field.25. Enter the Prefix Length .This field is visible when Subnet is selected in the Local IP or Remote IP field and the IPProtocol version is set to IPv6.LUM0063AA Rev 05/05/2014 Page 113 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: Security26. Set the Enable Keepalive option to On to periodically send ping packets to the host onthe peer side of the network to keep the Tunnel open.This field is visible when Auto Policy is selected in the Policy Type field.27. Enter the Source IP Address the ping packet is sent from.This field is visible when Enable Keepalive is set to On.28. Enter the Destination IP Address the ping packet is sent to.29. Enter the Detection Period frequency, in minutes, the ping packets are sent.30. In the Reconnect After Failure Count field, enter the number of consecutive packetssent with no acknowledgment before a connection negotiation restarts.Configuring an Auto-policy that uses IKE to Perform Negotiations between TwoVPN ClientsComplete this information in the Phase 1 IKE SA Parameters section.31. In the Exchange Mode field, select either:lMain - Negotiates the tunnel with higher security.Note: The WavePoint 10e may run slower.lAggressive - Establishes a faster connection, but with lowered security.32. Select a Direction / Type connection method:lInitiator – To set the device to initiate the connection on the remote end.lResponder – To set the device to wait passively for remote IKE requests, thenrespond.lBoth – To set the device to both initiate connections and respond to remote IKErequests.33. Set the NAT Traversal option to Onto enable Network Address Translation (NAT)during IPsec communication.34. In the NAT Keep Alive Frequency field, enter the frequency, in seconds, keep alivepackets are sent to keep the NAT mappings alive.This field is visible when NAT Traversal is set to On.Note: Entering 0(zero) disables this feature.35. In the Local Identifier Type field, select an Internet Security Association and KeyManagement Protocol (ISAKMP) identifier for the WavePoint 10e.Page 114 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eNote: If the Local Identifier Type is NOT an IP address, then negotiation is onlypossible in Aggressive mode.If FQDN,User FQDN, or DER ASN1 DN is selected, the device disablesMain mode and sets the default to Aggressive mode.36. If applicable, enter the Local Identifier value for the option selected in the LocalIdentifier Type.37. In the Remote Identifier Type field, select an Internet Security Association and KeyManagement Protocol (ISAKMP) identifier for the remote device.Note: If the Remote Identifier Type is NOT an IP address, then negotiation isonly possible in Aggressive mode.If FQDN,User FQDN, or DER ASN1 DN is selected, the device disablesMain mode and sets the default to Aggressive mode.38. If applicable, enter the Remote Identifier value for the option selected in the RemoteIdentifier Type.39. Set the Encryption Algorithm option to On to enable Encryption Method.40. Select one Encryption Method to use to negotiate the Security Association.Note: Verify the authentication method is configured identically on both sides ofthe VPN.41. Set the Authentication Algorithm option to On to enable Authentication Method.42. Select one Authentication Method for the VPN header.Note: Verify the authentication method is configured identically on both sides ofthe VPN.43. Select one Authentication Method:lPre-Shared key - Set a password-based key.lRSA-Signature - Uses the Active Self Certificate uploaded in the Administration> Certificates page.44. Enter an alphanumeric Pre-Shared Key to share with the IKE peer.This field is visible when Pre-Shared Key is selected in the Authentication Methodfield.Important: The key cannot contain double quotes (“).45. Select one Diffie-Hellman (DH) Group to use when exchanging keys.The DH Group sets the strength of the algorithm in bits.LUM0063AA Rev 05/05/2014 Page 115 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: SecurityNote: Verify the DH Group is configured identically on both sides of the VPN.46. Enter the SA - Lifetime interval, in seconds, after which the Security Association (SA)becomes invalid.The default is 28,800 seconds (or 8 hours).47. Set the Enable Dead Peer Detection option to On to activate detection of whether theconnected peer device is alive or not.48. Enter the Detection Period interval between consecutive DPD R-U-THERE messages.DPD R-U-THERE messages are only sent when the IPsec traffic is idle.49. In the Reconnect After Failure Count field, enter the maximum number of DPD failuresallowed before closing the connection.50. Select one Extended Authentication.When connecting many VPN clients to a VPN Gateway, Extended Authenticationallows authentication of users with methods in addition to the authentication methodmentioned in the IKE SA parameters.lNone - disables extended authentication.lIPsec Host - defines a unique VPN policy for a user.lEdge Device - enables the VPN Gateway to authenticate users from a stored list ofuser accounts or from an external authentication server such as a RADIUS server.51. Enter the Username, containing any alphanumeric characters, for the extendedauthentication type as a unique identifier for the user.This field is visible when the Extended Authentication field is set to IPsec Host.52. Enter the Password containing any alphanumeric characters.This field is visible when the Extended Authentication field is set to IPsec Host.53. Select one Authentication Type.This field is visible when Edge Device is selected in the Extended Authentication field.lUser Database – Use to enable the VPN Gateway to authenticate users from astored list of user accounts.lRADIUS-PAP – Use to enable the VPN Gateway to authenticate users from aRADIUS-PAP authentication server.lRADIUS - CHAP – Use to enable the VPN Gateway to authenticate users from aRADIUS-CHAP authentication server.Configure Phase 2 Auto Policy ParametersComplete the information in the Phase 2 (Auto Policy Parameters) section.Page 116 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e54. Enter the SA Lifetime time or amount of data value, and select which measure to use.This defines the amount of time, in seconds, or the amount of data allowed to pass, inKbytes, for which the Security Association remains effective.Note: When configuring a Lifetime in kilobytes (also known as lifebytes), be awarethat two SAs are created for each policy. One SA applies to inbound traffic,and one SA applies to outbound traffic. Due to differences in the upstreamand downstream traffic flows, the SA may expire asymmetrically.Example: If the downstream traffic is very high, the lifebyte for a downloadstream may expire frequently. The lifebyte of the upload stream may not expire asfrequently. It is recommended that the values be reasonably set, to reduce thedifference in expiry frequencies of the SAs; otherwise the system may eventuallyrun out of resources as a result of this asymmetry. The lifebyte specifications aregenerally recommended for advanced users only.55. Set the Encryption Algorithm option to On to enable an Encryption Method.56. Select an Encryption Method to encrypt the data.Note: If BLOWFISH is selected, it requires a Key Length in a multiple of 8between 40 and 448.If CAST128 is selected, it requires a Key Length in a multiple of 8 between40 and 128.57. Set the Integrity Algorithm option to On to enable Integrity Algorithm.58. Select one Integrity Algorithm to verify the integrity of the data.59. Select one PFS (Perfect Forward Secrecy) Key Group.This ensures a Diffie-Hellman exchange is performed for every phase-2 negotiation.Note: This selection will cause the WavePoint 10e to run slower.Configure Phase 2 Manual Policy ParametersComplete this additional information in the Phase 2 (Manual Policy Parameters) section for thePhase 2 Manual Policy Parameters.60. Enter a SPI - Incoming hexadecimal value between 3 and 8 characters.The value must match the remote VPN endpoint’s Outgoing value.61. Enter a SPI - Outgoing hexadecimal value between 3 and 8 characters.The value must match the remote VPN endpoint’s Incoming value.62. Select one Encryption Algorithm to encrypt the data.LUM0063AA Rev 05/05/2014 Page 117 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 5: Security63. Enter a Key Length as a multiple of 8 between 40 and 448 for the Blowfish encryptionmethod.Enter a Key Length as a multiple of 8 between 40 and 128 for the CAST128 encryptionmethod.This field is visible when Blowfish or CAST128 is selected in the Encryption Algorithmfield.64. Enter the Key - In encryption key of the inbound policy.This field is visible when any value except None,Blowfish, or CAST128 is selected in theEncryption Algorithm field.Note: The length of the key depends on the algorithm chosen in the EncryptionAlgorithm field.65. Enter the Key - Out encryption key of the inbound policy.This field is visible when any value except None ,Blowfish ,or CAST128 is selected inthe Encryption Algorithm field.Note: The length of the key depends on the algorithm chosen in the EncryptionAlgorithm field.66. Select one Integrity Algorithm to verify the integrity of the data.67. Enter the Key - In encryption key of the inbound policy.The length of the key depends on the algorithm chosen in the Integrity Algorithm field.68. Enter the Key - Out encryption key of the inbound policy.The length of the key depends on the algorithm chosen in the Integrity Algorithm field.69. Click Save to save the changes or Cancel to clear any changes without saving.Delete an IPsec VPN Policy1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click VPN > IPsec Policies.The defined IPsec VPN policies are listed in the table.4. Right-click the IPsec VPN policy to remove and click Delete.Page 118 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eNote: Right-click anywhere in the table and click Select All > Delete to delete allthe IPsec VPN policies.5. Click Save to save the changes or Cancel to clear any changes without saving.Edit the Default DHCP RangeEdit the default DHCP range to set the IP range assigned to Clients connecting using DHCP overIPSec.Note: By default the range is in the 192.168.12.0 subnet.1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Security menu, click VPN > IPSec DHCP Range.The defined DHCP Range is shown.4. In the Starting IP Address field, enter the starting IP address in the range.5. In the Ending IP Address field, enter the ending IP address in the range.6. In the Subnet Mask field, enter the subnet mask for the entered range.7. ClickSave to save the changes and send them to the WavePoint 10e or click the Xin theupper right corner to clear any changes without saving.LUM0063AA Rev 05/05/2014 Page 119 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 120 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management andAdministrationThe Administration tab in the Configuration pages contain functions for general devicemanagement, access management and diagnostic tools for setting up and maintaining eachWavePoint 10e. This chapter contains information about:lUpgrade the WavePoint 10e Software on page 130.lAdding and Editing User Groups on page 124.lDefine User Group IP Policies on page 127.lAdding and Editing Users on page 129.lBack Up Configuration Settings on page 131.lRestore Configuration Settings on page 132.lSet Up Remote Access to the WAN Port on page 122.lAdding Trusted Certificates (CA Certificates) on page 139.lGenerating Self Certificate Requests on page 140.lSystem Statistics on page 144.lSetting the Date and Time on page 143.lSystem Logging on page 134.LUM0063AARev 05/05/2014 Page 121 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and AdministrationClick Administration > Summary to view a high-level summary of administrationsettings, including a list of users currently logged into the device.Set Up Remote Access to the WAN PortSet up the WavePoint 10e to allow:lRemote access in to the WAN port.lRemote connection for management.lConfiguration from another network location.Note: Verify the WAN port is also configured.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Remote Management.4. Click the Remote Management switch to On.5. In the Allow Access From fields, select from these options:lAll IP Address - Enables remote access from any PC or device.lIP Address Range - Enables remote access for only those IP addresses that fallbetween the range of addresses entered in the IP Address Start and IP AddressEnd fields for the network type.lOnly This PC - Enables remote access for only the PC currently connected to theWavePoint 10e.6. In the Port field, enter the port number that grants remote access.7. Set the Remote SNMP option to On to allow SNMP network management software tomanage the WavePoint 10e through the SNMP protocol.User Access ManagementThe primary method to configure a WavePoint 10e is to use the Configuration pages accessedthrough a web browser. The Configuration pages require a User Name and Password to log in.Page 122 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eUsers can access the Configuration pages on a computer connected directly to the WavePoint10e or through a wireless connection by navigating to the WavePoint 10e IP address.If the WAN port is setup for remote management, it can be connected using theWAN IP address.Users and GroupsThe Users and Groups functionality is used to:lControl who has access to the Configuration settings.lDetermine how users are allowed to access the WavePoint 10e.lWhich users have administrative privileges.Note: Each user is assigned to a Group.UsersEach user that accesses the WavePoint 10e is assigned a User Name and Password to accessthe Configuration pages.GroupsThe group configuration determines:luser access rightslwhich browsers are allowed for accesslthe IP addresses a user can access the WavePoint 10e from.Factory Defined UsersAWavePoint 10e ships from the factory with these users defined:adminThe admin user is enabled by default.lThe User Name is admin.lThe Password is freewave.lThe admin user is assigned to the admin group.lThe admin user is allowed viewing and editing privileges to all Configuration pages.Note: The admin user is used to log in for the first time.guestThe guest user is disabled by default.LUM0063AA Rev 05/05/2014 Page 123 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and AdministrationlThe User Name is guest.lThe Password is freewave.lThe guest user islassigned to the Guest Group.lallowed viewing and user privileges to all Configuration pages but has limited editingprivileges.Note: The guest cannot save changes made in the Configuration pages .These sections detail:lcreating and changing groups.ladding users to those groups.Adding and Editing User GroupsEach user is assigned to a User Group with an assigned User Name and Password.A user Group defines:lIf a User assigned to the Group is able to access the Configuration pages using anymethod.lThe browsers the User can use for access.lThe IP addresses they can access the WavePoint 10e from.Default User GroupsAWavePoint 10e ships from the factory with these default User Groups:ladmin - Login is allowed from any browser or IP address.lguest - By default, login capability is disabled.Add additional Groups as necessary to manage the users and their access rights that are applicableto the company.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The current list of user groups is shown.Page 124 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e4. Do one of the following:lEdit an existing group - Right-click the user name in the Group Lists table andclick Edit.lAdd a group - Click Add New Group in the Group Lists section.5. In the Group Name field, enter the name of the group.This name appears in drop-down lists and other areas of the Configuration pages thatreference user groups.Note: Group names can contain only lower case letters, numbers, periods, andhyphens.Uppercase letters and other symbols are not allowed.6. In the Description field, enter enough information to identify the user group and itspurpose.The Group description is shown in the Group List field on the Groups page.7. In the Privilege Type field, select one option:lAdmin - Provides viewing and editing access to all functionality available in theConfiguration pages.lSelect this option to create a second administrator group to assign to users thatrequire access to update Configuration settings.lUser - Provides view-only access to the content in Configuration pages.8. In the Idle Timeout field, enter the duration, in minutes, a user assigned to the user groupis automatically logged out if no activity has taken place.9. Click Save to save the changes or Cancel to clear any changes without saving.10. After creating a Group:lDefine and Assign User Group Login Policies on page 125.lDefine User Group Browser Policies on page 126.lDefine User Group IP Policies on page 127.Define and Assign User Group Login PoliciesEach User Group is assigned a set of policies to determine if, and from where, a user assignedunder that group can access the Configuration pages.AWavePoint 10e ships from the factory with these default in policies defined:LUM0063AA Rev 05/05/2014 Page 125 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administrationladmin - Log in is allowed from any browser or IP address.lguest - By default, login capability is disabled.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The list of User Groups is shown.4. In the Login Policies table, right-click the user group to assign a policy to and click Edit.5. Set the Login Status field to Off to enable login from the standard login page for thegroup.6. Set the WAN Interface Login Status to On to enable access to the WAN interface.7. Click Save to save the changes or Cancel to clear any changes without saving.Define User Group Browser PoliciesEach User Group is assigned a set of policies that determine if and from where a user assigned tothat group can access the Configuration pages and what web browsers are allowed.Note: User Groups defined at the factory and any newly created User Groups do NOThave a browser policy automatically defined.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The current list of user groups is shown.4. In the Browser Policies section, click Add Browser Policies.5. Right-click the policy and click Edit to edit an existing policy.6. In the Group Name field, select the user group the browser policy applies to.7. Do one of the following:Page 126 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elSelect Deny Login from Defined Browsers to deny access to a particularbrowser type.lSelect Allow Login from Defined Browsers to allow access to a particularbrowser.8. In the Client Browser field, select the browser to deny or allow access to, depending onthe selection in Step 7.9. Click Save to save the changes or Cancel to clear any changes without saving.Define User Group IP PoliciesEach User Group has a set of policies assigned to it that determine if and from where a userassigned to that group can access the Configuration pages. The IP policies define whethermembers assigned to a User Group have access to the Configuration pages from specific physicalor network IP addresses.Note: User groups defined at the factory and any newly created user groups do NOThave an IP policy automatically defined.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The list of user groups is shown.4. In the IP Policies section, click Add IP Policies.5. Right-click the policy and click Edit to edit an existing policy.6. In the Group Name field, select the user group the browser policy applies to .7. Do one of the following:lSelect Deny Login from Defined Browsers to deny login from a source IPaddress.lSelect Allow Login from Defined Browsers to allow login from a source IPaddress.8. In the Source Address Type field, select whether the address to allow or deny is aphysical or network translated IP address.LUM0063AA Rev 05/05/2014 Page 127 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administration9. In the Network Address / IP Address field, enter the IP address to allow or deny accessto.10. Click Save to save the changes or Cancel to clear any changes without saving.Deleting User Groups PoliciesA policy assigned to a User Group can be removed at any time, even if the Group has active users.Delete a Single User Group Policy1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The list of user groups is shown.4. In any of the policy lists, right-click the policy to delete and click Delete.Delete all User Policies in a List1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The list of user groups is shown.4. In any of the policy lists, right-click any policy and click Select All > Delete.All policies defined in that list are deleted.Deleting User GroupsImportant: Before deleting a User Group, the Users assigned to the Group mustbe deleted or assigned to a different Group.AUser Group must be empty before it can be deleted.Note: The factory default Administrator, Guest User, or User Group cannot be deleted.Delete a User Group1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.Page 128 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e3. On the Administration menu, click Users > Groups.The list of user groups is shown.4. In the Groups List, right-click the group to delete and click Delete.Delete all User GroupsNote: All user groups except the factory defaults are deleted.1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Groups.The current list of user groups is shown.4. In the Groups List, right-click any group name and click Select All > Delete.Adding and Editing UsersEach person that accesses the WavePoint 10e has a user login with a User Name and Password.Prior to adding users, the Group that defines the user access privileges must be defined. SeeAdding and Editing User Groups.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Users.The list of users is shown.4. Do one of the following:lEdit an existing user - Right-click the user name in the table and click Edit.lAdd a user - Click Add New User below the user table.5. Enter the User Name (e.g., Technician).6. Select the Group to assign the user to.Note: Groups determine the login privileges for the user.7. Enter the User Name.LUM0063AA Rev 05/05/2014 Page 129 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administration8. Enter the Password and enter it again in the Confirm Password field.9. Click Save to save the changes or Cancel to clear any changes without saving.Deleting UsersFor security purposes, delete Users that no longer require access to the WavePoint 10e.Note: The factory default Administrator and Guest users cannot be deleted.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Users > Users.The list of users is shown.4. Right-click the user to remove and click Delete.Software MaintenanceWhen FreeWave releases new software, the WavePoint 10e is updated from the Configurationpages. These options are also available:lLoad the settings from a saved configuration.lReboot using the currently saved configurations.lRestore to the factory default settings.lSave the current configuration settings.Upgrade the WavePoint 10e SoftwareUse the Configuration pages to upgrade the WavePoint 10e when FreeWave releases newsoftware (firmware).Note: The software upgrade is completed through either a direct connection or through awireless connection. Update files are located atwww.freewave.com/home/WavePointLogin.Procedure1. Open a web browser.2. Go to the www.freewave.com/home/WavePointLogin page.Page 130 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e3. Locate the WavePoint 10e upgrade file.4. Save the WavePoint 10e upgrade file to an accessible location on the network or to anexternal drive.5. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.6. Use a web browser to access the Configuration pages.7. On the Administration menu, click Maintenance > Upgrade Via Network.The Upgrade Via Network window shows this information:lName - This is the name assigned to the WavePoint 10e.lVersion - This is the current firmware version.lDate - This is the date and time the firmware was last updated.8. Click Browse.The Choose File to Upload dialog box opens.9. In the dialog box, search for and select the upgrade file.10. Click Open.The Choose File to Upload dialog box closes and the Upgrade Via Network windowis shown.11. Click Upgrade to start the upgrade.Important: An upgrade can take several minutes to complete.Do NOT disconnect power or interrupt the upgrade process in any way untilthe upgrade is complete.Interrupting the upgrade process can render the WavePoint 10e unusable.After the update is complete, the WavePoint 10e reboots.12. Refresh the browser session and log in again to access the Configuration pages.Back Up Configuration SettingsAt any time, the Configuration settings on a WavePoint 10e can be saved as a file to the network.This saved configuration can be:lloaded to another WavePoint 10e.lused as a backup to restore a WavePoint 10e to the saved settings.LUM0063AA Rev 05/05/2014 Page 131 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and AdministrationImportant: The backup file includes sensitive information (e.g., Passwords) thatare NOT encrypted in the file.Take the appropriate actions to secure the file after it is saved.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Maintenance > Backup / Restore.4. Click Backup > OK at the prompt.The file is saved as wavepoint.cfg in the default downloads directory of the browser.Restore Configuration SettingsUse a saved backup of the WavePoint 10e configuration settings to:lrestore the WavePoint 10e settings.lload the settings onto a different WavePoint 10e to use as a starting point forconfiguration on the other machine.Important: If the file is used as a base configuration on another WavePoint 10e,change the IP address prior to connecting the WavePoint 10e to the network sothere are no two devices in the network have the same IP address.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Maintenance > Backup / Restore.4. In the Restore Saved Settings field, click Browse and select the saved configurationfile.Configuration files have a CFG extension.5. Click Restore to start the settings restoration process.Page 132 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eImportant: During a restore operation, do NOT do anything else to theWavePoint 10e until the operation is complete.A restoration can take several minutes to complete.6. After the LEDs are turned off, wait a few more seconds before doing anything with theWavePoint 10e.When the restoration process is complete, the WavePoint 10e reboots automatically with therestored settings.Restoring Factory Default SettingsAt any time, the WavePoint 10e can be restored to the factory default settings listed in FactoryDefault Settings on page 151.Important: When restoring to the factory default settings, the current configurationsettings are erased.Firewall rules, VPN policies, LAN/WAN settings and all other settings are removed.The previous settings CANNOT be retrieved unless a backup file was created.See Back Up Configuration Settings on page 131 to save the current configurationsettings prior to restoring the factory default settings.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Maintenance > Backup / Restore.4. Click Default and OK at the warning message to proceed.After the factory defaults are installed, the WavePoint 10e reboots automatically with the factorydefault settings.RebootingWhen rebooting the WavePoint 10e, all connections are down during the time it takes to reboot.Note: The reboot process can take several minutes to complete.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.LUM0063AA Rev 05/05/2014 Page 133 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administration2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Maintenance > Backup / Restore.4. Click Reboot and OK at the prompt.5. Refresh the browser’s window.6. Log back in after the reboot.System LoggingThe WavePoint 10e logs information about the packets received and transmitted as well as systemerrors.The available logging options are :lLogging Packet Traffic on page 135.lSet Up System Event Logging on page 134.lSending Log Messages to Email Addresses on page 136.lSending Logs to Syslog Servers on page 138.Set Up System Event LoggingSelect the event types and the severity level of the events to log. WavePoint 10e logs event activityfor device components that are called facilities.lKernel - The kernel facility is the connection between the hardware components (theboards seen in the board-level model) and the software used.lLog messages generated for this facility correspond to traffic through the firewall ornetwork.lSystem - Log messages generated for this facility correspond to SSL, VPN, andadministrator changes made in managing the WavePoint 10e.System events for each facility are categorized in a severity level hierarchy. Notification of thesystem events can be defined.lEmergency - The system becomes unusable.lAlert - Immediate action is required.lCritical - Correction should be done immediately.lCritical events typically indicate a failure in the network (e.g., the loss of a redundantconnection.)lError - Non-urgent but network administrators should be made aware.Page 134 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elWarning - Conditions in the system that can cause an error if they are not resolved.lNotice - Unusual events but are not errors or warnings about potential errors in the future.No immediate action is required.lInformation - Messages about normal, typical operation.lThese messages can be useful for gathering data for reports or tracking systemperformance.lNo action is required.lDebug - System information that is useful when debugging the network.lDebugging information is not useful during normal network operations.If the log data is sent to logging servers, select the facility and the severity level to send to eachserver. For more information, see Sending Logs to Syslog Servers on page 138.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Log > Log Facilities.4. In the Facility field, select either Kernel or System.5. For each severity level, indicate if the WavePoint 10e should send messages about thoseevents to the Event Log available through the Configuration pages or to a Syslog server.For more information about defining Syslog servers, see Sending Logs to Syslog Serverson page 138.6. Click Save to save the changes or Cancel to clear any changes without saving.Logging Packet TrafficLogging packet activity allows a network administrator to monitor traffic as it flows through thefirewall in the WavePoint 10e. Logging and tracking accepted or dropped packets is useful if theDefault Outbound Policy for IPv4 setting in the Basic Policies page (Security > Firewall >Basic Policies) is set to Block Always.LUM0063AA Rev 05/05/2014 Page 135 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and AdministrationLog Packet Traffic in an IPv4 Network1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Logs > Log Setup.4. In the Routing Logs Accepted Packets section, select whether to log accepted packetssent from the LAN to the WAN, from the WAN to the LAN, or both.Important: Depending on how much data is sent through the network,logging accepted packets can generate a significant number of log messages.This is recommended for debugging purposes only.5. In the Routing Logs Dropped Packets section, select whether to log dropped packetsfrom the LAN to the WAN, from the WAN to the LAN, or both.Note: A dropped packet is a packet that the router intentionally blocked.6. In the System Logs section, set each of the events to log to On:lAll Unicast Traffic - Logs activity for transmissions sent to a single destinationwithin the network.lRedirect ICMP Packets - Logs all ICMP redirect packets. Redirect requests are amethod to convey routing information to hosts. However, they can also be used in amalicious attack. An attacker can alter the routing tables within your network,diverting traffic to destinations of their choice.lAll Broadcast Traffic - Logs activity for transmissions sent to all possibledestinations within the network.lThis is also referred to as Multicast Traffic.lInvalid Packets - Logs packets dropped due to the settings in the bandwidthprofile. Logging this data can help determine if the bandwidth profile requiresmodification for the amount of traffic.lFTP Logs - Logs activity for all FTP-type traffic.7. Click Save to save the changes or Cancel to clear any changes without saving.Sending Log Messages to Email AddressesWhen the log types to collect are configured, the WavePoint 10e logs can be sent to a maximum ofthree separate email address.Page 136 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eSending alert messages about logging activities to an email address helps monitorthe state of the network from a remote location.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Logs > Email Logs.4. Set the Enable Email Log option to On.5. Enter the Email Server Address or the email server's domain name.The WavePoint 10e tries to connect to this server when sending emails to the addressesprovided.6. Enter the SMTP Port number on the email server associated with SMTP.This setting is port 25 if the mail server uses TCP.7. Enter the Return Email Address all generated log messages are sent from.Note: This is also the email address that receives returned emails.8. In the Send to Email Address (1 to 3) fields, enter a maximum of three different emailaddresses the log messages are sent to.9. Select a Authentication with SMTP method used to authenticate the WavePoint 10econnection to the server identified in the Email Server Address and SMTP Port field.lNone - Authentication is disabled, and not required on the email server.lPlain Login - The User Name and Password are sent to the email server withoutencryption.lCRAM-MD5 - The User Name and Password are sent to the email serverencrypted.CRAM-MD5 is a challenge-response authentication mechanism often supported bySMTP mail servers.10. In the Respond to IDENTD from SMTP field, select whether the WavePoint 10eresponds to IDENTD requests from the email server to verify its authentication.IDENTD is a protocol that helps to identify the user of a TCP connection.Note: If the email server in the network does not use the IDENTD protocol, leavethis set to Off.LUM0063AA Rev 05/05/2014 Page 137 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administration11. In the Send Email Logs by Schedule section, select how often the system shouldcompile and send the log file to the provided email addresses.Note: Selecting Never in this field disables log emails but preserves the emailserver settings.12. Click Save to save the changes or Cancel to clear any changes without saving.Sending Logs to Syslog ServersUse Logging servers or Syslog servers to collect and store logs from the WavePoint 10e in anexternal location.Using a Syslog server instead of the available log viewer in the Configurationpages provides addition memory storage and allows the collection of a number oflogs over a longer period of time.Collecting data using Syslog servers can be useful for troubleshooting networkissues.When the log types to collect have been defined, a maximum of eight servers can be defined to sendlog messages and log data to. Indicate which facilities and severity levels to send to each server.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Logs > Syslog.4. Change the applicable SysLog Server option to On.5. In the Name field, enter the server's IP address or domain name.6. In the Syslog Facility field, select the log type to send to the server.7. In the Syslog Severity field, select the event severity level to send to the server.All events with a severity level equal to or greater than the severity selected are capturedin the log.8. Click Save to save the changes or Cancel to clear any changes without saving.Page 138 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eSimple Network Management Protocol (SNMP)This is an Internet-standard protocol for managing devices on IP networks. Devices that typicallysupport SNMP include routers, switches, servers, workstations, printers, modem racks. It is usedmostly in network management systems to monitor network-attached devices for conditions thatwarrant administrative attention.SNMP is a component of the Internet Protocol Suite as defined by the Internet Engineering TaskForce (IETF). It consists of a set of standards for network management, including an applicationlayer protocol, a database schema, and a set of data objects.WavePoint 10e supports SNMP v1, v2c, and v3.Authentication CertificatesThe WavePoint 10e uses digital certificates for authentication between the WavePoint 10e andClients over IPsec VPN tunnels.A digital certificate can be obtained from:la well known commercial Certificate Authority (CA) such as Verisign.la self certificate request using the options provided in the Certificates page.Certificates provide authentication of a router's identity and are typically required for most corporatelevel VPNs.Use the Certificates page to:lView certificates currently loaded and in use in the WavePoint 10e.lUpload third-party generated certificates.lUpload self-signed certificates.lGenerate self certificates and the data required to send to a third party CA.Adding Trusted Certificates (CA Certificates)A Trusted Certificate is signed by a Certificate Authority (CA) that is different than the identity itcertifies.A Trusted Certificate certifies that the subject named in the certificate is indeed the owner of theauthentication key. The certificate from an external CA can be upload it to the WavePoint 10e.ProcedureLUM0063AA Rev 05/05/2014 Page 139 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administration1. Save the certificate file to a location on a computer or an accessible network location.2. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.3. Use a web browser to access the Configuration pages.4. On the Administration menu, click Certificates.The list of Trusted Certificates is shown in the table at the top of the page.5. Click Add New CA Certificate.6. Click Browse to navigate to the certificate file to upload.7. Select the file and click Open.8. Click Upload to add the file.Generating Self Certificate RequestsComplete these tasks to use a self certificate.1. A self certificate request must be created.lThe request provides information about the requesting company and about theWavePoint 10e that uses the certificate.2. Contact the Certificate Authority (CA) for the specific details they require for self certificatesubmissions.3. A request to certify the certificate from a CA must be received.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Certificates.The Self Certificate Requests table at the bottom of the page lists all generatedrequests.4. Click Generate Self Certificate Request.5. Enter a Name that identifies the certificate.6. Enter the Subject name that other organizations will see as the owner of the certificate.Subject names are typically defined in the following format:Page 140 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elCN=<device name> (Example: CN=router1)lOU=<department>lO=<organization>lL=<city>lST=<state>lC=<country>7. Select either Hash Algorithm:lMD5 to produce a 128-bit hash value.lSHA-1 to produce a 160-bit hash value.Note: The network and the installation environment determines the hashalgorithm needed.8. Select the Signature Key Length in bits.Larger key sizes may improve security, but they can also decrease networkperformance.9. Optional: Enter an IP Address to customize the certificate request.10. Optional: Enter a Domain Name to customize the certificate request.11. Optional: Enter an Email Address of a contact at the company that can answer questionsabout the request.12. Click Save to save the changes or Cancel to clear any changes without saving.The WavePoint 10e generates the certificate request and is listed in the Self CertificateRequests table.13. In the Self Certificate Requests table, right-click the certificate and click Edit.14. Copy all the text in the Data to Supply to CA field into a TXT file and save the text file.15. Submit the certificate request to a CA including the information in the text file and anyother information required from the specific CA.16. When the certificate is received from the CA, it can be uploaded as an active selfcertificate.See Adding Active Self Certificates on page 141.Adding Active Self CertificatesWhen a self certificate is received from the Certificate Authority (CA), the certificate is uploaded toWavePoint 10e as an active Self Certificate.LUM0063AA Rev 05/05/2014 Page 141 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and AdministrationProcedure1. Save the certificate file to a location on a computer or an accessible network location.2. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.3. Use a web browser to access the Configuration pages.4. On the Administration menu, click Certificates.The Active Self Certificates table in the middle of the page lists the loaded selfcertificates.5. Click Add New Active Self Certificate below the table.6. Click Browse to navigate to the certificate file to upload.7. Select the file and click Open.8. Click Upload to add the file.Deleting CertificatesIf a certificate expires or is replaced by a newer version, remove the olde certificate from theWavePoint 10e.Delete a Single Certificate1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Certificates.The list of loaded certificates is shown.4. In the certificate table, right-click the certificate to delete and click Delete.Delete all Certificates1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Certificates.The list of loaded certificates is shown.4. In the certificate table, right-click any certificate and click Select All > Delete.Page 142 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eSetting the Date and TimeAn accurate date and time setting is critical for:lfirewall schedules.lWi-Fi power saving support to disable access points at certain times of day.laccurate event tracking in the logs.A time zone is selected to:ladjust the time zone for Daylight Savings Time (DST).luse a Network Time Protocol (NTP) server to synchronize the date and time.Note: If the WavePoint 10e has access to the Internet, the most accurate way to set thetime is to enable NTP communication.Use an NTP Server to Set the Date and Time1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Date & Time.The WavePoint 10e current date and time are shown in the Current Device Time field.4. In the Time Zone field, select the time zone where the WavePoint 10e is located.5. In the Daylight Saving field, select the Enable radio button if the WavePoint 10e is in antime zone that observes Daylight Savings Time.6. In the Time Settings field, click NTP.7. Select Yes in the Use Custom NTP Server field to define a specific NTP server to syncthe time to.8. In the Primary NTP Server field, enter the IP address of the primary server theWavePoint 10e connects to synchronize its date and time.9. In the Secondary NTP Server field, enter the IP address of the backup server theWavePoint 10e connects to synchronize its date and time if it cannot connect to theserver identified in the Primary NTP Server field.Note: If the WavePoint 10e has Internet access leave this option set to No tosynchronize the clock with an Internet time server.WavePoint 10e attempts to connect to the Internet to synchronize its timeand the interval set in the Re-synchronize field.LUM0063AA Rev 05/05/2014 Page 143 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 6: Management and Administration10. In the Re-synchronize field, enter the interval, in minutes, WavePoint 10e re-synchronizes its clock.The default setting is every 120 minutes.11. Click Save to save the changes or Cancel to clear any changes without saving.Manually Set the Date and Time1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Date & Time.The WavePoint 10e current date and time are shown in the Current Device Time field.4. In the Time Zone field, select the time zone where the WavePoint 10e is located.5. In the Daylight Saving field, select the Enable radio button if the WavePoint 10e is in antime zone that observes Daylight Savings Time.6. In the Time Settings field, click Manual.7. Use the MM,DD,YY,HH,MM, and AM/PM dials to set the time.a. Place the mouse cursor over a single dial.b. Use the mouse wheel to move the correct number across the black line in the dial.The selected time populates in the Set Date and Time Manually field.8. Click Save to save the changes or Cancel to clear any changes without saving.System StatisticsUse the System Statistics page to view information about the wired (LAN) and wireless (WLAN)network traffic and usage.Procedure1. Connect to the WavePoint 10e either through an Ethernet cable connected to Ethernetport 3 or 4 or through the computer's wireless options.Page 144 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e2. Use a web browser to access the Configuration pages.3. On the Administration menu, click Diagnostics > System Statistics.The WavePoint 10e System Statistics page opens.4. Click Display next to the statistics to view.The output opens in a new window.5. Click the Xin the upper right corner of the window to return to the System Statisticspage.LUM0063AA Rev 05/05/2014 Page 145 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 146 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 7: Diagnostics andTroubleshootingGeneral TroubleshootingInternet Connection and Browser DisplayCannot Access the Configuration Pages from a Computer on the LANVerify these items:lThe Ethernet cable is connected between the computer and the WavePoint 10e.lThe computer is connected to the WavePoint 10e and the WavePoint 10e IP addressesare on the same subnet.lThe computer's IP address.Important: Some versions of Windows® and Mac operating systemsgenerate and assign an IP address to the computer.These addresses start with 169.254.If the IP address is in this range, check the connection from the computer tothe WavePoint 10e and reboot the computer.lJava, JavaScript, or ActiveX is enabled, depending on the browser type used.lIf using Internet Explorer, click Refresh in the browser to ensure that the Java appletloads.LUM0063AARev 05/05/2014 Page 147 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 7: Diagnostics and TroubleshootinglClose and reopen the browser.lTry using an alternate browser (e.g., Firefox, Chrome, etc.)lThe correct login information is used.lThe factory default User Name is admin and the Password is freewave.Both are case sensitive.Verifying the IP address of a Windows® Computer1. Open a Windows Command Prompt.2. Issue the command ipconfig.3. Check the Local Area Connection for:lIPv4 Address.lSubnet Mask.If IP address does NOT reside within the same subnet (see example) change thecomputer’s IP address to reside within the same network.Example:Computer: 192.168.150.3/255.255.255.0.WavePoint 10: 192.168.1.100/255.255.255.0.To configure the computer to reside within the same subnet the correct IPaddress is 192.168.1.3.4. Use any unique address within the range that is NOT currently used.Configuration Changes are not SavinglClick Save in the current page before moving to another page.lIf you navigate to another page without clicking Save, any changes made on that pageare lost.lRefresh the web browser window.lChanges may have been saved but the browser could be caching the old configurationand not updating the new settings on the web page.WavePoint 10e cannot Obtain an IP address from the ISP1. Turn off the power to the cable or DSL modem.2. Turn off the WavePoint 10e.3. Wait 5 minutes, and then turn on the power to the cable or DSL modem.Page 148 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10e4. When the modem LEDs indicate that it has re-synchronized with the ISP, turn on thepower to the WavePoint 10e.5. If the router still cannot obtain an ISP address, verify if the ISP requires PPP overEthernet (PPPoE) or some other type of login.6. If Yes, verify that the configured User Name and Password are correct.7. Ask the ISP if it checks for the computer's hostname.8. If Yes, select and set the account name to the PC hostname of the ISP account.9. Ask the ISP if it allows only one Ethernet MAC address to connect to the Internet, andtherefore checks for the computer’s MAC address.10. If Yes, inform the ISP that there is a new network router and ask them to use theWavePoint 10e MAC address.Alternatively, select and configure the WavePoint 10e to spoof thecomputer’s MAC address.WavePoint 10e can Obtain an IP address but the PC is Unable to LoadInternet Pages1. Ask the ISP for the addresses of its designated Domain Name System (DNS) servers.2. Configure the PC to recognize those addresses.3. On the PC, configure the router to be its TCP/IP gateway.Date and TimeThe Date Shown in the Log Files is January 1, 1970The WavePoint 10e has not successfully connected to an active Network Time Server (NTS).1. If the WavePoint 10e has just been configured, wait at least 5 minutes.2. On the Administration menu, click Date & Time and recheck the date and time.3. Verify the WavePoint 10e can successfully route across the network.The Time is off by One HourThe WavePoint 10e is not set to adjust for Daylight Savings Time.1. On the Administration menu, click Date & Time to access the current date and timesettings.LUM0063AA Rev 05/05/2014 Page 149 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter 7: Diagnostics and Troubleshooting2. In the Daylight Saving field, click Enable.3. Click Save to save the changes or Cancel to clear any changes without saving.Page 150 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Appendix A: Factory Default SettingsThese are the factory default settings of the WavePoint 10e device.lThe firewall blocks all outside access.lThe DHCP server on LAN is disabled.lThe WAN port configuration is completed with a DHCP configuration.lWavePoint 10e is set in Repeater mode.lThe WavePoint 10e has only one active antenna port on Port 1.lThe LAN IP address = 192.168.1.1.lThe User Name = admin.lThe Password = freewave.LUM0063AARev 05/05/2014 Page 151 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 152 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter B: Installation InstructionsThe mounting holes on the bottom panel of each WavePoint 10e provide a variety of ways to mountthe WavePoint 10e using either the mounting flanges or the DIN rail bracket provided in themounting kit. Mounting kits provide the hardware necessary to attach the flanges or the DIN railbracket to the WavePoint 10e, but do NOT contain items such as a the DIN rail or screws to mountthe flanges to an external surface.Note: Mounting kits must be purchased separately.FreeWave Part Number DescriptionPOH0031AA DIN Rail Mounting KitPOH0030AA Wall Mount Bracket Kit (flange)If mounting outdoors, install the WavePoint 10e in a NEMA-4 rated enclosure. Follow theinstallation instructions provided with the NEMA enclosure.Note: Prior to mounting the WavePoint 10e, write the radio information and the serialnumber information on the labels on the back panel. The radio information is helpfulfor programming and the Serial Number is required when calling FreeWaveTechnical Support for assistance.LUM0063AARev 05/05/2014 Page 153 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Chapter B: Installation InstructionsAttach the DIN Rail Bracket1. Determine the orientation that is best for the installation.2. Using the screws provided, securely attach the bracket to the WavePoint 10e using thesupplied screw holes.Attach the Mounting Flanges1. Determine which set of mounting holes on the mountingflanges is best for the installation.2. Align the brackets with the screw holes on the bottom panelof the WavePoint 10e.3. Securely attach the brackets using the provided screws.Page 154 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eAppendix C: WavePoint™ ConfigurationsThese are the configurations for the WavePoint 10e.lWP10e-R100-100-100 on page 155lWP10e-S100-100-100 on page 155lWP10e-S200-101-100 on page 155lWP10e-T100-100-100 on page 156lWP10e-T200-101-100 on page 156WP10e-R100-100-100Model Radio 1 Radio 2 Radio 3 Radio 4 Radio 5 Power Ethernet RS-232 RS-485 USB EnclosureWP10e-R100-100-100900MHzPort 1 -- Y1Port 2 -- Y2NotInstalledNotInstalledNotInstalledGPS (option)Port 1 -- Y410.5Vdc-30Vdc24W4 2 1 1 StandardBaseWP10e-S100-100-100Model Radio 1 Radio 2 Radio 3 Radio 4 Radio 5 Power Ethernet RS-232 RS-485 USB EnclosureWP10e-S100-100-100 NotInstalledNotInstalled2.4GHzPort 1 -- Y1Port 2 -- Y2Port 3 -- Y3NotInstalledGPS (option)Port 1 -- Y410.5Vdc-30Vdc24W4 2 1 1 StandardBaseWP10e-S200-101-100Model Radio 1 Radio 2 Radio 3 Radio 4 Radio 5 Power Ethernet RS-232 RS-485 USB EnclosureWP10e-S200-101-100 900MHzPort 1 -- Y3NotInstalled2.4GHzPort 1 -- Y1Port 2 -- Y2NotInstalledGPS (option)Port 1 -- Y410.5Vdc-30Vdc24W4 2 1 1 StandardBaseLUM0063AA Rev 05/05/2014 Page 155 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned by FreeWave®. This document cannot bereproduced in whole or in part by any means without written permission from FreeWave Technologies, Inc.
Appendix C: WavePoint™ ConfigurationsWP10e-T100-100-100Model Radio 1 Radio 2 Radio 3 Radio 4 Radio 5 Power Ethernet RS-232 RS-485 USB EnclosureWP10e-T100-100-100 NotInstalledNotInstalled5GHzPort 1 -- Y1Port 2 -- Y2Port 3 -- Y3NotInstalledGPS (option)Port 1 -- Y410.5Vdc-30Vdc24W4 2 1 1 StandardBaseWP10e-T200-101-100Model Radio 1 Radio 2 Radio 3 Radio 4 Radio 5 Power Ethernet RS-232 RS-485 USB EnclosureWP10e-T200-101-100900MHzPort 1 -- Y3NotInstalled5GHzPort 1 -- Y1Port 2 -- Y2NotInstalledGPS (option)Port 1 -- Y410.5Vdc-30Vdc24W4 2 1 1 StandardBasePage 156 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned by FreeWave®. This document cannot bereproduced in whole or in part by any means without written permission from FreeWave Technologies, Inc.
WavePoint 10eAppendix D: Bench Test Verification ofWavePoint™ ConfigurationImportant: For successful replication of this test for a 2.4GHz WavePoint™, theRequired Materials are needed. Where noted, these materials can be ordered fromFreeWave.Required MaterialsQty Description1 1 foot RF SMA cable2 20dB SMA attenuators2 TNC > SMA couplers (FreeWave Part Number: ECN0313TS)22.4GHz whip stub antennas (FreeWave Part Number: EAN2400SR)900MHz whip stub antennas (FreeWave Part Number: EAN0900SR)Note: 5GHz antennas are not available from FreeWave.RF Cabled Test Procedure1. Connect a laptop to the WavePoint 10e using an Ethernet cable connected to Ethernetport 3 or 4.2. Connect an RF cable between the WavePoint™devices.3. Use attenuators to establish 40 dB of attenuation.4. On the laptop, open a web browser.5. Navigate to the WavePoint 10e default IP address (192.168.1.1).The WavePoint™ Login window opens.6. Enter the admin Username and Password.7. On the Wireless LAN menu, click Radios > Advanced.The Advanced Radio window opens.8. In the Radio table, select the radio to change the power settings and right-click.9. On the right-click menu, select Edit.The Advanced Radio Configuration dialog box opens.LUM0063AA Rev 05/05/2014 Page 157 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Appendix D: Bench Test Verification of WavePoint™ Configuration10. Click the Mode list box arrow and select ng.11. Click the Transmit Power list box arrow and select 5.12. In the Power Constraint text box, enter 5.13. Click Save to save the changes and close the dialog box.14. Log out of the WavePoint 10e Configuration window.15. Repeat Steps 1 to 14 for all WavePoint 10e devices.16. On the laptop, open either a web browser or a Command prompt.17. Verify the connection to all WavePoint 10e devices:lIn the web browser, enter 192.168.1.1 (or the designated WavePoint™IPaddress.lIn the Command prompt, use a Ping command.Successful connection is verified when the WavePoint™ Login window opens when navigatingfrom a web browser to a WavePoint 10e IP address or successful ping responses are received.Open Antenna Test Procedure1. Connect a laptop to the WavePoint 10e using an Ethernet cable connected to Ethernetport 3 or 4.2. Connect the appropriate whip stub antenna to each WavePoint™device.3. On the Wireless LAN menu, click Radios > Advanced.The Advanced Radio window opens.4. In the Radio table, select the radio to change the power settings and right-click.5. On the right-click menu, select Edit.The Advanced Radio Configuration dialog box opens.6. Click the Mode list box arrow and select ng.7. Click the Transmit Power list box arrow and select 5.8. In the Power Constraint text box, enter 5.9. Click Save to save the changes and close the dialog box.10. Log out of the WavePoint 10e Configuration window.11. Repeat Steps 1 to 10 for all WavePoint 10e devices.12. On the laptop, open either a web browser or a Command prompt.13. Verify the connection to all WavePoint 10e devices:Page 158 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10elIn the web browser, enter 192.168.1.1 (or the designated WavePoint™IPaddress.lIn the Command prompt, use a Ping command.Successful connection is verified when the WavePoint™ Login window opens when navigatingfrom a web browser to a WavePoint 10e IP address or successful ping responses are received.LUM0063AA Rev 05/05/2014 Page 159 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 160 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eAppendix E: WavePoint 10e TechnicalSpecificationsSpecifications may change at any time without notice. For the most up-to-date specificationsinformation, see the product's data sheet available at www.freewave.com.WavePoint™ Technical SpecificationsSpecification DescriptionWireless InterfacesNetwork Configurations PTP, PtMP, Fixed Point Mesh, Mobile MeshRF Frequency Support902 to 928 MHz UHF (ITU Region 2)2.41 to 2.47 GHz (ITU ISM band)5.15 to 5.825 GHz (U-NII & ISM bands)800/900 MHz, 1.8/1.9/2.0 GHzCellularRF Modulation TechnologyOFDM: BPSK, QPSK, 16-QAM, 64-QAMWith Adaptive LinkCellular – 3G UMTS/ HSPAOver the Air SecurityWPA, WPA2, WPA-Enterprise,AES-128, 802.11iError Correction FEC, ARQSSID MultipleGPS Yes (optional)RF Interface 4 TNC, FemaleWired InterfacesNetwork Interface4 10/100 Base-TX (RJ-45) Ethernet3 LAN Ports, 1 WAN PortSerial Interface 2 RS-232, DCE, RJ-45LUM0063AA Rev 05/05/2014 Page 161 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Appendix E: WavePoint 10e Technical SpecificationsWavePoint™ Technical SpecificationsSpecification Description1 RS-485, RJ-45USB Interface Micro USB, Type B for configurationLAN / WAN802.3 and 802.3u, IPv4, TCP, UDP, ICMPDHCP Server and Client, NATVLAN Up to 4 VLAN pass-throughLAN SecurityRADIUS, X.509 Certificates,MAC Filtering with ACLIPsec, AES-128, AES-256, SSH, SSH-2ManagementSNMP v2 and v3, WebGUI, HTTP/HTTPSRIP v1/v2, STP,* RSTP,* DNS, NAT, NTPQoS 802.1p/qEnclosure / PowerDimensions241mm x 51mm x 165mm(9.5" x 2.0" x 6.5")Weight 1.9kg (4.25lbs.)Material Aluminum, Powder coated finishMounting Options DIN Rail, BracketsInput Voltage 10 to 30VDC / 802.3at, PoE+ (optional)Power Consumption 10W to 24W, configuration dependentStatus LEDs Power, GPS, Radio 1 through 4Environmental / ComplianceOperating Temperature -35°C to +65°CHumidity 0 to 95% non-condensingESDEN 61000-4-2 with 15kV air and 8kVcontact dischargePage 162 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
WavePoint 10eWavePoint™ Technical SpecificationsSpecification DescriptionShock and Vibration ETSI EN 300 019-2-4, 4M3Transportation ISTA 3ACompliance RoHS, WEEE, DFSWireless Approvals FCC Part 15.247, IC RSS-210Warranty 1 YearProduct SafetyStandards EN 60079-0:2012 + A11:2013 and EN 60079-15:2010Labeling InformationII 3 GExnAIICT4GcDEMKO 14 ATEX 1306XLUM0063AA Rev 05/05/2014 Page 163 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
Page 164 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
GlossaryAAPAccess Point. A device, such as awireless router, that allows other wirelessdevices to connect to a network or theInternet. Also referred to as a Gateway ifthe device is the point to the wirelessnetwork.DDHCPDynamic Host Configuration Protocol. ADHCP server automatically issues IPaddresses within a specified range todevices on a network. A DHCP clientreceives addressing and otherinformation from the DHCP server.WavePoint 10e can be set up is a DHCPserver.FFQDNFully Qualified Domain Name. Alsoknown as DNS namespace, is a hierarchythat can logically locate a system basedon its domain identifier.IICMPInternet Control Message Protocol. Alsoknown as ICMPv4 and ICMPv6.Networked devices use this protocol tosend error messages.ISPInternet Service Provider.MMIMOMultiple input, multiple output. Use ofmultiple transmitters and receiverantennas to increase data throughput.MMPE EncryptionMicrosoft Point-to-Point Encryption.NNTPNetwork Time Protocol is a protocol thatworks in conjunction with othersynchronization utilities to ensure that allcomputers on a given network agree onthe time.PPPPoEPoint-to-Point Protocol over Ethernet. Anetwork configuration used forestablishing a PPP connection usinganEthernet protocol.PPTPPoint-to-Point Tunneling Protocol. Anetworking standard used for connectingto VPNs. The Point-to-Point ProtocolWavePoint 10eLUM0063AA Rev 05/05/2014 Page 165 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
(PPP) is wrapped inside the TCP/IPprotocol, allowing for a secureconnection.PVIDPort VLAN ID.RRogue APAny access point that is installed in anetwork that is not authorized foroperation within that network.RSTPRapid Spanning Tree Protocol.SSTPSpanning Tree Protocol. A linkmanagement protocol for access controlbridges. STP provides path redundancywhile preventing bridge loops created bymultiple active paths between points.TTCP/IPTransmission Control Protocol/InternetProtocol. A protocol for communicationbetween computers. Used as a standardfor transmitting data over networks and asthe basis for standard Internet protocols.WWPAWi-Fi Protected Access. Anauthentication protocol used to protectwireless networks from unauthorizedaccess.Page 166 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.Glossary
IndexAaccessories 20antennas, FCC certified 23authentication certificatesabout 139self certificates 141trusted 139Bbinding IP addresses 54Ccertificates, authenticationabout 139self certificates 140-141trusted 139configuration pages, overview 34configurationsidentifying 21current settings, backing up 131Ddate and timeNTP server setup 143setting 143troubleshooting 149device mode 47DHCP server, enabling 39Ffactory default settings 123, 133, 151firmwareupgrading 130IIC notifications 3installation 153Internet connectionsDHCP 44PPPoE 45static IP 43troubleshooting 147introduction 17Kkey features 18LLANIPv4 setupIP address 38subnet mask 38WavePoint 10eLUM0063AA Rev 05/05/2014 Page 167 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
legal notificationsIC 3load balancing, WAN 51logging in 32login policies 125logsemailing 136external servers, sending to 138overview 134packet traffic 135SysLog Server, sending to 138system events 134MMAC address filtering 91managementfeatures 18model numbersidentifying 21Nnetwork deployments 31network servicesfeatures 18PPoint-to-Multipoint example configuration 80powerconnecting 30protocol bindings, setting 52Rradiosadvanced settings 85rebooting 133requirements 19RIPv1 and RIPv2 57routingRIP 57static routes 55Routing Information Protocol 57routing mode 47Sschedules, wireless networks 97securityfeatures 19settingsbacking up current settings 131factory defaults 151restoring from file 132softwareupgrading 130static routes 55Page 168 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.Index
Ttemplate files, creating 131time and dateNTP server setup 143setting 143troubleshootingdate and time 149Internet connection 147Uuser groupsdeleting 128policies 128browser 126IP 127login 125usersadding 129deleting 130editing 129VVLANsassociating port traffic 62enabling 59mapping to LAN subnets 60VPN tunnelsconfiguring 109WWAN setupDHCP 44failover 50load balancing 51MTU size 49multiple WANs 42, 50-51physical settings 49port binding 52port speed 49port traffic 52PPPoE 45PPTP 46responding to Ping 49static 43warranty 2web pages, overview 34wireless networksavailability 97configuring 82modes 18Point-to-Multipoint example con-figurations 80schedules 97WavePoint 10eLUM0063AA Rev 05/05/2014 Page 169 of 171This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.
securityauthorized access list 91EAP authentication 95MAC address restrictions 92RADIUS servers 95rogue access point detection 94virtual APs 89Page 170 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.Index
Page 171 of 171 LUM0063AA Rev 05/05/2014This document is the property of FreeWave Technologies, Inc. and contains proprietary information owned byFreeWave®. This document cannot be reproduced in whole or in part by any means without written permission fromFreeWave Technologies, Inc.

Navigation menu