UTStarcom Telecom 3001P Access Point User Manual
UTStarcom Telecom Co., Ltd. Access Point Users Manual
Users Manual
| Download: |  |
| Mirror Download [FCC.gov] | |
| Document ID | 506514 |
| Application ID | Wku/agwHV63dpy8T/7btAA== |
| Document Description | Users Manual |
| Short Term Confidential | No |
| Permanent Confidential | No |
| Supercede | No |
| Document Type | User Manual |
| Display Format | Adobe Acrobat PDF - pdf |
| Filesize | 121.26kB (1515798 bits) |
| Date Submitted | 2005-01-14 00:00:00 |
| Date Available | 2005-01-14 00:00:00 |
| Creation Date | 2004-12-30 08:54:08 |
| Producing Software | Acrobat Distiller 5.0 (Windows) |
| Document Lastmod | 2005-01-14 15:40:55 |
| Document Title | Users Manual |
WA3001 Indoor AP
Wireless Access Point
USER GUIDE
Release: 1.1
Doc. Code: L3 DW09 1000 02 010 00
UTStarcom, Inc.
Copyright © 2004 UTStarcom, Inc. All rights reserved.
No part of this documentation may be reproduced in any form or by any means or
used to make any derivative work (such as translation, transformation, or
adaptation) without prior, express and written permission from UTStarcom, Inc.
UTStarcom, Inc. reserves the right to revise this documentation and to make
changes in content from time to time without obligation on the part of UTStarcom,
Inc. to provide notification of such revision or changes.
UTStarcom, Inc. provides this documentation without warranty of any kind, implied
or expressed, including but not limited to, the implied warranties of merchantability
and fitness for a particular purpose. UTStarcom may make improvements or
changes in the product(s) and/or the program(s) described in this documentation
at any time.
UNITED STATES GOVERNMENT LEGENDS:
If you are a United States government agency, then this documentation and the
software described herein are provided to you subject to the following:
United States Government Legend: All technical data and computer software is
commercial in nature and developed solely at private expense. Software is
delivered as Commercial Computer Software as defined in DFARS 252.227-7014
(June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is
provided with only such rights as are provided in UTStarcom's standard
commercial license for the Software. Technical data is provided with limited rights
only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June
1987), whichever is applicable. You agree not to remove or deface any portion of
any legend provided on any licensed program or documentation contained in, or
delivered to you in conjunction with, this User Guide.
UTStarcom, the UTStarcom logo, PAS, mSwitch, Airstar, WACOS, Netman, Total
Control, and CommWorks are registered trademarks of UTStarcom, Inc. and its
subsidiaries. The UTStarcom name, AN-2000, and the CommWorks logo are
trademarks of UTStarcom, Inc. and its subsidiaries.
Other brand and product names may be registered trademarks or trademarks of
their respective holders.
Any rights not expressly granted herein are firmly reserved.
Regulatory statement (FCC)
The users manual or instruction manual for an intentional or
unintentional radiator shall caution the user that changes or
modifications not expressly approved by the party responsible
for compliance could void the user's authority to operate the
equipment.
IMPORTANT NOTE (CO-LOCATION)
FCC RF Radiation Exposure Statement: This equipment
complies with FCC RF radiation exposure limits set forth for an
uncontrolled environment. This device and its antenna must not
be co-located or operating in conjunction with any other
antenna or transmitter.
MPE Statement (Safety Information)
Your device contains a low power transmitter. When device is
transmitted it sends out Radio Frequency (RF) signal.
Safety Information
In order to maintain compliance with the FCC RF exposure
guidelines, this equipment should be installed and operated with
minimum distance 20cm between the radiator and your body.
Use only with supplied antenna. Unauthorized antenna,
modification, or attachments could damage the transmitter and
may violate FCC regulations.
15.105(b) Information of the responsible party for a DoC product
The identification of the product:
Product Name: Wireless Access Point
Model: WA3001
Technical Support:
Technical Support in the US:
UTStarcom Telecom Co., Ltd.
UTStarcom, Inc.
Address:
NO.88 Wenhua Road,
Hangzhou PRC 310012
Address:
1275 Harbor Bay Parkway
Alameda, CA 94502 USA
Telephone : 0571-88862342-3524
Telephone: 1 (866) 663-3266
Email: cbshi@utstar.com
Email: ips@utstar.com
15.21 Regulatory information / Disclaimers
The users manual or instruction manual for an intentional or unintentional radiator shall caution
the user that changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate the equipment.
15.105 Federal Communications Commission (FCC) Requirements, Part 15
This equipment has been tested and found to comply with the limits for a class B digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one or more of the following measures:
---Reorient or relocate the receiving antenna.
---Increase the separation between the equipment and receiver.
---Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
---Consult the dealer or an experienced radio/TV technician for help.
Regulatory statement (CE R&TTE)
European standards dictate maximum radiated transmit power
of 100mW EIRP and frequency range 2.400-2.4835GHz; In
France, the equipment must be restricted to the 2.44652.4835GHz frequency range and must be restricted to indoor
use.
Declaration of Conformity
For the following equipment: WA3001 Access Point
0984
Is herewith confirmed to comply with the requirements set out in
the Council Directive on the Approximation of the Laws of the
Member States relating to Electromagnetic Compatibility
(89/336/EEC), Low-voltage Directive (73/23/EEC) and the
Amendment Directive (93/68/EEC), the procedures given in
European Council Directive 99/5/EC and 89/3360EEC.
The equipment was passed. The test was performed according
to the following European standards:
•
EN 300 328 V.1.4.1 (2003-04)
•
EN 301 489-1 V.1.3.1 (2001-09) / EN 301 489-17 V.1.1.1
(2000-09)
•
EN 50371: 2002
•
EN 60950: 2000
Contents
Product Introduction ..................................................................... 1
Product Introduction..................................................................................... 2
Product Features ......................................................................................... 3
System Application........................................................................ 5
Wireless Network Access (MiniPCI Network Card)....................................... 5
Single-cell Wireless Network .................................................................... 5
Multiple APs in Separate Networks .......................................................... 6
Multiple APs within a Network .................................................................. 7
Extension of Wired Network ..................................................................... 7
Repeater Mode (CardBus Adapter).............................................................. 8
Point-to-Point Mode ................................................................................. 8
Point-to-Multiple Points Mode................................................................... 9
Repeater + AP Combined Network ............................................................ 10
Hardware Installation................................................................... 11
Package Contents ..................................................................................... 11
Installation Requirements........................................................................... 11
Product Physical Characteristics................................................................ 12
Product Front View................................................................................. 12
Product Side View.................................................................................. 13
Product Top View................................................................................... 15
ii
Hardware Installation ..................................................................................15
System Access ...........................................................................................16
Firmware Description..................................................................................18
Web-based Configuration Introduction......................................21
Configuration Flow......................................................................................21
System Configuration Introduction ..............................................................21
Bridge/Router Mode Introduction ................................................................23
Logon the System.......................................................................................28
Save and Reboot........................................................................................30
Web-based Configuration............................................................33
Guide Configuration....................................................................................36
Wireless Port Configuration ........................................................................39
DHCP Server Configuration........................................................................45
WAN Interface Configuration ......................................................................48
LAN Interface Configuration........................................................................52
Radius Client ..............................................................................................53
802.1x Authentication .................................................................................55
User Management ......................................................................................61
Dynamic Users .......................................................................................61
Static Users ............................................................................................63
ARP Management ......................................................................................65
Route Configuration....................................................................................66
iii
NAT Configuration ..................................................................................... 67
NAPT Mode ........................................................................................... 68
Basic NAT Mode .................................................................................... 70
Isolation&filter Configuration ...................................................................... 71
MAC Management..................................................................................... 73
Web-based System Configuration.............................................. 77
Viewing System Information....................................................................... 77
Changing Password................................................................................... 78
Managing File System ............................................................................... 79
Debug Configuration .................................................................................. 82
Performance Statistics ................................................................ 85
Interface Statistics ..................................................................................... 85
DHCP Server Statistics.............................................................................. 87
DHCP Relay Statistics ............................................................................... 91
RADIUS Client Statistics ............................................................................ 93
ARP Table ................................................................................................. 95
Route Table ............................................................................................... 96
Online User Information ............................................................................. 97
MAC Address............................................................................................. 99
Web-based Configuration Examples........................................ 101
AP in Bridge Mode ................................................................................... 101
iv
AP in Router Mode (Case 1).....................................................................106
AP in Router Mode (Case 2).....................................................................111
CLI Command Set ......................................................................117
EXEC Commands ....................................................................................117
Debug ...................................................................................................117
Enable ..................................................................................................117
Clear.....................................................................................................118
End .......................................................................................................118
Exit .......................................................................................................118
History ..................................................................................................119
Logout ..................................................................................................119
Ping ......................................................................................................119
Quit.......................................................................................................120
Show ....................................................................................................120
Tree ......................................................................................................120
Write Memory .......................................................................................120
Privileged EXEC Commands ....................................................................121
Configure ..............................................................................................121
Copy Config to TFTP ............................................................................121
Copy Config from TFTP ........................................................................122
Copy Image From TFTP .......................................................................122
Copy Image to TFTP.............................................................................123
v
Disable................................................................................................. 123
Erase Config ........................................................................................ 123
Clear ARP............................................................................................ 124
Clear DHCP Binding ............................................................................ 124
Clear DHCP Statistics .......................................................................... 125
Clear Dot1x Statistics........................................................................... 125
Clear RADIUS...................................................................................... 125
Clear MAC ........................................................................................... 126
Clear NAT ............................................................................................ 126
Clear NAT Translation.......................................................................... 126
Kill........................................................................................................ 126
Reboot ................................................................................................. 127
Auto-config Enable/Disable .................................................................. 127
Global Config Commands ........................................................................ 127
AP-Mode.............................................................................................. 127
ARP Entry ............................................................................................ 128
Broadcast Limit .................................................................................... 128
Console Baud-Rate.............................................................................. 129
Console Timeout.................................................................................. 129
DHCP Service...................................................................................... 130
DHCP-Client Enable /Disable............................................................... 130
DHCP-Client Trust ............................................................................... 131
vi
DHCP-Pool ...........................................................................................131
DHCP-Server Host................................................................................131
Dot1x Authentication Enable / Disable ..................................................132
Dot1x Authentication Mode ...................................................................132
Dot1x Encryption-Mode.........................................................................133
Dot1x Initialize ......................................................................................133
Dot1x Max-Req .....................................................................................134
Dot1x Quiet-Period ...............................................................................134
Dot1x Re-Authenticate..........................................................................135
Dot1x Re-Authentication .......................................................................136
Dot1x Re-Authperiod ............................................................................137
Dot1x Server-Timeout...........................................................................137
Dot1x Supplicant-Timeout.....................................................................138
Dot1x TX-Period ...................................................................................139
Dynamic-User .......................................................................................140
Dynamic-User Enable / Disable ............................................................140
Ethernet-Port ........................................................................................141
Hostname .............................................................................................141
IAPP .....................................................................................................141
Interface................................................................................................142
IP Default-Route ...................................................................................142
IP RADIUS Source-Interface.................................................................143
IP Route................................................................................................143
vii
Isolation ............................................................................................... 144
Load-Balance Enable/Disable .............................................................. 144
Load-Balance Mode ............................................................................. 145
MAC Age Time..................................................................................... 145
MAC Black-List .................................................................................... 145
Max-Online-User .................................................................................. 146
NAT Enable/Disable............................................................................. 146
NAT Interface....................................................................................... 147
NAT Map.............................................................................................. 147
NAT Mode............................................................................................ 148
NAT Pool ............................................................................................. 148
NAT Redirect ....................................................................................... 148
NAT Timeout........................................................................................ 149
Operator Access level .......................................................................... 149
Operator Add / Delete .......................................................................... 150
Operator Password .............................................................................. 151
PPPoE Auto-Connect Disable/Enable .................................................. 152
PPPoE Connect ................................................................................... 152
PPPoE Disconnect............................................................................... 152
PPPoE User......................................................................................... 152
RADIUS-Acctserver {Enable | Disable}................................................ 153
RADIUS-Acctserver Host ..................................................................... 153
viii
RADIUS-Acctserver Info .......................................................................154
RADIUS-Authserver {Enable | Disable} .................................................155
RADIUS-Authserver Extra.....................................................................155
RADIUS-Authserver Host......................................................................155
RADIUS-Authserver Info .......................................................................156
RADIUS-Server Dead-Time ..................................................................157
RADIUS-Server Retransmit...................................................................157
RADIUS-Server Timeout.......................................................................158
SNMP Client .........................................................................................158
SNMP Server Community .....................................................................159
SNMP Server Contact...........................................................................159
SNMP Server Enable/Disable ...............................................................159
SNMP Server Location..........................................................................160
SNMP Server Sysname ........................................................................160
SNMP Server Trap Enable/Disable .......................................................160
SNMP Server Trap Host .......................................................................161
Static-MAC-Address .............................................................................161
Static-User............................................................................................162
Static-User Enable / Disable .................................................................162
Telnet Client..........................................................................................162
Telnet Server Enable / Disable..............................................................163
Telnet Timeout......................................................................................163
User-Force-Offline ................................................................................164
ix
VLAN Default VID ................................................................................ 164
VLAN Employee Default VID................................................................ 164
VLAN Enable/Disable........................................................................... 165
VLAN Mode.......................................................................................... 165
VLAN port-vid....................................................................................... 166
VLAN Tag Disable................................................................................ 166
VLAN Tag Enable ................................................................................ 167
VLAN Visitor Default Vid ...................................................................... 167
Webserver ........................................................................................... 167
Wireless-Port ....................................................................................... 168
DHCP-pool Configuration Mode............................................................... 168
DNS-Server.......................................................................................... 168
Excluded-Address ................................................................................ 169
Gateway............................................................................................... 170
Lease................................................................................................... 171
Network................................................................................................ 172
Manual-Binding .................................................................................... 172
Ethernet Port configuration level .............................................................. 173
Speed-duplex....................................................................................... 173
Interface Mode Commands...................................................................... 173
Disable................................................................................................. 173
Enable ................................................................................................. 174
x
IP Address ............................................................................................174
Wireless Port Configuration Level.............................................................174
Beacon Interval.....................................................................................174
Basic Rate ............................................................................................175
Fragment Threshold..............................................................................176
Frequency-Channel ..............................................................................176
DTIM Interval ........................................................................................177
Power ...................................................................................................177
RTS-CTS Threshold .............................................................................178
SSID .....................................................................................................178
Tx Rate .................................................................................................179
Wireless Mode ......................................................................................179
WDS-Mode Enable / Disable.................................................................180
WDS Peer MAC....................................................................................180
WEP Encryption Enable / Disable .........................................................181
WEP Encryption Key.............................................................................181
Default WEP-Key..................................................................................182
WEP-Key-Format..................................................................................182
WEP-Key-Length ..................................................................................182
Antenna ................................................................................................183
WPA Mode ...........................................................................................183
WPA Encryp-Mode ...............................................................................184
WPA Psk-Passphrase...........................................................................184
xi
WPA Groupkey-Update-Interval ........................................................... 184
Optimize-108g Enable/Disable ............................................................. 185
Webserver Mode ..................................................................................... 185
Enable/Disable..................................................................................... 185
IP-Filter Enable/Disable........................................................................ 186
IP-Filter Client ...................................................................................... 186
Port-Filter ............................................................................................. 186
IAPP Mode .............................................................................................. 187
Enable/Disable..................................................................................... 187
ESP Enable/Disable............................................................................. 187
Mode.................................................................................................... 187
Map...................................................................................................... 188
Secret .................................................................................................. 188
Debug Mode ............................................................................................ 189
Ping ..................................................................................................... 189
Debug-Module ..................................................................................... 189
NAT Logging ........................................................................................ 190
NAT Print ............................................................................................. 190
Sys-Function ........................................................................................ 191
Show Version....................................................................................... 191
Show Memory ...................................................................................... 192
Show NAT Run .................................................................................... 192
xii
Show Debug_Module............................................................................192
Net-Security Rate-Limit Enable/Disable ................................................193
Net-Security Syn-Cache Enable/Disable ...............................................193
Net-Security Attack-Defense Enable/Disable ........................................193
Show Net-Security ................................................................................193
Ipstack Debug.......................................................................................194
Show Ipstack-Debug.............................................................................194
Show ........................................................................................................195
Show ARP ............................................................................................195
Show Console.......................................................................................195
Show DHCP-Client ...............................................................................196
Show DHCP Service.............................................................................196
Show DHCP Binding.............................................................................197
Show DHCP Relay................................................................................197
Show DHCP Server ..............................................................................198
Show DHCP Statistics...........................................................................198
Show Dot1x Configuration ....................................................................198
Show Dot1x Statistics ...........................................................................199
Show Flash...........................................................................................199
Show Dot1x Authentication Configuration ............................................199
Show MAC............................................................................................200
Show MAC Black-List ...........................................................................201
Show MAC White-List ...........................................................................201
xiii
Show NAT Translation ......................................................................... 201
Show NAT Configuration...................................................................... 202
Show Managed-Interface ..................................................................... 202
Show IP-Route..................................................................................... 203
Show Access-List Configuration........................................................... 203
Show Port Config ................................................................................. 203
Show RADIUS Configuration................................................................ 204
Show RADIUS Statistics ...................................................................... 204
Show Sms User ................................................................................... 204
Show SMS Online-User ....................................................................... 205
Show Wireless-Port.............................................................................. 205
Show System ....................................................................................... 205
Show Telnet ......................................................................................... 206
Show SNMP Server Configuration ....................................................... 207
Show AP-Mode .................................................................................... 207
Show Load-Balance Configuration ....................................................... 207
Show Who ........................................................................................... 208
Show Running-Config .......................................................................... 208
Show Startup ....................................................................................... 208
Show WPA Configuration..................................................................... 208
Show Webserver.................................................................................. 209
Show VLAN Configuration.................................................................... 209
xiv
Show VLAN Binding..............................................................................210
Show IAPP Configuration......................................................................211
10
Troubleshooting .........................................................................213
11
Technical Specifications............................................................215
12
Acronyms and Abbreviations....................................................219
xv
List of Figures
Figure 1 Single-cell Wireless Network Topology .................................................. 6
Figure 2 Multi-APs with different ESS_IDs in Separate Networks Topology ......... 6
Figure 3 Multi-APs within a Network Topology ..................................................... 7
Figure 4 Extension of Wired Network Topology.................................................... 8
Figure 5 Repeater Point-to-Point Mode Network Topology................................... 9
Figure 6 Repeater Point to Multi-points Mode Network Topology ......................... 9
Figure 7 Repeater+AP Combined Network Topology......................................... 10
Figure 8 WA3001 Front View ............................................................................. 12
Figure 9 WA3001 Side View (1) ......................................................................... 13
Figure 10 WA3001 Side View (2) ....................................................................... 14
Figure 11 WA3001 Top View ............................................................................. 15
Figure 12 Installation Diagram ........................................................................... 16
Figure 13 Logon Window ................................................................................... 18
Figure 14 Configuration Flow Chart ................................................................... 21
Figure 15 Logon Successful............................................................................... 28
Figure 16 AP Reboot Prompt Window................................................................ 30
Figure 17 Save and Reboot ............................................................................... 30
Figure 18 Basic Configuration............................................................................ 34
Figure 19 Advanced Configuration Part I ........................................................... 35
xvi
Figure 20 Advanced Configuration Part II ...........................................................36
Figure 21 Basic Config - Wireless Port Config ....................................................40
Figure 22 Wireless Port Configuration ................................................................43
Figure 23 DHCP Server Configuration ................................................................46
Figure 24 WAN Port Configuration Interface .......................................................49
Figure 25 Trusted DHCP Server Configuration ...................................................51
Figure 26 LAN Interface Configuration................................................................52
Figure 27 Radius Client Configuration Interface..................................................54
Figure 28 802.1x Authentication Configuration ...................................................57
Figure 29 Dynamic User Configuration Interface.................................................62
Figure 30 Static User Configuration Interface .....................................................64
Figure 31 ARP Configuration Interface ...............................................................65
Figure 32 Route Configuration Interface .............................................................66
Figure 33 Table 5-1 Route Configuration Interface Spec ....................................67
Figure 34 NAT Configuration Interface................................................................67
Figure 35 Table 5-2 NAT Configuration Specification..........................................68
Figure 36 NAT Static MAP Configuration Interface .............................................70
Figure 37 Isolation&filter Configuration Interface.................................................72
Figure 38 MAC Table Configuration Interface .....................................................74
Figure 39 System Information.............................................................................77
Figure 40 Change Password ..............................................................................78
Figure 41 File System.........................................................................................80
Figure 42 Confirm Configuration File Erase ........................................................82
xvii
Figure 43 Initiating Configuration File Erase Message ....................................... 82
Figure 44 Debug Configuration .......................................................................... 83
Figure 45 Interface Statistics.............................................................................. 86
Figure 46 DHCP Server Statistics ...................................................................... 88
Figure 47 DHCP Relay Statistics ....................................................................... 92
Figure 48 RADIUS Client Statistics .................................................................... 94
Figure 49 ARP Table ......................................................................................... 96
Figure 50 Route Table ....................................................................................... 97
Figure 51 Online User Information ..................................................................... 98
Figure 52 MAC Address..................................................................................... 99
Figure 53 Network Topology ............................................................................ 101
xviii
List of Tables
Table 1 WA3001 Front Panel LED Indicators ......................................................13
Table 2 Wireless Frequency Channel Default Setting..........................................19
Table 3 Configuration Menu in Bridge Mode .......................................................23
Table 4 Configuration Menu in Router Mode .......................................................24
Table 5 Wireless Port 1 Interface Specification ...................................................40
Table 6 WA3001 WEP Encryption Configuration.................................................42
Table 7 Wireless Port 2 Interface Specification ...................................................43
Table 8 DHCP Server Configuration Specification...............................................47
Table 9 WAN Interface Configuration Specification .............................................50
Table 10 LAN Interface Specification ..................................................................53
Table 11 Radius Client Configuration Specification .............................................54
Table 12 802.1x Configuration Specification .......................................................58
Figure 33 Table 5-1 Route Configuration Interface Spec ....................................67
Figure 35 Table 5-2 NAT Configuration Specification..........................................68
Table 13 MAC Filter Configuration Specification .................................................72
Table 14 File System Window Description ..........................................................81
Table 15 Interface Statistics Window Description ................................................86
Table 16 DHCP Server Statistics Window Description ........................................88
Table 17 DHCP Relay Statistics Window Description..........................................92
xix
Table 18 RADIUS Client Statistics Window Description...................................... 94
Table 19 Online User Information Window Description....................................... 98
Table 20 Troubleshooting................................................................................. 213
Table 21 WA3001 AP Technical Specifications ................................................ 215
1
Product Introduction
WA3001 is a switch-like WLAN Access Point that offers
industry-leading performance/price ratio and a comprehensive
feature set. It is designed especially for a Wireless Internet
Service Provider (WISP) that provides Wireless Internet
services - including hotspot and corporate deployment planning.
WA3001 supports IEEE802.11b and 802.11g, SNMP
centralized network management, authentication and billing
systems. It provides a variety of security mechanisms to ensure
safer data transmission within the public network.
WA3001 is the premier choice for WISP Hotspot Network
Solutions because of its user-friendly design, high-speed data
transmission rate of up to 54Mbps, additional long distance
network coverage and high sensitivity. WA3001 is typically
applied in public areas such as airports, hotels, exhibitions, bars
and news centers.
WA3001 also supports NT authentication to provide a costeffective and efficient wireless connection for corporations.
Using its 4 LAN ports switch like functionality ensures
customers always enjoy an easy network buildup.
Presently, the new WLAN technology is focused on throughput
rates and network coverage improvement, along with the
2
Chapter 1 Product Introduction
elimination of blind spots. UTStarcom has made rapid progress
on all of these areas utilizing the latest XR and Super G
technology.
Product Introduction
Port Introduction:
One 10/100M Ethernet WAN port
Four 10/100M Ethernet LAN ports
One Mini-PCI socket supports Type III PC card
One hot pluggable CardBus socket supports Type II PC
card
One RS-232 port for management and console
Compliance:
IEEE 802.3X, duplex 10BaseT, 100BaseTX ports
IEEE802.3u, 100BaseTX specification
IEEE802.3, 10BaseT specification
IEEE802.3af standard
CardBus socket supports both 16-bit PC Cards and 32-bit
CardBus Cards
CardBus is compliant with the PCI Local Bus Specification
Revision 2.2
Mini-PCI socket supports the PCI Local Bus Specification
Revision 2.2
Chapter 1 Product Introduction
Connector:
10/100Base-TX port: RJ-45
Management console ports: RS-232
Product Features
•
6M/s throughput rate
•
Supports 802.3af inline power supply (PoE)
•
Compatible with 802.11b and 802.11g
•
Supports four adjustable RF power levels (10mw–20mw–
50mw-100mw)
•
Supports 64/128-bit WEP Encryption
•
Supports 802.1x to provide high data security
•
Supports EAP-MD5
•
Supports DHCP server
•
Supports WEB pass-through
•
Supports PPPoE
•
Provides remote management and diagnosis (Inband and
Outband)
•
Supports Layer2 ACL (at least 256 in the access control
list)
•
Supports broadcast threshold
•
Supports end-user isolated and VLAN
4
Chapter 1 Product Introduction
•
Supports
user-access
load-share
(roundrobin&
leastconn&hash) and control based on flow and user
number
•
Supports NAT or any IP
•
Supports link-test (default-gateway is unavailable for
WA3001)
•
Supports Repeater mode (dual mode)
•
Super G maximize network throughput, peak flow is able to
reach the wire LAN throughput at 10/100M. It exceeds the
previous generation wireless functionality
•
Supports XR, the received sensibility reach -103dBm
•
Operation temperature: -15 ~ 50°C
•
Network Management
WEB based configuration
Supports SNMP MIB (MIB II or private MIB)
SNMP Agent
Console port management
In-Band/Out-Band network management
Statistic
2
System Application
WA3001 is built with both regular AP (miniPCI network card)
and Repeater (CardBus adapters) functions. As a Repeater,
from network coverage point of view, the AP can be configured
in point-to-point (P2P) mode or point-to-multiple points (P2MP)
mode (one AP connects with up to four APs). As a regular
adapter, the AP can be configured as a single-cell network, a
multi-cell network, or an extension of wired network.
Wireless Network Access (MiniPCI Network Card)
Single-cell Wireless Network
A single AP used without the wired network providing a singlecell wireless network for peer-to-peer stations.
E.g. In SOHO mode, the AP provides a quick and efficient
solutions to printers, PCs and Server.
6
Chapter 2 System Application
Figure 1 Single-cell Wireless Network Topology
Multiple APs in Separate Networks
Multiple APs can coexist as separate networks in the same site
without interference by using different ESS_IDs.
E.g. In an exhibition, where each company’s network is
independent
Figure 2 Multi-APs with different ESS_IDs in Separate
Networks Topology
Chapter 2 System Application
Multiple APs within a Network
Multiple APs wired together provide a network with a better
coverage area and performance - by using the same ESS_ID.
E.g. Within a company, each department accesses a public file
server through its own AP.
Figure 3 Multi-APs within a Network Topology
Extension of Wired Network
AP can connect to the wired network through WAN ports, or
connect to wireless clients through wireless ports.
E.g.: In a company, using APs to quickly setup a network for a
newly added department is an efficient way to extend the
existing wired network.
8
Chapter 2 System Application
Figure 4 Extension of Wired Network Topology
Repeater Mode (CardBus Adapter)
Point-to-Point Mode
Point-to-Point mode is used to connect two networks in WLAN
application.
E.g.: In a campus, using WA3001’s point-to-point mode to
connect two buildings in a separate wired network. In this mode,
AP must to be configured with a cardBus adapter to function as
a repeater.
Chapter 2 System Application
Figure 5 Repeater Point-to-Point Mode Network Topology
Point-to-Multiple Points Mode
In WLAN application, point-to-multiple points mode dramatically
expands network coverage and quickly establishes the
connectivity among existing networks.
Figure 6 Repeater Point to Multi-points Mode Network
Topology
10
Chapter 2 System Application
Repeater + AP Combined Network
Capable of being a wireless entrance for wireless clients, or a
repeater of a wired network, the WA3001 expands network
coverage easily via wireless connection.
Figure 7 Repeater+AP Combined Network Topology
Hardware Installation
Package Contents
Before using this AP, check the accessories in the box. If you
find anything missing or the documentation set is incomplete,
contact your local dealer immediately. The following
accessories are shipped with the product:
•
One WA3001 AP
•
One user guide
•
One power adapter
•
Two small antennas
•
One installation bracket
•
Three screws
•
One warranty card
Installation Requirements
AP installation environment:
•
WA3001 power supply mode:
Support IEEE802.3af, remote Cat 5, DC -48V/300mA
12
Chapter 3 Hardware Installation
Support local DC 12V/1.25A
Note: The two power supply modes cannot be used
simultaneously. In PoE power supply mode, RJ45 4/5(+)7/8(-)
connects to WAN port.
•
One RJ-45 LAN
transmission rate
port,
supports
Product Physical Characteristics
Product Front View
Figure 8 WA3001 Front View
10/100Mbps
data
Chapter 3 Hardware Installation
13
Table 1 shows the list of LED indicators (from left to right) on
the front panel along with their activity status and descriptions
Table 1 WA3001 Front Panel LED Indicators
LED
Indicators
Status
Description
POWER
Lighting in
green
Lights when power is being supplied
well
AP
Lighting in
green
Lights when AP is able to be
connected by clients
WLAN
Blinking in
green
LAN
LINK
Blinking in
green
Lighting in
green
Off: No wireless channel
Blinking: with wireless connections
Off: No Ethernet connection
Blinking: with LAN connection
Off: No accessing activities from
wireless clients.
Lighting: AP gets connected by
wireless clients
Product Side View
Figure 9 WA3001 Side View (1)
14
Chapter 3 Hardware Installation
The following table lists the items on side panel (1) (from left to
right)
Interface
Description
Console port
RS-232 connector for LAN
management
RESET
Restore button to reboot/reset the
AP to its default settings
LAN
Four LAN ports to access Ethernet,
RJ-45 connector
Figure 10 WA3001 Side View (2)
The following table lists the items on the side panel (2) (from left
to right)
Interface
Description
WAN
WAN port used for uplink
connection. RJ-45 connector
DC
Power jack, 12V
ANT
Antenna installation jack
Chapter 3 Hardware Installation
15
Product Top View
Figure 11 WA3001 Top View
WA3001 AP’s rubber top shown in Figure 11 is for installing a
Wireless LAN CardBus Adapter.
Hardware Installation
Steps:
1.
Location: Place the AP in an appropriate place in a
room.
2.
Antenna: Screw two antennae into both side of the AP
3.
Install bracket (or put the AP on the table directly)
4.
Fix the AP into the bracket
16
Chapter 3 Hardware Installation
Figure 12 Installation Diagram
System Access
Network management methods:
Through LAN port: connects PC to LAN port that can
identify the connection automatically, use crossover or
straight-through network cable
Through WAN port: connects PC to WAN port, use
crossover network cable
Through wireless port: installs a wireless network card into
PC and find AP through Windows IE. The default ESSID is
“UT”
Note: It is suggested to use WAN or LAN port to configure the
AP.
Chapter 3 Hardware Installation
17
System default IP address:
WAN port: 192.168.1.1/255.255.255.0
LAN port: 172.18.37.1/255.255.255.0
Default user name and password:
Administrator:
User name: admin
Password: admin
Guest:
User name: guest
Password: guest
System access procedure:
Connects the power adapter to an AP
Makes sure that the connection between PC and AP’s LAN
port is connected.
Configures PC network card’s IP address to
172.18.37.100/255.255.255.0 in order to connect the PC to
LAN port
Enters AP LAN port’s default IP address into the PC web
browser at http://172.18.37.1
18
Chapter 3 Hardware Installation
Use the default user name and password to logon
User name: admin
Password: admin
Figure 13 Logon Window
Firmware Description
The default setting of WA3001 firmware is different according to
the nation-wide regulation of wireless frequency channel. The
AP configuration of this manual applies to China area only. The
values listed in Table 2 are wireless frequency channel default
settings of other areas.
Chapter 3 Hardware Installation
Table 2 Wireless Frequency Channel Default Setting
North
Europe/ETSI
America/FCC
Operation
Channel
2.412-2.462GHz
2.412-2.472GHz
Frequency
Channel
1-11 (Default: 1)
1-13 (Default: 1)
Default
Power
RF
Mode b: 40mw (16dBm)
Mode g: 25mw (14.5dBm) / 70mw (18.5dBm)
19
4
Web-based Configuration
Introduction
Configuration Flow
Figure 14 Configuration Flow Chart
Logon
Configuration
& Apply
Save & Reboot
System Configuration Introduction
Log on the system, select an operation mode and configure the
ports accordingly.
In Router mode, WAN port configuration depends on the retrieval
of IP address (Either DHCP server or DHCP client is provided). In
Bridge mode, configuration is not required for the WAN port.
22
Chapter 4 Web-based Configuration Introduction
The LAN port must be configured in both modes based on the IP
address.
In wireless mode, configure the wireless port and its channel
attributes.
After configuration, save it and reboot the system
S ta r t
A P mode?
On e
T wo
i nt er f a c e
R o u te r
i nt er f a c e
B r id g e
DHCP for
W A N?
Yes
G e t IP f o r m
D H C P
No
C o n f ig IP
a d d re s s
C o n f ig L A N IP
a d d re s s
W ir e le s s M o d e
c o n f ig
S S ID ,
C h a n n e l c o n f ig
S a v e c o n f ig
Reboot
Chapter 4 Web-based Configuration Introduction
Bridge/Router Mode Introduction
Table 3 Configuration Menu in Bridge Mode
Main Menu
Logon
Guide
Basic Config
Advanced Config
System Config
Statistic
Sub Menu
23
24
Chapter 4 Web-based Configuration Introduction
Table 4 Configuration Menu in Router Mode
Main Menu
Sub Menu
Logon
Guide
Basic Config
Advanced Config
System Config
Chapter 4 Web-based Configuration Introduction
Main Menu
25
Sub Menu
Statistic
Description:
•
Wireless port configuration
The system is able to configure two wireless network cards
at the same time. The default assumes a Mini PC card on
Wireless port 2.
Configure the 802.11b attributes for the wireless port
Activate WDS mode to implement Repeater functions
Activate WEP encryption to provide data transmission
security. Four sets of Key values can be configured
•
Interface configuration
Include WAN and LAN ports
Configure the port IP address to enable communication at
IP layer
26
Chapter 4 Web-based Configuration Introduction
•
DHCP Server configuration
Configure the DHCP server when the AP needs to allocate
an IP address to its clients
Configure the DHCP address field attributes, or keep the
default attributes
DHCP Client configuration
Configure the DHCP client when the AP needs to allocate
an IP address to a client through the remote DHCP server
•
Authentication
Activate the option for 802.1x authentication
Configure global user authentication attributes among the
Server, the AP and the Client.
•
RADIUS Client configuration
Configure this option while using a Radius server to
perform authentication or accounting
•
Users Management: Dynamic, Static and Online users
Configure this option while managing the users in local
authentication mode, local + Radius or Radius + local
mode
•
NAT configuration
In Router mode, configure the NAT when the system
requires AP to manage the IP addresses for its clients
There are two types of NAT configurations: Static NAT and
NAPT (based on port forwarding)
Chapter 4 Web-based Configuration Introduction
27
•
Route configuration
In Router mode, users can define AP’s next route
•
ARP management
Provides information about network equipment connected
to the AP intended for users
•
MAC filter configuration
Manages the accessed users based on MAC. This includes
the MAC white list and black list
Implements VLAN end-user isolation
•
MAC table management
Adds the MAC address table to speed forwarding of user
data
•
System document management
Manages the system documents remotely through FTP or
TFTP server. This includes Image and Config files
Retrieves the default system’s configuration by deleting the
recently added configuration file
•
Change user password
Provides the option for users to increase the system’s
security
•
Debug configuration
Observes the system’s operational situation and makes it
convenient for advanced users to adjust and solve the
problems
28
Chapter 4 Web-based Configuration Introduction
Logon the System
Access Methods:
Enter the default IP address in the browser’s logon field, then
enter the default user name and password.
Interface:
Figure 15 Logon Successful
Description:
•
General introduction
The left panel is the function link area. The right panel is the
information display area and configuration area
Chapter 4 Web-based Configuration Introduction
29
•
Left panel introduction
Logon: log on the system
Guide: A brief instructional guide describes the basic
system configuration of WA3001 step by step. It helps user
to complete the configuration quickly
Basic Config: Implements the system’s basic configurations
Advanced Config: Implements the system’s advanced
configurations
System Config: Downloads/uploads the system files and
upgrades the image files
Statisic: Statistical information about ports, the DHCP
server or Relay, and the Radius Client
•
Button Description
30
Chapter 4 Web-based Configuration Introduction
: Presses to apply a configuration changes. Some
configurations are applied only after saving and rebooting
the AP. A corresponding prompt window will be popped up.
: refreshes the interface.
: restores the default parameters.
Figure 16 AP Reboot Prompt Window
Save and Reboot
Access Method:
Located on the bottom of the left function panel
Interface:
Figure 17 Save and Reboot
Chapter 4 Web-based Configuration Introduction
31
Description:
Press to save the system configuration changes
Press to apply the configuration. This is similar
to the button in the equipment
Note: Click to save the configuration changes even if it
has been applied by clicking
Web-based Configuration
This chapter introduces all Web-based configuration steps.
•
Guide-based configuration operations
•
Functional menu-based operations in Basic and Advanced
configuration modes
•
Figure 18 lists all configurable items in Basic Config
•
Figure 19 and Figure 20 list all configurable items in
Advanced Config
The following section describes these items in detail
34
Chapter 5 Web-based Configuration
Figure 18 Basic Configuration
Basi c
Conf i gur at i on
Basi c Mode
Wi r el ess 1
Wi r el es s 2
( opt i on)
Br i dge /
Rout e
SSI D
Channel
Channel
Reboot
WEP enabl e/
di sabl e
WEP enabl e/
di sabl e
Save
conf i gur at i o
SSI D
WEP key
WEP key
Key t ype
Key t ype
Key 1
Key 1
WAN
Dynami c/
St at i c IP
I P addr ess
St at i c I P
addr ess
I P Mask
St at i c I P
mask
Enabl e/
Di sabl e
Def aul t
Rout e
Cl i ent t r ust
Key 2
Key 2
Key 3
Key 3
Key 4
Key 4
Wi r el es s por t 1
mode 11a/ b/ g
Wi r el es s por t 2
Mode ( opt i on)
LAN
DHCP
DHCP ser ver/
Rel ay/ None
I P addr ess
Gat away
I P Mask
DNS ser ver
Excl ude I P
addr ess
Lease t i me
Enabl e/
Di sabl e
Aut o conf i g
enabl e/
di sabl e
Manual bi nd
DHCP ser ver
host
Chapter 5 Web-based Configuration
35
Figure 19 Advanced Configuration Part I
Advance
configuration (1)
MAC
Filter
ARP
NAT
Wireless port 1
performance
Wireless port 2
performance
Enable /
Disable
Beacon Interval
Beacon Interval
Basic/NAPT
DTIM interval
DTIM interval
Start IP/ End IP
Power
Power
Boradcast limit
map
Basic rate
Basic rate
Isolation
redirect
TX rate
TX rate
timeout
fragment
threshold
fragment
threshold
rts/cts
threshold
rts/cts
threshold
MAC age
MAC filter
Enable/Disable
Static MAC
Black list
ARP entry
Route
Write list
IP route
36
Chapter 5 Web-based Configuration
Figure 20 Advanced Configuration Part II
Advance (2)
Authentication
RADIUS Client
Wireless 1
WD S
SMS
Re-authperiod
DOT1X enable/
disable
Host server
Dynamic user
WDS enable/
disable (PTP/
PTMP)
Server timeout
Initialize
Accounting key
Static user
Peer MAC
Supplicant
timeout
Max-request
Authentication
key
Tx-period
Reauthentication
Dead time
Quite period
Re-authenticate
retransmit
Authentication
mode
MAX request
times
Time out
Encryption
mode
Max online user
Wireless 2
WD S
WDS enable/
disable (PTP/
PTMP)
Peer MAC
Guide Configuration
Objective:
Use AP quickly through the Guide-based configuration system
Detailed Instructions:
1.
Click the “Guide” link on the left panel
Chapter 5 Web-based Configuration
2.
37
Click , set AP operation mode to “Bridge Mode”
Description:
If AP is used as Layer 2 bridging, choose the Bridge mode. If
AP involves in Layer 3 communication, choose the Router
mode.
1.
Click to set LAN interface IP address, the default
address is 172.18.37.1/255.255.255.0
38
Chapter 5 Web-based Configuration
2.
Click to set wireless SSID and Channel, the
default SSID is “UT” and the default channel is “1”
Description:
In a planned AP wireless network, SSID is a service ID which is
assigned to the AP by the system administrator. Only a wireless
network card with a configured ESSID can get connection from
the AP. ESSID has the maximum of 32 characters. Wireless
Chapter 5 Web-based Configuration
39
channel is normally set to 1, 6, 11 or 1, 7, 13, hence the
interaction is reduced in most of the situations.
1.
Click to complete the Guide configuration
2.
Click to save the configuration, click
to keep the current configuration
Wireless Port Configuration
Objective 1:
Wireless port parameters settings in “Basic Config”
Access Method:
Click the “Basic Config/Wireless Port” link on the left panel
Interface:
40
Chapter 5 Web-based Configuration
Figure 21 Basic Config - Wireless Port Config
Description:
Table 5 Wireless Port 1 Interface Specification
Field
Description
Default Value
MAC
Address
Wireless network card
MAC address
Uplink Detect
Detect the uplink
Disabled
Chapter 5 Web-based Configuration
Field
Description
41
Default Value
ESSID
ESSID is a service ID
assigned to an AP by
the system admin. Only
a wireless network card
with a configured
ESSID can get
connection from AP.
ESSID has maximum of
32 characters
UT
Mode
3 optional modes are
802.11b/g, 802.11b and
802.11g. Select b/g
compatible mode to get
connection through
traditional wireless
network card in b mode
802.11b/g
Frequency
Channel
Display AP’s current
channel.
WEP Description:
By default, WEP encryption is disabled. User can choose any
one of the two available encryption modes
WEP-64
WEP-128
The system provides 4 groups of encryption keys. User can
select any one of 2 key formats
Alphabetical
42
Chapter 5 Web-based Configuration
Hexadecimal
Table 6 WA3001 WEP Encryption Configuration
Encryption
Mode
WEP-64
Alphabetical
Uses any 5
alphanumeric
characters
between “a-z”,
“A-Z” and “0-9”.
HEX
10 hexadecimal digits between “a-f”,
“A-F” and “0-9” with prefix “0x”
E.g. 0x11AA22BB33
E.g. MyKey
WEP-128
Uses any 13
alphanumeric
characters
between “a-z”,
“A-Z” and “0-9”.
26 hexadecimal digits between “a-f”,
“A-F” and “0-9” with prefix “0x”
E.g.0X00112233445566778899AABBCC
E.g.
MyKey12345678
Objective 2:
Wireless Port advanced parameter settings in “Advanced
Config”
Access Method:
Click “Advanced Config/Wireless Port” on the left panel
Interface:
Chapter 5 Web-based Configuration
Figure 22 Wireless Port Configuration
Description:
Table 7 Wireless Port 2 Interface Specification
Field
Description
Default
Value
Beacon
Interval
Interval between Beacon packets;
the Beacon packet contains
network card information, duration
of broadcast to the wireless
network.
100(ms)
DTIM
Interval
Interval between Delivery Traffic
Indication Message
2(ms)
43
44
Chapter 5 Web-based Configuration
Field
Power
Description
Transmitting power of the AP
wireless port.
Default
Value
100mw
Possible values are: 10mw, 20mw,
50mw, 100mw
Tx Rate
Transmission rate.
auto
The range of selectable values is
decided based on the wireless
mode set in the basic config. If
Auto is chosen, the network card
will select the current optimum
rate.
Possible values are: 11Mbit/s,
5.5Mbit/s, 2Mbit/s, 1Mbit/s, Auto.
Basic Rate
The network card is restricted to
operate at the selected Tx rates.
1, 2Mbit/s
Antenna
Possible values are: Both, Ant A,
Ant B
Both
Note: From the front view of AP,
left is Ant A, right is Ant B
RTS/CTS
Threshold
Request To Send/Clear To Send
mechanism is used in WLAN;
RTS/CTS threshold is
configurable; When a data
package size exceeds the
threshold, choose a setting within
a range of 0-2347. Suggestion: do
not modify the value
2347
Chapter 5 Web-based Configuration
Field
Fragment
Threshold
Description
Fragment Threshold mechanism is
used to improve the efficiency in a
high volume wireless network. It
defines the limit of data packages
size. Any package with bigger size
than the value will be fragmented
into several smaller packages
within a range of 256-2346 bytes.
Suggestion: do not modify the
value
45
Default
Value
2346
User can configure all items in table 5-3, but usually “Antenna”,
“Power” and “Tx Rate” are configurable. The rest of the items
are not recommended to configure
Note: The system provides shortcuts between “Basic Config”
and “Advance Config” interfaces for wireless port
DHCP Server Configuration
Objective:
WAN gets IP address via DHCP Server and DHCP Relay
when AP works in Router Mode
Access Method:
Click the “Basic Config/DHCP Server” link on the left panel
46
Chapter 5 Web-based Configuration
Interface:
Figure 23 DHCP Server Configuration
Detailed Instructions:
When DHCP Server is enabled, the system automatically
displays the following configuration interface
When DHCP Relay is enabled, the system automatically
displays the following configuration interface
Chapter 5 Web-based Configuration
Table 8 DHCP Server Configuration Specification
Field
Description
Default Value
LAN Status
IP Address
IP address
172.18.37.1
Subnet Mask
Subnet mask
255.255.255.0
DHCP Server Configuration
Use DHCP
Server
Enable/Disable
DHCP server
options
Network IP
IP address of
DHCP address pool
Network Mask
Network mask
Lease Time
Lease Time
Gateway
Gateway
DNS Server1-4
DNS Server(s),
total 4 servers can
be set
DHCP Relay Configuration
Disable
47
48
Chapter 5 Web-based Configuration
Field
Trusted DHCP
Server1-3
Description
Default Value
Trusted DHCP
server settings,
total 3 servers
can be set
Description:
When DHCP Server is enabled
When DHCP server is enabled, it allocates IP address to a
Client or AP through LAN port
The subnet mask of DHCP Server IP address pool must be
less than the network mask used in LAN interface
Able to allocate maximum of 1024 addresses from IP
address pool, including reserved addresses
When DHCP Relay is enabled
Normally AP connects to remote DHCP server via WAN, in
this case, users must require a certificate for LAN
configuration
Recommendation: When Relay is enabled, AP directly
connects to DHCP server
WAN Interface Configuration
Objective:
Chapter 5 Web-based Configuration
Configure WAN interface when AP is in Router mode
Access Method:
Click the “Basic Config/WAN Interface” link on the left panel
Interface:
Figure 24 WAN Port Configuration Interface
49
50
Chapter 5 Web-based Configuration
Table 9 WAN Interface Configuration Specification
Field
Description
Default Value
WAN Interface Status
IP address
IP address
192.168.1.1
Subnet mask
Subnet mask
255.255.255.0
PPPoE Status
PPPoE Status
Disconnected
DHCP Client
Status
DHCP Client
Status
Disabled
WAN IP Address Configuration
IP Address
Obtain
Methods
1. PPPoE mode
2. Obtain address
automatically using
DHCP
Specified IP address mode;
IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
3. Specify IP
address below
Auto Configuration
Auto config
Enable or Disable
auto configuration
for WAN Interface
Enable “Auto
Config” to have
WAN interface
obtained IP
address from
DHCP server. AP
will get its
configuration
information from
DHCP server after
reboot
Disable
Chapter 5 Web-based Configuration
Field
Config Trusted
DHCP Server
Description
51
Default Value
Perform Trusted
DHCP Server
Configuration to
obtain IP address
through DHCP
server
Detailed Instructions:
Click the “Trusted DHCP Server” link to show the following
configuration interface
Figure 25 Trusted DHCP Server Configuration
Description:
Up to 5-trusted DHCP servers can be configured
In Figure 25, enter DHCP server’s IP address into the input field.
Press to add or press to delete
52
Chapter 5 Web-based Configuration
LAN Interface Configuration
Objective:
User needs to perform LAN interface configuration regardless
AP working mode.
Access Method:
Click the “Basic Config/LAN Interface” link.
Interface:
Figure 26 LAN Interface Configuration
Interface Description:
Chapter 5 Web-based Configuration
53
Table 10 LAN Interface Specification
Field
Description
Default Value
LAN Interface
Enable the
interface
Enable the interface
Enable
IP address
IP address
172.18.37.1
Subnet mask
Subnet mask
255.255.255.0
Radius Client
Objective:
Provides accounting service to AP subscribers when AP is in
Router mode.
Access Method:
Click the “Advanced Config/Radius Client” link on the left panel.
Configuration Interface:
54
Chapter 5 Web-based Configuration
Figure 27 Radius Client Configuration Interface
Interface Description:
Table 11 Radius Client Configuration Specification
Field
Description
Default Value
Radius Server
Enable Server1-3
Enable or disable
Radius server, up to
3 servers can be
configured
Server host
address
Server host address
Authentication
Port
Authentication Port
between AP and
Server
Disable
Chapter 5 Web-based Configuration
Field
Accounting POrt
Description
Accounting Port
between AP and
Server
Default Value
Key Config
Authentication
Key
Authentication Key
between AP and
Server
Accounting Key
Accounting Key
between AP and
Server
Periods Config
Server dead time
Server timeout
time
Server transmit
times
If the request sent to
the Radius Server
does not get a
response within
Timeout value, the
request is re-sent to
the server until the
number of re-tries
reaches the value set
in the Transmit
Times. If any re-try
does not get a
response, then the
AP considers that the
Radius server failed.
It will wait a period of
time as defined in the
Dead Time. Then the
AP will re-send a
request.
802.1x Authentication
Access Method:
5 minutes
5 seconds
3 times
55
56
Chapter 5 Web-based Configuration
Click the “Advanced Config/Authentication” link on the left panel
Configuration Interface:
Chapter 5 Web-based Configuration
Figure 28 802.1x Authentication Configuration
Interface Description:
57
58
Chapter 5 Web-based Configuration
Table 12 802.1x Configuration Specification
Field
Description
Default Value
User Authentication Config
802.1x
Authentication
Enable or Disable
802.1x Authentication
disable
Authentication
Mode
Authentication mode
options: none, local,
remote, local-remote,
remote-local
none
Encryption Mode
Encryption mode
between wireless
terminals and AP.
Options: CHAP, PAP
PAP
Max online user
number
Max online user number.
Options: 1-256
802.1x Authentication Config
Parameter
Server timeout
Specification
Interval between retries
of sending a request
frame from AP to Server
(second). If within the
Timeout period the
Server doesn’t respond
to the AP’s request, the
AP will re-send the
request frame. Possible
values: 1-65535
seconds.
Default
30
Chapter 5 Web-based Configuration
Field
Description
59
Default Value
Supplication
timeout
Interval between retries
of sending a request
frame from AP to Client
(second). If within the
Timeout period the
Client does not respond
to the AP’s request, the
AP will re-send the
request frame. Possible
values: 1-65535
seconds.
30
Quiet period if
authentication
failed
If the user name or
password failed because
of authentication, the AP
will not process the
authentication request
from the Client within
Quiet-period value.
Possible values: 165535 seconds.
Response period
for EAP
Interval of AP sending
Request-challenge
request to the client
under EAP
authentication (Resending because the
Response-challenge was
not received). Possible
values: 1-65535
seconds.
30
60
Chapter 5 Web-based Configuration
Field
Max Request
times for EAP
Description
Maximum number of
retries to send a
Request-challenge
request from AP to client
under EAP
authentication (Resending because the
Response-challenge was
not received). Possible
values: 1-2.
For a specific user
User ID
User ID, the system
automatically generates
a unique id when adding
a new user
Re-authentication
Enable or Disable Reauthentication
Initial a specific user
User ID
User ID
Re-authenticate a specific user
User ID
User ID
UI buttons
Apply
Configurations take
effect
Refresh
Refresh selections
Restart
Authentication
parameters take effect
Initial
Initialize configurations
Re-auth
Force user to reauthenticate
Default Value
Chapter 5 Web-based Configuration
61
Description:
Available Functionality:
Global user configuration parameters (LAN interface and
Wireless connected clients), e.g. enable or disable 802.1x
authentication, authentication mode, encryption mode, max
online user number
Global
802.1x
authentication,
authentication parameters configuration
Specify authenticated users, initialize authenticated users
and re-authenticated users
Server-AP-Client
User Management
Objective:
After 802.1x authentication is enabled, AP is able to manage
both dynamic and static users. Dynamic users require
authentication whereas Static users do not require
authentication.
Dynamic Users
Access Method:
Click the “Advanced Config/Subscriber” link on the left panel,
then choose “Dynamic user”
Configuration Interface:
62
Chapter 5 Web-based Configuration
Figure 29 Dynamic User Configuration Interface
Configuration Description:
Detailed Instructions:
•
Add a new dynamic user
Enter User name and Password, and then click . A
new entry will be added in the table as shown below. User
ID is automatically generated by the system.
•
Enable, disable or delete dynamic users
Select the option from the Status drop-down box to
manage dynamic users
Chapter 5 Web-based Configuration
63
Enable: enables a specific dynamic user and allows
the user to access
Disable: disables a specific dynamic user and
prohibits the user access
Delete: deletes a specific dynamic user and removes
the user information from the database
Static Users
Access Method:
Click the “Advanced Config/Subscriber” link on the left panel,
choose “Static user”
Configuration Interface:
64
Chapter 5 Web-based Configuration
Figure 30 Static User Configuration Interface
Configuration Description:
Detailed Instructions:
•
Add a new static user
Enter static user’s PC MAC address, and then click . A
new user entry will be added in the table as shown below. User
ID is automatically generated. User name is identical to MAC
address
•
Enable or disable static users
Select the option from the Status drop-down box to manage
static users
Enable: enables a specific static user and allows the
user to access
Chapter 5 Web-based Configuration
65
Disable: disables a specific static user and prohibits
the user access
Delete: deletes a specific static user and removes the
user information from the database
ARP Management
Access Method:
Click the “Advance Config/ARP” link on the left panel
Configuration Interface:
Figure 31 ARP Configuration Interface
Configuration Description:
66
Chapter 5 Web-based Configuration
Refer to the detailed instructions given below to speed up AP
data transmission through configure the static ARP table.
•
Add a new ARP entry
Enter IP address, MAC address, and then click
•
Remove ARP
Click to delete one ARP entry
Route Configuration
Access Method:
Click the “Advanced Config/Route” link on the left panel
Configuration Interface:
Figure 32 Route Configuration Interface
Chapter 5 Web-based Configuration
Interface Description:
Figure 33 Table 5-1 Route Configuration Interface Spec
Field
Description
IP address
Route’s beginning IP address
Mask
Route’s beginning Subnet mask
Next Hop
Route’s next hop address
NAT Configuration
Access Method:
Click the “Advanced Config/NAT” link on the left panel
Configuration Interface:
Figure 34 NAT Configuration Interface
Interface Description:
67
68
Chapter 5 Web-based Configuration
Figure 35 Table 5-2 NAT Configuration Specification
Field
Description
Default Value
Enable NAT
Enable or Disable NAT
Disable
NAT Mode
Two NAT modes are
available after enable NAT,
NAPT mode and Basic
NAT mode
NAPT
NAT Timeout
NAT timeout options: 13600 seconds
120
NAT Interface
inside
NAT Interface inside
LAN Port
NAT Interface
outside
NAT Interface outside
WAN port
Configuration Description:
When NAT is enabled, select NAPT mode. Click to
apply the configuration and click to take effect. For
more details, refer to the section 5.11.1 to configure the IP
address based mapping and port based mapping.
When NAT is enabled, select Basic mode. Click to
apply the configuration and click to take effect.
User should configure the link between “NAT Pool” and “NAT
Static Map” based on port.
NAPT Mode
Access Method:
Chapter 5 Web-based Configuration
69
Click the “Advanced Config/NAT Advance” link, then click “NAT”
on the left and click “NAT Pool” on the right
Configuration Interface:
Configuration Description:
Detailed Instructions:
•
Add a port based MAP
Input the values in the “Add Local IP Address”, “Add Global
Port” fields, click
70
Chapter 5 Web-based Configuration
•
Delete a port based MAP
Press to delete a port based MAP
Basic NAT Mode
Access Method:
Click the “Advanced Config/NAT Advance” link, then click “NAT”
link on the left, click “NAT Static Map” link on the right
Configuration Interface:
Figure 36 NAT Static MAP Configuration Interface
Configuration Description:
Detailed Instructions:
Chapter 5 Web-based Configuration
•
71
Change NAT address pool
Input the values in the “NAT Pool Start IP” and “NAT Pool
Mask” fields, and then click
•
Add new IP Address based static MAP
Input the values in the “Add local IP Address” and “Add
Global IP Address” fields, then click
•
Delete static MAP
Click to delete a static MAP
Isolation&filter Configuration
Access Method:
Click the “Advanced/MAC Filter” link on the left panel
Configuration Interface:
72
Chapter 5 Web-based Configuration
Figure 37 Isolation&filter Configuration Interface
Interface Description:
Table 13 MAC Filter Configuration Specification
Field
Description
Isolation:
3 types of isolations:
-LAN-Wireless
Isolation
LAN-wireless isolation
Default Value
Disable Isolation
LAN isolation
Wireless Isolation
-LAN Isolation
-Wireless Isolation
Config broadcast
limit
Broadcast limit options:
0-65535。
64
Chapter 5 Web-based Configuration
Field
Description
Load balance
Two modes of Load
Balance:
73
Default Value
Disable
User based – based on
the number of AP’s users
Flux based – based on
AP’s throughput
Add a MAC address
to black List
MAC address black list.
The clients in the black
list are not allowed to
access AP
White list
MAC address white list.
The clients in the white
list are allowed to access
AP
Configuration Description:
To prevent unauthorized access, or to fulfill the network design
and unnecessary or prohibited MAC address into black list.
When 802.1x authentication configuration adds a new static
user and the status is enabled, this user will be added into white
list automatically. These users do not require authentication to
access AP
MAC Management
Access Method:
Click the “Advance Config/MAC table” link on the left panel
74
Chapter 5 Web-based Configuration
Configuration Interface:
Figure 38 MAC Table Configuration Interface
Configuration Description:
Detailed Instructions:
•
MAC Age time:
Value range: 10-65535
Default value: 300 seconds
•
Add a MAC address to static MAC table:
MAC address: input format: 00:03:7F:BF:08:80
Port: Originated port number of the transferred data
Click
Chapter 5 Web-based Configuration
•
Remove MAC address: click
75
Web-based System
Configuration
This chapter primarily covers the following:
•
Viewing System Information
•
Changing Password
•
Managing File System
•
Debug Configuration
Viewing System Information
Access Method:
Click “System Config/System” on the left panel.
Configuration Interface:
Figure 39 System Information
78
Chapter 6 Web-based System Configuration
Description:
The system information includes the following fields:
Product Serial No.
Hardware version
Software version
Changing Password
Access Method:
Click “System Config/Change Password” on the left panel.
Configuration Interface:
Figure 40 Change Password
Description:
Chapter 6 Web-based System Configuration
79
Two types of users can log into the system: admin and guest.
An “admin” has the privilege to perform all operations to the
device, including information browse, configuration and
modification and so on; while a “guest” only has the privilege to
browse information.
An “admin” can modify passwords for all users in the system;
while a “guest” can only modify his own password.
Managing File System
Access Method:
Click “System Config/File System” on the left panel.
Configuration Interface:
80
Chapter 6 Web-based System Configuration
Figure 41 File System
Chapter 6 Web-based System Configuration
81
Description:
Table 14 File System Window Description
Fields
Description
Erase Config File from AP
Erases the current configuration file
from the AP.
Download new image from
Host
Downloads a new image
(VxWorks.Z) from a host.
Download new Config file
from Host
Downloads a new configuration file
from host.
Upload image to Host
Uploads an image to a host
Upload Config File to Host
Uploads a configuration file to a
host.
Description:
Click to erase the current configuration file from the AP;
a dialog box will appear as shown in Figure 42. Click and
a message box will appear as shown in Figure 43. It prompts
the rebooting device and initiates the configuration erase.
82
Chapter 6 Web-based System Configuration
Figure 42 Confirm Configuration File Erase
Figure 43 Initiating Configuration File Erase Message
Click to confirm the erasing; click to reboot the
system and initiate the configuration. Do not click on
the left to save the configuration.
For system file (including image and configuration file)
management, specify the host IP address and the system file
path and file name. Currently, the configuration file only
supports TXT format.
Debug Configuration
Access Method:
Chapter 6 Web-based System Configuration
83
Click “System Config/Debug Config” on the left panel.
Configuration Interface:
Figure 44 Debug Configuration
Description:
Through debug configuration, the user can view the following
information via CLI and SNMP:
Configurable items are: 802.1X, SMI, RADIUS Client, DHCP
Client, DHCP Server, DHCP Relay, IP Stack, NAT, Bridge,
802.1 and Web.
Configurable types are: Error, Warning and Trace.
7
Performance Statistics
Interface Statistics
Access Method:
Click “Statistic/Interface” on the left panel.
Configuration Interface:
86
Chapter 7 Performance Statistics
Figure 45 Interface Statistics
Table 15 Interface Statistics Window Description
Fields
Description
WAN/LAN Interface Description
MTU (Maximum
Transmission Unit)
Packets in MS are based on Ethernet
standards. The MTU value is 1500.
Packets received
Number of packets received via the
WAN/LAN interface.
Chapter 7 Performance Statistics
Fields
87
Description
Total bytes
received
Total number of bytes received via the
WAN/LAN interface.
Error packets
received
Number of error packets received via the
WAN/LAN interface.
Dropped packets
Number of packets dropped by the WAN/LAN
interface.
Packets sent
Number of packets sent from the WAN/LAN
interface.
Total bytes sent
Number of bytes sent from the WAN/LAN
interface.
Error bytes sent
Number of error bytes sent from the
WAN/LAN interface.
Button
Refresh
Click this button to retrieve the latest
statistics of the system.
DHCP Server Statistics
Access Method:
Click “Statistic/DHCP Server” on the left panel.
Configuration Interface:
88
Chapter 7 Performance Statistics
Figure 46 DHCP Server Statistics
Description:
Table 16 DHCP Server Statistics Window Description
Fields
Description
DHCP Server Statistics
Free bindings
Number of Free Binding IP addresses provided
by the DHCP server.
Auto bindings
Number of Auto Binding IP addresses.
Discover packets
Number of Discovery packets received from
the DHCP workstation by the DHCP server
during the discovery period.
Request packets
Number of Request packets received from the
DHCP workstation by the DHCP server during
the selection period.
Chapter 7 Performance Statistics
Fields
89
Description
Decline packets
Number of Decline packets received from the
DHCP workstation by the DHCP server during
the selection period.
Inform packets
Number of Inform packets of configuration
information request sent from the DHCP
workstation to the DHCP server.
Invalid packets
Number of invalid communication packets
between the DHCP workstation and the DHCP
server.
Offer packets
Number of Offer packets sent from the DHCP
server to the DHCP workstation during the
offer period.
Ack packets
Number of Ack packets sent from the DHCP
server to the DHCP workstation during the
acknowledge period.
NAK packets
Number of NAK (negative acknowledgement)
packets sent from the DHCP server to the
DHCP workstation during the acknowledge
period.
DHCP Server Bindings
IP Address
IP address bound to a MAC address in the
DHCP server.
MAC Address
MAC address bound to an IP address in the
DHCP server.
Lease Expires
The lease expiration time of the bound
address.
Type
Type of bound address, e.g. Manual, Auto
Buttons
Refresh
Click this button to retrieve the latest statistics
of the system.
90
Chapter 7 Performance Statistics
Fields
Clean
Description
Click this button to clean the statistics of the
system.
Theory:
DHCP service operation theory:
The communication method between the DHCP workstation
and server is depending upon whether it is the first time that the
DHCP workstation logs into the network. Consider the following
situation as an example when the DHCP workstation logs into
the network for the first time:
The first period is a discovery period when the DHCP
workstation discovers DHCP servers. The DHCP workstation
broadcasts the “dhcp discover” messages to search DHCP
servers (DHCP server IP address is not known), i.e., the DHCP
workstation sends specific broadcast information to
255.255.255.255. Every host installed with TCP/IP protocol on
the network will receive such broadcast information. Only DHCP
servers will respond to this broadcast information.
The second period is an offer period when DHCP servers offer
the IP address. DHCP servers will respond when they receive
the “dhcp discover” message and assign an unleased IP
address to the DHCP workstation. Then send the DHCP
workstation the “dhcp offer” message, which includes the IP
address to be leased and other configuration.
Chapter 7 Performance Statistics
91
The third period is a selection period when the DHCP
workstation selects the IP address offered by one DHCP server.
If multiple DHCP servers send “dhcp offer” messages to the
DHCP workstation, the DHCP workstation will accept only the
first received “dhcp offer” message, and broadcast one “dhcp
request” message as response, which includes the selected
DHCP server request IP address. The workstation broadcasts
the “dhcp request” message in order to inform all DHCP servers
that it has selected the IP address offered by one DHCP server.
The fourth period is an acknowledge period when the DHCP
server acknowledges the offered IP address. When the DHCP
server receives the “dhcp request” message responded by the
DHCP workstation, it will send the DHCP workstation a “dhcp
ack” message which includes the offered IP address and other
configurations, informing the DHCP workstation to use the
offered IP address. The DHCP workstation will then bind the
TCP/IP protocol to the network card. All other DHCP servers
except the selected server will take back their offered IP
addresses.
DHCP Relay Statistics
Access Method:
Click “Statistic/DHCP Relay” on the left panel.
Configuration Interface:
92
Chapter 7 Performance Statistics
Figure 47 DHCP Relay Statistics
Description:
Table 17 DHCP Relay Statistics Window Description
Fields
Description
DHCP Relay Statistics
Discover packets
Number of Discover packets sent from the
DHCP workstation to the DHCP server via the
AP during the discovery period.
Request packets
Number of Request packets sent from the
DHCP workstation to the DHCP server via the
AP during the selection period.
Chapter 7 Performance Statistics
Fields
93
Description
Release packets
Number of Release packets initiated by the
DHCP workstation, and forwarded by the AP to
the DHCP server, releasing IP addresses used
by DHCP workstation.
Decline packets
Number of Decline packets sent from the
DHCP workstation to the DHCP server via the
AP to decline IP address Offer response(s)
from DHCP server(s).
Inform packets
Number of Inform packets sent from the DHCP
workstation to the DHCP server via the AP.
Offer packets
Number of Offer packets sent from the DHCP
server to the DHCP workstation via the AP
during the Offer period.
Ack packets
Number of Ack packets sent from the DHCP
server to the DHCP workstation via the AP
during the acknowledge period.
NAK packets
Number of NAK packets sent from the DHCP
server to the DHCP workstation via the AP
during the acknowledge period.
Buttons
Refresh
Click this button to retrieve the latest statistics
of the system.
Clean
Click this button to clean the statistics of the
system.
RADIUS Client Statistics
Access Method:
Click “Statistic/RADIUS Client” on the left panel.
94
Chapter 7 Performance Statistics
Configuration Interface:
Figure 48 RADIUS Client Statistics
Description:
Table 18 RADIUS Client Statistics Window Description
Fields
Description
From client to server
Request packets
Number of Request packets sent by the
RADIUS Client.
Account start packets
Number of Account Start packets sent by
the RADIUS Client.
Account stop packets
Number of Account Stop packets sent by
the RADIUS Client.
Chapter 7 Performance Statistics
95
Fields
Description
Account update packets
Number of Account Update packets sent
by the RADIUS Client.
Retransmit packets
Number of retransmitted packets sent by
the RADIUS Client.
From server to client
Accept packets
Number of Accept packets received by
the RADIUS Client.
Reject packets
Number of Reject packets received by
the RADIUS Client.
Response packets
Number of Response packets received
by the RADIUS Client.
Dropped packets
Number of Dropped packets received by
the RADIUS Client.
Buttons
Refresh
Click this button to retrieve the latest
statistics of the system.
Clean
Click this button to clean the statistics of
the system.
ARP Table
Access Method:
Click “Statistic/ARP” on the left panel.
Configuration Interface:
96
Chapter 7 Performance Statistics
Figure 49 ARP Table
Description:
The ARP table fields include IP address, MAC address and
ARP table obtaining type. The type can be “dynamic” or “static”.
The obtaining type is dynamic only when the ARP entry is learnt
during the AP packet forwarding period. The obtaining type is
static only when the ARP entry is added manually.
To prevent the ARP table information from aging, click
to maintain the table.
Route Table
Access Method:
Click “Statistic/Route” on the left panel.
Configuration Interface:
Chapter 7 Performance Statistics
97
Figure 50 Route Table
Description:
The ARP table information in the AP includes the following
fields:
IP address and mask: The destination network segment and its
subnet mask for the route.
Next hop: The IP address of the next hop router’s ingress.
Interface: The egress on the AP from which the route reaches
the destination router.
Type: Dynamic network route or dynamic host route.
Online User Information
Access Method:
Click “Statistic/Online user” on the left panel.
98
Chapter 7 Performance Statistics
Configuration Interface:
Figure 51 Online User Information
Description:
Table 19 Online User Information Window Description
Fields
Description
User ID
It is a unique ID automatically generated by the
system when adding a new user.
User Name
The name of the online user.
Auth Type
The authentication type for the online user.
Auth Mode
The authentication mode for the online user.
Status
The status of the online user.
IP
The IP address assigned to the online user.
MAC
The MAC address of the online user.
Accounting
Type
Accounting type for the online user.
Elapsed Time
The total elapsed online time.
Force Offline
Click this button to force the user offline.
Chapter 7 Performance Statistics
99
MAC Address
Access Method:
Click “Statistic/MAC address” on the left panel.
Configuration Interface:
Figure 52 MAC Address
Description:
The MAC address information includes the following fields:
MAC address, learning type, forwarding port (WAN port or LAN
port), pass time and age time (aging time for the MAC address).
For example:
The pass time in the first line of the window shown in 錯誤! 找不
到參照來源。 is 0, which means the MAC address is connected
to the AP all the time.
100
Chapter 7 Performance Statistics
In the third line, the age time for the MAC address
“00:04:23:85:39:5e” is 300 seconds, the pass time is 2 seconds,
then the remaining life time for this MAC address is 298
seconds.
8
Web-based Configuration
Examples
AP in Bridge Mode
Objective:
To establish a wireless network to provide wireless access for
subscribers. The AP works only as a bridge. Data is transmitted
between the AP and clients by WEP encryption.
Network Topology:
Figure 53 Network Topology
Uplink port
Detailed Instructions:
102
Chapter 8 Web-based Configuration Examples
1.
After completing the hardware installation, launch the
WEB configuration interface.
According to the above network topology, use a
network cable (straight-through or crossover) to
connect the PC and the AP’s LAN interface. Set the
PC IP address as 172.18.37.X/255.255.255.0. The
default IP address of the AP LAN interface is
172.18.37.1
Input http://172.18.37.1 in the PC browser. Use
“admin” for both username and password to log in to
the system
2.
Set the AP in Bridge mode.
Click Guide to display the “Set AP Mode” window as
shown below. The default mode is Bridge mode.
Click to display the “Set LAN Interface”
window as shown below:
Chapter 8 Web-based Configuration Examples
103
Configure the IP address for the LAN interface. Click
to display the “Set Wireless Port” window as
shown below:
104
Chapter 8 Web-based Configuration Examples
Configure the SSID for the WLAN port and select a
channel. Default value can also be used. Click
to display the window as shown below:
Click , and the AP will reboot. After the
rebooting is complete, the configuration will be valid
3.
Configure the WNIC SSID to enable the communication
with the AP.
Set the same SSID in WNIC Window IE as in AP
Chapter 8 Web-based Configuration Examples
4.
105
Now the AP can communicate with the PC
Set the WEP encryption between the AP and Client
WNIC.
Click “Basic Config/Wireless Port” to display the
window as shown below; enable WEP encryption with
64-bit, select “Alphabetical” key format and enter
“mykey” as the key1 value
Click . The system will prompt the user to
save the configuration, and then reboot the AP to
initiate the configuration
Set “mykey” as the WEP value in WNIC Windows IE
106
Chapter 8 Web-based Configuration Examples
AP in Router Mode (Case 1)
Objective:
To establish a medium-scale network for a company, where the
AP acts as an authenticator, AC as an authentication agent and
the remote server as RADIUS authentication and accounting
server.
The AP obtains the IP address via the remote DHCP server.
The AP will use NAT (Network Address Translation) for
Chapter 8 Web-based Configuration Examples
107
management when it works as a DHCP relay. Configure two
dynamic subscribers and one static subscriber
Network Topology:
Radi us Ser ver
AC
上行口
AP1
AP2
IP M A N
DHCP Ser ver
Commercial
企业大楼Building
Detailed Instructions: (Consider AP1 as an example)
5.
Click “Basic/DHCP Server” to display the “DHCP
Server” window. Enable “DHCP Relay” and configure
the trust server for DHCP relay.
108
Chapter 8 Web-based Configuration Examples
6.
Configure 802.1x authentication. Click “Advanced
Config/Authentication” to display the “Authentication”
window. Enable 802.1x authentication, set the
authentication mode to “remote” and set the maximum
number of online users to “10”.
Chapter 8 Web-based Configuration Examples
7.
109
Click “Advanced Config/RADIUS Client” to display the
“RADIUS Client” window. Configure the RADIUS server
and its parameters.
110
Chapter 8 Web-based Configuration Examples
8.
Click “Advanced Config/NAT” to display the “NAT”
window. Enable NAT and perform advanced NAT
configuration.
9.
Click “Advanced Config/Subscriber” to add dynamic
subscribers and static subscribers.
Chapter 8 Web-based Configuration Examples
111
AP in Router Mode (Case 2)
Objective:
To establish a small-scale network for a company with low
investment and strong functionality. The number of subscribers
is no more than 20.
The BRAS (Broadband Remote Access Server) aggregates the
authentication and accounting information. Enable NAT and
PPPoE server.
AP1 and AP2:
Enable PPPoE client for WAN interface
Enable DHCP server for LAN interface in order to assign
addresses for wireless subscribers
Enable 128-bit WEP encryption
Enable load balance
Enable 802.1x local authentication
Network Topology:
112
Chapter 8 Web-based Configuration Examples
BRAS
Detailed Instructions: (Consider AP1 as an example)
1.
Click “Basic Config/WAN Interface” to display the “WAN
Interface” window. Enable PPPoE.
Chapter 8 Web-based Configuration Examples
2.
113
Click “Basic Config/DHCP server” to display the “DHCP
Server” window. Enable the DHCP server for the LAN
interface.
114
Chapter 8 Web-based Configuration Examples
3.
Click “Basic Config/Wireless port” to display the
“Wireless Port” window. Configure WEP Encryption.
4.
Click “Advanced Config/Isolation&Filter” to display the
“Isolation and Filter” window. Enable user based load
balance.
Chapter 8 Web-based Configuration Examples
5.
115
Configure 802.1x authentication. Click “Advanced
Config/Authentication” to display the “Authentication”
window. Enable 802.1x authentication, set the
authentication mode to “local” and the maximum
number of online users to “10”.
9
CLI Command Set
The version is 2.0.
EXEC Commands
Debug
This command is used for field debug support and can be
performed only by an administrator.
Syntax: debug
Access level: 10
Explanation: Use this command to reach the debug level.
Enable
Use this command to reach the privileged EXEC level.
Syntax: enable
Access level: 1
118
Chapter 9 CLI Command Set
Clear
Use this command to clear the screen. It can be used at any
configuration level.
Syntax: clear
Access level: 0
End
Use this command to return to the privileged EXEC mode from
any CLI level except EXEC level. This command can be used at
any configuration level except EXEC level.
Syntax: end
Access level: 0
Exit
Use this command to return one level back. Use “exit all” to
return to EXEC level. This command can be used at any
configuration level.
Syntax: exit [all]
Access level: 0
Chapter 9 CLI Command Set
119
History
Use this command to show the history substitution buffer
contents. This command can be used at any configuration level.
Syntax: history
Access level: 0
Explanation: Use this command to show the command history
contents.
Logout
Use this command to terminate a terminal session. It can be
used at any configuration level.
Syntax: logout
Access level: 0
Ping
Use this command to test the network layer connectivity
between source and destination address. This command can be
used at any configuration level.
Syntax: ping
Access level: 2
120
Chapter 9 CLI Command Set
Quit
Use this command to return to the EXEC mode from any CLI
level. This command can be used at any configuration level.
Syntax: quit
Access level: 0
Show
The show commands are described in Section 6.
Tree
Use this command to show the command tree. It can be used at
any configuration level.
Syntax: tree
Access level: 0
Write Memory
Use this command to save the running configuration into the
configuration file. This command can be used at any
configuration level.
Syntax: write memory
Chapter 9 CLI Command Set
121
Access level: 2
Explanation: Use this command to
configuration into the startup-config file.
save
the
running
Privileged EXEC Commands
Configure
Use this command to reach the global CONFIG level.
Syntax: configure {terminal}
Access level: 1
Copy Config to TFTP
Use this command to upload a copy of the configuration file to
the designated TFTP server.
Syntax: copy config to tftp
Possible value: ip-address: IP address of the TFTP server
filename: Up to 32 characters for the designated file name on
the TFTP server
Access level: 2
122
Chapter 9 CLI Command Set
Copy Config from TFTP
Use this command to download a copy of the configuration file
from the designated TFTP server.
Syntax: copy config from tftp
Possible value: ip-address: IP address of the TFTP server
filename: Up to 32 characters for the designated file name on
the TFTP server
Access level: 2
Copy Image From TFTP
Use this command to download a copy of the software image
from TFTP server. Reload (reboot) the system to activate the
newly downloaded image.
Syntax: copy image from tftp
Possible value: ip-address: IP address of the TFTP server
filename: Up to 32 characters for the designated file name on
the TFTP server
Access level: 2
Chapter 9 CLI Command Set
123
Copy Image to TFTP
Use this command to download a copy of the software image to
the TFTP server.
Syntax: copy image from tftp
Possible value: ip-address: IP address of the TFTP server
filename: Up to 32 characters for the designated file name on
the TFTP server
Access level: 2
Disable
Use this command to return to the EXEC command level from
the Privileged EXEC level
Syntax: disable
Access level: 0
Erase Config
Use this command to erase the config file stored in the flash.
Syntax: erase config
Access level: 2
124
Chapter 9 CLI Command Set
Clear ARP
Use this command to reset the ARP table.
Syntax: clear arp
Access level: 2
Explanation: Use this command to clear the ARP table or
delete all dynamic entries.
Clear DHCP Binding
Use this command to delete one or all automatic address
binding(s) from the Dynamic Host Configuration Protocol
(DHCP) Server database.
Syntax: clear dhcp binding [ip-address]
Possible value: ip-address: The address of the binding to be
cleared
Default value: clear all bindings
Access level: 2
Explanation: Use this command to clear DHCP server IP
address bind table.
Chapter 9 CLI Command Set
125
Clear DHCP Statistics
Use this command to reset all Dynamic Host Configuration
Protocol (DHCP) Server counters or Relay counters.
Syntax: clear dhcp statistics [relay | server]
Default value: Relay and server’s statistics
Access level: 2
Clear Dot1x Statistics
Use this command to reset all 802.1x counters.
Syntax: clear dot1x statistics
Access level: 2
Explanation: Use this command to clear DOT1X statistics.
Clear RADIUS
Use this command to reset all radius counters.
Syntax: clear radius
Access level: 2
126
Chapter 9 CLI Command Set
Explanation: Use this command to clear RADIUS client
statistics.
Clear MAC
Use this command to reset the MAC table.
Syntax: clear mac
Access level: 2
Clear NAT
Use this command to clear all NAT entries.
Syntax: clear nat
Access level: 2
Clear NAT Translation
Use this command to clear NAT translation entries.
Syntax: clear nat
Access level: 2
Kill
Use this command to terminate a CLI session.
Chapter 9 CLI Command Set
Syntax: kill
Possible value: session-id: 0 - 4
Access level: 2
Reboot
Use this command to reboot the system.
Syntax: reboot
Access level: 2
Auto-config Enable/Disable
Use this command to enable or disable auto configuration.
Syntax: auto-config enable/disable
Access level: 2
Global Config Commands
AP-Mode
Use this command to select AP work mode.
Syntax: ap-mode {bridge|route}
127
128
Chapter 9 CLI Command Set
Access level: 2
ARP Entry
Use this command to add/delete an ARP entry.
Syntax: arp entry
no arp
Possible value:
xx:xx:xx:xx:xx:xx
mac-address:
MAC
address,
format:
Access level: 2
Broadcast Limit
Use this command to enable broadcast limit and set limit
packets value per second
Syntax: broadcast limit
no broadcast limit
Possible value: packets: 0-65535; 0 means broadcast limit is
disabled
Default value: 64
Access level: 2
Chapter 9 CLI Command Set
129
Console Baud-Rate
Use this command to set the baud rate of the console interface.
After the configuration is changed, the connection to the current
console-interface user will be lost.
Syntax: console baud-rate
no console baud-rate
Possible value: value: {9600|19200|38400|57600|115200}
Default value: 9600
Access level: 2
Console Timeout
Use this command to set the aging time how long the console
will be logout without any input.
Syntax: console timeout
no console timeout
Possible value: value: 0~240 minutes (0 means to disable
console timeout)
Default value: 30 minutes
130
Chapter 9 CLI Command Set
Access level: 2
Explanation: Use this command to set the console aging time.
DHCP Service
Use the dhcp service global configuration command to select
the DHCP configuration. Use the no form of this command to
disable the DHCP service.
Syntax: dhcp service {server| relay}
no dhcp service
Possible value: Server or relay
Access level: 2
DHCP-Client Enable /Disable
Use this command to enable or disable the DHCP client feature.
Syntax: dhcp-client {enable|disable}
Default value: enable
Access level: 2
Chapter 9 CLI Command Set
131
DHCP-Client Trust
Use this command to set the trusted DHCP server IP addresses.
(Up to 5)
Syntax: [no] dhcp-client trust
Possible value: ip-address: IP address of DHCP server
Access level: 2
DHCP-Pool
Use the dhcp-pool global configuration command to configure
Dynamic Host Configuration Protocol (DHCP) address pool on
the DHCP Server and enter the domain’s DHCP pool
configuration mode. Use the no form of this command to
remove the address pool.
Syntax: [no] dhcp-pool
Default value: DHCP address pools are not configured.
Access level: 2
DHCP-Server Host
Use this command to set the DHCP server’s IP address when
DHCP relay is enabled; use the no form to delete the server.
132
Chapter 9 CLI Command Set
Syntax: [no]dhcp-server host (Up to 3)
Possible value: ip address
Access level: 2
Dot1x Authentication Enable / Disable
Use this command to
authentication function.
enable
or
disable
the
DOT1X
Syntax: dot1x authentication {enable|disable}
Possible value: Port: lan, wlan1, wlan2
Default value: disable
Access level: 2
Dot1x Authentication Mode
Use this command to set the authentication mode for this AP.
Syntax: dot1x authentication mode
no dot1x authentication mode
Possible value:
Port: lan, wlan1, wlan2
Chapter 9 CLI Command Set
133
Mode: local, remote, local-remote, remote-local
Default value: local-remote
Access level: 2
Dot1x Encryption-Mode
Use this command to set the authentication encryption mode for
each port.
Syntax: dot1x encryption-mode {chap|pap}
no dot1x encryption-mode
Possible value:
Port: lan, wlan1, wlan2
chap|pap: keyword
default value: pap
Access level: 2
Dot1x Initialize
Use this command to initialize an 802.1x’s user based on the
user ID.
Syntax: dot1x initialize
134
Chapter 9 CLI Command Set
Possible value: : 1-256
Access level: 2
Explanation: Use this command to initialize the DOT1X
subscriber status.
Dot1x Max-Req
Use this command to set the maximum number of times that the
device sends an Extensible Authentication Protocol (EAP) –
(request /identity frame (no response is received)) before
restarting the authentication process. Use the no form of this
command to return to the default setting.
Syntax: dot1x max-req
no dot1x max-req
Possible value: count: 1 - 2.
Default value: 2 times
Access level: 2
Dot1x Quiet-Period
Use this command to set the number of seconds that the switch
remains in the quiet state following a failed authentication
Chapter 9 CLI Command Set
135
exchange (for example, the client provided an invalid password).
Use the no form of this command to return to the default setting.
During the quiet period, the switch does not accept or initiate
any authentication requests. The user should change only the
default value of this command to adjust for unusual
circumstances such as unreliable links or specific behavioral
problems with certain clients and authentication servers. To
provide a faster response time to the user, enter a smaller
number than the default.
Syntax: dot1x quiet-period
no dot1x quiet-period
Possible value: seconds: 0-65535s
Default value: 5s
Access level: 2
Explanation: Use this command to set another authentication
beginning period after a failed authentication exchange.
Dot1x Re-Authenticate
Use this command to manually initiate a re-authentication of all
802.1X-enabled ports or the specified 802.1X-enabled port. The
user can use this command to re-authenticate a subscriber
without waiting for the configured number of seconds between
136
Chapter 9 CLI Command Set
re-authentication attempts (re-authperiod) and automatic reauthentication.
Syntax: dot1x re-authenticate
Possible value: userid: 1-256
Access level: 2
Explanation: Use this command to manually initiate a reauthentication for a subscriber at once.
Dot1x Re-Authentication
Use this command to enable periodic re-authentication of the
client. Use the no form of this command to return to the default
setting. Configure the time period between periodic reauthentication attempts by using the dot1x re-authperiod
command.
Syntax: [no] dot1x re-authentication
Possible value: userid: 1-256
Default value: Periodic re-authentication is disabled
Access level: 2
Explanation: Use this command to set the periodic reauthentication status while the subscriber is online.
Chapter 9 CLI Command Set
137
Dot1x Re-Authperiod
Use this command to set the number of seconds between reauthentication attempts. Use the no form of this command to
return to the default setting. The dot1x re-authperiod
configuration command affects the behavior of the device only if
the user has enabled periodic re-authentication by using the
dot1x re-authentication configuration command. The user
should change the default value of this command only to adjust
for unusual circumstances such as unreliable links or specific
behavioral problems with certain clients or authentication
servers.
Syntax: dot1x re-authperiod
no dot1x re-authperiod
Possible value: seconds: 1-65535 s
Default value: 180s
Access level: 2
Explanation: Use this command to set the period between reauthentication attempts.
Dot1x Server-Timeout
Use this command to set the Back-End Authenticator-toAuthentication-Server Retransmission Time for Transport Layer
138
Chapter 9 CLI Command Set
Packets. Use the no form of this command to return to the
default setting. The authentication server notifies the back-end
authenticator each time it receives a transport layer packet.
When the back-end authenticator does not receive a notification
after sending a packet, the back-end authenticator waits for
certain time period (i.e. set time period) and then retransmits the
packet.
Syntax: dot1x server-timeout
no dot1x server-timeout
Possible value: 1-65535s
Default value: 30s
Access level: 2
Explanation: Use this command to set dot1x server timeout.
Dot1x Supplicant-Timeout
Use this command to set the Back-End Authenticator-toSupplicant Retransmission Time for EAP-Request Frames. Use
the no form of this command to return to the default setting. The
supplicant notifies the back-end authenticator that the
authenticator received the EAP-request frame. When the backend authenticator does not receive this notification, the backend authenticator waits for certain time period (i.e. set time
period) and then retransmits the frame.
Chapter 9 CLI Command Set
139
Syntax: dot1x supplicant-timeout
no dot1x supplicant-timeout
Possible value: 1-65535s
Default value: 30s
Access level: 2
Explanation: Use this command to set dot1x supplicant timeout.
Dot1x TX-Period
Use this command to set the number of seconds that the device
waits for a response to an Extensible Authentication Protocol
(EAP)-request /identity frame from the client before
retransmitting the request. Use the no form of this command to
return to the default setting. The user should change the default
value of this command only to adjust for unusual circumstances
such as unreliable links or specific behavioral problems with
certain clients or authentication servers.
Syntax: dot1x tx-period
no dot1x tx-period
Possible value: : 1-65535 s
Default value: 30s
140
Chapter 9 CLI Command Set
Access level: 2
Explanation: Use this command to set dot1x tx-period.
Dynamic-User
Add or delete a dynamic user for local authentication
Syntax:
dynamic-user {name } {password
}
no dynamic-user {name }
Possible value: name: no longer than 32 characters; passwd:
no longer than 32 characters
Access level: 2
Explanation: Use this command to create/delete a local
authentication user in the database.
Dynamic-User Enable / Disable
Use this command to enable/disable a dynamic user account.
Syntax: dynamic-user {name } {enable| disable}
Access level: 2
Chapter 9 CLI Command Set
141
Explanation: Use this command to enable/disable an account
in the database
Ethernet-Port
Use this command to enter the Ethernet port configuration level.
Syntax: ethernet-port
Possible value: ports: wan, lan1 lan2 lan3 lan4
Access level: 1
Hostname
Use this command to set the host name of the current system
for prompting.
Syntax: hostname
Possible value: Up to 32 alphanumeric, ‘-’, and ‘_’ characters
for the hostname text string
Access level: 2
IAPP
Use this command to enter IAPP mode.
Syntax: iapp
142
Chapter 9 CLI Command Set
Access level: 2
Interface
Use this command to access the interface CONFIG level of the
CLI.
Syntax: interface ethernet {lan | wan}
Possible value: lan: Enters the LAN interface,
wan: Enters the WAN interface.
Access level: 2
IP Default-Route
Use the ip default-route global configuration command to
define a default gateway (router) when IP routing is disabled.
Syntax: ip default-route
no ip default-route
Possible value: ip-address: IP address of the router.
Default value: Disabled.
Access level: 2
Chapter 9 CLI Command Set
143
Explanation: Use this command to set the default route for this
AP.
IP RADIUS Source-Interface
To force RADIUS to use the IP address of a specified interface
for all outgoing RADIUS packets, use the ip radius sourceinterface global configuration command.
Syntax: ip radius source-interface {wan | lan}
no ip radius source-interface
Access level: 2
Explanation: Use this command to set the RADIUS source
interface.
IP Route
Use the ip route command in Global configuration command
mode to establish static routes.
Syntax: ip route
no ip route
Possible Value:
144
Chapter 9 CLI Command Set
ipaddr: This parameter identifies the destination IP address of
the static route.
mask: This parameter identifies the destination prefix mask of
the static route.
next-hop: This parameter identifies the IP address of the next
hop that can be used to reach the network.
Access level: 2
Isolation
Use this command to set isolation between the subscribers. No
parameter means to isolate all.
Syntax: isolation [lan | lan-wlan | wlan ]
Access level: 2
Load-Balance Enable/Disable
Use this command to enable or disable the load balance.
Syntax: load-balance {enable|disable}
Access level: 2
Chapter 9 CLI Command Set
145
Load-Balance Mode
Use this command to set load-balance mode.
Syntax: load-balance mode {user-base | flux-base}
Default Value: user-base
Access level: 2
MAC Age Time
Use this command to set the aging period for all MAC address
entries in the address table of the switch.
Syntax: mac age time
Possible value: value: 10~65535 seconds
Default value: 300 seconds
Access level: 2
MAC Black-List
Use this command to add/delete a MAC black list entry. The
packets from the source MAC addresses will not be permitted to
access the AP.
Syntax: [no] mac black-list
146
Chapter 9 CLI Command Set
Access level: 2
Max-Online-User
Use this command to set the maximum number of online users
this AP permits.
Syntax: max-online-user
no max-online-user
Possible value:
Port: lan,wlan1,wlan2
Count: 1-256
Default value: count: 256
Access level: 2
NAT Enable/Disable
Use this command to enable or disable NAT.
Syntax: nat {enable|disable}
Default value: Enabled
Access level: 2
Chapter 9 CLI Command Set
147
NAT Interface
Use this command to specify the interface attached to NAT.
Syntax: nat interface {inside | outside}
Default value:
inside: lan(downlink)
outside: wan (uplink)
Access level: 2
NAT Map
Use this command to configure static entries of address
mapping for basic NAT.
Syntax: [no] nat map
Possible value:
local-ip: Private IP address inside NAT .
global-ip: Global IP address outside NAT.
Access level: 2
148
Chapter 9 CLI Command Set
NAT Mode
Use this command to set NAT mode.
Syntax: nat mode {napt|basic}
Default value: napt
Access level:2
NAT Pool
Use this command to configure address pool for dynamic NAT.
Syntax: [no] nat pool
Possible value:
start-ip: Specifies the IP address at the beginning of the pool
range.
ip-mask: Specifies the network mask associated with the
address pool.
Access level: 2
NAT Redirect
Use this command to configure static entry of host redirection
for NAPT.
Chapter 9 CLI Command Set
149
Syntax: [no] nat redirect
Possible value:
global_port: Destination port number of incoming packets.
local_ip: Private IP address to be redirected.
Access level: 2
NAT Timeout
Use this command to set the age timeout for all NAT entries.
Syntax: nat timeout
Possible value:
secs: 1-3600
Default value: 120
Access level: 2
Operator Access level
Use this command to change the user’s access level.
Syntax: operator access level {name } {level
}
150
Chapter 9 CLI Command Set
Possible value: user-name: Up to 16 alphanumeric characters
for the user name
access-level:
10 – Administrator
2 – Power configuration access
1 – Port-configuration access
0 – Read-only access
Access level: 10
Operator Add / Delete
Use this command to add/delete a user account.
Syntax: operator add {name } {level } {mode }
operator delete {name < name>}
Possible value: user-name: Up to 16 alphanumeric characters
for the user name
access-level:
10 – Administrator
Chapter 9 CLI Command Set
151
2 – Power configuration access
1 – Port configuration access
0 – Read only access
access-mode: Telnet, console or web. Multiple values can be
input.
Access level: 10
Note: When the operator {level } {mode
} command is entered, the system displays
“Enter new password: ” and “Confirm new password: ” in
next line, the user should input the correct password.
Operator Password
Use this command to change the user’s password whose name
is .
Syntax: operator password
Possible value: user-name: Up to 16 alphanumeric characters
for the user name
Access level: 1
Note: When the command “user password ” is entered,
the system displays “Enter old password: ” (For system
administrator, this line will not be displayed.), “Enter new
152
Chapter 9 CLI Command Set
password: ” and “Confirm new password: ” in next line, the
user should input the correct password.
PPPoE Auto-Connect Disable/Enable
Use this command to set auto connect to the PPPOE server
when the AP boots successfully.
Syntax: pppoe auto-connect {disable|enable}
Access level: 2
PPPoE Connect
Use this command to connect to the PPPOE server.
Syntax: pppoe connect
Access level: 2
PPPoE Disconnect
Use this command to disconnect from the PPPOE server.
Syntax: pppoe disconnect
Access level: 2
PPPoE User
Use this command to add a PPPoE user.
Chapter 9 CLI Command Set
153
Syntax: pppoe user {name } {password }
Possible value: name: up to 30 characters; pwd: up to 30
characters.
Access level: 2
RADIUS-Acctserver {Enable | Disable}
Use this command to enable/disable a designated accounting
server.
Syntax: radius-acctserver {enable | disable} [first | second |
third]
Access level: 2
RADIUS-Acctserver Host
Use the radius-acctserver host global configuration command
to specify a RADIUS accounting server host.
Syntax: radius-acctserver host
address>
{first | second | third} ] [accounting-key {string}] [timeout
] [dead-time ] [retransmit ]
no radius-acctserver info {first | second | third} [acct-port]
[accounting-key] [timeout] [dead-time] [retransmit]
Possible Value:
acct-port: 1-65535; default value: 1813
accounting-key {string}: string, default value: “”
timeout: 1-16 seconds; default value: 5 seconds
dead-time: 1-1440 minutes; default value: 5 minutes
retransmit: 1-6; default value: 3
Access level: 2
Chapter 9 CLI Command Set
155
RADIUS-Authserver {Enable | Disable}
Use this command
authentication server.
to
enable/disable
the
designated
Syntax: radius-authserver {enable | disable} [first | second |
third]
Access level: 2
RADIUS-Authserver Extra
Use this command to set authentication radius server’s
additional attribute.
Syntax: radius-authserver extra {first | second | third}
[iapp|wpa]
Possible value: iapp|wpa: keywords
Access level: 2
RADIUS-Authserver Host
Use the radius-authserver host global configuration command
to specify a RADIUS authentication server host. The other
parameters are default.
Syntax: radius-authserver host {first | second | third}
156
Chapter 9 CLI Command Set
no radius-authserver host {first | second | third}
Possible Value: ip-address: IP address of the RADIUS
authentication server host.
Access level: 2
RADIUS-Authserver Info
Use this command to set the designated authentication server’s
parameter(s). Use the no form of this command to set the
designated authentication server’s parameter(s) as default
value(s).
Syntax: radius-authserver info {first | second | third} [authport ] [authentication-key ] [timeout
] [dead-time ] [retransmit ]
no radius-authserver info {first | second | third} [auth-port]
[authentication-key] [timeout] [dead-time] [retransmit]
Possible Value:
auth-port: 1-65535; default value: 1812
authentication-key :string; default value: “”
timeout: 1-16 seconds; default value: 5 seconds
dead-time: 1-1440 minutes; default value: 5 minutes
Chapter 9 CLI Command Set
157
retransmit: 1-6; default value: 3
Access level: 2
RADIUS-Server Dead-Time
To improve RADIUS response time when some servers might
be unavailable, use the radius-server dead-time global
configuration command to cause the unavailable servers to be
skipped immediately. Use the no form to set the dead time to 5
minutes.
Syntax: radius-server dead-time
no radius-server dead-time
Possible value: minutes: 1-1440 minutes (24 hours).
Default value: 5.
Access level: 2
RADIUS-Server Retransmit
Use this command to specify the number of times the RADIUS
server sets to down. Use the no form to return to the default
value.
Syntax: radius-server retransmit
158
Chapter 9 CLI Command Set
no radius-server retransmit
Possible Value: retries: 1-6
Default Value: 3 times
Access level: 2
RADIUS-Server Timeout
Use this command to set the interval a router waits for a server
host to reply. Use the no form to restore the default value.
Syntax: radius-server timeout
no radius-server timeout
Possible Value: seconds: 1-16
Default: 5 seconds
Access level: 2
SNMP Client
Use this command to set SNMP client IP address.
Syntax: snmp client [mask]
no snmp client < ip>
Chapter 9 CLI Command Set
159
SNMP Server Community
Use this command to set SNMP server community.
Syntax: snmp server commnunity {ro | rw}
no snmp server commnunity
Possible value: community: up to 64 characters
Default value: ro community: public; rw community: private.
Access level: 2
SNMP Server Contact
Use this command to set SNMP server contact string
Syntax: snmp server contact
Possible value: any text up to 255 characters
Access level: 2
SNMP Server Enable/Disable
Use this command to enable or disable SNMP agent.
Syntax: snmp server enable
160
Chapter 9 CLI Command Set
Default value: SNMP agent is enabled
Access level: 2
SNMP Server Location
Use this command to set SNMP server location string.
Syntax: snmp server location
Possible value: any text up to 255 characters
Access level: 2
SNMP Server Sysname
Use this command to set SNMP server system name string.
Syntax: snmp server sysname
Possible value: Any text up to 255 characters
Access level: 2
SNMP Server Trap Enable/Disable
Use this command to enable or disable SNMP trap.
Syntax: snmp server trap {enable|disable}
Chapter 9 CLI Command Set
161
Possible value: N/A
Default value: trap is enable
Access level: 2
SNMP Server Trap Host
Use this command to set SNMP trap host.
Syntax: snmp server trap host [community
] [port][version]
no snmp server trap host
Default value: community :public
Port:162
Version: v2
Static-MAC-Address
Use this command to define or remove a MAC address in the
static filtering database.
Syntax:
[no]
{wan|lan|wlan}
static-mac-address
Possible value: mac-address: xx:xx:xx:xx:xx:xx
Access level: 2
162
Chapter 9 CLI Command Set
Static-User
Use this command to add or delete a static user.
Syntax: static-user {mac }
no static-user {mac }
Access level: 2
Static-User Enable / Disable
Use this command to enable or disable a static user.
Syntax: static-user {mac } <[enable]/[disable]
Possible value: mac-addr: xx:xx:xx:xx:xx:xx
Default value: disable
Access level: 2
Telnet Client
Use this command to set which IP address (subnet) can or
cannot access the device via telnet. (UP TO 10)
Syntax: telnet client [netmask]
no telnet client [netmask]
Chapter 9 CLI Command Set
163
Access level: 2
Telnet Server Enable / Disable
Use this command to enable/disable the telnet server.
Syntax: telnet server {enable|disable}
Default value: disable
Access level: 2
Telnet Timeout
Use this command to set the aging time how long the Telnet will
be logout without any user input.
Syntax: telnet timeout
no telnet timeout
Possible value: value: 0~240 minutes (0 means to disable
timeout)
Default value: value: 6 minutes
Access level: 2
Explanation: Use this command to set telnet aging time
164
Chapter 9 CLI Command Set
User-Force-Offline
Use this command to force the subscriber to be off-line.
Syntax: user-force-offline
Possible value: userid:1-256
Access level: 2
VLAN Default VID
Use this command to set default VLAN VID. The command will
be valid if the VLAN module is available.
Syntax: vlan default-vid
no vlan default-vid
Possible value:
vid: 1-4094
Default value: 1
Access level: 2
VLAN Employee Default VID
Use this command to set default VLAN employee VID.
Chapter 9 CLI Command Set
165
Syntax: vlan employee default-vid
no vlan employee default-vid
Possible value:
vid: 1-4094
Default value: 1
Access level: 2
VLAN Enable/Disable
Use this command to enable or disable VLAN. The command
will be valid if the VLAN module is available.
Syntax: vlan {enable|disable}
Access level: 2
Explanation: Use this command to enable or disable VLAN
VLAN Mode
Use this command to set VLAN work mode.
Syntax: vlan mode {user-based|port-based|mix}
no vlan mode
166
Chapter 9 CLI Command Set
Default value: user-based
Access level: 2
VLAN port-vid
Use this command to set the designated port’s vid.
Syntax: vlan port-vid {lan|wlan1|wlan2}
no vlan port-vid {lan|wlan1|wlan2}
Possible values:
Vid range:1-4094
Default value:1
Access level: 2
Explanation: Use this command to set the vid of designated
port when work on port-based mode.
VLAN Tag Disable
Use this command to disable VLAN tag. The command will be
valid if the VLAN module is available.
Syntax: vlan tag disable
Access level: 2
Chapter 9 CLI Command Set
167
VLAN Tag Enable
Use this command to enable VLAN tag. The command will be
valid if the VLAN module is available.
Syntax: vlan tag enable
Access level: 2
VLAN Visitor Default Vid
Use this command to set default VLAN visitor VID. The
command will be valid if the VLAN module is available.
Syntax: vlan visitor default-vid
No vlan visitor default-vid
Possible value:
vid: 1-4094
Default value:1
Access level: 2
Webserver
Use this command to enter webserver config mode
168
Chapter 9 CLI Command Set
Syntax: webserver
Access level: 2
Wireless-Port
Use this command to enter the wireless card configuration level.
Syntax: wireless-port
Possible value: ports: 1-2
Access level: 1
DHCP-pool Configuration Mode
DNS-Server
Use the dns-server DHCP pool configuration command to
specify the Domain Name System (DNS) IP servers available to
a Dynamic Host Configuration Protocol (DHCP) client. To
remove the DNS server list, use the no form of this command.
Syntax:
dns-server
[address3].[address4]
no dns-server
[address2]
Chapter 9 CLI Command Set
169
Possible value: address: Specifies the IP address of a DNS
server. One IP address is required. The user can specify up to
four addresses in one command line.
address2...address4: (Optional) Specifies up to four addresses
in the command line
Default value: If DNS IP servers are not configured for a DHCP
client, the client cannot correlate host names to the IP
addresses.
Access level : 2
Explanation: Use this command to set/remove DNS server(s).
Excluded-Address
Use the excluded-address global configuration command to
specify IP addresses that a DHCP Server should not assign to
DHCP clients. To remove the excluded IP addresses, use the
no form of this command. (Up to 8)
Syntax: excluded-address [high-address]
no excluded-address [high-address]
Possible value: low-address: The excluded IP address or first
IP address in the excluded address range.
170
Chapter 9 CLI Command Set
high-address: (Optional) The last IP address in the excluded
address range
Default value: All IP pool addresses are assignable..
Access level : 2
Explanation: Use this command to exclude or remove the
excluded IP address from the pool.
Gateway
Use the gateway DHCP pool configuration command to specify
the default gateway for a Dynamic Host Configuration Protocol
(DHCP) client. To remove the default gateway, use the no form
of this command.
Syntax: gateway
no gateway
Possible value: address: Specifies the IP address of the
gateway
Access level: 2
Explanation: Use this command to set/remove the gateway
Chapter 9 CLI Command Set
171
Lease
Use the lease DHCP pool configuration command to configure
the duration of the lease for an IP address that is assigned by a
Dynamic Host Configuration Protocol (DHCP) Server to a
DHCP client. To restore the default value, use the no form of
this command.
Syntax: lease {[[days ]
] ] | [ infinite]}
[hours ] [minutes
no lease
Possible value: days: Specifies the duration of the lease in
numbers of days
hours: Specifies the number of hours in the lease. A day’s value
must be fed before configuring an hour’s value.
minutes: Specifies the number of minutes in the lease. A day’s
value and an hour’s value must be fed before configuring a
minute’s value.
Infinite: Specifies that the duration of the lease is unlimited
Default value: One day
Access level: 2
172
Chapter 9 CLI Command Set
Explanation: Use this command to set lease for an IP address
that is assigned from the DHCP server.
Network
Use the network DHCP pool configuration command to
configure the subnet number and mask for a Dynamic Host
Configuration Protocol (DHCP) address pool on a DHCP Server.
To remove the subnet number and mask, use the no form of
this command.
Syntax: [no] network
Possible value: network-number: The IP address of the DHCP
address pool
mask: The bit combination that renders which portion of the
address of the DHCP address pool referring to the network or
subnet and which part referring to the host.
Access level: 2
Explanation: Use this command to set/remove the network for
DHCP pool on a DHCP server.
Manual-Binding
Use this command to specify the IP address to a specific MAC
address for a manual binding to a Dynamic Host Configuration
Protocol (DHCP) client.
Chapter 9 CLI Command Set
173
Syntax: manual-binding
no manual-binding
Access level: 2
Explanation: Use this command to bind an IP address to a
MAC address.
Ethernet Port configuration level
Speed-duplex
Use this command to modify the speed and duplex mode for the
port.
Syntax: speed-duplex {auto | 10-full | 10-half | 100-full | 100half}
Default value: auto
Access level: 2
Interface Mode Commands
Disable
Use this command to disable an interface.
Syntax: disable
174
Chapter 9 CLI Command Set
Access level: 2
Enable
Used this command to enable an interface.
Syntax: enable
Access level: 2
IP Address
Use the ip address command in the interface configuration
command mode to assign/remove an IP address for an
interface on a router.
Syntax: ip address
no ip address
Access level: 2
Wireless Port Configuration Level
Beacon Interval
Use this command to set the beacon interval based on 802.11
Syntax: beacon interval < time>
Chapter 9 CLI Command Set
175
no beacon interval
Possible value: times: 20-1000
Default value: 100
Access level: 2
Explanation: Use this command to set wireless card beacon
frame send interval
Basic Rate
Use this command to set the transmission rate of this wireless
card
Syntax: basic rate < 2 | 11|12|g >
Possible value:
value: 2: 1,2Mbit/s at b mode or b/g mode
11: 1,2,5.5,11Mbit/s at b mode or b/g mode
12: 6, 9,12. at g mode
g: 1,2,5,5,11,6,9,12Mbit/s at b/g mode
Access level: 2
176
Chapter 9 CLI Command Set
Fragment Threshold
Use this command to set the fragment threshold. If the TX
MSDU’s length is larger than the threshold, the mechanism is
enabled.
Syntax: fragment threshold < value>
Possible value: value: 256-2346
Default value: 2346
Access level: 2
Frequency-Channel
Use this command to set the work frequency channel based on
802.11
Syntax: frequency-channel < number>
Possible value: number: 1-13
Default value: 1
Access level: 2
Chapter 9 CLI Command Set
177
DTIM Interval
Use this command to set the DTIM (Delivery Traffic Indication
Message) interval based on 802.11
Syntax: dtim interval < number>
Possible value: number: 1-255
Default value: 2
Access level: 2
Power
Use this command to set the transmit power of the wireless
card
Syntax: power < value>
Possible value: value: 100mw, 50mw, 25mw, 10mw
Access level: 2
Explanation: Use this command to set the transmit power of
the card
178
Chapter 9 CLI Command Set
RTS-CTS Threshold
Use this command to set RTS/CTS threshold. If the TX MPDU’s
length is larger than the threshold, the mechanism is enabled.
Syntax: rts-cts threshold < value>
Possible value: value: 0-2347
Default value: 2347
Access level: 2
SSID
Use this command to set the network name of the wireless card.
SSID (Service Set Identifier)
Syntax: ssid < string>
Possible value: string length: 1-32, such as 0-9, a-z, A-Z,
Access level: 2
Explanation: Use this command to set the hostname for this
card
Chapter 9 CLI Command Set
179
Tx Rate
Use this command to set TX rate used for AP to send unicast
frame. Auto means the AP will auto-select the TX Rate
according to self algorithm.
Syntax: tx rate < value>
Possible value:
value: 1, 2, 5.5, 11, 6,9,12,18,24,36,48,54M, auto
Default value: auto
Access level: 2
Explanation: Use this command to set TX rate
Wireless Mode
Use this command to set wireless card work mode: 11b, 11g,
108g or 11b/g
Syntax: wireless mode < value>
Possible value: value: 11b, 11g, 11b/g, 108g
Default value: 11b/g
Access level: 2
180
Chapter 9 CLI Command Set
Explanation: Use this command to set wireless mode.
WDS-Mode Enable / Disable
Use this command to set the wireless card work mode: either
AP or WDS. When it is enabled, the wireless card supports
WDS mode
Use this command to set repeater work mode, either PTP or
PTMP. When it is enabled, the wireless card supports PTMP
mode and enables the WDS mode.
Syntax: wds-mode { | }
Default value: disable
Access level: 2
Explanation: Use this command to enable/disable WDS mode
on this card.
WDS Peer MAC
Use this command to set toward AP MAC addresses based on
WDS mode, when PTMP is enabled, input 1-6 MAC addresses
for this wireless card
Syntax: wds peer mac [ ]
Chapter 9 CLI Command Set
181
no wds peer mac [ ]
Access level: 2
Explanation: Use this command to set toward AP MAC
address on this card.
WEP Encryption Enable / Disable
Use this command to enable WEP encryption.
Syntax: wep encryption
Default value: disable
Access level: 2
WEP Encryption Key
Use this command to set the first WEP key.
Syntax wep encryption key key1 key2
key3 key4
no wep encryption key [key1] [key2] [key3] [key3]
Possible value: string length: 26
Access level: 2
182
Chapter 9 CLI Command Set
Default WEP-Key
Use this command to set the default WEP key based on 802.11.
Syntax: default wep-key < number>
Possible value: number: 1-4
Default value: 1
Access level: 2
Explanation: Use this command to set wireless WEP key for
this card
WEP-Key-Format
Use this command to set WEP key format.
Syntax: wep-key-format < hex | ascii >
Possible value: string: hex or ascii
Access level: 2
WEP-Key-Length
Use this command to set WEP key length.
Syntax: wep-key-length
Chapter 9 CLI Command Set
Possible value: string: 64 or 128
Default value: 64
Access level: 2
Antenna
Use this command to select antenna.
Syntax: antenna {ant-a | ant-b | both}
Default value: both
Access level: 2
WPA Mode
Use this command to set WPA authentication mode.
Syntax: wpa auth-mode {wpa|wpapsk|disable}
Possible value: wpa|wpapsk|disable: keywords
Default value: disable
Access level: 2
183
184
Chapter 9 CLI Command Set
WPA Encryp-Mode
Use this command to set WPA encryption mode.
Syntax: wpa encryp-mode {aes|tkip|auto }
Possible value: aes|tkip|auto :keywords
Default value: auto
Access level: 2
WPA Psk-Passphrase
Use this command to set WPA pre-shared key.
Syntax: wpa psk-passphrase
Possible value: string: Alphanumeric, length range: 8-63
Access level: 2
WPA Groupkey-Update-Interval
Use this command to set WPA group key update interval.
Syntax: wpa groupkey-update-interval
no wpa groupkey-update-interval
Chapter 9 CLI Command Set
185
Possible value: value range:0(means no update), 30- 65535
seconds
Default value: 1800 seconds
Access level: 2
Optimize-108g Enable/Disable
Use this command to enable or disable 108g optimization.
Syntax:optimize-108g enable/disable
Access level: 2
Webserver Mode
Enable/Disable
Use this command to enable or disable the web server.
Syntax: enable/disable
Access level: 2
Explanation: Use this command to enable or disable the web
server.
186
Chapter 9 CLI Command Set
IP-Filter Enable/Disable
Use this command to enable or disable the web server’s IP-filter.
Syntax: ip-filter enable/disable
Access level: 2
Explanation: Use this command to enable or disable the web
server’s IP-filter.
IP-Filter Client
Use this command to set IP-filter’s IP address.
Syntax: ip-filter client [mask]
no ip-filter client
Access level: 2
Explanation: Use this command to add or remove the ipfilter’s
IP address
Port-Filter
Use this command to enable or disable the web server’s port
filter.
Syntax: port-filter {enable|disable}
Chapter 9 CLI Command Set
Possible value:
port: wan,lan,wlan
Access level: 2
IAPP Mode
Enable/Disable
Use this command to enable or disable IAPP.
Syntax: enable/disable
Access level: 2
ESP Enable/Disable
Use this command to enable or disable ESP.
Syntax: esp enable/disable
Access level: 2
Mode
Use this command to set IAPP mode.
Syntax: mode {local|remote}
187
188
Chapter 9 CLI Command Set
no mode
Possible value: local|remote: keywords
Default value: remote
Access level: 2
Map
Use this command to set IAPP map entry.
Syntax: map (max 64 entries)
no map
Access level: 2
Explanation: Use this command to add or delete IAPP map
entry.
Secret
Use this command to set IAPP secret.
Syntax: secret
Possible value: string: alphanumeric; max length:16
Access level: 2
Chapter 9 CLI Command Set
189
Debug Mode
Ping
Use this command to test the network layer connectivity
between source and destination address. This command is a
global command and can be used at any configuration level.
Syntax: ping [times ] [packet-size ]
Possible value: ip-address: Specifies the network layer
destination address .
Times: Specifies the packets to send. Possible values are 110000.
packets-size: Specifies the data size of ICMP packet. 0-65000.
Access level: 2
Explanation: Use this command to test the network layer
connectivity
Debug-Module
Use this command to enable or disable every module’s debug
message
Syntax: debug-module
190
Chapter 9 CLI Command Set
no debug-module [module-name]
Possible value: module name: DOT1X, SMI, RADIUS, DHCPS,
DHCPR, DHCPC, IP, NAT, BRIDGE,DOT11, WEB, CLI, SNMP,
TELETE, L2TP, PPP, PPPOEC
level: ERROR, WAINING, TRACE
Access level: 2
NAT Logging
Use this command to set NAT logging information.
Syntax: nat logging [detail|data]
no nat logging [detail|data]
Possible value: detail|data: keywords
Access level: 2
NAT Print
Use this command to set NAT print information
Syntax: nat print {detail|data|error}
no nat print {detail|data|error}
Possible value: detail|dat|error: keywords
Chapter 9 CLI Command Set
191
Access level: 2
Sys-Function
Use this command to execute some system function.
Syntax: sys-function
Possible value:
function-name: i, arpShow, ifShow, inetstatShow, ipstatShow,
netStackDataPoolShow, netStackSysPoolShow, mbufShow,
hostShow, routeShow, routeStatShow, udpstatShow,
tcpstatShow, icmpstatShow, CPUReport
Access level: 2
Show Version
Use this command to display internal version.
Syntax: show version
Access level: 2
Explanation:
Execute the command, and the following will be displayed:
Hardware version: 1.0.0.1
192
Chapter 9 CLI Command Set
Software version: 1.1.1.0
Create date: Feb 9 2004, 13:49:59
Show Memory
Use this command to display the memory information.
Syntax: show memory
Access level: 2
Explanation:
Show NAT Run
Use this command to display NAT running configuration
Syntax: show nat run
Access level: 2
Show Debug_Module
Use this command to display debug module status.
Syntax: show debug_module
Access level: 0
Chapter 9 CLI Command Set
193
Net-Security Rate-Limit Enable/Disable
Use this command to enable/disable the rate limit.
Syntax: rate-limit enable/disable
Possible value: N/A
Access level: 0
Net-Security Syn-Cache Enable/Disable
Use this command to enable/disable SYN cache.
Syntax: syn-cache enable/disable
Access level: 0
Net-Security Attack-Defense Enable/Disable
Use this command to enable/disable the network attack defense.
Syntax: attack-defense enable/disable
Access level: 0
Show Net-Security
Use this command to display network security configuration.
194
Chapter 9 CLI Command Set
Syntax: show net-security
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
Rate Limit Status
SYN Cache Status
: Enable
: Disable
Network Attack Defense : Disable
Ipstack Debug
Use this command to enable IP stack print packet information.
Syntax: ipstack-debug
no ipstack-debug
Possible value: module: IP, ICMP, TCP, UDP, IGMP
Access level: 0
Show Ipstack-Debug
Use this command to display the IP stack debug status.
Syntax: show ipstack-debug
Access level: 0
Chapter 9 CLI Command Set
195
Explanation:
Execute this command, and the following will be displayed:
IP
debug
: On
ICMP debug
: Off
TCP
: On
UDP
IGMP
debug
debug
debug
: Off
: On
Show
Show ARP
Use this command to display ARP entries.
Syntax: show arp
Access level: 0
Show Console
Use this command to display the console config information,
such as baud-rate, console session time-out and so on.
Syntax: show console
Access level: 0
Explanation:
196
Chapter 9 CLI Command Set
Execute this command, and the following will be displayed:
Baud rate
: 9600
Timeout
: 30 minutes
Parity
: no
Data bits
:8
Stop bits
:1
Flow control : disable
Show DHCP-Client
Use this command to display the DHCP client configuration.
Syntax: show dhcp-client
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
DHCP status
DHCP server
: enable
DHCP trusted server: 1.1.1.1
Show DHCP Service
Use this command to display the current DHCP service (RELAY
or SERVER) in the system.
Chapter 9 CLI Command Set
197
Syntax: show dhcp service
Access level: 0
Show DHCP Binding
Use this command to display address bindings on Dynamic
Host Configuration Protocol (DHCP) server.
Syntax: show dhcp binding [ip-address] | [manual ] | [ auto]
Possible value: ip-address: Specifies the IP address of the
DHCP client for which bindings will be displayed
Manual: Displays only manual binding’s address
Auto: Displays only auto binding’s address
Default value: All address bindings are shown.
Access level: 0
Show DHCP Relay
Use this command to display DHCP relay agent’s configuration
parameters.
Syntax: show dhcp relay
Access level:0
198
Chapter 9 CLI Command Set
Show DHCP Server
Use this command to display DHCP server’s configuration
parameters.
Syntax: show dhcp server
Access level:0
Show DHCP Statistics
Use this command to display Dynamic Host Configuration
Protocol (DHCP) Server statistics.
Syntax: show dhcp statistics [relay |server]
Default value: all statistics
Access level: 0
Show Dot1x Configuration
Use this command to display the PAE capabilities, protocol
version, and other global dot1x parameters such as max-req,
re-authperiod, server-timeout supplicant-timeout and so on.
Syntax: show dot1x
Access level: 0
Chapter 9 CLI Command Set
199
Show Dot1x Statistics
Use this command to display the statistics of 802.1x.
Syntax: show dot1x statistics
Access level : 0
Show Flash
Use this command to list the flash code information, such as
version number, size and so on.
Syntax: show flash
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
/image
2000-01-16 21:31:26
/image/3001A.Z
931895
/config
2000-01-16 21:31:26
/config/config
6034
2000-01-02 22:18:26
2000-01-09 21:34:08
Show Dot1x Authentication Configuration
Use this command to display the dot1x authentication
configuration.
200
Chapter 9 CLI Command Set
Syntax: show dot1x authentication configuration
Access level: 0
Show MAC
Use this command to display the MAC addresses.
Syntax: show mac [type] [port]
Possible value: type: static | dynamic
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
MAC
State Port Pass-time Ageing-Time
----------------------------------------------00:06:5b:2c:eb:f8 Dynamic LAN
215
300
00:06:5b:a2:07:f2 Dynamic LAN
264
300
00:08:74:9c:e7:f0 Dynamic LAN
228
300
00:08:74:92:07:ee Dynamic LAN
221
300
00:0b:db:53:77:eb Dynamic LAN
223
300
00:08:74:f1:8f:e5 Dynamic LAN
219
300
Chapter 9 CLI Command Set
201
Show MAC Black-List
Use this command to display the black MAC list.
Syntax: show mac black-list
Access level: 2
Show MAC White-List
Use this command to display the white MAC list.
Syntax: show mac white-list
Access level: 2
Show NAT Translation
Use this command to display the currently active NAT
translations.
Syntax: show nat translation
Access level: 2
Explanation:
Execute this command, and the following will be displayed:
Local ip addr
global ip addr local port
global port
202
Chapter 9 CLI Command Set
Show NAT Configuration
Use this command to display all NAT configuration information.
Syntax: show nat configuration
Access level: 2
Explanation:
Execute this command, and the following will be displayed:
Eable/disable , timeout value
Nat pool information( )
Nat map information( )
Nat redirect information( )
Show Managed-Interface
Use this command to display the IP information of the
management interface.
Syntax: show managed-interface
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
Chapter 9 CLI Command Set
MAC address
IP address
203
Subnet mask
Default gateway
: (wan only)
Show IP-Route
Use this command to display the static or all route entries.
Syntax: show ip-route [static]
Access level: 0
Show Access-List Configuration
Use this command to display the access-list configuration.
Syntax: show access-list configuration
Access level: 0
Show Port Config
Use this command to display the configuration information of
one or all ports, such as speed duplex, priority, PVID and so on.
Syntax: show port config
Access level: 0
204
Chapter 9 CLI Command Set
Explanation:
Execute this command, and the following will be displayed:
Port Link State
Protected
AutoCap SpeedDuplex
1 up enable ----- 100-full
PVID Pri FlowCtrl
1 0 disable
Show RADIUS Configuration
Use this command to show the radius configuration information
summary.
Syntax: show radius configuration
Access level: 0
Show RADIUS Statistics
Use this command to show the statistics of radius client.
Syntax: show radius statistics
Access level: 0
Show Sms User
Use this command to show the local user configuration
information, including: Status, ISP name, Flag, Username,
password, MAC address, IP address, VLAN ID and Port.
Chapter 9 CLI Command Set
205
Syntax: show sms user {name | mac |
{all | dynamic | static}} [parameters]]
Possible value: parameters : [lock]
Access level : 0
Show SMS Online-User
Use this command to show the online user ‘s information.
Syntax: show sms online-user
Access level : 0
Show Wireless-Port
Use this command to show the wireless port configuration
information.
Syntax: show wireless-port
Access level: 0
Show System
Use this command to display the system information, such as
contact, location, name, up-time, software version, hardware
version and so on.
206
Chapter 9 CLI Command Set
Syntax: show system
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
Serial number
System uptime
seconds
: 000008c42671
: 0 days 21 hours 27 minutes 5
Console baudrate
: 9600
Board temperature
: 48.0 (C)
Hardware version
: 1.0.0
Software version
: 1.0.0
Show Telnet
Use this command to display all the telnet configuration
information, such as the telnet server’s status, telnet mode,
telnet session time-out and so on.
Syntax: show telnet
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
Chapter 9 CLI Command Set
207
Telnet server status : Enable
Telnet session timeout : 30 minute(s)
Show SNMP Server Configuration
Use this command to disable SNMP server configuration,
including trap configuration.
Syntax: show snmp server configuration
Access level: 0
Show AP-Mode
Use this command to display the AP work mode.
Syntax: show ap-mode
Access level: 0
Show Load-Balance Configuration
Use this command to show the load balance configuration.
Syntax: show load-balance configuration
Access level: 0
208
Chapter 9 CLI Command Set
Show Who
Use this command to display the login operator.
Syntax: show who
Access level: 0
Show Running-Config
Use this command to display the running configuration.
Syntax: show running-config
Access level: 0
Show Startup
Use this command to display the startup configuration.
Syntax: show startup
Access level: 0
Show WPA Configuration
Use this command to display the WPA configuration.
Syntax: show wpa configuration
Chapter 9 CLI Command Set
209
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
wpa auth mode
encryption mode
gtk update interval
: wpa
: tkip
: 1800 seconds
wpa-psk passphrase
: abcdefg
Show Webserver
Use this command to display the WEB Server configuration.
Syntax: show webserver
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
WEB Status
: enable
Show VLAN Configuration
Use this command to display VLAN configuration. This
command will be valid if the VLAN module is available.
Syntax: show vlan configuration
210
Chapter 9 CLI Command Set
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
VLAN Status
: enable
VLAN Tag Status
VLAN Default vid
: enable
:1
Show VLAN Binding
Use this command to display VLAN binding. This command will
be valid if the VLAN module is available.
Syntax: show vlan binding
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
MAC
Vid
Name
----------------------------------------------00:00:00:00:00:01 123
00:00:00:00:00:02 5
utstar
test
Chapter 9 CLI Command Set
Show IAPP Configuration
Use this command to display IAPP configuration.
Syntax: show iapp configuration
Access level: 0
Explanation:
Execute this command, and the following will be displayed:
IAPP config status
: enable
IAPP running status : UP
IAPP mode
: local
ESP mode
: enable
IAPP secret
: *********
IAPP map:
MAC
IP
---------------------------------------------00:00:00:00:00:01
00:00:00:00:00:02
172.18.32.5
172.18.32.4
211
Troubleshooting
10
10
When the user has trouble using the AP, the starting point to
troubleshoot the problem with the AP is to look at its LED
activity. Table 20 is provided to assist the user in diagnosing
and solving the operational problems.
Table 20 Troubleshooting
PWR
AP
WLAN
Green
Green
LED
LED
on
Green
blinks
LED
stays
on
On
Off
LAN
Green
LED
blinks
LINK
Green
LED
stays
on
Description/Action
No action is required.
Off
No LAN activity.
No action is required.
Power problem.
Off
Off
Off
Off
Off
Examine the power
supply cable.
Check the power
supply.
214
Chapter 10 Troubleshooting
PWR
AP
Off
Green
LED
Green
blinks
LED
stays
on
Green
LED
blinks
Green
LED
blinks
WLAN
Off
LAN
Off
LINK
Description/Action
Off
Hardware failure or AP
freezes. Contact the
product supplier.
Software failure.
Upgrade the software
via Windows IE or
console (hyper
terminal).
WLAN initialization
failure.
Green
LED
blinks
Green
LED
blinks
Examine whether the
wireless equipment has
been installed correctly.
Ethernet initialization
failure.
Contact the product
supplier.
11
11
Technical Specifications
Table 21 WA3001 AP Technical Specifications
Type
WA3001
2.4GHz(802.11g) 108Mbps
enterprise class wireless access
node
Description
-IEEE 802.11
-IEEE 802.11b
Standard Compliance
-IEEE 802.11g
-IEEE 802.3
-IEEE 802.11i
-IEEE 802.3af
Interfaces
Ethernet
WAN
Interface
One 10/100Mbps interface
(RJ45)
Ethernet LAN
Interface
Four 10/100Mbps interfaces
(RJ45)
Console
Interface
Auto rate
scaling
One RS-232 Console interface
Super G™: 108Mbps
802.11g: 54, 48, 36, 24, 18, 12,
9, 6Mbps
802.11b: 11, 5.5, 2, 1Mbps
Online
subscribers
Max. 256
216
Chapter 11 Technical Specifications
Type
Security
WA3001
64, 128bits WEP
802.1X (EAP-MD5, EAP-TLS,
PEAP, CHAP, PAP)
WPA (TKIP，AES)
WAPI
MAC address access control
Subscriber isolation
Authentication
Supports 802.1x and RADIUS
Client
Supports DHCP Server and
DHCP Client
Supports PPOE transparent
transmission
WDS
PtP(Point-to-Point) Bridge
L2 roaming
IAPP
NAT
Supported
Management
Web-based management
PtMP(Point-to-Multi-point) Bridge
Telnet
CLI
SNMP v.2 (MIB II)
Work mode
Bridge and Router
Chapter 11 Technical Specifications
Type
Reception
sensitivity
217
WA3001
-73dBm @ 108Mbps, PER < 8%,
OFDM
-73dBm @ 54Mbps, PER < 8%,
ODFM
-90dBm @ 11Mbps, PER < 8%,
CCK
-92dBm @ 6Mbps, PER < 8%,
OFDM
-95dBm @ 1Mbps, PER < 8%,
DBPSK
Operational
frequency
range
Channels
2.4GHz~2.4835GHz ISM Band
Europe/FCC: 2.412～
2.462GHz(11 channels)
China/Europe/ETSI:
2.412~2.472GHz(13 channels)
Transmit
Power
China: Four adjustable levels, the
default is 100mw
FCC/EC (default value):
Mode b: 40mw
Mode g: 26mw / 70mw (Turbo mode)
Electrical
Parameters
Physical
Features
Local power
supply
12V/1.25A
Remote
power supply
Supports Standard 802.3af POE
power supply
Power
consumption
Transmission: <530mA@ 12V DC
Dimensions
180mm(L) X140mm (W) X40mm
(H)
Reception: <400mA@ 12V DC
218
Chapter 11 Technical Specifications
Type
Weight
Antenna
LEDs
Environmental
WA3001
450g
External, various antennae can
be assembled.
Power, AP, WLAN, LAN, LINK
Operating
temperature
-10℃~ 50℃
Storage
temperature
-20℃~ 70℃
Humidity
(noncondensing)
10 ~ 90%
MTBF
>30000 hours
Coverage
Indoors: 200m
Outdoors: 500m
- GB9254 Class B
Security
certificate
- FCC part 15 Class B (America)
- CE (Europe)
Compatibility
Language
- Wi-Fi WECA compatible
Chinese (web-based management)
English
12
12
Acronyms and Abbreviations
AC
Access Controller
AS
Authentication Server
BRAS
Broadband Remote Access Server
CLI
Command Line Interface
DHCP
Dynamic Host Configuration Protocol
DTIM
Delivery Traffic Indication Message
EAP
Extensible Authentication Protocol
ESSID
Extended Service Set Identifier
IEEE
Institute of Electrical and Electronics Engineering
LAN
Local Area Network
MAC
Media Access Control
MD5
Message Digest Algorithm 5
220
Chapter 12 Acronyms and Abbreviations
MIB
Management Information Base
MII
Media Independent Interface
MTU
Maximum Transmission Unit
NAS
Network Access Server
NAPT
Network Address Port Translation
NAT
Network Address Translation
NMS
Network Management System
OAM
Operation Administration and Maintenance
PD
Powered Device
PoE
Power over Ethernet
PPPoE
PPP over Ethernet
PSE
Power Sourcing Equipment
PtMP
Point-to-Multi-Point
PtP
Point-to-Point
RADIUS
Remote Authentication Dial in User Service
Chapter 12 Acronyms and Abbreviations
SNMP
Simple Network Management Protocol
WEP
Wired Equivalent Privacy
WLAN
Wireless Local Area Network
WNIC
Wireless Network Interface Card
221
UTStarcom, Inc. USA
1275 Harbor Bay Parkway Alameda, CA 94502, USA
Tel: 510-864-8800
Fax: 510-864-8802
http://www.utstar.com
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.4 Linearized : No Create Date : 2004:12:30 08:54:08Z Modify Date : 2005:01:14 15:40:55-08:00 Page Count : 252 Creation Date : 2004:12:30 08:54:08Z Mod Date : 2005:01:14 15:40:55-08:00 Producer : Acrobat Distiller 5.0 (Windows) Metadata Date : 2005:01:14 15:40:55-08:00EXIF Metadata provided by EXIF.tools