Table of Contents Introduction ............................1-1 Overview ............................1-2 Package Checklist ..........................1-2 Product Features ..........................1-2 Product Specifications ......................... 1-3 Functional Design ..........................1-6 LED Indicators ..........................1-6 Beeper ............................1-7 Reset Button ..........................1-8 Relay (Digital Output) ........................1-8 Getting Started ..........................
Page 4
Other Console Configurations ......................5-1 RS-232 Console Configuration (115200, None, 8, 1, VT100) ..............5-2 Configuration by Telnet and SSH Consoles ..................... 5-4 Configuration by Web Browser with HTTPS/SSL ..................5-4 Disabling Telnet and Browser Access ..................... 5-5 References ............................6-1 Wireless Distribution System (WDS) .....................
Introduction Moxa’s AirWorks AWK-4121 enables wireless access to network resources. The AWK-4121 is rated to operate at temperatures ranging from -40 to 75°C and is rugged enough for any harsh industrial environment. The following topics are covered in this chapter: ...
Introduction Overview The AWK-4121 outdoor wireless Access Point is an ideal solution for industrial applications that are hard to wire, too expensive to wire, or use mobile equipment that connect to a TCP/IP network. The AWK-4121 is rated for operation in the temperature range from -40 to 75°C, and its dust-tight and weatherproof design is IP68-rated.
AWK-4121 Introduction • IP68-rated metal housing • Waterproof RJ45 connectors and M12 connectors Product Specifications WLAN Interface Standards: IEEE 802.11a/b/g for Wireless LAN IEEE 802.11i for Wireless Security IEEE 802.3u for 10/100BaseT(X) IEEE 802.3af for Power-over-Ethernet IEEE 802.1D for Spanning Tree Protocol IEEE 802.1w for Rapid STP...
Details: See www.moxa.com/warranty ATTENTION The AWK-4121 is NOT a portable mobile device and should be located at least 20 cm away from the human body. The AWK-4121 is NOT designed for the general public. A well-trained technician should be enlisted to ensure safe deployment of AWK-4121 units, and to establish a wireless network.
AWK-4121 Introduction The following table summarizes how to read the device’s wireless settings from the LED displays. More information is available in Chapter 3 in the “Basic Wireless Settings” section. Color State Description Front Panel LED Indicators (System) Power is being supplied (From power inputs 1 or 2, or PoE*).
Reset Button The RESET button is located on the bottom panel of the AWK-4121. You can reboot the AWK-4121 or reset it to factory default settings by pressing the RESET button with a pointed object such as an unfolded paper clip.
Page 13
AWK-4121 Introduction Digital Inputs and Relay-out Pin Assignment (8-pin M12 connector) Function DOUT_I DOUT_O DI0+ DI0- DI1+ DI1- reserved reserved...
Getting Started This chapter explains how to install Moxa’s AirWorks AWK-4121 for the first time, quickly set up your wireless network, and test whether the connection is running well. With the function guide, you can easily locate the functions you need.
Before installing the AWK-4121, make sure all items in the Package Checklist are in the box. In addition, you will need access to a notebook computer or PC equipped with an Ethernet port. The AWK-4121 has a default IP address that you must use when connecting to the device for the first time.
Step 5: Select the AWK-4121 operation mode. By default, the AWK-4121’s operation mode is set to AP. You can change the setting to Client mode in Wireless Settings → Basic Wireless Settings. Detailed information about configuring the AWK-4121’s operation can be found in Chapter 3.
If you have two or more AWK-4121s, you will need a second notebook computer (notebook B) equipped with an Ethernet port. Use the default settings for the first AWK-4121 connected to notebook A and change the second or third AWK-4121 connected to notebook B to Client mode. Then, configure the notebooks and AWK-4121s properly.
Page 18
SNMP notification Note: These functions are all optional. Real-time status information for monitoring wired/wireless network performance, advanced services, and device management functions. Functions for maintaining the AWK-4121, and for diagnosing the network. On-demand functions to support the web-based console management operation.
Web Console Configuration In this chapter, we will explain each web management page of the web-based console configuration. Moxa’s easy-to-use management functions will help you set up your AWK-4121, as well as establish and maintain your wireless network easily. The following topics are covered in this chapter: ...
You may need to wait a few moments for the web page to download onto your computer. Please note that the model name and IP address of your AWK-4121 are both shown in the title of the web page. This information can help you identify multiple AWK-4121s.
Page 21
AWK-4121 Web Console Configuration In the following paragraphs, we will go through each of the AWK-4121’s management functions in detail. You can also get a quick overview of these functions in the Function Guide section of Chapter 2. ATTENTION The model name of the AWK-4121 is shown as AWK-4121-XX where XX indicates the country code. The country code represents the AWK-4121 version and which bandwidth it uses.
Web Console Configuration Overview The Overview page summarizes the AWK-4121’s current status. The information is categorized into the following groups: System info, Device info, and 802.11 info. Click on SSID for more detailed 802.11 information, as shown in the following figure.
No. of this AWK-4121> Device location Format Description Factory Default Max. 31 Characters This specifies the location of different AWK-4121 units. None Device description Format Description Factory Default Max. 31 Characters Use this space to record more detailed description of None AWK-4121.
DHCP server Static Set up the AWK-4121’s IP address manually. IP address Setting Description Factory Default AWK-4121’s IP address Identifies the AWK-4121 on a TCP/IP network. 192.168.127.253 Subnet mask Setting Description Factory Default AWK-4121’s subnet Identifies the type of network to which the AWK-4121 is 255.255.255.0...
Time information. Functions such as Auto warning can add real-time information to the message. Current local time shows the AWK-4121’s system time when you open this web page. You can click on the Set Time button to activate the update after setting up the date and time parameters. An “(Updated)” string will appear to indicate that the change is complete.
AP that is using the matched SSID and establishes a bridge link with the scanned When the AWK-4121 is configured for Client mode, it can be used as an Ethernet-to-wireless (or LAN-to-WLAN) network adapter. For example, a notebook computer equipped with an Ethernet adaptor but no wireless card can be connected to this device with an Ethernet cable to provide wireless connectivity to another AP.
AWK-4121 Web Console Configuration Operation Mode The AWK-4121 supports four main operation modes—Client, AP, Master, and Slave—each of which plays a distinct role on the wireless network. Wireless Enable Setting Description Factory Default Enable/Disable The RF (Radio Frequency) module can be manually turned on or Enable off.
Page 28
AWK-4121 Web Console Configuration Click on Edit to assign different configuration settings to each SSID. The configuration panel appears as follows: NOTE When you switch to Client mode, a Site Survey button will be available on the Basic Wireless Settings panel.
Page 29
When WDS is enabled, you can choose to use a pure point-to-point WDS link by disabling AP functionality. The AWK-4121 provides 8 entities for WDS settings and can support up to 8 WDS links to other APs or wireless bridges. The list appears when WDS Enable is checked. Enter the MAC address to set up a WDS link.
When WEP is enabled as a security mode, the length of a key (so-called WEP seed) can be specified as 64/128 bits, which is actually a 40/104-bit secret key with a 24-bit initialization vector. The AWK-4121 provides 4 entities of WEP key settings that can be selected to use with Key index. The selected key setting specifies the key to be used as a send-key for encrypting traffic from the AP side to the wireless client side.
Page 31
Even though AES encryption is only included in the WPA2 standard, it is widely available in the WPA security mode of some wireless APs and clients as well. The AWK-4121 also supports AES algorithms in WPA and WPA2 for better compatibility.
Page 32
AWK-4121 Web Console Configuration Personal versions of WPA/WPA2, also known as WPA/WPA-PSK (Pre-Shared Key), provide a simple way of encrypting a wireless connection for high confidentiality. A passphrase is used as a basis for encryption methods (or cipher types) in a WLAN connection. The passphrases should be complex and as long as possible.
Page 33
AWK-4121 Web Console Configuration WPA/WPA2-Enterprise (for AP/Master mode) By selecting WPA type as Enterprise, you can use EAP (Extensible Authentication Protocol), a framework authentication protocol used by 802.1X to provide network authentication. In these Enterprise-level security modes, a back-end RADIUS (Remote Authentication Dial-In User Service) server is needed if IEEE 802.1X functionality is enabled in WPA /WPA2.
Page 34
AWK-4121 Web Console Configuration WPA/WPA2-Enterprise (for Client/Slave mode) In a client role, the AWK-4121 can support three EAP methods (or EAP protocols): EAP-TLS, EAP-TTLS, and EAP-PEAP, corresponding to WPA/WPA-Enterprise settings on the AP side. Encryption method Setting Description Factory Default...
Page 35
Certificate reduction makes TTLS and PEAP much more popular than EAP-TLS. The AWK-4121 provides some non-cryptographic EAP methods including PAP, CHAP, MS-CHAP, and MS-CHAP-V2. These EAP methods are not recommended for direct use on wireless networks. However, they may be useful as inner authentication methods with TTLS or PEAP.
There are a few differences in the inner authentication procedures for TTLS and PEAP. TTLS uses the encrypted channel to exchange attribute-value pairs (AVPs), while PEAP uses the encrypted channel to start a second EAP exchange inside of the tunnel. The AWK-4121 provides MS-CHAP-V2 merely as an EAP method for inner authentication.
Page 37
This value indicates the frequency interval of the beacon 100 (ms) (40-1000 ms) DTIM Interval (for AP/Master mode only) Setting Description Factory Default Data Beacon Rate Indicates how often the AWK-4121 sends out a Delivery Traffic (1-15) Indication Message Fragmentation threshold Setting Description Factory Default Fragment Length...
Page 38
Moxa’s Turbo Roaming can enable rapid handover when the Disable AWK-4121, as a client, roams among a group of APs. When Turbo Roaming is enabled, RF type and Scan channels will be shown as follows. RF type shows the current RF type, which this client is using now. You can set up Scan channels for the APs among which this client is going to roam.
Current Certificate. If it fails, you may need to return to step 1 to set the password correctly and then import the certificate file again. NOTE The WLAN certificate will remain after the AWK-4121 reboots. Even though it is expired, it can still be seen on Current Certificate. Advanced Settings Several advanced functions are available to increase the functionality of your AWK-4121 and wireless network system.
AWK-4121 Web Console Configuration Using Virtual LAN Setting up Virtual LANs (VLANs) on your AWK series increases the efficiency of your network by dividing the LAN into logical segments, as opposed to physical segments. In general, VLANs are easier to manage.
AWK-4121 Web Console Configuration Finally, the switch would be configured to route packets from the marketing department to the appropriate corporate resources such as printers and servers. Packets from the human resource department could be restricted to a gateway that allowed access to only the Internet.
You can also assign a static IP address to a specific client by entering its MAC address. The AWK-4121 provides a Static DHCP mapping list with up to 16 entities. Be reminded to check the Active check box for each entity to activate the setting.
MAC Filter The AWK-4121’s MAC filter is a policy-based filter that can allow or filter out IP-based packets with specified MAC addresses. The AWK-4121 provides 8 entities for setting MAC addresses in your filtering policy.
Page 44
IP Protocol Filter The AWK-4121’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified IP protocol and source/destination IP addresses. The AWK-4121 provides 8 entities for setting IP protocol and source/destination IP addresses in your filtering policy.
AWK-4121’s STP/RSTP feature is disabled by default. To be completely effective, you must enable RSTP/STP on every AWK-4121 connected to your network. If AWK-4121 plays a Client role, which is connected to a device (PLC, RTU, etc.) as opposed to network switch equipment, it is not necessary to enable STP/RSTP. The reason is that it will cause unnecessary negotiation.
Page 46
AWK-4121 Web Console Configuration RSTP status This field will appear only when selected to operate STP/RSTP. It indicates whether this AWK-4121 is the Root of the Spanning Tree (the root is determined automatically) or not. Bridge priority Setting Description Factory Default...
SNMP settings match MXview's SNMP configuration settings. SNMP security modes and security levels supported by the AWK-4121 are shown in the following table. Select the security mode and level that will be used to communicate between the SNMP agent and manager.
Page 48
AWK-4121 Web Console Configuration The following parameters can be configured on the SNMP Agent page. A more detailed explanation of each parameter is given below the following figure. Enable Setting Description Factory Default Enable Enables SNMP Agent Disable Disable Disables SNMP Agent...
A data encryption key is the minimum requirement for data encryption (maximum of 63 characters) Private MIB Information Device Object ID Also known as OID, this is AWK-4121’s enterprise value, which is a fixed value. Link Fault Pass-Through (for Client/Slave mode only) This function means if Ethernet port is link down, wireless connection will be forced to disconnect.
Config-related events Event is triggered when… Configuration Changed A configuration item has been changed. Configuration file import via Web Console The configuration file is imported to the AWK-4121. Console authentication failure An incorrect password is entered. Firmware upgraded The AWK-4121’s firmware is updated.
AWK-4121 Web Console Configuration Syslog Event Types Detail information for the grouped events is shown in the following table. You can check the box for Enable log to enable the grouped events. All default values are enabled (checked). Details for each event group can be found on the “System log Event Types”...
E-mail Server Settings You can set up to 4 e-mail addresses to receive alarm emails from the AWK-4121. The following parameters can be configured on the E-mail Server Settings page. Besides, a Send Test Mail button can be used to test whether the Mail server and e-mail addresses are working.
None Relay The AWK-4121 has one relay output, which consists of 2 terminal block contacts on the AWK-4121’s top panel. These relay contacts are used to indicate user-configured events and system failure. The two wires attached to the relay contacts form an open circuit when a user-configured event is triggered. If a user-configured event does not occur, the relay circuit will remain closed.
Page 54
AWK-4121 Web Console Configuration Trap Event Types SNMP Trap Receiver Settings SNMP traps are defined in SMIv1 MIBs (SNMPv1) and SMIv2 MIBs (SNMPv2c). The two styles are basically equivalent, and it is possible to convert between the two. You can set the parameters for SNMP trap receivers through the web page.
Certain values for 802.11 info may not show up due to different operation modes. As a result, Current BSSID and Signal strength are not available in AP mode. It is helpful to use the continuously updated information on this page, such as Signal strength, to monitor the signal strength of the AWK-4121 in Client mode. 3-37...
AWK-4121 Web Console Configuration Associated Client List (for AP/master mode only) This page shows all the clients that are currently associated with a specific AWK-4121. The following information which is useful for easy network diagnosis is also available: MAC Address Displays the associated client MAC address.
AWK-4121 Web Console Configuration You can press Select all button to select all content in the list for further editing. System Log Triggered events are recorded in System Log. You can export the log contents to an available viewer by clicking Export Log.
AWK-4121 Web Console Configuration Relay Status The status of user-configurable events can be found under Relay Status. The status will refresh every 5 seconds if the Auto refresh box is checked. If an event is triggered, it will be noted on this list. System administrators can click Acknowledge Event when he has acknowledged the event and addressed it.
(IP/MAC/Protocol filters) and traffic PPS (packet per second) contribute to the rise in CPU usage. NOTE The AWK-4121 supports up to 1080 packets per second. Network Status The network status section indicates the network status of the device with respect to ARP, bridge status, LLDP, RSTP, and the routing table.
AWK-4121 Web Console Configuration Routing Table Displays the routing information for the current device. RSTP Status Displays the Spanning Tree Protocol parameters configured. Maintenance Maintenance functions provide the administrator with tools to manage the AWK-4121 and wired/wireless networks. 3-42...
AWK-4121 Web Console Configuration Console Settings You can enable or disable access permission for the following consoles: HTTP, HTTPS, Telnet, and SSH connections. For more security, we recommend you only allow access to the two secured consoles, HTTPS and SSH.
Moxa’s download center. Before running a firmware upgrade, make sure the AWK-4121 is off-line. Click the Browse button to specify the firmware image file and click Firmware Upgrade and Restart to start the firmware upgrade. After the progress bar reaches 100%, the AWK-4121 will reboot itself.
Load Factory Default Use this function to reset the AWK-4121 and roll all settings back to the factory default values. You can also reset the hardware by pressing the reset button on the top panel of the AWK-4121.
The following figure shows how the AWK-4121 stores the setting changes into volatile and non-volatile memory. All data stored in volatile memory will disappear when the AWK-4121 is shutdown or rebooted unless they are y. Because the AWK-4121 starts up and initializes with the settings stored in flash memory, all new changes must be saved to flash memory before restarting the AWK-4121.
If you made changes recently but did not save, you will be given two options. Clicking the Restart button here will reboot the AWK-4121 directly, and all setting changes will be ignored. Clicking the Save and Restart button will apply all setting changes and then reboot the AWK-4121.
Software Installation/Configuration The following topics are covered in this chapter: Overview Wireless Search Utility Installing Wireless Search Utility Configuring the Wireless Search Utility...
AWK-4121 Software Installation/Configuration Overview The Wireless Search Utility can be downloaded from the Moxa website at www.moxa.com. Wireless Search Utility Installing Wireless Search Utility Once the Wireless Search Utility is downloaded, run the setup executable to start the installation. 1. Click Next on the welcome screen that opens to proceed with the installation.
Page 68
AWK-4121 Software Installation/Configuration 3. Click Next to create the program’s shortcut files in the default directory, or click Browse to select an alternate location. 4. Click Next to select additional tasks.
Page 69
AWK-4121 Software Installation/Configuration 5. Click Next to proceed with the installation. The installer then displays a summary of the installation options. 6. Click Install to begin the installation. The setup window will report the progress of the installation. To change the installation settings, click Back and navigate to the previous screen.
Configuring the Wireless Search Utility The Broadcast Search function is used to locate all AWK-4121 APs that are connected to the same LAN as your computer. After locating an AWK-4121, you will be able to change its IP address. Since the Broadcast Search function searches by TCP packet and not IP address, it doesn’t matter if the AWK-4121 is configured as an AP...
Page 71
AWK-4121 Software Installation/Configuration 3. When the search is complete, all AWKs that were located will be displayed in the Wireless Search Utility window. 4. Click Locate to cause the selected device to beep. Make sure your AWK is unlocked before using the search utility function buttons (Locate, Assign IP, etc.). The AWK will unlock automatically if the password is set to the default.
Page 72
AWK-4121 Software Installation/Configuration Go to Tools Login Options to manage and unlock additional AWKs. Use the scroll down list to select the MAC addresses of those AWKs you would like to manage, and then click Add. Key in the password for the AWK device and then click OK to save. If you return to the search page and search for the AWK again, you will find that the AWK will unlock automatically.
Page 73
AWK-4121 Software Installation/Configuration To modify the configuration of the highlighted AWK, click on the Web icon to open the web console. Refer to Chapter 3, “Using the Web Console,” for information on using the web console. Click on Telnet if you would like to use telnet to configure your AWKs.
Page 74
AWK-4121 Software Installation/Configuration Click Assign IP to change the IP setting. The three advanced options—Search, Connection, and Miscellaneous—are explained below: Search Retry count (default=5): Indicates the number of times the search will be automatically retried. Retry interval (ms): Specifies the interval between retries.
Page 75
AWK-4121 Software Installation/Configuration Connection Connection timeout (secs): Sets the waiting time for the Default Login, Locate, Assign IP, Upload Firmware, and Unlock actions to complete. Upgrade timeout (secs): Sets the waiting time for a firmware upgrade before a connection is disconnected, which is the waiting time for the firmware to be written to flash.
Other Console Configurations This chapter explains how to access the AWK-4121 for the first time. In addition to HTTP access, there are four ways to access AWK-4121: serial console, Telnet console, SSH console, and HTTPS console. The serial console connection method, which requires using a short serial cable to connect the AWK-4121 to a PC’s COM port, can be used if you do not know the AWK-4121’s IP address.
The serial console connection method, which requires using a short serial cable to connect the AWK-4121 to a PC’s COM port, can be used if you do not know the AWK-4121’s IP address. It is also convenient to use serial console configurations when you cannot access the AWK-4121 over Ethernet LAN, such as in the case of LAN cable disconnections or broadcast storming over the LAN.
Page 78
5. The Console login screen will appear. Log into the RS-232 console with the login name (default: admin) and password (default: root, if no new password is set). 6. The AWK-4121’s device information and Main Menu will be displayed. Please follow the description on screen and select the administration option you wish to perform.
AWK-4121’s functions over the network from a PC host that is connected to the same LAN as the AWK-4121, you need to make sure that the PC host and the AWK-4121 are on the same logical subnet. To do this, check your PC host’s IP address and subnet mask.
HTTPS/SSL. (You can see the protocol in URL is https.) Then you can use the menu tree on the left side of the window to open the function pages to access each of the AWK-4121’s functions. Disabling Telnet and Browser Access If you are connecting the AWK-4121 to a public network but do not intend to use its management functions over the network, then we suggest disabling both Telnet Console and Web Configuration.
References This chapter provides more detailed information about wireless-related technologies. The information in this chapter can help you administer your AWK-4121s and plan your industrial wireless network better. The following topics are covered in this chapter: Wireless Distribution System (WDS) ...
It is a good idea to plan your wireless network by drawing a diagram so that you know how each AWK-4121 is connected to other peer APs or wireless bridges by WDS, and how bridges are connected to other peer bridges...
AWK-4121 References ATTENTION Be sure to eliminate loops from networks that consist of wireless bridges, Ethernet switches, Ethernet links, and WDS links. If any loops exist, packets will circle around the loops and network performance will be seriously degraded. The following figure shows a network topology containing a loop.
STP (802.1D) and RSTP (802.1w) can operate on the LAN ports and WLAN ports (AP and WDS1-WDS8) of the same AWK-4121. This feature is particularly helpful when the AWK-4121 connects to older equipment, such as legacy switches. Differences between RSTP and STP RSTP is similar to STP, but includes additional information in the BPDUs that allow each bridge to confirm that it has taken action to prevent loops from forming when it decides to enable a link to a neighboring bridge.
Supporting Information This chapter presents additional information about this manual and product. You can also learn how to contact Moxa for technical support. The following topics are covered in this chapter: About This User’s Manual DoC (Declaration of Conformity) ...
AWK-4121 Supporting Information About This User’s Manual This manual is mainly designed for, but no limited to, the following hardware and firmware for the AWK-4121: • Hardware Revision: • Firmware Version: 1.13 You are strongly recommended to visit Moxa’s website (http://www.moxa.com) and find the latest product datasheet, firmware, QIG (Quick Installation Guide), UM (User’s Manual) and related information.
The firmware setting is not accessible by the end user. R&TTE Compliance Statement Moxa declares that the apparatus AWK-4121 complies with the essential requirements and other relevant provisions of Directive 1999/5/EC. This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE).
Press Ctrl - C and the following message will appear. Enter 2 to change the network setting. Specify the path for the AWK-4121 firmware file on the TFTP server and press y to write the settings into flash memory.
AWK-4121 Supporting Information Technical Support Contact Information Customer satisfaction is our number one concern, and to ensure that customers receive the full benefit of our products, Moxa Internet Services has been set up to provide technical support, driver updates, product information, certification status, installation guide and user’s manual updates.
Need help?
Do you have a question about the AWK-4121 and is the answer not in the manual?
Questions and answers