Colubris Networks WCB-200 Admin Manual

Wireless client bridge
Table of Contents

Advertisement

Quick Links

WCB-200
Admin Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the WCB-200 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Colubris Networks WCB-200

  • Page 1 WCB-200 Admin Guide...
  • Page 2 Colubris Networks, Inc. Colubris is a registered trademark, and the Colubris Networks logo, the tag line The Intelligent Wireless Networking Choice and TriPlane are trademarks of Colubris Networks, Inc., in the United States and other countries.
  • Page 3: Table Of Contents

    Configuration procedure ..............16 802.1x — Manage CA certificates........42 A. Configure your computer..........16 Certificate stores...............42 B. Start the WCB-200............16 Trusted CA certificate store ..........42 C. Perform these initial login tasks ........16 Certificate and private key store..........43 D. Configure the wireless network ........17 Certificate usage ...............44...
  • Page 4 WCB-200 Admin Guide Contents Information for the user............58 Health information ..............58 Declarations of conformity............59 Appendix B Resetting to factory defaults Introduction ..................62 Using the reset switch ..............62 Using the management tool ............62...
  • Page 5: Introduction

    Product registration - - - - - - - - - - - - - - - - - - - - - - - - - - - - Contacting Colubris Networks- - - - - - - - - - - - - - - - - - - - - - -...
  • Page 6: About This Guide

    WCB-200 Admin Guide 1 Introduction About this guide This guide explains how to install, configure, and operate the Colubris Networks WCB-200 (wireless client bridge) product. Important terms The following terms are used in this guide. Term Description Refers to access points including the Colubris MultiService Access Points such as the MAP-630, MAP-320, and MAP-330.
  • Page 7: Related Documentation

    An integrated serial-to-TCP/IP converter enables a TIA-232 asynchronous terminal device to communicate with a compatible station on the network. The WCB-200 includes support for all 2.4 GHz or 5 GHz channels that are available within your regulatory domain. High-output power and antenna diversity ensure the best possible range and throughput.
  • Page 8: Typical Deployment

    • Features a plenum-rated metal enclosure. Typical deployment The WCB-200 provides a wireless bridge to an AP such as a MAP-630, MAP-320, or MAP-330. This bridge can be used to: • Connect up to 20 wired Ethernet devices to a wireless network. The WCB-200 provides MAC address translation for all traffic, enabling each wireless station to have its own IP address and to communicate across the network.
  • Page 9: Product Registration

    Point-of-Sale terminal. An AP is used to provide the wireless network and the connection to a router. The router provides access to the Internet and also acts as the DHCP server. It assigns IP addresses to the WCB-200 and the two computers on the LAN. These addresses are all on the same subnet, 192.168.1.x.
  • Page 10 WCB-200 Admin Guide 1 Introduction...
  • Page 11: Hardware

    Chapter 2: WCB-200 hardware WCB-200 hardware Contents The WCB-200 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 12: The Wcb-200

    Antennas The WCB-200 has a single radio with two antennas for diversity. The Main antenna connector is located on the front panel and the Auxiliary antenna connector is located on the back panel. The antenna connectors are reverse-polarity SMA jacks. Antennas or cable connectors must use RP-SMA plugs.
  • Page 13: Console Port

    To connect to a computer, use a standard (straight through) serial cable (male-to-female). Reset button Press and quickly release the button to reset the WCB-200. To reset to factory default settings, press and hold the reset button until the status lights flash three times, then release. For more information, see “Resetting to factory defaults”...
  • Page 14: Installation

    When mounting the WCB-200 on a wall or ceiling, ensure that the surface to which you attach the WCB-200 and the fasteners you use can support at least .9 kg (2 pounds). Allow extra weight for cables.
  • Page 15: Getting Started

    Chapter 3: Getting started Getting started Contents Overview - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Configuration procedure - - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 16: Overview

    Connection > Properties > Internet Protocol (TCP/IP) > Properties. 3. Disable any wireless connection. B. Start the WCB-200 Connect the power supply or use an 802.3af PoE injector to power on the WCB-200. C. Perform these initial login tasks Note: The following procedure assumes that you the have a Colubris AP set to factory default accessible to the WCB-200.
  • Page 17: Configure The Wireless Network

    5. Click Save. The WCB-200 should automatically establish a connection with the wireless network and is now ready for operation. By default, the WCB-200 operates as a DHCP client to obtain its IP address from a DHCP server. The network must have a DHCP server. Broadband routers typically include a DHCP server.
  • Page 18: Accessing The Wcb

    2. Connect your computer to the same network as the WCB-200. 3. Look in the DHCP server log for the Ethernet Base MAC address shown on the WCB-200 label and take note of the corresponding IP address.
  • Page 19: Working With The Wcb-200

    Chapter 4: Working with the WCB-200 Working with the WCB-200 Contents Using the management tool- - - - - - - - - - - - - - - - - - - - - - - - IP address configuration - - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 20: Using The Management Tool

    To act as a management station, a computer must have at least Internet Explorer 7.0 or Mozilla Firefox 2.0. Starting the management tool To launch the management tool, point your web browser to the IP address of the WCB-200. By default, the address is 192.168.1.1. Customizing management tool settings To customize management tool settings, select Management >...
  • Page 21: Login Control

    You can also configure the web server ports from which access to the management tool is permitted. • Secure web server port: Specify a port number for the WCB-200 to use to provide secure HTTPS access to the management tool. Default is 443.
  • Page 22: Auto-Refresh

    The WCB-200 is a wireless bridge, which means that port 1 and the wireless port share the same IP address. By default, the WCB-200 is configured as a DHCP client on the port 1. If no DHCP server is found at startup, the WCB-200 assigns the address 192.168.1.1 to port 1 and the wireless port.
  • Page 23: Management Ip Address

    4. Define addressing settings are required. Management IP address The WCB-200 lets you assign a second, static, IP address to port 1. This provides easy access to the management tool when using a DHCP server. This address must not be on the same subnet as the address already assigned to Note: port 1.
  • Page 24: Radio Configuration

    WCB-200 Admin Guide 4 Working with the WCB-200 3. In the Bridge configuration page, enter a new IP address for the WCB-200 and select Static. 4. Select Save. Radio configuration The WCB-200’s wireless radio is an RF direct sequence spread spectrum (DSSS) device that operates in the Industrial, Scientific, Medical (ISM) frequency spectrum.
  • Page 25: Configuration

    • 802.11a: up to 54 Mbps in the 5 GHz frequency band. Restrict channels to Select the channels that the WCB-200 will scan. By limiting the channels that are scanned, the speed at which the WCB-200 switches to a new AP can be increased.
  • Page 26 Fast roaming threshold count) and the SNR of the current AP is less than the Fast roaming threshold. For example, if set to 10, then the WCB-200 will only switch to a new AP if its SNR is greater than 10 dB and the AP it is currently connected to has an SNR less than 10 dB. Once...
  • Page 27 (Only applies when connecting using a station profile for which active scanning is disabled) Sets the length of time (in milliseconds) that the WCB-200 will scan a channel. By default, this is set to 200 milliseconds which is double the value of the standard beacon interval (100 milliseconds) used by most APs.
  • Page 28: Using Station Profiles To Establish A Connection

    4 Working with the WCB-200 Using station profiles to establish a connection A station profile contains the configuration settings that the WCB-200 uses to establish a wireless connection with an access point. The WCB-200 supports multiple station profiles, enabling it to automatically connect with different wireless networks.
  • Page 29: General

    Specify the MAC address of the AP (BSSID) with which this profile will connect. Active scanning In active scanning mode, the WCB-200 sends out probe request frames in an attempt to solicit responses from APs that are within range. This enables the WCB-200 to establish a connection with an AP that does not broadcast an SSID.
  • Page 30: Key Source

    The WCB-200 obtains the Microsoft Point-to-Point Encryption (MPPE) keys from a RADIUS server (via the remote AP). This is a dynamic key that changes each time the WCB-200 logs in and is authenticated by the AP. The MPPE key is used to generate the WEP, TKIP or AES/CCMP keys that encrypt the wireless data stream.
  • Page 31: Encryption Type

    WCB-200 Admin Guide 4 Working with the WCB-200 • Password: Specify the password assigned to the WCB-200 on the remote AP's RADIUS server. • Anonymous: Specify the outer authentication username for the TLS tunnel. • FAST: EAP-FAST uses an encrypted tunnel to distribute preshared keys.
  • Page 32: Handling Unsupported Traffic

    • ESS: Operating in AP mode. Also lists security being used if enabled (WEP, WPA). • IBSS: Operating in Ad-Hoc mode. Handling unsupported traffic The WCB-200 only sends and receives IPv4 traffic on the wireless connection. By default, all other traffic is discarded. Note: The WCB-200 never forwards 802.1X frames to the LAN port.
  • Page 33: Connecting Serial Devices

    TCP/IP network. In this scenario: • A serial device is connected to the serial port on the WCB-200. • The WCB-200 packs and unpacks the serial traffic in TCP packets for exchange with a remote device by way of the wireless bridge.
  • Page 34: Tcp Connection

    Mode Two modes are supported: client and server. • Client: The WCB-200 acts as a TCP client and initiates a connection on the wireless bridge to the specified Remote IP address using the specified TCP port. • Server: The WCB-200 acts as a TCP server/client and will listen for an incoming connection from a TCP client on the specified TCP port.
  • Page 35: Port Control

    Disable wireless on LAN connect (This feature is available only when a device is connected to the WCB-200 via the serial port, and should only be used when port 1 and the wireless port connect the WCB-200 to the same network.)
  • Page 36: Ethernet Mac Cloning

    • When enabled, the WCB-200 switches servers if the current server replies with a DNS server failure message. • When disabled, the WCB-200 switches servers if the current does not reply to a DNS request. DNS switch over This setting controls how the WCB-200 switches back to the primary DNS server after it has switched to the secondary DNS server because the primary was unavailable.
  • Page 37: Act Like A Dhcp Relay Agent

    Certain DHCP servers respond to DHCP requests using the MAC address of the requesting station. This can cause DHCP requests from client stations connected to the WCB-200 to be discarded by the AP that the WCB-200 is associated with since the MAC addresses of these client stations are not known to the AP.
  • Page 38: Ip Forwarding

    4 Working with the WCB-200 IP forwarding Ethernet devices do not send any IP packets at start up will have no entry in the WCB-200's wireless to MAC translation table. As a result, the WCB-200 will not be able to route incoming traffic on the wireless port to these devices.
  • Page 39: Snmp

    Select Management > SNMP to open the SNMP configuration page. This page enables you to configure SNMP attributes, agents, traps, and security. Attributes • System name: Specify a name to identify the WCB-200. Default is the WCB-200 serial number. • Location: Specify a descriptive name for the location where the WCB-200 is installed.
  • Page 40: Agent

    • Confirm read-only name: Reenter the Read-only name. Agent The SNMP agent is active by default. If you disable the agent the WCB-200 will not respond to SNMP requests. • Port: UDP port and protocol the WCB-200 uses to respond to SNMP requests. Default port is 161.
  • Page 41: Certificates

    Click View to see the contents of the certificate. 802.1x — Trusted CA certificates The WCB-200 uses the CA certificates to validate the certificates supplied by peers during the authentication process. Multiple CA certificates can be installed to support validation of peers with...
  • Page 42: Manage Ca Certificates

    Security > Certificate stores. Trusted CA certificate store This list displays all CA certificates installed on the WCB-200. The WCB-200 uses the CA certificates to validate the certificates supplied by peers during authentication. Multiple CA certificates can be installed to support validation of peers with certificates issued by different CAs.
  • Page 43: Certificate And Private Key Store

    BEGIN CRL and END CRL. Certificate and private key store This list displays all certificates installed on the WCB-200. The WCB-200 uses these certificates and private keys to authenticate itself to peers. The following information is displayed for each certificate in the list: •...
  • Page 44: Certificate Usage

    WCB-200. Consequently, the web browser issues security warnings. To avoid this problem, install an SSL certificate on the WCB-200 only if it is directly signed by the root certificate authority or if you have appended all certificates that make up the chain.
  • Page 45: Changing The Certificate Assigned To A Service

    • Authenticate to peer using: Name of the certificate and private key. The WCB-200 is able to prove that it has the private key corresponding to the public key in the certificate. This is what establishes the WCB-200 as a legitimate user of the certificate.
  • Page 46: Configuration File Management

    The following is an example of a security warnings displayed by Internet Explorer 7: Configuration file management The configuration file contains all the settings that customize the operation of the WCB-200. You can save and restore the configuration file manually, automatically, or with a tool like cURL.
  • Page 47: Reset Configuration

    This feature enables you to maintain several configuration files with different settings, which can be useful if you must frequently alter the configuration of the WCB-200 or if you are managing several WCB-200s from a central site. Use the following steps to restore a saved configuration file.
  • Page 48: Managing The Configuration File With Curl

    Note: The first time an WCB-200 is started up after a factory reset, the end user license agreement must be accepted and the country of operation must be set. This must be done manually or by modifying the sample cURL scripts in this section.
  • Page 49: Downloading The Configuration File

    WCB-200 Admin Guide 4 Working with the WCB-200 3. Prepare the WCB-200 to receive the configuration update. curl --cookie cookie.txt "https://24.28.15.22/script/ -s -k config_init.asp" 4. Upload the configuration file. curl --cookie cookie.txt -F config=@new.cfg -F backup=Restore -s -k "https://24.28.15.22/goform/ScriptUploadConfig" 5. Reset the WCB-200 to activate the new configuration.
  • Page 50: Firmware Updates

    To update WCB-200 firmware, select Maintenance > Firmware updates. Configuration settings are preserved during firmware upgrades. Note: Immediate update To update the WCB-200 firmware now, Browse to the firmware file (extension .cim) and then select Install. At the end of the firmware-update process, the WCB-200 automatically restarts, Note: causing all users to be disconnected.
  • Page 51: Updating Firmware With Curl

    3. Prepare the WCB-200 to receive the firmware update. curl -s -k --cookie cookie.txt "https://24.28.15.22/script/ firmware_init.asp" 4. Upload the firmware. Once the upload is complete the WCB-200 will automatically restart. curl -s -k --cookie cookie.txt -F firmware=@WCB.cim -F backup=Install "https://24.28.15.22/goform/ScriptUploadFirmware"...
  • Page 52 WCB-200 Admin Guide 4 Working with the WCB-200...
  • Page 53: Appendix A Regulatory Information

    Appendix A: Regulatory information Regulatory information Contents Regulatory information - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 54: Regulatory Information

    • Reorient or relocate the receiving antenna • Increase the distance between the WCB-200 and the receiver • Connect the WCB-200 to an outlet that is on a different circuit than the circuit to which the receiver is connected • Consult your dealer or an experienced radio/TV technician for help Colubris Networks Inc.
  • Page 55: Canada: Industry Canada (Ic)

    5 GHz band. In order to comply with specific spectrum allocations, Colubris Networks products must be set to the correct country of operation prior to use. Failure to do so may violate national requirements.
  • Page 56 802.11a-Geräte DFS verwenden, um Störungen in Radarsystemen und anderen Geräten, die das 5-GHz Band verwenden, zu vermeiden. • Las unidades Colubris Networks vendidas en Europa usan una técnica llamada Selección dinámica de frecuencias (Dynamic Frequency Selection, DFS) para seleccionar automaticamente un canal de operación.
  • Page 57 WCB-200 Admin Guide Regulatory information • EN301893: Radio LAN equipment operating in the 5 GHz band • ETS 300826 and/or ETS 301489-17: General EMC requirements for radio equipment EU member states with restrictive use for this product are crossed out.
  • Page 58: Information For The User

    In some situations or environments, use of the WCB-200 may be restricted by a proprietor of a building or responsible representatives of an organization. For example, these situations may include using the WCB-200 •...
  • Page 59: Declarations Of Conformity

    WCB-200 Admin Guide Regulatory information Declarations of conformity...
  • Page 60 WCB-200 Admin Guide Regulatory information Colubris Networks 200 West Street, Waltham, Massachusetts 02451, USA Declares that the WCB-200 conforms to the following standards: European Directives and European Standards • EMC Directive 89/336 EEC • Low Voltage Directive 73/23 EEC • Radio and Telecommunication Terminal Equipment Directive 1999/5/EEC •...
  • Page 61: Resetting To Factory Defaults

    Appendix B: Resetting to factory defaults Resetting to factory defaults Contents Introduction- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Using the reset switch - - - - - - - - - - - - - - - - - - - - - - - - Using the management tool - - - - - - - - - - - - - - - - - - - - - -...
  • Page 62: Introduction

    WCB-200 Admin Guide Resetting to factory defaults Introduction To force a WCB-200 into its factory default state, follow the procedures in this section. Caution: Resetting an WCB-200 to factory defaults deletes all configuration settings, resets the administrator username and password to admin, enables the DHCP client on port1, sets the IP address of the port(s) to 192.168.1.1.

Table of Contents