Table of Contents

Advertisement

Quick Links

WA3001 Indoor AP

Wireless Access Point

USER GUIDE
Release: 1.1
Doc. Code: L3 DW09 1000 02 010 00
UTStarcom, Inc.

Advertisement

Table of Contents
loading

Summary of Contents for UTStarcom WA3001

  • Page 1: Wireless Access Point

    WA3001 Indoor AP Wireless Access Point USER GUIDE Release: 1.1 Doc. Code: L3 DW09 1000 02 010 00 UTStarcom, Inc.
  • Page 3 UTStarcom, Inc. UTStarcom, Inc. reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of UTStarcom, Inc. to provide notification of such revision or changes.
  • Page 5 Regulatory statement (FCC) The users manual or instruction manual for an intentional or unintentional radiator shall caution the user that changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.
  • Page 6 15.105(b) Information of the responsible party for a DoC product The identification of the product: Product Name: Wireless Access Point Model: WA3001 Technical Support: Technical Support in the US: UTStarcom Telecom Co., Ltd. UTStarcom, Inc. Address: Address: NO.88 Wenhua Road, 1275 Harbor Bay Parkway...
  • Page 7 2.4835GHz frequency range and must be restricted to indoor use. Declaration of Conformity For the following equipment: WA3001 Access Point 0984 Is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the...
  • Page 8 • EN 300 328 V.1.4.1 (2003-04) • EN 301 489-1 V.1.3.1 (2001-09) / EN 301 489-17 V.1.1.1 (2000-09) • EN 50371: 2002 • EN 60950: 2000...
  • Page 10: Table Of Contents

    Contents Product Introduction ..............1 Product Introduction..................2 Product Features ..................3 System Application................ 5 Wireless Network Access (MiniPCI Network Card)........5 Single-cell Wireless Network ..............5 Multiple APs in Separate Networks ............6 Multiple APs within a Network ..............7 Extension of Wired Network ..............
  • Page 11 Hardware Installation ..................15 System Access ...................16 Firmware Description..................18 Web-based Configuration Introduction........21 Configuration Flow..................21 System Configuration Introduction ..............21 Bridge/Router Mode Introduction ..............23 Logon the System..................28 Save and Reboot..................30 Web-based Configuration............33 Guide Configuration..................36 Wireless Port Configuration ................39 DHCP Server Configuration................45 WAN Interface Configuration ..............48 LAN Interface Configuration................52 Radius Client ....................53 802.1x Authentication .................55...
  • Page 12 NAT Configuration ..................67 NAPT Mode ................... 68 Basic NAT Mode ..................70 Isolation&filter Configuration ..............71 MAC Management..................73 Web-based System Configuration..........77 Viewing System Information............... 77 Changing Password................... 78 Managing File System ................79 Debug Configuration .................. 82 Performance Statistics ..............
  • Page 13 AP in Router Mode (Case 1)..............106 AP in Router Mode (Case 2)..............111 CLI Command Set ..............117 EXEC Commands ..................117 Debug ....................117 Enable ....................117 Clear.....................118 End .......................118 Exit .......................118 History ....................119 Logout ....................119 Ping ......................119 Quit.......................120 Show ....................120 Tree ......................120 Write Memory ..................120 Privileged EXEC Commands ..............121 Configure ....................121 Copy Config to TFTP ................121...
  • Page 14 Disable....................123 Erase Config ..................123 Clear ARP.................... 124 Clear DHCP Binding ................124 Clear DHCP Statistics ................125 Clear Dot1x Statistics................125 Clear RADIUS..................125 Clear MAC ................... 126 Clear NAT .................... 126 Clear NAT Translation................126 Kill......................126 Reboot ....................
  • Page 15 DHCP-Pool ...................131 DHCP-Server Host................131 Dot1x Authentication Enable / Disable ..........132 Dot1x Authentication Mode ..............132 Dot1x Encryption-Mode.................133 Dot1x Initialize ..................133 Dot1x Max-Req ..................134 Dot1x Quiet-Period ................134 Dot1x Re-Authenticate................135 Dot1x Re-Authentication ...............136 Dot1x Re-Authperiod ................137 Dot1x Server-Timeout................137 Dot1x Supplicant-Timeout..............138 Dot1x TX-Period ...................139 Dynamic-User ..................140 Dynamic-User Enable / Disable ............140 Ethernet-Port ..................141...
  • Page 16 Isolation ....................144 Load-Balance Enable/Disable .............. 144 Load-Balance Mode ................145 MAC Age Time..................145 MAC Black-List ..................145 Max-Online-User .................. 146 NAT Enable/Disable................146 NAT Interface..................147 NAT Map....................147 NAT Mode.................... 148 NAT Pool ..................... 148 NAT Redirect ..................148 NAT Timeout..................
  • Page 17 viii RADIUS-Acctserver Info ...............154 RADIUS-Authserver {Enable | Disable} ..........155 RADIUS-Authserver Extra..............155 RADIUS-Authserver Host..............155 RADIUS-Authserver Info ...............156 RADIUS-Server Dead-Time ..............157 RADIUS-Server Retransmit..............157 RADIUS-Server Timeout...............158 SNMP Client ..................158 SNMP Server Community ..............159 SNMP Server Contact................159 SNMP Server Enable/Disable ...............159 SNMP Server Location................160 SNMP Server Sysname ................160 SNMP Server Trap Enable/Disable ............160 SNMP Server Trap Host ...............161...
  • Page 18 VLAN Default VID ................164 VLAN Employee Default VID..............164 VLAN Enable/Disable................165 VLAN Mode..................165 VLAN port-vid..................166 VLAN Tag Disable................166 VLAN Tag Enable ................167 VLAN Visitor Default Vid ..............167 Webserver ................... 167 Wireless-Port ..................168 DHCP-pool Configuration Mode...............
  • Page 19 IP Address ....................174 Wireless Port Configuration Level.............174 Beacon Interval..................174 Basic Rate ....................175 Fragment Threshold................176 Frequency-Channel ................176 DTIM Interval ..................177 Power ....................177 RTS-CTS Threshold ................178 SSID .....................178 Tx Rate ....................179 Wireless Mode ..................179 WDS-Mode Enable / Disable..............180 WDS Peer MAC..................180 WEP Encryption Enable / Disable ............181 WEP Encryption Key................181 Default WEP-Key..................182 WEP-Key-Format..................182...
  • Page 20 WPA Groupkey-Update-Interval ............184 Optimize-108g Enable/Disable ............. 185 Webserver Mode ..................185 Enable/Disable..................185 IP-Filter Enable/Disable................ 186 IP-Filter Client ..................186 Port-Filter ..................... 186 IAPP Mode ....................187 Enable/Disable..................187 ESP Enable/Disable................187 Mode....................187 Map...................... 188 Secret ....................188 Debug Mode ....................
  • Page 21 Show Debug_Module................192 Net-Security Rate-Limit Enable/Disable ..........193 Net-Security Syn-Cache Enable/Disable ..........193 Net-Security Attack-Defense Enable/Disable ........193 Show Net-Security ................193 Ipstack Debug..................194 Show Ipstack-Debug................194 Show ......................195 Show ARP ....................195 Show Console..................195 Show DHCP-Client ................196 Show DHCP Service................196 Show DHCP Binding................197 Show DHCP Relay................197 Show DHCP Server ................198 Show DHCP Statistics................198 Show Dot1x Configuration ..............198...
  • Page 22 xiii Show NAT Translation ................. 201 Show NAT Configuration..............202 Show Managed-Interface ..............202 Show IP-Route..................203 Show Access-List Configuration............203 Show Port Config ................. 203 Show RADIUS Configuration..............204 Show RADIUS Statistics ..............204 Show Sms User ................... 204 Show SMS Online-User ...............
  • Page 23 Show VLAN Binding................210 Show IAPP Configuration..............211 Troubleshooting .................213 Technical Specifications............215 Acronyms and Abbreviations............219...
  • Page 24 Figure 6 Repeater Point to Multi-points Mode Network Topology ......9 Figure 7 Repeater+AP Combined Network Topology......... 10 Figure 8 WA3001 Front View ................12 Figure 9 WA3001 Side View (1) ................. 13 Figure 10 WA3001 Side View (2) ............... 14 Figure 11 WA3001 Top View ................15 Figure 12 Installation Diagram ................
  • Page 25 Figure 20 Advanced Configuration Part II ............36 Figure 21 Basic Config - Wireless Port Config ............40 Figure 22 Wireless Port Configuration ..............43 Figure 23 DHCP Server Configuration ..............46 Figure 24 WAN Port Configuration Interface ............49 Figure 25 Trusted DHCP Server Configuration ...........51 Figure 26 LAN Interface Configuration..............52 Figure 27 Radius Client Configuration Interface..........54 Figure 28 802.1x Authentication Configuration ...........57...
  • Page 26 xvii Figure 43 Initiating Configuration File Erase Message ........82 Figure 44 Debug Configuration ................83 Figure 45 Interface Statistics................86 Figure 46 DHCP Server Statistics ..............88 Figure 47 DHCP Relay Statistics ............... 92 Figure 48 RADIUS Client Statistics ..............94 Figure 49 ARP Table ..................
  • Page 27 List of Tables Table 1 WA3001 Front Panel LED Indicators ............13 Table 2 Wireless Frequency Channel Default Setting..........19 Table 3 Configuration Menu in Bridge Mode ............23 Table 4 Configuration Menu in Router Mode ............24 Table 5 Wireless Port 1 Interface Specification ...........40 Table 6 WA3001 WEP Encryption Configuration..........42...
  • Page 28 Table 18 RADIUS Client Statistics Window Description........94 Table 19 Online User Information Window Description........98 Table 20 Troubleshooting................. 213 Table 21 WA3001 AP Technical Specifications ..........215...
  • Page 30: Product Introduction

    Product Introduction WA3001 is a switch-like WLAN Access Point that offers industry-leading performance/price ratio and a comprehensive feature set. It is designed especially for a Wireless Internet Service Provider (WISP) that provides Wireless Internet services - including hotspot and corporate deployment planning.
  • Page 31: Product Introduction

    Chapter 1 Product Introduction elimination of blind spots. UTStarcom has made rapid progress on all of these areas utilizing the latest XR and Super G technology. Product Introduction Port Introduction: One 10/100M Ethernet WAN port Four 10/100M Ethernet LAN ports...
  • Page 32: Product Features

    Chapter 1 Product Introduction Connector: 10/100Base-TX port: RJ-45 Management console ports: RS-232 Product Features • 6M/s throughput rate • Supports 802.3af inline power supply (PoE) • Compatible with 802.11b and 802.11g • Supports four adjustable RF power levels (10mw–20mw– 50mw-100mw) •...
  • Page 33 • Supports NAT or any IP • Supports link-test (default-gateway is unavailable for WA3001) • Supports Repeater mode (dual mode) • Super G maximize network throughput, peak flow is able to reach the wire LAN throughput at 10/100M. It exceeds the previous generation wireless functionality •...
  • Page 34: System Application

    System Application WA3001 is built with both regular AP (miniPCI network card) and Repeater (CardBus adapters) functions. As a Repeater, from network coverage point of view, the AP can be configured in point-to-point (P2P) mode or point-to-multiple points (P2MP) mode (one AP connects with up to four APs). As a regular adapter, the AP can be configured as a single-cell network, a multi-cell network, or an extension of wired network.
  • Page 35: Multiple Aps In Separate Networks

    Chapter 2 System Application Figure 1 Single-cell Wireless Network Topology Multiple APs in Separate Networks Multiple APs can coexist as separate networks in the same site without interference by using different ESS_IDs. E.g. In an exhibition, where each company’s network is independent Figure 2 Multi-APs with different ESS_IDs in Separate Networks Topology...
  • Page 36: Multiple Aps Within A Network

    Chapter 2 System Application Multiple APs within a Network Multiple APs wired together provide a network with a better coverage area and performance - by using the same ESS_ID. E.g. Within a company, each department accesses a public file server through its own AP. Figure 3 Multi-APs within a Network Topology Extension of Wired Network AP can connect to the wired network through WAN ports, or...
  • Page 37: Repeater Mode (Cardbus Adapter)

    Point-to-Point mode is used to connect two networks in WLAN application. E.g.: In a campus, using WA3001’s point-to-point mode to connect two buildings in a separate wired network. In this mode, AP must to be configured with a cardBus adapter to function as...
  • Page 38: Point-To-Multiple Points Mode

    Chapter 2 System Application Figure 5 Repeater Point-to-Point Mode Network Topology Point-to-Multiple Points Mode In WLAN application, point-to-multiple points mode dramatically expands network coverage and quickly establishes the connectivity among existing networks. Figure 6 Repeater Point to Multi-points Mode Network Topology...
  • Page 39: Repeater + Ap Combined Network

    Chapter 2 System Application Repeater + AP Combined Network Capable of being a wireless entrance for wireless clients, or a repeater of a wired network, the WA3001 expands network coverage easily via wireless connection. Figure 7 Repeater+AP Combined Network Topology...
  • Page 40: Hardware Installation

    • One user guide • One power adapter • Two small antennas • One installation bracket • Three screws • One warranty card Installation Requirements AP installation environment: • WA3001 power supply mode: Support IEEE802.3af, remote Cat 5, DC -48V/300mA...
  • Page 41: Product Physical Characteristics

    Note: The two power supply modes cannot be used simultaneously. In PoE power supply mode, RJ45 4/5(+)7/8(-) connects to WAN port. • RJ-45 port, supports 10/100Mbps data transmission rate Product Physical Characteristics Product Front View Figure 8 WA3001 Front View...
  • Page 42: Product Side View

    Chapter 3 Hardware Installation Table 1 shows the list of LED indicators (from left to right) on the front panel along with their activity status and descriptions Table 1 WA3001 Front Panel LED Indicators Status Description Indicators Lighting in Lights when power is being supplied...
  • Page 43: Figure 10 Wa3001 Side View (2)

    Restore button to reboot/reset the RESET AP to its default settings Four LAN ports to access Ethernet, RJ-45 connector Figure 10 WA3001 Side View (2) The following table lists the items on the side panel (2) (from left to right) Interface Description WAN port used for uplink connection.
  • Page 44: Product Top View

    Chapter 3 Hardware Installation Product Top View Figure 11 WA3001 Top View WA3001 AP’s rubber top shown in Figure 11 is for installing a Wireless LAN CardBus Adapter. Hardware Installation Steps: Location: Place the AP in an appropriate place in a room.
  • Page 45: System Access

    Chapter 3 Hardware Installation Figure 12 Installation Diagram System Access Network management methods: Through LAN port: connects PC to LAN port that can identify the connection automatically, use crossover or straight-through network cable Through WAN port: connects PC to WAN port, use crossover network cable Through wireless port: installs a wireless network card into PC and find AP through Windows IE.
  • Page 46 Chapter 3 Hardware Installation System default IP address: WAN port: 192.168.1.1/255.255.255.0 LAN port: 172.18.37.1/255.255.255.0 Default user name and password: Administrator: User name: admin Password: admin Guest: User name: guest Password: guest System access procedure: Connects the power adapter to an AP Makes sure that the connection between PC and AP’s LAN port is connected.
  • Page 47: Firmware Description

    Password: admin Figure 13 Logon Window Firmware Description The default setting of WA3001 firmware is different according to the nation-wide regulation of wireless frequency channel. The AP configuration of this manual applies to China area only. The values listed in Table 2 are wireless frequency channel default...
  • Page 48: Table 2 Wireless Frequency Channel Default Setting

    Chapter 3 Hardware Installation Table 2 Wireless Frequency Channel Default Setting North Europe/ETSI America/FCC Operation 2.412-2.462GHz 2.412-2.472GHz Channel Frequency 1-11 (Default: 1) 1-13 (Default: 1) Channel Default Mode b: 40mw (16dBm) Power Mode g: 25mw (14.5dBm) / 70mw (18.5dBm)
  • Page 50: Web-Based Configuration Introduction

    Web-based Configuration Introduction Configuration Flow Figure 14 Configuration Flow Chart Logon Configuration & Apply Save & Reboot System Configuration Introduction Log on the system, select an operation mode and configure the ports accordingly. In Router mode, WAN port configuration depends on the retrieval of IP address (Either DHCP server or DHCP client is provided).
  • Page 51 Chapter 4 Web-based Configuration Introduction The LAN port must be configured in both modes based on the IP address. In wireless mode, configure the wireless port and its channel attributes. After configuration, save it and reboot the system S t a r t T w o A P m o d e ? R o u t e r...
  • Page 52: Bridge/Router Mode Introduction

    Chapter 4 Web-based Configuration Introduction Bridge/Router Mode Introduction Table 3 Configuration Menu in Bridge Mode Main Menu Sub Menu Logon Guide Basic Config Advanced Config System Config Statistic...
  • Page 53: Table 4 Configuration Menu In Router Mode

    Chapter 4 Web-based Configuration Introduction Table 4 Configuration Menu in Router Mode Main Menu Sub Menu Logon Guide Basic Config Advanced Config System Config...
  • Page 54 Chapter 4 Web-based Configuration Introduction Main Menu Sub Menu Statistic Description: • Wireless port configuration The system is able to configure two wireless network cards at the same time. The default assumes a Mini PC card on Wireless port 2. Configure the 802.11b attributes for the wireless port Activate WDS mode to implement Repeater functions Activate WEP encryption to provide data transmission...
  • Page 55 Chapter 4 Web-based Configuration Introduction • DHCP Server configuration Configure the DHCP server when the AP needs to allocate an IP address to its clients Configure the DHCP address field attributes, or keep the default attributes DHCP Client configuration Configure the DHCP client when the AP needs to allocate an IP address to a client through the remote DHCP server •...
  • Page 56 Chapter 4 Web-based Configuration Introduction • Route configuration In Router mode, users can define AP’s next route • ARP management Provides information about network equipment connected to the AP intended for users • MAC filter configuration Manages the accessed users based on MAC. This includes the MAC white list and black list Implements VLAN end-user isolation •...
  • Page 57: Logon The System

    Chapter 4 Web-based Configuration Introduction Logon the System Access Methods: Enter the default IP address in the browser’s logon field, then enter the default user name and password. Interface: Figure 15 Logon Successful Description: • General introduction The left panel is the function link area. The right panel is the information display area and configuration area...
  • Page 58 Left panel introduction Logon: log on the system Guide: A brief instructional guide describes the basic system configuration of WA3001 step by step. It helps user to complete the configuration quickly Basic Config: Implements the system’s basic configurations Advanced Config: Implements the system’s advanced...
  • Page 59: Save And Reboot

    Chapter 4 Web-based Configuration Introduction <Apply>: Presses to apply a configuration changes. Some configurations are applied only after saving and rebooting the AP. A corresponding prompt window will be popped up. <Refresh>: refreshes the interface. <Default>: restores the default parameters. Figure 16 AP Reboot Prompt Window Save and Reboot Access Method:...
  • Page 60 Chapter 4 Web-based Configuration Introduction Description: Press <Save> to save the system configuration changes Press <Reboot> to apply the configuration. This is similar to the <Reset> button in the equipment Note: Click <Save> to save the configuration changes even if it has been applied by clicking <Apply>...
  • Page 62: Web-Based Configuration

    Web-based Configuration This chapter introduces all Web-based configuration steps. • Guide-based configuration operations • Functional menu-based operations in Basic and Advanced configuration modes • Figure 18 lists all configurable items in Basic Config • Figure 19 and Figure 20 list all configurable items in Advanced Config The following section describes these items in detail...
  • Page 63: Figure 18 Basic Configuration

    Chapter 5 Web-based Configuration Figure 18 Basic Configuration Basi c Conf i gur at i on W i r el es s 2 Basi c M ode W i r el ess 1 W AN DHCP ( opt i on) DHCP ser ver/ Br i dge / SSI D...
  • Page 64: Figure 19 Advanced Configuration Part I

    Chapter 5 Web-based Configuration Figure 19 Advanced Configuration Part I Advance configuration (1) Wireless port 1 Wireless port 2 Filter performance performance Enable / MAC filter MAC age ARP entry Beacon Interval Beacon Interval Enable/Disable Disable Basic/NAPT DTIM interval DTIM interval Static MAC Black list Route...
  • Page 65: Guide Configuration

    Chapter 5 Web-based Configuration Figure 20 Advanced Configuration Part II Advance (2) Wireless 1 Authentication RADIUS Client WD S WDS enable/ DOT1X enable/ Re-authperiod Host server Dynamic user disable (PTP/ disable PTMP) Server timeout Initialize Accounting key Static user Peer MAC Supplicant Authentication Max-request...
  • Page 66 Chapter 5 Web-based Configuration Click <next>, set AP operation mode to “Bridge Mode” Description: If AP is used as Layer 2 bridging, choose the Bridge mode. If AP involves in Layer 3 communication, choose the Router mode. Click <next> to set LAN interface IP address, the default address is 172.18.37.1/255.255.255.0...
  • Page 67 Chapter 5 Web-based Configuration Click <next> to set wireless SSID and Channel, the default SSID is “UT” and the default channel is “1” Description: In a planned AP wireless network, SSID is a service ID which is assigned to the AP by the system administrator. Only a wireless network card with a configured ESSID can get connection from the AP.
  • Page 68: Wireless Port Configuration

    Chapter 5 Web-based Configuration channel is normally set to 1, 6, 11 or 1, 7, 13, hence the interaction is reduced in most of the situations. Click <next> to complete the Guide configuration Click <finish> to save the configuration, click <cancel> to keep the current configuration Wireless Port Configuration Objective 1:...
  • Page 69: Figure 21 Basic Config - Wireless Port Config

    Chapter 5 Web-based Configuration Figure 21 Basic Config - Wireless Port Config Description: Table 5 Wireless Port 1 Interface Specification Field Description Default Value Wireless network card Address MAC address Uplink Detect Detect the uplink Disabled...
  • Page 70 Chapter 5 Web-based Configuration Field Description Default Value ESSID ESSID is a service ID assigned to an AP by the system admin. Only a wireless network card with a configured ESSID can get connection from AP. ESSID has maximum of 32 characters Mode 3 optional modes are...
  • Page 71: Table 6 Wa3001 Wep Encryption Configuration

    Chapter 5 Web-based Configuration Hexadecimal Table 6 WA3001 WEP Encryption Configuration Encryption Alphabetical Mode WEP-64 Uses any 5 10 hexadecimal digits between “a-f”, alphanumeric “A-F” and “0-9” with prefix “0x” characters E.g. 0x11AA22BB33 between “a-z”, “A-Z” and “0-9”. E.g. MyKey...
  • Page 72: Figure 22 Wireless Port Configuration

    Chapter 5 Web-based Configuration Figure 22 Wireless Port Configuration Description: Table 7 Wireless Port 2 Interface Specification Default Field Description Value Beacon Interval between Beacon packets; 100(ms) Interval the Beacon packet contains network card information, duration of broadcast to the wireless network.
  • Page 73 Chapter 5 Web-based Configuration Default Field Description Value Power Transmitting power of the AP 100mw wireless port. Possible values are: 10mw, 20mw, 50mw, 100mw Tx Rate Transmission rate. auto The range of selectable values is decided based on the wireless mode set in the basic config.
  • Page 74: Dhcp Server Configuration

    Chapter 5 Web-based Configuration Default Field Description Value Fragment Fragment Threshold mechanism is 2346 Threshold used to improve the efficiency in a high volume wireless network. It defines the limit of data packages size. Any package with bigger size than the value will be fragmented into several smaller packages within a range of 256-2346 bytes.
  • Page 75: Figure 23 Dhcp Server Configuration

    Chapter 5 Web-based Configuration Interface: Figure 23 DHCP Server Configuration Detailed Instructions: When DHCP Server is enabled, the system automatically displays the following configuration interface When DHCP Relay is enabled, the system automatically displays the following configuration interface...
  • Page 76: Table 8 Dhcp Server Configuration Specification

    Chapter 5 Web-based Configuration Table 8 DHCP Server Configuration Specification Field Description Default Value LAN Status IP Address IP address 172.18.37.1 Subnet Mask Subnet mask 255.255.255.0 DHCP Server Configuration Use DHCP Enable/Disable Disable Server DHCP server options Network IP IP address of DHCP address pool Network Mask Network mask...
  • Page 77: Wan Interface Configuration

    Chapter 5 Web-based Configuration Field Description Default Value Trusted DHCP Trusted DHCP Server1-3 server settings, total 3 servers can be set Description: When DHCP Server is enabled When DHCP server is enabled, it allocates IP address to a Client or AP through LAN port The subnet mask of DHCP Server IP address pool must be less than the network mask used in LAN interface Able to allocate maximum of 1024 addresses from IP...
  • Page 78: Figure 24 Wan Port Configuration Interface

    Chapter 5 Web-based Configuration Configure WAN interface when AP is in Router mode Access Method: Click the “Basic Config/WAN Interface” link on the left panel Interface: Figure 24 WAN Port Configuration Interface...
  • Page 79: Table 9 Wan Interface Configuration Specification

    Chapter 5 Web-based Configuration Table 9 WAN Interface Configuration Specification Field Description Default Value WAN Interface Status IP address IP address 192.168.1.1 Subnet mask Subnet mask 255.255.255.0 PPPoE Status PPPoE Status Disconnected DHCP Client DHCP Client Disabled Status Status WAN IP Address Configuration IP Address 1.
  • Page 80: Figure 25 Trusted Dhcp Server Configuration

    Chapter 5 Web-based Configuration Field Description Default Value Config Trusted Perform Trusted DHCP Server DHCP Server Configuration to obtain IP address through DHCP server Detailed Instructions: Click the “Trusted DHCP Server” link to show the following configuration interface Figure 25 Trusted DHCP Server Configuration Description: Up to 5-trusted DHCP servers can be configured In Figure 25, enter DHCP server’s IP address into the input field.
  • Page 81: Lan Interface Configuration

    Chapter 5 Web-based Configuration LAN Interface Configuration Objective: User needs to perform LAN interface configuration regardless AP working mode. Access Method: Click the “Basic Config/LAN Interface” link. Interface: Figure 26 LAN Interface Configuration Interface Description:...
  • Page 82: Radius Client

    Chapter 5 Web-based Configuration Table 10 LAN Interface Specification Field Description Default Value LAN Interface Enable the Enable the interface Enable interface IP address IP address 172.18.37.1 Subnet mask Subnet mask 255.255.255.0 Radius Client Objective: Provides accounting service to AP subscribers when AP is in Router mode.
  • Page 83: Figure 27 Radius Client Configuration Interface

    Chapter 5 Web-based Configuration Figure 27 Radius Client Configuration Interface Interface Description: Table 11 Radius Client Configuration Specification Field Description Default Value Radius Server Enable Server1-3 Enable or disable Disable Radius server, up to 3 servers can be configured Server host Server host address address Authentication...
  • Page 84: 802.1X Authentication

    Chapter 5 Web-based Configuration Field Description Default Value Accounting POrt Accounting Port between AP and Server Key Config Authentication Authentication Key between AP and Server Accounting Key Accounting Key between AP and Server Periods Config Server dead time If the request sent to 5 minutes the Radius Server Server timeout...
  • Page 85 Chapter 5 Web-based Configuration Click the “Advanced Config/Authentication” link on the left panel Configuration Interface:...
  • Page 86: Figure 28 802.1X Authentication Configuration

    Chapter 5 Web-based Configuration Figure 28 802.1x Authentication Configuration Interface Description:...
  • Page 87: Table 12 802.1X Configuration Specification

    Chapter 5 Web-based Configuration Table 12 802.1x Configuration Specification Field Description Default Value User Authentication Config 802.1x Enable or Disable disable Authentication 802.1x Authentication Authentication Authentication mode none Mode options: none, local, remote, local-remote, remote-local Encryption Mode Encryption mode between wireless terminals and AP.
  • Page 88 Chapter 5 Web-based Configuration Field Description Default Value Interval between retries of sending a request frame from AP to Client (second). If within the Timeout period the Supplication Client does not respond timeout to the AP’s request, the AP will re-send the request frame.
  • Page 89 Chapter 5 Web-based Configuration Field Description Default Value Maximum number of retries to send a Request-challenge request from AP to client Max Request under EAP times for EAP authentication (Re- sending because the Response-challenge was not received). Possible values: 1-2. For a specific user User ID User ID, the system...
  • Page 90: User Management

    Chapter 5 Web-based Configuration Description: Available Functionality: Global user configuration parameters (LAN interface and Wireless connected clients), e.g. enable or disable 802.1x authentication, authentication mode, encryption mode, max online user number Global 802.1x authentication, Server-AP-Client authentication parameters configuration Specify authenticated users, initialize authenticated users and re-authenticated users User Management Objective:...
  • Page 91: Figure 29 Dynamic User Configuration Interface

    Chapter 5 Web-based Configuration Figure 29 Dynamic User Configuration Interface Configuration Description: Detailed Instructions: • Add a new dynamic user Enter User name and Password, and then click <Add>. A new entry will be added in the table as shown below. User ID is automatically generated by the system.
  • Page 92: Static Users

    Chapter 5 Web-based Configuration Enable: enables a specific dynamic user and allows the user to access Disable: disables a specific dynamic user and prohibits the user access Delete: deletes a specific dynamic user and removes the user information from the database Static Users Access Method: Click the “Advanced Config/Subscriber”...
  • Page 93: Figure 30 Static User Configuration Interface

    Chapter 5 Web-based Configuration Figure 30 Static User Configuration Interface Configuration Description: Detailed Instructions: • Add a new static user Enter static user’s PC MAC address, and then click <Add>. A new user entry will be added in the table as shown below. User ID is automatically generated.
  • Page 94: Arp Management

    Chapter 5 Web-based Configuration Disable: disables a specific static user and prohibits the user access Delete: deletes a specific static user and removes the user information from the database ARP Management Access Method: Click the “Advance Config/ARP” link on the left panel Configuration Interface: Figure 31 ARP Configuration Interface Configuration Description:...
  • Page 95: Route Configuration

    Chapter 5 Web-based Configuration Refer to the detailed instructions given below to speed up AP data transmission through configure the static ARP table. • Add a new ARP entry Enter IP address, MAC address, and then click <Add New> • Remove ARP Click <Remove>...
  • Page 96: Nat Configuration

    Chapter 5 Web-based Configuration Interface Description: Figure 33 Table 5-1 Route Configuration Interface Spec Field Description IP address Route’s beginning IP address Mask Route’s beginning Subnet mask Next Hop Route’s next hop address NAT Configuration Access Method: Click the “Advanced Config/NAT” link on the left panel Configuration Interface: Figure 34 NAT Configuration Interface Interface Description:...
  • Page 97: Napt Mode

    Chapter 5 Web-based Configuration Figure 35 Table 5-2 NAT Configuration Specification Field Description Default Value Enable NAT Enable or Disable NAT Disable NAT Mode Two NAT modes are NAPT available after enable NAT, NAPT mode and Basic NAT mode NAT Timeout NAT timeout options: 1- 3600 seconds NAT Interface...
  • Page 98 Chapter 5 Web-based Configuration Click the “Advanced Config/NAT Advance” link, then click “NAT” on the left and click “NAT Pool” on the right Configuration Interface: Configuration Description: Detailed Instructions: • Add a port based MAP Input the values in the “Add Local IP Address”, “Add Global Port”...
  • Page 99: Basic Nat Mode

    Chapter 5 Web-based Configuration • Delete a port based MAP Press <Remove> to delete a port based MAP Basic NAT Mode Access Method: Click the “Advanced Config/NAT Advance” link, then click “NAT” link on the left, click “NAT Static Map” link on the right Configuration Interface: Figure 36 NAT Static MAP Configuration Interface Configuration Description:...
  • Page 100: Isolation&Filter Configuration

    Chapter 5 Web-based Configuration • Change NAT address pool Input the values in the “NAT Pool Start IP” and “NAT Pool Mask” fields, and then click <Apply> • Add new IP Address based static MAP Input the values in the “Add local IP Address” and “Add Global IP Address”...
  • Page 101: Figure 37 Isolation&Filter Configuration Interface

    Chapter 5 Web-based Configuration Figure 37 Isolation&filter Configuration Interface Interface Description: Table 13 MAC Filter Configuration Specification Field Description Default Value Isolation: 3 types of isolations: Disable Isolation LAN-wireless isolation -LAN-Wireless LAN isolation Isolation Wireless Isolation -LAN Isolation -Wireless Isolation Config broadcast Broadcast limit options: limit...
  • Page 102: Mac Management

    Chapter 5 Web-based Configuration Field Description Default Value Load balance Two modes of Load Disable Balance: User based – based on the number of AP’s users Flux based – based on AP’s throughput Add a MAC address MAC address black list. to black List The clients in the black list are not allowed to...
  • Page 103: Figure 38 Mac Table Configuration Interface

    Chapter 5 Web-based Configuration Configuration Interface: Figure 38 MAC Table Configuration Interface Configuration Description: Detailed Instructions: • MAC Age time: Value range: 10-65535 Default value: 300 seconds • Add a MAC address to static MAC table: MAC address: input format: 00:03:7F:BF:08:80 Port: Originated port number of the transferred data Click <Add New>...
  • Page 104 Chapter 5 Web-based Configuration • Remove MAC address: click <Remove>...
  • Page 106: Web-Based System Configuration

    Web-based System Configuration This chapter primarily covers the following: • Viewing System Information • Changing Password • Managing File System • Debug Configuration Viewing System Information Access Method: Click “System Config/System” on the left panel. Configuration Interface: Figure 39 System Information...
  • Page 107: Changing Password

    Chapter 6 Web-based System Configuration Description: The system information includes the following fields: Product Serial No. Hardware version Software version Changing Password Access Method: Click “System Config/Change Password” on the left panel. Configuration Interface: Figure 40 Change Password Description:...
  • Page 108: Managing File System

    Chapter 6 Web-based System Configuration Two types of users can log into the system: admin and guest. An “admin” has the privilege to perform all operations to the device, including information browse, configuration modification and so on; while a “guest” only has the privilege to browse information.
  • Page 109: Figure 41 File System

    Chapter 6 Web-based System Configuration Figure 41 File System...
  • Page 110: Table 14 File System Window Description

    Chapter 6 Web-based System Configuration Description: Table 14 File System Window Description Fields Description Erase Config File from AP Erases the current configuration file from the AP. Download new image from Downloads a new image Host (VxWorks.Z) from a host. Download new Config file Downloads a new configuration file from Host...
  • Page 111: Debug Configuration

    Chapter 6 Web-based System Configuration Figure 42 Confirm Configuration File Erase Figure 43 Initiating Configuration File Erase Message Click <OK> to confirm the erasing; click <Reboot> to reboot the system and initiate the configuration. Do not click <Save> on the left to save the configuration. For system file (including image and configuration file) management, specify the host IP address and the system file path and file name.
  • Page 112: Figure 44 Debug Configuration

    Chapter 6 Web-based System Configuration Click “System Config/Debug Config” on the left panel. Configuration Interface: Figure 44 Debug Configuration Description: Through debug configuration, the user can view the following information via CLI and SNMP: Configurable items are: 802.1X, SMI, RADIUS Client, DHCP Client, DHCP Server, DHCP Relay, IP Stack, NAT, Bridge, 802.1 and Web.
  • Page 114: Performance Statistics

    Performance Statistics Interface Statistics Access Method: Click “Statistic/Interface” on the left panel. Configuration Interface:...
  • Page 115: Figure 45 Interface Statistics

    Chapter 7 Performance Statistics Figure 45 Interface Statistics Table 15 Interface Statistics Window Description Fields Description WAN/LAN Interface Description MTU (Maximum Packets in MS are based on Ethernet Transmission Unit) standards. The MTU value is 1500. Packets received Number of packets received via the WAN/LAN interface.
  • Page 116: Dhcp Server Statistics

    Chapter 7 Performance Statistics Fields Description Total bytes Total number of bytes received via the received WAN/LAN interface. Error packets Number of error packets received via the received WAN/LAN interface. Dropped packets Number of packets dropped by the WAN/LAN interface. Packets sent Number of packets sent from the WAN/LAN interface.
  • Page 117: Figure 46 Dhcp Server Statistics

    Chapter 7 Performance Statistics Figure 46 DHCP Server Statistics Description: Table 16 DHCP Server Statistics Window Description Fields Description DHCP Server Statistics Free bindings Number of Free Binding IP addresses provided by the DHCP server. Auto bindings Number of Auto Binding IP addresses. Discover packets Number of Discovery packets received from the DHCP workstation by the DHCP server...
  • Page 118 Chapter 7 Performance Statistics Fields Description Decline packets Number of Decline packets received from the DHCP workstation by the DHCP server during the selection period. Inform packets Number of Inform packets of configuration information request sent from the DHCP workstation to the DHCP server. Invalid packets Number of invalid communication packets between the DHCP workstation and the DHCP...
  • Page 119 Chapter 7 Performance Statistics Fields Description Clean Click this button to clean the statistics of the system. Theory: DHCP service operation theory: The communication method between the DHCP workstation and server is depending upon whether it is the first time that the DHCP workstation logs into the network.
  • Page 120: Dhcp Relay Statistics

    Chapter 7 Performance Statistics The third period is a selection period when the DHCP workstation selects the IP address offered by one DHCP server. If multiple DHCP servers send “dhcp offer” messages to the DHCP workstation, the DHCP workstation will accept only the first received “dhcp offer”...
  • Page 121: Figure 47 Dhcp Relay Statistics

    Chapter 7 Performance Statistics Figure 47 DHCP Relay Statistics Description: Table 17 DHCP Relay Statistics Window Description Fields Description DHCP Relay Statistics Discover packets Number of Discover packets sent from the DHCP workstation to the DHCP server via the AP during the discovery period. Request packets Number of Request packets sent from the DHCP workstation to the DHCP server via the...
  • Page 122: Radius Client Statistics

    Chapter 7 Performance Statistics Fields Description Release packets Number of Release packets initiated by the DHCP workstation, and forwarded by the AP to the DHCP server, releasing IP addresses used by DHCP workstation. Decline packets Number of Decline packets sent from the DHCP workstation to the DHCP server via the AP to decline IP address Offer response(s) from DHCP server(s).
  • Page 123: Figure 48 Radius Client Statistics

    Chapter 7 Performance Statistics Configuration Interface: Figure 48 RADIUS Client Statistics Description: Table 18 RADIUS Client Statistics Window Description Fields Description From client to server Request packets Number of Request packets sent by the RADIUS Client. Account start packets Number of Account Start packets sent by the RADIUS Client.
  • Page 124: Arp Table

    Chapter 7 Performance Statistics Fields Description Account update packets Number of Account Update packets sent by the RADIUS Client. Retransmit packets Number of retransmitted packets sent by the RADIUS Client. From server to client Accept packets Number of Accept packets received by the RADIUS Client.
  • Page 125: Route Table

    Chapter 7 Performance Statistics Figure 49 ARP Table Description: The ARP table fields include IP address, MAC address and ARP table obtaining type. The type can be “dynamic” or “static”. The obtaining type is dynamic only when the ARP entry is learnt during the AP packet forwarding period.
  • Page 126: Online User Information

    Chapter 7 Performance Statistics Figure 50 Route Table Description: The ARP table information in the AP includes the following fields: IP address and mask: The destination network segment and its subnet mask for the route. Next hop: The IP address of the next hop router’s ingress. Interface: The egress on the AP from which the route reaches the destination router.
  • Page 127: Figure 51 Online User Information

    Chapter 7 Performance Statistics Configuration Interface: Figure 51 Online User Information Description: Table 19 Online User Information Window Description Fields Description User ID It is a unique ID automatically generated by the system when adding a new user. User Name The name of the online user.
  • Page 128: Mac Address

    Chapter 7 Performance Statistics MAC Address Access Method: Click “Statistic/MAC address” on the left panel. Configuration Interface: Figure 52 MAC Address Description: The MAC address information includes the following fields: MAC address, learning type, forwarding port (WAN port or LAN port), pass time and age time (aging time for the MAC address).
  • Page 129 Chapter 7 Performance Statistics In the third line, the age time for the MAC address “00:04:23:85:39:5e” is 300 seconds, the pass time is 2 seconds, then the remaining life time for this MAC address is 298 seconds.
  • Page 130: Web-Based Configuration Examples

    Web-based Configuration Examples AP in Bridge Mode Objective: To establish a wireless network to provide wireless access for subscribers. The AP works only as a bridge. Data is transmitted between the AP and clients by WEP encryption. Network Topology: Figure 53 Network Topology Uplink port Detailed Instructions:...
  • Page 131 Chapter 8 Web-based Configuration Examples After completing the hardware installation, launch the WEB configuration interface. - According to the above network topology, use a network cable (straight-through or crossover) to connect the PC and the AP’s LAN interface. Set the PC IP address as 172.18.37.X/255.255.255.0.
  • Page 132 Chapter 8 Web-based Configuration Examples - Configure the IP address for the LAN interface. Click <Next> to display the “Set Wireless Port” window as shown below:...
  • Page 133 Chapter 8 Web-based Configuration Examples - Configure the SSID for the WLAN port and select a channel. Default value can also be used. Click <Next> to display the window as shown below: - Click <finish>, and the AP will reboot. After the rebooting is complete, the configuration will be valid Configure the WNIC SSID to enable the communication with the AP.
  • Page 134 Chapter 8 Web-based Configuration Examples - Now the AP can communicate with the PC Set the WEP encryption between the AP and Client WNIC. - Click “Basic Config/Wireless Port” to display the window as shown below; enable WEP encryption with 64-bit, select “Alphabetical”...
  • Page 135: Ap In Router Mode (Case 1)

    Chapter 8 Web-based Configuration Examples AP in Router Mode (Case 1) Objective: To establish a medium-scale network for a company, where the AP acts as an authenticator, AC as an authentication agent and the remote server as RADIUS authentication and accounting server.
  • Page 136 Chapter 8 Web-based Configuration Examples management when it works as a DHCP relay. Configure two dynamic subscribers and one static subscriber Network Topology: Radi us Ser ver 上行口 DHCP Ser ver Commercial Building 企业大楼 Detailed Instructions: (Consider AP1 as an example) Click “Basic/DHCP Server”...
  • Page 137 Chapter 8 Web-based Configuration Examples Configure 802.1x authentication. Click “Advanced Config/Authentication” to display the “Authentication” window. Enable 802.1x authentication, authentication mode to “remote” and set the maximum number of online users to “10”.
  • Page 138 Chapter 8 Web-based Configuration Examples Click “Advanced Config/RADIUS Client” to display the “RADIUS Client” window. Configure the RADIUS server and its parameters.
  • Page 139 Chapter 8 Web-based Configuration Examples Click “Advanced Config/NAT” to display the “NAT” window. Enable NAT and perform advanced NAT configuration. Click “Advanced Config/Subscriber” to add dynamic subscribers and static subscribers.
  • Page 140: Ap In Router Mode (Case 2)

    Chapter 8 Web-based Configuration Examples AP in Router Mode (Case 2) Objective: To establish a small-scale network for a company with low investment and strong functionality. The number of subscribers is no more than 20. The BRAS (Broadband Remote Access Server) aggregates the authentication and accounting information.
  • Page 141 Chapter 8 Web-based Configuration Examples BRAS Detailed Instructions: (Consider AP1 as an example) Click “Basic Config/WAN Interface” to display the “WAN Interface” window. Enable PPPoE.
  • Page 142 Chapter 8 Web-based Configuration Examples Click “Basic Config/DHCP server” to display the “DHCP Server” window. Enable the DHCP server for the LAN interface.
  • Page 143 Chapter 8 Web-based Configuration Examples Click “Basic Config/Wireless port” to display the “Wireless Port” window. Configure WEP Encryption. Click “Advanced Config/Isolation&Filter” to display the “Isolation and Filter” window. Enable user based load balance.
  • Page 144 Chapter 8 Web-based Configuration Examples Configure 802.1x authentication. Click “Advanced Config/Authentication” to display the “Authentication” window. Enable 802.1x authentication, authentication mode to “local” and the maximum number of online users to “10”.
  • Page 146: Cli Command Set

    CLI Command Set The version is 2.0. EXEC Commands Debug This command is used for field debug support and can be performed only by an administrator. Syntax: debug Access level: 10 Explanation: Use this command to reach the debug level. Enable Use this command to reach the privileged EXEC level.
  • Page 147: Clear

    Chapter 9 CLI Command Set Clear Use this command to clear the screen. It can be used at any configuration level. Syntax: clear Access level: 0 Use this command to return to the privileged EXEC mode from any CLI level except EXEC level. This command can be used at any configuration level except EXEC level.
  • Page 148: History

    Chapter 9 CLI Command Set History Use this command to show the history substitution buffer contents. This command can be used at any configuration level. Syntax: history Access level: 0 Explanation: Use this command to show the command history contents. Logout Use this command to terminate a terminal session.
  • Page 149: Quit

    Chapter 9 CLI Command Set Quit Use this command to return to the EXEC mode from any CLI level. This command can be used at any configuration level. Syntax: quit Access level: 0 Show The show commands are described in Section 6. Tree Use this command to show the command tree.
  • Page 150: Privileged Exec Commands

    Chapter 9 CLI Command Set Access level: 2 Explanation: Use this command to save the running configuration into the startup-config file. Privileged EXEC Commands Configure Use this command to reach the global CONFIG level. Syntax: configure {terminal} Access level: 1 Copy Config to TFTP Use this command to upload a copy of the configuration file to the designated TFTP server.
  • Page 151: Copy Config From Tftp

    Chapter 9 CLI Command Set Copy Config from TFTP Use this command to download a copy of the configuration file from the designated TFTP server. Syntax: copy config from tftp <ip-address> <filename> Possible value: ip-address: IP address of the TFTP server filename: Up to 32 characters for the designated file name on the TFTP server Access level: 2...
  • Page 152: Copy Image To Tftp

    Chapter 9 CLI Command Set Copy Image to TFTP Use this command to download a copy of the software image to the TFTP server. Syntax: copy image from tftp <ip-address> <filename> Possible value: ip-address: IP address of the TFTP server filename: Up to 32 characters for the designated file name on the TFTP server Access level: 2...
  • Page 153: Clear Arp

    Chapter 9 CLI Command Set Clear ARP Use this command to reset the ARP table. Syntax: clear arp Access level: 2 Explanation: Use this command to clear the ARP table or delete all dynamic entries. Clear DHCP Binding Use this command to delete one or all automatic address binding(s) from the Dynamic Host Configuration Protocol (DHCP) Server database.
  • Page 154: Clear Dhcp Statistics

    Chapter 9 CLI Command Set Clear DHCP Statistics Use this command to reset all Dynamic Host Configuration Protocol (DHCP) Server counters or Relay counters. Syntax: clear dhcp statistics [relay | server] Default value: Relay and server’s statistics Access level: 2 Clear Dot1x Statistics Use this command to reset all 802.1x counters.
  • Page 155: Clear Mac

    Chapter 9 CLI Command Set Explanation: Use this command to clear RADIUS client statistics. Clear MAC Use this command to reset the MAC table. Syntax: clear mac Access level: 2 Clear NAT Use this command to clear all NAT entries. Syntax: clear nat Access level: 2 Clear NAT Translation...
  • Page 156: Reboot

    Chapter 9 CLI Command Set Syntax: kill <session-id> Possible value: session-id: 0 - 4 Access level: 2 Reboot Use this command to reboot the system. Syntax: reboot Access level: 2 Auto-config Enable/Disable Use this command to enable or disable auto configuration. Syntax: auto-config enable/disable Access level: 2 Global Config Commands...
  • Page 157: Arp Entry

    Chapter 9 CLI Command Set Access level: 2 ARP Entry Use this command to add/delete an ARP entry. Syntax: arp entry <ip-address> <mac-address> no arp <ip-address> Possible value: mac-address: address, format: xx:xx:xx:xx:xx:xx Access level: 2 Broadcast Limit Use this command to enable broadcast limit and set limit packets value per second Syntax: broadcast limit <packets>...
  • Page 158: Console Baud-Rate

    Chapter 9 CLI Command Set Console Baud-Rate Use this command to set the baud rate of the console interface. After the configuration is changed, the connection to the current console-interface user will be lost. Syntax: console baud-rate <value> no console baud-rate Possible value: value: {9600|19200|38400|57600|115200} Default value: 9600 Access level: 2...
  • Page 159: Dhcp Service

    Chapter 9 CLI Command Set Access level: 2 Explanation: Use this command to set the console aging time. DHCP Service Use the dhcp service global configuration command to select the DHCP configuration. Use the no form of this command to disable the DHCP service.
  • Page 160: Dhcp-Client Trust

    Chapter 9 CLI Command Set DHCP-Client Trust Use this command to set the trusted DHCP server IP addresses. (Up to 5) Syntax: [no] dhcp-client trust <ip-address> Possible value: ip-address: IP address of DHCP server Access level: 2 DHCP-Pool Use the dhcp-pool global configuration command to configure Dynamic Host Configuration Protocol (DHCP) address pool on the DHCP Server and enter the domain’s DHCP pool configuration mode.
  • Page 161: Dot1X Authentication Enable / Disable

    Chapter 9 CLI Command Set Syntax: [no]dhcp-server host <IPaddress> (Up to 3) Possible value: ip address Access level: 2 Dot1x Authentication Enable / Disable Use this command to enable or disable the DOT1X authentication function. Syntax: dot1x authentication {enable|disable} <port> Possible value: Port: lan, wlan1, wlan2 Default value: disable Access level: 2...
  • Page 162: Dot1X Encryption-Mode

    Chapter 9 CLI Command Set Mode: local, remote, local-remote, remote-local Default value: local-remote Access level: 2 Dot1x Encryption-Mode Use this command to set the authentication encryption mode for each port. Syntax: dot1x encryption-mode <port> {chap|pap} no dot1x encryption-mode <port> Possible value: Port: lan, wlan1, wlan2 chap|pap: keyword default value: pap...
  • Page 163: Dot1X Max-Req

    Chapter 9 CLI Command Set Possible value: <userid>: 1-256 Access level: 2 Explanation: Use this command to initialize the DOT1X subscriber status. Dot1x Max-Req Use this command to set the maximum number of times that the device sends an Extensible Authentication Protocol (EAP) – (request /identity frame (no response is received)) before restarting the authentication process.
  • Page 164: Dot1X Re-Authenticate

    Chapter 9 CLI Command Set exchange (for example, the client provided an invalid password). Use the no form of this command to return to the default setting. During the quiet period, the switch does not accept or initiate any authentication requests. The user should change only the default value of this command to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers.
  • Page 165: Dot1X Re-Authentication

    Chapter 9 CLI Command Set re-authentication attempts (re-authperiod) and automatic re- authentication. Syntax: dot1x re-authenticate <userid> Possible value: userid: 1-256 Access level: 2 Explanation: Use this command to manually initiate a re- authentication for a subscriber at once. Dot1x Re-Authentication Use this command to enable periodic re-authentication of the client.
  • Page 166: Dot1X Re-Authperiod

    Chapter 9 CLI Command Set Dot1x Re-Authperiod Use this command to set the number of seconds between re- authentication attempts. Use the no form of this command to return to the default setting. The dot1x re-authperiod configuration command affects the behavior of the device only if the user has enabled periodic re-authentication by using the dot1x re-authentication configuration command.
  • Page 167: Dot1X Supplicant-Timeout

    Chapter 9 CLI Command Set Packets. Use the no form of this command to return to the default setting. The authentication server notifies the back-end authenticator each time it receives a transport layer packet. When the back-end authenticator does not receive a notification after sending a packet, the back-end authenticator waits for certain time period (i.e.
  • Page 168: Dot1X Tx-Period

    Chapter 9 CLI Command Set Syntax: dot1x supplicant-timeout <seconds> no dot1x supplicant-timeout Possible value: 1-65535s Default value: 30s Access level: 2 Explanation: Use this command to set dot1x supplicant timeout. Dot1x TX-Period Use this command to set the number of seconds that the device waits for a response to an Extensible Authentication Protocol (EAP)-request /identity...
  • Page 169: Dynamic-User

    Chapter 9 CLI Command Set Access level: 2 Explanation: Use this command to set dot1x tx-period. Dynamic-User Add or delete a dynamic user for local authentication Syntax: dynamic-user {name <username>} {password <passwd>} no dynamic-user {name <username> } Possible value: name: no longer than 32 characters; passwd: no longer than 32 characters Access level: 2 Explanation: Use this command to create/delete a local...
  • Page 170: Ethernet-Port

    Chapter 9 CLI Command Set Explanation: Use this command to enable/disable an account in the database Ethernet-Port Use this command to enter the Ethernet port configuration level. Syntax: ethernet-port <ports> Possible value: ports: wan, lan1 lan2 lan3 lan4 Access level: 1 Hostname Use this command to set the host name of the current system for prompting.
  • Page 171: Interface

    Chapter 9 CLI Command Set Access level: 2 Interface Use this command to access the interface CONFIG level of the CLI. Syntax: interface ethernet {lan | wan} Possible value: lan: Enters the LAN interface, wan: Enters the WAN interface. Access level: 2 IP Default-Route Use the ip default-route global configuration command to define a default gateway (router) when IP routing is disabled.
  • Page 172: Ip Radius Source-Interface

    Chapter 9 CLI Command Set Explanation: Use this command to set the default route for this IP RADIUS Source-Interface To force RADIUS to use the IP address of a specified interface for all outgoing RADIUS packets, use the ip radius source- interface global configuration command.
  • Page 173: Isolation

    Chapter 9 CLI Command Set ipaddr: This parameter identifies the destination IP address of the static route. mask: This parameter identifies the destination prefix mask of the static route. next-hop: This parameter identifies the IP address of the next hop that can be used to reach the network. Access level: 2 Isolation Use this command to set isolation between the subscribers.
  • Page 174: Load-Balance Mode

    Chapter 9 CLI Command Set Load-Balance Mode Use this command to set load-balance mode. Syntax: load-balance mode {user-base | flux-base} Default Value: user-base Access level: 2 MAC Age Time Use this command to set the aging period for all MAC address entries in the address table of the switch.
  • Page 175: Max-Online-User

    Chapter 9 CLI Command Set Access level: 2 Max-Online-User Use this command to set the maximum number of online users this AP permits. Syntax: max-online-user <port> <count> no max-online-user <port> Possible value: Port: lan,wlan1,wlan2 Count: 1-256 Default value: count: 256 Access level: 2 NAT Enable/Disable Use this command to enable or disable NAT.
  • Page 176: Nat Interface

    Chapter 9 CLI Command Set NAT Interface Use this command to specify the interface attached to NAT. Syntax: nat interface {inside | outside} <lan | wan> Default value: inside: lan(downlink) outside: wan (uplink) Access level: 2 NAT Map Use this command to configure static entries of address mapping for basic NAT.
  • Page 177: Nat Mode

    Chapter 9 CLI Command Set NAT Mode Use this command to set NAT mode. Syntax: nat mode {napt|basic} Default value: napt Access level:2 NAT Pool Use this command to configure address pool for dynamic NAT. Syntax: [no] nat pool <start-ip> <ip-mask> Possible value: start-ip: Specifies the IP address at the beginning of the pool range.
  • Page 178: Nat Timeout

    Chapter 9 CLI Command Set Syntax: [no] nat redirect <global-port> <local-ip> Possible value: global_port: Destination port number of incoming packets. local_ip: Private IP address to be redirected. Access level: 2 NAT Timeout Use this command to set the age timeout for all NAT entries. Syntax: nat timeout <secs>...
  • Page 179: Operator Add / Delete

    Chapter 9 CLI Command Set Possible value: user-name: Up to 16 alphanumeric characters for the user name access-level: 10 – Administrator 2 – Power configuration access 1 – Port-configuration access 0 – Read-only access Access level: 10 Operator Add / Delete Use this command to add/delete a user account.
  • Page 180: Operator Password

    Chapter 9 CLI Command Set 2 – Power configuration access 1 – Port configuration access 0 – Read only access access-mode: Telnet, console or web. Multiple values can be input. Access level: 10 Note: When the operator <user-name> {level <access-level>} {mode <access-mode>} command is entered, the system displays “Enter new password: ”...
  • Page 181: Pppoe Auto-Connect Disable/Enable

    Chapter 9 CLI Command Set password: ” and “Confirm new password: ” in next line, the user should input the correct password. PPPoE Auto-Connect Disable/Enable Use this command to set auto connect to the PPPOE server when the AP boots successfully. Syntax: pppoe auto-connect {disable|enable} Access level: 2 PPPoE Connect...
  • Page 182: Radius-Acctserver {Enable | Disable

    Chapter 9 CLI Command Set Syntax: pppoe user {name <name>} {password <pwd>} Possible value: name: up to 30 characters; pwd: up to 30 characters. Access level: 2 RADIUS-Acctserver {Enable | Disable} Use this command to enable/disable a designated accounting server. Syntax: radius-acctserver {enable | disable} [first | second | third] Access level: 2...
  • Page 183: Radius-Acctserver Info

    Chapter 9 CLI Command Set Access level: 2 RADIUS-Acctserver Info Use this command to set the designated accounting server’s parameter(s). Use the no form of this command to set the designated accounting server’s parameter(s) as default value(s). Syntax: radius-acctserver info {first | second | third} [acct- port <port-number>] [accounting-key...
  • Page 184: Radius-Authserver {Enable | Disable

    Chapter 9 CLI Command Set RADIUS-Authserver {Enable | Disable} this command enable/disable designated authentication server. Syntax: radius-authserver {enable | disable} [first | second | third] Access level: 2 RADIUS-Authserver Extra Use this command to set authentication radius server’s additional attribute. Syntax: radius-authserver extra {first | second | third} [iapp|wpa] Possible value: iapp|wpa: keywords...
  • Page 185: Radius-Authserver Info

    Chapter 9 CLI Command Set no radius-authserver host {first | second | third} ip-address: IP address of the RADIUS Possible Value: authentication server host. Access level: 2 RADIUS-Authserver Info Use this command to set the designated authentication server’s parameter(s). Use the no form of this command to set the designated authentication server’s parameter(s) as default value(s).
  • Page 186: Radius-Server Dead-Time

    Chapter 9 CLI Command Set retransmit: 1-6; default value: 3 Access level: 2 RADIUS-Server Dead-Time To improve RADIUS response time when some servers might be unavailable, use the radius-server dead-time global configuration command to cause the unavailable servers to be skipped immediately.
  • Page 187: Radius-Server Timeout

    Chapter 9 CLI Command Set no radius-server retransmit Possible Value: retries: 1-6 Default Value: 3 times Access level: 2 RADIUS-Server Timeout Use this command to set the interval a router waits for a server host to reply. Use the no form to restore the default value. Syntax: radius-server timeout <seconds >...
  • Page 188: Snmp Server Community

    Chapter 9 CLI Command Set SNMP Server Community Use this command to set SNMP server community. Syntax: snmp server commnunity {ro | rw} <community> no snmp server commnunity <community> Possible value: community: up to 64 characters Default value: ro community: public; rw community: private. Access level: 2 SNMP Server Contact Use this command to set SNMP server contact string...
  • Page 189: Snmp Server Location

    Chapter 9 CLI Command Set Default value: SNMP agent is enabled Access level: 2 SNMP Server Location Use this command to set SNMP server location string. Syntax: snmp server location <location> Possible value: any text up to 255 characters Access level: 2 SNMP Server Sysname Use this command to set SNMP server system name string.
  • Page 190: Snmp Server Trap Host

    Chapter 9 CLI Command Set Possible value: N/A Default value: trap is enable Access level: 2 SNMP Server Trap Host Use this command to set SNMP trap host. Syntax: snmp server trap host <host-addr> [community <trap-community>] [port<trap-port>][version<v1|v2>] no snmp server trap host <host-addr> Default value: community :public Port:162 Version: v2...
  • Page 191: Static-User

    Chapter 9 CLI Command Set Static-User Use this command to add or delete a static user. Syntax: static-user {mac <mac-addr>} no static-user {mac <mac-addr>} Access level: 2 Static-User Enable / Disable Use this command to enable or disable a static user. Syntax: static-user {mac <mac-addr>} <[enable]/[disable] Possible value: mac-addr: xx:xx:xx:xx:xx:xx Default value: disable...
  • Page 192: Telnet Server Enable / Disable

    Chapter 9 CLI Command Set Access level: 2 Telnet Server Enable / Disable Use this command to enable/disable the telnet server. Syntax: telnet server {enable|disable} Default value: disable Access level: 2 Telnet Timeout Use this command to set the aging time how long the Telnet will be logout without any user input.
  • Page 193: User-Force-Offline

    Chapter 9 CLI Command Set User-Force-Offline Use this command to force the subscriber to be off-line. Syntax: user-force-offline <userid> Possible value: userid:1-256 Access level: 2 VLAN Default VID Use this command to set default VLAN VID. The command will be valid if the VLAN module is available. Syntax: vlan default-vid <vid>...
  • Page 194: Vlan Enable/Disable

    Chapter 9 CLI Command Set Syntax: vlan employee default-vid <vid> no vlan employee default-vid Possible value: vid: 1-4094 Default value: 1 Access level: 2 VLAN Enable/Disable Use this command to enable or disable VLAN. The command will be valid if the VLAN module is available. Syntax: vlan {enable|disable} Access level: 2 Explanation: Use this command to enable or disable VLAN...
  • Page 195: Vlan Port-Vid

    Chapter 9 CLI Command Set Default value: user-based Access level: 2 VLAN port-vid Use this command to set the designated port’s vid. Syntax: vlan port-vid {lan|wlan1|wlan2} <vid> no vlan port-vid {lan|wlan1|wlan2} Possible values: Vid range:1-4094 Default value:1 Access level: 2 Explanation: Use this command to set the vid of designated port when work on port-based mode.
  • Page 196: Vlan Tag Enable

    Chapter 9 CLI Command Set VLAN Tag Enable Use this command to enable VLAN tag. The command will be valid if the VLAN module is available. Syntax: vlan tag enable Access level: 2 VLAN Visitor Default Vid Use this command to set default VLAN visitor VID. The command will be valid if the VLAN module is available.
  • Page 197: Wireless-Port

    Chapter 9 CLI Command Set Syntax: webserver Access level: 2 Wireless-Port Use this command to enter the wireless card configuration level. Syntax: wireless-port <port> Possible value: ports: 1-2 Access level: 1 DHCP-pool Configuration Mode DNS-Server Use the dns-server DHCP pool configuration command to specify the Domain Name System (DNS) IP servers available to a Dynamic Host Configuration Protocol (DHCP) client.
  • Page 198: Excluded-Address

    Chapter 9 CLI Command Set Possible value: address: Specifies the IP address of a DNS server. One IP address is required. The user can specify up to four addresses in one command line. address2...address4: (Optional) Specifies up to four addresses in the command line Default value: If DNS IP servers are not configured for a DHCP client, the client cannot correlate host names to the IP...
  • Page 199: Gateway

    Chapter 9 CLI Command Set high-address: (Optional) The last IP address in the excluded address range Default value: All IP pool addresses are assignable.. Access level : 2 Explanation: Use this command to exclude or remove the excluded IP address from the pool. Gateway Use the gateway DHCP pool configuration command to specify the default gateway for a Dynamic Host Configuration Protocol...
  • Page 200: Lease

    Chapter 9 CLI Command Set Lease Use the lease DHCP pool configuration command to configure the duration of the lease for an IP address that is assigned by a Dynamic Host Configuration Protocol (DHCP) Server to a DHCP client. To restore the default value, use the form of this command.
  • Page 201: Network

    Chapter 9 CLI Command Set Explanation: Use this command to set lease for an IP address that is assigned from the DHCP server. Network Use the network DHCP pool configuration command to configure the subnet number and mask for a Dynamic Host Configuration Protocol (DHCP) address pool on a DHCP Server.
  • Page 202: Ethernet Port Configuration Level

    Chapter 9 CLI Command Set Syntax: manual-binding <ip-addr> <mac-add> no manual-binding <ip-addr> Access level: 2 Explanation: Use this command to bind an IP address to a MAC address. Ethernet Port configuration level Speed-duplex Use this command to modify the speed and duplex mode for the port.
  • Page 203: Enable

    Chapter 9 CLI Command Set Access level: 2 Enable Used this command to enable an interface. Syntax: enable Access level: 2 IP Address Use the ip address command in the interface configuration command mode to assign/remove an IP address for an interface on a router.
  • Page 204: Basic Rate

    Chapter 9 CLI Command Set no beacon interval Possible value: times: 20-1000 Default value: 100 Access level: 2 Explanation: Use this command to set wireless card beacon frame send interval Basic Rate Use this command to set the transmission rate of this wireless card Syntax: basic rate <...
  • Page 205: Fragment Threshold

    Chapter 9 CLI Command Set Fragment Threshold Use this command to set the fragment threshold. If the TX MSDU’s length is larger than the threshold, the mechanism is enabled. Syntax: fragment threshold < value> Possible value: value: 256-2346 Default value: 2346 Access level: 2 Frequency-Channel Use this command to set the work frequency channel based on...
  • Page 206: Dtim Interval

    Chapter 9 CLI Command Set DTIM Interval Use this command to set the DTIM (Delivery Traffic Indication Message) interval based on 802.11 Syntax: dtim interval < number> Possible value: number: 1-255 Default value: 2 Access level: 2 Power Use this command to set the transmit power of the wireless card Syntax: power <...
  • Page 207: Rts-Cts Threshold

    Chapter 9 CLI Command Set RTS-CTS Threshold Use this command to set RTS/CTS threshold. If the TX MPDU’s length is larger than the threshold, the mechanism is enabled. Syntax: rts-cts threshold < value> Possible value: value: 0-2347 Default value: 2347 Access level: 2 SSID Use this command to set the network name of the wireless card.
  • Page 208: Tx Rate

    Chapter 9 CLI Command Set Tx Rate Use this command to set TX rate used for AP to send unicast frame. Auto means the AP will auto-select the TX Rate according to self algorithm. Syntax: tx rate < value> Possible value: value: 1, 2, 5.5, 11, 6,9,12,18,24,36,48,54M, auto Default value: auto Access level: 2...
  • Page 209: Wds-Mode Enable / Disable

    Chapter 9 CLI Command Set Explanation: Use this command to set wireless mode. WDS-Mode Enable / Disable Use this command to set the wireless card work mode: either AP or WDS. When it is enabled, the wireless card supports WDS mode Use this command to set repeater work mode, either PTP or PTMP.
  • Page 210: Wep Encryption Enable / Disable

    Chapter 9 CLI Command Set no wds peer mac <mac-address> [<mac-address> <mac- address> <mac-address> <mac-address> <mac-address>] Access level: 2 Explanation: Use this command to set toward AP MAC address on this card. WEP Encryption Enable / Disable Use this command to enable WEP encryption. Syntax: wep encryption <enable|disable>...
  • Page 211: Default Wep-Key

    Chapter 9 CLI Command Set Default WEP-Key Use this command to set the default WEP key based on 802.11. Syntax: default wep-key < number> Possible value: number: 1-4 Default value: 1 Access level: 2 Explanation: Use this command to set wireless WEP key for this card WEP-Key-Format Use this command to set WEP key format.
  • Page 212: Antenna

    Chapter 9 CLI Command Set Possible value: string: 64 or 128 Default value: 64 Access level: 2 Antenna Use this command to select antenna. Syntax: antenna {ant-a | ant-b | both} Default value: both Access level: 2 WPA Mode Use this command to set WPA authentication mode. Syntax: wpa auth-mode {wpa|wpapsk|disable} Possible value: wpa|wpapsk|disable: keywords Default value: disable...
  • Page 213: Wpa Encryp-Mode

    Chapter 9 CLI Command Set WPA Encryp-Mode Use this command to set WPA encryption mode. Syntax: wpa encryp-mode {aes|tkip|auto } Possible value: aes|tkip|auto :keywords Default value: auto Access level: 2 WPA Psk-Passphrase Use this command to set WPA pre-shared key. Syntax: wpa psk-passphrase <string>...
  • Page 214: Optimize-108G Enable/Disable

    Chapter 9 CLI Command Set Possible value: value range:0(means no update), 30- 65535 seconds Default value: 1800 seconds Access level: 2 Optimize-108g Enable/Disable Use this command to enable or disable 108g optimization. Syntax:optimize-108g enable/disable Access level: 2 Webserver Mode Enable/Disable Use this command to enable or disable the web server.
  • Page 215: Ip-Filter Enable/Disable

    Chapter 9 CLI Command Set IP-Filter Enable/Disable Use this command to enable or disable the web server’s IP-filter. Syntax: ip-filter enable/disable Access level: 2 Explanation: Use this command to enable or disable the web server’s IP-filter. IP-Filter Client Use this command to set IP-filter’s IP address. Syntax: ip-filter client <ip>...
  • Page 216: Iapp Mode

    Chapter 9 CLI Command Set Possible value: port: wan,lan,wlan Access level: 2 IAPP Mode Enable/Disable Use this command to enable or disable IAPP. Syntax: enable/disable Access level: 2 ESP Enable/Disable Use this command to enable or disable ESP. Syntax: esp enable/disable Access level: 2 Mode Use this command to set IAPP mode.
  • Page 217: Map

    Chapter 9 CLI Command Set no mode Possible value: local|remote: keywords Default value: remote Access level: 2 Use this command to set IAPP map entry. Syntax: map <mac> <ip> (max 64 entries) no map <mac> Access level: 2 Explanation: Use this command to add or delete IAPP map entry.
  • Page 218: Debug Mode

    Chapter 9 CLI Command Set Debug Mode Ping Use this command to test the network layer connectivity between source and destination address. This command is a global command and can be used at any configuration level. Syntax: ping <ip-address> [times <times>] [packet-size <size>] Possible value: ip-address: Specifies the network layer destination address .
  • Page 219: Nat Logging

    Chapter 9 CLI Command Set no debug-module [module-name] Possible value: module name: DOT1X, SMI, RADIUS, DHCPS, DHCPR, DHCPC, IP, NAT, BRIDGE,DOT11, WEB, CLI, SNMP, TELETE, L2TP, PPP, PPPOEC level: ERROR, WAINING, TRACE Access level: 2 NAT Logging Use this command to set NAT logging information. Syntax: nat logging [detail|data] no nat logging [detail|data] Possible value: detail|data: keywords...
  • Page 220: Sys-Function

    Chapter 9 CLI Command Set Access level: 2 Sys-Function Use this command to execute some system function. Syntax: sys-function <function-name> Possible value: function-name: i, arpShow, ifShow, inetstatShow, ipstatShow, netStackDataPoolShow, netStackSysPoolShow, mbufShow, hostShow, routeShow, routeStatShow, udpstatShow, tcpstatShow, icmpstatShow, CPUReport Access level: 2 Show Version Use this command to display internal version.
  • Page 221: Show Memory

    Chapter 9 CLI Command Set Software version: 1.1.1.0 Create date: Feb 9 2004, 13:49:59 Show Memory Use this command to display the memory information. Syntax: show memory Access level: 2 Explanation: Show NAT Run Use this command to display NAT running configuration Syntax: show nat run Access level: 2 Show Debug_Module...
  • Page 222: Net-Security Rate-Limit Enable/Disable

    Chapter 9 CLI Command Set Net-Security Rate-Limit Enable/Disable Use this command to enable/disable the rate limit. Syntax: rate-limit enable/disable Possible value: N/A Access level: 0 Net-Security Syn-Cache Enable/Disable Use this command to enable/disable SYN cache. Syntax: syn-cache enable/disable Access level: 0 Net-Security Attack-Defense Enable/Disable Use this command to enable/disable the network attack defense.
  • Page 223: Ipstack Debug

    Chapter 9 CLI Command Set Syntax: show net-security Access level: 0 Explanation: Execute this command, and the following will be displayed: Rate Limit Status : Enable SYN Cache Status : Disable Network Attack Defense : Disable Ipstack Debug Use this command to enable IP stack print packet information. Syntax: ipstack-debug <module>...
  • Page 224: Show

    Chapter 9 CLI Command Set Explanation: Execute this command, and the following will be displayed: debug : On ICMP debug : Off debug : On debug : Off IGMP debug : On Show Show ARP Use this command to display ARP entries. Syntax: show arp Access level: 0 Show Console...
  • Page 225: Show Dhcp-Client

    Chapter 9 CLI Command Set Execute this command, and the following will be displayed: Baud rate : 9600 Timeout : 30 minutes Parity : no Data bits Stop bits Flow control : disable Show DHCP-Client Use this command to display the DHCP client configuration. Syntax: show dhcp-client Access level: 0 Explanation:...
  • Page 226: Show Dhcp Binding

    Chapter 9 CLI Command Set Syntax: show dhcp service Access level: 0 Show DHCP Binding Use this command to display address bindings on Dynamic Host Configuration Protocol (DHCP) server. Syntax: show dhcp binding [ip-address] | [manual ] | [ auto] Possible value: ip-address: Specifies the IP address of the DHCP client for which bindings will be displayed Manual: Displays only manual binding’s address...
  • Page 227: Show Dhcp Server

    Chapter 9 CLI Command Set Show DHCP Server Use this command to display DHCP server’s configuration parameters. Syntax: show dhcp server Access level:0 Show DHCP Statistics Use this command to display Dynamic Host Configuration Protocol (DHCP) Server statistics. Syntax: show dhcp statistics [relay |server] Default value: all statistics Access level: 0 Show Dot1x Configuration...
  • Page 228: Show Dot1X Statistics

    Chapter 9 CLI Command Set Show Dot1x Statistics Use this command to display the statistics of 802.1x. Syntax: show dot1x statistics Access level : 0 Show Flash Use this command to list the flash code information, such as version number, size and so on. Syntax: show flash Access level: 0 Explanation:...
  • Page 229: Show Mac

    Chapter 9 CLI Command Set Syntax: show dot1x authentication configuration Access level: 0 Show MAC Use this command to display the MAC addresses. Syntax: show mac [type] [port] Possible value: type: static | dynamic Access level: 0 Explanation: Execute this command, and the following will be displayed: State Port Pass-time Ageing-Time ----------------------------------------------- 00:06:5b:2c:eb:f8 Dynamic LAN...
  • Page 230: Show Mac Black-List

    Chapter 9 CLI Command Set Show MAC Black-List Use this command to display the black MAC list. Syntax: show mac black-list Access level: 2 Show MAC White-List Use this command to display the white MAC list. Syntax: show mac white-list Access level: 2 Show NAT Translation Use this command to display the currently active NAT...
  • Page 231: Show Nat Configuration

    Chapter 9 CLI Command Set Show NAT Configuration Use this command to display all NAT configuration information. Syntax: show nat configuration Access level: 2 Explanation: Execute this command, and the following will be displayed: Eable/disable , timeout value Nat pool information(<start-ip> <end-ip> <ip-mask>) Nat map information(<local-ip>...
  • Page 232: Show Ip-Route

    Chapter 9 CLI Command Set MAC address IP address Subnet mask Default gateway : (wan only) Show IP-Route Use this command to display the static or all route entries. Syntax: show ip-route [static] Access level: 0 Show Access-List Configuration Use this command to display the access-list configuration. Syntax: show access-list configuration Access level: 0 Show Port Config...
  • Page 233: Show Radius Configuration

    Chapter 9 CLI Command Set Explanation: Execute this command, and the following will be displayed: Port Link State AutoCap SpeedDuplex PVID Pri FlowCtrl Protected 1 up enable ----- 100-full 1 0 disable Show RADIUS Configuration Use this command to show the radius configuration information summary.
  • Page 234: Show Sms Online-User

    Chapter 9 CLI Command Set Syntax: show sms user {name <name> | mac <macaddr> | {all | dynamic | static}} [parameters]] Possible value: parameters : [lock<enable/disable>] Access level : 0 Show SMS Online-User Use this command to show the online user ‘s information. Syntax: show sms online-user Access level : 0 Show Wireless-Port...
  • Page 235: Show Telnet

    Chapter 9 CLI Command Set Syntax: show system Access level: 0 Explanation: Execute this command, and the following will be displayed: Serial number : 000008c42671 System uptime : 0 days 21 hours 27 minutes 5 seconds Console baudrate : 9600 Board temperature : 48.0 (C) Hardware version...
  • Page 236: Show Snmp Server Configuration

    Chapter 9 CLI Command Set Telnet server status : Enable Telnet session timeout : 30 minute(s) Show SNMP Server Configuration Use this command to disable SNMP server configuration, including trap configuration. Syntax: show snmp server configuration Access level: 0 Show AP-Mode Use this command to display the AP work mode.
  • Page 237: Show Who

    Chapter 9 CLI Command Set Show Who Use this command to display the login operator. Syntax: show who Access level: 0 Show Running-Config Use this command to display the running configuration. Syntax: show running-config Access level: 0 Show Startup Use this command to display the startup configuration. Syntax: show startup Access level: 0 Show WPA Configuration...
  • Page 238: Show Webserver

    Chapter 9 CLI Command Set Access level: 0 Explanation: Execute this command, and the following will be displayed: wpa auth mode : wpa encryption mode : tkip gtk update interval : 1800 seconds wpa-psk passphrase : abcdefg Show Webserver Use this command to display the WEB Server configuration. Syntax: show webserver Access level: 0 Explanation:...
  • Page 239: Show Vlan Binding

    Chapter 9 CLI Command Set Access level: 0 Explanation: Execute this command, and the following will be displayed: VLAN Status : enable VLAN Tag Status : enable VLAN Default vid Show VLAN Binding Use this command to display VLAN binding. This command will be valid if the VLAN module is available.
  • Page 240: Show Iapp Configuration

    Chapter 9 CLI Command Set Show IAPP Configuration Use this command to display IAPP configuration. Syntax: show iapp configuration Access level: 0 Explanation: Execute this command, and the following will be displayed: IAPP config status : enable IAPP running status : UP IAPP mode : local ESP mode...
  • Page 242: Troubleshooting

    Troubleshooting When the user has trouble using the AP, the starting point to troubleshoot the problem with the AP is to look at its LED activity. Table 20 is provided to assist the user in diagnosing and solving the operational problems. Table 20 Troubleshooting WLAN LINK...
  • Page 243 Chapter 10 Troubleshooting WLAN LINK Description/Action Hardware failure or AP freezes. Contact the product supplier. Software failure. Green Upgrade the software via Windows IE or Green blinks console (hyper terminal). stays WLAN initialization failure. Green Green Examine whether the blinks blinks wireless equipment has been installed correctly.
  • Page 244: Technical Specifications

    Technical Specifications Table 21 WA3001 AP Technical Specifications Type WA3001 2.4GHz(802.11g) 108Mbps Description enterprise class wireless access node -IEEE 802.11 -IEEE 802.11b -IEEE 802.11g Standard Compliance -IEEE 802.3 -IEEE 802.11i -IEEE 802.3af Ethernet One 10/100Mbps interface (RJ45) Interface Interfaces Ethernet LAN...
  • Page 245 Chapter 11 Technical Specifications Type WA3001 Security 64, 128bits WEP 802.1X (EAP-MD5, EAP-TLS, PEAP, CHAP, PAP) WPA (TKIP,AES) WAPI MAC address access control Subscriber isolation Authentication Supports 802.1x and RADIUS Client Supports DHCP Server and DHCP Client Supports PPOE transparent...
  • Page 246 Chapter 11 Technical Specifications Type WA3001 Reception -73dBm @ 108Mbps, PER < 8%, sensitivity OFDM -73dBm @ 54Mbps, PER < 8%, ODFM -90dBm @ 11Mbps, PER < 8%, -92dBm @ 6Mbps, PER < 8%, OFDM -95dBm @ 1Mbps, PER < 8%,...
  • Page 247 Chapter 11 Technical Specifications Type WA3001 Weight 450g Antenna External, various antennae can be assembled. LEDs Power, AP, WLAN, LAN, LINK Operating -10℃~ 50℃ temperature Storage -20℃~ 70℃ Environmental temperature Humidity 10 ~ 90% (non- condensing) MTBF >30000 hours Coverage...
  • Page 248: Acronyms And Abbreviations

    Acronyms and Abbreviations Access Controller Authentication Server BRAS Broadband Remote Access Server Command Line Interface DHCP Dynamic Host Configuration Protocol DTIM Delivery Traffic Indication Message Extensible Authentication Protocol ESSID Extended Service Set Identifier IEEE Institute of Electrical and Electronics Engineering Local Area Network Media Access Control Message Digest Algorithm 5...
  • Page 249 Chapter 12 Acronyms and Abbreviations Management Information Base Media Independent Interface Maximum Transmission Unit Network Access Server NAPT Network Address Port Translation Network Address Translation Network Management System Operation Administration and Maintenance Powered Device Power over Ethernet PPPoE PPP over Ethernet Power Sourcing Equipment PtMP Point-to-Multi-Point...
  • Page 250 Chapter 12 Acronyms and Abbreviations SNMP Simple Network Management Protocol Wired Equivalent Privacy WLAN Wireless Local Area Network WNIC Wireless Network Interface Card...
  • Page 252 UTStarcom, Inc. USA 1275 Harbor Bay Parkway Alameda, CA 94502, USA Tel: 510-864-8800 Fax: 510-864-8802 http://www.utstar.com...

Table of Contents