1. Manuals
  2. Brands
  3. Alvarion Manuals
  4. Wireless Access Point
  5. BreezeACCESS Wi2
  6. System manual

Alvarion BreezeACCESS Wi2 System Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
BreezeMAX Wi² and BreezeACCESS Wi²
System Manual
SW Version 5.2
June 2008
P/N 215017

Advertisement

Table of Contents
loading

Related Manuals for Alvarion BreezeACCESS Wi2

Summary of Contents for Alvarion BreezeACCESS Wi2

  • Page 1 BreezeMAX Wi² and BreezeACCESS Wi² System Manual SW Version 5.2 June 2008 P/N 215017...
  • Page 2 Document History Document History Topic Description Date Issued This is the document’s first Release March 2007 BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 3 All other names are or may be the trademarks of their respective owners. Statement of Conditions The information contained in this manual is subject to change without notice. Alvarion Ltd. shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or equipment supplied with it.
  • Page 4 Disclaimer (a) THE SUPPLIED UNITS SUPPORT 802.11 b/g ONLY. (b) The Software is sold on an "AS IS" basis. Alvarion, its affiliates or its licensors MAKE NO WARRANTIES, WHATSOEVER, WHETHER EXPRESS OR IMPLIED, WITH RESPECT TO THE SOFTWARE AND THE ACCOMPANYING DOCUMENTATION. ALVARION...
  • Page 5 PRODUCTS. Limitation of Liability (a) ALVARION SHALL NOT BE LIABLE TO THE PURCHASER OR TO ANY THIRD PARTY, FOR ANY LOSS OF PROFITS, LOSS OF USE, INTERRUPTION OF BUSINESS OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE OR CONSEQUENTIAL DAMAGES OF ANY...
  • Page 6 In any event, Alvarion is not liable for any injury, damage or regulation violations associated with or caused by installation, grounding or lightning protection.
  • Page 7 It could also void the user's authority to operate the equipment. Some of the equipment provided by Alvarion and specified in this manual, is manufactured and warranted by third parties. All such equipment must be installed and handled in full compliance with the instructions provided by such manufacturers as attached to this manual or provided thereafter by Alvarion or the manufacturers.
  • Page 8 Legal Rights BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 9 Compliances NOTE This section provides regulatory compliance details for the Access Point unit of the system. Refer to the relevant manual for compliance details of the SU-ODU unit. Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.
  • Page 10 About This Manual IMPORTANT NOTE: FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters (8 inches) between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
  • Page 11 About This Manual In Belgium outdoor operation is only permitted using the 2.46 - 2.4835 GHz band: Channel In France outdoor operation is only permitted using the 2.4 - 2.454 GHz band: Channels 1 - BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 13 About This Manual This manual describes the BreezeMAX Wi and BreezeACCESS Wi AP and details how to install, operate and manage the access point. This manual is intended for technicians responsible for installing, setting and operating the BreezeMAX Wi and BreezeACCESS Wi , and for system administrators responsible for managing the system.
  • Page 14 About This Manual Appendix B - Resetting to Factory Defaults - Describes how to force an AP into its default factory state. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 15: Table Of Contents

    Table of Contents Chapter 1 - Product Description Introduction ........................ 2 Specifications......................4 1.2.1 Radio ......................4 1.2.2 Sensitivity ...................... 5 1.2.3 8 dBi Omni Antenna ..................5 1.2.4 Wi² Solution System SW Features ..............6 1.2.5 Mechanical ....................7 1.2.6 Electrical......................
  • Page 16 Table of Contents 2.3.2 Attaching the Mounting Plate to the Wi² Unit..........21 2.3.3 Connecting the Wi² Unit to the SU-ODU ............. 22 2.3.4 Preparing the Power Cable ................. 26 2.3.5 Mounting the Wi² Unit.................. 28 2.3.6 Connecting the Antenna(s)................31 2.3.7 Connecting the Grounding Cables ..............
  • Page 17 Chapter 5 - Working with Virtual Networks Key Concepts ......................70 5.1.1 Stand-alone Deployment................70 5.1.2 Deployment in Conjunction with an Alvarion Service Controller ....73 5.1.3 Management with VLANs................74 Virtual Network Configuration Overview ............... 76 5.2.1 About the ‘Use Alvarion Access Controller’ Option ........77 Virtual Network Configuration Options..............
  • Page 18 Wireless IP Filter ..................85 Virtual Network Data Flow..................86 5.4.1 Stand-alone Deployment................87 5.4.2 AP deployed with an Alvarion Service Controller ........87 5.4.3 Virtual Network on Service Controller ............88 Quality of Service (QoS) ..................90 5.5.1 QoS Priority Mechanism................90 Chapter 6 - Wireless Configuration Wireless Coverage ....................
  • Page 19 Table of Contents 7.2.3 VLAN Bridging................... 119 7.2.4 VLAN Configuration................... 120 Bandwidth Control ....................122 CDP.......................... 123 DNS.......................... 124 7.5.1 DNS Servers ..................... 124 7.5.2 DNS Advanced Settings................124 IP Routes......................... 126 7.6.1 Configuration ..................... 126 IP QoS ........................128 7.7.1 Configuration .....................
  • Page 20 Table of Contents Chapter 9 - Security Using a RADIUS Server ..................150 9.1.1 Configuring a RADIUS Client Profile on the AP ........150 9.1.2 Configuring User Profiles on a RADIUS Server ........153 9.1.3 Configuring Administrator Profiles on the RADIUS Server......159 Managing Certificates....................
  • Page 21 Table of Contents 10.4.2 Maximum Range ..................184 10.5 Quality of Service....................185 10.6 Configuration Summary ..................186 10.7 How to Configure Local Mesh in Controlled Mode ..........187 10.7.1 Setting a Master Profile ................187 10.7.2 Setting the Master AP ................191 10.7.3 Setting the SLAVE AP................
  • Page 22 B.1.2 Using the Management Tool ..............220 B.1.3 Using Special Commands ................. 222...

  • Page 23: Chapter 1 - Product Description

    Chapter 1 - Product Description In This Chapter: “Introduction” on page 2 “Specifications” on page 4...

  • Page 24: Introduction

    Wi² can be deployed almost anywhere to provide broadband mobility to standard WiFi (IEEE 802.11 b/g) end user devices. Used in conjunction with Alvarion's market-leading BreezeMAX or BreezeACCESS base stations, the Wi² can be used to expand the existing capabilities of Alvarion's WiMAX and pre-WiMAX networks.
  • Page 25 Introduction access networks. The result is personal broadband services ranging from public Internet access to public safety and Intranet applications. NOTE This document describes how to install and manage the Wi² system, including the installation and connections of a BreezeMAX or BreezeACCESS SU-ODU when installed on the mounting plate of the Wi system.

  • Page 26: Specifications

    Chapter 1 - Product Description Specifications 1.2.1 Radio Item Description IEEE 802.11b/g Radio Type 802.11b+g, 802.11b only, 802.11g only Radio Mode 2400-2497 MHz Frequency Band ETSI (EUR): 2412 ~ 2472 MHz(CH1-CH13) Operating Channels MKK (Japan) 11b: 2412 ~ 2484 MHz (CH1-CH14) MKK (Japan) 11g: 2412 ~ 2472 MHz(CH1-CH13) France: (CH1-CH13) 20 MHz...

  • Page 27: Sensitivity

    Specifications 1.2.2 Sensitivity Data Rate Sensitivity (dBm) 802.11b, 1 Mbps 802.11b, 2 Mbps 802.11b, 5.5 Mbps 802.11b, 11 Mbps 802.11g, 6 Mbps 802.11g, 9 Mbps 802.11g, 12 Mbps 802.11g, 18 Mbps 802.11g, 24 Mbps 802.11g, 36 Mbps 802.11g, 48 Mbps 802.11g, 54 Mbps 1.2.3 8 dBi Omni Antenna...

  • Page 28: Wi² Solution System Sw Features

    Chapter 1 - Product Description 1.2.4 Wi² Solution System SW Features Item Description Integrated HTML login/captive portal Access Control Integrated RADIUS authentication Configurable min./max. connect speed Scalable to thousands of users Full plug and play AP configuration, upgrade and control Centralized Management Centralized system monitor for thousands of APs Full, secure GUI configuration and monitoring...

  • Page 29: Mechanical

    Specifications Item Description 802.1x, AES, WPA2, Radius, WEP, Firewall Security SSH/SSL, IPSec encapsulated SNMP, XML Wireless MAC/IP filter, NAT, CIDR Layer-2 wireless client isolation DHCP: Server; Client; Relay, Option 82, Rogue AP detection and prevention 1.2.5 Mechanical Item Description Dimensions (excluding mounting plate 240mm (W) X 261mm (H) X 171mm (D) and connectors) 4.85 Kg...

  • Page 30: Connectors And Leds

    Chapter 1 - Product Description 1.2.7 Connectors and LEDs Type Description Connection to AC mains. 3-pin power plug, Bulgin PX0732/S/07 AC IN Ethernet and power connection to backhauling CPE. RJ-45, in a weather protected service box Ethernet and power connection to AP (PoE). RJ-45, in a weather protected service box Connection to DC power source.

  • Page 31: Standards Compliance

    Specifications 1.2.9 Standards Compliance Type Standard EN55022 CE Class B FCC Class B Part 15 UL / CUL (CSA60950-1, UL60950-1) Safety CE / CB (EN60950/IEC 60950-1) The unit withstand at +4KV of Input surge, 1.2usec rise/fall time, 50μsec duration, Lightning every 10 seconds, for all interfaces.

  • Page 33: Chapter 2 - Hardware Installation

    Chapter 2 - Hardware Installation In This Chapter: “Hardware Description” on page 12 “Installation Requirements” on page 16 “Installation” on page 19 “Attaching the SU-ODU to the Mounting Plate” on page 19 “Attaching the Mounting Plate to the Wi² Unit” on page 21 “Connecting the Wi²...

  • Page 34: Chapter 2 - Hardware Installation

    Chapter 2 - Hardware Installation Hardware Description The Wi² consists of a WiFi access point with an integrated power supply and interface module that connects to either a BreezeMAX or BreezeACCESS outdoor unit (SU-ODU) for backhaul and network management software. Each unit is housed in a weatherproof enclosure for mounting outdoors.

  • Page 35: Bottom Panel

    Hardware Description 2.1.1 Bottom Panel Figure 2-2 shows the bottom panel of the Wi² unit and the table below lists the components. Power Supply Interface Module WiFi Access Point (AP) Figure 2-2: Bottom Panel (without the SU-ODU) Element Item Description WiFi Access Point (AP) Console Port Cover Holder Holder for waterproof protection cover...

  • Page 36: Top Panel

    Chapter 2 - Hardware Installation 2.1.2 Top Panel Figure 2-3: Top Panel (without the SU-ODU) Figure 2-3 shows the top panel of the Wi² unit with two N-type RF connectors for external antennas. 2.1.3 LED Indicators The Wi² includes eight status LED indicators. Figure 2-4 shows the LEDs and the table below describes the system status.
  • Page 37 Hardware Description Status Light State Description Power Act There is no power to the WI2SR-1. Flashing The WI2-SR-1 is starting up. Solid The WI2-SR-1 is fully operational. Link on Ethernet Port is not connected or there is no activity. Flashing Ethernet port is transmitting or receiving.

  • Page 38: Installation Requirements

    Chapter 2 - Hardware Installation Installation Requirements This section describes all the supplies required to install the Wi² and the items included in each installation package. 2.2.1 Packing List The BreezeMAX Wi² and BreezeACCESS Wi² installation kit includes the following components: Wi²...

  • Page 39: Guidelines For Positioning Wi²

    Failure to do so may void the product warranty and may expose the end user or Service Provider to legal and financial liabilities. Alvarion and its resellers or distributors are not liable for injury, damage or regulation violations associated with the installation of Outdoor Units or antennas.
  • Page 40 Chapter 2 - Hardware Installation The Wi² should be mounted vertically on a 2"- 6" pole. Its location should enable easy access to the unit and its connectors for installation and maintenance and should have a clear or near line of sight to the area to be covered.

  • Page 41: Installation

    Installation Installation The following sections describe how to install a Wi² unit, including attaching the SU-ODU to the mounting plate, attaching the mounting plate to the Wi² unit, connecting to the SU-ODU, pole mounting, connecting a grounding cable, and connecting the antenna(s). 2.3.1 Attaching the SU-ODU to the Mounting Plate IMPORTANT...
  • Page 42 Chapter 2 - Hardware Installation Figure 2-5: Attaching BreezeMAX PRO-S ODU or BreezeACCESSSU-ODU with HW Revision E to Mounting Plate NOTE For information about polarization refer to the relevant manual. To attach a BreezeACCESS SU-ODU with HW Revision D or lower (rectangular) to the mounting plate: Determine the tilt direction of the SU-ODU.

  • Page 43: Attaching The Mounting Plate To The Wi² Unit

    Installation Figure 2-6: Attaching BreezeACCESS SU-ODU with HW Revision D or lower to Mounting Plate NOTE Sometimes, physical circumstance require that the SU-ODU be located at a distance from the Wi² unit and not attached to the mounting plate. For further information see the section on SU-ODU mounting in the relevant manual.

  • Page 44: Connecting The Wi² Unit To The Su-Odu

    Chapter 2 - Hardware Installation Figure 2-7: Attaching the Mounting Plate to the Wi² Unit Adjust the tilt angle according to the scale marked on the mounting plate and tighten the screws. Apply torque of 57 lb*in [6.4 N*m]. 2.3.3 Connecting the Wi²...
  • Page 45 Installation groove Figure 2-8: Sealing Cap Expose the RJ-45 connector under the sealing cap on the Ethernet cable and connect to the SU-ODU RJ-45 connector (Figure 2-9). Figure 2-9: Connecting the SU-ODU connector and inserting the Sealing Cap Put the sealing cap back in its place. Make sure that the small protrusion on the side of the cap fits inside the hole on the connector's protective body.
  • Page 46 Chapter 2 - Hardware Installation 2.3.3.2 Adapting the Ethernet Cable for Connecting to BreezeACCESS SU-ODU The 55 cm Ethernet cable supplied with the unit has crossed Ethernet connections which have to be adapted for connecting the unit to a BreezeACCESS ODU: Cut the cable as close as possible to the connector that should be connected to the ODU (the end without the service box).
  • Page 47 Installation Wire color Blue/white Orange Orange/white Brown Brown/white Green Green/white 2.3.3.3 Connecting to BreezeACCESS ODU with HW Revision E Adapt the cable as described in Section 2.3.3.2 Connect the cable to the ODU as described in Section 2.3.3.1. 2.3.3.4 Connecting to BreezeACCESS ODU with HW Revision D or Lower Cut the cable as close as possible to the connector that should be connected to the ODU (the end without the service box).

  • Page 48: Preparing The Power Cable

    Chapter 2 - Hardware Installation 2.3.4 Preparing the Power Cable CAUTION Electric Shock Hazard. Only a licensed electrician should connect the power plug. All mains used outdoors, in damp or wet conditions, should be supplied from a correctly fused source and protected according to applicable local regulations. To prepare the power cable: Use a UL/CSA listed smooth circular power cable, 1.5mm to 2.5mm each.
  • Page 49 Installation Figure 2-11: Preparing the Power Cable Strip insulation from wires as shown in Figure 2-11. Insert bare wire ends into the terminals and fully tighten the screws. The wires should be connected as shown below: Brown Phase ~ Blue Neutral 0 Black Yellow/green...

  • Page 50: Mounting The Wi² Unit

    Chapter 2 - Hardware Installation 2.3.5 Mounting the Wi² Unit To pole mount the Wi² unit: With the bottom panel of the unit facing downwards, thread the two 9/16" wide metal bands supplied through the brackets on the sides of the unit. Rotate the mounting bracket, so that the Wi²...
  • Page 51 Installation A 50 cm pole (diameter 6.03 cm) Screws for attaching the pole to mounting bracket Figure 2-13: Tilt Accessory Kit To mount the tilt accessory on a wall: Place the bracket on the wall and use as a template to mark the position of the holes to be drilled for the screws .
  • Page 52 Chapter 2 - Hardware Installation Figure 2-14: Mounting Tilt Accessory on Non-Vertical Pole To mount the Wi² using the tilt accessory: Mount the tilt accessory bracket on the wall or pole as described above. Using the screws provided attach the pole to the tilt accessory bracket. Using a spirit level, adjust the angle of the pole until it is vertical and tighten the screws to hold in place.

  • Page 53: Connecting The Antenna(S)

    Installation 2.3.6 Connecting the Antenna(s) To connect an external antenna: Connect the external antenna directly to the N-type connector on the top panel of the Wi² unit. NOTE When connecting only one antenna, connect it to the right antenna connector. (When looking at the unit from the side of the SU-ODU with the antenna connectors facing upwards, this is the connector on the right.) Set the antenna options for corresponding antenna through the user interface (refer to the AP...

  • Page 54: Configuration And Testing

    Chapter 2 - Hardware Installation CAUTION The Wi² can be connected to either an AC or DC power source, or to both. By default the DC plug is covered with a waterproof sealing cap which must be removed before connecting to the power cable.
  • Page 55 Installation NOTE At least one VAP must be enabled and Antenna ID must be configured to enable transmissions. Disconnect the configuration cable from the Wi² unit and reconnect the cable between the SU-ODU and the SU connector of the Power Supply and Interface module. Using the WiFi client (802.11b/g), locate the Wi²...
  • Page 57 Chapter 3 - Hardware Installation Wi² Extender In This Chapter: “Wi² Extender ODU Hardware Description” on page 36 “Installation Requirements” on page 39 “Mounting the Wi² Extender ODU” on page 42 “Connecting Cables to the Outdoor Unit” on page 46 “The Power Injector IDU”...

  • Page 58: Chapter 3 - Hardware Installation Wi² Extender

    Chapter 3 - Hardware Installation Wi² Extender Wi² Extender ODU Hardware Description Integrated Antenna Wi² Extender Ethernet/P oE RJ-45 Port Grounding Point Pole-Mount Bracket Water-Tight Test Point Screw Attachment Points (total 4) (DO NOT REMOVE) 3.1.1 Integrated High-Gain Antenna The Wi² Extender ODU includes an integrated high-gain (17 dBi) flat-panel antenna for 5 GHz operation.

  • Page 59: Water Tight Test Point

    Wi² Extender ODU Hardware Description 3.1.5 Water Tight Test Point CAUTION Do no remove or loosen this screw. Doing so could lead to damage of the unit. 3.1.6 Pole-Mounting Bracket Attachment Points The Wi² Extender includes a bracket kit that can be used to mount the unit to a pole, radio mast, or part of a tower structure.
  • Page 60 Chapter 3 - Hardware Installation Wi² Extender The following table describes the wireless status LEDs: 11a LEDs Status Description Right Pair Center Pair Left Pair The radio is disabled or unit is still booting up Blinking- No signal detected or RSSI is below -88 dBm slowly Blinking- RSSI is between -88 dBm and -87 dBm...

  • Page 61: Installation Requirements

    Installation Requirements Installation Requirements This section describes all the supplies required to install the Wi² Extender and the items included in each installation package. 3.2.1 Packing List The Wi² Extender package includes the following components: Wi² Extender CPE Outdoor Unit with integrated antenna (1) A Service Box (Sealing Assembly for the ODU's Ethernet connector) (2) A pole mounting kit for the Wi²...

  • Page 62: Additional/Optional Installation Requirements

    Chapter 3 - Hardware Installation Wi² Extender 3.2.2 Additional/Optional Installation Requirements Category 5E cable* for connecting to a Wi² Extender if installed separately (maximum length 100m.) Rubber sealing cap for BreezeMAX or BreezeACCESS HW Revision E ODU (supplied with Wi² Extender) Service Box for BreezeACCESS HW Revision D or lower ODU (supplied with Wi²...

  • Page 63: Guidelines For Positioning Wi² Extender

    Failure to do so may void the product warranty and may expose the end user or Service Provider to legal and financial liabilities. Alvarion and its resellers or distributors are not liable for injury, damage or regulation violations associated with the installation of Outdoor Units or antennas.

  • Page 64: Mounting The Wi² Extender Odu

    Chapter 3 - Hardware Installation Wi² Extender Mounting the Wi² Extender ODU The Wi² Extender’s pole-mounting bracket has two parts: One rectangular plate with V-shaped edges that attaches directly to the Wi² Extender ODU, and one steel-band clamp that secures the unit to a pole.
  • Page 65 Mounting the Wi² Extender ODU Attach the rectangular mounting plate to the Wi² Extender using the supplied four screws. NOTE The mounting plate can be attached to the unit in a way that allows it to be mounted vertically or at a 45 degree angle.
  • Page 66 Chapter 3 - Hardware Installation Wi² Extender Place the Wi² Extender with its attached rectangular plate on one side of the pole and strap the steel-band clamp around the pole. Feed the steel band through its fastener and secure it tightly. Strap the steel-band clamp around the pole and feed it through the...
  • Page 67 Mounting the Wi² Extender ODU Tighten the steel-band clamp to secure the Wi² Extender to the pole BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 68: Connecting Cables To The Outdoor Unit

    Indoor-to-Outdoor cable, together with the length of the Ethernet cable connecting the IDU to the data equipment, should not exceed 100 meters. Use only Category 5E Ethernet cables from either Alvarion or any of the approved manufacturers, listed in Table 3-1.

  • Page 69: Preparing And Connecting The Idu-Odu Cable

    Connecting Cables to the Outdoor Unit 3.4.2 Preparing and Connecting the IDU-ODU Cable Unscrew the top nut from the Service Box. Route a straight-through Cat. 5 Ethernet cable (8-wire, 24 AWG) through both the top nut and the body of the Service Box. Insert and crimp the RJ-45 connector.

  • Page 70: Grounding Wire

    Chapter 3 - Hardware Installation Wi² Extender Figure 3-2: Ethernet Connector Pin Assignments The color codes used in standard cables supplied by Alvarion are as listed in the following table: Table 3-2: Cable Color Codes Wire color Blue Blue/white Orange...
  • Page 71 Connecting Cables to the Outdoor Unit RJ-45 Weatherproof Cover Ground Wire Ethernet Cable Grounding Screw BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 72: The Power Injector Idu

    Chapter 3 - Hardware Installation Wi² Extender The Power Injector IDU The Wi² Extender receives power through its network cable connection using power-over-Ethernet technology. A power injector IDU is included in the Wi² Extender package and provides two RJ-45 Ethernet ports, one for connecting to the Wi² Extender (Radio), and the other for connecting to a local LAN switch (Ethernet).

  • Page 73: Connecting The Power Injector Idu Cables

    Connecting the Power Injector IDU Cables Connecting the Power Injector IDU Cables The unit can be placed on a desktop or a shelf. Alternatively, it may be wall-mounted using the kit supplied with the unit. CAUTION Do not install the power injector outdoors. The unit is for indoor installation only. CAUTION Install lightning protection at the power injector end of the Ethernet cable, use a lightning arrestor immediately before the cable enters the building.
  • Page 74 Chapter 3 - Hardware Installation Wi² Extender AC power Ethernet cable from LAN switch RADIO RESET Ethernet cable to Wi² Extender E R N E T H Insert the power cable plug directly into the standard AC receptacle on the power injector. Plug the other end of the power cable into a grounded, 3-pin socket, AC power source.

  • Page 75: Align The Antenna

    Align the Antenna Align the Antenna After the Wi² Extender unit has been mounted, connected, and its radio is operating, the antenna must be accurately aligned to ensure optimum performance on the wireless link. This alignment process is particularly important for long-range links. To start the alignment process, you can just point the antenna in the general direction of the Access Unit’s antenna using binoculars or a compass.
  • Page 76 Chapter 3 - Hardware Installation Wi² Extender NOTE Sometimes there may not be a central lobe peak because vertical alignment is too far off; only two similar peaks for the side lobes are detected. 3.7.0.1 Adapting the Ethernet Cable for Connecting to BreezeACCESS SU-ODU The 55 cm Ethernet cable supplied with the unit has crossed Ethernet connections which have to be adapted for connecting the unit to a BreezeACCESS ODU:...
  • Page 77 Align the Antenna The color codes used in the standard cable supplied by with the unit are listed in the table below. Wire color Blue Blue/white Orange Orange/white Brown Brown/white Green Green/white 3.7.0.2 Connecting to BreezeACCESS ODU with HW Revision E Adapt the cable as described in Section 3.7.0.1 Connect the cable to the ODU as described in...

  • Page 78: Connecting The Antenna(S)

    Chapter 3 - Hardware Installation Wi² Extender 3.7.1 Connecting the Antenna(s) To connect an external antenna: Connect the external antenna directly to the N-type connector on the top panel of the Wi² Extender unit. NOTE When connecting only one antenna, connect it to the right antenna connector. (When looking at the unit from the side of the SU-ODU with the antenna connectors facing upwards, this is the connector on the right.) Set the antenna options for corresponding antenna through the user interface (refer to the AP...

  • Page 79: Configuration And Testing

    Align the Antenna CAUTION The Wi² Extender can be connected to either an AC or DC power source, or to both. By default the DC plug is covered with a waterproof sealing cap which must be removed before connecting to the power cable.
  • Page 80 NOTE At least one VAP must be enabled and Antenna ID must be configured to enable transmissions. Disconnect the configuration cable from the Wi² Extender unit and reconnect the cable between the SU-ODU and the SU connector of the Power Supply and Interface module. Using the WiFi client (802.11b/g), locate the Wi²...

  • Page 81: Chapter 4 - Getting Started

    Chapter 4 - Getting Started In This Chapter: “Introduction” on page 60 “Configuration Procedure” on page 61...

  • Page 82: Introduction

    Chapter 4 - Getting Started Introduction This chapter walks you through the steps needed to initially configure the AP in autonomous mode and establish a connection through the AP to the Internet. If you are using the AP in its default controlled mode in which it is managed by an Wi² series service controller, see a Wi²...

  • Page 83: Configuration Procedure

    WIRELESS SECURITY: To provide easy wireless access to the management interface, the AP ships with all wireless security options disabled. Alvarion strongly recommends that once the AP is installed, you enable a wireless security option to properly safeguard the wireless network from intruders.
  • Page 84 Chapter 4 - Getting Started Figure 4-1: TCP/IP Properties Window Disable any wireless connection. To start the AP Connect the power supply (sold separately) or use a PoE injector to power-up the AP. Ruggedized version: Connect the PoE injector to power-up the AP. To perform these initial login tasks In a web browser, open page: https://192.168.1.1.
  • Page 85 Configuration Procedure Figure 4-2: Windows Security Message In Firefox 2, select select Accept this certificate temporarily for this session and then OK. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 86 Chapter 4 - Getting Started Figure 4-3: Certificate Window For information on how you can replace the Secure Sockets Layer (SSL) certificate that ships with the AP with one of your own, see “Managing Certificates” on page 161. On the Login page, specify admin for Username and Password and then select Login. The AP management tool home page opens.
  • Page 87 Configuration Procedure At the password prompt it is recommended that you change the password. Specify the new password and select Save. The management tool home page opens. NOTE Instructions to select specific elements and menus are specified in the form: Select Network >...
  • Page 88 Connect to the wireless network. For example, from the Windows XP Start menu, select Settings > Network Connections > Wireless Network Connections. The list of available wireless networks appears. By default the AP creates a wireless network named Alvarion Ltd.. Select this network and then Connect.
  • Page 89 To connect to an Alvarion access controller Select VSC > Profiles and select the appropriate profile. Under General, select the Use Alvarion access controller checkbox, and select Save. To assign an IP address If your Internet service provider or network administrator requires a different configuration, for example a static IP address assignment: From the AP management tool, select Network >...
  • Page 90 Chapter 4 - Getting Started Select the corresponding Configure button and configure as instructed. For more information “Port Configuration” on page 116. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 91 Chapter 5 - Working with Virtual Networks In This Chapter: “Key Concepts” on page 70 “Virtual Network Configuration Overview” on page 76 “Virtual Network Configuration Options” on page 79 “Virtual Network Data Flow” on page 86 “Quality of Service (QoS)” on page 90...

  • Page 92: Chapter 5 - Working With Virtual Networks

    Chapter 5 - Working with Virtual Networks Key Concepts A VSC (virtual network) is a collection of configuration settings that define key operating characteristics of an AP. In most cases, a virtual network is used to define the characteristics of a wireless network.
  • Page 93 Key Concepts Figure 5-2: Stand-alone Deployment 5.1.1.1 User Authentication The AP can validate user login credentials using a third-party RADIUS server. The following authentication types are supported: WPA / WPA2, 802.1X, and MAC. 5.1.1.1.1 WPA / WPA2 and 802.1X Authentication Full support is provided for users with 802.1X or WPA / WPA2 client software, and 802.1X client software that uses the following: EAP-TLS: Extensible Authentication Protocol Transport Layer Security.
  • Page 94 Chapter 5 - Working with Virtual Networks Authentication result Active Authentication Network 802.1X Method Access? Failure Success 802.1X optional Success Failure 802.1X mandatory Failure Success MAC optional + 802.1X optional Success Failure Failure Failure Success Success MAC optional + 802.1X mandatory Success Failure Failure...

  • Page 95: Deployment In Conjunction With An Alvarion Service Controller

    Enabled Wireless client stations gain access to the network only after successful 802.1X authentication. 5.1.2 Deployment in Conjunction with an Alvarion Service Controller Autonomous APs can also be used in conjunction with a service controller to create a public access network infrastructure.

  • Page 96: Management With Vlans

    Chapter 5 - Working with Virtual Networks Figure 5-3: Deployment in Conjunction with an Alvarion Service Controller The following authentication types are supported on the service controller: WPA / WPA2, 802.1X, MAC, HTML. For more information on service controller authentication features, see the service controller’s Admin Guide.
  • Page 97 Key Concepts Figure 5-5: Management with VLANs In this example, the traffic for each wireless network is carried on its own VLAN. This leaves only management traffic from the autonomous AP on VLAN 10. A static IP is assigned on both ends to permit the two devices to communicate.

  • Page 98: Virtual Network Configuration Overview

    Chapter 5 - Working with Virtual Networks Virtual Network Configuration Overview The VSC page lists the VSC defined virtual network profiles. Figure 5-6: VSC Page To edit a profile, select its link in the Name column. To add a new profile, select Add New VSC Profile.

  • Page 99: About The 'Use Alvarion Access Controller' Option

    Availability of certain virtual network features and their functionality are dependent on the setting of the Use Alvarion access controller in the virtual network’s General box. This option determines how authentication and access control are handled by the virtual network: Figure 5-8: ‘Use Alvarion Access Controller’...
  • Page 100 NOTE When access control is disabled, user traffic sent by the AP must bypasses the service controller, otherwise it will be interpreted and processed. Figure 5-10: ‘Use Alvarion Access Controller’ Option is Disabled BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 101: Virtual Network Configuration Options

    Virtual Network Configuration Options Virtual Network Configuration Options The following table lists the Virtual Network configuration options that are available depending on how the Use Alvarion access controller option is configured. Use Alvarion access controller is: Virtual Network Enabled Disabled...

  • Page 102: Egress Vlan

    Chapter 5 - Working with Virtual Networks Figure 5-11: Virtual AP 5.3.2 Egress VLAN Sets the VLAN that this profile forwards data traffic to. If you do not select a VLAN, traffic is sent untagged. Note however, that a VLAN may still be assigned on a per-customer basis via a setting in BreezeMAX Wi²...

  • Page 103: Wireless Security Filters

    These filters limit both incoming and outgoing traffic as defined below and force the APs to exchange traffic with a specific upstream device. If Use Alvarion access controller is enabled (under General), the AP will only forward user traffic that is addressed to the service controller. All other traffic is blocked. Make sure that the service controller is set as the default gateway.

  • Page 104: Wireless Protection

    WPA or WPA2: Mixed mode supports both WPA (version 1) and WPA2 (version 2) at the same time. Authentication must occur via an external device (unless preshared keys are used). If Use Alvarion access controller is enabled (under General), this must be an Alvarion access controller, otherwise a third-party RADIUS server can be used.
  • Page 105 Virtual Network Configuration Options Authentication must occur via an external device. If Use Alvarion access controller is enabled (under General), this must be an Alvarion access controller, otherwise a third-party RADIUS server can be used. Use Alvarion access controller Enabled...

  • Page 106: Mac-Based Authentication

    Location-aware This feature enables you to control logins to the public access network based on the AP, or group of APs, to which a user is connected. It is only available when Use Alvarion access controller is enabled (under General).

  • Page 107: Wireless Ip Filter

    Virtual Network Configuration Options Figure 5-17: Wireless MAC Filter 5.3.8 Wireless IP Filter This option enables you to to only allow wireless-to-wired LAN traffic for specific destination addresses. Figure 5-18: Wireless IP Filter NOTE This option is applies on a per-radio basis. BreezeMAX Wi²...

  • Page 108: Virtual Network Data Flow

    Chapter 5 - Working with Virtual Networks Virtual Network Data Flow Each Virtual Network provides a number of configurable options. The following diagrams illustrate how traffic from wireless users is handled by virtual network definitions on an AP and service controller, and shows the options that apply on each device.

  • Page 109: Stand-Alone Deployment

    1 and 2. VLAN: All traffic on port 1 or 2 can be assigned to a VLAN. 5.4.2 AP deployed with an Alvarion Service Controller 5.4.2.1 Ingress The AP only handles wireless traffic. The SSID is the name of the wireless network that the user associates with.

  • Page 110: Virtual Network On Service Controller

    VLAN (LAN or Internet port): Traffic with a VLAN ID is handled by the Virtual Network with a matching VLAN definition. Untagged (LAN port): Untagged traffic on the LAN port may originate from wired users, or APs operating in autonomous mode (Alvarion or third-party). 5.4.3.2 Features Authentication: The service controller supports 802.1X, MAC, or HTML authentication.
  • Page 111 Virtual Network Data Flow 5.4.3.3 Egress The service controller enables user traffic to be forwarded to different output interfaces, which include the routing table, VLAN ID, or IP GRE tunnel. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 112: Quality Of Service (Qos)

    Chapter 5 - Working with Virtual Networks Quality of Service (QoS) The MAP features a quality of service (QoS) implementation that provides a wide range of methods for traffic prioritization. 5.5.1 QoS Priority Mechanism The QoS priority mechanism defines four traffic queues based on the WMM standard. In order of priority, these queues are: Queue Typically used for...
  • Page 113 5.5.1.3 Virtual Network-based Priority The virtual network-based priority mechanism is unique to Alvarion Ltd. APs. It enables you to specify a priority level for all traffic on a virtual network. This enables users that do not have a QoS mechanism to set traffic priority by connecting to the appropriate SSID.
  • Page 114 Chapter 5 - Working with Virtual Networks Traffic type Queue (based on binary value of Class Selector Codepoint) SVP traffic 111000 (Network control) 110000 (Internetwork control) 101000 (Critical) 100000 (Flash override) 011000 (Flash) 000100 (Routine) 010000 (Immediate) 001000 (Priority) Other traffic 5.5.1.5 The IP TOS (type of service) field can be used to mark prioritization or special handling for IP packets.
  • Page 115 Quality of Service (QoS) Figure 5-20: QoS Example virtual networks define the following SSIDs: Voice: Supports wireless phones using the the Very High Priority mechanism. Video Conference: Supports high-priority video traffic for video conferences. Data: Used by employees. Features a higher QoS setting than the guest profile. Guest: Used by guests.
  • Page 116 Chapter 5 - Working with Virtual Networks BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 117: Chapter 6 - Wireless Configuration

    Chapter 6 - Wireless Configuration In This Chapter: “Wireless Coverage” on page 96 “Conducting a Site Survey” on page 103 “Radio Configuration” on page 106...

  • Page 118: Wireless Coverage

    AP. The following sections provide information on wireless coverage. A tool that can help simplify planning a secure wireless network is the Alvarion RF Planner. For more information, see the RF Planner Admin Guide.
  • Page 119 Wireless Coverage 6.1.2.2 Antenna Configuration Antennas play a large role in determining the shape of the wireless cell and transmission distance. Consult the specifications for the antennas you use to determine how they affect wireless coverage. 6.1.2.3 Interference Interference is caused by other APs or devices that operate in the same frequency band as the AP and can substantially affect throughput.

  • Page 120: Configuring Overlapping Wireless Cells

    Chapter 6 - Wireless Configuration 6.1.3 Configuring Overlapping Wireless Cells Overlapping wireless cells occur when two or more APs are within transmission range of each other. This may be under your control, (for example, when you use several cells to cover a large location), or out of your control (for example, when your neighbors set up their own wireless networks).
  • Page 121 Wireless Coverage 6.1.3.2 Selecting Channels For optimal performance when operating in 802.11b or 802.11g modes, select an operating frequency that is different by at least 25 MHz from the frequency used by other wireless APs that operate in neighboring cells. Two channels with the minimum 25 MHz frequency separation always perform worse than two channels that use maximum separation.
  • Page 122 Chapter 6 - Wireless Configuration Since the minimum recommended separation between overlapping channels is 25 MHz (five cells) the recommended maximum number of overlapping cells you can have in most regions is three. The following table gives examples relevant to North America, Japan, and Europe. North America Japan Europe...
  • Page 123 Wireless Coverage Figure 6-3: Reducing Overlap to Increase Channel Separation Using only three frequencies across multiple cells in North America. This strategy can be expanded to cover an even larger area using three channels, as shown in the following figure. Figure 6-4: Using Three Frequencies Across Multiple Cells Using three frequencies to cover a large area in North America.
  • Page 124 6.1.3.3 Automatic Power Control The automatic power control feature enables the AP to dynamically adjust its transmission power to avoid causing interference with neighboring Alvarion APs. For information see “Transmit Power Control” on page 110. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 125: Conducting A Site Survey

    Conducting a Site Survey Conducting a Site Survey You can use the wireless neighborhood feature to conduct a site survey to discover the operating frequencies of other APs in your area. Select Wireless > Neighborhood and then select Repeat scan every and set the desired interval. The AP scans at the specified interval to find all active APs.

  • Page 126: Identifying Unauthorized Aps

    Chapter 6 - Wireless Configuration Operating mode is set to Monitor and, on this Wireless neighborhood page, Repeat scan every is enabled. Channel is set to Automatic. Automatic power control is enabled. The scanning interval is set based on the automatic power control and channel selection intervals that are defined.
  • Page 127 Conducting a Site Survey You must edit the Brief list file to remove extra text that appears before and after each MAC address. For example, if the brief list appears as follows <?xml version='1.0'?> <simple-ap-list> # MAC SSID 00:03:52:07:f5:11 "AP_1" 00:03:52:07:f5:23 "AP_2"...

  • Page 128: Radio Configuration

    Chapter 6 - Wireless Configuration Radio Configuration To define configuration settings for the radio, select Wireless > Radio(s). This opens the Radio(s) configuration page (example from Wi² AP shown): Figure 6-6: Radio Configuration BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 129: Configuration Parameters

    Radio Configuration 6.3.1 Configuration Parameters NOTE If multiple radios are available on a AP, configuration options for each radio are the same. 6.3.1.1 Operating mode Select the operating mode. Available options are: Access point and Local mesh: Standard operating mode provides support for all wireless functions.
  • Page 130 Chapter 6 - Wireless Configuration least 25 MHz. Consult the Wireless > Neighborhood page to view a list of APs currently operating in your area. 6.3.1.4 Interval When the Automatic option is selected for Channel, this parameter determines how often the AP re-evaluates the channel setting.
  • Page 131 Radio Configuration NOTE RSSI (Received Signal Strength Indication) is the difference between the amount of noise in an environment and the wireless signal strength. It is expressed in decibels (dB). The higher the number the stronger the signal. 6.3.1.7.2 RTS Threshold (Not available in Monitor mode) Use this parameter to control collisions on the link that can reduce throughput.
  • Page 132 Virtual Network profiles. This is done to maintain a reasonable connection speed for client stations when the AP is operating in environments with strong interference. This feature works best when the entire network uses only Alvarion Ltd. APs, because third-party products will not adjust output power.
  • Page 133 Radio Configuration transmit power to maximum, if possible, and to change the minimum data rate to a higher value. 802.11b will change from 1 Mbps to 2 Mbps, 802.11g will change from 6 Mbps up to 18 Mbps. NOTE Not all interference can be eliminated, as a majority of clients will still transmit at maximum power. NOTE Some older wireless client cards may not support a data rate of 2 Mbps and therefore may not be able to associate when Automatic power control is enabled.
  • Page 135 Chapter 7 - Network Configuration In This Chapter: “Port Configuration” on page 114 “VLAN Support” on page 118 “Bandwidth Control” on page 122 “CDP” on page 123 “DNS” on page 124 “IP Routes” on page 126 “IP QoS” on page 128...

  • Page 136: Chapter 7 - Network Configuration

    Chapter 7 - Network Configuration Port Configuration The Port configuration page displays summary information about all logical and physical ports and VLANs. Open this page by selecting Network > Ports. Figure 7-1: Port Configuration 7.1.1 Port Configuration Information Status indicator: Operational state of each port, as follows: Green: Port is properly configured and ready to send and receive data.

  • Page 137: Bridge Port Configuration

    Port Configuration 7.1.2 Bridge Port Configuration All ports on the AP are bridged. Therefore, common settings are configured using the bridge port (which is a logical port). To verify and possibly adjust bridge port configuration, select Network > Ports > Bridge port. Figure 7-2: Bridge Configuration 7.1.2.1 Assigning an IP Address...

  • Page 138: Port Configuration

    Chapter 7 - Network Configuration 7.1.2.2.1 Priority Sets the priority of the AP within the spanning tree network. Generally, the bridge with lowest priority is designated as the root bridge of the spanning tree. 7.1.3 Port Configuration To verify and possibly adjust port configuration, select Network > Ports > Port n. Configuration options for both ports are the same.

  • Page 139: Wireless Port Configuration

    Port Configuration 7.1.3.1.3 Default VLAN and Untagged Port Compatibility When this option is enabled, any traffic being sent on the default VLAN is also sent untagged on this port. 7.1.3.2 Link 7.1.3.2.1 Speed Auto: Lets the AP automatically set port speed based on the type of equipment it is connected 10: Forces the port to operate at 10 mbps.

  • Page 140: Vlan Support

    Chapter 7 - Network Configuration VLAN Support The AP provides a robust and flexible virtual local area network (VLAN) implementation that supports a wide variety of scenarios. For example, VLANs can be used to isolate management from user traffic, or to route traffic over a local mesh connection.

  • Page 141: Assigning Traffic To A Vlan

    VLAN Support 7.2.2 Assigning Traffic to a VLAN You can assign wireless traffic to a VLAN for an entire Virtual Network or for individual users. NOTE A VLAN that is assigned to a user overrides a VLAN assigned by a Virtual Network or by the default VLAN.

  • Page 142: Vlan Configuration

    Chapter 7 - Network Configuration VLAN name VLAN ID Assigned to Bridge_2 Port 2 Bridge_3 Local mesh 1 7.2.4 VLAN Configuration To view and configure VLAN definitions, select Network > Ports and look in the VLAN configuration box: Figure 7-4: VLAN Configuration To add a VLAN, click Add New VLAN.
  • Page 143 VLAN Support easy to manage a large number of contiguously assigned VLANs. You can define more than one VLAN range, but each range must be distinct. NOTE VLANS with ranges cannot be used for Virtual Network egress mapping and cannot be assigned an IP address.

  • Page 144: Bandwidth Control

    Chapter 7 - Network Configuration Bandwidth Control The AP incorporates a bandwidth management feature that provides control of outgoing user traffic on the wireless ports. To configure Bandwidth control, select Network > Bandwidth control. Figure 7-6: Bandwidth Control If outgoing traffic arrives at the defined bandwidth limit (or less), it is processed without delay. If outgoing traffic arrives at a rate that is greater than the defined bandwidth limit, it causes the AP to throttle the traffic.

  • Page 145: Cdp

    The AP can be configured to transmit CDP (Cisco Discovery Protocol) information on all ports. This information is used to advertise AP information to third-party devices, such as CDP-aware switches. When installed with a service controller, the service controller uses CDP information sent by autonomous APs to collect information about these APs for display in its management tool.

  • Page 146: Dns

    Chapter 7 - Network Configuration The AP provides several options to customize DNS handling. To configure these options, select Network > DNS. Figure 7-8: DNS 7.5.1 DNS Servers Server 1: Specify the IP address of the primary DNS server for the AP to use. Server 2: Specify the IP address of the secondary DNS server for the AP to use.
  • Page 147 7.5.2.2 DNS Switch on Server Failure This setting controls how the AP switches between the primary and secondary DNS servers. When enabled, the AP switches servers if the current server replies with a DNS server failure message. When disabled, the AP switches servers if the current does not reply to a DNS request. 7.5.2.3 DNS Switch Over This setting controls how the AP switches back to the primary DNS server after it has switched to...

  • Page 148: Ip Routes

    Chapter 7 - Network Configuration IP Routes All wireless traffic on the AP is bridged to the egress interface on the virtual network with which it is associated. Therefore, IP routes cannot be applied to user traffic. However, IP routes can be used to ensure that the management traffic generated by the AP is sent to the correct destination.
  • Page 149 IP Routes Gateway: IP address of the gateway to which the AP forwards routed traffic (known as the next hop). An asterisk is used by system routes to indicate a directly connected network. Metric: Priority of a route. If two routes exist for a destination address, the AP chooses the one with the lower metric.

  • Page 150: Ip Qos

    Chapter 7 - Network Configuration IP QoS To ensure that critical applications have access to the required amount of wireless bandwidth, you can classify packets destined for the wireless interface into priority queues based on a number of criteria. For example, you can use any of the following to place data packets in one of four priority queues for transmission onto the wireless interface: TCP source port UDP source port...
  • Page 151 IP QoS Figure 7-11: Adding a New IP QoS Profile- Priority: Low 7.7.1.1 Settings Profile name: Specify a unique name to identify the profile. Protocol: Specify an IP protocol to use to classify traffic by specifying its Internet Assigned Numbers Authority (IANA) protocol number. Protocol numbers are pre-defined for a number of common protocols.

  • Page 152: Example

    Chapter 7 - Network Configuration 7.7.2 Example This example shows how to create two IP QoS profiles and associated them with a Virtual Network. The two profiles are: Voice: Provides voice traffic with high priority. Web: Provides HTTP traffic with low priority. 7.7.2.1 Create the Profiles Select Network >...
  • Page 153 IP QoS Under Protocol, from the drop-down list select TCP. Under Start port, from the drop-down list select http. Start port and End port are automatically populated with the common HTTP port, 80. Under Priority, from the drop-down list select Low. Figure 7-13: Adding a New IP QoS Profile- Profile Name: Web Select Save.
  • Page 154 Chapter 7 - Network Configuration BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 155 Chapter 8 - Management In This Chapter: “Management Tool” on page 134 “SNMP” on page 139 “SOAP” on page 142 “CLI” on page 144 “System Time” on page 146 “Country” on page 147...

  • Page 156: Chapter 8 - Management

    Chapter 8 - Management Management Tool The management tool is a web-based interface to the AP that provides easy access to all configuration and monitoring functions. 8.1.1 Management Station The management station refers to the computer that an administrator uses to connect to the management tool.
  • Page 157 Management Tool Figure 8-1: Management Tool Configuration 8.1.3.1 Administrator Authentication Access to the management tool is protected by a username and password. The factory default setting for both is admin. It is recommended that you change both at initial setup, and then regularly thereafter.
  • Page 158 Chapter 8 - Management On the AP, create a RADIUS profile that will connect the AP to the RADIUS server. See “Configuring a RADIUS Client Profile on the AP” on page 150. Under Administrator authentication, set Authenticate via to the RADIUS profile you created in step 2.
  • Page 159 Management Tool If login to the management tool fails five times in a row (bad username and/or password), login privileges are blocked for five minutes. Once five minutes expires, login privileges are once again enabled. However, if the next login attempt fails, privileges are again suspended for five minutes.
  • Page 160 Chapter 8 - Management 8.1.3.6 Auto-refresh This option controls how often the AP updates the information in group boxes that show the auto-refresh icon in their title bar. Under Interval, specify the number of seconds between refreshes. Auto-refresh icon Figure 8-3: Auto-refresh Icon 8.1.3.7 Web Inactivity Logout When this option is enabled, an administrator will automatically be logged out if their session is idle...

  • Page 161: Snmp

    SNMP SNMP The AP provides a robust SNMP implementation supporting both industry standard and Alvarion-specific MIBs. For complete information on supported MIBs, see the SNMP MIB Reference Guide. 8.2.1 Configuring SNMP Settings Select Management > SNMP to open the SNMP configuration page. This page enables you to configure SNMP attributes, agents, traps, and security.
  • Page 162 Chapter 8 - Management 8.2.1.1 Attributes System name: Specify a name to identify the AP. Default is the AP’s serial number. Location: Specify a descriptive name for the location where the AP is installed. Contact: Specify information about a contact person for the AP. Community name: Specify the password that controls read/write access to SNMP information.
  • Page 163 The AP supports the following MIB II traps: coldStart linkUp linkDown authenticationFailure In addition, the AP supports a number of Alvarion-specific traps. Select Configure Traps. For a descriptions of these traps, see the online help. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 164: Soap

    Chapter 8 - Management SOAP The AP provides a SOAP interface that can be used by SOAP-compliant client applications to perform configuration and management tasks. 8.3.1 Configuring the SOAP Server Select Management > SOAP to open the SOAP server configuration page. By default, the SOAP server is enabled.
  • Page 165 The SOAP server is configured for SSL/TLS mode, and the use of a X.509 client certificate is mandatory for SOAP clients. The SOAP server is configured to trust all client certificates signed by the default Alvarion SOAP CA installed on the AP.

  • Page 166: Cli

    Chapter 8 - Management The AP provides a command line interface that can be used to perform configuration and management tasks via the serial port or an IP connection on any of the AP’s interfaces. For complete information using on the CLI, see the AP CLI Reference Guide. A maximum of three concurrent CLI sessions are supported regardless of the connection type.
  • Page 167 The following SSH clients have been tested with the CLI. Others may work as well: OpenSSH Tectia SecureCRT Putty BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 168: System Time

    Chapter 8 - Management System Time Select Management > System time to open the System time page. This page enables you to configure the time server and time zone information. Figure 8-7: System Time Set timezone & DST as appropriate. Set Time server protocol, to Simple Network Time Protocol.

  • Page 169: Country

    Country Country NOTE The Country sub-menu is not available on APs delivered with a fixed country setting. The country for which the AP is configured to operate is displayed on the management tool home page. Select Management > Country and select the desired country. CAUTION Do not change Country to a country other than the one in which the AP operates.

  • Page 171: Chapter 9 - Security

    Chapter 9 - Security In This Chapter: “Using a RADIUS Server” on page 150 “Managing Certificates” on page 161...

  • Page 172: Using A Radius Server

    Chapter 9 - Security Using a RADIUS Server The AP can use one or more external RADIUS servers to perform a number of authentication and configuration tasks, including the tasks shown in the table below. Task For more information see Validating administrator login credentials.
  • Page 173 Using a RADIUS Server Figure 9-2: Add/Edit RADIUS Profile Configure the profile settings as described in the following Configuration Parameters section. Select Save. 9.1.1.2 Configuration Parameters 9.1.1.2.1 Profile name Specify a name to identify the profile. 9.1.1.2.2 Settings Authentication port: Specify a port on the RADIUS server to use for authentication. By default RADIUS servers use port 1812.
  • Page 174 Chapter 9 - Security Administrator access to the management tool MAC-based authentication of devices You can determine the maximum number of retries as follows: MAC-based authentication: Number of retries is infinite. 802.1X authentication: Retries are controlled by the 802.1X client software. Authentication method: Select the default authentication method that the AP uses when exchanging authentication packets with the RADIUS server defined for this profile.

  • Page 175: Configuring User Profiles On A Radius Server

    You must create at least one user profile on the RADIUS server. You can associate multiple user accounts with a single RADIUS profile. This section presents all supported RADIUS and Alvarion attributes that can be used to configure a user profile on a RADIUS server. Attributes starting with MS are Microsoft and are not standard.
  • Page 176 State State User-Name User-Name User-Password User-Password Alvarion-AVPair (SSID) Alvarion-AVPair (SSID) 9.1.2.2.1 Descriptions Acct-Session-Id (32-bit unsigned integer): A unique accounting ID used to make it easy to match up records in a log file. Called-Station-Id (string): BSSID of the Virtual Network used by a wireless client, or the MAC address of the LAN port used by a wired client.
  • Page 177 EAP-Message (string): As defined in RFC 2869. Only present when the authentication scheme on the Security > RADIUS > Profile 1 page is set to EAP-MD5. Alvarion-AVPair (SSID): See the description in the section that follows. 9.1.2.3 Access Accept Attributes This table lists all attributes supported in Access Accept packets for each authentication type.
  • Page 178 Chapter 9 - Security Admin login Attribute 802.1X MS-MPPE-Recv-Key MS-MPPE-Send-Key Session-TImeout Termination-Action Tunnel-Medium-Type Tunnel-Private-Group-ID Tunnel-Type 9.1.2.3.1 Descriptions Class (string): As defined in RFC 2865. Multiple instances are supported. EAP-Message (string): Note that the content will not be read as the RADIUS Access Accept overrides whatever indication is contained inside this packet.
  • Page 179 Accounting Request Attributes This table lists all attributes supported in Accounting Request packets for each authentication type. Attribute Web Admin 802.1X Acct-Session-Id Acct-Session-Time Acct-Status-Type Called-Station-Id Calling-Station-Id Class Framed-MTU NAS-Identifier NAS-Port NAS-Port-Type User-Name Alvarion-AVPair (SSID) BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 180 NAS-Port-Type (32-bit unsigned integer): Always set to 19, which represents WIRELESS_802_11. User-Name (string): The RADIUS username provided by the 802.1x client. Alvarion-AVPair (SSID): SSID that the customer is associated with. 9.1.2.6 Accounting Response Accounting Response RADIUS attributes are not supported.

  • Page 181: Configuring Administrator Profiles On The Radius Server

    Make sure that a user is not granted access if the service type is not Administrative. This section presents all supported RADIUS and Alvarion attributes that can be used to configure an administrator profile on a RADIUS server. Attributes starting with MS are Microsoft and are not standard.
  • Page 182 Chapter 9 - Security MSCHAP-Challenge (string): As defined in RFC 2433. Only present when the authentication scheme on the Security > RADIUS page is set to MSCHAPv1 or MSCHAPv2. Length = 8 bytes. MSCHAP-Response (string): As defined in RFC 2433. Only present when the authentication scheme on the Security >...

  • Page 183: Managing Certificates

    Managing Certificates Managing Certificates Digital certificates are electronic documents that are used to validate the end parties or entities involved in data transfer. These certificates are normally associated with X.509 public key certificates and are used to bind a public key to a recognized party for a specific time period. Various features on the AP make use of X.509 certificates for authentication and/or encryption of data exchanged with peers.

  • Page 184: Installing A New Ca Certificate

    Chapter 9 - Security 9.2.1.2 Current Usage Lists the services that are currently using this certificate. 9.2.1.3 Indicates if a certificate revocation list is bound to the certificate. An X.509 certificate revocation list is a document produced by a certificate authority (CA) that provides a list of serial numbers of certificate that have been signed by the CA but that should be rejected.

  • Page 185: Default Ca Certificates

    Managing Certificates Content and file format Items carried in the file Description X.509 certificate in One or more X.509 certificate Popular format in the Unix world. X.509 DER PEM file certificate is base64 encoded and placed between "-----BEGIN CERTIFICATE-----" "-----END CERTIFICATE-----" lines.
  • Page 186 Select Install to install the certificate. 9.2.4.3 Default Installed Private Key/public Key Certificate Chains The following private key/public key certificate chains are installed by default: wireless.alvarion.com: Default certificate used by the management tool and SOAP server. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 187: Certificate Usage

    Managing Certificates NOTE When a web browser connects to the AP using SSL, the AP sends only its own SSL certificate to the browser. This means that if the certificate has been signed by an intermediate certificate authority, and if the web browser only knows about the root certificate authority that signed the public key certificate of the intermediate certificate authority, the web browser does not get the whole certificate chain it needs to validate the identity of the AP.

  • Page 188: About Certificate Warnings

    Chapter 9 - Security 9.2.5.4 Changing the Certificate Assigned to a Service Select the service name to open the Certificate details page. For example, if you select Web management tool, you will see: Figure 9-5: Changing the Certificate Assigned to a Service Under Authentication to the peer, select a new Local certificate and then select Save.
  • Page 189 Managing Certificates Figure 9-6: Certificate Warnings BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 191 Chapter 10 - Local Mesh In This Chapter: “Key Concepts” on page 170 “Local Mesh Terminology” on page 171 “Local Mesh Profiles” on page 175 “Configuration Considerations” on page 184 “Quality of Service” on page 185 “Configuration Summary” on page 186 “How to Configure Local Mesh in Controlled Mode”...

  • Page 192: Chapter 10 - Local Mesh

    Chapter 10 - Local Mesh 10.1 Key Concepts 10.1.1 New in this Release In previous releases, the local mesh feature was known as DWDS (dynamic wireless distribution system). 10.1.2 Benefits The local mesh feature replaces the need for Ethernet cabling between APs, enabling expanded Wi-Fi coverage through the use of wireless bridges to transport network traffic in hard-to-wire or outdoor areas.

  • Page 193: Local Mesh Terminology

    Local Mesh Terminology 10.2 Local Mesh Terminology 10.2.1 Static Local Mesh Links The following illustration and table define terms that are used in this guide when discussing the static local mesh feature. Figure 10-1: Static Local Mesh Links Term Definition Local The AP that you are currently configuring to support a static link.
  • Page 194 Chapter 10 - Local Mesh Figure 10-2: Dynamic Local Mesh Links Term Definition Node A AP that is configured to support local mesh connections. Root node The root node is configured in Master mode and provides access to the ground network. Alternate master node A node that is configured in Alternate master mode which enables it to make upstream and downstream connections.
  • Page 195 Local Mesh Terminology 10.2.2.1 Operational Modes Three different roles can be assigned to a local mesh node: Master, Alternate Master, or Slave. Each role governs how AP upstream and downstream links are established by the node. Master: Root node that provides the upstream link to the ground network that the other nodes want to reach.
  • Page 196 Chapter 10 - Local Mesh Configure the radios for automatic channel selection. In this case the master selects the least noisy channel. Slaves and alternate masters scan channels until they find the master, then tune to the master’s channel and link with the master. BreezeMAX Wi²...

  • Page 197: Local Mesh Profiles

    Local Mesh Profiles 10.3 Local Mesh Profiles A local mesh profile defines the characteristics for the type of links that can be established with other nodes. Each node supports up to six profiles, each of which can be either static or dynamic. If a profile defines a static local mesh link, the profile can only be used to connect with another node with a matching profile that has matching settings.

  • Page 198: Configuring A Local Mesh Profile

    Chapter 10 - Local Mesh Figure 10-3: Local Mesh Profiles To configure a profile, select its name in the list. Or to add a profile, select Add New Profile. 10.3.1 Configuring a Local Mesh Profile To configure a profile, click its name in the list. The Local mesh profile page opens. BreezeMAX Wi²...
  • Page 199 Local Mesh Profiles Figure 10-4: Configuring a Local Mesh Profile 10.3.1.1 Settings 10.3.1.1.1 Enabled/Disabled Specify if the profile is enabled or disabled. The profile is only active when enabled. 10.3.1.1.2 Name Name of the profile. 10.3.1.1.3 Select the interface to use for this link. A local mesh typically uses radios only.
  • Page 200 Chapter 10 - Local Mesh 10.3.1.1.4 Speed (Static links only) Sets the speed the link will operate at. For load balancing you may want to limit the speed of a link when connecting to multiple destinations. 10.3.1.2 Security Enable this option to secure data transmitted on the wireless link. The APs on both sides of the wireless link must be configured with the same security options.
  • Page 201 Local Mesh Profiles 10.3.1.3.3 Dynamic Use this option to create dynamic local mesh installations. 10.3.1.3.3.1 Mode Three different roles can be assigned to a node: master, alternate master, or slave. The role assigned to a node, governs how the node will establish upstream or downstream links with its peers. The available configuration settings change depending on the role that is selected.
  • Page 202 Chapter 10 - Local Mesh Figure 10-6: Dynamic: Slave Mode Alternate Master: An alternate master node must first establish an upstream link with a master or alternate master node before it can establish downstream link with an alternate master or slave node. BreezeMAX Wi²...
  • Page 203 Local Mesh Profiles Figure 10-7: Dynamic: Alternate Master Mode 10.3.1.3.3.2 Mesh ID Unique number that identifies a series of nodes that can connect together to form a local mesh network. 10.3.1.3.3.3 Minimum SNR (Alternate master or slave nodes) This node will only connect with other nodes whose SNR is above this setting (in dB). 10.3.1.3.3.4 SNR Cost Per Hop (Alternate master or slave nodes) This value is an estimate of the cost of a hop in terms of SNR.
  • Page 204 Chapter 10 - Local Mesh The maximum number of upstream and downstream links that this node can support. 10.3.1.3.3.7 Initial Discovery Time (Alternate master or slave nodes) Amount of time that will be taken to discover the best available master node. The goal of this setting is to delay discovery until all the nodes in the surrounding area have had time to startup, making the identification of the best master more accurate.
  • Page 205 Local Mesh Profiles When this option is enabled, the AP will first try re-connecting to the master (alt-master) it was connected to before rebooting (or disabling/re-enabling the profile). This re-connection happens during the initial discovery time. After that period, the regular best master identification mechanism will take over.

  • Page 206: Configuration Considerations

    Chapter 10 - Local Mesh 10.4 Configuration Considerations 10.4.1 Simultaneous AP and Local Mesh A radio can be configured to simultaneously support wireless clients and the creation of one or more local meshes. Although this offers flexibility it does have several limitations as follows: It reduces overall throughput since the total available bandwidth is shared between the local meshes and wireless users.

  • Page 207: Quality Of Service

    Quality of Service 10.5 Quality of Service The local mesh feature enables you to define a quality of service (QoS) setting that will govern how traffic is sent on all wireless links. The QoS setting on all nodes in a local mesh must be the same. NOTE When traffic is forwarded onto a local mesh link from a Virtual Network, the QoS settings on the Virtual Network take priority.

  • Page 208: Configuration Summary

    Chapter 10 - Local Mesh 10.6 Configuration Summary You can configure a total of six local mesh profiles on each node. Each dynamic local mesh profile (master or alternate master) can be used to establish up to nine links with other nodes. The same security settings must be used on all nodes in the same mesh.

  • Page 209: How To Configure Local Mesh In Controlled Mode

    How to Configure Local Mesh in Controlled Mode 10.7 How to Configure Local Mesh in Controlled Mode The configuration of local mesh in controlled mode comprises the following steps: Setting a Master Profile Setting the Master AP Setting the SLAVE AP Adding the Slave AP in a Group on the Controller 10.7.1 Setting a Master Profile...
  • Page 210 Chapter 10 - Local Mesh Access the created group and click on the "Configuration" tab. The "Single Radio" page is displayed. Uncheck the "Inherited" check box Configure the Radio page as follows: Figure 10-9: Single Radio Page Save your changes Click on the "Local Mesh"...
  • Page 211 How to Configure Local Mesh in Controlled Mode Figure 10-10: Local Mesh Profile Save your configuration Click on the "VSC" link in the Navigation tree bar Reconfigure the default VSC OR Click on the "Add a new VSC" Button, and configure a VSC as follows: BreezeMAX Wi²...
  • Page 212 Chapter 10 - Local Mesh Figure 10-11: VSC Profile Save your configuration Access the Group created in Section 10.7.1 step1 above and click on the "VSC Bindings" tab. Click on the "Add New Binding" button Select the created VSC name in the "VSC Profile" menu as follows: BreezeMAX Wi²...

  • Page 213: Setting The Master Ap

    Save your configuration 10.7.2 Setting the Master AP Power UP an AP in Autonomous mode (Alvarion Default Mode) Login to the AP's web tool Click on "Maintenance > System" Click on the "Switch to Controlled Mode" button to switch the MASTER AP into Controlled mode as shown below: BreezeMAX Wi²...

  • Page 214: Setting The Slave Ap

    Now you will have an active VSC bounded to the MASTER 10.7.3 Setting the SLAVE AP Power UP another AP in Autonomous mode (Alvarion Default Mode) Login to the AP's web tool Click on "Maintenance > System" Click on the "Provisioning" button at the bottom on this page to start provisioning the SLAVE...
  • Page 215 How to Configure Local Mesh in Controlled Mode Figure 10-14: Provisioning the Slave AP Starting with the "Connectivity" sub-page, configure as follows: BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 216 Chapter 10 - Local Mesh Figure 10-15: Connectivity Page Save your configuration Click on the Discovery sub-tab (within the provisioning page), and configure as follows: BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 217: Adding The Slave Ap In A Group On The Controller

    How to Configure Local Mesh in Controlled Mode Figure 10-16: Discovery Page NOTE That the IP address showing in the "Discover using IP address" list should be your controller IP address Save your Configuration. Restart the AP by clicking on the restart button on this page. 10.7.4 Adding the Slave AP in a Group on the Controller The provisioned SLAVE AP should discover the Controller over the Mesh Link.
  • Page 218 Chapter 10 - Local Mesh Access the created group and click on the "Configuration" tab. The "Single Radio" page is displayed. Uncheck the "Inherited" check box Configure the Radio page as in Figure 10-9. Save your Configuration Click on the "Local Mesh" tab located also under "Configuration" Select "Local Mesh Provisioning Profile"...
  • Page 219 How to Configure Local Mesh in Controlled Mode Figure 10-18: Adding a New VSC Save your configuration. Access the Group created in Section 10.7.4 step 2 above and click on the "VSC Bindings" tab. Click on the "Add New Binding" button Select the created SLAVE VSC name in the "VSC Profile"...

  • Page 220: Operation Verification

    Chapter 10 - Local Mesh Figure 10-19: VSC Bindings - Slave Save your configuration. Drag and drop this AP from the DEFAULT GROUP into the created group in Section 10.7.4 step 1. The AP should now synch into the created group restoring all the configuration done in STEPS (3 - 5) You now have an Active VSC on the SLAVE AP and a Local Mesh Link between the MASTER and the SLAVE.
  • Page 221 How to Configure Local Mesh in Controlled Mode Figure 10-20: Link Verification BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 222: Sample Local Mesh Deployments

    Chapter 10 - Local Mesh 10.8 Sample Local Mesh Deployments 10.8.1 Dynamic Networks In this scenario, a service controller is deployed with several APs to provide wireless coverage of a large area. Instead of using a backbone LAN, wireless links are used to interconnect all APs. AP 1 is the master.
  • Page 223 Sample Local Mesh Deployments BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 225: Chapter 11 - Maintenance

    Chapter 11 - Maintenance In This Chapter: “Config File Management” on page 204 “Firmware Updates” on page 209 “Licenses” on page 212...

  • Page 226: Config File Management

    Chapter 11 - Maintenance 11.1 Config File Management The configuration file contains all the settings that customize the operation of the AP. You can save and restore the configuration file manually, automatically, or with a tool like cURL. Select Maintenance > Config file management. Figure 11-1: Config File Management 11.1.1 Manual Configuration File Management...
  • Page 227 Config File Management If you specify a Password, the configuration file is protected by encrypting sensitive fields (example, passwords, secrets, and certificates) with a key based on the password. See also Restore Configuration below. NOTE Even without a password, the certificates are still encrypted but with a key that is identical on all devices.

  • Page 228: Scheduled Operations

    Chapter 11 - Maintenance 11.1.2 Scheduled Operations The Scheduled operations group box enables you to schedule unattended backups or restorations of the AP’s configuration file. See also “Scheduled Update” on page 210. Use the following steps to schedule a backup or restoration of the AP’s configuration file. Select Maintenance >...
  • Page 229 CA certificates are located on your computer. You must also specify the host name wireless.alvarion.com instead of using an IP address. The host name must be resolved either by using a DNS server or using the hosts file on your computer.
  • Page 230 Chapter 11 - Maintenance curl -s -k --dump-header cookie.txt "https://24.28.15.22/goform/Logout" -d username=admin -d pw=admin Prepare the configuration file for download. curl -s -k --cookie cookie.txt "https://24.28.15.22/goform/FormBackupConfig" -d backup=Backup Download the configuration file. curl -s -k --cookie cookie.txt "https://24.28.15.22/download/new.cfg" -o new.cfg Log out.

  • Page 231: Firmware Updates

    Firmware Updates 11.2 Firmware Updates CAUTION Be sure to check for update issues in the new firmware Release Notes. CAUTION When using a service controller in conjunction with one or more autonomous APs, you must (1) always upgrade the service controller before upgrading the APs, and (2) never load an earlier firmware version on the APs than is installed on the service controller.

  • Page 232: Immediate Update

    Chapter 11 - Maintenance NOTE Configuration settings are preserved during firmware upgrades. 11.2.1 Immediate Update To update the AP firmware now, Browse to the firmware file (extension .cim) and then select Install. NOTE At the end of the firmware-update process, the AP automatically restarts, causing all users to be disconnected.

  • Page 233: Updating Firmware With Curl

    Firmware Updates 11.2.3 Updating Firmware with cURL NOTE This is an advanced topic. It is recommended that you upgrade firmware as described in the immediately-previous sections Immediate Update Scheduled Update. You can perform firmware-update-related tasks using the free tool cURL (http://curl.haxx.se/), version 7.1.0 or higher.

  • Page 234: Licenses

    Chapter 11 - Maintenance 11.3 Licenses Applicable only to the Wi² AP. On some APs, certain features are activated by installation of optional licenses. Such features are only enabled when a valid license is installed. If you purchased an optional-feature license at original AP purchase time, the license is factory-installed.

  • Page 235: Factory Reset Considerations

    Licenses NOTE Before removing licenses, be sure to first backup the license file to your hard drive, using the Backup button. To order a new feature license, provide all information in the License ordering information box to your vendor. To install a license file, Browse to the file and then select Install License. To backup all licenses into a single file, select Backup.
  • Page 236 Chapter 11 - Maintenance Figure 11-5: Installed Licenses BreezeMAX Wi² and BreezeACCESS Wi² System Manual...

  • Page 237: Appendix A - Troubleshooting

    Appendix A - Troubleshooting In This Chapter: This appendix provides a lists of things to check in case of problems before contacting local Technical Support.
  • Page 238 Appendix A -Troubleshooting Check the following before you contact local Technical Support. If wireless clients cannot access the network, check the following: Be sure the AP and the wireless clients are configured with the same Service Set ID (SSID). If authentication or encryption are enabled, ensure that the wireless clients are properly configured with the appropriate authentication or encryption keys.
  • Page 239 Appendix A -Troubleshooting Set the AP to its default configuration by pressing the reset button on the back panel for 5 seconds or more. Then use the default user name admin and a null password to access the management interface. If all other recovery measure fail, and the AP is still not functioning properly, take one of the following steps: Reset the AP’s hardware using the console interface, web interface, or through a power...

  • Page 241: Appendix B - Resetting To Factory Defaults

    Appendix B - Resetting to Factory Defaults In This Appendix: “Introduction” on page 220 “Using the Reset Switch” on page 220 “Using the Management Tool” on page 220 “Using Special Commands” on page 222...

  • Page 242: Introduction

    Appendix B - Resetting to Factory Defaults Introduction To force an AP into its factory default state, follow the procedures in this section. CAUTION Resetting an AP to factory defaults deletes all configuration settings, resets the administrator username and password to admin, enables the DHCP client on the LAN port(s), sets the IP address of the port(s) to 192.168.1.1.
  • Page 243 Introduction Figure B-1: Config File Management To reset the AP to factory defaults and FORCE it back into its default controlled mode, follow this procedure: Select Maintenance > System. Under Factory reset, click Reset to Factory Default. BreezeMAX Wi² and BreezeACCESS Wi² System Manual...
  • Page 244 This technique forces the AP into its factory default state including switching the AP back into controlled mode. In addition to the AP, you need the following items: The file Wi2Remote.bat available for download from the Alvarion extranet at https://extranet.alvarion.com. A crossover Ethernet cable...
  • Page 245 Introduction The file Wi2Remote.bat runs in a Windows command-line session. It uses this syntax: Remote [factory | restart | cimfile] Specify Remote factory to factory reset the unit. Specify Remote restart to perform a simple restart (same as powering off and back on). The cimfile option is used only by technical support personnel for loading special firmware files.
  • Page 247 Glossary 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 or better UTP cable. 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better UTP cable 802.1p IEEE 802.1p is a standard that provides traffic class expediting and dynamic multicast filtering Advanced Encryption Standard: An encryption algorithm that implements symmetric key cryptography.
  • Page 248 Glossary Certificate Revocation List CSMA/CA Carrier Sense Multiple Access with Collision Avoidance Clear to Send cURL cURL automates unattended file transfers or sequences of operations DHCP Dynamic Host Configuration Protocol: Provides a framework for passing configuration information to hosts on a TCP/IP network. DHCP is based on the Bootstrap Protocol (BOOTP), adding the capability of automatic allocation of reusable network addresses and additional configuration options.
  • Page 249 Glossary IEEE 802.1X Port Authentication controls access to the switch ports by requiring users to first enter a user ID and password for authentication. Local Area Network: A group of interconnected computer and support devices. Media Access Control: The lower of the two sub-layers of the data link layer defined by the IEEE.
  • Page 250 Glossary PKCS Public-Key Cryptography Standards Power over Ethernet: A specification for providing both power and data to low-power network devices using a single Category 5 Ethernet cable. PoE provides greater flexibility in the locating of Wi²s and network devices, and significantly decreased installation costs.
  • Page 251 Glossary Network protocol that allows data to be exchanged over a secure channel between two computers Secure Sockets Layer SSID Service Set Identifier: An identifier that is attached to packets sent over the wireless LAN and functions as a password for joining a particular radio cell; i.e., Basic Service Set (BSS).
  • Page 252 Glossary Wired Equivalent Privacy: WEP is based on the use of security keys and the popular RC4 encryption algorithm. Wireless devices without a valid WEP key will be excluded from network traffic. WiFi Protected Access: WPA employs 802.1X as its basic framework for user authentication and dynamic key management to provide an enhanced security solution for 802.11 wireless networks.

This manual is also suitable for:

Breezemax wi2

Table of Contents