Page 2
Proxim Corporation. Trademarks ORiNOCO is a registered trademark, and 2X, Proxim, and the Proxim logo are trademarks of Proxim Corporation. All other trademarks mentioned herein are the property of their respective owners. ORiNOCO AP-600 User’s Guide Part # PX-024124-A Software v2.1.1...
Software Features Introducing the AP-600 The AP-600 is a high performance wireless Access Point that includes an integrated antenna and radio. The AP-600 comes in two models: AP-600a, which complies with the IEEE 802.11a wireless standard, and AP-600b, which complies with the IEEE 802.11b wireless standard (see IEEE 802.11 Specifications...
– An 802.11b client device if you have an AP-600b • A computer that is connected to the same IP network as the AP-600 and has one of the following Web browsers installed: – Microsoft Internet Explorer 5.5 or later (recommended) –...
Wireless Networking Concepts The AP-600 extends the capability of an existing Ethernet network to devices on a wireless network. Wireless devices can connect to a single Access Point, or they can move between multiple Access Points located within the same vicinity.
CLI and for a list of CLI commands and parameters. SNMP Management In addition to the HTTP and the CLI interfaces, you can also manage and configure an AP-600 using the Simple Network Management Protocol (SNMP). Note that this requires an SNMP manager program, like HP Openview or Castlerock’s SNMPc.
Notepad, or WordPad. NOTE The remainder of this guide describes how to configure an AP-600 using the HTTP Web interface or the CLI interface. For information on how to manage devices using SNMP, refer to the documentation that came with your SNMP program.
Page 16
Per User Per Session Encryption Use in conjunction with 802.1x Syslog Messaging 2X Turbo Mode Not available in all countries *This feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b.
Page 17
Introduction The following table provides detailed information on the some of the differences between the 802.11a and 802.11b feature sets. AP-600a AP-600b (802.11a) (802.11b) Physical Layer Type ODFM DSSS (Modulation Type) (Orthogonal Frequency Division Multiplexing) (Direct Sequence Spread Spectrum) Auto Channel Select Enable (default) Enable (default) Disable...
System Name, which applies only to the Access Point. The network administrator typically provides the Network Name. AP-600’s IP Address If you do not have a DHCP server on your network, then you need to assign the Access Point an IP address that is valid on your network.
Installation & Basic Configuration Installation Follow these steps to install an AP-600: 1. Unpack the Access Point and accessories from the shipping box. 2. If you intend to install the unit free-standing or if you intend to mount it to the ceiling, use a Phillips screwdriver to attach the metal base to the underside of the unit.
Page 20
Installation & Basic Configuration Figure 2-3 Remove Cable Cover 5. Remove the front cover (the side with the LED indicators) from the unit. Figure 2-4 Remove the Front Cover 6. Remove the back cover from the unit.
Page 21
Installation & Basic Configuration Figure 2-5 Remove the Back Cover 7. Connect one end of an Ethernet cable to the Access Point’s Ethernet port. The other end of the cable should not be connected to another device until after the installation is complete. •...
Page 22
NOTE Proxim recommends that you perform a Site Survey prior to determine the installation location for your AP-600 units. For information about how to conduct a Site Survey, contact your local reseller. 14. Replace the back cover, front cover, and cable cover. Be careful to avoid trapping the power and Ethernet cables when replacing the cable cover.
1. Locate the unit’s Ethernet MAC address and write it down for future reference. The MAC address is printed on the product label. Each unit has a unique MAC address, which is assigned at the factory. 2. Confirm that the AP-600 is connected to the same LAN subnet as the computer that you will use to configure the AP-600.
Page 24
Access Point, it may take up to five minutes for the unit to appear in the Scan List. 8. Do one of the following: • If the AP-600 has been assigned an IP address by a DHCP server on the network, write down the IP address and click Cancel to close ScanTool. Proceed to Setup Wizard for information on how to access the HTTP interface using this IP address.
Page 25
Set IP Address Type to Static. Enter a static IP Address for the AP-600 in the field provided. You must assign the unit a unique address that is valid on your IP subnet. Contact your network administrator if you need assistance selecting an IP address for the unit.
Installation & Basic Configuration Setup Wizard The first time you connect to an AP-600’s HTTP interface, the Setup Wizard launches automatically. The Setup Wizard provides step-by-step instructions for how to configure the Access Point’s basic operating parameter, such as Network Name, IP parameters, system parameters, and management passwords.
Page 27
Installation & Basic Configuration Figure 2-11 Setup Wizard 5. Click Setup Wizard to begin. If you want to configure the AP-600 without using the Setup Wizard, click Exit and Advanced Configuration. The Setup Wizard supports the following navigation options: •...
Page 28
Installation & Basic Configuration — Frequency Channel: When Auto Channel Select is enabled, this field is read-only and displays the Access Point’s current operating channel. When Auto Channel Select is disabled, you can specify the Access Point’s channel. If you decide to manually set the unit’s channel, ensure that nearby devices do not use the same frequency.
If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-600. Remember that the TFTP server does not have to be local as long as you have a valid TFTP IP address.
(which is 6 mm x 35 mm). 10. Insert a plug into each hole. The AP-600 comes with four 6 mm x 35 mm plugs; you only need to use three of these when wall mounting the unit.
Page 31
Figure 2-12 Attach the Back Cover to the Wall 13. Attach Ethernet and power cables to the AP-600 unit, if necessary. 14. Snap the unit into the back cover. In the following example, the unit is mounted upside down and its antenna is facing down.
6. Mark the center of the four mounting holes in the rubber feet. 7. Set the AP-600 aside and drill a hole at each of the locations you marked above. Each hole should be wide enough to hold a mounting plug (which is 6 mm x 35 mm).
“Standard for Fire Test for Heat and Visible Smoke Release for Discrete Products and Their Accessories Installed in Air-Handling Spaces”. The AP-600 has been certified under UL Standard 2043 and can be installed in the plenum only when the following conditions apply: •...
Installation & Basic Configuration LED Indicators The AP-600 has four LED indicators. The LEDs are identified in LED Indicators Illustrated and exhibit the following behavior: Power Ethernet Link Ethernet Activity Wireless Activity Indication Solid Green Green when link Green flash...
Installation & Basic Configuration Related Topics The Setup Wizard helps you configure the basic AP-600 settings required to get the unit up and running. The AP-600 supports many other configuration and management options. The remainder of this user guide describes these options in detail.
System Status Logging into the HTTP Interface Once the AP-600 has a valid IP Address and an Ethernet connection, you may use your web browser to monitor the system status. Follow these steps to monitor an AP-600’s operating statistics using the HTTP interface: 1.
Status Information System Status System Status is the first screen to appear each time you connect to the HTTP interface. You can also return to this screen by clicking the Status button. Figure 3-2 System Status Screen Each section of the System Status screen provides the following information: –...
In This Chapter This chapter describes all of the operating parameters that can be configured using the Access Point’s HTTP interface. • Configuring the AP-600 Using the HTTP Interface • System: Configure specific system information such as system name and contact information.
Page 39
Advanced Configuration Figure 4-1 Enter Network Password Screen 5. Click the Configure button located on the left-hand side of the screen. Figure 4-2 Configure Main Screen 6. Click the tab that corresponds to the parameter you want to configure. For example, click Network to configure the Access Point’s TCP/IP settings.
DNS Client If you prefer to use host names to identify network servers rather than IP addresses, you can configure the AP-600 to act as a Domain Name Service (DNS) client. When this feature is enabled, the Access Point contacts the network’s DNS server to translate a host name to the appropriate network IP address.
TTL value. This parameter supports a range from 0 to 65535. By default, TTL is 64. DHCP Server If your network does not have a DHCP Server, you can configure the AP-600 as a DHCP server to assign dynamic IP addresses to Ethernet nodes and wireless clients. CAUTION Make sure there are no other DHCP servers on the network and do not enable the DHCP server without checking with your network administrator first, as it could bring down the whole network.
The Link Integrity feature checks the link between the AP-600 and the nodes on the Ethernet backbone. These nodes are listed by IP address in the Link Integrity IP Address Table. The AP-600 periodically pings the nodes listed within the table.
Advanced Configuration Figure 4-4 Link Integrity Configuration Screen Interfaces From the Interfaces tab, you configure the Access Point’s radio and Ethernet settings. Refer to the Wireless parameters below that correspond to your Access Point model (AP-600a or AP-600b). The Ethernet settings apply to both models.
Page 44
Advanced Configuration • Regulatory Domain: Reports the regulatory domain for which the AP-600a is certified. Not all features or channels are available in all countries. The available regulatory domains include: — U.S./Canada -- FCC (5.15-5.35 GHz, 5.725-5.850 GHz) — Europe -- ETSI (5.15-5.25 GHz only) —...
Advanced Configuration • DTIM Period: The Deferred Traffic Indicator Map (DTIM) is used with clients that have power management enabled. DTIM should be left at 1, the default value, if any clients have power management enabled. This parameter supports a range between 1 and 65535. •...
Page 46
Advanced Configuration • Regulatory Domain: Reports the regulatory domain for which the AP-600b is certified. Not all features or channels are available in all countries. The available regulatory domains include: — U.S./Canada -- FCC (2.4000-2.4835 GHz) — Europe -- ETSI (2.4000-2.4835 GHz; France only: 2.4465-2.4835 GHz) —...
Load Balancing: Enable this option so clients can evaluate which Access Point to associate with, based on current AP loads. This feature is enabled by default; it helps distribute the wireless load between APs. This feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b. •...
Advanced Configuration Coverage The number of Access Points in a set area determines the network coverage for that area. A large number of Access Points covering a small area is a high-density cell. A few Access Points, or even a single unit, covering the same small area would result in a low-density cell, even though in both cases the actual area did not change —...
The Distance Between APs must be set before the Multicast Rate, because when you select the Distance Between APs, the appropriate range of Multicast values automatically populates the drop-down menu. This feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b.
Page 50
Advanced Configuration AP 2 AP 1 Client 1 Client 2 Figure 4-9 WDS Example Bridging WDS Each WDS link is mapped to a logical WDS port on the AP-600b. WDS ports behave like Ethernet ports rather than like standard wireless interfaces: on a BSS port, an Access Point learns by association and from frames; on a WDS or Ethernet port, an Access Point learns from frames only.
Select the desired speed and transmission mode from the drop-down menu. Half-duplex means that only one side can transmit at a time and full-duplex allows both sides to transmit. When set to auto-duplex, the AP-600 negotiates with its switch or hub to automatically select the highest throughput option supported by both sides.
Passwords You can configure the following passwords: • SNMP Read Password: The password for read access to the AP-600 using SNMP. Enter a password in both the Password field and the Confirm field. The default password is “public”. • SNMP Read/Write Password: The password for read and write access to the AP-600 using SNMP. Enter a password in both the Password field and the Confirm field.
• SNMP Interface Bitmask: Configure the interface or interfaces (Ethernet, Wireless, All Interfaces) from which you will manage the AP-600 via SNMP. You can also select Disabled to prevent a user from accessing the AP-600 device via SNMP. HTTP Access •...
Session Idle Timeout (seconds): Enter the number of seconds the system will wait during a session while there is no activity. The AP-600 will terminate the session on timeout. The range is 1 to 36000 seconds; the default is 900 seconds.
(Each hexadecimal digit represents 4 bits (0 or 1).) Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP-600 will look for when examining packets. The AP-600 uses Boolean logic to perform an “AND” operation between the MAC Address and the Mask at the bit level.
Advanced Configuration Figure 4-12 Static MAC Configuration Screen Static MAC Filter Examples Consider a network that contains a wired server and three wireless clients. The MAC address for each unit is as follows: – Wired Server: 00:40:F4:1C:DB:6A – Wireless Client 1: 00:02:2D:51:94:E4 –...
Enable Proxy ARP: Place a check mark in the box provided to allow the Access Point to respond to Address Resolution Protocol (ARP) requests for wireless clients. When enabled, the AP-600 answers ARP requests for wireless stations without actually forwarding them to the wireless network. If disabled, the Access Point will bridge...
Port-based filtering enables you to control wireless user access to network services by selectively blocking TCP/UDP protocols through the AP-600. A user specifies a Protocol Name, Port Number, Port Type (TCP, UDP, or TCP/UDP), and filtering interfaces (Wireless only, Ethernet only, all interfaces, or no interfaces) in order to block access to services, such as Telnet and FTP, and traffic, such as NETBIOS and HTTP.
Alarm Host Table To add an entry and enable the AP-600 to send SNMP trap messages to a Trap Host, click Add, and then specify the IP Address and Password for the Trap Host.
Advanced Configuration Syslog The Syslog messaging system enables the AP-600 to transmit event messages to a central server for monitoring and troubleshooting. The access point logs “Session Start (Log-in)” and “Session Stop (Log-out)” events for each wireless client as an alternative to RADIUS accounting.
Syslog Lowest Priority Logged: The AP-600 will send event messages to the Syslog server that correspond to the selected priority and above. For example, if set to 6, the AP-600 will transmit event messages labeled priority 0 to 6 to the Syslog server(s).
Advanced Configuration Intra BSS The wireless clients (or subscribers) that associate with a certain AP-600 form the Basic Service Set (BSS) of a network infrastructure. By default, wireless subscribers in the same BSS can communicate with each other. However, some administrators (such as wireless public spaces) may wish to block traffic between wireless subscribers that are associated with the same AP-600 to prevent unauthorized communication and to conserve bandwidth.
The MAC Access tab allows you to build a list of stations, identified by their MAC addresses, authorized to access the network through the AP-600. The list is stored inside each AP-600 within your network. Note that you must reboot the AP-600 for any changes to the MAC Access Control Table to take effect.
Advanced Configuration WEP Encryption The IEEE 802.11 standards specify an optional encryption feature, known as Wired Equivalent Privacy or WEP, that is designed to provide a wireless LAN with a security level equal to what is found on a wired Ethernet network. WEP encrypts the data portion of each packet exchanged on an 802.11 network using an Encryption Key (also known as a WEP Key).
Prior to successful authentication, an unauthenticated client PC cannot send any data traffic through the AP-600 device to other systems on the LAN. The AP-600 inhibits all data traffic from a particular client PC until the client PC is authenticated. Regardless of its authentication status, a client PC can always exchange 802.1x messages in the clear...
Figure 4-17 RADIUS Authentication Illustrated The AP-600 acts as a pass-through device to facilitate communications between the client PC and the RADIUS server. The AP-600 and the client exchange 802.1x messages using an EAPOL (EAP Over LAN) protocol. Messages sent from the client station are encapsulated by the AP-600 and transmitted to the RADIUS server using EAP extensions.
Advanced Configuration 5. If you have not already done so, configure the RADIUS authentication settings (see RADIUS Authentication with 802.1x for details. 6. Reboot the Access Point. Figure 4-18 802.1x Configuration Screen Mixed Mode (802.1x and WEP Encryption) Follow these steps to use both 802.1x and WEP Encryption simultaneously (clients that do not support 802.1x use WEP Encryption for security purposes): 1.
The back-up servers are optional, but when configured, the AP-600 will communicate with the back-up server if the primary server is off-line. After the AP-600 has switched to the backup server, it will periodically check the status of the primary RADIUS server every five (5) minutes. Once the primary RADIUS server is again online, the AP-600 automatically reverts from the backup RADIUS server back to the primary RADIUS server.
Page 69
RADIUS server and the AP-600. The same password must also be configured on the RADIUS server. 10. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in the Response Time field. Range is 1-10 seconds; default is 3 seconds.
RADIUS server and the AP-600. The same password must also be configured on the RADIUS server. 11. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in the Response Time field. Range is 1-10 seconds; default is 3 seconds.
RADIUS server and the AP-600. The same password must also be configured on the RADIUS server. 9. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in the Response Time field. Range is 1-10 seconds; default is 3 seconds.
Evaluates the link with a wireless client. Logging into the HTTP Interface Once the AP-600 has a valid IP Address and an Ethernet connection, you may use your web browser to monitor network statistics. The Command Line Interface (CLI) also provides a method for viewing network statistics using Telnet or a serial connection.
Page 73
Monitor Main Screen 6. Click the tab that corresponds to the statistics you want to review. For example, click Learn Table to see the list of nodes that the AP-600 has discovered on the network. 7. If applicable, click the Refresh...
• Component Name • ID: The AP-600 identifies a system component based on its ID. Each component has a unique identifier. • Variant: Several variants may exist of the same component (for example, a hardware component may have two variants, one with more memory than the other).
Monitor Information ICMP This tab provides statistical information for both received and transmitted messages directed to the AP-600. Not all ICMP traffic on the network is counted in the ICMP (Internet Control Message Protocol) statistics. Figure 5-4 ICMP Monitoring Screen...
There can be up 10,000 entries in the Learn Table. Figure 5-6 Learn Table IAPP This tab displays statistics relating to client handovers and communications between ORiNOCO Access Points. Figure 5-7 IAPP Screen...
Monitor Information RADIUS This tab provides RADIUS authentication and accounting information for both the Primary and Backup RADIUS servers. NOTE RADIUS authentication and accounting must be enabled for this information to be valid. Figure 5-8 RADIUS Monitoring Screen...
Monitor Information Interfaces This tab displays statistics for the Ethernet and wireless interfaces. The Operational Status can be up, down, or testing. Figure 5-9 Wireless Interface Monitoring...
NOTE This feature is not available for the AP-600a. Also, this feature is not available if you are using an ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP-600b. Follow these steps to perform a Link Test: 1.
Page 80
Monitor Information • Noise (dBm): The strength of the noise detected at the receiver reported in dBm (decibels referenced to 1 milliwatt). The displayed value is the running average since the start of the test and is reported as a negative number.
Configure the location where the AP-600 Help files can be found. Logging into the HTTP Interface Once the AP-600 has a valid IP Address and an Ethernet connection, you may use your web browser to issue commands. The Command Line Interface (CLI) also provides a method for issuing commands using Telnet or a serial connection.
Page 82
Commands Figure 6-1 Enter Network Password Screen 5. Click the Commands button located on the left-hand side of the screen. Figure 6-2 Commands Main Screen 6. Click the tab that corresponds to the command you want to issue. For example, click Reboot to restart the unit.
Download Command Screen If you don’t have a TFTP server installed on your system, install the TFTP server from the ORiNOCO CD. You can either install the TFTP server from the CD Wizard or run OEM-TFTP-Server.exe found in the CD’s Xtras/SolarWinds sub-directory.
Upload Command Screen Reboot Use the Reboot tab to save configuration changes (if any) and reset the AP-600. Entering a value of 0 (zero) seconds causes an immediate reboot. Note that Reset, described below, does not save configuration changes. CAUTION Rebooting the AP-600 will cause all users who are currently connected to lose their connection to the network until the AP-600 has completed the restart process and resumed operation.
Reset Use the Reset tab to restore the AP-600 to factory default conditions. The AP-600 may also be reset from the RESET button located on the side of the unit. Since this will reset the Access Point’s current IP address, a new IP address must be assigned.
Factory default units are set for “Dynamic” (DHCP) IP Address assignment. The default IP address for the AP-600 is 169.254.128.132 if your network does not have a DHCP server. If you connect the AP-600 unit to a network with an active DHCP server, then use ScanTool to locate the IP address of your unit. If a DHCP server is not active on your subnet, then use ScanTool to assign a static IP address to the unit.
1. Double-check the physical network connections. Use a known-good unit to make sure the network connection is present. Once you have the AP-600 IP address, you can use the “Ping” command over Ethernet to test the IP Address. If the AP-600 responds to the Ping, then the Ethernet Interface is working properly.
2. The AP-600 only contacts a DHCP server during boot-up. If your network’s DHCP server is not available while the AP-600 is booting, the device will retain the last IP Address it had. Reboot the AP-600 once your DHCP server is on-line again or use the ScanTool to find the Access Point’s current IP address.
Network tab to make sure the proper DHCP settings are being used. 2. If you are not using the DHCP server feature on the AP-600, then make sure that your local DHCP server is accessible from the Access Point’s subnet.
The most common installation problems relate to IP addressing. For example, without the TFTP server IP Address, you will not be able to download a new AP Image to the AP-600. IP Address management is fundamental. We suggest you create a chart to document and validate the IP addresses for your system.
This does not delete the AP-600’s configuration (in other words, the Forced Reload Procedure does not reset to device to factory defaults). If you need to force the AP-600 to the factory default state after loading a new AP image, use the Reset to Factory Default Procedure above.
This can be any computer on the LAN or connected to the AP-600 with a cross-over Ethernet cable. You must also connect the AP-600 to a computer with a standard serial cable and use a terminal client, such as HyperTerminal. From the terminal, enter CLI Commands to set the IP address and download an AP Image.
2. Remove the front cover from the AP-600 to reveal the serial port. 3. Connect one end of the serial cable to the AP-600 and the other end to a serial port on your computer. 4. Power on the computer and AP-600, if necessary.
Page 94
0 7. After the AP-600 reboots, verify the new IP address by reconnecting to the CLI and enter a show ip command. Alternatively, you can ping the AP-600 from a network computer to confirm that the new IP address has taken effect.
Troubleshooting System Alarms (Traps) Security Alarms oriTrapAuthenticationFailure A client has failed to authenticate using one of the following authentication methods: MAC Access Control Table, RADIUS MAC Authentication, or 802.1x Authentication (for 802.1x, EAP type is specified) oriTrapUnauthorizedManagerDetected An unauthorized manager has attempted to view and/or modify parameters Wireless Interface Card Alarms oriTrapWLCNotPresent...
If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-600. Remember that the TFTP server does not have to be local, so long as you have a valid TFTP IP address.
ORiNOCO AP-600 User Guide Command Line Interface (CLI) In This Appendix This section describes the AP-600’s Command Line (CLI) Interface. CLI commands can be used to initialize, configure, and manage the Access Point. – CLI commands may be entered in real time through a keyboard or submitted with CLI scripts.
Command Line Interface (CLI) Variations Administrators use the CLI to control Access Point operation and monitor network statistics. The AP-600 supports two types of CLI: the Bootloader CLI and the normal CLI. The Bootloader CLI provides a limited command set, and is used when the current AP Image is bad or missing.
Bootloader CLI The Bootloader CLI is a minimal subset of the normal CLI used to perform initial configuration of the AP-600. This interface is only accessible via the serial interface if the AP-600 does not contain a software image or a download image command over TFTP has failed.
Command Line Interface (CLI) CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Controls. Operational CLI Commands These commands affect Access Point behavior, such as downloading, rebooting, and so on. After entering commands (and parameters, if any) press the Enter key to execute the Command Line. Operational commands include: •...
Page 101
Command Line Interface (CLI) Figure A-4 Result of “s?” CLI command Example 3. Display parameters for set and show Example 3a allows you to see every possible parameter for the set (or show) commands. Notice from example 3a that the list is very long. Example 3b shows how to display a subset of the parameters based on initial parameter letters. Example 3a.
Command Line Interface (CLI) Example 4. Display Prompts for Successive Parameters Enter the command, a space, and then ?. Then, when the parameter prompt appears, enter the parameter value. Result: The parameter is changed and a new CLI line is echoed with the new value (in the first part of the following example, the value is the IP Address of the TFTP server).
Command Line Interface (CLI) Figure A-8 Results of “help” CLI command 2. Complete command description and command usage can be provided by: [Device Name]>help <command name> [Device Name]><command name> help history Shows content of Command History Buffer. The Command History Buffer stores command statements entered in the current session.
Results of “search mgmtipaccesstbl” CLI command upload Uploads a text-based configuration file from the AP-600 to the TFTP Server. Executing upload with the asterisk character (“*”) will make use of the previously set/stored TFTP parameters. Executing upload without parameters will display command help and usage information.
Command Line Interface (CLI) Syntax: [Device Name]>set <parameter> <value> [Device Name]>set <table> <index> <argument 1> <value 1> ... <argument N> <value N> Example: [Device Name]>set sysloc “Main Lobby” [Device Name]>set mgmtipaccesstbl 0 ipaddr 10.0.0.10 submask 255.255.0.0 Configuring Objects that Require Reboot Certain objects supported by the Access Point require a device reboot in order for the changes to take effect.
Page 106
Command Line Interface (CLI) Example 2 - Create a table entry or row Use 0 (zero) as the index to a table when creating an entry. When creating a table row, only the mandatory table elements are required (comment is usually an optional table element). For optional table elements, the default value is generally applied if you do not specify a value.
Command Line Interface (CLI) Figure A-10 Results of “show network” and “show ip” CLI Commands Example 6 - Show Individual and Table Parameters 1. View a single parameter. Syntax: [Device Name]>show <parameter name> Example: [Device Name]> show ipaddr Result: Displays the Access Point IP address. Figure A-11 Result of “show ipaddr”...
The word “delete” is required. Using Strings Since there are several string objects supported by the AP-600, a string delimiter is required for the strings to be interpreted correctly by the command line parser. For this CLI implementation, the single quote or double quote character can be used at the beginning and at the end of the string.
Change Passwords. Set Basic Configuration Parameters using CLI Commands There are a few basic configuration parameters that you may want to setup right away when you receive the AP-600. For example: – Set System Name, Location and Contact Information –...
Command Line Interface (CLI) Set Static IP Address for the AP-600 NOTE The IP Subnet Mask of the AP-600 must match your network’s Subnet Mask. [Device Name]>set ipaddrtype static [Device Name]>set ipaddr <fixed IP address of unit> [Device Name]>set ipsubmask <IP Mask (default = 255.0.0.0)>...
Wireless clients must be configured with the same encryption key to be able to communicate with the AP-600. The AP-600 can only support one Key Length (so each of the configured keys must have the same length). The available key sizes vary based on the Access Point’s model. See Security Encryption Key Length Table for more information.
Command Line Interface (CLI) Other Network Settings There are other configuration settings that you may want to set for the AP-600. Some of them are listed below. – Configure the AP-600 as a DHCP Server – Configure the DNS Client –...
Command Line Interface (CLI) Maintain Client Connections using Link Integrity [Device Name]>show linkinttbl (this shows the current links) [Device Name]>set linkinttbl <1-5 (depending on what table row you wish to address)> ipaddr <ip address of the host computer you want to check> [Device Name]>set linkintpollint <the interval between link integrity checks>...
The distance between APs should not be approximated. It is calculated by means of a manual Site Survey, in which an AP-600 is set up and clients are tested throughout the area to determine signal strength and coverage, and local limits such as physical interference are investigated. From these measurements the appropriate cell size and density is determined, and the optimum distance between APs is calculated to suit your particular business requirements.
Command Line Interface (CLI) Set Communication Ports [Device Name]>set httpport <HTTP port number (default is 80)> [Device Name]>set telport <Telnet port number (default is 23)> Set Telnet Session Timeouts [Device Name]>set tellogintout <time in seconds between 1 and 300 (default is 30)> [Device Name]>set telsessiontout <time in seconds between 1 and 36000 (default is 900)>...
Command Line Interface (CLI) Configure 802.1x Authentication [Device Name]>set secconfig <none, 802.1x, mixed> [Device Name]>set secenckeylentbl 3 enckeylen <64bits, 128bits> [Device Name]>set secrekeyint <60 – 65535 seconds; default is 900 sec> [Device Name]>reboot 0 NOTE If you set Security to 802.1x or Mixed, you also need to configure the RADIUS parameters. If you set Security to Mixed, you also need to configure WEP Encryption settings.
[Device Name]>show radacctbl Figure A-19 Results of “show radacctbl” CLI command CLI Monitoring Parameters Using the show command with the following table parameters will display operating statistics for the AP-600 (these are the same statistics that are described in Monitor Information for the HTTP Web interface).
- Filter IP packets based on TCP/UDP port • Alarms Parameters – SNMP Table Host Table Parameters - Enter the list of IP addresses that will receive alarms from the AP-600 – Syslog Parameters - Configure the AP-600 to send Syslog information to network servers •...
Component Interface Table Subgroup sysinvmgmtcmpiftbl NOTE The inventory management commands display advanced information about the AP-600’s installed components. You may be asked to report this information to a representative if you contact customer support. Network Parameters IP Configuration Parameters Name...
Command Line Interface (CLI) DNS Client for RADIUS Name Resolution Name Type Values Access CLI Parameter DNS Client Group DNS Client status Integer enable dnsstatus disable (default) Primary DNS Server IP IpAddress User Defined dnspridnsipaddr Address Secondary DNS Server IpAddress User Defined dnssecdnsipaddr IP Address...
Command Line Interface (CLI) Link Integrity Parameters Name Type Values Access CLI Parameter Link Integrity Group linkint Link Integrity Status Integer enable linkintstatus disable (default) Link Integrity Poll Integer 500 - 15000 ms linkintpollint Interval (in increments of 500ms) 500 ms (default) Link Integrity Poll Integer 0 - 255...
Page 122
Command Line Interface (CLI) AP-600a Only Parameters Name Type Values Access CLI Parameter Operating Frequency Channel Integer Varies by regulatory channel domain and country. See 802.11a Channel Frequencies for the AP-600a 2X Turbo Mode Integer enable turbo (not available in all countries) disable (default) Supported Data Rates Octet String...
Page 123
Command Line Interface (CLI) Name Type Values Access CLI Parameter Multicast Rate Integer 1 Mbits/sec (1) multrate 2 Mbits/sec (2) (default) 5.5 Mbits/sec (3) 11 Mbits/sec (4) Closed Wireless System Integer enable closedsys disable (default) Load Balancing Integer enable (default) ldbalance disable Medium Distribution...
HTTP Port Integer User Defined httpport Default = 80 Help Link DisplayString User Defined httphelplink NOTE The default path for the Help files is C:\Program Files\ORiNOCO\AP600\HTML\index.htm. The ORiNOCO AP-600 Help information is available in English, French, German, Italian, Spanish, and Japanese.
Command Line Interface (CLI) Telnet Parameters Name Type Values Access CLI Parameter Telnet Group telnet Telnet Management Interface Bitmask 0 or 2 - no interfaces telifbitmask Interface Bitmask (disable) 1 or 3 - Ethernet 4 or 6 - Wireless 5 or 7 - all interfaces (default is 7) Telnet Port Integer...
Command Line Interface (CLI) IP Access Table Parameters When creating table entries, you may either specify the argument name followed by argument value or simply entering the argument value. When only the argument value is specified, then enter the values in the order depicted by the following table.
Command Line Interface (CLI) Static MAC Address Filter Table Name Type Values Access CLI Parameter Static MAC Address Table staticmactbl Filter Table Table Index index Static MAC Address on PhysAddress User Defined wiredmacaddr Wired Network Static MAC Address PhysAddress User Defined wiredmask Mask on Wired Network Static MAC Address on...
Command Line Interface (CLI) TCP/UDP Port Filtering The following parameters are used to enable/disable the Port filter feature. Name Type Values Access Port Filtering Group portflt Port Filter Status Integer enable (default) portfltstatus disable TCP/UDP Port Filtering Table The following parameters are used to configure TCP/UDP Port filters. Name Type Values...
The Heartbeat parameters are advanced settings not available via the HTTP interface. When Heartbeat is enabled, the AP-600 periodically sends a message to the Syslog server to indicate that it is active. The frequency with which the heartbeat message is sent depends upon the setting of the Heartbeat Interval.
Command Line Interface (CLI) Bridge Parameters Spanning Tree Parameters Name Type Values Access CLI Parameter Spanning Tree Group Spanning Tree Status Integer enable stpstatus disable (default) Bridge Priority Integer 0 – 65535 stppriority 32768 (default) Maximum Age Integer 600 – 4000 stpmaxage (in 0.01 sec intervals;...
Re-keying Interval Integer 60 – 65535 seconds secrekeyint default is 900 sec Wireless Interface Security Parameters The following table details the WEP encryption parameters for the AP-600 (both the AP-600a and the AP-600b). Name Type Values Access CLI Parameter Wireless Interface...
RADIUS Parameters Primary and Backup RADIUS Server Table Parameters ORiNOCO devices that use RADIUS authentication and/or accounting support both primary and backup RADIUS servers. The configuration parameters and statistics are the same for both primary and backup servers. The CLI differentiates the primary and backup RADIUS parameters by using the table index.
Page 133
Command Line Interface (CLI) RADIUS Authentication NOTE Use a server name only if you have enabled the DNS Client functionality. See DNS Client for RADIUS Name Resolution. Name Type Values Access CLI Parameter RADIUS Authentication Table radiustbl Primary RADIUS Integer index Backup RADIUS Integer...
ORiNOCO AP-600 User Guide ASCII Character Chart You can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F, a-f (case sensitive), and punctuation marks. Each ASCII character corresponds to two hexadecimal digits.
• Radio Specifications Hardware Specifications Physical Specifications AP-600 Unit (without metal base) Dimensions (H x W x L) = 3.5 x 17 x 21.5 cm (1.5 x 6.75 x 8.5 in.) Weight = 0.68 kg (1.50 lb.) Electrical Specifications Using the Power Adapter Voltage (Input) = 100 to 240 VAC (50-60 Hz) @ 0.4 A...
For AP-600b: 802.11b radio certification is available in the U.S. (FCC), Canada (DOC), Japan (MKK), Europe (ETSI), Australia, and South Africa. NOTE Refer to the Regulatory Flyer included with the AP-600 for the latest regulatory information. 802.11a Channel Frequencies for the AP-600a The available 802.11a Channels varies by regulatory domain and/or country.
Specifications ETSI (Europe) Some European countries restrict 802.11a operation to the 5.15-5.25 GHz frequency band. Other European countries restrict 802.11a operation to the 5.15-5.35 GHz frequency band. The AP-600a can operate on the following Channels in the European countries that allow operation in the 5.15-5.25 GHz band: Channel ID Center Frequency...
Specifications 802.11b Channel Frequencies for the AP-600b The following table shows the 802.11b channel allocations that vary from country to country. Channel ID FCC/World ETSI France Japan (GHz) (GHz) (GHz) (GHz) 2.412 2.412 2.412 2.417 2.417 2.417 2.422 2.422 2.422 2.427 2.427 2.427...
Specifications Wireless Communication Range The range of the wireless signal is related to the composition of objects in the radio wave path and the transmit rate of the wireless communication. Communications at a lower transmit range may travel longer distances. The range values listed in the Communications Range Chart are typical distances as calculated by Proxim’s development team for FCC-certified products.
ORiNOCO AP-600 User Guide Technical Support If you are having a problem using an AP-600 and cannot resolve it with the information in Troubleshooting, gather the following information and contact ORiNOCO Technical Support: • List of ORiNOCO products installed on your network; include the following: –...
Page 142
For Europe, the Middle East, and Africa (EMEA): Your local supplier in the EMEA region is trained to give you the support you require. Local suppliers have direct access to the ORiNOCO Technical Support Center and will help you in every way they can. Phone:...