Page 2
Copyright Statement No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical, photocopying, recording or oth- erwise without the prior writing of the publisher. ™ ™...
Setting up a Windows PC or wireless client as default........... 42 DHCP clients ........12 How to Reboot your GW-AP54SAG ..43 A Look at the Front Panel....14 What if you Forgot the Password? ..43 Connecting More Devices Through A Hub To The Command Line Interface ......
Regulatory Information Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursu- ant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
It contains an 802.11a+g and a full-duplex 10/100 LAN interfaces. The GW-AP54SAG can function as a simple Access Point (AP), and act as the center point of a wireless network supporting a data rate of up to 54 Mbps. It can also connect these wireless devices to wired network through the LAN interface.
GW-AP54SAG Features Compliant with draft 802.11a, 802.11b and 802.11g standards with roaming capabil- ity. Support of the standard access point mode for connection to wireless clients. Support of the repeater mode to extend infrastructure coverage. Support of the WDS mode for interconnecting LAN segments.
A group of wireless stations communicating with each other is called a Basic Service Set (BSS) and is identified by a unique SSID. When an GW-AP54SAG is used, it can be configured to operate in the following three net- work configurations...
S T A T I C I P The default IP address of the LAN interface of an GW-AP54SAG is a private IP address of 192.168.1.100, and a network mask of 255.255.255.0. This means IP addresses of other devices...
A U T O M A T I C I P The GW-AP54SAG can also be configured to “obtain” an IP address automatically from a DHCP server on the network. This address is called “dynamic” because it is only dynamically assigned to the device, which may change depending on the IP assignment policy used by the DHCP server on the network.
Chapter Installing the GW-AP54SAG This section describes the installation procedure for the GW-AP54SAG. It starts with a sum- mary of the content of the package you have purchased, followed by steps of how to power up and connect the GW-AP54SAG. Finally, this section explains how to configure a Win- dows PC to communicate with the GW-AP54SAG.
SSID, Channel number, the WEP key, …, etc., it is necessary to associate a fixed IP address with the GW-AP54SAG, which is why the GW-AP54SAG will be shipped with a factory default private IP address of 192.168.1.100 (and a network mask of 255.255.255.0).
Change the setting of the PC back to “obtain IP addresses dynamically”. Now you can put the GW-AP54SAG and the PC to your network where the DHCP server is connected. From then on, any wireless client configured to “obtain IP addresses dynamically”...
Page 13
With the GW-AP54SAG powered on, reboot the PC/wireless client. After the PC/wireless client is re-booted, you should be ready to configure the GW-AP54SAG. See Chapter 3. The procedure required to set a static IP address is not too much different from the procedure required to set to “obtain IP addresses dynamically”...
A Look at the Front Panel The LEDs on the front of the GW-AP54SAG reflect the operational status of the unit. The status of the LAN, the wireless, and power can be monitored from this display. GW-AP54SAG LED Description Label...
Connecting More Devices Through A Hub To The GW-AP54SAG The GW-AP54SAG provides an RJ45 LAN interface that you can use to connect to a PC or an external hub. Step 1. Connect to the LAN port. Plug this end into any port...
From a PC that has been configured as described in Chapter 2, enter the IP address of the GW-AP54SAG as the URL in your browser, e.g. http://192.168.1.100 Note: The IP address of your PC must be in the same IP subnet as the GW-AP54SAG.
The Home Page of the GW-AP54SAG screen will appear, with its main menu displayed on the right hand side of the window. The main menu includes the following choices: Setup Wiz- ard, Device Status, Advanced Settings, System Tools, and Help; these can be used to navigate to other menus.
T I M E S E T T I N G S After logging in, the time settings page appears. The device time is automatically set to the local time of the management PC at the first time a connection is made. To modify the de- vice’s time, modify the appropriate fields, then click NEXT.
Page 19
The Device IP setting screen allows you to configure the IP address and subnet of the device. Although you can rely on a DHCP server to assign an IP address to the GW-AP54SAG automatically, it is recommended that you configure a static IP address manually in most appli- cations.
If you choose to use a DHCP Server to acquire an IP address for the GW-AP54SAG auto- matically, check the button that says, “Use the DHCP protocol to automatically get the IP address for this device”. Then click Next to go to the next screen. Again, as a reminder, it is recommended that your GW-AP54SAG should be assigned a static IP address in order to make it easy for you to manage the device later on.
Page 21
Disable SSID Broadcasting: An access point periodically broadcasts its SSID along with other information, which allows client stations to learn its existence while searching for access points in a wireless network. Check Disable if you do not want the device to broadcast the SSID. WLAN mode: The wireless module is IEEE 802.11g and 802.11b compliant, and choosing “11g/b”...
Page 22
Key Index: You have to specify which of the four keys will be active. Once you enable the WEP function, please make sure that both the GW-AP54SAG and the wireless client stations use the same key.
Page 23
802.1x allows users to leverage a RADIUS server to do association authentications. You can also enable dynamic WEP keys (64, 128, 152-bit) to have data encryption. Here you do not have to enter the WEP key manually because it will be generated automatically and dynamically. NOTE: After you have finished the configuration wizard, you have to configure the Radius Settings in Advanced Settings in order to make the 802.1x function work.
Page 24
Pre-shared Key: This is an ASCII string with 8 to 63 characters. Please make sure that both the GW-AP54SAG and the wireless client stations use the same key. Encryption Type: There are two encryption types TKIP and CCMP (AES). While CCMP provides better security than TKIP, some wireless client stations may not be equipped with the hardware to support it.
Page 25
Wi-Fi Protected Access (WPA) requires a RADIUS server available in order to do au- thentication (same as 802.1x), thus there is no shared key required. The Encryption Type and Group Rekey Interval settings are same as WPA-PSK. Finish Setup Wizard and Save Your Settings After stepping through the Wizard’s pages, you can press the FINISH button for your modifica- tion to take effect.
Note: If you change the device’s IP address, as soon as you click on FINISH you will no longer be able to communicate with your GW-AP54SAG. You need to change your IP address and then re-boot your computer in order to resume the communication.
Page 27
UPnP: The Universal Plug and Play (UPnP) feature allows a Windows XP/ME PC to dis- cover this GW-AP54SAG and automatically show an icon on the screen. Then a user can double-click the icon to access this device directly (without having to find out its IP address).
Page 28
To be able to remotely view such system log events, you need to check the Enable Syslog box and configure the IP address of a Syslog daemon. When doing so, the GW-AP54SAG will send logged events over network to the daemon for future reviewing.
Enable box. MAC Filtering Settings The GW-AP54SAG allows you to define a list of MAC addresses that are allowed or denied to access the wireless network Disable MAC address control list: When selected, no MAC address filtering will be per- formed.
To add a MAC address into the table, enter a mnemonic name and the MAC address, then click ADD. The table lists all configured MAC Filter entries. To delete entries, check the corresponding select boxes and then press DELETE SELECTED SSID Settings The Access Point can allow user to set up different SSID settings - Enable VLAN, QoS or DiffServ QoS.
Wireless Settings Beacon Interval: The GW-AP54SAG broadcasts beacon frames regularly to announce its ex- istence. The beacon Interval specifies how often beacon frames are transmitted - in time unit of milliseconds. The default value is 100, and a valid value should be between 1 and 65,535.
Radio 1/Radio 2 Transmit Power: 100%, 75%, 50%, 25%, 12%. Operational Mode The GW-AP54SAG can be configured to operate in one of the following three modes as men- tioned previously in Chapter 1: (1) Access Point (2) Repeater (3) Wireless Distribution System (WDS) When configured as a WDS, you need to further configure the name and MAC address of its peer WDS devices.
MAC address filtering based authentication requires a MAC address filter table to be created in either the GW-AP54SAG (as described in the section MAC Filtering Settings) and/or the Radius server. During the authentication phase of a wireless station, the MAC address filter table is searched for a match against the wireless client’s MAC address to determine whether the sta-...
Page 34
RADIUS server. The shared secret can contain up to 64 alphanumeric characters. Retry Times: The number of times the GW-AP54SAG should attempt to contact the pri- mary server before giving up. Reattempt Period: After failed to contact the primary RADIUS server, the GW-AP54SAG...
DoS Settings A Denial of Service attack is one where the attacker tries to make some resource too busy to answer legitimate requests, or to deny legitimate users access to your machine. Authentication fails: an illegal wireless client who failed time to associate with our system due to authentication failure.
Chapter Managing the GW-AP54SAG This Chapter covers other management aspects of your GW-AP54SAG: How to view the device status How to view the system log How to upgrade the firmware of your GW-AP54SAG How to save or restore configuration changes How to reset the configuration to the factory default.
This is at the left-bottom corner of the Device Status window. How to View the System Log The GW-AP54SAG maintains a system log that you can use to track events that have oc- curred in the system. Such event messages can sometimes be helpful in determining the cause of a problem that you may have encountered.
Bridge Table The bridge table shows all MAC entries learned from the wired LAN interface, wireless clients, and WDS peers (if running in the WDS mode). You can check this table by clicking Bridge Table at the left side of the Device Status window.
Upgrading Firmware You can upgrade the firmware of your GW-AP54SAG (the software that controls your GW- AP54SAG’s operation). Normally, this is done when a new version of firmware offers new features that you want, or solves problems that you have encountered with the current version.
Note: It is recommended that you do not upgrade your GW-AP54SAG unless the new firmware contains a new feature that you want or if it contains a fix to a problem that you’ve encountered.
How to reset the configuration to the factory default You can reset the configuration of your GW-AP54SAG to the factory default settings. To do Step 1 Select Factory Default from the System Tools menu, you will see the following screen: Step 2 Click YES to go ahead and restore the configuration to the factory default.
Step 1 Select Reboot System from the System Tools menu, you will see the following screen: Step 2 Click YES to reboot the GW-AP54SAG. Note: Resetting the GW-AP54SAG disconnects any active clients, and therefore will disrupt any current data traffic. What if you Forgot the Password? If you forgot the password, the only way to recover is to clear the device configuration and re- turn the unit to its original state as shipped from the factory.
Telnet session. General guidelines When the GW-AP54SAG is powered up, the user can use a standard telnet application from a PC connected to the network to perform configuration and management functions. This is done by typing the telnet command, “telnet <the GW-AP54SAG’s ip>” (the default is 192.168.1.100) and pressing a return key, the user will see a system sign-on message followed by a password prompt as follows.
to edit the command from the end. Up to 15 previously entered commands can be invoked through ^p’s and ^n’s. If a keyword is expected when the user types “ ?”, all valid keywords will be displayed. The command typed in so far will then be displayed again along with the cursor sitting at the end, waiting for the user to continue.
wlan means the Wireless port; <> specifies the arguments of the command, <1-4> means a number between 1 to 4; [ ] indicates an optional parameter | is used to separate alternative choices of parameters or keywords; {} encloses all alternative keywords; MacAddr, or XX-XX-XX-XX-XX-XX means any MAC address in hexadecimal for- mat, where each XX can be 00, 01, ...
Page 47
Description: Disable the management function from a WLAN connected user. enable upnp Description: Enable the UPnP function. enable wlan management Description: Enable the management function from a WLAN connected user. help Description: Show help descriptions on CLI. logout Description: Logout the current CLI management session. ping <IP address>...
Page 48
Description: Set the IP address for the device LAN interface. set system location <string up to 60 characters> Description: Configure a string describing the system location information. This is the value of the SNMP system location MIB. set system name <string up to 30 characters> Description: Configuring a string for the system name.
Page 49
Description: Add a MAC filter with the specified name (a mnemonic name) and MAC address. delete mac filter <string up to 30 characters> Description: Delete the MAC filter with the specified name. set mac filter mode <MAC filter mode, disabled/grant/deny> Description: Set the MAC filter mode.
Page 50
(4) Diagnostics Commands disable log <facility> Description: Disable the log function on the specified facility. disable syslogd Description: Disable the remote log function. disable trace <facility> Description: Disable the trace function on the specified facility. enable log <facility> [<log level, 1-7>] Description: Enable the log function with the specified log level on the specified facility.
Page 51
Description: Configure the primary/secondary RADIUS server settings. This is a multi-line com- mand, and you have to enter the IP address and port number of the server, shared secret, and en- able/disable. change password Description: Change the password for management, including HTTP and TELNET. disable radius mac authentication Description: Disable the use of external RADIUS servers for MAC address access control.
Chapter Text Configuration The text configuration provides another way for users to configure the GW-AP54SAG. Users can save the system current configuration onto a file on PC, edit the configuration file, and then restore the system configuration with the configuration file. For details regarding the save and restore con-...
Page 53
[Manufacture] This is used by the system itself, and this should be Version = 1.00 put as the first section in a configuration file. Users should not modify anything in this section. [Password] Password: the password for system management. Password=000000 [Time] System Time Configuration TimeZone = +09:00...
Page 54
ISPType=pptp PPTPLocalIP=11.0.0.10 For PPPoE ‘unnumbered_link’ session type: PPTPNetmask=255.255.255.0 KeepPrivateLan: keep the private LAN or not (‘en- PPTPRemoteIP=11.0.0.1 able’ or ‘disable’). PPTPUserName=name UnnumberedIP: the IP address of the private LAN if PPTPPassword=password ‘KeepPrivateLan’ is ‘enable’ PPTPIdleTimeout=time UnnumberedNetmask: the subnet mask of the private LAN if ‘KeepPrivateLan’...
Page 55
on the session (‘enable’, ‘disable’). The following items can appear more than one in a multiple PPPoE entry: TPRuleIPRange: specify an IP address range traffic pattern. TPRuleNetwork: specify an IP network traffic pat- tern. TPRulePortRange: specify a port range traffic pat- tern.
Page 56
able’). [SSID Entry] SSID Entry Configuration PrimarySSID=wlan PrimarySSID: specify the primary SSID, which must SSID=wlan be included in the following SSID entries. SecurityPolicy=none There could be more than one entries (max 4 entries), SecurityPolicy=wep each entry contains the following items: WEPAutoGenerateKey=enable SSID: a SSID of the WLAN.
Page 57
WPAEncryptionTypp: encryption protocol types (‘tkip’, ‘ccmp’, ‘both’). WPAGroupRekeyInterval: group key re-key interval (unit: sec). If ‘VLANState’ in [VLAN] is ‘enable’, the following items can be included: VLANID: the VLAN ID of the bridge that the SSID belongs to. VLANPriority: the 802.1p priority value of the pack- ets came from the stations using the SSID.
Page 58
[Syslog] Syslog Configuration SyslogLevel=3 SyslogState=disable SyslogLevel: syslog level, lower is severer and less events will be logged. SyslogState=enable SyslogState: whether enable the remote log function SyslogdIP=102.2.2.2 (‘enable’, ‘disable’). SyslogdIP: the IP address of the remote syslog dae- mon if ‘SyslogState’ is ‘enable’. [EmailLog] Email Log Configuration EmailLogState=enable...
Page 59
MACFilterPolicy =disable MACFilterPolicy: MAC Filter policy (‘disable’, ‘deny’, ‘grant’). [MACFilterEntry] MAC Filter Entry Configuration MACFilterName=name MACFilterMAC=00-01-30-05-70- There could be multiple entries (max 1024 entries), each entry contains the following items: MACFilterName: a mnemonic name for the entry. MACFilterMAC: the MAC address that the filter will be applied on.
Page 60
VLANPrio5=high ured). VLANPrio6=highest VLANPrioi (i = 0, 1, 2, …, 7): the corresponding VLANPrio7=highest priority level for this VLAN 802.1p value (‘low’, SchedulingScheme=htb ‘high’, ‘highest’). SchedulingScheme: the QoS scheduling scheme (‘sp’, HTBBwRatioHighest=10 ‘htb’). HTBBwRatioHigh=20 HTBBwRatioNormal=40 If ‘SchedulingScheme’ is ‘htb’, the following items HTBBwRatioLow=40 could be configured: HTBBwRatioHigh-...
Need help?
Do you have a question about the GW-AP54SAG and is the answer not in the manual?
Questions and answers