Moxa AirWorks AWK-1100 User’s Manual www.moxa.com/product Third Edition, October 2008 © 2008 Moxa Inc., All rights reserved. Reproduction without permission is prohibited.
Moxa AirWorks AWK-1100 User’s Manual The software described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agreement. Copyright Notice Copyright © 2008 Moxa Inc. All rights reserved. Reproduction without permission is prohibited. Trademarks MOXA is a registered trademark of Moxa Inc. All other trademarks or registered marks in this manual belong to their respective manufacturers.
Table of Contents Chapter 1 Introduction ...............................................................................................1-1 Overview .............................................................................................................................. 1-2 Package Checklist................................................................................................................. 1-2 Product Features ...............................................................................
1 Chapter 1 Introduction The Moxa AirWorks AWK-1100 enables wireless users to access network resources wirelessly. The AWK-1100 can authenticate and authorize wireless users by IEEE 802.1X and RADIUS, and communicate with a back-end RADIUS (Remote Authentication User Dial-In Service) server to determine if a wireless user is allowed to access the wireless network.
AirWorks AWK-1100 User’s Manual Introduction Overview The -1100 is rated to operate at temperatures ranging from 0 to 60°C, and is rugged enough for any harsh industrial environment. It can be installed easily on DIN-Rail mounting as well as in distribution boxes. The DIN-Rail mounting capability, wide operating temperature range, and the IP30 case with LED indicators make the AWK-1100 a ready to use, plug-and-play, yet reliable solution for your Industrial Wireless application.
AirWorks AWK-1100 User’s Manual Introduction 802.
2 Chapter 2 Getting Started This chapter explains how to install the Moxa AirWorks AWK-1100 for the first time. The following topics are covered: First-Time Installation and Configuration Deploying the Access Point (AP) Setting up Client Computers ¾ Configuring IEEE 802.11g-related Settings ¾ Configuring TCP/IP-related Settings Confirming the Settings of the AP and Client Computers ¾ Checking if the IEEE 802.
AirWorks AWK-1100 User’s Manual Getting Started First-Time Installation and Configuration Before installing the AWK-1100, check to make sure that all items in the Package Checklist are in the box. In addition, you will need access to a notebook computer or PC equipped with an Ethernet port. The AWK-1100 has a default IP address that you must use when connecting to the AWK-1100 for the first time.
AirWorks AWK-1100 User’s Manual NOTE Getting Started For security reasons, we strongly recommended changing the password. To do so, open the Network Manager homepage, click on General Æ Password, and then follow the onscreen instructions. Step 5: Select the Operation Mode for the AWK-1100 By default, the AWK-1100’s operation mode is set to AP/Bridge.
AirWorks AWK-1100 User’s Manual Getting Started Step 6: Configure the AWK-1100’s IEEE 802.11 settings Go to the IEEE 802.11 Communication section to configure IEEE 802.11g-related communication settings, including Regulatory domain, Channel number, and Network name (SSID). The number of available RF channels depends on local regulations; therefore, you will need to choose an appropriate regulatory domain to comply with local regulations.
AirWorks AWK-1100 User’s Manual NOTE Getting Started About 10 seconds are needed for the AP to complete its restart process. Deploying the Access Point (AP) After the settings have been configured, deploy the AP to the field application environment. Connect the AP to an Ethernet LAN through an Ethernet switch or hub.
AirWorks AWK-1100 User’s Manual Getting Started To establish a wireless link to an Access Point: 1. 2. Launch the configuration/monitoring utility provided by the vendor of the installed WLAN NIC. Use the utility to make appropriate Operating Mode, SSID, and WEP settings. NOTE A wireless client computer must be in infrastructure mode to associate with an AP. NOTE The SSID of the wireless client computer and the SSID of the AP must be identical.
AirWorks AWK-1100 User’s Manual Getting Started Checking if the TCP/IP-related Settings Work To check if a client computer can assess the Internet: 1. 2. 3. 4. Open a Windows Command Prompt window on the client computer. Type “ping AP”, where AP is the IP address of the Access Point. Replace it with your real IP address—for example, 192.168.127.253, and then press Enter. If the AP responds, go to the next step; otherwise see Appendix B, “TCP/IP Settings Problems” to troubleshoot the problem.
3 Chapter 3 Web Console Configuration In this chapter, we will explain each Web management page of the Web-based Network Manager.
AirWorks AWK-1100 User’s Manual Web Console Configuration Overview Menu Structure The left side of the home page contains a menu that you can use to carry out commands. Here is a brief description of the hyperlinks in the menu: y Home. For returning to the home page. y Status. Status information. ¾ Wireless Clients. The status of the wireless clients currently associated with the AP. ¾ DHCP Mappings. Current IP-MAC address mappings of the built-in DHCP server. ¾ System Log. System events log.
AirWorks AWK-1100 User’s Manual y Web Console Configuration Advanced. Advanced settings of the AWK-1100. ¾ Packet Filters. Ethernet Type Fiters, IP Protocol Filters, and TCP/UDP Port Filters settings. ¾ Management. UPnP, System Log, and SNMP settings. Save, Save & Restart, and Cancel Buttons There are three buttons at the bottom of each page that contains configurable settings—Save, Save & Restart, and Cancel. Clicking Save stores changes to the AWK-1100’s memory and returns you to the home page.
AirWorks AWK-1100 User’s Manual Web Console Configuration Viewing Status Associated Wireless Clients On this page, the status information of each associated client, including its MAC address, IP address, user name (if the client has been IEEE 802.1X authenticated), number of bytes it has sent, number of bytes it has received, and the time of its last activity, is shown. Current DHCP Mappings On this page, all the current static or dynamic DHCP mappings are shown.
AirWorks AWK-1100 User’s Manual Web Console Configuration Link Monitor (AP Client mode only) When the AWK-1100 is in AP Client mode, you can use the Link Monitor status page to monitor the link quality and signal strength sensed by its RF module. Larger values means better wireless connectivity to its associated Access Point. This feature is especially useful when you are aligning a pair of directional antennas for bridging applications. NOTE The values are updated every 20 seconds.
AirWorks AWK-1100 User’s Manual AP/Bridge AP Client AP/Bridge WDS STA-AP Web Console Configuration AP Client STA-AP To establish a static bridge link based on WDS, the AP/bridges at both end of the WDS link must be configured manually with each other’s MAC addresses. To establish a dynamic bridge link between an AP and an AP Client, both devices must be configured with the same SSID and WEP settings.
AirWorks AWK-1100 User’s Manual Web Console Configuration To upgrade the firmware of the AWK-1100 by HTTP: 1. 2. Click Browse and then select a correct firmware .bin file. The firmware file path will be shown in the Firmware file name text box. Click Upgrade to begin the upgrade process. Backing up and Restoring Configuration Settings by HTTP To back up the configuration of the AWK-1100 by HTTP (i.e., export the configuration to a file):: NOTE 1. Click on Back Up 2.
AirWorks AWK-1100 User’s Manual Web Console Configuration To upgrade the AWK-1100’s firmware by TFTP: 1. Prepare a computer that will be used as a TFTP server and as a managing computer to trigger the upgrade process. 2. Connect the computer and one of the LAN Ethernet switch port with a normal Ethernet cable. 3. Configure the IP address of the computer so that the AWK-1100 and the computer are on the same IP subnet. 4.
AirWorks AWK-1100 User’s Manual NOTE Web Console Configuration After the dialog box of the TFTP server program appears, be sure to specify the working folder within which the downloaded firmware files reside. Make sure the Accept read requests check box of the TFTP Server is selected. The LAN IP address of the AP and the IP address of the TFTP server must be on the same IP subnet for TFTP to work.
AirWorks AWK-1100 User’s Manual Web Console Configuration To restore the configuration of the AWK-1100 by TFTP: 1. Prepare a computer that will be used as a TFTP server and as a managing computer to trigger the restoring process. 2. Connect the computer and one of the LAN Ethernet switch ports with a normal Ethernet cable. 3. Configure the IP address of the computer so that the computer and the AWK-1100 are on the same IP subnet. 4.
AirWorks AWK-1100 User’s Manual Web Console Configuration Configuring TCP/IP-related Settings Addressing The IP address of the AP can be set manually (Set Manually) or automatically assigned by a DHCP server on the LAN (Obtain from a DHCP Server). If you are manually setting the IP address, Subnet mask, and Default gateway settings, set them appropriately, so that they comply with your LAN environment. In addition, you can specify the Host name and Domain (DNS suffix) of the AWK-1100.
AirWorks AWK-1100 User’s Manual Web Console Configuration Static DHCP Mappings IP addresses of servers are often static so that clients can always locate the servers by the static IP addresses. By using Static DHCP Mappings, you can ensure that a host will get the same IP address when it requests one from the DHCP server.
AirWorks AWK-1100 User’s Manual Web Console Configuration For specific needs such as configuring the AWK-1100 as a wireless LAN-to-LAN bridge, the AP functionality can be disabled so that no wireless client can associate with the AP. The RF type of the WLAN interface can be configured to work with IEEE 802.11b only (B Only), IEEE 802.11g only (G Only), B WIFI mode (for internal usage), or mixed mode (Mixed—802.11g and 802.11b simultaneously).
AirWorks AWK-1100 User’s Manual Web Console Configuration Wireless Distribution System Notebook Computer WDS LAN AP 2 AP 1 Traditionally, access points are connected by Ethernet. By using a Wireless Distribution System (WDS), APs can communicate with one another wirelessly. For example, AP 2 acts as an access point for the notebook computers and it forwards packets sent from the notebook computers to AP 1 through WDS. Then, AP 1 forwards the packets to the Ethernet LAN.
AirWorks AWK-1100 User’s Manual Web Console Configuration 00-02-65-01-62-C5, set the peer MAC address of port 1 to 00-02-65-01-62-C6 and on the AWK-1100 with MAC address 00-02-65-01-62-C6, set the peer MAC address of port 1 to 00-02-65-01-C5. TIP Plan your wireless network and draw a diagram so that you know how each AWK-1100 is connected to other peer APs or wireless bridges by WDS, and how bridges are connected to other peer bridges by WDS.
AirWorks AWK-1100 User’s Manual Web Console Configuration Security IEEE 802.11g security settings include SSID broadcasts, Wireless client isolation, Security mode, IEEE 802.11 Authentication algorithm, WEP keys, MAC-Address-Based Access Control. Basic For security reasons, it is highly recommended that the security mode be set to options other than Open System. When the security mode is set to Open System, no authentication or data encryption will be performed.
AirWorks AWK-1100 User’s Manual STA 1 Web Console Configuration STA 3 STA 2 AP 1 AP 2 WCI: All APs in This Subnet WCI: All APs in This Subnet Switch Wireless Link Ethernet Link Behavior of the “All APs on This Subnet” wireless client isolation option When AP 1 and AP 2 are using the “This AP Only” option, wireless traffic between STA 1 and STA 2 is blocked by AP 1, whereas wireless traffic between STA 2 and STA 3 (which are associated with different APs) is still allowed.
AirWorks AWK-1100 User’s Manual Web Console Configuration In the above security modes, a back-end RADIUS (Remote Authentication Dial-In User Service) server is needed if IEEE 802.1X functionality is enabled. See Section 0 for more information about IEEE 802.1X and RADIUS. According to the IEEE 802.11 standard, WEP can be used for authentication and data encryption. Normally, Shared Key authentication is used if WEP data encryption is enabled.
AirWorks AWK-1100 User’s Manual NOTE Web Console Configuration The size of the access control table is 64. Instead of manually entering MAC addresses to the access control table one by one, you can prepare a text file that contains all the MAC addresses and put it on a TFTP server, and then command the AWK-1100 to download the MAC ACL (Access Control List) file from the TFTP server. The following figure shows the contents of a sample ACL file.
AirWorks AWK-1100 User’s Manual Web Console Configuration The IEEE 802.1X functionality of the access point is controlled by the security mode. So far, the wireless access point supports two authentication mechanisms—EAP-MD5 (Message Digest version 5), EAP-TLS (Transport Layer Security). If EAP-MD5 is used, the user must give his or her user name and password for authentication.
AirWorks AWK-1100 User’s Manual Web Console Configuration Configuring Advanced Settings Packet Filters The AWK-1100 provides layer 2 (Ethernet Type Filters), layer 3 (IP Protocol Filters), and layer 4 (TCP/UDP Port Filters) filtering capabilities. The configuration processes for the filters are similar. y Functionality: whether this filtering capability is enabled or disabled. y Policy for matched packets: how a matched packet is processed—discard or pass.
AirWorks AWK-1100 User’s Manual Web Console Configuration IP Protocol Filters The protocol, source address, and destination address fields of a packet incoming from the WLAN or Ethernet interface is inspected for filtering. As a rule, specify the hex-decimal protocol number, source IP address range (Source IP Address AND Source Subnet Mask), and destination IP address range (Destination IP Address AND Destination Subnet Mask).
AirWorks AWK-1100 User’s Manual Web Console Configuration System Log System events can be logged to the on-board RAM of the AWK-1100 (Local log) or sent to a remote computer on which an SNMP trap monitor program runs (Remote log by SNMP trap). See the next subsection for more information about SNMP trap settings. The system events are divided into the following categories: y y y y NOTE General: system and network connectivity status changes.
A Appendix A TIP Default Settings Press the Reset (SF-Reset, or Soft-Reset) switch on the housing of a powered-on AP to reset the configuration settings to factory-default values. Setting Name Global User Name Password IEEE 802.11g Regulatory Domain Channel Number SSID SSID Broadcasts Transmission Rate Transmit Power MAC Address Default Value admin root FCC (U.S.
AirWorks AWK-1100 User’s Manual Default Settings LAN Interface Method of obtaining an IP Address IP Address Subnet Mask Default Gateway DHCP Server Management UPnP System Log SNMP SNMP read community SNMP write community TELNET A-2 Set manually 192.168.127.253 255.255.255.0 0.0.0.
B Appendix B Troubleshooting Check the following first: y Make sure that the AWK-1100’s power is on and the Ethernet cables are connected firmly to the RJ45 jacks of the AWK-1100. y Make sure the LED WLAN of the AP is blinking to indicate that the RF is working. y Make sure you are using the correct types of Ethernet cables. Keep in mind that there are two kind of Ethernet cable—normal and crossover. Wireless Settings Problems The wireless client computer cannot associate with an AWK-1100.
AirWorks AWK-1100 User’s Manual Troubleshooting TCP/IP Settings Problems Correspondent Host IEEE 802.11g Internet Ethernet LAN Stage A Client Computer State B AP Stage D Default Gateway of Client Computer DNS Server of Client Computer Communication stages for a client to reach its correspondent host For a wireless client computer to communicate with a host on the Internet by the host’s domain name (e.g., http://www.wi-fi.com), it first sends a DNS request to a DNS server on the Internet.
AirWorks AWK-1100 User’s Manual Troubleshooting y Are the IP address of the client computer and the IP address of the AP on the same IP subnet? ¾ Use WinIPCfg.exe or IPConfig.exe to see the current IP address of the client computer. Make sure the IP address of the client computer and the IP address of the AP are on the same IP subnet. TIP If you forget the current IP address of the AP, use a Wireless Router/AP Browser combination to get the information (see Appendix B-3).
AirWorks AWK-1100 User’s Manual Troubleshooting The AWK-1100 stops working and does not respond to Web management requests. y The firmware of the AP may be stuck in an incorrect state. ¾ Unplug the power connector from the power jack, and then re-plug the connector to restart the AP. ¾ Report this problem to our technical support staff. y If the AP still does not work after being restarted, some hardware components of the AP may have failed. ¾ Contact our technical support staff.
C Appendix C Regulatory Statement Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
AirWorks AWK-1100 User’s Manual Regulatory Statement R&TTE Compliance Statement This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE). The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal Equipment and Satellite Earth Station Equipment) as of April 8,2000.
