Page 1
22Mbps Wireless Network Access Point User Manual V 3.0...
Page 2
Manufacturer's Disclaimer Statement The information in this document is subject to change without notice and does not represent a commitment on the part of the vendor. No warranty or repr esentation, either expressed or implied, is made with respect to the quality, accuracy or fitness for any particular purpose of this document. The manufacturer reserves the right to make changes to the content of this document and/or the products associated with it at any time without obligation to notify any person or organization of such changes.
INTRODUCTION The Wireless Access Point delivers enhanced IEEE 802.1b high performance for up to 22mbps, which is double of that offered by most of the Access Points in the current market. The 22mbps high data rate is made possible by utilizing advanced TI technology, which incorporates the new PBCC for modulation method.
4. Repeater Ø Easy setup and installation with web-based configuration utility. Ø AP management utility running on PC to make it easy to manage and configure all the AP in the same network. System Requirements Ø Windows 95, 98, 98SE, Millennium, NT, 2000 and XP computers Ø...
GETTING STARTED Getting To Know The Wireless Network Access Point WIRELESS NETWORK ACCESS POINT’S PORTS Ø Power Receptor Ø Reset Button Ø MDII RJ-45 Ethernet Port Straight-Through cable is required to connect with router or switch. Cross-Over cable is required to connect to computer directly WIRELESS NETWORK ACCESS POINT’S LEDS Ø...
Connecting The Wireless Network Access Point In order to setup an Infrastructure of a wireless network such as the example shown above, you will need the following: 1. A broadband Internet connection. 2. ADSL or Cable modem provided by your ISP as part of the broadband connection installation. 3.
CONFIGURING YOUR WIRELESS ACCESS POINT The web-based configuration menu provides user friendly graphic design for easy configuration. Please go through the following check list before you consider using the configuration menu. You will need a JavaScript enabled web browser such as Internet Explorer v5.5 or higher and Netscape v4.0 or higher.
Configuration Menu You can access the configuration menu anytime by opening up an web browser window, and type in the IP address of the Access Point. The default IP address of the Access Point is shown below. Open web browser window Type in IP address Press “Enter”...
Page 11
Note! The default username is “admin” and the default password is also “admin”. The configuration menu will appear. You can configure and get information about the Access Point by going through each tab. Here Status page is displayed. -11-...
Getting Started With Setup Wizard Setup wizard is provided as part of the web configuration utility. You can simply follow the step-by-step process to get your Access Point configured and ready for running in 4 easy steps by clicking on the “ Wizard ” button on the function menu. The following screen w ill appear. Please click “Next”...
Page 13
Step 2: Set WLAN Connection Enter the SSID that you would like to use and select the channel of operation, then click “Next” to continue. Step 3: Set WEP Encryption You may enable the WEP security by selecting “ Enabled ”, otherwise, simply click “Next”...
The Access Point is now rebooting, click “ Close ” to close the Setup wizard window and go back to the main menu. Status Page This page displays the following information. -14-...
Page 15
Firmware Version: Shows the current firmware version LAN: Shows the Mac address, IP address (default: 192.168.1.1), Subnet Mask, Gateway Address. The current LAN traffic calculated in terms of number of packets sent and received by AP through wired connection is also displayed. Wireless: Shows the Mac address, current ESSID, the status of Encryption Function (Enable or Disable), the current using channel.
Basic Setting This is the page where you can change the basic settings of the Access Point with the minimum amount of effort to adjust a secure wireless network. AP Name: Name of the AP, which can be used to identify the Access Point among the all the Access Points in the wireless network.
Page 17
The new settings are now been saved to Access Point and will be effective once the Access Point restarts. Click “ Back ” to go back to Basic Setting page. -17-...
IP Setting This is the page where you configure the IP and DHCP settings of the Access Point. The default IP address of the Access Point is 192.168.1.1 with the Subnet Mask of 255.255.255.0. You can type in other values for IP Address, Subnet Mask and Gateway and click “Apply” button for the changes to be effective.
Page 19
The new settings are now been saved to Access Point and will be effective once the Access Point restarts. Click “ Back ” to go back to Basic Setting page. -19-...
Advanced Setting This page contains configurations for advanced users, which the change will reflect the wireless performance and operating modes. AP Mode: Select one of the AP operating modes for different application of Access Point. 1. AP – The normal Access Point operating mode which forms a wireless ESS network with its wireless clients.
Page 21
3. Wireless Bridge – A pair of APs operating under Bridge mode to act as the bridge that connects two Ethernet networks or Ethernet enabled clients together. You must make sure that the SSID and Channel is set to the same as that used by the AP you wish to connect. The “Remote Bridge MAC”...
Page 22
data throughput. However, the Short Preamble is supported only from the IEEE 802.11b (High-Rate) standard and not from the original IEEE 802.11. That means that stations using Short-Preamble cannot communicate with stations implementing the original version of the protocol. Basic Rate: The basic transfer rate is set depending on the speed of your wireless network. For example, you set 1-2 (Mbps) if you have older 802.11 compliant device in your network, which supports 1 ~ 2 Mbps data rate.
Security This page is where you configure the security features supported by this Access Point. Password: Allow you to change the new login password. Here are the necessary steps: 1. Enter the new password in the “ AP Password New: ” field. 2.
Page 24
MAC Filter MAC Filter function controls the MAC of the network devices that are listed in this table for access authorization or denial. When MAC Filter is enabled, by selecting the “Enabled” radio box, select one of two choices: Ø Only deny PCs with MAC listed below to access device, or Ø...
Page 25
For any changes made in the security page, click “ Apply ” for the changes to be effective. When the above page will appear. Click “Back ” to go back to the previous page. -25-...
Page 26
802.1x There are three essential components to the 802.1x infrastructure: (1) Supplicant, (2) Authenticator and (3) Server. The Access Point serves as an Authenticator, and the EAP methods used must be supported by the backend Radius Server. The 802.1x security supports both MD5 and TLS Extensive Authentication Protocol (EAP).
Page 27
Click “Help” to get interpretation for Encryption Key and Radius Server 6. Click “Apply” button for the 802.1x settings to take effect after Access Point reboots itself. Note! As soon as 802.1x security is enabled, all the wireless client stations that are connected to the Access Point currently will be disconnected.
Tools Three functions are provided in this page, Backup/Restore Settings, Restore default settings and Firmware Upgrade. Backup Settings: Click on “ Backup ” button, which will open a FileSave Dialog box, where you get to save all the current settings and configurations to a file. Restore Settings: Click on the “...
USING AP 22M UTILITY FOR MANAGEMENT Installing AP 22M Utility The AP 22M Utility is a program that runs on your PC, which offers easy management for all existing 22mbps Access Points in the same network domain. Please follow the steps below for installation and refer to “Manage and Configure AP with AP 22M Utility”...
Page 30
4. Select menu option, “Access Point”, on the left side of screen. 5. Click “Install” on the menu bar to proceed with 22M AP installation. -30-...
Page 31
6. The 22M AP Utility loads the Install wizard for installation. Click “Next” to start installation. Click “Next” to install in default folder or Click “Browse ” to install in a different folder. -31-...
Page 32
Installation wizard copies the utility program files in your PC. 7. Click “Finish” to complete the installation. -32-...
8. The 22M AP Utility icon would then appear on your desktop for easy access. Manage and Configure Access Point with 22M AP Utility The AP 22M Utility can be useful in a way that allows you to configure one AP to another to save the trouble of logging into the web configuration utility of each AP.
Link Information This is the default page when 22M AP Utility starts up. Status – displays the basic settings of the selected Access Point. Available AP – lists all the 22mpbs Access Point of the same network domain detected on the network.
AP Settings This is the page that allows you to change the settings of the Access Point. Basic Setting – allows you to enter the new values for ESSID, Channel and AP Name of the Access Point. Mode Setting – allows you to change the operating mode of the Access Point. There are 4 modes that you can choose: (1) Access Point, (2) Access Point Client, (3) Wireless Bridge and (4) Multiple Bridge.
Page 36
4X Mode : When “4X enable” is selected, you will be running 22Mbps PBCC+4X mode, the wireless transmission speed can achieve over 12Mbps real throughput assuming that the wireless client device is also running 22Mbps PBCC+4X. Note !: 4X mode is proprietary transmission mode available only with our solution chipset. In order to achieve superb speed by 4X or 22Mbps PBCC mode, both the transmitting and receiving parties must be using our WLAN solution products.
Page 37
For any changes made to be effective, click “Apply” button. The utility program will now prompt you for user name and password as part of the login and security protection to make sure you have the right authorization. Enter “UserName” and “Password”...
IP Settings This is the page where you configure the IP settings for the Access Point. Select “Fixed IP Address” and enter the IP address of the Access Point and Gateway. Select “DHCP Client” if there is a DHCP server assigning IP addresses on the network.
WEP Settings This is the page that allows you to configure the WEP settings for the Access Point. Enable WEP Key security by clicking “Data Encryption” Select the “Auth. Mode ” and the “Key Length” Fill at least one of the 4 Web Key fields with Hex or ASCII values.
802.1x Settings 1. Enable 802.1x security by clicking the “802.1X Function” checkbox. 2. If MD5 EAP methods is used then you can skip step 3 and go to step 4. 3. Select the Encryption Key Lifetime from 5 Minutes to 1 Day. As soon as the lifetime of the Encryption Key is over, the Encryption Key will be renewed by the Radius server.
APPENDIX A: TROUBLESHOOTING This chapter provides solutions to frequently encountered problems that can occur during the installation and operation of the Wireless Access Point. Please read through the following to solve your problems. The computer connected to the Wireless Access Point through Ethernet network cannot access the configuration menu.
Page 42
The wireless clients cannot access the network in the infrastructure mode. Ø Check that the wireless network device is being installed and working properly. Go to “Start” > Right mouse click on “My Computer” > “Properties” Go to “Hardware” -42-...
Page 43
Go to “Device Manager” Right mouse click on the network adapter which you connect RJ45 cable with. And go to “Properties” -43-...
Page 44
Check and make sure that the network adapter is working properly Resetting the Wireless Access Point to Factory Default Setting. You may choose to Reset the Wireless Access Point by doing the following: Ø Locate the Reset button on the back of the Wireless Access Point Ø...
Page 45
What is the difference between 22mbps and 11mbps wireless products? What’s the benefit of 22mbps Wireless Access Point? The 22mbps is made possible by the new modulation method called PBCC developed by TI, which is different from the current CCK modulation method for 11mbps. The 22mbps Wireless Access Point offers double data rate than that of 11mbps with 20% more distance coverage.
Page 46
This is a proprietary wireless data transmission mode provided by TI, which enhances TI’s 22Mbps PBCC speed to reach data throughput to over 12Mbps. Since it is not IEEE 802.11b standard wireless data mode, in order to allow 4X mode, both the receiving and transmitting parties must be using TI solution.
APPENDIX B: NETWORKING BASIS This chapter will help you learn the basics of home networking. Using the Windows XP Network Setup Wizard Go to Start menu > Control Panel > Network Connections In the menu on the left side of the window, select “Set up a home or small office network ”...
Page 48
Select the option that best describes how you connect your computer to the Internet. In the case of using router in the network, choose the second option. Click “Next” to continue. 1. Enter a short description for your computer. 2. Enter a name for your computer to be recognized among the network.
Page 49
Enter “Workgroup name ” for your home network. Click “Next” to continue” Click “Next” and wait for the wizard to apply the settings. -49-...
Page 50
You may create a network setup disk which saves you the trouble of having to configure every PCs in your network. Select the first choice, and insert a floppy disk into your disk drive Click “Next” to continue. -50-...
Page 51
Click “Format Disk” if you wish to format the disk. Click “Next” to copy the necessary files to the disk. Click “Next” to continue with the Network Setup Wizard -51-...
Page 52
Note! Now you may use the Network Setup Disk you just created in any PCs in your network that you wish to setup. Simply insert the Network Setup Disk into the disk drive of a PC, and open to browse the content of the disk with “My Computer” or “Windows File Manager”. Double -click and run the file “netsetup”...
Page 53
Checking IP Address of Your Computer In Windows XP Sometimes you will need to know the IP address of the computer that you are using. For example, when you want to make sure that your computer is in the same network domain as that of your Access Point for you can configure and access the AP.
Page 54
If the IP address is assigned by DHCP server on the network, there are chances you might have to release the IP and acquire it from DHCP server again. Here is how you do it. Go to Start menu > Run >...
Page 55
Dynamic IP Address V.S. Static IP Address By definition Dynamic IP addresses are the IP addresses that are being automatically assigned to a network device on the network. These Dynamically assigned IP addresses will expire and may be changed over time. Static IP addresses are the IP addresses that users manually enter for each of the network adapters.
Page 56
The Local Area Connection Properties would appear. Select “Inter net Protocol (TCP/IP)” and Click “Properties” to continue. Dynamically Assigned IP Address The TCP/IP Properties window appears. Select “Obtain an IP address automatically” if you are on a DHCP enabled network. Click “OK”...
Page 57
Static IP Address Select “Use the following IP address” Enter the IP address and subnet mask fields. Enter the IP address of the Router in the Default gateway field. Enter the IP address of the Router in the DNS server field Click “Ok”...
Page 58
The TCP/IP Properties window appears. Select “Obtain an IP address automatically” if you are on a DHCP enabled network. Click “OK” to close the window with the changes made Select “Use the following IP address” Enter the IP address and subnet mask fields.
Page 59
Wireless Network In Windows 98 and Windows ME Go to Start menu > Settings > Control Panel > Double-click on Network Select TCP/IP of the network device Click “Propert ies” to continue The Access Point restarts itself, and the screen will switch back to startup page –...
Page 60
Select “Specify an IP address” Enter the IP address and subnet mask fields. In the DNS Configuration Tab Page, (1) enter the IP address of the Router in the Default gateway field. (2) Enter the IP address of the Router in the DNS server field -60-...
APPENDIX C: 802.1x Authentication Setup There are three essential components to the 802.1x infrastructure: (1) Supplicant, (2) Authenticator and (3) Server. The 802.1x security supports both MD5 and TLS Extensive Authentication Protocol (EAP). The 802.1x Authentication is a complement to the current WEP encryption used in wireless network.
is a more complicated authentication, which involves using certificate that is issued by the Radius server, for authentication. TLS authentication is a more secure authentication, since not only the Radius server authenticates the wireless client, but also the client can validate the Radius server by the certificate that it issues.
Page 63
Click “Properties” to open up the Properties setting window. Click on the “ Wireless Network ” tab. -63-...
Page 64
Click “Properties” of the available wireless network, which you wish to connect or configure. Please note that if you are going to change to a different 802.1x authentication EAP method, i.e. switch from using MD5 to TLS, , you must remove the current existing wireless network from your Preferred networks first, and add it in again.
Page 65
TLS Authentication Select “The key is provided for me automatically” option Click “ OK ” to close the Wireless Network Properties window. Click “Authentication” tab 10. Select “ Enable network access control using IEEE 802.1x ” option to enable 802.1x authentication.
Page 66
11. Select “Smart Card or other Certificate” from the drop-down list box for EAP type. 12. Click “OK” to close the Wireless Network Connection Properties window, thus make the changes effective. The wireless client configuration in the zero-configuration utility provided in Windows XP is now completed for TLS configuration.
Page 67
TLS Authentication – Download Digital Certificate from Server In most corporations, it requires internal IT or MIS staff’s help to have the certificated downloaded to your local computer. One of the main reasons is that each corporation uses its own server systems, and you will need the assistance from your IT or MIS for account/passw ord, CA server location and etc.
Page 68
16. Now we are connected to the Certificate Service. Select “Request a certificate”, and click “ Next ” to continue. -68-...
Page 69
17. Select “User Certificate request”, and click “Next” to continue. -69-...
Page 71
19. The Certificate Service is now processing the certificate request. -71-...
Page 72
20. The certificate is issued by the server, click “Install this certificate” to download and store the certificate to your local computer. -72-...
Page 73
21. Click “ Ye s ” to store the certificate to your local computer. -73-...
Page 74
22. Certificate is now installed. All the configuration and certificate download are now complete. Let’s try to connect to the Access Point using 802.1x TLS Authentication. -74-...
Page 75
23. Windows XP will prompt you to select a certificate for wireless network connection. Click on the network connection icon in the system tray to continue. -75-...
Page 76
24. Select the certificate that was issued by the server (WirelessCA), and click “OK” to continue. 25. Check the server to make sure that it’s the server that issues certificate, and click “OK” to complete the authentication process. -76-...
Page 77
MD5 Authentication 26. Select “Data encryption (WEP enabled)” option, but leave other option unselected. 27. Select the key format that you want to use to key in your Network key. ASCII characters: 0~9, a~z and A~Z HEX characters: 0~9, a~f 28.
Page 78
31. Select “Authentication” tab. 32. Select “ Enable network access control using IEEE 802.1X ” to enable 802.1x authentication. 33. Select “ MD-5 Challenge ” from the drop-down list box for EAP type. 34. Click “OK” to close Wireless Network Connection Properties window, thus make all the changes effective.
Page 79
Unlike TLS, which uses digital certificate for validation, the MD-5 Authentication is based on the user account/password. Therefore, you must have a valid account used by the server for validation. 35. WindowsXP will prompt you to enter your user name and password. Click on the network connection icon in the system tray to continue.
Page 80
36. Enter the user name, password and the logon domain that your account belongs if you have one or more network domain exist in your network. 37. Click “OK” to complete the validation process. -80-...
Authenticator: Wireless Network Access Point This is the web page configuration in the Access Point that we use. 1. Enable 802.1x security by selecting “ Enable ”. 2. If MD5 EAP methods is used then you can skip step 3 and go to step 4. 3.
Page 82
Radius Server: Window2000 Server This section to help those who has Windows 2000 Server installed and wants to setup Windows2000 Server for 802.1x authentication, which includes setting up Certificate Service for TLS Authentication, and enable EAP-methods. Login into your Windows 2000 Server as Administrator, or account that has Administrator authority.
Page 83
Select “Enterprise root CA”, and click “Next” to continue. Enter the information that you want for your Certificate Service, and click “Next” to continue. -83-...
Page 84
Go to Start > Program > Administrative Tools > Certificate Authority Right-click on the “ Policy Setting ”, select “ new ” Select “Certificate to Issue” 10. Select “Authenticated Session” and “ Smartcard Logon” by holding down to the Ctrl key, and click “...
Page 85
11. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 12. Right-click on domain, and select ” Properties ” to continue. 13. Select “Group Policy” tab and click “Properties” to continue. -85-...
Page 86
14. Go to “Computer Configuration” > “Security Settings” > “Public Key Policies” 15. Right-click “ Automatic Certificate Request Setting ”, and select “ N e w ” 16. Click “Automatic Certificate Request ...” -86-...
Page 87
17. The Automatic Certificate Request Setup Wizard will guide you through the Automatic Certificate Request setup, simply click “ Next ” through to the last step. 18. Click “Finish” to complete the Automatic Certificate Request Setup 19. Go to Start > Run, and type “command” and click “Enter” to open Command Prompt. 20.
Page 88
22. Select “Add/Remove Windows Components” from the panel on the left. 23. Select “ Internet Authentication Service ”, and click “ OK ” to install. -88-...
Page 89
Setting Internet Authentication Service 24. Go to Start > Program > Administrative Tools > Internet Authentication Service 25. Right-click “ Client ”, and select “ New Client ” -89-...
Page 90
26. Enter the IP address of the Access Point in the Client address text field, a memorable name for the Access Point in the Client-Vendor text field, the access password used by the Access Point in the Shared secret text field. Re-type the password in the Confirmed shared secret text field.
Page 91
28. In the Internet Authentication Service, right-click “ Remote Access Policies ” 29. Select “New Remote Access Policy”. 30. Select “ Day-And-Time-Restriction ”, and click “ Add ” to continue. -91-...
Page 92
31. Unless you want to specify the active duration for 802.1x authentication, click “OK” to accept to have 802.1x authentication enabled at all times. 32. Select “Grant remote access permission”, and click “Next” to continue. -92-...
Page 93
33. Click “Edit Profile” to open up -93-...
Page 94
For TLS Authentication Setup (Steps 34 ~ 38) 34. Select “Authentication” Tab 35. Enable “ Extensible Authentication Protocol ”, and select “ Smart Card or other Certificate” for TLS authentication -94-...
Page 95
36. Go to Start > Program > Administrative Tools > Active Directory Users and Computers 37. Select “ Users ”, and double -click on the user that can be newly created or currently existing, who will be configured to have the right to obtain digital certificate remotely. Please note that in this case, we have a user called, test, whose account/password are used to obtain the digital certificate from server.
Page 96
38. Go to the “Dial-in” tab, and check “Allow access” option for Remote Access Permission and “ No Callback ” for Callback Options. -96-...
Page 97
For MD5 Authentication (Steps 39 ~ 54) 39. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 40. Right click on the domain, and select “ Properties ” -97-...
Page 98
41. Select “Group Policy” tab, and click “Edit” to edit the Group Policy. -98-...
Page 99
42. Go to “Computer Configuration” > “Windows Settings” > “Security Settings” > “Account Policies” > “ Password Policies ” 43. Click “Define this policy setting”, select “Enabled”, and click “OK” to continue. -99-...
Page 100
44. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 45. Go to Users . Right-click on the user that you are granting access, and select “ Properties ” -100-...
Page 101
46. Go to “Account” tab, and enable “Store password using reversible encryption” 47. Click “ OK ” to continue. -101-...
Page 102
48. Go to Start > Program > Administrative Tools > Internet Authe ntication Service. 49. Go to Remote Access Policies 50. Make sure that MD5 is moved up to Order 1 51. Right-click “ MD5 ”, and select “ Properties ” -102-...
Page 103
52. Go to “Authentication” tab 53. Enable “ Extensible Authentication Protocol ” 54. Select “MD5-Challenge” for EAP type. -103-...
Page 104
APPENDIX D: GLOSSARY Access Point ? An internetworking device that seamlessly connects wired and wireless networks. Ad-Hoc ? An independent wireless LAN network formed by a group of computers, each with an network adapter. AP Client – One of the additional AP operating modes offered by 22mbps Access Point, which allows the Access Point to act as an Ethernet-to-Wireless Bridge, thus a LAN or a single computer station can join a wireless ESS network through it.
Page 105
Wide Web or Intranet. BSS ? BSS stands for “Basic Service Set”. It is an Access Point and all the LAN PCs that associated with it. Channel ? The bandwidth which wireless Radio operates is divided into several segments, which we call them “Channels”.
Page 106
Fragmentation ? When transmitting a packet over a network medium, sometimes the packet is broken into several segments, if the size of packet exceeds that allowed by the network medium. Fragmentation Threshold – The Fragmentation Threshold defines the number of bytes used for the fragmentation boundary for directed messages.
Page 107
the PSDU. The optional short preamble and header is intended for application where maximum throughput is desired and interoperability with legacy and non-short -preamble capable equipment is not consideration. That is, it is expected to be used only in networks of like equipment that can all handle the optional mode.
Page 108
APPENDIX E: TECHNICAL SPECIFICATION Standard 802.11b compliant (wireless) 802.3, 802.3u for LAN Data Rate 1 / 2 / 5.5 / 11 / 22 mbps 4 x 100BaseTX with Automatic MDI/MDIX feature Interface Power Jack: 2.5 mm (inner dimension) Default Reset button Emission Type Direct Sequence Spread Spectrum (DSSS) 1 Mbps –...