Trilliant Networks DBE1010 Tri-Band 2.4GHz/5Ghz Wireless LAN User Manual SkyExtender TriBand Installation and Setup

Trilliant Networks, Inc. Tri-Band 2.4GHz/5Ghz Wireless LAN SkyExtender TriBand Installation and Setup

UserManual.wiki >

Trilliant Networks >

DBE1010 User Manual >

Contents

1. Users Manual
2. Manual

Manual

SkyExtender TriBand Installation and Setup 671-00006-01 Rev B

SkyExtender TriBand Installation and Setup | iiiContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vAudience and Purpose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viHow This Guide Is Organized . . . . . . . . . . . . . . . . . . . . . . . . . viConventions Used in This Guide . . . . . . . . . . . . . . . . . . . . . . .viiChapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1TriBand Topologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Default Access Point Configuration . . . . . . . . . . . . . . . . . . . . . 2Chapter 2 Your SkyExtender TriBand Kit . . . . . . . . . . . . . . . . . . 3Kit Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Getting Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Chapter 3 Installing SkyExtender TriBand . . . . . . . . . . . . . . . . . 7Planning Your Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Mounting and Cabling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Powering Up. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10Chapter 4 Configuring a SkyExtender TriBand . . . . . . . . . . . . . .13Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14Choosing a WLAN Configuration . . . . . . . . . . . . . . . . . . . . . . 14Automatic vs. Manual Configuration . . . . . . . . . . . . . . . . . . . 16Preparing Software Images . . . . . . . . . . . . . . . . . . . . . . . . . 17Automatic Provisioning Procedure. . . . . . . . . . . . . . . . . . . . . 17Manual Provisioning Procedure. . . . . . . . . . . . . . . . . . . . . . . 21Appendix A FCC Statements . . . . . . . . . . . . . . . . . . . . . . . . . . .23

SkyExtender TriBand Installation and Setup | vAbout This GuideThis guide provides directions for installing and setting up a SkyPilot™ SkyExtender™ TriBand which can provide access point services to users of 802.11b/g wireless (Wi-Fi) networks.Chapter Highlights Audience and purpose How this guide is organized Conventions used in this guide

vi | About This GuideAudience and PurposeThis guide provides directions for installing and setting up a SkyPilot™ SkyExtender TriBand that can provide access point services for users of 802.11b/g wireless(Wi-Fi) Networks.This guide assumes administrator-level knowledge of IP networks and a familiarity with configuring wireless devices.How This Guide Is OrganizedThis guide is organized as follows: Chapter 1, “Introduction,” provides an overview of the SkyExtender TriBand, including its topologies and default access point configuration. Chapter 2, “Your SkyExtender TriBand Kit,” provides information you need before you begin your installation. Chapter 3, “Installing SkyExtender TriBand,” provides instructions for the physical installation of the TriBand. Chapter 4, “Configuring a SkyExtender TriBand,” explains how to use SkyPilot EMS software to configure the TriBand for both mesh networking and Wi-Fi operation. Appendix A, “FCC Statements,” provides the FCC radio frequency interference statements for the SkyGateway, SkyExtender, SkyExtender DualBand, and SkyExtender TriBand devices.

Conventions Used in This Guide | viiConventions Used in This GuideThis section describes the text and syntax conventions used throughout this guide.Text ConventionsThis guide uses the following text conventions: Italic is used to introduce new terms. Bold is used to indicate what you click or type in a graphical user interface (for example, commands names or text being entered). In examples showing user interaction with the command-line interface, bold is used to indicate user input as opposed to command output. A monospace font is used for code elements (variable names, data values, function names, and so forth), command lines, scripts, and source code listings. Italic-monospace is used for replaceable elements and placeholders within code listings.Syntax ConventionsThis guide uses the following conventions when showing syntax: Angle brackets, “<“ and “>”, enclose mandatory elements. You must enter these elements. For example:ping <IP-address> Square brackets, “[“ and “]”, enclose optional elements. You can omit these elements. For example:show filter [filter-table-number]Square brackets are also used to show the current value of parameters in the output of some commands. A vertical bar, “|”, separates choices. For example:show bridge [cache | port]

viii

SkyExtender TriBand Installation and Setup | 1IntroductionSkyExtender TriBand is a dual-radio solution that combines SkyPilot’s long-range, high-capacity 5 GHz mesh backhaul with high-powered 2.4 GHz 802.11b/g and 4.9 GHz 802.11a access points that allow service providers and municipalities to offer standard Wi-Fi services over great distances—for targeted hot zones or dense, ubiquitous coverage patterns. With the ability to create multiple WLANS, each with its own VLAN and security policy, the SkyExtender TriBand can support several business models with a single service installation.Chapter Highlights TriBand topologies Default access point configuration1

2 | Chapter 1 IntroductionTriBand TopologiesSkyExtender TriBand provides a unique opportunity for WISPs (wireless ISPs) looking to combine scalable Wi-Fi capacity with the seamless coverage of a wireless mesh network.TriBand nodes on a wireless mesh network offer a basis for multi service networks capable of providing end-to-end security and quality of service for a variety of bandwidth-hungry applications and services, including VoIP and video surveillance solutions.The auto-discovery and rapid provisioning features of a SkyPilot wireless mesh network can greatly reduce deployment and maintenance costs. Multiple topology options and network scalability create intriguing options for rapidly growing a metro Wi-Fi customer base.Default Access Point ConfigurationThe SkyExtender TriBand access point is set up to provide Wi-Fi access right out of the box. The access point includes a preconfigured WLAN with the SSID (Service Set Identifier) SkyPilotTriBand, providing WPA-PSK (Wireless Protected Access–Pre-Shared Key) protection. The first time that users attempt to connect to the SkyPilotTriBand WLAN, they must provide a public password, publicpublic.You have the option of leaving the default configuration in place or creating a new configuration for the access point.NOTE A wireless network protected by WPA-PSK is vulnerable. To provide a more secure level of protection, configure the WLAN for WPA authentication, in which each user is authenticated separately.

SkyExtender TriBand Installation and Setup | 3Your SkyExtender TriBand KitYour SkyPilot SkyExtender TriBand kit provides everything you need to install the device and configure it as both an extender for your wireless mesh network and an integrated 802.11b/g Wi-Fi access point.Chapter Highlights Kit contents Before you begin Getting help2

4 | Chapter 2 Your SkyExtender TriBand KitKit ContentsThe SkyPilot SkyExtender TriBand kit includes: The SkyPilot SkyExtender TriBand One 2.4 GHz antenna One 4.9 GHz antenna A PoE (Power over Ethernet) adapter for powering the SkyExtender TriBandBefore You BeginBefore starting installation, you need the following: A computer connected to the same network as the SkyExtender TriBand (which by default is IP address 192.168.0.2). A CAT-5 straight-through Ethernet cable for connecting the TriBand to a power source. Setup information for the access point:A (case-sensitive) wireless SSID for each virtual WLAN Wi-Fi network. A unique IP address for the management of the access point if it’s not connected to a DHCP server.A default gateway and subnet mask for the management network if the access point is not on the same subnet as your PC.MAC addresses for the TriBand and for the WLANs you set up for the access point.Each TriBand has 32 MAC addresses assigned to it. The MAC address of the TriBand’s 5 Ghz radio (as seen from the SkyGateway™) is printed on the label affixed to the bottom of the TriBand. The MAC address for the access point is 1 less than the MAC address of the 5 GHz radio. The MAC addresses reserved for use by WLAN BSSIDs begin with the MAC address of the 5 GHz radio minus 31. For example, if the MAC address of the TriBand is 000ADB01319F (hexadecimal), the reserved addresses start at 000ADB013180 (the difference being 1F hexadecimal, or 31 decimal).

Getting Help | 5NOTE Plan to configure the SkyExtender TriBand before mounting it. Some steps, such as those requiring a serial cable, are easier if the SkyExtender TriBand is more accessible. Getting HelpFor technical assistance during the beta release period, contact SkyPilot support by logging in to customer support at www.skypilot.com/support/.

SkyExtender TriBand Installation and Setup | 7Installing SkyExtender TriBandThis chapter provides instructions for the physical installation of the SkyExtender TriBand.Chapter Highlights Planning your installation Mounting and cabling Powering up3

Mounting and Cabling | 92Connect the antennas.The access point requires attachment of the antennas provided with the device. Screw the antennas onto the standard N-connectors on the bottom of the TriBand:4.9 GHz antenna onto Ant12.4 GHz antenna onto Ant2Figure 3-1. Attaching the antennas3Connect the TriBand to the power supply.As shown in Figure 3-2, connect the Ethernet straight-through cable (provided) between the power injector and the Ethernet port on the bottom of the TriBand.Plug the AC adapter into the power injector.

10 | Chapter 3 Installing SkyExtender TriBandFigure 3-2. Providing power to the SkyExtender TriBandNOTE The Ethernet port on the TriBand is used to provide power and Ethernet over a single CAT-5 cable. To use the Ethernet port, connect a CAT-5 cable from the power injector port marked “Computer” to a network switch or other device.Powering UpWhen power is supplied to the SkyExtender TriBand, it starts a routine power-up sequence which you can monitor by observing the pair of LED lights on the bottom of the device.While the device is initializing and searching for a GPS signal, both LED lights blink four times in a repeating cycle. (The SkyExtender TriBand must have access to a GPS signal to complete its power-up sequence.)When the Link LED turns steady green and the Activity LED is off, the TriBand is initialized and listening for hello signals from other devices.

Powering Up | 11When both LEDs are steady, the TriBand is successfully connected to the wireless network.The sequence takes about 15 minutes to complete (while waiting to acquire a GPS signal). NOTE Depending on your SkyPilot network configuration, the SkyExtender TriBand may be unable to connect to the network until the device has been configured as described in Chapter 4, “Configuring a SkyExtender TriBand.”

SkyExtender TriBand Installation and Setup | 13Configuring a SkyExtender TriBandAfter installing the SkyExtender TriBand™, you need to provide the device’s SkyExtender and access point components with the configuration information they need for network operations.This chapter explains how to use SkyPilot EMS software to configure the TriBand for both mesh networking and Wi-Fi operation.Chapter Highlights Before you begin Choosing a WLAN configuration Automatic vs. manual configuration Preparing software images Automatic provisioning procedure Manual provisioning procedure4

14 | Chapter 4 Configuring a SkyExtender TriBandBefore You BeginBefore starting configuration, make sure the SkyExtender TriBand is powered up and capable of receiving a signal from a SkyGateway or SkyExtender.Additionally, make sure the EMS software is installed (on both a central server and a client) and set up for configuring SkyPilot devices. Detailed procedures for using EMS software are provided in SkyPilot Network Administration, available from the SkyPilot website at www.skypilot.com/support/.Choosing a WLAN ConfigurationBefore starting configuration, decide on the type of Wi-Fi network you want to configure at the access point location.Most WLAN deployments use one of two common types of WLAN configurations: Open—Allows anyone with Wi-Fi capability to connect to the wireless network via the SkyExtender TriBand access point. An open WLAN does not authenticate users at the network layer, nor does it depend on authentication by a backend system.An open configuration raises obvious security concerns. The lack of encryption other than SSL/TLS (which is available only during login) makes the network vulnerable to unauthorized access and malicious actions (including denial-of-service attacks).You can provide backend authentication at the application layer through a captive portal mechanism operating outside your wireless mesh network. A captive portal forces all HTTP traffic from an unauthenticated user to a login Web page and blocks the traffic until the user successfully logs in. (For more information about captive portal mechanisms, refer to the following Web page: http://en.wikipedia.org/wiki/Captive_portal.)An additional disadvantage of open configurations is that users must begin each session from a Web browser before they can use other Internet applications, such as email, ssh, ftp, and chat clients.

Choosing a WLAN Configuration | 15 Protected—A Wi-Fi Protected Access (WPA) network which uses standards-based client authentication and encryption. Users are authenticated via a Radius server (which you’ll need to implement using a third-party solution).WPA uses the IEEE 802.11b/g and IETF EAP protocols to give users a secure connection with both the access point and the Radius server, allowing the exchange of credentials (username@domain and password) and keys for encrypting all traffic between the client and the access point—even after authentication.WPA encryption is by WEP, with the addition of keys that are unique to each session and client. This additional keying mechanism eliminates the security problems of the original WEP. You can use AES encryption with the TriBand for even stronger encryption capabilities.For more information about WPA, refer to the following Web page: http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access.As you follow the procedure for configuring the TriBand, it will refer you to the appropriate steps depending on the WLAN configuration you’ve chosen.Setting Up a Radius Server for Authenticating UsersIf you plan to configure your SkyExtender TriBand access point for WPA, you must first configure a Radius server with the following: The IP address and shared secret of the TriBand access point. EAP-PEAP/MSCHAPv2 and EAP-TTLS/PAP or MSCHAPv2 (not EAP-TLS) suitable for WPA. (Your Radius supplier can provide instructions.) A Users database with user names and passwords. (You may also need to identify a proxy Radius if you’re delegating some domains to other service providers.)

16 | Chapter 4 Configuring a SkyExtender TriBandAutomatic vs. Manual ConfigurationThe SkyExtender and its contained access point require network configurations to operate on the wireless mesh network. SkyPilot gives you a choice of two modes for provisioning devices with configurations: Automatic provisioning—Requires the use of SkyPilot EMS software to create configurations that an unattended central server can distribute to devices on the wireless mesh network. Although automatic provisioning requires more setup time than manual provisioning, it greatly simplifies the administration of a growing network.After getting a configuration from the provisioning server, the SkyExtender TriBand will establish a link to the SkyGateway (or to a SkyExtender or another TriBand) and use DHCP to retrieve an IP address and instructions for downloading configuration information stored on the server.For automatic provisioning instructions, see “Automatic Provisioning Procedure” on page 17. Manual provisioning—Usually performed in the field, manual provisioning permits the configuration of only a single device at a time, creating the minimum settings required for a wireless link and storing them in the device’s flash memory.For manual provisioning instructions, see “Manual Provisioning Procedure” on page 21.For more information on provisioning modes, see Getting Started with the SkyPilot Network, available from the SkyPilot website at www.skypilot.com/support/.

Preparing Software Images | 17Preparing Software ImagesEMS SoftwareBefore you use the SkyPilot EMS software to set up the automatic configuration of the SkyExtender TriBand, make sure the most current software images are available to the EMS program.To provide the EMS program with access to software images, copy the images to the folder /var/ftp/pub/images on the provisioning server.Access Point FirmwareYou can update the firmware in a SkyExtender TriBand access point either before or after TriBand configuration. All you need is the IP address of the TriBand access point and FTP installed on the host computer that contains the desired firmware image. For detailed procedures, refer to “Updating Access Point Firmware” in SkyPilot Network Administration.Automatic Provisioning ProcedureTable 4-1 summarizes the steps required to configure a SkyExtender TriBand device operating in automatic provisioning mode.Table 4-1. Automatically Provisioning a SkyExtender TriBand (Page 1 of 4)Step Refer to1Make sure the most current software images are available to the EMS client software.“Preparing Software Images” on page 172Start the EMS client. “Starting the EMS Client” in SkyPilot Network Administration3Choose the software images the provisioning server will use to configure the new device.“Configuring Software Images” in SkyPilot Network Administration

Manual Provisioning Procedure | 21Manual Provisioning ProcedureTo configure a TriBand that’s in manual provisioning mode, you first configure its SkyExtender portion (following the same procedure as for SkyExtenders), and then you configure its access point.To manually provision a SkyExtender TriBand:1Log in to the SkyExtender portion of the TriBand.You can connect to a TriBand and access its command-line interface via a terminal session from a console connected to the TriBand’s RJ-45 serial port. After logging in (by supplying a password), you can enter commands at the command prompt. For detailed cabling and access instructions for the command-line interface, refer to the SkyPilot Command-Line Interface Reference.2Configure the SkyExtender by using the set prov batch command.3Enter the set prov manual command so that the SkyExtender uses manual provisioning mode when it next starts.4Log in to the TriBand’s access point.You can connect to an access point and access its Web-based interface via a network connection to the SkyExtender portion of the TriBand or by a direct Wi-Fi connection to the access point. After logging in (by supplying a password), you can configure the access point through its Web-based interface. For detailed network setting requirements and access instructions for the Web-based interface, refer to the SkyPilot Web Interface Reference.5Using the Access Point Configuration page, configure the access point’s global configuration parameters.6Using the WLANs Settings page, configure the SSIDs.7Optionally, configure any additional access point settings that you want.

SkyExtender TriBand Installation and Setup | 23FCC StatementsFCC Radio Frequency Interference StatementSkyExtender TriBand FCC Number: RV7-DBE1010This equipment has been tested and found to comply with the limits for a class B digital device, pursuant to part 90 of the FCC Rules. These limits are designed to provide reasonable protection against interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and if not installed, and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try and correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the distance between the equipment and the receiver. Connect the equipment to an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.This equipment has been certified to comply with the limits for a class B computing device, pursuant to FCC Rules. In order to maintain compliance with FCC regulations, shielded cables must be used with this equipment. Operation with non-approved equipment or unshielded cables is likely to result in interference to radio and TV reception. The user is cautioned that changes and modifications made to the equipment without the approval of manufacturer could void the user's authority to operate this equipment. A

Maximum Permissible Exposure In order to meet the FCC’s requirement of 1 mW/cm2 for Maximum Permissible Exposure (MPE) at 4.9 GHz, the SkyGateway/SkyExtender units must be located a minimum of 36 cm (14 inches) from all persons. This distance is determined based upon the aforementioned 1 mW/cm2 limit, measured data, and the following far-field peak power density equation: []SdGP )20/)((10282.0 += where: d = MPE distance in cm P = Power in dBm (peak) G = Antenna Gain in dBi S = Power Density Limit in mW/cm2 (1 mW/cm2) Certified laboratory measurements indicate that the FCC’s Power Density Limit of 1 mW/cm2 is met at a distance of much less than 36 cm (14 inches). However the minimum distance for fixed or mobile transmitters is 36 cm even if calculations indicate the MPE distance is much less. FCC 15.203 statement Because this device uses standard RF connectors for the external removable antennas, professional installation is required. IC RSS-210 statement This device has been designed to operate with the antennas listed below. Antennas having a gain greater than those on this list are strictly prohibited for use with this device. The required antenna impedance is 50 ohms. Approved antennas: Manufacturer Model Comet SF245 Comet SF245+12 Comet SF245+12x Comet SF495+9x 24 | Appendix A FCC Statements