SPEEDLAN TM PRODUCT LICENSE AGREEMENT It is important for users of Wave Wireless hardware and software to take time to read this License Agreement associated with this software PRIOR TO ITS USE. The Customer or Reseller has paid a License fee to Wave Wireless for use of this software on one bridge or bridge/router. This License does not extend to any copyrights to the program nor does it license use of the program on more than one bridge or bridge/router nor to make copies of the program for distribution or resale.
Page 4
SPEEDCOM International Corporation, dba Wave Wireless Networking. SPEEDCOM International, dba Wave Wireless Networking shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. SPEEDCOM International, dba Wave Wireless Networking reserves the right to revise this publication from time to time and make changes in content without obligation to notify any person of such revision changes.
SPEEDLAN TM Table of Contents Outgoing NAT...........49 1. INTRODUCTION........7 Features and Benefits......9 6. IP-ROUTER SETUP........53 Features Chart........10 IP-Router Setup........54 RIP Routing..........56 2. USING CONFIGURATOR.......11 Installation and Description.....13 7. SNMP SETUP..........59 3.CONFIGURING SPEEDLAN TM....15 8. SYSTEM ACCESS SETUP......63 General Setup.........17 Interface and Advanced Interface ..20 9.
SPEEDLAN TM Features and Benefits Transparent Ethernet Bridging with Advanced Filtering for Security and Network Reliability SPEEDLAN TM supports what is known as Transparent Ethernet Bridging with no Spanning Tree or Source Routing support. Since the brouter contained in the SPEEDLAN TM is intended to provide network security between a local LAN and a campus or enterprise wide network, and since using multiple bridges in a Spanning Tree could compromise this security, the Spanning Tree scenario is not supported.
SPEEDLAN TM Features Chart Hardware Supported 10/100BASE-T Ethernet Card SPEEDLAN Wireless Radio Bridging Features Transparent Bridging Filtering by Ethernet Multicast, Broadcast and Bad Packets Filtering by Protocol Filtering by Ethernet Address Pair Generic Ethernet Tunneling through IP Networks Learned Table Lockdown Expanded IP ARP Support Automatic Broadcast Storm Protection and Notification SNMP Features...
SPEEDLAN TM Windows 95/98/NT 4.0 SPEEDLAN TM Configurator Installing the Windows SPEEDLAN TM Configurator 1. Shut down all programs and applications. 2. Note: The SPEEDLAN TM Configurator uses digital libraries, which reside on your Windows 95/ 98/NT 4.0 PC. If a program or application is open, the Setup will not install correctly. If the configurator is not installed correctly, the brouter could be rendered and inoperable after saving a configuration.
Page 14
SPEEDLAN TM Exporting and Importing a Configuration Once you have opened a remote brouter, you can take a “snapshot” of the current configuration with the “Save Config as...” function. This function will result in creating a CNF file. The extension .CNF is used to denote the special exported binary configuration file.
SPEEDLAN TM General Setup Menu The third menu from the left is the Setup Menu. In this menu are the screens you will use to configure your brouters. Below are descriptions of the menu items and the settings found on their respective screens. General Setup Enable Bridging - The transparent bridging function will be enabled when this is item is checked.
Page 18
SPEEDLAN TM Enable Data Encryption - This optional feature allows you to encrypt wireless data transmissions on top of the encryption provided by the radio. It provides 56 bit DES encryption. It is not shipped standard as part of the XE units. If you did not purchase it when you originally bought the SPEEDLAN TM units, it can be purchased later as a software upgrade.
Page 19
SPEEDLAN TM Enable Outgoing Network Address Translation - This option enables a company to map the private networks IP addresses into one or more global public network IP addresses. This means that outsiders will only view the single (or more if designated) IP network address assigned for global viewing on the Internet. For more informatoin, see Setting UP NAT, page 61.
Max Tx Rate is useful to ISPs that want to regulate the maximum bandwidth provided to each customer. These settings should not be changed without the assistance of a Wave Wireless Networking Technical Support Engineer. Backup and Perm are not used with the XE series products. These fields must remain empty.
SPEEDLAN TM The Setup Buttons Setup 1 - Ethernet Setup SPEEDLAN products come standard with a 10/100 Base-T interface to connect to your wired network. Although the interface is capable of operating at both 10 Mbps and 100 Mbps, it is not autosensing or autoswitching. The default set- ting is for 10 Mbps half-duplex operation.
SPEEDLAN TM Transport Methods The industry compatible method of transmitting and receiving data over wireless networks cause data packets to frequently be lost. This is due to the fact that a wireless network does not have the ability to detect collisions like a wired Ethernet network.
Page 23
SPEEDLAN TM and greatly improves the performance of a base station wireless network cell when the total number of satellite stations is greater then 5 to 10 stations. As the number of stations increases, the usage of the wireless network cell increases and efficiency is proportionately improved.
Page 24
SPEEDLAN TM Standard – This setting limits the card to providing 2 Mbps of bandwidth. The receiver sensitivity of the radio with this setting is –89 dBm. You must use this setting if you want your XE unit to communicate with an older SPEEDLAN unit that uses a 2 Mbps radio.
SPEEDLAN TM The SPEEDLAN TM is an IEEE 802.3 MAC- layer bridge. The bridge can be con- figured to bridge or pass any 802.3 frame type protocols, including Novell IPX, TCP/ IP, AppleTalk, etc. The SPEEDLAN TM can also be configured to filter packets by their destination and origin.
SPEEDLAN TM MAC Filtering - By default, the SPEEDLAN TM is config- ured to pass all traffic between all MAC-Address pairs. To add an address pair into the filter, click on the Add button in the MAC Filtering box. You will be prompted to enter the Remote Ad- dress, which will be the MAC Address that resides on the remote side of the brouter, and the Local Address, which will be the MAC Address that resides on the local side of your network.
SPEEDLAN TM Pass Unseen Ethernet Source - Standard Ethernet bridges will always forward packets with destination addresses that have not been learned (i.e., have not previously been seen as a source address of a packet). This characteristic is needed for the proper operation of an Ethernet bridge. The downside to this, as our studies have shown, is that the failure mode of many Ethernet interface cards is to send out erroneous packets with good CRCs but with random Ethernet destination and source addresses.
SPEEDLAN TM Address Threshold - This setting deter- mines the maximum number of broadcast or multicast packets that can occur during a one-second period before a storm con- dition is declared for a particular Ethernet address (host). Once it is determined that a storm is occurring, any additional broad- cast or multicast packets from that host address will be denied until the storm is...
Page 31
SPEEDLAN TM Encrypt Bridge Tunnel Packets - If purchased, brouters (from Wave Wireless) may contain a special soft- ware-encryption algorithm that is distinct from the optional SPEEDLAN encryption chip on the brouters. If Data Encryption is enabled on the General Setup menu and if an Encryption Key is set up in the Data Encryp- tion menu, enabling encryption here will cause all Ethernet packets transmitted to tunnel partners to be en- crypted and encapsulated inside IP packets.
SPEEDLAN TM Use DHCP to set up the server and client IP addressing for the network. Use NAT to set up the translation for incoming and outgoing network IP addresses. If you do not understand the basics of IP addressing, DHCP, or NAT please read the next section, Part I - Quick Overview of IP Addressing, below.
Page 35
SPEEDLAN TM In fact, IP defines five classes: • Class A addresses use 8 bits (1 octet) for the network portion and 24 bits (3 octets) for the node (or host) section of the address. This provides up to 128 networks with 16.7 million nodes for each network.
Page 36
SPEEDLAN TM Note: Non-public Addresses can include network address assigned from the network administrator or from the IP provider. Also, there is one network in each class that is defined for private use, allowing the creation of internal networks. These addresses are Class A: 10.0.0.0, Class B: 172.10.0.0, and Class C: 192.168.0.0.
Page 37
SPEEDLAN TM Figure of Subnetting a Network Internet Subnet B Subnet A IP Address: 195.172.3.64 IP Address: 195.172.3.1 Subnet Mask: 255.255.255.192 Subnet Mask: 255.255.255.192 Router D Computer Computer Computer Computer Computer Long Street Router A Router B Subnet D IP Address: 195.172.3.192 Subnet Mask: 255.255.255.192 Subnet C Computer...
Page 38
SPEEDLAN TM How does a network administrator assign an IP address? IP addresses are supplied by the network administrator (you), the ISP, or hosting company. The two types of IP addressing – manual (static) and automatic (dynamic) addressing – are described below.
Page 39
SPEEDLAN TM Figure of DHCP Addressing DHCP Server Client 1. The client asks DHCP server for IP address and configuration if needed. 2. The DHCP server assigns an available IP address to client. 3. The client takes IP address from DHCP server and requests for any configuration needed. 4.
Page 40
SPEEDLAN TM Outgoing NAT As the packet is transmitted from the private network across the public network, the packet will be re-addressed as 204.101.20.3 (public address of SPEEDLAN TM). When the packet returns to the SPEEDLAN TM and then back to the private network, the packet will be re-addressed (the IP address of the private network) by using the MAC address contained in the header to identify the destination.
Page 41
SPEEDLAN TM Incoming NAT Incoming NAT allows you to specify ports on the private network that you would like to be available on the public network. For example, if a web server on a server is IP Address 10.0.0.3, you can create a pair that will specify that all requests received on the public IP address, Port 80, be forwarded to IP Address 10.0.0.3 on the private IP address, Port 80.
SPEEDLAN TM Part II - Setting Up the IP Address In this section you will first assign a static IP address or enable the DHCP client. Second, choose the appropriate interface for the DHCP client. Third, enable the DHCP Server on the SPEEDLAN TM. Note: Confirm the IP address of your SPEEDLAN TM units by performing the following tasks.
Page 43
SPEEDLAN TM 2. Select the Specify an IP address option. Enter the following information: • Our IP Address – The unique number assigned by the network administrator, ISP or host provider. This tells network the location (IP address) of the computer on the Internet (i.e., 128.104.224.2).
SPEEDLAN TM Enabling the DHCP Client and Choosing the Appropriate Interface To enable the DHCP client and choose the appropriate interface, do the following: 1. From the Setup menu, choose IP Setup. The IP Setup dialog box appears. 2. Select the Obtain an IP address from DHCP Server option. 3.
SPEEDLAN TM Enabling the DHCP Server on the SPEEDLAN TM To enable the DHCP Server on the SPEEDLAN TM, do the following: 1. From the Setup menu, choose General Setup. The General Setup dialog box appears. 2. Select the Enable DHCP Server check box; this will enable you to set up the DHCP Server. Note: The only active NAT / DHCP check boxes in the NAPT / DHCP Features section (in the dialog box above) are the following: •...
Page 46
SPEEDLAN TM 4. Enter the IP range and gateway/router information: • Offered IP Starting Address – This is the start of the block of allowed IP addresses. For example, the “offered” IP address between a block of 20 to 40 is 20. •...
SPEEDLAN TM Part III - Setting UP NAT This section explains how to setup outgoing and incoming Network Address Translation (NAT). For more information on outgoing and incoming NAT, see pages 54 and 55. To setup outgoing NAT, do the following: 1.
Page 48
SPEEDLAN TM Note: NAT is a useful tool that will be enabled the majority of the time on the client or satellite side of the SPEEDLAN ISP or SPEEDLAN MP. It is rarely enabled on the base unit. NAT is also useful to have private networks connected to public networks (i.e., the Internet) without needed a public IP address for every node.
Page 49
SPEEDLAN TM To set up incoming IP network address for NAT, do the following: 1. From the Setup menu, choose General Setup. The General Setup dialog box appears. 2. Select the Enable Incoming Network Address Translation check box. Click OK. 3.
Page 50
SPEEDLAN TM 5. Enter the appropriate incoming information: • Public IP Address – This is the IP address for the outside network. If you have more than one public address you can assign it to a node on the private network (One-to-One NAT). Therefore, all requests for a particular IP address from the outside or public network will be translated to the appropriate private IP address.
Need help?
Do you have a question about the SPEEDLAN TM 6000 and is the answer not in the manual?
Questions and answers