Atlantis Land FlyBoost CL100 User Manual

Flyboost wireless network access point
Table of Contents

Advertisement

Quick Links

FlyBoost CL100
A02-OCL100

USER MANUAL

A02-OCL100_ME01

Advertisement

Table of Contents
loading

Summary of Contents for Atlantis Land FlyBoost CL100

  • Page 1: User Manual

    FlyBoost CL100 A02-OCL100 USER MANUAL A02-OCL100_ME01...
  • Page 2: Table Of Contents

    Table of Contents OVERVIEW THE PRODUCT .............. 1 Introduction ....................1 Features and Benefits................... 2 When to Use Which Mode................3 Access Point Client Mode ............... 3 Wireless Routing Client Mode..............3 PERFORM BASIC CONFIGURATION ..........5 Setup Management Port................5 To Setup DHCP Server................
  • Page 3 Configure Virtual Servers based on IP Forwarding ......70 Control the Bandwidth Available ............71 Enable Bandwidth Control ..............71 Configure WAN Bandwidth Control............. 72 Configure LAN Bandwidth Control............73 Perform Remote Management..............75 Setup Remote Management..............75 Setup Email Notification................76 Using Static Address Translation..............
  • Page 4 Reboot the System................123 Change the Password................124 To Logout....................125 Use the HELP menu ................... 126 View About System................126 APPENDIX: USE THE COMMAND LINE INTERFACE ....127...
  • Page 5: Overview The Product

    Overview the Product Introduction The high-performance Wireless Network Access Point (AP) is designed for enterprise and public access applications. Embedded with the Atheros chipset, it boasts network robustness, stability and wider network coverage. Based on 802.11, the access point supports high- speed data transmission of up to 54Mbps in the 2.4GHz frequency band.
  • Page 6: Features And Benefits

    Features and Benefits Highly Secured Wireless Network The access point supports the highest available wireless security standard: WPA2. WPA2 has two different modes: WPA2-Personal for SOHO users and WPA2-Enterprise for Enterprise users. The access point also supports IEEE 802.1x for secure and centralized user-based authentication.
  • Page 7: When To Use Which Mode

    When to Use Which Mode Access Point Client Mode In Access Point Client Mode the device acts as a wireless client. When connected to an access point, it creates a network link between the Ethernet network connected at this client device, and the wireless Ethernet network connected at the access point.
  • Page 8 Broadband Internet Access Type: Static IP Address Use Static IP Address if you have subscribed to a fixed IP address or to a range of fixed IP addresses from your ISP. Dynamic IP Address With Dynamic IP Address the access point requests for, and is automatically assigned an IP address by your ISP, for instance: •...
  • Page 9: Perform Basic Configuration

    Perform Basic Configuration Setup Management Port At the Management Port Setup page, you may: • Set Ethernet Link Speed and duplex settings. • Automatically obtain IP address from DHCP server. The default IP 192.168.168.1 is used until a new IP is obtained. Access Point Clients also allows PCs connected to the Ethernet port to obtain IP from the DHCP server at the access point end network.
  • Page 10 Follow these steps to automatically obtain the IP address from DHCP server. Click on from from the menu. Select to Select to either and enter the parameters, if any. In the page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network.
  • Page 11 If you choose to Use the following DNS server addresses. Click on the button to save your new parameters. Page 7...
  • Page 12 This table describes the parameters that can be modified in the Management Port Setup page if you select to Use the following DNS server addresses. Parameters Description Primary DNS Your ISP usually provides the IP address of IP Address the DNS server. Secondary This optional field is reserved for the IP DNS IP...
  • Page 13 Follow these steps to manually define the IP address. Click on from from the menu. Select to In the page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network. The parameters are the same in routing mode.
  • Page 14 This table describes the parameters that can be modified in the Management Port Setup page. Parameters Description IP Address When the DHCP server of the access point is enabled (unless you set a different DHCP Gateway IP Address), this LAN IP Address would be allocated as the Default Gateway of the DHCP client.
  • Page 15: To Setup Dhcp Server

    To Setup DHCP Server There are 3 DHCP Modes: • NONE By default, DHCP Mode is set to NONE. Leave the selection at this mode if you do not wish to use DHCP. • DHCP Server Select this mode to setup a DHCP server. •...
  • Page 16 The following will guide you to setup the DHCP Server. Click on from from menu. , refer to the table below to set the appropriate values to suit the needs of your network. Click on the button. Page 12...
  • Page 17 This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN.
  • Page 18 DHCP Gateway IP Though the DHCP server usually also acts as the Address Default Gateway of the DHCP client, the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client. The DHCP client will thus receive its dynamic IP address from the access point but will access to the Internet or the other LAN through the Default Gateway defined...
  • Page 19 The following will guide you to setup the DHCP Relay. Click on from from menu. , refer to the table below to set the appropriate values to suit the needs of your network. Click on the button. Page 15...
  • Page 20 This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description DHCP Server IP This is the IP address of the DHCP server. DHCP Gateway IP Though the DHCP server usually also acts as the Default Gateway of the DHCP client, the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client.
  • Page 21: View Active Dhcp Leases

    View Active DHCP Leases Select from the menu. Go to the section and click on the button. The DHCP Active Leases table displays: • The Host Name of the DHCP client. • The IP Address allocated to the DHCP client. •...
  • Page 22: Reserve Ip Addresses For Predetermined Dhcp Clients

    Reserve IP Addresses for Predetermined DHCP Clients A reserved IP address is excluded from the pool of free IP addresses the DHCP server draws on for dynamic IP address allocation. For instance if you set up a publicly accessible FTP or HTTP server within your private LAN, while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
  • Page 23 Fill in: The host portion of the IP Address to be reserved. The Hardware Address, in pairs of two hexadecimal values. Press the button to effect your new entry. page refreshes to display the currently reserved IP addresses. Page 19...
  • Page 24: Delete Dhcp Server Reservation

    Delete DHCP Server Reservation Select the reserved IP address to delete. Click on the button. table refreshes to display your changes. Page 20...
  • Page 25: Setup Wlan

    Setup WLAN Configure the Basic Setup of the Wireless Mode Select from the menu and you will see the sub menus expanded under , select The default operating mode of the access point is the Access Point mode. To change the current mode of the access point click on select the , and click on the button to access...
  • Page 26 Step 3: Enter the parameters in their respective fields, click on the button and reboot your device to let your changes take effect. Note that the pages for the modes are different. Example: page for Example: page for Page 22...
  • Page 27 WLAN Basic Setup Description page Parameters The Current Mode The default operating mode is the Access Point mode. Operating modes: • Access Point Mode • Client Mode • Wireless Routing Client • Gateway Mode • Wireless Adapter Mode • Transparent Client Mode •...
  • Page 28 Wireless Profile A selection of network environment types in which to operate the access point: • • Supports wireless A clients with data rates of up to 54Mbps in the frequency range of 5.4GHz. • • Supports wireless B clients with data rates of up to 11Mbps in the frequency range of 2.4GHz.
  • Page 29 Act as RootAP The access point will connect with 1, or multiple clients to create a point-to-point and point-to-multi-point connection network with 2 or more access points. This connection mode is fully compliant with 802.1h standards. VLAN ID This is the number that identifies the different virtual network segments to which the network devices are grouped.
  • Page 30: Scan For Site Survey

    Scan for Site Survey (Available in Client and Wireless Routing Client modes) In the page click on the button. provides a list of the neighbouring access points detected, the (channels), (Authentication), (Algorithm) used, and the strength of the received. Page 26...
  • Page 31 To connect the client to one of the access points detected, select the radio button corresponding to the access point you want to connect Click on the button to effect the change and return to the setup page. Click on the button to update the screen.
  • Page 32 Read-Only Parameters of Description Neighbouring Access Points Viewable from Site Survey page Bssid Wireless MAC address of the access point in an wireless network infrastructure. SSID Network name that uniquely identifies the network to which the access point is connected. Chan Channel being used for transmission.
  • Page 33: View Link Information

    View Link Information (Available in Client and Wireless Routing Client modes) To view the connection status when the client is linked to another access point, click on the button. table displays the following data: Page 29...
  • Page 34 Parameters Viewable from Description Link Information page State Displays whether the State is Scanning or Associated, and MAC address of the access point to which the client is connected. Current Channel Channel presently being used for transmission. Tx Rate Rate of data transmission in Mbps. Signal Strength Intensity of the signal received, in percentage.
  • Page 35: Align The Antenna

    Align the Antenna Antenna Alignment precisely aligns the antenna over long distances for higher signal strength to improve the connection between the access point and another access point. Select from the menu. You will see the sub-menus expanded under . Click on page can act as a diagnostic tool to check the communication with a remote device.
  • Page 36 NOTE If no MAC address is entered, the Antenna Alignment tool will make use of the SSID to align the antenna. Please ensure that the correct SSID is entered. If more than one access point share the same SSID, the access point with the strongest signal will be shown.
  • Page 37: Configure The Advanced Setup Of The Wireless Mode

    Configure the Advanced Setup of the Wireless Mode Select from the menu to expand four sub-menus. From here, select Enter the parameters in the page. Click on the button to update the changes. Page 33...
  • Page 38 Advanced Setup Parameters Description Amount of time between beacon transmissions. This tells the Beacon Interval client when to receive the beacon. A beacon is a guidance (Only in Access Point mode) signal sent by the access point to announce its presence to other devices in the network.
  • Page 39: View The Statistics

    View the Statistics The Statistics feature reveals information on the wireless device connected to the WLAN. Select from the menu. The sub-menus under expand, select Wireless clients that are connected to the WLAN are shown in the WLAN Station List. Click on the button to get the latest information on the availability of wireless clients in the wireless network.
  • Page 40: Setup Your Wan

    Setup your WAN (Available in Wireless Routing Client and Gateway modes) NOTE: Any changes to the WAN Setup will only take effect after rebooting. Setup your WAN to share Internet connection among the clients of the access point. Setup your WAN for cable internet whereby WAN IP address is dynamically assigned by ISP The access point is pre-configured to support this WAN type.
  • Page 41 Note: Additional configuration might be required before your ISP will allocate an IP address to the access point. Certain ISPs require authentication through a DHCP Client ID before releasing a public IP address to you. The access point uses the System Name in the System Identity as the DHCP Client ID.
  • Page 42 Setup your WAN for cable internet whereby fixed WAN IP address is assigned by ISP WAN Setup Parameters Example: • IP Address: 203.120.12.240 • Network Mask: 255.255.255.0 • Gateway IP Address: 203.120.12.2 Step 1: Step 2: Select WAN Type Static IP Address Apply Step 3: Fill in the information provided by your ISP in the...
  • Page 43 Setup your WAN for ADSL Internet using PPP over Ethernet If you subscribe to an ADSL service using PPP over Ethernet (PPPoE) authentication, you can set up your access point’s WAN type as follows. For example, you may configure an account whose username is ‘guest’...
  • Page 44 Step 3: Enter your account name assigned by your ISP (Example: guest) in the field for , followed by your account Select if you want your access point to always maintain a connection with the ISP. Otherwise select for the access point to connect to the ISP automatically when it receives Internet requests from the PCs in your network.
  • Page 45 You can limit the maximum size a packet can be in a network by setting (Maximum Transmissible Unit). Click the Button in has a range of 1 to 1492. Enter the and click Page 41...
  • Page 46 Setup your WAN for ADSL Internet using Point-to-Point Tunneling Protocol (PPTP) WAN Setup Parameters Example: • IP Address: 203.120.12.47 • Network Mask: 255.255.255.0 • VPN Server: 203.120.12.15 Step 1: CONFIGURATION WAN Setup Step 2: Access the page and select before clicking the button.
  • Page 47 Step 3: Fill in the information provided by your ISP in the , and fields, and click the button. Select under and click the button to effect the settings setting allows you to specify the value in seconds after the last Internet activity by which the access point will disconnect from the ISP.
  • Page 48: Setup Telnet / Ssh

    Setup Telnet / SSH Telnet allows a computer to remotely connect to the access point CLI (Command Line Interface) for control and monitoring. SSH (Secure Shell Host) establishes a secure host connection to the access point CLI for control and monitoring. Step 1: Select Telnet/SSH Setup...
  • Page 49 Step 3: To add user: 1. Click the button. 2. In Add User Entry Page, enter the User Name, Password, and specify whether the user is granted permission to Read Only or Read/Write. 3. Click the Apply button. To Delete User: 1.
  • Page 50: Access The Telnet Command Line Interface

    Access the TELNET Command Line Interface You may connect to the CLI (Command Line Interface) via a TELNET session to the default IP 192.168.168.1 Microsoft TELNET command is shown here but any TELNET client can be used. 1. Enter C:\WINDOWS\TELNET 192.168.168.1 at DOS prompt and the TELNET application will launch and connect.
  • Page 51: Access The Secure Shell Host Command Line Interface

    Access the Secure Shell Host Command Line Interface SSH provides the best remote access security using different forms of encryption and ciphers to encrypt sessions, and providing better authentication facilities and features that increase the security of other protocols. An encrypted connection like SSH is not viewable on the network. The server can still read the information, but only after negotiating the encrypted session with the client.
  • Page 52: Set The Web Mode

    Set the WEB Mode The access point supports HTTPS (SSL) featuring additional authentication and encryption for secure communication, in addition to the standard HTTP. Step 1: Select Web Management Setup from the CONFIGURATION menu. Step 2: 1. Select whether to set web server to HTTP or HTTPS (SSL) mode. 2.
  • Page 53: Setup Snmp

    Setup SNMP The Simple Network Management Protocol (SNMP) is a set of communication protocols that separates the management software architecture from the hardware device architecture. Step 1: Select from the menu. Step 2: Select from the drop-down list. is set to public while the is set to private by default.
  • Page 54: Setup Snmp Trap

    Setup SNMP Trap The SNMP Trap saves network resources through eliminating the need for unnecessary SNMP requests by providing notification of significant network events with unsolicited SNMP messages. Step 1: Select from the menu. Step 2: 1. Select whether to SNMP Trap.
  • Page 55: Use Mac Filtering

    Use MAC Filtering MAC Filtering acts as a security measure by restricting user network access according to MAC address. Each WLAN or radio card supports up to 16 virtual access points and has its own MAC address listing. NOTE MAC Filtering will not filter any MAC address from the Ethernet port.
  • Page 56: Add A Mac Address To The Mac Address List

    Add a MAC Address to the MAC Address List Select from The MAC Address Filtering page displays. In this page you may also set the MAC Filtering Status to for access points and set the Policy to either MAC addresses. MAC Filtering set to with Policy to only...
  • Page 57 MAC Filter Address List page displays. Click the button. The Add MAC Address page displays. Enter the MAC Address of the client in the format xx-xx-xx-xx-xx-xx, where x can take any value from 0 to 9 or a to f. Enter the Comment.
  • Page 58 MAC Filter Address List page displays with updated MAC Address List. NOTE Please reboot to effect all changes and new MAC address entries. Page 54...
  • Page 59: Delete A Mac Address From All Access Points

    Delete a MAC Address From All Access Points Select from The MAC Address Filtering page displays. Select The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete. Click the button. Page 55...
  • Page 60 The MAC Filter Address List page displays with updated MAC Address List. Page 56...
  • Page 61: Delete A Mac Address From Individual Access Point

    Delete a MAC address from individual access point Select from The MAC Address Filtering page displays. Select for the corresponding access point. The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete. Click the button.
  • Page 62 The MAC Filter Address List page displays with updated MAC Address List. Page 58...
  • Page 63: Edit Mac Address From The Mac Address List

    Edit MAC Address from the MAC Address List Select from The MAC Address Filtering page displays. Select MAC Filter Address List page displays. Select the MAC address to edit. Page 59...
  • Page 64 The Edit MAC Address page displays. Edit the MAC address settings accordingly. Click the button. The MAC Filter Address List page displays with updated MAC Address List. Page 60...
  • Page 65: Perform Advanced Configuration

    Perform Advanced Configuration Setup Routing (Available in Wireless Routing Client and Gateway modes) The access point allows you to add a static routing entry into its routing table to re-route IP packets to another access point. This is useful if your network has more than one access point.
  • Page 66: Configure Static Routing

    Configure Static Routing Step 1: Select from the command menu. The page displays. Initially the table contains the default routing entries of the access point. Step 2: Click on the button, then click the Add button. Step 3: Enter the , and , and click button.
  • Page 67: Use Routing Information Protocol

    Use Routing Information Protocol (Available in Wireless Routing Client and Gateway modes) RIP (Routing Information Protocol) allows information to be exchanged within a set of routers under the same administration. RIPv1 bases the path used to pass traffic between routers on the fewest number of hops between the source and destination IP addresses within a packet.
  • Page 68: Use Network Address Translation

    Use Network Address Translation (Available in Wireless Routing Client and Gateway modes) NAT (Network Address Translation) allows multiple PCs in a private network to share a single public IP address by using different TCP ports to identify requests coming from different PCs, and is enabled by default.
  • Page 69: Configure Virtual Servers Based On Dmz Host

    Configure Virtual Servers Based on DMZ Host DMZ (De-Militarized Zone) makes specific PCs in a NAT-enabled network directly accessible from the Internet. With NAT, the access point keeps track of which client is using which port number and forwards Internet replies to the client according to the port number in the reply packet.
  • Page 70: Configure Virtual Servers Based On Port Forwarding

    Configure Virtual Servers Based on Port Forwarding Virtual Server based on Port Forwarding forwards Internet requests arriving at the access point WAN interface to specific PCs in the private network based on their ports. Step 1: Select from the command menu. Step 2: Click the button in...
  • Page 71 Step 3: In the page, you can set up a Virtual Server for a type by selecting from a drop-down menu or you can define a Page 67...
  • Page 72 Known Server Server Type : Select from the drop-down list of known server types: • HTTP • FTP • POP3 • Netmeeting Private IP : Specify the LAN IP address of the server PC running within the Address private network. Public IP : Select All, Single, or Range from the dropdown list.
  • Page 73 Public IP : Select All, Single, or Range from the dropdown list. From : Enter the beginning of the range. : Enter the end of the range. For example to set up a web server on a PC with IP address 192.168.168.55, set the as HTTP and set the , then click on the button.
  • Page 74: Configure Virtual Servers Based On Ip Forwarding

    Configure Virtual Servers based on IP Forwarding If you are subscribed to more than one IP address from your ISP, virtual servers based on IP forwarding can forward all Internet requests regardless of the port number to defined computers in the private network.
  • Page 75: Control The Bandwidth Available

    Control the Bandwidth Available (Available in Wireless Routing Client mode) You can control the bandwidth available to subscribers to prevent the occurrence of massive data transfer that can slow down the network. Enable Bandwidth Control Step 1: Select from the command menu.
  • Page 76: Configure Wan Bandwidth Control

    Configure WAN Bandwidth Control The Upload / Download Bandwidth Setting can limit throughput to the defined rates regardless of the number of connections. Step 1: Select from the sub- menu from the command menu. Step 2: Enter the The default values are 0, which indicates that there is no bandwidth limit.
  • Page 77: Configure Lan Bandwidth Control

    Configure LAN Bandwidth Control Bandwidth Control can also limit LAN users’ throughput. Step 1: Select from the sub- menu from the command menu. Step 2: Click the button to create the bandwidth rule for LAN user. Page 73...
  • Page 78 Step 3: Click the button to create the rule for LAN user’s bandwidth control. Parameters Description Rule Name You can set a name for the bandwidth control rule. Committed Rate Minimum bandwidth rate of throughput. (kbit) NOTE: The sum of the Committed Rate of all the rules should not exceed the total rate available.
  • Page 79: Perform Remote Management

    Perform Remote Management (Available in Wireless Routing Client and Gateway modes) You can use the access point web-based interface from the Internet to manage your network remotely. Setup Remote Management Step 1: Select from the command menu. Step 2: To disable Remote Management, set to 0 To enable Remote Management, set to an unused...
  • Page 80: Setup Email Notification

    Setup Email Notification This feature notifies you by email if there is a change in the WAN IP address that was supplied to you. Step 1: Select from command menu. Step 2: Click on the button. Step 3: Select to Email Notification and enter the following details: •...
  • Page 81 Step 4: Specify whether the SMTP server not by setting the checkbox accordingly. By default it is not selected. Step 5: Click on the button. Page 77...
  • Page 82: Using Static Address Translation

    Using Static Address Translation (Available in Wireless Routing Client mode) If you use a notebook for work in the office, you most probably bring it home to connect to the Internet as well. Since it is most likely that your office network and home network broadband-sharing network subnets are configured differently, you would have the hassle of reconfiguring your TCP/IP settings every time you use the notebook in a different...
  • Page 83: Dynamic Dns Setup

    Dynamic DNS Setup With Dynamic IP Internet connection, keeping track of your public IP address for Internet communication is complicated as it is changed regularly by the ISP. If you are doing some web hosting on your computer, Internet users will have to keep up with the changing IP address to access your computer.
  • Page 84: To Manage Dynamic Dns List

    To manage Dynamic DNS List Step 1: Select from the command menu. Step 2: If you have created a list earlier, click on the button to update the list. Step 3: To add a new Dynamic DNS, click on the Add button.
  • Page 85 2 DDNS providers are predefined for you. You need to be connected to the Internet to register your DDNS account. Select 2MyDNS – Dynamic DNS Service Provider as DDNS Service Provider: Step 1: Under the column in list, check the radio button next to –...
  • Page 86 Optional Step 5: In the Mail Exchanger field, enter the Static WAN IP address of the mail server configured to handle email for your domain. Select to enable this service. Step 6: Click on the Add button. The new domain is added to the Dynamic DNS list table.
  • Page 87 Select DtDNS as DDNS Service Provider: Step 1: Under the column in list, check the radio button next to entry. Click on the button. Step 2: Enter your Step 3: checkbox is selected by default. field is empty by default. These default settings should be used if dynamic WAN IP connection is used.
  • Page 88: Use The Wireless Extended Features

    Use the Wireless Extended Features Set Preferred APs (Available in Client Mode) When there is more than one AP with the same SSID, the Preferred APs function allows you define the MAC address of the APs in order of preference. The MAC address at the top of the Preferred APs list has the highest connection preference, and the MAC address at the bottom has the lowest connection preference.
  • Page 89: Get Long Distance Parameters

    Get Long Distance Parameters The access point can calculate and display suggested values for certain parameters to use to ensure that efficient wireless communication between physically distant access points. Select from under Click on the button under the section. Select to function.
  • Page 90 The access point can automatically calculate the values of the parameters to input based on the distance between your access point and the other wireless device. Enter the distance in meters and click on the button. You can enter the parameters based on the recommended values in the pop- up window, click on the button to update the changes.
  • Page 91: Set Wireless Multimedia

    Set Wireless Multimedia Wireless Multimedia (WMM) is a QoS (Quality of Service) standard in IEEE802.11E that we have adopted to improve and support the user experience for multimedia, video, and voice applications by prioritizing data traffic. QoS can be realized through 4 different Access Categories (AC).
  • Page 92 Follow these steps to change the setup Wireless Multimedia on your access point. Step 1: 1. Click on WLAN Setup from the CONFIGURATION menu. 2. Select Advanced. Step 2: Click on the WMM Settings button. Step 3: Select to Enable Wireless Multimedia (WMM) Enter the desired WMM parameters.
  • Page 93 WMM Parameters (for advanced users) AIFs (Arbitrary Arbitrary Inter-Frame Space is the minimum wait time interval Inter-Frame between the wireless medium becoming idle and the start of Space) transmission of a frame over the network. Cwmin Contention Window Minimum is the minimum random wait time (Contention drawn from this interval or window for the backoff mechanism on Window...
  • Page 94: Secure Your Wireless Lan

    Secure your Wireless LAN Step 1: Select from under the menu. Step 2: Make a selection from the drop-down list. is set to by default. Click on the button. NOTE All nodes in your network must share the same wireless settings in order to communicate. Page 90...
  • Page 95: Setup Wep

    Setup WEP At the WEP Setup page, Specify the , by selecting either: • • • • Select the from the pull down menu: • • • • • • • • The access point lets you define up to four different transmission keys. It defines a set of shared keys for network security.
  • Page 96: Setup Wpa-Personal

    Setup WPA-Personal (Available in Access Point mode) Follow these steps if you have activated the WPA-Personal, WPA2- Personal or WPA-Personal-AUTO security modes. At the page, Specify the , by selecting either: • • • • Fill in the pre-shared network key: If you are using the format, your entry can consist of a minimum of 8 alphanumeric characters or a...
  • Page 97 For WPA-Personal Set the WPA replaces WEP with a strong encryption technology called Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC). For WPA2-Personal Set the Advanced Encryption Standard (AES) is a stronger symmetric 128-bit block data encryption technique. AES is a requirement of WPA2 under the IEEE 802.11i standard.
  • Page 98: Setup 802.1X/Radius

    Setup 802.1x/RADIUS (Available in Access Point mode) At the IEEE 802.1x Setup page, Key in the IP address of the in your WLAN. You can optionally add in the IP address of a , if any. The RADIUS authentication server MUST be in the same subnet as the access point.
  • Page 99 Select the of each encryption key: • • 10 hexadecimal or 5 ASCII Text • • 26 hexadecimal or 13 ASCII Text Click the button and reboot your system, after which your settings will become effective. Page 95...
  • Page 100: Setup Wpa Enterprise

    Setup WPA Enterprise (Available in Access Point mode) Follow these steps if you have selected the WPA, WPA1-Enterprise, WPA2-Enterprise, or WPA-Enterprise-AUTO security modes. At the page, Key in the IP address of the in your WLAN. You can optionally add in the IP address of a , if any.
  • Page 101 Select the of each encryption key: • • 10 hexadecimal or 5 ASCII Text • • 26 hexadecimal or 13 ASCII Text For WPA-Enterprise Set the WPA replaces WEP with a strong encryption technology called Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC).
  • Page 102: Configure The Security Features

    Configure the Security Features Use Packet Filtering Packet filtering selectively allows /disallows applications from Internet connection. Configure Packet Filtering Step 1: Select from the command menu. Step 2: Select the clicking on the button. Step 3: Select from three choices: , and then click on the button.
  • Page 103 Range of IP addresses In this case, you will have to define (From) which IP address (To) which IP address, your range extends. Single IP address Here, you need only specify the source IP address in the (From) field. IP address You may here, leave both, the (From) as well as the...
  • Page 104 4e). At the Time of the Day drop down list, you may also choose to apply the rule to: Range of time In which case, you have to specify the time in the format HH:MM, where may take any value from 00 to 23 and MM, any value from 00 to 59.
  • Page 105: Use Url Filtering

    Use URL Filtering URL Filtering allows you to block objectionable websites from your LAN users. Configure URL Filtering Step 1: Select from the command menu. Step 2: To select the click the button. Step 3: Select to and then click on the button.
  • Page 106: Configure The Firewall

    Configure the Firewall Configure SPI Firewall Stateful Packet Inspection (SPI) thwarts common hacker attacks like IP Spoofing, Port Scanning, Ping of Death, and SynFlood by comparing certain key parts of the packet to a database of trusted information before allowing it through. NOTE Firewall security rules should be planned carefully as incorrect configuration may cause improper network function.
  • Page 107 You may add more firewall rules for specific security purposes. Click on the radio button at the screen shown above, followed by the button. Rule : Enter a unique name to identify this firewall rule. Name Disposition : This parameter determines whether the packets obeying the rule Policy should be accepted or denied by the firewall.
  • Page 108 Destination Informs the host that a unreachabl datagram cannot be delivered. Source Informs the host to lower the quench rate at which it sends datagrams because of congestion. Redirect Informs the host of a preferred route. Time Indicates that the Time-to- exceeded Live (TTL) of an IP datagram has expired.
  • Page 109 Destinatio : This parameter determines the application from the specified n Port destination port. Users can either set a single port number or a range of port numbers. Check : This parameter refers to the options in the packet header. The Options available selection options are abbreviated as follows: SEC –...
  • Page 110: Use The Firewall Log

    Use the Firewall Log The Firewall Log captures and stores network traffic information such as the type of data traffic, the time, the source and destination address / port, as well as the action taken by the firewall. View Firewall Logs Step 1: Select from the...
  • Page 111: Administer The System

    Administer the System Use the System Tools Use the Ping Utility (Available in Wireless Routing Client and Gateway modes.) You can check whether the access point can communicate (ping) with another network host with the Ping Utility. Step 1: Select under the command menu.
  • Page 112: Use Syslog

    Use Syslog Syslog forwards system log messages in a network to a machine running a Syslog listening application. It is used to help in managing the computer system and increase security on the network. Freeware supporting Syslog is widely available for download from the Internet.
  • Page 113 Follow these steps to setup Syslog: Step 1: Click on from the menu. Step 2: Select to Syslog. Enter the Enter the Click to make the changes. Page 109...
  • Page 114 Follow these sample steps to view logged information: Step 1: Search for a Syslog listening application. Step 2: Select a Syslog listening application. Step 3: Download Syslog listening application. Step 4: Install Syslog listening application. Step 5: View logged information on Syslog listening application. Page 110...
  • Page 115: Set System Identity

    Set System Identity You can set the System Identity of the access point to be uniquely identifiable. Select from the menu. Enter a unique Enter the name of a contact person in the field. Enter the This entry identifies the device location, especially when there are multiple devices.
  • Page 116: Setup System Clock

    Setup System Clock Step 1: Select from the menu. Step 2: Select the appropriate time zone from the drop-down list. Step 3: the Auto Time Setting (SNTP) radio button. stands for Simple Network Time Protocol and is used to synchronise computer clocks. Step 4: Fill in the field and click on the...
  • Page 117: Upgrade The Firmware With Uconfig

    Upgrade the Firmware with uConfig You can check the types and version of your firmware by clicking on About System from the HELP menu. To begin with, ensure that you have the updated firmware available. Select from the menu. Click on the button to locate the file.
  • Page 118 NOTE The firmware upgrade process must NOT be interrupted; otherwise the device might become unusable. Page 114...
  • Page 119: Upgrade The Firmware With Command Line Interface

    Upgrade the Firmware with Command Line Interface You can check the types and version of your firmware by clicking on About System from the HELP menu in UConfig. Follow these steps to upgrade firmware from Command Line Interface (CLI). Ensure that you have the updated firmware available. Page 115...
  • Page 120 On the PC connected to the AP, run a TFTP server and setup to point to the same firmware image filename. Sample Screenshot In the Command Line Interface, enter the command with the IP address of the AP and the filename of the firmware image as the parameters: Set upgrade <IP address of AP>...
  • Page 121 These screens display when upgrade is done. Sample Screenshot NOTE The firmware upgrade process must NOT be interrupted; otherwise the device might become unusable. Page 117...
  • Page 122: Perform Firmware Recovery

    Perform Firmware Recovery If the system fails to launch properly, the access point will automatically switch to loader mode and the diagnostic LED will remain lighted. The firmware should then be reloaded. Access Point State Diagnostic LED ( ) State Corrupted firmware –...
  • Page 123 From the Start menu, click Run and type cmd. When the command prompt window appears, type in the following command: X:\recovery\TFTP -i 192.168.168.1 PUT image_name.IMG, where refers to your CD drive and image_name.IMG refers to the firmware filename found in the Recovery folder of the Product CD.
  • Page 124: Backup Or Reset The Settings

    Backup or Reset the Settings You may choose to save the current configuration profile, create a backup of it on your hard disk, restore an earlier saved profile, or to reset the access point back to its default settings. Reset your settings Select from the menu.
  • Page 125 Backup your Settings Select from the menu. To back up the current settings of your access point onto your hard disk drive, click on the button. Save your configuration file to your local disk. Page 121...
  • Page 126 Restore your Settings Select from the menu. To restore previously saved settings, click on the … … button and select the folder where you saved your configuration file. Click on the button and the system will prompt you to reboot your device. Page 122...
  • Page 127: Reboot The System

    Reboot the System Most of the changes you make to the system settings require a system reboot before the new parameters can take effect. Select from the menu. Click on the button. Wait for the system to reboot and the login page will be displayed.
  • Page 128: Change The Password

    Change the Password It is recommended that the login password is changed from the factory default password. Select from the menu. Key in the . The password is case- sensitive and defaulted to password Enter the field and then Click on the button to update the changes.
  • Page 129: To Logout

    To Logout Select from the menu. Click the button to access the access point configuration interface again. Page 125...
  • Page 130: Use The Help Menu

    Use the HELP menu View About System System Information displays system configuration information that may be required by support technicians for troubleshooting. Select from the menu. page displays information about the access point configuration settings. Page 126...
  • Page 131: Appendix: Use The Command Line Interface

    Appendix: Use the Command Line Interface Get Operation List SYNTAX DESCRIPTION Get tasks Display all active process/tasks. Get sysinfo Display system information. Get aplist Display list of access points discovered. Get athstats Display wireless driver information. Get brinfo Display bridge and interfaces information. Get brmacshow Display bridge learned MAC address list.
  • Page 132 Wireless Mode SYNTAX DESCRIPTION Set wirelessmode <string> Supported strings are: auto, 11a, 11b, 11g, pureg, superg, supera Set autochannelselect Enable/disable Enable or disable smart channel select during power up. Set radio_off_eth_down enable/disable Enable or disable auto turn off radio when Ethernet port connection link is lost. WEP Key Must first set a key entry type, and then proceed to set the key index, size, and value.
  • Page 133 {CTRY_ITALY, "IT" }, {CTRY_JAPAN, "JP" }, {CTRY_JAPAN1, "J1" }, {CTRY_JAPAN2, "J2" }, {CTRY_JAPAN3, "J3" }, {CTRY_JAPAN4, "J4" }, {CTRY_JAPAN5, "J5" }, {CTRY_JAPAN6, "J6" }, {CTRY_JORDAN, "JO" }, {CTRY_KAZAKHSTAN, "KZ" }, {CTRY_KOREA_NORTH, "KP" }, {CTRY_KOREA_ROC, "KR" }, {CTRY_KOREA_ROC2, "K2" }, {CTRY_KOREA_ROC3, "K3" }, {CTRY_KUWAIT, "KW"...
  • Page 134 Channel SYNTAX DESCRIPTION Set channel <value> (Value in decimal) SSID SYNTAX DESCRIPTION Set ssid <string> (Not More than 32 characters) Closed System SYNTAX DESCRIPTION Set hidessid enable/disable Enable or disable broadcasting of SSID. Per Node SYNTAX DESCRIPTION Set apbridge enable/disable Enable or disable isolation of wireless client.
  • Page 135 Custom Configuration Update SYNTAX Cfgfile <operation type> <IP of PC running TFTP server> <filename> DESCRIPTION The cfgfile command is used for managing simple configuration changes to multiple access points. It is useful for when the user has many access points to configure and the configuration is mostly the same. For example if user needs to configure ten access points, and just change the IP address configuration: Configure the first access point with the common configuration for all the access points using web manager...
  • Page 136 Page 132...

This manual is also suitable for:

A02-ocl100

Table of Contents