User Guide LAPN600
Linksys Table of Contents Table of Contents CHAPTER 1 QUICK START GUIDE . . . . . . . . . . . . . . . . . . . . . 1 Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Physical Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Mounting Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 CHAPTER 2 ACCESS POINT SETUP . . . . . .
Linksys APPENDIX C PC AND SERVER CONFIGURATION . . . . . . . . . . Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using WPA2-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using WPA2-Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . 802.
Linksys CHAPTER 1 Quick Start Guide CHAPTER 1 Quick Start Guide Physical Details There is one LED for the device. LED Package Contents LED Color Activity Status Green Blinking System is booting. Solid System is normal; no wireless device connected. Blinking Software upgrade in process. Solid System is normal; at least one wireless device connected. Solid Booting process or update failed; hard reset or service required.
Linksys Mounting Guide To avoid overheating, do not install your access point if ambient temperatures exceed 104°F (40°C). Install on a flat, stable surface, near the center of your wireless coverage area making sure not to block vents on the sides of the device enclosure. CHAPTER 1 Quick Start Guide 5. Connect the Ethernet cable and/or AC power adapter to your device 6. Slide the device into the bracket. Turn access point clockwise until it locks. 7. Replace tile in ceiling.
Linksys CHAPTER 2 Access Point Setup CHAPTER 2 Access Point Setup 3. Type in default username: admin, and password: admin. 4. Click Login to launch the browser-based setup and follow the on-screen instructions. Overview This chapter describes the setup procedure to connect the wireless access point to your LAN, and configure it as an access point for your wireless stations. Wireless stations may also require configuration. For details, see Appendix C Wireless Station Configuration.
Linksys Setup Wizard The first time you connect to the wireless access point, run the Setup Wizard to configure the device. CHAPTER 2 Access Point Setup 5. On the IPv4 Address screen (Figure 4) configure the IP address of the device then click Next. If you want to configure more than 4 SSIDs, please go to Configuration → Wireless → Basic Settings. The access point supports up to 8 SSIDs per radio. 1. Click the Quick Start link on the main menu Figure 4: Setup Wizard - IPv4 6.
Linksys CHAPTER 2 Access Point Setup 9. Click Finish to leave the wizard. Figure 6: Setup Wizard - Wireless Security 8. On the Summary screen, check the data to make sure they are correct and then click Submit to save the changes. Figure 8: Setup Wizard - Finish User Accounts Click User Accounts on the Administration menu to manage user accounts. The access point supports up to 5 users: one administrator and four normal users.
Linksys CHAPTER 2 Access Point Setup Data - User Accounts Screen User Account Table User Name Data - Time Screen Time Enter the User Name to connect to the access point’s admin interface. User Name is effective once you save settings. User Name can include up to 63 characters. Special characters are allowed. Current Time Display current date and time of the system. Manually Set date and time manually.
Linksys Log Settings The logs record various types of activity on the access point. This data is useful for troubleshooting, but enabling all logs will generate a large amount of data and adversely affect performance. CHAPTER 2 Access Point Setup Data - Logs Settings Screen Log Types Log Types Select events to log. Checking all options increase the size of the log, so enable only events you believe are required. Email Alertt Email Alert Enable email alert function.
Linksys Management Access You can use the Management page to configure the management methods of the access point. CHAPTER 2 Access Point Setup Data - Management Access Screen Web Access HTTP HTTP (Hyper Text Transfer Protocol) is the standard for transferring files (text, graphic images and other multimedia files) on the World Wide Web. Enable to allow Web access by HTTP protocol. HTTP Port Specify the port for HTTP. It can be 80 (default) or from 1024 to 65535.
Linksys Location CHAPTER 2 Access Point Setup Enter the area or location where the access point resides. The location includes 1 to 32 characters. Special characters are allowed. SSL Certificate This screen can be used to manage SSL certificate used by HTTPS. SNMPv1/v2 Settings Get Community Enter the name of Get Community. Get Community is used to read data from the access point and not for writing data into the access point. Get Community includes 1 to 32 characters. Special characters are allowed.
Linksys CHAPTER 2 Access Point Setup Data - SSL Certificate Screen Data - Network Setup Screen Export/Restore to/from Local PC TCP/IP Export SSL Host Name Assign a host name to this access point. Host name consists of 1 to 15 characters. Valid characters include A-Z, a-z, 0-9 and -. Character cannot be first and last character of hostname and hostname cannot be composed of all digits. VLAN Enables or disables VLAN function.Workgroup Bridge can only be enabled when VLAN function is disabled.
Linksys CHAPTER 2 Access Point Setup Advanced Use this screen to configure advanced network settings of the access point. Port Settings Auto Negotiation If enabled, Port Speed and Duplex Mode will become grey and cannot be configured. If disabled, Port Speed and Duplex Mode can be configured. Operational Auto Negotiation Current Auto Negotiation mode of the Ethernet port. Port Speed Select the speed of the Ethernet port. Available only when Auto Negotiation is disabled.
Linksys Authentication CHAPTER 2 Access Point Setup This feature supports following two kinds of authentication: •• Authentication via MAC Address Select this if you want to use MAC address for authentication. The access point uses lowercase MAC address for Name and Password, like xxxxxxxxxxxx. •• Basic Settings Basic Settings provides the essential configuration for your wireless radio and SSIDs. You should be able to set up your wireless network with these essential parameters configured.
Linksys CHAPTER 2 Access Point Setup Data - Wireless Basic Settings Screen Broadcast When the access point does not broadcast its SSID, the network name is not shown in the list of available networks on a client station. In-stead, you must enter the exact network name manually into the wireless connection utility on the client so that it can connect. Basic Wireless Settings Wireless Radio Select the wireless radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz.
Linksys CHAPTER 2 Access Point Setup Security Settings • WPA2-Personal - This is a further development of WPA-PSK, and offers even greater security, using the AES (Advanced Encryption Standard) method. This method, sometimes called “Mixed Mode”, allows clients to use either WPA-Personal (with TKIP) or WPA2-Personal (with AES). • WPA2-Enterprise - Requires a RADIUS Server on your LAN to provide the client authentication according to the 802.1x standard.
Linksys CHAPTER 2 Access Point Setup Security Settings - WEP Security Settings - WPA2-Personal This is the 802.11b standard. Data is encrypted before transmission, but the encryption system is not very strong. This is a further development of WPA-Personal, and offers even greater security. Figure 18: WEP Wireless Security Screen Data - WEP Screen WEP Authentication Default Key Select Open System or Shared Key. All wireless stations must use the same method. Transmit Select a transmit key.
Linksys CHAPTER 2 Access Point Setup Security Settings - WPA/WPA2-Personal Security Settings - WPA2-Enterprise This method, sometimes called Mixed Mode, allows clients to use either WPAPersonal or WPA2-Personal. This version of WPA2-Enterprise requires a RADIUS Server on your LAN to provide the client authentication. Data transmissions are encrypted using the WPA2 standard.
Linksys CHAPTER 2 Access Point Setup Data - WPA2-Enterprise Screen WPA2-Enterprise Primary Server Enter the IP address of the RADIUS Server on your network. Primary Server Port Enter the port number used for connections to the RADIUS Server. It is a value from 1 to 65534, and default is 1812. Primary Shared Secret Enter the key value to match the RADIUS Server. It consists of 1 to 64 characters.
Linksys CHAPTER 2 Access Point Setup Data - WPA/WPA2-Enterprise Screen WPA/WPA2-Enterprise Primary Server Enter the IP address of the RADIUS Server on your network. Primary Server Port Enter the port number used for connections to the RADIUS Server. It is a value from 1 to 65534, and default is 1812. Primary Secret RADIUS Use RADIUS server for authentication and dynamic WEP key generation for data encryption. Shared Enter the key value to match the RADIUS Server. It consists of 1 to 64 characters.
Linksys Rogue AP Detection Rogue AP detection is used to detect the unexpected or unauthorized access point installed in a secure network environment. CHAPTER 2 Access Point Setup Wireless Radio Select the desired radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz. Rogue AP Enable or disable Rogue AP Detection on the selected radio. Detected Rogue AP List Action Click Trust to move the AP to the Trusted AP List. MAC Address The MAC address of the Rogue AP.
Linksys Scheduler Configure a rule with a specific time interval for SSIDs to be operational. Automate enabling or disabling SSIDs based on the profile definition. Support up to 16 profiles and each profile can include 4 time rules. CHAPTER 2 Access Point Setup Wireless Scheduler Enable or disable wireless scheduler. If disabled, even if some SSIDs are associated with profiles, they will be always active. Scheduler Operational Status Status The operational status of the scheduler.
Linksys CHAPTER 2 Access Point Setup Scheduler Association Connection Control Associate defined scheduler profiles with SSIDs. Exclude or allow only listed client stations to authenticate with the access point. Figure 27: Connection Control Screen Figure 26: Scheduler Association Screen Data - Scheduler Association Screen Wireless Radio Select the desired radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz.
Linksys CHAPTER 2 Access Point Setup Rate Limit QoS Limit downstream and upstream rate of SSIDs. The QoS (Quality of Service) feature allows you to specify priorities for different traffic coming from your wireless client. Lower priority traffic will be slowed down to allow greater throughput or less delay for high priority traffic. Figure 28: Rate Limit Screen Data - Rate Limit Screen Wireless Radio Figure 29: QoS Screen Select the desired radio from the list. Radio 1 is for 2.
Linksys CHAPTER 2 Access Point Setup Data - QoS Screen QoS Setting Wireless Radio Select the desired radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz. QoS Settings Workgroup Bridge Workgroup Bridge feature enables the access point to extend the accessibility of a remote network. In Workgroup Bridge mode, the access point acts as a wireless station (STA) on the wireless LAN. It can bridge traffic between a remote wired network and a wireless LAN.
Linksys CHAPTER 2 Access Point Setup Advanced Settings Workgroup Bridge Radio Select the desired radio from the list. Workgroup Bridge Status Status Configure advanced parameters of the wireless radios. Enable or disable Workgroup Bridge function. Workgroup Bridge can only be enabled when VLAN function is disabled. Before configuring Workgroup Bridge, make sure all devices in Workgroup Bridge have the following identical settings. •• Radio •• IEEE 802.
Linksys CHAPTER 2 Access Point Setup Data - Advanced Settings Screen Band Steering Band Steering Beacon Interval The access point transmits beacon frames at regular intervals to announce the existence of the wireless network. Enter the interval between the transmissions of beacon frames. The value range is between 40 and 1000 milliseconds and default is 100 milliseconds. DTIM Interval Enter the Delivery Traffic Information Map (DTIM) period, an integer from 1 to 255 beacons. The default is 1 beacon.
Linksys CHAPTER 2 Access Point Setup Fragmentation Threshold Enter the fragmentation threshold, an integer from 256 to 2346. The default is 2346. The fragmentation threshold is a way of limiting the size of packets (frames) transmitted over the network. If a packet exceeds the fragmentation threshold you set, the fragmentation function is activated and the packet is sent as multiple 802.11 frames. If the packet being transmitted is equal to or less than the threshold, fragmentation is not used.
Linksys Chapter 3 Operation and Status Operation You may need to perform the following operations on a regular basis. • If using the Access Control feature, update the Trusted PC database as required. (See Access Control in Chapter 2 for details.) • If using 802.1x mode, update the User Login data on the Windows 2000 Server, and configure the client PCs, as required. System Summary Provides system status of the access point.
Linksys Chapter 3 Operation and Status LAN Status Untagged VLAN ID Displays the untagged VLAN ID. Traffic on the VLAN that you specify in this field is not be tagged with a VLAN ID when forwarded to the network. VLAN 1 is the default ID for untagged VLAN. Management VLAN Displays the Management VLAN ID. The VLAN associated with the IP address you use to connect to the access point. Provide a number between 1 and 4094 for the Management VLAN ID. The default is 1.
Linksys Chapter 3 Operation and Status Wireless Status Status Status of the SSID, enabled or disabled. Wireless Status displays settings and status of wireless radios and SSIDs. MAC Address MAC address of the SSID. VLAN ID VLAN ID of the SSID. Priority The 802.1p priority of the SSID. Scheduler State Current scheduler status of the SSID. • N/A No scheduler is enabled on the SSID, or the SSID is disabled by administrator. • Active The SSID is enabled. • Inactive The SSID is disabled.
Linksys Chapter 3 Operation and Status Wireless Clients Statistics Wireless Clients screen displays a list of connected clients based on each wireless interface. Statistics provides real-time transmitted and received statistics data based on each SSID per Radio, and LAN interface. Figure 35: Wireless Clients Screen Figure 36: Statistics Screen Data - Statistics Data - Wireless Clients Wireless Interface Select the desired interface from the list. The interfaces include 8 SSIDs per radio.
Linksys Chapter 3 Operation and Status Log View Log View shows a list of system events that are generated by each single log entry, such as login attempts and configuration changes. Figure 37: Log View Screen Data - Log View Log Messages Log Messages Show the log messages. Buttons Refresh Update the data on screen. Save Save the log to a file on your PC. Clear Delete the existing logs from device.
Linksys Chapter 4 Access Point Management Chapter 4 Access Point Management Overview This chapter covers features available on the wireless access point’s Maintenance menu. • Maintenance • Firmware Upgrade • Configuration Backup/Restore • • Factory Default Figure 38: Firmware Upgrade Screen • Reboot To perform the firmware upgrade from local PC: Diagnostics 1. Click the Browse button and navigate to the location of the upgrade file. • Ping Test 2. Select the upgrade file.
Linksys Chapter 4 Access Point Management Configuration Backup/Restore Configuration backup/restore allows you to download the configuration file from device the access point to external storage. You can save to , e.g., your PC, or networked storage, or to upload a previously saved configuration file from external storage to device your access point. It is highly recommended you save one extra copy of the configuration file to external storage after you are done with access point setup.
Linksys Chapter 4 Access Point Management Factory Default It’s highly recommended you save your current configuration file before you restore to factory default settings. To save your current configuration file, click Maintenance → Configuration Backup/Restore. Figure 40: Factory Default Screen Data - Factory Default Screen Factory Default If Yes radio button is clicked and Save button is pressed, your current configuration file will be deleted, and the system will reboot.
Linksys Chapter 4 Access Point Management Ping Test Packet Capture Ping Test is used to determine the accessibility of a host on the network. Packet Capture is used to capture and store 802.3 packets received and transmitted by the access point based on one specified network interface. Network interface can be radio, SSID or LAN. Figure 42: Ping Test Screen Data - Ping Test Screen Figure 43: Packet Size Screen Data - Packet Size Screen General IP Type Enter the IP type of destination address.
Linksys Chapter 4 Access Point Management Diagnostic Log Diagnostic Log provides system detail information, such as configuration file, system status and statistics data, hardware information, operational status. The information is useful in troubleshooting and working with technical support. Figure 44: Diagnostic Screen Data - Diagnostic Screen Download Click to download the device diagnostic log into a local file.
Linksys Appendix A Troubleshooting Appendix A Troubleshooting Overview This chapter covers some common problems encountered while using the wireless access point, and some possible solutions to them. If you follow the suggested steps and the wireless access point still does not function properly, contact your dealer for further advice. General Problems Problem 1: I can’t find new access point on my network. Solution 1 : Check the following.
Linksys Appendix B About Wireless LANs Appendix B About Wireless LANs SSID/ESSID BSS/SSID Overview Wireless networks have their own terms and jargon. It is necessary to understand many of these terms in order to configure and operate a wireless LAN. Wireless LAN Terminology Modes Wireless LANs can work in either of two (2) modes: • Ad-hoc • Infrastructure Ad-hoc Mode Ad-hoc mode does not require an access point or a wired (Ethernet) LAN. Wireless stations, e.g.
Linksys • • • Appendix B About Wireless LANs If using multiple access points it is better if adjacent access points use different channels to reduce interference. The recommended channel spacing between adjacent access points is five channels, e.g., use Channels 1 and 6, or 6 and 11. If this option is used: In “Infrastructure” Mode wireless stations normally scan all channels looking for an access point. If more than one access point can be used, the one with the strongest signal is used.
Linksys Appendix C PC And Server Configuration Appendix C PC And Server Configuration Using WPA2-PSK For each of the following items, each wireless station must have the same settings as the wireless access point. Mode On each PC, the mode must be set to Infrastructure. SSID (ESSID) This must match the value used on the wireless access point. Overview The default value is LinksysSMB24G for radio 1 and LinksysSMB5G for radio 2.
Linksys Appendix C PC And Server Configuration Using WPA2-Enterprise 802.1x Server Setup (Windows 2000 Server) This is the most secure and most complex system. WPA-Enterprise mode provides greater security and centralized management, but it is more complex to configure. This section describes using Microsoft Internet Authentication Server as the RADIUS server, since it is the most common RADIUS server available that supports the EAP-TLS authentica-tion method.
Linksys Appendix C PC And Server Configuration Figure 48: CA Screen Figure 46: Components Screen 7. Click Next if you don’t want to change the CA’s configuration data. 4. Click Next. 8. Installation will warn you that Internet Information Services are running, and must be stopped before continuing. Click OK, then Finish. 5. Select the Enterprise root CA, and click Next. DHCP server configuration 1. Click on Start -> Programs -> Administrative Tools -> DHCP 2.
Linksys 3. Click Next when the New Scope Wizard Begins. 4. Enter the name and description for the scope, click Next. 5. Define the IP address range. Change the subnet mask if necessary. Click Next. Figure 50: IP Address Screen 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank. Click Next. 7. Change the Lease Duration time if preferred. Click Next. 8. Select Yes, I want to configure these options now, and click Next.
Linksys Certificate Authority Setup 1. Select Start -> Programs -> Administrative Tools -> Certification Authority. 2. Right-click Policy Settings, and select New -> Certificate to Issue. Appendix C PC And Server Configuration 4. Select Start -> Programs -> Administrative Tools -> Active Directory Users and Computers. 5. Right-click on your active directory domain, and select Properties. Figure 52: Certificate Authority Screen 3.
Linksys 7. Select Computer Configuration -> Windows Settings -> Security Settings -> Public Key Policies, right-click Automatic Certificate Request Settings -> New -> Automatic Certifi-cate Request. Appendix C PC And Server Configuration 10. Ensure that your Certificate Authority is checked, click Next. 11. Review the policy change information and click Finish. 12. Click Start -> Run, type cmd and press enter.
Linksys Appendix C PC And Server Configuration 12. Select No if you don’t want to view the help for EAP. Click Finish. Remote Access Login for Users 1. Select Start -> Programs -> Administrative Tools -> Active Directory Users and Comput-ers. 2. Double click on the user who you want to enable. 3. Select the Dial-in tab, and enable Allow access. Click OK. Figure 59: Attribute Screen 11. Click Edit Profile... and select the Authentication tab.
Linksys Appendix C PC And Server Configuration The following instructions assume that: • You are using Windows XP • You are connecting to a Windows 2000 server for authentication. • You already have a login (User-name and password) on the Windows 2000 server. Client Certificate Setup 1. Connect to a network that doesn’t require port authentication. 2. Start your Web browser. In the Address box, enter the IP address of the Windows 2000 Server, followed by /certsrv e.g http://192.168.0.2/certsrv 3.
Linksys 6. Click Submit. Appendix C PC And Server Configuration 8. You will receive a confirmation message. Click Yes. Figure 67: Root Certificate Screen 9. Certificate setup is now complete. 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right-click on the Wireless Network Connection, and select Properties. Figure 65: Identifying Information Screen 7.
Linksys Encryption Settings The encryption settings must match the access point’s on the wireless network you wish to join. • Windows XP will detect any available wireless networks, and allow you to configure each network independently. • Your network administrator can advise you of the correct settings for each network. 802.1x networks typically use EAP-TLS. This is a dynamic key system, so there is no need to enter key values. Appendix C PC And Server Configuration 2.
Linksys Appendix C PC And Server Configuration Instead, you must enter the WEP key manually, ensuring it matches the WEP key used on the access point. Figure 71: Properties Screen NOTE On some systems, the 64-bit WEP key is shown as 40-bit and the 128-bit WEP key is shown as 104-bit. This difference arises because the key input by the user is 24 bits less than the key size used for encryption.
Visit linksys.com/support for award-winning technical support © 2014 Belkin International, Inc. and/or its affiliates. All rights reserved. BELKIN, LINKSYS and many product names and logos are trademarks of the Belkin group of companies. Third-party trademarks mentioned are the property of their respective owners. LNKPG-00090 Rev.
