Hide thumbs Also See for AP-600:
Table of Contents

Advertisement

Quick Links

ORiNOCO AP-600
User Guide

Advertisement

Table of Contents
loading

Summary of Contents for ORiNOCO AP-600

  • Page 1 ORiNOCO AP-600 User Guide...
  • Page 2 Proxim Corporation. Trademarks ORiNOCO is a registered trademark, and 2X, Proxim, and the Proxim logo are trademarks of Proxim Corporation. All other trademarks mentioned herein are the property of their respective owners. ORiNOCO AP-600 User’s Guide Part # PX-024124-A Software v2.1.1...
  • Page 3: Table Of Contents

    Introducing the AP-600 ........
  • Page 4 Advanced Configuration ......... .38 Configuring the AP-600 Using the HTTP Interface ......38 System .
  • Page 5 Contents Configuring Syslog Event Notifications........60 Bridge .
  • Page 6 AP-600 Unit Will Not Boot - No LED Activity ....... .
  • Page 7 Using Strings ............. 108 Configuring the AP-600 using CLI commands ....... 108 Log into the AP-600 using HyperTerminal .
  • Page 8 Backup your AP-600 Configuration File ........
  • Page 9 Contents TCP/UDP Port Filtering ..........128 Alarms Parameters .
  • Page 10 Contents...
  • Page 11: Introduction

    Software Features Introducing the AP-600 The AP-600 is a high performance wireless Access Point that includes an integrated antenna and radio. The AP-600 comes in two models: AP-600a, which complies with the IEEE 802.11a wireless standard, and AP-600b, which complies with the IEEE 802.11b wireless standard (see IEEE 802.11 Specifications...
  • Page 12: The Product Package

    – An 802.11b client device if you have an AP-600b • A computer that is connected to the same IP network as the AP-600 and has one of the following Web browsers installed: – Microsoft Internet Explorer 5.5 or later (recommended) –...
  • Page 13: Wireless Networking Concepts

    Wireless Networking Concepts The AP-600 extends the capability of an existing Ethernet network to devices on a wireless network. Wireless devices can connect to a single Access Point, or they can move between multiple Access Points located within the same vicinity.
  • Page 14: Management And Monitoring Capabilities

    CLI and for a list of CLI commands and parameters. SNMP Management In addition to the HTTP and the CLI interfaces, you can also manage and configure an AP-600 using the Simple Network Management Protocol (SNMP). Note that this requires an SNMP manager program, like HP Openview or Castlerock’s SNMPc.
  • Page 15: Wireless Network Manager

    Notepad, or WordPad. NOTE The remainder of this guide describes how to configure an AP-600 using the HTTP Web interface or the CLI interface. For information on how to manage devices using SNMP, refer to the documentation that came with your SNMP program.
  • Page 16 Per User Per Session Encryption Use in conjunction with 802.1x Syslog Messaging 2X Turbo Mode Not available in all countries *This feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b.
  • Page 17 Introduction The following table provides detailed information on the some of the differences between the 802.11a and 802.11b feature sets. AP-600a AP-600b (802.11a) (802.11b) Physical Layer Type ODFM DSSS (Modulation Type) (Orthogonal Frequency Division Multiplexing) (Direct Sequence Spread Spectrum) Auto Channel Select Enable (default) Enable (default) Disable...
  • Page 18: Installation & Basic Configuration

    System Name, which applies only to the Access Point. The network administrator typically provides the Network Name. AP-600’s IP Address If you do not have a DHCP server on your network, then you need to assign the Access Point an IP address that is valid on your network.
  • Page 19: Installation

    Installation & Basic Configuration Installation Follow these steps to install an AP-600: 1. Unpack the Access Point and accessories from the shipping box. 2. If you intend to install the unit free-standing or if you intend to mount it to the ceiling, use a Phillips screwdriver to attach the metal base to the underside of the unit.
  • Page 20 Installation & Basic Configuration Figure 2-3 Remove Cable Cover 5. Remove the front cover (the side with the LED indicators) from the unit. Figure 2-4 Remove the Front Cover 6. Remove the back cover from the unit.
  • Page 21 Installation & Basic Configuration Figure 2-5 Remove the Back Cover 7. Connect one end of an Ethernet cable to the Access Point’s Ethernet port. The other end of the cable should not be connected to another device until after the installation is complete. •...
  • Page 22 NOTE Proxim recommends that you perform a Site Survey prior to determine the installation location for your AP-600 units. For information about how to conduct a Site Survey, contact your local reseller. 14. Replace the back cover, front cover, and cable cover. Be careful to avoid trapping the power and Ethernet cables when replacing the cable cover.
  • Page 23: Initialization

    1. Locate the unit’s Ethernet MAC address and write it down for future reference. The MAC address is printed on the product label. Each unit has a unique MAC address, which is assigned at the factory. 2. Confirm that the AP-600 is connected to the same LAN subnet as the computer that you will use to configure the AP-600.
  • Page 24 Access Point, it may take up to five minutes for the unit to appear in the Scan List. 8. Do one of the following: • If the AP-600 has been assigned an IP address by a DHCP server on the network, write down the IP address and click Cancel to close ScanTool. Proceed to Setup Wizard for information on how to access the HTTP interface using this IP address.
  • Page 25 Set IP Address Type to Static. Enter a static IP Address for the AP-600 in the field provided. You must assign the unit a unique address that is valid on your IP subnet. Contact your network administrator if you need assistance selecting an IP address for the unit.
  • Page 26: Setup Wizard

    Installation & Basic Configuration Setup Wizard The first time you connect to an AP-600’s HTTP interface, the Setup Wizard launches automatically. The Setup Wizard provides step-by-step instructions for how to configure the Access Point’s basic operating parameter, such as Network Name, IP parameters, system parameters, and management passwords.
  • Page 27 Installation & Basic Configuration Figure 2-11 Setup Wizard 5. Click Setup Wizard to begin. If you want to configure the AP-600 without using the Setup Wizard, click Exit and Advanced Configuration. The Setup Wizard supports the following navigation options: •...
  • Page 28 Installation & Basic Configuration — Frequency Channel: When Auto Channel Select is enabled, this field is read-only and displays the Access Point’s current operating channel. When Auto Channel Select is disabled, you can specify the Access Point’s channel. If you decide to manually set the unit’s channel, ensure that nearby devices do not use the same frequency.
  • Page 29: Download The Latest Software

    If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-600. Remember that the TFTP server does not have to be local as long as you have a valid TFTP IP address.
  • Page 30: Download Updates From Your Tftp Server Using The Cli Interface

    (which is 6 mm x 35 mm). 10. Insert a plug into each hole. The AP-600 comes with four 6 mm x 35 mm plugs; you only need to use three of these when wall mounting the unit.
  • Page 31 Figure 2-12 Attach the Back Cover to the Wall 13. Attach Ethernet and power cables to the AP-600 unit, if necessary. 14. Snap the unit into the back cover. In the following example, the unit is mounted upside down and its antenna is facing down.
  • Page 32: Ceiling Mount

    6. Mark the center of the four mounting holes in the rubber feet. 7. Set the AP-600 aside and drill a hole at each of the locations you marked above. Each hole should be wide enough to hold a mounting plug (which is 6 mm x 35 mm).
  • Page 33: Installing The Ap-600 In A Plenum

    “Standard for Fire Test for Heat and Visible Smoke Release for Discrete Products and Their Accessories Installed in Air-Handling Spaces”. The AP-600 has been certified under UL Standard 2043 and can be installed in the plenum only when the following conditions apply: •...
  • Page 34: Led Indicators

    Installation & Basic Configuration LED Indicators The AP-600 has four LED indicators. The LEDs are identified in LED Indicators Illustrated and exhibit the following behavior: Power Ethernet Link Ethernet Activity Wireless Activity Indication Solid Green Green when link Green flash...
  • Page 35: Related Topics

    Installation & Basic Configuration Related Topics The Setup Wizard helps you configure the basic AP-600 settings required to get the unit up and running. The AP-600 supports many other configuration and management options. The remainder of this user guide describes these options in detail.
  • Page 36: Status Information

    System Status Logging into the HTTP Interface Once the AP-600 has a valid IP Address and an Ethernet connection, you may use your web browser to monitor the system status. Follow these steps to monitor an AP-600’s operating statistics using the HTTP interface: 1.
  • Page 37: System Status

    Status Information System Status System Status is the first screen to appear each time you connect to the HTTP interface. You can also return to this screen by clicking the Status button. Figure 3-2 System Status Screen Each section of the System Status screen provides the following information: –...
  • Page 38: Advanced Configuration

    In This Chapter This chapter describes all of the operating parameters that can be configured using the Access Point’s HTTP interface. • Configuring the AP-600 Using the HTTP Interface • System: Configure specific system information such as system name and contact information.
  • Page 39 Advanced Configuration Figure 4-1 Enter Network Password Screen 5. Click the Configure button located on the left-hand side of the screen. Figure 4-2 Configure Main Screen 6. Click the tab that corresponds to the parameter you want to configure. For example, click Network to configure the Access Point’s TCP/IP settings.
  • Page 40: System

    DNS Client If you prefer to use host names to identify network servers rather than IP addresses, you can configure the AP-600 to act as a Domain Name Service (DNS) client. When this feature is enabled, the Access Point contacts the network’s DNS server to translate a host name to the appropriate network IP address.
  • Page 41: Dhcp Server

    TTL value. This parameter supports a range from 0 to 65535. By default, TTL is 64. DHCP Server If your network does not have a DHCP Server, you can configure the AP-600 as a DHCP server to assign dynamic IP addresses to Ethernet nodes and wireless clients. CAUTION Make sure there are no other DHCP servers on the network and do not enable the DHCP server without checking with your network administrator first, as it could bring down the whole network.
  • Page 42: Link Integrity

    The Link Integrity feature checks the link between the AP-600 and the nodes on the Ethernet backbone. These nodes are listed by IP address in the Link Integrity IP Address Table. The AP-600 periodically pings the nodes listed within the table.
  • Page 43: Interfaces

    Advanced Configuration Figure 4-4 Link Integrity Configuration Screen Interfaces From the Interfaces tab, you configure the Access Point’s radio and Ethernet settings. Refer to the Wireless parameters below that correspond to your Access Point model (AP-600a or AP-600b). The Ethernet settings apply to both models.
  • Page 44 Advanced Configuration • Regulatory Domain: Reports the regulatory domain for which the AP-600a is certified. Not all features or channels are available in all countries. The available regulatory domains include: — U.S./Canada -- FCC (5.15-5.35 GHz, 5.725-5.850 GHz) — Europe -- ETSI (5.15-5.25 GHz only) —...
  • Page 45: Dynamic Frequency Selection (Dfs)

    Advanced Configuration • DTIM Period: The Deferred Traffic Indicator Map (DTIM) is used with clients that have power management enabled. DTIM should be left at 1, the default value, if any clients have power management enabled. This parameter supports a range between 1 and 65535. •...
  • Page 46 Advanced Configuration • Regulatory Domain: Reports the regulatory domain for which the AP-600b is certified. Not all features or channels are available in all countries. The available regulatory domains include: — U.S./Canada -- FCC (2.4000-2.4835 GHz) — Europe -- ETSI (2.4000-2.4835 GHz; France only: 2.4465-2.4835 GHz) —...
  • Page 47: Distance Between Aps

    Load Balancing: Enable this option so clients can evaluate which Access Point to associate with, based on current AP loads. This feature is enabled by default; it helps distribute the wireless load between APs. This feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b. •...
  • Page 48: Multicast Rate

    Advanced Configuration Coverage The number of Access Points in a set area determines the network coverage for that area. A large number of Access Points covering a small area is a high-density cell. A few Access Points, or even a single unit, covering the same small area would result in a low-density cell, even though in both cases the actual area did not change —...
  • Page 49: Wireless Distribution System (Wds)

    The Distance Between APs must be set before the Multicast Rate, because when you select the Distance Between APs, the appropriate range of Multicast values automatically populates the drop-down menu. This feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b.
  • Page 50 Advanced Configuration AP 2 AP 1 Client 1 Client 2 Figure 4-9 WDS Example Bridging WDS Each WDS link is mapped to a logical WDS port on the AP-600b. WDS ports behave like Ethernet ports rather than like standard wireless interfaces: on a BSS port, an Access Point learns by association and from frames; on a WDS or Ethernet port, an Access Point learns from frames only.
  • Page 51: Ethernet

    Select the desired speed and transmission mode from the drop-down menu. Half-duplex means that only one side can transmit at a time and full-duplex allows both sides to transmit. When set to auto-duplex, the AP-600 negotiates with its switch or hub to automatically select the highest throughput option supported by both sides.
  • Page 52: Management

    Passwords You can configure the following passwords: • SNMP Read Password: The password for read access to the AP-600 using SNMP. Enter a password in both the Password field and the Confirm field. The default password is “public”. • SNMP Read/Write Password: The password for read and write access to the AP-600 using SNMP. Enter a password in both the Password field and the Confirm field.
  • Page 53: Services

    • SNMP Interface Bitmask: Configure the interface or interfaces (Ethernet, Wireless, All Interfaces) from which you will manage the AP-600 via SNMP. You can also select Disabled to prevent a user from accessing the AP-600 device via SNMP. HTTP Access •...
  • Page 54: Filtering

    Session Idle Timeout (seconds): Enter the number of seconds the system will wait during a session while there is no activity. The AP-600 will terminate the session on timeout. The range is 1 to 36000 seconds; the default is 900 seconds.
  • Page 55: Static Mac

    (Each hexadecimal digit represents 4 bits (0 or 1).) Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP-600 will look for when examining packets. The AP-600 uses Boolean logic to perform an “AND” operation between the MAC Address and the Mask at the bit level.
  • Page 56: Static Mac Filter Examples

    Advanced Configuration Figure 4-12 Static MAC Configuration Screen Static MAC Filter Examples Consider a network that contains a wired server and three wireless clients. The MAC address for each unit is as follows: – Wired Server: 00:40:F4:1C:DB:6A – Wireless Client 1: 00:02:2D:51:94:E4 –...
  • Page 57: Advanced

    Enable Proxy ARP: Place a check mark in the box provided to allow the Access Point to respond to Address Resolution Protocol (ARP) requests for wireless clients. When enabled, the AP-600 answers ARP requests for wireless stations without actually forwarding them to the wireless network. If disabled, the Access Point will bridge...
  • Page 58: Tcp/Udp Port

    Port-based filtering enables you to control wireless user access to network services by selectively blocking TCP/UDP protocols through the AP-600. A user specifies a Protocol Name, Port Number, Port Type (TCP, UDP, or TCP/UDP), and filtering interfaces (Wireless only, Ethernet only, all interfaces, or no interfaces) in order to block access to services, such as Telnet and FTP, and traffic, such as NETBIOS and HTTP.
  • Page 59: Editing Tcp/Udp Port Filters

    Alarm Host Table To add an entry and enable the AP-600 to send SNMP trap messages to a Trap Host, click Add, and then specify the IP Address and Password for the Trap Host.
  • Page 60: Syslog

    Advanced Configuration Syslog The Syslog messaging system enables the AP-600 to transmit event messages to a central server for monitoring and troubleshooting. The access point logs “Session Start (Log-in)” and “Session Stop (Log-out)” events for each wireless client as an alternative to RADIUS accounting.
  • Page 61: Bridge

    Syslog Lowest Priority Logged: The AP-600 will send event messages to the Syslog server that correspond to the selected priority and above. For example, if set to 6, the AP-600 will transmit event messages labeled priority 0 to 6 to the Syslog server(s).
  • Page 62: Intra Bss

    Advanced Configuration Intra BSS The wireless clients (or subscribers) that associate with a certain AP-600 form the Basic Service Set (BSS) of a network infrastructure. By default, wireless subscribers in the same BSS can communicate with each other. However, some administrators (such as wireless public spaces) may wish to block traffic between wireless subscribers that are associated with the same AP-600 to prevent unauthorized communication and to conserve bandwidth.
  • Page 63: Mac Access

    The MAC Access tab allows you to build a list of stations, identified by their MAC addresses, authorized to access the network through the AP-600. The list is stored inside each AP-600 within your network. Note that you must reboot the AP-600 for any changes to the MAC Access Control Table to take effect.
  • Page 64: Wep Encryption

    Advanced Configuration WEP Encryption The IEEE 802.11 standards specify an optional encryption feature, known as Wired Equivalent Privacy or WEP, that is designed to provide a wireless LAN with a security level equal to what is found on a wired Ethernet network. WEP encrypts the data portion of each packet exchanged on an 802.11 network using an Encryption Key (also known as a WEP Key).
  • Page 65: Authentication Process

    Prior to successful authentication, an unauthenticated client PC cannot send any data traffic through the AP-600 device to other systems on the LAN. The AP-600 inhibits all data traffic from a particular client PC until the client PC is authenticated. Regardless of its authentication status, a client PC can always exchange 802.1x messages in the clear...
  • Page 66: Configuring Security Settings

    Figure 4-17 RADIUS Authentication Illustrated The AP-600 acts as a pass-through device to facilitate communications between the client PC and the RADIUS server. The AP-600 and the client exchange 802.1x messages using an EAPOL (EAP Over LAN) protocol. Messages sent from the client station are encapsulated by the AP-600 and transmitted to the RADIUS server using EAP extensions.
  • Page 67: Mixed Mode (802.1X And Wep Encryption)

    Advanced Configuration 5. If you have not already done so, configure the RADIUS authentication settings (see RADIUS Authentication with 802.1x for details. 6. Reboot the Access Point. Figure 4-18 802.1x Configuration Screen Mixed Mode (802.1x and WEP Encryption) Follow these steps to use both 802.1x and WEP Encryption simultaneously (clients that do not support 802.1x use WEP Encryption for security purposes): 1.
  • Page 68: Radius

    The back-up servers are optional, but when configured, the AP-600 will communicate with the back-up server if the primary server is off-line. After the AP-600 has switched to the backup server, it will periodically check the status of the primary RADIUS server every five (5) minutes. Once the primary RADIUS server is again online, the AP-600 automatically reverts from the backup RADIUS server back to the primary RADIUS server.
  • Page 69 RADIUS server and the AP-600. The same password must also be configured on the RADIUS server. 10. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in the Response Time field. Range is 1-10 seconds; default is 3 seconds.
  • Page 70: Radius Authentication With 802.1X

    RADIUS server and the AP-600. The same password must also be configured on the RADIUS server. 11. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in the Response Time field. Range is 1-10 seconds; default is 3 seconds.
  • Page 71: Configuring Radius Accounting

    RADIUS server and the AP-600. The same password must also be configured on the RADIUS server. 9. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in the Response Time field. Range is 1-10 seconds; default is 3 seconds.
  • Page 72: Monitor Information

    Evaluates the link with a wireless client. Logging into the HTTP Interface Once the AP-600 has a valid IP Address and an Ethernet connection, you may use your web browser to monitor network statistics. The Command Line Interface (CLI) also provides a method for viewing network statistics using Telnet or a serial connection.
  • Page 73 Monitor Main Screen 6. Click the tab that corresponds to the statistics you want to review. For example, click Learn Table to see the list of nodes that the AP-600 has discovered on the network. 7. If applicable, click the Refresh...
  • Page 74: Version

    • Component Name • ID: The AP-600 identifies a system component based on its ID. Each component has a unique identifier. • Variant: Several variants may exist of the same component (for example, a hardware component may have two variants, one with more memory than the other).
  • Page 75: Icmp

    Monitor Information ICMP This tab provides statistical information for both received and transmitted messages directed to the AP-600. Not all ICMP traffic on the network is counted in the ICMP (Internet Control Message Protocol) statistics. Figure 5-4 ICMP Monitoring Screen...
  • Page 76: Learn Table

    There can be up 10,000 entries in the Learn Table. Figure 5-6 Learn Table IAPP This tab displays statistics relating to client handovers and communications between ORiNOCO Access Points. Figure 5-7 IAPP Screen...
  • Page 77: Radius

    Monitor Information RADIUS This tab provides RADIUS authentication and accounting information for both the Primary and Backup RADIUS servers. NOTE RADIUS authentication and accounting must be enabled for this information to be valid. Figure 5-8 RADIUS Monitoring Screen...
  • Page 78: Interfaces

    Monitor Information Interfaces This tab displays statistics for the Ethernet and wireless interfaces. The Operational Status can be up, down, or testing. Figure 5-9 Wireless Interface Monitoring...
  • Page 79: Link Test (Ap-600B Only)

    NOTE This feature is not available for the AP-600a. Also, this feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b. Follow these steps to perform a Link Test: 1.
  • Page 80 Monitor Information • Noise (dBm): The strength of the noise detected at the receiver reported in dBm (decibels referenced to 1 milliwatt). The displayed value is the running average since the start of the test and is reported as a negative number.
  • Page 81: Commands

    Configure the location where the AP-600 Help files can be found. Logging into the HTTP Interface Once the AP-600 has a valid IP Address and an Ethernet connection, you may use your web browser to issue commands. The Command Line Interface (CLI) also provides a method for issuing commands using Telnet or a serial connection.
  • Page 82 Commands Figure 6-1 Enter Network Password Screen 5. Click the Commands button located on the left-hand side of the screen. Figure 6-2 Commands Main Screen 6. Click the tab that corresponds to the command you want to issue. For example, click Reboot to restart the unit.
  • Page 83: Download

    Download Command Screen If you don’t have a TFTP server installed on your system, install the TFTP server from the ORiNOCO CD. You can either install the TFTP server from the CD Wizard or run OEM-TFTP-Server.exe found in the CD’s Xtras/SolarWinds sub-directory.
  • Page 84: Reboot

    Upload Command Screen Reboot Use the Reboot tab to save configuration changes (if any) and reset the AP-600. Entering a value of 0 (zero) seconds causes an immediate reboot. Note that Reset, described below, does not save configuration changes. CAUTION Rebooting the AP-600 will cause all users who are currently connected to lose their connection to the network until the AP-600 has completed the restart process and resumed operation.
  • Page 85: Reset

    Reset Use the Reset tab to restore the AP-600 to factory default conditions. The AP-600 may also be reset from the RESET button located on the side of the unit. Since this will reset the Access Point’s current IP address, a new IP address must be assigned.
  • Page 86: Troubleshooting

    Factory default units are set for “Dynamic” (DHCP) IP Address assignment. The default IP address for the AP-600 is 169.254.128.132 if your network does not have a DHCP server. If you connect the AP-600 unit to a network with an active DHCP server, then use ScanTool to locate the IP address of your unit. If a DHCP server is not active on your subnet, then use ScanTool to assign a static IP address to the unit.
  • Page 87: Symptoms And Solutions

    1. Double-check the physical network connections. Use a known-good unit to make sure the network connection is present. Once you have the AP-600 IP address, you can use the “Ping” command over Ethernet to test the IP Address. If the AP-600 responds to the Ping, then the Ethernet Interface is working properly.
  • Page 88: Http (Browser) Or Telnet Interface Does Not Work

    2. The AP-600 only contacts a DHCP server during boot-up. If your network’s DHCP server is not available while the AP-600 is booting, the device will retain the last IP Address it had. Reboot the AP-600 once your DHCP server is on-line again or use the ScanTool to find the Access Point’s current IP address.
  • Page 89: Client Connection Problems

    Network tab to make sure the proper DHCP settings are being used. 2. If you are not using the DHCP server feature on the AP-600, then make sure that your local DHCP server is accessible from the Access Point’s subnet.
  • Page 90: Overload" Indications

    The most common installation problems relate to IP addressing. For example, without the TFTP server IP Address, you will not be able to download a new AP Image to the AP-600. IP Address management is fundamental. We suggest you create a chart to document and validate the IP addresses for your system.
  • Page 91: Forced Reload Procedure

    This does not delete the AP-600’s configuration (in other words, the Forced Reload Procedure does not reset to device to factory defaults). If you need to force the AP-600 to the factory default state after loading a new AP image, use the Reset to Factory Default Procedure above.
  • Page 92: Download A New Image Using The Bootloader Cli

    This can be any computer on the LAN or connected to the AP-600 with a cross-over Ethernet cable. You must also connect the AP-600 to a computer with a standard serial cable and use a terminal client, such as HyperTerminal. From the terminal, enter CLI Commands to set the IP address and download an AP Image.
  • Page 93: Setting Ip Address Using Serial Port And Normal Cli

    2. Remove the front cover from the AP-600 to reveal the serial port. 3. Connect one end of the serial cable to the AP-600 and the other end to a serial port on your computer. 4. Power on the computer and AP-600, if necessary.
  • Page 94 0 7. After the AP-600 reboots, verify the new IP address by reconnecting to the CLI and enter a show ip command. Alternatively, you can ping the AP-600 from a network computer to confirm that the new IP address has taken effect.
  • Page 95: System Alarms (Traps)

    Troubleshooting System Alarms (Traps) Security Alarms oriTrapAuthenticationFailure A client has failed to authenticate using one of the following authentication methods: MAC Access Control Table, RADIUS MAC Authentication, or 802.1x Authentication (for 802.1x, EAP type is specified) oriTrapUnauthorizedManagerDetected An unauthorized manager has attempted to view and/or modify parameters Wireless Interface Card Alarms oriTrapWLCNotPresent...
  • Page 96: Bridge Mib (Rfc 1493) Alarms

    If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-600. Remember that the TFTP server does not have to be local, so long as you have a valid TFTP IP address.
  • Page 97: A Command Line Interface (Cli)

    ORiNOCO AP-600 User Guide Command Line Interface (CLI) In This Appendix This section describes the AP-600’s Command Line (CLI) Interface. CLI commands can be used to initialize, configure, and manage the Access Point. – CLI commands may be entered in real time through a keyboard or submitted with CLI scripts.
  • Page 98: Navigation And Special Keys

    Command Line Interface (CLI) Variations Administrators use the CLI to control Access Point operation and monitor network statistics. The AP-600 supports two types of CLI: the Bootloader CLI and the normal CLI. The Bootloader CLI provides a limited command set, and is used when the current AP Image is bad or missing.
  • Page 99: Bootloader Cli

    Bootloader CLI The Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration of the AP-600. This interface is only accessible via the serial interface if the AP-600 does not contain a software image or a download image command over TFTP has failed.
  • Page 100: Cli Command Types

    Command Line Interface (CLI) CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Controls. Operational CLI Commands These commands affect Access Point behavior, such as downloading, rebooting, and so on. After entering commands (and parameters, if any) press the Enter key to execute the Command Line. Operational commands include: •...
  • Page 101 Command Line Interface (CLI) Figure A-4 Result of “s?” CLI command Example 3. Display parameters for set and show Example 3a allows you to see every possible parameter for the set (or show) commands. Notice from example 3a that the list is very long. Example 3b shows how to display a subset of the parameters based on initial parameter letters. Example 3a.
  • Page 102: Done, Exit, Quit

    Command Line Interface (CLI) Example 4. Display Prompts for Successive Parameters Enter the command, a space, and then ?. Then, when the parameter prompt appears, enter the parameter value. Result: The parameter is changed and a new CLI line is echoed with the new value (in the first part of the following example, the value is the IP Address of the TFTP server).
  • Page 103: History

    Command Line Interface (CLI) Figure A-8 Results of “help” CLI command 2. Complete command description and command usage can be provided by: [Device Name]>help <command name> [Device Name]><command name> help history Shows content of Command History Buffer. The Command History Buffer stores command statements entered in the current session.
  • Page 104: Upload

    Results of “search mgmtipaccesstbl” CLI command upload Uploads a text-based configuration file from the AP-600 to the TFTP Server. Executing upload with the asterisk character (“*”) will make use of the previously set/stored TFTP parameters. Executing upload without parameters will display command help and usage information.
  • Page 105: Configuring Objects That Require Reboot

    Command Line Interface (CLI) Syntax: [Device Name]>set <parameter> <value> [Device Name]>set <table> <index> <argument 1> <value 1> ... <argument N> <value N> Example: [Device Name]>set sysloc “Main Lobby” [Device Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 submask 255.255.0.0 Configuring Objects that Require Reboot Certain objects supported by the Access Point require a device reboot in order for the changes to take effect.
  • Page 106 Command Line Interface (CLI) Example 2 - Create a table entry or row Use 0 (zero) as the index to a table when creating an entry. When creating a table row, only the mandatory table elements are required (comment is usually an optional table element). For optional table elements, the default value is generally applied if you do not specify a value.
  • Page 107: Using Tables & User Strings

    Command Line Interface (CLI) Figure A-10 Results of “show network” and “show ip” CLI Commands Example 6 - Show Individual and Table Parameters 1. View a single parameter. Syntax: [Device Name]>show <parameter name> Example: [Device Name]> show ipaddr Result: Displays the Access Point IP address. Figure A-11 Result of “show ipaddr”...
  • Page 108: Using Strings

    The word “delete” is required. Using Strings Since there are several string objects supported by the AP-600, a string delimiter is required for the strings to be interpreted correctly by the command line parser. For this CLI implementation, the single quote or double quote character can be used at the beginning and at the end of the string.
  • Page 109: Log Into The Ap-600 Using Telnet

    Change Passwords. Set Basic Configuration Parameters using CLI Commands There are a few basic configuration parameters that you may want to setup right away when you receive the AP-600. For example: – Set System Name, Location and Contact Information –...
  • Page 110: Set Static Ip Address For The Ap-600

    Command Line Interface (CLI) Set Static IP Address for the AP-600 NOTE The IP Subnet Mask of the AP-600 must match your network’s Subnet Mask. [Device Name]>set ipaddrtype static [Device Name]>set ipaddr <fixed IP address of unit> [Device Name]>set ipsubmask <IP Mask (default = 255.0.0.0)>...
  • Page 111: Set Wep Encryption For The Wireless Interface

    Wireless clients must be configured with the same encryption key to be able to communicate with the AP-600. The AP-600 can only support one Key Length (so each of the configured keys must have the same length). The available key sizes vary based on the Access Point’s model. See Security Encryption Key Length Table for more information.
  • Page 112: Other Network Settings

    Command Line Interface (CLI) Other Network Settings There are other configuration settings that you may want to set for the AP-600. Some of them are listed below. – Configure the AP-600 as a DHCP Server – Configure the DNS Client –...
  • Page 113: Maintain Client Connections Using Link Integrity

    Command Line Interface (CLI) Maintain Client Connections using Link Integrity [Device Name]>show linkinttbl (this shows the current links) [Device Name]>set linkinttbl <1-5 (depending on what table row you wish to address)> ipaddr <ip address of the host computer you want to check> [Device Name]>set linkintpollint <the interval between link integrity checks>...
  • Page 114: Set Ethernet Speed And Transmission Mode

    The distance between APs should not be approximated. It is calculated by means of a manual Site Survey, in which an AP-600 is set up and clients are tested throughout the area to determine signal strength and coverage, and local limits such as physical interference are investigated. From these measurements the appropriate cell size and density is determined, and the optimum distance between APs is calculated to suit your particular business requirements.
  • Page 115: Configure Syslog

    Command Line Interface (CLI) Set Communication Ports [Device Name]>set httpport <HTTP port number (default is 80)> [Device Name]>set telport <Telnet port number (default is 23)> Set Telnet Session Timeouts [Device Name]>set tellogintout <time in seconds between 1 and 300 (default is 30)> [Device Name]>set telsessiontout <time in seconds between 1 and 36000 (default is 900)>...
  • Page 116: Configure 802.1X Authentication

    Command Line Interface (CLI) Configure 802.1x Authentication [Device Name]>set secconfig <none, 802.1x, mixed> [Device Name]>set secenckeylentbl 3 enckeylen <64bits, 128bits> [Device Name]>set secrekeyint <60 – 65535 seconds; default is 900 sec> [Device Name]>reboot 0 NOTE If you set Security to 802.1x or Mixed, you also need to configure the RADIUS parameters. If you set Security to Mixed, you also need to configure WEP Encryption settings.
  • Page 117: Cli Monitoring Parameters

    [Device Name]>show radacctbl Figure A-19 Results of “show radacctbl” CLI command CLI Monitoring Parameters Using the show command with the following table parameters will display operating statistics for the AP-600 (these are the same statistics that are described in Monitor Information for the HTTP Web interface).
  • Page 118: Parameter Tables

    - Filter IP packets based on TCP/UDP port • Alarms Parameters – SNMP Table Host Table Parameters - Enter the list of IP addresses that will receive alarms from the AP-600 – Syslog Parameters - Configure the AP-600 to send Syslog information to network servers •...
  • Page 119: System Parameters

    Component Interface Table Subgroup sysinvmgmtcmpiftbl NOTE The inventory management commands display advanced information about the AP-600’s installed components. You may be asked to report this information to a representative if you contact customer support. Network Parameters IP Configuration Parameters Name...
  • Page 120: Dhcp Server Parameters

    Command Line Interface (CLI) DNS Client for RADIUS Name Resolution Name Type Values Access CLI Parameter DNS Client Group DNS Client status Integer enable dnsstatus disable (default) Primary DNS Server IP IpAddress User Defined dnspridnsipaddr Address Secondary DNS Server IpAddress User Defined dnssecdnsipaddr IP Address...
  • Page 121: Link Integrity Parameters

    Command Line Interface (CLI) Link Integrity Parameters Name Type Values Access CLI Parameter Link Integrity Group linkint Link Integrity Status Integer enable linkintstatus disable (default) Link Integrity Poll Integer 500 - 15000 ms linkintpollint Interval (in increments of 500ms) 500 ms (default) Link Integrity Poll Integer 0 - 255...
  • Page 122 Command Line Interface (CLI) AP-600a Only Parameters Name Type Values Access CLI Parameter Operating Frequency Channel Integer Varies by regulatory channel domain and country. See 802.11a Channel Frequencies for the AP-600a 2X Turbo Mode Integer enable turbo (not available in all countries) disable (default) Supported Data Rates Octet String...
  • Page 123 Command Line Interface (CLI) Name Type Values Access CLI Parameter Multicast Rate Integer 1 Mbits/sec (1) multrate 2 Mbits/sec (2) (default) 5.5 Mbits/sec (3) 11 Mbits/sec (4) Closed Wireless System Integer enable closedsys disable (default) Load Balancing Integer enable (default) ldbalance disable Medium Distribution...
  • Page 124: Ethernet Interface Parameters

    HTTP Port Integer User Defined httpport Default = 80 Help Link DisplayString User Defined httphelplink NOTE The default path for the Help files is C:\Program Files\ORiNOCO\AP600\HTML\index.htm. The ORiNOCO AP-600 Help information is available in English, French, German, Italian, Spanish, and Japanese.
  • Page 125: Telnet Parameters

    Command Line Interface (CLI) Telnet Parameters Name Type Values Access CLI Parameter Telnet Group telnet Telnet Management Interface Bitmask 0 or 2 - no interfaces telifbitmask Interface Bitmask (disable) 1 or 3 - Ethernet 4 or 6 - Wireless 5 or 7 - all interfaces (default is 7) Telnet Port Integer...
  • Page 126: Ip Access Table Parameters

    Command Line Interface (CLI) IP Access Table Parameters When creating table entries, you may either specify the argument name followed by argument value or simply entering the argument value. When only the argument value is specified, then enter the values in the order depicted by the following table.
  • Page 127: Static Mac Address Filter Table

    Command Line Interface (CLI) Static MAC Address Filter Table Name Type Values Access CLI Parameter Static MAC Address Table staticmactbl Filter Table Table Index index Static MAC Address on PhysAddress User Defined wiredmacaddr Wired Network Static MAC Address PhysAddress User Defined wiredmask Mask on Wired Network Static MAC Address on...
  • Page 128: Tcp/Udp Port Filtering

    Command Line Interface (CLI) TCP/UDP Port Filtering The following parameters are used to enable/disable the Port filter feature. Name Type Values Access Port Filtering Group portflt Port Filter Status Integer enable (default) portfltstatus disable TCP/UDP Port Filtering Table The following parameters are used to configure TCP/UDP Port filters. Name Type Values...
  • Page 129: Alarms Parameters

    The Heartbeat parameters are advanced settings not available via the HTTP interface. When Heartbeat is enabled, the AP-600 periodically sends a message to the Syslog server to indicate that it is active. The frequency with which the heartbeat message is sent depends upon the setting of the Heartbeat Interval.
  • Page 130: Bridge Parameters

    Command Line Interface (CLI) Bridge Parameters Spanning Tree Parameters Name Type Values Access CLI Parameter Spanning Tree Group Spanning Tree Status Integer enable stpstatus disable (default) Bridge Priority Integer 0 – 65535 stppriority 32768 (default) Maximum Age Integer 600 – 4000 stpmaxage (in 0.01 sec intervals;...
  • Page 131: Intra Bss Subscriber Blocking

    Re-keying Interval Integer 60 – 65535 seconds secrekeyint default is 900 sec Wireless Interface Security Parameters The following table details the WEP encryption parameters for the AP-600 (both the AP-600a and the AP-600b). Name Type Values Access CLI Parameter Wireless Interface...
  • Page 132: Mac Access Control Parameter

    RADIUS Parameters Primary and Backup RADIUS Server Table Parameters ORiNOCO devices that use RADIUS authentication and/or accounting support both primary and backup RADIUS servers. The configuration parameters and statistics are the same for both primary and backup servers. The CLI differentiates the primary and backup RADIUS parameters by using the table index.
  • Page 133 Command Line Interface (CLI) RADIUS Authentication NOTE Use a server name only if you have enabled the DNS Client functionality. See DNS Client for RADIUS Name Resolution. Name Type Values Access CLI Parameter RADIUS Authentication Table radiustbl Primary RADIUS Integer index Backup RADIUS Integer...
  • Page 134: Other Parameters

    Command Line Interface (CLI) Other Parameters IAPP Parameters Name Type Values Access CLI Parameter IAPP Group iapp IAPP Status Integer enable (default) iappstatus disable Periodic Announce Integer iappannint Interval (seconds) 120 (default) Announce Response Integer 2 seconds iappannresp Time Handover Time-out Integer 410 ms iapphandtout...
  • Page 135: B Ascii Character Chart

    ORiNOCO AP-600 User Guide ASCII Character Chart You can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F, a-f (case sensitive), and punctuation marks. Each ASCII character corresponds to two hexadecimal digits.
  • Page 136: C Specifications

    • Radio Specifications Hardware Specifications Physical Specifications AP-600 Unit (without metal base) Dimensions (H x W x L) = 3.5 x 17 x 21.5 cm (1.5 x 6.75 x 8.5 in.) Weight = 0.68 kg (1.50 lb.) Electrical Specifications Using the Power Adapter Voltage (Input) = 100 to 240 VAC (50-60 Hz) @ 0.4 A...
  • Page 137: Active Ethernet Interface

    For AP-600b: 802.11b radio certification is available in the U.S. (FCC), Canada (DOC), Japan (MKK), Europe (ETSI), Australia, and South Africa. NOTE Refer to the Regulatory Flyer included with the AP-600 for the latest regulatory information. 802.11a Channel Frequencies for the AP-600a The available 802.11a Channels varies by regulatory domain and/or country.
  • Page 138: Etsi (Europe)

    Specifications ETSI (Europe) Some European countries restrict 802.11a operation to the 5.15-5.25 GHz frequency band. Other European countries restrict 802.11a operation to the 5.15-5.35 GHz frequency band. The AP-600a can operate on the following Channels in the European countries that allow operation in the 5.15-5.25 GHz band: Channel ID Center Frequency...
  • Page 139: 802.11B Channel Frequencies For The Ap-600B

    Specifications 802.11b Channel Frequencies for the AP-600b The following table shows the 802.11b channel allocations that vary from country to country. Channel ID FCC/World ETSI France Japan (GHz) (GHz) (GHz) (GHz) 2.412 2.412 2.412 2.417 2.417 2.417 2.422 2.422 2.422 2.427 2.427 2.427...
  • Page 140: Wireless Communication Range

    Specifications Wireless Communication Range The range of the wireless signal is related to the composition of objects in the radio wave path and the transmit rate of the wireless communication. Communications at a lower transmit range may travel longer distances. The range values listed in the Communications Range Chart are typical distances as calculated by Proxim’s development team for FCC-certified products.
  • Page 141: D Technical Support

    ORiNOCO AP-600 User Guide Technical Support If you are having a problem using an AP-600 and cannot resolve it with the information in Troubleshooting, gather the following information and contact ORiNOCO Technical Support: • List of ORiNOCO products installed on your network; include the following: –...
  • Page 142 For Europe, the Middle East, and Africa (EMEA): Your local supplier in the EMEA region is trained to give you the support you require. Local suppliers have direct access to the ORiNOCO Technical Support Center and will help you in every way they can. Phone:...

Table of Contents