Installation Guide
Table Of Contents
- PMP 450i and PTP 450i Configuration and User Guide
- Safety and regulatory information
- Contents
- List of Figures
- List of Tables
- About This Configuration and User Guide
- Chapter 1: Reference information
- Chapter 2: Configuration
- Preparing for configuration
- Task 1: Connecting to the unit
- Task 2: Configuring IP and Ethernet interfaces
- Configuring the AP IP interface
- NAT, DHCP Server, DHCP Client and DMZ in SM
- Configuring the SM IP interface with NAT disabled
- Configuring the SM IP interface with NAT enabled
- NAT tab of the SM with NAT disabled
- NAT tab of the SM with NAT enabled
- Reconnecting to the management PC
- VLAN Remarking and Priority bits configuration
- VLAN tab of the AP
- VLAN tab of the SM
- VLAN Membership tab of the SM
- PPPoE tab of the SM
- NAT Port Mapping tab of the SM
- Task 3: Upgrading the software version and using CNUT
- Task 4: Configuring General and Unit settings
- Task 5: Configuring security
- Isolating APs from the internet
- Encrypting radio transmissions
- Managing module access by passwords
- Requiring SM Authentication
- Filtering protocols and ports
- Encrypting downlink broadcasts
- Isolating SMs
- Filtering management through Ethernet
- Allowing management only from specified IP addresses
- Configuring management IP by DHCP
- Restricting radio Telnet access over the RF interface
- Security tab of the AP
- Filtering protocols and ports
- Protocol Filtering tab of the AP
- Port configuration tab of the AP
- Security tab of the SM
- Protocol Filtering tab of the SM
- Port Configuration tab of the SM
- Task 6: Configuring radio parameters
- Task 7: Setting up SNMP agent
- Task 8: Configuring syslog
- Task 9: Configuring remote access
- Task 10: Monitoring the AP-SM Link
- Task 11: Configuring quality of service
- Maximum Information Rate (MIR) Parameters
- Token Bucket Algorithm
- MIR Data Entry Checking
- Committed Information Rate (CIR)
- Bandwidth from the SM Perspective
- Interaction of Burst Allocation and Sustained Data Rate Settings
- High-priority Bandwidth
- Traffic Scheduling
- Setting the Configuration Source
- Quality of Service (QoS) tab of the AP
- DiffServ tab of the AP
- Quality of Service (QoS) tab of the SM
- DiffServ tab of the SM
- Task 12: Performing an Sector Wide SA
- Task 13: Zero Touch Configuration Using DHCP Option 66
- Task 14: Configuring Radio via config file
- Task 15: Configuring a RADIUS server
- Understanding RADIUS for PMP 450i
- Choosing Authentication Mode and Configuring for Authentication Servers - AP
- SM Authentication Mode – Require RADIUS or Follow AP
- Handling Certificates
- Configuring your RADIUS servers for SM authentication
- Assigning SM management IP addressing via RADIUS
- Configuring your RADIUS server for SM configuration
- Using RADIUS for centralized AP and SM user name and password management
- RADIUS Device Data Accounting
- RADIUS Device Re-authentication
PMP 450i and PTP 450i Configuration and User
Task 7: Setting up SNMP agent
Attribute Meaning
SNMPv3 Read/Write
User
Read-write user by default is disabled. The default values for the
Read/Write users is :
• Username = Canopy
• Authentication Password = authCanopy
• Privacy Password = privacyCanopy
SNMPv3 Trap
Configuration
When enabling transmission of SNMPv3 traps the read-only or
read-write user credentials must be used and selected properly in
order for the SNMP manager to correctly interpret the traps. By
default transmission of SNMPv3 traps is disabled and all traps
sent from the radios are in SNMPv2c format.
Accessing IP / Subnet
Mask
1 to 10
Specify the addresses that are allowed to send SNMP requests to
this SM. Wireless Manager or the NMS has an address that is
among these addresses (this subnet). You must enter both
The network IP address in the form xxx.xxx.xxx.xxx
The CIDR (Classless Interdomain Routing) prefix length in the
form /xx
For example
• the /16 in 198.32.0.0/16 specifies a subnet mask of 255.255.0.0
(the first 16 bits in the address range are identical among all
members of the subnet).
• 192.168.102.0 specifies any device whose IP address is in the
range 192.168.102.0 to 192.168.102.254 can send SNMP
requests to the SM, presuming that the device supplies the
correct Community String value.
The default treatment is to allow all networks access (set to 0).
For more information on CIDR, execute an Internet search on
“Classless Interdomain Routing.” You are allowed to specify as
many as 10 different accessing IP address, subnet mask
combinations.
RECOMMENDATION:
The subscriber can access the SM by changing
the subscriber device to the accessing subnet.
This hazard exists because the Community
String and Accessing Subnet are both visible
parameters. To avoid this hazard, configure the
SM to filter (block) SNMP requests.
142
pmp-0957 (April 2015)