Page 1 System Manual MobileLAN™ access WA2XG...
Page 2 The information contained herein is proprietary and is provided solely for the purpose of allowing customers to operate and service Intermec-manufactured equipment and is not to be released, reproduced, or used for any other purpose without written permission of Intermec.
Page 3 Document Change Record This page records changes to this document. The document was originally released as version 001. Version Date Description of Change 07/2005 Added information about the new features of software release 3.01, including support for dual 802.11g radios, wireless bridging, wireless hops, and antenna diversity. MobileLAN access WA2X System Manual...
Page 4 MobileLAN access WA2XG System Manual...
Page 5: Table Of Contents
Installation Guidelines... 34 Microwave Ovens ... 34 Cordless Telephones ... 34 Other Access Points ... 35 MobileLAN access WA2XG System Manual Example - Configuring an 802.11g Access Point ... 10 Example - Configuring an 802.11g Access Point with Roaming End Devices... 12 Example - Configuring an 802.11g WAP With Roaming End Devices ...
Page 6 About Network Address Translation (NAT)... 57 Using Ethernet Received Frame Type Filters ... 61 Using Predefined Received Subtype Filters ... 63 Customizing Received Subtype Filters ... 64 Configuring Advanced Received Filters ... 66 ... 75 MobileLAN access WA2XG System Manual...
Page 7 Controlling Access to Access Point Menus... 124 Enabling Access Methods ... 124 Setting Up Logins... 126 Creating a Secure Spanning Tree ... 130 MobileLAN access WA2XG System Manual ... 85 Outbound Frames ... 100 Inbound Frames ... 100 Frame Types That Are Never Forwarded... 101 Using IP Tunnel Transmit Frame Type Filters ...
Page 8 Configuring Your Access Points to Use Avalanche... 167 Managing Your Access Points Using Avalanche ... 168 Important Information When Using Avalanche... 169 Using the MobileLAN access Utility... 181 Using the Web Browser Interface ... 182 ... 151 ... 165 MobileLAN access WA2XG System Manual...
Page 9 Troubleshooting the Access Points... 183 Using the Configuration Error Messages ... 183 Calling Intermec Technical Support ... 187 Troubleshooting With the LEDs ... 188 General Troubleshooting... 189 Troubleshooting the Radios... 191 Troubleshooting Security... 195 Recovering a Failed Access Point ... 197 Upgrading the Access Points...
Page 10 SNMPv3 Menu Defaults... 246 Passwords Menu Defaults... 247 802.11g Radio Security Menu Defaults ... 247 RADIUS Server List Menu Defaults... 248 Spanning Tree Security Menu Defaults ... 249 Embedded Authentication Server Menu Defaults ... 249 MobileLAN access WA2XG System Manual...
Page 11: Before You Begin
Safety Summary Your safety is extremely important. Read and follow all warnings and cautions in this document before handling and operating Intermec equipment. You can be seriously injured, and equipment and data can be damaged if you do not follow the safety warnings and cautions.
Page 12: Safety Icons
Global Services and Support Warranty Information To understand the warranty for your Intermec product, visit the Intermec web site at www.intermec.com and click Service & Support. The Intermec Global Sales & Service page appears. From the Service & Support menu, move your pointer over Support, and then click Warranty.
Page 13: Who Should Read This Document
Related Documents The Intermec web site at www.intermec.com contains many of our documents that you can download in PDF format. To order printed versions of the Intermec manuals, contact your local Intermec representative or distributor. Patent Information Product is covered by one or more of the following patents: 4,910,794;...
Page 14 Before You Begin MobileLAN access WA2XG System Manual...
Page 15: Getting Started
Getting Started This chapter introduces the MobileLAN™access WA2XG family of access points, explains their features, and describes how you can use them to expand your data collection network. This chapter covers these topics: • Overview of the MobileLAN access products •...
Page 16: Overview Of The Mobilelan Access Products
Chapter 1 — Getting Started Overview of the MobileLAN access Products Intermec’s MobileLAN™access WA2XG family of access points delivers reliable and seamless wireless performance to almost any operational environment. They are designed for standards-based connectivity and they support industry standard IEEE 802.11g and 802.11b wireless technologies.
Page 17 These end devices periodically wake up to receive frames that arrived while their radio was powered down. The access point automatically provides a pending message delivery service that holds frames until the end device is ready to receive them. MobileLAN access WA2XG System Manual Multiport Bridge Forwarding Spanning...
Page 18: Features
Chapter 1 — Getting Started Features This table lists the features of the MobileLAN access WA2XG products. MobileLAN access Feature Comparison Feature Access Point Point-to-Point Bridge (Wireless Bridge) Wireless Access Point (WAP) or Repeater Secure Wireless Hops (SWAP) Secure Wireless Hops (TLS or TTLS)
Page 19: What's New For Software Releases 3.01
802.11g radios. An access point requires two radios before it can do point- to-multipoint bridging and wireless hops. Wireless bridging and wireless hops: The WA2XG with two radios now supports wireless bridging and wireless hops. Important Note: With this software release, a WA2XG can bridge a primary LAN to a secondary LAN.
Page 20: Understanding The Leds
On indicates that the access point either has found a root access point or it has become the root access point. The access point is now ready for use in your Intermec network. Note: In the Spanning Tree Settings screen, you can configure this LED to behave as if it were a Root/error LED.
Page 21: Understanding The Ports
Power (Not WA22G) Serial Ethernet Fiber optic To access the ports on the WA21G, you must remove the cable access door. MobileLAN access WA2XG System Manual Wireless #2 Intermec Ready-to-Work Wired LAN Indicator Description Used with an appropriate power cable, this port connects the access point to an AC power source.
Page 22 Port Descriptions table on the previous page. For more information on connecting the ports, see Chapter 2, “Installing the Access Points.” Serial port 10BaseT/ Fiber optic 100BaseTx port Ethernet port Fiber optic Serial port port MobileLAN access WA2XG System Manual Cable access door...
Page 23: How The Access Point Fits In Your Network
LAN. Host This illustration shows a simple wireless network with one access point and some wireless end devices. MobileLAN access WA2XG System Manual Environment Use in locations where an access point is exposed to extreme environments. Use in most indoor environments.
Page 24: Example - Configuring An 802.11G Access Point
In this example, there is one 802.11g radio in the access point. Wireless end devices use the access point to communicate with the host and other end devices. Configuring 802.11g Access Point Parameters Screen 802.11g Radio Spanning Tree Settings Intermec recommends that you always implement some type of security. Access point Ethernet Parameter Access Point...
Page 25: Using Multiple Access Points And Roaming Wireless End Devices
Parameters” on page 91. 3 Configure one of the access points to be a root access point. For help, see “About the Primary LAN and the Root Access Point” on page 87. MobileLAN access WA2XG System Manual Chapter 1 — Getting Started...
Page 26: Example - Configuring An 802.11G Access Point With Roaming End Devices
SSID set to Op3rat!ons. 802.11g Parameter Radio (Root) Node Type Master SSID Op3rat!ons LAN ID Root Priority Ethernet Bridging Checked Enabled Secondary LAN Bridge Priority MobileLAN access WA2XG System Manual 802.11g 802.11g Radio Radio Master Master Op3rat!ons Op3rat!ons Checked Checked...
Page 27: Using An Access Point As A Wap
3 Configure the station radio in the WAP to communicate with one of the master radio service sets in the access point: a In the Navigation Menu, click the link corresponding to the station radio. The radio screen appears. MobileLAN access WA2XG System Manual Chapter 1 — Getting Started Access point...
Page 28 In the Navigation Menu, click the link corresponding to the WAP master radio. The radio screen appears. b In the Frequency field, choose the radio frequency of your wireless network. c In the Primary service set Node Type field, choose Master. MobileLAN access WA2XG System Manual...
Page 29: Example - Configuring An 802.11G Wap With Roaming End Devices
(802.11g Radio-1). You do not need to configure any secondary LAN settings because the WAP is not connected to a secondary LAN. Intermec recommends that you always implement some type of security. MobileLAN access WA2XG System Manual Chapter 1 — Getting Started...
Page 30: Using Access Points To Create A Point-To-Point Bridge
LAN. If it has two radios, it can communicate to a WAP or wireless end devices. If you need to bridge to another secondary LAN, you must use two access points. Primary LAN Root MobileLAN access WA2XG System Manual Secondary LAN Designated bridge...
Page 31 LAN. a In the Navigation Menu, click the link corresponding to the station radio. The radio screen appears. MobileLAN access WA2XG System Manual Chapter 1 — Getting Started...
Page 32 6 Click Submit Changes to save your changes. To activate your changes, in the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual...
Page 33: Example - Configuring An 802.11G Bridge
However, wired devices on the secondary LAN can communicate with the primary LAN. MobileLAN access WA2XG System Manual Primary LAN Root Chapter 1 — Getting Started...
Page 34: Using Dual Radio Access Points For Redundancy
802.11g Radio Spanning Tree Settings Intermec recommends that you always implement some type of security. Using Dual Radio Access Points for Redundancy During normal operations, end devices send frames to the master radio in one of the access points, which bridges the frames to the wired network. If...
Page 35: Configuring The Access Point (Setting The Ip Address)
• the MobileLAN access Utility v2.0 (or later), but you need to know the access point MAC address. You can download this utility from the Intermec web site. This utility must be installed on a PC that is on the same Ethernet segment and subnet as (or must be communicating wirelessly with) the access point.
Page 36 Before you use the utility, you must have an active radio connection. To use the MobileLAN access Utility 1 Use a web browser to navigate to www.intermec.com. From the Service & Support menu, click Downloads. Choose Wireless: MobileLAN access Utility to download the MobileLAN access Utility.
Page 37: Using A Communications Program
• an RS-232 null-modem cable. One end of this cable must be a 9-pin socket connector to connect to the serial port on the access point. Intermec offers a 9-socket to 9-socket null-modem cable (P/N 059167). To order this cable, contact your local Intermec representative.
Page 38 4 Press Enter when the message “Starting system” appears on your PC screen. The Username field appears. 5 In the Username field type the default user name Intermec, and then press Enter. The user name is case sensitive. 6 In the Password field type the default password Intermec, and then press Enter.
Page 39: Using A Web Browser Interface
• From the File menu, choose Open (Internet Explorer) or choose Open Page (Netscape Communicator). In the field, enter the IP address and press Enter. MobileLAN access WA2XG System Manual Chapter 1 — Getting Started Set to <Use DHCP if IP Address is Zero>.
Page 40 The Access Point Login screen appears. 4 If necessary, enter a user name and a password. The default user name is Intermec and the default password is Intermec. You can define a user name and password. For help, see “Setting Up Logins” on page 126.
Page 41: Using A Telnet Session
3 Press Enter. 4 If necessary, enter the user name and press Enter. Then, enter the password and press Enter. The default user name is Intermec and the default password is Intermec. You can define a user name and password.
Page 42: Setting The Clock
3 In the Time field, enter the current time. 4 Click Set. The clock is immediately set to the correct date and time. 5 (Optional) Configure a time zone stamp. a In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings screen appears. MobileLAN access WA2XG System Manual...
Page 43 2 In the SNTP Server Name field, enter an IP address or a DNS name of an NTP or SNTP server. MobileLAN access WA2XG System Manual is the time zone (for example, PST) is the offset from Greenwich Mean Time (GMT)
Page 44: Saving Configuration Changes
When you click Save/Discard Changes > Save Changes and Reboot, the access point copies the saved configuration file to the active configuration file. The active configuration file is the file that the access point uses. MobileLAN access WA2XG System Manual...
Page 45: Using A Web Browser Interface
To discard the changes • Click Discard Pending Changes. MobileLAN access WA2XG System Manual Chapter 1 — Getting Started Click to use your new configuration...
Page 46: Using A Telnet Session
Chapter 1 — Getting Started Using a Telnet Session 1 From the Access Point Configuration menu, choose Save Configuration. 2 Choose Reboot to reboot the access point and immediately use your new active configuration. MobileLAN access WA2XG System Manual...
Page 47: Installing The Access Points
Installing the Access Points This chapter explains how to install the MobileLAN access WA2XG family of access points in your data collection network, provides some tips on how to position access points to improve your network performance, and provides some external antenna guidelines. This chapter covers these topics: •...
Page 48: Installation Guidelines
Installation Guidelines Intermec recommends that you have an Intermec-certified RF specialist conduct a site survey to determine the ideal locations for all your Intermec wireless network devices. To conduct a proper site survey, you need to have special equipment and training.
Page 49: Other Access Points
Installing the WA21G You can place the WA21G horizontally or vertically on a desk or counter. If you want to mount the WA21G to a wall or beam using an Intermec mounting bracket kit, you need one of these mounting kits: •...
Page 50: Connecting The Wa21G To Your Wired Lan
• Plug one end of the power cord into the power port on the WA21G and plug the other end into an AC power outlet. The access point boots as soon as you apply power. MobileLAN access WA2XG System Manual...
Page 51: Installing The Wa22G
• Cubicle bracket kit (P/N 069926) • Locking bracket kit (P/N 070184) To order one of these kits, contact your Intermec representative. Intermec also offers a variety of antennas and antenna accessories. For more information, see “Antennas and Antenna Accessories” on page 235.
Page 52: Connecting To Your Fiber Optic Network
However, any movement of the cable or change in cable tension could cause complete loss of signal. Do not insert a male MT-RJ connector into the ﬁber optic port MobileLAN access WA2XG System Manual...
Page 53: Connecting To An Mt-Rj Network
Note: The patch cord shown above must connect to the access point with a female MT-RJ connector. For details, see “Using and Purchasing the Required Patch Cord and Adapter” on page 38. MobileLAN access WA2XG System Manual Chapter 2 — Installing the Access Points Female...
Page 54: Connecting To An Sc Network
Note: The patch cord shown above must connect to the access point with a female MT-RJ connector. For details, see “Using and Purchasing the Required Patch Cord and Adapter” on page 38. Female MT-RJ connector SC connector Patch cord MobileLAN access WA2XG System Manual SC adapter SC connector To SC network...
Page 55: Connecting To An St Network
1 Remove any cable protectors attached to the patch cord and adapter. 2 Connect the access point to your network as shown in the next illustration. MobileLAN access WA2XG System Manual Chapter 2 — Installing the Access Points Female MT-RJ connector...
Page 56: Connecting Power Over Ethernet
AC power or by power over Ethernet or both. For all access points, you need a power bridge. For a list of the power bridges that Intermec sells, contact your local Intermec representative. To AC Connecting WA22G Using Power Over Ethernet: This illustration shows how you connect the WA22G to the MobileLAN power bridge with a typical Ethernet cable to run power over Ethernet.
Page 57: External Antenna Placement Guidelines
Therefore, the exact range that you will achieve with each access point is difficult to determine. Intermec recommends that you allow an Intermec-certified RF specialist to perform a site survey before you install a wireless network. For more information, contact your local Intermec representative.
Page 58: Positioning Antennas For 802.11G Radios
Positioning Antennas for 802.11g Radios The 802.11g radios have two ports: one is a transmit/receive port (primary) and the other is a receive-only port (secondary). Intermec recommends that you use two antennas for optimal performance of the radios. If you only attach one antenna to the 802.11g radio, you must attach it to the primary port.
Page 59: Positioning Stacked Antennas For Dual Radio Access Points
Using Stacked Antenna Positioning: As an alternative to the physical separation of omni antennas, you can mount them along a single axis to minimize the antenna-to- antenna coupling. MobileLAN access WA2XG System Manual Chapter 2 — Installing the Access Points Primary antenna...
Page 60: About Antenna Diversity For 802.11G Radios
• Follow the recommended antenna separation precisely when using the closest distances. Movement of as little as 3.05 cm (1.2 in) may strongly affect performance. You should choose the greatest distance possible within the constraints of your environment. MobileLAN access WA2XG System Manual...
Page 61: Configuring The Ethernet Network
This chapter explains how to configure the MobileLAN access WA2XG family of access points so that they communicate with your Ethernet network. This chapter explains: • Configuring the TCP/IP settings • Configuring other Ethernet or fiber optic settings MobileLAN access WA2XG System Manual...
Page 62: Configuring The Tcp/Ip Settings
4 If you want to configure the access point as a DHCP server, see “Configuring the Access Point as a DHCP Server” on page 53. 5 If you want to configure the access point as a NAT server, see “About Network Address Translation (NAT)” on page 57. MobileLAN access WA2XG System Manual...
Page 63 DNS Address 1 DNS Address 2 DNS Suffix 1 DNS Suffix 2 MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Explanation Enter the IP address of the access point. In an IPv4 network, the IP address has the form x.x.x.x, where x is a number from 0 to 255. For help setting up IPv6 addresses, see “Using IPv6 Addresses”...
Page 64: Using Ipv6 Addresses
4 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual...
Page 65: Configuring The Access Point As A Dhcp Client
1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings screen appears. 2 Configure the DHCP parameters to make this access point a DHCP client. For help, see the next table. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network...
Page 66 DHCP request messages. Determines which DHCP servers may be used by access points and wireless devices: Use Any Available DHCP Server: Access points and wireless devices may receive DHCP responses and addresses from any available DHCP server. MobileLAN access WA2XG System Manual...
Page 67: Configuring The Access Point As A Dhcp Server
To configure the access point as a DHCP server 1 In the Navigation Menu, click TCP/IP Settings. The TCP/IP Settings screen appears. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Explanation Only Use Access Point DHCP Server: Access points and any associated wireless devices may receive DHCP responses and addresses only from an access point DHCP server.
Page 68 Or enter the DHCP vendor class identifier as defined in RFC 2132. When this access point acts as a DHCP server, the access point offers addresses to client requests only when the client requests contains a matching vendor class identifier. MobileLAN access WA2XG System Manual...
Page 69 Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Explanation Determines which DHCP servers may be used by access...
Page 70: Supported Dhcp Server Options
DHCP clients when this access point is a DHCP server. This informative entry lets you know if DHCP has been properly configured, and if the range of addresses has automatically enabled Network Address Translation (NAT). MobileLAN access WA2XG System Manual...
Page 71: About Network Address Translation (Nat)
2 Verify that the IP Address field and IP Subnet Mask field are configured. For help, see “Configuring the TCP/IP Settings” on page 3 In the DHCP Mode field, choose This AP is a DHCP Server. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network...
Page 72: Configuring The Access Point To Send Arp Requests
48. In the Ethernet screen, you can set the port type, set the link speed, and enable or disable the link status check. To configure the Ethernet or fiber optic settings 1 In the Navigation Menu, click Ethernet. The Ethernet screen appears. MobileLAN access WA2XG System Manual...
Page 73 Parameter Port Type Link Speed Enable Link Status Check MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Explanation This field specifies the port that the access point uses to communicate with the Ethernet network: 10/100 Mb Twisted-Pair: The access point communicates with the Ethernet network through the Ethernet port.
Page 74: Configuring The Ethernet Static Address Table
3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual...
Page 75: Configuring Ethernet Filters
Ethernet frame type filter and predefined subtype filter settings override customizable subtype filter settings. However, Intermec recommends that when creating customizable subtype filters, you do not duplicate existing frame type or predefined subtype filters or unexpected results may occur.
Page 76 IP protocols other than TCP or User Datagram Protocol (UDP). Novell NetWare protocol over Ethernet II frames. Novell NetWare protocol over 802.2 SNAP frames. Novell NetWare protocol over 802.3 RAW frames. DIX or SNAP registered protocols other than IP or IPX. MobileLAN access WA2XG System Manual...
Page 77: Using Predefined Received Subtype Filters
Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Explanation Novell running over 802.2 Logical Link Control (LLC).
Page 78: Customizing Received Subtype Filters
5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual...
Page 79 Ethernet network. It also prevents the access point from providing TCP/IP settings to DHCP clients on the wired network. For this example, set these customizable subtype filters. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Value Port value in hexadecimal.
Page 80: Configuring Advanced Received Filters
You can use filter values and filter expressions to minimize network traffic over the wireless links; however, Intermec recommends that you use advanced Ethernet filters only if you have an extensive understanding of network frames and their contents. Use other existing filters whenever possible.
Page 81 3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network...
Page 82 ID can be from 0 to 255 and must match one or more value IDs in the Filter Values menu. Sets the action to Pass, Drop, or And. If you set the action to And, the filter expression with the next highest sequence is applied. MobileLAN access WA2XG System Manual...
Page 83 Example 1 - Filter Values Value ID For this example, set these filter expressions. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Value Description ff ff ff ff ff ff Allows multicast traffic to enter the wireless...
Page 84 Filter Values menu, the frame is multicast.) This filter expression applies to value ID 1 from the Filter Values menu. Pass If this filter expression is true, continue to the next expression. MobileLAN access WA2XG System Manual...
Page 85 Any frame that meets the conditions specified in the advanced filter is passed. Set the first filter expression as shown below. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Value...
Page 86 Filter Values menu, the frame is multicast.) This filter expression applies to value ID 2 from the Filter Values menu. If this filter expression is true, continue to the next expression. MobileLAN access WA2XG System Manual...
Page 87 Offset Mask Value ID Action Set the third filter expression as shown below. MobileLAN access WA2XG System Manual Chapter 3 — Configuring the Ethernet Network Value Explanation The second expression that is executed. Checks for the DIX IP frame type, which starts 12 bytes from the destination address.
Page 88 This filter expression applies to value ID 3 from the Filter Values menu. Drop If the source Ethernet address does not match any address in the list on the Filter Values menu, then drop the frame. MobileLAN access WA2XG System Manual...
Page 89: Configuring The Radios
Configuring the Radios This chapter explains how to configure the 802.11g radios in the MobileLAN access WA2XG family of access points so that they communicate with your wireless end devices. This chapter covers these topics: • About the 802.11g radio •...
Page 90: Configuring The 802.11G Radio
In active scanning, an end device sends a probe request to the SSID that it wants to associate with. Intermec’s newer end devices with newer 802.11g radios (such as the CK30, CK31, and CV60) work in a mixed security environment.
Page 91 3 Configure the advanced parameters for the radio. For help, see “Configuring Advanced Parameters” on page 80. 4 (Master only) Configure inbound filters. For help, see “Configuring Inbound Filters” on page 82. MobileLAN access WA2XG System Manual Chapter 4 — Configuring the Radios...
Page 92 You need to assign the same SSID to the wireless end devices that will connect to the radio. Controls the maximum number of devices that can be associated with this radio (including the primary and secondary service sets). MobileLAN access WA2XG System Manual...
Page 93 • ETSI countries include all European Union countries except France. It also includes Switzerland, Iceland, Norway, Czech Republic, Slovenia, Slovakia, Turkey, Russia, and the United Arab Emirates. • France, Mexico, and Singapore use the same channels. MobileLAN access WA2XG System Manual Chapter 4 — Configuring the Radios ETSI France...
Page 94: Configuring Advanced Parameters
Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. Note: If the field name is marked with an asterisk (*), you can immediately activate the changes without rebooting. For help, see “Applying Hot Settings” on page 84. MobileLAN access WA2XG System Manual...
Page 95 Enable Medium Reservation Reservation Threshold Fragmentation Threshold MobileLAN access WA2XG System Manual Chapter 4 — Configuring the Radios Description Specifies if this radio will communicate with 802.11b and/or 802.11g radios: 11b/11g with range reliability (Not Wi-Fi): Allows clients with 802.11b or 802.11g radios. Parameters are adjusted for longer range.
Page 96: Configuring Inbound Filters
Determines if you want the radio to drop to a slower data rate when it has trouble communicating with another radio. Intermec recommends that you leave this check box checked or you may affect radio network performance. Clearing this check box is only used when performing site surveys.
Page 97 3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 4 — Configuring the Radios...
Page 98: Applying Hot Settings
Determines if this radio accepts UDP Plus frames from end devices. The UDP Plus frames must match the UDP network port 5555 on the DCS 30X, Intermec Gateway, or ARP. Determines if this radio accepts DHCP frames. The DHCP frames must match UDP destination port 67 and ARP. Check this check box if the end devices are DHCP clients.
Page 99: Configuring The Spanning Tree
This chapter explains how to configure the MobileLAN access WA2XG family of access points so that they create a spanning tree topology. This chapter covers these topics: • About the access point spanning tree • Configuring the spanning tree parameters •...
Page 100: About The Access Point Spanning Tree
Chapter 5 — Configuring the Spanning Tree About the Access Point Spanning Tree MobileLAN access WA2XG family of access points with the same LAN ID arrange themselves into a self-organized network using a spanning tree topology. The spanning tree provides efficient, loop-free forwarding of frames through the network and allows efficient roaming of wireless end devices.
Page 101: About The Primary Lan And The Root Access Point
1 Using the selection criteria listed earlier in this section, determine which access point to configure as the root. 2 On that access point, from the Navigation Menu click Spanning Tree Settings. The Spanning Tree Settings screen appears. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 102: About Secondary Lans And Designated Bridges
Remote IP Subnets Only the root access point can originate an IP tunnel to another access point. An IP tunnel provides a transparent bridge for wireless end devices on a remote IP subnet. MobileLAN access WA2XG System Manual...
Page 103: About Ethernet Bridging/Data Link Tunneling
Ethernet port, and vice versa. Using this default mode, the access point acts as a bridge between the wireless and wired networks. Note: Intermec recommends that you enable Ethernet bridging on all access points. However, if you meet the criteria listed later in this section, you can disable Ethernet bridging and use data link tunneling instead.
Page 104 Turning off Ethernet bridging enables data link tunneling. The data link tunneling mode causes the child access point to encapsulate inbound wireless data into an Intermec-assigned 875C frame. This data frame is then forwarded via the Ethernet port to the next access point on the path, and so on, until the frame reaches the root access point or designated bridge.
Page 105: About Routable And Non-Routable Network Protocols
IP subnets. Some Intermec wireless end devices use the Intermec NNL protocol, which is a simple Non-routable Network Layer protocol. This NNL protocol is used to carry high-layer data in a local area network environment.
Page 106 All access points on the secondary LAN should have a root priority of 0. For help deciding if this access point should be a candidate to become root, see the selection criteria listed on page 87. MobileLAN access WA2XG System Manual...
Page 107 VLANs to specific ports. You should clear this check box for a static configuration. Determines if this LED to behaves as if it were an Intermec Ready-to-Work indicator or a legacy Root/error indicator. Choosing Spanning Tree Root Indicator causes the LED to blink if the access point is configured as the root and remain on if an error is detected.
Page 108: About Ip Tunnels
Multicast: Multicast flooding occurs unless the root access point (in the Global Flooding screen) disables multicast flooding. Unicast: Unicast flooding occurs unless the root access point (in the Global Flooding screen) disables unicast flooding. MobileLAN access WA2XG System Manual...
Page 109 All access points on secondary LANs must have permanent IP addresses. On the root access point, you must allow IP multicast frames to pass. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree Host Primary LAN...
Page 110: Creating Ip Tunnels
This access point then transmits IP hello messages on its subnet so that other access points on the same subnet that do not receive hello messages can also attach to the spanning tree. MobileLAN access WA2XG System Manual...
Page 111 8 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 112: Using One Ip Multicast Address For Multiple Ip Tunnels
Access points can act as IP hosts and participate in an IP multicast group by enabling IGMP. The Internet Assigned Numbers Authority has allocated 224.0.1.65 for Intermec’s IAPP. You must enter this address in the IP address list in the root access point (the address list may contain other IP addresses) and in the Multicast Address field in the other access points.
Page 113: How Frames Are Forwarded Through Ip Tunnels
IP hello messages. The root access point learns the unicast IP address of a remote access point when the access point attaches to the network. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 114: Outbound Frames
IP subnet. Frames transmitted by servers or wired devices that are connected to a remote IP subnet are not forwarded inbound through IP tunnels if the IP address does not belong to the root IP subnet. MobileLAN access WA2XG System Manual...
Page 115: Frame Types That Are Never Forwarded
• RIP (520) (Routing Information Protocol) • IP/TCP frames with the following destination or source protocol port numbers: • BGP (179) (Border Gateway Protocol) • RAP (38) (Route Access Protocol) MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 116: Configuring Ip Tunnels
IP tunnels. Check this check box if you have a DHCP server issuing TCP/IP information to end devices. Appears only if Mode parameter is Listen. Determines if IGMP is enabled or disabled. MobileLAN access WA2XG System Manual...
Page 117: Configuring The Ip Address List
Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree Explanation Appears only if Enable IGMP check box is checked.
Page 118: Configuring Ip Tunnel Filters
For detailed information about other frame types that are never forwarded, see “Frame Types That Are Never Forwarded” on page 101. • Parameter Problem • Time Stamp • Time Stamp Reply • Address Mask Request • Address Mask Reply • Trace Route MobileLAN access WA2XG System Manual...
Page 119 For help, see “Using Predefined Transmit Subtype Filters” on page 102 or “Customizing Transmit Subtype Filters” on page 102. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 120: Using Predefined Transmit Subtype Filters
Novell NetWare protocol over 802.2 SNAP frames. Novell NetWare protocol over 802.3 RAW frames. DIX or SNAP registered protocols other than IP or IPX. Novell running over 802.2 Logical Link Control (LLC). 802.2 SAPs other than IPX or SNAP. MobileLAN access WA2XG System Manual...
Page 121: Customizing Transmit Subtype Filters
To customize transmit subtype filters 1 From the main menu, click IP Tunnels > Customizable Transmit Subtype Filters. The Customizable Subtype Filters screen appears. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 122 Port value in hexadecimal. Socket value in hexadecimal. SNAP type in hexadecimal. To filter on both SNAP type and OUI, use advanced filters. Socket value in hexadecimal. Socket value in hexadecimal. 802.2 SAP in hexadecimal. MobileLAN access WA2XG System Manual...
Page 123: Filter Examples
Designated bridge (AP4) Secondary LAN (remote IP subnet) This illustration shows a typical network that will be used in the next examples. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree IP Host Novell Server IP Host...
Page 124: Example 1
In many actual networks, only one type of filter is required, because all stations are configured using one of the three options. For this example, set these options on the Transmit Frame Type Filters screen. MobileLAN access WA2XG System Manual...
Page 125: Example 3
2 On the access point at the endpoint of the IP tunnel, in the IP Tunnel Transmit Frame Type Filter table, configure DIX-IP-UDP Ports to pass all frames. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 126: Example 4
UDP Port to pass all frames. Comparing IP Tunnels to Mobile IP MobileLAN access WA2XG family of access points support IP tunneling, which allows end devices to roam across different subnets (routers) without having to change IP addresses. IP tunneling supports IETF RFC 1701 using GRE and the same encapsulation technique as mobile IP.
Page 127: Configuring Global Parameters
1 From the Navigation Menu, click Spanning Tree Settings > Global Flooding. The Global Flooding screen appears. 2 Configure the Global Flooding parameters. For help, see the next table. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree...
Page 128 Universal: The access point forwards the unicast frame to every port. This option uses more bandwidth. Hierarchical: The access point forwards the unicast frame only to the port to which the root access point is attached. MobileLAN access WA2XG System Manual...
Page 129: Configuring Global Rf Parameters
To configure global RF parameters 1 From the menu, click Spanning Tree Settings > Global RF Parameters. The Global RF Parameters screen appears. MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree Explanation Appears only if Unicast Flooding is enabled.
Page 130 Specifies the largest data frame that can be transmitted without fragmentation. On certain radios, fragmentation does not occur unless the radio detects interference. Larger frame sizes can improve throughput on a reliable connection, while smaller frame sizes can improve throughput on a poor connection. MobileLAN access WA2XG System Manual...
Page 131 RFC1042 Types to Pass Through (802.11g, 802.11b, or 802.11a radios only) MobileLAN access WA2XG System Manual Chapter 5 — Configuring the Spanning Tree Explanation Specifies the largest data frame that can be transmitted without fragmentation. On certain radios, fragmentation does not occur unless the radio detects interference.
Page 132 Chapter 5 — Configuring the Spanning Tree MobileLAN access WA2XG System Manual...
Page 133: Configuring Security
This chapter covers these topics: • Understanding security • Controlling access to access point menus • Creating a secure spanning tree • Enabling secure communications between access points and end devices MobileLAN access WA2XG System Manual...
Page 134: Understanding Security
1 Change the SSID from its default value of INTERMEC and check the Disallow Network Name of ‘ANY’ check box. For help, see Chapter 4, “Configuring the Radios.”...
Page 135 Wi-Fi security that addresses many of the vulnerabilities of Wired Equivalent Privacy (WEP). For help, see “Configuring Wi-Fi Protected Access (WPA) Security” on page 127. For help troubleshooting security, see “Troubleshooting Security” on page 195. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 136: When You Configure Different Ssids With Different Security Settings
If the end device’s security setting does not match the probe request’s security bit, the end device cannot associate. Intermec’s newer end devices with newer 802.11g radios (such as the CK30 and CV60) work in a mixed security environment.
Page 137: When You Include Multiple Radius Servers On The Radius Server List
• In the Navigation Menu, click Security > RADIUS Server List > Server Port Map. The Server Port Map screen appears with the IP Address/DNS Name column populated with the RADIUS servers that you configured in the Server Selection screen. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 138: Controlling Access To Access Point Menus
• Telnet session • TFTP • MobileLAN access Utility or another program that uses ICMP echo • Wavelink Avalanche client management system. For help, see “Using the Wavelink Avalanche Client Management System” on page 166. MobileLAN access WA2XG System Manual...
Page 139 3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 140: Setting Up Logins
Determines if this access point verifies that certificate dates of devices are valid. If a certificate date is not valid, the device is not allowed to communicate with the network. MobileLAN access WA2XG System Manual...
Page 141: Configuring The Access Point To Use A Password Server
2 Check the Use RADIUS for Login Authorization check box. 3 (Optional) Make sure the Allow Service Password check box is checked. 4 Click Submit Changes to save your changes. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 142: Changing The Default Login
If you are not using a password server to authorize user logins, you should change the default user name and password and create a read-only password. To set up logins 1 In the Navigation Menu, click Security > Passwords. The Passwords screen appears. MobileLAN access WA2XG System Manual...
Page 143 Parameter Use RADIUS for Login Authorization User Name Password MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security Description Determines if you are using a password server to authenticate end devices that can communicate with this access point. Clear this check box.
Page 144: Creating A Secure Spanning Tree
The three authentication methods that you can use to secure the spanning tree: Simple Wireless Authentication Protocol (SWAP), TTLS, or TLS. SWAP is an Intermec proprietary protocol that is based on the EAP-MD5 challenge. Since it requires less processing power, it requires less memory and you can use it on all access points.
Page 145 • Check the Allow TLS check box, if you are implementing an 802.1x security solution and you want to use TLS. The access point must have a server certificate loaded on it. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 146: Enabling Secure Communications Between Access Points And End Devices
• a RADIUS server on the network that contains the ACL. You can either use an external RADIUS server or you can configure an EAS. For help, see Chapter 7, “Configuring the Embedded Authentication Server (EAS).” • access points, which are the RADIUS clients. MobileLAN access WA2XG System Manual...
Page 147 RADIUS access requests for all end devices attached to this access point. This password must match the password that is configured in the RADIUS server. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 148: Configuring Vlans
For example, you may grant your employees full access to your network, while routing all traffic from visitors to the Internet. The access points may be configured to participate in a properly configured VLAN. (case-sensitive). wireless MobileLAN access WA2XG System Manual...
Page 149 Any communication with the access point across the wired network is always normal Ethernet traffic. To configure a VLAN 1 In the Navigation Menu, click Spanning Tree Settings. The Spanning Tree Settings screen appears MobileLAN access WA2XG System Manual...
Page 150 8 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual...
Page 151: Configuring Wep 64/128 Security
Since static WEP keys can be difficult to update, the MobileLAN access products and other Intermec products let you enter up to four WEP keys, and then pick a WEP transmit key (1-4). It is easier to rotate the WEP transmit key than to individually change all the WEP keys.
Page 152 For WEP 64, enter five ASCII characters or five hex pairs. For WEP 128, enter 13 ASCII characters or hex pairs. To enter a hexadecimal key, prefix it with 0x. For example, the ASCII key ABCDE is equivalent to 0x4142434445. MobileLAN access WA2XG System Manual...
Page 153: Implementing An 802.1X Security Solution
802.1x-enabled end devices, contact your local Intermec representative. • A trusted certificate authority (CA), which issues digital authentication certificates. Intermec and others can provide the service of acting as a CA and can issue certificates. For more information, contact your local Intermec representative.
Page 154: Configuring The Access Point As An Authenticator
To configure the access point as an authenticator 1 In the Navigation Menu, click Security and then click the radio service set that you are configuring. The appropriate radio screen appears. 2 In the Security Level field, select Dynamic WEP/802.1x. MobileLAN access WA2XG System Manual...
Page 155 5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 156: Enabling Secure Communications Between Access Points
1 To require authentication of any access point attempting to join the spanning tree. 2 To provide encryption of critical Inter-Access Point Protocol (IAPP) frames. There are three authentication methods that you can use to secure the spanning tree: SWAP, TTLS, or TLS. MobileLAN access WA2XG System Manual...
Page 157 If the Allow SWAP check box is checked, the access point that is acting as the authenticator will authenticate any supplicants that offer SWAP. Note that SWAP authentication is susceptible to downgrade attacks from rogue supplicants as it is easier to break SWAP than TLS or TTLS. MobileLAN access WA2XG System Manual...
Page 158 4 Check the Verify CA Certificate check box and enter the authentication server common names to verify that the access point is connecting to the correct authentication server. Intermec recommends that you perform this step because it provides another layer of security.
Page 159: Configuring Wi-Fi Protected Access (Wpa) Security
Extensible Authentication Protocol (EAP). An authentication server (such as a RADIUS server) must authenticate each device before the device can communicate with the wireless network. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security Description Determines if this access point authenticates to other access points using SWAP.
Page 160 5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual...
Page 161 You need to enter each authenticator’s IP address and the shared secret key. In the database, you need to enter the information for each end device. MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security...
Page 162: Configuring Wpa - Psk Security
Allows you to specify the key rotation policy for encryption keys when using WEP in 802.1x and for TKIP group keys when using WPA. The value represents key duration in minutes. The default value is 5 minutes. MobileLAN access WA2XG System Manual...
Page 163: Configuring Wpa - 802.1X Security
Parameter Multicast Encryption Type Key Rotation Period (Minutes) MobileLAN access WA2XG System Manual Chapter 6 — Configuring Security Explanation Allows you to select the data encryption method for broadcast and multicast for this radio port. A station connected to this port may not select a weaker encryption method to exchange unicast frames.
Page 164 Chapter 6 — Configuring Security MobileLAN access WA2XG System Manual...
Page 165: Configuring The Embedded Authentication Server (Eas)
(EAS) in your access point for different security solutions to ensure that you have a secure wireless network. This chapter covers these topics: • About the embedded authentication server (EAS) • About certificates • Configuring the EAS MobileLAN access WA2XG System Manual Configuring the Embedded Authentication Server (EAS)
Page 166: About The Embedded Authentication Server (Eas)
Chapter 7 — Configuring the Embedded Authentication Server (EAS) About the Embedded Authentication Server (EAS) MobileLAN access WA2XG family of access points have an embedded authentication server (EAS), which is an internal RADIUS server. In your network, you can use the EAS on any access point. The EAS can act as: •...
Page 167: Understanding Which Access Points Need Certificates
These certificates support the secure web browser interface and provide basic security for all authentication types. Intermec can provide the service of acting as a certificate authority and can issue certificates. For more information, contact your local Intermec representative.
Page 168: Viewing The Certificates Installed On An Access Point
Note: If you are not using the secure web browser, you will be prompted to log in again. Click A secure session is available and log in to the access point. If a Security Alert dialog box appears, click Yes to proceed. Repeat Steps 1 and 2. MobileLAN access WA2XG System Manual...
Page 169 Note: If you follow the procedure to uninstall all certificates, you will lose the unique server certificate and the trusted CA certificate. You will need to contact your local Intermec representative to purchase new certificates. 1 In the Navigation Menu, click Security > Certificate Details. The Certificate Details screen appears.
Page 170: Configuring The Eas
EAS and each access point, you need to add each access point to the EAS database as a RADIUS client. For each access point, in the RADIUS Server List, enter the EAS IP address, enter the secret key and check the 802.1x check box. MobileLAN access WA2XG System Manual...
Page 171 8 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 30. MobileLAN access WA2XG System Manual Chapter 7 — Configuring the Embedded Authentication Server (EAS)
Page 172: Configuring The Database
EAS in another RADIUS server. For help, see “Exporting and Importing Databases” on page 161. Note: Intermec recommends that when you are done configuring the database, you export it and save the file in a safe place. If you restore the access point to its default configuration, the database is not saved.
Page 173: Using The Rejected List
You do not need to click Submit Changes or reboot the access point. Note: When you reboot the access point, the rejected list is cleared. MobileLAN access WA2XG System Manual Chapter 7 — Configuring the Embedded Authentication Server (EAS) Description...
Page 174: Adding Entries To The Database
Lists the value that was passed in the User Name field of the RADIUS server database during the failed attempt. Indicates how long ago the last authentication was attempted. Indicates how many times the authentication failed. Displays the IP address of the RADIUS server that rejected the client. MobileLAN access WA2XG System Manual...
Page 175: Clearing The Rejected List
1 Click Select All Entries. A check box appears next to all entries. 2 Click Clear Selected Entries. Exporting and Importing Databases Note: Intermec recommends that you use the secure web browser interface (HTTPS) when you export and import databases. Otherwise, the information in the databases is sent in the clear.
Page 176 4 Click Export the EAS database from this access point. A File Download dialog box appears. 5 Make sure Save this file to disk is selected, and then click OK. The Save As dialog box appears. MobileLAN access WA2XG System Manual...
Page 177 EAS RADIUS database. The EAS Database Import/Export screen appears. 3 If you are not using the secure web browser, click A secure session is available. Repeat Steps 1 and 2. MobileLAN access WA2XG System Manual Chapter 7 — Configuring the Embedded Authentication Server (EAS)
Page 178 Chapter 7 — Configuring the Embedded Authentication Server (EAS) 4 Enter the path and filename of the database. Or click Browse to locate the file. 5 Click Import Database. MobileLAN access WA2XG System Manual...
Page 179: Managing, Troubleshooting, And Upgrading Access Points
This chapter explains how to manage, maintain, troubleshoot, and upgrade the MobileLAN access WA2XG family of access points. This chapter covers these topics: • Managing the access points • Maintaining the access points • Troubleshooting the access points • Upgrading the access points...
Page 180: Managing The Access Points
The administrative user interface that lets you configure and communicate with the Avalanche Agent. From the console, you can configure and monitor devices and build and install software packages and software collections. MobileLAN access WA2XG System Manual telnet...
Page 181: Configuring Your Access Points To Use Avalanche
1 In the Navigation Menu, click Network Management. The Network Management page appears. 2 Verify that the Allow Avalanche Access check box is checked. 3 Click Submit Changes. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points...
Page 182: Managing Your Access Points Using Avalanche
1 Start Avalanche Package Builder on your PC. This screen appears: 2 Create a software package (.ava file) that includes the latest software release (.bin file) using Avalanche Package Builder. For help, see the next table. MobileLAN access WA2XG System Manual...
Page 183: Important Information When Using Avalanche
Otherwise, you will lose connectivity between your end devices and your access point. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Explanation A descriptive title of the application.
Page 184: Using Simple Network Management Protocol (Snmp)
Protocol (SNMP); that is, you access the access point from an SNMP management station. The access point supports SNMPv3 and older SNMPv1/SNMPv2c. Contact your Intermec representative if you need to obtain a copy of the MIB. To configure the SNMPv3 1 In the Navigation Menu, click Network Management.
Page 185 Note that this option specifies the minimum level of authentication required for this username and password. Specifies the privacy protocol that is used to encrypt SNMPv3 messages. The management station must support the protocol. Intermec recommends using AES (128 Bit).
Page 186 If the Target Status field is set to Enabled (Reliable), you can check this check box if this trap target receives reliable traps when the event table changes. MobileLAN access WA2XG System Manual...
Page 187: Maintaining The Access Points
The Maintenance menu lets you view different parameters configured for the access point, including connections, port statistics, and a configuration summary. This information may be needed when you call Intermec Technical Support. You can also view security events that are in the Security Events log, and then you can export them to a file.
Page 188 If another access point is connected to this access point, you see the Ethernet MAC address. If a WAP is connected to this access point, you see the radio MAC address. Click the hyperlink to perform a MAC ping or display a radio link statistics screen. MobileLAN access WA2XG System Manual...
Page 189 Display Field Type Port Next Hop IP Address MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Description Indicates the nature of the connection: Root/Parent or Parent: Indicates an access point serving as root access point or parent, to which this access point is connected.
Page 190: Viewing Ap Neighbors
Displays the SSID advertised in the beacon. This field may or may not be advertised by the originator of the contact. Displays the amount of time in seconds that has elapsed since the last contact from the originator. MobileLAN access WA2XG System Manual...
Page 191: Viewing Port Statistics
To view port statistics • In the Navigation Menu, click Maintenance > Port Statistics. The Port Statistics screen appears. This screen is read-only. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Description This information is derived from the capability information sent in the beacon.
Page 192: Viewing Dhcp Status
Permanently Save IP Address Mappings check box is checked, you can delete entries from the server’s permanent address map. To view DHCP status • In the Navigation Menu, click Maintenance > DHCP Status. The DHCP Status screen appears. MobileLAN access WA2XG System Manual...
Page 193: Viewing The Events Log
Priority Trap? Count Type Additional Data MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Description Indicates the Ethernet MAC address of the device that caused the event. Indicates the IP address of the device that caused the event.
Page 194: Viewing The About This Access Point Screen
Point. The About This Access Point screen appears. This screen is read- only. 2 Scroll down to view more information about the access point. 3 Continue scrolling down until you see the subtitle Configuration Summary. MobileLAN access WA2XG System Manual...
Page 195: Using The Leds To Locate Access Points
For help, see “Using the Web Browser Interface” on page 182. For help installing the MobileLAN access utility, see “Using the MobileLAN access Utility” on page 21. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Wireless #1...
Page 196: Using The Web Browser Interface
6 To close the utility, from the File menu choose Exit. For more help using the utility, from the Help menu choose Contents. Using the Web Browser Interface 1 In the menu bar, click Save/Discard Changes. This screen appears. MobileLAN access WA2XG System Manual...
Page 197: Troubleshooting The Access Points
Note: The access point can only check its own configuration for possible errors. It cannot check to see if the SSIDs, passwords, shared secret keys, and other settings are all the same or compatible on other devices. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points...
Page 198 “Enabling the EAS” on page 156. The UDP port number in the EAS does not match the port number entered in the RADIUS Server List. For help, see “Enabling the EAS” on page 156. MobileLAN access WA2XG System Manual...
Page 199 The access point is set to originate IP tunnels but no there are no tunnel IP addresses. The address range for the DHCP server is invalid. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Additional Information...
Page 200 Authentication Server Entry Descriptions table on page 159. For help, see “Setting the Clock” on page 28. You need to install a trusted CA certificate. For help, see “Installing and Uninstalling Certificates” on page 154. MobileLAN access WA2XG System Manual...
Page 201: Calling Intermec Technical Support
Calling Intermec Technical Support The access points are designed to be easy to install and configure; however, you may need to call Intermec Technical Support if you have problems. Before calling, be sure you can answer the following questions: • What kind of network are you using? •...
Page 202: Troubleshooting With The Leds
When the access point boots, it performs internal diagnostics and the LEDs display the pattern shown in the next table. WA2XG LED Boot Sequence Power = On WA2XG Normal LED Pattern After Booting Wireless Wireless Wired (Wireless #1 and #2 blink in unison.)
Page 203: General Troubleshooting
You cannot connect to the access point using a web browser. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Possible Solution/Answer An error occurred during the booting process. Consult the previous section to determine which test failed.
Page 204 3. The access point may have lost its files. For help, see “Recovering a Failed Access Point” on page 197. The web browser you are using does not have Java support. Intermec recommends that you use Internet Explorer v3.0 (or later) or Netscape Communicator v4.0 (or later).
Page 205: Troubleshooting The Radios
Using LEDs If the access point LEDs show the following pattern after it boots, the radio may be faulty or the configuration matrix string is incorrect. Contact your local Intermec representative to help you correct the problem. WA2XG LEDs = On MobileLAN access WA2XG System Manual Chapter 8 —...
Page 206: Using A Communications Program Or A Telnet Session
PC after the access point reboots or when a session is saved. The error messages are described in the following table. Contact your local Intermec representative to help you correct the problem.
Page 207 25 or 100. 3 Click the X in the upper right corner of the window to return to the AP Connections screen. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points...
Page 208: Using Icmp Echo
1 In the Navigation Menu, click Maintenance > AP Connections. The AP Connections screen appears. 2 Click an IP address hyperlink. The access point pings the device, and then the Ping Utility screen appears showing the results. MobileLAN access WA2XG System Manual...
Page 209: Troubleshooting Security
To view the Security Events log • In the Navigation Menu, click Security > Security Events. The Security Events log appears. For help understanding the events, see the next table. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points...
Page 210: Exporting The Security Events Log
Specifies if the event generated an SNMP-reliable trap. Indicates the number of times the event occurred. Includes details of the event that occurred. Includes extra event-specific information. Indicates the amount of time that has passed since the event occurred. MobileLAN access WA2XG System Manual...
Page 211: General Security Troubleshooting
LEDs display this pattern. = On MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points Possible Solution/Answer •...
Page 212: Using The Mobilelan Access Utility
Note: If you are only recovering one access point, you can enter 00:10:40:FF:FF:FF. This special MAC address works with all access points. 6 In the Access Point Model box, choose the model of the access point you are recovering. MobileLAN access WA2XG System Manual...
Page 213: Using A Windows Nt4/2000/Xp Pc
NT4/2000/XP PC and a command prompt to recover a failed access point. To access a command prompt, see your Windows documentation. For this procedure you will need to contact Intermec Technical Support to obtain the AP3XX.DNL file. To recover a failed access point 1 From a command prompt, type this command to create a static ARP cache entry for the netloader.
Page 214: Upgrading The Access Points
• the MobileLAN access Utility as a distributed upgrade server. For help, see the next section, “Using the MobileLAN access Utility,” and the online help. • a web browser interface. For help, see “Using a Web Browser Interface” on page 203. MobileLAN access WA2XG System Manual...
Page 215: Using The Mobilelan Access Utility
To copy the upgrade file to your PC 1 Using a web browser, navigate to www.intermec.com. 2 From the Service & Support menu, choose Downloads. 3 Select the MobileLAN access product that you are upgrading. 4 Click the software link to save the upgrade file on your PC.
Page 216 Under the Access Points on the Network title, you can see a list of all the access points in the spanning tree. b Check the Upgrade check box of all access points you want to upgrade. MobileLAN access WA2XG System Manual...
Page 217: Using A Web Browser Interface
5 When the upgrade is complete, click Save Changes and Reboot. When the access point is done rebooting, it is upgraded to the new software. Repeat this procedure for each access point you want to upgrade. MobileLAN access WA2XG System Manual Chapter 8 — Managing, Troubleshooting, and Upgrading Access Points...
Page 218: Troubleshooting The Upgrade
Reboot selected Access Points after successful upgrade check box, the access points will reboot according to your Reboot selection. If you need to downgrade an access point to an earlier release, contact Intermec Technical Support. MobileLAN access WA2XG System Manual...
Page 219: Additional Access Point Features
This chapter explains some of the more advanced ways that you can maintain the MobileLAN access WA2XG family of access points. This chapter covers these topics: • Configuring and managing the Telnet Gateway Appliance (TGAP) • Using the Instant On server (EasyADC only) •...
Page 220: Configuring And Managing The Telnet Gateway Appliance (Tgap)
23-defined host that is listed in the TGAP host table or connecting to the access point itself (because it is also running a telnet client). Intermec recommends that you do not use a client to configure the access point. To prevent this option from appearing in the menu, from the access point main menu, click the Security link and clear the Allow Telnet Access (Port 23) check box.
Page 221 Parameter Host Name Host Port Term Port MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features Description Enter the IP address or the DNS name of the host. Enter the TCP port number of the host server. Communications between the gateway and the host occur on the host port.
Page 222 Term Connect Host Connecting Term Closed Host No Route Term Lost Host Missing Term Idle Host Refused Term Disconnect Host Closed Term Sent Host Sent The number of minutes since the last contact with the client. MobileLAN access WA2XG System Manual...
Page 223: Using The Instant On Server (Easyadc Only)
EasyADC system. You can access this memory card using some of the Service Mode commands described in this chapter if you include the segment name app: to indicate the memory card. MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 224: Understanding Transparent Files
The advantage of using file headers is that the date and file versions are correct when you use the FD command to view the directory. All Intermec-provided .DNL files have file headers. All files to be uploaded by script files must have file headers.
Page 225: Using Ap Monitor Commands
Syntax: Purpose: Downloads a file using Ymodem batch protocol into the flash segment. Syntax: FX 1 MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 226: Using Content Addressable Memory (Cam) Mode Commands
Programmable Gate Array (FPGA), filters frames based on the radio’s capability. Because the commands can cause undesirable results if not properly executed, you should contact Intermec Technical Support for assistance if you are unsure about the proper procedure to use. To enter CAM mode 1 Type 2 Enter a password.
Page 227: Using Test Mode Commands
Within the AP monitor, Test mode lets you perform certain test functions. Because the commands can cause undesirable results if not properly executed, you should contact Intermec Technical Support for assistance if you are unsure about the proper procedure to use. To enter Test mode 1 Type 2 Enter a password.
Page 228: Using Service Mode Commands
2 Enter the service password. The default password is sensitive). The service prompt (service>) appears. To exit Service mode • At the service prompt, type You return the ap prompt. and press Enter. SRVC EV98203S and press Enter. MobileLAN access WA2XG System Manual (case...
Page 229 For information about transparent files, see page 207. Syntax: Example: To display the contents of the flash memory, enter: To display the contents of the memory card, enter: FD APP: MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 230 Example: To run program UAPBOOT.PRG from the flash memory, enter: FFR UAPBOOT.PRG 1 Purpose: Reinitializes the access point file system. If the access point file system becomes corrupt, use this command to reset it. Syntax: MobileLAN access WA2XG System Manual...
Page 231: Using Command Console Mode
For help, see “Using a Communications Program” on page 2 From the Access Point Configuration menu, choose Maintenance. 3 From the Maintenance menu, choose Command Console. The list of commands appears. MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 232: Using The Commands
Example: To delete the file AP824X.PRG from the flash memory, enter: FDEL 1:AP824X.PRG To delete the file FILE.DAT from the memory card, enter: FDEL APP:FILE.DAT exit 1:ap824x.prg is the name of the file to be deleted. filename MobileLAN access WA2XG System Manual...
Page 233: Using Tftp Commands
In either case, the access point backoff algorithm should prevent excessive network traffic when many access points are trying to contact a TFTP server. MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 234 You may or may not have to specify a filename after the colon: if the file has a header, the filename is optional; if the file does not have a header, the filename is required. MobileLAN access WA2XG System Manual...
Page 235 Example: The following command takes file AP824X.PRG that is saved in the active boot drive on the access point client and stores it in the flash memory on the WA2XG server that has IP address 1.2.3.4. TFTP PUT 1.2.3.4 IB:AP824X.PRG 1:AP824X.PRG The access point may generate these error messages when it issues a TFTP PUT command.
Page 236 The requested file may not exist. This error should not occur under normal operating conditions. This error indicates a TFTP protocol error that will not occur when you use TFTP servers that conform to the protocol. MobileLAN access WA2XG System Manual...
Page 237: Using Sdvars Commands
TFTP server. Example: To set the IP address of the server to 192.168.49.29, enter: sdvars set serveripaddress 192.168.49.29 MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features Explanation The client is attempting to transfer a file in ASCII mode. The access point TFTP server only supports octet mode, which includes binary and image.
Page 238 Note: If you need to stop the download, you can do so by setting starttime to 0 if it has not already been reached by the countdown. Resetting starttime to 0 stops the timer and the download process. MobileLAN access WA2XG System Manual...
Page 239 Syntax: sdvars set terminate MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 240 MobileLAN access WA2XG System Manual none.
Page 241: Creating Script Files
Creating Script Files You can create a script file that executes a series of commands. For example, when you upgrade the WA2XG, you typically need to erase the flash memory, download the new files, and reboot using the new software.
Page 242 * software\stastats.dnl 1: file tftp get * software\tbldata.dnl 1: file tftp get * software\tftpcl.dnl 1: file tftp get * software\tftpsrv.dnl 1: file tftp get * software\welcome.dnl 1: file sdvars set checkpoint 5 file sdvars set NextPowerUpTime 00:00:00:5 MobileLAN access WA2XG System Manual...
Page 243: Copying Files To And From The Access Point
2 In the Server IP Address field, enter the IP address or DNS name of the TFTP server. 3 In the Server File Name field, type the name in the format required by the operating system of the server. MobileLAN access WA2XG System Manual Chapter 9 — Additional Access Point Features...
Page 244 2 Click Stop Server to stop the TFTP server. Or click Start Server to start the TFTP server. You can also use the TFTP SERVER START and STOP commands, described on page 207, to start and stop the TFTP server. MobileLAN access WA2XG System Manual...
Page 245: Specifications
Specifications This appendix provides specifications for reference purposes only. Actual product performance and compliance with local telecommunications regulations may vary from country to country. Intermec only ships products that are approved in the destination country. MobileLAN access WA2XG System Manual...
Page 246: Specifications
Compliant with RTT&E, EMC, LVD directives; (See separate radio approvals); UL Listed 1950 & IEC 60529-IP53; CSA Certified, C22.2 #950 & C22.3 #94-ENC 3.5; TUV Licensed, EN 60950 & EN 60529-IP53; NYCE Certified, NOM 19, plenum-rated MobileLAN access WA2XG System Manual...
Page 247 Filters (protocol) Filters (others) Serial port maximum data rate Management interfaces SNMP agent Regulatory Approvals MobileLAN access WA2XG System Manual Appendix A — Specifications 9.5 cm (3.8 in) 35.5 cm (14.0 in) 23.6 cm (9.3 in) 2.63 kg (5.8 lb) ∼100 to 240V, 1.0 to 0.5A, 50 to 60 Hz...
Page 248: Radio Specifications (Actiontec P/N 0832-0040-000)
160 m (525 ft) open environment 50 m (165 ft) semi-open environment 24 m (80 ft) in closed environment Unlimited range with roaming -82 dBm 802.11 Wired Equivalent Privacy (WEP) standard, WEP 64, WEP 128, Wi-Fi Protected Access (WPA) MobileLAN access WA2XG System Manual...
Page 249: Antennas And Antenna Accessories
Antennas and Antenna Accessories The following tables identify many of the Intermec antennas and antenna accessories for the radios in your access point. Contact your local Intermec representative for detailed information. 2.4 GHz Antennas (For 802.11g Radios) Part Number 063363...
Page 250 Cable, TNC Plug/N Plug, LRM400, 1.85 m (6 ft), plenum-rated Cable, TNC Plug/N Plug, 7.6 m (2.5 ft) Cable, Plug/N Plug, 1.5 m (5 ft) Cable, Plug/N Plug, 6.1 m (20 ft) Cable, N Plug/N Plug, LMR600, 9.1 m (30 ft) MobileLAN access WA2XG System Manual...
Page 251: Default Settings
Default Settings This appendix provides factory defaults for reference purposes only. MobileLAN access WA2XG System Manual...
Page 252: Default Settings
RFC 2132 Use Any Available Use Any Available DHCP Server, Only DHCP Server Use Access Point DHCP Server 0 to 120 4 nodes, 0 to 255 or DNS name 4 to 7 characters MobileLAN access WA2XG System Manual Your Site?
Page 253: Ipv6 Configuration Menu Defaults
Permanently Save IP Address Mappings IP Subnet Mask 802.11g Radio Menu Defaults Parameter Name Frequency Node Type SSID (Network Name) Member Limit MobileLAN access WA2XG System Manual Appendix B — Default Settings Range Default Check/Clear Clear Check/Clear Check 32 hex digits grouped...
Page 254 Optimize Mixed (802.11b and (802.11b and 802.11g), Optimize 802.11g) for 802.11g clients, Optimize for 802.11b clients Check/Clear Check Check/Clear Clear 1 to 65535 Check/Clear Check Check/Clear Check Check/Clear Check Check/Clear Check Check/Clear Check MobileLAN access WA2XG System Manual Your Site?
Page 255: Spanning Tree Settings Menu Defaults
Global Flooding Menu Defaults Parameter Name Multicast Flooding Multicast Outbound to Secondary LANs Allow Multicast Outbound to Terminals Unicast Flooding MobileLAN access WA2XG System Manual Appendix B — Default Settings Range Default 0 to 16 characters (access point serial number) 0 to 254...
Page 256: Global Rf Parameters Menu Defaults
20 (S-UHF) Two sets of hex pairs 80 F3 00 through FF Two sets of hex pairs 81 37 00 through FF Two sets of hex pairs 00 00 00 through FF MobileLAN access WA2XG System Manual Your Site? Your Site?
Page 257: Telnet Gateway Configuration Menu Defaults
Parameter Name Static Address Table 1 through 20 Received Frame Type Filters Allow/Pass Scope Predefined Received Subtype Filters Allow/Pass MobileLAN access WA2XG System Manual Appendix B — Default Settings Range Default IP address or DNS (blank) name Off, 23, 5000, 5001, 5002, 5003, 5004, 5005, 5006.
Page 258 DIX-EtherType SNAP-IP-TCP-Port SNAP –IP-UDP-Port SNAP –IP-Protocol SNAP –IPX-Socket SNAP –EtherType 802.3-IPX-Socket 802.2 –IPX-Socket 802.2-SAP 00 00 Two sets of hex pairs 00 through FF (blank) (blank) EQ, NE, GT, LE And, Pass, Drop MobileLAN access WA2XG System Manual Your Site?
Page 259: Ip Tunnels Menu Defaults
Parameter Name Transmit Frame Type Filters Allow/Pass Scope Predefined Transmit Subtype Filters Allow/Pass Customizable Transmit Subtype Filters Allow/Pass SubType Value MobileLAN access WA2XG System Manual Appendix B — Default Settings Range Default Listen, Originate If Listen Root, Disabled Check/Clear Clear Check/Clear...
Page 260: Network Management Menu Defaults
Clear Range Default Check/Clear Clear Range Default 1 to 15 characters INTERMEC 1 to 15 characters INTERMEC None, MD5, SHA1 SHA1 None, DES, AES (128 AES (128 Bit) Bit) MobileLAN access WA2XG System Manual Your Site? Your Site? Your Site?
Page 261: Security Menu Defaults
Enable Alternative Method ACL ACL RADIUS Client Password (Appears if Enable ACL Client Authorization is enabled) VLAN Security Level MobileLAN access WA2XG System Manual Appendix B — Default Settings Range Default Secure-Only (Port 443) Enabled (Port Enabled (Port 80/443) 80/443) Disabled...
Page 262: Radius Server List Menu Defaults
(factory default) 1-65535 1812 Recommended range is 49152-65535 Check/Clear Clear except Servers 5 and 6 Check/Clear Clear except on Servers 3 and 4 Check/Clear Clear except on Servers 1 and 2 MobileLAN access WA2XG System Manual Your Site? Your Site?
Page 263: Spanning Tree Security Menu Defaults
Embedded Authentication Server Menu Defaults Parameter Name Enable Server If Enable Server is enabled: Default Secret Key UDP Port Authorization Time MobileLAN access WA2XG System Manual Appendix B — Default Settings Range Default Check/Clear Clear 16 to 32 bytes (factory default)
Page 264 Appendix B — Default Settings MobileLAN access WA2XG System Manual...
Page 265: Glossary
Glossary MobileLAN access WA2XG System Manual...
Page 266 An Internet standard stack protocol that allows dynamic distribution of IP address and other configuration information to IP hosts on a network. Implementation of the DHCP client in Intermec network devices simplifies installation because the devices automatically receive IP addresses from a DHCP server on the network.
Page 267 Once this information is learned, the access point and routers can exchange routing information. MobileLAN access WA2XG System Manual...
Page 268 IP subnet. IAPP (Inter Access Point Protocol) Access points use this Intermec protocol to communicate with each other. For example, when a wireless end device roams to a new access point, the new access point informs the old access points via the root access point that any traffic for the end device needs to be routed to the new access point.
Page 269 Your network administrator can use management software interacting with the MIB to obtain information about network activity. Contact your local Intermec representative to learn how to obtain a copy of the MIB for the access point. multicast address...
Page 270 Ethernet bridging on a root port. An access point uses primary bridging to bridge frames to and from the Ethernet network on its root port. Note that primary bridging is not the same as bridging to the primary LAN. MobileLAN access WA2XG System Manual...
Page 271 Any LAN that is reached by routing traffic through an access point. Wireless end devices that are communicating through a WAP comprise a secondary LAN. A remote IP subnet is a type of secondary LAN. MobileLAN access WA2XG System Manual...
Page 272 A software feature in Release 2.1 that allows the access point to keep telnet sessions alive even when the wireless client is idle or disconnected for any reason (because the client has roamed out of range, been powered off, lost battery power, etc.). MobileLAN access WA2XG System Manual...
Page 273 Also called a point-to-point bridge. A wireless link that connects two wired Ethernet segments. Two access points can be used to provide a wireless bridge between two buildings, so that wired and wireless devices in each building can communicate with devices in the other building. MobileLAN access WA2XG System Manual...
Page 274 A wireless link that occurs when data from a wireless end device moves from one access point to another access point through the radio ports. Using MobileLAN access products, Intermec recommends that your data does not travel through more than three wireless hops.
Page 275: Index
Index MobileLAN access WA2XG System Manual...
Page 276 Address Resolution protocol cache See ARP cache address table See IP Addresses screen, See Ethernet address table Address Table check box 172 Advanced Configuration screen 80 Antenna Control field 82 Apply Hot Settings button 84 Client Type/Performance field 81 defaults 239 MobileLAN access WA2XG System Manual...
Page 277 WA22G 232 ARP cache, definition 252 ARP flooding, enabling 113 ARP requests, configuring the access point to send 58 MobileLAN access WA2XG System Manual attaching, external antennas 43 Authentication Protocol field 171 authentication server 51, 152 certificates, installing 153, 154...
Page 278 159 exporting 161 importing 163 rejected list adding entries 160 deleting entries 161 using 159 Database screen 158 802.1x (TLS) 159 802.1x (TTLS/PEAP) 159 ACL 159 Login 159 Password field 159 RADIUS 159 MobileLAN access WA2XG System Manual...
Page 279 See LAN ID, See LAN ID DTIM Period field 82 dual radios positioning antennas 44 using for redundancy 20 MobileLAN access WA2XG System Manual Dynamic Host Configuration protocol See DHCP EAP, definition 253 802.1x (TLS) 159 802.1x (TTLS/PEAP) 159...
Page 280 107 types never forwarded 101 values, setting 66 WA21G 233 WA22G 232 See also IP tunnel filters. See also Ethernet, filters. filters, configuring for 802.11g radio 82 Find This AP button 181 MobileLAN access WA2XG System Manual...
Page 281 High Address field 56 home IP subnet, definition 254, 257 Host Name field 207 Host Port field 207 hot settings, applying 84 MobileLAN access WA2XG System Manual HTTP server See MobileLAN access Utility HTTPS See secure web browser interface humidity WA21G 233...
Page 282 201 to configure access points 21 to recover an access point 198 to restore default configuration 181, 201 to upgrade access points 200, 201 MobileLAN manager choosing target status 172 MobileLAN access WA2XG System Manual...
Page 283 NTP server, using to set clock 28 Offset field 68 omni antennas 44, 46 definition 256 MobileLAN access WA2XG System Manual See also antennas. Op field See Operation field Operation field 68 options, list of antennas and accessories 235...
Page 284 LANs definition 257 understanding 88 secure IAPP 254 troubleshooting 131, 174, 176 understanding 86 Secure IAPP check box 131 secure web browser interface 26, 126 certificates, installing 153, 154 Secure Wireless Authentication protocol See SWAP MobileLAN access WA2XG System Manual...
Page 285 Server Port Map screen 124 Service mode commands displaying list of 215 using 214 service password 127 enabling 130 MobileLAN access WA2XG System Manual service sets 802.11g radio, creating multiple 76 creating multiple 78 definition 258 secondary, missing from Radio screen 77, 78...
Page 286 TE 2000 clients and TGAP 206 Test mode commands displaying list of 214 using 213 TFTP Client screen 229 TFTP commands, using 216, 219 TFTP server starting and stopping 230 transferring files 229 TFTP Server screen 230 MobileLAN access WA2XG System Manual...
Page 287 Upgrade Software screen 203 upgrading access points 200 troubleshooting 204 using MobileLAN access WA2XG System Manual a web browser interface 203 the MobileLAN access Utility 201 Use RADIUS for Login Authorization check box 127, User Name field 129, 145, 159...
Page 288 802.11g radio 79 WPA security 802.1x parameters, described 149 configuring WPA 802.1x security 149 configuring WPA PSK security 148 overview 145 PSK parameters, described 148 WPA, definition 260 WTP, setting inbound filter 84 MobileLAN access WA2XG System Manual...
Page 290 Corporate Headquarters 6001 36th Avenue West Everett, Washington 98203 U.S.A. tel 425.348.2600 fax 425.355.9551 www.intermec.com MobileLAN access WA2XG System Manual *074921-002* P/N 074921-002...

Intermec MobileLAN access WA2XG System Manual

Getting Started

Installing the Access Points

Configuring the Ethernet Network

Configuring the Radios

Configuring the Spanning Tree

Configuring Security

Configuring the Embedded Authentication Server (EAS)

Managing, Troubleshooting, and Upgrading Access Points

Additional Access Point Features

Specifications

Default Settings

Glossary

Index

Quick Links

Troubleshooting

Need help?

Questions and answers

Related Manuals for Intermec MobileLAN access WA2XG

Summary of Contents for Intermec MobileLAN access WA2XG