Proxim ORiNOCO AP-2500 User Manual

Proxim network router user guide
Hide thumbs Also See for ORiNOCO AP-2500:
Table of Contents

Advertisement

Quick Links

ORiNOCO AP-2500
User Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ORiNOCO AP-2500 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Proxim ORiNOCO AP-2500

  • Page 1 ORiNOCO AP-2500 User Guide...
  • Page 2: Document Conventions

    5,875,179; 6,006,090; 5,809,060; 6,075,812; 5,077,753. This user’s guide and the software described in it are copyrighted with all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form by any means without the written permission of Proxim Corporation.
  • Page 3: Table Of Contents

    ORiNOCO AP-2500 User Guide Contents Introduction ........... .13 Introducing the AP-2500 .
  • Page 4 Contents Configure Network Names for the Wireless Interfaces ......36 Configure the Ethernet Interface ..........37 Set WEP Encryption for each Wireless Interface .
  • Page 5 Contents Disabling the AP’s DHCP Server ..........65 IP Upsell .
  • Page 6 Contents Encryption ..............99 VPN .
  • Page 7 Contents Authorized Subscribers ..........153 Authorized Subscribers Table and the Current Subscribers Table .
  • Page 8 Contents Client Connection Problems ..........175 Client Manager Finds No Connection.
  • Page 9 Contents Command Line Interface (CLI) Variations ........186 Bootloader CLI.
  • Page 10 Contents Set the Multicast Rate ........... 203 Set Ethernet Speed and Transmission Mode .
  • Page 11 Contents URL Filtering Parameters ........... 221 URL Filtering IP Table.
  • Page 12 External Authentication Procedure (Detailed) ....... . 240 Sample XML Communications with the AP ........241 C Credit Card Interface Specification .
  • Page 13: Introduction

    Active Ethernet Introducing the AP-2500 The ORiNOCO AP-2500 is an all-in-one wireless access point and access gateway specifically designed for public hotspot providers and enterprises. It is a cost-effective solution for small and medium public hotspots, such as coffee shops, hotels, and airport lounges, and it enables enterprises to offer corporate visitors immediate wireless network access regardless of their existing network or ISP settings.
  • Page 14: Dynamic Address Translation (Dat)

    Introduction • Outgoing e-mail (SMTP) Redirection: You can configure the AP-2500 to redirect outgoing e-mail messages to a specified Simple Mail Transfer Protocol (SMTP) server. Subscribers can send e-mails as if they were connected to their home network. See SMTP Redirection •...
  • Page 15 Introduction One of the key features of DAT is a technique known as Network Address Translation (NAT). NAT is an Internet standard that allows a device (like the AP-2500) to use a single public IP address to provide Internet connectivity to multiple devices (which would otherwise each need to have its own public IP address to communicate with the network).
  • Page 16: Networking Features

    Introduction Networking Features The AP-2500 provides wireless access to the Internet for hotspot subscribers. This means that your customers can surf the Internet and send e-mails from anywhere within range of the Access Point without having to install extra wires or cabling.
  • Page 17: 802.11A And 802.11B Networks

    Introduction 802.11a and 802.11b Networks The AP-2500 supports both the IEEE 802.11a and 802.11b standards. The AP-2500 can be used with the following combinations of 802.11a and 802.11b radio cards: • One 802.11b card (second slot empty) • One 802.11a 5 GHz upgrade kit (second slot empty) •...
  • Page 18: List Of Networking Features

    Introduction List of Networking Features The IEEE standards that governs wireless communications are different for the 2.4 GHz band and the 5 GHz band. The table below compares the software features supported for each type of card in the AP-2500 device: Feature Number of stations per BSS HTTP Server...
  • Page 19 Introduction The following table provides detailed information on the differences between the 802.11a and 802.11b feature sets. Physical Layer Type (Modulation Type) Auto Channel Select Frequency Channel Transmit Rate Distance Between APs Multicast Rate Interference Robustness Closed System Load Balancing Medium Density Distribution 2.4 GHz (802.11b)
  • Page 20: The Product Package

    Introduction The Product Package Each AP-2500 comes with the following: • AP processor module • AP cover • Mounting plate • Mounting hardware – Four 3.5 mm x 40 mm screws – Four 6 mm x 35 mm plugs • One power supply (if you purchased the Power Supply model) •...
  • Page 21: Web Browser Interface

    IEEE 802.11 MIB Proxim provides these MIB files on the AP-2500 CD. You need to compile one or more of the above MIBs into your SNMP program’s database before you can manage the AP-2500. Refer to the documentation that came with your SNMP manager for instructions on how to compile MIBs.
  • Page 22: Wireless Network Manager

    SNMP program. Also, refer to the MIB files for information on the parameters available via SNMP. Wireless Network Manager The Wireless Network Manager is Proxim’s premier management tool for Access Points and Outdoor Routers. It provides a single management interface that lets an IT manager configure, manage, upgrade, and troubleshoot thousands of wireless devices from anywhere in the world.
  • Page 23: Installation & Basic Configuration

    ORiNOCO AP-2500 User Guide Installation & Basic Configuration In This Chapter This chapter describes how to install the AP-2500 hardware and perform basic configuration operations. • Prerequisites • Hardware Installation • Initialization (ScanTool) • Basic Configuration • Download the Latest Software •...
  • Page 24: Hardware Installation

    Installation & Basic Configuration Hardware Installation Refer to the steps below that correspond to your configuration: • AP-2500 with Active Ethernet • AP-2500 with Power Supply • Installing a Card in Slot B • 5 GHz Kit Installation • Installing the AP-2500 in a Plenum AP-2500 with Active Ethernet Follow these installation steps if you purchased an AP with Active Ethernet: 1.
  • Page 25 6. Determine the best location for your device. NOTE Proxim recommends that you perform a Site Survey prior to determine the installation location for your AP-2500. For information about how to conduct a Site Survey, contact your local reseller. 7. Once you have chosen a final location for your unit, mount the wall bracket and the processor module and place the cover onto the unit as shown.
  • Page 26: Ap-2500 With Power Supply

    Installation & Basic Configuration AP-2500 with Power Supply Follow these installation steps if you purchased an AP with a power supply: 1. Clip the power supply into the mounting bracket. 2. Plug the AC power cord into the power supply. Figure 2-5 Install the power supply 3.
  • Page 27 Installation & Basic Configuration Figure 2-7 Slide a PC Card into the AP NOTE If you want to install a second 802.11b wireless card in Slot B, you will first need to remove the slot cover (which is provided for plenum-rating purposes). See install a 5 GHz kit, see 5 GHz Kit 6.
  • Page 28: Installing A Card In Slot B

    Installation & Basic Configuration NOTE Proxim recommends that you perform a Site Survey prior to determine the installation location for your AP-2500. For information about how to conduct a Site Survey, contact your local reseller. 10. Once you have chosen a final location for your unit, mount the wall bracket and the processor module and place the cover onto the unit as shown.
  • Page 29 Installation & Basic Configuration Figure 2-11 Remove the AP cover 4. Remove the power and Ethernet cables from the unit. 5. Position the antenna adapter, card inward, facing the top of the unit (see diagram) and insert the 5 GHz card into the available card slot.
  • Page 30: Installing The Ap-2500 In A Plenum

    Installation & Basic Configuration 8. Position the antenna for best reception: • at a 90° angle for flat surface mounts • at a 180° angle for wall mounts 9. Re-attach the power and Ethernet cabling. 10. Re-install the cover and mount the AP back in place. 11.
  • Page 31: Initialization (Scantool)

    Installation & Basic Configuration Initialization (ScanTool) ScanTool is a software utility that is included on the installation CD-ROM. The tool automatically detects the Access Points installed on your network, regardless of IP address, and lets you configure each unit’s IP settings. In addition, you can use ScanTool to download new software to an AP that does not have a valid software image installed (see Download a New Image Using...
  • Page 32 Ethernet after turning it on). • Proxim recommends that you assign the AP-2500 a static public IP address (that is, an address that is routable on the Internet). Some of the Public Space features will not work properly if the AP’s IP address changes at a later date.
  • Page 33: Basic Configuration

    Installation & Basic Configuration Basic Configuration Once you have a valid IP Address assigned to your AP-2500 and you can communicate with it over an Ethernet network, use your web browser to configure the AP-2500. This section describes how to perform some basic functions and configure some of the AP’s basic settings to get you started.
  • Page 34 Installation & Basic Configuration Figure 2-17 Enter Network Password Figure 2-18 Web Interface’s System Status Screen...
  • Page 35: Set System Name, Location And Contact Information

    NOTE For best results, Proxim recommends that you assign the AP-2500 a static public IP address that is routable on the Internet. If you use a dynamic IP address, some of the Public Space features may not work properly if the IP address changes at a later date.
  • Page 36: Configure Network Names For The Wireless Interfaces

    Installation & Basic Configuration Figure 2-20 Network IP Configuration Configure Network Names for the Wireless Interfaces During boot-up, the AP automatically detects the number and type of radio cards installed and updates the wireless configuration parameters accordingly. Many of the wireless settings can be left at their default value. However, you may want to change the Network Name for each wireless interface.
  • Page 37: Configure The Ethernet Interface

    Installation & Basic Configuration Configure the Ethernet Interface 1. Click Configure > Interfaces > Ethernet. 2. Set the Speed and Transmission Mode for the AP’s Ethernet interface. • This is the speed and duplex at which the AP communicates with your Ethernet network. By default, the AP automatically detects the settings of the hub or switch to which it is connected.
  • Page 38: Set And Change Passwords

    Installation & Basic Configuration 5. Select the Key that the Access Point will use to encrypt outgoing data from the Encrypt Data Transmissions Using drop-down menu. By default, this parameter is set to Key 1. 6. Repeat these steps for the second slot (if applicable). 7.
  • Page 39: Configure The Date And Time

    Installation & Basic Configuration NOTE For security purposes Proxim recommends that you change ALL PASSWORDS from the default “public” immediately to restrict access to authorized personnel. If you lose or forget your password settings, you can always perform the Reset to Factory Default Configure the Date and Time The AP boots up using January 1, 1970 as the date and 00:00:00 as the time.
  • Page 40: Reboot The Ap

    Download the Latest Software Proxim periodically releases updated software for the AP on its Web site at http://www.proxim.com/. Proxim recommends that you check the Web site for the Web site for the latest updates after you have installed and initialized the unit.
  • Page 41: Download Updates From Your Tftp Server Using The Cli Interface

    Nomadix MIB). See The file that contains the Network settings uses the Config file type and can use any file name. Proxim recommends that you use config.sys as the file name (this is the name used in the instructions below).
  • Page 42: Downloading Configuration Files

    Installation & Basic Configuration Downloading Configuration Files Follow these steps to download configuration files to the AP: 1. Copy config.sys and current.txt to your TFTP server’s root directory (if necessary). 2. Login to the AP’s Web browser interface. 3. Click Commands > Download. 4.
  • Page 43: Ap-2500 Authentication Methods

    ORiNOCO AP-2500 User Guide AP-2500 Authentication Methods The AP-2500 is a versatile Access Point for hotspot locations that supports multiple authentication methods. The unit includes all of the features necessary for a user to set up a hotspot quickly and easily without requiring servers or advanced Web design skills.
  • Page 44: Internal Authentication

    AP-2500 Authentication Methods Internal Authentication In this configuration, the AP-2500 provides all authentication services to subscribers using its Internal Web Server (IWS). This is the easiest configuration to design and implement but it offers limited functionality. The following diagram illustrates a network topology using the AP’s internal authentication services: Figure 3-1 Network Using Internal Web Server NOTE...
  • Page 45: End User Experience

    AP-2500 Authentication Methods NOTE If you want to provide the user with the ability to log in or out of the connection, you need to use a RADIUS server. See Internal Authentication with RADIUS End User Experience The following procedure details the experience of the typical customer if you configure the AP-2500 to use internal authentication: 1.
  • Page 46 AP-2500 Authentication Methods • You can disable the AP’s DHCP server if there is another DHCP server that you want to use instead. See Disabling the AP’s DHCP Server 4. Configure IP Upsell, if desired. See • In general, it costs more to obtain public IP addresses from your ISP due to limited availability. If you have a pool of public IP addresses that you can distribute, you can offer standard customers less expensive private IP addresses and premium customers public IP addresses.
  • Page 47 AP-2500 Authentication Methods NOTE Advanced users can also manage the AP from a network computer using XML commands (tasks such as adding and deleting users). See information on XML commands. 12. Click OK to save your changes to the AAA settings. 13.
  • Page 48 — ChainFusion (in Asia) -- — Authorize.net’s WebLink solution (U.S.) -- — As of the release of this documentation, Authorize.net is discontinuing support for WebLink. Proxim is working to provide support for Authorize.net’s Simple Integration Solution (SIM) method in the next AP-2500 firmware release.
  • Page 49 If you want properly configured subscribers to send mail without being redirected, enable only the Misconfigured option. In general, Proxim recommends that you enable both options. Also, you should never enable Properly Configured and disable Misconfigured (this combination defeats the purpose of SMTP Redirection).
  • Page 50 AP-2500 Authentication Methods Configure the Amount Paid field, if desired. The AP automatically fills in this field after a successful credit card purchase. Configure the optional User Alias fields, if desired. These are for notes only and do not have an impact on the authentication process.
  • Page 51: Internal Authentication With Radius

    AP-2500 Authentication Methods Internal Authentication with RADIUS In this configuration, the AP-2500 provides all of the authentication services described in also communicates with a Remote Authentication Dial-In User Service (RADIUS) server on the network to determine if a user is valid. RADIUS is an authentication and accounting protocol that is used by many ISPs. The RADIUS server maintains a large central list of subscribers and their attributes (such as the maximum bandwidth allowed for a specific customer) that it communicates back to the AP-2500.
  • Page 52: Notes Concerning Radius

    AP-2500 Authentication Methods 3. Client sends AP its login credentials (User name/password or MAC address). 4. AP checks its Authorized Subscribers the RADIUS server. 5. The RADIUS server authenticates the user based on the client’s login credentials and notifies AP of successful authentication.
  • Page 53 AP-2500 Authentication Methods 1. Install the RADIUS application on your network server, if necessary. • IAS is included with Windows 2000 Server. If you want to install IAS, follow these steps: Click Start > Control Panel. Double-click the Add/Remove Programs icon. Click the Add/Remove Windows Components option.
  • Page 54 AP-2500 Authentication Methods 16. Return to the Internet Authentication Services window and right-click the Remote Access Policies entry in the navigation tree. 17. Select New Remote Access Policy from the drop-down menu. 18. Enter a Policy friendly name in the field provided and click Next. 19.
  • Page 55: Configure The Ap-2500

    AP-2500 Authentication Methods Configure the AP-2500 After you have installed and configured your RADIUS server, you need to configure your AP to communicate with the RADIUS server and provide internal authentication. Follow these steps: 1. Configure the AP-2500 to use its Internal Web Server for authentication. See Configuration Instructions for step-by-step instructions.
  • Page 56 AP-2500 Authentication Methods 5. Configure the Retransmission Options. • Select a Retransmission Method. This option is only valid if you have configured settings for a Secondary Server. — Failover: The AP make multiple attempts to reach the Primary Server. If the Primary Server fails to respond (after the specified number of Retransmission Attempts), the AP falls over to the Secondary Server.
  • Page 57 AP-2500 Authentication Methods • Place a check mark in the Send NAS Port Type box if you want to include the port type in the messages sent to the RADIUS server. • Set the NAS Port Type to 19 if you enabled Send NAS Port Type. —...
  • Page 58: External Authentication

    AP-2500 Authentication Methods External Authentication The External Web Server (EWS) interface was designed for customers who want to develop and use their own content. It allows for more customization than if using the Internal Web Server (IWS). By using an EWS (External Web Server) you can authenticate subscribers externally;...
  • Page 59: Configuration Instructions

    AP-2500 Authentication Methods • The customer must try to access a valid Web site to initiate a redirect. Entering an unreachable URL or invalid Web address will not initiate a redirect to the External portal page. • Customers who try to access e-mail first will not have a connection. Customers need to login via a Web browser first.
  • Page 60 AP-2500 Authentication Methods • Some applications require a public IP address to function properly over the Internet (such as certain VPN applications, on-line gaming, and Web hosting). Customers who require a public IP address may be willing to a premium for this service. •...
  • Page 61 If you want properly configured subscribers to send mail without being redirected, enable only the Misconfigured option. In general, Proxim recommends that you enable both options. Also, you should never enable Properly Configured and disable Misconfigured (this combination defeats the purpose of SMTP Redirection).
  • Page 62: Network Parameters

    ORiNOCO AP-2500 User Guide Network Parameters In This Chapter This chapter describes all of the network operating parameters that can be configured using the Access Point’s Web browser interface (that is, the parameters accessible after clicking the Configure button). •...
  • Page 63: Network

    NOTE For best results, Proxim recommends that you assign the AP-2500 a static public IP address that is routable on the Internet. If you use a dynamic IP address, some of the Public Space features may not work properly if the IP address changes at a later date.
  • Page 64: Overview Of Dhcp Server Parameters

    Network Parameters Overview of DHCP Server Parameters You can configure and view the following parameters within the DHCP Server Configuration screen: • Enable DHCP Server: Place a check mark in the box provided to enable DHCP Server functionality. Remove the check mark if you do not want the AP to act as a DHCP server.
  • Page 65: Configuring The Ap To Serve Public Ip Addresses

    Network Parameters Figure 4-1 DHCP Server Configuration Screen Configuring the AP to Serve Public IP Addresses If you have a pool of public IP addresses and do not want the AP to perform NAT for subscribers who have DHCP client support enabled, follow these steps (note that this is not a typical configuration for the device): 1.
  • Page 66: Ip Upsell

    Network Parameters 5. In the Relay Type field, select the type of addresses your DHCP server will assign to subscribers: Public or Private. 6. In the DHCP Relay Server IP field, enter the IP address of your DHCP server. 7. Configure the DHCP Relay Agent IP as follows: •...
  • Page 67 Network Parameters Figure 4-2 Enabling IP Upsell 11. Configure the billing plans that you want to offer. – At least one plan should offer private IP addresses and at least one plan should offer public IP addresses (you can configure up to six different billing plans). –...
  • Page 68: Dns Server

    Network Parameters • If you use external authentication, you can add an IP_Type attribute to the User_Add XML command and specify the address type (public or private), as shown in the following example: <USG COMMAND=”USER_ADD” MAC_ADDR=”0050da554787”> <USER_NAME>johndoe</USER_NAME> <PASSWORD ENCRYPT=”FALSE”>doededoe</PASSWORD> <EXPIRY_TIME UNITS=”SECONDS”>3600</EXPIRY_TIME> <ROOM_NUMBER></ROOM_NUMBER>...
  • Page 69: Vlan

    Network Parameters 4. Enter the DNS Domain name. This name is provided by your ISP or network administrator. 5. Enter up to three DNS Server IP addresses in the fields provided. You must configure at least the Primary DNS Server IP address. These IP addresses should be provided by your ISP or network administrator. 6.
  • Page 70: Vlan Workgroups And Traffic Management

    Network Parameters VLAN Workgroups and Traffic Management Traditional, dual-slot access point devices that are not VLAN-capable typically broadcast and multicast traffic over both wireless cells. This process wastes wireless bandwidth and degrades throughput performance. In comparison, the dual-slot, VLAN-capable AP-2500 device is designed to efficiently manage delivery of broadcast, multicast, and unicast traffic to wireless clients.
  • Page 71: Setting Up Independent Vlan Workgroups

    Network Parameters Figure 4-5 VLAN Configuration Screen (Wireless A and Wireless Tagged with Different VLAN IDs) 1. Login to the Web interface. 2. Click Configure > Interfaces > Wireless A. 3. Set the SSID for card A. 4. Click the Wireless B tab. 5.
  • Page 72: Setting Up A Single Vlan Workgroup

    Network Parameters Figure 4-6 VLAN Configuration Screen (Slot A tagged; Slot B untagged) 1. Login to the Web interface. 2. Click Configure > Interfaces > Wireless A. 3. Set the SSID for card A. 4. Click the Wireless B tab. 5.
  • Page 73: Interfaces

    Network Parameters Figure 4-7 VLAN Configuration Screen (Wireless A and Wireless B Use Same VLAN ID) 1. Login to the Web interface. 2. Click Configure > Interfaces > Wireless A. 3. Set the SSID for card A. 4. Click the Wireless B tab. 5.
  • Page 74: Wireless (802.11A)

    Network Parameters Wireless (802.11a) You can configure and view the following parameters within the Wireless Interface Configuration screen for an 802.11a radio: NOTE You must reboot the Access Point before any changes to these parameters take effect. • Physical Interface Type: This field reports: “802.11a (OFDM 5 GHz).” OFDM stands for Orthogonal Frequency Division Multiplexing;...
  • Page 75: Dynamic Frequency Selection (Dfs)

    Network Parameters Dynamic Frequency Selection (DFS) 802.11a devices sold in Europe use a technique called Dynamic Frequency Selection (DFS) to automatically select an operating channel. During boot-up, the AP scans the available frequency and selects a channel that is free of interference.
  • Page 76 Network Parameters • Distance Between APs: Set to Large, Medium, Small, Microcell, or Minicell depending on the site survey for your system. By default, this parameter is set to Large. The distance value is related to the Multicast Rate (described next). In general, a larger distance between APs means that your clients operate a slower data rates (on average).
  • Page 77: Distance Between Aps

    ORiNOCO 802.11a/b ComboCard or a non-ORiNOCO client with the AP. Proxim recommends that you enable this parameter, particularly if your subscribers have ORiNOCO clients on your wireless network (leaving this parameter enabled should not adversely affect the performance of any ORiNOCO 802.11a/b ComboCards or non-ORiNOCO cards on your network).
  • Page 78: Multicast Rate

    Network Parameters CAUTION You should conduct a Site Survey to determine the strength of the wireless connection on the borders of your hotspot. Contact your reseller for information on how to conduct a Site Survey. Multicast Rate The multicast rate determines the rate at which broadcast and multicast packets are transmitted by the Access Point to the wireless network.
  • Page 79: Wireless Distribution System (Wds)

    Network Parameters Wireless Distribution System (WDS) A Wireless Distribution System (WDS) creates a link between two APs over their radio interfaces. This link relays traffic from one AP that does not have Ethernet connectivity to a second AP that has Ethernet connectivity. Two AP-2500s cannot establish a WDS link with each other because each AP treats its wireless interfaces as subscriber interfaces only.
  • Page 80 Network Parameters • The WDS link shares the communication bandwidth with the clients. Therefore, while the maximum data rate for the Access Point’s cell is still 11 Mbits/sec, client throughput will decrease when the WDS link is active. The connection over the link will be slower than if the client were communicating directly with the AP-2500. •...
  • Page 81: Ethernet

    For best results, Proxim recommends that you configure the Ethernet setting to match the speed and transmission mode of the device the Access Point is connected to (such as a hub or switch). If in doubt, leave this setting at its default, auto-speed-auto-duplex.
  • Page 82: Ip Access Table

    Network Parameters NOTE For security purposes Proxim recommends changing ALL PASSWORDS from the default “public” immediately, to restrict access to your network devices to authorized personnel. If you lose or forget your password settings, you can always perform the IP Access Table The IP Access Table limits management access over the Ethernet to the IP addresses or range of IP addresses specified in the table.
  • Page 83: Telnet Configuration Settings

    Flow Control: Select either None (default) or Xon/Xoff (software controlled) data flow control. NOTE To avoid potential problems when communicating with the AP through the serial port, Proxim recommends that you leave the Flow Control setting at None (the default value).
  • Page 84: Network Time Protocol (Ntp)

    Network Parameters • Serial Data Bits: This is a read-only field and displays the number of data bits used in serial communication (8 data bits by default). • Serial Parity: This is a read-only field and displays the number of parity bits used in serial communication (no parity bits by default).
  • Page 85: Static Mac

    Network Parameters • To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the Status drop-down menu. • An entry’s status must be enabled in order for the protocol to be subject to the filter. The default filters are all disabled by default.
  • Page 86 Network Parameters • Examples: — If you set the Wired MAC Address to 00:03:8F:00:00:00 and you want to block all cards that begin with 00:03:8F, enter FF:FF:FF:00:00:00 as the Wired Mask. This will block any cards whose MAC address begins with those digits, ranging from 00:03:8F:00:00:00 to 00:03:8F:FF:FF:FF. —...
  • Page 87: Alarms

    Network Parameters Alarms This category has two sub-categories. – Groups – Alarm Host Table Groups There are seven alarm groups that can be enabled or disabled: • Enable Configuration Alarms • Enable Security Alarms • Enable Wireless Alarms • Enable Operational Alarms •...
  • Page 88: Bridge

    Network Parameters Bridge A traditional access point operates as a transparent bridge between your wired and wireless networking devices. The AP-2500 takes this a step further and provides Public Space features that facilitate hotspot operation (see Space Features Public Space Parameters You can disable these Public Space features by enabling the AP’s Bridge Mode.
  • Page 89: Subscribers And Mac Access Control

    Network Parameters 9. Select an Operation Type from the drop-down menu. This determines how the stations identified in the MAC Access Control Table are filtered. • If set to Passthru, only the addresses listed in the Control Table will pass through the AP. •...
  • Page 90: Radius

    Network Parameters RADIUS • RADIUS Overview • Unique AP-2500 RADIUS Client Features • RADIUS Messages and RADIUS Attributes • Sample RADIUS Transmissions • RADIUS Configuration Parameters RADIUS Overview RADIUS is a proven carrier-class protocol to perform accurate time and volume-based billing. The RADIUS protocols are defined in RFCs 2865 (Authentication) and 2866 (Accounting).
  • Page 91: Radius Messages And Radius Attributes

    Network Parameters Data Volume Information Transmission (bytes sent/received) The AP’s RADIUS client implementation allows a hotspot operator to accurately track the exact number of bytes sent and received by a subscriber based on: • User Name • IP address (Framed IP) •...
  • Page 92 Network Parameters Access-Accept Parsing – Reply-Message • Used for challenge/response authentication; since the AP uses the Password Authentication Protocol (PAP) for authentication purposes, this attribute is not currently in use. – State • Used for challenge/response authentication; since the AP uses the Password Authentication Protocol (PAP) for authentication purposes, this attribute is not currently in use.
  • Page 93 Network Parameters Acct-Request – Username – Called-Station-Id – Calling-Station-Id – Acct-Status-Type (Start/Stop/Alive) – Acct-Session-ID – Acct-Output-Octets • Number of octets (bytes) sent by subscriber. – Acct-Input-Octets • Number of octets (bytes) received by subscriber. – Acct-Output-Packets • Number of packets sent by subscriber. –...
  • Page 94: Sample Radius Transmissions

    Network Parameters Sample RADIUS Transmissions These are actual accounting logs from a Lucent Navis RADIUS server with all VSAs enabled. Accounting Start Message Thu Aug 29 12:45:32 2002 User-Name = “testflo” NAS-IP-Address = 64.209.75.102 NAS-Port = 0 Acct-Status-Type = Start Acct-Session-Id = “98000004”...
  • Page 95 Network Parameters Accounting Alive Message Caused by Explicit Service Plan Change Thu Aug 29 12:49:20 2002 User-Name = “testflo” NAS-IP-Address = 64.209.75.102 NAS-Port = 0 Acct-Status-Type = Alive Acct-Session-Id = “98000004” Acct-Output-Octets = 36440 Acct-Input-Octets = 512195 Acct-Output-Packets = 284 Acct-Input-Packets = 630 Nomadix-Bw-Up = 56 Nomadix-Bw-Down = 56...
  • Page 96: Radius Configuration Parameters

    Network Parameters RADIUS Configuration Parameters You can configure the AP to communicate with up to four different RADIUS servers: • Primary Authentication Server • Back-up Authentication Server • Primary Accounting Server • Back-up Accounting Server NOTE You must configure the settings for at least one Authentication server before configuring the settings for an Accounting server.
  • Page 97: Miscellaneous Options

    Network Parameters • Server IP Address: The IP address of the RADIUS server (separate fields for Authentication and Accounting). • Server DNS Name: The DNS Name of the RADIUS server (separate fields for Authentication and Accounting). NOTE Enter either the Server IP Address or the Server DNS Name, but not both. •...
  • Page 98 Network Parameters • Enable RADIUS Profile Caching: When enabled, the AP maintains the user’s information in the Subscribers Table (State: Pending) after a user logs out or times out. If the user attempts to re-connect, he can access the service again without being prompted to re-enter his user name and password. NOTE This option uses the subscriber card’s MAC address to re-validate the user.
  • Page 99: Encryption

    Network Parameters Encryption The IEEE 802.11 standards specify an optional encryption feature, known as Wired Equivalent Privacy or WEP, that is designed to provide a wireless LAN with a security level equal to what is found on a wired Ethernet network. WEP encrypts the data portion of each packet exchanged on an 802.11 network using an Encryption Key (also known as a WEP Key).
  • Page 100: Special Considerations Regarding Vpn Support

    Network Parameters Special Considerations Regarding VPN Support The most common VPN protocol is IPSec. When a subscriber who has a private IP address (assigned via NAT) attempts to create a VPN session, the AP-2500 performs a mapping between the subscriber’s private IP address and the AP’s public IP address.
  • Page 101: Public Space Parameters

    ORiNOCO AP-2500 User Guide Public Space Parameters In this Chapter This chapter describes all of the Public Space operating parameters that can be configured using the Access Point’s Web browser interface (that is, the parameters accessible after clicking the PublicSpace or Subscriber button).
  • Page 102: Home Page Redirection (Hpr)

    Public Space Parameters Home Page Redirection (HPR) This tab is used to redirect the subscriber’s browser to a specified home page following successful authentication. To redirect subscribers to a specified page before authentication, use the Portal Page feature with internal authentication (see Portal Page) or use external authentication (see...
  • Page 103: Authentication, Authorization, And Accounting (Aaa)

    Public Space Parameters Figure 5-1 Home Page Redirection Configuration Authentication, Authorization, and Accounting (AAA) The AP-2500 uses AAA services to authenticate, authorize, and subsequently bill subscribers for their use of the customer’s network. This section describes the parameters that can be configured from the AAA tab. See Authentication Methods for detailed information on the available authentication methods.
  • Page 104: Aaa Services With An External Web Server (Ews)

    Public Space Parameters • Enable AAA Services: Enable this option to support any of the authentication methods described in Authentication Methods. When disabled, wireless users will have access to the Internet without authentication; this is the default setting. • Enable XML Interface: Enable this option to configure the AP to support XML (Extensible Markup Language) commands received from the XML Sender IP Address.
  • Page 105: Aaa Services With The Internal Web Server (Iws)

    Public Space Parameters AAA Services with the Internal Web Server (IWS) This screen lets you set the configuration options when authorizing subscribers using the IWS (that is, when PublicSpace > AAA> Basic > Authentication Method is set to Internal). The IWS is “flashed” into the system’s memory and the subscriber’s login page is served directly from the AP-2500.
  • Page 106 You need to download three keys to the AP-2500 before enabling SSL. You must create two of these keys yourself: a Private Key file (cakey.pem) and a Public Key file (server.pem). Proxim provides the third key (cacert.pem), on the AP’s CD in the SSL_KEY folder (it is also included with software updates posted on Proxim’s Web site).
  • Page 107 You have now created two of the three key files required to enable SSL on the AP-2500. The third key file (cacert.pem) is included on the AP’s CD and with software updates posted on Proxim’s Web site. Enabling SSL on the AP-2500 1.
  • Page 108: Portal Page

    Public Space Parameters 14. Click OK. • Result: The TFTP operation begins. A new TFTP Operation Status window opens. 15. Click Close after the TFTP operation is complete. 16. Enter server.pem in the File Name field. 17. Leave File Type set to Generic. 18.
  • Page 109 Public Space Parameters Figure 5-5 Internal Authentication with Portal Page The following sections provide basic instructions for using a Portal Page. Setting up a Web Server (Microsoft IIS) If you have a Windows 2000 Server, follow these basic steps to setup the IIS Web server. NOTE For detailed information, refer to Windows 2000’s on-line Help documentation.
  • Page 110 Secure Socket Layer http://[Certificate DNS Name]:1112/usg/login?OS=http://www.anyWebSite.com/ Proxim provides two sample Portal Pages for the AP-2500 to help hotspot operators who have limited Web design experience get started. These sample pages are in the CD’s Docs/samples/ folder. Alternatively, you can download the sample pages from Proxim’s Web site at http://www.proxim.com/.
  • Page 111 Public Space Parameters Deciding which sample is right for your hotspot depends on the customer experience you want to provide. The sections below describe how the customer interacts with the AP-2500 under the following scenarios: – No Portal Page – HTML Portal Page –...
  • Page 112 Public Space Parameters 7. Following successful authentication, the customer is redirected to the page he originally requested or to the page you specified in the Home Page Redirection URL field (if enabled; see • You can use the confirm.asp sample page to display a second custom screen that can provide additional information to your subscribers following successful authentication.
  • Page 113 Public Space Parameters Figure 5-6 Portal Page Configuration 6. Click the Passthrough tab. 7. Place a check mark in the Enable Passthrough Address box, if necessary. 8. Add the DNS names for the Web sites in your walled garden to the Passthrough DNS Table. •...
  • Page 114 Public Space Parameters Figure 5-7 Sample Passthrough Tables 10. Click OK. 11. Click the HPR tab. 12. Place a check mark in the Enable Home Page Redirection box. 13. Enter the Web site to which you want to direct customers following successful authentication in the Redirection URL field (for example, http://www.yahoo.com/).
  • Page 115 Public Space Parameters Figure 5-8 Portal Page Configuration 6. Click the Passthrough tab. 7. Place a check mark in the Enable Passthrough Address box, if necessary. 8. Add the DNS names for the Web sites in your walled garden to the Passthrough DNS Table. •...
  • Page 116 Public Space Parameters Figure 5-9 Sample Passthrough Tables 10. Click OK. NOTE If you disable Home Page Redirection, your subscribers will be automatically redirected to the page they originally requested (following successful authentication). The instructions below describe how to enable Home Page Redirection;...
  • Page 117: Smart Client

    Public Space Parameters Figure 5-10 HPR (with Parameter Passing) 15. Click OK. 16. Click Commands > Reboot. 17. Click OK to reboot the AP so your changes will take effect. 18. Test the Portal Page feature by turning on a wireless computer and launching its Web browser. Note that the computer must not be a current or active subscriber (that is, the wireless card’s MAC address cannot appear in the Authorized Subscribers Table or the Current Subscribers Table) for this test to work properly.
  • Page 118 Public Space Parameters Figure 5-11 AP Communicating with Hotspot Aggregator The following steps describe how you should configure the AP-2500 if you are partnered with a hotspot aggregator: 1. Follow the installation steps described in • Configure the RADIUS Authentication and Accounting settings as required by your hotspot aggregator. —...
  • Page 119: User Name & New Subscribers

    Public Space Parameters Figure 5-12 AAA Internal Settings if Enabling Smart Client 3. Click OK to save the settings. 4. Reboot the AP. User Name & New Subscribers The User Name and New Subscribers options work in conjunction to determine who can connect to the Internet and what credentials the AP uses to authenticate users.
  • Page 120: Credit Card Services

    Public Space Parameters Figure 5-13 Sample Login Screen Presented to Subscribers Sample scenarios include: • If you are renting cards to customers, disable User Name and New Subscribers. Only cards whose MAC addresses are entered in the Authorized Subscriber Table will have access to the Internet. •...
  • Page 121 • Authorize.net’s WebLink solution (U.S.) -- — As of the release of this documentation, Authorize.net is discontinuing support for WebLink. Proxim is working to provide support for Authorize.net’s Simple Integration Solution (SIM) method in the next AP-2500 firmware release.
  • Page 122 You need a software program installed on your server that will listen for packets from the AP on the specified port. Proxim provides a sample Bill Mirror Server Daemon in the CD’s Docs/samples/ folder. This program is provided for illustration and testing purposes only.
  • Page 123 Public Space Parameters Enabling Bill Mirroring Follow these steps the enable bill mirroring: 1. Login to the AP’s Web browser interface. 2. Click Subscriber > Billing > Mirroring. Figure 5-14 Credit Card Mirroring Screen 3. Place a check mark in the Enable Mirroring box. 4.
  • Page 124 Public Space Parameters 9. Enter the following settings for the primary server, secondary server (if any), and carbon copy server that will receive billing records from the AP: • IP: Enter the server’s IP address in the field provided. • URL: This field is optional.
  • Page 125: Logging

    Public Space Parameters Example of a Positive Acknowledgment: <AP COMMAND=”RMTLOG_ACK”> <ACK_VALUE>OK</ACK_VALUE> <IP_ADDR>205.23.43.12</IP_ADDR> <ERROR_CODE>1</ERROR CODE> </AP> Example of a Negative Acknowledgment: <AP COMMAND=”RMTLOG_ACK”> <ACK_VALUE>ERROR</ACK_VALUE> <IP_ADDR>205.23.43.12</IP_ADDR> <ERROR_CODE>5</ERROR CODE> </AP> Format for each field: RESULT_VALUE: OK or ERROR IP: standard IP format ERROR_CODE: 1 for OK, or any other number for an error. Logging You can configure the AP-2500 to send system events and/or AAA events to network servers using the Syslog protocol.
  • Page 126: Configuration Instructions

    Public Space Parameters Configuration Instructions Follow these steps to enable the AP’s syslog features: 1. Login to the AP’s Web browser interface. 2. Click PublicSpace > Logging. 3. Place a check mark in the System Log box to enable the logging of system message. 4.
  • Page 127: Sample Logging Events

    Public Space Parameters Sample Logging Events • AAA Messages – Credit Card • AAA Messages – Internal Web Server – User Name Login • AAA Messages – RADIUS • AAA Messages – XML • Bill Mirror • DHCP • • Home Page Redirect •...
  • Page 128 Public Space Parameters AAA Messages – XML Message USG_AAA: 4007 AAA_Interface added_by_administrator 00:50:04:29:37:56 Exp_time:24 hrs 0 min USG_AAA: 4800 AAA_XML Memory_updated__State_valid 00:50:04:29:37:56 USG_AAA: 4006 AAA_Interface Removed_by_administrator a Bill Mirror Message RMTLOG: rmtlogXmlTcpSend: Connect error RMTLOG: rmtlogXmlTcpSend: transmission Ok DHCP Message DHCP: dhcpsStart: dst port (68) not DHCP server port DHCP: dhcpsStart: Invalid DHCP options packet DHCP: dhcpsStart: invalid IP header...
  • Page 129 Public Space Parameters Message USG_DNS:ndxDNSRedirectionTable::processFromNetwork(): could not get subid USG_DNS: ndxDNSRedirectionTable::processFromSubscriber(): dnsIsQueryA() failed USG_DNS: ndxService::processKnownNames(): dnsIsQueryA() failed ndxDNSRedirectionTable::processFromNetwork(): duplicate reply or reply without request USG_DNS: dnsRedirectFromSub(): GetDNSServerIP failed USG_DNS:ndxDNSRedirectionTable::dnsSubPktForRedirection Table(): GetSubId() failed USG_DNS: ndxDNSService::FromSubscriber(): Unable to determine if redirection is needed Home Page Redirect Message USG_HRS: 3009 HRS_Object...
  • Page 130 Public Space Parameters Other AAA Messages Message AAA: 4121 AAA_lookup Tried to add blacklisted IP 210.155.227.244 or MAC 00:50:E8:00:07:99 USG_AAA: 4006 AAA_Interface Removed_by_administrator 00:00:78:02:1D:70 USG_AAA: 4006 AAA_Interface Removed_by_administrator aforum USG_AAA: 4007 AAA_Interface Added_by_administrator ahughes Exp_time:Unlimited USG_AAA: 4009 AAA_Interface Updated_by_administrator 00:03:47:F0:8F:72 Exp_time:Unlimited USG_AAA: 4013 AAA_Interface Cache_entry_removed 00:03:47:F0:8F:72 bytes:165304 USG_AAA: 4102 AAA_lookup Time_expired...
  • Page 131: Url Filtering

    Public Space Parameters URL Filtering The AP-2500 can restrict access to specified web sites based on URLs. URL filtering will block access to these list of sites and/or domains. You can restrict access to specific Web sites based on IP address, DNS name (for example www.yahoo.com) or DNS Domain name (for example, *.yahoo.com, meaning all sites under the yahoo.com hierarchy, such as finance.yahoo.com).
  • Page 132: Url Filtering By Ip Address

    Public Space Parameters URL Filtering by IP Address 1. Login to the AP’s Web browser interface. 2. Click PublicSpace > URLFilter. 3. Place a check mark in the Enable URL Filtering box. 4. Click the Add button above the URL Filtering by IP Address heading. 5.
  • Page 133: Icc Appearance

    Public Space Parameters ICC Appearance The ICC screen contains the following items: • Title Bar — Appears at the top of the screen near the Web browser name. • Ad Banner — You can specify up to 5 different banners that share this space. •...
  • Page 134: Customizing The Icc

    Public Space Parameters Billing Plans Figure 5-19 ICC Screen -- Credit Card Authenticated by RADIUS If a subscriber has been authenticated by a RADIUS server (if using Internal authentication with RADIUS), the ICC includes a Logout button so customers can end their session. The ICC also displays the subscriber’s current billing plan in the Dynamic Billing Plan Selection field.
  • Page 135 Public Space Parameters Figure 5-21 ICC Setup Screen 9. Place a check mark in the Enable ICC box. 10. Enter the Title for the ICC. • This is the name that appears at the top of the ICC next to the Web browser name. 11.
  • Page 136 Public Space Parameters 12. Configure the ISP Logo Button settings. • Enter the Name or Title of the ISP Button in the ISP Logo Button’s Name/Text field. — This is the text that will appear in the text bar at the bottom of the ICC when a subscriber rolls over the icon with his/her mouse cursor.
  • Page 137: Potential End User Issues

    Public Space Parameters • Configure the optional banner Start Time and Stop Time. — The Start Time is in hh:mm AM/PM format and determines when the banner will be displayed on the ICC. After the start time elapses, the banner appears in the ICC for the specified Banner Duration along with the other enabled banners.The banner is disabled before the start time.
  • Page 138: Passthrough Addresses

    NOTE In general, Proxim recommends that you enable both options. Also, you should never enable Properly Configured and disable Misconfigured (this combination defeats the purpose of SMTP Redirection).
  • Page 139: Passthrough Dns Table

    Public Space Parameters The DNS and IP Address tables can hold up to 50 entries each. The AAA port option supports only passthrough port. • Passthrough DNS Table • Passthrough IP Table • Passthrough AAA Port Figure 5-24 IP/DNS Passthrough Table Passthrough DNS Table 1.
  • Page 140: Passthrough Ip Table

    Public Space Parameters Passthrough IP Table 1. Login to the AP’s Web browser interface. 2. Click PublicSpace > Passthrough > IP/DNS. 3. Place a check mark in the Enable Passthrough Address box. 4. Click the Add button below the Passthrough IP Table heading. 5.
  • Page 141 Public Space Parameters 4. Enter the speed of the connection between the AP and the Ethernet network in the Bandwidth uplink (to network) speed field (in Kbps). 5. Enter the speed of the connection between the AP and the wireless clients in the Bandwidth downlink (to subscribers) speed field (in Kbps).
  • Page 142: Billing Options For Subscribers

    Public Space Parameters Billing Options for Subscribers The Web browser interface’s Subscriber button links to three screens that allow you to configure Subscriber billing plans (Billing tab), login and error messages (Messages tab), and the Authorized Subscribers database (Authorized tab). NOTE The Billing and Messages options are used in conjunction with the Internal Web Server.
  • Page 143 Public Space Parameters Figure 5-27 Default New User Screen that Appears to Subscribers • Edit the Introduction Message. — The default Introduction Message is “Please Choose from the following plans.” • Edit the Offer Message. — The default Offer Message is “How many days of Internet access would you like to purchase?” •...
  • Page 144 Public Space Parameters 7. Click OK. 8. Click the Plan 0 tab. 9. Configure the settings for billing plan 0. • Place a check mark in the Enable Plan box to make the plan active. It will appear as an option in the New User screen presented to subscribers.
  • Page 145: Creating A Free Billing Plan

    Public Space Parameters Creating a Free Billing Plan Under some circumstances you may want to offer free Internet access to your subscribers. For example, you might offer a low bandwidth connection for free but charge for faster connections. Follow these steps to make one of your six billing plans a free billing plan: 1.
  • Page 146: Subscriber Messages

    Public Space Parameters Figure 5-30 Subscribers Can Select a Plan that Offers Free Internet Access Subscriber Messages The Web browser interface’s Subscriber button links to three screens that allow you to configure Subscriber billing plans (Billing tab), login and error messages (Messages tab), and the Authorized Subscribers database (Authorized tab).
  • Page 147 Public Space Parameters Figure 5-31 Subscriber Login Messages 3. Edit the login messages as necessary. • Service Selection Message • Existing User Name Message — Appears on the main login screen when the User Name option is enabled in PublicSpace > AAA > Internal.
  • Page 148 Public Space Parameters Figure 5-32 Sample Login Screen Presented to Subscribers 4. JavaScript support on the AP’s internal Web pages are enabled by default. Remove the check mark from the Enable JavaScript to disable this feature. 5. Configure the “Remember Me” cookie options. See 6.
  • Page 149 Public Space Parameters Figure 5-33 Subscriber Messages Screen 12. Click the Sub Msgs 2 tab. 13. Edit the subscriber messages as necessary. • If this is not correct, please go back to the previous page • and make the necessary changes •...
  • Page 150: Enabling Cookie Support

    Public Space Parameters 16. Edit the subscriber messages as necessary. • Thank you for your business • We are verifying your account. Please wait — This message appears if RADIUS is enabled. The AP displays this page while it wait for an authentication response from the RADIUS server.
  • Page 151: Changing The Login Screen Logos

    Public Space Parameters 4. Edit the Remember Me Message. • This message appears on the login screen to let the user know that his/her user name and password can be stored for future login attempts. • The default message is “Remember my username and password.” 5.
  • Page 152 Public Space Parameters Figure 5-35 Login Screen with Custom Logo Follow these steps to add your own partner image and logo to the AP: 1. Create the image files that you want to add to the login pages. Keep in mind the following: •...
  • Page 153: Authorized Subscribers

    Public Space Parameters Authorized Subscribers The AP-2500 stores information about subscribers in the Authorized Subscribers Table. You can view the table by clicking Subscriber > Authorized within the Web browser interface. Figure 5-36 Authorized Subscribers Table The table is the AP’s internal database of authorized users; it can hold up to 50 entries. The list is populated by one of three methods: 1.
  • Page 154: Authorized Subscribers Table And The Current Subscribers Table

    Public Space Parameters • Custom fields for internal use (User Alias 1 or User Alias 2) • Upstream and Downstream bandwidth settings • Status — Should be Active at all times. — Change to Destroy to delete an entry. — The other options are not applicable when using the Web browser interface. Authorized Subscribers Table and the Current Subscribers Table The Authorized Subscribers Table differs from the screen.
  • Page 155: Removing A Subscriber

    Public Space Parameters 5. If authorizing a user based on MAC address (in other words, the PublicSpace > AAA > Internal > Enable User Name option is disabled), enter the MAC address of the subscriber’s wireless card in the field provided. •...
  • Page 156: Monitor Information

    ORiNOCO AP-2500 User Guide Monitor Information In This Chapter This chapter describes the statistics that can be viewed using the Access Point’s Web browser interface (that is, the options accessible after clicking the Status or Monitor button). • System Status: Displays basic information about the Access Point’s operating status.
  • Page 157: System Status

    Monitor Information System Status System Status is the first screen to appear each time you connect to the Web browser interface. You can also return to this screen by clicking the Status button. Figure 6-1 System Status Screen Each section of the System Status screen provides the following information: •...
  • Page 158: Version

    Monitor Information Version From the Web browser interface, click the Monitor button and select the Version tab. The list displayed provides you with information that may be pertinent when calling Technical Support. With this information, your Technical Support representative can verify compatibility issues and make sure the latest software are loaded. This screen displays the following information for each Access Point component: •...
  • Page 159: Icmp

    Monitor Information ICMP This tab provides statistical information for both received and transmitted messages directed to the Access Point. For example, if you ping the AP from another computer, the AP reports the ping requests (Echos) and replies (Echo Reply) on this screen (as shown in the example below).
  • Page 160: Ip/Arp Table

    Monitor Information IP/ARP Table This tab provides information based on the Address Resolution Protocol (ARP), which maps IP Addresses to MAC Addresses. The AP adds an entry to this list for each station with which the AP directly communicates. This includes devices that manage the AP, ping the AP, and/or receive traps from the AP.
  • Page 161: Learn Table

    Monitor Information Learn Table This tab displays information relating to network bridging. It reports the MAC address for each node that the AP has learned is on the network and the interface on which the node was detected. There can be up to 2,000 entries in the Learn Table.
  • Page 162: Current Subscribers Table

    Monitor Information Current Subscribers Table This table lists all of the active subscribers that are communicating with the AP. (See the Current Subscribers Table for an explanation of how this table differs from the Authorized Subscribers Table.) This table can hold up to 50 entries. Users who are associated with the AP wirelessly but are unauthenticated appear in the table with State set to Pending.
  • Page 163: Dat Sessions

    Monitor Information A subscriber is removed from the Current Subscribers Table under the following circumstances: • The network administrator changes the subscriber’s Status from Active to Destroy. • The subscriber has logged out (applicable to RADIUS-authenticated users and RADIUS Profile Caching is disabled).
  • Page 164: Interfaces

    Monitor Information Interfaces This tab displays statistics for the Ethernet and wireless interfaces. The Operational Status can be up, down, or testing. Figure 6-8 Interface Monitoring...
  • Page 165: Link Test (802.11B Only)

    Monitor Information Link Test (802.11b Only) This tab displays information on the quality of the wireless link to clients and other 802.11b APs in the Wireless Distribution System. During a Link Test, the Access Point and the selected device exchange a series of packets to test the strength of the connection.
  • Page 166 Monitor Information • Noise (dBm): The strength of the noise detected at the receiver reported in dBm (decibels referenced to 1 milliwatt). The displayed value is the running average since the start of the test and is reported as a negative number.
  • Page 167: Commands

    ORiNOCO AP-2500 User Guide Commands In This Chapter This chapter describes the commands that can be issued using the Access Point’s Web browser interface (that is, the options accessible after clicking the Commands button). • Download: Download files from a TFTP server to the Access Point.
  • Page 168: File Type Overview

    This File Type only supports the Download command. You cannot upload the AP’s firmware image file to a TFTP server. – Proxim periodically makes new firmware available on its Web site that you can download to the AP using a TFTP server; see Download the Latest Software •...
  • Page 169: Upload

    Commands Upload Use the Upload tab to upload Configuration and image files from the AP-2500 to the TFTP server. NOTE The Download and Upload commands are from the AP’s perspective. In other words, to send files to the AP, use the Download command; to obtain files from the AP, use the Upload command. The TFTP server must be running and configured to point to the directory to which you want to copy the uploaded file.
  • Page 170: Reboot

    Commands Reboot Use the Reboot tab to save configuration changes (if any) and reset the AP-2500. Entering a value of 0 (zero) causes an immediate reboot. Note that Reset, described below, does not save configuration changes. CAUTION Rebooting the AP-2500 will cause all users who are currently connected to lose their connection to the network until the AP-2500 has completed the restart process and resumed operation.
  • Page 171: Help Link

    Commands Figure 7-4 Reset to Factory Defaults Command Screen Help Link To open Help, click the Help button on any display screen. During initialization, the Access Point’s on-line help files are downloaded to the default location: C:\Program Files\ORiNOCO\AP2500\HTML\index.htm. If you want to place these files on a shared drive, copy the Help Folder to the new location, and then specify the new path in the Help Link box.
  • Page 172: Troubleshooting

    ORiNOCO AP-2500 User Guide Troubleshooting In This Chapter • Troubleshooting Concepts • Symptoms and Solutions • Connectivity Issues • AP-2500 Unit Will Not Boot - No LED Activity • Serial Link Does Not Work • Ethernet Link Does Not Work •...
  • Page 173: Troubleshooting Concepts

    Troubleshooting NOTE This section helps you locate problems related to the AP-2500 device setup. For details about RADIUS, TFTP, Serial communications program (such as HyperTerminal), Telnet applications or web browsers, please refer to their respective documentation. Troubleshooting Concepts The following list identifies important troubleshooting concepts and topics. The most common initialization and installation problems relate to IP Addressing.
  • Page 174: Ethernet Link Does Not Work

    Troubleshooting Ethernet Link Does Not Work 1. Double-check the physical network connections. Use a known-good unit to make sure the network connection is present. Once you have the AP-2500 IP Address, you can use the “Ping” command over Ethernet to test the IP Address.
  • Page 175: Html Help Files Do Not Appear

    Troubleshooting HTML Help Files Do Not Appear 1. Verify that the HTML Help files are installed in the default directory listed in the 2. If the Help files are not located in this folder, contact your network administrator to find out where the Help files are located on your server.
  • Page 176: Vlan Operation Issues

    Troubleshooting VLAN Operation Issues Verifying Proper Operation of the VLAN Feature The correct VLAN configuration can be verified by “pinging” both wired and wireless hosts from both sides of the AP-2500 device and the network switch. Traffic can be “sniffed” on both the wired (Ethernet) and wireless (WDS) backbones (if configured).
  • Page 177: Recovery Procedures

    Troubleshooting Recovery Procedures The most common installation problems relate to IP Addressing. For example, without the TFTP server IP address, you will not be able to download an AP Image to the AP-2500. IP Address management is fundamental. We suggest you create a chart to document and validate the IP addresses for your system.
  • Page 178: Download Procedure

    Download Procedure Follow these steps to use ScanTool to download a software image to an Access Point with a missing image: 1. Download the latest software from http://www.proxim.com/. 2. Copy the latest software updates to your TFTP server. 3. Launch ScanTool.
  • Page 179 Troubleshooting 4. Open your terminal emulation program (like HyperTerminal) and set the following connection properties: • Com Port: <COM1, COM2, etc., depending on your computer> • Baud rate: 9600 • Data Bits: 8 • Stop bits: 1 • Flow Control: None •...
  • Page 180: Setting Ip Address Using Serial Port And Normal Cli

    Troubleshooting Setting IP Address using Serial Port and Normal CLI Use the following procedure to set an IP Address over the serial port using the normal CLI. The network administrator typically provides the AP-2500 IP Address. Hardware and Software Requirements •...
  • Page 181: System Alarms (Traps)

    Troubleshooting 6. Change the IP Address and other network values using set and reboot CLI commands, similar to the example dialog below (use your own IP Address and IP Mask). Result: After each entry the CLI reminds you to reboot; however wait to reboot until all commands have been entered.
  • Page 182: Image Alarms

    AP-2500 for backup or copying, and you can download the files for configuration and AP Image upgrades. The TFTP software is located on the ORiNOCO AP-2500 Installation CD-ROM. If a TFTP server is not configured and running, you will not be able to download and upload images and configuration files to/from the AP-2500.
  • Page 183: Led Indicators

    Troubleshooting LED Indicators POWER ETHERNET Green Green flash with data activity Amber n/a (not applicable) Amber Green PC CARD A PC CARD B INIDICATION Green flash Green flash Normal Operation with data activity with data activity Amber Amber Rebooting Missing or bad AP Image if amber after reboot Power On Self Test (POST) running PC Card incompatible on indicated interface PC Card failure on indicated interface...
  • Page 184: In This Chapter

    ORiNOCO AP-2500 User Guide Using the Command Line Interface In This Chapter This section provides details for the Command Line (CLI) Interface used to manage an AP-2500 device. CLI commands can be used to initialize, configure, and manage network operation of the Access Point.
  • Page 185: Prerequisite Skills And Knowledge

    Using the Command Line Interface Prerequisite Skills and Knowledge To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts, network access infrastructures, and client-server relationships. In addition, you should be familiar with software setup procedures for typical network operating systems and servers.
  • Page 186: Cli Error Messages

    Using the Command Line Interface CLI Error Messages The following table describes the error messages associated with improper inputs or expected CLI behavior. Error Message % Syntax error % Invalid command % Invalid parameter name % Invalid parameter value % Invalid table index % Invalid table parameter % Invalid table parameter value % Read only parameter...
  • Page 187: Cli Command Types

    Using the Command Line Interface The following lists display the results of using the help and show commands in the Bootloader CLI: [DeviceName]>help<CR> Figure A-1 Results of “help” bootloader CLI command [DeviceName]>show<CR> sysname ipaddrtype ipaddr ipsubmask ipgw tftpipaddr tftpfilename CLI Command Types This guide divides CLI Commands into two categories: Operational and Parameter Control.
  • Page 188: (List Commands)

    Using the Command Line Interface ? (List Commands) This command has varied uses to display commands and parameters, depending on the operation in which it is used. The following table lists each operation and provides a basic example. Following the table are detailed examples and display results for each operation.
  • Page 189: Example 3B. Display Parameters Based On Letter Sequence

    Using the Command Line Interface Figure A-4 Result of “set ?” CLI command Example 3b. Display parameters based on letter sequence This example shows entries for parameters that start with the letter “i”. The more letters you enter, the fewer the results returned.
  • Page 190: Done, Exit, Quit

    Using the Command Line Interface After entering one parameter, you may add another "?" to the new CLI line see the next parameter prompt, and so on until you enter all parameters. The following example shows how this is used for the "download" Command. The last part of the example shows the completed download Command ready for execution.
  • Page 191: History

    Using the Command Line Interface Figure A-7 Results of “help<space>” CLI command 2. Complete command description and command usage can be provided by: [Device Name]>help <command name> [Device Name]><command name> help history Shows content of Command History Buffer. The Command History Buffer stores command statements entered in the current session.
  • Page 192: Search

    Using the Command Line Interface search Lists the members of the specified table. This list corresponds to the table information displayed in the HTTP Interface. In this example, the CLI returns the same table items that are displayed in the HTTP Interface’s IP Access Table. [Device Name]>...
  • Page 193: Parameter Control Commands

    Using the Command Line Interface Parameter Control Commands The following sections cover each CLI Command, and include several tables showing parameter properties. The two Parameter Control Commands are show and set. These allow you to view (show) all parameters and statistics, and to change (set) parameters.
  • Page 194: Example 4 - Enable, Disable, Or Delete A Table Entry Or Row

    Using the Command Line Interface NOTE Some tables use a different syntax. See Example 4 - Enable, Disable, or Delete a table entry or row In this example you would like to manage the second table row/entry. Syntax: [Device Name]>set <Table> index status <enable, disable, delete> [Device Name]>set <Table>...
  • Page 195: Example 6 - Show Individual And Table Parameters

    Using the Command Line Interface Example 6 - Show Individual and Table Parameters 1. View a single parameter Syntax: [Device Name]>show <parameter name> Example: [Device Name]> show ipaddr Result: Displays the Access Point IP Address. Figure A-10 Result of “show ipaddr” CLI Command 2.
  • Page 196: Using Strings

    Using the Command Line Interface • Deletion – The table name is required. – The table index is required – for table deletion the index should be the index of the entry to be deleted. – The reserved word delete or destroy is required. There are some differences between table entry add and delete operations among the available tables.
  • Page 197: Configuring Objects That Require Reboot

    Using the Command Line Interface Configuring Objects that Require Reboot Certain objects supported by the AP require the device to be rebooted in order for the changes to take effect. In order to inform the end-user of this behavior, the CLI shall provide informational messages when the user has configured an object or object(s) that requires the device to be rebooted.
  • Page 198: Configuring The Ap-2500 Unit Using Cli Commands

    (Result: HyperTerminal sends a line return at the end of each line of code.) Enter the Telnet password (default is public). NOTE Proxim recommends changing your default passwords immediately. To perform this operation using CLI commands, refer to Change Log Into the AP-2500 Unit using Telnet The CLI commands can be used to access, configure, and manage your AP-2500 device using Telnet or a terminal emulation application, such as HyperTerminal.
  • Page 199: Set Static Ip Address For The Ap-2500 Device

    Using the Command Line Interface Figure A-11 Result of “show system” CLI Command Set Static IP Address for the AP-2500 device [Device Name]>set ipaddrtype static [Device Name]>set ipaddr <fixed IP address of unit> [Device Name]>set ipsubmask <IP Mask (default = 255.0.0.0)> [Device Name]>set ipgw <gateway IP address (default = 10.0.0.1)>...
  • Page 200: Set Wep Encryption For Each Wireless Interface

    Using the Command Line Interface Figure A-12 Results of “show wif” CLI command Set WEP Encryption for each Wireless Interface – 3 = wireless card in Slot A – 4 = wireless card in Slot B CAUTION Client stations must have the same encryption key to be able to communicate with the AP-2500 device. Each Wireless Interface can only support one Key Length (so each of the configured keys must have the same length).
  • Page 201: Change Passwords

    [Device Name]>set snmprwpasswd <new password> (SNMP read/write password) [Device Name]>reboot 0 CAUTION Proxim strongly urges you to change the default passwords to restrict access to your network devices to authorized personnel. If you lose or forget your password settings, you can always perform the Factory Default Procedure.
  • Page 202: Change Your Wireless Interface Settings

    Using the Command Line Interface Change your Wireless Interface Settings Enable/Disable Interference Robustness – 3 = wireless card in Slot A – 4 = wireless card in Slot B [Device Name]>set wif <3 or 4> interrobust <enable/disable> This feature is only available for 802.11b wireless cards. Enable/Disable Closed System –...
  • Page 203: Set The Multicast Rate

    Using the Command Line Interface NOTE The distance between APs should not be approximated. It is calculated by means of a manual Site Survey, in which an AP-2500 unit is set up and clients are tested throughout the area to determine signal strength and coverage, and local limits such as physical interference are investigated.
  • Page 204: Configure Management Ports

    Using the Command Line Interface Configure Management Ports [Device Name]>set snmpifbitmask <0, 1, 4, 8, 15 (see below)> [Device Name]>set httpifbitmask <0, 1, 4, 8, 15 (see below)> [Device Name]>set telifbitmask <0, 1, 4, 8, 15 (see below)> Choose from the following values: Interface bitmask Description 0 = disable (all interfaces)
  • Page 205: Parameter Tables

    Using the Command Line Interface Parameter Tables Objects contain groups that contain both parameters and parameter tables. Use the following Tables to configure the Access Point. The Access Point CLI is under development as this document is being prepared; therefore, some table cells are blank where a feature has not yet been implemented or information needs validation.
  • Page 206: System Parameters

    Using the Command Line Interface • Passthrough Parameters - Specify free content or walled garden sites for unauthenticated users • Passthrough IP Table • Passthrough DNS Table • AAA Passthrough Port • Bandwidth Management Parameters • Billing Parameters - Configure billing plans and bill mirroring for internal authentication •...
  • Page 207: Inventory Management Information

    Using the Command Line Interface Inventory Management Information Name Type System Inventory Management Subgroup Component Table Subgroup Component Interface Table Subgroup NOTE The inventory management commands display advanced information about the AP’s installed components. You may be asked to report this information to a technical representative if you contact customer support. Network Parameters Name Type...
  • Page 208: Dhcp Server Parameters

    Using the Command Line Interface DHCP Server Parameters Name Type DHCP Group DHCP Service Integer DHCP IP Upsell Integer Service DHCP Server Service Integer DHCP IP Pool Public Integer DHCP Server IP IpAddress DHCP Server Subnet IpAddress Mask DHCP Lease Pool IP IpAddress Start DHCP Lease Pool IP...
  • Page 209: Vlan Parameters

    Using the Command Line Interface VLAN Parameters Name Type VLAN Group Status Integer VLAN ID Table Name Type VLAN ID Table Table Index Integer32 Identifier (ID) VlanId Interface Parameters Since the AP-2500 devices support two PC Card slots, we differentiate the two wireless interfaces by using the table index: —...
  • Page 210: Wireless Distribution System (Wds) Parameters

    Using the Command Line Interface Name Type Medium Distribution Integer MAC Address PhyAddress Supported Data Rates Octet String Transmit Rate Integer32 Supported Frequency Channels Octet String Physical Layer Type Integer Regulatory Domain List DisplayString NOTE There is an inter-dependent relationship between the Distance between APs and the Multicast Rate. In general, larger systems operate a lower average transmit rates.
  • Page 211: Wireless 802.11A Parameters

    Using the Command Line Interface Wireless 802.11a Parameters Name Type Wireless Interfaces Group Network Name DisplayString Auto Channel Select (ACS) Integer DTIM Period Integer Operating Frequency Channel Integer RTS/CTS Medium Reservation Integer MAC Address PhyAddress Supported Data Rates Octet String Transmit Rate Integer32 Supported Frequency Channels...
  • Page 212: Ethernet Interface Parameters

    Using the Command Line Interface Ethernet Interface Parameters Name Type Ethernet Interface Group Speed Integer MAC Address PhyAddress Management Parameters IP Access Table Parameters When creating table entries, you may either specify the argument name followed by argument value or simply entering the argument value.
  • Page 213: Snmp Parameters

    Using the Command Line Interface SNMP Parameters Name Type SNMP Group SNMP Management Interface Bitmask Interface Bitmask Read Password DisplayString Read/Write Password DisplayString SNMP Trap Host Table SNMP Table Host Table Parameters When creating table entries, you may either specifying the argument name followed by argument value. CLI applies default values to the omitted arguments.
  • Page 214: Serial Port Parameters

    Using the Command Line Interface Serial Port Parameters Name Type Serial Group Baud Rate Integer Data Bits Integer Parity Integer Stop Bits Integer Flow Control Value HTTP (web browser) Parameters Name Type HTTP Group HTTP Management Interface Bitmask Interface Bitmask HTTP Password DisplayString HTTP Port...
  • Page 215: Ntp Parameters

    Using the Command Line Interface NTP Parameters Name Type SNTP Group SNTP On Integer Primary SNTP DisplayString Server IP Secondary SNTP DisplayString Server IP Time Zone Setup Integer Date and Time DisplayString Daylight Saving Integer Adjustment Year Integer32 Month Integer32 (1..12) Values Access...
  • Page 216: Security Parameters

    Using the Command Line Interface Integer32 (1..31) Hour Integer32 (0..23) Minutes Integer32 (0..59) Seconds Integer32 (0..59) Security Parameters NOTE The Security group is not currently implemented in the AP-2500. Name Type Security Group Configuration Mode Integer RADIUS Server Parameters Name AAA RADIUS AAA RADIUS Authentication On Primary RADIUS Authentication...
  • Page 217 Using the Command Line Interface Primary RADIUS Acct Server Secret Key Primary RADIUS Acct Server DNS Name Secondary RADIUS Accounting Server IP Secondary RADIUS Acct Server Port Secondary RADIUS Acct Server Secret Key Secondary RADIUS Acct Server DNS Name AAA RADIUS ISP Account Creation AAA RADIUS ISP Server URL AAA RADIUS ISP Account...
  • Page 218: Encryption Parameters

    Using the Command Line Interface Encryption Parameters The following table details the WEP encryption parameters for the AP-2500. This information applies to both the 802.11a and the 802.11b wireless interfaces. Name Type Wireless Interfaces Group Security Encryption Status Integer Index Integer Encryption Key 1 DisplayString...
  • Page 219: Aaa Parameters

    Using the Command Line Interface AAA Parameters The Authentication, Authorization and Accounting (AAA) module enables solution provider to provision, track, and bill new or returning subscribers. These parameters are shown in the following tables. Basic AAA Parameters Name Type AAA Group Group AAA Service Integer...
  • Page 220: Aaa Internal Authorization Parameters

    Using the Command Line Interface AAA Internal Authorization Parameters Name Type AAA Internal Group Authorization SSL Support Integer SSL Host Name DisplayString Size(0..31) SSL Portal Page Integer Redirection SSL Portal Page DisplayString Size(0..238) Enable User Name Integer and Password Allow New Integer Subscriber Credit Card Service...
  • Page 221: Url Filtering Parameters

    Using the Command Line Interface URL Filtering Parameters Name Type URL Filtering Group URL Filtering On Integer URL Filtering IP Table Name Type URL Filtering IP Table Table URL Filtering IP Integer Table Index URL Filtering IP DisplayString Table Address Size(1..15) URL Filtering IP RowStatus...
  • Page 222: Icc (Information Control Console) Parameters

    Using the Command Line Interface ICC (Information Control Console) Parameters Name Type Group ICC On Integer Title to display on DisplayString ICC Console Size(0..238) ICC Logout Option Integer ICC Language Integer Option ICC Character Set Integer Option ISP Logo Button DisplayString Name Size(0..37)
  • Page 223: Icc Banner Configuration

    Using the Command Line Interface ICC Banner Configuration The following table is for ICC Banner 1. The same parameters apply to banners 2 through 5 (simply change the 1 in each command to a different button number). Name Type ICC Banner 1 Name DisplayString Size(0..16) ICC Banner 1 URL...
  • Page 224: Passthrough Ip Table

    Using the Command Line Interface Passthrough IP Table Name Type Passthru IP Table Table Passthru IP Table Integer Index Passthru IP Table IpAddress Address Passthru IP Table RowStatus Status Passthrough DNS Table Name Type Passthru DNS Table Table Passthru DNS Table Integer Index Passthru DNS Table...
  • Page 225: Billing Parameters

    Using the Command Line Interface Billing Parameters Name Type AAA Billing Option Group Intro Message DisplayString Size(0..140) Offer Message DisplayString Size(0..140) Policy Message DisplayString Size(0..117) Billing Rate Time Integer Unit Minimum Time Unit Integer Free Access Time Integer Max Free Access Integer Time Billing Mirroring Parameters...
  • Page 226: Billing Plans Configuration

    Using the Command Line Interface Carbon Copy Server DisplayString URL One Size(1..238) Carbon Copy Server DisplayString Secret Key One Size(0..32) Carbon Copy Server Integer Port One Carbon Copy Server IpAddress IP Two Carbon Copy Server DisplayString URL Two Size(1..238) Carbon Copy Server DisplayString Secret Key Two Size(0..32)
  • Page 227: Subscriber Messages Parameters

    Using the Command Line Interface Rate per Month DisplayString Size(0..32) Uplink Bandwidth Integer Downlink Bandwidth Integer DHCP Pool Integer Subscriber Messages Parameters Name Type AAA Subscriber Group Login UI Service Selection DisplayString Message Size(0..140) Existing User DisplayString Message Size(0..140) New User Message DisplayString Size(0..140) Contact Message...
  • Page 228 Using the Command Line Interface ISP Challenge DisplayString Size(0..218) Value Out of Range DisplayString Size(0..218) No Billing Options DisplayString Size(0..218) Internet Service Not DisplayString Available Size(0..218) Password DisplayString Unmatched Size(0..218) Wrong Password DisplayString Size(0..218) Too Many DisplayString Subscribers Size(0..218) Try Again DisplayString Size(0..218) User ID Not Found...
  • Page 229: Authorized Subscribers Table

    Using the Command Line Interface RADIUS Create DisplayString Message Size(0..218) RADIUS Login DisplayString Message Size(0..218) Request Failed DisplayString Message Size(0..218) Request Granted DisplayString Message Size(0..218) Thank You DisplayString Message Size(0..218) Verifying Message DisplayString Size(0..218) Purchase Options DisplayString Message Size(0..218) Authorized Subscribers Table Name Type AAA Authorized...
  • Page 230: Current Subscribers Table

    Using the Command Line Interface Subscriber Download Integer Bandwidth Credit Card DisplayString Confirmation Number Subscriber Status RowStatus Current Subscribers Table Name Type AAA Current Subscriber Table Table Subscriber Index Integer Subscriber MAC DisplayString Subscriber IP IpAddress Subscriber Port Integer Subscriber Name DisplayString Subscriber Upload Integer...
  • Page 231: Miscellaneous Parameters

    Using the Command Line Interface Miscellaneous Parameters Name Type Miscellaneous Group Partner Image Integer Splash Screen Partner Image DisplayString Filename Size(1..32) Maximum Integer Subscribers Allowed Enable PPTP Integer PPTP Session Idle Integer Timeout Enable IPSec Integer CLI Monitoring Parameters Using the “show” command with the following table parameters will display operating statistics for the AP-2500 (these are the same statistics that are described in –...
  • Page 232: B Xml Interface Specification

    — These sample files can only be run from the AP’s Ethernet side; you can not use these files on a wireless client (subscriber). — These sample files are provided for illustration and testing purposes only. Proxim provides no guarantee that these files will function error-free.
  • Page 233: Url Get

    XML Interface Specification URL GET A network device can send commands to the AP via a query string appended to a URL line (GET method). The query string is the string of characters following the question mark (?) at the end of the URL. For example, consider the following example illustrating a “user successful login”...
  • Page 234: Xml Response Form Format

    XML Interface Specification XML Response Form Format In response to a command, the AP returns an XML form in the following format: <USG RESULT="(RESULTCODE)" ID="(UI)" IP="(AP_IP_ADDR)"> [<ERROR_NUM>(error number)</ERROR_NUM>] [<ERROR_DESC>(error description)</ERROR_DESC>] <(tag_n) [tag_n_attr = "tag_n_attr_data"]>(data_n)</(tag_n)> </USG> where: (RESULTCODE) is either "OK" or "ERROR". (UI) is the AP ID.
  • Page 235: Ap Command Reference

    XML Interface Specification AP Command Reference Add/Update User Sample file name: UserAdd.htm The specified user has been authorized for access and will be added to the AP’s Authorized Subscribers Table. Command: "USER_ADD" Command attr: "MAC_ADDR" Command attr_data: user MAC address (string) tag_1: "USER_NAME"...
  • Page 236: Bandwidth Up

    XML Interface Specification Bandwidth Up Set the bandwidth up for an authorized user. Command: "SET_BANDWIDTH_UP" Command attr: "SUBSCRIBER" Command attr_data: User MAC address (string) tag_1: "BANDWIDTH_UP" data_1: (number measured in Kbps (i.e. for 128,000 bit per second, enter 128)) Returns: Standard response form Bandwidth Down Set the bandwidth down for an authorized user.
  • Page 237: Query User

    XML Interface Specification Query User Sample file name: UserQuery.htm The current User data is returned. Command: "USER_QUERY" tag_1: "USER" tag_1_attr: "ID_TYPE" tag_1_attr_data: "MAC_ADDR" or "USER_NAME" data_1: if ID_TYPE = "MAC_ADDR" then (User's MAC address) if ID_TYPE = "USER_NAME" then (user name) Returns: Standard response form tag_1:...
  • Page 238: Commands For Reference Only

    XML Interface Specification Commands For Reference Only The following commands are included for reference purposes only. They are not currently supported by the AP-2500. Set Room Access The specified room access mode is set. Command: "ROOM_SET_ACCESS" Command attr: "ROOM_NUMBER" Command attr_data: Room number (8 char. max string) tag_1: "ACCESS_MODE"...
  • Page 239: User Payment

    XML Interface Specification User Payment User's authorization and payment is requested. PMS is not supported by the AP at this time. Command: "USER_PAYMENT" Command attr: "PAYMENT_METHOD" Command attr_data: "PMS" tag_1: "USER_NAME" data_1: (user name) tag_2: "PASSWORD" tag_2_attr: "ENCRYPT" tag_2_attr_data: "TRUE" or "FALSE" data_2: (user password) tag_3:...
  • Page 240: External Authentication Procedure (Detailed)

    XML Interface Specification External Authentication Procedure (Detailed) Whenever a subscriber tries to access the Internet, it must pass through the AP. The AP tracks all packets flowing through it by the source MAC address of the packet, which uniquely identifies the wireless card that the subscriber is using.
  • Page 241: Sample Xml Communications With The Ap

    XML Interface Specification Sample XML Communications with the AP The following is an example of the commands to set access for a new subscriber with the following attributes: User Name: johndoe MAC address: 0050da554787 NOTE The following examples contain CRLFs and spacing for display clarity only. A query string must not contain any formatting or line-break characters.
  • Page 242: C Credit Card Interface Specification

    CAUTION This is a “best effort” specification. Proxim cannot guarantee that following these guidelines will ensure trouble-free interoperability between the credit card clearing server and the AP-2500. Data sent by the AP-2500 to the credit card clearing server NOTE This example uses US dollars as the currency, but the AP-2500 supports any currency.
  • Page 243: Data Sent By Credit Card Clearing Server To The Ap-2500

    Credit Card Interface Specification 8. Merchant ID 9. Amount 10. URL to post silent reply 11. This field must be in the form and set to a value of TRUE to tell the system that it will be doing an ADC Relay Response transaction.
  • Page 244: Ascii Character Chart

    ORiNOCO AP-2500 User Guide ASCII Character Chart You can configure WEP Encryption Keys in either Hexadecimal or ASCII format. Hexadecimal digits are 0-9 and A-F (not case sensitive). ASCII characters are 0-9, A-F, a-f (case sensitive), and punctuation marks. Each ASCII character corresponds to two hexadecimal digits.
  • Page 245: E Specifications

    ORiNOCO AP-2500 User Guide Specifications In This Chapter • Hardware Specifications • Radio Specifications – 802.11b Channel Frequencies – 802.11a Channel Frequencies – Wireless Communication Range Hardware Specifications Physical Specifications AP-2500 Unit Dimensions (H x W x L) = 6.5 x 18.5 x 26 cm (2.5 x 7.25 x 10.25 in.) Weight = 1.75 kg (3.5 lb.)
  • Page 246: Ethernet Interface

    Specifications Ethernet Interface 10/100 Base-T, RJ-45 female socket PCMCIA Interface PC Card Slot (A & B) = Standard PC Card slot for PC Card Serial Port Interface Connector Type = DB9, male Serial Cable = Standard RS-232C serial data cable, with a female DB-9 connector at each end Active Ethernet Interface Category 5, foiled, twisted pair cables must be used to ensure compliance with FCC Part 15, subpart B, Class B requirements...
  • Page 247: Radio Specifications

    Specifications Radio Specifications 802.11a radio certification is not available in all countries. Contact your sales representative for details. 802.11b radio certification is available in the US/Canada (FCC), Japan (VCCI), Europe (ETSI), and France. 802.11b Channel Frequencies The following table shows the channel allocations that vary from country to country. Values listed in bold font indicate default channels and frequencies.
  • Page 248: Wireless Communication Range

    Specifications Wireless Communication Range The range of the wireless signal is related to the composition of objects in the radio wave path, and the transmit rate of the wireless communication. Communications at a lower transmit range may travel longer distances. NOTE The range values listed in the Communications Range Chart are typical distances as measured at the development laboratories.
  • Page 249: F Technical Support

    For each ORiNOCO product, describe the behavior of the device’s LEDs when the problem occurs NOTE The latest software and documentation is available for download at http://www.proxim.com/. If necessary, you can contact Proxim Technical Support directly. However, all queries should first be directed to your local supplier. •...
  • Page 250: For The Caribbean And Latin America

    Technical Support For the Caribbean and Latin America: Phone: 1-866-ORiNOCO (1-866-674-6626) 1-661-367-2230 E-mail: CALAsupport@orinocowireless.com For Asia Pacific: Phone: +1 661-367-2230 E-mail: APACsupport@orinocowireless.com For Europe, the Middle East, and Africa (EMEA): Your local supplier in the EMEA region is trained to give you the support you require. Local suppliers have direct access to the ORiNOCO Technical Support Center and will help you in every way they can.

Table of Contents