Introduction Chapter 1 Moxa AirWorks AWK-5222 with dual-RF wireless capability allows wireless users to access network resources more reliably. The AWK-5222 is rated to operate at temperatures ranging from 0 to 60°C for standard models and -40 to 75°C for extended temperature models, and is rugged enough for any harsh industrial environment.
AirWorks AWK-5222 User’s Manual Introduction Overview The AWK-5222 Access Point/Bridge and AP Client is ideal for applications that need a more reliable solution, and are hard to wire, too expensive to wire, or use mobile equipment that connects to a TCP/IP network. The AWK-5222 can operate at temperatures ranging from 0 to 60°C for standard models and -40 to 75°C for extended temperature models, and is rugged enough...
AirWorks AWK-5222 User’s Manual Introduction Operating temperature ranges from -40 to 75°C (-T model) Power input by redundant 24 VDC power inputs or IEEE802.3af Power over Ethernet DIN-Rail or wall mounting ability IP30 protected high-strength metal housing Product Specifications WLAN Standards IEEE 802.11a/g/b for Wireless LAN...
AirWorks AWK-5222 User’s Manual Introduction Functional Design LED Indicators The LEDs on the front panel of AWK-5222 allow you to identity the status and wireless settings quickly. Color State Description Front Panel LED Indicators (System) Power is being supplied from power input 1.
AirWorks AWK-5222 User’s Manual Introduction ATTENTION When the LEDs for STATE (Green), FAULT, WLAN1 and WLAN2 all light up simultaneously and blink at one-second intervals, it means the system failed to boot. This may be due to improper operation or uncontrollable issues, such as an unexpected shutdown during firmware update. To recover the firmware, refer to “Firmware Recovery”...
AirWorks AWK-5222 User’s Manual Introduction Relay (Digital Output) The AWK-5222 has one relay output, which consists of the 2 terminal block contacts on the top panel, as shown below. These relay contacts are used to forward system failure and user-configured events.
AirWorks AWK-5222 User’s Manual Introduction Antenna Position A Position B Main1 Main2 You can fit additional antennas to the sides of the AWK-5222 with an antenna cable (positions A and B). If you install the AWK-5222 in a cabinet, you must unscrew on reason restricted communication the antennas.
Getting Started Chapter 2 This chapter explains how to install Moxa’s AirWorks AWK-5222 for the first time, and quickly set up your wireless network and test whether the connection is running well. With the function guide, you can find out the functions you need easily.
AirWorks AWK-5222 User’s Manual Getting Started First-time Installation and Configuration Before installing the AWK-5222, make sure that all items in the Package Checklist are in the box. In addition, you will need access to a notebook computer or PC equipped with an Ethernet port.
AirWorks AWK-5222 User’s Manual Getting Started NOTE Default user name and password: User Name: admin Password: root For security reasons, we strongly recommend changing the default password. To do so, select Maintenance > Password, and then follow the on-screen instructions to change the password.
AirWorks AWK-5222 User’s Manual Getting Started After configuring the WLAN card, establish a wireless connection with the AWK-5222 and open a DOS window on Notebook B. At the prompt, type ping <IP address of notebook A> and then press Enter (see the figure below). A “Reply from IP address …” response means the communication was successful.
Page 17
AirWorks AWK-5222 User’s Manual Getting Started A quick overview of the AWK-5222’s status Basic settings for administering the AWK-5222 Essential settings related to establishing a wireless network Advanced features to support additional network management and secure wired and wireless communication * These advanced functions are all optional.
Web Console Configuration Chapter 3 In this chapter, we will explain each web management page of the web-based console configuration. Moxa’s easy-to-use management functions will help you set up your AWK-5222, as well as establish and maintain your wireless network easily. In this chapter, we cover the following topics: Configuration by Web Browser Overview...
AirWorks AWK-5222 User’s Manual Web Console Configuration Configuration by Web Browser Moxa AWK-5222’s web browser interface provides a convenient way to modify its configuration and access the built-in monitoring and network administration functions. The recommended web ® browser is Microsoft Internet Explorer 5.5 or 6.0 with JVM (Java Virtual Machine) installed.
Page 20
AirWorks AWK-5222 User’s Manual Web Console Configuration You can use the menu tree on the left side of the window to open the function pages to access each of AWK-5222’s functions. In the following paragraphs, we will go through each of the AWK-5222’s management functions in detail.
AirWorks AWK-5222 User’s Manual Web Console Configuration Overview The Overview page summarizes the AWK-5222’s current status. The information is categorized into several groups: System info, Device info and 802.11 info. Basic Settings The Basic Settings group includes the most commonly used settings required by administrators to maintain and control the AWK-5222.
AirWorks AWK-5222 User’s Manual Web Console Configuration Device description Setting Description Factory Default Max. 31 Characters Use this space to record more detailed None description of AWK-5222 Device name Setting Description Factory Default Max. 31 Characters To provide information about whom...
AirWorks AWK-5222 User’s Manual Web Console Configuration Gateway Setting Description Factory Default AWK-5222’s default The IP address of the router that None gateway connects the LAN to an outside network. Primary/ Secondary DNS server Setting Description Factory Default IP address of Primary/...
Page 24
AirWorks AWK-5222 User’s Manual Web Console Configuration NOTE The AWK-5222 has a real time clock (RTC). Users are strongly recommended to update the Local time for the AWK-5222 after initial setup or long-term shutdown, especially when the network does not have an Internet connection for accessing the NTP server or there is no NTP server on the LAN.
AirWorks AWK-5222 User’s Manual Web Console Configuration Query period Setting Description Factory Default Query period time This parameter determines how often 600 (seconds) (1- 9999 seconds) the time is updated from the NTP server. Wireless Settings The essential settings for wireless networks are presented in this function group. Settings must be properly set before establishing your wireless network.
Page 26
AirWorks AWK-5222 User’s Manual Web Console Configuration Wireless Bridge A bridge is a network component that connects two networks. A bridge’s operation is based on the AP (master) and Client (Slave) concept. Both side connections must have the same RF type, SSID, and security settings.
AirWorks AWK-5222 User’s Manual Web Console Configuration NOTE Although it is more convenient to use dynamic bridging, there is a limitation — the Client or Slave can only transmit IP-based packets between its wireless interface (WLAN) and Ethernet interface (LAN); other types of traffic (such as IPX and AppleTalk) are not forwarded.
Page 28
AirWorks AWK-5222 User’s Manual Web Console Configuration NOTE When you switch to Redundant Client, Client, or Slave mode, you can find an additional Site Survey button on this page. It can support site survey and pop up a dialog box listing the information of available APs, as shown in the following figure.
AirWorks AWK-5222 User’s Manual Web Console Configuration Channel (for Redundant AP, AP, or Master mode only) Setting Description Factory Default Available channels vary AWK-5222 plays a role of wireless 6 (in B/G Mixed mode) with RF type SSID Setting Description Factory Default Max.
Page 30
AirWorks AWK-5222 User’s Manual Web Console Configuration The AWK-5222 provides four standardized wireless security modes: Open, WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access) and WPA2. Several types of security models are available in AWK-5222 by selecting Security mode and WPA type: Open: No authentication, no data encryption.
Page 31
AirWorks AWK-5222 User’s Manual Web Console Configuration Authentication type Setting Description Factory Default Open Data encryption is enabled, but no Open authentication Shared Data encryption and authentication are both enabled. Key type Setting Description Factory Default Specifies WEP keys in hex-decimal...
Page 32
AirWorks AWK-5222 User’s Manual Web Console Configuration WPA/WPA2-Personal WPA (Wi-Fi Protected Access) and WPA2 are significantly improved encryption methods of WEP. WPA is a security standard based on 802.11i draft 3, while WPA2 is based on the fully ratified version of 802.11i. The initial vector is transmitted, encrypted, and enhanced with its 48 bits, twice as long as WEP.
Page 33
AirWorks AWK-5222 User’s Manual Web Console Configuration Key renewal (for Redundant AP, AP, or Master mode only) Setting Description Factory Default 60 – 86400 seconds Specifies the time period of group 3600 (seconds) (1 minute to 1 year) key renewal...
Page 34
AirWorks AWK-5222 User’s Manual Web Console Configuration WPA Type Setting Description Factory Default Personal Provides Pre-Shared Key-enabled Personal WPA and WPA2 Enterprise Provides enterprise-level security for WPA and WPA2 Encryption method Setting Description Factory Default TKIP Temporal Key Integrity Protocol is...
Page 35
AirWorks AWK-5222 User’s Manual Web Console Configuration WPA/WPA2-Enterprise (for Redundant Client, Client, or Slave mode) In a client role, the AWK-5222 can support three EAP methods (or EAP protocols): EAP-TLS, EAP-TTLS, and EAP-PEAP, corresponding to WPA/WPA-Enterprise settings on the AP side.
Page 36
AirWorks AWK-5222 User’s Manual Web Console Configuration You can check the current certificate status in Current Status if it is available. Certificate issued to: shows the certificate user Certificate issued by: shows the certificate issuer Certificate expiration date: indicates when the certificate gets invalid...
Page 37
AirWorks AWK-5222 User’s Manual Web Console Configuration TTL Inner Authentication Setting Description Factory Default Password Authentication Protocol is MS-CHAP-V2 used CHAP Challenge Handshake Authentication Protocol is used MS-CHAP Microsoft CHAP is used MS-CHAP-V2 Microsoft CHAP version 2 is used Anonymous...
Page 38
AirWorks AWK-5222 User’s Manual Web Console Configuration PEAP There are a few differences in the inner authentication procedures for TTLS and PEAP. TTLS uses the encrypted channel to exchange attribute-value pairs (AVPs), while PEAP uses the encrypted channel to start a second EAP exchange inside of the tunnel. The AWK-5222 provides MS-CHAP-V2 merely as an EAP method for inner authentication.
AirWorks AWK-5222 User’s Manual Web Console Configuration Advanced Wireless Settings Additional wireless-related parameters are presented in this section to help you set up your wireless network in detail. Transmission Rate Setting Description Factory Default Auto AWK-5222 will sense and adjust the...
Page 40
AirWorks AWK-5222 User’s Manual Web Console Configuration DTIM Interval (for Redundant AP, AP, Master mode only) Setting Description Factory Default Data Beacon Rate This value indicates how often the (1-16384) AWK-5222 sends out a Delivery Traffic Indication Message Fragment threshold...
Page 41
AirWorks AWK-5222 User’s Manual Web Console Configuration NOTE Make sure the same Transmission distance parameters are set in both AP and Client sides, and both Master and Slave. When this parameter is more than 500, an optimal algorithm will be enabled to support long-distance transmission.
AirWorks AWK-5222 User’s Manual Web Console Configuration WLAN Certification Settings (for EAP-TLS in Redundant Client, Client or Slave mode only) When EAP-TLS is used, a WLAN Certificate will be required at the client end to support WPA/WPA2-Enterprise. The AWK-5222 can support the PKCS #12, also known as Personal...
AirWorks AWK-5222 User’s Manual Web Console Configuration NOTE The WLAN certificate will remain after the AWK-5222 reboots. Even though it is expired, it can still be seen on Current Certificate. Advanced Settings Several advanced functions are available to increase the functionality of your AWK-5222 and wireless network system.
Page 44
AirWorks AWK-5222 User’s Manual Web Console Configuration DHCP server (AP only) Setting Description Factory Default Enable Enables AWK-5222 as a DHCP server Disable Disable Disable DHCP server function Default gateway Setting Description Factory Default IP address of a default The IP address of the router that...
AirWorks AWK-5222 User’s Manual Web Console Configuration Packet Filters The AWK-5222 includes various filters for IP-based packets going through LAN and WLAN interfaces. You can set these filters as a firewall to help enhance network security. MAC Filter The AWK-5222’s MAC filter is a policy-based filter that can allow or filter out IP-based packets with specified MAC addresses.
Page 46
AirWorks AWK-5222 User’s Manual Web Console Configuration IP Protocol Filter The AWK-5222’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified IP protocol and source/destination IP addresses. The AWK-5222 provides 8 entities for setting IP protocol and source/destination IP addresses in your filtering policy.
Page 47
AirWorks AWK-5222 User’s Manual Web Console Configuration TCP/UDP Port Filter The AWK-5222’s TCP/UDP port filter is a policy-based filter that can allow or filter out TCP/UDP-based packets with a specified source or destination port. The AWK-5222 provides 8 entities for setting the range of source/destination ports of a specific protocol.
AirWorks AWK-5222 User’s Manual Web Console Configuration RSTP Settings (for Redundant AP or AP mode only) AWK-5222 supports IEEE802.1D Spanning Tree Protocol and IEEE802.1w Rapid STP standards. In addition to eliminating unexpected path looping, STP/RSTP can provide a backup path recovery if a wired/ wireless path fails accidentally.
Page 49
AirWorks AWK-5222 User’s Manual Web Console Configuration Forwarding delay Setting Description Factory Default Numerical value input The amount of time this device waits 15 (seconds) by user before checking to see if it should (4 – 30 seconds) change to a different topology.
AirWorks AWK-5222 User’s Manual Web Console Configuration Port Status Port Status indicates the current Spanning Tree status of this port. Use Forwarding for normal transmission, or Blocking to block transmission. SNMP Agent The AWK-5222 supports SNMP V1/V2c/V3. SNMP V1 and SNMP V2c use a community string match for authentication, which means that SNMP servers access all objects with read-only or read/write permissions using the community string public/private (default value).
Page 51
AirWorks AWK-5222 User’s Manual Web Console Configuration The following parameters can be configured on the SNMP Agent page. A more detailed explanation of each parameter is given below the following figure. Enable Setting Description Factory Default Enable Enables SNMP Agent...
AirWorks AWK-5222 User’s Manual Web Console Configuration Admin auth type (for V1, V2c, V3, and V3 only) Setting Description Factory Default No Auth Use admin account to access objects. No authentication Provide authentication based on the HMAC-MD5 algorithms. 8-character passwords are the minimum No Auth requirement for authentication.
AirWorks AWK-5222 User’s Manual Web Console Configuration Auto Warning Settings Since industrial-grade devices are often located at the endpoints of a system, these devices will not always know what is happening elsewhere on the network. This means that these devices, including wireless APs or clients, must provide system maintainers with real-time alarm messages.
Page 54
AirWorks AWK-5222 User’s Manual Web Console Configuration System-related events Event is triggered when… The AWK-5222 is rebooted, such as when its settings System restart (warm start) are changed (IP address, subnet mask, etc.). Network-related events Event is triggered when… LAN link on The LAN port is connected to a device or network.
AirWorks AWK-5222 User’s Manual Web Console Configuration Syslog This function provides the event logs for the Syslog server. The function supports up to three configurable Syslog servers and Syslog server UDP port numbers. When an event occurs, the event will be sent as a Syslog UDP packet to the specified Syslog servers.
AirWorks AWK-5222 User’s Manual Web Console Configuration E-mail E-mail Event Types Check the box for Active to enable the event items. All default values are deactivated (unchecked). Details for each event item can be found on the “System log Event Types” table on page 3-31.
Page 57
AirWorks AWK-5222 User’s Manual Web Console Configuration E-mail Server Settings You can set up to 4 e-mail addresses to receive alarm emails from the AWK-5222. The following parameters can be configured on the E-mail Server Settings page. In addition, a Send Test Mail button can be used to test whether the Mail server and e-mail addresses work well.
AirWorks AWK-5222 User’s Manual Web Console Configuration Relay The AWK-5222 has one relay output, which consists of 2 terminal block contacts on the AWK-5222’s top panel. These relay contacts are used to indicate user-configured events and system failure. The two wires attached to the relay contacts form an open circuit when a user-configured event is triggered.
AirWorks AWK-5222 User’s Manual Web Console Configuration Trap Traps can be used to signal abnormal conditions (notifications) to a management station. This trap-driven notification can make your network more efficient. Because a management station usually takes care of a large number of devices that have a large number of objects, it will be overloading for the management station to poll or send requests to query every object on every device.
Page 60
AirWorks AWK-5222 User’s Manual Web Console Configuration SNMP Trap Receiver Settings SNMP traps are defined in SMIv1 MIBs (SNMPv1) and SMIv2 MIBs (SNMPv2c). The two styles are basically equivalent, and it is possible to convert between the two. You can set the parameters for SNMP trap receivers through the web page.
AirWorks AWK-5222 User’s Manual Web Console Configuration Status Wireless Status The status for 802.11 info parameters, such as Operation mode and Channel, are shown on the Wireless Status page. The status will refresh every 5 seconds if the Auto refresh box is checked.
AirWorks AWK-5222 User’s Manual Web Console Configuration Associated Client List (for Redundant AP, AP, or Master mode only) Associated Client List shows all the clients that are currently associated to a particular AWK-5222. You can click Select all to select all the content in the list for further editing. You can click Refresh to refresh the list.
AirWorks AWK-5222 User’s Manual Web Console Configuration System Log Triggered events are recorded in System Log. You can export the log contents to an available viewer by clicking Export Log. You can use the Clear Log button to clear the log contents and the Refresh button to refresh the log.
AirWorks AWK-5222 User’s Manual Web Console Configuration DI and Power Status The status of power inputs and digital inputs is shown on this web page. The status will refresh every 5 seconds if the Auto refresh box is checked. Maintenance Maintenance functions provide the administrator with tools to manage the AWK-5222 and wired/wireless networks.
AirWorks AWK-5222 User’s Manual Web Console Configuration If the node and access path are available, you will see that all packets were successfully transmitted with no loss. Otherwise, some, or even all, packets may get lost, as shown in the following figure.
AirWorks AWK-5222 User’s Manual Web Console Configuration Config Import Export You can back up or restore the AWK-5222’s configuration with Config Import Export. In the Config Import section, click Browse to specify the configuration file and click Config Import button to begin importing the configuration.
AirWorks AWK-5222 User’s Manual Web Console Configuration Misc. Settings Additional settings to help you manage your AWK-5222, are available on this page. Reset button Setting Description Factory Default Always enable The AWK-5222’s Reset button works Always enable normally. Disable after 60 sec The AWK-5222’s Reset button will...
AirWorks AWK-5222 User’s Manual Web Console Configuration Restart If you submitted configuration changes, you will find a blinking string in the upper right corner of the screen. After making all your changes, click the Restart function in the left menu box. One of two different screens will appear.
Other Console Configurations Chapter 4 This chapter explains how to access the AWK-5222 for the first time. In addition to HTTP access, there are four ways to access AWK-5222: serial console, Telnet console, SSH console, and HTTPS console. The serial console connection method, which requires using a short serial cable to connect the AWK-5222 to a PC’s COM port, can be used if you do not know the AWK-5222’s IP address.
AirWorks AWK-5222 User’s Manual Other Console Configurations ATTENTION 1. You CANNOT connect to the AWK-5222 by two ore more of these console configurations simultaneously. 2. You can connect to the AWK-5222 simultaneously by web browser and serial/ Telnet /SSH console. However, we strongly suggest that you do NOT use more than one connection method at the same time.
Page 71
AirWorks AWK-5222 User’s Manual Other Console Configurations 2. Select Open under Port Manager to open a new connection. 3. The Communication Parameter page of the Property window opens. Select the appropriate COM port for Console Connection, 115200 for Baud Rate, 8 for Data Bits, None for Parity, and 1 for Stop Bits.
AirWorks AWK-5222 User’s Manual Other Console Configurations 6. The AWK-5222’s device information and Main Menu will be displayed. Please follow the description on screen and select the administration option you wish to perform. NOTE To modify the appearance of the PComm Terminal Emulator window, select Edit Font and then choose the desired formatting options.
AirWorks AWK-5222 User’s Manual Other Console Configurations Follow the steps below to access the console utility via Telnet or SSH client. 1. From Windows Desktop, run Start > Run, and then use Telnet to access the AWK-5222’s IP address from the Windows Run window. (You may also issue the telnet command from the MS-DOS prompt.)
AirWorks AWK-5222 User’s Manual Other Console Configurations 2. Warning messages will pop out to warn users that the security certificate was issued by a company they have not chosen to trust. 3. Select Yes to accept the certificate issued by Moxa IW and then enter the AWK-5222’s web browser interface secured via HTTPS/SSL.
References Chapter 5 This chapter provides more detailed information about wireless-related technologies. The information in this chapter can help you administer your AWK-5222s and plan your industrial wireless network better. The following topics are covered: Beacon DTIM Fragment RTS Threshold STP and RSTP The STP/RSTP Concept Differences between RSTP and STP...
AirWorks AWK-5222 User’s Manual References Beacon A beacon is a packet broadcast by the AP to keep the network synchronized. A beacon includes the wireless LAN service area, the AP address, the Broadcast destination address, a time stamp, Delivery Traffic Indicator Maps (DTIM), and the Traffic Indicator Message (TIM). Beacon Interval indicates the frequency interval of AP.
AirWorks AWK-5222 User’s Manual References Differences between RSTP and STP RSTP is similar to STP, but includes additional information in the BPDUs that allow each bridge to confirm that it has taken action to prevent loops from forming when it decides to enable a link to a neighboring bridge.
Supporting Information Chapter 6 This chapter presents additional information about this manual and product. You can also learn how to contact Moxa for technical support. The following topics are covered: About This User’s Manual DoC (Declaration of Conformity) Federal Communication Commission Interference Statement R&TTE Compliance Statement Firmware Recovery Technical Support Contact Information...
AirWorks AWK-5222 User’s Manual Supporting Information About This User’s Manual This manual is mainly designed for, but no limited to, the following hardware and firmware for the AWK-5222: Hardware Rev: 1.0 Firmware Ver: You are strongly recommended to visit Moxa’s website (http://www.moxa.com) and find the latest product datasheet, firmware, QIG (Quick Installation Guide), UM (User’s Manual) and related...
AirWorks AWK-5222 User’s Manual Supporting Information DoC (Declaration of Conformity) Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
AirWorks AWK-5222 User’s Manual Supporting Information R&TTE Compliance Statement This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE).
Page 82
AirWorks AWK-5222 User’s Manual Supporting Information Connect to the AWK-5222’s RS-232 console with 115200bps and N-8-1. You will see the following message shown on the terminal emulator every one second. Press Ctrl - C and the following message will appear.
AirWorks AWK-5222 User’s Manual Supporting Information AWK-5222 restarts, and the “Press Ctrl-C to enter Firmware Recovery Process…” message will reappear. Press Ctrl-C to enter the menu and select 1 to start the firmware upgrade process. Select 0 in the sub-menu to load the firmware image via LAN, and then enter the file name of the firmware to start the firmware recovery.