First-time Installation and Configuration ....................2-2 Communication Testing ........................2-3 How to Test One AWK-4131 ......................2-3 How to Test Two or More AWK-4131 Units ..................2-4 Function Map ............................. 2-5 Web Console Configuration ....................... 3-1 Web Browser Configuration ........................3-2 Overview ............................
Page 4
Overview ............................4-2 AWK Search Utility ..........................4-2 Installing AWK Search Utility ......................4-2 Configuring AWK Search Utility ..................... 4-4 Other Console Configurations ......................5-1 RS-232 Console Configuration (115200, None, 8, 1, VT100) ..............5-2 Configuration by Telnet and SSH Consoles ..................... 5-4 Configuration by Web Browser with HTTPS/SSL ..................
Introduction Moxa’s AirWorks AWK-4131 enables wireless access to network resources. The AWK-4131 is rated to operate at temperatures ranging from -40 to 75°C and is rugged enough for any harsh industrial environment. The following topics are covered in this chapter: ...
IEEE 802.11n technology with a net data rate of up to 300 Mbps. The AWK-4131 combines two adjacent 20 MHz channels into a single 40 MHz channel to deliver a potent combination of greater reliability and larger bandwidth. With wide operating temperatures ranging from -40 to 75°C and dust-tight/weatherproof IP68-rated design, the AWK-4131 allows you to extend existing wired...
AWK-4131 Introduction Product Specifications WLAN Interface Standards: IEEE 802.11a/b/g/n for Wireless LAN IEEE 802.11i for Wireless Security IEEE 802.3 for 10BaseT IEEE802.3u 100BaseTX IEEE 802.3ab for 1000BaseT IEEE 802.3af for Power-over-Ethernet IEEE 802.1D for Spanning Tree Protocol IEEE 802.1w for Rapid STP IEEE 802.1Q VLAN...
Introduction ATTENTION 1. The AWK-4131 is NOT a portable mobile device and should be located at least 20 cm away from the human body. 2. The AWK-4131 is NOT designed for the general public. To deploy AWK-4131 units and establish a wireless network safely, a well-trained technician is required for installation.
Small form factor pluggable transceiver with 1000BaseEZX, LC, 120 km, 0 to 60°C LED Indicators The LEDs on the front panel of AWK-4131 allow you to identity the status and wireless settings quickly. The LED for FAULT indicates the system failure and user-configured events. If the AWK-4131 cannot retrieve the IP address from a DHCP server, the FAULT LED will blink at an interval of one second.
Reset Button The RESET button is located on the bottom panel of the AWK-4131. You can reboot the AWK-4131 or reset it to factory default settings by pressing the RESET button with a pointed object such as an unfolded paper clip.
To ensure the IP68-rated connectivity, you must use a waterproof housing during any communication activities. An IP68-rated field installable plug, which is attached in the AWK-4131’s accessory pack, may be needed in this case. The installation procedure is shown below:...
3. Test the plug to ensure the quality. RS-232 Connection The AWK-4131 has one RS-232 (8-pin RJ45) console port located on the bottom panel. Use either an RJ45-to-DB9 or RJ45-to-DB25 cable to connect the Moxa AWK-4131’s console port to your PC’s COM port. You may then use a console terminal program to access the AWK-4131 for console configuration.
Getting Started In this chapter we explain how to install Moxa’s AirWorks AWK-4131 for the first time, and quickly set up your wireless network and test whether the connection is operating properly. The Function Map discussed in the third section provides a convenient means of determining which functions you need to use.
First-time Installation and Configuration Before installing the AWK-4131, make sure that all items in the Package Checklist are in the box. You will need access to a notebook computer or PC equipped with an Ethernet port. The AWK-4131 has a default IP address that must be used when connecting to the device for the first time.
How to Test One AWK-4131 If you are only using one AWK-4131, you will need a second notebook computer equipped with a WLAN card. Configure the WLAN card to connect to the AWK-4131 (NOTE: the default SSID is MOXA), and change the IP address of the second notebook (Notebook B) so that it is on the same subnet as the first notebook (Notebook A), which is connected to the AWK-4131.
If you have two or more AWK-4131 units, you will need a second notebook computer (Notebook B) equipped with an Ethernet port. Use the default settings for the first AWK-4131 connected to notebook A and change the second or third AWK-4131 connected to notebook B to Client mode, and then configure the notebooks and AWK-4131 units properly.
AWK-4131 Getting Started Function Map Quick overview of the AWK-4131’s status Basic settings for administering the AWK-4131 Essential settings related to establishing a wireless network Advanced features to support additional network management and secure wired and wireless communication Note: These advanced functions are all optional.
In this chapter, we explain all aspects of web-based console configuration. Moxa’s easy-to-use management functions help you set up your AWK-4131 and make it easy to establish and maintain your wireless network. The following topics are covered in this chapter: ...
AWK-4131, you must make sure that the PC host and the AWK-4131 are on the same logical subnet. Similarly, if the AWK-4131 is configured for other VLAN settings, you must make sure your PC host is on the management VLAN.
“Function Map” section of Chapter 2. NOTE The model name of the AWK-4131 is shown as AWK-4131-XX, where XX indicates the country code. The country code indicates the AWK-4131 version and which bandwidth it uses. We use AWK-4131-US as an example in the following figures.
The System Info items, especially Device name and Device description, are displayed and included on the Overview page, in SNMP information, and in alarm emails. Setting System Info items makes it easier to identify the different AWK-4131 units connected to your network. Device name...
192.168.127.253 address Subnet mask Setting Description Factory Default AWK-4131’s subnet Identifies the type of network to which the AWK-4131 is 255.255.255.0 mask connected (e.g., 255.255.0.0 for a Class B network, or 255.255.255.0 for a Class C network). Gateway Setting Description Factory Default AWK-4131’s default...
Time information. Functions such as Auto warning can add real-time information to the message. The Current local time shows the AWK-4131’s system time when you open this web page. You can click on the Set Time button to activate the updated date and time parameters. An “(Updated)” string will appear to indicate that the change is complete.
AP: In a wireless local area network (WLAN), an access point is a station that transmits and receives data. Client: When the AWK-4131 is configured for Client mode, it can be used as an Ethernet-to-wireless (or LAN-to-WLAN) network adaptor. For example, a notebook computer equipped with an Ethernet adaptor but no...
AWK-4131 Web Console Configuration Basic Wireless Settings The “WLAN Basic Setting Selection” panel is used to add and edit SSIDs. An SSID is a unique identifier that wireless networking devices use to establish and maintain wireless connectivity. Multiple access points on a network or sub-network can use the same SSIDs.
Page 28
Only supports the 5 GHz IEEE 802.11n standard Channel (for AP mode only) Setting Description Factory Default Available channels vary The AWK-4131 plays the role of wireless AP. 6 (in B/G/N Mixed with RF type mode) Channel Width (for any 11N RF type only) Setting...
SSID-hidden APs for IEEE 802.11b/g/n channels. WLAN Security Settings The AWK-4131 provides four standardized wireless security modes: Open, WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access), and WPA2. Several security modes are available in the AWK-4131 by selecting Security mode and WPA type: •...
Page 30
When WEP is enabled as a security mode, the length of a key (so-called WEP seed) can be specified as 64/128 bits, which is actually a 40/104-bit secret key with a 24-bit initialization vector. The AWK-4131 provides 4 entities of WEP key settings that can be selected to use with Key index. The selected key setting specifies the key to be used as a send-key for encrypting traffic from the AP side to the wireless client side.
Page 31
Even though AES encryption is only included in the WPA2 standard, it is widely available in the WPA security mode of some wireless APs and clients as well. The AWK-4131 also supports AES algorithms in WPA and WPA2 for better compatibility.
Page 32
AWK-4131 Web Console Configuration WPA/WPA2-Enterprise (for AP/Master mode) By setting WPA type to Enterprise, you can use EAP (Extensible Authentication Protocol), a framework authentication protocol used by 802.1X to provide network authentication. In these Enterprise-level security modes, a back-end RADIUS (Remote Authentication Dial-In User Service) server is needed if IEEE 802.1X functionality is enabled in WPA /WPA2.
Page 33
AWK-4131 Web Console Configuration WPA/WPA2-Enterprise (for Client/Slave mode) When used as a client, the AWK-4131 can support three EAP methods (or EAP protocols): EAP-TLS, EAP-TTLS, and EAP-PEAP, corresponding to WPA/WPA-Enterprise settings on the AP side. Encryption method Setting Description Factory Default...
Page 34
Certificate reduction makes TTLS and PEAP much more popular than EAP-TLS. The AWK-4131 provides some non-cryptographic EAP methods, including PAP, CHAP, MS-CHAP, and MS-CHAP-V2. These EAP methods are not recommended for direct use on wireless networks. However, they may be useful as inner authentication methods with TTLS and PEAP.
There are a few differences in the TTLS and PEAP inner authentication procedures. TTLS uses the encrypted channel to exchange attribute-value pairs (AVPs), while PEAP uses the encrypted channel to start a second EAP exchange inside of the tunnel. The AWK-4131 provides MS-CHAP-V2 merely as an EAP method for inner authentication.
Page 36
Setting Description Factory Default Auto The AWK-4131 senses and adjusts the data rate automatically Auto Available rates Users can manually select a target transmission data rate but doesn't support when RF type are G/N mixed, B/G/N mixed and A/N mixed.
Page 37
Moxa’s Turbo Roaming can enable rapid handover when the Disable AWK-4131, as a client, roams among a group of APs. When Turbo Roaming is enabled, the RF type, AP alive check, and Scan channels will be shown as follows. RF type shows the current RF type that this client is using.
Current Certificate. If it fails, you may need to return to step 1 to set the password correctly and then import the certificate file again. NOTE The WLAN certificate will remain after the AWK-4131 reboots. Even though it is expired, it can still be seen on the Current Certificate. Advanced Settings Several advanced functions are available to increase the functionality of your AWK-4131 and wireless network system.
AWK-4131 Web Console Configuration Using a Virtual LAN Setting up Virtual LANs (VLANs) on your AWK series increases the efficiency of your network by dividing the LAN into logical segments, as opposed to physical segments. In general, VLANs are easier to manage.
AWK-4131 Web Console Configuration Finally, the switch would be configured to route packets from the marketing department to the appropriate corporate resources such as printers and servers. Packets from the human resource department could be restricted to a gateway that allowed access to only the Internet.
You can also assign a static IP address to a specific client by entering its MAC address. The AWK-4131 provides a Static DHCP mapping list with up to 16 entities. Be reminded to check the Active check box for each entity to activate the setting.
MAC Filter The AWK-4131’s MAC filter is a policy-based filter that can allow or filter out IP-based packets with specified MAC addresses. The AWK-4131 provides 8 entities for setting MAC addresses in your filtering policy.
Page 43
= all packets are denied IP Protocol Filter The AWK-4131’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified IP protocol and source/destination IP addresses. The AWK-4131 provides 8 entities for setting IP protocol and source/destination IP addresses in your filtering policy.
AWK-4131’s STP/RSTP feature is disabled by default. To be completely effective, you must enable RSTP/STP on every AWK-4131 connected to your network. If AWK-4131 plays a Slave role, which is connected to a device (PLC, RTU, etc.) as opposed to network switch equipment, it is not necessary to enable STP/RSTP. The reason is that it will cause unnecessary negotiation.
Page 45
AWK-4131 Web Console Configuration RSTP status This field will appear only when selected to operate STP/RSTP. It indicates whether this AWK-4131 is the Root of the Spanning Tree (the root is determined automatically) or not. Bridge priority Setting Description Factory Default...
MD5 or SHA, is the most secure protocol. You can also enable data encryption to enhance data security. The AWK-4131’s MIB can be found in the software CD and supports reading the attributes via SNMP. (Only get method is supported.) SNMP security modes and security levels supported by the AWK-4131 are shown in the following table.
Page 47
AWK-4131 Web Console Configuration The following parameters can be configured on the SNMP Agent page. A more detailed explanation of each parameter is given below the following figure. Enable Setting Description Factory Default Enable Enables SNMP Agent Disable Disable Disables SNMP Agent...
In addition to logging these events, the AWK-4131 supports different approaches to warn engineers automatically, such as SNMP trap, e-mail, and relay output. It also supports two digital inputs to integrate sensors into your system to automate alarms by email and relay output.
Config-related events Event is triggered when… Configuration Changed A configuration item has been changed. Configuration file import via Web Console The configuration file is imported to the AWK-4131. Console authentication failure An incorrect password is entered. Firmware upgraded The AWK-4131’s firmware is updated.
AWK-4131 Web Console Configuration Syslog This function provides the event logs for the Syslog server. The function supports up to three configurable Syslog servers and Syslog server UDP port numbers. When an event occurs, the event will be sent as a Syslog UDP packet to the specified Syslog servers.
E-mail Server Settings You can set up to 4 e-mail addresses to receive alarm emails from the AWK-4131. The following parameters can be configured on the E-mail Server Settings page. In addition, a Send Test Mail button can be used to test whether the Mail server and e-mail addresses work well.
None Relay The AWK-4131 has one relay output, which consists of 2 terminal block contacts on the AWK-4131’s top panel. These relay contacts are used to indicate user-configured events and system failure. The two wires attached to the relay contacts form an open circuit when a user-configured event is triggered. If a user-configured event does not occur, the relay circuit will remain closed.
Page 53
AWK-4131 Web Console Configuration Trap Event Types SNMP Trap Receiver Settings SNMP traps are defined in SMIv1 MIBs (SNMPv1) and SMIv2 MIBs (SNMPv2c). The two styles are basically equivalent, and it is possible to convert between the two. You can set the parameters for SNMP trap receivers through the web page.
Associated Client List (for AP/Master mode only) Associated Client List shows all the clients that are currently associated to a particular AWK-4131. You can click Select all to select all the content in the list for further editing. You can click Refresh to refresh the list.
AWK-4131 Web Console Configuration DHCP Client List (for AP mode only) The DHCP Client List shows all the clients that require and have successfully received IP assignments. You can click the Refresh button to refresh the list. You can press Select all button to select all content in the list for further editing.
AWK-4131 Web Console Configuration Relay Status The status of user-configurable events can be found under Relay Status. The status will refresh every 5 seconds if the Auto refresh box is checked. If an event is triggered, it will be noted on this list. System administrators can click Acknowledge Event when he has acknowledged the event and addressed it.
AWK-4131 Web Console Configuration Maintenance Maintenance functions provide the administrator with tools to manage the AWK-4131 and wired/wireless networks. Console Settings You can enable or disable access permission for the following consoles: HTTP, HTTPS, Telnet and SSH connections. For more security, we recommend you only allow access to the two secured consoles, HTTPS and SSH.
Moxa’s download center. Before running a firmware upgrade, make sure the AWK-4131 is off-line. Click the Browse button to specify the firmware image file and click Firmware Upgrade and Restart to start the firmware upgrade. After the progress bar reaches 100%, the AWK-4131 will reboot itself.
Load Factory Default Use this function to reset the AWK-4131 and roll all settings back to the factory default values. You can also reset the hardware by pressing the reset button on the top panel of the AWK-4131.
The following figure shows how the AWK-4131 stores the setting changes into volatile and non-volatile memory. All data stored in volatile memory will disappear when the AWK-4131 is shutdown or rebooted unless they are y. Because the AWK-4131 starts up and initializes with the settings stored in flash memory, all new changes must be saved to flash memory before restarting the AWK-4131.
AWK-4131 Web Console Configuration You will not be able to run any of the AWK-4131’s functions while the system is rebooting. Logout Logout helps users disconnect the current HTTP or HTTPS session and go to the Login page. For security reasons, we recommend you logout before quitting the console manager.
Software Installation/Configuration Overview The Documentation & Software CD included with your AWK-4131 is designed to make the installation and configuration procedure easy and straightforward. This auto-run CD includes AWK Search Utility (to broadcast search for all AWK’s accessible over the network), the AWK-4131 User’s Manual, and Quick Installation Guide.
Page 64
AWK-4131 Software Installation/Configuration 3. Click Next to create the program’s shortcut files to the default directory, or click Browse to select an alternate location. 4. Click Next to select additional tasks. 5. Click Next to proceed with the installation. The installer then displays a summary of the installation options.
Configuring AWK Search Utility The Broadcast Search function is used to locate all AWK-4131 APs that are connected to the same LAN as your computer. After locating an AWK-4131, you will be able to change its IP address. Since the Broadcast Search function searches by TCP packet and not IP address, it doesn’t matter if the AWK-4131 is configured as an AP...
Page 66
AWK-4131 Software Installation/Configuration 3. The “Searching” window indicates the progress of the search. When the search is complete, all AWKs that were located will be displayed in the AWK Search Utility window. 4. Click Locate to cause the selected device to beep.
Page 67
AWK-4131 Software Installation/Configuration To modify the configuration of the highlighted AWK, click on the Web icon to open the web console. This will take you to the web console, where you can make all configuration changes. Refer to Chapter 3, “Using the Web Console,”...
Page 68
AWK-4131 Software Installation/Configuration Connection • Connection timeout (secs): Use this option to set the waiting time for the Default Login, Locate, Assign IP, Upload Firmware, and Unlock to complete. • Upgrade timeout (secs): Use this option to set the waiting time for the connection to disconnect while the firmware is upgrading.
Other Console Configurations This chapter explains how to access the AWK-4131 for the first time. In addition to HTTP access, there are four ways to access AWK-4131: serial console, Telnet console, SSH console, and HTTPS console. The serial console connection method, which requires using a short serial cable to connect the AWK-4131 to a PC’s COM port, can be used if you do not know the AWK-4131’s IP address.
The serial console connection method, which requires using a short serial cable to connect the AWK-4131 to a PC’s COM port, can be used if you do not know the AWK-4131’s IP address. It is also convenient to use serial console configurations when you cannot access the AWK-4131 over Ethernet LAN, such as in the case of LAN cable disconnections or broadcast storming over the LAN.
Page 71
4. The Console login screen will appear. Log into the RS-232 console with the login name (default: admin) and password (default: root, if no new password is set). 5. The AWK-4131’s device information and Main Menu will be displayed. Please follow the description on screen and select the administration option you wish to perform.
AWK-4131’s functions over the network from a PC host that is connected to the same LAN as the AWK-4131, you need to make sure that the PC host and the AWK-4131 are on the same logical subnet. To do this, check your PC host’s IP address and subnet mask.
HTTPS/SSL. (You can see the protocol in URL is https.) Then you can use the menu tree on the left side of the window to open the function pages to access each of AWK-4131’s functions. Disabling Telnet and Browser Access If you are connecting the AWK-4131 to a public network but do not intend to use its management functions over the network, then we suggest disabling both Telnet Console and Web Configuration.
References This chapter provides more detailed information about wireless-related technologies. The information in this chapter can help you administer your AWK-4131s and plan your industrial wireless network better. The following topics are covered in this chapter: Beacon DTIM ...
Defaults to sending 802.1D-style BPDUs if packets with this format are received. STP (802.1D) and RSTP (802.1w) can operate on the LAN ports and WLAN ports (AP and WDS1-WDS8) of the same AWK-4131. This feature is particularly helpful when the AWK-4131 connects to older equipment, such as legacy switches.
AWK-4131 References Differences between RSTP and STP RSTP is similar to STP, but includes additional information in the BPDUs that allow each bridge to confirm that it has taken action to prevent loops from forming when it decides to enable a link to a neighboring bridge.
Supporting Information This chapter presents additional information about this manual and product. You can also learn how to contact Moxa for technical support. The following topics are covered in this chapter: About This User’s Manual DoC (Declaration of Conformity) ...
AWK-4131 Supporting Information About This User’s Manual This manual is mainly designed for, but no limited to, the following hardware and firmware for the AWK-4131: • Hardware Rev: • Firmware Ver: You are strongly recommended to visit Moxa’s website (http://www.moxa.com) and find the latest product datasheet, firmware, QIG (Quick Installation Guide), UM (User’s Manual) and related information.
The firmware setting is not accessible by the end user. R&TTE Compliance Statement Moxa declares that the apparatus AWK-4131 complies with the essential requirements and other relevant provisions of Directive 1999/5/EC. This equipment complies with all the requirements of DIRECTIVE 1999/5/CE OF THE EUROPEAN PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication terminal equipment and the mutual recognition of their conformity (R&TTE).
Press Ctrl - C and the following message will appear. Enter 2 to change the network setting. Specify where the AWK-4131’s firmware file on the TFTP server and press y to write the settings into flash memory.
AWK-4131 Supporting Information Select 0 in the sub-menu to load the firmware image via LAN, and then enter the file name of the firmware to start the firmware recovery. Technical Support Contact Information Customer satisfaction is our number one concern, and to ensure that customers receive the full benefit of our products, Moxa Internet Services has been set up to provide technical support, driver updates, product information, certification status, installation guide and user’s manual updates.
Need help?
Do you have a question about the AWK-4131 and is the answer not in the manual?
Questions and answers