Page 1
9160 G2 Wireless Gateway User Manual November 2, 2009 P/N 8100117.D ISO 9001 Certified Quality Management System...
Page 2
2100 Meadowvale Boulevard, Mississauga, Ontario, Canada L5N 7J9 http://www.psionteklogix.com This document and the information it contains is the property of Psion Teklogix Inc., is issued in strict confidence, and is not to be reproduced or copied, in whole or in part, except for the sole purpose of promoting the sale of Psion Teklogix manufactured goods and ser- vices.
Page 3
Return-To-Factory Warranty Psion Teklogix Inc. provides a return to factory warranty on this product for a period of twelve (12) months in accordance with the Statement of Limited Warranty and Limitation of Liability provided at: www.psionteklogix.com/warranty The warranty on Psion Teklogix manufactured equipment does not extend to any product that has been tampered with, altered, or repaired by any person other than an employee of an authorized Psion Teklogix service organization.
Page 4
RoHS-compliant as per the EU directive. Other than as noted below, a Psion Teklogix product that does not have an accompanying RoHS logo signifies that it was placed on the EU market prior to July 1, 2006, and is thereby exempt from the directive.
Page 7
Stopping Clustering..............61 Configuration Information For A Specific AP And Managing Standalone APs ..61 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 8
Viewing Last Proposed Set Of Changes ........79 8.3.4 Configuring Advanced Settings (Customizing/Scheduling Channel Plans) ..79 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 12
21.3.2 Updating SNMP Settings ............218 viii Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 13
Contents Chapter 22: The 9160 G2 As Base Station 22.1 Overview............... 221 22.2 Radio Protocols.
Page 14
26.6.2 Verifying The Firmware Upgrade ..........319 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 15
Configuring WPA/WPA2 Personal (PSK) Security On A Client......B-29 Configuring An External RADIUS Server To Recognize The 9160 G2 ....B-31 B.10 Obtaining A TLS-EAP Certificate For A Client..
Page 17
PPROVALS AND AFETY UMMARY ECLARATION ONFORMITY Product: 9160 G2 Wireless Gateway - RA2050, RA2060 & RA1001A Application of Council Directives: EMC Directive: 2004/108/EC Low Voltage Directive: 2006/95/EC RoHS Directive: 2002/95/EC R&TTE Directive: 1999/5/EEC Conformity Declared to Standards: EN 55022: Class B EN 61000-3-2;...
2005 Standard(s) to which Conformity is Declared: The 9160 G2 Wireless Gateway, supplied by Psion Teklogix, has been tested and found to comply with FCC PART 15, SUBPART B - UNINTENTIONAL RADIATORS, CLASS B COMPUTING DEVICES FOR HOME & OFFICE USE.
Page 19
être utilisé à l'intérieur et devrait être placé loin des fenêtres afin de fournir un écran de blindage maximal. Si le matériel (ou son antenne d'émission) est installé à l'exté- rieur, il doit faire l'objet d'une licence.” Safety Approvals CSA, NRTL/C and CB. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 20
Utrustningen uppfyller kraven för EU-direktivet 1999/5/EC om ansluten teleutrustning och ömsesidigt erkännande av utrustningens överensstämmelse (R&TTE). (Förklaringen finns att läsa på: www.psionteklogix.com). Tämä laite vastaa EU:n radio- ja telepäätelaitedirektiivin (EU R&TTE Directive 1999/5/EC) vaatimuksia. (Julkilausuma nähtävillä osoitteessa:www.psionteklogix.com). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Do not operate the 9160 G2 with a damaged cord or plug. Replace immediately. • Do not operate the 9160 G2 if it has received a sharp blow, been dropped, or otherwise damaged in any way; it should be inspected by qualified service personnel.
Page 22
- The extension cord is properly wired, in good electrical condition, and that the wire size is larger than 16 AWG. • The 9160 G2 is designed for indoor use only; do not expose the 9160 G2 to rain or snow. The 9160 G2 Wireless Gateway Fiber Optic Option is: CLASS 1 LED PRODUCT APPAREIL À...
Page 23
4. Avoid servicing during an electrical storm. There may be a remote risk of electrical shock from lightning. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 25
1.3 Text Conventions ........7 1.4 Overview Of The 9160 G2 Wireless Gateway ..... . 7 1.4.1 Radios .
Page 26
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Chapter 4: “Quick Steps For Setup And Launch” is a step-by-step guide to setting up your 9160 G2 Wireless Gateways and the resulting wireless network. Chapter 5: “Configuring Basic Settings”...
Page 28
(not for cluster configurations). Chapter 12: “The Ethernet (Wired) Interface” describes how to configure the wired interface settings on the 9160 G2 Wireless Gateway. Chapter 13: “Setting The Wireless Interface”...
Page 29
About This Manual Chapter 22: “The 9160 G2 As Base Station” describes how to configure the 9160 G2 Wireless Gateway as either a wired or wireless Base Station, or as a Remote Radio Module (RRM). This chapter also describes narrow band radio configuration settings.
Online Help Features, Supported Browsers, And Limitations Online Help Features, Supported Browsers, And Limitations Online Help for the 9160 G2 Wireless Gateway provides information about all fields and features available on the user interface. The information in the Online Help is a subset of the information available in the full User Manual.
The 9160 G2 Wireless Gateway is designed to support a wide variety of system configura- tions. Using the IEEE 802.11 Wireless LAN Standards, the 9160 G2 is capable of operating as a transparent bridge (access point) between wireless and wired networks.
Page 32
Extended Range. • Psion Teklogix Narrow Band Polling Protocol. Important: Psion Teklogix mobile computers do not support Atheros Turbo modes and to prevent unnecessary radio overhead the use of Turbo mode is not recommended. The 9160 G2 Wireless Gateway supports four different radio configurations: 802.11g, 802.11g + 802.11ag, NB (narrow band), and NB + 802.11ag.
1.4.3 Base Station Functions As a base station or Remote Radio Module (RRM), the 9160 G2 provides a link between the local area network and wireless mobile computers using proprietary Psion Teklogix radio protocols. On the local area network the 9160 G2 base station (or RRM) communicates with a 9500 Communications Server (or host using a Psion Teklogix Software Development Kit) using the proprietary 9010 protocol over TCP/IP.
IEEE 802.11h is a standard that provides two services required to satisfy certain regula- tory domains for the 5 GHz band. These two services are Transmit Power Control (TPC) and Dynamic Frequency Selection (DFS). • Support for Extended Range (XR). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
LAN in a network that supports both TCP/IP and 802.IQ protocols simultane- ously. 802.IQ protocol is available in two versions: 802.IQ v1 and 802.IQ v2. The 9160 G2 Wireless Gateway can support both versions of the protocol at the same time (mobile com- puters must use only one).
Single universal view of clustered access points and cluster configuration settings. Configuration for all access points in a cluster can be managed from a single interface. Changes to common parameters are automatically reflected in all members of the cluster. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
• 802.1p. • 100Base-FX fiber optic support. 1.5.7 SNMP Support The 9160 G2 Wireless Gateway includes the following standard Simple Network Manage- ment Protocol (SNMP) Management Information Bases (MIBs): • Bridge MIB 802.1d (RFC 1493). • SNMPv2 MIB (RFC 3418).
802.1x and WPA/WPA2 Enterprise (RADIUS) security modes. What’s Next? Ready to get started with wireless networking? Once your 9160 G2 Wireless Gateway is in- stalled (see Chapter 2: “Installation Requirements”), read through Chapter 3: “PreLaunch Checklist” and then follow the steps in Chapter 4: “Quick Steps For Setup And Launch”.
Page 39
2.2.5 Connecting A Video Display Terminal....23 2.3 Changing The Configuration With A Web Browser ....23 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 40
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
The 9160 G2 should be situated away from the path of vehicles and free from water or dust spray. The 9160 G2 should only be mounted in the upright position, as shown in Figure 2.1 on page 18.
30 cm of the unit. Secure the cables with ties to the cable tie mounts on the 9160 G2 (see Figure 2.1). A single phase power outlet (range 100 to 240 VAC rated 1.0A minimum) should be installed within one metre (3.1 feet) of the 9160 G2. The 9160 G2 automatically adjusts to input within that power range.
Chapter 2: Installation Requirements Power And Antenna Cables To eliminate the need for AC wiring, the 9160 G2 Wireless Gateway is compliant with IEEE 802.3af and can be powered over its Ethernet connection. For detailed information, please see “Power Over Ethernet Requirements” on page 323.
9160 G2. The coaxial cable must be routed and secured using wire anchors and/or coaxial nail clips. A few extra inches of cable are required near the antenna and the 9160 G2 to make disconnec- tion easier.
9160 G2 its unique IP address. This may be done through the network (see “Changing The Configuration With A Web Browser” on page 23). Subsequent changes in the network, such as the addition of stations or users, would also require that the 9160 G2 configuration be changed.
Only insert or remove it when the 9160 G2 is powered off. At startup, the 9160 G2 will print one of the two following messages at the serial console port, depending on whether or not the SFP module is installed:...
The terminal is connected to the RS-232 port on the 9160 G2 (see Figure 2.2.2 on page 21). This port is normally set to operate at 115,200 baud, 8 bits, 1 stop bit, no parity. To comply with Part 15 of the FCC rules for a Class B computing device, only the cable supplied (P/N 19387) should be used.
Page 49
HECKLIST 3.1 The 9160 G2 Wireless Gateway ......27 3.1.1 Default Settings For The 9160 G2 Wireless Gateway ... . 27 3.1.2 What The Access Point Does Not Provide.
Page 50
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
(or extended) wireless network. The 9160 G2 Wireless Gateway The 9160 G2 Wireless Gateway is a wireless communications hub for devices on your net- work. It provides continuous, high-speed access between your wireless and Ethernet devices IEEE 802.11a, 802.11b, 802.11g, and...
Page 52
Chapter 3: PreLaunch Checklist Default Settings For The 9160 G2 Wireless Gateway Table 3.1 9160 G2 Default Settings Option Default Settings Related Information “TEKLOGIX” for the Internal interface “Review / Describe The Access Point” on page 48 in Network Name “Configuring Basic Settings”...
Page 53
Chapter 3: PreLaunch Checklist Default Settings For The 9160 G2 Wireless Gateway Table 3.1 9160 G2 Default Settings Option Default Settings Related Information “Configuring 802.11 Radio Settings” on page 165 Radio 802.11g or 802.11a+g “Configuring 802.11 Radio Settings” on page 165 IEEE 802.11 Mode...
WDS Settings 3.1.2 What The Access Point Does Not Provide The 9160 G2 Wireless Gateway is not designed to function as a Gateway to the Internet. To connect your Wireless LAN (WLAN) to other LANs or the Internet, you need a gateway device.
Wireless Client Computers The 9160 G2 Wireless Gateway provides wireless access to any client with a properly con- figured Wi-Fi client adaptor for the 802.11 mode in which the access point is running. Multiple client operating systems are supported. Clients can be laptops or desktops, personal digital assistants (PDAs), or any other hand-held, portable or stationary device equipped with a Wi-Fi adaptor and supporting drivers.
Understanding Dynamic & Static IP Addressing On The 9160 G2 Wireless Gateway 9160 G2 Wireless Gateways are designed to auto-configure, with very little setup required for the first access point and no configuration required for additional access points subse- quently joining a pre-configured cluster.
AP retains this static IP address at first-time startup. After AP startup, you have the option of specifying a static IP addressing policy on 9160 G2 Wireless Gateways and assigning static IP addresses to APs on the Internal network via the access point Administration Web pages.
AP configuration to the factory defaults (see “Resetting Factory Default Configuration” on page 316), or you can get a dynamically assigned address by con- necting the AP to a network that has DHCP. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 59
AUNCH 4.1 Unpack The 9160 G2 Wireless Gateway......37 4.1.1 9160 G2 Wireless Gateway Hardware And Ports ....37 4.1.2 What’s Inside The 9160 G2 Wireless Gateway? .
Page 60
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Chapter 4: Quick Steps For Setup And Launch Unpack The 9160 G2 Wireless Gateway Setting up and deploying one or more 9160 G2 Wireless Gateways is in effect creating and launching a wireless network. The Basic Settings Administration Web page simplifies this process.
Ethernet cable for a direct connection from PC to AP. A crossover cable will work also, but is not necessary if you have MDI and MDI-X auto sensing.ports. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 63
2. Connect the power adaptor to the power port on the back of the access point, and then plug the other end of the power cord into a power outlet (preferably, via a surge protector). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
The 9160 G2 Wireless Gateway powers on and initializes when you plug it in. Log On To The Administration Web Pages When you go to the IP address of the 9160 G2 Wireless Gateway Administration Web pages, you are prompted for a user name and password.
4.4.1 Viewing Basic Settings For Access Points When you first log in, the Basic Settings page for 9160 G2 Wireless Gateway administration is displayed. These are global settings for all access points that are members of the cluster and, if automatic configuration is specified, for any new access points that are added later.
4.5.1 Default Configuration If you follow the steps above and accept all the defaults, the access point will have the default configuration described in “Default Settings For The 9160 G2 Wireless Gateway” on page 27. What’s Next? Next, make sure the access point is connected to the LAN, bring up some wireless clients, and connect the clients to the network.
4.6.2 Test LAN Connectivity With Wireless Clients Test the 9160 G2 Wireless Gateway by trying to detect it and associate with it from some wireless client devices. (See “Wireless Client Computers” on page 31 in the PreLaunch Checklist for information on requirements for these clients.) 4.6.3...
Page 69
5.5 Basic Settings For A Standalone Access Point..... 50 5.6 Your Network At A Glance: Understanding Indicator Icons ... . . 50 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 70
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
If you type the IP address of the access point into your browser, the Basic Settings page is the default page that is displayed. Figure 5.1 Basic Settings Fill in the fields on the Basic Settings page as described in “Review / Describe The Access Point” on page 48. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Version information about the firmware currently installed on the access point. Firmware Version As new versions of the 9160 G2 Wireless Gateway firmware become available, you can upgrade the firm- ware on your access points to take advantages of new features and enhancements.
SSID after you save this new setting. Note: The 9160 G2 Wireless Gateway is not designed for multiple, simultaneous configuration changes. If you have a network that includes multiple access points, and more than one administrator is logged on to the...
The clustering icon indicates whether the current access point is “Clustered” or “Not Clustered” (that is, standalone or when a state of change is in progress). For information about clustering, see “Understanding Clustering” on page 55. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 75
Enterprise” on page 113, which are the two security modes that offer the option of using the built-in authentication server. The Administration Web pages for the 9160 G2 Wireless Gateway are provided in two dif- ferent color themes and styles: (1) Corporate style and (2) Home style.
Page 77
6.8.4 Sorting Session Information ......64 6.8.5 Refreshing Session Information ..... . . 64 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 78
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Figure 6.1 Cluster Settings For Access Points Understanding Clustering A key feature of the 9160 G2 Wireless Gateway is the ability to form a dynamic, configura- tion-aware group (called a cluster) with other 9160 G2 Wireless Gateways in a network in the same subnet.
6.3.1 What Is A Cluster? A cluster is a group of access points which are coordinated as a single group via 9160 G2 Wireless Gateway administration. You can have multiple clusters on the same subnet if they have different cluster “names”.
6.3.5 Which Settings Are/Are Not Shared As Part Of The Cluster Configuration? Most configuration settings defined via the 9160 G2 Wireless Gateway Administration Web pages will be propagated to cluster members as a part of the cluster configuration. 6.3.5.1 Settings Shared In The Cluster Configuration The cluster configuration includes: •...
Understanding Access Point Settings The Access Points tab provides information about all access points in the cluster. From this tab, you can view location descriptions, MAC addresses, IP addresses, enable (activate) or Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 83
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
AP list does not reflect the added AP or shows an incomplete display; refer to the information on Cluster Recovery in Appendix C: “Troubleshooting” . Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Configuration Information For A Specific AP And Managing Standalone APs In general, the 9160 G2 Wireless Gateway is designed for central management of clustered access points. For access points in a cluster, all access points in the cluster reflect the same configuration.
For standalone access points, this is the only way to navigate to their configuration information. Session Monitoring The 9160 G2 Wireless Gateway provides real-time session monitoring information includ- ing which clients are associated with a particular access point, data rates, transmit/receive statistics, signal strength, and idle time.
Page 87
Utilization Utilization rate for this station. For example, if the station is “active” (transmitting and receiving data) 90% of the time and inactive 10% of the time, its “utilization rate” is 90%. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Utilization rate, click on the Utilization column label. The entries will be sorted by Utilization rate. 6.8.5 Refreshing Session Information You can force an update of the information displayed on the Session Monitoring page by clicking the Refresh button. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 89
7.3.1 Backing Up The User Database ..... . . 70 7.3.2 Restoring A User Database From A Backup File ....71 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 90
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
WPA with RADIUS mode (see “WPA Enterprise” on page 113 in Chapter 10: “Config- uring Security”). You have the option of using either the internal RADIUS server embedded in the 9160 G2 Wireless Gateway or an external RADIUS server that you provide. If you use the embedded RADIUS server, use the Administration Web page on the access point to set up and manage user accounts.
(See “Editing A User Account” on page 69.) 7.2.2 Adding A User To create a new user, do the following: 1. Under Add a User..., provide information in the following fields. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Once you have created a user account, it is displayed under User Accounts... at the top of the User Management Administration Web page. To make modifications to an existing user ac- count, first click the checkbox next to the username so that the box is checked. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
AP to the previ- ously saved configuration. 7.3.1 Backing Up The User Database To create a backup copy of the user accounts for this access point: Psion Teklogix 9160 G2 Wireless Gateway User Manual...
When the backup restore process is complete, a message is shown to indicate that the user database has been successfully restored. (This process is not time-consuming; the restore should complete almost immediately.) Click the User Management tab to see the restored user accounts. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 97
8.3.3 Viewing Last Proposed Set Of Changes ....79 8.3.4 Configuring Advanced Settings (Customizing/Scheduling Channel Plans) . 79 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 98
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Figure 8.1 Managing Channel Assignments Understanding Channel Management When Channel Management is enabled, the 9160 G2 Wireless Gateway automatically assigns radio channels used by clustered access points to reduce mutual interference (or in- terference with other access points outside of its cluster). This maximizes Wi-Fi bandwidth and helps maintain the efficiency of communication over your wireless network.
The following sections describe how to configure and use channel management on your network: • “Stopping/Starting Automatic Channel Assignment” on page 78. • “Viewing Current Channel Assignments And Setting Locks” on page 78. • “Update Current Channel Settings (Manual)” on page 79. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Indicates the MAC address of the access point. Band Indicates the band (b/g or a) on which the access point is broadcasting. Indicates the radio Channel on which this access point is currently broadcasting. Channel Psion Teklogix 9160 G2 Wireless Gateway User Manual...
25% or more. Channels will be re-assigned even if the network is busy. The appropriate channel sets will be used (‘b/g’ for APs using IEEE 802.11b/g and ‘a’ for APs using IEEE 802.11a). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 104
Channels 1, 4, 8, 11 produce minimal overlap. IEEE 802.11a mode supports a larger set of non-consecutive channels (36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165). All “a” band channels are non-interfering. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Advanced Settings will take effect when they are applied, and influence how automatic channel management is performed. (The new interference reduction minimum, scheduled tuning interval, channel set, and network busy settings will be taken into account for auto- mated and manual updates.) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 107
9.4 Viewing Details For A Cluster Member ......88 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 108
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
For each neighbor access point, the Wireless Neighborhood view shows identifying infor- mation (SSID or Network Name, IP Address, MAC address) along with radio statistics Psion Teklogix 9160 G2 Wireless Gateway User Manual...
If there is only one AP in the cluster, only a single IP address column will be displayed here; indi- cating that the AP is “clustered with itself”. You can click on an IP address to view more details on a particular AP as shown in Figure 9.2 on page 88. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 111
• Dark Gray Bar - A dark gray bar and no signal strength number indicates this is the AP whose IP address is listed above that column (since it is not applicable to show how Psion Teklogix 9160 G2 Wireless Gateway User Manual...
To view details on a cluster member AP, click on the IP address of a cluster member at the top of the page. Figure 9.2 Details For A Cluster Member AP The following table explains the details shown about the selected AP. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 113
Capability and whether it is “on” or “off” on this access point. Beacon Age Shows the date and time of the most recent beacon was transmitted from the access point. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Chapter 10: Configuring Security Understanding Security Issues On Wireless Networks The following sections describe how to configure Security settings on the 9160 G2 Wireless Gateway. 10.1 Understanding Security Issues On Wireless Networks Wireless mediums are inherently less secure than wired mediums. For example, an Ethernet NIC transmits its packets over a physical medium such as coaxial cable or twisted pair.
Encryption algorithm or formula the protocol uses to encode/decode the data. Following is a list of the security modes available on the 9160 G2 Wireless Gateway, along with a description of the key management, authentication, and encryption algorithms used in each mode.
“Shared Key”, this protocol provides a rudi- keys are indexed in different slots (up redundancy checking (CRC) of each mentary form of user authentication. to four on the 9160 G2 Wireless Gate- 802.11 frame. However, if the Authentication Algorithm is set way).
RADIUS server. 802.11 frame. There are different Unicast keys You have a choice of using the 9160 G2 Wireless for each station. Gateway embedded RADIUS server or an external RADIUS server. The embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
Standard (AES). for each station. Recommendations WPA Personal is not recommended for use with the 9160 G2 Wireless Gateway when WPA Enterprise is an option. We recommend that you use WPA Enterprise mode instead, unless you have interoperability issues that prevent you from using this mode.
Page 122
(TKIP). (RADIUS) that are periodically refreshed. • Counter mode/CBC-MAC Protocol You have a choice of using the 9160 G2 Wireless (CCMP) Advanced Encryption Stan- There are different Unicast keys Gateway embedded RADIUS server or an exter- dard (AES).
The traffic blocking extends to wireless clients connected to the network via WDS links; these clients cannot communicate with each other when Station Isolation is on. See Chapter 20: “Wireless Distribution System” for more information about WDS. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
To configure security on the access point, select a security mode and fill in the related fields as described in Table 10.5. Note: You can also allow or prohibit the Broadcast SSID and enable/disable Station Isola- tion as extra precautions, as described in Table 10.5 on page 101. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 125
For a Guest network, the only security mode that can be applied is “None (Plain-text)”. (For more information, see Chapter 14: “Setting Up Guest Access”.) Security modes other than “None (Plain-text)” apply only to configuration of the “Internal” network. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Security Modes 10.2.2 Security Modes 10.2.2.1 None (Plain-text) None (or plain-text security) means any data transferred to and from the 9160 G2 Wireless Gateway is not encrypted. If you select None (Plain-text) as your Security Mode, no further options are configurable on the AP.
If you selected Static WEP Security Mode, provide the information on the access point settings, as shown in the following figure and described in Table 10.6 on page 104. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 128
Each client station must be configured to use one of these same WEP keys in the same slot as specified here on the AP. (See “Rules To Remember For Static WEP” on page 105.) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 129
The same key must occupy the same slot on all nodes (AP and clients). For example if the AP defines key as WEP key 3, then the client stations must define that same abc123 string as WEP key 3. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 130
You must then set all client stations to use WEP and provide each client with one of the slot/key combinations you defined on the AP. For this example, we’ll set WEP key 1 on a Windows client. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 131
1 WEP key 1 and set this as its transfer key. You could then give client 2 WEP key 2 and set this as its transfer key index. Figure 10.2.2.3 illustrates the dynamics of the AP and two client stations using multiple WEP keys and a transfer key index. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
When configuring IEEE 802.1x mode, you have a choice of whether to use the embedded RADIUS server or an external RADIUS server that you provide. The 9160 G2 Wireless Gateway embedded RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
Page 134
Use internal radius server • To use the authentication server provided with the 9160 G2 Wireless Gateway, ensure the check- box beside the Use internal radius server field is selected. If this option is selected, you do not have to provide the Radius IP and Radius Key; they are automatically provided. If the option for the internal RADIUS server is enabled, configure user accounts on the AP via the Cluster >...
This security mode is backwards-compatible for wireless clients that support the original WPA. If you selected WPA Personal Security Mode, complete the settings as described in Table 10.8 on page 112. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 136
WPA, select both. This lets both WPA and WPA2 client stations associate and authenticate, but uses the more robust WPA2 for clients who support it. This WPA configuration allows more interoperability, at the expense of some security. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Advanced Encryption Standard (AES), Counter mode/CBC-MAC Protocol (CCMP), and Temporal Key Integrity Protocol (TKIP) mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users, and configuration of user accounts via the Clus- ter, User Management tab. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 138
When configuring WPA Enterprise mode, you have a choice of whether to use the built-in RADIUS server or an external RADIUS server that you provide. The 9160 G2 Wireless Gateway built-in RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.
Page 139
Enabling this feature can help speed up authentication for roaming clients who connect to multiple access points. This option does not apply if you selected “WPA” for WPA Versions because the original WPA does not support this feature. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 140
WPA with RADIUS must have one of the following: • A valid TKIP RADIUS IP address and RADIUS Key. • A valid CCMP (AES) IP address and RADIUS Key. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 141
Security Modes Table 10.9 WPA Enterprise Security Settings Field Description You can choose whether to use the built-in authentication server provided with the 9160 G2 Wireless Gateway, Use internal or you can use an external radius server. radius server • To use the authentication server provided with the 9160 G2 Wireless Gateway, ensure the check- box beside the Use internal radius server field is selected.
Updating Settings 10.3 Updating Settings To update Security settings: 1. Navigate to the Security tab page. 2. Configure the security settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Interfaces page for a two-radio AP is shown in the following figure. Figure 11.1 Network Interfaces Page This page displays the current settings of the 9160 G2 Wireless Gateway. It displays the Ethernet (Wired) Settings and the Wireless Settings. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
“log relay host” to capture all system events and errors in a Kernel Log. (This requires setting up a remote relay host first. See “Log Relay Host For Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Persistence can be enabled or disabled from the Events tabbed page. The persistent log is saved in NVRAM. Even after a reboot, all persistent logs are still reserved in NVRAM. Non-persistent logs are only kept during the run-time period. If you reboot the 9160 G2, all non-persistent logs will be lost.
“Enabling/Disabling The Log Relay Host On The Status, Events Page” on page 126. 11.2.4.1 Understanding Remote Logging The Kernel Log is a comprehensive list of system events (shown in the System Log) and kernel messages, such as error conditions like dropping frames. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
You must first set up a remote server running a syslog process and acting as a syslog “log relay host” on your network. Then, you can configure the 9160 G2 Wireless Gateway to send its syslog messages to the remote server.
Log Relay Host. If you disabled the Log Relay Host, clicking Update will disable remote logging. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
128. All transmit and receive statistics shown are totals since the access point was last started. If the AP is rebooted, these figures indicate transmit/receive totals since the re- boot. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
The MAC address is assigned by the manufacturer. The 9160 G2 Wireless Gateway has a unique MAC address for each interface. A two-radio access point has a different MAC address for each interface on each of its two radios.
Figure 11.4 Associated Client Stations 11.4.1 Link Integrity Monitoring The 9160 G2 Wireless Gateway provides link integrity monitoring to continually verify its connection to each associated client (even when there is no data exchange occurring). To do this, the AP sends data packets to clients every few seconds when no other traffic is passing.
Page 154
The Beacon Interval is set on the Manage > 802.11 Advanced Settings tab page. (See Chapter 16: “Configuring 802.11 Radio Settings”.) A hexadecimal number which, when converted to binary, indicates each IEEE 802.11 feature or functionality Capability and whether it is “on” or “off” on this access point. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 155
This indicates the IEEE 802.11 mode being used on this access point. (For example, IEEE 802.11a, IEEE Band 802.11b, IEEE 802.11g.) The number shown indicates the mode according to the following map: • 2.4 indicates IEEE 802.11b mode or IEEE 802.11g mode. • 5 indicates IEEE 802.11a mode. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 156
The current rate will always be one of the supported rates shown in Rates. Indicates the strength of the radio signal emitting from this access point as measured in decibels (Db). Signal Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 157
Rate sets are configured on Radio Settings. (See Chapter 16: “Configuring 802.11 Radio Settings”.) The rates shown for an access point will always be the rates currently specified for that AP in its Radio Settings. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Are/Are Not Shared As Part Of The Cluster Configuration?” on page 57. 12.1 Navigating To Ethernet (Wired) Settings To configure “Wired” address and related settings on the 9160 G2 Wireless Gateway, navi- gate to the Manage > Ethernet Settings tab and update the fields as described in the following sections.
Ethernet is the most common technology implementing a LAN. Wi-Fi (IEEE) is another very popular LAN technology. The 9160 G2 Wireless Gateway allows you to configure two different LANs on the same access point: one for a secure internal LAN and another for a public guest network with no security and little or no access to internal resources.
Guest Access 12.1.2.2 Enabling Or Disabling Guest Access The 9160 G2 Wireless Gateway ships with the Guest Access feature disabled by default. If you want to provide guest access on your AP, enable Guest access on the Ethernet (Wired) Settings tab.
• Select Disabled to disable the VLAN for the Internal network, and for any additional virtual networks on this access point. 12.1.4 Internal Interface Settings To configure Ethernet (wired) settings for the Internal LAN, fill in the fields as described in Table 12.5. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 165
There are no restrictions on the Untagged VLAN ID you specify. The Untagged VLAN ID can be the same as the Internal VLAN ID, the Guest VLAN ID, a VWN VLAN ID, or the Management VLAN ID. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 166
Static IP indicates that all network settings are provided manually. You must provide the IP address for the 9160 G2 Wireless Gateway, its subnet mask, the IP address of the default gateway, and the IP address of at least one DNS nameserver.
Shows the subnetwork address for the Guest interface. For example, 192.168.1.0. Subnet 12.1.6 Updating Settings To update Ethernet settings: 1. Navigate to the Ethernet Settings page. 2. Configure the Ethernet settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Wireless Network name, also known as SSID). The following sections describe how to configure the “Wireless” address and related set- tings, including 802.IQv1, on the 9160 G2 Wireless Gateway. 13.1 Navigating To Wireless Settings To set the wireless address for an access point, navigate to the Manage > 802.11 Settings tab which will open the Wireless Settings page, and update the fields as described below.
802.11h as a minimum standard. This standard is currently only required by those countries which fall into the European Telecommunications Standard Institute (ETSI) cate- gory. 802.11h is also enabled for Japan. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
A MAC address is a permanent, unique hardware address for any device that represents an interface to the network. The MAC address is assigned by the manufacturer. You cannot change the MAC address. It is provided here for informational purposes as a unique identifier for an interface. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
The Mode defines the Physical Layer (PHY) standard being used by the radio. Mode The 9160 G2 Wireless Gateway is available as a single or dual-band access point with one or two radios. The configuration options for Mode differ depending on which product you have.
(SSID) for the Guest Network as described in Table 13.5. Configuring an access point with two different network names (SSIDs) allows you to leverage the Guest interface feature on the 9160 G2 Wireless Gateway. For more information, see Chapter 14: “Setting Up Guest Access”.
“guest” network. 13.7 Updating Wireless Settings To update wireless settings: 1. Navigate to the 802.11 Settings page. 2. Configure the wireless settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 177
14.4 Deployment Example ....... . .158 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 178
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
VLANs by setting up the guest interface configuration options on the Admin- istration Web pages for the 9160 G2 Wireless Gateway. (For details on how to set up this type of guest interface, see “Configuring A Guest Network On A Virtual LAN” on page 156.
You can set up or modify the Welcome screen guest clients see when they open a Web browser or try to browse the Web. To set up the captive portal, do the following: 1. Navigate to the Manage > Guest Login tab. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
3. The guest client chooses Guest SSID. 4. The guest client starts a Web browser and receives a Guest Welcome screen. 5. The Guest Welcome Screen provides a button for the client to click to continue. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
6. The guest client is now enabled to use the “guest” network. 14.4 Deployment Example In Figure 14.2, the dotted lines indicate dedicated guest connections. All access points and all connections (including guests) are administered from the same 9160 G2 Wireless Gateway Administration Web pages. Figure 14.2 Dedicated Guest Connections Internet...
VLANs per the IEEE 802.1Q standard. After configuring VLANs, physically reconnect the Ethernet cable on the switch to the tagged packet (VLAN) port. Then, re-connect via the Administration Web pages to the new IP address. (If Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 186
Note: If you are connected as a wireless client to the same AP that you are administering, resetting the SSID will cause you to lose connectivity to the AP. You will need to recon- nect to the new SSID after you save this new setting. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
• If a Guest network is configured, always set the security mode to “None”. 15.3 Updating Settings To update VLAN settings: 1. Navigate to the VWN tab page. 2. Configure the VLAN settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Chapter 16: Configuring 802.11 Radio Settings Understanding Radio Settings The following sections describe how to configure 802.11 Radio Settings on the 9160 G2 Wireless Gateway: 16.1 Understanding Radio Settings Radio settings directly control the behaviour of the radio device in the access point, and its interaction with the physical medium;...
Page 192
Chapter 16: Configuring 802.11 Radio Settings Navigating To Radio Settings Figure 16.1 Overview Of Radio Settings Configuration Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Radio One-Radio AP: If you have a one-radio version of the 9160 G2 Wireless Gateway, this field is not included on the Radio tab. Two-Radio AP: If you have a two-radio version of the 9160 G2 Wireless Gateway, specify Radio One or Radio Two. On a two- radio AP, the rest of the settings on this tab apply to the radio selected in this field.
Page 194
The measurement is in beacons. For example, if you set this to 1, clients will check for buffered data on the AP at every beacon. If you set this to 2, clients will check on every other beacon. If you set this to 10, clients will check on every 10th beacon. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 195
Specify the maximum number of stations allowed to access this AP at any one time. Maximum Stations You can enter a value between 0 and 2007. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 196
“g” clients to connect since they are required by the standard to support these rates. For more information, see description of Mode further up in this table, on page 169. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
3. Click the Update button to apply the changes. Note: If you are using the two-radio version of the 9160 G2 Wireless Gateway, keep in mind that both Radio One and Radio Two are configured on this tab. The displayed settings apply to either Radio One or Radio Two, depending on which radio you choose in the Radio field (first field on tab).
MAC addresses. When MAC Filtering is on, only clients with a listed MAC address can access the network. The following sections describe how to use MAC address filtering on the 9160 G2 Wireless Gateway. 17.1 Navigating To MAC Filtering Settings To enable filtering by MAC address, navigate to the Manage >...
17.2 Using MAC Filtering This page allows you to control access to the 9160 G2 Wireless Gateway based on Media Access Control (MAC) addresses. Based on how you set the filter, you can allow only client stations with a listed MAC address or prevent access to the stations listed.
Chapter 18: Load Balancing Understanding Load Balancing The 9160 G2 Wireless Gateway allows you to balance the distribution of wireless client connections across multiple access points. Using load balancing, you can prevent scenarios where a single access point in your network shows performance degradation because it is handling a disproportionate share of the wireless traffic.
Clients should automatically retry the AP they were originally connected to and other APs on the subnet. Clients who are disassociated from one AP should experience a seamless transition to another AP on the same subnet. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 207
Theoretically, the maximum number of client stations allowed is 2007. We recommend setting the maximum to between 30 and 50 client stations. This allows for a workable load on the access point, given that bandwidth is shared among the AP clients. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Updating Settings To update load balancing settings: 1. Navigate to the Load Balancing tab page. 2. Configure the load balancing settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Voice-over-IP (VoIP), other types of audio, video, and streaming media, as well as tradi- tional IP data over the 9160 G2 Wireless Gateway. The following sections describe how to configure Quality of Service queues on the 9160 G2 Wireless Gateway.
19.1.3.1 QoS Queues And Type Of Service (ToS) On Packets QoS on the 9160 G2 Wireless Gateway leverages WMM information in the IP packet header related to Type of Service (ToS). Every IP packet sent over the network includes a ToS field in the header that indicates how the data should be prioritized and transmitted over the network.
Page 213
• Upstream from access point to network. • Downstream from network to access point. With WMM enabled, QoS settings on the 9160 G2 Wireless Gateway affect the first two of these; downstream traffic flowing from the access point to client station (AP EDCA parameters) and the upstream traffic flowing from the station to the access point (station EDCA parameters).
(SIF). These wait times are built-in to 802.11 as infrastructure support and are not configurable. The 9160 G2 Wireless Gateway supports the Enhanced Distribution Coordination Function (EDCF) as defined by the 802.11e standard. EDCF, which is an enhancement to the DCF standard and is based on CSMA/CA protocol, defines the interframe space (IFS) between data frames.
Maximum Contention Window size is reached. 19.1.3.4 Packet Bursting For Better Performance The 9160 G2 Wireless Gateway includes 802.11e based packet bursting technology that in- creases data throughput and speed of transmission over the wireless network. Packet...
WMM must be enabled on both the AP and on the client connecting to the AP. The flow diagram in Figure 19.2 outlines the way in which tags are retrieved and traffic pri- oritized on a network. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Table 19.1 outlines the priority tags and their associated values taken from a VLAN tag. Table 19.1 VLAN Tag Priorities VLAN ID Tag Priority Best Effort 0 - default DHCP value Background Background Best Effort Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Background Background Best Effort Video Video Voice Voice 19.2 Configuring QoS Queues To set up queues for QoS, navigate to the Services > QoS tab, and configure settings as de- scribed below. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 219
Configuring QoS Queues Figure 19.3 Quality Of Service (QoS) Settings Configuring Quality of Service (QoS) on the 9160 G2 Wireless Gateway consists of setting parameters on existing queues for different types of wireless traffic, and effectively specify- ing minimum and maximum wait times (via Contention Windows) for transmission. The settings described here apply to data transmission behaviour on the access point only, not to that of the client stations.
Lowest priority queue, high throughput. Bulk data that requires maximum throughput and is not time- sensitive is sent to this queue (FTP data, for example). For more information, see “QoS Queues And Parameters To Coordinate Traffic Flow” on page 188. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 221
Valid values for the “ ” are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1023. For more information, see “Random Backoff And Minimum/Maximum Contention Windows” on page 191. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
QoS prioritization and coordination of wireless medium access is on. With WMM enabled, QoS settings on the 9160 G2 Wireless Gateway control downstream traffic flowing from the access point to client station (AP EDCA parameters) and the upstream traffic flowing from the station to the access point (station EDCA parameters).
Page 223
(window) is doubled. Doubling will continue until the size of the random backoff value reaches the number defined in the Maximum Contention Window. For more information, see “Random Backoff And Minimum/Maximum Contention Windows” on page 191. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
WMM client station has the right to initiate transmissions on the wireless network. 19.3 Updating Settings To update QoS settings: 1. Navigate to the QoS tab page. 2. Configure the QoS settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Chapter 20: Wireless Distribution System Understanding The Wireless Distribution System The 9160 G2 Wireless Gateway lets you connect multiple access points using a Wireless Distribution System (WDS). WDS allows access points to communicate with one another wirelessly. This capability is critical in providing a seamless experience for roaming clients and for managing multiple wireless networks.
Figure 20.1.3 on page 205) and bridge the two APs with a WDS link. This extends your network wirelessly by providing an extra hop to get to distant stations (see Figure 20.1.3 on page 205). Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Another use for WDS bridging is the creation of backup links. With Spanning Tree Protocol (STP) automatically enabled on the 9160 G2 Wireless Gateway, WDS can be used to con- figure backup paths between access points across the network. For example, between two access points you could have both a primary path via Ethernet and a secondary (backup) wireless path via a WDS link.
Manage > WDS tab, and update the fields as described below. Note: Figure 20.3 shows the WDS settings page for the two-radio AP. The Administration Web page for the one-radio AP will look slightly different. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 231
IEEE 802.11 mode. (See Chapter 16: “Configuring 802.11 Radio Settings” for information on configuring the Radio mode and channel.) When 802.11h is operational, setting up WDS links can be difficult. See “802.11h Regulatory Domain Control” on page 148. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 232
Address for the destination access point. This SSID is a separate SSID to that which you set for the WDS link. The two do not (and should not) be the same value or name. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
URL in the Web browser address bar in the following form: http://IPAddressOfAccessPoint where IPAddressOfAccessPoint is the address of MyAP1. 2. Navigate to the WDS tab on MyAP1 Administration Web pages. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
• Be sure to save the settings by clicking Update. 20.4 Updating Settings To update WDS settings: 1. Navigate to the WDS tab page. 2. Configure the WDS settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
The 9160 G2 Wireless Gateway can function as an SNMP-managed device for seamless in- tegration into network management systems such as HP OpenView or Devicescape Wireless Operations Center.
AP running SNMP Agent AP running SNMP Agent (Configured to send SNMP traps) 21.2 Navigating To SNMP Settings To configure SNMP settings, navigate to Services > SNMP, and update the fields as de- scribed below. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Configuring SNMP Settings Start/stop control of SNMP agents, community password configuration, access to MIBs, and configuration of SNMP Trap destinations is provided through the 9160 G2 Wireless Gate- way, as described below. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 240
Setting a community name is similar to setting a password. Only requests from the machines that identify themselves with this community name will be accepted. The community name can be in any alphanumeric format. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
SNMP Traps facilitate asynchronous communication of messages from SNMP managed devices (like the 9160 G2 Wireless Gateway) to designated hosts. If a Network Management System (NMS) is responsible for monitoring a large number of devices on a network, it is not practical to periodically query every device on the network.
Ensure you select the Enabled checkbox beside the appropriate hostname. 21.3.2 Updating SNMP Settings To update SNMP settings: 1. Navigate to the SNMP tab page. 2. Configure the SNMP settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 243
22.4.4 Hosts Menu ....... . .246 22.4.4.1 9010 Configuration ......249 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 244
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
As a wireless base station, the 9160 G2 communicates with the wired base station and mobile computers using 802.11 WDS. As an RRM, the operation and timing of the 9160 G2’s radio link to the mobile computers is directly controlled by a network controller that uses a timeplexing radio protocol (see “Timeplexing And Cellular Switching”, below).
RF protocols allow mobile computers to communicate with a base station by sharing the use of a radio channel in an efficient way. Psion Teklogix systems use one of two types of RF protocols: the Psion Teklogix Adaptive Polling/Contention protocol or the non-proprietary IEEE 802.11 protocol.
Page 247
Chapter 22: The 9160 G2 As Base Station Narrow Band Radio Configuration Settings 9160 G2 is set (base station or RRM). The page displayed allows you to set the status of the 9160 G2, and to retrieve the RA1001A radio card’s permanent communications settings.
Chapter 22: The 9160 G2 As Base Station Narrow Band Radio Configuration Settings Radio Card Status This parameter enables or disables the Narrow Band Radio. The card may be disabled tem- porarily when, for testing purposes, it is required that there be no radio interference. Press the Update button to initialize the change.
9160 G2 in either base station or RRM mode. 22.3.3 Connectivity Options: Base Station Mode When you enter the Connectivity Options sub-menu for the 9160 G2 set in base station oper- ating mode, the Polling Protocol and Radio Parameters are displayed.
Page 250
Connectivity Options: Base Station Mode Figure 22.5 Overview Of Polling Protocol And Radio Parameters Operating Mode This parameter allows you to set the operating mode of the 9160 G2 as Base Station or RRM. Auto-Startup This parameter enables polling immediately when the 9160 G2 is rebooted. If Auto-Startup is disabled, the 9160 G2 will wait until polling is initialized from the network controller.
Every 2 seconds of polling is followed by 0.5 seconds of silence—no polling occurs. Further, if another carrier is detected on the channel, the 9160 G2 will cease radio transmis- sions on that channel until the path is clear.
Page 252
This parameter determines the largest single message that can be passed to a mobile com- puter in message mode or from a mobile computer in long message mode. In a 9160 G2 base station, the value entered in this parameter must be greater than or equal to the value entered in the network controller or 9160 G2 mini-controller.
Page 253
Chapter 22: The 9160 G2 As Base Station Connectivity Options: Base Station Mode Free Window Factor The value entered in this parameter determines if “free window mode” will be used. In free window mode, all mobile computers that are not assigned any other window can use the free window.
Active Channel This parameter determines the operating radio channel of the 9160 G2. This makes the channel available for channel searching by the mobile computers. The channel selected must be one of those that have been configured with frequencies, as indicated on the Narrow...
Wireless Gateway), using a range of host platforms. Alternatively, the network controller can be a host running a Psion Teklogix SDK (handler). The 9160 G2 can also act as a slave base station to another 9160 G2 on the network. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Base stations communicate over the radio link using Psion Teklogix proprietary protocols. Base stations can be connected to network controllers using TCP/IP over Ethernet networks. As a base station communicating with mobile computers through a radio link, the 9160 G2 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 257
The options and parameters on the following pages allow you to configure the 9160 G2 as a master base station connected to up to 32 slave 9160 G2 base stations over an Ethernet net- work.
While the 9160 G2 can operate as a Remote Radio Module (RRM, see “Connectivity Op- tions: RRM Mode” on page 231), it can also control other RRMs. For a 9160 G2 to control RRMs, RRM groups must be configured. Once an RRM group has been defined, from one to four RRMs can be members of a group.
Page 259
Chapter 22: The 9160 G2 As Base Station RRM Groups Configuration Settings Figure 22.7 Overview Of RRM Groups Configuration Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
In this screen the user can set options for a new RRM group. Each RRM must be a member of an RRM group; there may be more than one RRM group configured in the 9160 G2. An RRM group may contain from one to four RRMs.
9160 G2 boots. Shared Channel If this parameter is enabled, the 9160 G2 checks for other traffic on the radio channel used by this RRM group, before polling. If this parameter is disabled, the 9160 G2 assumes that it has exclusive use of the radio channel for this RRM group, and polls without checking for radio traffic.
Page 262
This textbox allows the user to specify the size of the largest message segment, in bytes, that will be sent over the Psion Teklogix radio network. Larger messages are broken into parts. The allowable values range from 32 to 116. The default value is 100.
Because some of the radio parameters are identical for a given group of timeplexed RRMs, they may be configured by the user once on the 9160 G2; the 9160 G2 then passes them to the RRMs in the group. These parameters include the synchronization delay (Sync Delay), the remote transmit on-time (Remote Txon), and the channel number to be used (Active Channel).
Chapter 22: The 9160 G2 As Base Station RRM Groups Configuration Settings Active Channel This textbox allows the user to specify the radio channel to be used by all the RRMs in the RRM group. The allowable values range from 1 to 20. The default value is 1.
Chapter 22: The 9160 G2 As Base Station Radio Link Features Configuration Settings 22.4.2.5 Remote Radio Modules This menu displays the RRMs that comprise this RRM Group, including each Description, IP address, and Port number as set in the Connectivity Options sub-menu for the 9160 G2s set in RRM operating mode (see “Connectivity Options: RRM Mode”...
Page 266
Chapter 22: The 9160 G2 As Base Station Radio Link Features Configuration Settings Figure 22.8 Overview Of Radio Link Features Configuration Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
This parameter determines the time that a mobile computer is allowed to be inactive before the 9160 G2 declares it offline. This time is expressed as a percentage of the Polling Proto- col Terminal Timeout parameter (see above). For example, if the Polling Protocol Terminal...
Direct TCP Connections for TekTerm Enabling this parameter allows the TekTerm program resident in Psion Teklogix mobile computers to connect directly to the 9160 G2, when it is acting as a base station to a host via TCP/IP. Direct TCP Check Duplicate Terminal Number When this parameter is enabled, the 9160 G2 will reject Direct TCP mobile computers which try to connect using a terminal number already in use by another mobile computer.
Chapter 22: The 9160 G2 As Base Station Radio Link Features Configuration Settings 3. Do not enable Auto Startup (see page 303) on any of the 9150 or 9160 G2 base stations running 802.IQ with sessions using Automatic Radio Address and Automatic Terminal Number.
22.4.4 Hosts Menu When the 9160 G2 acts as a base station, it must communicate with a “host”—a 9500 Com- munications Server, or a host computer using a Psion Teklogix Software Development Kit (SDK).
Page 271
Chapter 22: The 9160 G2 As Base Station Hosts Menu Figure 22.9 Overview Of Base Station’s Host Configuration Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 272
Ethernet and radio-link connections. When the 9160 G2 functions as a base station, it communicates with a 9010/ TCP/IP host using a network connection. The 9010 protocol is a proprietary asynchronous protocol de- veloped by Psion Teklogix which uses TESS (Teklogix Screen Subsystem) or ANSI data streams to communicate with mobile computers.
22.4.4.1 9010 Configuration No Online/Offline If this parameter is Enabled, the 9160 G2 base station does not notify the host if the status of a mobile computer changes between offline and online. If this parameter is Disabled, the 9160 G2 does notify the host regarding any mobile computer status changes. The default for this parameter is Disabled.
Page 275
23.4.3.3 Auto-Telnet/Auto-login ..... .295 23.4.3.4 Function Key Mappings ..... .299 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 276
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
• ANSI emulation using TCP/IP over an Ethernet LAN. Note: The 9160 G2 main parameters should first be set up as described in the earlier chap- ters of this manual. The 9160 G2 can also be integrated into a mapRF system, using 802.IQv2 protocol (for de- tails, please refer to the “802.IQ v2 Features Menu”...
A “host” must be configured for each host that communicates with the 9160 G2 mini-controller. Once a host has been configured, selecting the Host Number for that host lists the parameters that can be modified or deleted.
Page 279
Chapter 23: Mini-Controller Configuration Hosts Menu Figure 23.1 Overview Of Hosts Configuration Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 280
Ethernet and radio-link connections. When the 9160 G2 functions as a base station, it communicates with a 9010/ TCP/IP host using a network connection. The 9010 protocol is a proprietary asynchronous protocol de- veloped by Psion Teklogix which uses TESS (Teklogix Screen Subsystem) or ANSI data streams to communicate with mobile computers.
Page 281
• ANSI Emulation (See pages 289 to 299 for Configuration Parameters). When the 9160 G2 Wireless Gateway acts as a base station, it uses the 9010 emulation (a proprietary asynchronous protocol developed by Psion Teklogix) to communicate with a 9500 Communications Server or a host using a Psion Teklogix Software Development Kit (SDK).
TESS. Is Host Fujitsu If this parameter is enabled, the 9160 G2 mini-controller expects the data from the host to contain commands, etc., native to a Fujitsu host. Enabling this parameter causes the standard IBM formatting codes (for start of field, setting buffers, etc.) to be replaced by the codes...
Note: The Command Region parameter must be enabled for this parameter to work. Clear If this parameter is enabled, the 9160 G2 mini-controller creates an empty entry field for an entry field that is filled with spaces. Some host applications rely on the video attributes of displayed characters to highlight fields, particularly entry fields.
Page 284
Note: This operation is only performed on screens received from the host. Data sent to the host remains unaffected. Passthru If this parameter is enabled, the 9160 G2 allows the host to send data directly to the RF mobile computer’s serial port. This is most commonly used for printing. Preparing Host Screens for Pass-Through On the screen to be sent through the mobile computer serial port, the word PASSTHRU (in capital letters) must appear on the first line, starting on the second column.
Page 285
TESS execute procedure command. Local If this parameter is enabled, the 9160 G2 allows the host to provide pages to be loaded as local TESS procedures in the mobile computers. The local procedures are selected from a menu at the mobile computer. The mobile comput- ers can perform these procedures when they are offline.
Page 286
Remote Print When this parameter is enabled, the 9160 G2 sends the print page to a mobile computer whenever the mobile computer requests it (by sending the “F17” function key from the mobile computer, or the “PRINT” key on older mobile computers). The 9160 G2 sends the function response back to the host.
Page 287
After receiving an application screen, the 9160 G2 tries to match the screen with a stored page. If a similar page is already in the mobile computer’s memory, the 9160 G2 instructs the mobile computer to redisplay its copy of the page;...
Page 288
Item No. Mode When the information arrives at the mobile computer screen, the appropriate AIAG field for the scanned information is located using the “AIAG Identifier”. Because Mode 0 was set at Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 289
The range for this parameter – 0 to 255 – represents the decimal values of ASCII characters. A value of 0 disables this feature. The ASCII decimal value entered at the 9160 G2 must co- incide with the value set by the application program.
Page 290
The range for this parameter – 0 to 255 – represents the decimal values of ASCII characters. A value of 0 disables this feature. The ASCII decimal value entered at the 9160 G2 must co- incide with the value set by the application program.
Page 291
The Entry Line parameter allows an automatic offset within the host screen, so that the area displayed by the mobile computer includes an entry field that would normally be out of bounds. Some Psion Teklogix mobile computers only display the upper-left corner of the ap- plication screen because of their smaller display size.
Page 292
This parameter contains the maximum number of characters allowed between two fixed fields which still allows the 9160 G2 to join them into one field. Sometimes the 9160 G2 will join two adjacent fixed fields and then send them as one field. This reduces the overhead on the radio link.
Terminal Type This parameter allows you to choose the type of mobile computer to be emulated by the 9160 G2 for this host. At present the choices of mobile computer for 3274 Emulation are the IBM 3278-2 and IBM 3278-2-E.
Page 294
The default value is 0 (disabled). Actively Negotiate with Host If this parameter is enabled, the 9160 G2 starts negotiations with the host during setup of the telnet connection. Not recommended for most hosts. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 295
LU Name Prefix If no LU Name is specified for a mobile computer, the 9160 G2 will append the Terminal Number (as five digits, with leading zeros if necessary) to the LU Prefix to create the full LU Name.
Page 296
Note: A host name placed in this textbox must be “resolvable” by the 9160 G2: the 9160 G2 must be able to obtain an IP address for it. For example, the host name may corre- spond to an entry in the 9160 G2 host table, or the 9160 G2 may be able to query a domain-name server.
Each function key may be chosen from the same range of possible codes; however, each function key has a different default code. The default values are shown on this page. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
9160 G2 sends the error codes as regular screen text. Use International EBCDIC If this parameter is enabled, the 9160 G2 will swap the positions of the ! and ] characters in the EBCDIC character table. Allow null character in fixed fields: If this parameter is enabled, the 9160 G2 mini-controller allows null characters in the whitespace in fields that have visual video attributes (such as reverse video).
(in capital letters) appears on the application screen, in the location specified by the Command Region parameter (see page 284). The word “ALARM” should be a display-only field. Note: The Command Region parameter must be enabled for this parameter to work. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 300
Note: This operation is only performed on screens received from the host. Data sent to the host remains unaffected. Passthru If this parameter is enabled, the 9160 G2 allows the host to send data directly to the RF mobile computer’s serial port. This is most commonly used for printing. Preparing Host Screens for Pass-Through On the screen to be sent through the mobile computer serial port, the word “PASSTHRU”...
Page 301
TESS execute procedure command. Local If this parameter is enabled, the 9160 G2 allows the host to provide pages to be loaded as local TESS procedures in the mobile computers. The local procedures are selected from a menu at the mobile computer. The mobile comput- ers can perform these procedures when they are offline.
Page 302
Remote Print When this parameter is enabled, the 9160 G2 sends the print page to a mobile computer whenever the mobile computer requests it (by sending the “F17” function key from the mobile computer, or the “PRINT” key on older mobile computers). The 9160 G2 sends the function response back to the host.
Page 303
The 9160 G2 reduces data transmitted to the mobile computers by using the mobile com- puter’s capability to store a page of data for each screen it displays. The 9160 G2 maintains an image of each page stored at the mobile computer. After receiving an application screen, the 9160 G2 tries to match the screen with a stored page.
Page 304
Item No. Mode When the information arrives at the mobile computer screen, the appropriate AIAG field for the scanned information is located using the “AIAG Identifier”. Because Mode 0 was set at Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 305
The range for this parameter – 0 to 255 – represents the decimal values of ASCII characters. A value of 0 disables this feature. The ASCII decimal value entered at the 9160 G2 must co- incide with the value set by the application program.
Page 306
The range for this parameter – 0 to 255 – represents the decimal values of ASCII characters. A value of 0 disables this feature. The ASCII decimal value entered at the 9160 G2 must co- incide with the value set by the application program.
Page 307
The Entry Line parameter allows an automatic offset within the host screen, so that the area displayed by the mobile computer includes an entry field that would normally be out of bounds. Some Psion Teklogix mobile computers only display the upper-left corner of the ap- plication screen because of their smaller display size.
Page 308
This parameter contains the maximum number of characters allowed between two fixed fields which still allows the 9160 G2 to join them into one field. Sometimes the 9160 G2 will join two adjacent fixed fields and then send them as one field. This reduces the overhead on the radio link.
This parameter allows you to choose the type of mobile computer to be emulated by the 9160 G2 for this host. At present the choices of mobile computer for 5250 Emulation are: the IBM 5251-11, IBM 5555-B01, and IBM 3179-2.
Page 310
IP address for it. For example, the host name may corre- spond to an entry in the 9160 G2 host table, or the 9160 G2 may be able to query a Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 311
[ENTER] key. Enable Virtual Device Names If this parameter is enabled, the 9160 G2 negotiates with the host to obtain a virtual device name for the telnet connection. Configure Device Names One LU Name is required for each configured mobile computer.
5250 Emulation Device Name Prefix If no LU Name is specified for a mobile computer, the 9160 G2 will append the Terminal Number (as five digits, with leading zeros if necessary) to the LU Prefix to create the full LU Name.
The range is 0 to 255, with a default value of 15. If the 9160 G2 does not receive any characters from the host after this timeout has elapsed, it assumes that the host has finished sending data and is waiting for user input (in other words, it assumes that a screen of data has been completed).
Page 314
ANSI Emulation Escape Timeout The Escape Timeout is the length of time (in ticks, or 60ths of a second) that the 9160 G2 will hold an “ESC” received from the host, and consider the next received byte to be part of an escape sequence.
Page 315
The 9160 G2 maintains an image of each page stored at the mobile computer. After receiv- ing an application screen, the 9160 G2 tries to match the screen with a stored page. If the page is already in the mobile computer, the 9160 G2 instructs the mobile computer to redis- play its stored copy of the page;...
Page 316
Chapter 23: Mini-Controller Configuration ANSI Emulation If this parameter is enabled, the 9160 G2 uses run-length encoding (RLE) on the data it sends across the radio link. RLE compresses repeated characters going from the host to the mobile computer. If repeated characters are found in the data stream, the first one is sent, fol- lowed by a short escape sequence (3 or 4 characters) which tells the mobile computer how many times to repeat this character.
23.4.3.2 Telnet Protocol Options Terminal Type This parameter specifies the type of mobile computer to be emulated by the 9160 G2. The characters entered in the textbox can be any ASCII string acceptable to the host, with a maximum of 32 characters. The default value is VT100.
Page 318
ANSI Emulation Local IP Address to Bind This parameter specifies the IP address of the 9160 G2 interface that connects to this host. It is used along with the local port numbers to create a unique socket for each terminal session.
When Auto-telnet is disabled, telnet sessions from the mobile computers to the host must be initiated manually from the mobile computers. When Auto-telnet is enabled, the 9160 G2 initiates one telnet session from each mobile computer whose terminal number is mapped to this host. Additional telnet sessions may be initiated from each mobile computer to the host, but they must be initiated manually.
Page 320
Note: A host name placed in this textbox must be “resolvable” by the 9160 G2: the 9160 G2 must be able to obtain an IP address for it. For example, the host name may corre- spond to an entry in the 9160 G2 host table, or the 9160 G2 may be able to query a domain-name server.
Page 321
Auto-login Password Prompt The 9160 G2 compares the text in this textbox to the text presented to it by the host. When they match, the 9160 G2 assumes that the host has just sent its request for a password, and it sends the password specified in the Auto-Login Password parameter to the host.
Page 322
The number of connection attempts to be made automatically before giving up. Allow TCP Sessions When this parameter is enabled, the 9160 G2 allows a mobile computer user to switch prompts or sessions while at the prompt (either Auto-login or TCP). If Allow TCP Sessions is disabled, all new sessions will open as Auto-login sessions.
Each function key may be chosen from the same range of possible codes; however, each function key has a different default code. The default values are shown on the screen above. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
LAN in a network that supports both TCP/IP and 802.IQ protocols simultaneously. 802.IQ protocol is available in two versions: 802.IQ v1 and 802.IQ v2. The 9160 G2 Wireless Gateway can support both versions of the protocol at the same time (mobile computers must use only one).
Page 328
2. Terminal Offline Timeout This parameter sets the time (in minutes) before the 802.IQ task on the 9160 G2 will send an offline message to the cellular master declaring the mobile computer offline. The acceptable value ranges from 1 to 240. The default value is 5.
Page 329
Chapter 24: 802.IQ Settings 802.IQ v1/v2 Common Features Figure 24.1 Overview Of 802.IQ Configuration Settings Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Forward 802.IQ Packets Only When bridging packets between the wireless and wired systems, this parameter enables the 9160 G2 to automatically filter out and discard all non-802.IQ v1 packets. The default setting is disabled. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
5001 to 65535. The default value is 8888. 24.2 Updating 802.IQ Settings To update the 802.IQ settings: 1. Navigate to the 802.IQ Settings page. 2. Configure the settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
The timestamp will be used to indicate the date and time of each event in log messages. See for more general information on NTP. The following http://www.ntp.org sections describe how to configure the 9160 G2 Wireless Gateway to use a specified NTP server. 25.1 Navigating To Time Settings To enable an NTP server, navigate to the Services >...
Daylight Saving Time adjustments are not available. 25.3 Updating Settings To update time settings: 1. Navigate to the Time tab page. 2. Configure the time settings as required. 3. Click the Update button to apply the changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 337
26.6.1 Update........318 26.6.2 Verifying The Firmware Upgrade..... .319 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 338
Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Navigating To The AP’s Configuration Settings You can save a copy of the current settings on the 9160 G2 Wireless Gateway to a backup configuration file. The backup file can be used at a later date to restore the access point to the previously saved configuration.
26.2 Resetting Factory Default Configuration If you are experiencing problems with the 9160 G2 Wireless Gateway and have tried all other troubleshooting measures, use the Reset Configuration function. This will restore factory defaults and clear all settings, including settings such as a new password or wireless settings.
Backup file. 26.5 Rebooting The Access Point For maintenance purposes or as a troubleshooting measure, you can reboot the 9160 G2 Wireless Gateway as follows. 1. Click the Maintenance > Configuration tab. 2. Click the Restore button.
Keep in mind that a successful firmware upgrade restores the access point configura- tion to the factory defaults. (See “Default Settings For The 9160 G2 Wireless Gateway” on page 27.) To upgrade the firmware on a particular access point: 1.
To verify that the firmware upgrade completed successfully, check the firmware version shown on the Upgrade tab (and also on the Basic Settings tab). If the upgrade was success- ful, the updated version name or number will be indicated. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Warning: A ground wire, not exceeding 3 m in length, must be connected between the ground screw (located on the quick-release mount) and a suitable earth ground bonding point on any 9160 G2 connected to an antenna that is installed outdoors.
13 (802.11b/g) and 4 (802.11a) Note: All 802.11a channels are non-overlapping. There are non-overlapping channels in the 2.4 GHz band. RA1001A - Narrow Band Radio Psion Teklogix Proprietary Narrowband Modulation (2/4 level FSK) Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Receive Data Signal Ground – Data Terminal Ready Request to Send * always pulled high Serial Cable Descriptions Cable No. Function Connection Standard Length 9160 G2 to Console Direct 6 feet 19387 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 352
Appendix A: Port Pinouts And Cable Diagrams Serial Cable Descriptions Console Port Cable No. 19387 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
RD – Not used Not used * The 9160 G2 can also accept 48 VDC power bias on the data line pairs (1,2) and (3,6) from such systems providing power over Ethernet. Note: Usually, a straight-through connection is needed to connect Twisted-Pair (10BaseT or 100BaseT) to the hub.
B.8 Configuring WPA/WPA2 Personal (PSK) Security On A Client ... . 29 B.9 Configuring An External RADIUS Server To Recognize The 9160 G2 ..31 B.10 Obtaining A TLS-EAP Certificate For A Client .
Ethernet (wired) connection. The following sections describe how to set up each of the supported security modes on wire- less clients of a network served by the 9160 G2 Wireless Gateway. Network Infrastructure; Choosing Between Built-in Or External Authentication Server...
(The built-in authentication server uses EAP-PEAP authentication protocol.) • If the 9160 G2 Wireless Gateway is set up to use IEEE 802.1x mode and the Built-in Authentication Server, then configure wireless clients as described in “IEEE 802.1x Client Using EAP/PEAP” on page B-15.
• Select the SSID of the network to which you want to connect and click Advanced to bring up the Wireless Network Connection Properties dialog. The Wireless Networks tab (which should be automatically displayed) lists Available networks and Preferred networks. Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 360
2. From the list of Available networks, select the SSID of the network to which you want to connect and click Configure. This brings up the Wireless Network Connection Properties dialog with the Associ- ation and Authentication tabs for the selected network. B-10 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
If you do have security configured on a client for properties of an unsecure network, the se- curity settings actually can prevent successful access to the network because of the mismatch between client and access point security configurations. Psion Teklogix 9160 G2 Wireless Gateway User Manual B-11...
(Or they can all use the same key, but this is less secure because it means one station can decrypt the data being sent by another.) B-12 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 363
Appendix B: Security Settings on Wireless Clients/RADIUS Server Configuring Static WEP Security On A Client If you configured the 9160 G2 Wireless Gateway to use Static WEP security mode..then configure WEP security on each client as follows.
Page 364
Static WEP clients should now be able to associate and authenticate with the access point. As a client, you will not be prompted for a WEP key. The WEP key configured on the client security settings is automatically used when you connect. B-14 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Authentication Protocol (EAP) referred to here as “EAP/PEAP”. • If you are using the Built-in Authentication server with “IEEE 802.1x” security mode on the 9160 G2 Wireless Gateway, then you will need to set up wireless clients to use PEAP. •...
Page 366
. . . then configure IEEE 802.1x security with PEAP authentication on each client as follows: Enable (click to check) IEEE 8021x authentication Choose WEP Choose Open Data Encryption mode . . . then, click Choose Protected EAP (PEAP) Properties Enable auto key option B-16 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 367
Enable (click to check) this option. This key is provided for me automatically 2. Configure this setting on the Authentication tab. Table B.5 Authentication Settings Choose Protected EAP (PEAP). EAP Type Psion Teklogix 9160 G2 Wireless Gateway User Manual B-17...
Some good starting points available on the Web for the Microsoft Windows PKI soft- ware are: “How to Install/Uninstall a Public Key Certificate Authority for Windows 2000” at , and http://support.microsoft.com/default.aspx?scid=kb;en-us;231881 B-18 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 369
To use this type of security, you must do the following: 1. Add the 9160 G2 Wireless Gateway to the list of RADIUS server clients. (See “Con- figuring An External RADIUS Server To Recognize The 9160 G2” on page B-31.) 2.
Page 370
. . . then, click Properties Enable auto key option Enable (click to check) Validate server certificate Select (check) the name of certificate on this client (downloaded from RADIUS server in a prerequisite procedure) B-20 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 371
The certificate you installed is used when you connect, so you will not be prompted for logon information. The certificate is automatically sent to the RADIUS server for au- thentication and authorization. Psion Teklogix 9160 G2 Wireless Gateway User Manual B-21...
Authentication Protocol (EAP) known as “EAP/PEAP”. • If you are using the Built-in Authentication server with “WPA/WPA2 Enterprise (RADIUS)” security mode on the 9160 G2 Wireless Gateway, then you will need to set up wireless clients to use PEAP. •...
Note: The following example assumes you are using the Built-in Authentication server that comes with the 9160 G2 Wireless Gateway. If you are setting up EAP/PEAP on a cli- ent of an AP that is using an external RADIUS server, the client configuration process will differ somewhat from this example especially with regard to certificate validation.
Page 374
Choose Protected EAP (PEAP) Choose WPA the Data Encryption mode . . . then, click Properties Disable Validate server certificate Choose Secured password (EAP-MSCHAP v2) . . . then click Configure Disable this option B-24 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 375
. . . etc. so that upon logon you will be prompted for user name and password. Click OK on all dialogs (starting with the EAP MSCHAP v2 Properties dialog) to close and save your changes. Psion Teklogix 9160 G2 Wireless Gateway User Manual B-25...
To use this type of security, you must do the following: 1. Add the 9160 G2 Wireless Gateway to the list of RADIUS server clients. (See “Con- figuring An External RADIUS Server To Recognize The 9160 G2” on page B-31.) 2.
Page 377
Appendix B: Security Settings on Wireless Clients/RADIUS Server WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate If you configured the 9160 G2 Wireless Gateway to use WPA/WPA2 Enterprise (RADIUS) security mode with an external RADIUS server ..then configure WPA security with certificate authentication on each client as follows.
Page 378
Enable IEEE 802.1x authentication for this network Choose Smart Card or other Certificate. EAP Type 3. Click Properties to bring up the Smart Card or other Certificate Properties dialog and enable the Validate server certificate option. B-28 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Algorithm (AES), and Counter mode/CBC-MAC Protocol (CCMP) mechanisms. PSK employs a pre-shared key for an initial check of client credentials. If you configured the 9160 G2 Wireless Gateway to use WPA/WPA2 Personal (PSK) secu- rity mode . . .
Page 380
Table B.17 Authentication Settings Make sure that IEEE 802.1x authentication is disabled (unchecked). Enable IEEE 802.1x authentica- tion for this network (Setting the encryption mode to WEP should automatically disable authentication.) B-30 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Please consult the documentation for your RADIUS server for information on setting up user accounts. The purpose of this procedure is to identify your 9160 G2 Wireless Gateway as a “client” to the RADIUS server. The RADIUS server can then handle authentication and authorization of wireless clients for the AP.
Page 382
Note: The RADIUS server is identified by its IP address and UDP port numbers for the dif- ferent services it provides. On the current release of the 9160 G2 Wireless Gateway, the RADIUS server User Datagram Protocol (UDP) ports used by the access point are not configurable.
Page 383
3. On the first screen of the New RADIUS Client wizard, provide information about the 9160 G2 Wireless Gateway to which you want your clients to connect: • A logical (friendly) name for the access point. (You might want to use DNS name or location.)
Page 384
Appendix B: Security Settings on Wireless Clients/RADIUS Server Configuring An External RADIUS Server To Recognize The 9160 G2 4. For the Shared secret enter the RADIUS Key you provided to the access point (on the Security page). Re-type the key to confirm.
Some good starting points available on the Web for the Microsoft Windows PKI soft- ware are: “How to Install/Uninstall a Public Key Certificate Authority for Windows 2000” at , and http://support.microsoft.com/default.aspx?scid=kb;EN-US;231881 “How to Configure a Certificate Server” at http://support.microsoft.com/default.aspx?scid=kb;en-us;318710#3 Psion Teklogix 9160 G2 Wireless Gateway User Manual B-35...
Page 386
IP address of your external RADIUS server, or of the IPAddressOfServer Certificate Authority (CA), depending on the configuration of your infrastructure. 2. Click Yes to proceed to the secure Web page for the server. B-36 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 387
This document does not describe how to set up Administrative user accounts on the RADIUS server. Please consult the documentation for your RADIUS server for these procedures. Psion Teklogix 9160 G2 Wireless Gateway User Manual B-37...
Page 388
5. Click User Certificate on the next page displayed. 6. Click Yes on the dialog displayed to install the certificate. 7. Click Submit to complete and click Yes to confirm the submittal on the popup dialog. B-38 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 389
(Also, click Yes on the popup windows to confirm the install and to add the certificate to the Root Store.) A success message is displayed indicating the certificate is now installed on the client. Psion Teklogix 9160 G2 Wireless Gateway User Manual B-39...
In the case of the 9160 G2 Wireless Gateway, if the user has selected to use an external RADIUS server (configured on the Security page), then an External RADIUS server will try to authenticate the user.
- If you can trace more than one path between any pair of APs going through any combination of Ethernet or WDS links, you have a loop. - You can only extend or bridge either the Internal or Guest network, but not both. Psion Teklogix 9160 G2 Wireless Gateway User Manual C-43...
• Reset the access point from its Administration UI. To do this, go to navigate to Reset Configuration, and click the Reset http://IPAddressOfAccessPoint, button. (IP addresses for APs are on the Cluster > Access Points page for any cluster member.) C-44 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 395
(EAPOL). It establishes a framework that supports multiple authentication methods. IEEE 802.1x authenticates users not machines. 802.2 IEEE 802.2 ( ) defines the layer for the family of IEEE Std. 802.2.1998 standards. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-45...
1 to 11 Mbps. 802.11d IEEE 802.11d defines standard rules for the operation of IEEE 802.11 wireless LANs in any country without reconfiguration. PHY requirements such as provides frequency hopping D-46 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 397
TCP reduces the network frequency output power of the AP, thus reducing the chance of any interference. This is a required standard in Europe, Japan, and the U.S. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-47...
Page 398
802.1p is to prioritize network traffic at the data link/ MAC layer. 802.1p offers the ability to filter multicast traffic to ensure it doesn’t increase over layer 2 switched networks. It uses tag frames for the prioritization scheme. D-48 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 399
It is useful for quickly establishing a network in situations where formal infrastructure is not required. Ad hoc mode is also referred to as peer-to-peer mode or an independent basic service set (IBSS). Psion Teklogix 9160 G2 Wireless Gateway User Manual D-49...
Page 400
• The Capability Information lists requirements of stations that want to join the WLAN. For example, it indicates that all stations must use WEP. • The Service Set Identifier (SSID). D-50 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 401
Also see extended service set (ESS) and independent basic service set (IBSS). BSSID Infrastructure Mode, the Basic Service Set Identifier (BSSID) is the 48-bit address of the wireless interface of the Access Point. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-51...
Page 402
If it detects that the channel is busy, the station waits a random amount of time and then attempts to access the media again. CSMA/CA is the basis of the IEEE 802.11e Distributed Control Function (DCF). See also and CTS. D-52 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 403
For example, is the host name of a Web server and is the fully-qualified name of that server. DNS translates the www.psionteklogix.com domain name to some IP address, for example 66.93.138.219 www.psionteklogix.com Psion Teklogix 9160 G2 Wireless Gateway User Manual D-53...
Page 404
Dynamic IP Address Address. The Extensible Authentication Protocol (EAP) is an authentication protocol that supports multiple methods, such as token cards, Kerberos, one-time passwords, certificates, public key authentication, and smart cards. D-54 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 405
Mbps transmission rates at 2.4GHz) when paired with Orthogonal Frequency Division Multiplexing (OFDM). Built into ERP and the IEEE 802.11g standard is a scheme for effective interoperability of IEEE 802.11g stations with IEEE 802.11b nodes on the same channel. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-55...
Page 406
Before a host on a can access the Internet, it needs to know the address of its default gateway. D-56 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 407
“distribution system”. This includes the exchange of information about mobile stations and the maintenance of bridge forwarding tables, plus securing the communications between access points. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-57...
IP is a connectionless, best-effort packet switching protocol. It provides packet routing, fragmentation and re-assembly. It is combined with higher-level protocols, such as or UDP, to establish the virtual connection between destination and source. D-58 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 409
It uses shared public keys. There are two encryption modes: Transport and Tunnel. • Transport mode encrypts only the data portion (payload) of each packet, but leaves the headers untouched. • The more secure Tunnel mode encrypts both the header and the payload. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-59...
Page 410
A LAN connects multiple computers and other network devices such as storage and printers. Ethernet is the most common technology implementing a LAN. Wireless Ethernet (802.11) is another very popular LAN technology (also see WLAN). D-60 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 411
Ethernet ports in hardware devices. Built-in twisted pair cabling and auto- sensing enable connection between like devices with the use of a standard Ethernet cable. (For example, if a wireless access point supports MDI/MDIX, one can successfully connect Psion Teklogix 9160 G2 Wireless Gateway User Manual D-61...
Page 412
Broadcast. Network Address Translation is an Internet standard that masks the internal IP addresses being used in a LAN. A NAT server running on a gateway maintains a translation table that D-62 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
For example, protocols such as CSMA/CA and components like addresses, and Frames are all defined and dealt with as a part of the Data-Link layer. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-63...
Page 414
Physical Layer conveys the bit stream - electrical impulse, light or radio signal -- through the network at the electrical and mechanical level. It provides the hardware means of sending and receiving data on a medium, including defining cables, NICs, and physical aspects. D-64 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
If it cannot, it forwards them to the real server. Proxy servers have two main purposes: improve performance by spreading requests over several machines and filter requests to prevent access to specific servers or services. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-65...
Page 416
IEEE 802.11 parlance, roaming clients are mobile client stations or devices on a wireless network (WLAN) that require use of more than one Access Point (AP) as they move out of D-66 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 417
This message is a part of the IEEE 802.11 CSMA/CA protocol. (See also RTS Threshold and CTS.) Psion Teklogix 9160 G2 Wireless Gateway User Manual D-67...
Page 418
It is also referred to as the Network Name. There are no restrictions on the characters that may be used in an SSID. Static IP Address Address. D-68 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
A station may be able to receive data at any of the rates listed in this set. All stations must be able to receive data at the rates listed in the Basic Rate Set. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-69...
Page 420
“Michael”), and a re-keying mechanism. It uses a stream cipher to encrypt the frame body and CRC of each 802.11 frame before transmission. It is an important component of the 802.11h security mechanisms. D-70 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 421
“best-effort” settings depending upon the requirements of the data. The ToS field is used by the 9160 G2 Wireless Gateway to provide configuration control over Quality of Service (QoS) queues for data transmitted from the AP to client stations.
Page 422
The nodes in a VLAN share resources and bandwidth, and are isolated on that network. The 9160 G2 Wireless Gateway supports the configuration of a wireless VLAN. This technology is leveraged on the access point for the “virtual” guest network feature.
Page 423
(ESS). WLAN Wireless Local Area Network (WLAN) is a that uses high-frequency radio waves rather than wires to communicate between its nodes. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-73...
Page 424
WRAP Wireless Robust Authentication Protocol (WRAP) is an encryption method for 802.11h that uses but another encryption mode ( ) for encryption and integrity. D-74 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 425
The Extensible Markup Language (XML) is a specification developed by the . XML is a simple, flexible text format derived from Standard Generalized Markup Language (SGML), designed especially for electronic publishing. Psion Teklogix 9160 G2 Wireless Gateway User Manual D-75...
Page 428
61 Callsign troubleshooting D-44 types of access points supported 56 Period understanding 55 RRM group 238 Collision Period, narrow band radio 229 Size String narrow band radio 228 RRM group 239 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 429
19 pinouts B-3 Direct TCP Check Duplicate Terminal 100Base-FX fiber optic 22 Number, Radio Link Features 244 100BaseT 21 Direct TCP Connections for TekTerm, pinouts B-3 Radio Link Features 244 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 430
95 5250 288 IEEE 802.11 ANSI Function Key Remapping, radio mode, configuring 169 Emulation rate set, configuring 169 standards support 10 IEEE 802.11a General Parameters, narrow band radio configuring 169 IEEE 802.11b Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 431
60 configuration settings 222, 231 logon administration Web pages 40 Connectivity Options, Base Station Log Relay Host For Kernel Messages, Mode 225 Event Logs 124 Connectivity Options, RRM Mode loops, WDS 205 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 432
23 5250 Emulation Passthru 3274 Emulation processor 324 5250 Emulation progress bar for cluster auto-sync 58 password Protocol network setting for administrator 49 Type ID, 802.IQv1 306 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 433
RRM Group Number 236 turning on or off 169 Shared Channel 237 802.11A/G radio 324 Size of Poll Windows 238 802.11G radio 324 Sync Delay 239 Radio Card Status RRM Groups configuration settings 234 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 434
Emulation Simple Network Management Protocol Hosts terminal range, menu 256 (SNMP) 213 Hosts terminal range, menu 256 Size of Poll Windows Hosts terminal range, menu (9010 narrow band radio 228 emulation) 248 Psion Teklogix 9160 G2 Wireless Gateway User Manual...
Page 435
100Base-FX fiber optic port 22 configuring on WPA/WPA2 Enter- 100BaseT Ethernet 21, B-3 prise (RADIUS) client C-22 3274/Telnet 258–273 Protocol 5250 Emulation 274–288 video display terminal, connecting 23 802.IQ Visible Match Character Auto-Startup 303 3274 Emulation Psion Teklogix 9160 G2 Wireless Gateway User Manual...