© Copyright 2006 Compex Systems Pte Ltd All Rights Reserved This document contains information, which is protected by copyright. Reproduction, adaptation or translation without prior permission is prohibited, except as allowed under the copyright laws. Trademark Information Compex®, ReadyLINK® and MicroHub® are registered trademarks of Compex, Inc. Microsoft Windows and the Windows logo are the trademarks of Microsoft Corp. NetWare is the registered trademark of Novell Inc.
FCC NOTICE This device has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
ICES 003 Statement This Class B digital apparatus complies with Canadian ICES-003. Declaration of Conformity Compex, Inc. declares the following: Product Name: Compex Wireless-A/G Dual-Band Network Access Point Model No.: Compex WPE54AG conforms to the following Product Standards: Radiated Emission Standards: ETSI EN 300 328-2: July 2000; FCC: 47 CFR Part 15, Subpart B, ANSI C63.4-1992; 47 CFR Part 15, Subpart C (Section 15.247), ANSI C63.4-1992. Conducted Emission Standards: ETS 300 826: Nov. 1997.
Technical Support Information The warranty information and registration form are found in the Quick Install Guide. For technical support, you may contact Compex or its subsidiaries. For your convenience, you may also seek technical assistance from the local distributor, or from the authorized dealer/reseller that you have purchased this product from. For technical support by email, write to support@compex.com.sg.
About This Document The product described in this document, Compex Wireless-G Network Access Point, Compex WPE54G is a licensed product of Compex Systems Pte Ltd. This document contains instructions for installing, configuring and using Compex WPE54G. It also gives an overview of the key applications and the networking concepts with respect to the product. This documentation is for both Network Administrators and the end user who possesses some basic knowledge in the networking structure and protocols.
Copyrights © 2006 Compex Systems Pte Ltd ..................................................................................i Trademark Information.....................................................................................................................i Disclaimer ........................................................................................................................................i Your Feedback.....................................................................................
4.4 4.5 4.6 4.7 4.8 Wireless Extended Features .................................................................................................44 4.4.1 Access Control – The Wireless Pseudo VLAN........................................................44 4.4.2 Wireless Setup - The Wireless Distributed System (WDS) .....................................52 4.4.3 WMM Parameters....................................................................................................58 4.4.4 Long Distance Parameters .
6.2 6.1.6 Reboot System .......................................................................................................113 6.1.7 Change Password...................................................................................................114 6.1.8 Logout....................................................................................................................115 Using the HELP menu........................................................................................................
Chapter 2 Hardware Installation Chapter 1 Product Overview 1.1 Introduction The Compex NetPassage WPE54G is a 54Mbps wireless access point that is interoperable with all standard based 802.11g and 11b wireless devices. The Compex NetPassage WPE54G is a compact and high performance access point that is designed with support for high security features like Wi-Fi Protected Access (WPA), IEEE 802.1x Authentication and 64-bit or 128-bit Wired Equivalent Privacy.
Chapter 2 Hardware Installation Smart Select This feature will automatically scan and recommend the best channel that the access point can utilize. Wireless Routing Client Capability The Wireless Routing Client mode enables Internet Service Provider (ISP) or offices to send their data packet wirelessly and these network packets will be routed to a wired Local Area Network via the access point.
Chapter 2 Hardware Installation STP Spanning-Tree Protocol provides path redundancy while preventing undesirable loops in the network. It forces certain redundant data paths into a standby (blocked) state. If one network segment in the Spanning-Tree Protocol becomes unreachable, or if Spanning-Tree Protocol costs change, the spanning-tree algorithm reconfigures the spanning-tree topology and re-establishes the link by activating the standby path. 1.
Chapter 2 1.3.1 Hardware Installation The Access Point Mode This is the default mode of the access point. The Access Point mode enables you to bridge wireless clients to the wired network infrastructure.
Chapter 2 1.3.2 Hardware Installation The Access Point Client Mode In Access Point Client mode, the access point acts as a wireless client that can operate wirelessly with another access point to perform transparent bridging between two Fast Ethernet networks.
Chapter 2 1.3.3 Hardware Installation The Gateway Mode Or more simply put: Broadband Internet sharing in a wireless network! Since the access point supports several types of broadband connections, the first step in setting up the access point as a Broadband Internet Gateway is to identify the type of broadband Internet access you are subscribed to.
Chapter 2 Hardware Installation PPP over Ethernet (PPPoE) Select this type of connection if you are using ADSL services in a country utilising standard PPP over Ethernet for authentication. For instance: If you are in Germany which uses T-1 connection or If you are using SingNet Broadband or Pacific Internet Broadband in Singapore: Singapore ADSL (Ethernet 512K) This applies to ADSL subscribers in Singapore including SingTel Magix SuperSurf users.
Chapter 2 1.3.4 Hardware Installation The Wireless Routing Client Mode An application of this mode would be for the Ethernet port of the Wireless Routing Client to be used for connection with other devices on the network while access to the Internet would be achieved through wireless communication with wireless ISP.
Chapter 2 1.3.5 Hardware Installation The Wireless Ethernet Adapter Mode Similarly to the Access Point Client mode, the access point used in this mode, is able to communicate wirelessly with another access point to perform transparent bridging between two networks. However here, the Wireless Ethernet Adapter connects a single wired workstation only. No client software or drivers are required while using this mode. 1.3.
Chapter 2 Hardware Installation Chapter 2 Hardware Installation 2.
Chapter 2 2.2 Hardware Installation Hardware Installation In three simple steps, you may power ON and begin configuring the access point. Use the RJ45 cable to connect the Ethernet port of the access point to your PC. Once you have finished configuring the access point, you can connect the Ethernet cable to your network device, such as to a switch or hub. Next, attach the power adapter supplied in the packaging to the main power supply and connect its power plug into the DC jack of the access point.
Chapter 3 Access to Web-based Interface Chapter 3 Access to Web-based Interface There are two methods to access to the web-based Interface of the access point: • Through our Utility – uConfig You can access to the web-based interface directly without the need to assign an IP address to your PC. • Enter IP address of the access point in the address bar of Internet Explorer You need to assign an IP address to your PC, such as 192.168.168.xxx, where x can take any value from 2 to 254.
Chapter 3 Access to Web-based Interface Select the access point from the products list and click on Open Web button. This screen prompts you not to exit your uConfig program while accessing to your Web interface, or else you will fail to connect to your device. Click on OK to proceed.
Chapter 3 Access to Web-based Interface At the authentication page, click on the Log On! button to enter the main configuration page. You will then reach the home page of the access point Web interface.
Chapter 3 3.2 Access to Web-based Interface Direct access to web-based interface via Internet Explorer For this method, you need to assign an IP address to your PC so that it belongs to the same subnet as the access point. In this example, we are using Windows XP for illustration, for Windows 98/98SE/2000/NT/ME, kindly refer to Appendix III “TCP/IP Configuration”. 1. Go to your desktop, right click on My Network Places and select Properties. 2.
Chapter 3 3. Access to Web-based Interface Next, select on Internet Protocol (TCP/IP) and click on Properties button. 4. Since the default IP address for the access point is 192.168.168.1, we need to set your PC’s IP address to be the same subnet as your access point. Therefore, in this example, we assign an IP address of 192.168.168.100 and subnet mask as 255.255.255.0. 5. Click OK button to update the changes. 6. Now, you may open the MS-DOS prompt window and type in ping 192.168.168.
Chapter 3 Access to Web-based Interface 7. If your TCP/IP settings are correct, you will get replies to the ping command: 8. Launch your Web browser. Under the Tools tab, select Internet Options. 9. Open the Connections tab and in the LAN Settings section, disable all the option boxes. Click OK button to update the changes.
Chapter 3 10. 11. Access to Web-based Interface At the Address bar, enter http://192.168.168.1 and press Enter from your keyboard. At the login page, click the Log On! button to enter the configuration pages. 2. You will then reach the home page of the access point’s Web interface.
Chapter 4 Common Configuration Chapter 4 Common Configuration This chapter illustrates the following features, which are available in ALL the operating modes of the access point, unless stated otherwise. • Management Port • WLAN Basic Setup • WLAN Security • STP Setup • SNMP • MAC Filtering 4.1 Management Port Setup This section shows you how to customize the parameters of the access point to suit the needs of your network.
Chapter 4 Common Configuration This table describes the parameters that can be modified in the Management Port Setup page. Parameters Description IP Address The LAN IP address of the access point is set by default to 192.168.168.1. When the DHCP server of the AP is enabled (unless you set a different DHCP Gateway IP Address), this LAN IP Address would also be allocated as the Default Gateway of the DHCP client.
Chapter 4 Common Configuration Always use these DNS servers Enable this checkbox if you want the access point to only use the DNS server(s) you have specified below. Primary DNS IP Address Your ISP usually provides the IP address of the DNS server. Secondary DNS IP Address This optional field is reserved for the IP address of a secondary DNS server. DHCP Server If you disable the DHCP server, you will need to manually configure the TCP/IP parameters of each PC in your network.
Chapter 4 Common Configuration 4.1.1 To view the active DHCP leases The following will guide you to a page display of the active IP address leases that have been allocated by the built-in DHCP server of the access point. View Active DHCP Leases Click on Management Port from the CONFIGURATION menu. Go to the Advanced DHCP Server Options section, click on the Show Active DHCP leases button.
Chapter 4 4.1.2 Common Configuration To reserve specific IP addresses for predetermined DHCP clients Making an IP address reservation lets you inform the DHCP server to exclude that specific address from the pool of free IP addresses it draws on for dynamic IP address allocation.
Chapter 4 Common Configuration Press the Apply button to make your new entry effective. The DHCP Reservations page will then be refreshed to illustrate the currently reserved IP addresses.
Chapter 4 Common Configuration Delete DHCP Server Reservation Select the reserved IP address to delete. Click on Delete. The DHCP Server Reservations table will then be refreshed to reflect your changes. NOTE When creating a DHCP reservation, you can opt to key in either the Host Name or the Hardware Address of the DHCP client. If you have entered both, the DHCP server will first check the hardware address. If a match in hardware address has been found, the Host Name will then be ignored.
Chapter 4 4.2 Common Configuration WLAN Setup This section shows how to perform the following functions: Basic: This function performs a basic setup of the wireless modes of operation. Security: This function performs data encryption and protection for the router. Advanced: This function furthers the basic configuration of the router by setting the system’s additional parameters such as Access Control, WDS, WMM and Long Distance Parameters.
Chapter 4 4.2.1 Common Configuration To configure the Basic setup of the wireless mode The following will guide you to configure the basic setup of the wireless mode you have selected. It also covers the Show Link Information option featured ONLY in wireless client mode. Basic Setup Wireless Mode Double-click on WLAN Setup from the CONFIGURATION menu. You will see the submenus expanded under WLAN Setup. Click on Basic. The default operating mode is the Access Point mode.
Chapter 4 Common Configuration In the Mode Setup page: The Access Point Name field appears when the access point is in AP/Gateway mode and refers to the identity of the device. When the access point is operated in wireless client mode, this field is referred to as Station Name instead. Each name is case-sensitive and can reach a maximum of 32 alphanumeric characters. It is a good practice to name the access points uniquely, particularly when there are several devices in the network.
Chapter 4 Common Configuration The Wireless Mode drop-down list provides a selection of network environment types in which to operate the access point: • 802.11b only; • 802.11b/g mixed, when both b and g clients are present; • 802.11g only Choose a Country that you are located. Click on the Edit button to select your country. Click on the Apply button to update the changes.
Chapter 4 4.2.2 Common Configuration To configure the Advanced setup of the wireless mode The following will guide you to configure the advanced setup of the wireless mode you have selected. Advanced Setup Wireless Mode Double-click on WLAN Setup from the CONFIGURATION menu to expand into the four sub-menus. From here, click on Advanced.
Chapter 4 Common Configuration The Beacon Interval is the amount of time between beacon transmissions. A beacon is a guidance signal sent by the access point to announce its presence to other access points. It also sends information, such as timestamp, SSID, and other parameters regarding the access point to other access points that are within the specified range. The access point needs the beacon interval to know when to receive the beacon from the other access point.
Chapter 4 Common Configuration Ethernet cable is disconnected to the network) If this function is enabled, the wireless radio will be turned off if there is no Ethernet connection. The wireless radio will be turned back on when the Ethernet link is restored. The turning ON or OFF delay takes about 60 seconds after detecting whether the Ethernet link is UP or DOWN respectively. The Auto Reboot Timer is the time setting for the access point to automatically reboot.
Chapter 4 4.3 Common Configuration Scan for Site Survey (For Wireless Client Mode Only) This feature only available in wireless client mode (Access Point Client, Wireless Routing Client and Wireless Ethernet Adapter). When one of the access points is connected to wired network and a set of wireless stations, it is referred to as a Basic Service Set (BSS). The MAC address of the access point is used as entry here.
Chapter 4 Common Configuration The Site Survey provides a list of the BSS and SSID available, the Chan (channels), Auth (Authentication), Alg (Algorithm) being used, and the strength of the Signal received. To configure to a different SSID: Select the radio button corresponding to the SSID you want to configure to. Click on the Apply button to effect the change and return to the Setup page. Click on the Refresh button.
Chapter 4 Common Configuration 4.3.1 Show Link Information (For Wireless Client Mode Only) This function offers a summary of the link data when the access point is in the wireless client mode, i.e., either of the Access Point Client, Wireless Routing Client or the Wireless Ethernet Adapter mode. Show Link Information In the Mode Setup page, go to the Link Information section. Click on the Show Link Information button.
Chapter 4 4.4 Common Configuration Wireless Extended Features The Wireless Extended Features are ONLY available when the access point operates in all modes as tabulated below: Features Access Control Wireless Distributed System (WDS) WMM Parameters Outdoor Parameters 4.4.
Chapter 4 Common Configuration 4.4.1.1 Wireless Pseudo VLAN Per Node When implemented, this mode isolates each wireless client into its own pseudo VLAN. Wireless clients can therefore access resources on the wired network but are unable to see each other or access each other’s data. The following steps demonstrate how to set up a Wireless Pseudo VLAN per Node. Wireless Pseudo VLAN – Per Node From WLAN Setup under Configuration, click on Advanced, which shows the WLAN Advanced Setup page.
Chapter 4 Common Configuration 4.4.1.2 Wireless Pseudo VLAN Per Group The access point can configure up to four ‘groups’ of wireless clients identified by their MAC address. Whenever a wireless client requests network access, the access point will first verify whether its MAC address is present in any of the Pseudo VLAN groups. If it is, the access point will grant it access to all the wired system resources and to all other wireless clients belonging to the same Pseudo VLAN group only.
Chapter 4 Common Configuration The MAC Address List enables you to manage specific VLAN groups by adding or deleting clients through their MAC address. Click on the Add button. Select a group number from the Group ID drop-down list. Fill in the Mac Addr field with the MAC address of the client in the format xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx, where x is any value within the range 0-9 or a-f. Click on the Apply button. The updated Mac Address List page will appear as shown.
Chapter 4 Common Configuration Delete client from a group If you want to delete a particular client from a group: Select the client to delete from the Mac Address List. Click on the Delete button. This Delete MAC Address page will appear to confirm whether you want to delete the selected client. If you do not want to delete the client: Click on Apply button. If you want to remove the client from the group: Click on Delete button.
Chapter 4 Common Configuration 4.4.1.3 Tag VLAN - [Available in Access Point mode ONLY] While a port-based VLAN is limited in size since it can only exist within the confines of a single Ethernet switch, a Tag VLAN is designed to extend the wired VLAN to individual wireless clients. Here, each VLAN is identified by a ‘tag’, which the switch associates with specific ports. The switch will then pass this tag information with every data packet transmitted.
Chapter 4 Common Configuration Select a group number from the Group ID drop-down list. Fill in the Mac Addr field with the MAC address of the client in the format xx:xx:xx:xx:xx or xx-xx-xx-xx-xx, where x is any value between 0-9 and a-f. Click on the Apply button. The updated Mac Address List page will appear as shown on the right. Repeat Step 4 if you need to add more clients or to configure more groups.
Chapter 4 Common Configuration Delete client from a Tag VLAN If you want to delete a particular client from a group: Select the client to delete from the Mac Address List. Click on the Delete button. The Delete MAC Address page will appear to confirm whether you want to delete the selected client. If you want to remove the client from the group: Click on Delete. Else click on Apply. Click on the corresponding Group checkbox to enable a particular VLAN.
Chapter 4 4.4.2 Common Configuration Wireless Setup - The Wireless Distributed System (WDS) A distribution system links up several of the access points and the areas they serve, creating a wider network in which mobile users can roam while still staying connected to the available network resources. In a WDS, the access point can drive a cell of wired and wireless clients while at the same time, connecting to other gateways.
Chapter 4 Common Configuration 4.4.2.2 Chain Configuration WDS A chain configuration WDS spans an area in length, for instance a long corridor. Satellite access points are chained together starting from a root access point. The access points at either end of the chain will have only one WDS port enabled, while the access points in the middle will have two WDS ports configured to associate with the neighboring access points upward and downward in the chain.
Chapter 4 Common Configuration The following steps will guide you in setting up WDS in the access point. WDS Configuration Setup From WLAN Setup under Configuration, click on Advanced which shows the WLAN Advanced Setup page. Go to the Extended Features section. Click on the WDS Configuration button. As illustrated on the WDS Setup, the WDS feature is Disabled by default. Select Enable from the WDS Global Control drop-down list to operate WDS. Click on the Apply button.
Chapter 4 Common Configuration On the Add WDS Link screen that appears: Fill up the Partner Address field with the MAC address of the device to include in your WDS, using the format xx-xxxx-xx-xx-xx or xx:xx:xx:xx:xx:xx or a mix of: and -, and where x can take any hexadecimal value 0-9 or a-f. Use the Status option to control whether you want to Enable this particular WDS link or to Disable it. Click on the Apply button. The WDS Status page will be updated as shown on the right.
Chapter 4 Common Configuration If you want to delete a WDS link: Select the radio button on the left of that particular link. Click on the Remove button. An updated WDS Status page will be displayed. To view WDS Statistics Info: Click on the hyperlink of the selected Partner Address. The Link (Partner Address) Statistics table shown on the left will be displayed. Click on the Back button to return to the WDS Status page.
Chapter 4 Common Configuration NOTE • If WDS Global Control is Disabled, every WDS link will be closed regardless of its status. When WDS Global Control is set to Enabled, the status of every WDS link that you want to include still needs to be individually Enabled.
Chapter 4 4.4.3 Common Configuration WMM Parameters (available in all modes except for Wireless Bridge Link) Wireless Multimedia (WMM) is a QoS (Quality of Service) standard in IEEE802.11E that we have adopted to improve and support the user experience for multimedia, video, and voice applications by prioritizing data traffic. QoS can be realized through 4 different Access Categories (AC). Each AC type consists of an independent transmit queue, and a channel access function with its own parameters.
Chapter 4 Common Configuration The following steps demonstrate how to configure these WMM Parameters. WMM Parameters From WLAN Setup under Configuration, click on Advanced, which shows the WLAN Advanced Setup page. Go to the Extended Features section, and click on the WMM Parameters button. The WMM Setup function is WMM by default. Select WMM from the dropdown list Click on the Apply button.
Chapter 4 Common Configuration Depending on the mode you set up, you have to select either AP (Access Point) or BSS ( Basic Service Set) WMM Parameters. For instance, if the mode is AP, select AP WMM Parameters.
Chapter 4 4.4.4 Common Configuration Long Distance Parameters (available in all modes) These parameters determine the distance between wireless clients to ensure that the wireless point-to-point communication takes place efficiently and effortlessly. The following steps demonstrate how to configure these Long Distance Parameters. Long Distance Parameters From WLAN Setup under Configuration, click on Advanced, which shows the WLAN Advanced Setup page.
Chapter 4 Common Configuration The parameters are described below: Outdoor: The Outdoor parameter is disabled by default. If set to Enable, the Outdoor parameters will be configured for outdoor communication over short or long distances specified. Distance: This parameter determines the distance between different buildings. It should be entered in meters.
Chapter 4 4.5 Common Configuration WLAN Security This section illustrates how to make your WLAN more secure. All the nodes in your network MUST share the same wireless settings to be able to communicate. We will illustrate how to configure each type of security mode individually. To start with, follow the common preliminary steps described below to select the most appropriate security approach for protecting your wireless communications.
Chapter 4 4.5.1 Common Configuration How to set up WEP [Available in ALL modes] The guidelines below will help you to set up the access point for using WEP. Security Mode -WEP At the WEP Setup page: Select whether to use WEP 64bit or WEP 128 bit. Click on Apply. The access point lets you define up to four different WEP keys. Specify the key entry format, by selecting either: • Use Alphanumeric Characters • Use Hexadecimal Enter your WEP keys in the Key fields.
Chapter 4 Common Configuration When using 128-bit encryption: Your WEP key has to be either 13 alphanumeric characters or 26 hex characters long. Select which of the keys defined to Encrypt data with. Click on Save and Reboot the access point. A Hexadecimal value can only take in numbers 0-9 and letters A-F and is NOT casesensitive.
Chapter 5 4.5.2 Further Configuration How to set up WPA-PSK [Available in AP/Gateway mode ONLY] The guidelines below will help you to set up the access point for using WPAPSK. Please take note that the WPA-PSK, WPA2-PSK and WPA-PSKAUTO security modes share the same functions). Security Mode –WPA-PSK, WPA2-PSK, WPA-PSK-AUTO At the WLAN Security Setup page: Select WPA-PSK mode. Click on Apply button.
Chapter 5 Further Configuration Press the Save button. Click on Reboot to restart the system, after which your settings will become effective. A Hexadecimal value can only take in numbers 0-9 and letters A-F and is NOT casesensitive. For selecting WPA2-PSK and WPA-PSK-AUTO, you can use the above procedure of selecting WPA-PSK. However, for WPA ( actually is the same as WPA1) , AES is not mandatory whereas AES is mandatory for WAP2.
Chapter 5 4.5.3 Further Configuration How to set up 802.1x/RADIUS [Available in Access Point mode ONLY] The guidelines below will help you to set up the access point for using 802.1x/RADIUS. Security Mode –802.1x/RADIUS At the WLAN Security Setup page: Select 802.1x mode. Click on Apply button. Key in the IP address of the Primary RADIUS Server in your WLAN. You can optionally add in the IP address of a Secondary RADIUS Server, if any. [Refer to the section on How to set up WEP.
Chapter 5 4.5.4 Further Configuration How to set up WPA EAP [Available in Access Point mode ONLY] The guidelines below will help you to set up the access point for using WPA-EAP. (Please take note that the WPA or WPA1-EAP, WPA2EAP and WPA-EAP_AUTO have the same functions). Security Mode – WPA-EAP, WPA2-EAP, WPA-EAP-AUTO At the WLAN Security Setup page: Select WPA-EAP mode. Click on Apply button. The Cipher Type is set to TKIP. Key in the IP address of the Primary RADIUS Server in your WLAN.
Chapter 5 Further Configuration You can key in a different Authentication Port but it MUST match the corresponding port of the RADIUS server. Enter the Shared Secret Key, used to validate client-server RADIUS communications. Specify the Maximum Retransmissions. For greater security, key in the minimum permissible 1, else the maximum allowed is 10. Define the GTK update (Group Transient Key update), or the length of time after which the access point will automatically generate a new master key.
Chapter 5 4.6 Further Configuration STP Setup Spanning Tree Protocol (STP) is a link management protocol that helps to prevent undesirable loops occur in the network. For an Ethernet network to function properly, only one active path can exist between two stations. If a loop exists in the network topology, duplication of messages will occur and this might confuse the forwarding algorithm and allow duplicate frames to be forwarded.
Chapter 5 Further Configuration To establish path redundancy, STP creates a tree that spans all of the switches in an extended network, forcing redundant paths into a standby, or blocked, state. but establishes the redundant links as a backup if the initial link should fail. If STP costs change, or if one network segment in the STP becomes unreachable, the spanning tree algorithm reconfigures the spanning tree topology and re-establishes the link by activating the standby path.
Chapter 5 Further Configuration The figure shown below explains the implementation of STP in a network. AP#1 is physically connected to a switch whilst another 4 access points (AP#2, AP#3, AP#4 and AP#5) are connected to AP#1 wirelessly. Redundant paths were found in this network, without enabling STP function, broadcast storm will occur in this network, resulted duplicated frames to be forwarded.
Chapter 5 Further Configuration When STP is enabled, the STP-enabled access points will first try to find the root access point using the following criteria: a. use the access point that is configured with the smallest STP priority. Default priority set in the access points is 32768. b. If the STP priority values are the same, the access point with smallest MAC address will be chosen as root.
Chapter 5 Further Configuration To explain the effect of STP & Pseudo VLAN on the wireless clients, we will compare 3 separate scenarios. Scenario #1 – (No STP, No Pseudo VLAN) Referring to the illustration below, if the Spanning Tree Protocol (STP) and Pseudo VLAN are not implemented in a network, all clients (Notebook#1, #2, #3 & #4,) can access to one another, resulting low level of data security.
Chapter 5 Further Configuration Scenario #2 – (With STP, No Pseudo VLAN) When STP is enabled, extra redundant network paths between access points will be disabled, hence preventing multiple active network paths in between any two network access points. If one of the access points is down, the STP algorithm will reactivate one of the redundant paths so that the network connection will not be lost.
Chapter 5 Further Configuration Scenario #3 – (With STP and Pseudo VLAN) In this example, both STP and Pseudo VLAN are implemented in this network. All wireless users are unable to communicate with one another. This is one of the measures to ensure data privacy between wireless users in the network.
Chapter 5 Further Configuration Enabling STP Setup Click on STP Setup from the CONFIGURATION menu Select Enable from the STP State radio button. STP State: Activate Spanning Tree Protocol (STP) function makes your network more resilient to link failure and also provides a protection from loop. Priority: Specify the configurable value that is appended as the most significant portion of a AP.
Chapter 5 4.7 Further Configuration SNMP Setup Simple Network Management Protocol (SNMP) is a set of communication protocols that separates the management architecture from the architecture of the hardware devices. Enabling SNMP Click on SNMP from the CONFIGURATION menu. Select Enable from the SNMP State drop-down list. The default Read Password is set to public while the default Read/Write Password is private. Click on the Apply button. 4.
Chapter 5 Further Configuration Enabling MAC Filtering Click on MAC Filtering from the CONFIGURATION menu. Select Enable from the MAC Filtering drop-down list. Click on the Add button to add in the MAC address of the user. Fill in the Mac Addr field with the MAC address of the client in the format xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx, where x is any value within the range 09 or a-f. Click on the Apply button to update the changes.
Chapter 5 Further Configuration Chapter 5 Further Configuration This chapter provides guidelines in: • Setting up uConfig (only in Gateway mode) • Configuring WAN Setup (only in Gateway or Wireless Routing Client mode) • Using NAT • Routing • Implementing IP Filtering • Applying Remote Management • Enabling Parallel Broadband 5.1 Setting up uConfig (only in Gateway mode) This option is ONLY available when the access point operates in Gateway mode.
Chapter 5 5.2 Further Configuration Configuring WAN Setup (only available in Gateway and Wireless Routing Client mode) The WAN setup allows you to set up the access point for broadband Internet connection. Described below are the common steps you should start with to select or change the broadband connection type. Changing WAN Type Click on WAN Setup from the CONFIGURATION menu. The setup page of the WAN type that you have last implemented will be displayed.
Chapter 5 5.2.1 Further Configuration Dynamic IP In the default dynamic IP addressing mode, your ISP automatically assigns the IP address of the access point to it. This type of connection applies to most Cable Internet subscribers, for instance: • Singapore Cable Vision subscribers. • @HOME Cable Service users.
Chapter 5 5.2.2 Further Configuration Static IP If you have subscribed to a specific IP address or to a fixed range of IP addresses from your ISP, follow the procedure summarized below. Changing WAN Type – Static IP Configuration At the Static IP WAN Setup page: Replace the default IP Address, Network Mask and Gateway IP Address fields with the relevant values given by your ISP. Click on the Save button. Click on the Reboot button to restart the system and let the changes to take effect.
Chapter 5 5.2.3 Further Configuration PPPoE Select this connection type if you have subscribed to ADSL in a country utilizing standard PPPoE for authentication, for instance: • • If you are in Germany which uses T-1 connection. If you are a SingNet Broadband or Pacific Internet Broadband user in Singapore. The next steps will guide you in setting up the access point.
Chapter 5 Further Configuration PPPoE Parameter MTU Description The MTU or Maximum Transmission Unit is the largest packet size allowed by the ISP. It is set by default to 1462 though it can vary between 1400 and 1492. Username This refers to your broadband account username. Password This refers to your broadband account password. Service Name This optional field allows you to key in the service name of your ADSL subscription.
Chapter 5 5.2.4 Further Configuration Singapore ADSL Other ADSL subscribers in Singapore, including SingTel Magix SuperSurf users, should opt for this type of connection. Changing WAN Type – Singapore ADSL Configuration At the Singapore ADSL WAN Setup page: Key in the Username of your Internet account. Insert your account Password. Enter an Idling Timeout value, in the range of 30-3600 seconds. Entering 0 will disable this feature.
Chapter 5 5.2.5 Further Configuration Australia BPA Cable This type of connection has been especially customized for Big Pond Cable Internet users in Australia Changing WAN Type – Singapore ADSL Configuration At the Australia BPA WAN Setup page: Key in the Username of your Internet account. Insert your account Password. Enter the IP address of your Authentication Server, as defined by your ISP. Fill in an Idling Timeout value, in the range of 30-3600 seconds. Entering 0 will disable this feature.
Chapter 5 5.2.6 Further Configuration PPTP The Point-to-Point Tunneling Protocol (PPTP) is a networking technology which, enables the implementation of secure multi-protocol Virtual Private Networks (VPNs) through public networks, enabling remote users to access corporate networks securely at a lower cost Changing WAN Type – PPTP Configuration At the PPTP WAN Setup page: Key in the Client IP address. Enter the Network Mask. Fill in the Username of your Internet account. Insert your account Password.
Chapter 5 5.3 Further Configuration Using NAT (Only available in Gateway and Wireless Routing Client mode) NAT, also known as Network Address Translation, functions by transforming the private IP address of packets originating from hosts on your network so that they appear to be coming from a single public IP address and by restoring the destination public IP address to the appropriate private IP address for packets entering the private network.
Chapter 5 5.3.1 Further Configuration To set up a De-Militarised Zone host A De-Militarised Zone host, or DMZ host, is a separate neutral client sitting between your private network and the WAN. It initiates WAN connections upon request from your network clients, and forwards the request packets. Similarly, outside users can access only the DMZ host. You can host Web pages or public information that can be served to the outside world, on the DMZ host.
Chapter 5 5.3.2 Further Configuration To set up port forwarding Port forwarding allows the access point to redirect any incoming Internet request bearing a public IP address to a specific PC on your network, based on the incoming packet’s TCP/UDP port number. You can thus use TCP port forwarding to hide your web-server behind the access point for added security while using UDP port forwarding lets you run a secure multiplayer game server.
Chapter 5 Further Configuration Set up Port Forwarding – For Known Server Click on NAT from the CONFIGURATION menu. Ensure whether the NAT Status is enabled. At the Advanced NAT Options section: Click on Port Forwarding. The NAT Static Port Based Entries table illustrated by the screen shot displays the list of current port-based entries. Click on the Add button. For standard server applications: HTTP/FTP/POP3/Netmeeting, go to the Known Server section: Complete the Address field.
Chapter 5 Further Configuration Set up Port Forwarding – For Custom Server Otherwise, in order to set up Internet applications which are not defined in the Known Server section, go to Custom Server: Key in the Private IP Address. Define the Port numbers to use. Select the relevant Protocol from the drop down list. Identify the Server Type. Click on Add button. We entered a Private IP Address of 192.168.168.
Chapter 5 Further Configuration The following is a non-exhaustive list of well-known port numbers: Application Echo Daytime FTP SMTP (Simple Mail Transfer, i.e.
Chapter 5 5.4 Further Configuration Routing (Only available in Gateway and Wireless Routing Client mode) The access point supports both static routing so that you can manually add entries into its routing table and dynamic routing, where it will automatically update the routing table, whenever necessary. NOTE The default settings of the access point are sufficient to allow broadband Internet sharing. There is NO need to configure any further routing information.
Chapter 5 5.4.1 Further Configuration Static Routing The following will show you how to add entries to your gateway’s routing table so that it may re-route IP packets to another network, which is very useful if your network has more than one router. Static Routing Click on Routing from the CONFIGURATION menu. The IP Routing Table illustrated by the screen shot on the left displays the list of current routing entries. If you want to add a static route in the IP Routing Table: Click on the Add button.
Chapter 5 5.4.2 Further Configuration Dynamic Routing When using dynamic routing, the access point can continuously update its routing table with the latest routing information, thus automatically adjusting to any physical changes in the network topology. The access point supports RIP1 (Routing Information Protocol) and RIP2 (Routing Information Protocol version 2), and periodically broadcasts its routing tables to neighboring routers. The best route is chosen if there are multiple routes to a destination.
Chapter 5 5.5 Further Configuration Implementing IP Filtering (Only available in Gateway and Wireless Routing Client mode) Enabling the IP Filtering function causes the access point to decide, according to predefined rules, whether to block all outgoing packets or to let them pass.
Chapter 5 Further Configuration IP Filtering Click on IP Filtering from the CONFIGURATION menu. Select either the Sent or Discarded radio button to accept or reject any packet conforming to the rules. Click on the Add button to set the new rule in the IP Filter Configuration GUI. Insert a Rule Name for this new packet filtering rule.
Chapter 5 Further Configuration At the Destination Port drop down list, select either: A Range of TCP ports In this case, you will have to define (From) which port (To) which port, your rule applies. A Single TCP port Here, you need only specify the source port in the (From) field. Any IP port You may here, leave both, the (From) as well as the (To) fields, blank.
Chapter 5 Further Configuration At the Time of the Day drop down list, you may also choose to apply the rule to: A Range of time In which case, you have to specify the time in the format HH:MM, where HH may take any value from 00 to 23 and MM, any value from 00 to 59. Any time Here, you may leave both (From) and (To) fields blank. Click on the Apply button to make the new rule effective. The Filtering Configuration table will then be updated.
Chapter 5 Further Configuration Delete IP Filtering We illustrated deleting the rule called Finance. To delete an existing IP filtering rule: Select the radio button corresponding to the rule to delete. Click on Delete. The Filtering Configuration table will then be refreshed. We illustrated editing the rule called Purchasing. If you want to edit an existing IP filtering rule: Select the radio button corresponding to the rule to edit. Click on Edit.
Chapter 5 5.6 Further Configuration Applying Remote Management (Only available in Gateway and Wireless Routing Client mode) Making use of remote management, you only require Internet access to be able to manage your network. This feature is especially helpful for those who work away from the office or from home. Remote Management Click on Remote Management from the CONFIGURATION menu. Specify the HTTP Port number and the Telnet Port number. The standard entry for HTTP Port is 80 and 23 for Telnet Port.
Chapter 5 5.7 Further Configuration Enabling Parallel Broadband (Only available in Gateway mode) The access point is equipped with the exclusive Parallel Broadband technology, which translates into scalable Internet bandwidth as well as Load Balancing and Fail-Over Redundancy features. Since there is no restriction to the type of broadband Internet account that the access point can connect to, your network may run with one of the access points on Cable Internet, while the rest connect to ADSL.
Chapter 5 5.7.2 Further Configuration Fail-Over Redundancy In case one of your broadband connections should fail, the affected access point will automatically switch over to other operational broadband channels so that your network is not disrupted. For instance, when the WAN connection to Z is down, Z will redirect its traffic to Y, and hence providing Fail-Over Redundancy of Internet access to wireless clients of Z.
Chapter 5 Further Configuration 5.7.3 To enable Parallel Broadband Before enabling the Parallel Broadband feature, verify whether: • Each of the access points is correctly configured to connect to its specific broadband Internet account. • You need to enable DHCP on all of the access points in Parallel broadband. It is recommended that each of the access points leases IP in a non-overlapping IP address pool.
Chapter 6 System Utilities Chapter 6 System Utilities This chapter provides guidelines in using: • • The SYSTEM TOOLS menu The HELP menu 6.1 Using the SYSTEM TOOLS Menu 6.1.1 System Identity If your network operates with several of the access points, you would find it useful to have a means of identifying each individual device. In certain cases, your Internet Service Provider might request for a System Name before allowing you to access the Internet.
Chapter 6 6.1.2 System Utilities WLAN Station List (Only available in AP mode/Gateway mode) This option allows you to view the wireless clients in the wireless network. WLAN Station List Click on WLAN Station List from the SYSTEM TOOLS menu. Click on the Refresh button to get the latest information on the availability of wireless clients in the wireless network.
Chapter 6 6.1.3 System Utilities Set System’s Clock Synchronizing the built-in clock of the access point with the time kept by your workstation will enable you to effectively manage and operate the time-based functions provided by the access point. Set System’s Clock Click on Set System’s Clock from the SYSTEM TOOLS menu. Select the appropriate time zone from the Select to Change the Time Zone for the system Location drop-down list. Enable the Auto Time Setting (SNTP) radio button.
Chapter 6 6.1.4 System Utilities Firmware Upgrade Our products are designed for upgradeability. You can check the current version of your firmware by clicking on About System from the HELP menu. To begin with, ensure that you have downloaded the latest firmware onto your local hard disk drive. Firmware Upgrade Click on Firmware Upgrade from the SYSTEM TOOLS menu. Key in the path and file name of the downloaded file in the Upgrade Firmware (path and file name) field.
Chapter 6 6.1.5 System Utilities Save or Reset Settings You may choose to save the current configuration profile, to make a backup of it onto your hard disk, to restore an earlier profile saved on file or to reset the access point back to its default settings. Save Your Settings Click on Save or Reset Settings from the SYSTEM TOOLS menu. Click on the Save button. Reboot the system.
Chapter 6 6.1.6 System Utilities Reboot System Most of the changes you make to the system’s settings require a system reboot before the new parameters can take effect. Reboot Your device Click on Reboot System from the SYSTEM TOOLS menu. You will be prompted to confirm whether to execute a system reboot. Click on the Yes button whenever you are ready to restart.
Chapter 6 6.1.7 System Utilities Change Password It is recommended that you change the access point login password, which is case sensitive and is set by default, to password. Changing your Password Click on Change Password from the SYSTEM TOOLS menu. Key in the Current Password. The factory default is password. Enter the new password in the New Password field as well as in the Confirm Password field. Click on the Change Password button.
Chapter 6 6.1.8 System Utilities Logout To exit the Web interface, follow the next few steps. 1. Click on Logout from the SYSTEM TOOLS menu. Click the Logon button to access the configuration interface again.
Chapter 6 6.2 System Utilities Using the HELP menu 6.2.1 Get Technical Support This page presents the contact information of technical support centres around the world. Get Technical Support Click on Get Technical Support from the HELP menu. This is a feature-packed device. If you require further information than provided in the manual or data sheet, please contact a Technical Support Centres by mail, email, fax or telephone.
Chapter 6 6.2.2 System Utilities About System The About System page displays a summary of your system configuration information. Support technicians might require specific information about your system data when they are troubleshooting your configuration. You can use the information displayed in this page to quickly find the data they need to resolve your system problem. Get Technical Support Click on About System from the HELP menu.
Appendix I Troubleshooting Appendix I Troubleshooting AI Solutions to Common Problems In this section, we list suggested steps to rectify some common problems that may arise during the installation and operation of the access point. 3. I want to know whether the access point is connected to the Internet. A. Open a Command Prompt For Windows 98/98SE/ME, please click the Start button and Run. In the Open field within the Run dialog box, type in command. Press the Enter key or click the OK button.
Appendix I Troubleshooting 4. I am not getting an IP address and am unable to surf the Internet. A. Make sure that the Ethernet cable is properly connecting your Cable/ADSL modem to the WAN port of the gateway, and verify whether the gateway has a valid IP address from the About System page. Then refer to suggested steps A, B & C to Problem 1 described above, to verify the connectivity of the gateway. B. Ensure that the WAN settings are relevant to your broadband connection.
Appendix I Troubleshooting 6. I want to set the access point to its factory default settings. G. Power up the gateway. H. Depress the Reset button situated at the back of the device and hold it for 2 to 10 seconds before releasing it. 7. My laptop is not able to access the AP. I. In the Command Prompt, type ping 192.168.168.1 and press the Enter key. If you get a reply, your laptop is communicating with the gateway. If you do NOT get a reply, please continue with the following steps. J.
Appendix I Troubleshooting 8. My network contains several of the access points but they are unable to connect to each other. M. If you are running the Parallel Broadband feature: Though they may belong to different SSIDs, the gateways MUST operate in the same frequency band. N. If you are trying to implement a WDS: Verify that the gateways are functioning in the same frequency band.
Appendix III TCP/IP Configuration Appendix II Firmware Recovery This section demonstrates how to reload the firmware to the access point should the system fail to launch properly. In such cases, the access point will automatically switch to loader mode and the DIAG LED will light up and remain ON. Table 1 below illustrates the behaviour of the DIAG LED.
Appendix III TCP/IP Configuration Appendix III TCP/IP Configuration This chapter discusses the configuration of your TCP/IP connection of the access point. Upon the successful installation of the access point, the network adapter will be added to your network folder. To configure TCP/IP connection settings for the access point, please follow the steps listed below. If you are using Windows 2000/XP, please go to section AIII.2. AIII.1 Configure dynamic IP Address in Windows 98SE/ME 1.
Appendix III TCP/IP Configuration 3. Go through the list of Network Components in the Network window Configuration tab. If TCP/IP is not installed, click on Add to start the installation 4. Select Protocol and click Add. 5. Select Microsoft and TCP/IP in the Manufacturers and Network Protocols columns respectively. Click OK.
Appendix III TCP/IP Configuration 6. After TCP/IP is installed, go back to the Network screen and select TCP/IP in the list of Network Components.
Appendix III TCP/IP Configuration 7. Click Properties, and configure the settings in each of the TCP/IP Properties window. NOTE Please check with your system administrator or Internet Service Provider for more information on the TCP/IP parameters.
Appendix III TCP/IP Configuration AIII.2 Configure dynamic IP Address in Windows XP/2000 For Windows XP users, you do not need to add the TCP/IP protocol, as it is already setup when a network card is installed. Therefore only the configuration for TCP/IP is needed. 1. From the Windows 2000 Start menu, click Control Panel, followed by Network and Internet Connections. Then click Network Connections.
Appendix III TCP/IP Configuration 2. Right click on the Wireless Network Connections with the access point and click on Properties. Select the Internet Protocol (TCP/IP) and click Properties. 3. Configure your IP address and the rest of the parameters so that you can be connected to the network. 4. If your access point is configured as a DHCP server, you have to select Obtain an IP address automatically. 5. If your access point (AP) has a certain IP address.
Appendix III TCP/IP Configuration AIII.3 Configure static IP Address in Windows 98SE/ME 1. Follow Step 1 to 6 in Section AIII.1 “Configure dynamic IP Address in Windows 98SE/ME” on Page 88. 2. Click Properties, and configure the settings in each of the TCP/IP Properties window. 3. Click OK to update the changes.
Appendix III TCP/IP Configuration AIII.4 Configure static IP Address in Windows XP/2000 1. Follow Step 1 to 6 in Section AIII.2 “Configure dynamic IP Address in Windows XP/2000” on Page 91. 2. Right click on the Wireless Network Connections with the access point and click on Properties. Select the Internet Protocol (TCP/IP) and click Properties. 3. Configure your IP address and the rest of the parameters so that you can be connected to the network. 4. Click OK to update the changes.
Appendix IV Panel Views and Descriptions Appendix IV Panel Views and Descriptions 5 1 3 2 4 Features 1 2 3 4 5 LAN LED Link/Act WLAN Link/Act LED Diagnostic LED Power LED Antenna Status and Indications Steady Yellow The access point is operating at the speed of 10Mbps. Steady Green The access point is operating at the speed of 100Mbps. Steady Green More than 1 wireless client is present in the wireless network. Blinking Green Activity is detected in the wireless network.
Appendix IV Panel Views and Descriptions 6 Features 7 8 5 Status and Indications 6 LAN RJ45 Ethernet Port Using RJ45 Ethernet cable for connection. 7 DC 3.3V 3A Power input of 3.
Appendix V Technical Specifications Appendix V Technical Specifications Industrial Standards • • IEEE 802.11b IEEE 802.11g Performance • Network speeds dynamically shift between 1,2, 5.5, 11, 12, 18, 24, 36, 48, 54 Mbps Indoor: 20 m (54 Mbps) Outdoor: 80 m (54 Mbps) • • Frequency Range IEEE 802.11b: IEEE 802.11g: Wireless Operation Modes 2.4 ~ 2.4835 GHz 2.4 ~ 2.
Appendix V Technical Specifications SNMP • • SNMP (RFC 1157) MIB II (RFC 1213) LED Indicators • • • • Power Diagnostic LAN Link/Activity WAN Link/Activity Power Requirements • • Input Voltage Options: 3.
Appendix V Technical Specifications Electromagnetic Immunity • • • EN 55022 (CISPR 22)/EN 55024 Class B EN 61000-3-2 EN61000-3-3 Safety • • CE Mark EN 60950 Power Requirements Input Voltage: Current Ratings: Environment Requirements Operating Temp: Storage Temp: Operating Humidity: Physical Dimensions 3.
Manual Number: U-0436-V1.1C Version 1.