5,875,179; 6,006,090; 5,809,060; 6,075,812; 5,077,753. This user’s guide and the software described in it are copyrighted with all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form by any means without the written permission of Proxim Corporation.
ORiNOCO AP-2500 User Guide Contents Introduction ........... .13 Introducing the AP-2500 .
Page 4
Contents Configure Network Names for the Wireless Interfaces ......36 Configure the Ethernet Interface ..........37 Set WEP Encryption for each Wireless Interface .
Page 5
Contents Disabling the AP’s DHCP Server ..........65 IP Upsell .
Page 12
External Authentication Procedure (Detailed) ....... . 240 Sample XML Communications with the AP ........241 C Credit Card Interface Specification .
Active Ethernet Introducing the AP-2500 The ORiNOCO AP-2500 is an all-in-one wireless access point and access gateway specifically designed for public hotspot providers and enterprises. It is a cost-effective solution for small and medium public hotspots, such as coffee shops, hotels, and airport lounges, and it enables enterprises to offer corporate visitors immediate wireless network access regardless of their existing network or ISP settings.
Introduction • Outgoing e-mail (SMTP) Redirection: You can configure the AP-2500 to redirect outgoing e-mail messages to a specified Simple Mail Transfer Protocol (SMTP) server. Subscribers can send e-mails as if they were connected to their home network. See SMTP Redirection •...
Page 15
Introduction One of the key features of DAT is a technique known as Network Address Translation (NAT). NAT is an Internet standard that allows a device (like the AP-2500) to use a single public IP address to provide Internet connectivity to multiple devices (which would otherwise each need to have its own public IP address to communicate with the network).
Introduction Networking Features The AP-2500 provides wireless access to the Internet for hotspot subscribers. This means that your customers can surf the Internet and send e-mails from anywhere within range of the Access Point without having to install extra wires or cabling.
Introduction 802.11a and 802.11b Networks The AP-2500 supports both the IEEE 802.11a and 802.11b standards. The AP-2500 can be used with the following combinations of 802.11a and 802.11b radio cards: • One 802.11b card (second slot empty) • One 802.11a 5 GHz upgrade kit (second slot empty) •...
Introduction List of Networking Features The IEEE standards that governs wireless communications are different for the 2.4 GHz band and the 5 GHz band. The table below compares the software features supported for each type of card in the AP-2500 device: Feature Number of stations per BSS HTTP Server...
Page 19
Introduction The following table provides detailed information on the differences between the 802.11a and 802.11b feature sets. Physical Layer Type (Modulation Type) Auto Channel Select Frequency Channel Transmit Rate Distance Between APs Multicast Rate Interference Robustness Closed System Load Balancing Medium Density Distribution 2.4 GHz (802.11b)
Introduction The Product Package Each AP-2500 comes with the following: • AP processor module • AP cover • Mounting plate • Mounting hardware – Four 3.5 mm x 40 mm screws – Four 6 mm x 35 mm plugs • One power supply (if you purchased the Power Supply model) •...
IEEE 802.11 MIB Proxim provides these MIB files on the AP-2500 CD. You need to compile one or more of the above MIBs into your SNMP program’s database before you can manage the AP-2500. Refer to the documentation that came with your SNMP manager for instructions on how to compile MIBs.
SNMP program. Also, refer to the MIB files for information on the parameters available via SNMP. Wireless Network Manager The Wireless Network Manager is Proxim’s premier management tool for Access Points and Outdoor Routers. It provides a single management interface that lets an IT manager configure, manage, upgrade, and troubleshoot thousands of wireless devices from anywhere in the world.
ORiNOCO AP-2500 User Guide Installation & Basic Configuration In This Chapter This chapter describes how to install the AP-2500 hardware and perform basic configuration operations. • Prerequisites • Hardware Installation • Initialization (ScanTool) • Basic Configuration • Download the Latest Software •...
Installation & Basic Configuration Hardware Installation Refer to the steps below that correspond to your configuration: • AP-2500 with Active Ethernet • AP-2500 with Power Supply • Installing a Card in Slot B • 5 GHz Kit Installation • Installing the AP-2500 in a Plenum AP-2500 with Active Ethernet Follow these installation steps if you purchased an AP with Active Ethernet: 1.
Page 25
6. Determine the best location for your device. NOTE Proxim recommends that you perform a Site Survey prior to determine the installation location for your AP-2500. For information about how to conduct a Site Survey, contact your local reseller. 7. Once you have chosen a final location for your unit, mount the wall bracket and the processor module and place the cover onto the unit as shown.
Installation & Basic Configuration AP-2500 with Power Supply Follow these installation steps if you purchased an AP with a power supply: 1. Clip the power supply into the mounting bracket. 2. Plug the AC power cord into the power supply. Figure 2-5 Install the power supply 3.
Page 27
Installation & Basic Configuration Figure 2-7 Slide a PC Card into the AP NOTE If you want to install a second 802.11b wireless card in Slot B, you will first need to remove the slot cover (which is provided for plenum-rating purposes). See install a 5 GHz kit, see 5 GHz Kit 6.
Installation & Basic Configuration NOTE Proxim recommends that you perform a Site Survey prior to determine the installation location for your AP-2500. For information about how to conduct a Site Survey, contact your local reseller. 10. Once you have chosen a final location for your unit, mount the wall bracket and the processor module and place the cover onto the unit as shown.
Page 29
Installation & Basic Configuration Figure 2-11 Remove the AP cover 4. Remove the power and Ethernet cables from the unit. 5. Position the antenna adapter, card inward, facing the top of the unit (see diagram) and insert the 5 GHz card into the available card slot.
Installation & Basic Configuration 8. Position the antenna for best reception: • at a 90° angle for flat surface mounts • at a 180° angle for wall mounts 9. Re-attach the power and Ethernet cabling. 10. Re-install the cover and mount the AP back in place. 11.
Installation & Basic Configuration Initialization (ScanTool) ScanTool is a software utility that is included on the installation CD-ROM. The tool automatically detects the Access Points installed on your network, regardless of IP address, and lets you configure each unit’s IP settings. In addition, you can use ScanTool to download new software to an AP that does not have a valid software image installed (see Download a New Image Using...
Page 32
Ethernet after turning it on). • Proxim recommends that you assign the AP-2500 a static public IP address (that is, an address that is routable on the Internet). Some of the Public Space features will not work properly if the AP’s IP address changes at a later date.
Installation & Basic Configuration Basic Configuration Once you have a valid IP Address assigned to your AP-2500 and you can communicate with it over an Ethernet network, use your web browser to configure the AP-2500. This section describes how to perform some basic functions and configure some of the AP’s basic settings to get you started.
Page 34
Installation & Basic Configuration Figure 2-17 Enter Network Password Figure 2-18 Web Interface’s System Status Screen...
NOTE For best results, Proxim recommends that you assign the AP-2500 a static public IP address that is routable on the Internet. If you use a dynamic IP address, some of the Public Space features may not work properly if the IP address changes at a later date.
Installation & Basic Configuration Figure 2-20 Network IP Configuration Configure Network Names for the Wireless Interfaces During boot-up, the AP automatically detects the number and type of radio cards installed and updates the wireless configuration parameters accordingly. Many of the wireless settings can be left at their default value. However, you may want to change the Network Name for each wireless interface.
Installation & Basic Configuration Configure the Ethernet Interface 1. Click Configure > Interfaces > Ethernet. 2. Set the Speed and Transmission Mode for the AP’s Ethernet interface. • This is the speed and duplex at which the AP communicates with your Ethernet network. By default, the AP automatically detects the settings of the hub or switch to which it is connected.
Installation & Basic Configuration 5. Select the Key that the Access Point will use to encrypt outgoing data from the Encrypt Data Transmissions Using drop-down menu. By default, this parameter is set to Key 1. 6. Repeat these steps for the second slot (if applicable). 7.
Installation & Basic Configuration NOTE For security purposes Proxim recommends that you change ALL PASSWORDS from the default “public” immediately to restrict access to authorized personnel. If you lose or forget your password settings, you can always perform the Reset to Factory Default Configure the Date and Time The AP boots up using January 1, 1970 as the date and 00:00:00 as the time.
Download the Latest Software Proxim periodically releases updated software for the AP on its Web site at http://www.proxim.com/. Proxim recommends that you check the Web site for the Web site for the latest updates after you have installed and initialized the unit.
Nomadix MIB). See The file that contains the Network settings uses the Config file type and can use any file name. Proxim recommends that you use config.sys as the file name (this is the name used in the instructions below).
Installation & Basic Configuration Downloading Configuration Files Follow these steps to download configuration files to the AP: 1. Copy config.sys and current.txt to your TFTP server’s root directory (if necessary). 2. Login to the AP’s Web browser interface. 3. Click Commands > Download. 4.
ORiNOCO AP-2500 User Guide AP-2500 Authentication Methods The AP-2500 is a versatile Access Point for hotspot locations that supports multiple authentication methods. The unit includes all of the features necessary for a user to set up a hotspot quickly and easily without requiring servers or advanced Web design skills.
AP-2500 Authentication Methods Internal Authentication In this configuration, the AP-2500 provides all authentication services to subscribers using its Internal Web Server (IWS). This is the easiest configuration to design and implement but it offers limited functionality. The following diagram illustrates a network topology using the AP’s internal authentication services: Figure 3-1 Network Using Internal Web Server NOTE...
AP-2500 Authentication Methods NOTE If you want to provide the user with the ability to log in or out of the connection, you need to use a RADIUS server. See Internal Authentication with RADIUS End User Experience The following procedure details the experience of the typical customer if you configure the AP-2500 to use internal authentication: 1.
Page 46
AP-2500 Authentication Methods • You can disable the AP’s DHCP server if there is another DHCP server that you want to use instead. See Disabling the AP’s DHCP Server 4. Configure IP Upsell, if desired. See • In general, it costs more to obtain public IP addresses from your ISP due to limited availability. If you have a pool of public IP addresses that you can distribute, you can offer standard customers less expensive private IP addresses and premium customers public IP addresses.
Page 47
AP-2500 Authentication Methods NOTE Advanced users can also manage the AP from a network computer using XML commands (tasks such as adding and deleting users). See information on XML commands. 12. Click OK to save your changes to the AAA settings. 13.
Page 48
— ChainFusion (in Asia) -- — Authorize.net’s WebLink solution (U.S.) -- — As of the release of this documentation, Authorize.net is discontinuing support for WebLink. Proxim is working to provide support for Authorize.net’s Simple Integration Solution (SIM) method in the next AP-2500 firmware release.
Page 49
If you want properly configured subscribers to send mail without being redirected, enable only the Misconfigured option. In general, Proxim recommends that you enable both options. Also, you should never enable Properly Configured and disable Misconfigured (this combination defeats the purpose of SMTP Redirection).
Page 50
AP-2500 Authentication Methods Configure the Amount Paid field, if desired. The AP automatically fills in this field after a successful credit card purchase. Configure the optional User Alias fields, if desired. These are for notes only and do not have an impact on the authentication process.
AP-2500 Authentication Methods Internal Authentication with RADIUS In this configuration, the AP-2500 provides all of the authentication services described in also communicates with a Remote Authentication Dial-In User Service (RADIUS) server on the network to determine if a user is valid. RADIUS is an authentication and accounting protocol that is used by many ISPs. The RADIUS server maintains a large central list of subscribers and their attributes (such as the maximum bandwidth allowed for a specific customer) that it communicates back to the AP-2500.
AP-2500 Authentication Methods 3. Client sends AP its login credentials (User name/password or MAC address). 4. AP checks its Authorized Subscribers the RADIUS server. 5. The RADIUS server authenticates the user based on the client’s login credentials and notifies AP of successful authentication.
Page 53
AP-2500 Authentication Methods 1. Install the RADIUS application on your network server, if necessary. • IAS is included with Windows 2000 Server. If you want to install IAS, follow these steps: Click Start > Control Panel. Double-click the Add/Remove Programs icon. Click the Add/Remove Windows Components option.
Page 54
AP-2500 Authentication Methods 16. Return to the Internet Authentication Services window and right-click the Remote Access Policies entry in the navigation tree. 17. Select New Remote Access Policy from the drop-down menu. 18. Enter a Policy friendly name in the field provided and click Next. 19.
AP-2500 Authentication Methods Configure the AP-2500 After you have installed and configured your RADIUS server, you need to configure your AP to communicate with the RADIUS server and provide internal authentication. Follow these steps: 1. Configure the AP-2500 to use its Internal Web Server for authentication. See Configuration Instructions for step-by-step instructions.
Page 56
AP-2500 Authentication Methods 5. Configure the Retransmission Options. • Select a Retransmission Method. This option is only valid if you have configured settings for a Secondary Server. — Failover: The AP make multiple attempts to reach the Primary Server. If the Primary Server fails to respond (after the specified number of Retransmission Attempts), the AP falls over to the Secondary Server.
Page 57
AP-2500 Authentication Methods • Place a check mark in the Send NAS Port Type box if you want to include the port type in the messages sent to the RADIUS server. • Set the NAS Port Type to 19 if you enabled Send NAS Port Type. —...
AP-2500 Authentication Methods External Authentication The External Web Server (EWS) interface was designed for customers who want to develop and use their own content. It allows for more customization than if using the Internal Web Server (IWS). By using an EWS (External Web Server) you can authenticate subscribers externally;...
AP-2500 Authentication Methods • The customer must try to access a valid Web site to initiate a redirect. Entering an unreachable URL or invalid Web address will not initiate a redirect to the External portal page. • Customers who try to access e-mail first will not have a connection. Customers need to login via a Web browser first.
Page 60
AP-2500 Authentication Methods • Some applications require a public IP address to function properly over the Internet (such as certain VPN applications, on-line gaming, and Web hosting). Customers who require a public IP address may be willing to a premium for this service. •...
Page 61
If you want properly configured subscribers to send mail without being redirected, enable only the Misconfigured option. In general, Proxim recommends that you enable both options. Also, you should never enable Properly Configured and disable Misconfigured (this combination defeats the purpose of SMTP Redirection).
ORiNOCO AP-2500 User Guide Network Parameters In This Chapter This chapter describes all of the network operating parameters that can be configured using the Access Point’s Web browser interface (that is, the parameters accessible after clicking the Configure button). •...
NOTE For best results, Proxim recommends that you assign the AP-2500 a static public IP address that is routable on the Internet. If you use a dynamic IP address, some of the Public Space features may not work properly if the IP address changes at a later date.
Network Parameters Overview of DHCP Server Parameters You can configure and view the following parameters within the DHCP Server Configuration screen: • Enable DHCP Server: Place a check mark in the box provided to enable DHCP Server functionality. Remove the check mark if you do not want the AP to act as a DHCP server.
Network Parameters Figure 4-1 DHCP Server Configuration Screen Configuring the AP to Serve Public IP Addresses If you have a pool of public IP addresses and do not want the AP to perform NAT for subscribers who have DHCP client support enabled, follow these steps (note that this is not a typical configuration for the device): 1.
Network Parameters 5. In the Relay Type field, select the type of addresses your DHCP server will assign to subscribers: Public or Private. 6. In the DHCP Relay Server IP field, enter the IP address of your DHCP server. 7. Configure the DHCP Relay Agent IP as follows: •...
Page 67
Network Parameters Figure 4-2 Enabling IP Upsell 11. Configure the billing plans that you want to offer. – At least one plan should offer private IP addresses and at least one plan should offer public IP addresses (you can configure up to six different billing plans). –...
Network Parameters • If you use external authentication, you can add an IP_Type attribute to the User_Add XML command and specify the address type (public or private), as shown in the following example: <USG COMMAND=”USER_ADD” MAC_ADDR=”0050da554787”> <USER_NAME>johndoe</USER_NAME> <PASSWORD ENCRYPT=”FALSE”>doededoe</PASSWORD> <EXPIRY_TIME UNITS=”SECONDS”>3600</EXPIRY_TIME> <ROOM_NUMBER></ROOM_NUMBER>...
Network Parameters 4. Enter the DNS Domain name. This name is provided by your ISP or network administrator. 5. Enter up to three DNS Server IP addresses in the fields provided. You must configure at least the Primary DNS Server IP address. These IP addresses should be provided by your ISP or network administrator. 6.
Network Parameters VLAN Workgroups and Traffic Management Traditional, dual-slot access point devices that are not VLAN-capable typically broadcast and multicast traffic over both wireless cells. This process wastes wireless bandwidth and degrades throughput performance. In comparison, the dual-slot, VLAN-capable AP-2500 device is designed to efficiently manage delivery of broadcast, multicast, and unicast traffic to wireless clients.
Network Parameters Figure 4-5 VLAN Configuration Screen (Wireless A and Wireless Tagged with Different VLAN IDs) 1. Login to the Web interface. 2. Click Configure > Interfaces > Wireless A. 3. Set the SSID for card A. 4. Click the Wireless B tab. 5.
Network Parameters Figure 4-6 VLAN Configuration Screen (Slot A tagged; Slot B untagged) 1. Login to the Web interface. 2. Click Configure > Interfaces > Wireless A. 3. Set the SSID for card A. 4. Click the Wireless B tab. 5.
Network Parameters Figure 4-7 VLAN Configuration Screen (Wireless A and Wireless B Use Same VLAN ID) 1. Login to the Web interface. 2. Click Configure > Interfaces > Wireless A. 3. Set the SSID for card A. 4. Click the Wireless B tab. 5.
Network Parameters Wireless (802.11a) You can configure and view the following parameters within the Wireless Interface Configuration screen for an 802.11a radio: NOTE You must reboot the Access Point before any changes to these parameters take effect. • Physical Interface Type: This field reports: “802.11a (OFDM 5 GHz).” OFDM stands for Orthogonal Frequency Division Multiplexing;...
Network Parameters Dynamic Frequency Selection (DFS) 802.11a devices sold in Europe use a technique called Dynamic Frequency Selection (DFS) to automatically select an operating channel. During boot-up, the AP scans the available frequency and selects a channel that is free of interference.
Page 76
Network Parameters • Distance Between APs: Set to Large, Medium, Small, Microcell, or Minicell depending on the site survey for your system. By default, this parameter is set to Large. The distance value is related to the Multicast Rate (described next). In general, a larger distance between APs means that your clients operate a slower data rates (on average).
ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP. Proxim recommends that you enable this parameter, particularly if your subscribers have ORiNOCO clients on your wireless network (leaving this parameter enabled should not adversely affect the performance of any ORiNOCO 802.11a/b ComboCards or non-ORiNOCO cards on your network).
Network Parameters CAUTION You should conduct a Site Survey to determine the strength of the wireless connection on the borders of your hotspot. Contact your reseller for information on how to conduct a Site Survey. Multicast Rate The multicast rate determines the rate at which broadcast and multicast packets are transmitted by the Access Point to the wireless network.
Network Parameters Wireless Distribution System (WDS) A Wireless Distribution System (WDS) creates a link between two APs over their radio interfaces. This link relays traffic from one AP that does not have Ethernet connectivity to a second AP that has Ethernet connectivity. Two AP-2500s cannot establish a WDS link with each other because each AP treats its wireless interfaces as subscriber interfaces only.
Page 80
Network Parameters • The WDS link shares the communication bandwidth with the clients. Therefore, while the maximum data rate for the Access Point’s cell is still 11 Mbits/sec, client throughput will decrease when the WDS link is active. The connection over the link will be slower than if the client were communicating directly with the AP-2500. •...
For best results, Proxim recommends that you configure the Ethernet setting to match the speed and transmission mode of the device the Access Point is connected to (such as a hub or switch). If in doubt, leave this setting at its default, auto-speed-auto-duplex.
Network Parameters NOTE For security purposes Proxim recommends changing ALL PASSWORDS from the default “public” immediately, to restrict access to your network devices to authorized personnel. If you lose or forget your password settings, you can always perform the IP Access Table The IP Access Table limits management access over the Ethernet to the IP addresses or range of IP addresses specified in the table.
Flow Control: Select either None (default) or Xon/Xoff (software controlled) data flow control. NOTE To avoid potential problems when communicating with the AP through the serial port, Proxim recommends that you leave the Flow Control setting at None (the default value).
Network Parameters • Serial Data Bits: This is a read-only field and displays the number of data bits used in serial communication (8 data bits by default). • Serial Parity: This is a read-only field and displays the number of parity bits used in serial communication (no parity bits by default).
Network Parameters • To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the Status drop-down menu. • An entry’s status must be enabled in order for the protocol to be subject to the filter. The default filters are all disabled by default.
Page 86
Network Parameters • Examples: — If you set the Wired MAC Address to 00:03:8F:00:00:00 and you want to block all cards that begin with 00:03:8F, enter FF:FF:FF:00:00:00 as the Wired Mask. This will block any cards whose MAC address begins with those digits, ranging from 00:03:8F:00:00:00 to 00:03:8F:FF:FF:FF. —...
Network Parameters Alarms This category has two sub-categories. – Groups – Alarm Host Table Groups There are seven alarm groups that can be enabled or disabled: • Enable Configuration Alarms • Enable Security Alarms • Enable Wireless Alarms • Enable Operational Alarms •...
Network Parameters Bridge A traditional access point operates as a transparent bridge between your wired and wireless networking devices. The AP-2500 takes this a step further and provides Public Space features that facilitate hotspot operation (see Space Features Public Space Parameters You can disable these Public Space features by enabling the AP’s Bridge Mode.
Network Parameters 9. Select an Operation Type from the drop-down menu. This determines how the stations identified in the MAC Access Control Table are filtered. • If set to Passthru, only the addresses listed in the Control Table will pass through the AP. •...
Network Parameters RADIUS • RADIUS Overview • Unique AP-2500 RADIUS Client Features • RADIUS Messages and RADIUS Attributes • Sample RADIUS Transmissions • RADIUS Configuration Parameters RADIUS Overview RADIUS is a proven carrier-class protocol to perform accurate time and volume-based billing. The RADIUS protocols are defined in RFCs 2865 (Authentication) and 2866 (Accounting).
Network Parameters Data Volume Information Transmission (bytes sent/received) The AP’s RADIUS client implementation allows a hotspot operator to accurately track the exact number of bytes sent and received by a subscriber based on: • User Name • IP address (Framed IP) •...
Page 92
Network Parameters Access-Accept Parsing – Reply-Message • Used for challenge/response authentication; since the AP uses the Password Authentication Protocol (PAP) for authentication purposes, this attribute is not currently in use. – State • Used for challenge/response authentication; since the AP uses the Password Authentication Protocol (PAP) for authentication purposes, this attribute is not currently in use.
Page 93
Network Parameters Acct-Request – Username – Called-Station-Id – Calling-Station-Id – Acct-Status-Type (Start/Stop/Alive) – Acct-Session-ID – Acct-Output-Octets • Number of octets (bytes) sent by subscriber. – Acct-Input-Octets • Number of octets (bytes) received by subscriber. – Acct-Output-Packets • Number of packets sent by subscriber. –...
Network Parameters Sample RADIUS Transmissions These are actual accounting logs from a Lucent Navis RADIUS server with all VSAs enabled. Accounting Start Message Thu Aug 29 12:45:32 2002 User-Name = “testflo” NAS-IP-Address = 64.209.75.102 NAS-Port = 0 Acct-Status-Type = Start Acct-Session-Id = “98000004”...
Network Parameters RADIUS Configuration Parameters You can configure the AP to communicate with up to four different RADIUS servers: • Primary Authentication Server • Back-up Authentication Server • Primary Accounting Server • Back-up Accounting Server NOTE You must configure the settings for at least one Authentication server before configuring the settings for an Accounting server.
Network Parameters • Server IP Address: The IP address of the RADIUS server (separate fields for Authentication and Accounting). • Server DNS Name: The DNS Name of the RADIUS server (separate fields for Authentication and Accounting). NOTE Enter either the Server IP Address or the Server DNS Name, but not both. •...
Page 98
Network Parameters • Enable RADIUS Profile Caching: When enabled, the AP maintains the user’s information in the Subscribers Table (State: Pending) after a user logs out or times out. If the user attempts to re-connect, he can access the service again without being prompted to re-enter his user name and password. NOTE This option uses the subscriber card’s MAC address to re-validate the user.
Network Parameters Encryption The IEEE 802.11 standards specify an optional encryption feature, known as Wired Equivalent Privacy or WEP, that is designed to provide a wireless LAN with a security level equal to what is found on a wired Ethernet network. WEP encrypts the data portion of each packet exchanged on an 802.11 network using an Encryption Key (also known as a WEP Key).
Network Parameters Special Considerations Regarding VPN Support The most common VPN protocol is IPSec. When a subscriber who has a private IP address (assigned via NAT) attempts to create a VPN session, the AP-2500 performs a mapping between the subscriber’s private IP address and the AP’s public IP address.
ORiNOCO AP-2500 User Guide Public Space Parameters In this Chapter This chapter describes all of the Public Space operating parameters that can be configured using the Access Point’s Web browser interface (that is, the parameters accessible after clicking the PublicSpace or Subscriber button).
Public Space Parameters Home Page Redirection (HPR) This tab is used to redirect the subscriber’s browser to a specified home page following successful authentication. To redirect subscribers to a specified page before authentication, use the Portal Page feature with internal authentication (see Portal Page) or use external authentication (see...
Public Space Parameters Figure 5-1 Home Page Redirection Configuration Authentication, Authorization, and Accounting (AAA) The AP-2500 uses AAA services to authenticate, authorize, and subsequently bill subscribers for their use of the customer’s network. This section describes the parameters that can be configured from the AAA tab. See Authentication Methods for detailed information on the available authentication methods.
Public Space Parameters • Enable AAA Services: Enable this option to support any of the authentication methods described in Authentication Methods. When disabled, wireless users will have access to the Internet without authentication; this is the default setting. • Enable XML Interface: Enable this option to configure the AP to support XML (Extensible Markup Language) commands received from the XML Sender IP Address.
Public Space Parameters AAA Services with the Internal Web Server (IWS) This screen lets you set the configuration options when authorizing subscribers using the IWS (that is, when PublicSpace > AAA> Basic > Authentication Method is set to Internal). The IWS is “flashed” into the system’s memory and the subscriber’s login page is served directly from the AP-2500.
Page 106
You need to download three keys to the AP-2500 before enabling SSL. You must create two of these keys yourself: a Private Key file (cakey.pem) and a Public Key file (server.pem). Proxim provides the third key (cacert.pem), on the AP’s CD in the SSL_KEY folder (it is also included with software updates posted on Proxim’s Web site).
Page 107
You have now created two of the three key files required to enable SSL on the AP-2500. The third key file (cacert.pem) is included on the AP’s CD and with software updates posted on Proxim’s Web site. Enabling SSL on the AP-2500 1.
Public Space Parameters 14. Click OK. • Result: The TFTP operation begins. A new TFTP Operation Status window opens. 15. Click Close after the TFTP operation is complete. 16. Enter server.pem in the File Name field. 17. Leave File Type set to Generic. 18.
Page 109
Public Space Parameters Figure 5-5 Internal Authentication with Portal Page The following sections provide basic instructions for using a Portal Page. Setting up a Web Server (Microsoft IIS) If you have a Windows 2000 Server, follow these basic steps to setup the IIS Web server. NOTE For detailed information, refer to Windows 2000’s on-line Help documentation.
Page 110
Secure Socket Layer http://[Certificate DNS Name]:1112/usg/login?OS=http://www.anyWebSite.com/ Proxim provides two sample Portal Pages for the AP-2500 to help hotspot operators who have limited Web design experience get started. These sample pages are in the CD’s Docs/samples/ folder. Alternatively, you can download the sample pages from Proxim’s Web site at http://www.proxim.com/.
Page 111
Public Space Parameters Deciding which sample is right for your hotspot depends on the customer experience you want to provide. The sections below describe how the customer interacts with the AP-2500 under the following scenarios: – No Portal Page – HTML Portal Page –...
Page 112
Public Space Parameters 7. Following successful authentication, the customer is redirected to the page he originally requested or to the page you specified in the Home Page Redirection URL field (if enabled; see • You can use the confirm.asp sample page to display a second custom screen that can provide additional information to your subscribers following successful authentication.
Page 113
Public Space Parameters Figure 5-6 Portal Page Configuration 6. Click the Passthrough tab. 7. Place a check mark in the Enable Passthrough Address box, if necessary. 8. Add the DNS names for the Web sites in your walled garden to the Passthrough DNS Table. •...
Page 114
Public Space Parameters Figure 5-7 Sample Passthrough Tables 10. Click OK. 11. Click the HPR tab. 12. Place a check mark in the Enable Home Page Redirection box. 13. Enter the Web site to which you want to direct customers following successful authentication in the Redirection URL field (for example, http://www.yahoo.com/).
Page 115
Public Space Parameters Figure 5-8 Portal Page Configuration 6. Click the Passthrough tab. 7. Place a check mark in the Enable Passthrough Address box, if necessary. 8. Add the DNS names for the Web sites in your walled garden to the Passthrough DNS Table. •...
Page 116
Public Space Parameters Figure 5-9 Sample Passthrough Tables 10. Click OK. NOTE If you disable Home Page Redirection, your subscribers will be automatically redirected to the page they originally requested (following successful authentication). The instructions below describe how to enable Home Page Redirection;...
Public Space Parameters Figure 5-10 HPR (with Parameter Passing) 15. Click OK. 16. Click Commands > Reboot. 17. Click OK to reboot the AP so your changes will take effect. 18. Test the Portal Page feature by turning on a wireless computer and launching its Web browser. Note that the computer must not be a current or active subscriber (that is, the wireless card’s MAC address cannot appear in the Authorized Subscribers Table or the Current Subscribers Table) for this test to work properly.
Page 118
Public Space Parameters Figure 5-11 AP Communicating with Hotspot Aggregator The following steps describe how you should configure the AP-2500 if you are partnered with a hotspot aggregator: 1. Follow the installation steps described in • Configure the RADIUS Authentication and Accounting settings as required by your hotspot aggregator. —...
Public Space Parameters Figure 5-12 AAA Internal Settings if Enabling Smart Client 3. Click OK to save the settings. 4. Reboot the AP. User Name & New Subscribers The User Name and New Subscribers options work in conjunction to determine who can connect to the Internet and what credentials the AP uses to authenticate users.
Public Space Parameters Figure 5-13 Sample Login Screen Presented to Subscribers Sample scenarios include: • If you are renting cards to customers, disable User Name and New Subscribers. Only cards whose MAC addresses are entered in the Authorized Subscriber Table will have access to the Internet. •...
Page 121
• Authorize.net’s WebLink solution (U.S.) -- — As of the release of this documentation, Authorize.net is discontinuing support for WebLink. Proxim is working to provide support for Authorize.net’s Simple Integration Solution (SIM) method in the next AP-2500 firmware release.
Page 122
You need a software program installed on your server that will listen for packets from the AP on the specified port. Proxim provides a sample Bill Mirror Server Daemon in the CD’s Docs/samples/ folder. This program is provided for illustration and testing purposes only.
Page 123
Public Space Parameters Enabling Bill Mirroring Follow these steps the enable bill mirroring: 1. Login to the AP’s Web browser interface. 2. Click Subscriber > Billing > Mirroring. Figure 5-14 Credit Card Mirroring Screen 3. Place a check mark in the Enable Mirroring box. 4.
Page 124
Public Space Parameters 9. Enter the following settings for the primary server, secondary server (if any), and carbon copy server that will receive billing records from the AP: • IP: Enter the server’s IP address in the field provided. • URL: This field is optional.
Public Space Parameters Example of a Positive Acknowledgment: <AP COMMAND=”RMTLOG_ACK”> <ACK_VALUE>OK</ACK_VALUE> <IP_ADDR>205.23.43.12</IP_ADDR> <ERROR_CODE>1</ERROR CODE> </AP> Example of a Negative Acknowledgment: <AP COMMAND=”RMTLOG_ACK”> <ACK_VALUE>ERROR</ACK_VALUE> <IP_ADDR>205.23.43.12</IP_ADDR> <ERROR_CODE>5</ERROR CODE> </AP> Format for each field: RESULT_VALUE: OK or ERROR IP: standard IP format ERROR_CODE: 1 for OK, or any other number for an error. Logging You can configure the AP-2500 to send system events and/or AAA events to network servers using the Syslog protocol.
Public Space Parameters Configuration Instructions Follow these steps to enable the AP’s syslog features: 1. Login to the AP’s Web browser interface. 2. Click PublicSpace > Logging. 3. Place a check mark in the System Log box to enable the logging of system message. 4.
Public Space Parameters Sample Logging Events • AAA Messages – Credit Card • AAA Messages – Internal Web Server – User Name Login • AAA Messages – RADIUS • AAA Messages – XML • Bill Mirror • DHCP • • Home Page Redirect •...
Page 128
Public Space Parameters AAA Messages – XML Message USG_AAA: 4007 AAA_Interface added_by_administrator 00:50:04:29:37:56 Exp_time:24 hrs 0 min USG_AAA: 4800 AAA_XML Memory_updated__State_valid 00:50:04:29:37:56 USG_AAA: 4006 AAA_Interface Removed_by_administrator a Bill Mirror Message RMTLOG: rmtlogXmlTcpSend: Connect error RMTLOG: rmtlogXmlTcpSend: transmission Ok DHCP Message DHCP: dhcpsStart: dst port (68) not DHCP server port DHCP: dhcpsStart: Invalid DHCP options packet DHCP: dhcpsStart: invalid IP header...
Page 129
Public Space Parameters Message USG_DNS:ndxDNSRedirectionTable::processFromNetwork(): could not get subid USG_DNS: ndxDNSRedirectionTable::processFromSubscriber(): dnsIsQueryA() failed USG_DNS: ndxService::processKnownNames(): dnsIsQueryA() failed ndxDNSRedirectionTable::processFromNetwork(): duplicate reply or reply without request USG_DNS: dnsRedirectFromSub(): GetDNSServerIP failed USG_DNS:ndxDNSRedirectionTable::dnsSubPktForRedirection Table(): GetSubId() failed USG_DNS: ndxDNSService::FromSubscriber(): Unable to determine if redirection is needed Home Page Redirect Message USG_HRS: 3009 HRS_Object...
Page 130
Public Space Parameters Other AAA Messages Message AAA: 4121 AAA_lookup Tried to add blacklisted IP 210.155.227.244 or MAC 00:50:E8:00:07:99 USG_AAA: 4006 AAA_Interface Removed_by_administrator 00:00:78:02:1D:70 USG_AAA: 4006 AAA_Interface Removed_by_administrator aforum USG_AAA: 4007 AAA_Interface Added_by_administrator ahughes Exp_time:Unlimited USG_AAA: 4009 AAA_Interface Updated_by_administrator 00:03:47:F0:8F:72 Exp_time:Unlimited USG_AAA: 4013 AAA_Interface Cache_entry_removed 00:03:47:F0:8F:72 bytes:165304 USG_AAA: 4102 AAA_lookup Time_expired...
Public Space Parameters URL Filtering The AP-2500 can restrict access to specified web sites based on URLs. URL filtering will block access to these list of sites and/or domains. You can restrict access to specific Web sites based on IP address, DNS name (for example www.yahoo.com) or DNS Domain name (for example, *.yahoo.com, meaning all sites under the yahoo.com hierarchy, such as finance.yahoo.com).
Public Space Parameters URL Filtering by IP Address 1. Login to the AP’s Web browser interface. 2. Click PublicSpace > URLFilter. 3. Place a check mark in the Enable URL Filtering box. 4. Click the Add button above the URL Filtering by IP Address heading. 5.
Public Space Parameters ICC Appearance The ICC screen contains the following items: • Title Bar — Appears at the top of the screen near the Web browser name. • Ad Banner — You can specify up to 5 different banners that share this space. •...
Public Space Parameters Billing Plans Figure 5-19 ICC Screen -- Credit Card Authenticated by RADIUS If a subscriber has been authenticated by a RADIUS server (if using Internal authentication with RADIUS), the ICC includes a Logout button so customers can end their session. The ICC also displays the subscriber’s current billing plan in the Dynamic Billing Plan Selection field.
Page 135
Public Space Parameters Figure 5-21 ICC Setup Screen 9. Place a check mark in the Enable ICC box. 10. Enter the Title for the ICC. • This is the name that appears at the top of the ICC next to the Web browser name. 11.
Page 136
Public Space Parameters 12. Configure the ISP Logo Button settings. • Enter the Name or Title of the ISP Button in the ISP Logo Button’s Name/Text field. — This is the text that will appear in the text bar at the bottom of the ICC when a subscriber rolls over the icon with his/her mouse cursor.
Public Space Parameters • Configure the optional banner Start Time and Stop Time. — The Start Time is in hh:mm AM/PM format and determines when the banner will be displayed on the ICC. After the start time elapses, the banner appears in the ICC for the specified Banner Duration along with the other enabled banners.The banner is disabled before the start time.
NOTE In general, Proxim recommends that you enable both options. Also, you should never enable Properly Configured and disable Misconfigured (this combination defeats the purpose of SMTP Redirection).
Public Space Parameters The DNS and IP Address tables can hold up to 50 entries each. The AAA port option supports only passthrough port. • Passthrough DNS Table • Passthrough IP Table • Passthrough AAA Port Figure 5-24 IP/DNS Passthrough Table Passthrough DNS Table 1.
Public Space Parameters Passthrough IP Table 1. Login to the AP’s Web browser interface. 2. Click PublicSpace > Passthrough > IP/DNS. 3. Place a check mark in the Enable Passthrough Address box. 4. Click the Add button below the Passthrough IP Table heading. 5.
Page 141
Public Space Parameters 4. Enter the speed of the connection between the AP and the Ethernet network in the Bandwidth uplink (to network) speed field (in Kbps). 5. Enter the speed of the connection between the AP and the wireless clients in the Bandwidth downlink (to subscribers) speed field (in Kbps).
Public Space Parameters Billing Options for Subscribers The Web browser interface’s Subscriber button links to three screens that allow you to configure Subscriber billing plans (Billing tab), login and error messages (Messages tab), and the Authorized Subscribers database (Authorized tab). NOTE The Billing and Messages options are used in conjunction with the Internal Web Server.
Page 143
Public Space Parameters Figure 5-27 Default New User Screen that Appears to Subscribers • Edit the Introduction Message. — The default Introduction Message is “Please Choose from the following plans.” • Edit the Offer Message. — The default Offer Message is “How many days of Internet access would you like to purchase?” •...
Page 144
Public Space Parameters 7. Click OK. 8. Click the Plan 0 tab. 9. Configure the settings for billing plan 0. • Place a check mark in the Enable Plan box to make the plan active. It will appear as an option in the New User screen presented to subscribers.
Public Space Parameters Creating a Free Billing Plan Under some circumstances you may want to offer free Internet access to your subscribers. For example, you might offer a low bandwidth connection for free but charge for faster connections. Follow these steps to make one of your six billing plans a free billing plan: 1.
Public Space Parameters Figure 5-30 Subscribers Can Select a Plan that Offers Free Internet Access Subscriber Messages The Web browser interface’s Subscriber button links to three screens that allow you to configure Subscriber billing plans (Billing tab), login and error messages (Messages tab), and the Authorized Subscribers database (Authorized tab).
Page 147
Public Space Parameters Figure 5-31 Subscriber Login Messages 3. Edit the login messages as necessary. • Service Selection Message • Existing User Name Message — Appears on the main login screen when the User Name option is enabled in PublicSpace > AAA > Internal.
Page 148
Public Space Parameters Figure 5-32 Sample Login Screen Presented to Subscribers 4. JavaScript support on the AP’s internal Web pages are enabled by default. Remove the check mark from the Enable JavaScript to disable this feature. 5. Configure the “Remember Me” cookie options. See 6.
Page 149
Public Space Parameters Figure 5-33 Subscriber Messages Screen 12. Click the Sub Msgs 2 tab. 13. Edit the subscriber messages as necessary. • If this is not correct, please go back to the previous page • and make the necessary changes •...
Public Space Parameters 16. Edit the subscriber messages as necessary. • Thank you for your business • We are verifying your account. Please wait — This message appears if RADIUS is enabled. The AP displays this page while it wait for an authentication response from the RADIUS server.
Public Space Parameters 4. Edit the Remember Me Message. • This message appears on the login screen to let the user know that his/her user name and password can be stored for future login attempts. • The default message is “Remember my username and password.” 5.
Page 152
Public Space Parameters Figure 5-35 Login Screen with Custom Logo Follow these steps to add your own partner image and logo to the AP: 1. Create the image files that you want to add to the login pages. Keep in mind the following: •...
Public Space Parameters Authorized Subscribers The AP-2500 stores information about subscribers in the Authorized Subscribers Table. You can view the table by clicking Subscriber > Authorized within the Web browser interface. Figure 5-36 Authorized Subscribers Table The table is the AP’s internal database of authorized users; it can hold up to 50 entries. The list is populated by one of three methods: 1.
Public Space Parameters • Custom fields for internal use (User Alias 1 or User Alias 2) • Upstream and Downstream bandwidth settings • Status — Should be Active at all times. — Change to Destroy to delete an entry. — The other options are not applicable when using the Web browser interface. Authorized Subscribers Table and the Current Subscribers Table The Authorized Subscribers Table differs from the screen.
Public Space Parameters 5. If authorizing a user based on MAC address (in other words, the PublicSpace > AAA > Internal > Enable User Name option is disabled), enter the MAC address of the subscriber’s wireless card in the field provided. •...
ORiNOCO AP-2500 User Guide Monitor Information In This Chapter This chapter describes the statistics that can be viewed using the Access Point’s Web browser interface (that is, the options accessible after clicking the Status or Monitor button). • System Status: Displays basic information about the Access Point’s operating status.
Monitor Information System Status System Status is the first screen to appear each time you connect to the Web browser interface. You can also return to this screen by clicking the Status button. Figure 6-1 System Status Screen Each section of the System Status screen provides the following information: •...
Monitor Information Version From the Web browser interface, click the Monitor button and select the Version tab. The list displayed provides you with information that may be pertinent when calling Technical Support. With this information, your Technical Support representative can verify compatibility issues and make sure the latest software are loaded. This screen displays the following information for each Access Point component: •...
Monitor Information ICMP This tab provides statistical information for both received and transmitted messages directed to the Access Point. For example, if you ping the AP from another computer, the AP reports the ping requests (Echos) and replies (Echo Reply) on this screen (as shown in the example below).
Monitor Information IP/ARP Table This tab provides information based on the Address Resolution Protocol (ARP), which maps IP Addresses to MAC Addresses. The AP adds an entry to this list for each station with which the AP directly communicates. This includes devices that manage the AP, ping the AP, and/or receive traps from the AP.
Monitor Information Learn Table This tab displays information relating to network bridging. It reports the MAC address for each node that the AP has learned is on the network and the interface on which the node was detected. There can be up to 2,000 entries in the Learn Table.
Monitor Information Current Subscribers Table This table lists all of the active subscribers that are communicating with the AP. (See the Current Subscribers Table for an explanation of how this table differs from the Authorized Subscribers Table.) This table can hold up to 50 entries. Users who are associated with the AP wirelessly but are unauthenticated appear in the table with State set to Pending.
Monitor Information A subscriber is removed from the Current Subscribers Table under the following circumstances: • The network administrator changes the subscriber’s Status from Active to Destroy. • The subscriber has logged out (applicable to RADIUS-authenticated users and RADIUS Profile Caching is disabled).
Monitor Information Interfaces This tab displays statistics for the Ethernet and wireless interfaces. The Operational Status can be up, down, or testing. Figure 6-8 Interface Monitoring...
Monitor Information Link Test (802.11b Only) This tab displays information on the quality of the wireless link to clients and other 802.11b APs in the Wireless Distribution System. During a Link Test, the Access Point and the selected device exchange a series of packets to test the strength of the connection.
Page 166
Monitor Information • Noise (dBm): The strength of the noise detected at the receiver reported in dBm (decibels referenced to 1 milliwatt). The displayed value is the running average since the start of the test and is reported as a negative number.
ORiNOCO AP-2500 User Guide Commands In This Chapter This chapter describes the commands that can be issued using the Access Point’s Web browser interface (that is, the options accessible after clicking the Commands button). • Download: Download files from a TFTP server to the Access Point.
This File Type only supports the Download command. You cannot upload the AP’s firmware image file to a TFTP server. – Proxim periodically makes new firmware available on its Web site that you can download to the AP using a TFTP server; see Download the Latest Software •...
Commands Upload Use the Upload tab to upload Configuration and image files from the AP-2500 to the TFTP server. NOTE The Download and Upload commands are from the AP’s perspective. In other words, to send files to the AP, use the Download command; to obtain files from the AP, use the Upload command. The TFTP server must be running and configured to point to the directory to which you want to copy the uploaded file.
Commands Reboot Use the Reboot tab to save configuration changes (if any) and reset the AP-2500. Entering a value of 0 (zero) causes an immediate reboot. Note that Reset, described below, does not save configuration changes. CAUTION Rebooting the AP-2500 will cause all users who are currently connected to lose their connection to the network until the AP-2500 has completed the restart process and resumed operation.
Commands Figure 7-4 Reset to Factory Defaults Command Screen Help Link To open Help, click the Help button on any display screen. During initialization, the Access Point’s on-line help files are downloaded to the default location: C:\Program Files\ORiNOCO\AP2500\HTML\index.htm. If you want to place these files on a shared drive, copy the Help Folder to the new location, and then specify the new path in the Help Link box.
ORiNOCO AP-2500 User Guide Troubleshooting In This Chapter • Troubleshooting Concepts • Symptoms and Solutions • Connectivity Issues • AP-2500 Unit Will Not Boot - No LED Activity • Serial Link Does Not Work • Ethernet Link Does Not Work •...
Troubleshooting NOTE This section helps you locate problems related to the AP-2500 device setup. For details about RADIUS, TFTP, Serial communications program (such as HyperTerminal), Telnet applications or web browsers, please refer to their respective documentation. Troubleshooting Concepts The following list identifies important troubleshooting concepts and topics. The most common initialization and installation problems relate to IP Addressing.
Troubleshooting Ethernet Link Does Not Work 1. Double-check the physical network connections. Use a known-good unit to make sure the network connection is present. Once you have the AP-2500 IP Address, you can use the “Ping” command over Ethernet to test the IP Address.
Troubleshooting HTML Help Files Do Not Appear 1. Verify that the HTML Help files are installed in the default directory listed in the 2. If the Help files are not located in this folder, contact your network administrator to find out where the Help files are located on your server.
Troubleshooting VLAN Operation Issues Verifying Proper Operation of the VLAN Feature The correct VLAN configuration can be verified by “pinging” both wired and wireless hosts from both sides of the AP-2500 device and the network switch. Traffic can be “sniffed” on both the wired (Ethernet) and wireless (WDS) backbones (if configured).
Troubleshooting Recovery Procedures The most common installation problems relate to IP Addressing. For example, without the TFTP server IP address, you will not be able to download an AP Image to the AP-2500. IP Address management is fundamental. We suggest you create a chart to document and validate the IP addresses for your system.
Download Procedure Follow these steps to use ScanTool to download a software image to an Access Point with a missing image: 1. Download the latest software from http://www.proxim.com/. 2. Copy the latest software updates to your TFTP server. 3. Launch ScanTool.
Page 179
Troubleshooting 4. Open your terminal emulation program (like HyperTerminal) and set the following connection properties: • Com Port: <COM1, COM2, etc., depending on your computer> • Baud rate: 9600 • Data Bits: 8 • Stop bits: 1 • Flow Control: None •...
Troubleshooting Setting IP Address using Serial Port and Normal CLI Use the following procedure to set an IP Address over the serial port using the normal CLI. The network administrator typically provides the AP-2500 IP Address. Hardware and Software Requirements •...
Troubleshooting 6. Change the IP Address and other network values using set and reboot CLI commands, similar to the example dialog below (use your own IP Address and IP Mask). Result: After each entry the CLI reminds you to reboot; however wait to reboot until all commands have been entered.
AP-2500 for backup or copying, and you can download the files for configuration and AP Image upgrades. The TFTP software is located on the ORiNOCO AP-2500 Installation CD-ROM. If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-2500.
Troubleshooting LED Indicators POWER ETHERNET Green Green flash with data activity Amber n/a (not applicable) Amber Green PC CARD A PC CARD B INIDICATION Green flash Green flash Normal Operation with data activity with data activity Amber Amber Rebooting Missing or bad AP Image if amber after reboot Power On Self Test (POST) running PC Card incompatible on indicated interface PC Card failure on indicated interface...
ORiNOCO AP-2500 User Guide Using the Command Line Interface In This Chapter This section provides details for the Command Line (CLI) Interface used to manage an AP-2500 device. CLI commands can be used to initialize, configure, and manage network operation of the Access Point.
Using the Command Line Interface Prerequisite Skills and Knowledge To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts, network access infrastructures, and client-server relationships. In addition, you should be familiar with software setup procedures for typical network operating systems and servers.
Using the Command Line Interface CLI Error Messages The following table describes the error messages associated with improper inputs or expected CLI behavior. Error Message % Syntax error % Invalid command % Invalid parameter name % Invalid parameter value % Invalid table index % Invalid table parameter % Invalid table parameter value % Read only parameter...
Using the Command Line Interface The following lists display the results of using the help and show commands in the Bootloader CLI: [DeviceName]>help<CR> Figure A-1 Results of “help” bootloader CLI command [DeviceName]>show<CR> sysname ipaddrtype ipaddr ipsubmask ipgw tftpipaddr tftpfilename CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Control.
Using the Command Line Interface ? (List Commands) This command has varied uses to display commands and parameters, depending on the operation in which it is used. The following table lists each operation and provides a basic example. Following the table are detailed examples and display results for each operation.
Using the Command Line Interface Figure A-4 Result of “set ?” CLI command Example 3b. Display parameters based on letter sequence This example shows entries for parameters that start with the letter “i”. The more letters you enter, the fewer the results returned.
Using the Command Line Interface After entering one parameter, you may add another "?" to the new CLI line see the next parameter prompt, and so on until you enter all parameters. The following example shows how this is used for the "download" Command. The last part of the example shows the completed download Command ready for execution.
Using the Command Line Interface Figure A-7 Results of “help<space>” CLI command 2. Complete command description and command usage can be provided by: [Device Name]>help <command name> [Device Name]><command name> help history Shows content of Command History Buffer. The Command History Buffer stores command statements entered in the current session.
Using the Command Line Interface search Lists the members of the specified table. This list corresponds to the table information displayed in the HTTP Interface. In this example, the CLI returns the same table items that are displayed in the HTTP Interface’s IP Access Table. [Device Name]>...
Using the Command Line Interface Parameter Control Commands The following sections cover each CLI Command, and include several tables showing parameter properties. The two Parameter Control Commands are show and set. These allow you to view (show) all parameters and statistics, and to change (set) parameters.
Using the Command Line Interface NOTE Some tables use a different syntax. See Example 4 - Enable, Disable, or Delete a table entry or row In this example you would like to manage the second table row/entry. Syntax: [Device Name]>set <Table> index status <enable, disable, delete> [Device Name]>set <Table>...
Using the Command Line Interface Example 6 - Show Individual and Table Parameters 1. View a single parameter Syntax: [Device Name]>show <parameter name> Example: [Device Name]> show ipaddr Result: Displays the Access Point IP Address. Figure A-10 Result of “show ipaddr” CLI Command 2.
Using the Command Line Interface • Deletion – The table name is required. – The table index is required – for table deletion the index should be the index of the entry to be deleted. – The reserved word delete or destroy is required. There are some differences between table entry add and delete operations among the available tables.
Using the Command Line Interface Configuring Objects that Require Reboot Certain objects supported by the AP require the device to be rebooted in order for the changes to take effect. In order to inform the end-user of this behavior, the CLI shall provide informational messages when the user has configured an object or object(s) that requires the device to be rebooted.
(Result: HyperTerminal sends a line return at the end of each line of code.) Enter the Telnet password (default is public). NOTE Proxim recommends changing your default passwords immediately. To perform this operation using CLI commands, refer to Change Log Into the AP-2500 Unit using Telnet The CLI commands can be used to access, configure, and manage your AP-2500 device using Telnet or a terminal emulation application, such as HyperTerminal.
Using the Command Line Interface Figure A-11 Result of “show system” CLI Command Set Static IP Address for the AP-2500 device [Device Name]>set ipaddrtype static [Device Name]>set ipaddr <fixed IP address of unit> [Device Name]>set ipsubmask <IP Mask (default = 255.0.0.0)> [Device Name]>set ipgw <gateway IP address (default = 10.0.0.1)>...
Using the Command Line Interface Figure A-12 Results of “show wif” CLI command Set WEP Encryption for each Wireless Interface – 3 = wireless card in Slot A – 4 = wireless card in Slot B CAUTION Client stations must have the same encryption key to be able to communicate with the AP-2500 device. Each Wireless Interface can only support one Key Length (so each of the configured keys must have the same length).
[Device Name]>set snmprwpasswd <new password> (SNMP read/write password) [Device Name]>reboot 0 CAUTION Proxim strongly urges you to change the default passwords to restrict access to your network devices to authorized personnel. If you lose or forget your password settings, you can always perform the Factory Default Procedure.
Using the Command Line Interface Change your Wireless Interface Settings Enable/Disable Interference Robustness – 3 = wireless card in Slot A – 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> interrobust <enable/disable> This feature is only available for 802.11b wireless cards. Enable/Disable Closed System –...
Using the Command Line Interface NOTE The distance between APs should not be approximated. It is calculated by means of a manual Site Survey, in which an AP-2500 unit is set up and clients are tested throughout the area to determine signal strength and coverage, and local limits such as physical interference are investigated.
Using the Command Line Interface Parameter Tables Objects contain groups that contain both parameters and parameter tables. Use the following Tables to configure the Access Point. The Access Point CLI is under development as this document is being prepared; therefore, some table cells are blank where a feature has not yet been implemented or information needs validation.
Using the Command Line Interface • Passthrough Parameters - Specify free content or walled garden sites for unauthenticated users • Passthrough IP Table • Passthrough DNS Table • AAA Passthrough Port • Bandwidth Management Parameters • Billing Parameters - Configure billing plans and bill mirroring for internal authentication •...
Using the Command Line Interface Inventory Management Information Name Type System Inventory Management Subgroup Component Table Subgroup Component Interface Table Subgroup NOTE The inventory management commands display advanced information about the AP’s installed components. You may be asked to report this information to a technical representative if you contact customer support. Network Parameters Name Type...
Using the Command Line Interface DHCP Server Parameters Name Type DHCP Group DHCP Service Integer DHCP IP Upsell Integer Service DHCP Server Service Integer DHCP IP Pool Public Integer DHCP Server IP IpAddress DHCP Server Subnet IpAddress Mask DHCP Lease Pool IP IpAddress Start DHCP Lease Pool IP...
Using the Command Line Interface VLAN Parameters Name Type VLAN Group Status Integer VLAN ID Table Name Type VLAN ID Table Table Index Integer32 Identifier (ID) VlanId Interface Parameters Since the AP-2500 devices support two PC Card slots, we differentiate the two wireless interfaces by using the table index: —...
Using the Command Line Interface Name Type Medium Distribution Integer MAC Address PhyAddress Supported Data Rates Octet String Transmit Rate Integer32 Supported Frequency Channels Octet String Physical Layer Type Integer Regulatory Domain List DisplayString NOTE There is an inter-dependent relationship between the Distance between APs and the Multicast Rate. In general, larger systems operate a lower average transmit rates.
Using the Command Line Interface Wireless 802.11a Parameters Name Type Wireless Interfaces Group Network Name DisplayString Auto Channel Select (ACS) Integer DTIM Period Integer Operating Frequency Channel Integer RTS/CTS Medium Reservation Integer MAC Address PhyAddress Supported Data Rates Octet String Transmit Rate Integer32 Supported Frequency Channels...
Using the Command Line Interface Ethernet Interface Parameters Name Type Ethernet Interface Group Speed Integer MAC Address PhyAddress Management Parameters IP Access Table Parameters When creating table entries, you may either specify the argument name followed by argument value or simply entering the argument value.
Using the Command Line Interface SNMP Parameters Name Type SNMP Group SNMP Management Interface Bitmask Interface Bitmask Read Password DisplayString Read/Write Password DisplayString SNMP Trap Host Table SNMP Table Host Table Parameters When creating table entries, you may either specifying the argument name followed by argument value. CLI applies default values to the omitted arguments.
Using the Command Line Interface Serial Port Parameters Name Type Serial Group Baud Rate Integer Data Bits Integer Parity Integer Stop Bits Integer Flow Control Value HTTP (web browser) Parameters Name Type HTTP Group HTTP Management Interface Bitmask Interface Bitmask HTTP Password DisplayString HTTP Port...
Using the Command Line Interface NTP Parameters Name Type SNTP Group SNTP On Integer Primary SNTP DisplayString Server IP Secondary SNTP DisplayString Server IP Time Zone Setup Integer Date and Time DisplayString Daylight Saving Integer Adjustment Year Integer32 Month Integer32 (1..12) Values Access...
Using the Command Line Interface Integer32 (1..31) Hour Integer32 (0..23) Minutes Integer32 (0..59) Seconds Integer32 (0..59) Security Parameters NOTE The Security group is not currently implemented in the AP-2500. Name Type Security Group Configuration Mode Integer RADIUS Server Parameters Name AAA RADIUS AAA RADIUS Authentication On Primary RADIUS Authentication...
Page 217
Using the Command Line Interface Primary RADIUS Acct Server Secret Key Primary RADIUS Acct Server DNS Name Secondary RADIUS Accounting Server IP Secondary RADIUS Acct Server Port Secondary RADIUS Acct Server Secret Key Secondary RADIUS Acct Server DNS Name AAA RADIUS ISP Account Creation AAA RADIUS ISP Server URL AAA RADIUS ISP Account...
Using the Command Line Interface Encryption Parameters The following table details the WEP encryption parameters for the AP-2500. This information applies to both the 802.11a and the 802.11b wireless interfaces. Name Type Wireless Interfaces Group Security Encryption Status Integer Index Integer Encryption Key 1 DisplayString...
Using the Command Line Interface AAA Parameters The Authentication, Authorization and Accounting (AAA) module enables solution provider to provision, track, and bill new or returning subscribers. These parameters are shown in the following tables. Basic AAA Parameters Name Type AAA Group Group AAA Service Integer...
Using the Command Line Interface AAA Internal Authorization Parameters Name Type AAA Internal Group Authorization SSL Support Integer SSL Host Name DisplayString Size(0..31) SSL Portal Page Integer Redirection SSL Portal Page DisplayString Size(0..238) Enable User Name Integer and Password Allow New Integer Subscriber Credit Card Service...
Using the Command Line Interface URL Filtering Parameters Name Type URL Filtering Group URL Filtering On Integer URL Filtering IP Table Name Type URL Filtering IP Table Table URL Filtering IP Integer Table Index URL Filtering IP DisplayString Table Address Size(1..15) URL Filtering IP RowStatus...
Using the Command Line Interface ICC (Information Control Console) Parameters Name Type Group ICC On Integer Title to display on DisplayString ICC Console Size(0..238) ICC Logout Option Integer ICC Language Integer Option ICC Character Set Integer Option ISP Logo Button DisplayString Name Size(0..37)
Using the Command Line Interface ICC Banner Configuration The following table is for ICC Banner 1. The same parameters apply to banners 2 through 5 (simply change the 1 in each command to a different button number). Name Type ICC Banner 1 Name DisplayString Size(0..16) ICC Banner 1 URL...
Using the Command Line Interface Passthrough IP Table Name Type Passthru IP Table Table Passthru IP Table Integer Index Passthru IP Table IpAddress Address Passthru IP Table RowStatus Status Passthrough DNS Table Name Type Passthru DNS Table Table Passthru DNS Table Integer Index Passthru DNS Table...
Using the Command Line Interface Billing Parameters Name Type AAA Billing Option Group Intro Message DisplayString Size(0..140) Offer Message DisplayString Size(0..140) Policy Message DisplayString Size(0..117) Billing Rate Time Integer Unit Minimum Time Unit Integer Free Access Time Integer Max Free Access Integer Time Billing Mirroring Parameters...
Using the Command Line Interface Carbon Copy Server DisplayString URL One Size(1..238) Carbon Copy Server DisplayString Secret Key One Size(0..32) Carbon Copy Server Integer Port One Carbon Copy Server IpAddress IP Two Carbon Copy Server DisplayString URL Two Size(1..238) Carbon Copy Server DisplayString Secret Key Two Size(0..32)
Using the Command Line Interface Rate per Month DisplayString Size(0..32) Uplink Bandwidth Integer Downlink Bandwidth Integer DHCP Pool Integer Subscriber Messages Parameters Name Type AAA Subscriber Group Login UI Service Selection DisplayString Message Size(0..140) Existing User DisplayString Message Size(0..140) New User Message DisplayString Size(0..140) Contact Message...
Page 228
Using the Command Line Interface ISP Challenge DisplayString Size(0..218) Value Out of Range DisplayString Size(0..218) No Billing Options DisplayString Size(0..218) Internet Service Not DisplayString Available Size(0..218) Password DisplayString Unmatched Size(0..218) Wrong Password DisplayString Size(0..218) Too Many DisplayString Subscribers Size(0..218) Try Again DisplayString Size(0..218) User ID Not Found...
Using the Command Line Interface Subscriber Download Integer Bandwidth Credit Card DisplayString Confirmation Number Subscriber Status RowStatus Current Subscribers Table Name Type AAA Current Subscriber Table Table Subscriber Index Integer Subscriber MAC DisplayString Subscriber IP IpAddress Subscriber Port Integer Subscriber Name DisplayString Subscriber Upload Integer...
Using the Command Line Interface Miscellaneous Parameters Name Type Miscellaneous Group Partner Image Integer Splash Screen Partner Image DisplayString Filename Size(1..32) Maximum Integer Subscribers Allowed Enable PPTP Integer PPTP Session Idle Integer Timeout Enable IPSec Integer CLI Monitoring Parameters Using the “show” command with the following table parameters will display operating statistics for the AP-2500 (these are the same statistics that are described in –...
— These sample files can only be run from the AP’s Ethernet side; you can not use these files on a wireless client (subscriber). — These sample files are provided for illustration and testing purposes only. Proxim provides no guarantee that these files will function error-free.
XML Interface Specification URL GET A network device can send commands to the AP via a query string appended to a URL line (GET method). The query string is the string of characters following the question mark (?) at the end of the URL. For example, consider the following example illustrating a “user successful login”...
XML Interface Specification XML Response Form Format In response to a command, the AP returns an XML form in the following format: <USG RESULT="(RESULTCODE)" ID="(UI)" IP="(AP_IP_ADDR)"> [<ERROR_NUM>(error number)</ERROR_NUM>] [<ERROR_DESC>(error description)</ERROR_DESC>] <(tag_n) [tag_n_attr = "tag_n_attr_data"]>(data_n)</(tag_n)> </USG> where: (RESULTCODE) is either "OK" or "ERROR". (UI) is the AP ID.
XML Interface Specification AP Command Reference Add/Update User Sample file name: UserAdd.htm The specified user has been authorized for access and will be added to the AP’s Authorized Subscribers Table. Command: "USER_ADD" Command attr: "MAC_ADDR" Command attr_data: user MAC address (string) tag_1: "USER_NAME"...
XML Interface Specification Bandwidth Up Set the bandwidth up for an authorized user. Command: "SET_BANDWIDTH_UP" Command attr: "SUBSCRIBER" Command attr_data: User MAC address (string) tag_1: "BANDWIDTH_UP" data_1: (number measured in Kbps (i.e. for 128,000 bit per second, enter 128)) Returns: Standard response form Bandwidth Down Set the bandwidth down for an authorized user.
XML Interface Specification Query User Sample file name: UserQuery.htm The current User data is returned. Command: "USER_QUERY" tag_1: "USER" tag_1_attr: "ID_TYPE" tag_1_attr_data: "MAC_ADDR" or "USER_NAME" data_1: if ID_TYPE = "MAC_ADDR" then (User's MAC address) if ID_TYPE = "USER_NAME" then (user name) Returns: Standard response form tag_1:...
XML Interface Specification Commands For Reference Only The following commands are included for reference purposes only. They are not currently supported by the AP-2500. Set Room Access The specified room access mode is set. Command: "ROOM_SET_ACCESS" Command attr: "ROOM_NUMBER" Command attr_data: Room number (8 char. max string) tag_1: "ACCESS_MODE"...
XML Interface Specification User Payment User's authorization and payment is requested. PMS is not supported by the AP at this time. Command: "USER_PAYMENT" Command attr: "PAYMENT_METHOD" Command attr_data: "PMS" tag_1: "USER_NAME" data_1: (user name) tag_2: "PASSWORD" tag_2_attr: "ENCRYPT" tag_2_attr_data: "TRUE" or "FALSE" data_2: (user password) tag_3:...
XML Interface Specification External Authentication Procedure (Detailed) Whenever a subscriber tries to access the Internet, it must pass through the AP. The AP tracks all packets flowing through it by the source MAC address of the packet, which uniquely identifies the wireless card that the subscriber is using.
XML Interface Specification Sample XML Communications with the AP The following is an example of the commands to set access for a new subscriber with the following attributes: User Name: johndoe MAC address: 0050da554787 NOTE The following examples contain CRLFs and spacing for display clarity only. A query string must not contain any formatting or line-break characters.
CAUTION This is a “best effort” specification. Proxim cannot guarantee that following these guidelines will ensure trouble-free interoperability between the credit card clearing server and the AP-2500. Data sent by the AP-2500 to the credit card clearing server NOTE This example uses US dollars as the currency, but the AP-2500 supports any currency.
Credit Card Interface Specification 8. Merchant ID 9. Amount 10. URL to post silent reply 11. This field must be in the form and set to a value of TRUE to tell the system that it will be doing an ADC Relay Response transaction.
ORiNOCO AP-2500 User Guide ASCII Character Chart You can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F, a-f (case sensitive), and punctuation marks. Each ASCII character corresponds to two hexadecimal digits.
ORiNOCO AP-2500 User Guide Specifications In This Chapter • Hardware Specifications • Radio Specifications – 802.11b Channel Frequencies – 802.11a Channel Frequencies – Wireless Communication Range Hardware Specifications Physical Specifications AP-2500 Unit Dimensions (H x W x L) = 6.5 x 18.5 x 26 cm (2.5 x 7.25 x 10.25 in.) Weight = 1.75 kg (3.5 lb.)
Specifications Ethernet Interface 10/100 Base-T, RJ-45 female socket PCMCIA Interface PC Card Slot (A & B) = Standard PC Card slot for PC Card Serial Port Interface Connector Type = DB9, male Serial Cable = Standard RS-232C serial data cable, with a female DB-9 connector at each end Active Ethernet Interface Category 5, foiled, twisted pair cables must be used to ensure compliance with FCC Part 15, subpart B, Class B requirements...
Specifications Radio Specifications 802.11a radio certification is not available in all countries. Contact your sales representative for details. 802.11b radio certification is available in the US/Canada (FCC), Japan (VCCI), Europe (ETSI), and France. 802.11b Channel Frequencies The following table shows the channel allocations that vary from country to country. Values listed in bold font indicate default channels and frequencies.
Specifications Wireless Communication Range The range of the wireless signal is related to the composition of objects in the radio wave path, and the transmit rate of the wireless communication. Communications at a lower transmit range may travel longer distances. NOTE The range values listed in the Communications Range Chart are typical distances as measured at the development laboratories.
For each ORiNOCO product, describe the behavior of the device’s LEDs when the problem occurs NOTE The latest software and documentation is available for download at http://www.proxim.com/. If necessary, you can contact Proxim Technical Support directly. However, all queries should first be directed to your local supplier. •...
Technical Support For the Caribbean and Latin America: Phone: 1-866-ORiNOCO (1-866-674-6626) 1-661-367-2230 E-mail: CALAsupport@orinocowireless.com For Asia Pacific: Phone: +1 661-367-2230 E-mail: APACsupport@orinocowireless.com For Europe, the Middle East, and Africa (EMEA): Your local supplier in the EMEA region is trained to give you the support you require. Local suppliers have direct access to the ORiNOCO Technical Support Center and will help you in every way they can.
Need help?
Do you have a question about the ORiNOCO AP-2500 and is the answer not in the manual?
Questions and answers