Page 1 System Manual MobileLAN™access...
Page 2 The information contained herein is proprietary and is provided solely for the purpose of allowing customers to operate and service Intermec-manufactured equipment and is not to be released, reproduced, or used for any other purpose without written permission of Intermec.
Page 3 MobileLAN access 21XX System Manual. 10/2002 Revised to support the new MobileLAN access WA22 and MobileLAN access WA21. This revision also reflects the name change for this manual from the MobileLAN access 21XX System Manual to the MobileLAN access System Manual.
Page 4 MobileLAN access System Manual...
Page 5: Table Of Contents
Contents Contents Before You Begin.......................xi Safety Summary....................xi Safety Icons ......................xii Global Services and Support ................xii Who Should Read This Document? ..............xiii Related Documents ....................xiii Patent Information ..................... xiv Getting Started ..........................1 Overview of the MobileLAN access Family.................2 Features .........................4 What’s New for Software Releases 1.90? ..............5 Understanding the LEDs ..................6 Understanding the Ports ..................8...
Page 6 Connecting the 2101 to Your Wired LAN ............43 Connecting the 2101 to Power ................43 Installing the WA21 ......................44 Connecting the WA21 to Your Wired LAN ............45 Connecting the WA21 to Power................45 Installing the 2100......................45 Connecting the 2100 to Your Wired LAN ............46 Connecting the 2100 to Power ................46...
Page 7 Contents Configuring the Radios ......................83 About the Radios ......................84 Configuring the IEEE 802.11b Radio ................85 Configuring 802.11b Radio Advanced Parameters..........87 Configuring 802.11b Radio Inbound Filters ............89 Configuring a SpectraLink Network..............91 Configuring the IEEE 802.11a Radio................92 Configuring 802.11a Radio Advanced Parameters ..........94 Configuring 802.11a Radio Inbound Filters............96 Configuring the WLI Forum OpenAir Radio ..............98 Configuring the Master List................100...
Page 8 Contents Configuring Global Parameters ..................135 Configuring Global Flooding ................135 Configuring Global RF Parameters..............138 Configuring Security ......................141 Understanding Security ....................142 Controlling Access to Access Point Menus..............144 Enabling Access Methods ..................144 Setting Up Logins....................145 Configuring the Access Point to Use a Password Server ......146 Changing the Default Login ..............148 Establishing Secure Communications Between Access Points .........150 Enabling Secure Communications Between Access Points and End Devices ....152...
Page 9 Using the Web Browser Interface ............190 Troubleshooting the Access Point...................190 Getting Help With Your Installation ..............190 Using the Configuration Error Messages ..........191 Calling Intermec Technical Support .............191 General Troubleshooting...................192 Troubleshooting the Radios................195 Using LEDs..................195 Using Radio MAC Ping (802.11b Radios) ...........195 Using ICMP Echo................196...
Page 10 Contents Default Settings ........................243 Default Settings ......................244 TCP/IP Settings Menu Defaults ................244 DHCP Server Setup Menu Defaults ..............244 Spanning Tree Settings Menu Defaults..............245 Global Flooding Menu Defaults ............245 Global RF Parameters Menu Defaults ..........246 Ethernet Configuration Menu Defaults .............247 Ethernet Advanced Filters Menu Defaults ..........248 IP Tunnels Menu Defaults ................248 Network Management Menu Defaults...............249...
Page 11: Before You Begin
Safety Summary Your safety is extremely important. Read and follow all warnings and cautions in this document before handling and operating Intermec equipment. You can be seriously injured, and equipment and data can be damaged if you do not follow the safety warnings and cautions.
Page 12: Safety Icons
Web Support Visit the Intermec web site at http://www.intermec.com to download our current manuals in PDF format. To order printed versions of the Intermec manuals, contact your local Intermec representative or distributor. Visit the Intermec technical knowledge base (Knowledge Central) at http://intermec.custhelp.com to review technical information or to request...
Page 13: Who Should Read This Document
Related Documents The Intermec web site at http://www.intermec.com contains many of our documents that you can download in PDF format. To order printed versions of the Intermec manuals, contact your local Intermec representative or distributor. MobileLAN access System Manual xiii...
Page 14: Patent Information
Before You Begin Patent Information Product is covered by one or more of the following patents: 4,910,794; 5,070,536; 5,295,154; 5,349,678; 5,394,436; 5,425,051; 5,428,636; 5,483,676; 5,504,746; 5,546,397; 5,574,979; 5,592,512; 5,680,633; 5,682,299; 5,696,903; 5,740,366; 5,790,536; 5,844,893; 5,862,171; 5,940,771; 5,960,344. There may be other U.S. and foreign patents pending. MobileLAN access System Manual...
Page 15: Getting Started
Getting Started This chapter introduces the MobileLAN™access family of access points, explains their features, and describes how you can use them to expand your data collection network. This chapter covers these topics: • Overview of the MobileLAN access family • How the access point fits in your network •...
Page 16: Overview Of The Mobilelan Access Family
IEEE 802.11b and IEEE 802.11a wireless technologies. The 2100 supports legacy 902 MHz wireless technologies. The 2101, 2100, and 2102 support also support legacy WLI Forum OpenAir wireless technologies. The 2101, WA22, 2100, WA21, or 2102 with an IEEE 802.11b radio ™ ® installed is Wi-Fi certified for interoperability with other 802.11b wireless...
Page 17 Chapter 1 — Getting Started Management and Configuration Multiport Bridge Forwarding Spanning Wireless ARP SNMP Database Tree Server DHCP Agent TCP/IP Bridging TFTP HTTP Telnet Ethernet Radio Radio Configuration Port Port 1 Port 2 Port File Settings System Configuration Port 21XXT034.eps RS-232 Connector Ethernet...
Page 18: Features
Chapter 1 — Getting Started Features This table lists the features of the various MobileLAN access products. MobileLAN access Feature Comparison Feature WA22 2101 WA21 2100 2102 2106 Access Point Point-to-Point Bridge (Wireless Bridge) Wireless Access Point (WAP) or Repeater...
Page 19: What's New For Software Releases 1.90
However, some features are only available on newer access points, which have a faster processor and more flash memory. Newer access points are the WA22, 2101B, WA21, 2100D, and the 2106. Note: To determine the model of your access point, from the menu choose Maintenance >...
Page 20: Understanding The Leds
• Fast roaming for Trakker Antares terminals always enabled Understanding the LEDs The 2102 and 2106 have four LEDs; the WA22, 2101, WA21, and 2100 have five LEDs. The WA22, 2101, WA21, and 2100 have a separate LED for each of the radios. To use the LEDs to help troubleshoot the radios, see “Troubleshooting the Radios”...
Page 21 Root/ Power Wired LAN error 21XXT003.eps WA21 and 2100 LEDs: This illustration shows the LEDs that are on the WA21 and the 2100. For help understanding these LEDs, see the LED Descriptions table on page 6. MobileLAN access System Manual...
Page 22: Understanding The Ports
Used with an appropriate cable, this port connects the access WA21, 2100 only) point to your fiber optic network. To access the ports on the WA21 and the 2100, you must remove the cable access door. To remove the WA21 or 2100 cable access door 1 Unscrew the two thumbscrews on the cable access door.
Page 23 Chapter 1 — Getting Started 10BaseT/100BaseTx Ethernet port 21XXT077.eps Fiber optic Serial port port (optional) WA22 ports: This illustration shows the ports that are on the WA22. For help understanding these ports, see the Port Descriptions table on page 8. Power port Fiber optic port (optional)
Page 24 21XXT071.eps port 10BaseT/ Fiber optic 100BaseTx port (optional) Ethernet port WA21 ports: This illustration shows the ports that are on the WA21. For help understanding these ports, see the Port Descriptions table on page 8. Cable access door Power Serial port 21XXT002.eps...
Page 25: How The Access Point Fits In Your Network
Access Point Environment WA22 and 2101 Use in most indoor environments. WA21 and 2100 Use in locations where an access point is exposed to extreme environments. 2102 and 2106 Use when you have a simple wireless network, do not need mixed radios, or want a point-to-point bridge to a secondary LAN.
Page 26: Using One Access Point In A Simple Wireless Network
Chapter 1 — Getting Started Using One Access Point in a Simple Wireless Network You can use an access point to extend your existing Ethernet network to include wireless end devices. The access point connects directly to your wired network and the end devices provide a wireless extension of the wired LAN.
Page 27: Example - Configuring An 802.11B Access Point
Root Priority Ethernet Bridging Enabled Checked Intermec recommends that you always implement some type of security. Using Multiple Access Points and Roaming Wireless End Devices For larger or more complex environments, you can install multiple access points so wireless end devices can roam from one access point to another.
Page 28 Chapter 1 — Getting Started Host Ethernet UAPUAP 21XXT006.eps This illustration shows a wireless network with multiple access points. Wireless end devices can roam between the access points to communicate with the host and other end devices. An end device initiates a roam when it attaches to a new access point. The access point sends an attach message to the root access point, which in turn forwards a detach message to the previous access point, allowing each access point to update its forwarding database.
Page 29: Example - Configuring An Openair Access Point With Roaming End Devices
Chapter 1 — Getting Started Example - Configuring an OpenAir Access Point with Roaming End Devices Host Ethernet 21XXT007.eps In this example, there is one OpenAir radio in each access point. Wireless end devices can roam between the access points to communicate with the host and other end devices.
Page 30: Using An Access Point As A Wap
Chapter 1 — Getting Started Using an Access Point as a WAP You can extend the range of your wireless network by configuring a dual radio access point as a wireless access point (WAP). The WAP and the wireless end devices it communicates with comprise a secondary LAN. You can position WAPs in strategic locations so they receive data from end devices, and then forward the data to the wired network.
Page 31 Chapter 1 — Getting Started The following procedure explains how to install a simple wireless network with a WAP and no roaming end devices. For help installing a simple wireless network with a WAP and roaming end devices, see the two examples in the next sections.
Page 32 Chapter 1 — Getting Started 4 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 36. 5 Configure the master radio (in the WAP) to communicate with the end devices.
Page 33: Example - Configuring An 802.11B Wap With Roaming End Devices
LAN ID, and frequency as the WAP master radio (IEEE 802.11b-1). You do not need to configure any secondary LAN settings because the WAP is not connected to a secondary LAN. Intermec recommends that you always implement some type of security. MobileLAN access System Manual...
Page 34: Example - Configuring An 802.11A Wap With Roaming End Devices
LAN ID, and frequency as the WAP radio. You do not need to configure any secondary LAN settings because the WAP is not connected to a secondary LAN. Intermec recommends that you always implement some type of security. MobileLAN access System Manual...
Page 35: Example - Configuring An Openair Wap With Roaming End Devices
Chapter 1 — Getting Started Example - Configuring an OpenAir WAP With Roaming End Devices Host Access point 21XXT012.eps In this example, there are two OpenAir radios in the access point and there are two OpenAir radios in the WAP. To provide better throughput, one master radio in the access point is configured to allow wireless end devices to communicate with it and the other master radio is configured to communicate only with the WAP station radio.
Page 36: Using Access Points To Create A Point-To-Point Bridge
Chapter 1 — Getting Started Using Access Points to Create a Point-to-Point Bridge You can use access points to create a point-to-point bridge between two wired LANs. That is, you can have one access point wired to a primary LAN in one building and have a second access point wired to a secondary LAN in another building.
Page 37 Chapter 1 — Getting Started You need to set the root priorities and secondary LAN bridge priorities for the bridge on the primary LAN and for the bridge on the secondary LAN: • On the primary LAN bridge, set the root priority to a number that is greater than the root priority of the secondary LAN bridge.
Page 38 Chapter 1 — Getting Started In the Node Type field choose Station, and then click Submit Changes. (OpenAir) Click Master List. The Master List screen appears. In the Channel field and Subchannel field, enter the channel and subchannel of all master radios with which this station can communicate.
Page 39 Chapter 1 — Getting Started In the Root Priority field, enter 0. In the Secondary LAN Bridge Priority field, enter a number other than zero. In the Secondary LAN Flooding field choose Enabled. 5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 40: Example - Configuring An 802.11B Bridge
802.11b Radio SSID Manufacturing Manufacturing Spanning LAN ID Tree Settings Root Priority Ethernet Bridging Checked Checked Enabled Secondary LAN Bridge Priority Secondary LAN Disabled Enabled Flooding Intermec recommends that you always implement some type of security. MobileLAN access System Manual...
Page 41: Example - Configuring An 802.11A Bridge
802.11b Radio SSID Manufacturing Manufacturing Spanning LAN ID Tree Settings Root Priority Ethernet Bridging Checked Checked Enabled Secondary LAN Bridge Priority Secondary LAN Disabled Enabled Flooding Intermec recommends that you always implement some type of security. MobileLAN access System Manual...
Page 42: Using Dual Radio Access Points For Redundancy
Chapter 1 — Getting Started Using Dual Radio Access Points for Redundancy You can configure WA22s, 2101s, WA21s, and 2100s that have two 802.11b radios, two 802.11a radios, or two OpenAir radios to provide redundancy for your network. During normal operations, end devices send frames to the master radio in one of the access points, which bridges the frames to the wired network.
Page 43: Configuring The Access Point (Setting The Ip Address)
Chapter 1 — Getting Started Configuring the Access Point (Setting the IP Address) The access point will work out of the box if you are using a DHCP server to assign it an IP address. By default, the access point is configured to be a DHCP client and will respond to offers from any DHCP server.
Page 44 Before you use the utility, you must have an active radio connection. To use the MobileLAN access Utility You must use the appropriate Intermec power supply with these devices or equipment damage may occur. Attention: Vous devez utiliser la source d’alimentation Intermec adéquate avec cet appareil sinon vous risquez d’endommager...
Page 45: Using A Communications Program
• an RS-232 null-modem cable. One end of this cable must be a 9-pin socket connector to connect to the serial port on the access point. Intermec offers a 9-socket to 9-socket null-modem cable (P/N 059167). To order this cable, contact your local Intermec representative.
Page 46 ” appears on your Starting system PC screen. The Username field appears. 5 In the Username field type the default username , and then Intermec press Enter. 6 In the Password field type the default password , and then Intermec press Enter.
Page 47 Chapter 1 — Getting Started 7 If you are not using a DHCP server, you need to manually assign an IP address. Configure these parameters in the TCP/IP Settings menu: IP Address A unique IP address. IP Subnet Mask The subnet mask that matches the other devices in your network.
Page 48: Using A Web Browser Interface
Chapter 1 — Getting Started Using a Web Browser Interface After you have set the initial IP address, you can configure, manage, and troubleshoot the access point from a remote location using a web browser interface. The web browser interface has been tested using Internet Explorer v3.0 and later and Netscape Communicator v4.0 and later.
Page 49: Using A Telnet Session
Chapter 1 — Getting Started 4 If necessary, enter a user name and a password. The default username is Intermec and the default password is Intermec. You can define a user name and password. For help, see “Setting Up Logins” in Chapter 6.
Page 50: Saving Configuration Changes
4 If necessary, enter the user name and press Enter. Then, enter the password and press Enter. The default username is Intermec and the default password is Intermec. You can define a user name and password. For help, see “Setting Up Logins” in Chapter 6.
Page 51: Using A Web Browser Interface
Chapter 1 — Getting Started Using a Web Browser Interface 1 On the menu bar, click Save/Discard Changes. This screen appears. Click to use your new configuration the next time you reboot the access Click to use your new point. configuration now.
Page 52 Chapter 1 — Getting Started MobileLAN access System Manual...
Page 53: Installing The Access Points
Installing the Access Points This chapter explains how to install the MobileLAN access products in your data collection network, provides some tips on how to position access points to improve your network performance, and provides some external antenna guidelines. This chapter covers these topics: •...
Page 54: Installation Guidelines
Installation Guidelines Intermec recommends that you have Intermec-certified RF specialist conduct a site survey to determine the ideal locations for all your Intermec wireless network devices. To conduct a proper site survey, you need to have special equipment and training.
Page 55: Cordless Telephones
• Cubicle bracket kit (P/N 069926) • Locking bracket kit (P/N 070184) To order one of these kits, contact your Intermec representative. Intermec also offers a variety of antennas and antenna accessories. For more information, see “Antennas and Antenna Accessories” in Appendix A.
Page 56: Connecting The Wa22 To Your Wired Lan And Power
• Power supply holder kit (P/N 069893) To order one of these kits, contact your Intermec representative. To mount the 2101, follow the instructions in the kit. Intermec offers a variety of antennas and antenna accessories. For more information, see “Antennas and Antenna Accessories”...
Page 57: Connecting The 2101 To Your Wired Lan
“Connecting Power Over Ethernet” on page 53 and the documentation that shipped with your splitter and power bridge. To connect the 2101 to power You must use the appropriate Intermec power supply with this device or equipment damage may occur. Attention: Vous devez utiliser la source d’alimentation Intermec adéquate avec cet appareil sinon vous risquez endommager...
Page 58: Installing The Wa21
2 Mount the WA21. For help see the MobileLAN access WA21 Quick Start Guide and the instructions that shipped with the bracket kit. 3 Connect the WA21 to your wired LAN (unless you are using it as a WAP). For help, see “Connecting the WA21 to Your Wired LAN” on page 45.
Page 59: Connecting The Wa21 To Your Wired Lan
Chapter 2 — Installing the Access Points Connecting the WA21 to Your Wired LAN Unless you are using the WA21 as a WAP, you need to connect it to your Ethernet or fiber optic network. To connect the WA21 to your fiber optic network, you must have a WA21 with the fiber optic option.
Page 60: Connecting The 2100 To Your Wired Lan
Chapter 2 — Installing the Access Points To install the 2100 1 Attach the antenna or antennas. For more information, see “External Antenna Placement Guidelines” on page 54. 2 Mount the 2100. For help see the MobileLAN access 2100 Quick Start Guide and the instructions that shipped with the bracket kit.
Page 61: Installing The 2102/2106
This optional mounting bracket kit is available for the 2102: • Dual antenna bracket kit (P/N 069888) Intermec also offers a variety of antennas and antenna accessories, including diversity antennas. For more information, see “Antennas and Antenna Accessories” in Appendix A. Contact your Intermec representative for more information about ordering access point accessories.
Page 62: Attaching An External Antenna (2102)
Chapter 2 — Installing the Access Points • Place the antenna at 180° when using the 2102 or the 2106 vertically; for example, when it is mounted on a wall or cubicle. 90° 180° 0° 2102G015.eps Antenna positions on the 2102 and 2106: This illustration shows the different ways that you can position the antenna on the 2102 and 2106.
Page 63: Connecting The 2102 Or 2106 To Your Ethernet Network
Chapter 2 — Installing the Access Points 3 Tuck the antenna wire inside the 2102 housing. 4 Remove the punch-out tab from the door. Door Punch-out Pliers 21XXT009.eps 5 Attach the antenna cable to the radio by inserting the cable connector into the radio card.
Page 64: Connecting To Your Fiber Optic Network
The access point boots as soon as you apply power. Connecting to Your Fiber Optic Network You can order your WA22, 2101, WA21, or 2100 access points with a fiber optic option. To connect the access point with the fiber optic option to your fiber optic network, you must have a patch cord and an adapter.
Page 65: Connecting To An Sc Network
Chapter 2 — Installing the Access Points To connect to an MT-RJ network 1 Remove any cable protectors attached to the patch cord and adapter. 2 Connect the access point to your network. MT-RJ connector MT-RJ adapter access point MT-RJ network 21XXU039.eps Connecting to an SC Network...
Page 66: Connecting To An St Network
Chapter 2 — Installing the Access Points SC connector SC adapter access point SC connector SC network 21XXU041.eps SC network Connecting to an ST Network To connect to an ST network, you need: • a patch cord for connecting the MT-RJ transceiver to the ST adapter. •...
Page 67: Connecting Power Over Ethernet
Chapter 2 — Installing the Access Points Connecting Power Over Ethernet The WA22 is powered by power over Ethernet. The WA21 can be powered by AC power or by power over Ethernet or both. You can power the 2101, 2102, or 2106 using power over Ethernet if you connect them to a MobileLAN splitter.
Page 68: External Antenna Placement Guidelines
3 (2101, 2102, 2106) Use an Ethernet cable to connect the splitter to the power bridge. (WA22, WA21) Use an Ethernet cable to connect the power bridge to the Ethernet port of the access point. External Antenna Placement Guidelines Antennas and their placement play a vital role when installing a wireless network.
Page 69: Positioning Antennas For 802.11B And 802.11A Radios
802.11b radio, you must attach it to the transmit/receive port. On the WA22 and the WA21, use antenna connectors 1 and 2 or 3 and 4 to attach antennas to the send/receive ports. On the 2100, use antenna connectors 1 and 3 or 2 and 4 to attach antennas to the send/receive ports.
Page 70: Positioning Antennas For Dual Radio Access Points
Positioning Antennas for an OpenAir WAP For OpenAir WAPs, you must use external antennas and position them at the recommended distances for proper functioning. There are two types of Intermec-recommended antennas you can use: • Omni • Directional You can position the antennas in one of three ways: •...
Page 71 Chapter 2 — Installing the Access Points You can use two omni antennas, two directional antennas or you can use one omni antenna and one directional antenna. The following table shows the minimum distance that must exist between the two antennas. Recommended Antenna Separation for an OpenAir WAP Position 2 Omni Antennas...
Page 72 Chapter 2 — Installing the Access Points MobileLAN access System Manual...
Page 73: Configuring The Ethernet Network
Configuring the Ethernet Network This chapter explains how to configure the MobileLAN access products so that they communicate with your Ethernet network. This chapter explains: • Configuring TCP/IP settings • Configuring other Ethernet or fiber optic settings • Configuring Ethernet filters MobileLAN access System Manual...
Page 74: Configuring The Tcp/Ip Settings
Chapter 3 — Configuring the Ethernet Network Configuring the TCP/IP Settings If you are using a DHCP server to automatically assign an IP address to the access point, go to “Configuring the Access Point as a DHCP Client” on page 61. If you are not using a DHCP server, you need to manually assign some TCP/IP parameters.
Page 75: Configuring The Access Point As A Dhcp Client
Chapter 3 — Configuring the Ethernet Network TCP/IP Settings Descriptions Parameter Explanation IP Address Enter the IP address of the access point. The IP address has the form x.x.x.x, where x is a number from 0 to 255. IP Subnet Mask Enter the subnet mask that matches the other devices in your network.
Page 76: Configuring The Access Point As A Dhcp Server
Chapter 3 — Configuring the Ethernet Network 2 In the DHCP Mode field, choose either Always Use DHCP or Use DHCP if IP Address is Zero. If you choose Use DHCP if IP Address is Zero, make sure that the IP Address field is 0.0.0.0. 3 In the DHCP Server Name field, enter the name of the DHCP server that the access point is to access for automatic address assignment.
Page 77 Chapter 3 — Configuring the Ethernet Network To avoid a single point of failure, you can configure more than one access point to be a DHCP server; however, the access points do not share DHCP client databases. You should configure each DHCP server with a different address pool from which to allocate client IP addresses.
Page 78: Supported Dhcp Server Options
Chapter 3 — Configuring the Ethernet Network 7 Configure the DHCP server. For help, see the next table. 8 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 79: Unsupported Dhcp Server Options
Chapter 3 — Configuring the Ethernet Network Unsupported DHCP Server Options When the access point is acting as a DHCP server, it does not support any DHCP options other than those listed. The DHCP server disregards any DHCP options that are not explicitly required by the DHCP specification. The DHCP server ignores all frames with a non-zero giaddr (gateway IP address).
Page 80: Configuring The Access Point To Send Arp Requests
Chapter 3 — Configuring the Ethernet Network To configure the access point as a NAT server 1 From the menu, click TCP/IP Settings. The TCP/IP Settings screen appears. 2 Verify that the IP Address field and IP Subnet Mask field are configured.
Page 81: Configuring Other Ethernet Or Fiber Optic Settings
Chapter 3 — Configuring the Ethernet Network Configuring Other Ethernet or Fiber Optic Settings Many of the standard Ethernet or fiber optic settings are configured in the TCP/IP Settings screen. For help, see “Configuring the TCP/IP Settings” on page 60. In the Ethernet screen, you can: •...
Page 82: Configuring The Ethernet Address Table
Chapter 3 — Configuring the Ethernet Network 4 Check or clear the Enable Link Status Check check box. 5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 83: Configuring Ethernet Filters
Ethernet frame type filter and predefined subtype filter settings override customizable subtype filter settings. However, Intermec recommends that when creating customizable subtype filters, you do not duplicate existing frame type or predefined subtype filters or unexpected results may occur.
Page 84 Chapter 3 — Configuring the Ethernet Network To set frame type filters 1 From the main menu, click Ethernet > Frame Type Filters. The Frame Type Filters screen appears. 2 For each frame type field, check or clear the check box to configure if the frame types are passed or are dropped.
Page 85: Using Predefined Subtype Filters
Chapter 3 — Configuring the Ethernet Network Frame Type Filter Descriptions Frame Type Explanation DIX IP TCP Ports Primary Internet Protocol Suite (IP) transport protocols. DIX IP UDP Ports SNAP IP TCP Ports SNAP IP UDP Ports DIX IP Other Protocols IP protocols other than TCP or User Datagram SNAP IP Other Protocols Protocol (UDP).
Page 86: Customizing Subtype Filters
Chapter 3 — Configuring the Ethernet Network 2 For each frame subtype field, check or clear the check box to configure if the frame subtypes are passed or are dropped. If you check the check box, the frame subtype is allowed to pass. 3 Click Submit Changes to save your changes.
Page 87 Chapter 3 — Configuring the Ethernet Network 3 In the SubType field, choose the customizable frame subtype. For help, see the next table. 4 In the Value field, enter the two hex pairs. For help, see the next table. 5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 88: Configuring Advanced Filters
You can use filter values and filter expressions to minimize network traffic over the wireless links; however, Intermec recommends that you use advanced Ethernet filters only if you have an extensive understanding of network frames and their contents. Use other existing filters whenever possible.
Page 89 Chapter 3 — Configuring the Ethernet Network To set the value ID and value 1 From the main menu, click Ethernet > Advanced Filters. The Filter Values screen appears. 2 Enter up to 22 value IDs and values. 3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 90 Chapter 3 — Configuring the Ethernet Network 3 Configure the filter expressions parameters. For help, see the next table. 4 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 91 Chapter 3 — Configuring the Ethernet Network Filter Expressions Parameter Descriptions (continued) Parameter Explanation Value ID Represents a value in the Filter Values menu. The bytes after the frame offset are compared to the data pattern indicated by the value. Value ID can be from 0 to 255 and must match one or more value IDs in the Filter Values menu.
Page 92 Chapter 3 — Configuring the Ethernet Network For this example, set these filter expressions. Example 1 –Filter Expressions Parameter Value Explanation ExprSeq The order that you want the expressions executed. You must have an expression for each Value ID that is listed in the Filter Values menu.
Page 93 Chapter 3 — Configuring the Ethernet Network Example 2 This example shows how to use Ethernet filters to discard all DIX IP multicast frames except those from selected devices. Three entries have a value ID of 3 to demonstrate how to enter a list. All entries with the same value ID belong to the same list.
Page 94 Chapter 3 — Configuring the Ethernet Network Set the first filter expression as shown below. Example 2 – First Filter Expression Parameter Value Explanation ExprSeq The first expression that is executed. You must have an expression for each Value ID that is listed in the Filter Values menu.
Page 95 Chapter 3 — Configuring the Ethernet Network Set the second filter expression as shown below. Example 2 – Second Filter Expression Parameter Value Explanation ExprSeq The second expression that is executed. Offset Checks for the DIX IP frame type, which starts 12 bytes from the destination address.
Page 96 Chapter 3 — Configuring the Ethernet Network Set the third filter expression as shown below. Example 2 – Third Filter Expression Parameter Value Explanation ExprSeq The third expression that is executed. Offset Checks the source Ethernet address, which starts 6 bytes from the destination address.
Page 97: Configuring The Radios
Configuring the Radios This chapter explains how to configure the radios in the MobileLAN access products so that they communicate with your wireless end devices. This chapter covers these topics: • Configuring the IEEE 802.11b radio • Configuring the IEEE 802.11a radio •...
Page 98: About The Radios
Dual Radio Radio Access Point Radios Supported Support Independent WA22 802.11b, 802.11a 2101 802.11b, OpenAir WA21 802.11b, 802.11a 2100 802.11b, OpenAir 902 MHz 2102 802.11b, OpenAir 2106 802.11a The next sections explain how to configure the radios that are in your access point.
Page 99: Configuring The Ieee 802.11B Radio
Chapter 4 — Configuring the Radios Configuring the IEEE 802.11b Radio The IEEE 802.11b radio will communicate with other 802.11b radios that have the same: • SSID (Network Name) • Security To configure the 802.11b radio 1 From the main menu, click IEEE 802.11b Radio. The IEEE 802.11b Radio screen appears.
Page 100 Chapter 4 — Configuring the Radios 802.11b Radio Parameter Descriptions Parameter Explanation Node Type Configure the 802.11b radio as a master or station. You can also disable the radio. SSID Enter the network name for this access point. 802.11b radios (Network Name) communicate with other 802.11b radios with the same network name.
Page 101: Configuring 802.11B Radio Advanced Parameters
Chapter 4 — Configuring the Radios The 802.11b channels that are allowed in a given country may change without notice. Be sure you use only those frequencies that are permissible in the given country. Note the following: • FCC countries include the United States, Canada, China, Taiwan, India, Thailand, Indonesia, Malaysia, Hong Kong, and most South American countries.
Page 102 Chapter 4 — Configuring the Radios 802.11b Radio Advanced Parameter Descriptions Parameter Description Data Rate Choose the rate at which the access point transmits data. In general, higher speeds mean shorter range and lower speeds mean longer range. You can set this rate to 11, 5.5, 2, or 1 Mbps. Allow Data Rate Determines if you want the radio to drop to a slower data rate Fallback...
Page 103: Configuring 802.11B Radio Inbound Filters
Chapter 4 — Configuring the Radios 802.11b Radio Advanced Parameter Descriptions (continued) Parameter Description Data/Voice Settings Choose the setting that optimizes the wireless network. (Master radio only) Set to Data Traffic Only if the access point will transmit only data traffic. Set to SpectraLink Traffic Only if the access point will transmit only voice traffic.
Page 104 Chapter 4 — Configuring the Radios To configure 802.11b radio inbound filters 1 From the main menu, click IEEE 802.11b Radio > Inbound Filters. The Inbound Filters screen appears. 2 For each frame type, check or clear each check box. For help, see the next table.
Page 105: Configuring A Spectralink Network
Number of Phones Access Point 802.11b Radios Supported (Voice Only) Supported (Voice and Data) WA21, WA22, 2101 7 per radio (both radios set 7 (one radio set to voice traffic (any), 2100 (any) to voice traffic only) only, the other radio dedicated to...
Page 106: Configuring The Ieee 802.11A Radio
Chapter 4 — Configuring the Radios 4 In the Basic Rate field: if you are using a 2 Mbps SpectraLink telephone, set the Basic Rate • to 2 Mbps. if you are using a 1 Mbps SpectraLink telephone, set the Basic Rate •...
Page 107 Chapter 4 — Configuring the Radios 3 Configure the advanced parameters for the radio. For help, see “Configuring 802.11a Radio Advanced Parameters” on page 94. 4 (Master only) Configure inbound filters. For help, see “Configuring 802.11a Radio Inbound Filters” on page 96. 5 Click Submit Changes to save your changes.
Page 108: Configuring 802.11A Radio Advanced Parameters
Chapter 4 — Configuring the Radios Worldwide Frequencies for the 802.11a Radio Channel ETSI France Japan Israel 5180 (default) 5200 5210 Turbo 5220 5240 5250 Turbo 5260 (default) 5280 5290 Turbo 5300 5320 • Channels marked with an asterisk (*) are not available in the mid-range radio. •...
Page 109 Chapter 4 — Configuring the Radios 3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 36. 802.11a Radio Advanced Parameter Descriptions Parameter Description...
Page 110: Configuring 802.11A Radio Inbound Filters
Chapter 4 — Configuring the Radios 802.11a Radio Advanced Parameter Descriptions (continued) Parameter Description Disallow Network Determines if end devices that have their SSID (Network Name) Name of ‘ANY’ set to ANY or are left blank can associate with this access point. (Master radio only) Clear this check box to allow these end devices to associate with this access point.
Page 111 Chapter 4 — Configuring the Radios To configure 802.11a radio inbound filters 1 From the main menu, click IEEE 802.11a Radio > Inbound Filters. The Inbound Filters screen appears. 2 For each frame type, check or clear each check box. For help, see the next table.
Page 112: Configuring The Wli Forum Openair Radio
LAN ID and security ID as itself, it autoconfigures its channel and subchannel so it can communicate with the master radio. Intermec recommends that you set the security ID to a value other than null. Failure to change the default setting could expose your network to a security breach by an unauthorized wireless device.
Page 113 Sets a security identification value. All access points and end devices with OpenAir radios must have the same security ID to communicate with each other. Intermec recommends that you set this parameter as it helps prevent unauthorized radios from communicating with the access point. Security ID values can be from 0 to 20 characters.
Page 114: Configuring The Master List
Chapter 4 — Configuring the Radios Configuring the Master List The master list contains the channels and subchannels of all the master radios with which this station radio can communicate. To configure the master list 1 From the main menu, click OpenAir Radio > Master List. The Master List screen appears.
Page 115 Chapter 4 — Configuring the Radios Note: If any of the devices are also DHCP clients, you need to check the Allow DHCP check box. To configure OpenAir radio inbound filters 1 From the main menu, click OpenAir Radio > Inbound Filters. The Inbound Filters screen appears.
Page 116: Setting Manual Mac Parameters
Chapter 4 — Configuring the Radios Setting Manual MAC Parameters Intermec recommends that you do not change the MAC Configuration parameter from Default. Occasionally, you may need to fine-tune your OpenAir radio MAC parameters. Note: An inefficient MAC Configuration parameter can adversely affect the performance of your wireless network.
Page 117 Chapter 4 — Configuring the Radios Manual MAC Parameter Descriptions Parameter Explanation Hop Period Specifies how long the master radio stays on a frequency in the (Master radio only) hopping sequence before stepping to the next frequency. Longer time periods result in better throughput while shorter time periods result in faster roaming response and immunity from interference.
Page 118: Configuring The 902 Mhz Radio (2100 Only)
Chapter 4 — Configuring the Radios Manual MAC Parameter Descriptions (continued) Parameter Explanation Fragment Ack Retry Controls the number of times a fragmented frame is resent unsuccessfully before fragmenting. You can set the parameter to a value from 1 to 255. The default is 255, which allows the radio to choose an optimal value.
Page 119 Multicast Filter Determines if this radio can receive and send multicast frames. File Name Specifies the name of the radio’s driver software. Intermec recommends that you change this name only when directed to do so by Intermec Technical Support. Hello Period Controls how frequently the access point broadcasts hello messages on this radio port.
Page 120 Chapter 4 — Configuring the Radios MobileLAN access System Manual...
Page 121: Configuring The Spanning Tree
Configuring the Spanning Tree This chapter explains how to configure the MobileLAN access products so that they create a spanning tree topology. This chapter covers these topics: • About the access point spanning tree • Configuring the spanning tree parameters •...
Page 122: About The Access Point Spanning Tree
This spanning tree contains a root access point on the primary LAN and a designated bridge on the secondary LAN. Within the spanning tree, access points use Intermec’s IAPP (Inter Access Point Protocol) or secure IAPP to communicate with each other across the Ethernet network, over wireless secondary LANs, and through IP tunnels to remote IP subnets.
Page 123: About The Primary Lan And The Root Access Point
Chapter 5 — Configuring the Spanning Tree About the Primary LAN and the Root Access Point The primary LAN (also called the root IP subnet) contains the root access point, which initiates the spanning tree. When choosing the primary LAN, ideally you should choose the IP subnet that contains gateways or servers for the wireless end devices.
Page 124: About Secondary Lans And Designated Bridges
Chapter 5 — Configuring the Spanning Tree About Secondary LANs and Designated Bridges There are two types of secondary LANs: a wireless secondary LAN is connected to the primary LAN wirelessly via a WAP, and a remote IP subnet is connected via an IP tunnel. Comparison of Wireless Secondary LANS and Remote IP Subnets Wireless Secondary LANs (WAPs) Remote IP Subnets (IP Tunnels)
Page 125: About Data Link Tunneling
Ethernet network for an end device, it reverses this process. Unless you need to use data link tunneling, Intermec recommends that you enable Ethernet bridging on all access points. Data link tunneling increases network traffic.
Page 126: About Routable And Non-Routable Network Protocols
IP subnets. Some Intermec wireless end devices use the Intermec NNL protocol, which is a simple Non-routable Network Layer protocol. This NNL protocol is used to carry high-layer data in a local area network environment.
Page 127: Configuring The Spanning Tree Parameters
Chapter 5 — Configuring the Spanning Tree Configuring the Spanning Tree Parameters When you configure the spanning tree parameters, you identify the access point as part of the spanning tree. That is, you specify if this access point is a root or a backup root or a designated bridge or a backup designated bridge, uses data link tunneling to encapsulate wireless traffic or if wireless traffic gets dumped raw on the Ethernet network.
Page 128 Ethernet network and vice versa. Check this check box if you want frames to be forwarded directly to the Ethernet network. Intermec recommends that you enable this parameter on all access points. Enabling this parameter on the root or designated bridge and disabling it on all other access points on the same IP subnet will enable data link tunneling on the IP subnet.
Page 129: About Ip Tunnels
Chapter 5 — Configuring the Spanning Tree Spanning Tree Parameter Descriptions (continued) Parameter Explanation Secondary LAN Determines when this access point can become the designated Bridge Priority bridge in a secondary LAN. The access point that meets all the other requirements and has the highest secondary LAN bridge priority becomes the designated bridge.
Page 130 Chapter 5 — Configuring the Spanning Tree Host Root Primary LAN (root IP subnet) IP router IP network Designated bridge IP router Secondary LAN (remote IP subnet) 21XXT073.eps Only one IP tunnel can exist between the root access point and an access point (usually the designated bridge) on a remote IP subnet.
Page 131: Creating Ip Tunnels
Chapter 5 — Configuring the Spanning Tree When an access point at the endpoint of the IP tunnel receives data from an end device, it uses a standard IP protocol called Generic Router Encapsulation (GRE) to encapsulate the data into a frame. These encapsulated IP/GRE frames use normal IP routing to pass through IP routers to the root access point.
Page 132 Chapter 5 — Configuring the Spanning Tree To create a unicast IP tunnel 1 Make sure that end devices that will roam between the root IP subnet and the remote IP subnet have IP addresses from the root IP subnet and have their default router set the same as the root access point.
Page 133: Using One Ip Multicast Address For Multiple Ip Tunnels
Access points can act as IP hosts and participate in an IP multicast group by enabling IGMP. The Internet Assigned Numbers Authority has allocated 224.0.1.65 for Intermec’s Inter Access Point protocol (IAPP). You must enter this address in the IP address list in the root access point.
Page 134: How Frames Are Forwarded Through Ip Tunnels
5 On the access point at the endpoint of the IP tunnel, set the Mode parameter to Listen. 6 On the root access point, click IP Tunnels > IP Addresses. Enter the Intermec multicast address 224.0.1.65. 7 On the access point at the end of the IP tunnel, check the Enable IGMP check box.
Page 135: Outbound Frames
Chapter 5 — Configuring the Spanning Tree Outbound Frames Frames are forwarded outbound (to a secondary LAN) through an IP tunnel if: • an end device is known to be attached to an access point on a remote IP subnet. •...
Page 136: Frame Types That Are Never Forwarded
Chapter 5 — Configuring the Spanning Tree MAC frames that are forwarded inbound are encapsulated by the access point at the remote end of the IP tunnel, forwarded through the IP tunnel to the root access point, unencapsulated, and placed on the network. Frame Types That Are Never Forwarded Certain frame types are never forwarded through IP tunnels.
Page 137: Configuring Ip Tunnels
Enter the Class D IP multicast address. You also need to enter (Enable IGMP this IP address in the root access point’s IP address list. The checked only) Internet Assigned Numbers Authority has allocated 224.0.1.65 for Intermec’s inter-access-point protocol (IAPP). MobileLAN access System Manual...
Page 138: Configuring The Ip Address List
Chapter 5 — Configuring the Spanning Tree Configuring the IP Address List On the root access point and root candidates, the IP address list contains the IP addresses of all the access points at the endpoint of the IP tunnels. To configure the IP address list 1 From the main menu, click IP Tunnels >...
Page 139: Using Ip Tunnel Frame Type Filters
Chapter 5 — Configuring the Spanning Tree Using IP Tunnel Frame Type Filters The IP tunnel port automatically provides some filtering for wireless end devices. You can define permanent IP tunnel port filters to prevent unwanted frame forwarding through an IP tunnel. ICMP frames with the following types are always forwarded: •...
Page 140 Chapter 5 — Configuring the Spanning Tree To use IP tunnel frame type filters 1 From the main menu, click IP Tunnels > Frame Type Filters. The Frame Type Filters screen appears. 2 For each frame type field, check or clear the check box to configure if the frame types are passed or are dropped.
Page 141: Using Predefined Subtype Filters
Chapter 5 — Configuring the Spanning Tree Frame Type Filter Descriptions Frame Type Explanation DIX IP TCP Ports Primary Internet Protocol Suite (IP) transport protocols. DIX IP UDP Ports SNAP IP TCP Ports SNAP IP UDP Ports DIX IP Other Protocols IP protocols other than TCP or User Datagram SNAP IP Other Protocols Protocol (UDP).
Page 142: Customizing Subtype Filters
Chapter 5 — Configuring the Spanning Tree 2 For each frame subtype field, check or clear the check box to configure if the frame subtypes are passed or are dropped. If you check the check box, the frame subtype is allowed to pass. 3 Click Submit Changes to save your changes.
Page 143 Chapter 5 — Configuring the Spanning Tree 2 For each frame subtype field, check or clear the check box to configure if the frame subtypes are passed or are dropped. If you check the check box, the frame subtype is allowed to pass. 3 In the SubType field and choose the customizable frame subtype.
Page 144: Filter Examples
Chapter 5 — Configuring the Spanning Tree Filter Examples These examples illustrate how to set both Ethernet and IP tunnel filters to optimize network performance. The next illustration includes: • wireless end devices using TCP/IP to communicate with other devices. •...
Page 145: Example 1
Chapter 5 — Configuring the Spanning Tree Example 1 The root (AP1), AP3, AP5, and AP6 service only wireless end devices. These access points need to pass IP traffic, but not pass IPX traffic that does not need to be forwarded to the primary or secondary LAN. For this example, set these options on the Ethernet Frame Type Filters screen.
Page 146 Chapter 5 — Configuring the Spanning Tree For this example, set these options on the Ethernet Frame Type Filters screen. In the Predefined Subtype Filters screen, set the 802.2-IPX-RIP field to drop 802.2, DIX, and 802.3 frames. MobileLAN access System Manual...
Page 147: Example 3
Chapter 5 — Configuring the Spanning Tree Example 3 If you have a DHCP server on a Windows NT server and you want to use this DHCP server to assign TCP/IP parameters to end devices on a remote IP subnet, you need to set these filters to allow for the necessary IP tunneling.
Page 148: Comparing Ip Tunnels To Mobile Ip
Chapter 5 — Configuring the Spanning Tree Comparing IP Tunnels to Mobile IP MobileLAN access products support IP tunneling, which allows end devices to roam across different subnets (routers) without having to change IP addresses. IP tunneling supports IETF RFC 1701 using GRE and the same encapsulation technique as mobile IP.
Page 149: Configuring Global Parameters
Chapter 5 — Configuring the Spanning Tree Configuring Global Parameters Global parameters are configured on the root access point and on any other access point that is a root candidate (does not have a root priority of 0). The root access point sends these settings to all other access points in the spanning tree.
Page 150 Chapter 5 — Configuring the Spanning Tree To configure global flooding 1 From the main menu, click Spanning Tree Settings > Global Flooding. The Global Flooding screen appears. 2 Configure the Global Flooding parameters. For help, see the next table. 3 Click Submit Changes to save your changes.
Page 151 Chapter 5 — Configuring the Spanning Tree Global Flooding Parameter Descriptions (continued) Parameter Explanation Allow Multicast (802.11b, 802.11a, and OpenAir radios only) Determines if Outbound to outbound multicast frames with unknown destination Terminals (Multicast addresses are flooded toward end devices. Typically, this Flood Mode enabled) parameter is checked.
Page 152: Configuring Global Rf Parameters
Chapter 5 — Configuring the Spanning Tree Configuring Global RF Parameters Use global RF parameters to set various parameters on the access points. If you are configuring the root access point and you check the Set Globally check box, the value for that parameter is set globally for all access points and wireless end devices in the network.
Page 153 Chapter 5 — Configuring the Spanning Tree Global RF Parameter Descriptions Parameter Explanation Perform Determines how the access point will handle the conversion of RFC1042/DIX RFC1042/DIX frames that are received on its 802.11b or Conversion 802.11a ports. (802.11b or 802.11 Check this check box if the frames that are received and have a radios only) protocol type equal to a value in the “RFC1042 types to pass...
Page 154 Chapter 5 — Configuring the Spanning Tree MobileLAN access System Manual...
Page 155: Configuring Security
Configuring Security This chapter explains how to use different security solutions to ensure that you have a secure wireless network. This chapter covers these topics: • About the different security features and solutions you can implement • Enabling access methods •...
Page 156: Understanding Security
These security features and solutions are listed below in the order of amount of security and ease of use (most basic/least secure to most secure). Intermec recommends you at least change the default parameters, enable secure communications between access points, and use basic security (WEP 64/128/152 security or security ID).
Page 157 Chapter 6 — Configuring Security 2 Enable/disable access methods. For example, if you are not using Telnet sessions to configure or manage your access point, you can disable this access method. For help, see “Controlling Access to Access Point Menus” on page 144. 3 Use a password server to maintain a list of authorized users who can configure and manage the access points.
Page 158: Controlling Access To Access Point Menus
Chapter 6 — Configuring Security Controlling Access to Access Point Menus There are several ways that you can manage who can configure and manage the access points in your network: • Enable/disable access methods. • Set up individual logins. • Change the default logins and create a read-only login. The next sections explain how to configure these methods.
Page 159: Setting Up Logins
(HTTPS) interface. Secure-only access is through port 443. This feature is only available on the newer access points (WA22, 2101B, WA21, 2100D, and 2106). Allow Telnet Access Determines if users can use a telnet session (or a...
Page 160: Configuring The Access Point To Use A Password Server
Chapter 6 — Configuring Security If you use a password server, you enable RADIUS for login authorization. That is, when a user attempts to log in to the access point, the user must enter a user name and password. This login is sent through the RADIUS client (access point) to the RADIUS server.
Page 161 Chapter 6 — Configuring Security 2 Check the Use RADIUS for Login Authorization check box. 3 Click Submit Changes to save your changes. 4 (Optional) Check the Allow Service Password check box. 5 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 162: Changing The Default Login
Chapter 6 — Configuring Security Changing the Default Login If you are not using a password server to authorize user logins, you should change the default user name and password and create a read-only password. To set up logins 1 From the main menu, click Security > Passwords. The Passwords screen appears.
Page 163 Intermec Technical Support may use this service password if they need to troubleshoot this access point. MobileLAN access System Manual...
Page 164: Establishing Secure Communications Between Access Points
If you enable secure IAPP, all MobileLAN access products have the same default IAPP secret key so they can communicate with each other. Intermec recommends that you change the default IAPP secret key to prevent rogue MobileLAN access products from joining your spanning tree.
Page 165 Chapter 6 — Configuring Security 2 Check the Secure IAPP check box. 3 Click Submit Changes to save your changes. 4 In the IAPP Secret Key field, enter a secret key. This secret key must be between 16 and 32 bytes. 5 Determine how the access points authenticate to the network.
Page 166: Enabling Secure Communications Between Access Points And End Devices
Chapter 6 — Configuring Security Enabling Secure Communications Between Access Points and End Devices There are several ways that you can ensure secure communications between access points and wireless end devices in your network: • Use an ACL. • Create a VLAN. •...
Page 167 Chapter 6 — Configuring Security 2 Check the ACL Client Authorization check box. 3 Click Submit Changes to save your changes. 4 (External RADIUS server only) In the ACL RADIUS Client Password field, enter the password. This password must match the password that is configured in the external RADIUS server.
Page 168: Configuring Wep 64/128/152 Security
Since, static WEP keys can be difficult to update, the MobileLAN access products and other Intermec products let you enter up to four WEP keys, and then pick a WEP transmit key (1-4). It is easier to rotate the WEP transmit key than to individually change all the WEP keys.
Page 169 Chapter 6 — Configuring Security • WEP 128 provides a higher degree of encryption protection. It has four 104-bit encryption keys and one 24-bit IV key. Enter 13 ASCII characters or hex pairs. • WEP 152 provides the highest degree of encryption protection. It has four 128-bit encryption keys and one 24-bit IV key.
Page 170: Implementing An 802.1X Security Solution
Also, if the end devices are using EAP-TLS, each one needs a client certificate. Intermec and others can provide the service of acting as a certificate authority and can issue certificates. For more information, contact your local Intermec representative.
Page 171: Configuring The Access Point As An Authenticator
802.1x-enabled network. Note: If you use an EAS, you must use the EAS on a newer access point (WA22, 2101B, WA21, 2100D, or 2106) and your end devices must be running the EAP-TLS, EAP-TTLS, or PEAP supplicant.
Page 172 Chapter 6 — Configuring Security 2 Check the WEP/802.1x Authentication check box. 3 Click Submit Changes to save your changes. 4 In the WEP Key Rotation Period field, enter how often (in minutes) the access point generates a new WEP key to distribute to the end devices.
Page 173: Enabling Secure Communications Between Access Points
Chapter 6 — Configuring Security 7 For each authentication server, enter the IP address or DNS name, enter the shared secret key, Port number, and check the 802.1x check box. Note: If you enter more than one authentication server, the other authentication servers simply serve as backup servers.
Page 174 Chapter 6 — Configuring Security By default, Secure Wireless Authentication Protocol (SWAP) is also enabled. The access point tells the authenticator that it can perform SWAP. If the authenticator allows SWAP, SWAP is used. SWAP allows access points to authenticate using an EAP-MD5 challenge. If the supplicant or the authenticator does not allow SWAP, the authentication must happen at the authentication server using TTLS or TLS.
Page 175 Chapter 6 — Configuring Security 3 Choose which authentication methods you want to use to authorize the access point to communicate with the network. For help, see the next table. 4 (Optional) Check the Verify CA Certificate check box and enter the authentication server common names if you want to verify the access point is connecting to the correct authentication server.
Page 176: Configuring Vlans
Chapter 6 — Configuring Security Spanning Tree Security – Authentication Method Descriptions (continued) Parameter Description Authentication Enter the common name of the authentication server. Server 1 Common Name Authentication Enter the common name of the backup authentication server. Server 2 Common Name Configuring VLANs Virtual LANs (VLANs) make it easy to create and manage logical groups...
Page 177 Chapter 6 — Configuring Security To configure a VLAN 1 From the main menu, click Spanning Tree Settings. The Spanning Tree Settings screen appears. 2 Configure the Enable GVRP for VLAN check box. • Check the check box if the VLAN switch is configured to dynamically configure its ports based on the end devices’...
Page 178 Chapter 6 — Configuring Security 6 Repeat Step 4 and Step 5 for the other radio. 7 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot. For help, see “Saving Configuration Changes” on page 36.
Page 179: Configuring The Embedded Authentication Server (Eas)
Configuring the Embedded Authentication Server (EAS) This chapter explains how to configure the embedded authentication server (EAS) in your access point for different security solutions to ensure that you have a secure wireless network. This chapter covers these topics: • About the EAS •...
Page 180: About The Embedded Authentication Server (Eas)
However, if you turn on the end devices in groups, the EAS supports 128 clients with unique security credentials. Maximum Number of Simultaneous Authentications WA21, 2101B, All Other Access RADIUS Server Type WA22, 2100, 2106...
Page 181: About Certificates
How to Determine If You Need to Install a Certificate Note: Certificates are only supported on newer access points (WA22, 2101B, WA21, 2100D, 2106). Older access points cannot use the secure web browser interface or be an authentication server. If your newer access point shipped from the factory with software release 1.80 or later preloaded on it, it has a unique server certificate (signed by...
Page 182 Chapter 7 — Configuring the Embedded Authentication Server (EAS) To view the certificates • From the main menu, click Security > Certificate Details. The Certificate Details screen appears. The Server Certificate lists the server certificate that is installed and the CA Certificate lists the trusted CA certificate that is installed.
Page 183: Installing And Uninstalling Certificates
Chapter 7 — Configuring the Embedded Authentication Server (EAS) Installing and Uninstalling Certificates Once you have determined that you need to install a certificate, use this procedure. To install certificates 1 From the main menu, click Security > Certificate Details. The Certificate Details screen appears.
Page 184 Chapter 7 — Configuring the Embedded Authentication Server (EAS) 3 Click Server Certificate or Trusted CA Certificate. 4 In the Enter or select the name of the certificate file to import field, enter the path and filename of the server certificate. Or, click Browse to locate the certificate.
Page 185 Note: If you follow the procedure to uninstall all certificates, you will lose the unique server certificate and the trusted CA certificate. You will need to contact your local Intermec representative to purchase new certificates. 1 From the main menu, click Security > Certificate Details. The Certificate Details screen appears.
Page 186: Configuring The Eas
Chapter 7 — Configuring the Embedded Authentication Server (EAS) Configuring the EAS Once you decide which access point will be configured to use its EAS, you need to enable the EAS on that access point and configure its database. To configure the EAS 1 Install any certificates.
Page 187 Chapter 7 — Configuring the Embedded Authentication Server (EAS) To enable the EAS 1 Log in to the access point whose EAS you are enabling. 2 From the main menu, click Security > Embedded Authentication Server. The Embedded Authentication Server screen appears. 3 Check the Enable Server check box.
Page 188: Configuring The Database
EAS in another RADIUS server. For help, see “Exporting and Importing Databases” on page 177. Note: Intermec recommends that when you are done configuring the database, you export it and save the file in a safe place. If you restore the access point to its default configuration, the database is not saved.
Page 189 Chapter 7 — Configuring the Embedded Authentication Server (EAS) 7 Repeat Steps 3 through 6 for each client. 8 Click Save/Discard changes, and then click Save Changes without Reboot. Embedded Authentication Server Entry Descriptions Type Description User Name Password Login Enter user names and passwords for User name User...
Page 190: Using The Rejected List
Chapter 7 — Configuring the Embedded Authentication Server (EAS) Using the Rejected List The Rejected List screen displays the users and devices that have been rejected by the EAS. You can use this list to discover which users and devices may need to be added to the database. When using the web browser interface, you can immediately add previously rejected end devices to the database.
Page 191: Clearing The Rejected List
Rebooting the access point will also clear the rejected list. Exporting and Importing Databases Note: Intermec recommends that you use the secure web browser interface (HTTPS) when you export and import databases. Otherwise, the information in the databases is sent in the clear.
Page 192 Chapter 7 — Configuring the Embedded Authentication Server (EAS) 3 If you are not using the secure web browser, click “A secure session is available”. Repeat Step 1 and Step 2. 4 Click Export the EAS database from this access point. A File Download dialog box appears.
Page 193 Chapter 7 — Configuring the Embedded Authentication Server (EAS) To import a database Note: As soon as you import the database, it is active. 1 Log in to the access point whose EAS you are using. 2 From the menu bar, click File Import/Export > Read or write the EAS RADIUS database.
Page 194 Chapter 7 — Configuring the Embedded Authentication Server (EAS) MobileLAN access System Manual...
Page 195: Managing, Troubleshooting, And Upgrading Access Points
Managing, Troubleshooting, and Upgrading Access Points This chapter explains how to manage, maintain, troubleshoot, and upgrade the MobileLAN access products. This chapter covers these topics: • Configuring the access point so that it can be managed by an SNMP management station. You can also manage the access point using MobileLAN manager, MobileLAN access Configuration Wizard, a web browser, a communications program, or a telnet session.
Page 196: Managing The Access Points
The access point can be managed using Simple Network Management Protocol (SNMP); that is, you access the access point from an SNMP management station. Contact your Intermec representative if you need to obtain a copy of the MIB. Before you can use an SNMP management station, you must define the access point’s SNMP community strings.
Page 197 Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points To configure the SNMP community strings 1 From the menu, click Network Management. The Network Management screen appears. 2 Configure the SNMP community parameters. For help, see the next table. 3 Click Submit Changes to save your changes. To activate your changes, from the menu bar click Save/Discard Changes, and then click Save Changes and Reboot.
Page 198: Maintaining The Access Points
This information may be needed when you call Intermec Technical Support. You can also view security events that are in the Security Events log and then you can export them to a file.
Page 199: Viewing Port Statistics
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points Viewing Port Statistics The Port Statistics screen shows the total number of frames and bytes that the access point has received and transmitted since it was last booted. To view port statistics •...
Page 200: Viewing The Configuration Summary
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points Viewing the Configuration Summary The Configuration Summary screen summarizes the configuration settings for the access point. Any changes from the default configuration that have been made to this access point are blue. To view the configuration summary •...
Page 201: Viewing The About This Access Point Screen
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points Viewing the About This Access Point Screen This screen shows information about the access point including software versions, radio versions, and MAC addresses. To view About this Access Point • From the menu, click Maintenance > About this Access Point. The About this Access Point screen appears.
Page 202: Using The Leds To Locate Access Points
2 Click Find This AP. The access point LEDs start flashing. For help, see the tables below. The LEDs continue to flash until you click Finished Finding AP. Find This Access Point – WA22, 2101, WA21, 2100 Wireless Wireless Wired...
Page 203: Restoring The Access Point To The Default Configuration
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points Restoring the Access Point to the Default Configuration You may need to restore the access point to the factory default configuration. For a list of the default settings, see “Default Settings” in Appendix A.
Page 204: Using The Web Browser Interface
This section provides you with information on getting help with your installation and some general problems and solutions. Getting Help With Your Installation The access point provides some configuration error messages that may help you troubleshoot your installation. Or, you can call Intermec Technical Support. MobileLAN access System Manual...
Page 205: Using The Configuration Error Messages
Calling Intermec Technical Support The access points are designed to be easy to install and configure; however, you may need to call Intermec Technical Support if you have problems. Before calling, be sure you can answer the following questions: • What kind of network are you using? •...
Page 206: General Troubleshooting
After the access point boots, verify that the Power LED remains on. 3. The access point may have a hardware problem. Call Intermec Technical Support. The Wireless #2 LED and You may only have the boot ROM code loaded in the the Root LED are flashing access point;...
Page 207 The Ping Utility screen The web browser you are using does not have Java does not appear when you support. Intermec recommends that you use Internet click a MAC address or an Explorer v3.0 or later or Netscape Communicator v4.0 or IP address in the AP later.
Page 208 Verify that the antennas or antenna cables are plugged into than you expected it to be. the correct connectors by reading the label on the access point. The connectors for the WA21 and WA22 are different than the ones for the 2100 and the 2101. MobileLAN access System Manual...
Page 209: Troubleshooting The Radios
Using LEDs If the access point LEDs show the following pattern after it boots, the radio may be faulty or the configuration matrix string is incorrect. Contact your local Intermec representative to help you correct the problem. Power Wireless #1...
Page 210: Using Icmp Echo
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points 3 Click Return to connections to return to the AP Connections screen. Using ICMP Echo ICMP (Internet Control Message Protocol ) echo lets you ping devices using their IP address. ICMP echo can only be used if the access point has determined the IP address of the end device or another access point.
Page 211: Troubleshooting Security
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points 3 Click Return to connections to return to the AP Connections screen. Troubleshooting Security This section helps you troubleshoot problems you may have while installing and configuring security in your network. For more help troubleshooting 802.1x security, refer to the documentation for the MobileLAN secure 802.1x security solution, the Odyssey server, and the end devices.
Page 212: Exporting The Security Events Log
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points For help understanding the events, see the next table. Security Events Log Description Column Description Ethernet MAC address of the device that caused the event. Address IP Address IP address of the device that caused the event. Priority Priority of the event (critical, high, low, informative).
Page 213: General Security Troubleshooting
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points 3 Click Save. The Save As dialog box appears. 4 Choose where you want to save the file, seclog.csv, and then click Save. General Security Troubleshooting This section provides you with information on getting help with your secure network and some problems and solutions.
Page 214: Recovering A Failed Access Point
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points Recovering a Failed Access Point Note: Do not use this procedure to upgrade your access point software. For upgrading instructions, see “Upgrading the Access Points” on page 203. You should never need to use this procedure. However, if your access point is not functioning, you may need to download an entirely new file system.
Page 215: Using A Windows Nt 4.0/2000/Xp Pc
NT 4.0/2000/XP PC and a command prompt to recover a failed access point. To access a command prompt, see your Windows documentation. For this procedure you will need to contact Intermec Technical Support to obtain the appropriate .DNL file. MobileLAN access DNL File...
Page 216 Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points where: x.x.x.x is the IP address that you want to assign the access point yy-yy-yy-yy-yy-yy is the MAC address of the access point. This MAC address is printed on a label that is on the bottom of the access point.
Page 217: Upgrading The Access Points
• a web browser interface. For help, see “Using a Web Browser Interface” on page 205. To copy the software release to your PC 1 Using a web browser, navigate to http://www.intermec.com. 2 From the Service & Support menu, choose Downloads. 3 Select the MobileLAN access product that you are upgrading.
Page 218 Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points For help installing the MobileLAN access utility, see “Using the MobileLAN access Utility” in Chapter 1. To upgrade the access point software 1 Start the utility. 2 In the Upgrade File Location field, enter the path and filename of the upgrade file (AP*WEB.BIN) or click Browse to find the file.
Page 219: Using A Web Browser Interface
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points In the Server IP Address field, enter the IP address of the PC contains the software release and that is running the utility. In the Start Time field, choose when you want the upgrade to start. Check the Reboot selected Access Points after successful upgrade check box if you want to access points to run the upgraded software after it is downloaded.
Page 220: Troubleshooting The Upgrade
Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points 3 Enter the path and filename of the upgrade file (AP*WEB.BIN) or click Browse to find the file on your PC. For example, AP180WEB.BIN. 4 Click Upgrade to start the upgrade. The upgrade may take up to three minutes to complete.
Page 221 Reboot selected Access Points after successful upgrade check box, the access points will reboot according to your Reboot selection. If you need to downgrade an access point to an earlier release, contact Intermec Technical Support. MobileLAN access System Manual...
Page 222 Chapter 8 – Managing, Troubleshooting, and Upgrading Access Points MobileLAN access System Manual...
Page 223: Additional Access Point Features
Additional Access Point Features This chapter explains some of the more advanced ways that you can maintain the MobileLAN access products. This chapter covers these topics: • Understanding the Access Point Segments • Using the AP Monitor • Using Console Command mode •...
Page 224: Understanding The Access Point Segments
The WA22, WA21, and 2106 have only one segment. Using the AP Monitor The AP (access point ROM) monitor is system software that lets you manipulate the access point files and file segments.
Page 225: Using Ap Monitor Commands
Chapter 9 — Additional Access Point Features Using AP Monitor Commands You can display a list of AP monitor commands on the screen anytime you see the ap prompt. To list AP monitor commands • Press any key (except the letter B, which reboots the access point), and then press Enter.
Page 226: Using Content Addressable Memory (Cam) Mode Commands
Field Programmable Gate Array (FPGA), filters frames based on the radio’s capability. Because the commands can cause undesirable results if not properly executed, you should contact Intermec Technical Support for assistance if you are unsure about the proper procedure to use. To enter CAM mode 1 Type CAM and press Enter.
Page 227: Using Test Mode Commands
Within the AP monitor, Test mode lets you perform certain test functions. Because the commands can cause undesirable results if not properly executed, you should contact Intermec Technical Support for assistance if you are unsure about the proper procedure to use. To enter Test mode 1 Type and press Enter.
Page 228: Using Service Mode Commands
Chapter 9 — Additional Access Point Features To display test commands • Type any letter or number other than B and press Enter. The test commands appear on the screen. Using Service Mode Commands In Service mode, you can perform file functions and segment functions such as deleting a file, downloading a file using the Ymodem protocol, and erasing a segment.
Page 229 Chapter 9 — Additional Access Point Features To list service commands • Press any key (except the letter B, which reboots the access point), and then press Enter. The service commands appear on the screen. Many of the commands that are available in Service mode are also available in the AP monitor or Console Command mode.
Page 230 Chapter 9 — Additional Access Point Features FB (continued) This command activates the inactive boot and data segments. You do not need to know which of the boot and data segment numbers the flash is loaded into. Purpose: Compacts the files in a particular segment. Syntax: FC s where s is the name or number of the segment to be compacted.
Page 231 Chapter 9 — Additional Access Point Features Purpose: Erases the files in a particular segment. To recover the files after they have been erased, you must reload them from another source. Note: You must execute this command before you execute a TFTP transfer.
Page 232: Using Command Console Mode
Chapter 9 — Additional Access Point Features Purpose: Loads the FPGA configuration file into the access point. If you are directed to change the FPGA firmware in the access point, use this command. Syntax: HDW f (s) where: is the FPGA configuration filename. is the optional segment where you want to load the configuration file.
Page 233: Using The Commands
Chapter 9 — Additional Access Point Features To exit Command Console mode • At the prompt, type exit You return to the Maintenance menu. Using the Commands Several of these commands require that you enter filenames. To indicate the segment where the file is located, precede the filename with either a segment number or name followed by a colon.
Page 234 Chapter 9 — Additional Access Point Features Purpose: Displays the flash file system directory, which includes information about the boot file. Use this command to ensure that the correct version of the file is in the active boot segment. Syntax: Example: To show only the files loaded in the active boot segment., enter: FD ab: Note: If the active segment contains no files when you reboot the access...
Page 235: Using Tftp Commands
Chapter 9 — Additional Access Point Features SCRIPT Purpose: Executes a specified file as a list of console commands. You can create a script file to automate a software download. Syntax: SCRIPT f where f is the name of the script file to be executed. For more information about using the script command, see “Creating Script Files”...
Page 236 Chapter 9 — Additional Access Point Features TFTP GET (continued) Syntax: TFTP GET IPaddress foreignfilename localfilename where: IPaddress is the IP address or DNS name of the server. You can use an asterisk (*) here if you want to use the value in serveripaddress.
Page 237 Chapter 9 — Additional Access Point Features TFTP PUT Purpose: Copies a file from a TFTP client to the TFTP server or to another access point. Syntax: TFTP PUT IPaddress foreignfilename localfilename where: IPaddress is the IP address or DNS name of the server. You can use an asterisk (*) here if you want to use the value in the serveripaddress.
Page 238 Chapter 9 — Additional Access Point Features TFTP SERVER START Purpose: Use this command to enable the access point to act as a server. You can enable one access point to act as a TFTP server and download files to additional access points.
Page 239: Using Sdvars Commands
Chapter 9 — Additional Access Point Features Using sdvars Commands Use sdvars commands to manipulate certain software download variables. Sdvars commands support both GET and SET arguments. You can enter sdvars commands to GET a software download object, and then issue the sdvars command using the SET argument to assign the object a specified value.
Page 240 Chapter 9 — Additional Access Point Features sdvars set starttime (continued) Syntax: sdvars set starttime dd:hh:mm:ss where dd:hh:mm:ss is how far in the future the reboot is to begin and is days. hh is hours. mm is minutes. is seconds. Example: To begin the script file download in 5 minutes, enter: sdvars set starttime 00:00:05:00 Note: If you need to stop the download, you can do so by setting starttime...
Page 241 Chapter 9 — Additional Access Point Features sdvars set terminate Purpose: Sets the internal variable terminate to a specified value. Use terminate to stop a countdown process in the access point. If either starttime or nextpoweruptime is counting down, setting this variable stops the timer and halts the countdown process.
Page 242: Creating Script Files
You can create a script file to perform these commands. Script files are ASCII text files with a 32-byte file system header appended. You may need to contact your local Intermec representative for a copy of the header file called filehdr.exe.
Page 243 *\data\discinca.dnl id: file tftp get *\data\falcon_.dnl id: file tftp get *\data\help.dnl id: file tftp get *\data\hlp.dnl id: file tftp get *\data\intermec.dnl id: file tftp get *\data\menu.dnl id: file tftp get *\data\sftdwnl.dnl id: file tftp get *\data\welcome.dnl id: file tftp get *\data\write.dnl id:...
Page 244 Chapter 9 — Additional Access Point Features MobileLAN access System Manual...
Page 245: Specifications
Specifications This appendix provides specifications for reference purposes only. Actual product performance and compliance with local telecommunications regulations may vary from country to country. Intermec only ships products that are type approved in the destination country. MobileLAN access System Manual...
Page 246: Specifications
Appendix A — Specifications Specifications WA22 Height 4.6 cm (1.8 in) Length 25.0 cm (9.8 in) Width 15.9 cm (6.3 in) Weight 526 g (1.16 lb) x 48V, 315 mA POE electrical rating Operating temperature -20°C to +55°C (-4°F to +131°F) Storage temperature -40°C to +70°C (-40°F to +158°F) Humidity (non-condensing)
Page 247 Appendix A — Specifications 2101 Height 3.8 cm (1.5 in) Length 25.0 cm (9.8 in) Width 15.9 cm (6.3 in) Weight 526 g (1.16 lb) ∼100 to 240V, 1.0A, 50 to 60 Hz AC electrical rating x 48V, 315 mA POE electrical rating Operating temperature -20°C to +65°C (-4°F to +149°F)
Page 248 Appendix A — Specifications WA21 Height 9.5 cm (3.8 in) Length 35.5 cm (14.0 in) Width 23.6 cm (9.3 in) Weight 2.63 kg (5.8 lb) AC electrical rating ∼100 to 240V, 1.0 to 0.5A, 50 to 60 Hz Standard ∼100 to 120V, 1.0A, 50 to 60 Hz Heater (optional) or ∼200 to 240V, 0.5A, 50 to 60 Hz...
Page 249 Appendix A — Specifications 2100 Height 9.5 cm (3.8 in) Length 35.5 cm (14.0 in) Width 23.6 cm (9.3 in) Weight 2.63 kg (5.8 lb) AC electrical rating ∼100 to 240V, 1.0 to 0.5A, 50 to 60 Hz Standard ∼100 to 120V, 1.0A, 50 to 60 Hz Heater (optional) or ∼200 to 240V, 0.5A, 50 to 60 Hz Operating temperature...
Page 250 Appendix A — Specifications 2100 (continued) Regulatory Approvals FCC Part 15.247 Certified; Canada RSS 210 Certified; ETS 300 328 Type Approved; EN 55022 / CISPR 22 Class A; FCC Part 15 & ICES-003 Class A; SCT Certification, NOM-EM-121; AS 3548, C tick Marked;...
Page 251 Appendix A — Specifications 2106 Height 9.3 cm (3.7 in) Length 14.7 cm (5.8 in) Width 3.5 cm (1.4 in) Weight 232 g (0.5 lb) ∼100 to 240V, 1.0A, 50 to 60 Hz Electrical Operating temperature 0°C to +45°C (32°F to +113°F) Storage temperature -20°C to +70°C (-4°F to +158°F) Humidity (non-condensing)
Page 252: Radio Specifications
Appendix A — Specifications Radio Specifications IEEE 802.11b Frequency band 2.4 to 2.5 GHz worldwide Type Direct sequence, spread spectrum Modulation Direct sequence, spread spectrum (CCK, DQPSK, DBPSK) Power output 32 mW (15 dBm) Data rate 11 Mbps (High), 5.5 Mbps (Medium), 2 Mbps (Standard), 1 Mbps (Low) with automatic fallback for increased range Channels 11 (North America), 13 (Europe), 4 (France), 14 (Japan).
Page 253 Appendix A — Specifications WLI Forum OpenAir Frequency band 2.4 GHz, actual frequencies vary by country Type Frequency hopping, spread spectrum Power output 2100 500 mW (27 dBm) 100 mW (20 dBm) (Europe) 2101 100 mW (20 dBm) 2102 100 mW (20 dBm) Data rate 1.6 Mbps Channels...
Page 254: Antennas And Antenna Accessories
Appendix A — Specifications Antennas and Antenna Accessories This table identifies many of the Intermec antennas and antenna accessories for the radios. Contact your local Intermec representative for detailed information. Description Part Number Description MobileLAN 067261 Antenna, 2.4 GHz, 3 dBi, mini omni...
Page 255 Appendix A — Specifications Antennas and Antenna Accessories (continued) Description Part Number Description WA22/2101/ 071122 Antenna, 2.4 GHz, corner reflector WA21/2100 antennas 071121 Antenna, 2.4 GHz, 3 dBi, diversity WA22/WA21/ 066147 Antenna, 2.4 GHz, omni 2100 antennas WA22/WA21 072730 Antenna, 5 GHz, 4 dBi, omni, swivel, TNC...
Page 256 Appendix A — Specifications Antennas and Antenna Accessories (continued) Description Part Number Description 2100 antennas 065285 Antenna, 900 MHz, 7 dBi Omni 067264 Antenna, 900 MHz, 9 dBi Flat Panel 805-472-002 Antenna, 900 MHz, Whip 203-449-002 Antenna, S-UHF, 1.5 m (5 ft) 203-449-003 Antenna, S-UHF, 5.5 m (18 ft) 805-430-001...
Page 257: Default Settings
Default Settings This appendix provides factory defaults for reference purposes only. MobileLAN access System Manual...
Page 258: Default Settings
Appendix B — Default Settings Default Settings The factory default settings for the access points are listed in this section. You can record the settings for your installation in each table for reference. TCP/IP Settings Menu Defaults Parameter Name Range Default Your Site? IP Address...
Page 259: Spanning Tree Settings Menu Defaults
Appendix B — Default Settings Spanning Tree Settings Menu Defaults Parameter Name Range Default Your Site? AP Name 0 to 16 characters (access point serial number) LAN ID (Domain) 0 to 254 Root Priority 0 to 7 Enable Ethernet Check/Clear Check Bridging Enable GVRP for...
Page 260: Global Rf Parameters Menu Defaults
Appendix B — Default Settings Global RF Parameters Menu Defaults Parameter Name Range Default Your Site? Perform RFC1042/DIX Check/Clear Check Conversion S-UHF Rfp Threshold Set Globally Enabled/Disabled Disabled Value 0 to 250 bytes 70 bytes S-UHF Frag Size Set Globally Enabled/Disabled Disabled Value...
Page 261: Ethernet Configuration Menu Defaults
Appendix B — Default Settings Ethernet Configuration Menu Defaults Parameter Name Range Default Your Site? Port Type 10/100 Mb Twisted- 10/100 Mb Pair/100 Mb Fiber Twisted-Pair Optic Link Speed Auto Select, 100 Mbps Auto Select Full-Duplex, 100 Mbps Half-Duplex, 10 Mbps Full-Duplex, 10 Mbps Half-Duplex Enable Link Status...
Page 262: Ethernet Advanced Filters Menu Defaults
Appendix B — Default Settings Ethernet Advanced Filters Menu Defaults Parameter Name Range Default Your Site? Filter Values Value ID Value (blank) Filter Expressions ExprSeq Offset Mask (blank) EQ, NE, GT, LE Value ID Action And, Pass, Drop IP Tunnels Menu Defaults Parameter Name Range Default...
Page 263: Network Management Menu Defaults
Appendix B — Default Settings IP Tunnels Menu Defaults (continued) Parameter Name Range Default Your Site? Customizable Subtype Filters Allow/Pass Check/Clear Check SubType DIX-IP-TCP-Port, DIX-IP-TCP-Port DIX-IP-UDP-Port, DIX-IP-Protocol, DIX-IPX-Socket, DIX-EtherType, SNAP-IP-TCP-Port, SNAP –IP-UDP-Port, SNAP –IP-Protocol, SNAP –IPX-Socket, SNAP –EtherType, 802.3-IPX-Socket, 802.2 –IPX-Socket, 802.2-SAP Value 00 00...
Page 264: Security Menu Defaults
Parameter Name Range Default Your Site? Use RADIUS for Login Check/Clear Clear Authorization User Name 1 to 32 characters Intermec Password 1 to 32 characters Intermec Read Only Password 1 to 32 characters (blank) Allow Service Password Check/Clear Check IEEE 802.11 (b or a) Radio Security Menu Defaults...
Page 265: Radius Server List Menu Defaults
Appendix B — Default Settings RADIUS Server List Menu Defaults Parameter Name Range Default Your Site? IP Address 4 nodes, 0 to 255 0.0.0.0 Secret Key 16 to 32 bytes (factory default) Port 1-65535 1812 Recommended range is 49152-65535 802.1x Check/Clear Clear Check/Clear...
Page 266: Ieee 802.11B Radio Menu Defaults
Default Your Site? Node Type Master, Station, Master Disabled SSID (Network Name) 0 to 32 characters INTERMEC Frequency Channel 1 to 11, Channel 03, 2412 to 2462 MHz 2422 MHz Advanced Configuration Data Rate 11, 5.5, 2, or 1 Mbps...
Page 267: Ieee 802.11A Radio Menu Defaults
Range Default Your Site? Node Type Master, Station, Master Disabled SSID (Network Name) 0 to 32 characters INTERMEC Frequency Dynamic, 36, 40, 42, (full-range) 44, 48, 50, 52, 56, Channel 36, 5180 58, 60, 64 MHz IEEE (mid-range) Channel 52, 5260...
Page 268: Openair Radio Menu Defaults
Appendix B — Default Settings OpenAir Radio Menu Defaults Parameter Name Range Default Your Site? Node Type Master, Station, Master Disabled Security ID 1 to 20 characters (blank) Channel 1 to 15 Subchannel 1 to 15 MAC Configuration Default, Interference, Default Throughput, or Manual...
Page 269: 902 Mhz Radio Configuration Menu Defaults
Appendix B — Default Settings 902 MHz Radio Configuration Menu Defaults Parameter Name Range Default Your Site? Port Control Check/Clear Check Mode-Channel Depends on country DS 225K-Channel Multicast Filter Check/Clear Clear File Name FALCON_D.BIN FALCON_D.BIN Hello Period 1, 2, or 3 seconds 1 second adfadf MobileLAN access System Manual...
Page 270 Appendix B — Default Settings MobileLAN access System Manual...
Page 271: Glossary
Glossary MobileLAN access System Manual...
Page 272 An Internet standard stack protocol that allows dynamic distribution of IP address and other configuration information to IP hosts on a network. Implementation of the DHCP client in Intermec network devices simplifies installation because the devices automatically receive IP addresses from a DHCP server on the network.
Page 273 Glossary directional antenna An antenna (often called a yagi) that transmits and receives RF signals more in one direction than others. This radiation pattern is similar to the light that a flashlight produces. These antennas have a narrower beam width, which limits coverage on the sides of the antennas. Directional antennas have much higher gain than omni antennas and work best for covering large narrow areas or on point-to-point bridges.
Page 274 IP subnet. IAPP (Inter Access Point Protocol) Access points use this Intermec protocol to communicate with each other. For example, when a wireless end device roams to a new access point, the new access point informs the old access points via the root access point that any traffic for the end device needs to be routed to the new access point.
Page 275 Your network administrator can use management software interacting with the MIB to obtain information about network activity. Contact your local Intermec representative to learn how to obtain a copy of the MIB for the access point. multicast address...
Page 276 Glossary peer-to-peer network A type of LAN whose workstations are capable of being both clients and servers. point-to-multipoint bridge See also wireless bridge. A bridge that connects two wired networks with similar architectures. Two access points can be used to provide a point-to- multipoint bridge between two buildings so that wired and wireless devices in each building can communicate with devices in the other building.
Page 277 Glossary root access point The access point with the highest root priority becomes the root of the network spanning tree. If the root becomes inactive, the remaining root candidates negotiate to determine which access point becomes the new root. The root can be used to set system-wide flooding and RF parameters. The root is also the only node in the network that can originate IP tunnels.
Page 278 MobileLAN power bridge. The WA22, WA21, and 2100 do not use a splitter. SWAP (Secure Wireless Authentication Protocol) This protocol creates secure wireless hops if you enable secure IAPP. It forces access points to authenticate each other using an EAP-MD5 challenge.
Page 279 A wireless link that occurs when data from a wireless end device moves from one access point to another access point through the radio ports. Using MobileLAN access products, Intermec recommends that your data does not travel through more than three wireless hops.
Page 280 Glossary MobileLAN access System Manual...
Page 281: Index
Index MobileLAN access System Manual...
Page 282 Index Numbers 100BaseFX See fiber optic Inbound Filters screen 97 10BaseT port 8 inbound filters, parameters described 97 10BaseT/100BaseTx port 8 parameters, described 93 2100 specifications 238 cable access door, removing 8 worldwide frequencies 94 connecting 802.11b radio to power 46 Advanced Configuration screen 87 to the fiber optic network 50 advanced parameters, described 88...
Page 283 Index configuring 29 Fragmentation Threshold field 95 as a DHCP client 61 Reservation Threshold field 88, 95 as a DHCP server 62 advanced filters as a NAT server 66 configuring 74 as a point-to-point bridges 22 example 77, 79 as a WAP 16 advanced parameters, configuring as an authenticator 157 for 802.11a radio 94...
Page 284 Index architecture (continued) CAM mode, using 212 WA21 234 Command Console mode, using 219 WA22 232 sdvars, using 225 ARP flooding, enabling 135 Service mode, using 214 ARP requests, configuring the access point to send 66 Test mode, using 213...
Page 285 49 DHCP fiber optic network 50 configuring the access point power over Ethernet 53 as a client 61 WA21 as a server 62 to Ethernet 45 server setup parameters, described 64 to power 45 setting inbound filter 90, 97, 101...
Page 286 Login 175 2101 233 RADIUS 175 2102 236 using 2106 237 as an authentication server 157 WA21 234 the rejected list 176 WA22 232 to authorize logins 145 configuring to maintain an ACL 152 address table 68 EAS Database screen 178, 179...
Page 287 Service mode 214 subtype, customizing 72, 128 Test mode 213 values, setting 74 exporting the EAS database 177 WA21 234 exporting the Security Events log 198 WA22 232 Expression Sequence field 76 See also IP tunnel filters. See also inbound filters. See ExprSeq field See Expression Sequence field also Ethernet filters.
Page 288 2100 235 for 802.11a radio 96 2101 233 for 802.11b radio 89 2102 236 for OpenAir radio 100 2106 237 installing WA21 234 2100 45 WA22 232 2101 42 2102 47 2106 47 IAPP certificates 167, 169 setting inbound filter 89, 90, 96, 97, 100, 101...
Page 289 2102 236 2106 237 to locate access points 188 WA21 234 to troubleshoot radios 195 WA22 232 WA21 illustration 7 medium density distribution, enabling 88 WA22 illustration 7 menu bar 37 Wired LAN 6 MIB, passwords 182 Wireless #1 6...
Page 290 239 priorities 3 OpenAir Radio screen 98 serial 8 Channel field 99 summary 8 defaults 254 WA21 illustration 10 MAC Configuration field 99 WA22 illustration 9 Node Type field 99 positioning antennas Security ID field 99 2102/2106 47 Subchannel field 99...
Page 291 2101 43 the MobileLAN access Utility 189, 204 2102 49 RFC1042 Types to Pass Through field 139 2106 49 roaming WA21 45 example 15 WA22 42 using access points 13 Predefined Subtype Filters screen 71, 127 ROM monitor See AP monitor...
Page 292 LAN ID field 109, 110, 111, 112, 114 2101 233 Root Priority field 109, 110, 112, 114 2102 236 Secondary LAN Bridge Priority field 109, 110, 112, WA21 234 WA22 232 Secondary LAN Flooding field 111 Server Certificate option 170 Secondary LAN Flooding field 23, 115...
Page 293 Index specifications (continued) troubleshooting 190 WA22 232 contacting Intermec Technical Support 191 WLI Forum OpenAir radio 239 general problems/solutions 192 SpectraLink network, configuring 91 radios 195 inbound filter 90 using ICMP echo 196 splitter, connecting 53 using LEDs 195 square connector network See SC network...
Page 294 WEP 64 security, configuring 154 VLANs, configuring 162 WEP Key fields 156 voice over IP See SpectraLink network WEP Key Rotation Period field 158 WEP keys WA21 configuring dynamic keys 156 cable access door, removing 8 configuring static keys 154 connecting parameters, described 156...
Page 296 Corporate Headquarters 6001 36th Avenue West Everett, Washington 98203 U.S.A. tel 425.348.2600 fax 425.355.9551 www.intermec.com MobileLAN access System Manual *067150-012* P/N 067150-012...
Page 297 System Manual Addendum MobileLAN™access...
Page 298 The information contained herein is proprietary and is provided solely for the purpose of allowing customers to operate and service Intermec-manufactured equipment and is not to be released, reproduced, or used for any other purpose without written permission of Intermec.
Page 299 What’s New for Software Release 1.94? Software release 1.94 can be installed on all MobileLAN access products. However, Intermec recommends that you only install this release if you need a feature or one of the software fixes. For more details on these software fixes, contact Intermec Technical Support.
Page 300 The enabler is already installed on access points with software release 1.94 or later. You can install the agent and the console on the same PC. Avalanche uses a hierarchical file system organized into software packages and software collections: • Software packages are groups of files for an application that resides on the device.
Page 301 5 In the Avalanche Console Address field, enter the IP address or DNS name of the console. Or, leave this field blank and the access point sends out a broadcast request looking for any available agent. 6 Click Submit Changes to save your changes. 7 From the main menu, click Security.
Page 302 To use Avalanche to manage your access points 1 Create a software package (.AVA file) that includes the latest software release (.BIN file) using Avalanche Package Builder. Parameter Explanation Package Title A descriptive title of the application. For example, enter AP194.
Page 303 2 Install the software package using the Avalanche Management Console. 3 Schedule access point updates or manually initiate an update using the console. For more information on using the Wavelink Avalanche client management system, see the Wavelink Avalanche documentation and online help.

This manual is also suitable for:

2100 Mobilelan access 2106 Mobilelan access wa22 Mobilelan access 2101 Mobilelan access 2102 Mobilelan access 2100

Intermec MobileLAN access WA21 System Manual

Getting Started

Installing the Access Points

Configuring the Ethernet Network

Configuring the Radios

Configuring the Spanning Tree

Configuring Security

Configuring the Embedded Authentication Server (EAS)

Managing, Troubleshooting, and Upgrading Access Points

Additional Access Point Features

Specifications

Default Settings

Glossary

Index

Quick Links

Troubleshooting

Related Manuals for Intermec MobileLAN access WA21

Summary of Contents for Intermec MobileLAN access WA21