Page 2
Colubris Networks, Inc. Colubris is a registered trademark, and the Colubris Networks logo, the tag line The Intelligent Wireless Networking Choice and TriPlane are trademarks of Colubris Networks, Inc., in the United States and other countries.
Configuration procedure ..............16 802.1x — Manage CA certificates........42 A. Configure your computer..........16 Certificate stores...............42 B. Start the WCB-200............16 Trusted CA certificate store ..........42 C. Perform these initial login tasks ........16 Certificate and private key store..........43 D. Configure the wireless network ........17 Certificate usage ...............44...
Page 4
WCB-200 Admin Guide Contents Information for the user............58 Health information ..............58 Declarations of conformity............59 Appendix B Resetting to factory defaults Introduction ..................62 Using the reset switch ..............62 Using the management tool ............62...
WCB-200 Admin Guide 1 Introduction About this guide This guide explains how to install, configure, and operate the Colubris Networks WCB-200 (wireless client bridge) product. Important terms The following terms are used in this guide. Term Description Refers to access points including the Colubris MultiService Access Points such as the MAP-630, MAP-320, and MAP-330.
An integrated serial-to-TCP/IP converter enables a TIA-232 asynchronous terminal device to communicate with a compatible station on the network. The WCB-200 includes support for all 2.4 GHz or 5 GHz channels that are available within your regulatory domain. High-output power and antenna diversity ensure the best possible range and throughput.
• Features a plenum-rated metal enclosure. Typical deployment The WCB-200 provides a wireless bridge to an AP such as a MAP-630, MAP-320, or MAP-330. This bridge can be used to: • Connect up to 20 wired Ethernet devices to a wireless network. The WCB-200 provides MAC address translation for all traffic, enabling each wireless station to have its own IP address and to communicate across the network.
Point-of-Sale terminal. An AP is used to provide the wireless network and the connection to a router. The router provides access to the Internet and also acts as the DHCP server. It assigns IP addresses to the WCB-200 and the two computers on the LAN. These addresses are all on the same subnet, 192.168.1.x.
Antennas The WCB-200 has a single radio with two antennas for diversity. The Main antenna connector is located on the front panel and the Auxiliary antenna connector is located on the back panel. The antenna connectors are reverse-polarity SMA jacks. Antennas or cable connectors must use RP-SMA plugs.
To connect to a computer, use a standard (straight through) serial cable (male-to-female). Reset button Press and quickly release the button to reset the WCB-200. To reset to factory default settings, press and hold the reset button until the status lights flash three times, then release. For more information, see “Resetting to factory defaults”...
When mounting the WCB-200 on a wall or ceiling, ensure that the surface to which you attach the WCB-200 and the fasteners you use can support at least .9 kg (2 pounds). Allow extra weight for cables.
Connection > Properties > Internet Protocol (TCP/IP) > Properties. 3. Disable any wireless connection. B. Start the WCB-200 Connect the power supply or use an 802.3af PoE injector to power on the WCB-200. C. Perform these initial login tasks Note: The following procedure assumes that you the have a Colubris AP set to factory default accessible to the WCB-200.
5. Click Save. The WCB-200 should automatically establish a connection with the wireless network and is now ready for operation. By default, the WCB-200 operates as a DHCP client to obtain its IP address from a DHCP server. The network must have a DHCP server. Broadband routers typically include a DHCP server.
2. Connect your computer to the same network as the WCB-200. 3. Look in the DHCP server log for the Ethernet Base MAC address shown on the WCB-200 label and take note of the corresponding IP address.
To act as a management station, a computer must have at least Internet Explorer 7.0 or Mozilla Firefox 2.0. Starting the management tool To launch the management tool, point your web browser to the IP address of the WCB-200. By default, the address is 192.168.1.1. Customizing management tool settings To customize management tool settings, select Management >...
You can also configure the web server ports from which access to the management tool is permitted. • Secure web server port: Specify a port number for the WCB-200 to use to provide secure HTTPS access to the management tool. Default is 443.
The WCB-200 is a wireless bridge, which means that port 1 and the wireless port share the same IP address. By default, the WCB-200 is configured as a DHCP client on the port 1. If no DHCP server is found at startup, the WCB-200 assigns the address 192.168.1.1 to port 1 and the wireless port.
4. Define addressing settings are required. Management IP address The WCB-200 lets you assign a second, static, IP address to port 1. This provides easy access to the management tool when using a DHCP server. This address must not be on the same subnet as the address already assigned to Note: port 1.
WCB-200 Admin Guide 4 Working with the WCB-200 3. In the Bridge configuration page, enter a new IP address for the WCB-200 and select Static. 4. Select Save. Radio configuration The WCB-200’s wireless radio is an RF direct sequence spread spectrum (DSSS) device that operates in the Industrial, Scientific, Medical (ISM) frequency spectrum.
• 802.11a: up to 54 Mbps in the 5 GHz frequency band. Restrict channels to Select the channels that the WCB-200 will scan. By limiting the channels that are scanned, the speed at which the WCB-200 switches to a new AP can be increased.
Page 26
Fast roaming threshold count) and the SNR of the current AP is less than the Fast roaming threshold. For example, if set to 10, then the WCB-200 will only switch to a new AP if its SNR is greater than 10 dB and the AP it is currently connected to has an SNR less than 10 dB. Once...
Page 27
(Only applies when connecting using a station profile for which active scanning is disabled) Sets the length of time (in milliseconds) that the WCB-200 will scan a channel. By default, this is set to 200 milliseconds which is double the value of the standard beacon interval (100 milliseconds) used by most APs.
4 Working with the WCB-200 Using station profiles to establish a connection A station profile contains the configuration settings that the WCB-200 uses to establish a wireless connection with an access point. The WCB-200 supports multiple station profiles, enabling it to automatically connect with different wireless networks.
Specify the MAC address of the AP (BSSID) with which this profile will connect. Active scanning In active scanning mode, the WCB-200 sends out probe request frames in an attempt to solicit responses from APs that are within range. This enables the WCB-200 to establish a connection with an AP that does not broadcast an SSID.
The WCB-200 obtains the Microsoft Point-to-Point Encryption (MPPE) keys from a RADIUS server (via the remote AP). This is a dynamic key that changes each time the WCB-200 logs in and is authenticated by the AP. The MPPE key is used to generate the WEP, TKIP or AES/CCMP keys that encrypt the wireless data stream.
WCB-200 Admin Guide 4 Working with the WCB-200 • Password: Specify the password assigned to the WCB-200 on the remote AP's RADIUS server. • Anonymous: Specify the outer authentication username for the TLS tunnel. • FAST: EAP-FAST uses an encrypted tunnel to distribute preshared keys.
• ESS: Operating in AP mode. Also lists security being used if enabled (WEP, WPA). • IBSS: Operating in Ad-Hoc mode. Handling unsupported traffic The WCB-200 only sends and receives IPv4 traffic on the wireless connection. By default, all other traffic is discarded. Note: The WCB-200 never forwards 802.1X frames to the LAN port.
TCP/IP network. In this scenario: • A serial device is connected to the serial port on the WCB-200. • The WCB-200 packs and unpacks the serial traffic in TCP packets for exchange with a remote device by way of the wireless bridge.
Mode Two modes are supported: client and server. • Client: The WCB-200 acts as a TCP client and initiates a connection on the wireless bridge to the specified Remote IP address using the specified TCP port. • Server: The WCB-200 acts as a TCP server/client and will listen for an incoming connection from a TCP client on the specified TCP port.
Disable wireless on LAN connect (This feature is available only when a device is connected to the WCB-200 via the serial port, and should only be used when port 1 and the wireless port connect the WCB-200 to the same network.)
• When enabled, the WCB-200 switches servers if the current server replies with a DNS server failure message. • When disabled, the WCB-200 switches servers if the current does not reply to a DNS request. DNS switch over This setting controls how the WCB-200 switches back to the primary DNS server after it has switched to the secondary DNS server because the primary was unavailable.
Certain DHCP servers respond to DHCP requests using the MAC address of the requesting station. This can cause DHCP requests from client stations connected to the WCB-200 to be discarded by the AP that the WCB-200 is associated with since the MAC addresses of these client stations are not known to the AP.
4 Working with the WCB-200 IP forwarding Ethernet devices do not send any IP packets at start up will have no entry in the WCB-200's wireless to MAC translation table. As a result, the WCB-200 will not be able to route incoming traffic on the wireless port to these devices.
Select Management > SNMP to open the SNMP configuration page. This page enables you to configure SNMP attributes, agents, traps, and security. Attributes • System name: Specify a name to identify the WCB-200. Default is the WCB-200 serial number. • Location: Specify a descriptive name for the location where the WCB-200 is installed.
• Confirm read-only name: Reenter the Read-only name. Agent The SNMP agent is active by default. If you disable the agent the WCB-200 will not respond to SNMP requests. • Port: UDP port and protocol the WCB-200 uses to respond to SNMP requests. Default port is 161.
Click View to see the contents of the certificate. 802.1x — Trusted CA certificates The WCB-200 uses the CA certificates to validate the certificates supplied by peers during the authentication process. Multiple CA certificates can be installed to support validation of peers with...
Security > Certificate stores. Trusted CA certificate store This list displays all CA certificates installed on the WCB-200. The WCB-200 uses the CA certificates to validate the certificates supplied by peers during authentication. Multiple CA certificates can be installed to support validation of peers with certificates issued by different CAs.
BEGIN CRL and END CRL. Certificate and private key store This list displays all certificates installed on the WCB-200. The WCB-200 uses these certificates and private keys to authenticate itself to peers. The following information is displayed for each certificate in the list: •...
WCB-200. Consequently, the web browser issues security warnings. To avoid this problem, install an SSL certificate on the WCB-200 only if it is directly signed by the root certificate authority or if you have appended all certificates that make up the chain.
• Authenticate to peer using: Name of the certificate and private key. The WCB-200 is able to prove that it has the private key corresponding to the public key in the certificate. This is what establishes the WCB-200 as a legitimate user of the certificate.
The following is an example of a security warnings displayed by Internet Explorer 7: Configuration file management The configuration file contains all the settings that customize the operation of the WCB-200. You can save and restore the configuration file manually, automatically, or with a tool like cURL.
This feature enables you to maintain several configuration files with different settings, which can be useful if you must frequently alter the configuration of the WCB-200 or if you are managing several WCB-200s from a central site. Use the following steps to restore a saved configuration file.
Note: The first time an WCB-200 is started up after a factory reset, the end user license agreement must be accepted and the country of operation must be set. This must be done manually or by modifying the sample cURL scripts in this section.
WCB-200 Admin Guide 4 Working with the WCB-200 3. Prepare the WCB-200 to receive the configuration update. curl --cookie cookie.txt "https://24.28.15.22/script/ -s -k config_init.asp" 4. Upload the configuration file. curl --cookie cookie.txt -F config=@new.cfg -F backup=Restore -s -k "https://24.28.15.22/goform/ScriptUploadConfig" 5. Reset the WCB-200 to activate the new configuration.
To update WCB-200 firmware, select Maintenance > Firmware updates. Configuration settings are preserved during firmware upgrades. Note: Immediate update To update the WCB-200 firmware now, Browse to the firmware file (extension .cim) and then select Install. At the end of the firmware-update process, the WCB-200 automatically restarts, Note: causing all users to be disconnected.
3. Prepare the WCB-200 to receive the firmware update. curl -s -k --cookie cookie.txt "https://24.28.15.22/script/ firmware_init.asp" 4. Upload the firmware. Once the upload is complete the WCB-200 will automatically restart. curl -s -k --cookie cookie.txt -F firmware=@WCB.cim -F backup=Install "https://24.28.15.22/goform/ScriptUploadFirmware"...
Page 52
WCB-200 Admin Guide 4 Working with the WCB-200...
• Reorient or relocate the receiving antenna • Increase the distance between the WCB-200 and the receiver • Connect the WCB-200 to an outlet that is on a different circuit than the circuit to which the receiver is connected • Consult your dealer or an experienced radio/TV technician for help Colubris Networks Inc.
5 GHz band. In order to comply with specific spectrum allocations, Colubris Networks products must be set to the correct country of operation prior to use. Failure to do so may violate national requirements.
Page 56
802.11a-Geräte DFS verwenden, um Störungen in Radarsystemen und anderen Geräten, die das 5-GHz Band verwenden, zu vermeiden. • Las unidades Colubris Networks vendidas en Europa usan una técnica llamada Selección dinámica de frecuencias (Dynamic Frequency Selection, DFS) para seleccionar automaticamente un canal de operación.
Page 57
WCB-200 Admin Guide Regulatory information • EN301893: Radio LAN equipment operating in the 5 GHz band • ETS 300826 and/or ETS 301489-17: General EMC requirements for radio equipment EU member states with restrictive use for this product are crossed out.
In some situations or environments, use of the WCB-200 may be restricted by a proprietor of a building or responsible representatives of an organization. For example, these situations may include using the WCB-200 •...
WCB-200 Admin Guide Regulatory information Declarations of conformity...
Page 60
WCB-200 Admin Guide Regulatory information Colubris Networks 200 West Street, Waltham, Massachusetts 02451, USA Declares that the WCB-200 conforms to the following standards: European Directives and European Standards • EMC Directive 89/336 EEC • Low Voltage Directive 73/23 EEC • Radio and Telecommunication Terminal Equipment Directive 1999/5/EEC •...
WCB-200 Admin Guide Resetting to factory defaults Introduction To force a WCB-200 into its factory default state, follow the procedures in this section. Caution: Resetting an WCB-200 to factory defaults deletes all configuration settings, resets the administrator username and password to admin, enables the DHCP client on port1, sets the IP address of the port(s) to 192.168.1.1.
Need help?
Do you have a question about the WCB-200 and is the answer not in the manual?
Questions and answers