Page 1 SMC2552W-G...
Page 3 EliteConnect™ 2.4GHz 802.11g Wireless Access Point User Guide The easy way to make all your network connections 38 Tesla Irvine, CA 92618 April 2004 Phone: (949) 679-8000 Revision Number: R01, F2.0.22...
Page 4 Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC.
Page 5 30 days of purchase from SMC or its Authorized Reseller. Registration can be accomplished via the enclosed product registration card or online via the SMC Web site. Failure to register will not affect the standard limited warranty. The Limited Lifetime warranty covers a product during the Life of that Product, which is defined as the period of time during which the product is an “Active”...
Page 6 IMITED ARRANTY Customers are responsible for all shipping charges from their facility to SMC. SMC is responsible for return shipping charges from SMC to customer. WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, CUSTOMER’S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC’S OPTION.
Page 7 OMPLIANCES Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Page 8 Classe B prescrites dans la norme sur le matérial brouilleur: “Appareils Numériques,” NMB-003 édictée par l’Industrie. Australia/New Zealand AS/NZS 4771 ACN 066 352010 Contact SMC at: SMC Networks, Inc. 38 Tesla Irvine, CA 92618 Phone: (949) 679-8000...
Page 9 OMPLIANCES 0560 EC Conformance Declaration SMC contact for these products in Europe is: SMC Networks Europe, Edificio Conata II, Calle Fructuós Gelabert 6-8, 2 08970 - Sant Joan Despí, Barcelona, Spain. Marking by the above symbol indicates compliance with the Essential Require- ments of the R&TTE Directive of the European Union (1999/5/EC).
Page 10 OMPLIANCES Safety Compliance Power Cord Safety Please read the following safety information carefully before installing the switch: WARNING: Installation and removal of the unit must be carried out by qualified personnel only. • The unit must be connected to an earthed (grounded) outlet to comply with international safety standards.
Page 11 OMPLIANCES Power Cord Set Switzerland The supply plug must comply with SEV/ASE 1011. U.K. The supply plug must comply with BS1363 (3-pin 13 A) and be fitted with a 5 A fuse which complies with BS1362. The mains cord must be <HAR> or <BASEC> marked and be of type HO3VVF3GO.75 (minimum).
Page 12 OMPLIANCES Veuillez lire à fond l'information de la sécurité suivante avant d'installer le Switch: AVERTISSEMENT: L’installation et la dépose de ce groupe doivent être confiés à un personnel qualifié. • Ne branchez pas votre appareil sur une prise secteur (alimentation électrique) lorsqu'il n'y a pas de connexion de mise à...
Page 13 OMPLIANCES Cordon électrique - Il doit être agréé dans le pays d’utilisation Suisse: La prise mâle d’alimentation doit respecter la norme SEV/ASE 1011. Europe La prise secteur doit être conforme aux normes CEE 7/7 (“SCHUKO”) LE cordon secteur doit porter la mention <HAR> ou <BASEC> et doit être de type HO3VVF3GO.75 (minimum).
Page 14 OMPLIANCES gegeben, wenn auch die an das Gerät angeschlossenen Geräte unter SELV-Bedingungen betrieben werden. • Stromkabel. Dies muss von dem Land, in dem es benutzt wird geprüft werden: U.S.A und Der Cord muß das UL gepruft und war das CSA Canada beglaubigt.
Page 15: Table Of Contents
ABLE OF ONTENTS Introduction ......1-1 Package Checklist ....... . . 1-2 Hardware Description .
Page 16 ABLE OF ONTENTS Event Logs ........5-66 Command Line Interface .
Page 17 ABLE OF ONTENTS logging console ....... 6-25 logging level ........6-26 logging facility-type .
Page 18 ABLE OF ONTENTS address filter delete ......6-56 mac-authentication server ......6-57 mac-authentication session-timeout .
Page 19 ABLE OF ONTENTS wpa-psk-type ....... . . 6-93 shutdown ........6-94 show interface wireless .
Page 20 ABLE OF ONTENTS...
Page 21: Introduction
Chapter 1 Introduction SMC’s EliteConnect 2.4GHz 802.11g Wireless Access Point (SMC2552W-G) is an IEEE 802.11b/g access point that provides transparent, wireless high-speed data communications between the wired LAN and fixed, portable or mobile devices equipped with a 802.11b, or 802.11g wireless adapter.
Page 22: Package Checklist
Inform your dealer if there are any incorrect, missing or damaged parts. If possible, retain the carton, including the original packing materials. Use them again to repack the product in case there is a need to return it. Please register this product and upgrade the product warranty at www.smc.com...
Page 23: Hardware Description
Hardware Description Hardware Description Front Panel Antennas Indicator Rear Panel 3.3V/4A Reset RJ-45 Port, Console Security Slot Power Socket Button PoE Connector Port...
Page 24: Component Description
Introduction Component Description Antennas The access point includes two antennas for wireless communications. The signal transmitted from both antennas is identical, but only the best signal received on one of the antennas is used. The antennas transmit the outgoing signal as a toroidal sphere, so the antennas should be adjusted to different angles to provide better coverage.
Page 25 Hardware Description Status Description WLAN Indicates the 802.11b/g radio is administratively disabled. On Green The access point is associated with wireless clients, but there is no network activity. Blinking Indicates that the access point is Green transmitting or receiving data through wireless links.
Page 26 Introduction However, when connecting the access point to a workstation or other device that does not have MDI-X ports, you must use crossover twisted-pair cable. The access point appears as an Ethernet node and performs a bridging function by moving packets from the wired LAN to remote workstations on the wireless infrastructure.
Page 27: Features And Benefits
Features and Benefits Features and Benefits • Local network connection via 10/100 Mbps Ethernet ports or 54 Mbps wireless interface (supporting up to 64 mobile users) • IEEE 802.11b, 802.11g and 802.3af compliant • Antennas with SMA connectors for optional external 2.4 GHz high-gain antenna to extend range and coverage Flexible network management through Command Line •...
Page 28: Applications
Introduction Applications The Wireless products offer a high speed, reliable, cost-effective solution for 10/100 Mbps wireless Ethernet client access to the network in applications such as: • Remote access to corporate network information E-mail, file transfer, and terminal emulation. • Difficult-to-wire environments Historical or old buildings, asbestos installations, and open areas where wiring is difficult to employ.
Page 29: System Defaults
System Defaults System Defaults The following table lists some of the access point’s basic system defaults. To reset the access point defaults, use the CLI command “reset configuration” from the Exec level prompt. Feature Parameter Default Identification System Name Enterprise AP Administration User Name admin...
Page 30 Introduction Feature Parameter Default Local MAC Authentication Authentication 0 seconds (disabled) Session Timeout Local MAC Allowed System Default Local MAC Allowed Permission 802.1x Status Disabled Authentication Broadcast Key 0 minutes (disabled) Refresh Session Key Refresh 0 minutes (disabled) Reauthentication 0 seconds (disabled) Refresh Rate VLAN Native VLAN ID...
Page 31 System Defaults Feature Parameter Default System Syslog Disabled Logging Logging Host Disabled Logging Console Disabled IP Address / Host 0.0.0.0 Name Logging Level Informational Logging Facility Type Ethernet Speed and Duplex Auto Interface Wireless IAPP Enabled Interface SSID 802.11b/g Status Enabled Auto Channel Select Enabled...
Page 32 Introduction Feature Parameter Default Wireless Authentication Type Open System Security WEP Encryption Disabled 802.11b/g WEP Key Length 128 bits WEP Key Type Hexadecimal WEP Transmit Key Number WEP Keys null WPA Configuration All clients Mode WPA Key WPA authentication Management over 802.1x Multicast Cipher 1-12...
Page 33: Hardware Installation
Chapter 2 Hardware Installation 1. Select a Site – Choose a proper place for the access point. In general, the best location is at the center of your wireless coverage area, within line of sight of all wireless devices. Try to place the access point in a position that can best cover its Basic Service Set (refer to “Infrastructure Wireless LAN”...
Page 34 Hardware Installation Set the four 5/8-inch number 12 wood screws in the holes, leaving about 3 mm clearence from the wall. Position the mounting bracket over the wall screws, slide the bracket onto the screws, and then tighten down the screws. 3.
Page 35 Hardware Installation Attaching the Mounting Bracket Back of Access Point Mounting slots Mounting points Bracket 4. Lock the Access Point in Place – To prevent unauthorized removal of the access point, you can use a Kensington Slim MicroSaver security cable (not included) to attach the access point to a fixed object.
Page 36 Hardware Installation 5. Connect the Power Cord – Connect the power adapter to the access point, and the power cord to an AC power outlet. Otherwise, the access point can derive its operating power directly from the RJ-45 port when connected to a device that provides IEEE 802.3af compliant Power over Ethernet (PoE).
Page 37 9. Connect the Console Port – Connect the console cable (included) to the RS-232 console port for accessing the command-line interface. You can manage the access point using the console port (Chapter 6), the web interface (Chapter 5), or SNMP management software such as SMC’s EliteView.
Page 38 Hardware Installation...
Page 39: Network Configuration
Chapter 3 Network Configuration The wireless solution supports a stand-alone wireless network configuration as well as an integrated configuration with 10/100 Mbps Ethernet LANs. Wireless network cards, adapters, and access points can be configured as: Ad hoc for departmental, or enterprise LANs •...
Page 40: Network Topologies
Network Configuration Network Topologies Ad Hoc Wireless LAN (no AP or Bridge) An ad hoc wireless LAN consists of a group of computers, each equipped with a wireless adapter, connected via radio signals as an independent wireless LAN. Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio channel.
Page 41: Infrastructure Wireless Lan
Network Topologies Infrastructure Wireless LAN The access point also provides access to a wired LAN for wireless workstations. An integrated wired/wireless LAN is called an Infrastructure configuration. A Basic Service Set (BSS) consists of a group of wireless PC users, and an access point that is directly connected to the wired LAN.
Page 42: Infrastructure Wireless Lan For Roaming Wireless Pcs
Network Configuration Infrastructure Wireless LAN for Roaming Wireless PCs The Basic Service Set (BSS) defines the communications domain for each access point and its associated wireless clients. The BSS ID is a 48-bit binary number based on the access point’s wireless MAC address, and is set automatically and transparently as clients associate with the access point.
Page 43 Extended Service Set (ESS). By placing the access points so that a continuous coverage area is created, wireless users within this ESS can roam freely. All SMC wireless network cards and adapters and SMC2552W-G wireless access points within a specific ESS must be configured with the same SSID.
Page 44 Network Configuration...
Page 45: Initial Configuration
Point SMC2552W-G offers a variety of management options, including a web-based interface, a direct connection to the console port, or using SNMP software such as SMC’s EliteView. The initial configuration steps can be made through the web browser interface using the Setup Wizard (page 4-4). The access point requests an IP address via DHCP by default.
Page 46 Initial Configuration To connect to the console port, complete the following steps: 1. Connect the console cable to the serial port on a terminal, or a PC running terminal emulation software, and tighten the captive retaining screws on the DB-9 connector. 2.
Page 47: Initial Configuration Steps
“gateway” is the default gateway router. Check with your system administrator to obtain an IP address that is compatible with your network. SMC Enterprise AP(if-ethernet)#no dhcp SMC Enterprise AP(if-ethernet)#ip address 192.168.2.2 255.255.255.0 192.168.2.254 SMC Enterprise AP(if-ethernet)# After configuring the access point’s IP parameters, you can access the management interface from anywhere within the attached network.
Page 48: Using Web-Based Management
Type “exit” to leave configuration mode. Then type “country?” to display the list of countries. Select the code for your country, and enter the country command again, following by your country code (e.g., IE for Ireland). SMC Enterprise AP#country ie SMC Enterprise AP# Using Web-based Management Setup Wizard...
Page 49 Using Web-based Management Logging In – Enter the username “admin,” the password “smcadmin,” and click LOGIN. For information on configuring a user name and password, refer to page 5-28. The home page displays the Main Menu.
Page 50 1. Service Set ID – Enter the service set identifier in the SSID box which all wireless clients must use to associate with the access point. The SSID is case sensitive and can consist of up to 32 alphanumeric characters. (Default: SMC)
Page 51 Using Web-based Management 2. Radio Channel – You must enable radio communications for 802.11b and 802.11b/g, and set the operating radio channel. Auto Channel Select – Select Enable for automatic radio channel detection. (Default: Enable) 802.11g Radio Channel: Set the operating radio channel number.
Page 52 Initial Configuration IP Configuration – Either enable or disable (Dynamic Host Configuration Protocol (DHCP) for automatic IP configuration. If you disable DHCP, then manually enter the IP address and subnet mask. If a management station exists on another network segment, then you must enter the IP address for a gateway that can route traffic between these segments.
Page 53 Using Web-based Management 4. Click Finish. 5. Click the OK button to restart the access point.
Page 54 Initial Configuration 4-10...
Page 55: System Configuration
Chapter 5 System Configuration Before continuing with advanced configuration, first complete the initial configuration steps described in Chapter 4 to set up an IP address for the SMC2552W-G. The SMC2552W-G can be managed by any computer using a web browser (Internet Explorer 5.0 or above, or Netscape Navigator 6.2 or above).
Page 56: Advanced Configuration
System Configuration The information in this chapter is organized to reflect the structure of the web screens for easy reference. However, we recommend that you configure a user name and password as the first step under advanced configuration to control management access to this device (page 5-28).
Page 57 Advanced Configuration Menu Description Page 802.11b/g Configures the IEEE 802.11b/g interface 5-40 Interface Radio Settings Configures radio signal parameters, such as 5-41 radio channel, transmission rate, and beacon settings Security Configures data encryption with Wired 5-47 Equivalent Protection (WEP) Configures advanced encryption and 5-45 authentication with Wi-Fi Protected Access (WPA)
Page 58: System Identification
SSID – The name of the basic service set provided by the access point. Clients that want to connect to the network through the access point must set their SSID to the same as that of the access point. (Default: SMC; Range: 1-32 characters, case sensitive)
Page 59 (11g), and use the ssid command to set the service set identifier. Then return to the Exec mode, and use the show system command to display the changes to the system identification settings. SMC AP#configure 6-11 SMC-AP(config)#system name R&D 6-20 SMC-AP(config)#interface wireless g 6-68 SMC-AP(if-wireless g)#ssid r&d 6-78...
Page 60: Tcp / Ip Settings
System Configuration TCP / IP Settings Configuring the SMC2552W-G with an IP address expands your ability to manage the access point. A number of access point features depend on IP addressing to operate. Note: You can use the web browser interface to access IP addressing only if the access point already has an IP address that is reachable through your network.
Page 61 Advanced Configuration DHCP Client (Enable) – Select this option to obtain the IP settings for the access point from a DHCP (Dynamic Host Configuration Protocol) server. The IP address, subnet mask, default gateway, and Domain Name Server (DNS) address are dynamically assigned to the access point by the network DHCP server.
Page 62 DNS server addresses use the dns server command. Then use the show interface ethernet command from the Exec mode to display the current IP settings. SMC-AP(config)#interface ethernet 6-68 Enter Ethernet configuration commands, one per line. SMC-AP(if-ethernet)#no ip dhcp 6-71 SMC-AP(if-ethernet)#ip address 192.168.1.2 255.255.255.0 192.168.1.253 6-69 SMC-AP(if-ethernet)#dns primary-server 192.168.1.55 6-68 SMC-AP(if-ethernet)#dns secondary-server 10.1.0.55...
Page 63: Radius
Advanced Configuration Radius Remote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses software running on a central server to control access to RADIUS-aware devices on the network. An authentication server contains a database of user credentials for each user that requires access to the network. A primary RADIUS server must be specified for the SMC2552W-G to implement IEEE 802.1x network access control and Wi-Fi Protected Access (WPA) wireless security.
Page 64 System Configuration Primary Radius Server Setup – Configure the following settings to use RADIUS authentication on the access point. IP Address: Specifies the IP address or host name of the • RADIUS server. Port: The UDP port number used by the RADIUS server for •...
Page 65 Configure the other parameters for the RADIUS server. Then use the show show radius command from the Exec mode to display the current settings for the primary and secondary RADIUS servers. SMC-AP(config)#radius-server address 192.168.1.25 6-46 SMC-AP(config)#radius-server port 181 6-46...
Page 66: Authentication
System Configuration Authentication Wireless clients can be authenticated for network access by checking their MAC address against the local database configured on the access point, or by looking up their MAC addresses on a RADIUS server. The 802.1x protocol can also be configured to check other user credentials such as a user name and password.
Page 67 Advanced Configuration MAC Authentication – You can configure a list of the MAC addresses for wireless clients that are authorized to access the network. This provides a basic level of authentication for wireless clients attempting to gain access to the network. A database of authorized MAC addresses can be stored locally on the SMC2552W-G or remotely on a central RADIUS server.
Page 68 System Configuration • MAC Authentication Settings: Enters specified MAC addresses and permissions into the local MAC database. MAC Address: Physical address of a client. Enter six pairs of hexadecimal digits separated by hyphens; for example, 00-90-D1-12-AB-89. Permission: Select Allow to permit access or Deny to block access.
Page 69 Advanced Configuration The 802.1x EAP packets are also used to pass dynamic unicast session keys and static broadcast keys to wireless clients. Session keys are unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point.
Page 70 System Configuration • Session Key Refresh Rate: The interval at which the access point refreshes unicast session keys for associated clients. (Range: 0-1440 minutes; Default: 0 means disabled) • 802.1x Re-authentication Refresh Rate: The time period after which a connected client must be re-authenticated. During the re-authentication process of verifying the client’s credentials on the RADIUS server, the client remains connected the network.
Page 71 To display the current settings, use the show authentication command from the Exec mode. SMC-AP(config)#mac-authentication server local 6-57 SMC-AP(config)#address filter default denied 6-54 SMC-AP(config)#address filter entry 00-70-50-cc-99-1a denied 6-55 SMC-AP(config)#address filter entry 00-70-50-cc-99-1b allowed 6-55 SMC-AP(config)#address filter entry 00-70-50-cc-99-1c allowed 6-55...
Page 72 RADIUS server (not shown in the following example). To display the current settings, use the show authentication command from the Exec mode. SMC-AP(config)#mac-authentication server remote 6-57 SMC-AP(config)#mac-authentication session-timeout 300 6-58 SMC-AP(config)#exit SMC-AP#show authentication 6-59 Authentication Information...
Page 73 802.1x authentication. Set the session and broadcast key refresh rate, and the re-authentication timeout. To display the current settings, use the show authentication command from the Exec mode. SMC-AP(config)#802.1x supported 6-51 SMC-AP(config)#802.1x broadcast-key-refresh-rate 5 6-52 SMC-AP(config)#802.1x session-key-refresh-rate 5 6-53 SMC-AP(config)#802.1x session-timeout 300 6-54...
Page 74: Filter Control
System Configuration Filter Control The access point can employ VLAN ID and network traffic frame filtering to control access to network resources and increase security. Native VLAN ID – The VLAN ID assigned to wireless clients that are not assigned to a specific VLAN by RADIUS server configuration.
Page 75 Advanced Configuration VLAN IDs can be mapped to specific wireless clients, allowing users to remain within the same VLAN as they move around a campus site. This feature can also be used to control access to network resources from wireless clients, thereby improving security.
Page 76 System Configuration When VLAN filtering is enabled, the access point must also have 802.1x authentication enabled and a RADIUS server configured. Wireless clients must also support 802.1x client software to be assigned to a specific VLAN. When VLAN filtering is disabled, the access point ignores the VLAN tags on any received frames.
Page 77 When you change the access point’s VLAN support setting, you must reboot the access point to implement the change. To view the current VLAN settings, use the show system command. SMC-AP(config)#native-vlanid 3 6-100 SMC-AP(config)#vlan enable 6-99 Reboot system now? <y/n>: y...
Page 78 To display the current settings, use the show filters command from the Exec mode. SMC-AP(config)#filter local-bridge 6-60 SMC-AP(config)#filter ap-manage 6-61 SMC-AP(config)#filter ethernet-type enable 6-62 SMC-AP(config)#filter ethernet-type protocol ARP 6-63 SMC-AP(config)#exit SMC-AP#show filters 6-64 Protocol Filter Information ========================================================= Local Bridge :ENABLED...
Page 79: Snmp
Advanced Configuration SNMP You can use a network management application such as SMC’s EliteView to manage the SMC2552W-G via the Simple Network Management Protocol (SNMP) from a network management station. To implement SNMP management, the SMC2552W-G must have an IP address and subnet mask, configured either manually or dynamically.
Page 80 System Configuration SNMP – Enables or disables SNMP management access and also enables the access point to send SNMP traps (notifications). SNMP management is enabled by default. Location – A text string that describes the system location. (Maximum length: 20 characters) Contact –...
Page 81 The snmp-server host command defines a trap receiver host. To view the current SNMP settings, use the show snmp command. SMC-AP(config)#snmp-server enable server 6-37 SMC-AP(config)#snmp-server community alpha rw 6-35 SMC-AP(config)#snmp-server community beta ro SMC-AP(config)#snmp-server location WC-19 6-39...
Page 82: Administration
System Configuration Administration Changing the Password Management access to the web and CLI interface on the SMC2552W-G is controlled through a single user name and password. You can also gain additional access security by using control filters (see “Filter Control” on page 5-20). To protect access to the management interface, you need to configure an Administrator’s user name and password as soon as possible.
Page 83 Advanced Configuration Confirm New Password – Enter the password again for verification. CLI Commands for the User Name and Password – Use the username and password commands from the CLI configuration mode. SMC-AP(config)#username bob 6-21 SMC-AP(config)#password smcadmin 6-22 SMC-AP# 5-29...
Page 84 You can upgrade new SMC2552W-G software from a local file on the management workstation, or from an FTP or TFTP server. New software may be provided periodically on SMC’s web site (http://www.smc.com). After upgrading new software, you must reboot the SMC2552W-G to implement the new code.
Page 85 Advanced Configuration If you need to download from an FTP or TFTP server, take the following additional steps: Obtain the IP address of the FTP or TFTP server where the • access point software is stored. If upgrading from an FTP server, be sure that you have an •...
Page 86 System Configuration server is 255 characters or 32 characters for files on the access point. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”) IP Address: IP address or host name of FTP or TFTP server. • Username: The user ID used for login on an FTP server. •...
Page 87 SMC-AP#copy tftp file 6-42 1. Application image 2. Config file 3. Boot block image Select the type of download<1,2,3>: [1]:1 TFTP Source file name:smc-img.bin TFTP Server IP:192.168.1.19 SMC-AP#dir 6-44 File Name Type File Size --------------------------...
Page 88: System Log
System Configuration System Log The SMC2552W-G can be configured to send event and error messages to a System Log Server. The system clock can also be synchronized with a time server, so that all the messages sent to the Syslog server are stamped with the correct time and date. Enabling System Logging The SMC2552W-G supports a logging process that can control error messages saved to memory or sent to a Syslog server.
Page 89 Advanced Configuration Logging Level – Sets the minimum severity level for event logging. The system allows you to limit the messages that are logged by specifying a minimum severity level. The following table lists the error message levels from the most severe (Alert) to least severe (Debug).
Page 90 Syslog server. To view the current logging settings, use the show logging command. SMC-AP(config)#logging on 6-24 SMC-AP(config)#logging level alert 6-26 SMC-AP(config)#logging console 6-25 SMC-AP(config)#logging host 1 10.1.0.3 514 6-24 SMC-AP(config)#logging facility-type 19 6-27 SMC-AP(config)#exit SMC-AP#show logging 6-27 Logging Information...
Page 91 Advanced Configuration Configuring SNTP Simple Network Time Protocol (SNTP) allows the SMC2552W-G to set its internal clock based on periodic updates from a time server (SNTP or NTP). Maintaining an accurate time on the access point enables the system log to record meaningful dates and times for event entries.
Page 92 To view the current SNTP settings, use the show sntp command. SMC-AP(config)#sntp-server ip 10.1.0.19 6-28 SMC-AP(config)#sntp-server enable 6-29 SMC-AP(config)#sntp-server timezone +8...
Page 93 Advanced Configuration CLI Commands for the System Clock – The following example shows how to manually set the system time when SNTP server support is disabled on the access point. SMC-AP(config)#no sntp-server enable 6-29 SMC-AP(config)#sntp-server date-time 6-30 Enter Year<1970-2100>: 2004 Enter Month<1-12>: 10...
Page 94: Radio Interface
System Configuration Radio Interface The IEEE 802.11b and 802.11g interface includes configuration options for radio signal characteristics and wireless security features. The access point can operate in three modes, IEEE 802.11b only, 802.11g only, or a mixed 802.11b/g mode. Also note that 802.11g is backward compatible with 802.11b.
Page 95: Radio Settings (802.11G)
Radio Interface Radio Settings (802.11g) The IEEE 802.11g standard operates within the 2.4 GHz band at up to 54 Mbps. Also note that because the IEEE 802.11g standard is an extension of the IEEE 802.11b standard, it allows clients with 802.11b wireless network cards to associate to an 802.11g access point.
Page 96 System Configuration Radio Channel – The radio channel that the access point uses to communicate with wireless clients. When multiple access points are deployed in the same area, set the channel on neighboring access points at least four channels apart to avoid interference with each other. For example, in the United States you can deploy up to four access points in the same area (e.g., channels 1, 6, 11).
Page 97 Radio Interface interfere with the operation of other radio devices in the service area. (Options: 100%, 50%, 25%, 12%, minimum; Default: 100%) Maximum Station Data Rate – The maximum data rate at which a client can connect to the access point. The maximum transmission distance is affected by the data rate.
Page 98 System Configuration sending of a data frame. After receiving an RTS frame, the station sends a CTS (clear to send) frame to notify the sending station that it can start sending data. If the RTS threshold is set to 0, the access point never sends RTS signals.
Page 99 Enter Wireless configuration commands, one per line. SMC-AP(if-wireless g)#description RD-AP#3 6-75 SMC-AP(if-wireless g)#ssid r&d 6-78 SMC-AP(if-wireless g)#channel auto 6-77 SMC-AP(if-wireless g)#ssid-broadcast 6-75 SMC-AP(if-wireless g)#select-antenna-mode right antenna 6-74 SMC-AP(if-wireless g)#radio-mode g 6-73 SMC-AP(if-wireless g)#transmit-power full 6-86 SMC-AP(if-wireless g)#speed 6 6-76 SMC-AP(if-wireless g)#max-association 32...
Page 100 System Configuration SMC-AP#show interface wireless g 6-95 Wireless Interface Information =========================================================== ----------------Identification----------------------------- Description : Enterprise 802.11g Access Point SSID : r&d Channel : 11 (AUTO) Status : Enable ----------------802.11 Parameters-------------------------- Transmit Power : HALF (10 dBm) Max Station Data Rate...
Page 101: Security
Radio Interface Security The SMC2552W-G is configured by default as an “open system,” which broadcasts a beacon signal including the configured SSID. Wireless clients can read the SSID from the beacon, and automatically reset their SSID to allow immediate connection to the nearest access point.
Page 102 System Configuration The security mechanisms that may be employed depend on the level of security required, the network and management resources available, and the software support provided on wireless clients. A summary of wireless security considerations is listed in the following table. Security Client Implementation Considerations...
Page 103 Radio Interface Wired Equivalent Privacy (WEP) WEP provides a basic level of security, preventing unauthorized access to the network and encrypting data transmitted between wireless clients and the access point. WEP uses static shared keys (fixed-length hexadecimal or alphanumeric strings) that are manually distributed to all clients that want to use the network.
Page 104 System Configuration Setting up shared keys enables the basic IEEE 802.11 Wired Equivalent Privacy (WEP) on the access point to prevent unauthorized access to the network. If you choose to use WEP shared keys instead of an open system, be sure to define at least one static WEP key for user authentication and data encryption.
Page 105 Radio Interface Shared Key Setup – Select 64 Bit, 128 Bit, or 152 Bit key length. Note that the same size of encryption key must be supported on all wireless clients. (Default: 128 Bit) Key Type – Select the preferred method of entering WEP encryption keys on the access point and enter up to four keys: •...
Page 106 6-68 Enter Wireless configuration commands, one per line. SMC-AP(if-wireless g)#authentication shared 6-82 SMC-AP(if-wireless g)#encryption 128 6-83 SMC-AP(if-wireless g)#multicast-cipher wep 6-88 SMC-AP(if-wireless g)#key 1 128 ascii abcdeabcdeabc 6-84 SMC-AP(if-wireless g)#transmit-key 1 6-85 SMC-AP(if-wireless g)#end SMC-AP(config)#no 802.1x 6-51 SMC-AP(config)#end SMC-AP#show interface wireless g 6-95 Wireless Interface 802.11g Information...
Page 107 802.1x to required with 802.1x command, and disable MAC authentication with the mac-authentication command. To view the current 802.11g security settings, use the show interface wireless g command (not shown in example). SMC-AP(config)#interface wireless g 6-68 Enter Wireless configuration commands, one per line. SMC-AP(if-wireless g)#authentication open...
Page 108 System Configuration Wi-Fi Protected Access (WPA) WPA employs a combination of several technologies to provide an enhanced security solution for 802.11 wireless networks. The SMC2552W-G supports the following WPA components and features: IEEE 802.1x and the Extensible Authentication Protocol (EAP): WPA employs 802.1x as its basic framework for user authentication and dynamic key management.
Page 109 Radio Interface prevents users from accidentally joining a rogue network. Only when a RADIUS server has authenticated a user’s credentials will encryption keys be sent to the access point and client. Note: To implement WPA on wireless clients requires a WPA-enabled network card driver and 802.1x client software that supports the EAP authentication type that you want to use.
Page 110 System Configuration WPA security and which are using legacy WEP. The access point uses TKIP unicast data encryption keys for WPA clients and WEP unicast keys for WEP clients. The global encryption key for multicast and broadcast traffic must be the same for all clients, therefore it restricts encryption to a WEP key.
Page 111 Radio Interface WPA Key Management – WPA can be configured to work in an enterprise environment using IEEE 802.1x and a RADIUS server for user authentication. For smaller networks, WPA can be enabled using a common pre-shared key for client authentication with the access point.
Page 112 System Configuration WPA Pre-Shared Key Type – If the WPA pre-shared-key mode is used, all wireless clients must be configured with the same key to communicate with the access point. • Hexadecimal: Enter a key as a string of 64 hexadecimal numbers.
Page 113 Enter Wireless configuration commands, one per line. SMC-AP(if-wireless g)#authentication open 6-82 SMC-AP(if-wireless g)#encryption 128 6-83 SMC-AP(if-wireless g)#wpa-clients required 6-89 SMC-AP(if-wireless g)#wpa-mode pre-shared-key 6-91 SMC-AP(if-wireless g)#wpa-psk-type alphanumeric 6-93 SMC-AP(if-wireless g)#wpa-preshared-key ASCII asecret 6-92 SMC-AP(if-wireless g)#end SMC-AP(config)#no 802.1x 6-51 SMC-AP(config)#no mac-authentication 6-57 5-59...
Page 114 Then set 802.1x to required, and disable MAC authentication. To view the current 802.11g security settings, use the show interface wireless g command (not shown in example). SMC-AP(config)#interface wireless g 6-68 Enter Wireless configuration commands, one per line. SMC-AP(if-wireless g)#authentication open...
Page 115: Status Information
Status Information Status Information The Status page includes information on the following items: Menu Description Page AP Status Displays configuration settings for the basic 5-61 system and the wireless interface Station Status Shows the wireless clients currently 5-64 associated with the access point Event Logs Shows log messages stored in memory 5-66...
Page 116 System Configuration • System Up Time: Length of time the management agent has been up. MAC Address: The physical layer address for this device. • System Name: Name assigned to this system. • • System Contact: Administrator responsible for the system. •...
Page 117 CLI Commands for Displaying System Settings – To view the current access point system settings, use the show system command from the Exec mode. To view the current radio interface settings, use the show interface wireless g command (see page 6-95). SMC-AP#show system 6-33 System Information ========================================================== Serial Number...
Page 118: Station Status
System Configuration Station Status The Station Status window shows the wireless clients currently associated with the SMC2552W-G. The Station Configuration page displays basic connection information for all associated stations as described below. Note that this page is automatically refreshed every five seconds. Station Address: The MAC address of the wireless client.
Page 119 Key Type: Displays “Open System” or “Shared Key.” CLI Commands for Displaying Station Status – To view status of clients currently associated with the access point, use the show station command from the Exec mode. SMC-AP#show station 6-96 802.11g Station Table Station Address...
Page 120: Event Logs
System Configuration Event Logs The Event Logs window shows the log messages generated by the access point and stored in memory. The Event Logs table displays the following information: Log Time: The time the log message was generated. • Event Level: The logging level associated with this message. •...
Page 121 CLI Commands for Displaying the Event Logs – From the global configuration mode, use the show logging command. SMC-AP#show logging 6-27 Logging Information ============================================...
Page 122 System Configuration 5-68...
Page 123: Command Line Interface
1. At the console prompt, enter the user name and password. (The default user name is “admin” and the default password is “smcadmin.”) When the user name is entered, the CLI displays the “SMC Enterprise AP#” prompt. 2. Enter the necessary commands to complete your desired tasks.
Page 124: Telnet Connection
Password: smcadmin SMC Enterprise AP# Note: Command examples shown later in this chapter abbreviate the console prompt to “SMC-AP” for simplicity. Telnet Connection Telnet operates over the IP transport protocol. In this environment, your management station and any network device you want to manage over the network must have a valid IP address.
Page 125: Entering Commands
2. At the prompt, enter the user name and system password. The CLI will display the “SMC Enterprise AP#” prompt to show that you are using executive access mode (i.e., Exec). 3. Enter the necessary commands to complete your desired tasks.
Page 126: Minimum Abbreviation
To enter commands that require parameters, enter the required parameters after the command keyword. For example, to set a password for the administrator, enter: SMC Enterprise AP(config)#username smith Minimum Abbreviation The CLI will accept a minimum number of characters that uniquely identify a command.
Page 127: Partial Keyword Lookup
Show 802.11 station table system Show system information version Show system version SMC-AP#show The command “show interface?” will display the following information: SMC-AP#show interface ? ethernet Show Ethernet interface wireless Show wireless interface <cr> SMC-AP#show interface Partial Keyword Lookup If you terminate a partial keyword with a question mark, alternatives that match the initial letters are provided.
Page 128: Negating The Effect Of Commands
Command Line Interface Negating the Effect of Commands For many configuration commands you can enter the prefix keyword “no” to cancel the effect of a command or reset the configuration to the default value. For example, the logging command will log system messages to a host server. To disable logging, specify the no logging command.
Page 129: Exec Commands
You can access all other commands only from the configuration mode. To access Exec mode, open a new console session with the user name “admin.” The command prompt displays as “SMC Enterprise AP#” for Exec mode. Username: admin...
Page 130: Command Line Processing
To enter Interface mode, you must enter the “interface ethernet,” or “interface wireless g” command while in Global Configuration mode. The system prompt will change to “SMC Enterprise AP(if-ethernet)#,” or SMC Enterprise AP(if-wireless)” indicating that you have access privileges to the associated commands. You can use the end command to return to the Exec mode.
Page 131 Entering Commands Keystroke Function Ctrl-N Enters the next command line in the history buffer. Ctrl-P Shows the last command. Ctrl-R Repeats current command line on a new line. Ctrl-U Deletes the entire line. Ctrl-W Deletes the last word typed. Esc-B Moves the cursor backward one word.
Page 132: Command Groups
Command Line Interface Command Groups The system commands can be broken down into the functional groups shown below. Command Description Page Group General Basic commands for entering configuration 6-11 mode, restarting the system, or quitting the CLI System Controls user name, password, system logs, 6-16 Management browser management options, clock settings,...
Page 133: General Commands
You must also enter Global Configuration mode prior to enabling the context modes for Interface Configuration. see “Using the Command Line Interface” on page 6-1 Default Setting None Command Mode Exec Example SMC-AP#configure Enter Ethernet configuration commands, one per line. SMC-AP(config)# Related Commands end (page 6-12) 6-11...
Page 134: End
None Command Mode Global Configuration, Interface Configuration Example This example shows how to return to the Configuration mode from the Interface Configuration mode: SMC-AP(if-ethernet)#end SMC-AP(config)# exit This command returns to the Exec mode or exits the configuration program. Default Setting...
Page 135: Ping
– Destination unreachable - The gateway for this destination indicates that the destination is unreachable. – Network or host unreachable - The gateway found no corresponding entry in the route table. • Press <Esc> to stop pinging. Example SMC-AP#ping 192.168.2.2 192.168.2.2 is alive SMC-AP# 6-13...
Page 136: Reset
When the system is restarted, it will always run the Power-On Self-Test. Example This example shows how to reset the system: SMC-AP#reset board Reboot system now? <y/n>: y show history This command shows the contents of the command history buffer.
Page 137: Show Line
• Use the up or down arrow keys to scroll through the commands in the history buffer. Example In this example, the show history command lists the contents of the command history buffer: SMC-AP#show history config exit show history SMC-AP# show line This command displays the console port’s configuration settings.
Page 138: System Management Commands
Command Line Interface System Management Commands These commands are used to configure the user name, password, system logs, browser management options, clock settings, and a variety of other system information. Command Function Mode Page Country Setting Sets the country code for correct radio operation country Sets the access point country code...
Page 139 System Management Commands Command Function Mode Page logging console Initiates logging of error messages to 6-25 the console logging level Defines the minimum severity level for 6-26 event logging logging Sets the facility type for remote logging 6-27 facility-type of syslog messages show logging Displays the state of logging Exec...
Page 140: Country
Command Line Interface country This command configures the access point’s country code, which identifies the country of operation and sets the authorized radio channels. Syntax country <country_code> country_code - A two character code that identifies the country of operation. See the following table for a full list of codes. Country Code Country Code Country...
Page 141 • If you purchased an access point outside of the United States, the country code must be set before radio functions are enabled. • The available Country Code settings can be displayed by using the country? command. Example SMC-AP#country ie SMC-AP# 6-19...
Page 142: Prompt
(Maximum length: 255 characters) Default Setting SMC Enterprise AP Command Mode Global Configuration Example SMC Enterprise AP(config)#prompt RD2 RD2(config)# system name This command specifies or modifies the system name for this device. Use the no form to restore the default system name. Syntax...
Page 143: Username
System Management Commands Command Mode Global Configuration Example SMC-AP(config)#system name SMC-AP SMC-AP(config)# username This command configures the user name for management access. Syntax username name name - The name of the user. (Length: 3-16 characters, case sensitive) Default Setting admin...
Page 144: Password
(Length: 3-16 characters, case sensitive) Default Setting smcadmin Command Mode Global Configuration Example SMC-AP(config)#password smc SMC-AP(config)# ip http port This command specifies the TCP port number used by the web browser interface. Use the no form to use the default port. Syntax...
Page 145: Ip Http Server
System Management Commands Command Mode Global Configuration Example SMC-AP(config)#ip http port 1024 SMC-AP(config)# Related Commands ip http server (page 6-23) ip http server This command allows this device to be monitored or configured from a browser. Use the no form to disable this function.
Page 146: Logging On
The logging process controls error messages saved to memory. You can use the logging level command to control the type of error messages that are stored in memory. Example SMC-AP(config)#logging on SMC-AP(config)# logging host This command specifies a syslog server host that will receive logging messages.
Page 147: Logging Console
System Management Commands Default Setting None Command Mode Global Configuration Example SMC-AP(config)#logging host 10.1.0.3 SMC-AP(config)# logging console This command initiates logging of error messages to the console. Use the no form to disable logging to the console. Syntax logging console...
Page 148: Logging Level
Warning conditions (e.g., return false, unexpected return) Notice Normal but significant condition, such as cold start Informational Informational messages only Debug Debugging messages * There are only Critical, Notice, and Informational messages for the current firmware. Example SMC-AP(config)#logging level alert SMC-AP(config)# 6-26...
Page 149: Logging Facility-Type
However, it may be used by the syslog server to sort messages or to store messages in the corresponding database. Example SMC-AP(config)#logging facility 19 SMC-AP(config)# show logging This command displays the logging configuration.
Page 150: Sntp-Server Ip
Command Line Interface Example SMC-AP#show logging Logging Information ============================================ Syslog State : Disabled Logging Host State : Enabled Logging Console State : Disabled Server Domain name/IP : none Logging Level : Error Logging Facility Type : 16 ============================================= SMC-AP# sntp-server ip This command sets the IP address of the servers to which SNTP time requests are issued.
Page 151: Sntp-Server Enable
The access point will poll the time servers in the order specified until a response is received. Example SMC-AP(config)#sntp-server ip 10.1.0.19 SMC-AP# Related Commands sntp-server enable (page 6-29) show sntp (page 6-32)
Page 152: Sntp-Server Date-Time
Command Line Interface Example SMC-AP(config)#sntp-server enable SMC-AP(config)# Related Commands sntp-server ip (page 6-28) show sntp (page 6-32) sntp-server date-time This command sets the system clock. Default Setting 00:14:00, January 1, 1970 Command Mode Global Configuration Example This example sets the system clock to 17:37 January 10, 2004.
Page 153: Sntp-Server Daylight-Saving
Example This sets daylight savings time to be used from July 1st to September 1st. SMC-AP(config)#sntp-server daylight-saving Enter Daylight saving from which month<1-12>: 6 and which day<1-31>: 1 Enter Daylight saving end to which month<1-12>: 9 and which day<1-31>: 1...
Page 154: Sntp-Server Timezone
To display a time corresponding to your local time, you must indicate the number of hours and minutes your time zone is east (before) or west (after) of UTC. Example SMC-AP(config)#sntp-server timezone +8 SMC-AP(config)# show sntp This command displays the current time and configuration settings for the SNTP client.
Page 155: Show System
System Management Commands Example SMC-AP#show sntp SNTP Information ========================================================= Service State : Enabled SNTP (server 1) IP : 137.92.140.80 SNTP (server 2) IP : 192.43.244.18 Current Time : 08 : 04, Jan 10th, 2004 Time Zone : +8 (TAIPEI, BEIJING)
Page 156: Show Version
Command Line Interface Example SMC-AP#show system System Information =========================================================== Serial Number : A341042933 System Up time : 0 days, 1 hours, 8 minutes, 9 seconds System Name : SMC-AP System Location System Contact : Contact System Country Code : IE - IRELAND...
Page 157: Snmp Commands
SNMP Commands SNMP Commands Controls access to this access point from management stations using the Simple Network Management Protocol (SNMP), as well as the hosts that will receive trap messages. Command Function Mode Page snmp-server Sets up the community access string 6-35 community to permit access to SNMP...
Page 158: Snmp-Server Contact
Command Usage If you enter a community string without the ro or rw option, the default is read only. Example SMC-AP(config)#snmp-server community alpha rw SMC-AP(config)# snmp-server contact This command sets the system contact string. Use the no form to remove the system contact information.
Page 159: Snmp-Server Enable Server
SNMP Commands Command Mode Global Configuration Example SMC-AP(config)#snmp-server contact Paul SMC-AP(config)# Related Commands snmp-server location (page 6-39) snmp-server enable server This command enables SNMP management access and also enables this device to send SNMP traps (i.e., notifications). Use the no form to disable SNMP service and trap messages.
Page 160: Snmp-Server Host
Command Line Interface Related Commands snmp-server host (page 6-38) snmp-server host This command specifies the recipient of an SNMP notification. Use the no form to remove the specified host. Syntax snmp-server host <host_ip_address | host_name> <community-string> no snmp-server host • host_ip_address - IP of the host (the targeted recipient). •...
Page 161: Snmp-Server Location
SNMP Commands Example SMC-AP(config)#snmp-server host 10.1.19.23 batman SMC-AP(config)# Related Commands snmp-server enable server (page 6-37) snmp-server location This command sets the system location string. Use the no form to remove the location string. Syntax snmp-server location text no snmp-server location text - String that describes the system location.
Page 162: Show Snmp
Command Line Interface show snmp This command displays the SNMP configuration settings. Command Mode Exec Example SMC-AP#show snmp SNMP Information ============================================ Service State : Enable Community (ro) : ***** Community (rw) : ***** Location : WC-19 Contact : Paul Traps...
Page 163: Bootfile
(.), and the maximum length for file names is 32 characters. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”) • If the file contains an error, it cannot be set as the default file. Example SMC-AP#bootfile smc-img.bin SMC-AP# 6-41...
Page 164: Copy
Command Line Interface copy This command copies a boot file, code image, or configuration file between the access point’s flash memory and a FTP/TFTP server. When you save the configuration settings to a file on a FTP/TFTP server, that file can later be downloaded to the access point to restore system operation.
Page 165: Delete
Example The following example shows how to upload the configuration settings to a file on the TFTP server: SMC-AP#copy config tftp TFTP Source file name:syscfg TFTP Server IP:192.168.1.19 SMC-AP# The following example shows how to download a configuration...
Page 166: Dir
Example This example shows how to delete the test.cfg configuration file from flash memory. SMC-AP#delete test.cfg Are you sure you wish to delete this file? <y/n>: SMC-AP# Related Commands bootfile (page 6-41) dir (page 6-44) This command displays a list of files in flash memory.
Page 167: Radius Client
RADIUS Client Example The following example shows how to display all file information: SMC-AP#dir File Name Type File Size -------------------------- ---- ----------- dflt-img.bin 1044140 smc-img.bin 1068532 syscfg 16860 syscfg_bak 16860 1048576 byte(s) available SMC-AP# RADIUS Client Remote Authentication Dial-in User Service (RADIUS) is a logon...
Page 168: Radius-Server Address
• host_name - Host name of server. (Range: 1-20 characters) Default Setting None Command Mode Global Configuration Example SMC-AP(config)#radius-server address 192.168.1.25 SMC-AP(config)# radius-server port This command sets the RADIUS server network port. Syntax radius-server [secondary] port <port_number> • secondary - Secondary server.
Page 169: Radius-Server Key
RADIUS Client Example SMC-AP(config)#radius-server port 1812 SMC-AP(config)# radius-server key This command sets the RADIUS encryption key. Syntax radius-server [secondary] key <key_string> • secondary - Secondary server. • key_string - Encryption key used to authenticate logon access for client. Do not use blank spaces in the string.
Page 170: Radius-Server Timeout
Command Line Interface Default Setting Command Mode Global Configuration Example SMC-AP(config)#radius-server retransmit 5 SMC-AP(config)# radius-server timeout This command sets the interval between transmitting authentication requests to the RADIUS server. Syntax radius-server [secondary] timeout number_of_seconds • secondary - Secondary server. • number_of_seconds - Number of seconds the access point waits for a reply before resending a request.
Page 171: Show Radius
RADIUS Client show radius This command displays the current settings for the RADIUS server. Default Setting None Command Mode Exec Example SMC-AP#show radius Radius Server Information ======================================== : 192.168.1.25 Port : 1812 : ***** Retransmit Timeout : 10 ======================================== Radius Secondary Server Information ======================================== : 0.0.0.0...
Page 172: 802.1X Port Authentication
Command Line Interface 802.1x Port Authentication The access point supports IEEE 802.1x access control for wireless clients. This control feature prevents unauthorized access to the network by requiring a 802.1x client application to submit user credentials for authentication. Client authentication is then verified via by a RADIUS server using EAP (Extensible Authentication Protocol) before the access point grants client access to the network.
Page 173 802.1x Port Authentication Command Function Mode Page mac- Sets the interval at which associated 6-58 authentication clients will be re-authenticated with session-timeout the RADIUS server authentication database show Shows all 802.1x authentication Exec 6-59 authentication settings, as well as the address filter table 802.1x This command configures 802.1x as optionally supported or as...
Page 174: 802.1X Broadcast-Key-Refresh-Rate
802.1x are allowed to access the network. • 802.1x does not apply to the 10/100Base-TX port. Example SMC-AP(config)#802.1x supported SMC-AP(config)# 802.1x broadcast-key-refresh-rate This command sets the interval at which the broadcast keys are refreshed for stations using 802.1x dynamic keying.
Page 175: 802.1X Session-Key-Refresh-Rate
• Dynamic broadcast key rotation allows the access point to generate a random group key and periodically update all key-management capable wireless clients. Example SMC-AP(config)#802.1x broadcast-key-refresh-rate 5 SMC-AP(config)# 802.1x session-key-refresh-rate This command sets the interval at which unicast session keys are refreshed for associated stations using dynamic keying.
Page 176: 802.1X Session-Timeout
Command Line Interface Example SMC-AP(config)#802.1x session-key-refresh-rate 5 SMC-AP(config)# 802.1x session-timeout This command sets the time period after which a connected client must be re-authenticated. Use the no form to disable 802.1x re-authentication. Syntax 802.1x session-timeout <seconds> no 802.1x session-timeout seconds - The number of seconds. (Range: 0-65535)
Page 177: Address Filter Entry
802.1x Port Authentication Default allowed Command Mode Global Configuration Example SMC-AP(config)#address filter default denied SMC-AP(config)# Related Commands address filter entry (page 6-55) show authentication (page 6-59) address filter entry This command enters a MAC address in the filter table. Syntax address filter entry <mac-address>...
Page 178: Address Filter Delete
Command Line Interface • An entry in the address table may be allowed or denied access depending on the global setting configured for the address entry default command. Example SMC-AP(config)#address filter entry 00-70-50-cc-99-1a allowed SMC-AP(config)# Related Commands address filter default (page 6-54)
Page 179: Mac-Authentication Server
• remote - Authenticate the MAC address of wireless clients with the RADIUS server. Default local Command Mode Global Configuration Example SMC-AP(config)#mac-authentication server remote SMC-AP(config)# Related Commands address filter entry (page 6-55) radius-server address (page 6-46) show authentication (page 6-59) 6-57...
Page 180: Mac-Authentication Session-Timeout
This command sets the interval at which associated clients will be re-authenticated with the RADIUS server authentication database. Use the no form to disable reauthentication. Syntax mac-authentication session-timeout <seconds> seconds - Re-authentication interval. (Range: 0-65535) Default 0 (disabled) Command Mode Global Configuration Example SMC-AP(config)#mac-authentication session-timeout 1 SMC-AP(config)# 6-58...
Page 181: Show Authentication
802.1x Port Authentication show authentication This command shows all 802.1x authentication settings, as well as the address filter table. Command Mode Exec Example SMC-AP#show authentication Authentication Information ========================================================= MAC Authentication Server : REMOTE MAC Auth Session Timeout Value : 1 secs 802.1x...
Page 182: Filtering Commands
Command Line Interface Filtering Commands The commands described in this section are used to filter communications between wireless clients, control access to the management interface from wireless clients, and filter traffic using specific Ethernet protocol types. Command Function Mode Page filter local-bridge Disables communication between 6-60...
Page 183: Filter Ap-Manage
However, it does not affect communications between wireless clients and the wired network. Example SMC-AP(config)#filter local-bridge SMC-AP(config)# filter ap-manage This command prevents wireless clients from accessing the management interface on the access point. Use the no form to disable this filtering.
Page 184: Filter Ethernet-Type Enable
Command Mode Global Configuration Command Usage This command is used in conjunction with the filter ethernet-type protocol command to determine which Ethernet protocol types are to be filtered. Example SMC-AP(config)#filter ethernet-type enable SMC-AP(config)# Related Commands filter ethernet-type protocol (page 6-63) 6-62...
Page 185: Filter Ethernet-Type Protocol
Use the filter ethernet-type enable command to enable filtering for Ethernet types specified in the filtering table, or the no filter ethernet-type enable command to disable all filtering based on the filtering table. Example SMC-AP(config)#filter ethernet-type protocol ARP SMC-AP(config)# Related Commands filter ethernet-type enable (page 6-62) 6-63...
Page 186: Show Filters
Command Line Interface show filters This command shows the filter options and protocol entries in the filter table. Command Mode Exec Example SMC-AP#show filters Protocol Filter Information ========================================================= Local Bridge :ENABLED AP Management :ENABLED Ethernet Type Filter :ENABLED Enabled Protocol Filters...
Page 187: Interface Commands
Interface Commands Interface Commands The commands described in this section configure connection parameters for the Ethernet port and wireless interface. Command Function Mode Page General Interface interface Enters specified interface 6-68 configuration mode Ethernet Interface dns primary-server Specifies the primary name IC-E 6-68 server...
Page 188 Command Line Interface Command Function Mode Page speed Configures the maximum IC-W 6-76 data rate at which a station can connect to the access point channel Configures the radio channel IC-W 6-77 ssid Configures the service set IC-W 6-78 identifier beacon-interval Configures the rate at which IC-W...
Page 189 Interface Commands Command Function Mode Page transmit-key Sets the index of the key to IC-W 6-85 be used for encrypting data frames sent between the access point and wireless clients transmit-power Adjusts the power of the radio IC-W 6-86 signals transmitted from the access point max-association Configures the maximum...
Page 190: Interface
Command Mode Global Configuration Example To specify the 10/100Base-TX network interface, enter the following command: SMC-AP(config)#interface ethernet SMC-AP(if-ethernet)# dns server This command specifies the address for the primary or secondary domain name server to be used for name-to-address resolution. Syntax dns primary-server <server-address>...
Page 191: Ip Address
Global Configuration Command Usage The primary and secondary name servers are queried in sequence. Example This example specifies two domain-name servers. SMC-AP(if-ethernet)#dns primary-server 192.168.1.55 SMC-AP(if-ethernet)#dns secondary-server 10.1.0.55 SMC-AP(if-ethernet)# Related Commands show interface ethernet (page 6-72) ip address This command sets the IP address for the (10/100Base-TX) Ethernet interface.
Page 192 0 to 255, separated by periods. Anything outside this format will not be accepted by the configuration program. Example SMC-AP(config)#interface ethernet Enter Ethernet configuration commands, one per line. SMC-AP(if-ethernet)#ip address 192.168.2.2 255.255.255.0 192.168.1.253 SMC-AP(if-ethernet)# Related Commands ip dhcp (page 6-71) 6-70...
Page 193: Ip Dhcp
DHCP reply is received. Requests will be broadcast periodically by this device in an effort to learn its IP address. (DHCP values can include the IP address, subnet mask, and default gateway.) Example SMC-AP(config)#interface ethernet Enter Ethernet configuration commands, one per line. SMC-AP(if-ethernet)#ip dhcp SMC-AP(if-ethernet)# 6-71...
Page 194: Shutdown
You may also want to disable the Ethernet port for security reasons. Example The following example disables the Ethernet port. SMC-AP(if-ethernet)#shutdown SMC-AP(if-ethernet)# show interface ethernet This command displays the status for the Ethernet interface.
Page 195: Radio-Mode
Interface Commands Default Setting Ethernet interface Command Mode Exec Example SMC-AP#show interface ethernet Ethernet Interface Information ======================================== IP Address : 192.168.2.2 Subnet Mask : 255.255.255.0 Default Gateway : 0.0.0.0 Primary DNS : 192.168.1.55 Secondary DNS : 10.1.0.55 Admin status : Up...
Page 196: Select-Antenna-Mode
Command Line Interface Command Mode Interface Configuration (Wireless g) Example SMC-AP(config)#interface wireless g SMC-AP(if-wireless g)#radio-mode g SMC-AP(if-wireless g)# select-antenna-mode This command selects the built-in antennas or an optional high-gain antenna attached to the socket on the right antenna. Syntax select-antenna-mode <diversity | right antenna>...
Page 197: Description
(Range: 1-80 characters) Default Setting None Command Mode Interface Configuration (Wireless) Example SMC-AP(config)#interface wireless g SMC-AP(if-wireless g)#description RD-AP#3 SMC-AP(if-wireless g)# ssid-broadcast This command opens access to clients without a pre-configured SSID. Use the no form to disable this feature. Syntax...
Page 198: Speed
When SSID broadcast is disabled, the access point will not include its SSID in beacon messages. Nor will it respond to probe requests from clients that do not include a fixed SSID. Example SMC-AP(if-wireless g)#no ssid-broadcast SMC-AP(if-wireless g)# speed This command configures the maximum data rate at which a station can connect to the access point.
Page 199: Channel
802.11g (e.g., channels 1, 6, 11). • For most wireless adapters, the channel for wireless clients is automatically set to the same as that used by the access point to which it is linked. Example SMC-AP(if-wireless g)#channel 1 SMC-AP(if-wireless g)# 6-77...
Page 200: Ssid
Clients that want to connect to the wireless network via an access point must set their SSIDs to the same as that of the access point. Example SMC-AP(if-wireless g)#ssid RD-AP#3 SMC-AP(if-wireless g)# beacon-interval This command configures the rate at which beacon signals are transmitted from the access point.
Page 201: Dtim-Period
The beacon signals allow wireless clients to maintain contact with the access point. They may also carry power-management information. Example SMC-AP(if-wireless g)#beacon-interval 150 SMC-AP(if-wireless g)# dtim-period This command configures the rate at which stations in sleep mode must wake up to receive broadcast/multicast transmissions.
Page 202: Fragmentation-Length
Using higher DTIM values reduces the power used by stations in Power Save mode, but delays the transmission of broadcast/multicast frames. Example SMC-AP(if-wireless g)#dtim-period 100 SMC-AP(if-wireless g)# fragmentation-length This command configures the minimum packet size that can be fragmented when passing through the access point.
Page 203: Rts-Threshold
Example SMC-AP(if-wireless g)#fragmentation-length 512 SMC-AP(if-wireless g)# rts-threshold This command sets the packet size threshold at which a Request to Send (RTS) signal must be sent to the receiving station prior to the sending station starting communications.
Page 204: Authentication
• Access points contending for the wireless medium may not be aware of each other. The RTS/CTS mechanism can solve this “Hidden Node” problem. Example SMC-AP(if-wireless g)#rts-threshold 256 SMC-AP(if-wireless g)# authentication This command defines the 802.11 authentication type allowed by the access point.
Page 205: Encryption
Interface Commands Example SMC-AP(if-wireless g)#authentication shared SMC-AP(if-wireless g)# Related Commands encryption (page 6-83) key (page 6-84) encryption This command defines whether or not WEP encryption is used to provide privacy for wireless communications. Use the no form to disable encryption.
Page 206: Key
• Note that WEP protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet. Example SMC-AP(if-wireless g)#encryption 128 SMC-AP(if-wireless g)# Related Commands key (page 6-84) This command sets the keys used for WEP encryption. Use the no form to delete a configured key.
Page 207: Transmit-Key
• The encryption index, length and type configured in the access point must match those configured in the clients. Example SMC-AP(if-wireless g)#key 1 128 hex 1234512345529 SMC-AP(if-wireless g)#key 2 128 ascii asdeipadjsipd SMC-AP(if-wireless g)#key 3 128 hex 1234512345123 SMC-AP(if-wireless g)#...
Page 208: Transmit-Power
WEP keys during the 802.1x authentication process, these keys do not have to appear in the client’s WEP key list. Example SMC-AP(if-wireless g)#transmit-key 2 SMC-AP(if-wireless g)# transmit-power This command adjusts the power of the radio signals transmitted from the access point.
Page 209: Max-Association
You also have to ensure that high strength signals do not interfere with the operation of other radio devices in your area. Example SMC-AP(if-wireless g)#transmit-power half SMC-AP(if-wireless g)# max-association This command configures the maximum number of clients that can be associated with the access point at the same time.
Page 210: Multicast-Cipher
Command Line Interface multicast-cipher This command defines the cipher algorithm used for broadcasting and multicasting when using Wi-Fi Protected Access (WPA) security. Syntax multicast-cipher <AES | TKIP | WEP> • AES - Advanced Encryption Standard • TKIP - Temporal Key Integrity Protocol •...
Page 211: Wpa-Clients
Because of its strength, and resistance to attack, AES is also being incorporated as part of the 802.11 standard. Example SMC-AP(if-wireless g)#multicast-cipher TKIP SMC-AP(if-wireless g)# wpa-clients This command defines whether Wi-Fi Protected Access (WPA) is required or optionally supported for client stations.
Page 212 RADIUS authentication server that authenticates each user on the network before they join it. WPA also employs “mutual authentication” to prevent a wireless client from accidentally joining a rogue network. Example SMC-AP(if-wireless g)#wpa-client required SMC-AP(if-wireless g)# Related Commands wpa-mode (page 6-91) 6-90...
Page 213: Wpa-Mode
• When the WPA mode is set to “pre-shared-key,” the key must first be generated and distributed to all wireless clients before they can successfully associate with the access point. Example SMC-AP(if-wireless g)#wpa-mode pre-shared-key SMC-AP(if-wireless g)# Related Commands wpa-clients (page 6-89)
Page 214: Wpa-Preshared-Key
• If WPA is used with pre-shared-key mode, all wireless clients must be configured with the same pre-shared key to communicate with the access point. Example SMC-AP(if-wireless g)#wpa-preshared-key ASCII agoodsecret SMC-AP(if-wireless g)# Related Commands wpa-clients (page 6-89) wpa-mode (page 6-91)
Page 215: Wpa-Psk-Type
This command defines the Wi-Fi Protected Access (WPA) preshared-key type. Syntax wpa-psk-type <type> type - Input format. (Options: Alphanumeric, HEX) Default Setting Command Mode Interface Configuration (Wireless) Example SMC-AP(if-wireless g)#wpa-preshared-key ASCII agoodsecret SMC-AP(if-wireless g)# Related Commands wpa-preshared-key (page 6-92) 6-93...
Page 216: Shutdown
Command Line Interface shutdown This command disables the wireless interface. Use the no form to restart the interface. Syntax shutdown no shutdown Default Setting Interface enabled Command Mode Interface Configuration (Wireless) Example SMC-AP(if-wireless g)#shutdown SMC-AP(if-wireless g)# 6-94...
Page 217: Show Interface Wireless
This command displays the status for the wireless interface. Syntax show interface wireless <g> • g - 802.11g radio interface. Command Mode Exec Example SMC-AP#show interface wireless g Wireless Interface Information ========================================================= ----------------Identification--------------------------- Description : Enterprise 802.11g Access Point SSID...
Page 218: Show Station
Command Line Interface show station This command shows the wireless clients associated with the access point. Command Mode Exec Example SMC-AP#show station 802.11g Station Table Station Address : 00-04-E2-41-C2-9D Authenticated : TRUE Associated : TRUE Forwarding Allowed : TRUE SMC-AP#...
Page 219: Iapp Commands
In particular, this can create a problem for clients roaming between access points from different vendors. This command is used to enable or disable 802.11f handover signaling between different access points, especially in a multi-vendor environment. Example SMC-AP(config)#iapp SMC-AP(config)# 6-97...
Page 220: Vlan Commands
Command Line Interface VLAN Commands The access point can enable the support of VLAN-tagged traffic passing between wireless clients and the wired network. Up to 16 VLAN IDs can be mapped to specific wireless clients, allowing users to remain within the same VLAN as they move around a campus site.
Page 221: Vlan
VLAN ID that matches the access point’s native VLAN ID, or with a VLAN tag that matches one of the wireless clients currently associated with the access point. Example SMC-AP(config)#vlan enable Reboot system now? <y/n>: y Related Commands native-vlanid (page 6-100)
Page 222: Native-Vlanid
RADIUS server. If a wireless client does not have a VLAN ID configured on the RADIUS server, the access point assigns the user to its own configured native VLAN ID (a number between 1 and 16). Example SMC-AP(config)#native-vlanid 3 SMC-AP(config)# Related Commands vlan (page 6-99) 6-100...
Page 223: Troubleshooting
Appendix A Troubleshooting Check the following items before you contact local Technical Support. 1. If wireless clients cannot access the network, check the following: • Be sure the access point and the wireless clients are configured with the same Service Set ID (SSID). •...
Page 224 Troubleshooting 2. If the access point cannot be configured using the Telnet, a web browser, or SNMP software: • Be sure to have configured the access point with a valid IP address, subnet mask and default gateway. • If VLANs are enabled on the access point, the management station should be configured to send tagged frames with a VLAN ID that matches the access point’s native VLAN (default VLAN 1, page 5-20).
Page 225 Troubleshooting 4. If you forgot or lost the password: • Set the access point to its default configuration by pressing the reset button on the back panel for 5 seconds or more. Then use the default user name “admin” with the password “smcadmin”...
Page 226: Maximum Distance Table
Troubleshooting Maximum Distance Table Important Notice Maximum distances posted below are actual tested distance thresholds. However, there are many variables such as barrier composition and construction and local environmental interference that may impact your actual distances and cause you to experience distance thresholds far lower than those posted below.
Page 227: Cables And Pinouts
Appendix B Cables and Pinouts Twisted-Pair Cable Assignments Caution: DO NOT plug a phone jack connector into the RJ-45 port. Use only twisted-pair cables with RJ-45 connectors that conform with FCC standards. For 10/100BASE-TX connections, a twisted-pair cable must have two pairs of wires.
Page 228: 10/100Base-Tx Pin Assignments
Cables and Pinouts 10/100BASE-TX Pin Assignments Use unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections: 100-ohm Category 3 or better cable for 10 Mbps connections, or 100-ohm Category 5 or better cable for 100 Mbps connections. Also be sure that the length of any twisted-pair connection does not exceed 100 meters (328 feet).
Page 229: Straight-Through Wiring
Twisted-Pair Cable Assignments Straight-Through Wiring Because the 10/100 Mbps port on the access point uses an MDI pin configuration, you must use “straight-through” cable for network connections to hubs or switches that only have MDI-X ports. However, if the device to which you are connecting supports auto-MDIX operation, you can use either “straight-through”...
Page 230: Console Port Pin Assignments
Cables and Pinouts Console Port Pin Assignments The DB-9 DCE serial port on the front panel of the SMC2552W-G is used to connect to the access point for out-of-band console configuration. The command-line configuration program can be accessed from a terminal, or a PC running a terminal emulation program.
Page 231: Serial Cable Signal Directions For Db-9 Ports
Console Port Pin Assignments Serial Cable Signal Directions for DB-9 Ports DB-9 to DB-9 AP Terminal or PC Reserved Reserved Reserved Reserved...
Page 232 Cables and Pinouts...
Page 233: Specifications
Appendix C Specifications General Specifications Maximum Channels 802.11b/g: FCC/IC: 1-11, ETSI: 1-13, France: 10-13, MKK: 1-14 Maximum Clients Operating Range See “Maximum Distance Table” on page A-4 Data Rate 802.11g: 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps per channel 802.11b: 1, 2, 5.5, 11 Mbps per channel Modulation Type 802.11g: CCK, BPSK, QPSK, OFDM...
Page 234 Specifications Power supply Input: 100-240 AC, 50-60 Hz Output: 3.3 VDC, 4A Power consumption: 13.2 watts PoE (DC) Input voltage: 48 volts, 0.27A, 12.96 watts Note: Power can also be provided to the access point through the Ethernet port based on IEEE 802.3af Power over Ethernet (PoE) specifications.
Page 235: General Specifications
General Specifications EMC Compliance (Class B) FCC Class B (US) ICES-003 (Canada) VCCI (Japan) RCR STD-33A Radio Signal Certification FCC Part 15.247 (2.4GHz) FCC part 15 15.407(b), CISPR 22-96 RSS-210 (Canada) EN 55022, EN55024, EN 300.328 EN 300 826, EN 61000-3-2, EN61000-3-3 ETSI300.328;...
Page 236: Sensitivity
Specifications Sensitivity IEEE 802.11g Data Rate Sensitivity (dBm) 6 Mbps 9 Mbps 12 Mbps 17 Mbps 24 Mbps 36 Mbps 48 Mbps 54 Mbps IEEE 802.11b Data Rate Sensitivity (dBm) 1 Mbps 2 Mbps 5.5 Mbps 11 Mbps...
Page 237: Transmit Power
General Specifications Transmit Power IEEE 802.11g Maximum Output Power (GHz - dBm) Data Rate 2.412 2.417~2.467 2.472 6 Mbps 9 Mbps 12 Mbps 18 Mbps 24 Mbps 36 Mbps 48 Mbps 54 Mbps IEEE 802.11b Maximum Output Power (GHz - dBm) Data Rate 2.412 2.417~2.467...
Page 238 Specifications...
Page 239: Glossary
Glossary 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better UTP cable. 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 or better UTP cable. Access Point A networking device that seamlessly connects wired and wireless networks.
Page 240 Glossary Backbone The core infrastructure of a network. The portion of the network that transports information from one central location to another central location where it is unloaded onto a local system. Basic Service Set (BSS) A set of 802.11-compliant stations and an access point that operate as a fully-connected wireless network.
Page 241 Glossary Extended Service Set (ESS) More than one wireless cell can be configured with the same Service Set Identifier to allow mobile users can roam between different cells with the Extended Service Set. Extensible Authentication Protocol (EAP) An authentication protocol used to authenticate network clients. EAP is combined with IEEE 802.1x port authentication and a RADIUS authentication server to provide “mutual authentication”...
Page 242 Glossary IEEE 802.11g A wireless standard that supports wireless communications in the 2.4 GHz band using Orthogonal Frequency Division Multiplexing (OFDM). The standard provides for data rates of 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps. IEEE 802.11g is also backward compatible with IEEE 802.11b.
Page 243 Glossary Open System A security option which broadcasts a beacon signal including the access point’s configured SSID. Wireless clients can read the SSID from the beacon, and automatically reset their SSID to allow immediate connection to the nearest access point. Orthogonal Frequency Division Multiplexing (ODFM) OFDM/ allows multiple users to transmit in an allocated band by dividing the bandwidth into many narrow bandwidth carriers.
Page 244 Glossary Session Key Session keys are unique to each client, and are used to authenticate a client connection, and correlate traffic passing between a specific client and the access point. Shared Key A shared key can be used to authenticate each client attached to a wireless network.
Page 245 Glossary Wi-Fi Protected Access WPA employs 802.1x as its basic framework for user authentication and dynamic key management to provide an enhanced security solution for 802.11 wireless networks. Wired Equivalent Privacy (WEP) WEP is based on the use of security keys and the popular RC4 encryption algorithm.
Page 246 Glossary Glossary-8...
Page 247: Index
Index console port 1-5 connecting 2-5 Advanced Encryption Standard See pin assignments B-4 required settings 4-2 AES 5-56 country code antennas, positioning 2-4 configuring 4-4, 6-18 authentication 5-12, 6-82 crossover cable B-3 configuring 5-12, 6-82 CSMA/CA 1-1 MAC address 5-13, 6-54, 6-55 CTS 5-44, 6-81 type 5-47, 6-76 data rate, options C-1...
Page 248 Index filter 5-20, 6-54 installation address 5-12, 6-54 hardware 2-1 between wireless clients 5-22, mounting 2-1 6-60 IP address local bridge 5-22, 6-60 BOOTP/DHCP 6-69, 6-71 local or remote 5-12, 6-57 configuring 4-3, 4-8, 5-6, 6-69, management access 5-22, 6-61 6-71 protocol types 5-22, 6-62 VLANs 5-20, 6-98...
Page 249 Index OFDM 1-1 security, options 5-47, 5-48 open system 5-47 session key 5-15, 5-16, 6-53 operating frequency C-1 shared key 5-50, 6-84 Simple Network Management Protocol See SNMP Simple Network Time Protocol See SNTP package checklist 1-2 SNMP 5-25, 6-35 password community name 5-25, 6-35 configuring 5-28, 6-22...
Page 250 Index Telnet VLAN for managenet access 6-2 configuration 5-20, 6-99 Temporal Key Integrity Protocol See native ID 5-20, 6-100 TKIP time zone 5-37, 6-32 TKIP 5-55, 6-88 transmit power, configuring 5-42, WEP 5-49, 6-83 6-86 configuring 5-49, 5-50, 6-83 trap destination 5-26, 6-38 shared key 5-50, 6-84 trap manager 5-26, 6-38 Wi-Fi Protected Access See WPA...
Page 252 81-45-224-2332; Fax 81-45-224-2331 Australia: 61-2-8875-7887; Fax 61-2-8875-7777 India: 91-22-8204437; Fax 91-22-8204443 If you are looking for further contact information, please visit www.smc.com, www.smc-europe.com, or www.smc-asia.com. 38 Tesla Irvine, CA 92618 Model Number: SMC2552W-G Phone: (949) 679-8000 Pub. Number: 149100022700E, E042004-R01...

This manual is also suitable for:

Eliteconnect smc2552w-g

SMC Networks 2552W-G User Manual

1 Introduction

2 Hardware Installation

3 Network Configuration

4 Initial Configuration

5 System Configuration

6 Command Line Interface

Troubleshooting

Cables and Pinouts

10 /100BASE-TX Pin Assignments

Specifications

Glossary

Index

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for SMC Networks 2552W-G

Summary of Contents for SMC Networks 2552W-G