Introduction Moxa AirWorks AWK-5232 with dual-RF wireless capability allows wireless users to access network resources more reliably. The AWK-5232 is rated to operate at temperatures ranging from 0 to 60°C for standard models and -40 to 75°C for extended temperature models, and is rugged enough for any harsh industrial environment.
AWK-5232 Introduction Overview The AWK-5232 Industrial a/b/g/n Wireless AP/Bridge/Client is an ideal wireless solution for connecting mobile equipment connected over a TCP/IP network in hard-to-wire situations. The AWK-5232 provides faster throughput than standard 802.11g devices, and at temperatures ranging from 0 to 60°C for standard models to -40 to 75°C for wide temperature models, making the AWK-5232 series rugged enough for any industrial environment.
AWK-5232 Introduction Product Specifications ATTENTION The AWK-5232 is NOT a portable mobile device and should be located at least 20cm away from the human body. The AWK-5232 is NOT designed for the general public. To safely deploy the AWK-5232s within a wireless network, a well-trained technician is required for installation.
AWK-5232 Introduction Color State Description 1000M Green TP port’s 1000 Mbps link is active. Blinking Data is being transmitted at 1000 Mbps TP port’s 1000 Mbps link is inactive. ATTENTION When the LEDs for STATE (Green), FAULT, WLAN1 and WLAN2 all light up simultaneously and blink at one-second intervals, it means the system has failed to boot.
AWK-5232 Introduction Antennae units = mm (in) The AWK-5232 supports 802.11 a/b/g/n with 2x2 MIMO technology and a dual RF solution. Antennas 1A and 1B are the MIMO antennas associated with RF1, and 2A and 2B are the MIMO antennas associated with RF2.
Getting Started This chapter explains how to install Moxa’s AirWorks AWK-5232 for the first time, to quickly set up your wireless network and test whether the connection is running well. With this function guide, you will gain access to the functions you need easily.
AWK-5232 Getting Started First-time Installation and Configuration Before installing the AWK-5232, make sure that all items in the Package Checklist are in the box. In addition, you will need access to a notebook computer or PC equipped with an Ethernet port. The AWK-5232 has a default IP address that you must use when connecting to the device for the first time.
AWK-5232 Getting Started NOTE Default user name and password: Username: admin Password: root For security reasons, we strongly recommend changing the default password. To do so, select Maintenance Password, and then follow the on-screen instructions to change the password. NOTE After you click Submit to apply changes, you can see that the web page is refreshed, and the string “(Update)”...
AWK-5232 Getting Started Testing Method for two or more AWK-5232s If you have two or more AWK-5232s, you will need a second notebook computer (B) equipped with an Ethernet port. Use the default settings for the first AWK-5232 connected to notebook A and change the second or third AWK-5232 connected to notebook B to Client mode.
Page 14
AWK-5232 Getting Started A quick overview of the AWK-5232’s status Basic settings for administering the AWK-5232 Essential settings related to establishing a wireless network Advanced features to support additional network management and secure wired and wireless communication * These advanced functions are all optional. Application-oriented device management functions to set up events, traps, and reactions via relay warning, e-mail and...
Web Console Configuration In this chapter, we will explain each web management page of the web-based console configuration. Moxa’s easy-to-use management functions will help you set up your AWK-5232, as well as establish and maintain your wireless network easily. The following topics are covered in this chapter: ...
AWK-5232 Web Console Configuration Configuration by Web Browser Moxa AWK-5232’s web browser interface provides a convenient way to modify its configuration and access the ® built-in monitoring and network administration functions. The recommended web browser is Microsoft Internet Explorer 5.5 or 6.0 with JVM (Java Virtual Machine) installed. NOTE To use the AWK-5232’s management and monitoring functions from a PC host connected to the same LAN as the AWK-5232, you must make sure that the PC host and AWK-5232 are on the same logical subnet.
AWK-5232 Web Console Configuration In the following paragraphs, we will go through each of the AWK-5232’s management functions in detail. You can also get a quick overview of these functions in the “Function Guiding Map” section of Chapter 2. NOTE The model name of the AWK-5232 is shown as AWK-5232-XX where XX indicates the country code.
AWK-5232 Web Console Configuration Basic Settings The Basic Settings group includes the most commonly used settings required by administrators to maintain and control the AWK-5232. System Info Settings The System Info items, especially Device name and Device description, are displayed and included on the Overview page, SNMP information, and alarm emails.
AWK-5232 Web Console Configuration IP configuration Setting Description Factory Default DHCP The AWK-5232’s IP address will be assigned automatically by Static the network’s DHCP server Static Set up the AWK-5232’s IP address manually. IP address Setting Description Factory Default AWK-5232’s IP address Identifies the AWK-5232 on a TCP/IP network. 192.168.127.253 Subnet mask Setting...
AWK-5232 Web Console Configuration NOTE The AWK-5232 has a real time clock (RTC). Users are strongly recommended to update the Local time for the AWK-5232 after initial setup or long-term shutdown, especially when the network does not have an Internet connection for accessing the NTP server or there is no NTP server on the LAN.
Page 21
AWK-5232 Web Console Configuration Wireless Redundancy In traditional architectures, most vendors only provide a single RF AP and Client, in which the AP connects one or more Clients to the network. Since the AP and Client are connected by a single RF connection, if the RF connection is disconnected the system or network behind the Client will be disconnected, too.
AWK-5232 Web Console Configuration The following figure shows the Wireless Redundancy operation mode: WLAN Operation mode Setting Description Factory Default Redundant AP AP with Dual RF redundancy capable of serving dual RF clients. Redundant AP Redundant Client Dual RF redundant clients can join dual RF redundant APs. Wireless Bridge A bridge is a network component that connects two networks.
AWK-5232 Web Console Configuration WLAN 1/WLAN 2 Operation mode Setting Description Factory Default Master Master can build a connection with a Slave that has the same AP for WLAN 1 RF type, SSID, and security settings. Master for WLAN 2 Slave Slave can build a connection with a master that has the same RF type, SSID, and security settings.
Page 24
AWK-5232 Web Console Configuration Wireless Bridge Mode’s Master You can set the virtual AP function in Wireless Bridge AP mode Master setting. Click Add SSID, enter the name for the SSID, then click Save. Basic Wireless Setting The following figure shows the Basic Wireless Settings page. The parameters and options are described as follows: RF type Setting...
Page 25
AWK-5232 Web Console Configuration G/N Mixed Supports IEEE 802.11g/n standards, but 802.11n may operate at a slower speed if 802.11g clients are on the network B/G/N Mixed Supports IEEE 802.11b/g/n standards, but 802.11g/n may operate at a slower speed if 802.11b clients are on the network N Only (2.4GHz) Only supports the 2.4 GHz IEEE 802.11n standard 5 GHz...
AWK-5232 Web Console Configuration NOTE If your device uses redundant Client, Client, or Slave mode, you can find an additional Site Survey button on basic wireless settings page. The button supports site survey and pops up a dialog box listing the information for available APs, as shown in the following figure.
Page 27
AWK-5232 Web Console Configuration Security mode Setting Description Factory Default Open No authentication Open Static WEP is used WPA is used WPA2 Fully supports IEEE 802.11i with “TKIP/AES + 802.1X” in 802.11a/b/g mode; supports IEEE 802.11i with "AES + 802.1X" in 802.11n mode Open For security reasons, it is highly recommended that the security mode should be set to the options other than Open System.
Page 28
AWK-5232 Web Console Configuration Authentication type Setting Description Factory Default Open Data encryption is enabled, but no authentication. Open Shared Data encryption and authentication are both enabled. Key type Setting Description Factory Default Specifies WEP keys in hex-decimal number form ASCII Specifies WEP keys in ASCII form Key length...
Page 29
AWK-5232 Web Console Configuration WPA Type Setting Description Factory Default Personal Provides Pre-Shared Key-enabled WPA and WPA2 Personal Enterprise Provides enterprise-level security for WPA and WPA2 Encryption method Setting Description Factory Default TKIP Temporal Key Integrity Protocol is enabled TKIP Note: This option is not supported under 802.11n.
Page 30
AWK-5232 Web Console Configuration WPA Type Setting Description Factory Default Personal Provides Pre-Shared Key-enabled WPA and WPA2 Personal Enterprise Provides enterprise-level security for WPA and WPA2 Encryption method Setting Description Factory Default TKIP Temporal Key Integrity Protocol is enabled TKIP Note: This option is not supported under 802.11n.
Page 31
AWK-5232 Web Console Configuration EAP Protocol Setting Description Factory Default Specifies Transport Layer Security protocol TTLS Specifies Tunneled Transport Layer Security PEAP Specifies Protected Extensible Authentication Protocol, or Protected EAP Before choosing the EAP protocol for your WPA/WPA2-Enterpise settings on the client end, please contact the network administrator to make sure the system supports the protocol on the AP end.
Page 32
AWK-5232 Web Console Configuration The AWK-5232 provides some non-cryptographic EAP methods including PAP, CHAP, MS-CHAP, and MS-CHAP-V2. These EAP methods are not recommended for direct use on wireless networks. However, they may be useful as inner authentication methods with TTLS or PEAP. Because the inner and outer authentications can use distinct user names in TTLS and PEAP, you can use an anonymous user name for the outer authentication, while the true user name is shown only through the encrypted channel.
AWK-5232 Web Console Configuration Inner EAP protocol Setting Description Factory Default MS-CHAP-V2 Microsoft CHAP version 2 is used MS-CHAP-V2 Anonymous Setting Description Factory Default Max. 31 characters A distinct name used for outer authentication None User name & Password Setting Description Factory Default User name and password used in inner authentication...
Page 34
AWK-5232 Web Console Configuration Multicast Rate Setting Description Factory Default Available rates You can set a fixed multicast rate for the transmission of broadcast and multicast packets on a per-radio basis. This parameter can be useful in an environment where multicast video streaming is occurring in the wireless medium, providing the wireless clients are capable of handling the configured rate.
Page 35
AWK-5232 Web Console Configuration Fragmentation threshold Setting Description Factory Default Fragment Length Specifies the maximum size a data packet before splitting and 2346 (256 to 2346) creating another new packet RTS threshold Setting Description Factory Default RTS/CTS Threshold Determines how large a packet can be before the Access Point 2346 (256 to 2346) coordinates transmission and reception to ensure efficient...
AWK-5232 Web Console Configuration WLAN Certification Settings (for EAP-TLS in Redundant Client, Client or Slave mode only) When EAP-TLS is used, a WLAN Certificate will be required at the client end to support WPA/WPA2-Enterprise. The AWK-5232 can support the PKCS #12, also known as Personal Information Exchange Syntax Standard, certificate formats that define file formats commonly used to store private keys with accompanying public key certificates, protected with a password-based symmetric key.
AWK-5232 Web Console Configuration Using Virtual LAN Setting up Virtual LANs (VLANs) on your AWK series increases the efficiency of your network by dividing the LAN into logical segments, as opposed to physical segments. In general, VLANs are easier to manage. The Virtual LAN (VLAN) Concept What is a VLAN? A virtual LAN, commonly known as a VLAN, is a group of hosts with a common set of requirements that...
AWK-5232 Web Console Configuration Configuring Virtual LAN VLAN Settings To configure the AWK’s VLAN, use the VLAN Setting page to configure the ports. Management VLAN ID Setting Description Factory Default VLAN ID Set the management VLAN of this AWK. ranges from 1 to 4094 Port Type...
AWK-5232 Web Console Configuration NOTE The VLAN feature can allow wireless clients to manage the AP. If the VLAN Management ID matches a VLAN ID, then those wireless clients who are members of that VLAN will have AP management access. CAUTION: Once a VLAN Management ID is configured and is equivalent to one of the VLAN IDs on the AP, all members of that User VLAN will have management access to the AP.
AWK-5232 Web Console Configuration Class B network, or 255.255.255.0 for a Class C network) Primary/ Secondary DNS server Setting Description Factory Default IP address of Primary/ The IP address of the DNS Server used by your network. After None Secondary DNS server entering the DNS Server’s IP address, you can use URL as well.
Page 41
AWK-5232 Web Console Configuration ATTENTION Be careful when you enable the filter function: Drop + “no entity on list is activated” = all packets are allowed Accept + “no entity on list is activated” = all packets are denied IP Protocol Filter The AWK-5232’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified IP protocol and source/destination IP addresses.
AWK-5232 Web Console Configuration The Application name is a text string that describes the corresponding entity with up to 31 characters. Remember to check the Active check box for each entity to activate the setting. Enable Setting Description Factory Default Enable Enables TCP/UDP port filter Disable...
Page 43
AWK-5232 Web Console Configuration Bridge priority Setting Description Factory Default Numerical value You can increase the bridge priority by selecting a lower 32768 selected number. A higher bridge priority brings a greater chance of by user being established as the root of the Spanning Tree topology. Hello time Setting Description...
AWK-5232 Web Console Configuration Port Status Port Status indicates the current Spanning Tree status of this port. Use Forwarding for normal transmission, or Blocking to block transmission. SNMP Agent The AWK-5232 supports SNMP V1/V2c/V3. SNMP V1 and SNMP V2c use a community string match for authentication, which means that SNMP servers access all objects with read-only or read/write permissions using the community string public/private (default value).
AWK-5232 Web Console Configuration Enable Enables SNMP Agent Disable Disable Disables SNMP Agent Read community (for V1, V2c, V3 or V1, V2c) Setting Description Factory Default Read Community Use a community string match with a maximum of 31 public characters for authentication. This means that the SNMP agent can access all objects with read-only permissions using this community string.
AWK-5232 Web Console Configuration Storm Protection Setting Description Factory Default Enable/Disable Enable or disable Broadcast Storm Protection globally for Enable multicast packets Multicast and flooding Setting Description Factory Default Enable/Disable If you enable Storm Protection, the Multicast and flooding Disable option will show up.
AWK-5232 Web Console Configuration System-related events Event is triggered when… System restart (warm start) The AWK-5232 is rebooted, such as when its settings are changed (IP address, subnet mask, etc.). Network-related events Event is triggered when… LAN 1 or LAN 2 link on The LAN port is connected to a device or network.
AWK-5232 Web Console Configuration Syslog Server Settings You can configure the parameters for your Syslog servers in this page. Syslog server 1/ 2/ 3 Setting Description Factory Default IP address Enter the IP address of the 1st/ 2nd/ 3rd Syslog Server None Syslog port Setting...
Page 49
AWK-5232 Web Console Configuration E-mail Server Settings You can set up to 4 e-mail addresses to receive alarm emails from the AWK-5232. The following parameters can be configured on the E-mail Server Settings page. In addition, a Send Test Mail button can be used to test whether the Mail server and e-mail addresses work well.
AWK-5232 Web Console Configuration From e-mail address Setting Description Factory Default Max. 63 characters Enter the administrator’s e-mail address which will be shown in None the “From” field of a warning e-mail. To E-mail address 1/ 2/ 3/ 4 Setting Description Factory Default Max.
Page 51
AWK-5232 Web Console Configuration Trap Event Types SNMP Trap Receiver Settings SNMP traps are defined in SMIv1 MIBs (SNMPv1) and SMIv2 MIBs (SNMPv2c). The two styles are basically equivalent, and it is possible to convert between the two. You can set the parameters for SNMP trap receivers through the web page.
AWK-5232 Web Console Configuration 1st / 2nd Trap community Setting Description Factory Default Max. 31 characters Use a community string match with a maximum of 31 alert characters for authentication. Status Wireless Status The status for 802.11 info parameters, such as Operation mode and Channel, are shown on the Wireless Status page.
AWK-5232 Web Console Configuration DHCP Client List (for AP mode only) When you enable the DHCP server, the DHCP Client List shows all the clients that require and have successfully received IP assignments. You can click the Refresh button to refresh the list. You can press Select all button to select all content in the list for further editing.
AWK-5232 Web Console Configuration Relay Status The status of user-configurable events can be found under Relay Status. The status will refresh every 5 seconds if the Auto refresh box is checked. If an event is triggered, it will be noted on this list. System administrators can click Acknowledge Event when he has acknowledged the event and addressed it.
AWK-5232 Web Console Configuration Maintenance Maintenance functions provide the administrator with tools to manage the AWK-5232 and wired/wireless networks. Console Settings You can enable or disable access permission for the following consoles: HTTP, HTTPS, Telnet and SSH connections. For more security, we recommend you only allow access to the two secured consoles, HTTPS and SSH.
AWK-5232 Web Console Configuration Firmware Upgrade The AWK-5232 can be enhanced with more value-added functions by installing firmware upgrades. The latest firmware is available at Moxa’s download center. Before running a firmware upgrade, make sure the AWK-5232 is off-line. Click the Browse button to specify the firmware image file and click Firmware Upgrade and Restart to start the firmware upgrade.
AWK-5232 Web Console Configuration Password You can change the administration password for each of the AWK-5232’s console managers by using the Password function. Before you set up a new password, you must input the current password and reenter the new password for confirmation. For your security, do not use the default password root, and remember to change the administration password regularly.
AWK-5232 Web Console Configuration After you click on Save Configuration in the left menu box, the following screen will appear. Click Save if you wish to update the configuration settings in the flash memory at this time. Alternatively, you may choose to run other functions and put off saving the configuration until later.
AWK-5232 Web Console Configuration Logout Logout helps users disconnect the current HTTP or HTTPS session and go to the Login page. For security reasons, we recommend you logout before quitting the console manager. 3-45...
AWK-5232 Software Installation/Configuration Overview The Documentation & Software CD included with your AWK-5232 is designed to make the installation and configuration procedure easy and straightforward. This auto-run CD includes AWK Search Utility (to broadcast search for all AWK’s accessible over the network), the AWK-5232 User’s Manual, and Quick Installation Guide. AWK Search Utility Installing AWK Search Utility 1.
Page 62
AWK-5232 Software Installation/Configuration 5. Click Next to select additional tasks. 6. Click Next to proceed with the installation. The installer then displays a summary of the installation options.
AWK-5232 Software Installation/Configuration 7. Click Install to begin the installation. The setup window will report the progress of the installation. To change the installation settings, click Back and navigate to the previous screen. 8. Click Finish to complete the installation of AWK Search Utility. Configuring AWK Search Utility The Broadcast Search function is used to locate all AWK-5232 APs that are connected to the same LAN as your computer.
Page 64
AWK-5232 Software Installation/Configuration 2. Open the AWK Search Utility and then click the Search icon. The “Searching” window indicates the progress of the search. 3. When the search is complete, all AWKs that were located will be displayed in the AWK Search Utility window.
Page 65
AWK-5232 Software Installation/Configuration Click Locate to cause the selected device to beep. Make sure your AWK is unlocked before using the search utility’s icons setting. The AWK will unlock automatically if the password is set to the default. Otherwise you must enter the new password manually. Go to Tools ...
Page 66
AWK-5232 Software Installation/Configuration Use the scroll down list to select the MAC addresses of those AWKs you would like to manage, and then click Add. Key in the password for the AWK device and then click OK to save. If you return to the search page and search for the AWK again, you will find that the AWK will unlock automatically.
Page 67
AWK-5232 Software Installation/Configuration Click on Telnet if you would like to use telnet to configure your AWKs. Click Assign IP to change the IP setting. The three advanced options—Search, Connection, and Miscellaneous—are explained below:...
Page 68
AWK-5232 Software Installation/Configuration Search Retry count (default=5): Indicates how many times the search will be retried automatically. Retry interval (ms): The time lapsed between retries. Connection Connection timeout (secs): Use this option to set the waiting time for the Default Login, Locate, Assign IP, Upload Firmware, and Unlock to complete.
Other Console Configurations This chapter explains how to access the AWK-5232 for the first time. In addition to HTTP access, there are four ways to access AWK-5232: serial console, Telnet console, SSH console, and HTTPS console. The serial console connection method, which requires using a short serial cable to connect the AWK-5232 to a PC’s COM port, can be used if you do not know the AWK-5232’s IP address.
AWK-5232 Other Console Configurations ATTENTION 1. You CANNOT connect to the AWK-5232 by two or more of these console configurations simultaneously. 2. You can connect to the AWK-5232 simultaneously by web browser and serial/ Telnet /SSH console. However, we strongly suggest that you do NOT use more than one connection method at the same time. Following this advice will allow you to maintain better control over the configuration of your AWK-5232.
Page 71
AWK-5232 Other Console Configurations 4. Click on the Terminal tab, and select VT100 (or ANSI) for Terminal Type. Click on OK to continue. 5. The Console login screen will appear. Log into the RS-232 console with the login name (default: admin) and password (default: root, if no new password is set).
AWK-5232 Other Console Configurations ATTENTION If you unplug the RS-232 cable or trigger DTR, a disconnection event will be evoked to enforce logout for network security. You will need to log in again to resume operation. Configuration by Telnet and SSH Consoles You may use Telnet or SSH client to access the AWK-5232 and manage the console over a network.
AWK-5232 Other Console Configurations 2. Warning messages will pop out to warn users that the security certificate was issued by a company they have not chosen to trust. 3. Select Yes to accept the certificate issued by Moxa IW and then enter the AWK-5232’s web browser interface secured via HTTPS/SSL.
References This chapter provides more detailed information about wireless-related technologies. The information in this chapter can help you administer your AWK-5232s and plan your industrial wireless network better. The following topics are covered in this chapter: Beacon DTIM ...
AWK-5232 References Beacon A beacon is a packet broadcast by the AP to keep the network synchronized. A beacon includes the wireless LAN service area, the AP address, the Broadcast destination address, a time stamp, Delivery Traffic Indicator Maps (DTIM), and the Traffic Indicator Message (TIM). Beacon Interval indicates the frequency interval of AP. DTIM Delivery Traffic Indication Map (DTIM) is contained in beacon frames.
AWK-5232 References Differences between RSTP and STP RSTP is similar to STP, but includes additional information in the BPDUs that allow each bridge to confirm that it has taken action to prevent loops from forming when it decides to enable a link to a neighboring bridge. Adjacent bridges connected via point-to-point links will be able to enable a link without waiting to ensure that all other bridges in the network have had time to react to the change.
Supporting Information This chapter presents additional information about this manual and product. You can also learn how to contact Moxa for technical support. The following topics are covered in this chapter: About This User’s Manual DoC (Declaration of Conformity) ...
AWK-5232 Supporting Information About This User’s Manual This manual is mainly designed for, but no limited to, the following hardware and firmware for the AWK-5232: • Hardware Rev: • Firmware Ver: You are strongly recommended to visit Moxa’s website (http://www.moxa.com) and find the latest product datasheet, firmware, QIG (Quick Installation Guide), UM (User’s Manual) and related information.
AWK-5232 Supporting Information responsible for compliance could void the user’s authority to operate this equipment. This transmitter must not be co-located or operated in conjunction with any other antenna or transmitter. FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator &...
Page 80
AWK-5232 Supporting Information Press Ctrl-C and the following message will appear. Enter 2 to change the network setting. Specify where the AWK-5232’s firmware file on the TFTP server and press y to write the settings into flash memory. AWK-5232 restarts, and the “Press Ctrl-C to enter Firmware Recovery Process…” message will reappear. Press Ctrl-C to enter the menu and select 1 to start the firmware upgrade process.
AWK-5232 Supporting Information Technical Support Contact Information Customer satisfaction is our number one concern, and to ensure that customers receive the full benefit of our products, Moxa Internet Services has been set up to provide technical support, driver updates, product information, certification status, installation guide and user’s manual updates.
Need help?
Do you have a question about the airworks awk-5232 and is the answer not in the manual?
Questions and answers