Page 1 Configuration of the FL WLAN 112x/ 102x product family User manual...
Page 2 UM EN SW FL WLAN 112x/102x, revision 01 2024-09-03 This manual is valid for: Designation Item No. FL WLAN 1120 1386091 FL WLAN 1121 1386092 FL WLAN 1020 2702992 FL WLAN 1021 2702993 Phoenix Contact GmbH & Co. KG • Flachsmarktstraße 8 • 32825 Blomberg • Germany phoenixcontact.com...
Page 3: Table Of Contents
3.1.3 Icons and buttons in web-based management ......27 3.2 WBM Information area..................29 3.2.1 Help & Documentation ..............29 3.2.2 Device status..................30 3.2.3 Local Diagnostics ................30 3.2.4 Alarm and events ................31 3.2.5 Connections ..................32 Phoenix Contact 3 / 151 110820_en_01 ...
Page 4 4 Device operating modes......................... 89 4.1 Operating mode:Access point ................89 4.1.1 General information................. 89 4.1.2 Configuring an access point ............90 4.2 Operating mode: Client ..................91 4.2.1 Roaming ................... 91 4.2.2 Compatibility between different WLAN device manufacturers..92 Phoenix Contact 4 / 151 110820_en_01 ...
Page 5 7.2 SNMP interface....................139 7.2.1 Management Information Base (MIB) .......... 140 7.2.2 Agent ....................140 8 VLAN – Virtual Local Area Network....................143 8.1 Example configuration ..................143 8.2 Configuration via CLI...................143 9 Revision history ..........................145 Phoenix Contact 5 / 151 110820_en_01 ...
Page 6 FL WLAN 112x/102x Phoenix Contact 6 / 151 110820_en_01 ...
Page 7: For Your Safety
– Qualified application programmers and software engineers. The users must be familiar with the relevant safety concepts of automation technology as well as applicable standards and other regulations. Phoenix Contact 7 / 151 110820_en_01 ...
Page 8: Field Of Application Of The Product
WLAN 112x/102x with item no. 110821 at phoenixcontact.net/qr/<item_number>. For information about configuration and diagnostics via the Command Line Interface (CLI), refer to the separate UM EN CLI manual with the number 110152: UM EN FL SWITCH CLI Phoenix Contact 8 / 151 110820_en_01 ...
Page 9: Licensing Information On Open Source Software
• Make sure that all medical devices used in the proximity of this device meet the noise susceptibility specifications for this type of radio frequency energy. • Operate the device with a minimum clearance of 20 cm between the transmitter or antenna and your body. Phoenix Contact 9 / 151 110820_en_01 ...
Page 10: Ul Warning Notes
NOTE: The modules (FL WLAN 1021 only) must be installed the final safety enclosure, which has sufficient strength according to UL 61010-1, 61010-2-201 and meets the requirements with respect to spread of fire. Phoenix Contact 10 / 151 110820_en_01 ...
Page 11 140 ft (42.67 m) outside the building. Only use copper cables for the power supply with a permissible temperature range of -30 °C ... 85 °C (for T 60 °C). Phoenix Contact 11 / 151 110820_en_01 ...
Page 12: Security In The Network
• In security-critical applications, always use the device with an additional security appliance. Phoenix Contact offers security appliances in the mGuard product range. The mGuard routers connect various networks for the remote maintenance and protection of the local network and protect these networks against cyberattacks.
Page 13: Startup And Function
IP address assignment mechanism, e.g., via BootP, DHCP, web-based management. If you want to reactivate the initial IP configuration at a later date, you can reset the device. See Resetting to the default settings oder Quick Setup. Phoenix Contact 13 / 151 110820_en_01 ...
Page 14: Configuration In The Delivery State
• Operating mode: MCB (client) • SSID: PhoenixContact, encryption WPA2: 2bchanged • Transmission power: 5 dBm • Confidential web view is activated. You will find your firmware version in web-based management (WBM) on the “Device status” page. Phoenix Contact 14 / 151 110820_en_01 ...
Page 15: Meaning Of The Diagnostic And Status Indicators
Blue (on) WLAN interface WLAN interface activated connected* Violet (on) Automatic channel Scan for access selection (only with point DFS) Green (on) WLAN interface in WLAN interface in Idle mode if radar Idle mode Phoenix Contact 15 / 151 110820_en_01 ...
Page 16: General Sequence For Commissioning
Make sure that the PC that will be used for configuration via WBM or CLI has an IP address in the same IP range. Further information on the Command Line Interface (CLI) can be found in the separate CLI manual. Phoenix Contact 16 / 151 110820_en_01 ...
Page 17: Resetting To The Default Settings
The device is reset to the default settings and restarted. 2.1.5.2 FL WLAN 102x The device has a MODE button. You can use the MODE button to reset the device to the default settings or switch the firmware to the previous version. Phoenix Contact 17 / 151 110820_en_01 ...
Page 18 You now have approx. 1 minute to reset the device to the default settings. • Use a suitable item to press the recessed MODE button for at least 5 seconds. • Release the MODE button again. The device is reset to the default settings and restarted. Phoenix Contact 18 / 151 110820_en_01 ...
Page 19: Switching The Firmware
• Use a suitable item to press the recessed MODE button for at least 3 seconds. The WLAN LED of the device flashes green after switching has been completed. • Release the MODE button again. The device will now start with the previous firmware version. Phoenix Contact 19 / 151 110820_en_01 ...
Page 20: Assigning The Ip Address Via Bootp
Numerous BootP servers are available on the Internet. You can use any of these programs for address assignment. The following section explains IP address assignment using the Phoenix Contact software tool “FL Network Manager” (item no. 2702889). Phoenix Contact 20 / 151 110820_en_01 ...
Page 21: Assigning The Ip Address Via Bootp Using Fl Network Manager
• Configure the network interface of the PC to which the device is connected and select “BootP” operating mode. You can also adjust the subnet mask and configure a default gateway. • Confirm the parameterization with “OK”. Phoenix Contact 21 / 151 110820_en_01 ...
Page 22 • Enter the IP address to be assigned in the “BOOTP/DHCP Reservations” window. The IP parameters are immediately transferred to the device. • You can check whether the IP address assignment was successful in the “IP address” column in the “BOOTP/DHCP SERVER” window. Phoenix Contact 22 / 151 110820_en_01 ...
Page 23 Startup and function FL WLAN 112x/102x You can change the IP parameters set here in web-based management (see Accessing web-based management). Phoenix Contact 23 / 151 110820_en_01 ...
Page 24 Startup and function FL WLAN 112x/102x Phoenix Contact 24 / 151 110820_en_01 ...
Page 25: Configuration And Diagnostics In Web-Based Management
• Open a browser and enter the IP address of the device in the address line. Web-based management opens. • Click “Login” and log in using your access data. In the default settings, the user name is “admin” and the password is “private”. Phoenix Contact 25 / 151 110820_en_01 ...
Page 26: Areas In Web-Based Management
Web-based management is split into the following areas: • Information:General device information • Configuration: Device configuration • Diagnostics: Device-specific diagnostics Figure 3-2 Start page for web-based management (example) Phoenix Contact 26 / 151 110820_en_01 ...
Page 27: Icons And Buttons In Web-Based Management
NOTE: Change initial password With the initial password, unauthorized access is possible. • Change the administrator password immediately after the first login. • Do not share the password. Phoenix Contact 27 / 151 110820_en_01 ...
Page 28 If an SD card is inserted, clicking “Apply&Save” additionally saves the configuration to the SD card. If there is an existing configuration on the SD card, it will be overwritten. Phoenix Contact 28 / 151 110820_en_01 ...
Page 29: Wbm Information Area
On this page, you can also download the following files and software directly from the device: – User Manual: Click “Product page” to access the product page. Here, you can download the current documentation. Phoenix Contact 29 / 151 110820_en_01 ...
Page 30: Device Status
On this page, you will find a brief explanation of the individual LEDs on the device. • Open web-based management (see Accessing web-based management) and log in. • Click “Information, Local Diagnostics”. The FL WLAN 110x/210x devices only have the “US” and “WLAN” LEDs. Phoenix Contact 30 / 151 110820_en_01 ...
Page 31: Alarm And Events
You can activate the function via “Persistent Event Logging” on the “Service” page (see Service). • Open web-based management (see Accessing web-based management) and log in. • Click “Information, Alarm and Events”. Phoenix Contact 31 / 151 110820_en_01 ...
Page 32: Connections
3.2.5 Connections On this page you will find an overview of all currently active connections with other devices. • Open web-based management (see Accessing web-based management) and log in. • Click “Information, Connections”. Phoenix Contact 32 / 151 110820_en_01 ...
Page 33: Interface Status
Figure 3-10 Interface status:WLAN 3.2.7 Licenses On this page, you can view which third-party software is used and the corresponding licenses. • Open web-based management (see Accessing web-based management) and log in. • Click “Information, Licenses”. Phoenix Contact 33 / 151 110820_en_01 ...
Page 34 Configuration and diagnostics in web-based management FL WLAN 112x/102x Figure 3-11 Licenses Tabelle 3-4 Licenses: Parameters Parameters Description Copyright and License Click on the link beside the respective module to jump directly to the corresponding paragraph on copyright and licenses. Phoenix Contact 34 / 151 110820_en_01 ...
Page 35: Wbm Configuration Area
Tabelle 3-5 My Profile: Parameters Parameters Description Username Your user name as the logged-in user is displayed here. You cannot change the name yourself. Rolename The role name your user is assigned to is displayed here. Phoenix Contact 35 / 151 110820_en_01 ...
Page 36 If you delete the user account “snmpv3_user”, the “Individual SNMPv3 Password” option is deactivated. Retype SNMPv3 Password This option is only available if the check box next to “Individual SNMPv3 Password” has been activated. Re-enter the new password. Phoenix Contact 36 / 151 110820_en_01 ...
Page 37: User Management
This option is only available if you selected an existing user account for “Create/Edit User”. Click “Delete” to delete the currently selected user account. This action cannot be undone. The “admin” user account cannot be deleted. Phoenix Contact 37 / 151 110820_en_01 ...
Page 38 Login Attempts Limit This option is only available if you selected “Enable” for “User account locking”. Enter the desired number of login attempts until the account will be locked. The number must be between one and 100. Phoenix Contact 38 / 151 110820_en_01 ...
Page 39 Security Settings” pop-up window. There, you can define minimum requirements for user passwords, e.g., each password must contain a special character (see Pop-up window: User security settings 3.3.2.1 Custom user roles Figure 3-14 Pop-up window: Custom User Roles Phoenix Contact 39 / 151 110820_en_01 ...
Page 40 – No selection: If you do not select either of the two check boxes for a function group, the user role does not receive any right for this function group. For further information on user roles and permissions, see Creating user roles. Phoenix Contact 40 / 151 110820_en_01 ...
Page 41 The value can be between zero and eight characters (default: 0). Minimum number of Special Enter the desired minimum number of special Chars characters (e.g., .#:!?). here. The value can be between zero and eight characters (default: 0). Phoenix Contact 41 / 151 110820_en_01 ...
Page 42: Quick Setup
3.3.4 System On this page, you can make basic system settings such as firmware updates or renaming the device. • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, System”. Phoenix Contact 42 / 151 110820_en_01 ...
Page 43 For further information, please refer to . Tabelle 3-14 Configuration Handling: Parameters System:Configuration Parameters Description Handling Status of Current The status of the current configuration is displayed Configuration here. – Configuration saved: The current configuration is saved to the device. Phoenix Contact 43 / 151 110820_en_01 ...
Page 44 Tabelle 3-16 Device Identification: Parameters System:Device Parameters Description Identification Device Name Enter the desired device name. In the factory default state, the device name corresponds to the device host name. Device Description Optionally, enter a device description. Phoenix Contact 44 / 151 110820_en_01 ...
Page 45: Network
This option is only available if you selected “STATIC” for “IP Address Assignment”. Enter the desired subnet mask. Default Gateway This option is only available if you selected “STATIC” for “IP Address Assignment”. Enter the default gateway. Phoenix Contact 45 / 151 110820_en_01 ...
Page 46 MAC address. See DNS-Host-Name). When you deactivate DNS name resolution, it may take some time until the device can be accessed via the host name. This is due to the DNS cache. Phoenix Contact 46 / 151 110820_en_01 ...
Page 47: Wlan Setting
Outdoor mode If you operate the device outdoors in the European Union or the European Economic Area (EEA) and use the 5 GHz band, you must activate the check box. The Phoenix Contact 47 / 151 110820_en_01 ...
Page 48 (channel bonding). Only available for frequency band 5 GHz (802.11 ax). – 160 MHz: The device is operated on eight channels (channel bonding). Only available for frequency band 5 GHz (802.11 ax). Channel Select the desired channel here. Phoenix Contact 48 / 151 110820_en_01 ...
Page 49: Wlan Interface
"WLAN 2" als normalen Access Point konfigurieren. "WLAN 1" können Sie wahlweise als Access Point oder Client konfigurieren. • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. Phoenix Contact 49 / 151 110820_en_01 ...
Page 50: Service
On the “Service” page, you can activate and deactivate various interfaces and displays, for example, the CLI service, the LEDs, or the SNMP agent. NOTE: Network security at risk Deactivate unused interfaces to prevent unauthorized access. Phoenix Contact 50 / 151 110820_en_01 ...
Page 51 Confidential Web Server Select here whether the “Information” area in web- view based management should be visible without login. – Disable: The “Information” area of web-based management is visible without login data. Access to Phoenix Contact 51 / 151 110820_en_01 ...
Page 52 – MD5/AES For AES protocol, only AES-128 is supported. CLI Service Select here whether the input of CLI commands via Telnet or Secure Shell should be enabled. – Disable:Entry of CLI commands is disabled. Phoenix Contact 52 / 151 110820_en_01 ...
Page 53 Login expire time Enter the time until automatic logout here. You can set a number between 30 and 3,600 seconds. The default value is 1,200 seconds. If you set a value of “0”, automatic logout is disabled. Phoenix Contact 53 / 151 110820_en_01 ...
Page 54 Primary server description This option is only available if you selected “Unicast” for “Network time protocol”. Enter a description of your SNTP server here. Phoenix Contact 54 / 151 110820_en_01 ...
Page 55: Multicast Filtering
This increases the information security in the network and reduces the data traffic. • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, Multicast Filtering”. Figure 3-22 Multicast filtering Phoenix Contact 55 / 151 110820_en_01 ...
Page 56: Security
More information is available in the AH EN INDUSTRIAL SECURITY application note. The application note can be downloaded at phoenixcontact.net/qr/<item_number>. • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, Security”. Phoenix Contact 56 / 151 110820_en_01 ...
Page 57 Configuration and diagnostics in web-based management FL WLAN 112x/102x Figure 3-23 Security Phoenix Contact 57 / 151 110820_en_01 ...
Page 58 Tabelle 3-27 Custom User Roles: Parameters Security:Custom user Parameters Description roles Custom User Roles webpage Click “Custom User Roles” to open the “Custom User Roles” pop-up window. Here, you can define the Phoenix Contact 58 / 151 110820_en_01 ...
Page 59: Certificate Management
Delete Customer Click “Delete” to delete your own signed certificate. CA Certificate Certificat bundle Up-/ Click “Certificate bundle transfer” to open the “File Download Transfer” pop-up window (see ). Phoenix Contact 59 / 151 110820_en_01 ...
Page 60 (all or 1 to 65535). Add new entry Enter the description and MAC address of the WLAN device that you want to add to the allowlist or denylist in accordance with your setting for “Security Mode”. Phoenix Contact 60 / 151 110820_en_01 ...
Page 61 Select the check box to display the shared secret. Server Status The status of the RADIUS server that can be tested via “Test” is displayed here. Test Click “Test” to check whether the configured RADIUS server is available. Phoenix Contact 61 / 151 110820_en_01 ...
Page 62 The LDAP role name is mapped to a local user role here. For further information on LDAP, see . Radius Management- You can enter a numerical value here that is made Privilege-Level available to a user via the RADIUS server during Phoenix Contact 62 / 151 110820_en_01 ...
Page 63 (A-Z) here. The value can be between zero and eight characters (default: 0). Minimum Lower Case Letters Enter the desired minimum number of lowercase letters (a-z) here. The value can be between zero and eight characters (default: 0). Phoenix Contact 63 / 151 110820_en_01 ...
Page 64 The value can be between zero and eight characters (default: 0). Minimum number of Special Enter the desired minimum number of special Chars characters (e.g., .#:!?). here. The value can be between zero and eight characters (default: 0). Phoenix Contact 64 / 151 110820_en_01 ...
Page 65: Wbm Diagnostics Area
If the device is in access point, client, or repeater operating mode, the current WLAN signal strength of the connected devices can be displayed. This function can be used to determine the signal strength when setting up wireless paths. Phoenix Contact 65 / 151 110820_en_01 ...
Page 66 • Open web-based management (see Accessing web-based management) and log in. • Click “Information, Interface Status, WLAN”. • Activate the “Show signal bar” check box (see Figure). Phoenix Contact 66 / 151 110820_en_01 ...
Page 67: Trap Manager
For example, you can be informed about a password change or a firmware change and in this way detect unauthorized access more easily. • Open web-based management (see Accessing web-based management) and log in. • Click “Diagnostics, Trap Manager”. Phoenix Contact 67 / 151 110820_en_01 ...
Page 68 Click on “Send Trap” to test the connection to the trap server. The table lists the SNMP traps that the device can send. Select the actions for which SNMP traps are to be sent. Phoenix Contact 68 / 151 110820_en_01 ...
Page 69: Snapshot
On the “Syslog” page, you can transmit messages or events to one or more servers via UDP. This allows you to analyze the environment and the quality of the connection. • Open web-based management (see Accessing web-based management) and log in. • Click “Diagnostics, Syslog”. Phoenix Contact 69 / 151 110820_en_01 ...
Page 70 Status Select the check boxes in the “Status” column to select those categories whose events are to be sent to the Syslog server. Phoenix Contact 70 / 151 110820_en_01 ...
Page 71: Channel Assignment/Cst
The display shows the current value at the time when the page was accessed. The display is not automatically refreshed. You can repeatedly view the maximum channel assignment (Max MU) of the last ten minutes in percent in the event log. • Click “Information, Alarm & Events”. Phoenix Contact 71 / 151 110820_en_01 ...
Page 72 The value is incremented until the next device start. It can therefore reach very high values after the device has been running for a long time. The moment when the counter increases can indicate an access problem to a diagnostics expert. Phoenix Contact 72 / 151 110820_en_01 ...
Page 73: Rest Api
Figure 3-38 Visualization of the connection data read out for a WLAN connection (example) In the example shown here (see Figure), the connection data read for a WLAN connection is displayed via virtual interface 101. Phoenix Contact 73 / 151 110820_en_01 ...
Page 74: Firmware Update
Accessing web-based management) and log in. • Click “Configuration, System”. • Click “Update Firmware”. ↪ The “Firmware Update” dialog opens. Configuration settings of the device may be lost when you downgrade the firmware. Phoenix Contact 74 / 151 110820_en_01 ...
Page 75: Update Via Http(S)
↪ The firmware is downloaded. The update status is displayed under “Update Status”. • Wait until the “Firmware Update successful” message is displayed at “Update Status”. • Close the “Firmware Update” window. To activate the new firmware, you must restart the device. Phoenix Contact 75 / 151 110820_en_01 ...
Page 76: Update Via Tftp
You can perform data transmission directly via web-based management. • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, System”. • Click “Further configuration handling options”. ↪ The “File Transfer” pop-up window opens. Phoenix Contact 76 / 151 110820_en_01 ...
Page 77: Transfer Via Http(S)
Pop-up window: Certificate Management • Optionally, enter a password in the “Encryption passphrase” field to encrypt the file. • Optionally, enter a name for your configuration or your root CA certificate in the “Configuration Name” field. Phoenix Contact 77 / 151 110820_en_01 ...
Page 78 • Optionally, enter a password in the “Encryption passphrase” field to encrypt the file. • Optionally, enter a name for your snapshot file in “Configuration Name”. • Click “snapshot.tar.gz” to download the snapshot to your PC. ↪ The snapshot file is downloaded to your PC. Phoenix Contact 78 / 151 110820_en_01 ...
Page 79 • Click “Write to Device” to select a file on your PC that is to be transferred to the device. ↪ The selected file is uploaded and installed at the selected port. The current status is displayed under “Update Status”. Phoenix Contact 79 / 151 110820_en_01 ...
Page 80: Transfer Via Tftp
• Click “Write to Device” to select a file on your PC that is to be transferred to the device. ↪ The selected file is uploaded and installed at the selected port. The current status is displayed under “Update Status”. 3.7.2 Transfer via TFTP • Select “TFTP” for “Transfer method”. Phoenix Contact 80 / 151 110820_en_01 ...
Page 81 • Optionally, enter a name for your configuration or your root CA certificate in the “Configuration Name” field. • Click “Start” to start the transfer. ↪ The selected file is uploaded or downloaded. The current status is displayed under “Update Status”. Phoenix Contact 81 / 151 110820_en_01 ...
Page 82 *.tar.gz. • Optionally, enter a name for your snapshot file in “Configuration Name”. • Click “Start” to download the snapshot to your PC. • The snapshot file is downloaded to your PC. Phoenix Contact 82 / 151 110820_en_01 ...
Page 83 • Optionally, enter a name for your RADIUS root certificate in “Configuration Name”. • Click “Start” to upload the file to the device. ↪ The selected file is uploaded and installed at the selected port. The current status is displayed under “Update Status”. Phoenix Contact 83 / 151 110820_en_01 ...
Page 84 • Optionally, enter a name for your RADIUS client certificate at “Configuration Name”. • Click “Start” to upload the file to the device. ↪ The selected file is uploaded and installed at the selected port. The current status is displayed under “Update Status”. Phoenix Contact 84 / 151 110820_en_01 ...
Page 85: Creating User Roles
Permission group Description System Configuration The following pages/functions can be edited and/or viewed with this user role: – Firmware updates – Creating and importing a configuration file – Resetting the device to default settings Phoenix Contact 85 / 151 110820_en_01 ...
Page 86 – Routing parameters – NAT parameters To be able to fully configure the routing and NAT parameters, the user role additionally requires read/write permission for “L2 and L3 Communication” Phoenix Contact 86 / 151 110820_en_01 ...
Page 87 – For WLAN interface 2: – Country – Roaming list – scan – Network SSID – Security mode – Authentication method – Client user ID and password – Phase 2 authentication type Phoenix Contact 87 / 151 110820_en_01 ...
Page 88 • For “Create/Edit User”, select the user to whom you want to assign the user role. Alternatively, create a new user. • For “User Role”, select the desired role. • Confirm your settings with “Apply&Save”. Phoenix Contact 88 / 151 110820_en_01 ...
Page 89: Device Operating Modes
If the application has time requirements, you must also take the number of clients into consideration. For example, for PROFINET applications it is recommended to reduce the number of clients Phoenix Contact 89 / 151 110820_en_01 ...
Page 90: Configuring An Access Point
$%@&/\()=?![]{}+*-_<>#^.,:~| and space. Security mode Here, set the desired encryption method for the WLAN interface. – None: No encryption. This option puts network security at risk. Phoenix Contact 90 / 151 110820_en_01 ...
Page 91: Operating Mode: Client
WLAN. You can choose between different operating modes of the device as a client. 4.2.1 Roaming The process where a WLAN client switches from one access point to another is known as roaming. The roaming speed varies depending on the type of client used. A Phoenix Contact 91 / 151 110820_en_01 ...
Page 92: Compatibility Between Different Wlan Device Manufacturers
The following describes what should be noted relating to the client configuration when using WLAN access points from different manufacturers. The Ethernet protocols that can be transmitted and the number of Ethernet devices are described. Figure 4-2 Overview of “Client” operating modes WLAN Client Mode WLAN Phoenix Contact 92 / 151 110820_en_01 ...
Page 93: Operation As A Single Client (Scb)
(NAT)). “Client (FTB)” operating mode, on the other hand, only supports communication between Phoenix Contact devices. You can connect several devices to a device with “Client (FTB)” operating mode in a layer 2 transparent manner. You must use VxLAN for transparent Layer 2 communication via multiple ...
Page 94 2. Only the device whose MAC address is entered for the client can be accessed via WLAN. 4.2.3.2 Configuring the client (SCB) • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. Phoenix Contact 94 / 151 110820_en_01 ...
Page 95 The SSID is the network ID by means of which the WLAN device can connect to the client. The network SSID can have a maximum length of 32 characters. Letters, numbers, and the following special characters are permitted: $%@&/\()=?![]{}+*-_<>#^.,:~| and space. Phoenix Contact 95 / 151 110820_en_01 ...
Page 96 This option puts network security at risk. Mac address Here, enter the desired MAC address for a manual assignment. To automatically adopt the MAC address of the connected Ethernet device, activate the “Auto” check box. Phoenix Contact 96 / 151 110820_en_01 ...
Page 97 – TTLS: This authentication method uses server authentication and requires phase 2 authentication using the client’s login credentials. – TLS: This authentication method uses client and server authentication. A client key (*.pfx or *.p12) must be provided together with the password. Phoenix Contact 97 / 151 110820_en_01 ...
Page 98 • On the “WLAN Interface” page, set the “Client(SCB)” option for “Operating Mode”. • Define the parameters as desired and click “Apply&Save”. • A WLAN device can now use the defined access data to connect to the wireless interface. • Click “Scan”. Phoenix Contact 98 / 151 110820_en_01 ...
Page 99 • Click “Adopt” next to the desired access point to apply the access point settings. The SSID as well as the encryption settings are applied. The “Passkey” is not accepted. Enter the “Passkey” manually under “Settings”. • Click “Roaming List”. Phoenix Contact 99 / 151 110820_en_01 ...
Page 100 “SELECTED” for “Roaming Channels”. Click “Clear all” to disable all check boxes in the 2.4 and 5 GHz ranges. • Select whether the device should search all available channels for networks or only selected channels. Phoenix Contact 100 / 151 110820_en_01 ...
Page 101: Operation As Multi-Client (Mcb)
MCB mode only supports IPv4 data traffic. Problems may occur during transmission with mixed data traffic. 4.2.4.2 Configuring the client (MCB) • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. Phoenix Contact 101 / 151 110820_en_01 ...
Page 102 The SSID is the network ID by means of which the WLAN device can connect to the client. The network SSID can have a maximum length of 32 characters. Letters, numbers, and the following special characters are permitted: $%@&/\()=?![]{}+*-_<>#^.,:~| and space. Phoenix Contact 102 / 151 110820_en_01 ...
Page 103 This option is not recommended because of its security features. NOTE: Network security at risk If you select “None”, the data is sent without encryption. This option puts network security at risk. Phoenix Contact 103 / 151 110820_en_01 ...
Page 104: Operation As A Fully Transparent Bridge (Ftb)
• Confirm your settings by clicking “Apply&Save”. 4.2.5 Operation as a fully transparent bridge (FTB) 4.2.5.1 General information Properties: – The WLAN device connects several Ethernet devices (connected via Ethernet switches) to the layer 2 access point. Phoenix Contact 104 / 151 110820_en_01 ...
Page 105 – Disable: Roaming is deactivated. The threshold for background scans is set to -94 dBm. This option is used in static configurations without roaming. – Enable: Roaming is activated. The threshold for background scans is set to -60 dBm (default setting). Phoenix Contact 105 / 151 110820_en_01 ...
Page 106 WPA2-PSK encryption.You do not need to enter a passkey, but WPA2-PSK data protection and ease of use are still guaranteed. – WEP: Only available in “Client” (FTB, MCB, SCB) operating mode. This option is not recommended because of its security features. Phoenix Contact 106 / 151 110820_en_01 ...
Page 107 The more channels you select, the longer will roaming take. Only select the channels you want to search for networks. • If you select “SELECTED”, you can now select the channels manually for the 2.4 GHz and 5 GHz ranges. • Confirm your settings by clicking “Apply&Save”. Phoenix Contact 107 / 151 110820_en_01 ...
Page 108: Operating Mode: Client (Nat)
Select the “Client(NAT)” option for the “NAT” operating mode. Roaming Select whether roaming should be activated. – Disable: Roaming is deactivated. The threshold for background scans is set to -94 dBm. This option is used in static configurations without roaming. Phoenix Contact 108 / 151 110820_en_01 ...
Page 109 WPA2. EAP is an established protocol used for this purpose. – ENHANCED OPEN: This encryption corresponds to WPA2-PSK encryption. You do not need to enter a passkey, but WPA2-PSK data protection and ease of use are still guaranteed. Phoenix Contact 109 / 151 110820_en_01 ...
Page 110 – IP Masquerading: For further information, see Configuring IP Masquerading. The other parameters on this page depend on the selected NAT mode and are dealt with in the corresponding sections (see 1-to-1 NAT Configuration IP Masquerading Configuration). Phoenix Contact 110 / 151 110820_en_01 ...
Page 111: 1:1 Nat
Once you have clicked “Apply”, the additional “NAT 1-to-1” option appears. • Click “NAT 1-to-1” to open the 1-to-1 NAT Configuration pop-up window. There, you can make further settings for 1:1 NAT. Phoenix Contact 111 / 151 110820_en_01 ...
Page 112: Example Configuration
4.3.1.2 Example configuration Figure 4-12 1:1 NAT: Example configuration WLAN Interface 192.168.0.250 wlan 1 Setting Scan Roaming List 192.168.0.252 FL WLAN 1000/2000 Client 192.168.0.240 192.168.0.100 192.168.1.240 192.168.1.100 WLAN Interface 192.168.1.240 192.168.1.100 Add new entry Phoenix Contact 112 / 151 110820_en_01 ...
Page 113: Ip Masquerading
– No additional WAN addresses are required apart from the address for the NAT device itself. – No route or gateway configuration necessary in the WAN. Disadvantage: – WAN devices can only communicate with WLAN devices via port forwarding. Phoenix Contact 113 / 151 110820_en_01 ...
Page 114 Once you have clicked “Apply”, the additional “NAT Port Forwarding” option appears. • Click “NAT Port Forwarding” to open the IP Masquerading Configuration pop-up window. There, you can make further settings for IP masquerading. Phoenix Contact 114 / 151 110820_en_01 ...
Page 115 Device operating modes FL WLAN 112x/102x 4.3.2.2 Example configuration Figure 4-15 IP masquerading: Example configuration Phoenix Contact 115 / 151 110820_en_01 ...
Page 116: 1-To-1 Nat Configuration
• Click “Apply” to populate the table with the entered data. • To populate the table with more data, enter the desired parameters again and click “Apply”. • Close the “1-to-1 NAT Configuration” pop-up window. • Click “Scan”. Phoenix Contact 116 / 151 110820_en_01 ...
Page 117: Ip Masquerading Configuration
Here, enter the TCP/UDP port for incoming data packets. Out IP Address Here, enter the IP address for outgoing data packets. This IP address is visible externally. Out TCP/UDP Port Here, enter the TCP/UDP port for outgoing data packets. Phoenix Contact 117 / 151 110820_en_01 ...
Page 118 The more channels you select, the longer will roaming take. Only select the channels you want to search for networks. • If you select “SELECTED”, you can now select the channels manually for the 2.4 GHz and 5 GHz ranges. • Confirm your settings by clicking “Apply&Save”. Phoenix Contact 118 / 151 110820_en_01 ...
Page 119: Operating Mode: Client (Vxlan) And Access Point (Vxlan)
4.4.1 Configuring the client (VXLAN) • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. • Select the “Client(VXLAN)” option as the “Operating Mode”. Figure 4-19 Configuring the client (VXLAN) Phoenix Contact 119 / 151 110820_en_01 ...
Page 120: Configuring The Access Point (Vxlan)
4.4.2 Configuring the access point (VXLAN) • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. • Select the “Access Point(VXLAN)” option as the “Operating Mode”. Figure 4-20 Configuring the access point (VXLAN) Phoenix Contact 120 / 151 110820_en_01 ...
Page 121 • Define the parameters in the “VXLAN Configuration” area as desired and click “Apply&Save”. To set up a VXLAN-capable access point infrastructure, only one device may work in “Access Point(VXLAN)” mode with a specific port. Additional access points are configured in normal “Access Point” mode. Phoenix Contact 121 / 151 110820_en_01 ...
Page 122: Operating Mode: Repeater
You can regard the combination of access point and client as a repeater. In the “Quick Setup” menu, you can configure both virtual wireless interfaces under “Repeater” (see Quick setup). The “WLAN Interface” menu shows both virtual Phoenix Contact 122 / 151 110820_en_01 ...
Page 123: Example Configuration
Figure 4-22 Configuration of two virtual interfaces Do not connect any devices in FTB mode to the access point. Only connect access points to the client (FTB) that support FTB mode (e.g., FL WLAN 510X, FL WLAN 110X/210X). Phoenix Contact 123 / 151 110820_en_01 ...
Page 124: Properties Of Two Virtual Wireless Interfaces
When configuring the virtual wireless interface as a client, it is recommended that only those channels that will be utilized by the application be activated in the “Roaming List”. This increases the performance of the device and the connection time is reduced. Phoenix Contact 124 / 151 110820_en_01 ...
Page 125: Dhcp Service
• In the “DHCP Network Service” drop-down list, select the “Server” option to activate the global DHCP server. If you select “None”, the assignment of IP addresses via DHCP will be deactivated again if applicable. Phoenix Contact 125 / 151 110820_en_01 ...
Page 126: Activating The Global Dhcp Server At All Interfaces
Enter the primary IP address of the NTP server server IP (option 42) that is assigned to the DHCP clients. Secondary Option 42 NTP Enter the secondary IP address of the NTP server server IP (option 42) that is assigned to the DHCP clients. Phoenix Contact 126 / 151 110820_en_01 ...
Page 127: Activating The Dhcp Server On Wlan Interfaces Only
• Activate the DHCP server (see Activating DHCP Service). • Do not enter an IP address for “Pool Start Address”. No IP addresses will then be assigned via the LAN interface. • Click “DHCP WLAN Services”. Phoenix Contact 127 / 151 110820_en_01 ...
Page 128 Enter the primary IP address of the NTP server server IP (option 42) that is assigned to the DHCP clients. Secondary Option 42 Enter the secondary IP address of the NTP server NTP server IP (option 42) that is assigned to the DHCP clients. Phoenix Contact 128 / 151 110820_en_01 ...
Page 129 – Once all addresses of the global address pool have been assigned, no address is assigned on request. – Once all addresses of a WLAN interface have been assigned with the leases not having expired, no more addresses are assigned. Phoenix Contact 129 / 151 110820_en_01 ...
Page 130: Diagnostics
This column shows the status of the client. Lease count This field shows the number of assigned IP addresses. Release Click “Release” to release unused entries again. Pop-up window: DHCP • Click “DHCP Static Leases”. Static Leases Phoenix Contact 130 / 151 110820_en_01 ...
Page 131 Here, enter the MAC address of the device for which you wish to assign a static IP address. Create Click on “Create” to carry out static assignment. Clear static table Click on “Clear” to delete all the static DHCP leases. Phoenix Contact 131 / 151 110820_en_01 ...
Page 132 DHCP Service FL WLAN 112x/102x Phoenix Contact 132 / 151 110820_en_01 ...
Page 133: Radius Certificates
The supplicant sends the access data to the authenticator. The authenticator sends the supplicant’s access data as well as its own access data to the RADIUS server. The RADIUS server sends its response (accept or refuse) to the authenticator. Phoenix Contact 133 / 151 110820_en_01 ...
Page 134: Example Configuration
– Supplicant’s access data: – User name: phoenix_user – Passkey: usersecret111 6.4 Configuring RADIUS 6.4.1 Configuring the authenticator • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. Phoenix Contact 134 / 151 110820_en_01 ...
Page 135 • For “Radius Server”, enter the IP address of your RADIUS server. • For “Radius Server Port”, enter the RADIUS server port in use. • For “Radius Shared Secret”, enter the authenticator’s shared secret. • Click “Apply&Save” to save your settings. Phoenix Contact 135 / 151 110820_en_01 ...
Page 136: Configuring The Supplicant
• Click “Further handling of root certificate” to open the “File Transfer” pop-up window. For further information about the “HTTP” and “TFTP” transfer methods as well as the other parameters, see File transfer. Phoenix Contact 136 / 151 110820_en_01 ...
Page 137: Deactivating Server Identity Verification
This option is not secure. • Open web-based management (see Accessing web-based management) and log in. • Click “Configuration, WLAN Interface”. • For “Authentication method”, select “PEAP”. • For “Root CA validation”, select “Disable”. Phoenix Contact 137 / 151 110820_en_01 ...
Page 138 RADIUS certificates FL WLAN 112x/102x Phoenix Contact 138 / 151 110820_en_01 ...
Page 139: Snmp - Simple Network Management Protocol
(enterprise) area. For example, they may only assign an object (object name and parameters) to an object ID once and publish it. If this object is then no longer required, it is marked as expiring, but not reused, e.g., with other parameters. Phoenix Contact 139 / 151 110820_en_01 ...
Page 140: Management Information Base (Mib)
On request by a manager or in response to a specific event, the agent transmits the collected information to the management station. Phoenix Contact 140 / 151 110820_en_01 ...
Page 141 SNMP FL WLAN 112x/102x Figure 7-1 Schematic representation of SNMP management Phoenix Contact 141 / 151 110820_en_01 ...
Page 142 SNMP FL WLAN 112x/102x Phoenix Contact 142 / 151 110820_en_01 ...
Page 143: Vlan - Virtual Local Area Network
101 operation-mode ap wlan wifi config 101 profile config 1 ssid factory ip interface create wlan wifi config 101 network-ID 2 wlan wifi create 102 wlan wifi config 102 operation-mode ap Phoenix Contact 143 / 151 110820_en_01 ...
Page 144 301 vlan static 301 name vlan_factory vlan create 302 vlan static 302 name vlan_technician network mgmt-vlan 200 vlan routing add 301 2 vlan routing add 302 3 vlan status tagged write wlan apply-settings Phoenix Contact 144 / 151 110820_en_01 ...
Page 145: Revision History
2024-04-18 – Creation of this help (PDF) 03.09.2024 – Update to firmware 3.37 The changes to the firmware can be found in the respective release notes available for download with the firmware on the item page. Phoenix Contact 145 / 151 110820_en_01 ...
Page 146 Figure 3-22 Multicast filtering..............55 Figure 3-23 Security................57 Figure 3-24 Pop-up window: Certificate Management ......59 Figure 3-25 Pop-up window: Port-based security ........ 60 Figure 3-26 Pop-up window: Radius Server Configuration Table..61 Phoenix Contact 146 / 151 110820_en_01 ...
Page 147 Figure 4-6 Configuring the client (SCB): Scan ........99 Figure 4-7 Configuring the client (SCB): Roaming List ....... 100 Figure 4-8 Configuring the client (MCB): Setting........ 102 Figure 4-9 Configuring the client (FTB): Setting......... 105 Phoenix Contact 147 / 151 110820_en_01 ...
Page 148 Figure 6-6 Configuring the supplicant: RADIUS root certificate with file transfer ....................137 Figure 7-1 Schematic representation of SNMP management ... 141 Figure 8-1 Example of network separation via WLAN using VLAN ..143 Phoenix Contact 148 / 151 110820_en_01 ...
Page 149 The receipt of technical documentation (in particular user documentation) does not constitute any further duty on the part of Phoenix Contact to furnish information on alterations to products and/or technical documentation. You are responsible to verify the suitability and intended use of the products in your specific application, in particular with regard to observing the applicable standards and regulations.
Page 150 If there are any problems that cannot be solved using the documentation, please contact your Phoenix Contact subsidiary. Subsidiary contact information is available at phoenixcontact.com. Published by Phoenix Contact GmbH & Co.KG Flachsmarktstraße 8 32825 Blomberg GERMANY If you have any suggestions or ideas for improving the content and layout of our help pages, please send them to: tecdoc@phoenixcontact.com...
Page 151 Phoenix Contact GmbH & Co. KG Flachsmarktstr. 8 32825 Blomberg, Germany Phone: +49 5235 3-00 Email: info@phoenixcontact.com phoenixcontact.com...

This manual is also suitable for:

Fl wlan 102 series Fl wlan 1120 Fl wlan 1121 Fl wlan 1020 Fl wlan 1021 1386091 ... Show all

Phoenix Contact FL WLAN 112 Series Configuration Manual

Quick Links

Need help?

Questions and answers

Related Manuals for Phoenix Contact FL WLAN 112 Series

Summary of Contents for Phoenix Contact FL WLAN 112 Series

This manual is also suitable for:

Table of Contents