Gateway 7001 Series User Manual

Gateway user guide 7001 series access point
Table of Contents

Advertisement

Quick Links

User Guide

Gateway 7001 Series Access Point

Advertisement

Table of Contents
loading

Summary of Contents for Gateway 7001 Series

  • Page 1: User Guide

    User Guide Gateway 7001 Series Access Point...
  • Page 2: Table Of Contents

    Gateway 7001 Series self-managed AP ........
  • Page 3 ..........67 www.gateway.com...
  • Page 4 ......... 157 ........171 www.gateway.com...
  • Page 5 ..............209 www.gateway.com...
  • Page 6: Introduction

    Chapter 1 Introduction Features and benefits ■ Networking ■ Maintainability ■ Default settings and supported ■ administrator/client platforms...
  • Page 7: Overview Of The Gateway 7001 Series Of Self-Managed Aps

    Series enables zero-administration wireless local area network (WLAN) deployment while providing state-of-the-art wireless networking features. The Gateway 7001 AP is available as a single band access point (Gateway 7001 802.11 G Wireless Access Point) and a dual band access point (Gateway 7001 802.11 A+G Wireless Access Point).
  • Page 8: Features And Benefits

    ■ Weak IV avoidance ■ Wireless Equivalent Privacy (WEP) ■ Wi-Fi Protected Access (WPA) ■ Advanced Encryption Standard (AES) ■ User-based access control with local authentication server ■ Local user database and user lifecycle management ■ MAC address filtering www.gateway.com...
  • Page 9 Dynamic Host Configuration Protocol (DHCP) support for dynamically assigning network configuration information to systems on the LAN Maintainability ■ Status, monitoring, and tracking views of the network including session monitoring, client associations, transmit/receive statistics, and event log ■ Reset configuration option ■ Firmware upgrade www.gateway.com...
  • Page 10: Default Settings And Supported Administrator/Client Platforms

    Understanding of DHCP IP addressing for access points and wireless clients Gateway 7001 Series self-managed AP The Gateway 7001 Series self-managed AP is a wireless communications hub for devices on your network. It provides continuous, high-speed access between your wireless and Ethernet devices in IEEE 802.11a, 802.11b, 802.11g, or 802.11a Turbo modes (depending...
  • Page 11 Subnet Mask Radio Default Settings admin “Gateway 7001 AP Network” for the Internal interface “Gateway 7001 AP Guest Network” for the Guest interface None 192.168.1.1 The default IP address is used if you do not use a Dynamic Host Configuration Protocol (DHCP) server.
  • Page 12 IEEE 802.11b: 2, 1 Atheros Turbo 5 GHz: 48, 24, 12 Broadcast SSID Allow Security Mode None (plain text) Authentication Type None www.gateway.com Related Information “Configuring radio settings” on page 104 “Configuring radio settings” on page 104 “Configuring radio settings” on page 104 “Configuring radio...
  • Page 13 WDS Settings What the access point does not provide The Gateway 7001 Series self-managed AP is not designed to function as a gateway to the Internet. To connect your LAN to other LANs or the Internet, you need a gateway device, such as a router or a switch.
  • Page 14: Administrator's Computer

    Administrator’s computer Configuration and administration of the Gateway 7001 Series self-managed AP is accomplished with the KickStart utility (which you run from the CD) and through a Web-based user interface (UI). The following table describes the minimum requirements for the administrator’s computer.
  • Page 15 You can run the KickStart CD on any laptop or computer that is connected to the access point (through Wired or Wireless connection). It detects Gateway 7001 Series self-managed APs on the network. The wizard steps you through initial configuration...
  • Page 16: Wireless Client Computers

    Wireless client computers The Gateway 7001 Series self-managed AP provides wireless access to any client with a correctly configured Wi-Fi client adapter for the 802.11 mode in which the access point is running. Multiple client operating systems are supported. Clients can be laptops or desktops, personal digital assistants (PDAs), or any other hand-held, portable or stationary device equipped with a Wi-Fi adapter and supporting drivers.
  • Page 17: Understanding Dynamic And Static Ip Addressing

    DHCP servers must be running on each network. A DHCP server is a requirement for the Guest network. When you run KickStart, it discovers the Gateway 7001 Series self-managed APs on the network and lists their IP addresses and MAC addresses. KickStart also provides a link to the administration Web pages of each access point using the IP address in the URL.
  • Page 18: Static Ip Addressing

    5.) If no DHCP server is found on the network, the AP retains this static IP address at first-time startup. After AP startup, you have the option of specifying a static IP addressing policy on Gateway 7001 Series self-managed APs and assigning static IP addresses to APs on the internal network through the access point Administration Web pages.
  • Page 19 www.gateway.com...
  • Page 20: Quick Setup

    Chapter 2 Unpacking the access point ■ Connecting the access point to network ■ and power Turning on the access point ■ Running KickStart to find access points ■ and assign IP addresses Configuring basic settings and starting ■ the wireless network Quick Setup...
  • Page 21: Setting Up The Access Point

    Setting up the access point Setting up and deploying one or more Gateway 7001 Series self-managed APs is in effect creating and launching a wireless network. The KickStart Wizard and corresponding Basic Settings Administration Web page simplify this process. Here is a step-by-step guide to setting up your Gateway 7001 Series self-managed APs and the resulting wireless network.
  • Page 22 The access point boots from FlashROM that contains firmware with the configurable, runtime features summarized in “Overview of the Gateway 7001 Series of self-managed APs” on page As new features and enhancements become available, you can upgrade the firmware to add new functionality and performance improvements to the access points that make up your wireless network.
  • Page 23: Connecting The Access Point To Network And Power

    Connect one end of an Ethernet cable to the network port on the access point and the other end of the cable to the Ethernet port on your computer. Access point Admin computer to hub Administrator computer Administrator computer (This computer must have an IP address on the same subnet as the access point.) www.gateway.com...
  • Page 24: Setting Up Connections For A Guest Network

    Setting up connections for a guest network The Gateway 7001 Series self-managed AP offers an out-of-the-box Guest Interface that lets you configure an access point for controlled guest access to the network. The same access point can function as a bridge for two different wireless networks: A secure Internal LAN and a public Guest network.
  • Page 25: Turning On The Access Point

    Turning on the access point Plug in the AC power adapter and plug the power adapter into the Gateway 7001 Series self-managed AP, then wait for its initialization process to complete. Running KickStart to find access points and assign IP...
  • Page 26 Important Keep in mind that KickStart (and the other Gateway administration tools) recognizes and configures only Gateway 7001 Series self-managed APs. KickStart will not find or configure other kinds of access points or other devices. Run Kickstart only in the subnet of the “Internal” network (SSID).
  • Page 27 Insert the KickStart Wizard CD into the CD drive on your computer. If the KickStart window is not displayed automatically, navigate to the CD drive and double-click the Kickstart executable file to activate the KickStart utility on the CD. The KickStart Welcome screen is displayed. www.gateway.com...
  • Page 28 Review the list of access points found. KickStart will detect the IP addresses of Gateway 7001 Series self-managed APs. Access points are listed with their locations, Media Access Control (MAC) addresses, and IP Addresses. If you are installing the first access point on a single-access-point network, only one entry will be displayed on this screen.
  • Page 29: Logging On To The Administration Web Pages

    URL (http://IPAddressOfAccessPoint). Logging on to the administration Web pages When you follow the link from KickStart to the Gateway 7001 Series self-managed AP administration Web pages, you are prompted for a user name and password. The defaults for user name and password are as follows.
  • Page 30 Type the user name and password and click www.gateway.com...
  • Page 31 Viewing basic settings for Gateway 7001 Series self-managed access points When you log in, the Basic Settings page for Gateway 7001 Series self-managed AP administration is displayed. These are global settings for all access points that are members of the cluster and, if automatic configuration is specified, for any new access points that are added later.
  • Page 32: Configuring Basic Settings And Starting The Wireless Network

    “Reviewing and describing the access point” on page “Setting configuration policy for new access points” on to activate the wireless network with these Update “Updating basic settings” on page “Default settings and supported administrator/client www.gateway.com...
  • Page 33: What's Next

    Connect your computer to the LAN either through Ethernet cable or wireless client card. Test LAN connectivity with wireless clients Test the Gateway 7001 Series self-managed AP by trying to detect it and associate with it from some wireless client devices. (See PreLaunch Checklist: Default Settings and Supported Administrator/Client Platforms for information on requirements for these clients.)
  • Page 34: Configuring Basic Network Settings

    Chapter 3 Configuring Basic Network Navigating to basic settings ■ Reviewing and describing the access ■ point Setting configuration policy for new ■ access points Understanding basic settings for a ■ standalone access point Understanding indicator icons ■ Settings...
  • Page 35: Navigating To Basic Settings

    If you use Kickstart to link to the Administration Web pages, the Basic Settings page is displayed by default. Fill in the boxes on the Basic Settings page as described in the following section. , then click Network www.gateway.com Basic Settings...
  • Page 36: Reviewing And Describing The Access Point

    AP, see the Status > Interfaces tab. Version information about the firmware currently installed on the access point. As new versions of the Gateway 7001 Series self-managed AP firmware become available, you can upgrade the firmware on your access points to take advantages of new features and enhancements.
  • Page 37: Providing Administrator Password And Wireless Network Name

    Providing administrator password and wireless network name Caution The Gateway 7001 Series self-managed AP is not designed for multiple, simultaneous configuration changes. If you have a network that includes multiple access points, and more than one administrator is logged on to the Administration Web pages and making changes...
  • Page 38 Note: If you are connected as a wireless client to the same AP that you are administering, resetting the SSID will cause you to lose connectivity to the AP. You will need to reconnect to the new SSID after you save this new setting. www.gateway.com...
  • Page 39: Setting Configuration Policy For New Access Points

    Setting configuration policy for new access points www.gateway.com...
  • Page 40 APs will automatically join the cluster. Standalone APs, however, will stay in standalone mode until you explicitly add them to the cluster. For information on how to add standalone APs to the cluster, see page www.gateway.com “Adding an access point to a cluster” on...
  • Page 41: Updating Basic Settings

    Updating basic settings When you have reviewed the new configuration, click deploy the access points as a wireless network. Update www.gateway.com to apply the settings and...
  • Page 42: Understanding Basic Settings For A Standalone Access Point

    Basic Settings page because Cluster settings do not apply to standalone APs. For more information, see to a cluster” on page tabs on the Administration pages for an access point in Cluster “Standalone mode” on page 44 www.gateway.com “Adding an access point...
  • Page 43: Understanding Indicator Icons

    “Clustered” or “Not Clustered” (that is, standalone). The number of access points available for service on this network is indicated by the “Access Points” icon. Then number of client user accounts created and enabled on this network is indicated by the “User Accounts” icon. www.gateway.com...
  • Page 44: Managing Access Points And Clusters

    Chapter 4 Managing Access Points and Navigating to access points management ■ Understanding clustering and access ■ points Modifying the location description ■ Adding and removing an access point ■ Navigating to an AP by using its IP ■ address in a URL Clusters...
  • Page 45: Introduction

    Introduction The Gateway 7001 Series self-managed APs show current basic configuration settings for clustered access points (location, IP address, MAC address, status, and availability) and provide a way of navigating to the full configuration for specific APs if they are cluster members.
  • Page 46: Navigating To Access Points Management

    Navigating to access points management To view or edit information on access points in a cluster, click Cluster > Access Points the Administration Web page. The Manage access points in the cluster screen opens. www.gateway.com...
  • Page 47: Understanding Clustering

    Understanding clustering A key feature of the Gateway 7001 Series self-managed AP is the ability to form a dynamic, configuration-aware group (called a cluster) with other Gateway access points in a network in the same subnet. Access points can participate in a peer-to-peer cluster which makes it easier for you to deploy, administer, and secure your wireless network.
  • Page 48: Which Settings Are Shared In The Cluster Configuration And Which Are Not

    Having a mix of APs on the network does not adversely affect Gateway 7001 Series self-managed AP clustering in any way, however it is helpful to understand the clustering behavior for administration purposes: ■ Gateway 7001 Series self-managed APs of the same model will form a cluster. The dual-band APs will form one cluster and the single-band APs will form another cluster.
  • Page 49: Cluster Mode

    Standalone mode Gateway 7001 Series self-managed APs can be configured in standalone mode. In standalone mode, an access point is not a member of the cluster and does not share the cluster configuration, but rather requires manual configuration that is not shared with other access points.
  • Page 50: Cluster Formation

    52.) Cluster formation A cluster is formed when the first Gateway 7001 Series self-managed AP is configured. (See “Quick Setup” on page 15 If a cluster configuration policy is in place when a new access point is deployed, it attempts to rendezvous with an existing cluster.
  • Page 51: Cluster Recovery

    172, or an access point cannot join or be Advanced > Reboot page for cluster members.) Cluster > Access Points Advanced > Reset Configuration page for any cluster member.) Cluster > Access Points www.gateway.com and click . (IP Reboot , and click Reset...
  • Page 52 Reset each access point by going to the Administration Web pages of the access point you want to reset by entering its URL into the address bar of your Web browser: http://IPAddressOfAccessPoint/ Where IPAddres0sOfAccessPoint is the IP address of the access point you want to reset. www.gateway.com...
  • Page 53 Repeat steps 4 through 6 for every access point in the cluster. Caution Do not proceed to the next step until you have stopped clustering on all of access points in the pre-existing cluster. Advanced > Reset Configuration www.gateway.com to open...
  • Page 54 Review all configuration settings and make modifications as needed. Pay special attention to the security settings because after a reset, access points run without any security in place. Cluster > Access Points www.gateway.com on the Administration Web...
  • Page 55: Understanding Access Point Settings

    This is useful for viewing data on a specific access point to make sure a cluster member is picking up cluster configuration changes, to configure advanced settings on a particular access point, or to switch a standalone access point to cluster mode. www.gateway.com...
  • Page 56: Working With Access Points In A Cluster

    Click Remove from Cluster The change will be reflected under Status for that access point and it will now show as standalone (instead of cluster). on the Administration Web page. on the Administration Web page. The Manage access points www.gateway.com...
  • Page 57: Adding An Access Point To A Cluster

    . The access point is now a cluster member. Its Status (Mode) on the Join Cluster Cluster > Access Points tab in the Administration pages for the standalone access tab for a standalone access point indicates that the current mode tab now indicates cluster www.gateway.com “Navigating 53.) instead of standalone...
  • Page 58: Navigating To Information For A Specific Ap And Managing Standalone Aps

    Navigating to information for a specific AP and managing standalone APs In general, Gateway 7001 Series self-managed APs are designed for central management of clustered access points. For access points in a cluster, all access points in the cluster reflect the same configuration. In this case, it does not matter which access point you actually connect to for administration.
  • Page 59 www.gateway.com...
  • Page 60: Managing User Accounts

    Chapter 5 Managing User Accounts Navigating to user management for ■ clustered access points Viewing and changing user accounts ■ Adding a user ■ Editing a user accountt ■ Enabling and disabling user accounts ■ Removing a user ■...
  • Page 61: Introduction

    You have the option of using either the internal RADIUS server embedded in the Gateway 7001 Series self-managed AP or an external RADIUS server that you provide. If you use the Gateway 7001 Series self-managed AP embedded RADIUS server, use this Administration Web page on the access point to set up and manage user accounts.
  • Page 62: Navigating To User Management For Clustered Access Points

    Navigating to user management for clustered access points To set up or modify user accounts, click Web page. The Manage user accounts screen opens. Cluster > User Management www.gateway.com on the Administration...
  • Page 63: Viewing And Changing User Accounts

    There is a 256 character limit on real names. Specify a password for this user. Passwords are alphanumeric strings of up to 256 characters. Do not use special characters. Add Account www.gateway.com , provide information in the to add the account.
  • Page 64: Editing A User Account

    On the User Management Web page, under User Accounts, click the box next to the user name, then click Enable A user with an account that is enabled can log on to the wireless access points in your network as a client. , or Edit Enable Disable www.gateway.com Remove...
  • Page 65 On the User Management Web page, under User Accounts, click the box next to the user name, then click Remove If you think you might want to add this user back in at a later date, you might consider disabling the user rather than removing the account altogether. www.gateway.com...
  • Page 66: Session Monitoring

    Chapter 6 Session Monitoring Navigating to session monitoring ■ Understanding session monitoring ■ information Viewing session information for access ■ points Sorting session information ■ Refreshing session information ■...
  • Page 67: Navigating To Session Monitoring

    Navigating to session monitoring To view session monitoring information, click Web page. The Monitor active client station sessions page opens. Cluster > Sessions www.gateway.com on the Administration...
  • Page 68: Understanding Session Monitoring Information

    This value should fall within the range of the advertised rate set for the IEEE 802.1x mode in use on the access point. For example, 6 to 54Mbps for 802.11a. address is a hardware address that uniquely identifies each node www.gateway.com...
  • Page 69 Indicates number of total packets received by the client during the current session. TxAve Indicates number of total packets transmitted to the client during this session. Error Rate Indicates the percentage of time frames are dropped during transmission on this access point. www.gateway.com...
  • Page 70: Viewing Session Information For Access Points

    You can set the time in seconds for this screen to automatically update with live information. You can also force an update of the information displayed by clicking Show all access points . The entries will be sorted by utilization Utilization www.gateway.com option at the Show only this access Refresh...
  • Page 71 www.gateway.com...
  • Page 72: Advanced Configuration

    Chapter 7 Advanced Configuration Configuring an Ethernet (wired) ■ interface Configuring a wireless interface ■ Configuring network security ■ Configuring radio settings ■...
  • Page 73: Configuring An Ethernet (Wired) Interface

    AP. For more information about which settings are shared by the cluster and which are not, see “Which settings are shared in the cluster configuration and which are not?” on page Ethernet www.gateway.com local area network...
  • Page 74: Navigating To Ethernet (Wired) Settings

    • This name can be up to 20 characters long. • Only letters, numbers and dashes are allowed. • The name must start with a letter and end with either a letter or a number. Advanced > Ethernet (Wired) Settings www.gateway.com on the...
  • Page 75: Enabling Or Disabling Guest Access

    Ethernet is the most common technology implementing a LAN. Wi-Fi (IEEE) is another popular LAN technology. The Gateway 7001 Series self-managed AP lets you configure two different LANs on the same access point: one for a secure internal LAN and another for a public guest network with no security and little or no access to internal resources.
  • Page 76: Configuring Internal Interface Ethernet Settings

    This will cause the access point to send DHCP requests with the VLAN tag. The switch and the DHCP server must support VLAN IEEE 802.1Q frames. The access point must be able to reach the DHCP server. Check with the Administrator regarding the VLAN and DHCP configurations. DHCP IEEE 802.1Q www.gateway.com server...
  • Page 77 Static IP indicates that all network settings are provided manually. You must provide the IP address for the Gateway 7001 Series self-managed Access Point, its subnet mask, the IP address of the default gateway, and the IP address of at least one DNS nameserver.
  • Page 78: Configuring Guest Interface Ethernet Settings

    VLAN ID If you choose to configure internal and guest networks by “VLANs”, this box will be enabled. Provide a number between 1 and 4094 for the guest VLAN. Updating settings To apply your changes, click Update www.gateway.com...
  • Page 79: Configuring A Wireless Interface

    Administration Web page, and update the boxes as described in the following section. Important The following illustration shows the Wireless settings page for the dual band AP (Gateway 7001 802.11 A+G Wireless Access Point). The Administration Web page for the single band AP (Gateway 7001 802.11 G Wireless Access Point) will look slightly different.
  • Page 80 Mode The Mode defines the Physical Layer (PHY) standard being used by the radio. The Gateway 7001 AP is available in a dual band and single band version. The configuration options for Mode differ depending on which product you have.
  • Page 81: Configuring Internal Lan Wireless Settings

    The MAC address shown for the internal access point is the BSSID for the internal interface. For the dual-band AP (Gateway 7001 802.11 A+G Wireless Access Point), two MAC addresses are shown: one for each radio on the internal interface.
  • Page 82: Updating Settings

    Network Name. There are no restrictions on the characters that may be used in an SSID. For the guest network, provide an SSID that is different from the internal SSID and easily identifiable as the guest network. Updating settings To apply your changes, click Update www.gateway.com...
  • Page 83: Enabling A Network Time Protocol Server

    To enable an NTP server, click The Modify how the access point discovers the time screen opens. Update the boxes as described in the following section. for more general information on NTP. Advanced > Time Protocol www.gateway.com on the Administration Web page.
  • Page 84: Enabling Or Disabling A Network Time Protocol (Ntp) Server

    You can specify the NTP server by host name or IP address, although using the IP address is not recommended as these can change more readily. Updating settings To apply your changes, click Update. http://www.ntp.org for more general information on NTP.) www.gateway.com...
  • Page 85: Configuring Network Security

    The Gateway 7001 Series self-managed AP provides a number of authentication and encryption schemes to make sure that your wireless infrastructure is accessed only by the intended users.
  • Page 86 ■ Encryption algorithm or formula the protocol uses to encode/decode the data Following is a list of the security modes available on the Gateway 7001 Series self-managed AP along with a description of the key management, authentication, and encryption algorithms used in each mode. We include some suggestions as to when one mode might be more appropriate than another.
  • Page 87 Static WEP uses a fixed key that is provided by the administrator. WEP keys are indexed in different slots (up to four on the Gateway 7001 Series self-managed AP). The client stations must have the same key indexed in the same slot to access data on the access point.
  • Page 88 Kerberos, and public key authentication with a RADIUS server. You have a choice of using the Gateway 7001 Series self-managed AP embedded RADIUS server or an external RADIUS server. The embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
  • Page 89 Encryption Standard (AES) www.gateway.com User Authentication Remote Authentication Dial-In User Service (RADIUS) You have a choice of using the Gateway 7001 Series self-managed AP embedded RADIUS server or an external RADIUS server. The embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
  • Page 90 There are different Unicast keys for each station. Recommendations WPA-PSK is not recommended for use with the Gateway 7001 Series self-managed AP when WPA with RADIUS is an option. We recommend that you use WPA with RADIUS mode instead, unless you have interoperability issues that prevent you from using this mode.
  • Page 91 This offers a very minimal level of protection on an otherwise exposed network (such as a guest network) where the priority is making it easy for clients to get a connection and where no sensitive information is available. (See also “Guest Network” on page 88.) www.gateway.com “WPA-PSK” on page...
  • Page 92: Navigating To Security Settings

    Security modes other than plain-text apply only to configuration of the internal network. On the guest network, you can use only plain-text mode. (For more information about guest networks, see Access” on page on the Administration Web page. The Advanced > Security “Setting up Guest 99.) www.gateway.com...
  • Page 93 On the guest network, you can use only plain-text mode. (For more information, see Plain-text Plain Text means any data transferred to and from the Gateway 7001 Series self-managed AP is not encrypted. There are no further options for plain-text mode.
  • Page 94 Client stations can use different keys to transmit data to the access point. (Or they can all use the same key, but this is less secure because it means one station can decrypt the data being sent by another.) If you selected “Static WEP” security mode, provide the following on the access point settings: www.gateway.com...
  • Page 95 Each client station must be configured to use one of these same WEP keys in the same slot as specified here on the AP. (See Static WEP” on page 91.) www.gateway.com “Rules to Remember for...
  • Page 96 On some wireless client software (like Funk Odyssey), you can configure multiple WEP keys and define a client station transfer key index, then set the stations to encrypt the data they transmit using different keys. This ensures that neighboring APs cannot decrypt each other’s transmissions. www.gateway.com...
  • Page 97 You must then set all client stations to use WEP and provide each client with one of the slot/key combinations you defined on the AP. For this example, we will set WEP Key index to on a Windows client. www.gateway.com...
  • Page 98 The access point requires a RADIUS server capable of EAP, such as the Microsoft Internet Authentication Server or the Gateway 7001 Series self-managed AP internal authentication server. To work with Windows clients, the authentication server must support Protected EAP (PEAP) and MSCHAP V2.
  • Page 99 When configuring IEEE 802.1x mode, you have a choice of whether to use the embedded RADIUS server or an external RADIUS server that you provide. The Gateway 7001 Series self-managed AP embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
  • Page 100 When configuring WPA with RADIUS mode, you have a choice of whether to use the embedded RADIUS server or an external RADIUS server that you provide. The Gateway 7001 Series self-managed AP embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
  • Page 101 Authentication Select one of the following from the list: Server Built-in - To use the authentication server provided with the Gateway 7001 ■ Series self-managed AP. If you choose this option, you do not have to provide the Radius IP and Radius Key (they are automatically provided).
  • Page 102 Type the Radius IP in the text box. The Radius IP is the IP address of the RADIUS server. The RADIUS IP address for the Gateway 7001 Series self-managed AP internal authentication server is 127.0.0.1. This will be provided automatically if you selected the built-in authentication server.
  • Page 103 Clients not configured to use WPA-PSK will not be able to associate with AP. The Pre-shared Key is the shared secret key for WPA-PSK. Type a string of at least 8 characters to a maximum of 63 characters. Updating settings To apply your changes, click Update www.gateway.com...
  • Page 104: Setting Up Guest Access

    You can configure a Gateway 7001 Series self-managed AP for the guest interface in one of two ways: ■...
  • Page 105: Configuring The Guest Interface

    VLANs as described in the sections in interface” on page “Configuring a physically separate guest network” on “Configuring a guest network on a virtual LAN” on “Configuring the guest welcome screen (captive portal)” on 19.) www.gateway.com “Which settings are “Setting up connections “Configuring an Ethernet (wired)
  • Page 106 “Configuring a wireless interface” on page “Which settings are shared in the cluster “Configuring an Ethernet (wired) interface” on page For Internal and Guest access, use two: VLANs “Configuring a wireless interface” on page www.gateway.com as described in 70.) as described in 70.)
  • Page 107: Using The Guest Network As A Client

    The guest network advertises itself through a guest SSID or some similar name, depending on how the guest SSID is specified in the administration Web pages for the guest interface. on the Administration Web page. The Modify guest welcome box, type the text message you would like guest clients www.gateway.com...
  • Page 108: Deployment Example

    “guest” network. Deployment example In the figure, the dotted red lines indicate dedicated guest connections. All access points and all connections (including guests) are administered from the same Gateway 7001 Series self-managed AP Administration Web pages. Internet DSL/T1 Firewall...
  • Page 109: Configuring Radio Settings

    (amount of time between AP beacon transmissions), transmit power, IEEE 802.11 mode in which the radio operates, and so on. The Gateway 7001 AP is available as a single-band access point (Gateway 7001 802.11G Wireless Access Point), or a dual-band access point (Gateway 7001 802.11A+G Wireless Access Point).
  • Page 110: Navigating To Radio Settings

    Navigating to radio settings To specify radio settings, click on the Administration Web page. The Advanced > Radio Modify radio settings screen opens. Update the boxes as described in the following section. www.gateway.com...
  • Page 111: Configuring Radio Settings

    The Gateway 7001 Series self-managed AP is available in a dual band and single band version. Single-Band AP: If you have the single band version of the Gateway 7001 AP, this box is not included on the Radio tab. Dual-Band AP: The dual band access point capable of broadcasting in two different IEEE 802.11 modes simultaneously.
  • Page 112 By default, fragmentation is off. We recommend not using fragmentation unless you suspect radio interference. The additional headers applied to each fragment increase the overhead on the network and can greatly reduce throughput. www.gateway.com...
  • Page 113 • Basic Rate Sets indicate rates that the access point will advertise to the network for the purposes of setting up communication with other APs and client stations on the network. It is generally more efficient to have an AP broadcast a subset of its supported rate sets. www.gateway.com...
  • Page 114 To apply your changes, click Update Important If you are using the dual band version of the Gateway 7001 Series self-managed AP, keep in mind that both Radio One and Radio Two are configured on this tab. The displayed settings apply to either Radio One or Radio Two, depending on which radio you choose in the Radio box (the first box on the tab).
  • Page 115: Controlling Access By Mac Address Filtering

    Navigating to MAC filtering settings To enable filtering by MAC address, click Web page. The Configure MAC filtering of client stations screen opens. Update the boxes as described in the following section. Advanced > MAC Filtering www.gateway.com on the Administration...
  • Page 116: Using Mac Address Filtering

    Using MAC address filtering This page lets you control access to Gateway 7001 Series self-managed AP based on Media Access Control (MAC) addresses. Based on how you set the filter, you can allow only client stations with a listed MAC address or prevent access to the stations listed.
  • Page 117: Configuring A Wireless Distribution System (Wds)

    Configuring a Wireless Distribution System (WDS) The Gateway 7001 Series self-managed AP lets you connect multiple access points using a Wireless Distribution System (WDS). WDS lets access points communicate with one another wirelessly in a standardized way. This capability is critical in providing a seamless experience for roaming clients and for managing multiple wireless networks.
  • Page 118 Suppose also that it is too difficult or too costly to wire the distant area with Ethernet cabling. You can solve this problem Client station WDS bridge “Conference Room” AP Wired (Ethernet) connection www.gateway.com Client station Wired (Ethernet) connection LAN segment 1...
  • Page 119 Another use for WDS bridging, the creation of backup links, is not supported in this release of the Gateway 7001 Series self-managed AP. The topic is included here to emphasize that you should not try to use WDS in this way. Backup links will result in unwanted, endless...
  • Page 120: Navigating To Wds Settings

    > Wireless Distribution System to other access points screen opens. Update the boxes as described in the following section. 80. This topic also covers use of plain text security mode for on the Administration Web page. The Configure WDS bridges www.gateway.com “Configuring Advanced...
  • Page 121 The following figure shows the WDS settings page for the dual band AP (Gateway 7001 802.11 A+G Wireless Access Point). The Administration Web page for the single band AP (Gateway 7001 802.11 G Wireless Access Point) will look slightly different. www.gateway.com...
  • Page 122: Configuring Wds Settings

    Keep these rules in mind when working with WDS on this release of the Gateway 7001 Series self-managed AP: Any two access points can be connected by only a single path - either a WDS bridge (wireless) or an Ethernet connection (wired), but not both.
  • Page 123 Radio The Gateway 7001 AP is available in a dual band and single band version. Single-Band AP: On the single band version of the Gateway® 7001 AP, this box is not included on the WDS tab. Dual-Band AP: For each WDS link on a dual-band AP, select Radio One or Radio Two. The rest of the settings for the link apply to the radio selected in this box.
  • Page 124 MyAP1 as a URL in the Web browser address bar in the following form: http://IPAddressOfAccessPoint where IPAddressOfAccessPoint is the address of MyAP1. Click on MyAP1 Administration Web pages. The MAC address for MyAP1 (the access point you are currently viewing) will show as the “Local Address” at the top of the page. www.gateway.com...
  • Page 125 MyAP1. (For our example, the Mode is 802.11b and the channel is 6.) • Be sure to save the settings by clicking Updating settings To apply your changes, click Update on the Administration Web page to verify or set the mode Update Update www.gateway.com...
  • Page 126: Configuring Security Settings On Wireless Clients

    Therefore, you must have a backup Ethernet (wired) connection. The following sections describe how to set up each of the supported security modes on wireless clients of a network served by the Gateway 7001 AP. ■ “Network infrastructure and choosing between built-in or external authentication server”...
  • Page 127: Network Infrastructure And Choosing Between Built-In Or External Authentication Server

    AP to use either IEEE 802.1x or WPA with RADIUS security mode. (The built-in authentication server uses EAP-PEAP authentication protocol.) ■ If the Gateway 7001 AP is set up to use IEEE 802.1x mode and the Built-in Authentication Server, then configure wireless clients as described in using EAP/PEAP” on page ■...
  • Page 128 “IEEE 802.1x client using EAP-TLS certificate” on page 133 ■ “WPA with RADIUS client using EAP-TLS certificate” on page 141 ■ “Configuring an external RADIUS server to recognize the Gateway 7001 AP” on page 146 ■ “Obtaining a TLS-EAP certificate for a client” on page 151 Details on how to configure an EAP-PEAP client with an external RADIUS server are not covered in this document.
  • Page 129 Note: If the AP is configured to prohibit broadcast of its network name, the name will not show on this list. In that case you would need to type in the exact network name to be able to connect to it. www.gateway.com...
  • Page 130: Configuring A Client To Access An Unsecure Network (Plain Text Mode)

    To configure the client to not use any security, open the client Network Properties dialog box and configure the following settings. Association Tab Network Authentication Data Encryption Set Network Authentication to “Open” Set Data Encryption to “Disabled” Open Disabled www.gateway.com...
  • Page 131: Configuring Static Wep Security On A Client

    If you configured the Gateway 7001 AP to use Static WEP security mode, as shown in the following illustration, you need to configure WEP security on each client.
  • Page 132 As an option you can select a different transfer key index (in the Key index list) to send data from the client back to the access point. Click to clear the The key is provided for me automatically Click to save your settings and close. Association www.gateway.com tab. The Association dialog in the Data check box.
  • Page 133 3, or 4 if you have all four WEP keys configured on the access point. Disable this option (click to clear the check box). Make sure that IEEE 802.1x authentication is disabled (box should be unchecked). (Setting the encryption mode to WEP should automatically disable authentication.) www.gateway.com...
  • Page 134: Configuring Ieee 802.1X Security On A Client

    Additionally, you may have an external RADIUS server that uses EAP/PEAP. If so, you will need to (1) add the Gateway 7001 AP to the list of RADIUS server clients, and (2) configure your IEEE 802.1x wireless clients to use PEAP.
  • Page 135 Network Authentication list, select Open list, then click to select the Click the Authentication Association The key is provided for me automatically tab. The Authentication dialog box opens. www.gateway.com tab. The Association dialog in the Data Encryption check box.
  • Page 136 Automatically use my Windows login name and password (and domain, check box, then click if any) Click on each dialog box to close and save your changes. check box, select www.gateway.com check box, select . The Protected EAP Properties Secured password . The...
  • Page 137 Built-in Authentication server on the AP. If you are setting up EAP/PEAP on a client of an AP that is using an external RADIUS server, you might certificate validation and choose a certificate, depending on your infrastructure. Choose Secured password (EAP-MSCHAP v2) www.gateway.com...
  • Page 138 Add the Gateway 7001 AP to the list of RADIUS server clients. (See external RADIUS server to recognize the Gateway 7001 AP” on page Configure the Gateway 7001 AP to use your RADIUS server (by providing the RADIUS server IP address as part of the “IEEE 802.1x” security mode settings).
  • Page 139 If you configured the Gateway 7001 AP to use IEEE 802.1x security mode with an external RADIUS server, you need to configure IEEE 802.1x security with certificate authentication on each client. To configure each client for IEEE 802.1x security with certificate authentication: On the Network Properties dialog box, select the box opens.
  • Page 140 Enable IEEE 802.1x authentication for this network Smart Card or other Certificate Card or other Certificate Properties dialog box opens. tab. The Authentication dialog box opens. from the EAP type list, then click www.gateway.com check box, select . The Smart Properties...
  • Page 141 WEP. Enable (click to select) this option Enable (click to select) this option Choose Smart Card or other Certificate Enable (click to select) this option. Select the certificate from the list. www.gateway.com 151.
  • Page 142: Configuring Wpa With Radius Security On A Client

    ■ If you are using the Built-in Authentication server with “WPA with RADIUS” security mode on the Gateway 7001 AP, then you will need to set up wireless clients to use PEAP. ■ Additionally, you may have an external RADIUS server that uses EAP/PEAP. If so, you will need to (1) configure the RADIUS server and set up user accounts on it, and (2) configure your “WPA with RADIUS”...
  • Page 143 To configure WPA security with PEAP authentication on each client: On the Network Properties dialog box, select the box opens. 30), then click Cluster > User Management www.gateway.com (“Navigating to basic . The Manage user accounts tab. The Association dialog Association...
  • Page 144 Network Authentication list, and list, then click the Authentication Select Protected EAP (PEAP) EAP Properties dialog box opens. TKIP tab. The Authentication dialog box opens. from the EAP type list, then click www.gateway.com in the Data Encryption . The Protected Properties...
  • Page 145 Authentication server on the AP. If you are setting up EAP/PEAP on a client of an AP that is using an external RADIUS server, you might select certificate validation and choose a certificate, depending on your infrastructure. Choose Secured Password (EAP-MSCHAP v2) www.gateway.com . The EAP MSCHAP Configure...
  • Page 146 Add the Gateway 7001 AP to the list of RADIUS server clients. (See external RADIUS server to recognize the Gateway 7001 AP” on page Configure the Gateway 7001 AP to use your RADIUS server (by providing the RADIUS server IP address as part of the “WPA with RADIUS” security mode settings).
  • Page 147 If you configured the Gateway 7001 AP to use WPA with RADIUS security mode with an external RADIUS server, you must configure WPA security with certificate authentication on each client. To configure WPA security with certificate authentication on each client: On the Network Properties dialog box, select the box opens.
  • Page 148 For more information, see Administrators Guide and Online Help on the access point. Choose Smart Card or other Certificate Enable this option. In the certificate list shown, select the certificate for this client. www.gateway.com check box, then click 151.
  • Page 149: Configuring Wpa-Psk Security On A Client

    Algorithm (AES), and Counter mode/CBC-MAC Protocol (CCMP) mechanisms. PSK employs a pre-shared key for an initial check of client credentials. If you configured the Gateway 7001 AP to use WPA-PSK security mode, you must configure WPA-PSK security on each client.
  • Page 150 TKIP key of “12345678,” then a TKIP client should specify this same string as the network key. This box should be disabled automatically, based on other settings. Make sure that IEEE 802.1x authentication is disabled (unchecked). (Setting the encryption mode to WEP should automatically disable authentication.) www.gateway.com...
  • Page 151: Configuring An External Radius Server To Recognize The Gateway 7001 Ap

    Consult the documentation for your RADIUS server for information on setting up user accounts. The purpose of this procedure is to identify your Gateway 7001 AP as a “client” to the RADIUS server. The RADIUS server can then handle authentication and authorization of wireless clients for the AP.
  • Page 152 The RADIUS server is identified by its IP address and UDP port numbers for the different services it provides. On the current release of the Gateway 7001 AP, the RADIUS server User Datagram Protocol (UDP) ports used by the access point are not configurable. (The Gateway 7001 AP is hard-coded to use RADIUS server UDP port 1812 for authentication and port 1813 for accounting.)
  • Page 153 To identify your Gateway 7001 AP as a client to the RADIUS server: Log on to the system hosting your RADIUS server and open the Internet Authentication Service. In the left panel, right-click the from the menu. On the initial screen of the New RADIUS Client wizard, provide information about...
  • Page 154 A logical (friendly) name for the access point. (You might want to use the DNS name ■ or location.) IP address for the access point. ■ Click Next. For the “Shared secret” enter the RADIUS Key you provided to the access point (on the Advanced > Security page). Re-type the key to confirm. www.gateway.com...
  • Page 155 Click Finish The access point is now displayed as a client of the Authentication Server. www.gateway.com...
  • Page 156: Obtaining A Tls-Eap Certificate For A Client

    To obtain a certificate for a client, follow these steps. Go to the following URL in a Web browser: https://IPAddressOfServer/certsrv/ Where IPAddressOfServer is the IP address of your external RADIUS server or of the Certificate Authority (CA), depending on the configuration of your infrastructure. A security alert opens. www.gateway.com...
  • Page 157 This document does not describe how to set up Administrative user accounts on the RADIUS server. Consult the documentation for your RADIUS server for these procedures. to get the login prompt for the RADIUS server. www.gateway.com...
  • Page 158 The Request a Certificate dialog box opens. Click . A Security Warning opens. User Certificate Click on the dialog box displayed to install the certificate. The User Certificate - Identifying Information dialog box opens. www.gateway.com...
  • Page 159 Root Store. A success message is displayed indicating the certificate is now installed on the client. to install the newly issued certificate on your client station, www.gateway.com...
  • Page 160: Setting The Administrator Password

    Setting the administrator password The administrator password controls access to the Administration Web pages for the Gateway 7001 Series self-managed AP. This setting is also available on the Basic Settings administration page. When you set the administrator password in either place and apply the change, the new password is updated and shared by all access points in the cluster.
  • Page 161 Type a new administrator password. The text you type will be displayed as Password “*” characters to prevent others from seeing your password as you type. New Password Re-type the new administrator password to confirm that you typed it as intended. Updating settings To apply your changes, click Update. www.gateway.com...
  • Page 162: Maintenance And Monitoring

    Chapter 8 Maintenance and Monitoring Interfaces ■ Event log ■ Transmit/receive statistics ■ Associated wireless clients ■ Rebooting the access point ■ Resetting the configuration ■ Upgrading the firmware ■...
  • Page 163: Introduction

    Therefore, it is important to ensure that you are accessing the Administration Web pages for the particular access point you want to configure. For information on this, see standalone APs” on page “Navigating to information for a specific AP and managing www.gateway.com...
  • Page 164: Interfaces

    The Interfaces page for the dual band AP is shown in the following figure. This page displays the current settings of the Gateway 7001 Series self-managed AP. It displays the Ethernet (Wired) settings and the Wireless settings. Status > Interfaces www.gateway.com...
  • Page 165: Ethernet (Wired) Settings

    (read-only) for internal and guest interfaces. (See “Configuring a wireless interface” on page 74 for more information.) If you want to change any of these settings, click Configure “Configuring radio settings” on page 104 Configure www.gateway.com...
  • Page 166: Event Log

    It provides a Kernel Log, which lists error conditions, such as dropping frames, and so on. Important The Gateway 7001 Series self-managed AP acquires its date and time information using the network time protocol (NTP). This data is reported in UTC format (also known as Greenwich Mean Time ).
  • Page 167: Transmit/Receive Statistics

    Statistics Important The following figure shows the Transmit / Receive page for a dual band AP (Gateway 7001 802.11 A+G Wireless Access Point). The Administration Web page for the single band AP (Gateway 7001 802.11 G Wireless Access Point) will look slightly different.
  • Page 168 VLANs can be used on the Gateway 7001 AP to establish internal and guest networks on the same access point.
  • Page 169: Associated Wireless Clients

    Administration Web page, then click The View list of currently associated client stations screen opens. The associated stations are displayed along with information about packet traffic transmitted and received for each station. www.gateway.com Status > Client Associations...
  • Page 170: Rebooting The Access Point

    Rebooting the access point For maintenance purposes or as a troubleshooting measure, you can reboot the Gateway 7001 AP as follows. To reboot the access point: From the Administration Web page, click Click . The AP reboots. Reboot Advanced > Reboot www.gateway.com...
  • Page 171: Resetting The Configuration

    Resetting the configuration If you are experiencing extreme problems with the Gateway 7001 Series self-managed AP and have tried all other troubleshooting measures, use the This will restore factory defaults and clear all settings, including settings such as a new password or wireless settings.
  • Page 172 Keep in mind that if you do reset the configuration from this page, you are doing so for this access point only, and not for other access points in the cluster. For information on the factory default settings, see “Default settings and supported administrator/client platforms” on page www.gateway.com...
  • Page 173: Upgrading The Firmware

    Upgrading the firmware As new versions of the Gateway 7001 Series self-managed AP firmware become available, you can upgrade the firmware on your access points to take advantages of new features and enhancements. Important You must do this for each access point. You cannot upgrade firmware automatically across the cluster.
  • Page 174 To verify that the firmware upgrade completed successfully, check the firmware version shown on the Advanced > Upgrade tab (and also on the Basic Settings tab). If the upgrade was successful, the updated version name or number will be indicated. www.gateway.com...
  • Page 175 www.gateway.com...
  • Page 176: Troubleshooting And Getting Help

    Chapter 9 Troubleshooting and Getting Known problems ■ Technical support ■ Help...
  • Page 177: Known Problems

    Known problems The following table summarizes problems that have been identified in the Gateway 7001 AP software. Description Numbers 2690, 2703 IP address for access point may change when Guest Access is enabled or when the DNS name is changed.
  • Page 178: Technical Support

    Technical Support Gateway offers a wide range of customer service, technical support, and information services. Telephone numbers You can access the following services through your telephone to get answers to your questions: Resource Service description Gateway Talk to a Gateway Technical Support...
  • Page 179 www.gateway.com...
  • Page 180: A Glossary

    Appendix A Glossary...
  • Page 181 802.1x-2001) is a standard for passing 802.11-1999) is a medium access control (MAC) and physical layer 802.11a-1999) is a standard that specifies operating in the 5 www.gateway.com packets over an layer for the family of standards. layer for networks that use CSMA/CA.
  • Page 182 802.1x and stronger encryption techniques, such as Advanced Encryption Standard (AES). IEEE 802.11i is still a draft IEEE standard (most recent version is D5.0, August 2003). A currently available subset of 802.11i is the Wi-Fi Protected Access (WPA) standard. www.gateway.com...
  • Page 183 The Timestamp is used by stations to update their local clock, enabling synchronization among all associated stations. standard for Virtual Local Area Networks (VLANs) specific to wireless called Infrastructure Mode. in which stations communicate directly NIST Web www.gateway.com site. Wireless...
  • Page 184 Also see extended service set (ESS) and independent basic service set (IBSS). BSSID Infrastructure Mode, the Basic Service Set Identifier (BSSID) is the 48-bit the wireless interface of the Infrastructure Mode Wireless Networking Framework Access Point. www.gateway.com with a address of...
  • Page 185 (CBC-CTR) and the Cipher Block Chaining Message Authentication Code (CBC-MAC) for encryption and message integrity. AES-CCMP requires a hardware coprocessor to operate. The Common Gateway Interface (CGI) is a standard for running external programs from an HTTP server. It specifies how to pass arguments to the executing program as part of the HTTP request.
  • Page 186 The information supplied includes the client's IP addresses and net mask plus the address of its servers and Gateway. The Domain Name Service (DNS) is a general-purpose query service used for translating fully-qualified names into Internet addresses. A fully-qualified name consists of the hostname of a system plus its domain name.
  • Page 187 Data-Link layer (layer 2 in the OSI model). Gateway A gateway is a network node that serves as an entrance to another network. A gateway also often provides a proxy server and a firewall. It is associated with both a router, which use headers and forwarding tables to determine where packets are sent, and a switch or bridge, which provides the actual path for the packet in and out of the gateway.
  • Page 188 Before a host on a can access the Internet, it needs to know the address of its default gateway. HTML The Hypertext Markup Language (HTML) defines the structure of a document on the World Wide Web. It uses tags and attributes to hint about a layout for the document.
  • Page 189 Web server. is used to define the portions. There are two special host is an IP address that is automatically assigned to a host by a www.gateway.com DHCP...
  • Page 190 The Lightweight Directory Access Protocol (LDAP) is a protocol for accessing on-line directory services. It is used to provide an authentication mechanism. It is based on the X.500 standard, but less complex. is the most common technology implementing a LAN. www.gateway.com is designed to Packet from sender...
  • Page 191 IEEE 802.1x Frames to a specified set of client stations (MAC addresses) on the network. Some wireless security modes distinguish between how unicast, multicast, and broadcast frames are encrypted or whether they are encrypted. See also Unicast and Broadcast. www.gateway.com...
  • Page 192 Network Address Translation is an Internet standard that masks the internal IP addresses being used in a LAN. A NAT server running on a gateway maintains a translation table that maps all internal IP addresses in outbound requests to its own address and converts all inbound requests to the correct internal host.
  • Page 193 LAN, for example, a Web server, an FTP or SSH server, or other services. From the outside user’s point of view, it looks like the service is running on the firewall. family are protocols with physical layer components. www.gateway.com...
  • Page 194 QoS on wireless networks is currently in-work by the 802.11e task group. A subset of 802.11e features is described in the specification. RADIUS The Remote Authentication Dial-In User Service (RADIUS) provides an authentication and accounting system. It is a popular authentication mechanism for many ISPs. www.gateway.com...
  • Page 195 It is part of the TCP/IP protocol suite. SNMP consists of managed devices and their agents, and a management system. The agents store data about their devices in Management Information Bases (MIBs) and return this data to the SNMP management system when requested. www.gateway.com...
  • Page 196 The supported rate set defines the transmission rates that are available on this wireless network. A station may be able to receive data at any of the rates listed in this set. All stations must be able to receive data at the rates listed in the Basic Rate Set. www.gateway.com...
  • Page 197 “best-effort” settings depending on the requirements of the data. The ToS box is used by the Gateway 7001 Series self-managed AP to provide configuration control over Quality of Service (QoS) queues for data transmitted from the AP to client stations.
  • Page 198 The nodes in a VLAN share resources and bandwidth, and are isolated on that network. The Gateway 7001 Series Self-Managed AP supports the configuration of a wireless VLAN. This technology is leveraged on the access point for the “virtual” guest network feature.
  • Page 199 Access Point and its clients. WME provides an interim, Wi-Fi Alliance version of the draft TKIP 802.1x mechanisms. www.gateway.com 802.11 wireless networks. products based on the IEEE 802.11 802.11e draft specification. It IEEE 802.11i standard.
  • Page 200 (OCB) for encryption and integrity. The Extensible Markup Language (XML) is a specification developed by the W3C. XML is a simple, flexible text format derived from Standard Generalized Markup Language (SGML), which is defined in ISO8879:1986, designed especially for electronic publishing. www.gateway.com...
  • Page 201 www.gateway.com...
  • Page 202: B Specifications

    Appendix B Specifications...
  • Page 203 (outdoor) Comments Access through Web-based connection only 802.11g/b radio has detachable antenna using reverse SMA connector, for antenna replacements provided by Gateway. 802.11a does not allow detachable antennas. Certified March 2004 Supports traffic between 802.11a/b/g clients associated on same AP LAN 1 Port using Standard 802.11I Power Injector.
  • Page 204 Gateway Wireless data rates with Automatic Fallback External Antenna Type Wireless Frequency Range Modulation Technology Media Access Control Wireless Transmit Power Power Adapter Receiver Sensitivity Adjustable Antenna Power 7x24 technical support Online support Safety and Emissions: Easy Installation Wizard SNMP...
  • Page 205 Gateway TFTP capable 802.1q VLAN capable Multiple SSID per radio SSID Broadcast Enable/Disable MAC Filtering Radio Enable/Disable Turbo Mode Selectable/Changeable Options Comments None Supports different SSID for 802.11a & 802.11b/g Per RF Radio Support for Allow or Deny Listing. Per RF Radio Increases data rates to 72Mbps (802.11A only)
  • Page 206: C Safety, Regulatory, And Legal Information

    Appendix C Safety, Regulatory, and Legal Information...
  • Page 207: Important Safety Information

    Important safety information Your Gateway access point is designed and tested to meet the latest standards for safety of information technology equipment. However, to ensure safe use of this product, it is important that the safety instructions marked on the product and in the documentation are followed.
  • Page 208 The access point was dropped or the case is damaged. ■ The access point operation changes. Important Do not use Gateway products in areas classified as hazardous locations. Such areas include patient care areas of medical and dental facilities, oxygen-laden environments, or industrial facilities.
  • Page 209: Regulatory Compliance Statements

    Regulatory compliance statements Wireless Guidance The Gateway 7001 Series APs, (low power Radio Frequency, RF, transmitting device), operate in the 2400-2483.5 MHz band for 802.11B&G and 5 GHz bands for 802.11A. The following section is a general overview of considerations while operating the wireless LAN.
  • Page 210: United States Of America

    Compliance Accessories: These accessories are required to be used in order to ensure compliance with FCC rules: The AC Adapter supplied with the device. Wireless Channels: Gateway declares that the Gateway 7001 802.11 A+G Wireless Access Point is limited to channels 1 through 11, specified by firmware controlled in the USA.
  • Page 211 (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Caution Changes or modifications not expressly approved by Gateway could void the FCC compliance and negate your authority to operate the product. www.gateway.com...
  • Page 212 In the interest of continued product development, Gateway reserves the right to make improvements in this manual and the products it describes at any time, without notices or obligation.
  • Page 213 www.gateway.com...
  • Page 214: Index

    LAN wireless settings radio interface configuring a guest network configuring a guest network on a virtual LAN configuring a guest welcome screen configuring a physically separate guest configuring an internal LAN configuring basic settings www.gateway.com interface...
  • Page 215 MAC filtering navigating to security settings navigating to session monitoring navigating to time protocol settings navigating to WDS settings navigating to wired settings navigating to wireless settings network time protocol server, enabling or www.gateway.com...
  • Page 216 IP addressing, understanding statistics, transmit/receive synchronization of cluster system name setting Telephone numbers transmit/receive statistics turning on the access point understand security issues on wireless understanding clustering understanding DHCP understanding static IP addressing understanding the guest interface www.gateway.com networks...
  • Page 217 Wireless Distribution System (WDS) wireless network security issues starting wireless network name providing wireless networking starting wireless settings configuring guest network configuring internal LAN navigating to WPA-PSK security mode www.gateway.com...
  • Page 218 A MAN 7001 SRS ACC PTS GDE R1 05/04...

Table of Contents