Page 1 9160 G2 Wireless Gateway User Manual November 24, 2006 Part No. 8100117.A ISO 9001 Certified Quality Management System...
Page 2 © Copyright 2006 by Psion Teklogix Inc., Mississauga, Ontario This document and the information it contains is the property of Psion Teklogix Inc., is issued in strict confidence, and is not to be reproduced or copied, in whole or in part, except for the sole purpose of promoting the sale of Psion Teklogix manufac- tured goods and services.
Page 3 Return-To-Factory Warranty Psion Teklogix Inc. provides a return to factory warranty on this product for a period of twelve (12) months in accordance with the Statement of Limited Warranty and Limitation of Liability provided at www.psionteklogix.com/warranty. (If you are not already a member of Teknet and you attempt to view this warranty, you will be asked to register.
Page 4 RoHS-compliant as per the EU directive. Other than as noted below, a Psion Teklogix product that does not have an accompanying RoHS logo signifies that it was placed on the EU market prior to July 1, 2006, and is thereby exempt from the directive.
Page 5: Table Of Contents
2.1.1 Environment....... . 17 2.1.1.1 9160 G2 Wireless Gateway ..... . 17 2.1.2 Maintenance .
Page 6 Chapter 3: PreLaunch Checklist The 9160 G2 Wireless Gateway ..... . 27 3.1.1 Default Settings For The 9160 G2 Wireless Gateway ..27 3.1.2 What The Access Point Does Not Provide .
Page 7 Starting Clustering ......61 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 8 Plans) ........78 8.3.4.1 Update Advanced Settings..... . 80 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 9 11.1 Interfaces ........119 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 10 13.7 Updating Settings ......146 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 11 18.4 Updating Settings......180 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 12 Chapter 21: Configuring SNMP 21.1 Understanding SNMP Settings ..... . . 211 viii Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 13 21.3.2 Updating SNMP Settings ......216 Chapter 22: The 9160 G2 As Base Station 22.1 Overview ........219 22.2 Radio Protocols .
Page 14 B.2 Serial Cable Descriptions ......B-2 B.3 RJ-45 Connector Pinouts (10BaseT/100BaseT Ethernet)..B-3 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 15 On A Client ....... . C-28 C.9 Configuring An External RADIUS Server To Recognize The 9160 G2 Wire- less Gateway .
Page 16 D.2.1 Reboot Or Reset Access Point ..... D-4 Appendix E: Glossary Index ..........1...
Page 17 2100 Meadowvale Blvd. Mississauga, Ontario; Canada L5N 7J9 2005 PSION TEKLOGIX S.A. La Duranne 135 Rue Rene Descartes; BP 421000 13591 Aix-En-Provence Cedex 3; France Information Technology Equipment Commercial and Light Industrial Psion Teklogix 9160 G2 Wireless Gateway User Manual UMMARY xiii...
Page 18: Approvals And Safety Summary
Applicant: Legal Representative in US: The 9160 G2 Wireless Gateway has been tested and found to comply with the spec- ifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. Opera- tion is subject to the following two conditions: 1.
Page 19 • Consult a dealer or an experienced radio/TV technician for assistance. FCC Caution: Any change or modification to the product not expressly approved by Psion Teklogix could void the user's authority to operate the device. RF Radiation Exposure Statement To comply with the FCC and ANSI C95.1 RF exposure limits, the antenna(s) for this device must comply with the following: •...
Page 20 Deze apparatuur voldoet aan de noodzakelijke vereisten van EU-richtlijn betref- fende radioapparatuur en telecommunicatie-eindapparatuur 199/5/EG. (verklaring beschikbaar: www.psionteklogix.com). Dette udstyr opfylder de Væsentlige krav i EU's direktiv 1999/5/EC om Radio- og teleterminaludstyr. (Erklæring findes på: www.psionteklogix.com). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 21 1999/5/EC) vaatimuksia. (Julkilausuma nähtävillä osoitteessa: www.psionteklogix.com). Psion Teklogix tímto prohlašuje, že 9160 G2 Wireless Gateway je ve shodě se základními požadavky a dalšími příslušnými ustanoveními směrnice 1995/5/ES (NV č. 426/2000 Sb.) a Prohlášení o shodě je k dispozici na www.psionteklogix.com.
Page 22 • The extension cord is properly wired, in good electrical condition, and that the wire size is larger than 16 AWG. • The 9160 G2 is designed for indoor use only; do not expose the 9160 G2 to rain or snow. PERATE Operating Psion Teklogix equipment where explosive gas is present may result in an explosion.
Page 23 1.3 Text Conventions ....... 7 1.4 Overview Of The 9160 G2 Wireless Gateway ....7 1.4.1 Radios .
Page 25: Chapter 1: Introduction
Chapter 4: Quick Steps For Setup And Launch is a step-by-step guide to setting up your 9160 G2 Wireless Gateways and the resulting wireless network. Chapter 5: Configuring Basic Settings provides instructions on configuring administrator access settings and new access point settings.
Page 26 (not for cluster configurations). Chapter 12: The Ethernet (Wired) Interface describes how to configure the wired interface settings on the 9160 G2 Wireless Gateway. Chapter 13: Setting the Wireless Interface describes how to configure the wireless address and related settings on the 9160 G2 Wireless Gateway.
Page 27 Gateway Enterprise-Manager API. Chapter 22: The 9160 G2 As Base Station describes how to configure the 9160 G2 Wireless Gateway as either a wired or wireless Base Station, or as a Remote Radio Module (RRM). This chapter also describes narrow band radio configuration settings.
Page 28: Online Help Features, Supported Browsers, And Limitations
Help is a subset of the information available in the full User Manual. Online Help information corresponds to each tab on the 9160 G2 Wireless Gateway Administration user interface. Click the Help button on a tab or the “More. . .” link at the bottom of the online help panel on the UI for help information for the settings on the current tab.
Page 29: Text Conventions
This allows wireless clients to access the network and also move seamlessly between the 9160 G2s in the network. The 9160 G2 can also operate as a base station, a remote radio module (RRM), and become part of a mapRF system.
Page 30: Radios
Radios 1.4.1 Radios The 9160 G2 is capable of supporting single or dual radio operation. Available radio modules are the 802.11a/g radio, the 802.11g radio, and the RA1001A Narrow Band radio. For detailed specifications on these radios please see “Radios” on page 262.
Page 31: Access Point Functions
Psion Teklogix Network Controller or a host computer. It communicates over an IEEE 802.11 RF data link with terminals, and over a cable with the network controller or a host computer. The 9160 G2 can be connected to the network through an Ethernet connection.
Page 32: Features And Benefits
Neighboring access point detection (also known as “rogue” AP detection). • Support for IEEE 802.11d Regulatory Domain selection (country codes for global operation). Psion Teklogix 9160 G2 Wireless Gateway User Manual 802.11a, IEEE 802.11b, IEEE IEEE wireless networking standards. 802.11g, IEEE 802.11i,...
Page 33: Security Features
WPA2™ - Personal WPA2™ - Enterprise - EAP Types: EAP-TLS EAP-TTLS/MSCHAPv2 PEAPv0/EAP-MSCHAPv2 PEAPv1/EAP-GTC EAP-SIM • Advanced Encryption Standard (AES). • User-based access control with local authentication server. Chapter 1: Introduction Psion Teklogix 9160 G2 Wireless Gateway User Manual Security Features...
Page 34: Out-Of-The-Box Guest Interface
The access points in a cluster periodically check that the cluster configura- tion is consistent, and check for the presence and availability of the other members of the cluster. The administrator can monitor this information through the user interface. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 35: Networking
Virtual Wireless Networks (Dynamic VLANs). • Spanning Tree Protocol (STP). • 802.1p. 1.5.7 SNMP Support The 9160 G2 Wireless Gateway includes the following standard Simple Network Management Protocol (SNMP) Management Information Bases (MIBs): • Bridge MIB 802.1d (RFC 1493). • SNMPv2 MIB (RFC 3418).
Page 36: Maintainability
IEEE 802.1x and WPA/WPA2 Enterprise (RADIUS) security modes. 1.6 What’s Next? Ready to get started with wireless networking? Once your 9160 G2 Wireless Gateway is installed (see Chapter 2: “Installation Requirements”), read through Chapter 3: “PreLaunch Checklist” and then follow the steps in Chapter 4: “Quick Steps For Setup And Launch”.
Page 37 2.1.1 Environment......17 2.1.1.1 9160 G2 Wireless Gateway....17 2.1.2 Maintenance .
Page 39: Chapter 2: Installation Requirements
The 9160 G2 should be situated away from the path of vehicles and free from water or dust spray. The 9160 G2 should only be mounted in the upright position, as shown in Figure 2.1 on page 18.
Page 40: Maintenance
30 cm of the unit. Secure the cables with ties to the cable tie mounts on the 9160 G2 (see Figure 2.1). A single phase power outlet (range 100 to 240 VAC rated 1.0A minimum) should be installed within one metre (3.1 feet) of the 9160 G2.
Page 41: Antennas
The power cable is removable and is available in the power type specific to your location. The 9160 G2 AC power supply has a universal input via a standard IEC320 connector. To eliminate the need for AC wiring, the 9160 G2 Wireless Gateway is compliant with IEEE 802.3af and can be powered over its Ethernet connection.
Page 42 9160 G2. The coaxial cable must be routed and secured using wire anchors and/or coaxial nail clips. A few extra inches of cable are required near the antenna and the 9160 G2 to make disconnection easier. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 43: Connecting To External Devices
G2 is installed, connected and powered on, the system administrator can access the unit to check the configuration and to assign the 9160 G2 its unique IP address. This may be done through the network (see “Changing The Configuration With A Web Browser”...
Page 44: Lan Installation: Ethernet
(10BaseT/100BaseT Ethernet cabling) is 100 m. 2.2.4 Status Indicators (LEDs) The high-performance 9160 G2 has six status indicators on the front of the enclo- sure, as shown in Figure 2.2 on page 21. The numbered and coloured LEDs on the front of the unit indicate the operating status for each port, as described in Table 2.1.
Page 45: Connecting A Video Display Terminal
The terminal is connected to the RS-232 port on the 9160 G2 (see Figure 2.2 on page 21). This port is normally set to operate at 115,200 baud, 8 bits, 1 stop bit, no parity.
Page 47 AUNCH 3.1 The 9160 G2 Wireless Gateway ......27 3.1.1 Default Settings For The 9160 G2 Wireless Gateway ..27 3.1.2 What The Access Point Does Not Provide .
Page 49: Chapter 3: Prelaunch Checklist
(or extended) wireless network. 3.1 The 9160 G2 Wireless Gateway The 9160 G2 Wireless Gateway is a wireless communications hub for devices on your network. It provides continuous, high-speed access between your wireless and Ethernet devices in IEEE 802.11a, 802.11b, 802.11g, and 802.11a Turbo modes.
Page 50: Default Settings
“Network Time Protocol Server” on page 247 192.168.1.10 “Understanding Dynamic And Static IP Addressing On The 9160 G2 Wireless Gateway” on page 33 The default IP address is used if you do not use a Dynamic Host Configura- tion Protocol (DHCP) server. You can assign a new static IP address through the Administration Web pages.
Page 51 None WDS Settings Table 3.1 9160 G2 Default Settings Chapter 3: PreLaunch Checklist Default Settings For The 9160 G2 Wireless Gateway Related Information “Configuring 802.11 Radio Settings” on page 161 “Configuring 802.11 Radio Settings” on page 161 “Configuring 802.11 Radio Settings” on page 161 “Configuring 802.11 Radio Settings”...
Page 52: What The Access Point Does Not Provide
What The Access Point Does Not Provide 3.1.2 What The Access Point Does Not Provide The 9160 G2 Wireless Gateway is not designed to function as a Gateway to the Internet. To connect your Wireless LAN (WLAN) to other LANs or the Internet, you need a gateway device.
Page 53: Wireless Client Computers
Table 3.2 Required AP Administrator Software And Hardware 3.3 Wireless Client Computers The 9160 G2 Wireless Gateway provides wireless access to any client with a prop- erly configured Wi-Fi client adaptor for the 802.11 mode in which the access point is running.
Page 54 Client software such as Microsoft Windows Supplicant or Funk Odyssey wireless client con- figured to associate with the 9160 G2 Wireless Gateway. Security should be disabled on the client used to do initial configuration of the access point.
Page 55: Understanding Dynamic And Static Ip Addressing On The 9160 G2 Wireless Gateway
A DHCP server is a requirement for the Guest network. 3.4.2 Dynamic IP Addressing The 9160 G2 Wireless Gateway generally expects that a DHCP server is running on the network where the AP is deployed. Most home and small business networks already have DHCP service provided either via a gateway device or a centralized server.
Page 56: Static Ip Addressing
After AP startup, you have the option of specifying a static IP addressing policy on 9160 G2 Wireless Gateways and assigning static IP addresses to APs on the Internal network via the access point Administration Web pages. (See information about the Connection Type field and related fields in “Configuring LAN Or Internal Inter-...
Page 57 TEPS 4.1 Unpack The 9160 G2 Wireless Gateway ....37 4.1.1 9160 G2 Wireless Gateway Hardware And Ports ..37 4.1.2 What’s Inside The 9160 G2 Wireless Gateway? .
Page 59: Chapter 4: Quick Steps For Setup And Launch
Setting up and deploying one or more 9160 G2 Wireless Gateways is in effect creat- ing and launching a wireless network. The Basic Settings Administration Web page simplifies this process. Here is a step-by-step guide to setting up your 9160 G2 Wireless Gateways and the resulting wireless network.
Page 60: What's Inside The 9160 G2 Wireless Gateway
What’s Inside The 9160 G2 Wireless Gateway? 4.1.2 What’s Inside The 9160 G2 Wireless Gateway? The 9160 G2 Wireless Gateway, as an Access Point (AP), is a single-purpose com- puter designed to function as a wireless hub. Inside the access point is a Wi-Fi radio system and a microprocessor.
Page 61 PC but instead is connected to the LAN (either via a Hub as shown in Fig- ure 4.1, or directly). ETHERNET CONNECTIONS WHEN USING DHCP FOR INITIAL CONFIGURATION Admin PC to Hub Administrator Computer Access Point Figure 4.1 Ethernet Connections Using DHCP Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 62: A Note About Setting Up Connections For A Guest Network
• Define VLANs on that switch. 4.3 Power On The Access Point The 9160 G2 Wireless Gateway powers on and initializes when you plug it in. Psion Teklogix 9160 G2 Wireless Gateway User Manual Administrator Computer (This PC must have an IP address on the same subnet as Access Point.)
Page 63: Log On To The Administration Web
4.4 Log On To The Administration Web Pages When you go to the IP address of the 9160 G2 Wireless Gateway Administration Web pages, you are prompted for a user name and password. The defaults for user name and password are as follows.
Page 64: Configure 'Basic Settings' And Start The Wireless Network
Chapter 4: Quick Steps For Setup And Launch Configure ‘Basic Settings’ And Start The Wireless Network Note: Currently the 9160 G2 Wireless Gateway menus appear slightly different from those shown - the menu tabs are arranged vertically down the left side of the page, rather than across the top.
Page 65: Default Configuration
For more information, see “Update Basic Settings” on page 50. 4.5.1 Default Configuration If you follow the steps above and accept all the defaults, the access point will have the default configuration described in “Default Settings For The 9160 G2 Wireless Gateway” on page 27. 4.6 What’s Next? Next, make sure the access point is connected to the LAN, bring up some wireless clients, and connect the clients to the network.
Page 66: Test Lan Connectivity With Wireless Clients
Test LAN Connectivity With Wireless Clients 4.6.2 Test LAN Connectivity With Wireless Clients Test the 9160 G2 Wireless Gateway by trying to detect it and associate with it from some wireless client devices. (See “Wireless Client Computers” on page 31 in the PreLaunch Checklist for information on requirements for these clients.)
Page 67 5.6 Basic Settings For A Standalone Access Point ....51 5.7 Your Network At A Glance: Understanding Indicator Icons ..51 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 69: Chapter 5: Configuring Basic Settings
If you type the IP address of the access point into your browser, the Basic Settings page is the default page that is displayed. Fill in the fields on the Basic Settings screen as described in “Review / Describe The Access Point” on page 48. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 70: Review / Describe The Access Point
Version information about the firmware currently installed on the access point. As new versions of the 9160 G2 Wireless Gateway firmware become available, you can upgrade the firmware on your access points to take advantages of new features and enhancements.
Page 71: Provide Network Settings
Table 5.2 Administrator Password And Wireless Network Note: The 9160 G2 Wireless Gateway is not designed for multiple, simultaneous configuration changes. If you have a network that includes multiple access points, and more than one administrator is logged on to the Administration Web pages and making changes to the configuration, all access points in the cluster will stay in sync, but there is no guarantee that all configuration changes specified by multiple users will be applied.
Page 72: Update Basic Settings
Chapter 10: “Configuring Security”. At this point if you click Basic Settings again, the summary of settings page is replaced by the standard Basic Settings configuration options. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 73: Basic Settings For A Standalone Access Point
107 and “WPA Enterprise” on page 112, which are the two security modes that offer the option of using the built-in authentication server. Chapter 5: Configuring Basic Settings Basic Settings For A Standalone Access Point Table 5.3 Indicator Icons Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 75 Standalone APs ....... . 62 6.7.1 Navigating To An AP By Using Its IP Address In A URL ..62 & C OINTS LUSTERS Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 77: Chapter 6: Managing Access Points & Clusters
6.1 Overview The 9160 G2 Wireless Gateway shows current basic configuration settings for clustered access points (location, IP address, MAC address, status, and availability) and provides a way of navigating to the full configuration for specific APs if they are cluster members.
Page 78: Understanding Clustering
Understanding Clustering 6.3 Understanding Clustering A key feature of the 9160 G2 Wireless Gateway is the ability to form a dynamic, configuration-aware group (called a cluster) with other 9160 G2 Wireless Gateways in a network in the same subnet. Access points can participate in a self-organizing cluster which makes it easier for you to deploy, administer, and secure your wireless network.
Page 79: Which Settings Are Shared As Part Of The Cluster Configuration And Which Are Not
6.3.4 Which Settings Are Shared As Part Of The Cluster Configuration And Which Are Not? Most configuration settings defined via the 9160 G2 Wireless Gateway Administration Web pages will be propagated to cluster members as a part of the cluster configuration.
Page 80: Settings Not Shared By The Cluster
“Setting The Cluster Name” on page 60). • Whether clustering is enabled - Only APs for which clustering is enabled will join a cluster (see “Starting Clustering” on page 61 and “Stopping Clustering” on page 61). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 81: Intra-Cluster Security
Standalone access points (those which are not members of the cluster) are not shown on this page. Table 6.1 describes the access point settings and information display in detail. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 82: Modifying The Location Description
Cluster Name specified in the Cluster Name field. If the cluster name is different, the AP will not be able to join the cluster. Psion Teklogix 9160 G2 Wireless Gateway User Manual ). This is the address by which the AP is...
Page 83: Starting Clustering
AP or shows an incomplete display, refresh your browser. If you still experience problems, refer to the information on Cluster Recovery in Appendix D: “Troubleshooting” . Chapter 6: Managing Access Points & Clusters Psion Teklogix 9160 G2 Wireless Gateway User Manual Starting Clustering...
Page 84: Navigating To Configuration Information For A Specific Ap And Managing Standalone Aps
6.7 Navigating To Configuration Information For A Specific AP And Managing Standalone APs In general, the 9160 G2 Wireless Gateway is designed for central management of clustered access points. For access points in a cluster, all access points in the cluster reflect the same configuration.
Page 85 7.8.1 Backing Up The User Database ....69 7.8.2 Restoring A User Database From A Backup File ..70 CCOUNTS Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 87: Chapter 7: Managing User Accounts
You have the option of using either the internal RADIUS server embedded in the 9160 G2 Wireless Gateway or an external RADIUS server that you provide. If you use the embedded RADIUS server, use the Administration Web page on the access point to set up and manage user accounts.
Page 88: Navigating To User Management For Clustered Access Points
Real name, and Status (enabled or disabled) of the user are shown. You make modifications to an existing user account by first selecting the checkbox next to a user name and then choosing an action. (See “Editing A User Account” on page 68.) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 89: Adding A User
Note: A limit of 100 user accounts per access point is imposed by the Administra- tion user interface. Network usage may impose a more practical limit, depending upon the demand from each user. Chapter 7: Managing User Accounts Table 7.1 New User Fields Psion Teklogix 9160 G2 Wireless Gateway User Manual Adding A User...
Page 90: Editing A User Account
3 months at a time, then be off for 3 months, and back on for another assignment. You can enable and disable these user accounts as needed, and control access as appropriate. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 91: Enabling A User Account
A File Download or Open dialog is displayed. 2. Choose the Save option on this first dialog. This brings up a file browser. Chapter 7: Managing User Accounts Enabling A User Account Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 92: Restoring A User Database From A Backup File
(This process is not time-consuming; the restore should complete almost immediately.) Click the Cluster > User Management tab to see the restored user accounts. Psion Teklogix 9160 G2 Wireless Gateway User Manual wirelessUsers.ubk extension. .ubk backup configuration files are valid to use with .ubk...
Page 93 8.3.4 Configuring Advanced Settings (Customizing And Scheduling Channel Plans) ......78 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 95: Chapter 8: Channel Management
8.2 Understanding Channel Management When Channel Management is enabled, the 9160 G2 Wireless Gateway automati- cally assigns radio channels used by clustered access points to reduce mutual inter- ference (or interference with other access points outside of its cluster). This...
Page 96: How It Works In A Nutshell
For example, AP1 could be assigned to channel 6, AP2 to channel 6, and AP3 to channel 5 as shown in Figure 8.1 on page 75. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 97 Channel 7 Channel 5 (802.11b) (802.11b) Client Station Channel 1 (802.11b) Channel 11 (802.11b) Client Station Psion Teklogix 9160 G2 Wireless Gateway User Manual Interference from APs on adjacent channels (5,6,7) Interference from APs on same channel (6) Channel 6 (802.11b)
Page 98: Configuring And Viewing Channel Management Settings
Channel Manager periodically maps radio channels used by clustered access points and, if necessary, re-assigns channels on clustered APs to reduce interference (with cluster members or other APs outside the cluster). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 99: Viewing Current Channel Assignments And Setting Locks
Update Current Channel Settings (Manual) You can run a manual channel management update at any time by clicking Update under the Current Channel Settings display. Chapter 8: Channel Management Viewing Current Channel Assignments And Setting Locks Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 100: Viewing Last Proposed Set Of Changes
You can use Advanced Settings to modify the interference reduction potential that triggers channel re-assignment, change the schedule for automatic updates, and re- configure the channel set used for assignments. Psion Teklogix 9160 G2 Wireless Gateway User Manual Table 8.4 AP’s Channel Plan...
Page 101: Field Description
This setting (along with the interference reduction setting) is designed to help weigh the cost/benefit impact on network performance of re-assigning channels against the inherent disruption it can cause to clients during a busy time. Table 8.5 Advanced Settings Chapter 8: Channel Management Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 102: Update Advanced Settings
Advanced Settings will take effect when they are applied, and influence how automatic channel management is performed. (The new interference reduction min- imum, scheduled tuning interval, channel set, and network busy settings will be taken into account for automated and manual updates.) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 103 9.3 Viewing Wireless Neighborhood ..... . . 84 9.4 Viewing Details For A Cluster Member....86 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 105: Chapter 9: Wireless Neighborhood
The Wireless Neighborhood view shows all access points within range of every member of the cluster, shows which access points are within range of which cluster members, and distinguishes between cluster members and non-members. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 106: Viewing Wireless Neighborhood
Field Display Neighbor- ing APs Cluster Psion Teklogix 9160 G2 Wireless Gateway User Manual Description Click one of the following radio buttons to change the view: • In cluster - Shows only neighbor APs that are members of the cluster.
Page 107 AP whose IP address is listed above that column (since it is not applicable to show how well the AP can detect itself). Table 9.2 Wireless Neighborhood Statistics Chapter 9: Wireless Neighborhood Viewing Wireless Neighborhood . . . but not by the AP whose address is 10.10.100.223 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 108: Viewing Details For A Cluster Member
9.4 Viewing Details For A Cluster Member To view details on a cluster member AP, click on the IP address of a cluster member at the top of the page. Psion Teklogix 9160 G2 Wireless Gateway User Manual Figure 9.3 Details For A Cluster Member AP...
Page 109 Shows the date and time of the most recent beacon was transmitted from the access point. Beacon Age Table 9.4 Access Point Statistics Chapter 9: Wireless Neighborhood Viewing Details For A Cluster Member Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 111 10.3 Updating Settings ......115 ECURITY Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 113: Chapter 10: Configuring Security
Chapter 10: Configuring Security Understanding Security Issues On Wireless Networks The following sections describe how to configure Security settings on the 9160 G2 Wireless Gateway. 10.1 Understanding Security Issues On Wireless Networks Wireless mediums are inherently less secure than wired mediums. For example, an Ethernet NIC transmits its packets over a physical medium such as coaxial cable or twisted pair.
Page 114: Comparison Of Security Modes For Key Management, Authentication And Encryption Algorithms
Encryption algorithm or formula the protocol uses to encode/decode the data. Following is a list of the security modes available on the 9160 G2 Wireless Gate- way, along with a description of the key management, authentication, and encryp- tion algorithms used in each mode. We include some suggestions as to when one mode might be more appropriate than another.
Page 115: When To Use Unencrypted (No Security)
(CRC) of each 802.11 frame. Table 10.1 Static WEP Security Mode Psion Teklogix 9160 G2 Wireless Gateway User Manual Chapter 10: Configuring Security User Authentication If you set the Authentication Algorithm to “Shared Key”, this protocol provides a rudi-...
Page 116: When To Use Ieee 802.1X
(CRC) of each Kerberos, and public key authentication with a 802.11 frame. RADIUS server. You have a choice of using the 9160 G2 Wire- less Gateway embedded RADIUS server or an external RADIUS server. The embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
Page 117: When To Use Wpa Personal
There are different Uni- cast keys for each station. Recommendations WPA Personal is not recommended for use with the 9160 G2 Wireless Gateway when WPA Enterprise is an option. Encryption Algorithms • Temporal Key Integrity Protocol (TKIP).
Page 118: When To Use Wpa Enterprise
Table 10.4 WPA Enterprise Security Mode User Authentication Remote Authentication Dial-In User Service (RADIUS) You have a choice of using the 9160 G2 Wire- less Gateway embedded RADIUS server or an external RADIUS server. The embedded RADIUS server supports Protected EAP...
Page 119 TKIP is the only encryption algorithm that is being tested in Wi- Fi WPA certification. See Also For information on how to configure this security mode, see “WPA Enterprise” on page 112. Chapter 10: Configuring Security Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 120: Does Prohibiting The Broadcast Ssid Enhance Security
The traffic blocking extends to wireless clients connected to the network via WDS links; these clients cannot communicate with each other when Station Isolation is on. See Chapter 20: “Wireless Distribution System” for more information about WDS. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 121: Configuring Security Settings
10.2.1 Broadcast SSID, Station Isolation, And Security Mode To configure security on the access point, select a security mode and fill in the related fields as described in Table 10.5. Chapter 10: Configuring Security Configuring Security Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 122: None (Plain-Text)
Security modes other than “None (Plain-text)” apply only to configuration of the “Internal” network. 10.2.2 None (Plain-text) None (or plain-text security) means any data transferred to and from the 9160 G2 Wireless Gateway is not encrypted. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 123: Guest Network
For a minimum level of protection on a guest network, you can choose to suppress (prohibit) the broadcast of the SSID (network name) to discourage client stations from automatically discovering your access point. (See also “Does Prohibiting The Broadcast SSID Enhance Security?” on page 98). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 124: Static Wep
If you selected “Static WEP” Security Mode, provide the information on the access point settings, as shown in the following figure and described in Table 10.6. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 125 Indicates the number of characters required in the WEP key. The number of characters required updates automatically based on how you set Key Length and Key Type. Table 10.6 Static WEP Security Settings Chapter 10: Configuring Security Psion Teklogix 9160 G2 Wireless Gateway User Manual Static WEP...
Page 126: Rules To Remember For Static Wep
WEP and all clients must have one of the WEP keys specified on the AP in order to de-code AP-to-station data transmissions. Psion Teklogix 9160 G2 Wireless Gateway User Manual Description You can specify up to four WEP keys. In each text box, enter a string of characters for each key.
Page 127: Example Of Using Static Wep
You must then set all client stations to use WEP and provide each client with one of the slot/key combinations you defined on the AP. Chapter 10: Configuring Security key as WEP key 3, then the client stations abc123 Psion Teklogix 9160 G2 Wireless Gateway User Manual Static WEP...
Page 128: Static Wep With Transfer Key Indexes On Client Stations
WEP keys and set a transfer index on the client station, then you can specify differ- ent keys to be used for station-to-AP transmissions. (The standard Windows wire- less client software does not allow you to do this.) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 129: Ieee 802.1X
RADIUS server. The access point requires a RADIUS server capable of EAP, such as the Microsoft Internet Authentication Server or the 9160 G2 Wireless Gateway internal authenti- cation server. To work with Windows clients, the authentication server must support Protected EAP (PEAP) and MSCHAP V2.
Page 130 Chapter 10: Configuring Security IEEE 802.1x 9160 G2 Wireless Gateway embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2. If you use your own RADIUS server, you have the option of using any of a variety of authentication methods that the IEEE 802.1x mode supports, including certifi- cates, Kerberos, and public key authentication.
Page 131: Wpa Personal
Use internal radius server • To use the authentication server provided with the 9160 G2 Wireless Gateway, ensure the checkbox beside the Use internal radius server field is selected. If this option is selected, you do not have to provide the Radius IP and Radius Key; they are automatically provided.
Page 132 This security mode is backwards-compatible for wireless clients that support the original WPA. If you selected “WPA Personal” Security Mode, complete the settings as described in Table 10.11 on page 111. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 133 • A valid CCMP (AES) key Clients not configured to use a WPA Table 10.11 WPA Personal Security Settings Chapter 10: Configuring Security Personal will not be able to associate with AP. Psion Teklogix 9160 G2 Wireless Gateway User Manual WPA Personal...
Page 134: Wpa Enterprise
G2 Wireless Gateway built-in RADIUS server supports Protected EAP (PEAP) and MSCHAP V2. If you selected “WPA Enterprise” Security Mode, complete the settings as described in Table 10.12 on page 113. Psion Teklogix 9160 G2 Wireless Gateway User Manual Table 10.11 WPA Personal Security Settings...
Page 135 WPA2 for clients who support it. This WPA configuration allows more interoperability, at the expense of some security. Table 10.12 WPA Enterprise Security Settings Chapter 10: Configuring Security Psion Teklogix 9160 G2 Wireless Gateway User Manual WPA Enterprise...
Page 136 WPA with RADIUS must have one of the following: • A valid TKIP RADIUS IP address and RADIUS Key. • A valid CCMP (AES) IP address and RADIUS Key. Psion Teklogix 9160 G2 Wireless Gateway User Manual Table 10.12 WPA Enterprise Security Settings...
Page 137: Updating Settings
Field Description You can choose whether to use the built-in authentication server provided with the 9160 G2 Wireless Use internal Gateway, or you can use an external radius server. radius server • To use the authentication server provided with the 9160 G2 Wireless Gateway, ensure the checkbox beside the Use internal radius server field is selected.
Page 139 11.4.1 Link Integrity Monitoring ..... .126 11.5 Neighboring Access Points ......126 ONITORING Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 141: Chapter 11: Maintenance And Monitoring
The Interfaces page for a two-radio AP is shown in the following figure. This page displays the current settings of the 9160 G2 Wireless Gateway. It displays the Ethernet (Wired) Settings and the Wireless Settings. Chapter 11: Maintenance And Monitoring...
Page 142: Ethernet (Wired) Settings
11.2 Event Logs To view system events and kernel log for a particular access point, navigate to Status, Events on the Administration Web pages for the access point you want to monitor. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 143: Log Relay Host For Kernel Messages
“log relay host” on your network. Then, you can configure the 9160 G2 Wireless Gateway to send its syslog messages to the remote server. Using a remote server to collect access point syslog messages affords you several benefits.
Page 144: Setting Up The Log Relay Host
Psion Teklogix 9160 G2 Wireless Gateway User Manual to the machine you want to use as your syslog user permissions. If you are not...
Page 145: Enabling Or Disabling The Log Relay Host On The Status
Log Relay Host. If you disabled the Log Relay Host, clicking Update will disable remote logging. Chapter 11: Maintenance And Monitoring Log Relay Host For Kernel Messages Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 146: Events Log
Transmit/Receive on the Administration Web pages for the access point you want to monitor. Note: The following figure shows the Transmit/Receive page for a two-radio AP. The Administration Web page for the one-radio AP will look slightly different. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 147 The MAC address is assigned by the manufacturer. The 9160 G2 Wireless Gateway has a unique MAC address for each interface. A two-radio access point has a different MAC address for each interface on each of its two radios.
Page 148: Associated Wireless Clients
11.4.1 Link Integrity Monitoring The 9160 G2 Wireless Gateway provides link integrity monitoring to continually verify its connection to each associated client (even when there is no data exchange occurring). To do this, the AP sends data packets to clients every few seconds when no other traffic is passing.
Page 149 • wlan1 (Radio Two) One-Radio APs This field is not included on the Neighboring Access Points pages of one-radio access points. Table 11.3 Neighboring Access Point Statistics Chapter 11: Maintenance And Monitoring Neighboring Access Points Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 150 Security is configured on the AP from the Security tab page. For more information on security set- tings, see Chapter 10: “Configuring Security”. Indicates whether WPA security is On or Off” or this access point. Psion Teklogix 9160 G2 Wireless Gateway User Manual Table 11.3 Neighboring Access Point Statistics...
Page 151 The rates shown for an access point will always be the rates currently specified for that AP in its Radio Settings. Table 11.3 Neighboring Access Point Statistics Chapter 11: Maintenance And Monitoring Neighboring Access Points Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 153 12.1.5 Configuring Guest Interface Ethernet (Wired) Settings ..138 12.1.6 Updating Settings ......138 IRED NTERFACE Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 155: Chapter 12: The Ethernet (Wired) Interface
To set the wired address for an access point, navigate to the Manage > Ethernet Set- tings tab, and update the fields as described below. Chapter 12: The Ethernet (Wired) Interface Navigating To Ethernet (Wired) Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 156: Setting The Dns Name
Ethernet is the most common technology implementing a LAN. Wi-Fi (IEEE) is another very popular LAN technology. The 9160 G2 Wireless Gateway allows you to configure two different LANs on the same access point: one for a secure internal LAN and another for a public guest network with no security and little or no access to internal resources.
Page 157: Enabling Or Disabling Guest Access
12.1.2.2 Enabling Or Disabling Guest Access The 9160 G2 Wireless Gateway ships with the Guest Access feature disabled by default. If you want to provide guest access on your AP, enable Guest access on the Ethernet (Wired) Settings tab. Field Description By default, the 9160 G2 Wireless Gateway ships with Guest Access disabled.
Page 158: Enabling / Disabling Virtual Wireless Networks On The Ap
DHCP server must support VLAN IEEE 802.1p frames. The access point must be able to reach the DHCP server. Check with the Administrator regarding the VLAN and DHCP configurations. Psion Teklogix 9160 G2 Wireless Gateway User Manual Description • Select...
Page 159 Static IP indicates that all network settings are provided manually. You must provide the IP address for the 9160 G2 Wireless Gateway, its subnet mask, the IP address of the default gate- way, and the IP address of at least one DNS nameserver.
Page 160: Configuring Guest Interface Ethernet (Wired) Settings
2. Configure the ethernet settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual automatically via DHCP. (This option is only available if you specified DHCP for the Connection Type.)
Page 161 13.7 Updating Settings......146 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 163: Chapter 13: Setting The Wireless Interface
Note: The following figure shows the Wireless Settings page for a two-radio AP. The Administration Web page for the single-radio AP will look slightly different. Chapter 13: Setting the Wireless Interface Navigating To Wireless Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 164: Configuring 802.11D Regulatory Domain Support
• DFS requires that RLANs operating in the 5 GHz band implement a mechanism to Note: 802.11h is automatically enabled if the AP is configured to work in any country Psion Teklogix 9160 G2 Wireless Gateway User Manual MAC addresses are shown: one for each Radio on the Internal interface.
Page 165: Configuring The Radio Interface
MAC address. It is provided here for informational purposes as a unique identifier for an interface. Table 13.1 Radio Interface Settings Chapter 13: Setting the Wireless Interface Configuring The Radio Interface Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 166 The Mode defines the Physical Layer (PHY) standard being used by the radio. The 9160 G2 Wireless Gateway is available as a single or dual-band access point with one or two radios. The configuration options for Mode differ depending on which product you have.
Page 167: Configuring "Internal" Wireless Lan Settings
It is also referred to as the Network Name. There are no restrictions on the characters that may be used in an SSID. Table 13.2 Wireless LAN Settings Chapter 13: Setting the Wireless Interface Configuring “Internal” Wireless LAN Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 168: Configuring "Guest" Network Wireless Settings
(SSID) for the Guest Network as described in Table 13.3. Configuring an access point with two different network names (SSIDs) allows you to leverage the Guest interface feature on the 9160 G2 Wireless Gateway. For more information, see Chapter 14: “Setting up Guest Access”.
Page 169 14.4 Deployment Example ......153 UEST CCESS Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 171: Chapter 14: Setting Up Guest Access
You can configure an 9160 G2 Wireless Gateway for the Guest interface by using a single network with VLANs by setting up the guest interface configuration options on the Administration Web pages for the 9160 G2 Wireless Gateway.
Page 172: Configuring The Guest Interface
Chapter 14: Setting up Guest Access Configuring The Guest Interface 14.2 Configuring The Guest Interface To configure the Guest interface on the 9160 G2 Wireless Gateway, perform these steps: 1. Configure the access point to represent two virtually separate networks as described in the section below, “Configuring A Guest Network On A...
Page 173 4. Configure the guest splash screen as described in “Configuring The Welcome Screen (Captive Portal)” on page 152. Chapter 14: Setting up Guest Access Configuring A Guest Network On A Virtual LAN Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 174: Configuring The Welcome Screen (Captive Portal)
2. The guest network advertises itself via a Guest SSID or some similar name, depending on how the guest SSID is specified in the Administra- tion Web pages for the Guest interface. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 175: Deployment Example
6. The guest client is now enabled to use the “guest” network. 14.4 Deployment Example In Figure 14.1, the dotted lines indicate dedicated guest connections. All access points and all connections (including guests) are administered from the same 9160 G2 Wireless Gateway Administration Web pages. Internet DSL/T1 Firewall...
Page 177: Chapter 15: Configuring Vlans
15.3 Updating Settings......159 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 179: Navigating To Virtual Wireless Network Settings
Administration Web pages to the new IP address. (If necessary, check with the infrastructure support administrator regarding the VLAN and DHCP configurations.) Chapter 15: Configuring VLANs Navigating To Virtual Wireless Network Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 180 Note: The Broadcast SSID you set here is specifically for this Virtual Network (One or • Your original Internal network (configured on the Ethernet Settings page) uses the • If a Guest network is configured, the Broadcast SSID is always allowed. Psion Teklogix 9160 G2 Wireless Gateway User Manual VWN. appropriate VWN.
Page 181: Updating Settings
To update VLAN settings: 1. Navigate to the VLAN tab page. 2. Configure the VLAN settings as required. 3. Click the Update button to apply the changes. Chapter 15: Configuring VLANs Psion Teklogix 9160 G2 Wireless Gateway User Manual Updating Settings...
Page 183 16.4 Updating Settings......169 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 185: Chapter 16: Configuring 802.11 Radio Settings
IEEE 802.11 mode in which the radio oper- ates, and so on. The 9160 G2 Wireless Gateway comes configured as a dual-band access point with one radio. The access point is capable of broadcasting in the following modes: •...
Page 186: Navigating To Radio Settings
16.2 Navigating To Radio Settings To specify radio settings, navigate to Manage > 802.11 Advanced Settings tab, which will open the Radio Settings page, and update the fields as described in Table 16.1 on page 165. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 187: Configuring Radio Settings
The 9160 G2 Wireless Gateway is available as a one-radio or two-radio access point. Radio One-Radio AP: If you have a one-radio version of the 9160 G2 Wireless Gateway, this field is not included on the Radio tab. Two-Radio AP: If you have a two-radio version of the 9160 G2 Wireless Gateway, specify Radio One or Radio Two.
Page 188 AP at every beacon. If you set this to 2, clients will check on every other beacon. If you set this to 10, clients will check on every 10th beacon. Psion Teklogix 9160 G2 Wireless Gateway User Manual Table 16.1 Radio Settings...
Page 189 Specify the maximum number of stations allowed to access this AP at any one time. Maximum Stations You can enter a value between 0 and 2007. Table 16.1 Radio Settings Chapter 16: Configuring 802.11 Radio Settings Configuring Radio Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 190 “g” clients to connect since they are required by the standard to support these rates. For more information, see description of Mode further up in this table, on page 165. Psion Teklogix 9160 G2 Wireless Gateway User Manual Recommendations: Table 16.1 Radio Settings...
Page 191: Updating Settings
2. Configure the radio settings as required. 3. Click the Update button to apply the changes. Note: If you are using the two-radio version of the 9160 G2 Wireless Gateway, keep in mind that both Radio One and Radio Two are configured on this tab.
Page 193: Chapter 17: Mac Address Filtering
17.3 Updating Settings......174 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 195: Navigating To Mac Filtering Settings
MAC addresses. When MAC Filtering is on, only clients with a listed MAC address can access the network. The following sections describe how to use MAC address filtering on the 9160 G2 Wireless Gateway.
Page 196: Using Mac Filtering
Using MAC Filtering 17.2 Using MAC Filtering This page allows you to control access to the 9160 G2 Wireless Gateway based on Media Access Control (MAC) addresses. Based on how you set the filter, you can allow only client stations with a listed MAC address or prevent access to the stations listed.
Page 197 18.4 Updating Settings ......180 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 199: Chapter 18: Load Balancing
The 9160 G2 Wireless Gateway allows you to balance the distribution of wireless client connections across multiple access points. Using load balancing, you can prevent scenarios where a single access point in your network shows performance degradation because it is handling a disproportionate share of the wireless traffic.
Page 200: Specifying Limits For Utilization And Client Associations
QoS, see Chapter 19: “Quality of Service (QoS)”. 18.2 Navigating To Load Balancing Settings On the Administration UI, navigate to the Manage > Load Balancing tab, and update the fields as described in the next section. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 201: Configuring Load Balancing
If you specify 0 in this field, current clients will never be disconnected regardless of the utilization rate. Table 18.1 Load Balancing Settings Chapter 18: Load Balancing Configuring Load Balancing Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 202: Updating Settings
2. Configure the load balancing settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual Description Specify the number of client stations you want as a “stations threshold” for disassociation. If the...
Page 203 19.3 Updating Settings......195 ERVICE Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 205: Chapter 19: Quality Of Service (Qos)
Voice-over-IP (VoIP), other types of audio, video, and streaming media, as well as traditional IP data over the 9160 G2 Wireless Gateway. The following sections describe how to configure Quality of Service queues on the 9160 G2 Wireless Gateway.
Page 206: Qos Queues And Parameters To Coordinate Traffic Flow
The Administration UI provides a way for you to configure parameters on the queues. 19.1.3.1 QoS Queues And Type Of Service (ToS) On Packets QoS on the 9160 G2 Wireless Gateway leverages WMM information in the IP packet header related to Type of Service (ToS). Every IP packet sent over the network includes a ToS field in the header that indicates how the data should be pri- oritized and transmitted over the network.
Page 207 Chapter 19: Quality of Service (QoS) QoS Queues And Parameters To Coordinate Traffic Flow Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 208: Edcf Control Of Data Frames And Arbitration Interframe Spaces
• Upstream from access point to network. • Downstream from network to access point. With WMM enabled, QoS settings on the 9160 G2 Wireless Gateway affect the first two of these; downstream traffic flowing from the access point to client station (AP EDCA parameters) and the upstream traffic flowing from the station to the access point (station EDCA parameters).
Page 209: Random Backoff And Minimum/Maximum Contention Windows
(SIF). These wait times are built-in to 802.11 as infrastructure support and are not configurable. The 9160 G2 Wireless Gateway supports the Enhanced Distribution Coordination Function (EDCF) as defined by the 802.11e standard. EDCF, which is an enhance- ment to the DCF standard and is based on CSMA/CA protocol, defines the interframe space (IFS) between data frames.
Page 210: Packet Bursting For Better Performance
Maximum Contention Window size is reached. 19.1.3.4 Packet Bursting For Better Performance The 9160 G2 Wireless Gateway includes 802.11e based packet bursting technology that increases data throughput and speed of transmission over the wireless network. Packet bursting enables the transmission of multiple packets without the extra over- head of header information.
Page 211 Figure 19.2 Prioritization Of Network Traffic Chapter 19: Quality of Service (QoS) START Is VLAN tag? Is VLAN priority tag (VLAN id = 0) Take Priority from DSCP Psion Teklogix 9160 G2 Wireless Gateway User Manual 802.1p And DSCP Tags Take priority from tag...
Page 212: Vlan Priority
19.1.4.2 DSCP Priority Table 19.2 outlines the DSCP values, the associated ID, and the priority level. ID Tag 0 - default DHCP value Psion Teklogix 9160 G2 Wireless Gateway User Manual VLAN ID Tag Priority Best Effort 0 - default DHCP value...
Page 213: Configuring Qos Queues
To set up queues for QoS, navigate to the Services > QoS tab, and configure settings as described below. Configuring Quality of Service (QoS) on the 9160 G2 Wireless Gateway consists of setting parameters on existing queues for different types of wireless traffic, and effectively specifying minimum and maximum wait times (via Contention Win- dows) for transmission.
Page 214: Configuring Ap Edca Parameters
Field Queue AIFS (Inter-Frame Space) Psion Teklogix 9160 G2 Wireless Gateway User Manual Description Queues are defined for different types of data transmitted from AP-to-station: Data 0 (Voice) High priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue.
Page 215: Enabling/Disabling Wi-Fi Multimedia
By default, Wi-Fi MultiMedia (WMM) is enabled on the access point. With WMM enabled, QoS prioritization and coordination of wireless medium access is on. With WMM enabled, QoS settings on the 9160 G2 Wireless Gateway control downstream traffic flowing from the access point to client station (AP EDCA parameters) and the upstream traffic flowing from the station to the access point (station EDCA parameters).
Page 216: Configuring Station Edca Parameters
Field Queue AIFS (Inter-Frame Space) Psion Teklogix 9160 G2 Wireless Gateway User Manual Description Queues are defined for different types of data transmitted from station-to-AP: Data 0 (Voice) Highest priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue.
Page 217: Updating Settings
To update QoS settings: 1. Navigate to the QoS tab page. 2. Configure the QoS settings as required. 3. Click the Update button to apply the changes. Chapter 19: Quality of Service (QoS) Psion Teklogix 9160 G2 Wireless Gateway User Manual Updating Settings...
Page 219 20.4 Updating Settings ......207 YSTEM Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 221: Chapter 20: Wireless Distribution System
It can also simplify the network infrastructure by reducing the amount of cabling required. The following sections describe how to configure the WDS on the 9160 G2 Wire- less Gateway.
Page 222: Using Wds To Extend Network Beyond The Wired Coverage Area
(“Poolside” in our example in Figure 20.2 on page 201) and bridge the two APs with a WDS link. This extends your network wirelessly by providing an extra hop to get to distant stations (see Figure 20.2 on page 201). Psion Teklogix 9160 G2 Wireless Gateway User Manual Client Station WDS Bridge “Conference Room”...
Page 223: Using Wds To Create Backup Links
20.1.3 Using WDS To Create Backup Links Another use for WDS bridging is the creation of backup links. With Spanning Tree Protocol (STP) automatically enabled on the 9160 G2 Wireless Gateway, WDS can be used to configure backup paths between access points across the network. For example, between two access points you could have both a primary path via Ether- net and a secondary (backup) wireless path via a WDS link.
Page 224: Understanding Static Wep Data Encryption
Note: For security reasons it is recommended you change the shared keys on your WDS bridge on a regular basis. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 225: Configuring Wds Settings
Manage > WDS tab, and update the fields as described below. Note: Figure 20.3 shows the WDS settings page for the two-radio AP. The Adminis- tration Web page for the one-radio AP will look slightly different. Figure 20.3 Wireless Distribution System Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 226 Radio One-Radio AP: On the one-radio version of the 9160 G2 Wireless Gateway, this field is not included on the WDS tab. Two-Radio AP: For each WDS link on a two-radio AP, select Radio One or Radio Two. The rest of the settings for the link apply to the radio selected in this field.
Page 227 WDS link. The two do not (and should not) be the same value or name. Table 20.4 Destination Access Point Settings Chapter 20: Wireless Distribution System Configuring WDS Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 228: Example Of Configuring A Wds Link
IPAddressOfAccessPoint is the address of MyAP1. Psion Teklogix 9160 G2 Wireless Gateway User Manual specified on the Security tabbed page.The WPA (PSK) option will only be an avail- able option on the WDS page if you set the Mode on the Security tabbed page to WPA Personal or WPA Enterprise.
Page 229: Updating Settings
To update WDS settings: 1. Navigate to the WDS tab page. 2. Configure the WDS settings as required. 3. Click the Update button to apply the changes. Chapter 20: Wireless Distribution System Psion Teklogix 9160 G2 Wireless Gateway User Manual Updating Settings...
Page 231 21.3.1 Configuring SNMP Traps .....215 21.3.2 Updating SNMP Settings .....216 SNMP Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 233: Chapter 21: Configuring Snmp
Managed devices can be network nodes such as access point base sta- tions, routers, switches, bridges, hubs, servers, or printers. The 9160 G2 Wireless Gateway can function as an SNMP-managed device for seamless integration into network management systems such as HP OpenView or Devicescape Wireless Operations Center.
Page 234 Chapter 21: Configuring SNMP Understanding SNMP Settings The 9160 G2 Wireless Gateway also supports SNMP traps. Figure 21.1 illustrates how SNMP works on a network. SNMP Event AP running SNMP Agent (Configured to send SNMP traps) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 235: Navigating To Snmp Settings
Chapter 21: Configuring SNMP Navigating To SNMP Settings 21.2 Navigating To SNMP Settings To configure SNMP settings, navigate to Services > SNMP, and update the fields as described below. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 236: Configuring Snmp Settings
Allow SNMP SET Requests Read-write community name for permitted SETs Psion Teklogix 9160 G2 Wireless Gateway User Manual Description You can choose whether or not you want to enable SNMP on your network. By default SNMP is disabled.
Page 237: Configuring Snmp Traps
21.3.1 Configuring SNMP Traps SNMP Traps facilitate asynchronous communication of messages from SNMP managed devices (like the 9160 G2 Wireless Gateway) to designated hosts. If a Network Management System (NMS) is responsible for monitoring a large number of devices on a network, it is not practical to periodically query every device on the network.
Page 238: Updating Snmp Settings
To update SNMP settings: 1. Navigate to the SNMP tab page. 2. Configure the SNMP settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual Table 21.3 SNMP Trap Settings...
Page 239 22.5 Hosts ........243 TATION Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 241: Chapter 22: The 9160 G2 As Base Station
As a wireless base station, the 9160 G2 communicates with the wired base station and mobile terminals using 802.11 WDS. As an RRM, the operation and timing of the 9160 G2’s radio link to the terminals is directly controlled by a network controller that uses a timeplexing radio protocol (see “Timeplexing And Cellular Switching”, below).
Page 242: Radio Protocols
Narrow Band radios, as described in Section 22.3.1. The parameters for the hosts are described in Section 22.5 “Hosts” on page 243. Note: The 9160 G2 main parameters should first be set up as described in Chap- ter 4: “Quick Steps For Setup And Launch” and Chapter 5: “Configuring Basic Settings”.
Page 243: Narrow Band Menus
9160 G2 displays the Narrow Band Radio Configuration Settings of the operating mode for which the 9160 G2 is set (base station or RRM). The page displayed allows you to set the status of the 9160 G2, and to retrieve the RA1001A radio card’s permanent communications settings.
Page 244: Ra1001A Radio Parameters
Chapter 22: The 9160 G2 As Base Station Narrow Band Radio Configuration Settings Radio Card Status This parameter enables or disables the Narrow Band Radio. The card may be dis- abled temporarily when, for testing purposes, it is required that there be no radio interference.
Page 245: Connectivity Options
9160 G2 in either base station or RRM mode. 22.3.3 Connectivity Options: Base Station Mode When you enter the Connectivity Options sub-menu for the 9160 G2 set in base station operating mode, the Polling Protocol and Radio Parameters are displayed.
Page 246 Chapter 22: The 9160 G2 As Base Station Connectivity Options: Base Station Mode Operating Mode This parameter allows you to set the operating mode of the 9160 G2 as Base Station or RRM. Auto-Startup This parameter enables polling immediately when the 9160 G2 is rebooted.
Page 247: Polling Protocol Parameters
22.3.3.1 Polling Protocol Parameters Number of Poll Windows This parameter defines the number of poll windows the 9160 G2 will use. The value assigned to this parameter is dependent on the number of terminals and the radio link protocol used. Table 22.5 indicates how the value assigned to the Number of Poll Windows parameter is determined.
Page 248 This parameter determines the largest single message that can be passed to a terminal in message mode or from a terminal in long message mode. In a 9160 G2 base station, the value entered in this parameter must be greater than or equal to the value entered in the network controller or 9160 G2 mini-controller.
Page 249: Radio Parameters
Sync Delay specifies the delay between the time of the base station transmission and the first response window, measured in character times. The value assigned to this Chapter 22: The 9160 G2 As Base Station Connectivity Options: Base Station Mode...
Page 250 Active Channel This parameter determines the operating radio channel of the 9160 G2. This makes the channel available for channel searching by the terminals. The channel selected must be one of those that have been configured with frequencies, as indicated on the Narrow Band Radio Configuration Settings page.
Page 251: Connectivity Options: Rrm Mode
When you enter the Connectivity Options sub-menu for the 9160 G2 set in RRM operating mode, the 9160 G2 displays the RRM parameters. IP Port This parameter allows you to enter the port number of the 9160 G2. The port number can range from 1024 to 32767. Important: The port number entered here must match the port number entered for this 9160 G2 in the network controller’s RRM configuration.
Page 252: Connectivity Menus
9160 G2 Wireless Gateway), using a range of host platforms. Alternatively, the network controller can be a host running a Psion Teklogix SDK (handler). The 9160 G2 can also act as a slave base station to another 9160 G2 on the network. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 253: Base Station Configuration Settings
The options and parameters on the following pages allow you to configure the 9160 G2 as a master base station connected to up to 32 slave 9160 G2 base stations over an Ethernet network. The master 9160 G2 is connected to a 9500 Network Control- ler, or up to six hosts running the Psion Teklogix Software Development Kit.
Page 254: Rrm Groups Configuration Settings
When this parameter is enabled, the slave base stations will start polling when the master 9160 G2 boots up. When Auto-Startup is disabled, the base stations will not start polling until they receive a start polling command from the host.
Page 255 Chapter 22: The 9160 G2 As Base Station RRM Groups Configuration Settings All RRMs in a group operate on the same radio channel. The 9160 G2 coordinates the transmissions of all the RRMs in a group (for this reason, the controlling 9160 G2 is sometimes referred to as the “Timeplexing Master”).
Page 256: Rrm Groups
This screen is very similar to the one in “Connectivity Options: Base Station Mode” on page 223, the difference being that the parameters configured in those radio menus apply to the RA1001A radio resident in the 9160 G2, while the parameters configured here apply to the other, remote 9160 G2s (the RRMs).
Page 257: Polling Protocol Parameters
If this parameter is enabled, the 9160 G2 checks for other traffic on the radio channel used by this RRM group, before polling. If this parameter is disabled, the 9160 G2 assumes that it has exclusive use of the radio channel for this RRM group, and polls without checking for radio traffic.
Page 258 This textbox allows the user to specify the size of the largest message segment, in bytes, that will be sent over the Psion Teklogix radio network. Larger messages are broken into parts. The allowable values range from 32 to 116. The default value is 100.
Page 259: Radio Parameters
Because some of the radio parameters are identical for a given group of timeplexed RRMs, they may be configured by the user once on the 9160 G2; the 9160 G2 then passes them to the RRMs in the group. These parameters include the synchroniza- tion delay (Sync Delay), the remote transmit on-time (Remote Txon), and the channel number to be used (Active Channel).
Page 260: Group Parameters
Chapter 22: The 9160 G2 As Base Station RRM Groups Configuration Settings 22.4.2.4 Group Parameters Combination These textboxes allow the user to specify RRM subgroups called combinations. If the coverage areas of two or more of the RRMs in this RRM group do not overlap, the non-overlapping RRMs may poll at the same time.
Page 261: Radio Link Features Configuration Settings
Chapter 22: The 9160 G2 As Base Station Radio Link Features Configuration Settings 22.4.3 Radio Link Features Configuration Settings From the Connectivity options list, entering Radio Link Features will open the con- figuration settings page for the polling and cellular parameters.
Page 262: Radio Link Features
This parameter determines the time that a terminal is allowed to be inactive before the 9160 G2 declares it offline. This time is expressed as a percentage of the Polling Protocol Terminal Timeout parameter (see above). For example, if the Polling Pro-...
Page 263: Automatic Radio Address
Direct TCP Connections for TekTerm Enabling this parameter allows the TekTerm program resident in Psion Teklogix terminals to connect directly to the 9160 G2, when it is acting as a base station to a host via TCP/IP. Direct TCP Check Duplicate Terminal Number When this parameter is enabled, the 9160 G2 will reject Direct TCP terminals which try to connect using a terminal number already in use by another terminal.
Page 264: Automatic Terminal Number
This parameter dictates how long, in days, a particular radio address or terminal number should be inactive, before the 9160 G2 declares it to be “expired”. An expired address or terminal number may be reassigned to another radio or session.
Page 265: Hosts
22.5 Hosts When the 9160 G2 acts as a base station, it must communicate with a “host”—a 9500 Network Controller, or a host computer using a Psion Teklogix Software Development Kit (SDK). Therefore each master network controller, SDK host, or master base station that communicates with the 9160 G2 must be configured as a host.
Page 266 Chapter 22: The 9160 G2 As Base Station Hosts Figure 22.8 Overview Of Base Station’s Host Configuration Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 267 Ethernet and radio-link connections. When the 9160 G2 functions as a base station, it communicates with a 9010/ TCP/IP host using a network connection. The 9010 protocol is a proprietary asynchronous protocol developed by Psion Teklogix which uses TESS (Teklogix Screen Subsystem) or ANSI data streams to communicate with terminals.
Page 268 SDK, TESS or ANSI. No Online/Offline If this parameter is Enabled, the 9160 G2 base station does not notify the host if the status of a terminal changes between offline and online. If this parameter is Dis- abled, the 9160 G2 does notify the host regarding any terminal status changes. The default for this parameter is Disabled.
Page 269: Chapter 23: Network Time Protocol Server
23.3 Updating Settings......250 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 271: Navigating To Time Protocol Settings
The timestamp will be used to indicate the date and time of each event in log messages. http://www.ntp.org for more general information on NTP. The following sections describe how to configure the 9160 G2 Wireless Gateway to use a specified NTP server. 23.1 Navigating To Time Protocol Settings To enable an NTP server, navigate to the Services >...
Page 272: Enabling Or Disabling A Network Time Protocol (Ntp) Server
2. Configure the time settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual Description NTP provides a way for the access point to obtain and maintain its time from a server on the network.
Page 273 24.6.1 Update .......257 24.6.2 Verifying The Firmware Upgrade ....257 ONFIGURATION Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 275: Chapter 24: Backing Up & Restoring Configuration
You can save a copy of the current settings on the 9160 G2 Wireless Gateway to a backup configuration file. The backup file can be used at a later date to restore the access point to the previously saved configuration.
Page 276: Saving The Current Configuration To A Backup File
It is only possible to restore the configuration file to a 9160 of the same model as the one from which the configuration file was obtained. For example, a 9160 G2 model “9160 Wireless Gateway” will not restore a configuration file saved from a 9160 G2 model “9160 Wireless Gateway (Dual Radio)”.
Page 277: Rebooting The Access Point
2. Click the Restore button. The access point will reboot. 24.6 Upgrading The Firmware As new versions of the 9160 G2 Wireless Gateway firmware become available, you can upgrade the firmware on your devices to take advantage of new features and enhancements.
Page 278 Note: The firmware upgrade file supplied must be in the format <FileName>.upgrade.tar Do not attempt to use <FileName>.bin files or files of other formats for the upgrade—these will not work. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 279: Update
Upgrade tab (and also on the Basic Settings tab). If the upgrade was successful, the updated version name or number will be indicated. Chapter 24: Backing Up & Restoring Configuration Psion Teklogix 9160 G2 Wireless Gateway User Manual Update...
Page 281 25.7 Radios ........262 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 283: Chapter 25: Specifications
A ground wire, not exceeding 3 m in length, must be connected between the ground screw (located on the quick-release mount) and a suitable earth ground bonding point on any 9160 G2 connected to an antenna that is installed outdoors.
Page 284: Power Over Ethernet Requirements
Data Rate No. of Channels Note: All 802.11a channels are non-overlapping. There are non-overlapping channels in the 2.4 GHz band. Psion Teklogix 9160 G2 Wireless Gateway User Manual 37 - 57 VDC η 2.5W (Assume =0.8 at full 12.5 watt from Ethernet) 10BaseT/100BaseT (10/100 Mb/s) card with auto-negotiation, half and full duplex.
Page 285 403-422 MHz, 419-435 MHz, 435-451 MHz, 450-470 MHz, 464-480 MHz, 480-496 MHz, 496-512 MHz Rx Sensitivity < -110dBm @ 19.2kbps (4 level FSK) Data Rates 4800 bps, 9600 bps, 19.2 kbps Chapter 25: Specifications Psion Teklogix 9160 G2 Wireless Gateway User Manual Radios...
Page 287: Appendix A: Support Services And Worldwide Offices
Technical Support for Mobile Computing Products is provided via e-mail through the Psion Teklogix customer and partner extranets. To reach the website, go to www.psionteklogix.com, and click on the appropriate Teknet link on the home page. Then click on the “Login” button or the “Register” button, depending on whether you have previously registered for Teknet.
Page 288: Worldwide Offices
Canada L5N 7J9 Tel: +1 800 387 8898Option 2 - or - Direct: + 1 905 813 9900Ext. 1999, Option 2 Fax: + 1 905 812 6304 Web: www.psionteklogix.com U.S. S ERVICE ENTRE Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 289: Console Port
INOUTS B.1 Console Port Pin No. * always pulled high PPENDIX ABLE IAGRAMS Name Function Transmit Data Receive Data Signal Ground Data Terminal Ready Request to Send Psion Teklogix 9160 G2 Wireless Gateway User Manual Direction –...
Page 290: Serial Cable Descriptions
Appendix B: Port Pinouts And Cable Diagrams Serial Cable Descriptions B.2 Serial Cable Descriptions Cable No. 19387 Console Port Cable No. 19387 Psion Teklogix 9160 G2 Wireless Gateway User Manual Function Connection 9160 G2 to Console Direct Standard Length 6 feet...
Page 291: Connector Pinouts (10Baset/100Baset Ethernet
Signal TD – RD – * The 9160 G2 can also accept 48 VDC power bias on the data line pairs (1,2) and (3,6) from such sys- tems providing power over Ethernet. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 293 C.8 Configuring WPA/WPA2 Personal (PSK) Security On A Client ..C-28 C.9 Configuring An External RADIUS Server To Recognize The 9160 G2 Wire- less Gateway....... . C-30 C.10 Obtaining A TLS-EAP Certificate For A Client.
Page 295 The following sections describe how to set up each of the supported security modes on wireless clients of a network served by the 9160 G2 Wireless Gateway. The exception to this is if the access point is set to prohibit the broadcast of its network name. In this case the SSID will not show up in the list of Available Networks on the client.
Page 296: Appendix C: Security Settings On Wireless Clients And Radius Server
Enterprise (RADIUS) security mode. (The built-in authentication server uses EAP- PEAP authentication protocol.) • If the 9160 G2 Wireless Gateway is set up to use IEEE 802.1x mode and the Built-in Authentication Server, then configure wireless clients as described in “IEEE 802.1x Client Using EAP/PEAP” on page C-11.
Page 297: Make Sure The Wireless Client Software Is Up-To-Date
• “WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate” on page C-24. • “Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway” on page C-30. • “Obtaining A TLS-EAP Certificate For A Client” on page C-34. Details on how to configure an EAP-PEAP client with an external RADIUS server are not covered in this document.
Page 298 This brings up the Wireless Network Connection Properties dialog with the Association and Authentication tabs for the selected network. Psion Teklogix 9160 G2 Wireless Gateway User Manual List of available networks will change depending on client location. Each network (or access point) that that is detected by the client shows up in this list.
Page 299: Configuring A Client To Access An Unsecure Network (No Security
If you do have security configured on a client for properties of an unsecure network, the security settings actually can prevent successful access to the network because of the mismatch between client and access point security configurations. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 300: Configuring Static Wep Security On A Client
(Or they can all use the same key, but this is less secure because it means one station can decrypt the data being sent by another.) Psion Teklogix 9160 G2 Wireless Gateway User Manual Set Network Authentication to Open...
Page 301 Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup Configuring Static WEP Security On A Client If you configured the 9160 G2 Wireless Gateway to use Static WEP security mode . Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 302 Network Authentication Data Encryption Network Key Key Index C-10 Psion Teklogix 9160 G2 Wireless Gateway User Manual Choose Open or Shared Choose WEP as the Data Encryption mode Enter a network key that matches the WEP key on the access point...
Page 303: Configuring Ieee 802.1X Security On A Client
Extensible Authentication Protocol (EAP) referred to here as “EAP/PEAP”. • If you are using the Built-in Authentication server with “IEEE 802.1x” security mode on the 9160 G2 Wireless Gateway, then you will need to set up wireless clients to use PEAP. •...
Page 304 RADIUS server, the client configuration process will differ somewhat from this example, especially with regard to certificate validation. If you configured the 9160 G2 Wireless Gateway to use IEEE 802.1x security mode ..then configure IEEE 802.1x security with PEAP authentication on each client as...
Page 305 Choose Protected EAP (PEAP) Enable auto key option . . . then click Configure Disable (click to uncheck) option to automatically use Windows logon name and password Psion Teklogix 9160 G2 Wireless Gateway User Manual . . . then, click Properties C-13...
Page 306 Click OK on all dialogs (starting with the EAP MSCHAP v2 Properties dialog) to close and save your changes. C-14 Psion Teklogix 9160 G2 Wireless Gateway User Manual Open Note: An RC4 stream cipher is used to encrypt the frame body and cyclic redun- dancy checking (CRC) of each IEEE 802.11 frame.
Page 307: Ieee 802.1X Client Using Eap/Tls Certificate
To use this type of security, you must do the following: 1. Add the 9160 G2 Wireless Gateway to the list of RADIUS server cli- ents. (See “Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway” on page C-30.) 2.
Page 308 4. Obtain a certificate for this client as described in “Obtaining A TLS- EAP Certificate For A Client” on page C-34. If you configured the 9160 G2 Wireless Gateway to use IEEE 802.1x security mode with an external RADIUS server . . .
Page 309 Enable (click to check) Validate server certificate Select (check) the name of certificate on this client (downloaded from RADIUS server in a prerequisite procedure) Psion Teklogix 9160 G2 Wireless Gateway User Manual . . . then, click Properties C-17...
Page 310 “Obtaining A TLS-EAP Certificate For A Client” on page C-34. C-18 Psion Teklogix 9160 G2 Wireless Gateway User Manual Open Note: An RC4 stream cipher is used to encrypt the frame body and cyclic redun- dancy checking (CRC) of each IEEE 802.11 frame.
Page 311: Configuring Wpa/Wpa2 Enterprise (Radius) Security On A Client
Built-in Authentication Server or an external RADIUS server that you provide. The 9160 G2 Wireless Gateway Built-in Authentication Server supports Protected Extensible Authentication Protocol (EAP) known as “EAP/PEAP” and Microsoft...
Page 312: Wpa/Wpa2 Enterprise (Radius) Client Using Eap/Peap
Additionally, you may have an external RADIUS server that uses EAP/PEAP. If so, you will need to: (1) Add the 9160 G2 Wireless Gateway to the list of RADIUS server cli- ents. (2) Configure your “WPA/WPA2 Enterprise (RADIUS)” wireless clients to use PEAP.
Page 313 Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup WPA/WPA2 Enterprise (RADIUS) Client Using EAP/PEAP If you configured the 9160 G2 Wireless Gateway to use WPA/WPA2 Enterprise (RADIUS) security mode and to use either the Built-in Authentication Server or an external RADIUS server that uses EAP/PEAP .
Page 314 Data Encryption mode Disable (click to uncheck) Validate server certificate C-22 Psion Teklogix 9160 G2 Wireless Gateway User Manual Choose Protected EAP (PEAP) Choose Secured password (EAP-MSCHAP v2) . . . then click Configure Disable (click to uncheck) this option...
Page 315 TKIP key and AES clients with a valid CCMP (AES) key can associate with the access point. For more information, see Online Help on the access point. Psion Teklogix 9160 G2 Wireless Gateway User Manual C-23...
Page 316: Wpa/Wpa2 Enterprise (Radius) Client Using Eap-Tls Certificate
To use this type of security, you must do the following: 1. Add the 9160 G2 Wireless Gateway to the list of RADIUS server cli- ents. (See “Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway” on page C-30.)
Page 317 Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate 2. Configure the 9160 G2 Wireless Gateway to use your RADIUS server (by providing the RADIUS server IP address as part of the “WPA/WPA2 Enterprise [RADIUS]”...
Page 318 . . . then configure WPA security with certificate authentication on each client as follows. Choose either TKIP or AES for the Choose WPA Data Encryption mode C-26 Psion Teklogix 9160 G2 Wireless Gateway User Manual Choose Smart Card or other Certificate and enable Authenticate as computer ... Enable (click to check)
Page 319 The certificate you installed is used when you connect, so you will not be prompted for logon information. The certificate is automatically sent to the RADIUS server for authentication and authorization. Enable (click to check) this option. Choose Smart Card or other Certificate. Psion Teklogix 9160 G2 Wireless Gateway User Manual C-27...
Page 320: Configuring Wpa/Wpa2 Personal (Psk) Security On A Client
Advanced Encryption Algorithm (AES), and Counter mode/CBC-MAC Protocol (CCMP) mechanisms. PSK employs a pre-shared key for an initial check of client credentials. If you configured the 9160 G2 Wireless Gateway to use WPA/WPA2 Personal (PSK) security mode . . . C-28...
Page 321 Table C.16 Association Settings Choose WPA-PSK. Choose either TKIP or AES for the Data Encryption mode. Enter a network key that matches the one specified on the access point (and confirm by re-typing). Psion Teklogix 9160 G2 Wireless Gateway User Manual C-29...
Page 322: Configuring An External Radius Server To Recognize The 9160 G2 Wireless Gateway
Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway Enable IEEE 802.1x authentication for this network Click OK on the Wireless Network Properties dialog to close it and save your changes.
Page 323 Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway The purpose of this procedure is to identify your 9160 G2 Wireless Gateway as a “client” to the RADIUS server. The RADIUS server can then handle authentication and authorization of wireless clients for the AP.
Page 324 Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway 1. Log on to the system hosting your RADIUS server and bring up the Internet Authentication Service.
Page 325 Appendix C: Security Settings On Wireless Clients And RADIUS Server Setup Configuring An External RADIUS Server To Recognize The 9160 G2 Wireless Gateway 4. For the Shared secret enter the RADIUS Key you provided to the access point (on the Security page). Re-type the key to confirm.
Page 326: Obtaining A Tls-Eap Certificate For A Client
Some good starting points available on the Web for the Microsoft Windows PKI software are: “How to Install/Uninstall a Public Key Certificate Authority for Windows http://support.microsoft.com/default.aspx?scid=kb;EN-US;231881 2000” at “How to Configure a Certificate Server” at http://support.microsoft.com/default.aspx?scid=kb;en-us;318710#3 C-34 Psion Teklogix 9160 G2 Wireless Gateway User Manual , and...
Page 327 2. Click Yes to proceed to the secure Web page for the server. Obtaining A TLS-EAP Certificate For A Client is the IP address of your external RADIUS Psion Teklogix 9160 G2 Wireless Gateway User Manual C-35...
Page 328 This document does not describe how to set up Administra- tive user accounts on the RADIUS server. Please consult the documenta- tion for your RADIUS server for these procedures. C-36 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 329 5. Click User Certificate on the next page displayed. 6. Click Yes on the dialog displayed to install the certificate. 7. Click Submit to complete and click Yes to confirm the submittal on the popup dialog. C-37 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 330: Configuring Radius Server For Vlan Tags
A VLAN is a grouping of ports on a switch or a grouping of ports on different switches. Dynamic VLANs allow you to assign a user to a VLAN, and switches dynamically use this information to configure the port on the switch automatically. C-38 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 331: Configuring A Radius Server
In the case of the 9160 G2 Wireless Gateway, if the user has selected to use an exter- nal RADIUS server (configured on the Security page), then an External RADIUS server will try to authenticate the user.
Page 333: D.2 Cluster Recovery
D.2 Cluster Recovery ......D-4 D.2.1 Reboot Or Reset Access Point ....D-4 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 335: Appendix D: Troubleshooting
- If you can trace more than one path between any pair of APs going through any combination of Ethernet or WDS links, you have a loop. - You can only extend or bridge either the Internal or Guest network, but not both. Appendix D: Troubleshooting Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 336 • Reset the access point from its Administration UI. To do this, go to http://IPAddressOfAccessPoint Reset button. (IP addresses for APs are on the Cluster > Access Points page for any cluster member.) Psion Teklogix 9160 G2 Wireless Gateway User Manual , navigate to Reset Configuration, and click the...
Page 337 (EAPOL). It establishes a framework that supports multiple authentication methods. IEEE 802.1x authenticates users not machines. 802.2 IEEE 802.2 (IEEE Std. 802.2.1998) defines the LLC layer for the 802 family of standards. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 338 ISM band as well as complementary code keying (CCK) to provide the higher data rates. It supports data rates ranging from 1 to 11 Mbps. Psion Teklogix 9160 G2 Wireless Gateway User Manual 802.3-2002) defines the MAC layer for networks that use 802.11-1999) is a medium access control (MAC) and...
Page 339 (OFDM). It supports data rates ranging from 1 to 54 Mbps. 802.11h IEEE 802.11h is a standard used is to resolve the issue of interference which was prevalent in 802.11a. The two schemes used to minimize interference in 802.11h are Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 340 APs to improve network performance and prevent under or over- utilization of any one AP. 802.11k will eventually complement the 802.11e quality of service (QoS) standard by ensuring QoS for multimedia over a wireless link. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 341 Ad hoc mode is a Wireless Networking Framework in which stations communicate directly with each other. It is useful for quickly establishing a network in situations where formal infrastructure is not required. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 342 The Beacon interval defines the amount of time between transmitting beacon frames. Before entering power save mode, a station needs the beacon interval to know when to wake up to receive the beacon. Psion Teklogix 9160 G2 Wireless Gateway User Manual NIST Web site.
Page 343: Broadcast Address
A basic service set (BSS) is an Infrastructure Mode Wireless Networking Framework with a single access point. Also see extended service set (ESS) and independent basic service set (IBSS). Psion Teklogix 9160 G2 Wireless Gateway User Manual Appendix E: Glossary Bridge...
Page 344 Commission, or the CSMA/CA Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) is a low-level network arbitration/contention protocol. A station listens to the media and attempts Psion Teklogix 9160 G2 Wireless Gateway User Manual (ETSI), the Telecom Engineering Center (FCC), the...
Page 345 A DHCP server “offers” a “lease” (for a pre-configured period of time—see Lease Time) to the client system. The information supplied includes the client's IP addresses and netmask plus the address of its DNS servers and Gateway. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 346 Access Point awaiting pick-up. Part of the DTIM message indicates how frequently stations must check for buffered data. Dynamic IP Address See IP Address. E-10 Psion Teklogix 9160 G2 Wireless Gateway User Manual www.psionteklogix.com is the fully-qualified name of that www.psionteklogix.com for Taiwan,...
Page 347 10base5 (Thicknet or “Yellow Cable”). Some others are 10base2 (Cheapernet), 10baseT (Twisted Pair), and 100baseT (Fast Ethernet). The latter two are commonly supplied using CAT5 cabling with RJ-45 connectors. There is also 1000baseT (Gigabit Ethernet). E-11 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 348 A gateway is a network node that serves as an entrance to another network. A gateway also often provides a proxy server and a firewall. It is associated with both a router, which use headers and forwarding tables to determine where packets are E-12 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 349 All data sent via HTTPS is encrypted, thus ensuring secure transactions take place. tag and ends with a <html> </html> section, which <head> </head> <body> </body> Psion Teklogix 9160 G2 Wireless Gateway User Manual Appendix E: Glossary HTML tag. A section, which E-13...
Page 350: Infrastructure Mode
(ESS). Intrusion Detection The Intrusion Detection System (IDS) inspects all inbound network activity and reports suspicious patterns that may indicate a network or system attack from E-14 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 351 A Dynamic IP Address is an IP address that is automatically assigned to a host by a DHCP server or similar mechanism. It is called dynamic because you may be assigned a different IP address each time you establish a connection. Psion Teklogix 9160 G2 Wireless Gateway User Manual Appendix E: Glossary . This is 192.168.2.254...
Page 352 Latency, also known as delay, is the amount of time it takes to transmit a Packet from sender to receiver. Latency can occur when data is transmitted from the access point to a client and vice versa. It can also occur when data is transmitted from E-16 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 353 The Logical Link Control (LLC) layer controls frame synchronization, flow control, and error checking. It is a higher level protocol over the PHY layer, working in conjunction with the MAC layer. E-17 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 354 The Maximum Transmission Unit is the largest physical packet size, measured in bytes, that a network can transmit. Any messages larger than the MTU are fragmented into smaller packets before being sent. E-18 Psion Teklogix 9160 G2 Wireless Gateway User Manual FE:DC:BA:09:87:65...
Page 355: Network Address
A Network Interface Card is an adaptor or expansion board inserted into a computer to provide a physical connection to a network. Most NICs are designed for a particular type of network, protocol, and media, for example, Ethernet or wireless. E-19 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 356 (NFS) and structured query language (SQL). Also part of this layer are communication flows like single mode (device sends information bulk), half-duplex mode (devices take turns transmitting information in bulk), and full-duplex mode (interactive, where devices transmit and receive simulta- neously). E-20 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 357 The Process Identifier (PID) is an integer used by Linux to uniquely identify a process. A PID is returned by the perform actions on the given process. system call. It can be used by fork() Psion Teklogix 9160 G2 Wireless Gateway User Manual Appendix E: Glossary Packet wait() kill()
Page 358: Port Forwarding
Proxy servers have two main purposes: improve performance by spreading requests over several machines and filter requests to prevent access to specific servers or services. Pre-Shared Key (PSK), see Shared Key. E-22 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 359 In IEEE 802.11 parlance, roaming clients are mobile client stations or devices on a wireless network (WLAN) that require use of more than one Access Point (AP) as they move out of and into range of different base station service areas. IEEE 802.11f E-23 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 360 This message is a part of the IEEE 802.11 CSMA/CA protocol. (See also RTS Threshold and CTS.) E-24 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 361 It is also referred to as the Network Name. There are no restrictions on the characters that may be used in an SSID. Static IP Address See IP Address. E-25 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 362: Subnet Mask
A station may be able to receive data at any of the rates listed in this set. All stations must be able to receive data at the rates listed in the Basic Rate Set. E-26 Psion Teklogix 9160 G2 Wireless Gateway User Manual 255.255.255.0 192.168.2.0/24 and the netmask is 192.168.2.128...
Page 363 Integrity Code (MIC, sometimes called “Michael”), and a re-keying mechanism. It uses a RC4 stream cipher to encrypt the frame body and CRC of each 802.11 frame before transmission. It is an important component of the WPA and 802.11h security mechanisms. E-27 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 364 “best-effort” settings depending upon the requirements of the data. The ToS field is used by the 9160 G2 Wireless Gateway to provide configuration control over Quality of Service (QoS) queues for data transmitted from the AP to client stations.
Page 365 The nodes in a VLAN share resources and bandwidth, and are isolated on that network. The 9160 G2 Wireless Gateway supports the configuration of a wireless VLAN. This technology is leveraged on the access point for the “virtual”...
Page 366 Stations communicate through an Access Point in an Infrastructure Mode network. A single access point creates an infrastructure basic service set (BSS) whereas multiple access points are organized in an extended service set (ESS). E-30 Psion Teklogix 9160 G2 Wireless Gateway User Manual Wi-Fi Alliance, a non-profit trade organization.
Page 367 Authentication Protocol (EAP) authentication with a RADIUS server. The Personal version does not require IEEE 802.1x or EAP. It uses a Pre-Shared Key (PSK) password to generate the keys needed for authentication. E-31 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 368 The Extensible Markup Language (XML) is a specification developed by the W3C. XML is a simple, flexible text format derived from Standard Generalized Markup Language (SGML), designed especially for electronic publishing. E-32 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 369 165 bridges, WDS 199 Broadcast SSID 99 cables coaxial 20 console port No. 19387 B-2 serial descriptions B-2 Callsign Period RRM group 236 Period, narrow band radio 227 String Psion Teklogix 9160 G2 Wireless Gateway User Manual NDEX...
Page 370 226 RRM group 236 Combination, RRM Group 238 connecting ANSI-compatible terminals 23 console 23 Ethernet 22 Psion Teklogix 9160 G2 Wireless Gateway User Manual video display terminal 23 Connectivity Options Base Station Mode 223 RRM Mode 229 connectors RJ-45 B-3...
Page 371 9160 G2 21 key management, security 92 LAN installations 21 LEDs 22 link integrity monitoring 126 load balancing, configuring 179 location, describing 60 logon administration Web pages 41 loops, WDS 201 Psion Teklogix 9160 G2 Wireless Gateway User Manual Index...
Page 372 250 Number of Poll Windows RRM group 235 Poll Windows, narrow band radio 225 Psion Teklogix 9160 G2 Wireless Gateway User Manual Retries RRM group 236 Retries, narrow band radio 226 omnidirectional antenna 19 online/offline messages 246...
Page 373 Callsign String 236 Collision Size 236 Combination 238 Free Window Factor 236 Maximum Message Segment Size Message Mode Limit 236 Number of Poll Windows 235 Number of Retries 236 Polling Protocol Parameters 235 Psion Teklogix 9160 G2 Wireless Gateway User Manual Index...
Page 374 261 RA1001A narrow band radio 263 802.11A/G radio 262 802.11G radio 262 standards 10 Psion Teklogix 9160 G2 Wireless Gateway User Manual starting the network 50 static WEP security mode configuring 102 on WDS links 201 when to use 93...
Page 375 802.11 Advanced Settings (Radio Settings page) 164, 169 802.11 Basic Settings (Wireless Settings page)) 141, 146 802.11G radio 262 9010 / TCP/IP, base station configuration 9010 Emulation 246 9500 Network Controller, cellular mode Psion Teklogix 9160 G2 Wireless Gateway User Manual Index...

Psion Teklogix 9160 G2 User Manual

Chapter 1: Introduction

Chapter 2: Installation Requirements

Chapter 3: Prelaunch Checklist

Chapter 4: Quick Steps for Setup and Launch

Chapter 5: Configuring Basic Settings

Chapter 6: Managing Access Points & Clusters

Chapter 7: Managing User Accounts

Chapter 8: Channel Management

Chapter 9: Wireless Neighborhood

Chapter 10: Configuring Security

Chapter 11: Maintenance and Monitoring

Chapter 12: The Ethernet (Wired) Interface

Chapter 13: Setting the Wireless Interface

Chapter 14: Setting up Guest Access

Chapter 15: Configuring Vlans

Chapter 16: Configuring 802.11 Radio Settings

Chapter 17: MAC Address Filtering

Chapter 18: Load Balancing

Chapter 19: Quality of Service (Qos)

Chapter 20: Wireless Distribution System

Chapter 21: Configuring SNMP

Chapter 22: The 9160 G2 as Base Station

Chapter 23: Network Time Protocol Server

Chapter 24: Backing up & Restoring Configuration

Chapter 25: Specifications

Appendix A: Support Services and Worldwide Offices

Quick Links

Related Manuals for Psion Teklogix 9160 G2

Summary of Contents for Psion Teklogix 9160 G2