Wireless LAN Security Smart Wireless Access Point 802.11b (95-10) User Guide 100-408-01 Copyright © 2002 Madge Networks. All rights reserved.
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiated radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
R&TTE Compliance Statement This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE). The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal Equipment and Satellite Earth Station Equipment) as of April 8,2000.
Contents 1 Introduction............................................................................................................................................ 1 1.1 Overview ........................................................................................................................................ 1 1.2 Features ..........................................................................................................................................
1 Introduction 1.1 Overview The Madge advanced Smart Wireless Access Point (advanced AP) enables IEEE 802.11b client computers to access the resources on an Ethernet network. Because it supports IEEE 802.1x and RADIUS (Remote Authentication Dial-In User Service) for user-based authentication and dynamic encryption key distribution, it is suitable for enterprises that need strong data security and WISPs (Wireless Internet Service Providers) that need accounting and billing support.
Hardware Watchdog Timer. If the AP firmware enters an invalid state, the hardware watchdog timer will detect this situation and restart the advanced AP. Accordingly, the advanced AP can recover from certain error situations. 2 First-Time Installation and Configuration 2.1 Powering up the AP To power the AP with the supplied power adapter: 1. Plug the power adapter to an AC socket. 2. Plug the connector of the power adapter to the power jack of the AP.
2.3 Preparing for Configuration For the user (or administrator) to configure an advanced AP, a managing computer with a Web browser is needed. For first-time configuration of an advanced AP, an Ethernet network interface card (NIC) should have been installed in the managing computer. For maintenance-configuration of a deployed advanced AP, either a wireless computer or a wired computer can be employed as the managing computer.
2.4 Configuring the Advanced AP After the IP addressing issue is resolved, launch a Web browser on the managing computer. Then, go to “http://192.168.0.1” to access the Web-based Network Manager start page. TIP: For maintenance configuration of an advanced AP, the advanced AP can be reached by its host name using a Web browser. For example, if the advanced AP is named “advanced AP”, you can use the URL “http://advanced AP” to access the Web-based Network Manager of the advanced AP. 2.4.
Fig. 4. The Start page. 2.4.2 Step 1: Configure TCP/IP Settings Fig. 5. TCP/IP settings. Go to the TCP/IP, Addressing section to configure IP address settings. The IP address can be manually set or automatically assigned by a DHCP server on the LAN. If you are manually setting the IP Address, Subnet Mask, and Default Gateway settings, set them appropriately, so that they comply with your LAN environment. In addition, you can specify the Host Name and Domain (DNS suffix) of the advanced AP.
2.4.3 Step 2: Configure IEEE 802.11 Settings Fig. 6. IEEE 802.11b communication settings. Go to the IEEE 802.11, Communication section to configure IEEE 802.11b-related communication settings, including Regulatory Domain, Channel Number, and Network Name (SSID). The number of available RF channels depends on local regulations; therefore you have to choose an appropriate regulatory domain to comply with local regulations.
On the start page, you can review all the settings you have made. Changes are highlighted in red. If they are OK, click Restart to restart the advanced AP for the new settings to take effect. NOTE: About 7 seconds are needed for the advanced AP to complete its restart process. 2.5 Deploying the Advanced AP After the settings have been configured, deploy the advanced AP to the field application environment. Connect Ethernet client computers to the Ethernet switch ports of the advanced AP. 2.
1. Launch the configuration/monitoring utility provided by the vendor of the installed WLAN NIC. 2. Check if the client computer is associated to an access point, and the access point is the advanced AP. If the check fails, see Appendix B-1, “Wireless Settings Problems” for troubleshooting. 2.7.2 Checking if the TCP/IP-Related Settings Work To check if a client computer can access the Internet: 1. Open a Windows Command Prompt window on the client computer. 2.
3 Using the Web-Based Network Manager This section explains each management page of the Web-based Network Manager. 3.1 Overview Fig. 8. The Start page. The left side of the start page contains a menu for the user to carry out commands. Here is a brief description of the hyperlinks in the menu: Home. For going back to the start page. General. Global operations. Password. For gaining right to change the settings of the advanced AP. Firmware Upgrade. For upgrading the firmware of the advanced AP. TCP/IP.
Advanced. Advanced settings of the advanced AP. Management. UPnP and SNMP settings. Fig. 9. Save, Save & Restart, and Cancel. At the bottom of each page, there are up to three buttons—Save, Save & Restart, and Cancel. Clicking Save stores the settings changes to the memory of the advanced AP and brings the user back to the start page. Clicking Save& Restart stores the settings changes to the memory of the advanced AP and restarts the advanced AP immediately for the settings changes to take effect.
3.2 General Operations 3.2.1 Changing Password Fig. 11. Password. On this page, the user could change the password for the right to modify the configuration of the advanced AP. The new password must be typed twice for confirmation. 3.2.2 Upgrading Firmware Fig. 12. Firmware Upgrade. The advanced AP can be triggered to download updated firmware from a specified TFTP server.
Fig. 13. TFTP Server. TIP: It's more convenient to use the Firmware Upgrade Wizard of Wireless Network Manager to upgrade the firmware of an advanced AP. See section 4. NOTE: After the dialog box of the TFTP server program appears, be sure to specify the working folder within which the downloaded firmware files reside. NOTE: The LAN IP address of the advanced AP and the IP address of the TFTP server must be in the same IP subnet for TFTP to work.
The IP address of the AP can be manually set or automatically assigned by a DHCP server on the LAN. If you are manually setting the IP Address, Subnet Mask, and Default Gateway settings, set them appropriately, so that they comply with your LAN environment. In addition, you can specify the Host Name and Domain (DNS suffix) of the AP. 3.4 Configuring IEEE 802.11b-Related Settings 3.4.1 Communication IEEE 802.
802.1x EAP-MD5. The IEEE 802.1x functionality is enabled and the username/password-based EAP-MD5 authentication is used. No data encryption. 802.1x EAP-MD5 + 64-bit WEP. The IEEE 802.1x functionality is enabled and the username/password-based EAP-MD5 authentication is used. Data encryption is achieved by 64-bit WEP. 802.1x EAP-MD5 + 128-bit WEP. The IEEE 802.1x functionality is enabled and the username/password-based EAP-MD5 authentication is used. Data encryption is achieved by 128-bit WEP. 802.
The IEEE 802.1x functionality of the advanced AP is controlled by the security mode (see Section 3.4.2). The advanced AP supports two authentication mechanisms—EAP-MD5 (Message Digest version 5) and EAP-TLS (Transport Layer Security). If EAP-MD5 is used, the user has to give his or her user name and password for authentication. If EAP-TLS is used, the wireless client computer automatically gives the user’s digital certificate that is stored in the computer hard disk or a smart card for authentication.
3.5 Configuring Advanced Settings 3.5.1 Management 3.5.1.1 SNMP Fig. 19. SNMP settings. The AP can be managed by SNMP (Simple Network Management Protocol), and the SNMP management functionality can be disabled. The user can specify the name (used as a password) of the read-only and read-write community. In addition, up to 5 SNMP trap targets can be set in the SNMP Trap table. 3.5.1.2 UPnP Fig. 20. UPnP settings.
2. If AutoPlay is enabled then the “Accept Warranty Dialog” should appear (if not, it can be run from D:\Setup.exe where D: is the drive letter of your CD-ROM). Read the agreement and click Accept if you agree to the terms of the Warranty. The following dialog will appear: Fig. 21. Setup top-level menu. 3. Click Install utilities and drivers, the following dialog will appear: Fig. 22. Utilities and drivers menu. 4. Click on Install Wireless Network Manager for Access Point 802.
4.2 Using the Wireless Network Manager When the Installer Wizard is complete the Wireless Network Manager program will be available in the Programs section of your Windows Start menu. The first time the Wireless Network Manager runs it presents the Wireless Configuration Wizard that will help you make the appropriate settings for the various elements of your wireless system. Fig. 23. The Wireless Configuration Wizard. Follow the instructions of the wizard.
Fig. 25. Typical Wireless Network Manager dialog. Use the On-line help to guide you through the features and functions of the Wireless Network Manager. All the features of the Web-based Network Manager (see section 3) are available using the Wireless Network Manager, and more. 100-408-01 Copyright © 2002 Madge Networks. All rights reserved.
Appendix A A-1: Default Settings TIP: Press the Default (SF-Reset, or Soft-Reset) switch on the housing of a powered-on advanced AP to reset the configuration settings to factory-default values. Setting Name Default Value Global User Name Password Host Name root root “M95-10xxxxxx” where xxxxxx = last 6 hex digits of the AP's MAC address IEEE 802.
Appendix B: Troubleshooting Check the following first: Make sure that the power of the advanced AP is on and the Ethernet cables are connected firmly to the RJ-45 jacks of the advanced AP. Make sure that the LED ALV of the advanced AP is blinking to indicate the advanced AP is working. Make sure the types of the Ethernet cables are correct. Recall that there are two types—normal and crossover. B-1: Wireless Settings Problems The wireless client computer cannot link to an access point.
For a wireless client computer to communicate with a correspondent host on the Internet by the host’s domain name (e.g. http://www.madge.com), it first sends a DNS request to a DNS server on the Internet. The DNS request travels first to the advanced AP, the advanced AP then relays this request to the default gateway of the client computer. Finally, this request is forwarded by the gateway to the DNS server on the Internet.
B-3: Other Problems The AP has been set to obtain an IP address automatically by DHCP. How can I know its acquired IP address so that I can manage it using a Web browser? Use the utility, Wireless Router/AP Browser (WLBrwsr.exe), in the “AP\Utilities” folder on the companion CD-ROM disc. This utility can discover nearby advanced APs and show their MAC addresses and IP addresses. In addition, it can launch the default Web browser on your computer. Fig. 27. Wireless Router/AP Browser.
