Table of Contents

Advertisement

Quick Links

Spectrum24
AP-4100 Series Access Point
Product Reference Guide
72E-51751-01
Revision B
May 2002
www.symbol.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Spectrum24 AP-4100 Series and is the answer not in the manual?

Questions and answers

Summary of Contents for Symbol Spectrum24 AP-4100 Series

  • Page 1 Spectrum24 AP-4100 Series Access Point Product Reference Guide 72E-51751-01 Revision B May 2002 www.symbol.com...
  • Page 2 Copyright © 2002 by Symbol Technologies, Inc. All rights reserved. No part of this publication may be modified or adapted in any way, for any purposes without permission in writing from Symbol. The material in this manual is subject to change without notice.
  • Page 3: About This Document

    About This Document Reference Documents This reference guide refers to the following documents: Part Number Document Title 72E-51753-01 Wireless LAN Adapter 4100 Series PC Card & PCI Adapter Product Reference Guide Conventions Keystrokes are indicated as follows: ENTER identifies a key. FUNC, CTRL, C identifies a key sequence.
  • Page 4 Indicates tips or special requirements. Indicates conditions that can cause equipment damage or data loss. Indicates a potentially dangerous condition or procedure that only Symbol- trained personnel should attempt to correct or perform. AP-4100 Series Access Point Product Reference Guide...
  • Page 5: Table Of Contents

    Contents Chapter 1 Introduction ..................1 1.1 Access Point (AP)................1 1.1.1 New Features ..............3 1.2 Radio Basics .................3 1.2.1 S24 Network Topology............4 1.2.2 Cellular Coverage ..............9 1.2.3 Site Topography ...............12 1.3 Access Point Functional Theory .............13 1.3.1 MAC Layer Bridging............14 1.3.2 Auto Fallback to Wireless Mode .........15 1.3.3 DHCP Support..............16 1.3.4 Media Types..............17 1.3.5 Direct-Sequence Spread Spectrum........19...
  • Page 6 2.1.4 Using a Web Browser............43 2.2 Navigating the UI ...............50 2.2.1 Entering Admin Mode ............52 2.2.2 Changing the Access to the UI ...........53 2.2.3 Configuring for Dial-Up to the UI ........55 2.2.4 Navigating the UI Using a Web Browser ......56 2.3 Access Point Installation...............56 2.4 Configuring System Parameters............61 2.4.1 Encryption Administration ..........67...
  • Page 7 2.11 Manually Updating AP Configuration........109 2.11.1 Updating Using TFTP ............113 2.11.2 Updating Using Xmodem ..........117 2.12 Setting Logging Options ............121 2.13 Updating AP Firmware ............123 2.13.1 Update Using TFTP ............123 2.13.2 Updating Using Xmodem ..........128 2.14 Auto Upgrade all APs Through Messaging ........132 2.15 Performing Pings ..............137 2.16 Mobile IP Using MD5 Authentication.........140 2.17 Saving the Configuration ............141...
  • Page 8 4.3.1 Network Connection ............172 4.3.2 10/100Base-T UTP ............172 4.4 Placing the AP ................173 4.5 Power Options................174 4.6 Mounting the AP ...............175 4.7 Connecting the Power Adapter...........175 4.8 BIAS-T Low Power Distribution System.........176 4.9 LED Indicators ................180 4.9.1 WLAP mode LED display..........181 4.10 Troubleshooting..............183 4.11 Setting Up MUs...............184 Appendix A Specifications...
  • Page 9: Chapter 1 Introduction

    The Access Point (AP) provides a bridge between Ethernet wired LANs and wireless networks. It provides connectivity between Ethernet wired networks and radio-equipped mobile units (MUs). MUs include the full line of Symbol Spectrum24 terminals, PC Cards, bar-code scanners and other devices.
  • Page 10 Introduction The AP meets the following: • the regulatory requirements for Europe and many other areas of the world • FCC part 15, class A with no external shielding • FCC part 15 class B, ETS 300-339 compliance, including CE mark. The AP has the following features: •...
  • Page 11: New Features

    Introduction The AP has connections for the wired network and power supply. The AP attaches to a wall or ceiling depending on installation-site requirements. 1.1.1 New Features • 10/100Base-T Ethernet • Tx Power Control • Kerberos Security • Auto Channel Select •...
  • Page 12: S24 Network Topology

    Introduction Spectrum24 devices, like other Ethernet devices, have unique, hardware- encoded Media Access Control (MAC) or IEEE addresses. MAC addresses determine the device sending or receiving data. A MAC address is a 48-bit number written as six hexadecimal bytes separated by colons. For example: 00:A0:F8:24:9A:C8 1.2.1...
  • Page 13 Introduction Select from the following topologies: • A single AP used without the wired network provides a single-cell wireless network for peer-to-peer MUs. • A single AP can bridge the Ethernet and radio networks. AP-4100 Series Access Point Product Reference Guide...
  • Page 14 Introduction • Multiple APs can coexist as separate, individual networks at the same site without interference using different Net_IDs. The Net_ID (ESS) can be thought of as a Wireless LAN Network Identifier. These separate Wireless LANs may be configured to use different channel assignments to avoid RF interference.
  • Page 15 Introduction In WLAP mode, a wireless AP-to-AP connection functions: • as a bridge to connect two Ethernet networks AP-4100 Series Access Point Product Reference Guide...
  • Page 16 Introduction In WLAP mode, APs and MUs are required to have the same Preamble settings to interoperate. • as a repeater to extend coverage area without additional network cabling. When using a wireless AP-to-AP connection, use the optimal antenna configuration for the site. For example, use a directional antenna when establishing a dedicated wireless bridge or repeater.
  • Page 17: Cellular Coverage

    Introduction Using more than two WLAPs to establish a connection slows network performance for all topologies. To increase WLAP performance, disable WNMP Functions and AP-AP State Xchg parameters under the Set System Configuration screen. To set up an AP for wireless operation automatically, select the Enabled option for the WLAP Mode parameter.
  • Page 18 Introduction APs with the same Net_ID (ESS) define a coverage area. The MU searches for APs with a matching Net_ID (ESS) and synchronizes with an AP to establish communications. This allows MUs within the coverage area to move about or roam. As the MU roams from cell to cell, it switches APs. The switch occurs when the MU analyzes the reception quality at a location and decides which AP to communicate with based on the best signal strength and lowest MU load distribution.
  • Page 19 Introduction The Root AP and Association Process By default, APs with WLAP Mode enabled and within range of each other automatically associate and configure wireless operation parameters at power up. This association process determines the wireless connection viability and establishes the Root AP and subsequently designated WLAPs. APs communicating wirelessly with one another require the same: Net_ID (ESS), Encryption mode, Data Rate and Short RF Preamble settings.
  • Page 20: Site Topography

    Introduction If AP D on Ethernet II has data for a device on Ethernet I, it requires a bridge or a repeater. In this configuration, AP C functions as a repeater. To ensure transmission to devices on Ethernet I, AP D has to use the AP A channel, DTIM and TIM interval.
  • Page 21: Access Point Functional Theory

    Introduction Symbol recommends conducting a new site survey and developing a new coverage area floor plan when switching from 1 or 2 Mbps frequency- hopping access points to 11 Mbps direct-sequence access points. Access Point Functional Theory To improve AP management and performance, users need to understand basic AP functionality and configuration options.
  • Page 22: Mac Layer Bridging

    Introduction 1.3.1 MAC Layer Bridging The AP listens to all packets on all interfaces and builds an address database using the unique IEEE 48-bit address (MAC address). An address in the database includes the interface media that the device uses to associates with the AP .
  • Page 23: Auto Fallback To Wireless Mode

    Introduction Transmitted ARP request packets echo back to other MUs. The AP removes from its database the destination or interface information that is not used for a specified time. The AP refreshes its database when it transmits or receives data from these destinations and interfaces. Filtering and Access Control The AP provides facilities to limit the MUs that associate with it and the data packets that can forward through it.
  • Page 24: Dhcp Support

    Introduction See section 2.4 “Configuring System Parameters” on page 61 and section 2.5.1: ”Wireless Operation Parameters” on page 84. To enable this feature, set the WLAP Mode Link Required 1.3.3 DHCP Support The AP can use Dynamic Host Configuration Protocol (DHCP) to obtain a leased IP address and configuration information from a remote server.
  • Page 25: Media Types

    Introduction Program the DHCP or BOOTP server to transfer these files (Kerberos security information, HTML, firmware or network configuration files) with these DHCP options for the specific file or information to download: Description of DHCP Options Option Number Firmware and HTML file 67 ( filenames are separated by a space) ESSID...
  • Page 26 Introduction The DB-9, 9-pin, RS-232 serial port provides a UI (User Interface) connection. The UI provides basic management tools for the AP . The serial link supports short haul (direct serial) or long haul (telephone-line) connections. The AP is a DTE (Data Terminal Equipment) device with male pin connectors for the RS-232 port.
  • Page 27: Direct-Sequence Spread Spectrum

    Direct-sequence is a spread spectrum technique where the transmitted signal is spread over a particular frequency range. The Spectrum24 AP-4100 series uses Direct-Sequence Spread Spectrum (DSSS) for radio communication.
  • Page 28: Mu Association Process

    Introduction Mobile Units receiving a direct-sequence transmission use the spreading code to map the chips within the chipping sequence back into bits to recreate the original data transmitted by the access point. Intercepting and decoding a direct-sequence transmission requires a predefined algorithm to associate the spreading code used by the transmitting access point to the receiving MU.
  • Page 29 Introduction Scanning is a periodic process where the MU sends out probe messages on all channels defined by the country code. The statistics enable an MU to reassociate by synchronizing its channel to the AP . The MU continues communicating with that AP until it needs to switch cells or roam. MUs perform full scans at start-up.
  • Page 30: Mobile Ip

    Introduction An MU can roam within a coverage area by switching APs. Roaming occurs when: • an unassociated MU attempts to associate or reassociate with an available AP • the supported rate changes or the MU finds a better transmit rate with another AP •...
  • Page 31 Introduction Mobile IP is like giving an individual a local post office forwarding address when leaving home for an extended period. When mail arrives for the individual home address, it is forwarded by the local post office to the current care-of-address. Using this method, only the local post office requires notification of the individual current address.
  • Page 32 Introduction The scanning and association process continues for active MUs. This allows the MUs to find new APs and discard out-of-range or deactivated APs. By testing the airwaves, the MUs can choose the best network connection available. The following diagram illustrates Mobile IP (roaming across routers): Set the MU for Mobile IP as specified in the MU user documentation.
  • Page 33: Supporting Cam And Psp Stations

    Introduction 1.3.8 Supporting CAM and PSP Stations CAM (Continuously Aware Mode) stations leave their radios on continuously to hear every beacon and message transmitted. These systems operate without any adjustments by the AP . A beacon is a uniframe system packet broadcast by the AP to keep the network synchronized.
  • Page 34: Data Encryption

    Only the sender and receiver of the transmitted data know the key. Symbol uses the Wired Equivalent Privacy (WEP) algorithm, specified in IEEE 802.11 section 8, for encryption and decryption. WEP uses the same key for both encrypting and decrypting text.
  • Page 35: Kerberos Authentication

    Both 40-bit and 128-bit shared key encryption algorithms are supported in the Symbol Spectrum24 Access Point. Devices are required to use the same encryption algorithm to interoperate. APs and MUs cannot transmit and receive if the AP is using 128-bit encryption and the MU is using a 40-bit encryption algorithm.
  • Page 36 Introduction For a detailed description of the Kerberos authentication service protocol refer to RFC 1510: Kerberos Network Authentication Service (V5). A basic understanding of RFC 1510 Kerberos Network Authentication Service (V5) is helpful in understanding how Kerberos functions. Kerberos optionally uses the KSS on a Windows 2000 server.
  • Page 37 Introduction The KDC contains two components: • Authentication Service (AS) – Provides the authentication ticket containing information about the client and the session key used with the KDC. • Ticket Granting Ticket Service (TGS) – Permits devices to communicate with a service (this could be any application or service such as the AP RF services).
  • Page 38 Introduction When the AP boots up it contacts the KSS to obtain KDC information. The AP sends an Authentication Service Request (AS_REQ) to the KDC. The KDC looks up the username (ESSID in the case of APs), the associated password, and other authentication information including the current time stamp.
  • Page 39 Introduction with a WNMP header and forwards the response to the MU. Once the MU has verified the message it prepares an Application Request (AP_REQ) for the AP . This AP_REQ contains the ticket the KDC has sent to the MU. The AP decrypts the ticket.
  • Page 40: Kss Open Enrollment

    Introduction Configure the AP through a direct serial connection if needed. Configure SNMP to be "Read Only" or "Read/Write" from the KSS. Disabling Kerberos returns (Kerberos disabled is the default setting) Telnet, SNMP and Web services to their previous setting. If an AP cannot be accessed through a serial connection and SNMP is not configured for read/write, use of DHCP option 131 is another way to disable Kerberos.
  • Page 41: Kss Databases

    Introduction 1.3.12 KSS Databases The optional KSS has two databases. One database stores valid access points (AP setup account). The other database stores Kerberos account information (Kerberos entry account). The AP setup account database stores validation information for an AP . This database uses the AP MAC address as a Primary Key.
  • Page 42: Web Management Support

    1.3.15 Web Management Support A Symbol Spectrum24 Access Point includes an HTTP Web server to allow the user to access and manage the AP with a standard Java-compatible browser. This capability provides the user with a Web-based interface for configuration and firmware download.
  • Page 43: Management Options

    Introduction 1.3.16 Management Options Managing Spectrum24 includes viewing network statistics and setting configuration options. Statistics track the network activity of associated MUs and data transfers on the AP interfaces. The AP requires one of the following to perform a custom installation or maintain the Spectrum24 network: •...
  • Page 44: Using Snmp

    Base). The SNMP agent supports read-write, read-only or disabled modes. The AP supports traps that return to the SNMP manager when certain events occur. The Symbol MIB is available on the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM or from http://www.symbol.com/services/ downloads/download_spec24.html.
  • Page 45 Access to the AP SNMP function using a MIB Browser. MIB Browser Typically a Network Manager uses this feature, however, Symbol does not recommend accessing the AP using this interface method. Web Browser Access to the AP built-in Web server from any AP interface including Ethernet connections.
  • Page 46 Introduction AP-4100 Series Access Point Product Reference Guide...
  • Page 47: Chapter 2 Configuring The Ap

    Configuring the AP Chapter 2 AP configuration requires setting up a connection to the AP and gaining access to the UI (User Interface). The methods of accessing the UI are Serial, Telnet, Web, and SNMP . DHCP is enabled on the AP by default. Initial network configuration can be obtained from a DHCP server.
  • Page 48 Configuring the AP 2. At the prompt type the password: Symbol The password is case-sensitive. 3. Press the ESC key. The AP displays the Main Menu: Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions...
  • Page 49: Using A Direct Serial Connection

    Configuring the AP 2.1.2 Using a Direct Serial Connection The factory-configured AP accepts a dial-up connection between the AP and a modem. A UI connection requires a straight-through cable between the modem and the AP . See section 2.2.3: ”Configuring for Dial-Up to the UI” on page 55.
  • Page 50: Using A Dial-Up Connection

    Configuring the AP 5. Press ESC to refresh the display. The AP displays the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units...
  • Page 51: Using A Web Browser

    6. Dial out to the AP with the correct telephone number. No password is required. 7. Press ESC to refresh the display. The AP displays the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics...
  • Page 52 Configuring the AP The Web browser (Internet Explorer 4.0 or greater or Netscape) requires JavaScript to gain access to the UI. Setup Network Web Server Help File Access A network Web server is required to access the Help file from the Access Point Configuration Management System Web pages.
  • Page 53 Configuring the AP 6. From this menu select Internet Service Manager to launch the Internet Information Server Service Manager. 7. Click on the Web service. Ensure the server WWW service is running. 8. Select Properties. 9. Select Service Properties to display the WWW service properties for the server.
  • Page 54 Configuring the AP To ensure the option is enabled for the AP: Web Server 1. Access the UI using a Serial or Telnet connection. 2. From the select Main Menu System Configuration 3. Verify the option on the screen Web Server System Configuration is enabled.
  • Page 55 Configuring the AP To access the AP UI using a Web browser from a workstation: 1. From the NCPA properties window set the IP address of the workstation and the subnet mask. The system tells the user to reboot for property changes to take effect.
  • Page 56 Configuring the AP 4. The Spectrum24 Access Point Configuration Management System main page displays: The Web pages look different than the Telnet, Direct Serial or Dial-Up Connections, but the contents are the same. Access the different pages using the links located in the left frame. Refer to the online help file for Web page navigation, page contents and parameter use.
  • Page 57 • For access to the Easy Setup and Configuration pages this pop-up dialogue box appears: 1. Type the AP name. Symbol Access Point 2. Type the password: Symbol The password is case-sensitive. • Exit the browser to manually terminate the session.
  • Page 58: Navigating The Ui

    Set Event Logging Configuration Enter Admin Mode The top line displays the System Name for the AP (default is Symbol Access Point) and the name of the configuration screen. The UI uses the following keystrokes to navigate through the menus and screens depending on the terminal emulation.
  • Page 59 Configuring the AP The following conventions also apply when navigating screens and menus: • To select menu items, press the key corresponding to the bold letter for the item (case-sensitive hot key). Press ENTER to select the item. • Press TAB to scroll through menu items. •...
  • Page 60: Entering Admin Mode

    Entering Admin mode requires the administration password. 1. Select from the Main Menu. The AP prompts for the Enter Admin Mode administration password: Enter System Password: 2. Type the default password: Symbol The password is case-sensitive. AP-4100 Series Access Point Product Reference Guide...
  • Page 61: Changing The Access To The Ui

    Configuring the AP – If the password is correct, the AP displays the Main Menu with the Enter Admin Mode menu item changed to Exit Admin Mode. – If the password is incorrect, the AP continues to display the Main Menu with the Enter Admin Mode menu item.
  • Page 62 Allows the user to only monitor or view the screens. Password Select any alphanumeric, case-sensitive entry up to 13 characters, the characters selected are displayed as asterisks. The default password is Symbol. Admin Allows the user to view and change the parameters Password on each screen.
  • Page 63: Configuring For Dial-Up To The Ui

    Configuring the AP 2.2.3 Configuring for Dial-Up to the UI A dial-up connection requires a straight-through cable between the modem and the AP . The remote PC requires a modem and a communication program (e.g. Microsoft Windows Terminal program). Refer to Appendix B for information on the modems supported by the AP . 1.
  • Page 64: Navigating The Ui Using A Web Browser

    Configuring the AP 7. Press ESC to refresh the display. The AP displays the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units...
  • Page 65 Configuring the AP 3. Select AP Installation from the Main Menu: Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs...
  • Page 66 Configuring the AP If this is the first time the AP has been installed or has been moved to a new country, verify that the proper country specific code is entered for the AP . Refer to Appendix D for a list of supported country codes. Verify that the proper country specific code is entered for the AP to conform to the set of rules defined in national or international regulations.
  • Page 67 Configuring the AP Subnet Mask The first two sets of numbers specify the network domain, the next set specifies the subset of hosts within a larger network and the final set specifies an individual computer. These values help divide a network into subnetworks and simplify routing and data transmission.
  • Page 68 Configuring the AP Additional The IP address of the additional gateways used. Gateways Access up to seven gateways. DHCP/BOOTP Enables or Disables selection of DHCP/BOOTP . The options are: • Enabled – DHCP and BOOTP interoperate, whichever response the AP selects first becomes the server allocating the information.
  • Page 69: Configuring System Parameters

    The AP provides configuration options for how the unit operates, including security access and interface control. Some parameters do not require modification. 1. Select Set System Configuration from the Main Menu to display: Symbol Access Point System Configuration Channel .Access Control...
  • Page 70 Configuring the AP Once the country has been configured on the AP (Country Config) Installation screen the channel can be set manually or automatically. 2. Configure the AP system settings as required: Auto Channel Normally run once during initial installation. Select 1.
  • Page 71 Configuring the AP Ethernet Disables radio interface if no activity is detected Timeout on the Ethernet line after the seconds indicated ). The AP disassociates MUs and prevents 30-255 further associations until it detects Ethernet activity. The default value disables this feature. The value detects if the 10/100Base-T line goes down.
  • Page 72 Configuring the AP Encryption Indicates which interface can change the Admin encryption keys and the encryption key index. Without admin privileges users cannot access the encryption maintenance page to change the encryption keys. allows users with admin privileges to change encryption keys through any interface.
  • Page 73 Configuring the AP Web Server Enables the use of a Web based browser to access the UI. An AP Reset is required for this feature to take effect. Configure Allows the user to enable and configure Kerberos Kerberos authentication. System Allows the user to change the passwords for the Password AP .
  • Page 74 Configuring the AP 3. To enable or disable interfaces on the AP , modify the following parameters: Ethernet Enables or disables wired Ethernet. Interface The default value is On. RF Interface Enables or disables radio. The default value is On. Default Interface Specifies the default interface ( Ethernet WLAP...
  • Page 75: Encryption Administration

    Configuring the AP 2.4.1 Encryption Administration The ability to change, view or restrict access to encryption administration settings depends on the configuration parameter. The Encryption Admin options for this parameter are . These options are Serial configurable via the Serial UI located in the System Configuration screen. parameter effects all interfaces supported by the AP Encryption Admin (Serial, Telnet, HTML Web browser and SNMP).
  • Page 76 Configuring the AP Encryption Parameters for Telnet and Serial Interfaces Parameter Access Method Interface Serial Encryption Admin System Configuration Telnet/Serial Serial UI - View/Modify Screen View/Modify Telnet UI - View Only WEP (Privacy) RF Configuration Telnet/Serial Serial UI - View/Modify Screen View/Modify Telnet UI - View Only...
  • Page 77 Configuring the AP Encryption Parameter Access for SNMP Interface Parameter Access Method Interface Serial apEncryptAdmin s24dsap.mib - View Only View Only apConfigMgmt - apSystemConfig group apWEPAlgorithm s24dsap.mib - View/Modify View Only apConfigMgmt - apRFConfig group ap128WEPKeyValue s24dsap.mib - Modify Only No Access (1..4) apConfigMgmt -...
  • Page 78 1. To access and enable the Kerberos configuration, select Configure from the System Configuration Menu. The Configure Kerberos-[F3] Kerberos Authentication screen displays: Symbol Access Point Configure Kerberos Authentication Kerberos Enabled KDC Server Name/IP Address krbtgt Backup KDC Name/IP Address kdc2 Realm Name APFW.SYMBOL.COM...
  • Page 79 Configuring the AP 2. Verify the KDC name. The MU does not display the Kerberos login password screen if the wrong KDC name is entered in the AP Authentication screen. 3. Verify the matches the ESSID. User ID 4. Verify the matches the password in the KDC and AP .
  • Page 80 Configuring the AP Symbol Access Point Configure Kerberos Setup Server ***If using a KSS, please configure the following items KSS Port 34567 KSS Secret ******* KSS Name/IP Address ksssrv OK-[CR] Save-[F1] Cancel-[ESC] KSS Port The TCP number the AP uses to transmit and communicate with the KSS.
  • Page 81: System Password Administration

    1. To access and change the System Passwords, select System Password from the System Configuration Menu. The Change System Admin-[F4] Passwords screen displays: Symbol Access Point Change System Passwords User Password ******* Admin Password ******* Save-[F1]...
  • Page 82 User Password Allows the user to monitor or view the screens. Select any alphanumeric, case-sensitive entry up to 13 characters, the characters selected are displayed as asterisks. The default password is Symbol Admin Allows the user to view and change the parameters Password on each screen.
  • Page 83: Configuring Radio Parameters

    2.5 Configuring Radio Parameters The AP automatically configures most radio parameters. Only advanced users, Symbol trained users or Symbol representatives should adjust the radio parameters for the AP , the options in the RF Configuration screen or fine-tune the radio and WLAP functions.
  • Page 84 Configuring the AP The dot in front of certain parameters, functions or options (for example .Rate ) indicates these items update to all APs with the same Net_ID (ESS) Control when choosing the option. Users can perform this option Save ALL APs-[F2] only among the same hardware platforms and same firmware versions.
  • Page 85 Configuring the AP Multicast Mask Supports broadcast download protocols for any MU, typically Point-of-Sale terminals, requiring the expedited download of a new operating image over the network instead of using a local nonvolatile drive. All multicast downstream data packets that match the top 32 bits of the multicast mask are forwarded immediately instead of being queued for transmission at the next DTIM interval.
  • Page 86 Configuring the AP Rate Control Defines the data transmission rate, the defaults are: • 11 Mbps - Optional • 5.5 Mbps - Optional • 2 Mbps - Required • 1 Mbps - Required. The defaults allow the AP to automatically select the the best transmit rate allowed by the conditions.
  • Page 87 Configuring the AP WLAP Mode Specifies the APs wireless-AP operation status. Enabled • the AP sets up automatically for wireless operation. The AP can operate in any of these configurations: Wireless, Repeater or Ethernet Bridge. Disabled • no wireless operation possible. Default setting. Link Required.
  • Page 88 Configuring the AP WLAP Manual Specifies the BSS_ID of a particular WLAP BSS ID and forces the current AP to associate only with that WLAP . If setting the WLAP Manual BSS_ID to the current BSS_ID, the current AP jumps into Functional State immediately and waits for an Association Request from the other WLAP .
  • Page 89 Configuring the AP WLAP Max Age Defines the time interval, in seconds, before discarding aged configuration messages. This causes a disconnection between the two WLAPs. The recommended value is a multiple of the WLAP Hello Time. The default is seconds. The WLAP Max Age of the Root AP overwrites the WLAP Max Age of designated WLAPs.
  • Page 90 Configuring the AP Short RF Determines whether the AP uses a short or long Preamble preamble. The preamble is approximately 8 bytes of the packet header generated by the AP and attached to the packet prior to transmission. The preamble length is transmission data rate dependant.
  • Page 91 Configuring the AP 6. The system prompts Warning Update, save, and reset all APs in the Known AP Menu? Type yes no 7. Select to disregard any changes made to this screen and Cancel-[ESC] return to the previous menu. AP-4100 Series Access Point Product Reference Guide...
  • Page 92: Wireless Operation Parameters

    2.5.1 Wireless Operation Parameters The AP supports up to four WLAP interfaces. Symbol recommends using one WLAP as an interface on high traffic networks and no more than two WLAPs for low traffic networks. Excessive channel contention causes the WLAP to miss beacons from the Root APs shown in the example.
  • Page 93 WLAP This allows the MUs to roam and transmit data between AP B and C. If an AP functions as a bridge between wired LANs, Symbol recommends one LAN contain all the lower WLAP IDs. In WLAP mode, APs and MUs are required to have the same Preamble settings for interoperability.
  • Page 94 Configuring the AP To configure the AP for wireless operation: 1. Select Set RF Configuration from the Main Menu. 2. Configure the settings as required: WLAP Mode Specifies the APs wireless-AP operation status. Enabled • the AP sets up automatically for wireless operation.
  • Page 95 Configuring the AP WLAP Manual Specifies the BSS_ID of a particular WLAP and BSS_ID forces the current AP to associate only with that WLAP . If setting the WLAP Manual BSS_ID to the current BSS_ID, the current AP jumps into Functional State immediately and waits for an Association Request from the other WLAP .
  • Page 96 Configuring the AP WLAP Forward Specifies the time, in seconds, to prevent an AP Delay from forwarding data packets to and from an interface during initialization. The WLAPs involved and the wireless operation state affect the WLAP Forward Delay time (see section 3.8: ”Radio Statistics”...
  • Page 97: Encryption Key Maintenance

    Keys using the SNMP Trap Manager overrides the Key value(s) for the AP(s) accessed by the SNMP Trap Manager. Symbol provides a total of four Encryption Keys. Each key enables encryption between the AP and an associated MU with the same encryption Key and Key value.
  • Page 98 (default display is all zeros). Keys are saved only if they are not all zeros. 40-Bit Encryption If 40-bit encryption is the selected WEP Algorithm, this screen is displayed. Symbol Access Point Encryption Key Maintenance .Key 1 * 00000 00000 .Key 2...
  • Page 99 Configuring the AP Each key has 40 bits available to the user for configuration and are displayed in two 20-bit segments. The remaining 24 IV (initialization vector) bits are factory set and not user configurable. 1. Select the desired key and enter the new value to change the Key value. 2.
  • Page 100 (default display is all zeros). 128-Bit Encryption If 128-bit encryption is the selected WEP Algorithm, this screen is displayed. Symbol Access Point Encryption Key Maintenance .Key 1 * 00000 00000 0000 0000 0000 0000 .Key 2...
  • Page 101 Configuring the AP WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified. This option is only used with the same hardware and firmware platforms. 5. The system prompts Warning Update, save, and reset all APs in the Known AP Menu? Type yes no...
  • Page 102: Configuring The Snmp Agent

    SNMP . The AP sends specific traps for some conditions. Ensure the SNMP trap manager recognizes how to manage these traps. Refer to the Symbol MIB available on the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM or from http://www.symbol.com/services/ downloads/download_spec24.html.
  • Page 103 Configuring the AP 1. Select Set SNMP Configuration from the Main Menu to AP display: Symbol Access Point SNMP Configuration .SNMP Agent Mode Read/Write .Trap Host1 .Trap Host2 .Read-Only Community ******* .Read-Write Community ******* .All Traps Disabled Generic Traps: .Cold Boot Disabled .Authentication failure...
  • Page 104 Configuring the AP 2. Configure the settings as required: SNMP Agent Defines the SNMP agent mode: Mode disables SNMP functions. Disabled allows get and trap operations. Readonly (default) allows get, set and Read/Write trap operations. Read-Only User-defined password string up to 31 characters Community identifying users with read-only privileges.
  • Page 105 Configuring the AP DHCP Change If enabled, this trap generates the following enterprise- specific traps: • Gateway Address change Indicates the gateway address for the router has changed. • IP Address Change Indicates the IP address for the AP has changed. •...
  • Page 106 Configuring the AP 4. Select to register settings by writing changes to NVM. Save Selecting displays a confirmation prompt. Save 5. Select or press to save the SNMP Configuration Save ALL APs [F2] information to all APs with the same Net_ID (ESS). This option saves the configuration changes for the current AP , sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified.
  • Page 107: Acl And Address Filtering

    Disallowed) are selected in the Access Control section of the System Configuration Menu. When using the option, only a portion of the access point ACL Save All APs-[F2] is saved and passed on to the access points. Symbol Access Point System Configuration Channel .Access Control Disabled Auto Channel Select Disabled .Type Filtering...
  • Page 108 Configuring the AP The dot in front of certain parameters, functions or options (for example ) indicates these items update to all APs with the same Net_ID .Access Control (ESS) when choosing the option. Users can perform this Save ALL APs-[F2] option only among the same hardware platforms and same firmware versions.
  • Page 109: Configuring The Acl

    3. Type in the maximum MAC address in the bottom value: 00:0A:F8:F0:02:FF 4. Press ENTER to accept the value; use the DOWN-ARROW key to select OK. 5. Press ENTER. The UI displays: Symbol Access Point Ranges of Allowed Mobile Units Min Address Max Address 00:A0:F8:F0:01:01...
  • Page 110 Configuring the AP 7. Select to delete a range of Mobile Units. Delete-[F1] 8. Select to add a range of Mobile Units. Add-[F2] 9. Select or press to save the Ranges of Allowed Mobile Save ALL APs [F3] Units information to all APs with the same Net_ID (ESS). This option saves the configuration changes for the current AP , sends two WNMP messages to all other APs on the Known APs table to update their configuration and resets after the configuration has been modified.
  • Page 111: Adding Allowed Mus

    Configuring the AP 2.7.3 Adding Allowed MUs The Access Control List screen provides a facility to add MUs to the ACL. 1. Select the Set Access Control List option from the Main Menu to display: Address Type? range individual 2. Use the UP/DOWN-ARROW keys to toggle between range .
  • Page 112: Acl Options

    Configuring the AP 2.7.5 ACL Options To switch between options locate the ACL in Allowed Disallowed Disabled the System Configuration screen. Use ACL options from the Set System Configuration menu. Where: Option Description Allowed to allow only MUs with their MAC address in the ACL to associate with AP .
  • Page 113: Load Acl From File

    Configuring the AP 2.7.8 Load ACL from File This option creates an ACL from a user defined ACL file (AP_ACL.TXT) entered on the secondary screen of the Special Functions Menu. The following is an example of the AP_ACL.TXT. [ACLIndividual] Flush 00:A0:F8:FF:01:FB 00:A0:F8:FF:01:FC 00:A0:F8:FF:01:FD...
  • Page 114: Configuring Address Filtering

    Disallowed Addresses option provides security by preventing unauthorized access by known devices. Use it for preferred association of MUs to APs. • Select from the Main Menu to display: Set Address Filtering Symbol Access Point Disallowed Addresses 00:A0:F8:F0:00:0A 00:A0:F8:FF:FF:C7 00:A0:F8:F0:00:01 00:A0:F8:FF:FF:89...
  • Page 115: Adding Disallowed Mus

    Configuring the AP 2.8.1 Adding Disallowed MUs The Disallowed Addresses screen provides a facility to add MUs to the list: 1. Select . The AP prompts for a MAC address. Add -[F2] 00:00:00:00:00:00 2. Enter the MAC address. Users can enter MAC addresses without colons. 2.8.2 Removing Disallowed MUs The Disallowed Addresses screen provides a facility to remove MUs from...
  • Page 116: Configuring Type Filtering

    Configuring the AP Configuring Type Filtering Packet types supported for the type filtering function include the 16-bit DIX Ethernet types. The list can include up to 16 types. 2.9.1 Adding Filter Types The Type Filtering screen provides a facility to add types to the list. 1.
  • Page 117: Clearing Mus From The Ap

    Configuring the AP 6. Select to disregard any changes made to this screen and Cancel-[ESC] return to the previous menu. Users can only enable one type filtering option at a time. 2.10 Clearing MUs from the AP Clear the MU association table for diagnostic purposes. Clear MUs from the AP if the AP has many MU associations no longer in use.
  • Page 118 Edit the following AP_CFG.TXT file required for manual configuration of the AP , to match the site specific network settings. [APInstallation] ;CountryConfig ; full country name UnitName testhost.symbol.com ; up to 31 chars ;IPAddress 157.235.101.33 ; comment out if DHCP enabled Gateway1 0.0.0.0...
  • Page 119 Disabled ; "Disabled", "Enabled" KSSName ksssrv ; up to 127 chars KSSPort 34567 : 1024 - 65535 KSSSecret Symbol ; up to 16 chars KDCName krbtgt ; up to 127 chars KDCBackupName kdc2 ; up to 127 chars RealmName localrealm ;...
  • Page 120 Configuring the AP WLAPHelloTime ; 0 - 9999 WLAPMaxAge ; 0 - 9999 WLAPForwardDelay ; 0 - 9999 SharedKeyWEP Disabled ; "Disabled", "Enabled" WEPKeyWidth ; 40Bit ; 128Bit EncryptionKeyID ; 1 - 4 EncryptionKey1 101112131415161718191a1b1c ; Handles both 40 bit EncryptionKey2 202122232425262728292a2b2c ;...
  • Page 121: Updating Using Tftp

    PC/TCP for DOS or OnNet™ for Windows. The wireless TFTP update method requires a connection between the AP and a TFTP server. The TFTP server can be running on a Symbol Spectrum24 device. Updating the configuration requires a TFTP server running in the background.
  • Page 122 3. At the prompt enter the password: Symbol The password is case-sensitive. Set the System Passwords in the Set System Configuration screen. The AP displays the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics...
  • Page 123 Configuring the AP 5. At the press to view the Special Functions Menu Firmware Update Menu Access Point Firmware Update Menu Use TFTP to update Access Point’s: Firmware HTML file Firmware and HTML File Config Use XMODEM to update Access Point’s: Firmware HTML file Firmware and HTML File...
  • Page 124 The AP resets when the file transfer completes. 14. Telnet to the AP using its IP address. 15. At the prompt enter the password: Symbol The password is case-sensitive. The AP displays the Main Menu. 16. Verify the network settings are correct on the System Summary screen.
  • Page 125: Updating Using Xmodem

    Configuring the AP 2.11.2 Updating Using Xmodem The Xmodem upgrade method requires a direct connection between the AP and a computer using a null modem serial cable and using software like HyperTerminal for Windows 9x. Xmodem supports file transfers between terminal emulation programs and the AP UI.
  • Page 126 Configuring the AP 7. Press ENTER to display the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration Show Mobile Units Set RF Configuration Show Known APs...
  • Page 127 Configuring the AP 9. From the Main Menu select Special Functions Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config. Clear MU Table Save Configuration Clear ACL Save Config. to All APs Clear Address Filters Clear Type Filters...
  • Page 128 Configuring the AP Selecting downloads the file AP_CFG.TXT. Config 13. The Special Functions Menu displays Type Are You Sure? yes no Downloading Configuration file using XMODEM. Send Configuration file with XMODEM now ... When using Xmodem, verify the file is correct before a send. An incorrect file can render the AP inoperable.
  • Page 129: Setting Logging Options

    This option keeps the log concise through the 128-entry circular buffer. 1. Select Set Event Logging Configuration from the Main Menu to display: Symbol Access Point Event Logging Configuration .Any Event Logging Enabled .Security Violations...
  • Page 130 Configuring the AP 2. Set Any Event Logging to to log all events. Specify the events Enabled that do not require logging when disabling Any Event Logging. Use SPACE BAR or LEFT/RIGHT-ARROW keys to toggle between Enabled and Disabled. Any Event Logs all events listed in the screen.
  • Page 131: Updating Ap Firmware

    TCP for DOS or OnNet™ for Windows. The wireless TFTP upgrade method requires a connection between the AP and a TFTP server. The TFTP server can be running on a Symbol Spectrum24 device. AP-4100 Series Access Point Product Reference Guide...
  • Page 132 3. At the prompt type the password: Symbol The password is case-sensitive. Set the System Passwords in the Set System Configuration screen. The AP displays the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics...
  • Page 133 Configuring the AP 5. Select from the Main Menu and press ENTER. Special Functions Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config. Clear MU Table Save Configuration Clear ACL Save Config. to All APs Clear Address Filters...
  • Page 134 Configuring the AP 7. Select Alter Filename(s)/HELP URL/TFTP Server. 8. Press ENTER. 9. Enter the firmware filename in the firmware field .Firmware Filename Change this only if the user or system/network administrator requires a new filename. The default for a 4121 model access point is dsap_fw.bin and dsap_htm.bin.
  • Page 135: Updating Using Xmodem

    The AP resets when the file transfer and FLASH programming completes. 16. Telnet to the AP using its IP address. 17. At the prompt type the password: Symbol The password is case-sensitive. The AP displays the Main Menu. 18. Verify the accuracy of the version number on the System Summary screen.
  • Page 136 Configuring the AP 2. Attach a null modem serial cable from the AP to the PC serial port. 3. On the PC, start the emulation program. 4. Name the session Spectrum24 AP and select OK. The procedure described below is for Windows 98. AP-4100 Series Access Point Product Reference Guide...
  • Page 137 6. Select OK. 7. Press ENTER to display the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration...
  • Page 138 Configuring the AP 9. From the Main Menu select and press ENTER. Special Functions Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config. Clear MU Table Save Configuration Clear ACL Save Config. to All APs Clear Address Filters...
  • Page 139 Configuring the AP Selecting downloads the files separately. Ensure both Firmware and HTML File files are located in the same directory before the download begins. 13. At the confirmation prompt, press to display: Downloading firmware using XMODEM. Send firmware with XMODEM now ... Where dsap_fw.bin and dsap_htm.bin are the firmware files for a 4121 model access point.
  • Page 140: Auto Upgrade All Aps Through Messaging

    TCP for DOS or OnNet™ for Windows. The wireless TFTP upgrade method requires a connection between the AP and a TFTP server. The TFTP server can be running on a Symbol Spectrum24 device. Updating the firmware requires a TFTP server running in the background.
  • Page 141 3. At the prompt type the password: Symbol The password is case-sensitive. Set the System Passwords in the Set System Configuration screen. The AP displays the Main Menu. Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics...
  • Page 142 Configuring the AP 5. Select from the Main Menu and press ENTER. Special Functions 6. Press to view the Firmware Update Menu Symbol Access Point Firmware Update Menu Use TFTP to update Access Point’s: Firmware HTML file Firmware and HTML File Config Use XMODEM to update Access Point’s:...
  • Page 143 Save-[F1] 12. Select from the Main Menu. Special Functions 13. Press to view the Firmware Update Menu Symbol Access Point Firmware Update Menu Use TFTP to update Access Point’s: Firmware HTML file Firmware and HTML File Config Use XMODEM to update Access Point’s:...
  • Page 144: Performing Pings

    Configuring the AP The AP displays the Main Menu. Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config. Clear MU Table Save Configuration Clear ACL Save Config. to All APs Clear Address Filters Clear Type Filters Firmware Update Menu-[F3]...
  • Page 145 Configuring the AP To ping another station: 1. Select the screen from the Main Menu to display: Show Mobile Units Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics Special Functions Show Forwarding Counts Set System Configuration...
  • Page 146 Configuring the AP 4. Select to display the screen: Echo-[F1] Packet Ping Setup Packet Ping Setup Station Address 00:A0:F8:10:4A:13 Number of Pings Packet Length Packet Data [Start-CR] [Cancel-ESC] 5. Enter the MAC address of the station to ping. 6. Enter the number of echo requests (1 to 539), length of packets in bytes (1 to 539) and data content in hex (0x00 to 0xFF).
  • Page 147: Mobile Ip Using Md5 Authentication

    Configuring the AP 2.16 Mobile IP Using MD5 Authentication Users can achieve authentication by using the MD5 algorithm with a shared key configured into the AP and its MU. MD5 is a message-digest algorithm that takes an arbitrarily long message and computes a fixed-length digest version, consisting of 16 bytes (128 bits), of the original message.
  • Page 148: Saving The Configuration

    Press F1 in the configuration screens displaying the option or complete Save the following procedure: 1. Select Special Functions from the Main Menu to display: Symbol Access Point Special Functions Menu Clear All Statistics Restore Factory Config. Clear MU Table...
  • Page 149: Resetting The Ap

    Configuring the AP 2.18 Resetting the AP Resetting an AP clears statistics and restores the last saved configuration. If users make unsaved changes, the AP clears those changes and restores the last saved configuration on reset. • Select Special Functions from the Main Menu. •...
  • Page 150 Only use the Configure Network Time screen when the optional KSS utility is not being used. Network time is needed to associate the time of day to mobile unit requests for access point resources. 2. Select Configure Network Time. Symbol Access Point Configure Network Time Time Server Time 14:00 PST Time Server...
  • Page 151 Configuring the AP To ensure server and access point time syncopation, the timeserver selected within the Configure Network Time screen is queried first. Should there be no response, the Primary KDC is queried second and the Secondary KDC is queried last. Consequently, it is important to have a timeserver set up on the KDC to provide verification of time requests in order to ensure secured data transmissions over the network.
  • Page 152 Configuring the AP AP-4100 Series Access Point Product Reference Guide...
  • Page 153: System Summary

    The Show System Summary screen displays information about the APs configuration. To view information about the AP configuration: 1. Select Show System Summary from the Main Menu to display: Symbol Access Point System Summary Unit Name Symbol Access Point MAC Address (BSS) 00:A0:F8:8D:4A:7D...
  • Page 154 Monitoring Statistics 2. Configure the AP system settings as required: Unit Name Identifies the AP name. MAC Address (BSS) Identifies the unique 48-bit, hard-coded Media Access Control address. IP Address Identifies the network-assigned Internet Protocol address. Net_ID (ESS) Identifies the unique 32-character, alphanumeric, case-sensitive network identifier.
  • Page 155 Specifies the outcome of reading and processing AP Configuration the downloaded ap_cfg.txt. Messages displayed can be: • Unchanged • File Download Failed • Set Successfully • Unknown Menu Page • Unknown Menu Item • Syntax Error • Invalid Item Value Specifies the outcome of reading and processing ACL &...
  • Page 156 Monitoring Statistics Access Control Specifies if the access control feature is set to one of three Access Control modes: Disabled, Allowed, or Disallowed. • When Disabled (default) is selected, no filtering is performed. • When Allowed is selected, only MAC addresses specified in the Access Control List are allowed to associate with the AP .
  • Page 157: Interface Statistics

    (bps). The AP interface indicates packets sent to the AP protocol stack (configuration requests, SNMP , Telnet). • Select Interface Statistics from the Main Menu to display: Symbol Access Point Interface Statistics -------------------- Interface Counts ----------------------- Packets Packets...
  • Page 158: Forwarding Counts

    (Ethernet, radio, or AP). Forwarding Counts also displays the broadcast packets (Bcast) transmitted from the AP . • Select Forwarding Counts from the Main Menu to display: Symbol Access Point Forwarding Counts - From - ---------- To -----------------...
  • Page 159: Mobile Units

    MUs. The AP Regular screen shows the MUs associated locally on the same subnet. • Select Show Mobile Units from the Main Menu to display: Symbol Access Point MAIN MENU Show System Summary AP Installation Show Interface Statistics...
  • Page 160 AP current Radio transmit rate for the messages sent to this MU: 11 for 11 Mbps. Encryption is enabled for this device. Indicates a Symbol Voice enabled device. MU failed to obtain a session key. • To bring up the WNMP Packet Ping Function screen, press TAB to highlight the MU and select .
  • Page 161: Radio Interface

    Press ESC to return to the previous menu. • To bring up detailed information on an MU, press TAB to highlight the MU and select to display: Information Symbol Access Point Information for MU: 00:A0:F8:29:C9:E2 Interface Packets Sent State Associated...
  • Page 162 Monitoring Statistics Begin Current Assoc The time the current association begins in hours, minutes and seconds. Supported Rates Data transmission rates the station supports. Current Xmt Rate The current rate the AP transmits data to the station. Priority Indicates whether the MU is a voice or data type device. Voice indicates packet delivery is time critical and a high priority.
  • Page 163: Mobile Ip

    The following tables display the mapping of MUs to mobility agents. See section 1.3.7: ”Mobile IP” on page 22. • Select Home Agent from the Show Mobile Units prompt to display: Symbol Access Point Home Agent Table Mobile Unit Foreign Agent...
  • Page 164: Known Aps

    Net_ID (ESS) Users can perform this option only among the same hardware platforms and firmware versions. • Select Known APs from the Main Menu to display: Symbol Access Point Known Access Points Net_ID: MAC Address IP Address CH HST HSQ MUS KBIOS...
  • Page 165 Monitoring Statistics • Select to view the Unit Name for each known AP . Switch Symbol Access Point Known Access Points Net_ID: IP Address Unit Name 111.111.12.62 ENG_ONE 111.111.12.63 PUBS_TWO 111.111.12.64 CAD_THREE Echo-[F1] Delete-[F2] Next-[F3] Previous-[F4] Switch Exit-[ESC] AP-4100 Series Access Point Product Reference Guide...
  • Page 166 Monitoring Statistics The AP displays for each known AP: MAC Address The unique 48-bit, hard-coded Media Access Control address, known as the devices station identifier IP Address The network-assigned Internet Protocol address DS Channel The direct-sequence channel used by the AP . The MUs associated with the AP .
  • Page 167: Ethernet Statistics

    Monitoring Statistics Ethernet Statistics The AP keeps Ethernet performance statistics including packet transmission and data retries until reset. • Select Ethernet Statistics from the Main Menu to display: Symbol Access Point Ethernet Statistics Packets Seen Packets Sent Packets Forwarded Any Collisions...
  • Page 168 Monitoring Statistics Packets Sent The total packets sent out. Any Collision The packets affected by at least one collision. 1 + Collisions The packets affected by more than one collision. Maximum Collisions The packets affected by the maximum number of collision.
  • Page 169: Radio Statistics

    The AP keeps radio performance statistics including packet and communication information. To view RF statistics: • Select Show RF Statistics from the Main Menu to display: Symbol Access Point RF Statistics Data Pkts Sent Data Pkts Rcvd Data Bytes Sent...
  • Page 170 Monitoring Statistics Radio performance statistics include: Data Packets Sent The total data packets transmitted. Data Bytes Sent The total data packets transmitted in bytes. BC/MC Packets Sent The broadcast/multicast user data packets successfully transmitted. BC/MC Bytes Sent The broadcast/multicast user data bytes successfully transmitted.
  • Page 171 Succ Reass Packets The packets successfully reassembled. Unsucc Reass Packets The packets unsuccessfully reassembled. Fragments Rcvd The packet fragments received. Rcv Duplicate Pkts The Duplicate packets received by the AP . This indicates the AP sent an ACK, but the MU did not receive it and transmitted the packet again.
  • Page 172 Monitoring Statistics • To display the WLAP RF Statistics screen select WLAP-[F3] Symbol Access Point WLAP RF Statistics Current # WLAP Root Interface Root Priority 1000 hex Current State Functional Root MAC Addr 00:A0:F8:73:51:F2 Priority 8000 hex Root Path Cost...
  • Page 173 Monitoring Statistics Where: Current # WLAP Itf Refers to the current Wireless AP interfaces in use in range. Current State On initialization, the AP can be in any of the following states of wireless operation: • starting the initializing process: –...
  • Page 174 Monitoring Statistics WLAP Itf MAC Addr States the MAC address of the associated WLAP . Itf State Identifies the state of the interface from: • DIS - the interface is disabled • LIS - the AP listens for information • LRN - the AP learns the information •...
  • Page 175: Miscellaneous Statistics

    The AP keeps statistics on WNMP and SNMP packets, filtering and Mobile IP . The Miscellaneous Statistics screen shows grouped statistics. • Select Show Misc Statistics from the Main Menu to display: Symbol Access Point Misc System Statistics WNMP Mobile IP...
  • Page 176 Monitoring Statistics WNMP statistics include: Echoes echo requests received by the AP Pings ping requests received by the AP Passthrough Echoes echoes for MUs associated with the AP SNMP statistics include: Requests configuration requests received from the SNMP manager Traps AP messages sent to the SNMP manager Filter statistics include: ACL Violations...
  • Page 177: Analyzing Channel Use

    Monitoring Statistics 3.9.1 Analyzing Channel Use The AP keeps statistics for individual Channels (frequencies). These identify channels that have difficulty transmitting or receiving due to retries. To view statistics for individual channels: 1. Select Show Misc Statistics from the Main Menu. 2.
  • Page 178: Analyzing Retries

    Monitoring Statistics 3.9.2 Analyzing Retries The AP keeps statistics of packets with multiple retries. Use these statistics to identify severe occurrences of retries. Retries occur when the transmitting station fails to receive an acknowledgment for a transmitted packet. This lack of acknowledgment can result from: •...
  • Page 179: Event History

    AP powered up or reset. The type of event logged follows the time stamp. If the event involves an MU or AP , the unit MAC address displays. Symbol Access Point Event History pg 2 Warning: Event logging is frozen while this screen is displayed.
  • Page 180: Clearing Statistics

    Monitoring Statistics 3.11 Clearing Statistics To clear statistics: 1. Select Special Functions from the Main Menu. 2. Select Clear All Statistics. The AP zeroes all statistics. Resetting the AP also clears statistics. AP-4100 Series Access Point Product Reference Guide...
  • Page 181: Chapter 4 Hardware Installation

    Check package contents for: • • power adapter Contact the Symbol Support Center to report missing or improperly functioning items. Verify the AP model indicated on the bottom of the unit and packaging. AP-4100 Series Access Point Product Reference Guide...
  • Page 182: Requirements

    For management user interface access to the serial connector, use a standard null-modem cable for direct serial connection. Order a null-modem cable, part number 61383-00-0, by contacting a Symbol sales representative. Test and use the radio network with an MU. 4.3.1 Network Connection Locate connectors for Ethernet and power on the back of the AP .
  • Page 183: Placing The Ap

    3. Add more access points as needed. When connecting the AP-4121 model access point to an Ethernet switch, ensure switch port parameters are set to Half Duplex. Severe performance degradation may result from mis-matched speed or duplex mode. Refer to the rear of the access point for product model information.
  • Page 184: Power Options

    US line cord. Part Number: 23844-00-00 A Symbol BIAS-T system can also be used to combine low-voltage DC with Ethernet data in a single cable connecting to an access point. For information on the BIAS-T system, go to (www.symbol.com) and search for the BIAS-T low power distribution system.
  • Page 185: Mounting The Ap

    Hardware Installation Mounting the AP The AP rests on a flat surface or attaches to a wall, or any hard, flat, stable surface. Use the standard-mounting kit provided with the Spectrum24 AP-4100 series Access Point. Choose one of the options based on the environment Resting flat Rests on the four rubber pads on the underside of the AP .
  • Page 186: Bias-T Low Power Distribution System

    Hardware Installation BIAS-T Low Power Distribution System The BIAS-T system provides an economical and reliable method for powering access point(s) from a remote location. The BIAS-T system combines low- voltage DC with Ethernet data in a single cable connecting to an access point.
  • Page 187 Hardware Installation The BIAS-T is a small lightweight unit with a RJ-45 patch cord input connector from the hub on the left-hand side and a RJ-45 patch cord output connector (via the wiring infrastructure) to an access point on the right-hand side. Also on the left-hand side of the BIAS-T is a 24-volt DC connector used to input DC power from the power supply.
  • Page 188 Hardware Installation To install a BIAS-T system using a single BIAS-T unit and access point: Steps 1-3 could involve running Ethernet cabling through industrial walls or ceilings. Only a qualified contractor should perform this kind of cabling. 1. Attach one end of a RJ-45 patch cord (5-50 ft.) to the access point. Run the other end of the RJ-45 patch cord through a ceiling or wall into a punch down termination box.
  • Page 189 BIAS-T unit to the HUB supporting the Spectrum24 component installation. 5. Attach the cable supplied with the Symbol Standard 24-volt power supply to the power-input connector on the left-hand side of the BIAS-T unit. 6. Repeat steps 1 through 5 for each additional BIAS-T unit and Spectrum24 access point connected to the HUB as part of the same Spectrum24 component installation.
  • Page 190: Led Indicators

    Hardware Installation LED Indicators The top panel LED indicators provide a status display indicating transmission and other activity. The indicators are: Power Flashing indicates AP initialization. Steady Green during operation. Wired LAN Activity Flashing indicates data transfers on wired connection. Wireless LAN Activity Flickering indicates beacons and data transfers with MUs.
  • Page 191: Wlap Mode Led Display

    Hardware Installation 4.9.1 WLAP mode LED display. When in the WLAP mode the chart below signifies the APs LED indicator status. For the IEEE 802.11 protocol and APs using firmware version 2.51-0X above only. 1. After power up, system initialization begins: State Power Wired LAN Activity...
  • Page 192 Hardware Installation 5. When all WLAP connections are in Forward state: State Power Wired LAN Activity Blinks if activity occurs Wireless LAN Activity Blinks regularly Special cases: • If the WLAP manual BSS_ID is NOT set and no other WLAP is found, the WLAP goes to the functional state.
  • Page 193: Troubleshooting

    Hardware Installation 4.10 Troubleshooting Check the following symptoms and their possible causes before contacting the Symbol Support Center. 4.10.1 Ensure wired network is operating Verify AP operation: 1. AP does not power up: – faulty AP power supply – failed AC supply –...
  • Page 194: Setting Up Mus

    Hardware Installation – Check that the radio driver loaded properly. – Check that the MU PROTOCOL.INI or NET.CFG file is compatible with the network operating system. 4. Slow or erratic performance: – Check MU and RF communications range. – Check antenna, connectors and cabling. –...
  • Page 195: Appendix A Specifications

    Specifications Appendix A A.1 Physical Characteristics Dimensions 1.75” H x 6” L x 8.5” W (4.45” cm H x 15.24” cm L x 21.59” cm W) Weight 1 lbs. (0.454 kg) (w/power supply) Operating -4º F to 131º F (-20º C to 55º C) Temperature Storage Temperature -40º...
  • Page 196: Radio Characteristics

    Specifications A.2 Radio Characteristics Frequency Range country dependent; within 2400 MHz to 2500 MHz Radio Data Rate • 11 Mbps -- Optional • 5.5 Mbps -- Optional • 2 Mbps -- Required • 1 Mbps -- Required 11 Mbps Range open environment - over 100 ft.
  • Page 197: Network Characteristics

    Ethernet Connection 10Base-T (AP-4121 model access point) Serial PC/AT serial port - DB9 Male, RS-232 using a DTE termination, 19200 bps SNMP Version 1, Version 2 subset, Symbol MIB, 802.11 MIB and MIB-II AP-4100 Series Access Point Product Reference Guide...
  • Page 198 Specifications AP-4100 Series Access Point Product Reference Guide...
  • Page 199: Appendix B Supported Modems

    The AP uses Hayes commands and is capable of working with various modems of 19200 baud or faster. Symbol does not support modems the company has not qualified. The following modems qualify to work with the AP-4121 HR access point: •...
  • Page 200 Supported Modems AP-4100 Series Access Point Product Reference Guide...
  • Page 201: Appendix C Customer Support

    Appendix C Symbol Technologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact for any technical problem, question or support issue involving Symbol products. If the Symbol Customer Support specialists cannot solve a problem, access to all technical disciplines within Symbol becomes available for further assistance and support.
  • Page 202 0800-328-2424 (Inside UK) +44 118 945 7529 (Outside UK) Symbol Developer Program Web Site http://software.symbol.com/devzone Symbol Knowledge Base http://kb.symbol.com/register.asp Additional Information Obtain additional information by contacting Symbol at: • 1-800-722-6234, inside North America • +1-631-738-5200, in/outside North America • http://www.symbol.com/...
  • Page 203 Country Identification Codes Appendix D Use the table below to select a Country Name, First Channel, Number (No.) of Channels, Default Channel, Maximum Transmit Power, Regulatory Domain, and Country ID. Update these values in the AP installation screen. Contact a local representative for any country not listed. Country Name Country ID Channels...
  • Page 204 Country Identification Codes Country Name Country ID Channels Max. Tx Regulatory Power (Dbm) Domain First No. Default Finland France Germany Greece Guatemala Hong Kong Hungary Iceland India Indonesia Ireland Israel Italy Japan Jordan Kuwait Liechtenstein Lithuania Luxembourg Malaysia Mexico Morocco Netherlands New Zealand Norway...
  • Page 205 Country Identification Codes Country Name Country ID Channels Max. Tx Regulatory Power (Dbm) Domain First No. Default Panama Philippines Poland Portugal Qatar Romania Russian Federation RU Saudi Arabia Singapore Slovak Republic Slovenia South Africa South Korea Spain Sri Lanka Taiwan Thailand Turkey Ukraine...
  • Page 206: Appendix D Country Identification Codes

    Country Identification Codes A site license is required for India. To support this regulatory requirement, enter the Site License ID in the field on the AP Installation Screen. Net_ID AP-4100 Series Access Point Product Reference Guide...
  • Page 207: Appendix E Installing And Configuring Kerberos Setup Service

    Installing and Configuring Appendix E Kerberos Setup Service The Kerberos Setup Service (KSS) is an optional program running on the Key Distribution Center (KDC) server. The KSS can be used optionally to administer Spectrum24 access points authorized on the network. For example, an AP on the Access Control List (ACL) is lost or stolen.
  • Page 208: Installing The Kss In A Windows 2000 Environment

    E.2 Installing the KSS in a Windows 2000 Environment Install the optional KSS from the Spectrum24 High Rate 11 Mbps Wireless LAN Software CDROM or go to the Symbol Website (http://www.symbol.com/services/downloads/download_wireless.html). If internet access is unavailable, contact a sales representative for a CD.
  • Page 209 Installing and Configuring Kerberos Setup Service 5. Click Next when the Choose Destination Location dialog box displays to install KSS to the default destination folder. The user has the option of clicking Browse and selecting a different folder if necessary. A progress bar displays showing the progress of the KSS files installation.
  • Page 210 Installing and Configuring Kerberos Setup Service 3. Enter the user name (20 characters maximum) in the First name Last name fields. Click Next. 4. Enter and confirm a password for the user. 5. Select the Password never expires checkbox and click Next. A confirmation dialog box displays.
  • Page 211: Preparing The Kss For Access Point Validation

    Installing and Configuring Kerberos Setup Service E.3 Preparing the KSS for Access Point Validation To prepare the KSS to validate access points: 1. Click Start select Programs, WLAN, WLAN KSS, and Start KSS. Kerberos Setup Service dialog box displays. 2. Using the user account created in the previous section, select Admin Info from the File...
  • Page 212 Installing and Configuring Kerberos Setup Service Preference dialog box displays. 5. Select User Defined Secret Key to enter and confirm a secret key different from the default key. If the default secret key is acceptable, leave the Default Secret Key checkbox selected.
  • Page 213 Installing and Configuring Kerberos Setup Service Kerberos Account Entry dialog box displays. 8. Select the Edit Open Enrollment Default Properties checkbox. 9. Enter the Name, Realm/Domain KDC IP Address values. Do not set an ESSID or create a Password at this time. ESSID/Principal Password are sent from the AP , during Open...
  • Page 214 Installing and Configuring Kerberos Setup Service 10. Click Save. Kerberos Account Entry property page displays the new values. 11. Click Exit to return to the Kerberos Setup Service window. 12. Click the AP ACL icon (second icon from the top right-hand side). AP Setup Account Database dialog box displays.
  • Page 215 Installing and Configuring Kerberos Setup Service Selecting Enable (Always) from the Setup Status pull-down menu enables KSS authentication for the selected access point at all times. Selecting Enable (Start-Expire) from the Setup Status pull-down menu enables KSS authentication for the selected access point only during the time period specified within the Setup Start Time Setup Expire Time...
  • Page 216 Installing and Configuring Kerberos Setup Service Listen For Connection Box displays. 17. Select if this is the correct connection port. Kerberos Setup Service window displays. The next step is to configure the access points for Kerberos support if they have not already been configured. 18.
  • Page 217 Installing and Configuring Kerberos Setup Service When the APs initialize, the AP list view window displays the Connection Events (APs that were either successful or were not granted access to KSS). 19. When the access points have successfully initialized, select Disable Open Enrollment from the...
  • Page 218: Manually Creating An Access Point Setup Account

    Installing and Configuring Kerberos Setup Service E.4 Manually Creating an Access Point Setup Account Manually create an AP Setup Account for the AP and create a Kerberos account with the KDC. The AP Setup Account database stores validation information for an AP . Manually create an access point setup account only if the user does not want to use the Open Enrollment option.
  • Page 219 Installing and Configuring Kerberos Setup Service To create an access point setup account: 1. From the Edit menu, select AP Setup ACL. 2. Enter the AP MAC Address as a Primary Key in the AP Setup Account Database dialog box. 3.
  • Page 220: Implementing Kerberos Without The Kss

    Installing and Configuring Kerberos Setup Service 4. Enter the AP access range set the time and status information using the Setup Start Time Setup Expire Time pull-down menus. 5. Set the SNMP Setting. 6. Click when all the parameters have been entered. After the AP initializes, the AP list view window displays the Connection Events...
  • Page 221 Installing and Configuring Kerberos Setup Service The access point can now be configured for Kerberos support via the Serial or Telnet interfaces. The Kerberos Configuration parameters have been moved to the Special Functions screen in the Serial and Telnet UI. 6.
  • Page 222: Kerberos Error Codes

    Installing and Configuring Kerberos Setup Service E.6 Kerberos Error Codes E.6.1 KDC Error Codes The following error codes and their explanations display on the AP Event Monitor screen when (if) an error occurs: Error Code Explanation KDC_ERR_NONE No error KDC_ERR_NAME_EXP Client entry in database expired KDC_ERR_SERVICE_EXP Server entry in database expired...
  • Page 223 Installing and Configuring Kerberos Setup Service Error Code Explanation KDC_ERR_CLIENT_REVOKED 18 Clients credentials revoked KDC_ERR_SERVICE_REVOKED 19 Credentials for server revoked KDC_ERR_TGT_REVOKED 20 TGT has been revoked KDC_ERR_CLIENT_NOTYET 21 Client not valid - try again later KDC_ERR_SERVICE_NOTYET Server not valid - try again later KDC_ERR_KEY_EXPIRED 23 Password expired - change password to reset...
  • Page 224: Additional Kerberos Error Codes

    Installing and Configuring Kerberos Setup Service Error Code Explanation KRB_AP_ERR_BADSEQ 49 Alternative authentication method required* KRB_AP_ERR_INAPP_CKSUM 50 Incorrect sequence number in message KRB_ERR_GENERIC 60 Generic error (description in e-text) KRB_ERR_FIELD_TOOLONG 61 Field is too long for this implementation *This error carries additional information in the e-data field. E.6.2 Additional Kerberos Error Codes The following error codes and their explanations display on the AP Event Monitor screen if an error occurs:...
  • Page 225 Installing and Configuring Kerberos Setup Service Error Code Explanation OBTAIN_PDATA_FAIL 7 AP failed to obtain pre-authentication data. Verify the KDC is using the correct name or IP address. ENCODE_AS_REQ_FAIL 8 The access point was unable to send an AS request. DECODE_REPLY_FAIL 9 The access point was unable to decode a replay from the KDC.
  • Page 226 Installing and Configuring Kerberos Setup Service Error Code Explanation STASH_AS_REP_FAIL 17 Problem storing reply in memory, reply data out of bounds. Check KDC. GEN_BCMC_KEY_FAIL 24 Failure generating BC/MC key. DECODE_PREAUTH_FAIL 25 Problem decoding pre-authorization data. Check KDC setup. KRB_ERR_KDC_OPEN 80 Unable to proxy to KDC on behalf of MU.
  • Page 227: Index

    Index Numerics country code 144 data encryption 2 10/100Base-T connection 172 data rate 1 10/100Base-T unshielded twisted pair 172 decryption 27 10/100Base-T UTP 172 dial-up access 37 direct-sequence 20 access control 15 disallowed address 15 disallowed address 15 encryption 26 MU 15 Ethernet device 4 unauthorized access 15...
  • Page 228 Mobile IP 23 load ACL from MU list 104 model number 146 options 104 monitoring statistics 143 removing allowed MUs 103, 104 mounting 175 removing disallowed MUs removing network connection 172 disallowed MUs 107 power adapter 175 unauthorized access 15 power options 174 Adding 108 address filtering 106...
  • Page 229 tx power control 3 root AP 11 type filtering 108 RSSI 22 updating using Xmodem 117 scanning 21 wireless operation parameters 84 TIM 11 WLAP mode 7, 8, 11, 85, 146 WLAP mode 11 WLAP mode LED display 181 WLAP priority value 11 WLAP priority value 11 auto fallback to wireless mode introduction 15...
  • Page 230 manually updating using TFTP 113 kerberos errors 97 maximum retries 76 radio restart 96 Mobile IP 153 read/write community 96 MU 77 read-only community 96 multicast mask (data) 77 SNMP agent mode 96 multicast mask (voice) 77 trap host1 IP address 96 radio parameters 9, 75 trap host2 IP address 96 resetting 142...
  • Page 231 kerberos enable 17 DHCP support 2 kss name 17 DNS support 2 kss port number 17 increased MIB support 2 digital data 3 Kerberos security 3 direct sequence spread spectrum 3 PC/AT serial port interface 2 disallowed address 15 power supply IEC connector 2 access control 15 short RF preamble 2 ACL 15...
  • Page 232 power options 174 TGS_REQ 30 precautions 171 Ticket Granting Ticket Server 29 single-cell connection 173 known APs 154 MAC and IP addresses 154 site survey 172 statistics 154 Help file network Web server 44 databases 33 disable open enrollment 32 ICMP 137 enable open enrollment 32 IEEE 802.1d Spanning Tree support...
  • Page 233 roaming across routers 23 using MD5 authentication 140 network topology 4 mobile unit (MU) ESS 9 Model Number 146 programmable SNMP trap 35 monitoring statistics 143 management stations 35 ethernet statistics 157 MIB 35 interface statistics 147 SNMP agent 35 miscellaneous statistics 165 PSP stations 25 radio statistics 159...
  • Page 234 Encryption Key Maintenance 81 DTIM 11 max retries (data) 76 TIM 11 max retries (voice) 76 WLAP mode 11 multicast mask 77 reassembly timeout 76 security 26 RTS threshold 78 clock 72 Short RF Preamble 82 decryption 26 Tx Power Control 82 encryption 26 WEP (Privacy) 79 kdc name 72...
  • Page 235 wireless network 1 realm name 72 spread spectrum rf Interface 66 2.4GHz 1 S24 Mobile IP 64 2.5GHz 1 System Password Admin 65 statistics 143 Telnet logins 63 ethernet 157 time of day 72 filter 166 time zone 72 forwarding counts 148 type filtering 65 interface statistics 147 user id 72...
  • Page 236 SRAM test 183 WLAP manual BSS ID 79, 80, 87 wired network operation 183 WLAP Max Age 79, 80, 87 wired network problems 183 WLAP mode 79, 86 type filtering WLAP priority 79, 86 adding filter types 108 WLAP configuration 108 priority value 11 removing filter types 108 WLAP forward delay...

Table of Contents