Summary of Contents for infoGlobal IG-WL5G-E
- Page 1 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E...
-
Page 2: Table Of Contents
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Index 1. HISTORICO ......................4 2. INTRODUCCTION ....................5 3. TECHNICAL CHARACTERISTICS ..............5 4. INSTALLATION AND CONFIGURATION ............10 5. USING THE COMMAND-LINE INTERFACE............. 11 5.1 CLI Command Modes .................. 12 5.1.1 User EXEC Mode................13 5.1.2... - Page 3 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 5.15 QoS in a Wireless Environment ..............33 5.15.1 Understanding QoS for Wireless LANs..........33 5.15.2 QoS for Wireless LANs Versus QoS on Wired LANs....... 33 5.15.3 Impact of QoS on a Wireless LAN ........... 34 5.15.4...
-
Page 4: Historico
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 1. HISTORIC VERSION/data Modification/Description 00/27-11-2009 Creation 01/25-04-2011 Adding channel power clarification in section 5.11. Autor: Carmen Arteaga Revisado por: Aprobado por: Fecha: Fecha: Fecha:... -
Page 5: Introducction
IG-WL5G-E R.01.2009 2. INTRODUCCTION This guide is for the professional who installs and manages the IG-WL5G-E Onboard equipment. To use this guide you should have experience working with network and radio elements, be familiar with the concepts and terminology of wireless local area networks, and be used to CLI and Linux interfaces. - Page 6 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Power Led Ethernet Port 72VDC port Grounding screw 5GHz antenna connector EXTERNAL INTERFACES DENOMINATION REMARK Positive – TX pair Ethernet Positive – RX pair IP Network Ethernet CAT5 10/100 connectivity Negative – TX pair AWG22 Negative –...
- Page 7 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 PHYSICAL CHARACTERISTICS...
- Page 8 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Parameter Specifications Dimensions (High x Wide x Deep) in 482.6x133x253.3mm (rack 19” 3U) Weigh (Kg) 5.7kg High i RU’s (Rack Units) Power in (Vdc) 72Vdc Consume (W) Heat Dissipation (BTU’s / hr) Operation Temperature (ºC) -20º...
- Page 9 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 EAP Type(s): EAP-Flexible Authentication via Secure Tunnelling (EAP-FAST) Protected EAP-Generic Token Card (PEAP-GTC) PEAP-Microsoft Challenge Authentication Protocol Version 2 (PEAP-MSCHAP) EAP-Transport Layer Security (EAP-TLS) EAP-Tunnelled TLS (EAP-TTLS) EAP-Subscriber Identity Module (EAP-SIM) Cisco LEAP 802.1X...
-
Page 10: Installation And Configuration
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 1 RS232 port with M12D connector 1 feeding interface with M12A connector 1 RF interface with N connector Logic Interface: The system will have a user interface to configure the different functionalities and parameters. -
Page 11: Using The Command-Line Interface
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Data Bit:8 Parity:None Stop Bits:1 Flux Control:None Connect the Ethernet cable to the computer Ethernet port and to the IGWL5G-E Ethernet port. Configure the next network parameters in the Computer IP:10.0.0.10 Mask:255.255.255.0 If your system administrator has set a password, you are prompted to enter it before being granted access to privileged EXEC mode. -
Page 12: Cli Command Modes
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 This section describes how to access the command modes and use the command- line interface (CLI) to configure software features. This publication uses these conventions to convey instructions and information: Command descriptions use these conventions: Commands and keywords are in boldface text. -
Page 13: User Exec Mode
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Privileged EXEC From user EXEC mode, To exit to user enter enable EXEC mode, command. enter disable command. AP(config)# Global From privileged EXEC exit configuration mode, enter privileged configure command. EXEC mode, enter the exit or end command, or press Ctrl-Z. -
Page 14: Global Configuration Mode
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 as well as the configure privileged EXEC command through which you access the remaining command modes. If your system administrator has set a password, you are prompted to enter it before being granted access to privileged EXEC mode. The password does not appear on the screen and is case sensitive. -
Page 15: Interface Configuration Mode
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 To exit global configuration command mode and to return to privileged EXEC mode, enter the end or exit command, or press Ctrl-Z. 5.1.4 INTERFACE CONFIGURATION MODE Interface configuration commands modify the operation of the interface. Interface configuration commands always follow a global configuration command, which defines the interface type. -
Page 16: Protecting Your Wireless Lan
After you assign basic settings to your IG-WL5G/E, you need to configure security settings to prevent unauthorized access to your network. Because it is a radio device, the IG-WL5G-E can communicate beyond the physical boundaries of a building. Advanced security features are described in the following chapters: A unique SSID that is not broadcast in the beacon (see “Service Set Identifiers”... -
Page 17: Express Security Types
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 with VLANs disabled, you cannot create additional SSIDs with WPA authentication because they use different encryption settings. If you find that the security setting for an SSID conflicts with another SSID, you can delete one or more SSIDs to eliminate the conflict. -
Page 18: Workgroup Bridge Role
1645). 5.5 Workgroup Bridge Role The IG-WL5G-E is configured as a workgroup bridge mode to work in the train to track Infoglobal system, the workgroup bridge associates to an access point, or bridge as a client and provides a wireless network connection for up to eight Ethernet-enabled devices connected to its Ethernet port. - Page 19 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Associates to the following devices: Root access points – -Root devices -Accepts only wired clients. -Informs its root parent of all attached wired clients by using Inter-Access Point Protocol (IAPP) messaging. In addition, you can configure the wireless device to support the following workgroup bridge features: Interoperability—The universal workgroup bridge appears as a normal wireless...
- Page 20 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Multiple Client Profiles—The workgroup bridge can support multiple client profiles. A client device with multiple configurable profiles can automatically select a client profile based on available infrastructure and set of profiles. For more information, see “Service Set Identifiers”.For example, to provide wireless connectivity for a...
-
Page 21: Configuring A System Name And Prompt
IP connectivity. 5.6 Configuring a System Name and Prompt You configure the system name on the IG-WL5G-E to identify it. A “greater than” symbol (>) is appended. The prompt is updated whenever the system name changes, unless you manually configure the prompt by using the prompt command in global configuration mode. -
Page 22: Protecting Access To Privileged Exec Commands
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 5.7 Protecting Access to Privileged EXEC Commands A simple way of controlling terminal access in your network is to use passwords and assign privilege levels. Password protection restricts access to a network or network device. Privilege levels define what commands users can issue after they have logged into a network device. - Page 23 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Step 1 configure terminal Enters global configuration mode. Step 2 enable password Defines a new password or change an existing password password for access to privileged EXEC mode. The default password is Cisco. For password, specify a string from 1 to 25 alphanumeric characters.
-
Page 24: Protecting Enable And Enable Secret Passwords With Encryption
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 5.9.1 PROTECTING ENABLE ENABLE SECRET PASSWORDS WITH ENCRYPTION To provide an additional layer of security, particularly for passwords that cross the network or that are stored on a Trivial File Transfer Protocol (TFTP) server, you can use either the enable password or the enable secret command. - Page 25 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Step 2 enable password [level Defines a new password or change an level] {password existing password access encryption-type privileged EXEC mode. encrypted-password} Defines a secret password, which is enable secret [level saved using a nonreversible encryption...
-
Page 26: Configuring Radius Login Authentication
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 startup-config configuration file. If both the enable and enable secret passwords are defined, users must enter the enable secret password. Use the level keyword to define a password for a specific privilege level. After you specify the level and set a password, give the password only to users who need to have access at this level. - Page 27 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 security protocols to be used for authentication, to ensure a backup system for authentication if the initial method fails. The software uses the first method listed to authenticate users; if that method fails to respond, the software selects the next authentication method in the method list.
-
Page 28: Understanding Radio Transmit Power
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Step 4 line [console | Enters line configuration mode, and configures the lines to apply tty | vty] line- the authentication list. number [ending-line- number] Step 5 login Applies the authentication list to a line or set of lines. -
Page 29: Configuring Radio Data Rates
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 An improper combination of transmit power level and antenna gain can result in equivalent isotropic radiated power (EIRP) that exceeds the amount allowed per regulatory domain. Note: This equipment must be used with an antenna with a gain below 10dB. -
Page 30: Speed Command
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 If the client device supports the basic data rate and due to environmental conditions, the wireless and client devices can transmit at a higher data rate, the devices will transmit unicast packets at the highest allowed data rate; multicast packets are always sent at the highest basic data rate. -
Page 31: Creating An Ssid
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 can use the same SSID. SSIDs are case sensitive and can contain up to 32 alphanumeric characters. Do not include spaces in your SSID. When you configure an SSID you assign these configuration settings to the SSID: VLAN •... -
Page 32: Configuring Multiple Basic Ssids
5.14.2 CONFIGURING MULTIPLE BASIC SSIDS IG-WL5G-E support up to 8 basic SSIDs (BSSIDs), which are similar to MAC addresses. You use multiple BSSIDs to assign a unique Delivery Traffic Indication Message (DTIM) setting for each SSID and to broadcast more than one SSID in beacons. -
Page 33: Qos In A Wireless Environment
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Number of supported simultaneous BSSID on radio_interface: 8 Guidelines for Using Multiple BSSIDs Keep these guidelines in mind when configuring multiple BSSIDs: RADIUS-assigned VLANs are not supported when you enable multiple BSSIDs. When you enable BSSIDs, the access point automatically maps a BSSID to each SSID. -
Page 34: Impact Of Qos On A Wireless Lan
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 They do not classify packets; they prioritize packets based on DSCP value, client type (such as a wireless phone), or the priority value in the 802.1q or 802.1p tag. They do not match packets using ACL; they use only modular quality of service (MQC) class-map for matching clauses. -
Page 35: Precedence Of Qos Settings
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 5.15.4 PRECEDENCE OF QOS SETTINGS When you enable QoS, the IG-WL5G/E queues packets based on the Layer 2 class of service value for each packet. The IG-WL5G/E applies QoS policies in this order: Packets already classified—When the IG-WL5G/E receives packets from a QoS- enabled switch or router that has already classified the packets with non-zero 802.1Q/P user_priority values, the IG-WL5G/E uses that classification and does... -
Page 36: Configuring Vlans
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Separate transmit sequence numbers for each access class and for frames that do not have the QoS control field Separate duplicate sequence number checking lists on receive for each access class and for frames that do not have the QoS control field... - Page 37 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 You use VLANs to reconfigure the network through software rather than physically unplugging and moving devices or wires.A VLAN can be thought of as a broadcast domain that exists within a defined set of switches. A VLAN consists of a number of end systems, either hosts or network equipment (such as bridges and routers), connected by a single bridging domain.
-
Page 38: Configuring A Vlan
MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 5.16.2 CONFIGURING A VLAN Configuring your IG-WL5G/E to support VLANs is a five-step process: Create subinterfaces on the radio and Ethernet interfaces. Enable 802.1q encapsulation on the subinterfaces, and assign one subinterface as the native VLAN. - Page 39 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 command. See “Spanning Tree Protocol” for complete instructions on enabling STP on the IG-WL5G/E. Step 5 exit Returns to global configuration mode. Step 6 interface fastEthernet0.x Creates an Ethernet subinterface and enter interface configuration mode subinterface.
- Page 40 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009 Step 14 encryption[vlan vlan- (Optional) Enables WEP and WEP features on id]mode {optional the native VLAN. [key-hash] mandatory •(Optional) Select the VLAN for which you want [mic] [key-hash]} to enable WEP and WEP features.
- Page 41 MN-OPERATION AND INSTALLATION MANUAL IG-WL5G-E R.01.2009...