User Guide LAPN300
Linksys Table of Contents Table of Contents CHAPTER 1 QUICK START GUIDE . . . . . . . . . . . . . . . . . . . . . 1 Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Physical Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Mounting Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 CHAPTER 2 ACCESS POINT SETUP . . . . . .
Linksys Wireless LAN Terminology . . . . . . . . . . . . . . . . . . . . . . . APPENDIX C PC AND SERVER CONFIGURATION . . . . . . . . . . Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using WPA2-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Linksys CHAPTER 1 Quick Start Guide CHAPTER 1 Quick Start Guide Physical Details There is one LED for the device. LED Package Contents LED Color Activity Status Green Blinking System is booting. Solid System is normal; no wireless device connected. Blinking Software upgrade in process. Solid System is normal; at least one wireless device connected. Solid Booting process or update failed; hard reset or service required.
Linksys Mounting Guide To avoid overheating, do not install your access point if ambient temperatures exceed 104°F (40°C). Install on a flat, stable surface, near the center of your wireless coverage area making sure not to block vents on the sides of the device enclosure. CHAPTER 1 Quick Start Guide 5. Connect the Ethernet cable and/or AC power adapter to your device 6. Slide the device into the bracket. Turn access point clockwise until it locks. 7. Replace tile in ceiling.
Linksys CHAPTER 2 Access Point Setup CHAPTER 2 Access Point Setup Overview This chapter describes the setup procedure to connect the wireless access point to your LAN, and configure it as an access point for your wireless stations. Wireless stations may also require configuration. For details, see Appendix C Wireless Station Configuration. The wireless access point can be configured using a Web browser. Figure 1: Password Dialog Setup using a Web Browser Your browser must support JavaScript.
Linksys Setup Wizard The first time you connect to the wireless access point, run the Setup Wizard to configure the device. CHAPTER 2 Access Point Setup 5. On the IPv4 Address screen (Figure 4) configure the IP address of the device then click Next. If you want to configure more than 4 SSIDs, please go to Configuration → Wireless → Basic Settings. The access point supports up to 8 SSIDs. 1. Click the Quick Start link on the main menu Figure 4: Setup Wizard - IPv4 6.
Linksys CHAPTER 2 Access Point Setup 9. Click Finish to leave the wizard. Figure 6: Setup Wizard - Wireless Security 8. On the Summary screen, check the data to make sure they are correct and then click Submit to save the changes. Figure 8: Setup Wizard - Finish User Accounts Click User Accounts on the Administration menu to manage user accounts. The access point supports up to 5 users: one administrator and four normal users.
Linksys CHAPTER 2 Access Point Setup Data - User Accounts Screen Time User Account Table User Name Data - Time Screen Enter the User Name to connect to the access point’s admin interface. User Name is effective once you save settings. User Name can include up to 63 characters. Special characters are allowed. Current Time Display current date and time of the system. Manually Set date and time manually.
Linksys Log Settings Screen The logs record various types of activity on the access point. This data is useful for troubleshooting, but enabling all logs will generate a large amount of data and adversely affect performance. CHAPTER 2 Access Point Setup Data - Logs Screen Log Types Log Types Select events to log. Checking all options increase the size of the log, so enable only events you believe are required. Email Alertt Email Alert Enable email alert function.
Linksys Management Access Screen You can use the Management page to configure the management methods of the access point. CHAPTER 2 Access Point Setup Data - Management Access Screen Web Access HTTP HTTP (Hyper Text Transfer Protocol) is the standard for transferring files (text, graphic images and other multimedia files) on the World Wide Web. Enable to allow Web access by HTTP protocol. HTTP Port HTTP to Redirect Specify the port for HTTP. It can be 80 (default) or from 1024 to 65535.
Linksys Location CHAPTER 2 Access Point Setup Enter the area or location where the access point resides. The location includes 1 to 32 characters. Special characters are allowed. SSL Certificate Screen This screen can be used to manage SSL certificate used by HTTPS. SNMP v1/v2 Settings Get Community Enter the name of Get Community. Get Community is used to read data from the access point and not for writing data into the access point. Get Community includes 1 to 32 characters.
Linksys CHAPTER 2 Access Point Setup Data - SSL Certificate Screen Data - Network Setup Screen Export/Restore to/from Local PC TCP/IP Export SSL Host Name Assign a host name to this access point. Host name consists of 1 to 15 characters. Valid characters include A-Z, a-z, 0-9 and -. Character cannot be first and last character of hostname and hostname cannot be composed of all digits. VLAN Enables or disables VLAN function.Workgroup Bridge can only be enabled when VLAN function is disabled.
Linksys Advanced Screen Use this screen to configure advanced network settings of the access point. CHAPTER 2 Access Point Setup Data - Advanced Screen Port Settings Auto Negotiation If enabled, Port Speed and Duplex Mode will become grey and cannot be configured. If disabled, Port Speed and Duplex Mode can be configured. Operational Auto Negotiation Current Auto Negotiation mode of the Ethernet port. Port Speed Select the speed of the Ethernet port. Available only when Auto Negotiation is disabled.
Linksys Authentication CHAPTER 2 Access Point Setup This feature supports following two kinds of authentication: •• Authentication via MAC Address Select this if you want to use MAC address for authentication. The access point uses lowercase MAC address for Name and Password, like xxxxxxxxxxxx. •• Authentication via Name and Password Select this if you want to use name and password for authentication. Name - Enter the login name. The name includes 1 to 63 characters. Special characters are allowed.
Linksys CHAPTER 2 Access Point Setup Basic Settings Wireless Mode Basic Settings provides the essential configuration for your wireless radio and SSIDs. You should be able to set up your wireless network with these essential parameters configured. Advanced wireless settings such as Band Steering, Channel Bandwidth, etc., will be on Configuration → Wireless → Advanced Settings screen. Select the desired option: •• G only - allow connection by 802.11G wireless stations only.
Linksys Security Settings CHAPTER 2 Access Point Setup Data - Wireless Basic Settings Screen Use this screen to configure security settings of SSIDs to provide data protection over the wireless network. Security Select SSID Select the desired SSID from the drop-down list. Security Mode Select the desired security method from the list. Security Settings • Disabled - No security. Anyone using the correct SSID can connect to your network. • WEP - The 802.11b standard.
Linksys CHAPTER 2 Access Point Setup Security Settings - WEP Security Settings - WPA2-Personal This is the 802.11b standard. Data is encrypted before transmission, but the encryption system is not very strong. This is a further development of WPA-Personal, and offers even greater security. Figure 19: WPA2-Personal Wireless Security Screen Figure 18: WEP Wireless Security Screen Data - WEP Screen WEP Authentication Default Key Select Open System or Shared Key.
Linksys CHAPTER 2 Access Point Setup Security Settings - WPA/WPA2-Personal Security Settings - WPA2-Enterprise This method, sometimes called Mixed Mode, allows clients to use either WPAPersonal or WPA2-Personal. This version of WPA2-Enterprise requires a RADIUS Server on your LAN to provide the client authentication. Data transmissions are encrypted using the WPA2 standard.
Linksys CHAPTER 2 Access Point Setup Data - WPA2-Enterprise Screen WPA2-Enterprise Primary Server Enter the IP address of the RADIUS Server on your network. Primary Server Port Enter the port number used for connections to the RADIUS Server. It is a value from 1 to 65534, and default is 1812. Primary Shared Secret Enter the key value to match the RADIUS Server. It consists of 1 to 64 characters.
Linksys CHAPTER 2 Access Point Setup Data - WPA/WPA2-Enterprise Screen WPA/WPA2-Enterprise Primary Server Enter the IP address of the RADIUS Server on your network. Primary Server Port Enter the port number used for connections to the RADIUS Server. It is a value from 1 to 65534, and default is 1812. Primary Secret RADIUS Use RADIUS server for authentication and dynamic WEP key generation for data encryption. Shared Enter the key value to match the RADIUS Server. It consists of 1 to 64 characters.
Linksys Rogue AP Detection Rogue AP detection is used to detect the unexpected or unauthorized access point installed in a secure network environment. CHAPTER 2 Access Point Setup Data - Rogue AP Screen Rogue AP Enable or disable Rogue AP Detection. Detected Rogue AP List Action Click Trust to move the AP to the Trusted AP List. MAC Address The MAC address of the Rogue AP. SSID The SSID of the Rogue AP. Channel The channel of the Rogue AP. Security The security method of the Rogue AP.
Linksys Scheduler Configure a rule with a specific time interval for SSIDs to be operational. Automate enabling or disabling SSIDs based on the profile definition. Support up to 16 profiles and each profile can include 4 time rules. CHAPTER 2 Access Point Setup Data - Scheduler Screen Wireless Scheduler Enable or disable wireless scheduler. If disabled, even if some SSIDs are associated with profiles, they will be always active. Scheduler Operational Status Status The operational status of the scheduler.
Linksys CHAPTER 2 Access Point Setup Scheduler Association Connection Control Associate defined scheduler profiles with SSIDs. Exclude or allow only listed client stations to authenticate with the access point. Figure 26: Scheduler Association Screen Figure 27: Connection Control Screen Data - Scheduler Association Screen Scheduler Association SSID The index of SSID. SSID Name The name of the SSID. Profile Name Choose the profile that is associated with the SSID.
Linksys CHAPTER 2 Access Point Setup Rate Limit QoS Limit downstream and upstream rate of SSIDs. The QoS (Quality of Service) feature allows you to specify priorities for different traffic coming from your wireless client. Lower priority traffic will be slowed down to allow greater throughput or less delay for high priority traffic. Figure 28: Rate Limit Screen Data - Rate Limit Screen Rate Limit Figure 29: QoS Screen SSID The index of SSID. SSID Name The name of the SSID.
Linksys CHAPTER 2 Access Point Setup Data - QoS Screen QoS Setting SSID The index of SSID. SSID Name The name of the SSID. VLAN ID The VLAN ID of the SSID. Priority Select the priority level from the list. VLAN must be enabled in order to set priority. The 802.1p will be included in the VLAN header of the packets which are received from the SSID and sent from Ethernet interface. WMM Workgroup Bridge Workgroup Bridge feature enables the access point to extend the accessibility of a remote network.
Linksys CHAPTER 2 Access Point Setup Data - Workgroup Bridge Screen Workgroup Bridge Status Status Advanced Settings Configure advanced parameters of the wireless radio. Enable or disable Workgroup Bridge function. Before configuring Workgroup Bridge, make sure all devices in Workgroup Bridge have the following identical settings. •• Radio •• IEEE 802.
Linksys CHAPTER 2 Access Point Setup Data - Advanced Settings Screen Isolation Isolation SSIDs DTIM Interval between Define whether to isolate traffic between SSIDs. If enabled, wireless clients in different SSIDs cannot communicate with each other. Enabled by default. The DTIM message is an element included in some beacon frames. It indicates which client stations, currently sleeping in low-power mode, have data buffered on the access point await-ing pickup. Advanced Parameters Worldwide (802.
Linksys CHAPTER 2 Access Point Setup Fragmentation Threshold Enter the fragmentation threshold, an integer from 256 to 2346. The default is 2346. The fragmentation threshold is a way of limiting the size of packets (frames) transmitted over the network. If a packet exceeds the fragmentation threshold you set, the fragmentation function is activated and the packet is sent as multiple 802.11 frames. If the packet being transmitted is equal to or less than the threshold, fragmentation is not used.
Linksys Chapter 3 Operation and Status Operation You may need to perform the following operations on a regular basis. • If using the Access Control feature, update the Trusted PC database as required. (See Access Control in Chapter 2 for details.) • If using 802.1x mode, update the User Login data on the Windows 2000 Server, and configure the client PCs, as required. System Summary Provides system status of the access point.
Linksys Chapter 3 Operation and Status LAN Status Untagged VLAN ID Displays the untagged VLAN ID. Traffic on the VLAN that you specify in this field is not be tagged with a VLAN ID when forwarded to the network. VLAN 1 is the default ID for untagged VLAN. Management VLAN Displays the Management VLAN ID. The VLAN associated with the IP address you use to connect to the access point. Provide a number between 1 and 4094 for the Management VLAN ID. The default is 1.
Linksys Chapter 3 Operation and Status Wireless Status SSID Status Wireless Status displays settings and status of wireless radio and SSIDs. Interface SSID index. SSID Name Name of the SSID. Status Status of the SSID, enabled or disabled. MAC Address MAC Address of the SSID. VLAN ID VLAN ID of the SSID. Priority The 802.1p priority of the SSID. Scheduler State Current scheduler status of the SSID. N/A No scheduler is enabled on the SSID, or the SSID is disabled by administrator.
Linksys Chapter 3 Operation and Status Wireless Clients Statistics Wireless Clients screen displays list of connected clients based on each wireless interface. Statistics provides real-time transmitted and received statistics data based on each SSID and LAN interface. Figure 35: Wireless Clients Screen Data - Wireless Clients Wireless Interface Select the desired interface from the list. The interfaces include 8 SSIDs. SSID Name Name of the SSID to which the client connects.
Linksys Chapter 3 Operation and Status Log View Log View shows a list of system events that are generated by each single log entry, such as login attempts and configuration changes. Figure 37: Log View Screen Data - Log View Log Messages Log Messages Show the log messages. Buttons Refresh Update the data on screen. Save Save the log to a file on your PC. Clear Delete the existing logs from device.
Linksys Chapter 4 Access point Management Chapter 4 Access point Management Overview This chapter covers features available on the wireless access point’s Maintenance menu. • Maintenance • Firmware Upgrade • Configuration Backup/Restore • • Factory Default Figure 38: Firmware Upgrade Screen • Reboot To perform the firmware upgrade from local PC: Diagnostics 1. Click the Browse button and navigate to the location of the upgrade file. • Ping Test 2. Select the upgrade file.
Linksys Configuration Backup/Restore Configuration backup/restore allows you to download the configuration file from device to external storage, e.g., your PC, or network storage, or to upload a previously saved configuration file from external storage to device. It is highly recommended you save one extra copy of the configuration file to external storage after you are done with access point setup.
Linksys Chapter 4 Access point Management Factory Default Reboot It’s highly recommended you save your current configuration file before you restore to factory default settings. To save your current configuration file, click Maintenance → Configuration Backup/Restore. Reboot power cycles the device. The current configuration file will remain after reboot.
Linksys Chapter 4 Access point Management Ping Test Packet Capture Ping Test is used to determine the accessibility of a host on the network. Packet Capture is used to capture and store 802.3 packets received and transmitted by the access point based on one specified network interface. Network interface can be radio, SSID or LAN. Figure 42: Ping Test Screen Figure 43: Packet Size Screen Data - Ping Test Screen General IP Type Enter the IP type of destination address.
Linksys Chapter 4 Access point Management Diagnostic Log Diagnostic Log provides system detail information, such as configuration file, system status and statistics data, hardware information, operational status. The information is useful in troubleshooting and working with technical support. Figure 44: Diagnostic Screen Data - Diagnostic Screen Download Click to download the device diagnostic log into a local file.
Linksys Appendix A Troubleshooting Appendix A Troubleshooting Overview This chapter covers some common problems encountered while using the wireless access point, and some possible solutions to them. If you follow the suggested steps and the wireless access point still does not function properly, contact your dealer for further advice. General Problems Problem 1: I can’t find new access point on my network. Solution 1 : Check the following.
Linksys Appendix B About Wireless LANs Appendix B About Wireless LANs SSID/ESSID BSS/SSID Overview Wireless networks have their own terms and jargon. It is necessary to understand many of these terms in order to configure and operate a wireless LAN. Wireless LAN Terminology Modes Wireless LANs can work in either of two (2) modes: • Ad-hoc • Infrastructure Ad-hoc Mode Ad-hoc mode does not require an access point or a wired (Ethernet) LAN. Wireless stations, e.g.
Linksys • • • Appendix B About Wireless LANs If using multiple access points it is better if adjacent access points use different channels to reduce interference. The recommended channel spacing between adjacent access points is five channels, e.g., use Channels 1 and 6, or 6 and 11. If this option is used: In “Infrastructure” mode wireless stations normally scan all channels looking for an access point. If more than one access point can be used, the one with the strongest signal is used.
Linksys Appendix C PC And Server Configuration Appendix C PC And Server Configuration Using WPA2-PSK For each of the following items, each wireless station must have the same settings as the wireless access point. Mode On each PC, the mode must be set to Infrastructure. SSID (ESSID) This must match the value used on the wireless access point. Overview The default value is LinksysSMB24G. All wireless stations need to have settings that match the wireless access point.
Linksys Appendix C PC And Server Configuration Using WPA2-Enterprise 802.1x Server Setup (Windows 2000 Server) This is the most secure and most complex system. WPA-Enterprise mode provides greater security and centralized management, but it is more complex to configure. This section describes using Microsoft Internet Authentication Server as the RADIUS server, since it is the most common RADIUS server available that supports the EAP-TLS authentica-tion method.
Linksys Appendix C PC And Server Configuration Figure 48: CA Screen Figure 46: Components Screen 7. Click Next if you don’t want to change the CA’s configuration data. 4. Click Next. 8. Installation will warn you that Internet Information Services are running, and must be stopped before continuing. Click OK, then Finish. 5. Select the Enterprise root CA, and click Next. DHCP server configuration 1. Click on Start -> Programs -> Administrative Tools -> DHCP 2.
Linksys 3. Click Next when the New Scope Wizard Begins. 4. Enter the name and description for the scope, click Next. 5. Define the IP address range. Change the subnet mask if necessary. Click Next. Figure 50: IP Address Screen 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank. Click Next. 7. Change the Lease Duration time if preferred. Click Next. 8. Select Yes, I want to configure these options now, and click Next.
Linksys Certificate Authority Setup 1. Select Start -> Programs -> Administrative Tools -> Certification Authority. 2. Right-click Policy Settings, and select New -> Certificate to Issue. Appendix C PC And Server Configuration 4. Select Start -> Programs -> Administrative Tools -> Active Directory Users and Comput-ers. 5. Right-click on your active directory domain, and select Properties. Figure 52: Certificate Authority Screen 3.
Linksys 7. Select Computer Configuration -> Windows Settings -> Security Settings -> Public Key Policies, right-click Automatic Certificate Request Settings -> New -> Automatic Certifi-cate Request. Appendix C PC And Server Configuration 10. Ensure that your Certificate Authority is checked, click Next. 11. Review the policy change information and click Finish. 12. Click Start -> Run, type cmd and press enter.
Linksys Appendix C PC And Server Configuration 12. Select No if you don’t want to view the help for EAP. Click Finish. Remote Access Login for Users 1. Select Start -> Programs -> Administrative Tools -> Active Directory Users and Comput-ers. 2. Double click on the user who you want to enable. 3. Select the Dial-in tab, and enable Allow access. Click OK. Figure 59: Attribute Screen 11. Click Edit Profile... and select the Authentication tab.
Linksys Appendix C PC And Server Configuration The following instructions assume that: • You are using Windows XP • You are connecting to a Windows 2000 server for authentication. • You already have a login (User-name and password) on the Windows 2000 server. Client Certificate Setup 1. Connect to a network that doesn’t require port authentication. 2. Start your Web browser. In the Address box, enter the IP address of the Windows 2000 Server, followed by /certsrv e.g http://192.168.0.2/certsrv 3.
Linksys 6. Click Submit. Appendix C PC And Server Configuration 8. You will receive a confirmation message. Click Yes. Figure 67: Root Certificate Screen 9. Certificate setup is now complete. 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right-click on the Wireless Network Connection, and select Properties. Figure 65: Identifying Information Screen 7.
Linksys Encryption Settings The encryption settings must match the access point’s on the wireless network you wish to join. • Windows XP will detect any available wireless networks, and allow you to configure each network independently. • Your network administrator can advise you of the correct settings for each network. 802.1x networks typically use EAP-TLS. This is a dynamic key system, so there is no need to enter key values. Appendix C PC And Server Configuration 2.
Linksys Appendix C PC And Server Configuration Instead, you must enter the WEP key manually, ensuring it matches the WEP key used on the access point. Figure 71: Properties Screen NOTE On some systems, the 64-bit WEP key is shown as 40-bit and the 128-bit WEP key is shown as 104-bit. This difference arises because the key input by the user is 24 bits less than the key size used for encryption.
Visit linksys.com/support for award-winning technical support © 2014 Belkin International, Inc. and/or its affiliates. All rights reserved. BELKIN, LINKSYS and many product names and logos are trademarks of the Belkin group of companies. Third-party trademarks mentioned are the property of their respective owners. LNKPG-00089 Rev.
