Weidmuller IE-WL-BL-AP-CL User Manual

Industrial wireless access point/client
Table of Contents

Advertisement

Industrial Wireless
Access Point/Client
User Manual IE-WL-BL-AP-CL
2616170000/00/06.18
First Edition, June 2018

Advertisement

Table of Contents
loading

Summary of Contents for Weidmuller IE-WL-BL-AP-CL

  • Page 1 Industrial Wireless Access Point/Client User Manual IE-WL-BL-AP-CL 2616170000/00/06.18 First Edition, June 2018...
  • Page 2 User Manual IE-WL-BL-AP-CL The software described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agreement. Copyright Notice Copyright ©2018 Weidmüller Interface GmbH & Co. KG All rights reserved.
  • Page 3: Table Of Contents

    Table of Contents Introduction ............................5 Overview .............................. 6 Package Checklist ..........................6 Product Features ........................... 6 Product Specifications ..........................7 Functional Design ..........................10 Device Ports ..........................10 LED Indicators ..........................10 Beeper ............................11 Reset Button ..........................11 Getting Started............................
  • Page 4 References ............................72 Beacon ............................... 73 DTIM ..............................73 Fragment ............................73 RTS Threshold ............................. 73 Supporting Information ........................74 About This User’s Manual ........................75 DoC (Declaration of Conformity) ......................75 Federal Communication Commission Interference Statement ............. 75 R&TTE Compliance Statement ......................76...
  • Page 5: Introduction

    TCP/IP network. The device is rated to operate at temperatures ranging from 0 to 60°C for standard models (IE-WL-BL-AP-CL) and -40 to 75°C for wide temperature models (IE-WLT-BL-AP-CL), and is rugged enough for any harsh industrial environment.
  • Page 6: Overview

    2.4 or 5 GHz bands and is backwards-compatible with existing 802.11a/b/g deployments to future-proof your wireless investments. Package Checklist Weidmüller’s IE-WL-BL-AP-CL is shipped with the following items. If any of these items is missing or damaged, please contact your customer service representative for assistance. •...
  • Page 7: Product Specifications

    Wi-Fi device IE-WL-BL-AP-CL Getting Started Product Specifications WLAN Interface Standards: • IEEE 802.11a/b/g/n for Wireless LAN • IEEE 802.11i for Wireess Security • IEEE 802.3 for 10BaseT • IEEE 802.3u for 100BaseT(X) • IEEE 802.3ab for 1000BaseT Spread Spectrum and Modulation (typical): •...
  • Page 8 Wi-Fi device IE-WL-BL-AP-CL Getting Started • 64-bit and 128-bit WEP encryption, WPA /WPA2-Personal and Enterprise (IEEE 802.1X/RADIUS, TKIP, and AES) Transmission Rates: • 802.11b: 1, 2, 5.5, 11 Mbps • 802.11a/g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps •...
  • Page 9 Warranty Period: 5 years ATTENTION • The IE-WL-BL-AP-CL is NOT a portable mobile device and should be located at least 20 cm away from the human body. • The IE-WL-BL-AP-CL is NOT designed for the general public. A well-trained technician should be enlisted...
  • Page 10: Functional Design

    RJ45 Ethernet port (10/100/1000 BaseTX) LED Indicators The LEDs on the front panel of the IE-WL-BL-AP-CL provide a quick and easy means of determining the current operational status and wireless settings. The FAULT LED indicates system failures and user-configured events. If the device cannot retrieve the IP address from a DHCP server, the FAULT LED will blink at one second intervals.
  • Page 11: Beeper

    System reboot: Hold the RESET button down for under 5 seconds and then release. • Reset to factory default: Hold the RESET button down for over 5 seconds until the STATE LED starts blinking green. Release the button to reset the IE-WL-BL-AP-CL. 2-11...
  • Page 12: Getting Started

    Getting Started Getting Started This chapter explains how to install Weidmüller’s IE-WL-BL-AP-CL for the first time, and quickly set up your wireless network and test whether the connection is running well. The Function Map discussed in the third section provides a convenient means of determining which functions you need to use.
  • Page 13: First-Time Installation And Configuration

    First-time Installation and Configuration Before installing the IE-WL-BL-AP-CL, make sure that all items in the Package Checklist are in the box. You will need access to a notebook computer or PC equipped with an Ethernet port. The IE-WL-BL-AP-CL has a default IP address that must be used when connecting to the device for the first time.
  • Page 14: Communication Testing

    Communication Testing After installing the IE-WL-BL-AP-CL you can run a sample test to make sure the device and wireless connection are functioning normally. Two testing methods are described below. Use the first method if you are using only one IE-WL-BL-AP-CL device, and use the second method if you are using two or more units.
  • Page 15 How to Test Two or More IE-WL-BL-AP-CL Units If you have two or more IE-WL-BL-AP-CL units, you will need a second notebook computer (Notebook B) equipped with an Ethernet port. Use the default settings for the first Wi-Fi device connected to notebook A and change the second or third IE-WL-BL-AP-CL connected to notebook B to Client mode, and then configure the notebooks and IE-WL-BL-AP-CL units properly.
  • Page 16: Function Map

    Wi-Fi device IE-WL-BL-AP-CL Getting Started Function Map Quick status overview of IE-WL-BL-AP-CL Basic settings for administering the device Essential settings related to establishing a wireless network Advanced features to support additional network management and secure wired and wireless communication Note: These advanced functions are all optional.
  • Page 17: Web Console Configuration

    Web Console Configuration In this chapter, we explain all aspects of web-based console configuration. Weidmüller’s easy-to-use management functions help you set up your IE-WL-BL-AP-CL and make it easy to establish and maintain your wireless network. The following topics are covered in this chapter: ...
  • Page 18: Web Browser Configuration

    You might have to wait a few moments for the web page to download to your computer. Note that the Model name and IP address of your IE-WL-BL-AP-CL are both shown in the title bar of the web page. This information can be used to help you identify multiple IE-WL-BL-AP-CL units.
  • Page 19: Overview

    “Function Map” section of Chapter 3. NOTE The model name of the IE-WL-BL-AP-CL is shown as IE-WL-BL-AP-CL-XX, where XX indicates the country code. The country code indicates the IE-WL-BL-AP-CL version and which frequencies it uses. We use IE-WL-BL-AP-CL-EU as an example in the following figures.
  • Page 20: General Setup

    The System Information items, especially Device name and Device description, are displayed and included on the Overview page, in SNMP information, and in alarm emails. Setting System Information items makes it easier to identify the different IE-WL-BL-AP-CL units connected to your network. Device name...
  • Page 21: Network Settings

    192.168.1.110 address Subnet mask Setting Description Factory Default IE-WL-BL-AP-CL’s Identifies the type of network to which the IE-WL-BL-AP-CL is 255.255.255.0 subnet mask connected (e.g., 255.255.0.0 for a Class B network, or 255.255.255.0 for a Class C network). Gateway Setting Description Factory Default IE-WL-BL-AP-CL’s...
  • Page 22: System Time

    Secondary DNS server will be used if the Primary DNS server fails to connect. System Time The IE-WL-BL-AP-CL has a time calibration function based on information from an NTP server or user specified Date and Time information. Functions such as Logs and Notifications can add real-time information to the message.
  • Page 23: Wireless Lan Setup

    MAC (Layer 2) based communication. In this case, you will need to change the network to use the master/slave operation mode. Sniffer: In order to provide an easier way for our customers to analyze wireless traffic, the IE-WL-BL-AP-CL supports a “Sniffer” mode to co-work with Wireshark packet sniffer software.
  • Page 24: Basic Wlan Setup

    1. Set operation mode to Sniffer mode on the IE-WL-BL-AP-CL and then save/reboot the device. 2. Connect the IE-WL-BL-AP-CL to a laptop with Wireshark installed (v1.12.0 or later release) via Ethernet. 3. Add a remote interface by entering the IP address of the IE-WL-BL-AP-CL.
  • Page 25 Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration Click on Edit to assign different configuration settings to each SSID. The configuration panel appears as follows: NOTE When you switch to Client mode, a Site Survey button will be available on the Basic WLAN Setup panel. Click this button to view information about available APs, as shown in the following figure.
  • Page 26: Wlan Security Settings

    SSID can be broadcast or not Enable WLAN Security Settings The IE-WL-BL-AP-CL provides four standardized wireless security modes: Open, WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access), and WPA2. Several security modes are available in the IE-WL-BL-AP-CL by selecting Security mode and WPA type: •...
  • Page 27 When WEP is enabled as a security mode, the length of a key (so-called WEP seed) can be specified in 64/128 bits, which is actually a 40/104-bit secret key with a 24-bit initialization vector. The IE-WL-BL-AP-CL provides 4 entities of WEP key settings that can be selected to use with Key index. The selected key setting specifies the key to be used as a send-key for encrypting traffic from the AP side to the wireless client side.
  • Page 28 Even though AES encryption is only included in the WPA2 standard, it is widely available in the WPA security mode of some wireless APs and clients as well. The IE-WL-BL-AP-CL also supports AES algorithms in WPA and WPA2 for better compatibility.
  • Page 29 Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration some legacy AP clients. This option is rarely used. ** This option is only available with 802.11a/b/g standard * This option is available for legacy mode in AP/Master only, and does not support AES-enabled clients.
  • Page 30 3600 (seconds) (1 minute to 1 year) WPA/WPA2-Enterprise (for Client) When used as a client, the IE-WL-BL-AP-CL can support three EAP methods (or EAP protocols): EAP-TLS, EAP-TTLS, and EAP-PEAP, corresponding to WPA/WPA2-Enterprise settings on the AP side. Encryption method Setting...
  • Page 31 Certificate reduction makes TTLS and PEAP much more popular than EAP-TLS. The IE-WL-BL-AP-CL provides some non-cryptographic EAP methods, including PAP, CHAP, MS-CHAP, and MS-CHAP-V2. These EAP methods are not recommended for direct use on wireless networks. However, they might be useful as inner authentication methods with TTLS and PEAP.
  • Page 32 Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration CHAP Challenge Handshake Authentication Protocol is used MS-CHAP Microsoft CHAP is used MS-CHAP-V2 Microsoft CHAP version 2 is used Anonymous Setting Description Factory Default Max. of 31 characters A distinct name used for outer authentication None User name &...
  • Page 33: Advanced Wlan Settings

    Minimum transmission rate Setting Description Factory Default 0 to 64 Mbps By setting a minimum transmission rate, the IE-WL-BL-AP-CL 0 (Disable) (0 to disable) will avoid communicate with weak signal wireless links to maintain overall wireless performance and optimize the wireless frequency usage.
  • Page 34 When Turbo Roaming is enabled, the following parameters will be shown: • Roaming threshold: Determines when to start looking for new AP candidates. If the current connection quality (SNR or Signal Strength) is lower than the specified threshold, the IE-WL-BL-AP-CL will start background scanning and look for next-hop candidates. 3-34...
  • Page 35: Wlan Certificate Settings (For Eap-Tls In Client/Slave Mode Only)

    (such as losing power). NOTE Enabling this feature causes the IE-WL-BL-AP-CL to send out alive check packets every 10 ms when there is no traffic; the high transmission frequency of small alive check packets could potentially affect your other wireless communications that use the same channel, so only enable this feature when you have full control of the designated radio channel.
  • Page 36: Advanced Setup

    Current Certificate. If it fails, return to step 1 to set the password correctly and then import the certificate file again. NOTE The WLAN certificate will remain after the IE-WL-BL-AP-CL reboots. Even though it is expired, it can still be seen on the Current Certificate. Advanced Setup Several advanced functions are available to increase the functionality of your IE-WL-BL-AP-CL and wireless network system.
  • Page 37 You can also assign a static IP address to a specific client by entering its MAC address. The IE-WL-BL-AP-CL provides a Static DHCP mapping list with up to 16 entities. Be reminded to check the Active check box for each entity to activate the setting.
  • Page 38: Packet Filters

    “no entity on list is activated” = all packets are denied IP Protocol Filters The IE-WL-BL-AP-CL’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified IP protocol and source/destination IP addresses. 3-38...
  • Page 39 = all packets are denied. TCP/UDP Port Filters The IE-WL-BL-AP-CL’s TCP/UDP port filter is a policy-based filter that can allow or filter out TCP/UDP-based packets with a specified source or destination port. The IE-WL-BL-AP-CL provides 8 entities for setting the range of source/destination ports of a specific protocol.
  • Page 40: Snmp Agent

    = all packets are denied SNMP Agent The IE-WL-BL-AP-CL supports SNMP V1/V2c/V3. SNMP V1 and SNMP V2c use a community string match for authentication, which means that SNMP servers access all objects with read-only or read/write permissions using the community string public/private (default value).
  • Page 41 Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration MD5 or SHA Authentication Provides authentication based on HMAC-MD5, based on MD5 or or HMAC-SHA algorithms. 8-character passwords are the minimum requirement for authentication. MD5 or SHA Authentication Data Provides authentication based on HMAC-MD5...
  • Page 42: Link Fault Pass-Through (For Client Mode Only)

    Ethernet link is recovered, IE-WL-BL-AP-CL will try to connect to AP. If wireless is disconnected, IE-WL-BL-AP-CL restarts auto-negotiation on Ethernet port but always stays in the link failure state. Once the wireless connection is recovered, the device will try to recover the Ethernet link.
  • Page 43: System Logs

    In addition to logging these events, the IE-WL-BL-AP-CL supports different approaches to warn engineers automatically, such as SNMP trap and e-mail.
  • Page 44: Syslog

    Configuration-related events Event is triggered when… Configuration Changed A configuration item has been changed. Configuration file import via Web Console The configuration file is imported to the IE-WL-BL-AP-CL. Console authentication failure An incorrect password is entered. Firmware upgraded The device’s firmware is updated.
  • Page 45: E-Mail Notifications

    (unchecked). E-mail Server Settings You can set up to 4 e-mail addresses to receive alarm emails from the IE-WL-BL-AP-CL. The following parameters can be configured on the E-mail Server Settings page. In addition, a Send Test Mail button can be used to test whether the Mail server and e-mail addresses work well.
  • Page 46: Trap

    Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration User name & Password Setting Description Factory Default User name and password used in the SMTP server None From e-mail address Setting Description Factory Default Max. 63 characters Enter the administrator’s e-mail address which will be shown in None the “From”...
  • Page 47: Status

    For example, the Current BSSID, Signal strength, and SNR parameters are not available in the AP mode. It is helpful to use the continuously updated information on this page, such as Signal strength, Noise floor, and SNR, to monitor the signal strength of the IE-WL-BL-AP-CL in Client mode. 3-47...
  • Page 48: Associated Client List (For Ap/Master Mode Only)

    Web Console Configuration Associated Client List (for AP/Master mode only) The Associated Client List shows all the clients that are currently associated with a particular IE-WL-BL-AP-CL. This page provides useful information for easier network diagnosis: MAC Address: Displays the associated client MAC address. If DHCP server is enabled on this AP/Master, the IP address will also be displayed.
  • Page 49: System Logs

    Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration System Logs Triggered events are recorded in System Log. You can export the log contents to an available viewer by clicking Export Log. You can use the Clear Log button to clear the log contents and the Refresh button to refresh the log.
  • Page 50: Network Status

    LLDP Status Displays information on neighboring devices collected via LLDP (Link Layer Discovery Protocol). Maintenance Maintenance functions provide the administrator with tools to manage the IE-WL-BL-AP-CL and wired/wireless networks. 3-50...
  • Page 51: Console Settings

    Weidmüller’s download center. Before running a firmware upgrade, make sure the IE-WL-BL-AP-CL is off-line. Click the Browse button to specify the firmware image file and click Firmware Upgrade and Restart to start the firmware upgrade. After the progress bar reaches 100%, the IE-WL-BL-AP-CL will reboot itself.
  • Page 52: Configuration Import And Export

    Export Configuration or Import Configuration. The SNMP MIB file is also available from SNMP MIB File EXPORT. To download the configuration to the IE-WL-BL-AP-CL: 1. Turn off the IE-WL-BL-AP-CL. 2. Plug in the EBR-MODULE RS232 to the device’s RS-232 console.
  • Page 53: Load Factory Default

    IE-WL-BL-AP-CL will emit three short beeps and continue with the boot-up process. 5. Once the IE-WL-BL-AP-CL has booted up successfully, it will emit the normal two beeps, and the ready LED will turn to solid green.
  • Page 54: Change Password

    Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration Field Description Default setting Password retry The number of consecutive times a user can enter an incorrect count password while logging in before the device’s login function is locked. Lockout time The number of seconds the device’s login function will be locked...
  • Page 55: Misc. Settings

    • ~!@#$%^&-_|;:,.<>[]{} • The password must have more characters than the minimum password length (default = 4). Misc. Settings Additional settings to help you manage your IE-WL-BL-AP-CL are available on this page. Reset button Setting Description Factory Default Always Enable The device’s Reset button works normally.
  • Page 56: Save Configuration

    IE-WL-BL-AP-CL is shutdown or rebooted unless they are y. Because the IE-WL-BL-AP-CL starts up and initializes with the settings stored in flash memory, all new changes must be saved to flash memory before restarting the IE-WL-BL-AP-CL.
  • Page 57: Restart

    If you made changes recently but did not save, you will be given two options. Clicking the Restart button here will reboot the IE-WL-BL-AP-CL directly, and all setting changes will be ignored. Clicking the Save and Restart button will apply all changes and then reboot the IE-WL-BL-AP-CL.
  • Page 58: Logout

    Wi-Fi device IE-WL-BL-AP-CL Web Console Configuration You will not be able to run any of the device’s functions while the system is rebooting. Logout Logout helps users disconnect the current HTTP or HTTPS session and go to the Login page. For security reasons, we recommend you logout before quitting the console manager.
  • Page 59: Software Installation And Configuration

    Software Installation and Configuration The following topics are covered in this chapter:  WLAN Administration Tool ➢ Installing WLAN Administration Tool ➢ Configuring WLAN Administration Tool...
  • Page 60: Wlan Administration Tool

    Select page “Software” Select page “Industrial Ethernet” Select category “ ” Industrial Wireless (Firmware and Software for IE-WL-BL-AP-CL) Download “ ” WLAN Administration Tool Installing WLAN Administration Tool For example, if the file was placed on the Windows desktop, it should appear as follows. Simply double click on the icon to run the program.
  • Page 61 Wi-Fi device IE-WL-BL-AP-CL Software Installation and Configuration 3. Click Next to create the program’s shortcut files to the default directory, or click Browse to select an alternate location. 4. Click Next to select additional tasks. 4-61...
  • Page 62: Configuring Wlan Administration Tool

    Configuring WLAN Administration Tool The Broadcast Search function is used to locate all IE-WL-BL-AP-CL APs that are connected to the same LAN as your computer. After locating an IE-WL-BL-AP-CL, you will be able to change its IP address. Since the Broadcast Search function searches by TCP packet and not IP address, it doesn’t matter if the IE-WL-BL-AP-CL...
  • Page 63 Software Installation and Configuration 2. When the Login page appears, select the “Search Device only” option to search for IE-WL-BL-AP-CLs and to view each IE-WL-BL-AP-CL’s configuration. Select the “Device management” option to assign IPs, upgrade firmware, and locate devices. 3. The WLAN Administration Tool will start automatically. Then click the Search icon.
  • Page 64 8. Use the scroll down list to select the MAC addresses of those IE-WL-BL-AP-CLs you would like to manage, and then click Add. Key in the password for the IE-WL-BL-AP-CL device and then click OK to save. If you return to the search page and search for the IE-WL-BL-AP-CL again, you will find that the IE-WL-BL-AP-CL will unlock automatically.
  • Page 65 Software Installation and Configuration To modify the configuration of the highlighted IE-WL-BL-AP-CL, click on the Web icon to open the web console. This will take you to the web console, where you can make all configuration changes. Refer to Chapter 3, “Using the Web Console,”...
  • Page 66 Wi-Fi device IE-WL-BL-AP-CL Software Installation and Configuration Connection • Connection timeout (secs): Use this option to set the waiting time for the Default Login, Locate, Assign IP, Upload Firmware, and Unlock to complete. • Upgrade timeout (secs): Use this option to set the waiting time for the connection to disconnect while the firmware is upgrading.
  • Page 67: Additional Consoles

    Additional Consoles This chapter explains how to access the IE-WL-BL-AP-CL for the first time. In addition to HTTP access, there are four ways to access IE-WL-BL-AP-CL: serial console, Telnet console, SSH console, and HTTPS console. The serial console connection method, which requires using a short serial cable to connect the IE-WL-BL-AP-CL to a PC’s COM port, can be used if you do not know the device’s IP address.
  • Page 68: Rs-232 Console Configuration (115200, None, 8, 1, Vt100)

    PC’s COM port, can be used if you do not know the device’s IP address. It is also convenient to use serial console configurations when you cannot access the IE-WL-BL-AP-CL over Ethernet LAN, such as in the case of LAN cable disconnections or broadcast storming over the LAN.
  • Page 69 4. The Console login screen will appear. Enter the default login “admin” and then enter the default Console Password “Detmold” (this is the same as the Web Browser password) and then press Enter. 5. The IE-WL-BL-AP-CL´s Main Menu will be displayed 6. After entering the Main Menu, use the shown keys to move to select options.
  • Page 70: Configuration By Telnet And Ssh Consoles

    Configuration by Telnet and SSH Consoles You can use Telnet or SSH client to access the IE-WL-BL-AP-CL and manage the console over a network. To access the device’s functions over the network from a PC host that is connected to the same LAN as the IE-WL-BL-AP-CL, you need to make sure that the PC host and the IE-WL-BL-AP-CL are on the same logical subnet.
  • Page 71: Disabling Telnet And Browser Access

    IE-WL-BL-AP-CL’s functions. Disabling Telnet and Browser Access If you are connecting the IE-WL-BL-AP-CL to a public network but do not intend to use its management functions over the network, then we suggest disabling both Telnet Console and Web Configuration. Please run Maintenance ...
  • Page 72: References

    References This chapter provides more detailed information about wireless-related technologies. The information in this chapter can help you administer your IE-WL-BL-AP-CLs and plan your industrial wireless network better. The following topics are covered in this appendix:  Beacon  DTIM ...
  • Page 73: Beacon

    Wi-Fi device IE-WL-BL-AP-CL References Beacon A beacon is a packet broadcast by the AP to keep the network synchronized. A beacon includes the wireless LAN service area, the AP address, the Broadcast destination address, a time stamp, Delivery Traffic Indicator Maps (DTIM), and the Traffic Indicator Message (TIM).
  • Page 74: Supporting Information

    Supporting Information This chapter presents additional information about this product. You can also learn how to contact Weidmüller for technical support. The following topics are covered in this appendix:  About This User’s Manual  DoC (Declaration of Conformity) ➢ Federal Communication Commission Interference Statement...
  • Page 75: About This User's Manual

    HIG (Hardware Installation Guide), User’s Manual and related information. NOTE You can find out the hardware revision number of IE-WL-BL-AP-CL on the side label of the device. The firmware version number can be seen on the Overview page, as follow: DoC (Declaration of Conformity)
  • Page 76: R&Tte Compliance Statement

    The firmware setting is not accessible by the end user. R&TTE Compliance Statement Weidmüller declares that the apparatus IE-WL-BL-AP-CL complies with the essential requirements and other relevant provisions of Directive 1999/5/EC. This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE).

This manual is also suitable for:

Ie-wlt-bl-ap-cl

Table of Contents