Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
— For 64-bit encryption, an encryption key is 10 hexadecimal characters (0-9 and A-F) or 5 ASCII characters
(see ASCII Character Chart).
— For 128-bit encryption, an encryption key is 26 hexadecimal characters or 13 ASCII characters.
— For 152-bit encryption, an encryption key is 32 hexadecimal characters or 16 ASCII characters.
•
Encryption Transmit Key: select Key 0, Key 1, Key 2, or Key 3
NOTE: When VLAN tagging is enabled, only Key 0 can be configured.
•
802.1x Station:
•
Authentication Mode: 802.1x
•
Cipher: WEP
•
Encryption Key Length: 64 or 128 Bits.
— If 802.1x is enabled simultaneously with WEP, the 802.1x Station’s encryption key length is determined by
the WEP encryption key.
•
•
•
•
WPA Station:
•
Authentication Mode: 802.1x
•
Cipher: TKIP
WPA-PSK Station:
•
Authentication Mode: PSK
•
Cipher: TKIP
•
PSK Passphrase: an 8-63 character user-defined phrase. It is recommended a passphrase of at least 13
characters, including both letters and numbers, and upper and lower case characters, be used to ensure that
the generated key cannot be easily deciphered by network infiltrators.
802.11i Station:
•
Authentication Mode: 802.1x
•
Cipher: CCMP based on AES
802.11i-PSK Station:
•
Authentication Mode: PSK
•
Cipher: CCMP based on AES
•
PSK Passphrase: an 8-63 character user-defined phrase. It is recommended a passphrase of at least 13
characters, including both letters and numbers, and upper and lower case characters, to ensure that the
generated key cannot be easily deciphered by network infiltrators.
5. When finished configuring all parameters, click OK.
6. If you selected a Security Mode of 802.1x Station, WPA Station, or 802.11i Station, you must configure a RADIUS
802.1x/EAP server. See the Configuring Radius Profiles section.
Security Profile 1 will be used by default for all wireless interfaces.
7. Reboot the AP.
116
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
Figure 4-49 Security Profile Table - Add Entries
117
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
MAC Access
The MAC Access sub-tab allows you to build a list of stations, identified by their MAC addresses, authorized to access
the network through the AP. The list is stored inside each AP within your network. Note that you must reboot the AP for
any changes to the MAC Access Control Table to take effect. Up to 1000 entries can be made in the table.
The “MAC ACL Status” parameter (configurable on the SSID/VLAN/Security > Wireless sub-tab) is per VLAN if VLAN
Management is enabled. All other parameters besides “MAC ACL Status” are configured per AP, even if VLAN is
enabled.
The following list details the configurable MAC Access parameters.
NOTE: MAC Access Control status is controlled on the SSID/VLAN/Security > Wireless sub-tab. When set to Strict,
changes to the MAC ACL table will take effect immediately, without a unit reboot. When not set to Strict, changes
will not take effect until the unit is rebooted.
•
•
Operation Type: Choose between Passthru and Block. This determines how the stations identified in the MAC
Access Control Table are filtered.
–
If set to Passthru, only the addresses listed in the Control Table will pass through the bridge.
–
If set to Block, the bridge will block traffic to or from the addresses listed in the Control Table.
MAC Access Control Table: Click Add to create a new entry. Click Edit to change an existing entry. Each entry
contains the following field:
–
MAC Address: Enter the wireless client’s MAC address.
–
Comment: Enter an optional comment such as the client’s name.
–
Status: The entry is enabled automatically when saved (so the Status field is only visible when editing an entry).
You can also disable or delete entries by changing this field’s value.
NOTE: For larger networks that include multiple Access Points, you may prefer to maintain this list on a centralized
location using the MAC Access Control Via RADIUS Authentication.
Figure 4-50 MAC Access Configuration Screen
118
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
Wireless
Each SSID can have its own Security Profile that defines its security mode, authentication mechanism, and encryption,
so that customers can have multiple types of clients (non-WEP, WEP, 802.1x, WPA, WPA-PSK, 802.11i, 802.11i-PSK) on
the same system separated per VLAN. See the Security Profile section for more information. Each SSID can support a
unique VLAN. In order for the AP to support multiple SSID/VLANs, VLAN Tagging must be enabled. These parameters
are configurable on the Wireless screens.
Configuring an SSID/VLAN with VLAN Tagging Disabled
With VLAN tagging disabled (from the SSID/VLAN/Security > Mgmt VLAN tab), only one SSID can be configured. All
parameters set on the Wireless tab will be applied to that SSID.
1. Click SSID/VLAN/Security > Wireless.
The SSID, VLAN, and Security Configuration page is displayed.
Figure 4-51 SSID, VLAN, and Security Configuration (VLAN Tagging Disabled)
2. Enable or disable RADIUS accounting on the VLAN/SSID by selecting Enable or Disable from the Accounting
Status drop-down menu.
3. Control the functionality of RADIUS MAC Authentication on the VLAN/SSID by selecting one of the following from the
the RADIUS Authentication Status drop-down menu.
119
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
•
Enable: MAC addresses in the MAC Access Control List stored on the RADIUS server are blocked or allowed,
based on the MAC ACL settings. If a higher priority authentication protocol is also enabled, the higher-priority
settings will override the MAC ACL settings. See Authentication Protocol Hierarchy.
•
Disable: RADIUS MAC ACL settings are disabled.
•
Strict: RADIUS MAC ACL settings are enabled. If a higher-priority authentication protocol is also enabled,
RADIUS MAC ACL settings will be applied in addition to the higher priority authentication protocol settings. See
Authentication Protocol Hierarchy.
4. Control the functionality of the MAC Access Control List on the VLAN/SSID by selecting one of the following from the
MAC ACL Status drop-down menu:
•
Enable: MAC addresses in the MAC Access Control List are blocked or allowed, based on the MAC ACL settings.
If a higher priority authentication protocol is also enabled, the higher-priority settings will override the MAC ACL
settings. See Authentication Protocol Hierarchy.
•
Disable: MAC ACL settings are disabled.
•
Strict: MAC ACL settings are enabled. If a higher-priority authentication protocol is also enabled, MAC ACL
settings will be applied in addition to the higher priority authentication protocol settings. See Authentication
Protocol Hierarchy. When MAC ACL Status is set to Strict, changes to the MAC ACL table (configured on the MAC
Access page) will take effect without a device reboot.
5. Enter Rekeying Interval in seconds (between 300 and 65525). When set to 0, this parameter is disabled. The default
is 900 seconds.
6. Enter the Security Profile used by the VLAN in the Security Profile field. See the Security Profile section for more
information.
7. Define the RADIUS Server Profile Configuration for the VLAN/SSID:
•
RADIUS MAC Authentication Profile
•
RADIUS EAP Authentication Profile
•
RADIUS Accounting Profile
If 802.1x, WPA, or 802.11i security mode is used, the RADIUS EAP Authentication Profile must have a value.
A RADIUS Server Profile for authentication for each VLAN shall be configured as part of the configuration options
for that VLAN. RADIUS profiles are independent of VLANs. The user can define any profile to be the default and
associate all VLANs to that profile. Four profiles are created by default, “MAC Authentication”, “EAP
Authentication”, Accounting”, and “Management”
8. If desired, scroll down to the scroll down to the SSID and VLAN Table and click Edit to modify the Network Name,
VLAN ID, or QoS profile of the SSID/VLAN.
NOTE: Because VLAN tagging is disabled, attempting to add a new SSID/VLAN will produce an error message.
The Edit Entries screen will be displayed. See Figure 4-52.
120
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
Figure 4-52 SSID/VLAN Edit Entries Screen (VLAN Tagging Disabled)
9. Enter a unique Network Name (SSID) between 1 and 32 characters. This parameter is mandatory.
NOTE: Do not use quotation marks (single or double) in the Network Name; this will cause the AP to misinterpret the
name.
10.Enter a unique VLAN ID. This parameter is mandatory.
•
A VLAN ID is a number from -1 to 4094. A value of -1 means that an entry is “untagged.”
•
You can set the VLAN ID to “-1” or “untagged” if you do not want clients that are using a specific SSID to be
members of a VLAN workgroup.
•
The VLAN ID must match an ID used by your network; contact your network administrator if you need assistance
defining the VLAN IDs.
11. Specify a QoS profile. See the Policy section for more information.
12.Select the status of Closed System to control whether the SSID is advertised in the beacon and manage the way
probe requests are handled, as follows:
•
Enable: The SSID is not advertised in the beacon, and the AP will respond to probe requests with an SSID only if
the client has specified the SSID in the probe request. If the client sends a probe request with a null or “ANY”
SSID, the AP will not respond.
•
Partial: The SSID is advertised in the beacon, and the AP will not respond to "ANY" SSID requests. The Partial
setting reduces network traffic by eliminating the repeated broadcast of SSIDs in probe responses.
•
Disable: The SSID is advertised in the beacon, and the AP will respond with each configured SSID, whether or
not an SSID has been specified in the probe request.
13.Enable Broadcast Unique Beacon using the drop-down menu. When enabled, Broadcast Unique Beacon allows the
broadcast of a up to four unique beacons when the AP is configured for multiple SSIDs. If Closed System (above) is
set to Partial or Disable, each beacon (up to four) will be broadcast a single SSID. If more than four SSIDs are
121
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
configured, then three SSIDs will be broadcast in individual beacons; the fourth and subsequent SSIDs will be
combined in one beacon and will not be broadcast. If Closed System is set to Enable, the SSID will not be broadcast
in the beacon. If Broadcast Unique Beacon is disabled, a combined beacon will be broadcast.
NOTE: Enabling Broadcast Unique Beacon will lower the total throughput of the AP by 2-4%. Enabling Broadcast
Unique Beacon simultaneously with Rogue Scan will cause a drift in the beacon interval and the occasional
missing of beacons.
14.Set the 802.1p Priority given to packets tagged with this VLAN ID. Enter a number between 0-7.
15.If editing an entry, enable or disable the parameters on this page by electing Enable or Disable from the Status
drop-down menu. If adding a new entry, this drop-down menu will not appear.
16.Click OK to return to Wireless Security Configuration Screen.
17.Reboot the AP.
Configuring SSID/VLANs with VLAN Tagging Enabled
With VLAN Tagging enabled (from the SSID/VLAN/Security > Mgmt VLAN tab), multiple SSID/VLANs are supported.
Parameters set on the Wireless tab can be enabled per SSID by choosing the Enable Security per SSID option.
1. Click SSID/VLAN/Security > Wireless.
2. Select the Enable Security Per SSID option. The screen will update to the following:
Figure 4-53 SSID/VLAN Configuration (VLAN Tagging Enabled)
NOTE: If you disable (uncheck) the Enable Security per SSID option, you will be able to add multiple SSID/VLANs,
but the same configuration parameters (described below) will applied to all of them.
122
Advanced Configuration
SSID/VLAN/Security
AP-700 User Guide
3. Click Add to configure additional SSIDs, VLANs, and their associated security profiles and RADIUS server profiles, or
click Edit to modify existing SSIDs.
The Add Entries or Edit Entries screen appears. See Figure 4-54.
Figure 4-54 SSID/VLAN Edit Entries Screen (VLAN Tagging Enabled)
4. Enter a unique Network Name (SSID) between 1 and 32 characters. This parameter is mandatory.
NOTE: Do not use quotation marks (single or double) in the Network Name; this will cause the AP to misinterpret the
name.
5. Enter a unique VLAN ID. This parameter is mandatory.
•
A VLAN ID is a number from -1 to 4094. A value of -1 means that an entry is “untagged.”
•
You can set the VLAN ID to “-1” or “untagged” if you do not want clients that are using a specific SSID to be
members of a VLAN workgroup. Only one “untagged” VLAN ID is allowed per interface.
123
Advanced Configuration
SSID/VLAN/Security
•
AP-700 User Guide
The VLAN ID must match an ID used by your network; contact your network administrator if you need assistance
defining the VLAN IDs.
6. Select the status of Closed System to control whether the SSID is advertised in the beacon and manage the way
probe requests are handled, as follows:
•
Enable: The SSID is not advertised in the beacon, and the AP will respond to probe requests with an SSID only if
the client has specified the SSID in the probe request. If the client sends a probe request with a null or “ANY”
SSID, the AP will not respond.
•
Partial: The SSID is advertised in the beacon, and the AP will not respond to "ANY" SSID requests. The Partial
setting reduces network traffic by eliminating the repeated broadcast of SSIDs in probe responses.
•
Disable: The SSID is advertised in the beacon, and the AP will respond with each configured SSID, whether or
not an SSID has been specified in the probe request.
7. Enable Broadcast Unique Beacon using the drop-down menu. When enabled, Broadcast Unique Beacon allows the
broadcast of a up to four unique beacons when the AP is configured for multiple SSIDs. If Closed System (above) is
set to Partial or Disable, each beacon (up to four) will be broadcast a single SSID. If more than four SSIDs are
configured, then three SSIDs will be broadcast in individual beacons; the fourth and subsequent SSIDs will be
combined in one beacon and will not be broadcast. If Closed System is set to Enable, the SSID will not be broadcast
in the beacon. If Broadcast Unique Beacon is disabled, a combined beacon will be broadcast.
NOTE: Enabling Broadcast Unique Beacon will lower the throughput of the AP by 2-4%. Enabling Broadcast Unique
Beacon simultaneously with Rogue Scan will cause a drift in the beacon interval and the occasional missing of
beacons.
8. Enable or disable the SSID Authorization status from the drop-down menu. SSID Authorization is the RADIUS-based
authorization of the SSID for a particular client. The authorized SSIDs are sent as the tunnel attributes.
9. Enable or disable RADIUS accounting on the VLAN/SSID under the Accounting Status drop-down menu.
10.Enable or disable RADIUS MAC authentication status on the VLAN/SSID under the RADIUS Authentication Status
drop-down menu.
11. Enable or disable MAC Access Control List status on the VLAN/SSID under the MAC ACL Status drop-down menu.
12.Enter the Rekeying Interval in seconds (between 300 and 65525). When set to 0, this parameter is disabled. The
default is 900 seconds.
13.Enter the Security Profile used by the VLAN in the Security Profile field.
NOTE: If you have two or more SSIDs per interface using a Security Profile with a security mode of Non Secure, be
aware that security being applied in the VLAN is not being applied in the wireless network.
14.Define the RADIUS Server Profile Configuration for the VLAN/SSID:
•
RADIUS MAC Authentication Profile
•
RADIUS EAP Authentication Profile
•
RADIUS Accounting Profile
If 802.1x, WPA, or 802.11i security mode is used, the RADIUS EAP Authentication Profile must have a value.
A RADIUS Server Profile for authentication for each VLAN shall be configured as part of the configuration options for
that VLAN. RADIUS profiles are independent of VLANs. The user can define any profile to be the default and
associate all VLANs to that profile. Four profiles are created by default, “MAC Authentication”, “EAP Authentication”,
Accounting”, and “Management”.
15.Specify a QoS Profile. See the Policy section for more information.
16.Set the 802.1p Priority given to packets tagged with this VLAN ID. Enter a number between 0-7.
17.If editing an entry, enable or disable the parameters on this page using Status drop-down menu. If adding a new entry,
this drop-down menu will not appear.
18.Reboot the AP.
124
AP-700 User Guide
Monitoring
This chapter discusses the following monitoring options:
•
Version: Provides version information for the Access Point’s system components.
•
ICMP: Displays statistics for Internet Control Message Protocol packets sent and received by the AP.
•
IP/ARP Table: Displays the AP’s IP Address Resolution table.
•
Learn Table: Displays the list of nodes that the AP has learned are on the network.
•
IAPP: Provides statistics for the Inter-Access Point Protocol messages sent and received by the AP.
•
RADIUS: Provides statistics for the configured RADIUS server(s).
•
Interfaces: Displays the Access Point’s interface statistics (Wireless and Ethernet).
•
Station Statistics: Displays statistics for stations and Wireless Distribution System links.
•
Mesh Statistics: Displays statistics for the Mesh portal, including the network topology and the Neighbor Table. This
page is not relevant to the AP-700.
To monitor the AP using the HTTP/HTTPS interface, you must first log in to a web browser. See Logging In for
instructions.
You may also monitor the AP using the command line interface. See Command Line Interface (CLI) for more information
To monitor the AP via HTTP/HTTPS:
1. Click the Monitor button located on the left-hand side of the screen. The main Monitor screen will be displayed.
Figure 5-1 Monitor Main Screen
2. Click the tab that corresponds to the statistics you want to review. For example, click Learn Table to see the list of
nodes that the AP has discovered on the network.
3. If necessary, click the Refresh
button to update the statistics.
Each Monitor tab is described in the remainder of this chapter.
125
Monitoring
Version
AP-700 User Guide
Version
From the HTTP interface, click the Monitor button and select the Version tab. The list displayed provides you with
information that may be pertinent when calling Technical Support. With this information, your Technical Support
representative can verify compatibility issues and make sure the latest software are loaded. This screen displays the
following information for each Access Point component:
•
Serial Number: The component’s serial number, if applicable.
•
Name/ID: The AP identifies a system component based on its name or ID. Each component has a unique identifier.
•
Variant: Several variants may exist of the same component (for example, a hardware component may have two
variants, one with more memory than the other).
•
Version: Specifies the component’s version or build number. The Software Image version is the most useful
information on this screen for the typical end user.
Figure 5-2 Version Monitoring Tab
126
Monitoring
ICMP
AP-700 User Guide
ICMP
This tab provides statistical information for both received and transmitted messages directed to the AP. Not all ICMP
traffic on the network is counted in the ICMP (Internet Control Message Protocol) statistics.
Figure 5-3 ICMP Monitoring Tab
127
Monitoring
IP/ARP Table
AP-700 User Guide
IP/ARP Table
This tab provides information based on the Address Resolution Protocol (ARP), which relates MAC Address and IP
Addresses.
Figure 5-4 IP/ARP Table Monitoring Tab
128
Monitoring
Learn Table
AP-700 User Guide
Learn Table
This tab displays information relating to network bridging. It reports the MAC address for each node that the device has
learned is on the network and the interface on which the node was detected. There can be up 10,000 entries in the Learn
Table.
Figure 5-5 Learn Table Monitoring Tab
129
Monitoring
IAPP
AP-700 User Guide
IAPP
This tab displays statistics relating to client handovers and communications between Access Points.
Figure 5-6 IAPP Monitoring Tab
130
Monitoring
RADIUS
AP-700 User Guide
RADIUS
This tab provides RADIUS authentication, EAP/802.1x authentication, and accounting information for both the Primary
and Backup RADIUS servers for each RADIUS Server Profile.
NOTE: Separate RADIUS servers can be configured for each RADIUS Server Profile.
Select the RADIUS Server Profile to view statistics on from the Select Server Profile drop-down menu.
Figure 5-7 RADIUS Monitoring Tab
131
Monitoring
Interfaces
AP-700 User Guide
Interfaces
This tab displays statistics for the Ethernet and wireless interfaces.
Figure 5-8 Interface Monitoring Tab (Ethernet)
Description of Interface Statistics
The following statistics are displayed for the Ethernet interface only, the wireless interface only, or for both the Ethernet
and Wireless interfaces:
•
Admin Status (Ethernet/Wireless): The desired state of the interface: Up (ready to pass packets), Down (not ready to
pass packets, or Testing (testing and unable to pass packets).
•
Alignment Error (Ethernet): The number of frames received that are not an integral number of octets in length and do
not pass the Frame Check Sequence check.
•
Carrier Sense Errors (Ethernet): The number of times that the carrier sense condition was lost or never asserted
when attempting to transmit a frame. The count increments at most once per transmission attempt.
•
Deferred Transmission (Ethernet): The number of frames for which the first transmission attempt is delayed because
the medium is busy.This number does not include frames involved in collisions.
•
Description (Ethernet/Wireless): Information about the interface (e.g., the name of the manufacturer, the product
name and the version of the hardware interface).
•
Duplicate Frame Count (Wireless): The number of duplicate frames received.
132
Monitoring
Interfaces
AP-700 User Guide
•
Ethernet Chipset (Ethernet): Identifies the chipset used to realize the interface.
•
Excessive Collisions (Ethernet): The number of frames for which transmission fails due to excessive collisions.
•
Failed ACK Count (Wireless): The number of times an acknowledgment (or ACK) is not received when expected.
•
Failed Count (Wireless): The number of packets not transmitted successfully due to too many transmit attempts.
•
Failed RTS Count (Wireless: The number of times a Clear to Send (CTS) is not received in response to a Request to
Send (RTS).
•
FCS Error (Wireless): The number of Frame Check Sequence errors detected in received MAC Protocol Data Units
(MPDUs).
•
FCS Errors (Ethernet): The number of frames received that are an integral number of octets in length but do not pass
the Frame Check Sequence check.
•
Frames Too Long (Ethernet): The number of frames received that exceed the maximum permitted frame size.
•
In Discards (Ethernet/Wireless): The number of error-free inbound packets that were chosen to be discarded to
prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be
to free up buffer space.
•
In Errors (Ethernet/Wireless): The number of inbound packets that contained errors preventing them from being
deliverable to a higher-layer protocol.
•
In Non-unicast Packets (Ethernet/Wireless): The number of non-unicast (i.e., subnetwork-broadcast or
subnetwork-multicast) packets delivered to a higher-layer protocol.
•
In Octets (bytes) (Ethernet/Wireless): The total number of octets received on the interface, including framing
characters.
•
In Unicast Packets (Ethernet/Wireless): The number of subnetwork unicast packets delivered to a higher-layer
protocol.
•
Internal MAC Receive Errors (Ethernet): The number of frames for which reception fails due to an internal MAC
sublayer transmit error. A frame is only counted if it is not counted by the Frames Too Long, Alignment Error, or FCS
Error counters.
•
Internal MAC Transmit Errors (Ethernet): The number of frames for which transmission fails due to an internal MAC
sublayer transmit error. A frame is only counted if it is not counted by Late Collision, Excession Collision, or Carrier
Sense Error counters.
•
Last Change (Ethernet/Wireless): The value of the sysUpTime object at the time the interface entered its current
operational state.
•
Late Collisions (Ethernet): The number of times that a collision is detected on a particular interface later than 512
bit-times into the transmission of a packet
•
MAC Address (Wireless): The station's assigned, unique MAC address,
•
Maximum Packet Size (Ethernet/Wireless): The size (in octets) of the largest datagram which can be sent/received
•
MIB Specific Definition (Ethernet/Wireless): A reference to MIB definitions specific to the particular media being
used to realize the interface. For example, if the interface is an Ethernet interface, then this field refers to a document
defining objects specific to ethernet.
•
Multicast Received Frame Count (Wireless): The number of multicast packets received.
•
Multicast Transmitted Frame Count (Wireless): The number of multicast packets transmitted.
•
Multiple Collision Frames (Ethernet): The number of successfully transmitted frames for which transmission is
inhibited by more than one collision.
•
Multiple Retry Count (Wireless): The number of packets successfully transmitted after more than one
retransmission.
•
Operational Status (Ethernet/Wireless): The current state of the interface: Up (ready to pass packets), Down (not
ready to pass packets, or Testing (testing and unable to pass packets).
•
Out Discards (Ethernet/Wireless): The number of error-free outbound packets chosen to be discarded to prevent
their being transmitted. One possible reason for discarding such a packet could be to free up buffer space.
133
Monitoring
Interfaces
AP-700 User Guide
•
Out Errors (Ethernet/Wireless): The number of outbound packets that could not be transmitted because of errors.
•
Out Non-unicast Packets (Ethernet/Wireless): The total number of packets that higher-level protocols requested be
transmitted to a non-unicast (i.e., a subnetwork-broadcast orsubnetwork-multicast) address, including those that were
discarded or not sent.
•
Out Octets (bytes) (Ethernet/Wireless): The total number of octets transmitted out of the interface, including framing
characters.
•
Out Unicast Packets (Ethernet/Wireless): The total number of packets that higher-level protocols requested be
transmitted to a subnetwork-unicast address, including those that were discarded or not sent.
•
Output Queue Length (Ethernet/Wireless): The length of the output packet queue (in packets).
•
Physical Address (Ethernet): The interface's address at the protocol layer immediately below the network layer in the
protocol stack.
•
Received Fragment Count (Wireless): The number of successfully received Data or Management MAC Protocol
Data Units (MPDUs).
•
Retry Count (Wireless): The number of packets successfully transmitted after one or more retransmissions.
•
Single Collision Frames (Ethernet): The number of successfully transmitted frames for which transmission is
inhibited by exactly one collision
•
Speed (Ethernet/Wireless): An estimate of the interface's current bandwidth in bits per second.
•
SQE Test Errors (Ethernet): The number of times that the Signal Quality Error (SQE) Test Error message is
generated by the physical layer signalling (PLS) sublayer.
•
Successful RTS Count (Wireless): The number of times a Clear to Send (CTS) is received in response to an
Request to Send (RTS).
•
Transmitted Fragment Count (Wireless): The number of transmitted fragmented packets.
•
Transmitted Frame Count (Wireless): This number of successfully transmitted packets.
•
Type (Ethernet/Wireless): The type of interface, distinguished according to the physical/link protocol(s) immediately
below the network layer in the protocol stack.
•
Unknown Protocols (Ethernet/Wireless): The number of packets received that were discarded because of an
unknown or unsupported protocol.
•
WEP Undecryptable Count (Wireless): The number of undecryptable WEP frames received.
134
Monitoring
Station Statistics
AP-700 User Guide
Station Statistics
This tab displays information on wireless clients attached to the AP and on Wireless Distribution System.
Enable the Monitoring Station Statistics feature (Station Statistics are disabled by default) by checking Enable
Monitoring Station Statistics and click OK.
You do not need to reboot the AP for the changes to take effect. If clients are connected to the device or WDS links are
configured for the device, the statistics will now be shown on the screen. Click Select to view the more detailed statistics
for a client.
Click on the Refresh button in the browser window to view the latest statistics. If any new clients associate to the AP, you
can see the statistics of the new clients after you click the refresh button.
Figure 5-9 Station Statistics Monitoring Tab
Description of Station Statistics
The following stations statistics are displayed:
•
MAC Address: The MAC address of the wireless client for which the statistics are gathered. For WDS links, this is the
partner MAC address of the link.
•
IP Address: The IP address of the associated wireless station for which the Statistics are gathered. (0.0.0.0 for WDS
links)
•
Interface to which the Station is connected: The interface number on which the client is connected with the AP. For
WDS links this is the interface on which the link is configured.
•
MAC Protocol: The MAC protocol for this wireless client (or WDS link partner). The possible values are 802.11a,
802.11b, 802.11g.
•
Signal / Noise: The Signal /Noise Level measured at the AP when frames are received from the associated wireless
station (or WDS link partner).
135
Monitoring
Station Statistics
AP-700 User Guide
•
Time since Last Frame Received: The time elapsed since the last frame from the associated wireless station (or
WDS link partner) was received.
•
Number of Stations and WDS Links: The number of stations and WDS links monitored.
The following stations statistics are available through SNMP:
•
Octets Received: The number of octets received from the associated wireless station (or WDS link partner) by the
AP.
•
Unicast Frames Received: The number of Unicast frames received from the associated wireless station (or WDS link
partner) by the AP.
•
Non-Unicast Frames Received: The number of Non-Unicast frames received (i.e. broadcast or multicast) from the
associated wireless station (or WDS link partner) by the AP.
•
Octets Transmitted: The number of octets sent to the associated wireless station (or WDS link partner) from the AP.
•
Unicast Frames Transmitted: The number of Unicast frames transmitted to the associated wireless station (or WDS
link partner) from the AP.
136
Monitoring
Mesh Statistics
AP-700 User Guide
Mesh Statistics
As the AP-700 does not support Mesh functionality, this tab contains no information. Visit www.proxim.com for
information on Mesh.
Figure 5-10 Mesh Monitoring Tab
137
AP-700 User Guide
Commands
This chapter contains information on the following Command functions:
•
Introduction to File Transfer via TFTP or HTTP: Describes the available file transfer methods.
•
Update AP: Download files via TFTP or HTTP to the AP.
•
Retrieve File: Upload configuration files from the AP to a TFTP server.
•
Reboot: Reboot the AP in the specified number of seconds.
•
Reset: Reset all of the Access Point’s configuration settings to factory defaults.
•
Help Link: Configure the location where the AP Help files can be found.
To perform commands using the HTTP/HTTPS interface, you must first log in to a web browser. See Logging In for
instructions.
You may also perform commands using the command line interface. See Command Line Interface (CLI) for more
information.
To perform commands via HTTP/HTTPS:
1. Click the Commands button located on the left-hand side of the screen.
Figure 6-1 Commands Main Screen
2. Click the tab that corresponds to the command you want to issue. For example, click Reboot to restart the unit.
Following a brief introduction to TFTP and HTTP file transfer, each Commands tab is described in the remainder of this
chapter.
138
Commands
Introduction to File Transfer via TFTP or HTTP
AP-700 User Guide
Introduction to File Transfer via TFTP or HTTP
There are two methods of transferring files to or from the AP: TFTP or HTTP (or HTTPS if enabled):
•
Downloading files (Configuration, AP Image, Bootloader, License, Private Key, Certificate, CLI Batch File) to the AP
using one of these two methods is called “Updating the AP.”
•
Uploading files (Configuration, CLI Batch File, etc) from the AP is called “Retrieving Files.”
TFTP File Transfer Guidelines
A TFTP server must be running and configured to point to the directory containing the file.
If you do not have a TFTP server installed on your system, install the TFTP server from the installation CD.
HTTP File Transfer Guidelines
HTTP file transfer can be performed either with or without SSL enabled.
HTTP file transfers with SSL require enabling Secure Management and Secure Socket Layer. HTTP transfers that use
SSL may take additional time.
NOTE: SSL requires Internet Explorer version 6, 128 bit encryption, Service Pack 1, and patch Q323308.
Image Error Checking During File Transfer
The Access Point performs checks to verify that an image downloaded through HTTP or TFTP is valid. The following
checks are performed on the downloaded image:
•
Zero Image size
•
Large image size
•
Non VxWorks image
•
AP image
•
Digital signature verification
If any of the above checks fail on the downloaded image, the Access Point deletes the downloaded image and retains the
old image. Otherwise, if all checks pass successfully, the AP deletes the old image and retains the downloaded image.
These checks are to ensure that the AP does not enter an invalid image state. The storage of the two images is only
temporary to ensure the proper verification; the two images will not be stored in the AP permanently.
Image error checking functions automatically in the background. No user configuration is required.
139
Commands
Update AP
AP-700 User Guide
Update AP
Update AP via TFTP
Use the Update AP via TFTP tab to download Configuration, AP Image, Bootloader files, Certificate and Private Key files,
and CLI Batch File to the AP. A TFTP server must be running and configured to point to the directory containing the file.
Figure 6-2 Update AP via TFTP Command Screen
If you do not have a TFTP server installed on your system, install the TFTP server from the installation CD. You can either
install the TFTP server from the CD Wizard or run OEM-TFTP-Server.exe found in the CD’s Xtras/SolarWinds
sub-directory.
The Update AP via TFTP tab shows version information and allows you to enter TFTP information as described below.
•
Server IP Address: Enter the TFTP server IP Address.
–
Double-click the TFTP server icon on your desktop and locate the IP address assigned to the TFTP server.
NOTE: This is the IP address that will be used to point the Access Point to the AP Image file.
•
File Name: Enter the name of the file to be downloaded (including the file extension).
–
•
Copy the file to the TFTP server’s root folder.
File Type: Select the proper file type. Choices include:
–
Config: configuration information, such as System Name, Contact Name, and so on.
NOTE: The AP will reboot automatically when downloading a Config file.
–
Image: AP Image (executable program).
–
Upgrade BspBl: Bootloader software.
–
SSL Certificate: the digital certificate for authentication in SSL communications.
–
SSL Private Key: the private key for encryption in SSL communications.
–
SSH Public Key: the public key in SSH communications. See Secure Shell (SSH) Settings for more information.
–
SSH Private Key: the private key in SSH communications. See Secure Shell (SSH) Settings for more information.
140
Commands
Update AP
–
•
AP-700 User Guide
CLI Batch File: a CLI Batch file that contains CLI commands to configure the AP. This file will be executed by the
AP immediately after being uploaded. See CLI Batch File for more information.
File Operation: Select either Update AP or Update AP & Reboot. You should reboot the AP after downloading files.
Update AP via HTTP
Use the Update AP via HTTP tab to download Configuration, AP Image, Bootloader files, and Certificate and Private Key
files to the AP.
Once on the Update AP screen, click on the via HTTP tab.
Figure 6-3 Update AP via HTTP Command Screen
The Update AP via HTTP tab shows version information and allows you to enter HTTP information as described below.
1. Select the File Type that needs to be updated from the drop-down box. Choices include:
–
Image for the AP Image (executable program).
–
Config for configuration information, such as System Name, Contact Name, and so on.
NOTE: The AP will reboot automatically when downloading a Config file.
–
SSL Certificate: the digital certificate for authentication in SSL communications.
–
SSL Private Key: the private key for encryption in SSL communications.
–
Upgrade BSPBL: the Bootloader software.
–
CLI Batch File: a CLI Batch file that contains CLI commands to configure the AP. This file will be executed by the
AP immediately after being uploaded. See CLI Batch File for more information.
–
SSH Public Key: the public key in SSH communications. See Secure Shell (SSH) Settings for more information.
–
SSH Private Key: the private key in SSH communications. See Secure Shell (SSH) Settings for more information.
2. Use the Browse button or manually type in the name of the file to be downloaded (including the file extension) in the
File Name field. If typing the file name, you must include the full path and the file extension in the file name text box.
3. To initiate the HTTP Update operation, click the Update AP button.
A warning message gets displayed that advises the user that a reboot of the device will be required for changes to
take effect.
141
Commands
Update AP
AP-700 User Guide
Figure 6-4 Warning Message
4. Click OK to continue with the operation or Cancel to abort the operation.
NOTE: An HTTP file transfer using SSL may take extra time.
If the operation completes successfully the following screen appears.
Figure 6-5 Update AP Successful
If the operation did not complete successfully the following screen appears, and the reason for the failure is displayed.
Figure 6-6 Update AP Unsuccessful
142
Commands
Retrieve File
AP-700 User Guide
Retrieve File
Retrieve File via TFTP
Use the Retrieve File via TFTP tab to upload files from the AP to the TFTP server. The TFTP server must be running
and configured to point to the directory to which you want to copy the uploaded file. We suggest you assign the file a
meaningful name, which may include version or location information.
If you don’t have a TFTP server installed on your system, install the TFTP server from the installation CD. You can either
install the TFTP server from the CD Wizard or run OEM-TFTP-Server.exe found in the CD’s Xtras/SolarWinds
sub-directory.
The Retrieve AP via TFTP tab shows version information and allows you to enter TFTP information as described below.
•
Server IP Address: Enter the TFTP server IP Address.
–
Double-click the TFTP server icon on your desktop and locate the IP address assigned to the TFTP server.
•
File Name: Enter the name of the file to be uploaded.
•
File Type: Select the type of file to be uploaded: Config file, CLI Batch File, or CLI Batch (Error) Log.
Use the following procedure to retrieve a file from an AP to a TFTP server:
1. If retrieving a Config file, configure all the required parameters in their respective tabs. Reboot the device.
2. Retrieve and store the file. Click the Retrieve File button to initiate the upload of the file from the AP to the TFTP
server.
3. If you retrieved a Configuration file, update the file as necessary.
4. If you retrieved a CLI Batch File or CLI Batch Log, you can examine the file using a standard text editor. For more
information on CLI Batch Files, see CLI Batch File.
Figure 6-7 Retrieve File via TFTP Command Screen
143
Commands
Retrieve File
AP-700 User Guide
Retrieve File via HTTP
Use the Retrieve File via HTTP tab to retrieve configuration files, CLI Batch Files, or CLI Batch Logs from the AP. For
more information on CLI Batch Files and CLI Batch Logs see CLI Batch File.
1. Select the type of file (Config, CLI Batch File, CLI Batch Log) from the File Type drop-down menu.
2. Click on the Retrieve File button to initiate the operation.
Figure 6-8 Retrieve File via HTTP Command Screen
A confirmation message is displayed, asking if the user wants to proceed with retrieving the file.
Figure 6-9 Retrieve File Confirmation Dialog
3. Click OK to continue with the operation or Cancel to abort the operation. On clicking OK, the File Download window
appears.
144
Commands
Retrieve File
AP-700 User Guide
Figure 6-10 File Download Dialog Box
4. On clicking the Save button the Save As window displays. Select an appropriate filename and location and click OK.
145
Commands
Reboot
AP-700 User Guide
Reboot
Use the Reboot tab to save configuration changes (if any) and reset the AP. Enter a value between 0 and 65535
seconds; entering a value of 0 (zero) seconds causes an immediate reboot. Note that Reset, described below, does not
save configuration changes.
CAUTION: Rebooting the AP will cause all users who are currently connected to lose their connection to the network
until the AP has completed the restart process and resumed operation.
Figure 6-11 Reboot Command Screen
146
Commands
Reset
AP-700 User Guide
Reset
Use the Reset tab to restore the AP to factory default conditions. Since this will reset the AP’s current IP address, a new
IP address must be assigned. See Initialization for more information.
CAUTION: Resetting the AP to its factory default configuration will permanently overwrite all changes that have made to
the unit. The AP will reboot automatically after this command has been issued.
Figure 6-12 Reset to Factory Defaults Command Screen
147
Commands
Help Link
AP-700 User Guide
Help Link
Use the Help tab to configure the location of the AP Help files.
During initialization, the AP on-line help files are downloaded to the default location:
C:/Program Files/ORiNOCO/AP700/HTML/index.htm.
To enable the Help button on each page of the Web interface to access the help files, however, copy the entire Help
folder to a web server, then specify the new HTTP path in the Help Link box.
NOTE: The configured Help Link must point to an HTTP address in order to enable the Help button on each page of the
Web interface.
NOTE: Use the forward slash character ("/") rather than the backslash character ("\") when configuring the Help Link
location.
NOTE: Add the AP’s management IP address into the Internet Explorer list of Trusted Sites.
Figure 6-13 Help Link Configuration Screen
148
AP-700 User Guide
Troubleshooting
This chapter provides information on the following:
•
Troubleshooting Concepts
•
Symptoms and Solutions
•
Recovery Procedures
•
Related Applications
NOTE: This section helps you locate problems related to the AP device setup. For details about RADIUS, TFTP, serial
communication programs (such as HyperTerminal), Telnet applications, or web browsers, please see the
documentation that came with the respective application for assistance.
Troubleshooting Concepts
The following list identifies important troubleshooting concepts and topics. The most common initialization and
installation problems relate to IP addressing. For example, you must have valid IP addresses for both the AP and the
management computer to access the unit’s HTTP interface.
•
IP Address management is fundamental.
•
Factory default units are set for “Dynamic” (DHCP) IP Address assignment. The default IP address for the AP is
169.254.128.132 if your network does not have a DHCP server. If you connect the AP to a network with an active
DHCP server, then use ScanTool to locate the IP address of your unit. If a DHCP server is not active on your subnet,
then use ScanTool to assign a static IP address to the unit.
•
The Trivial File Transfer Protocol (TFTP) provides a means to download and upload files. These files include
the AP Image (executable program) and configuration files.
•
If the AP password is lost or forgotten, you will need to reset to default values. The Soft Reset to Factory
Defaults or Hard Reset to Factory Defaults procedures reset the configuration, but do not change the current AP
Image.
•
The AP Supports a Command Line Interface (CLI). If you are having trouble locating your AP on the network,
connect to the unit directly using the serial interface and see Command Line Interface (CLI) for CLI command syntax
and parameter names.
•
ScanTool does not work over routers. You must be connected to the same subnet/physical LAN segment to use
ScanTool. Note that ScanTool also works over the wireless interface; you can run it on a wireless client connected to
the target AP or an AP connected to the same LAN segment/subnet.
•
If all else fails… Use the Forced Reload procedure to erase the current AP Image and configuration file and then
download a new image.
149
Troubleshooting
Symptoms and Solutions
AP-700 User Guide
Symptoms and Solutions
Connectivity Issues
Connectivity issues include any problem that prevents you from powering up or connecting to the AP.
AP Unit Will Not Boot - No LED Activity
1. Make sure your power source is operating.
2. Make sure all cables are connected to the AP correctly.
3. If you are using PoE, make sure you are using a Category 5, foiled, twisted pair cable to power the AP.
Serial Link Does Not Work
1. Make sure you are using a standard, straight-through, 9-pin serial cable.
2. Double-check the physical network connections.
3. Make sure your PC terminal program (such as HyperTerminal) is active and configured to the following values:
–
Com Port: (COM1, COM2, etc. depending on your computer);
–
Baud rate: 9600; Data bits: 8; Stop bits: 1; Flow Control: None; Parity: None;
–
Line Feeds with Carriage Returns
(In HyperTerminal select: File > Properties > Settings > ASCII Setup > Send Line Ends with Line Feeds)
Ethernet Link Does Not Work
1. Double-check the physical network connections. Use a known-good unit to make sure the network connection is
present. Once you have the AP IP address, you can use the “Ping” command over Ethernet to test the IP Address. If
the AP responds to the Ping, then the Ethernet Interface is working properly.
2. By default, the Access Point will attempt to automatically detect the Ethernet settings. However, if you are having
problems with the Ethernet link, manually configure the Access Point’s Ethernet settings. For example, if your switch
operates at 100 Mbits/sec/Full Duplex, manually configure the Access Point to use these settings (see Ethernet). If
you cannot access the unit over Ethernet, then use the CLI interface over the serial port to configure the Ethernet port
(see Command Line Interface (CLI) and Set Ethernet Speed and Transmission Mode).
3. Perform network infrastructure troubleshooting (check switches, routers, etc.).
Basic Software Setup and Configuration Problems
Lost AP, Telnet, or SNMP Password
1. Perform the Soft Reset to Factory Defaults in this guide. This procedure resets system and network parameters, but
does not affect the AP Image. The default AP HTTP, Telnet, and SNMP passwords are all public.
Client Computer Cannot Connect
1. Client computers should have the same Network Name and security settings as the AP.
2. Network Names should be allocated and maintained by the Network Administrator.
3. See the documentation that came with your client card for additional troubleshooting suggestions.
AP Has Incorrect IP Address
1. Default IP Address Assignment mode is dynamic (DHCP). If you do not have a DHCP server on your network, the
default IP Address is 169.254.128.132. If you have more than one unintialized AP connected to the network, they will
all have the same default IP address and you will not be able to communicate with them (due to an IP address
conflict). In this case, assign each AP a static IP address via the serial cable or turn off all units but one and change
the IP address using ScanTool one at a time.
150
Troubleshooting
Symptoms and Solutions
AP-700 User Guide
2. The AP only contacts a DHCP server during boot-up. If your network’s DHCP server is not available while the AP is
booting, the device will use the default IP address (169.254.128.132). Reboot the AP once your DHCP server is
on-line again or use the ScanTool to find the Access Point’s current IP address.
3. To find the unit’s current IP address if using DHCP, open the IP Client Table in the DHCP Server and match the
Access Point’s IP address to its MAC address (found on the product label). Alternatively, use ScanTool to identify an
Access Point’s current IP address.
4. Once you have the current IP address, use the HTTP or CLI Interface to change the unit’s IP settings, if necessary.
5. If you use static IP Address assignments, and cannot access the unit over Ethernet, use the Initializing the IP Address
using CLI procedure. Once the IP Address is set, you can use the Ethernet Interface to complete configuration.
6. Perform the Soft Reset to Factory Defaults in this guide. This will reset the unit to “DHCP” mode. If there is a DHCP
Server on the network, the DHCP Server will assign an IP Address to the AP.
HTTP Interface or Telnet Interface Does Not Work
1. Make sure you are using a compatible browser:
–
Microsoft Internet Explorer 6 with Service Pack 1 or later
–
Netscape 7.1 or later
2. Make sure you have the proper IP address. Enter your Access Point’s IP Address in the browser address bar, similar
to this example:
http://192.168.1.100
When the Enter Network Password window appears, leave the User Name field empty and enter the HTTP
password in the Password field. The default HTTP password is public.
3. Use the CLI over the serial port to check the IP Access Table, which can be restricting access to Telnet and HTTP.
HTML Help Files Do Not Appear
1. Verify that the HTML Help files are installed in the default directory:
C:/Program Files/ORiNOCO/AP700/HTML.
If the Help files are not located in this folder, contact your network administrator to find out where the Help files are
located on your server.
2. Copy the entire folder to your Web server.
3. Perform the following steps to specify the path for the Help files:
a. Click the Commands button in the HTTP interface.
b. Select the Help tab located at the top of the screen.
c. Enter the pathname where the Help files are located in the Help Link box. This must be an HTTP address.
d. Click OK.
Telnet CLI Does Not Work
1. Make sure you have the proper IP Address. Enter your AP IP address in the Telnet connection dialog, from a DOS
prompt, type:
C:\> telnet
2. Use the CLI over the serial port to check the IP Access Table, which can be restricting access to Telnet and HTTP.
TFTP Server Does Not Work
1. Make sure the TFTP Server has been started.
2. Verify the IP address of the TFTP Server. The server may be local or remote, so long as it has a valid IP address.
3. Configure the TFTP Server to “point” to the folder containing the file to be downloaded (or to the folder in which the file
is to be uploaded).
4. Verify that you have entered the proper AP Image file name (including the file extension) and directory path (if
needed).
151
Troubleshooting
Symptoms and Solutions
AP-700 User Guide
5. If you have a problem uploading a file, verify that the TFTP server is configured to allow uploads (typically the default
setting is to allow only downloads).
Client Connection Problems
Client Software Finds No Connection
Make sure you have configured your client software with the proper Network Name and Security settings. Network
Names and WEP Keys are typically allocated and maintained by your network administrator.
Client PC Card Does Not Work
1. Make sure you are using the latest PC Card driver software.
2. Download and install the latest ORiNOCO client software from http://support.proxim.com.
Intermittent Loss of Connection
1. Make sure you are within range of an active AP.
2. You can check the signal strength using the signal strength gauge on your client software.
Client Does Not Receive an IP Address - Cannot Connect to Internet
1. If the AP is configured as a DHCP server, open the Web-browser Interface and select the Configure button and then
the Network tab to make sure the proper DHCP settings are being used.
2. If you are not using the DHCP server feature on the AP, then make sure that your local DHCP server is accessible
from the Access Point’s subnet.
3. If using PoE, make sure you are not using a crossover Ethernet cable between the AP and the hub.
VLAN Operation Issues
Verifying Proper Operation of the VLAN Feature
The correct VLAN configuration can be verified by “pinging” both wired and wireless hosts from both sides of the AP
device and the network switch. Traffic can be “sniffed” on both the wired (Ethernet) and wireless (WDS) backbones (if
configured). Bridge frames generated by wireless clients and viewed on one of the backbones should contain IEEE
802.1Q compliant VLAN headers or tags. The VLAN ID in the headers should correspond to one of the VLAN User IDs
configured for the AP.
NOTE: The AP-700 supports 16 VLAN/SSID pairs, each with a configured security profile.
VLAN Workgroups
The correct VLAN assignment can be verified by pinging the AP to ensure connectivity, by pinging the switch to ensure
VLAN properties, and by pinging hosts past the switch to confirm the switch is functional. Ultimately, traffic can be
“sniffed” on the Ethernet or WDS interfaces (if configured) using third-party packages. Most problems can be avoided by
ensuring that 802.1Q compliant VLAN tags containing the proper VLAN ID have been inserted in the bridged frames. The
VLAN ID in the header should correspond to the user’s assigned network name.
What if network traffic is being directed to a nonexistent host?
•
All sessions are disconnected, traffic is lost, and a Forced Reload is necessary.
•
Workaround: you can configure the switch to mimic the nonexistent host.
I have just configured the Management ID and now I can't manage the AP?
•
Check to ensure your password is correct. If your password is incorrect or all inbound packets do NOT have the
correct tag, then a Forced Reload is necessary.
152
Troubleshooting
Symptoms and Solutions
AP-700 User Guide
CAUTION: The Forced Reload procedure disconnects all users and resets all values to factory defaults.
Power-Over-Ethernet (PoE)
The AP Does Not Work
1. Verify that you are using a standard UTP Category 5 cable.
2. Try a different port on the same PoE hub (remember to move the input port accordingly) – if it works, there is probably
a faulty port or bad RJ-45 port connection.
3. If possible, try to connect the AP to a different PoE hub.
4. Try using a different Ethernet cable – if it works, there is probably a faulty connection over the long cable, or a bad
RJ-45 connection.
5. Check power plug and hub.
6. If the Ethernet link goes down, check the cable, cable type, switch, and hub.
There Is No Data Link
1. Verify that the indicator for the port is “on.”
2. Verify that the PoE hub is connected to the Ethernet network with a good connection.
3. Verify that the Ethernet cable is Category 5 or better and is less than 100 meters (approximately 325 feet) in length
from the Ethernet source to the AP.
4. Try to connect a different device to the same port on the PoE hub – if it works and a link is established, there is
probably a faulty data link in the AP.
5. Try to re-connect the AP to a different output port (remember to move the input port accordingly) – if it works, there is
probably a faulty output or input port in the PoE hub or a bad RJ-45 connection.
“Overload” Indications
1. Verify that you are not using a cross-over cable between the PoE output port and the AP.
2. Verify that there is no short over any of the twisted pair cables.
3. Move the device into a different output port (remember to move the input port accordingly); if it works, there is
probably a faulty port or bad RJ-45 connection.
153
Troubleshooting
Recovery Procedures
AP-700 User Guide
Recovery Procedures
The most common installation problems relate to IP addressing. For example, without the TFTP server IP Address, you
will not be able to download a new AP Image to the AP. IP Address management is fundamental. We suggest you create
a chart to document and validate the IP addresses for your system.
If the password is lost or forgotten, you will need to reset the AP to default values. The Soft Reset to Factory Defaults and
Hard Reset to Factory Defaults procedures reset configuration settings, but do not change the current AP Image.
If the AP has a corrupted software image, follow the Forced Reload procedure to erase the current AP Image and
download a new image.
Soft Reset to Factory Defaults
Use this procedure to reset the network configuration values, including the password, IP address, and subnet mask. The
current AP Image is not deleted.
1. Click Commands > Reset.
2. Click Reset to Factory Default; the device is reset to its factory default state.
3. If not using DHCP, use the ScanTool or use CLI over a serial connection to set the IP address, subnet mask, and other
IP parameters. See Command Line Interface (CLI) for CLI information.
If you do not have access to the HTTP or CLI interfaces, use the procedure described in Hard Reset to Factory Defaults.
Hard Reset to Factory Defaults
If you cannot access the unit or you have lost its password, you can reset the unit to the factory default settings using the
Reload button on the unit, as described below.
1. Using the end of a paper clip or pin, depress and hold the Reload button on the back of the unit for a minimum of 5
seconds but no more than 10 seconds. The configuration is deleted from the unit and the unit reboots, using a factory
default configuration.
NOTE: You need to use a pin or the end of a paperclip to press the button.
CAUTION: If you hold the Reload button for longer than 20 seconds, you may go into Forced Reload mode, which
erases the unit’s embedded software. This software must be reloaded through an Ethernet connection
with access to a TFTP server. See Forced Reload below for instructions.
2. If not using DHCP, use the ScanTool or use CLI over a serial connection to set the IP address, subnet mask, and other
IP parameters. See Command Line Interface (CLI) for CLI information.
Forced Reload
With Forced Reload, you bring the unit into bootloader mode by erasing the embedded software. Use this procedure only
as a last resort if the unit does not boot and the procedure did not help.
CAUTION: By completing this procedure, the embedded software in the AP will be erased. You will need to reload the
software before the unit is operational.
To do a forced reload:
1. While the unit is running, use a pin or the end of a paperclip to press the RESET button.
The AP reboots and the indicators begin to flash.
2. Press and hold the RELOAD button for about 20 seconds until the POWER LED turns amber.
The AP deletes the current AP Image.
3. Follow one of the procedures below to load a new AP Image to the Access Point:
–
Download a New Image Using ScanTool
154
Troubleshooting
Recovery Procedures
–
AP-700 User Guide
Download a New Image Using the Bootloader CLI
Because the CLI option requires a physical connection to the unit’s serial port, Proxim recommends the ScanTool
option.
Download a New Image Using ScanTool
To download the AP Image, you will need an Ethernet connection to the computer on which the TFTP server resides and
to a computer that is running ScanTool (this is either two separate computers connected to the same network or a single
computer running both programs).
ScanTool detects if an Access Point does not have a valid software image installed. In this case, the TFTP Server and
Image File Name parameters are enabled in the ScanTool’s Change screen so you can download a new image to the
unit. (These fields are grayed out if ScanTool does not detect a software image problem.)
Preparing to Download the AP Image
Before starting, you need to know the Access Point’s IP address, subnet mask, the TFTP Server IP Address, and the AP
Image file name. Make sure the TFTP server is running and configured to point to the folder containing the image to be
downloaded.
Download Procedure
Follow these steps to use ScanTool to download a software image to an Access Point with a missing image:
1. Download the latest software from http://support.proxim.com. See Download the Software for more detailed
instructions.
1. Copy the latest software updates to your TFTP server.
2. Launch ScanTool.
3. Highlight the entry for the AP you want to update and click Change.
4. Set IP Address Type to Static.
NOTE: You need to assign static IP information temporarily to the Access Point since its DHCP client functionality is not
available when no image is installed on the device.
5. Enter an unused IP address that is valid on your network in the IP Address field. You may need to contact your
network administrator to get this address.
6. Enter the network’s Subnet Mask in the field provided.
7. Enter the network’s Gateway IP Address, if necessary. You may need to contact your network administrator to get
this address. You should only need to enter the default gateway address (169.254.128.133) if the Access Point and
the TFTP server are separated by a router.
8. Enter the IP address of your TFTP server in the field provided.
9. Enter the Image File Name (including the file extension). Enter the full directory path and file name. If the file is
located in the default TFTP directory, you need enter only the file name.
10.Click OK.
The Access Point will reboot and the download will begin automatically. You should see downloading activity begin
after a few seconds within the TFTP server’s status screen.
11. Click OK when prompted that the device has been updated successfully to return to the Scan List screen.
12.Click Cancel to close the ScanTool.
13.When the download process is complete, configure the AP.
Download a New Image Using the Bootloader CLI
To download the AP Image, you will need an Ethernet connection to the computer on which the TFTP server resides.
This can be any computer on the LAN or connected to the AP with a cross-over Ethernet cable.
155
Troubleshooting
Recovery Procedures
AP-700 User Guide
You must also connect the AP to a computer with a standard serial cable and use a terminal client, such as
HyperTerminal. From the terminal, enter CLI Commands to set the IP address and download an AP Image.
Preparing to Download the AP Image
Before starting, you need to know the Access Point’s IP address, subnet mask, the TFTP Server IP Address, and the AP
Image file name. Make sure the TFTP server is running and configured to point to the folder containing the image to be
downloaded.
Download Procedure
1. Download the latest software from http://support.proxim.com. See Download the Software for more detailed
instructions.
2. Copy the latest software updates to your TFTP server’s default directory.
3. Use a straight-through serial cable to connect the Access Point’s serial port to your computer’s serial port.
4. Open your terminal emulation program (like HyperTerminal) and set the following connection properties:
•
Com Port:
•
Baud rate: 9600
•
Data Bits: 8
•
Stop bits: 1
•
Flow Control: None
•
Parity: None
5. Under File > Properties > Settings > ASCII Setup, enable the Send line ends with line feeds option.
HyperTerminal sends a line return at the end of each line of code.
6. Press the RESET button on the AP.
The terminal display shows Power On Self Tests (POST) activity. After approximately 30 seconds, a message
indicates: Sending Traps to SNMP manager periodically. After this message appears, press the ENTER key
repeatedly until the following prompt appears:
[Device name]>
7. Enter only the following statements:
[Device name]> show (to view configuration parameters and values)
[Device name]> set ipaddrtype static
[Device name]> set ipaddr
[Device name]> set ipsubmask
[Device name]> set tftpipaddr
[Device name]> set tftpfilename
[Device name]> set ipgw
[Device name]> show (to confirm your new settings)
[Device name]> reboot
Example:
[Device name]> show
[Device name]> set ipaddrtype static
[Device name]> set ipaddr 10.0.0.12
[Device name]> set ipsubmask 255.255.255.0
[Device name]> set tftpipaddr 10.0.0.20
[Device name]> set tftpfilename MyImage.bin
[Device name]> set ipgw 10.0.0.30
156
Troubleshooting
Recovery Procedures
AP-700 User Guide
[Device name]> show
[Device name]> reboot
The AP will reboot and then download the image file. You should see downloading activity begin after a few seconds
within the TFTP server’s status screen.
8. When the download process is complete, configure the AP.
Setting IP Address using Serial Port
Use the following procedure to set an IP address over the serial port using the CLI. The network administrator typically
provides the AP IP address.
Hardware and Software Requirements
•
Standard straight-through serial data (RS-232) cable (not included with shipment).
•
ASCII Terminal software, such as HyperTerminal.
Attaching the Serial Port Cable
1. Connect one end of the serial cable to the AP and the other end to a serial port on your computer.
2. Power on the computer and AP, if necessary.
Initializing the IP Address using CLI
After installing the serial port cable, you may use the CLI to communicate with the AP. CLI supports most generic terminal
emulation programs, such as HyperTerminal (which is included with the Windows operating systems). In addition, many
web sites offer shareware or commercial terminal programs you can download. Once the IP address has been assigned,
you can use the HTTP interface or the CLI over Telnet to complete configuration.
Follow these steps to assign the AP an IP address:
1. Open your terminal emulation program (like HyperTerminal) and set the following connection properties:
•
Com Port:
•
Baud rate: 9600
•
Data Bits: 8
•
Stop bits: 1
•
Flow Control: None
•
Parity: None
2. Under File > Properties > Settings > ASCII Setup, enable the Send line ends with line feeds option.
HyperTerminal sends a line return at the end of each line of code.
3. Press the RESET button on the AP.
The terminal display shows Power On Self Tests (POST) activity, and then displays a CLI prompt, similar to the
example below. This process may take up to 90 seconds.
[Device name]> Please enter password:
4. Enter the CLI password (default is public).
The terminal displays a welcome message and then the CLI Prompt:
[Device name]>
5. Enter show ip. Network parameters appear:
157
Troubleshooting
Recovery Procedures
AP-700 User Guide
Figure 7-1 Result of “show ip” CLI Command
6. Change the IP address and other network values using set and reboot CLI commands, similar to the example below
(use your own IP address and subnet mask). Note that IP Address Type is set to Dynamic by default. If you have a
DHCP server on your network, you should not need to manually configure the Access Point’s IP address; the Access
Point will obtain an IP address from the network’s DHCP server during boot-up.
After each entry the CLI reminds you to reboot; however wait to reboot until all commands have been entered.
[Device name]> set ipaddrtype static
[Device name]> set ipaddr
[Device name]> set ipsubmask
[Device name]> set ipgw
[Device name]> show ip (to confirm your new settings)
[Device name]> reboot 0
7. After the AP reboots, verify the new IP address by reconnecting to the CLI and enter a show ip command.
Alternatively, you can ping the AP from a network computer to confirm that the new IP address has taken effect.
8. When the proper IP address is set, use the HTTP interface or CLI over Telnet to configure the rest of the unit’s
operating parameters.
158
Troubleshooting
Related Applications
AP-700 User Guide
Related Applications
RADIUS Authentication Server
If you enabled RADIUS Authentication on the AP, make sure that your network’s RADIUS servers are operational.
Otherwise, clients will not be able to log in. There are several reasons the authentication server services might be
unavailable, here are two typical things to check:
•
Make sure you have the proper RADIUS authentication server information setup configured in the AP. Check the
RADIUS Authentication Server’s Shared Secret and Destination Port number (default is 1812; for RADIUS
Accounting, the default is 1813).
•
Make sure the RADIUS authentication server RAS setup matches the AP.
TFTP Server
The “Trivial File Transfer Protocol” (TFTP) server allows you to transfer files across a network. You can upload
configuration files from the AP for backup or copying, and you can download configuration files or new software images.
The TFTP software is located on the installation CD.
If a TFTP server is not configured and running, you will not be able to download and upload images and configuration
files to/from the AP. Remember that the TFTP server does not have to be local, so long as you have a valid TFTP IP
address. Note that you do not need a TFTP server running unless you want to transfer files to or from the AP.
After the TFTP server is installed:
•
Check to see that TFTP is configured to point to the directory containing the AP Image.
•
Make sure you have the proper TFTP server IP Address, the proper AP Image file name, and that the TFTP server is
connected.
•
Make sure the TFTP server is configured to both Transmit and Receive files (on the TFTP server’s Security tab), with
no automatic shutdown or time-out (on the Auto Close tab).
159
AP-700 User Guide
Command Line Interface (CLI)
This section discusses the following:
•
General Notes
•
Command Line Interface (CLI) Variations
•
CLI Command Types
•
Using Tables and Strings
•
Configuring the AP using CLI commands
•
CLI Monitoring Parameters
•
Parameter Tables
•
CLI Batch File
CLI commands can be used to initialize, configure, and manage the Access Point.
•
CLI commands may be entered in real time through a keyboard or submitted with CLI scripts.
•
A CLI Batch file is a user-editable configuration file that provides a user-friendly way to change the AP configuration
through a file upload. The CLI Batch file is an ASCII file that facilitates Auto Configuration because it does not require
the user to access one of the AP’s management interfaces to make configuration changes as is required with the
proprietary LTV format configuration file.
•
The CLI is available through both the Serial Port interface and over the Ethernet interface using Telnet.
NOTE: All CLI commands and parameters are case-sensitive.
160
Command Line Interface (CLI)
General Notes
AP-700 User Guide
General Notes
Prerequisite Skills and Knowledge
To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts,
network access infrastructures, and client-server relationships. In addition, you should be familiar with software setup
procedures for typical network operating systems and servers.
Notation Conventions
•
Computer prompts are shown as constant width type. For example: [Device-Name]>
•
Information that you input as shown is displayed in bold constant width type. For example:
[Device name]> set ipaddr 10.0.0.12
•
The names of keyboard keys, software buttons, and field names are displayed in bold type. For example: Click the
Configure button.
•
Screen names are displayed in bold italics. For example, the System Status screen.
Important Terminology
•
Configuration Files - Database files containing the current Access Point configuration. Configuration items include the
IP Address and other network-specific values. Config files may be downloaded to the Access Point or uploaded for
backup or troubleshooting.
•
Download vs. Upload - Downloads transfer files to the Access Point. Uploads transfer files from the Access Point. The
TFTP server performs file transfers in both directions.
•
Group - A logical collection of network parameter information. For example, the System Group is composed of several
related parameters. Groups can also contain Tables. All items for a given Group can be displayed with a show
CLI Command.
•
Image File - The Access Point software executed from RAM. To update an Access Point you typically download a new
Image File. This file is often referred to as the “AP Image”.
•
Parameter - A fundamental network value that can be displayed and may be changeable. For example, the Access
Point must have a unique IP Address and the Wireless interface must be assigned an SSID. Change parameters with
the CLI set Command, and view them with the CLI show Command.
•
Table - Tables hold parameters for several related items. For example, you can add several potential managers to the
SNMP Table. All items for a given Table can be displayed with a show
CLI Command.
•
TFTP - Refers to the TFTP Server, used for file transfers.
Navigation and Special Keys
This CLI supports the following navigation and special key functions to move the cursor along the prompt line.
Key Combination
Delete or Backspace
Ctrl-A
Ctrl-E
Ctrl-F
Ctrl-B
Ctrl-D
Ctrl-U
Ctrl-P
Ctrl-N
Ctrl-W
Operation
Delete previous character
Move cursor to beginning of line
Move cursor to end of line
Move cursor forward one character
Move cursor back one character
Delete the character the cursor is on
Delete all text to left of cursor
Go to the previous line in the history buffer
Go to the next line in the history buffer
Delete the previous word
161
Command Line Interface (CLI)
General Notes
Key Combination
Tab
AP-700 User Guide
Operation
Complete the command line
List available commands
CLI Error Messages
The following table describes the error messages associated with improper inputs or expected CLI behavior.
Error Message
Syntax Error
Invalid Command
Invalid Parameter Name
Invalid Parameter Value
Invalid Table Index
Invalid Table Parameter
Invalid Table Parameter Value
Read Only Parameter
Incorrect Password
Download Unsuccessful
Upload Unsuccessful
Description
Invalid syntax entered at the command prompt.
A non-existent command has been entered at the command prompt.
An invalid parameter name has been entered at the command prompt.
An invalid parameter value has been entered at the command prompt.
An invalid table index has been entered at the command prompt.
An invalid table parameter has been entered at the command prompt.
An invalid table parameter value has been entered at the command prompt.
User is attempting to configure a read-only parameter.
An incorrect password has been entered in the CLI login prompt.
The download operation has failed due to incorrect TFTP server IP Address or file
name.
The upload operation has failed due to incorrect TFTP server IP Address or file
name.
162
Command Line Interface (CLI)
Command Line Interface (CLI) Variations
AP-700 User Guide
Command Line Interface (CLI) Variations
Administrators use the CLI to control Access Point operation and monitor network statistics. The AP supports two types
of CLI: the Bootloader CLI and the normal CLI. The Bootloader CLI provides a limited command set, and is used when
the current AP Image is bad or missing. The Bootloader CLI allows you to assign an IP Address and download a new
image. Once the image is downloaded and running, the Access Point uses the normal CLI. This guide covers the normal
CLI unless otherwise specified.
Bootloader CLI
The Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration of the AP. This interface is
only accessible via the serial interface if the AP does not contain a software image or a download image command over
TFTP has failed.
The Bootloader CLI provides you with the ability to configure the initial setup parameters as well as download a software
image to the device.
The following functions are supported by the Bootloader CLI:
•
configuration of initial device parameters using the set command
•
show command to view the device’s configuration parameters
•
help command to provide additional information on all commands supported by the Bootloader CLI
•
reboot command to reboot the device
The parameters supported by the Bootloader CLI (for viewing and modifying) are:
•
System Name
•
IP Address Assignment Type
•
IP Address
•
IP Mask
•
Gateway IP Address
•
TFTP Server IP Address
•
Image File Name (including the file extension)
The following lists display the results of using the help command in the Bootloader CLI:
Figure A-1 Results of “help” bootloader CLI command
The following lists display the results of using the show command in the Bootloader CLI:
163
Command Line Interface (CLI)
Command Line Interface (CLI) Variations
AP-700 User Guide
Figure A-2 Results of “show” bootloader CLI command
164
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
CLI Command Types
This guide divides CLI Commands into two categories: Operational and Parameter Controls.
Operational CLI Commands
These commands affect Access Point behavior, such as downloading, rebooting, and so on. After entering commands
(and parameters, if any) press the Enter key to execute the Command Line.
Operational commands include:
•
?: Typing a question mark lists CLI Commands or parameters, depending on usage (you do not need to type Enter
after typing this command)
•
done, exit, quit: Terminates the CLI session
•
download: Uses a TFTP server to download “image” files, “config” files, “bootloader upgrade” files, a “license” file,
“SSL certificates”, “SSL private keys”, “SSH public keys”, “SSH private keys”, or “CLI Batch Files” to the Access Point
•
help: Displays general CLI help information or command help information, such as command usage and syntax
•
history: Remembers commands to help avoid re-entering complex statements
•
passwd: Sets the Access Point’s CLI password
•
reboot: Reboots the Access Point in the specified time
•
search: Lists the parameters in a specified Table
•
upload: Uses TFTP server to upload “config” files from Access Point to TFTP default directory or specified path
? (List Commands)
This command can be used in a number of ways to display available commands and parameters.
The following table lists each operation and provides a basic example. Following the table are detailed examples and
display results for each operation.
Operation
Display the Command List (Example 1)
Display commands that start with specified letters
(Example 2)
Display parameters for set and show Commands
(Examples 3a and 3b)
Prompt to enter successive parameters for
Commands (Example 4)
Basic Example
[Device-Name]>?
[Device-Name]>s?
[Device-Name]>set ?
[Device-Name]>show ipa?
[Device-Name]>download ?
Example 1. Display Command list
To display the Command List, enter ?.
[Device-Name]>?
Figure A-3 Result of “?” CLI command
165
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
Example 2. Display specific Commands
To show all commands that start with specified letters, enter one or more letters, then ? with no space between letters
and ?.
[Device-Name]>s?
Figure A-4 Result of “s?” CLI command
Example 3. Display parameters for set and show
Example 3a allows you to see every possible parameter for the set (or show) commands. Notice from example 3a that
the list is very long. Example 3b shows how to display a subset of the parameters based on initial parameter letters.
Example 3a. Display every parameter that can be changed
[Device-Name]>set ?
Figure A-5 Result of “set ?” CLI command
Example 3b. Display parameters based on letter sequence
This example shows entries for parameters that start with the letter “i”. The more letters you enter, the fewer the results
returned. Notice that there is no space between the letters and the question mark.
[Device-Name]> show ipa?
Figure A-6 Result of “show ipa?” CLI command
[Device-Name]> show iparp?
166
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
Figure A-7 Result of “show iparp?” CLI command
Example 4. Display Prompts for Successive Parameters
Enter the command, a space, and then ?. Then, when the parameter prompt appears, enter the parameter value. The
parameter is changed and a new CLI line is echoed with the new value (in the first part of the following example, the
value is the IP Address of the TFTP server).
After entering one parameter, you may add another ? to the new CLI line to see the next parameter prompt, and so on
until you have entered all of the required parameters. The following example shows how this is used for the download
Command. The last part of the example shows the completed download Command ready for execution.
[Device-Name]> download ?
[Device-Name]> download 192.168.0.101 ?
[Device-Name]> download 192.168.0.101 apimage ?
[Device-Name]> download 192.168.0.101 apimage img
done, exit, quit
Each of the following commands ends a CLI session:
[Device-Name]> done
[Device-Name]> exit
[Device-Name]> quit
download
Downloads the specified file from a TFTP server to the Access Point. Executing download in combination with the
asterisks character (“*”) will make use of the previously set TFTP parameters. Executing download without parameters
will display command help and usage information.
1. Syntax to download a file:
[Device-Name]>download
Example:
[Device-Name]>download 192.168.1.100 APImage2 img
2. Syntax to display help and usage information:
[Device-Name]>download
3. Syntax to execute the download Command using previously set (stored) TFTP Parameters:
[Device-Name]>download *
167
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
help
Displays instructions on using control-key sequences for navigating a Command Line and displays command information
and examples.
1. Using help as the only argument:
[Device-Name]>help
Figure A-8 Results of “help” CLI command
2. Complete command description and command usage can be provided by:
[Device-Name]>help
[Device-Name]> help
history
Shows content of Command History Buffer. The Command History Buffer stores command statements entered in the
current session. To avoid re-entering long command statements, use the keyboard “up arrow” (Ctrl-P) and “down arrow”
(Ctrl-N) keys to recall previous statements from the Command History Buffer. When the desired statement reappears,
press the Enter key to execute, or you may edit the statement before executing it.
[Device-Name]> history
passwd
Changes the CLI Password.
[Device-Name]> passwd oldpassword newpassword newpassword
reboot
Reboots Access Point after specified number of seconds. Specify a value of 0 (zero) for immediate reboot.
[Device-Name]> reboot 0
[Device-Name]> reboot 30
168
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
search
Lists the parameters supported by the specified table. This list corresponds to the table information displayed in the
HTTP interface. In this example, the CLI returns the list of parameters that make up an entry in the IP Access Table.
[Device-Name]> search mgmtipaccesstbl
Figure A-9 Results of “search mgmtipaccesstbl” CLI command
upload
Uploads a text-based configuration file from the AP to the TFTP Server. Executing upload with the asterisk character
(“*”) will make use of the previously set/stored TFTP parameters. Executing upload without parameters will display
command help and usage information.
1. Syntax to upload a file:
[Device-Name]>upload
Example:
[Device-Name]>upload 192.168.1.100 APconfig.sys config
2. Syntax to display help and usage information:
[Device-Name]>help upload
3. Syntax to execute the upload command using previously set (stored) TFTP Parameters:
[Device-Name]>upload *
Parameter Control Commands
The following sections cover the two Parameter Control Commands (show and set) and include several tables showing
parameter properties. These commands allow you to view (show) all parameters and statistics and to change (set)
parameters.
•
show: To see any Parameter or Statistic value, you can specify a single parameter, a Group, or a Table.
•
set: Use this CLI Command to change parameter values. You can use a single CLI statement to modify Tables, or you
can modify each parameter separately.
“show” CLI Command
Displays the value of the specified parameter, or displays all parameter values of a specified group (parameter table).
Groups contain Parameters and Tables. Tables contain parameters for a series of similar entities.
To see a definition and syntax example, type only show and then press the Enter key. To see a list of available
parameters, enter a question mark (?) after show (example: show ?).
Syntax:
[Device-Name]>show
[Device-Name]>show
[Device-Name]>show
Examples:
[Device-Name]>show ipaddr
169
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
[Device-Name]>show network
[Device-Name]>show mgmtipaccesstbl
“set” CLI Command
Sets (modifies) the value of the specified parameter. To see a definition and syntax example, type only set and then press
the Enter key. To see a list of available parameters, enter a space, then a question mark (?) after set (example: set?).
Syntax:
[Device-Name]>set
[Device-Name]>set
...
Example:
[Device-Name]>set sysloc “Main Lobby”
[Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0
Configuring Objects that Require Reboot
Certain objects supported by the Access Point require a device reboot in order for the changes to take effect. In order to
inform the end-user of this behavior, the CLI provides informational messages when the user has configured an object
that requires a reboot. The following messages are displayed as a result of the configuring such object or objects.
Example 1: Configuring objects that require the device to be rebooted
The following message is displayed every time the user has configured an object that requires the device to be rebooted.
[Device-Name]>set ipaddr 135.114.73.10
The following elements require reboot
ipaddr
Example 2: Executing the “exit”, “quit”, or “done” commands when an object that requires reboot has been
configured
In addition to the above informational message, the CLI also provides a message as a result of the exit, quit, or done
command if changes have been made to objects that require reboot. If you make changes to objects that require reboot
and execute the exit command the following message is displayed:
[Device-Name]>exit OR quit OR done
Modifications have been made to parameters that require the device to be rebooted. These changes will only take effect after the next reboot.
“set” and “show” Command Examples
In general, you will use the CLI show Command to view current parameter values and use the CLI set Command to
change parameter values. As shown in the following examples, parameters may be set individually or all parameters for a
given table can be set with a single statement.
Example 1 - Set the Access Point IP Address Parameter
Syntax:
[Device-Name]>set
Example:
[Device-Name]> set ipaddr 10.0.0.12
IP Address will be changed when you reboot the Access Point. The CLI reminds you when rebooting is required for a
change to take effect. To reboot immediately, enter reboot 0 (zero) at the CLI prompt.
170
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
Example 2 - Create a table entry or row
Use 0 (zero) as the index to a table when creating an entry. When creating a table row, only the mandatory table elements
are required (comment is usually an optional table element). For optional table elements, the default value is generally
applied if you do not specify a value.
Syntax:
[Device-Name]>set
…
Example:
[Device-Name]> set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0
A new table entry is created for IP address 10.0.0.10 with a 255.255.0.0 subnet mask.
Example 3 - Modify a table entry or row
Use the index to be modified and the table elements you would like to modify. For example, suppose the IP Access Table
has one entry and you wanted to modify the IP address:
[Device-Name]>set mgmtipaccesstbl 1 ipaddr 10.0.0.11
You can also modify several elements in the table entry. Enter the index number and specific table elements you would
like to modify. (Hint: Use the search Command to see the elements that belong to the table.)
[Device-Name]>set mgmtipaccesstbl 1 ipaddr 10.0.0.12 ipmask 255.255.255.248
cmt “First Row”
Example 4 - Enable, Disable, or Delete a table entry or row
The following example illustrates how to manage the second entry in a table.
Syntax:
[Device-Name]>set
index status
[Device-Name]>set
index status <1=enable, 2=disable, 3=delete>
Example:
[Device-Name]>set
[Device-Name]>set
[Device-Name]>set
[Device-Name]>set
mgmtipaccesstbl
mgmtipaccesstbl
mgmtipaccesstbl
mgmtipaccesstbl
status
status
status
status
enable
disable
delete
NOTE: You may need to enable a disabled table entry before you can change the entry’s elements.
Example 5 - Show the Group Parameters
This example illustrates how to view all elements of a group or table.
Syntax:
[Device-Name]> show
Example:
[Device-Name]>show network
The CLI displays network group parameters. Note show network and show ip return the same data.
171
Command Line Interface (CLI)
CLI Command Types
AP-700 User Guide
Figure A-10 Results of “show network” and “show ip” CLI Commands
Example 6 - Show Individual and Table Parameters
1. View a single parameter.
Syntax:
[Device-Name]>show
Example:
[Device-Name]> show ipaddr
Displays the Access Point IP address.
Figure A-11 Result of “show ipaddr” CLI Command
2. View all parameters in a table.
Syntax:
[Device-Name]> show
Example: [Device-Name]> show mgmtipaccesstbl
The CLI displays the IP Access Table and its entries.
172
Command Line Interface (CLI)
Using Tables and Strings
AP-700 User Guide
Using Tables and Strings
Working with Tables
Each table element (or parameter) must be specified, as in the example below.
[Device-Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 ipmask 255.255.0.0
Below are the rules for creating, modifying, enabling/disabling, and deleting table entries.
•
•
•
•
Creation
–
The table name is required.
–
The table index is required – for table entry/instance creation the index is always zero (0).
–
The order in which the table arguments or objects are entered in not important.
–
Parameters that are not required can be omitted, in which case they will be assigned the default value.
Modification
–
The table name is required.
–
The table index is required – to modify the table, “index” must be the index of the entry to be modified.
–
Only the table objects that are to be modified need to be specified. Not all the table objects are required.
–
If multiple table objects are to be modified the order in which they are entered is not important.
–
If the entire table entry is to be modified, all the table objects have to be specified.
Enabling/Disabling
–
The table name is required.
–
The table index is required – for table enabling/disabling the index should be the index of the entry to be
enabled/disabled.
–
The entry’s new state (either “enable” or “disable”) is required.
Deletion
–
The table name is required.
–
The table index is required – for table deletion the index should be the index of the entry to be deleted.
–
The word “delete” is required.
Using Strings
Since there are several string objects supported by the AP, a string delimiter is required for the strings to be interpreted
correctly by the command line parser. For this CLI implementation, the single quote or double quote character can be
used at the beginning and at the end of the string.
For example:
[Device-Name]> set sysloc Lobby - Does not need quote marks
[Device-Name]> set sysloc “Front Lobby” - Requires quote marks.
The scenarios supported by this CLI are:
“My Desk in the office”
‘My Desk in the office’
“My ‘Desk’ in the office”
‘My “Desk” in the office’
“Daniel’s Desk in the office”
‘Daniel”s Desk in the office’
Double Quotes
Single Quotes
Single Quotes within Double Quotes
Double Quotes within Single Quotes
One Single Quote within Double Quotes
One Double Quote within Single Quotes
173
Command Line Interface (CLI)
Using Tables and Strings
AP-700 User Guide
The string delimiter does not have to be used for every string object. The single quote or double quote only has to be
used for string objects that contain blank space characters. If the string object being used does not contain blank spaces,
then the string delimiters, single or double quotes, mentioned in this section are not required.
174
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Configuring the AP using CLI commands
Log into the AP using HyperTerminal
1. Open your terminal emulation program (like HyperTerminal) and set the following connection properties:
•
Com Port:
•
Baud rate: 9600
•
Data Bits: 8
•
Stop bits: 1
•
Flow Control: None
•
Parity: None
2. Under File > Properties > Settings > ASCII Setup, enable the Send line ends with line feeds option.
HyperTerminal sends a line return at the end of each line of code.
3. Enter the CLI password (default is public).
NOTE: Proxim recommends changing your default passwords immediately. To perform this operation using CLI
commands, see Change Passwords.
Log into the AP using Telnet
The CLI commands can be used to access, configure, and manage the AP using Telnet. Follow these steps:
1. Confirm that your computer’s IP address is in the same IP subnet as the AP.
NOTE: If you have not previously configured the Access Point’s IP address and do not have a DHCP server on
the network, the Access Point will default to an IP address of 169.254.128.132.
2. Go to the DOS command prompt on your computer.
3. Type telnet .
4. Enter the CLI password (default is public).
NOTE: Proxim recommends changing your default passwords immediately. To perform this operation using CLI
commands, see Change Passwords.
175
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Set Basic Configuration Parameters using CLI Commands
There are a few basic configuration parameters that you may want to setup right away when you receive the AP. For
example:
•
Set System Name, Location and Contact Information
•
Set Static IP Address for the AP
•
Download an AP Configuration File from your TFTP Server
•
Set up Auto Configuration
•
Set Network Names for the Wireless Interface
•
Enable 802.11d Support and Set the Country Code
•
Enable and Configure TX Power Control for the Wireless Interface
•
Configure SSIDs (Network Names), VLANs, and Profiles
•
Download an AP Configuration File from your TFTP Server
•
Backup your AP Configuration File
Set System Name, Location and Contact Information
NOTE: System name must:
• Contain only letters, numbers, and hyphens.
• Be limited to 31 characters.
• Not begin with a number or hyphen.
• Not contain blank spaces.
[Device-Name]>set sysname sysloc
[Device-Name]>set sysctname
[Device-Name]>set sysctphone sysctemail
[Device-Name]>show system
Figure A-12 Result of “show system” CLI Command
Set Static IP Address for the AP
NOTE: The IP Subnet Mask of the AP must match your network’s Subnet Mask.
[Device-Name]>set ipaddrtype static
[Device-Name]>set ipaddr
[Device-Name]>set ipsubmask
[Device-Name]>set ipgw
[Device-Name]>show network
Change Passwords
[Device-Name]>passwd (CLI password)
[Device-Name]>set httppasswd (HTTP interface password)
176
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
[Device-Name]>set snmprpasswd (SNMP read password)
[Device-Name]>set snmprwpasswd (SNMP read/write)
[Device-Name]>set snmpv3authpasswd (SNMPv3 authentication password)
[Device-Name]>set snmpv3privpasswd (SNMPv3 privacy password)
[Device-Name]>reboot 0
CAUTION: Proxim strongly urges you to change the default passwords to restrict access to your network devices to
authorized personnel. If you lose or forget your password settings, you can always perform the Soft Reset to
Factory Defaults.
Set Network Names for the Wireless Interface
[Device-Name]>set wif 3 netname
[Device-Name]>show wif
Figure A-13 Results of “show wif” CLI command for an AP
Enable 802.11d Support and Set the Country Code
NOTE: On APs with model numbers ending in -WD, these commands are not available.
Perform the following command to enable 802.11d IEEE 802.11d support for additional regulatory domains.
[Device-Name]>set wif 3 dot11dstatus
Perform the following command to set a country code:
[Device-Name]>set syscountrycode
Select a country code from the following table, derived from ISO 3166. Available countries will vary based on regulatory
domain. Refer to the ISO/IEC 3166-1 CountryCode drop-down menu on the Configure > Interfaces > Operational
Mode page; this menu contains a list of all the available countries in your regulatory domain.
NOTE: If you select a country code that is not supported in your regulatory domain, clients may attempt to connect to a
channel that is not supported by your AP.
Country
Code
Country
Code
Country
Code
Algeria
DZ
Honduras
HN
Panama
PA
Albania
AL
Hong Kong
HK
Papua New Guinea
PG
Argentina
AR
Hungary
HU
Peru
PE
177
Command Line Interface (CLI)
Configuring the AP using CLI commands
Country
Code
AP-700 User Guide
Country
Code
Country
Code
Armenia
AM
Iceland
IS
Philippines
PH
Australia
AU
India
IN
Poland
PL
Austria
AT
Indonesia
ID
Portugal
PT
Azerbaijan
AZ
Ireland 5.8 GHz
I1
Puerto Rico
PR
Bahrain
BH
Israel
IL
Qatar
QA
Belarus
BY
Italy
IT
Romania
RO
Belgium
BE
Jamaica
JM
Russia
RU
Belize
BZ
Japan
JP
Samoa
WS
Bolivia
BO
Japan2
J2
Saudi Arabia
SA
Brazil
BR
Jordan
JO
Singapore
SG
Brunei Darussalam
BN
Kazakhstan
KZ
Slovak Republic
SK
Bulgaria
BG
North Korea
KP
Slovenia
SI
Canada
CA
Korea Republic
KR
South Africa
ZA
Chile
CL
Korea Republic2
K2
South Korea
KR
China
CN
Kuwait
KW
Spain
ES
Colombia
CO
Latvia
LV
Sweden
SE
Costa Rica
CR
Lebanon
LB
Switzerland
CH
Croatia
HR
Liechtenstein
LI
Syria
SY
Cyprus
CY
Lithuania
LT
Taiwan
TW
Czech Republic
CZ
Luxembourg
LU
Thailand
TH
Denmark
DK
Macau
MO
Turkey
TR
Dominican Republic
DO
Macedonia
MK
Ukraine
UA
Ecuador
EC
Malaysia
MY
United Arab Emirates
AE
Egypt
EG
Malta
MT
United Kingdom
GB
El Salvador
SV
Mexico
MX
United Kingdom 5.8 GHz
G1
Estonia
EE
Monaco
MC
United States
US
Finland
FI
Morocco
MA
United States World
UW
France
FR
Netherlands
NL
United States DFS
U1
Georgia
GE
New Zealand
NZ
Uruguay
UY
Germany
DE
Nicaragua
NI
Venezuela
VE
Greece
GR
Norway
NO
Vietnam
VN
Guam
GU
Oman
OM
Guatemala
GT
Pakistan
PK
Enable and Configure TX Power Control for the Wireless Interface
The TX Power Control feature lets the user configure the transmit power level of the card in the AP.
178
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Perform the following commands to enable TX Power Control and set the transmit power level:
[Device-Name]>set txpowercontrol enable
[Device-Name]>set wif currentbackofftpcvalue <0-9 dBm1-35 dBm>
Configure SSIDs (Network Names), VLANs, and Profiles
Perform the following command to configure SSIDs and VLANS, and to assign Security and RADIUS Profiles.
[Device-Name]>set wifssidtbl ssid
vlanid <-1 to 1094> ssidauth acctstatus secprofile
radmacprofile radeapprofile
radacctprofile
radmacauthstatus aclstatus
Example:
[Device-Name]>set wifssidtbl 3.1 ssid accesspt1 vlanid 22 ssidauth enable acctstatus
enable secprofile 1 radmacprofile "MAC Authentication" radeapprofile "EAP Authentication"
radacctprofile "Accounting" radmacauthstatus enable aclstatus enable
Download an AP Configuration File from your TFTP Server
Start the Solarwinds TFTP program (available on the installation CD), and click on the Security tab to verify that the TFTP
server is configured to both transmit and receive files. (Note that TFTP programs other than Solarwinds may also require
this setting.) Then enter the following commands:
[Device-Name]>set tftpfilename tftpfiletype config
tftpipaddr
[Device-Name]>show tftp (to ensure the filename, file type, and the IP address are correct)
[Device-Name]>download *
[Device-Name]>reboot 0
After following the complete process (above) once, you can download a file of the same name (so long as all the other
parameters are the same), with the following command:
[Device-Name]>download *
Backup your AP Configuration File
Start the Solarwinds TFTP program (available on the installation CD), and click on the Security tab to verify that the TFTP
server is configured to both transmit and receive files. (Note that TFTP programs other than Solarwinds may also require
this setting.) Then enter the following commands:
[Device-Name]>upload config
[Device-Name]>show tftp (to ensure the filename, file type, and the IP address are correct)
After setting the TFTP parameters, you can backup your current file (so long as all the other parameters are the same),
with the following command:
[Device-Name]>upload *
Set up Auto Configuration
The Auto Configuration feature which allows an AP to be automatically configured by downloading a specific
configuration file from a TFTP server during the boot up process.
Perform the following commands to enable and set up automatic configuration:
179
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
NOTE: The configuration filename and TFTP server IP address are configured only when the AP is configured for Static
IP. If the AP is configured for Dynamic IP these parameters are not used and obtained from DHCP.
The default filename is “config”. The default TFTP IP address is “169.254.128.133”.
[Device-Name]>set autoconfigstatus
[Device-Name]>set autoconfigfilename
[Device-Name]>set autoconfigTFTPaddr
180
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Other Network Settings
There are other configuration settings that you may want to set for the AP. Some of them are listed below.
•
Configure the AP as a DHCP Server
•
Configure the DNS Client
•
Configure DHCP Relay and Configure DHCP Relay Servers
•
Maintain Client Connections using Link Integrity
•
Change Wireless Interface Settings
•
Set Ethernet Speed and Transmission Mode
•
Set Interface Management Services
•
Configure Wireless Distribution System
•
Configure MAC Access Control
•
Set RADIUS Parameters
•
Set Rogue Scan Parameters
•
Set Hardware Configuration Reset Parameters
•
Set VLAN/SSID Parameters
•
Set Security Profile Parameters
NOTE: See Advanced Configuration for more information on these settings.
Configure the AP as a DHCP Server
NOTE: You must have at least one entry in the DHCP Server IP Address Pool Table before you can set the DHCP
Server Status to Enable.
[Device-Name]>set dhcpstatus disable
[Device-Name]>set dhcpippooltbl 0 startipaddr
endipaddr
[Device-Name]>set dhcpgw
[Device-Name]>set dhcppridnsipaddr
[Device-Name]>set dhcpsecdnsipaddr
[Device-Name]>set dhcpstatus enable
[Device-Name]>reboot 0
CAUTION: Before enabling this feature, confirm that the IP address pools you have configured are valid addresses on
the network and do not overlap the addresses assigned by any other DHCP server on the network. Enabling
this feature with incorrect address pools will cause problems on your network.
Configure the DNS Client
[Device-Name]>set dnsstatus enable
[Device-Name]>set dnsprisvripaddr
[Device-Name]>set dnssecsvripaddr
[Device-Name]>set dnsdomainname
[Device-Name]>show dns
Figure A-14 Results of “show dns” CLI command
181
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Configure DHCP Relay
Perform the following command to enable or disable DHCP Relay Agent Status.
NOTE: You must have at least one entry in the DHCP Relay Server Table before you can set the DHCP Relay Status to
Enable.
[Device-Name]>set dhcprelaystatus enable
Configure DHCP Relay Servers
Perform the following command to configure and enable a DHCP Relay Server. The AP allows the configuration of a
maximum of 10 server settings in the DHCP Relay Agents server table.
[Device-Name]>set dhcprlyindex 1 dhcprlyipaddr dhcprlycmt
dhcprlystatus 1 (1 to enable, 2 to disable, 3 to delete, 4 to create)
Maintain Client Connections using Link Integrity
[Device-Name]>show linkinttbl (this shows the current links)
[Device-Name]>set linkinttbl <1–5 (depending on what table row you wish to address)>
ipaddr
[Device-Name]>set linkintpollint
[Device-Name]>set linkintpollretx
[Device-Name]>set linkintstatus enable
[Device-Name]>show linkinttbl (to confirm new settings)
[Device-Name]>reboot 0
Change Wireless Interface Settings
See Interfaces for information on the parameters listed below. The AP uses index 3.
Operational Mode
[Device-Name]>set wif 3 mode
Mode
Operational Mode
dot11b-only
dot11g-only
dot11bg
dot11a-only
dot11g-wifi
Autochannel Select (ACS)
ACS is enabled by default. Reboot after disabling or enabling ACS.
[Device-Name]>set wif 3 autochannel
[Device-Name]>reboot 0
Enable/Disable Closed System
[Device-Name]>set wif 3 closedsys
182
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Shutdown/Resume Wireless Service
[Device-Name]>set wif 3 wssstatus <1 (resume)/2 (shutdown)>
Set Load Balancing Maximum Number of Clients
[Device-Name]>set wif 3 lbmaxclients <1–63>
Set the Multicast Rate (802.11a/b/g)
[Device-Name]>set wif 3 multrate <6, 12, 24 (Mbits/sec)>
Enable/Disable Super Mode (802.11a/g only)
[Device-Name]>set wif 3 supermode
Enable/Disable Turbo Mode (802.11a/g only)
[Device-Name]>set wif 3 turbo
NOTE: Super mode must be enabled on the interface before Turbo mode can be enabled.
Configure Antenna Diversity
[Device-Name]>set wif 3 atdiversity <1, 2, 5(auto)> (see below)
[Device-Name]>reboot 0
Value
Corresponding Antenna Enabled
802.11a/b/g (connector 1)
802.11a/b/g (connector 2)
5 (auto)
Both antennas
NOTE: See Antennas for more information on internal and external antenna ports.
Set the Distance Between APs
[Device-Name]>set wif 3 distaps <1–5> (see below)
[Device-Name]>reboot 0
Value
Distance Between APs
Large
Medium
Small
Mini
Micro
183
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Set Ethernet Speed and Transmission Mode
[Device-Name]>set etherspeed (see below)
[Device-Name]>reboot 0
Ethernet Speed and
Transmission Mode
10 Mbits/sec - half duplex
10 Mbits/sec - full duplex
10 Mbits/sec - auto duplex
100 Mbits/sec - half duplex
100 Mbits/sec - full duplex
Auto Speed - half duplex
Auto Speed - auto duplex
Value
10halfduplex
10fullduplex
10autoduplex
100halfduplex
100fullduplex
autohalfduplex
autoautoduplex (default)
Set Interface Management Services
Edit Management IP Access Table
[Device-Name]>set mgmtipaccesstbl ipaddr ipmask
Configure Management Ports
[Device-Name]>set snmpifbitmask <(see below)>
[Device-Name]>set httpifbitmask <(see below)>
[Device-Name]>set telifbitmask <(see below)>
Choose from the following values:
Interface Bitmask
0 or 2 = Disable (all interfaces)
1 or 3 = Ethernet only
4 or 6 = Wireless only
5 or 7 = Enable all interfaces
Description
All management channels disabled
Ethernet only enabled
Wireless A only enabled
All management channels enabled
Set Communication Ports
[Device-Name]>set httpport
[Device-Name]>set telport
Configure Secure Socket Layer (HTTPS)
Enabling SSL and configuring a passphrase allows encrypted Secure Socket Layer communications to the AP through
the HTTPS interface.
[Device-Name]>set sslstatus
The user must change the SSL passphrase when uploading a new certificate/private key pair, which will have a
corresponding passphrase.
[Device-Name]>set sslpassphrase
[Device-Name]>show http (to view all HTTP configuration information including SSL.)
184
Command Line Interface (CLI)
Configuring the AP using CLI commands
AP-700 User Guide
Set Telnet Session Timeouts
[Device-Name]>set tellogintout
Source Exif Data:
File Type : PDF
File Type Extension : pdf
MIME Type : application/pdf
PDF Version : 1.6
Linearized : No
XMP Toolkit : 3.1-702
Modify Date : 2007:06:21 13:49:40-07:00
Create Date : 2007:06:21 13:49:24-07:00
Metadata Date : 2007:06:21 13:49:40-07:00
Creator Tool : FrameMaker 7.1
Format : application/pdf
Title : APs_UG.book
Creator : ADickson
Document ID : uuid:7bbb001c-202c-4051-80bc-bb86e68d94ce
Instance ID : uuid:04e0732a-eb93-4177-ae97-f29382fa3ff6
Producer : Acrobat Distiller 7.0.5 (Windows)
Page Count : 119
Author : ADickson
