Aruba Networks AP-80 MB Installation And User Manual

Outdoor wireless access point/bridge

Table of Contents

Quick Links

Download this manual

Aruba AP-80 MB/SB

Outdoor Wireless Access

Point/Bridge

Table of Contents

Need help?

Do you have a question about the AP-80 MB and is the answer not in the manual?

Questions and answers

Summary of Contents for Aruba Networks AP-80 MB

Page 1 Aruba AP-80 MB/SB Outdoor Wireless Access Point/Bridge...
Page 2 Legal Notice The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate other vendors' VPN client devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies, in full, Aruba Networks, Inc.
Page 3: Table Of Contents
AP-80SB AP-80MB Ports, Connectors, and Antennas Power over Ethernet Injector/Adapter Chapter 2 Installation Installation Overview AP-80 MB/SB Setup Process AP-80MB/SB Installation Preparing for Installation Staging the Installation Mounting the Unit Using the Pole-Mounting Bracket Mounting on Larger Diameter Poles Using the Wall-Mounting Bracket (Optional Part)
Page 4 Fat Access Point with Wireless Backhaul Fat Access Point with Wired Backhaul Chapter 4 Provisioning and Initial Setup Management Interfaces Factory Default Configuration Connecting to the AP-80 MB/SB for the First Time Chapter 5 Advanced Configuration System Identification TCP / IP Settings RADIUS...
Page 5 Configuration Commands Command Line Processing Command Groups General Commands System Management Commands System Logging Commands System Clock Commands DHCP Relay Commands SNMP Commands Flash/File Commands RADIUS Client Commands 802.1x Authentication Commands MAC Address Authentication Commands Filtering Commands WDS Bridge Commands Ethernet Interface Commands Wireless Interface Commands Rogue AP Detection Commands...
Page 6 Glossary Index | Contents Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 7: Preface
Related documentation Contacting Aruba Networks Overview of this Manual This manual is for trained technicians responsible for installing the Aruba AP-80 MB/SB Outdoor Wireless Access Point/Bridge. This manual is organized as follows: Chapter 1, “Hardware Overview” — Describes the main features of this product and explains the process for setting up the AP-80 MB/SB.
Page 8: Text Conventions
In this example, the user can choose to set the logging level to any one of the options. [ Optional ] In the command examples, items enclosed in brackets are optional. Do not type the brackets. Contacting Aruba Networks Web Site Support Main Site http://www.arubanetworks.com Support Site http://www.arubanetworks.com/support...
Page 9 Telephone Support Numbers Aruba Corporate +1 (408) 227-4500 +1 (408) 227-4550 Support United States 800-WI-FI-LAN (800-943-4526) France +33 (0) 1 70 72 55 59 United Kingdom +44 (0) 20 7127 5989 Germany +49 (0) 69 38 09 77 22 8 All Other Countries +1 (408) 754-1200 Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 10 | Preface Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 11: Hardware Overview
Distribution System (WDS) bridges that are designed for the deployment of advanced IEEE 802.11 wireless services in harsh environments. As an outdoor wireless access point, the AP-80 MB and AP-80SB can provide IEEE 802.11 wireless service to local wireless clients. The AP-80SB provides 802.11b/g service only, while the AP-80MB can provide 802.11a/b/g services simultaneously.
Page 12: Package Checklist
2 Ghz – 6 Ghz. Antenna extension cable is a 3-meter (10-foot), low-loss LMR 400 antenna extension cable (Aruba AP-CBL-1) for use with AP-80 MB/SB Outdoor Access Point/Bridges. It provides an AP-80 MB/SB N- type female interface to N-type male antenna interface.
Page 13: Hardware Model Overview
Hardware Model Overview AP-80SB Stand-alone wireless access point (802.11b/g). Figure 1 AP-80SB 2.4 GHz N-type Female external antenna connector 2.4 GHz N-type Female external antenna connector Integrated antenna Ethernet port RSSI connector with protective cap Grounding point screw Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide Hardware Overview |...
Page 14: Ports, Connectors, And Antennas
Ethernet port RSSI connector with protective cap Grounding point screw Ports, Connectors, and Antennas Table 2 describes the connections on the AP-80 MB/SB. Table 2 AP-80MB/SB Ports and Connections Item Description External Antenna Connector For AP-80SB: 2.4 GHz, N-Type, Female connector...
Page 15: Power Over Ethernet Injector/Adapter
All Aruba AP-80 MB/SB models are required to be powered over Ethernet using the supplied power over Ethernet injector/adapter. The power injector provides two RJ-45 Ethernet ports (illustrated below): one for connecting to the AP-80 MB/SB (AP), and one for connecting to a local LAN switch (ENET). Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 16 LAN switch The AP-80 MB/SB does not have a power switch and is powered on when its Ethernet port is connected to the power injector, and the power injector module is connected to an AC power source. The power injector includes one LED indicator that turns on when AC power is applied.
Page 17: Installation
(extreme heat or sun, rain, snow, ice, cold) and mounted on a wall, pole, or mast. The AP-80 MB/SB is supplied complete with its own mounting hardware kit for attaching the unit to a 1.5” to 2” diameter steel pole or tube or as part of a radio mast or tower structure.
Page 18: Preparing For Installation
“Staging the Installation” on page Do not work on the AP-80 MB/SB or connect or disconnect cables during periods of lightening activity. WARNING...
Page 19: Mounting On Larger Diameter Poles
3. Use the included nuts to tightly secure the wireless bridge to the bracket. Be sure to take account of the antenna polarization direction; both antennas in a link must be mounted with the same polarization (Figure Figure 5 Attaching the AP-80 MB/SB to a Pole. Antenna Polarization Direction...
Page 20: Using The Wall-Mounting Bracket (Optional Part)
Figure 6 Mounting on Larger Diameter Poles Steel Band Clamp Using the Wall-Mounting Bracket (Optional Part) The wall-mounting bracket does not allow the wireless bridge’s integrated antenna to be aligned. When mounted on the wall, the unit should use an external antenna. Perform the following steps to mount the unit to a wall using the wall-mounting bracket: 1.
Page 21: Connect External Antennas
Connect External Antennas When deploying an AP-80MB Master bridge unit for a bridge link or an access point operation, you need to mount external antennas and connect them to the bridge. Typically, a bridge link requires a 5 GHz antenna, and an access point operation requires a 2.4 GHz antenna. AP-80SB Slave units also require an external antenna for 2.4 GHz operation.
Page 22: Connect The Internal Power Injector Module
Figure 9 Connecting the Ethernet Cable Ethernet cable Ground wire Connect the Internal Power Injector Module To connect the AP-80 MB/SB to a power source: Do not install the power injector module (AP-AC-80-1) outdoors. The unit is for indoor installation only. CAUTION The wireless bridge’s Ethernet port does not support Power over Ethernet (PoE) based on the IEEE...
Page 23: Align Antennas
Figure 10 Connecting the Power Injector AC Power Cord Power LED Indicator E N E Ethernet cable to AP80 Ethernet cable from LAN switch 3. Insert the power cable plug directly into the standard AC receptacle on the power injector. 4.
Page 24 Figure 11 Aligning Antennas Vertical Scan Remote Antenna Horizontal Scan Maximum Signal Strength Position for Vertical Alignment Main Lobe RSSI Voltage Maximum RSSI Voltage Side Lobe Maximum Maximum Signal Strength Position for Horizontal Alignment To align the antennas in the link using the RSSI output voltage, start with one antenna fixed and then perform the following procedure on the other antenna: RSSI output can be configured through management interfaces to output a value for specific WDS ports.
Page 25 3. Find the point where the signal is strongest (highest voltage) and secure the horizontal adjustment in that position. Sometimes there may not be a central lobe peak in the voltage because vertical alignment is too far off; only two similar peaks for the side lobes are detected. In this case, fix the antenna so that it is N O T E halfway between the two peaks.
Page 26 | Installation Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 27: Planning And Deployment Considerations
Under ideal deployment conditions (low line of sight, low interference, and low moisture content), the AP-80 MB/SB bridge can operating over a range of up to 15.4 km (9.6 miles) or provide a high-speed connection of 54 Mbps (108 Mbps in turbo mode) using the 5 GHz integrated antenna. The range also depends on the type of antenna used.
Page 28: Radio Path Planning
Table 3 5 GHz Antennas Coverage Distance, Normal Mode (Continued) 13.5 dBi 120- 16.5 dBi 60- 17 dBi Data Rate 8 dBi Omni degree degree 23 dBi Panel Integrated Sector Sector 48 Mbps 2.9 km 0.4 km 1.2 km 2.3 km 9.2 km 54 Mbps 1.8 km...
Page 29: Antenna Height
Figure 13 Radio Line of Sight Radio Line of Sight Visual Line of Sight If there are obstacles in the radio path, there may still be a radio link but the quality and strength of the signal will be affected. Calculating the maximum clearance from objects on a path is important as it directly affects the decision on antenna placement and height.
Page 30 For long-distance links, the access point may have to be mounted on masts or poles that are tall enough to attain the minimum required clearance. Use the following table to estimate the required minimum clearance above the ground or path obstruction (for 5 GHz bridge links). Table 5 Antenna Minimum Height and Clearance Requirements Max Clearance for Approximate...
Page 31: Antenna Position And Orientation
Never construct a radio mast, pole, or tower near overhead power lines. CAUTION Local regulations may limit or prevent construction of a high radio mast or tower. If your wireless bridge link requires a high radio mast or tower, consult a professional contractor for advice. N O T E Antenna Position and Orientation Once the required antenna height has been determined, other factors affecting the precise position of...
Page 32: Weather Conditions
Weather Conditions When planning wireless bridge links, you must take into account any extreme weather conditions that are known to affect your location. Consider these factors: Temperature — The wireless bridge is tested for normal operation in temperatures from -33°C to 55°C.
Page 33: Point-Point Wds Bridge
Figure 17 Point-Multipoint WDS Bridge Topology Fat Access Point with Wireless Backhaul In this topology, the AP-80 MB/SB serves as a Fat access point or WDS bridge to provide wireless backhaul for a remote site. In this stand-alone configuration, the AP-80 MB/SB provides authentication services between the two wired networks.
Page 34: Fat Access Point With Wired Backhaul
Figure 18 Fat Access Point with Wireless Backhaul Fat Access Point with Wired Backhaul In this topology, the AP-80 MB/SB serves as a fat access point or WDS bridge to provide wireless backhaul for a remote site. In this stand-alone configuration, the AP-80 MB/SB provides authentication services between the two wired networks.
Page 35: Provisioning And Initial Setup
IP settings for this subnet (for example, set the IP address of the PC to192.168.1.2) and connect it directly to the Ethernet port on the AP-80 MB/SB. When the initial configuration is completed, you can set a different IP address for the device before connecting it to your network.
Page 36 Table 6 AP-80MB/SB System Defaults (Continued) Feature Parameter Default TCP/IP IP Address 192.168.1.1 Subnet Mask 255.255.255.0 Default Gateway 0.0.0.0 Primary DNS IP 0.0.0.0 Secondary DNS IP 0.0.0.0 VLANs Status Disabled Native VLAN ID Filter Control Ethernet Type Disabled SNMP Status Enabled Location null...
Page 37 Table 6 AP-80MB/SB System Defaults (Continued) Feature Parameter Default Wireless Interface Status Disabled 802.11a SSID DualBandOutdoor Turbo Mode Disabled Radio Channel Default to first channel Auto Channel Select Enabled Transmit Power Full Maximum Data Rate 54 Mbps Beacon Interval 100 TUs Data Beacon Rate (DTIM 2 beacons Interval)
Page 38: Connecting To The Ap-80 Mb/Sb For The First Time
AP-80 MB/SB to only use the radio channels and power settings permitted in the specified country of operation. If you need to change the country code after it has been set, you must set the AP-80 MB/SB to its factory default configuration before you can set a different country code. See “Resetting the AP”...
Page 39: Advanced Configuration
Chapter 5 Advanced Configuration You can manage the AP-80 MB/SB using a web browser (Internet Explorer 5.0 or later, or Netscape Navigator 6.2 or later). Before continuing with advanced configuration, first complete the initial configuration steps described in Chapter 4, “Provisioning and Initial Setup”...
Page 40 Filter Control Enables VLAN support and filters traffic matching specific Ethernet protocol types SNMP Controls access to this AP-80 MB/SB “SNMP” on page 52 from management stations using SNMP, as well as the hosts that will receive trap messages VLAN Control access to network resources “VLAN”...
Page 41: System Identification
Use the snmp-server location and snmp-server contact commands to indicate the physical location of the AP-80 MB/SB and define a system contact. Then return to the Exec mode, and use the show system command to display the changes to the system identification settings.
Page 42: Tcp / Ip Settings
Aruba Networks AP-80MB# TCP / IP Settings You can use the web browser interface to access IP addressing only if the AP-80 MB/SB already has an IP address that is reachable through your network. By default, the AP-80 MB/SB is configured with a static IP address (192.168.1.1). However, you can change the IP address or configure the device to obtain its IP address from a DHCP server.
Page 43 Set the following parameters on this page: DHCP Client DHCP Client (Enable)—Select this option to obtain the IP settings for the AP-80 MB/SB from a DHCP (Dynamic Host Configuration Protocol) server. The IP address, subnet mask, default gateway, and Domain Name Server (DNS) address are dynamically assigned to the AP-80 MB/SB by the network DHCP server.
Page 44 Default Gateway—IP address of the router for the AP-80 MB/SB, which is used if the requested destination address is not on the local subnet. If you have management stations, DNS servers, or other network servers located on another subnet, type the IP address of the default gateway router in the text field provided.
Page 45: Radius
Aruba Networks AP-80MB#show interface ethernet Ethernet Interface Information ======================================== IP Address : 10.0.6.87 Subnet Mask : 255.255.255.0 Default Gateway : 10.0.6.1 Primary DNS : 64.81.79.2 Secondary DNS : 216.231.41.2 Opera. Speed-duplex : 100Base-TX Full Duplex Admin. Speed-duplex : Auto Admin status...
Page 46 Choose RADIUS to open the RADIUS page. Set the following parameters on this page: Primary Radius Server Setup A primary RADIUS server must be specified for the access point to implement IEEE 802.1X network access control and Wi-Fi Protected Access (WPA) wireless security. A secondary RADIUS server may also be specified as a backup should the primary server fail or become inaccessible.
Page 47 Timeout—Number of seconds the access point waits for a reply from the RADIUS server before resending a request. (Range: 1-60 seconds; Default: 5) Retransmit attempts—The number of times the access point tries to resend a request to the RADIUS server before authentication fails. (Range: 1-30; Default: 3) Accounting Port—RADIUS server port used for RADIUS accounting requests.
Page 48: Authentication
Aruba Networks AP-80MB(config)#radius-server address 192.168.1.25 Aruba Networks AP-80MB(config)#radius-server port 181 Aruba Networks AP-80MB(config)#radius-server key green Aruba Networks AP-80MB(config)#radius-server timeout 10 Aruba Networks AP-80MB(config)#radius-server retransmit 5 Aruba Networks AP-80MB(config)#exit Aruba Networks AP-80MB#show radius Radius Server Information ======================================== : 192.168.1.25 Port : 181...
Page 49 CLI Commands for 802.1X Supplicant Configuration Use the 802.1X supplicant commands to set the Ethernet user name and password, and to enable the feature. Aruba Networks AP-80MB(config)#802.1X supplicant eth_user David password DEF Aruba Networks AP-80MB(config)#802.1X supplicant enable Aruba Networks AP-80MB(config)#...
Page 50: Cli Commands For Radius Mac Authentication
Aruba Networks AP-80MB(config)#mac-authentication server local Aruba Networks AP-80MB(config)#address filter default denied Aruba Networks AP-80MB(config)#address filter entry 00-70-50-cc-99-1a denied Aruba Networks AP-80MB(config)#address filter entry 00-70-50-cc-99-1b allowed Aruba Networks AP-80MB(config)#address filter entry 00-70-50-cc-99-1c allowed Aruba Networks AP-80MB(config)#address filter delete 00-70-50-cc-99-1c Aruba Networks AP-80MB(config)#exit...
Page 51: Filter Control
Filter Control The AP-80 MB/SB can employ VLAN tagging support and network traffic frame filtering to control access to network resources and increase security. Choose Filter Control to open the page. Set the following parameters on this page: Inter Client STAs Communication Filter—Filters for communications between client stations. You can prevent intra virtual access point (VAP) client communications, prevent inter and intra VAP client communications, or allow communications by disabling the filter.
Page 52: Snmp
Aruba Networks AP-80MB# SNMP You can use a network management application to manage the AP-80 MB/SB via the Simple Network Management Protocol (SNMP) from a management station. To implement SNMP management, the AP- 80 MB/SB must have an IP address and subnet mask, configured either manually or dynamically. Once an IP address has been configured, appropriate SNMP communities and trap receivers should be configured.
Page 53 Choose SNMP to open the page. Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide Advanced Configuration |...
Page 54 Set the following parameters on this page: SNMP SNMP—Enables or disables SNMP management access and also enables the AP-80 MB/SB to send SNMP traps (notifications). SNMP management is enabled by default. Location—Specifies the name for the location of the AP-80 MB/SB.
Page 55: Vlan
To set read/write and read-only community names, use the snmp-server community command. The snmp-server host command defines a trap receiver host. To view the current SNMP settings, use the show snmp command. Aruba Networks AP-80MB#show snmp SNMP Information ============================================== Service State...
Page 56 Before enabling VLANs on the access point, you must configure the connected LAN switch port to accept tagged VLAN packets with the native VLAN ID of the AP-80 MB/SB. Otherwise, connectivity to the AP-80 MB/SB will be lost when you enable the VLAN feature.
Page 57: Ap Management
Aruba Networks AP-80MB(if-ethernet)#untagged-vlanid 10 Aruba Networks AP-80MB# AP Management The AP-80 MB/SB includes options to control access to the UI and limit the IP addresses that can access the devices. Choose AP Management to open the page. Set the following parameters on this page: UI Management Telnet Access Status—Indicates whether AP access using Telnet is enabled or disabled.
Page 58: Administration
Multiple IP—If selected, indicates that only the specified IP subnet can access the IP. When you select this option, an IP address field and subnet mask field are presented. Administration The Administration page includes parameters and actions for administering the AP: Choose AP Management to open the page.
Page 59: Changing The Password
AP-80 MB/SB may be able to compromise AP-80 MB/SB and network security. Pressing the Reset button on the back of the AP-80 MB/SB for more than five seconds resets the user name and password to the factory defaults. For this reason, we recommend that you protect the AP-80 MB/SB from physical access by unauthorized persons.
Page 60: Backing Up And Restoring The Configuration File
New firmware file—Specifies the name of an image file to download from the web management station to the AP-80 MB/SB using HTTP. Use the Browse button to locate the image file locally on the management station and click Start Upgrade to proceed.
Page 61: System Log
TFTP server. When the download is complete, the dir command can be used to check that the new file is present in the AP-80 MB/SB file system. To run the new software, use the reset board command to reboot the AP-80 MB/SB.
Page 62: Set The Following Parameters On This Page
SNTP Server—Enables or disables use of an SNTP server for clock synchronization. Simple Network Time Protocol (SNTP) allows the AP-80 MB/SB to set its internal clock based on periodic updates from an SNTP or NTP time server. Maintaining an accurate time on the AP-80 MB/SB enables the system log to record meaningful dates and times for event entries.
Page 63 CLI Commands for System Logging To enable logging on the AP-80 MB/SB, use the logging on command from the global configuration mode. The logging level command sets the minimum level of message to log. Use the logging console command to enable logging to the console.
Page 64: Wireless Distribution System (Wds)
The IEEE 802.11 standard defines a Wireless Distribution System (WDS) for connections between AP- 80 MB/SBs. The AP-80 MB/SB uses WDS to forward traffic on bridge links between units. When using WDS, only AP-80 MB/SB units can associate to each other using the bridge band. A wireless client cannot associate with the access point on the AP-80 MB/SB band.
Page 65 Master/Slave Mode—To set up a bridge link, you must configure the WDS forwarding table by specifying the Ethernet MAC address of the bridge to which you want to forward traffic. Slave bridge unit—Specify the Ethernet MAC address of the AP-80 MB/SB unit at the opposite end of the link. (Bridge mode only) Master bridge unit—Specify Ethernet MAC addresses of all the Slave bridge units in the...
Page 66: Stp
Bridge Child—The physical layer address of other bridge units for which this unit serves as the bridge parent or the root bridge. Note that the first entry under the list of child nodes is reserved for the root bridge, and can only be configured if the role is set to “Root Bridge.” (12 hexadecimal digits in the form “xx-xx-xx-xx-xx-xx”) (Bridge or Root Bridge mode) The Spanning Tree Protocol (STP) can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers.
Page 67 Click STP to open the page. Set the following parameters on this page: Enable—Enables/disables STP on the wireless bridge. (Default: Enabled) Bridge Priority—Used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STP root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device.
Page 68: Rssi
CLI Commands for STP The following example configures spanning tree parameters for the bridge and wireless port 5. Aruba Networks AP-80MB(config)#bridge stp enable Aruba Networks AP-80MB(config)#bridge stp priority 40000 Aruba Networks AP-80MB(config)#bridge stp hello-time 5 Aruba Networks AP-80MB(config)#bridge stp max-age 38...
Page 69 align antennas (see “Align Antennas” on page 23) and monitor the quality of the received signal for bridge links. An RSSI value of about 30 or more indicates a strong enough signal to support the maximum data rate of 54 Mbps. Below a value of 30, the supported data rate would drop to lower rates. A value of 15 or less indicates that the signal is weak and the antennas may require realignment.
Page 70: Radio Interface
Both interfaces and operating modes are covered in this section of the manual. The AP-80 MB/SB can operate in the following modes: 802.11a in bridge mode and 802.11g in access point mode 802.11a in access point mode and 802.11g in bridge mode 802.11a and 802.11g both in access point mode (no bridging)
Page 71: Radio Settings
Radio Settings Open the Radio Settings page for the following radios: Radio A (802.11a)— IEEE 802.11a interface operates within the 5 GHz band, at up to 54 Mbps in normal mode or up to 108 Mbps in Turbo mode. Radio A (802.11g)— IEEE 802.11g interface operates within the 2.4 GHz band, at up to 54 Mbps in normal mode or up to 108 Mbps in Turbo mode.
Page 72 | Advanced Configuration Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 73 The parameters for the 802.11a and 802.11g radios are presented as individual radio-specific settings and common settings. Each AP-80 MB/SB can support up to four virtual access points (VAPs): Individual Radio Settings Set the following parameters in this section: Default VLAN ID—Indicates the VLAN assigned to wireless clients that associate to this VAP but are not assigned to another VLAN.
Page 74 AP-80 MB/SBs at least four channels apart to avoid interference with each other. For example, in the United States you can deploy up to four AP-80 MB/SBs in the same area (such as channels 36, 56, 149, 165). The channel for wireless clients is automatically set to the same as that used by the AP-80...
Page 75 Power Save mode. The default value of 2 indicates that the AP-80 MB/SB will save all broadcast/multicast frames for the Basic Service Set (BSS) and forward them after every second beacon. Using smaller DTIM intervals delivers broadcast/multicast frames in a more timely manner, causing stations in Power Save mode to wake up more often and drain power faster.
Page 76 If the RTS threshold is set to 0, the AP-80 MB/SB always sends RTS signals. If set to 2347, the AP-80 MB/SB never sends RTS signals. If set to any other value, and the packet size equals or exceeds the RTS threshold, the RTS/CTS (Request to Send / Clear to Send) mechanism will be enabled.
Page 77 VAP interface (with the no shutdown command). To view the current 802.11 radio settings for the VAP interface, use the show interface wireless g [0~3] or show interface wireless g [0~3] command. Aruba Networks AP-80MB(config)#interface wireless a Aruba Networks AP-80MB(config)#interface wireless g Enter Wireless configuration commands, one per line.
Page 78: Security
Security A radio band set to access point mode is configured by default as an open system, which broadcasts a beacon signal including the configured SSID. Wireless clients can read the SSID from the beacon, and automatically reset their SSID to allow immediate connection to the access point. To improve wireless network security for access point operation, you have to implement two main functions: Authentication: It must be verified that clients attempting to connect to the network are authorized...
Page 79 Table 10 Wireless Security Considerations Security Mechanism Client Support Implementation Considerations WPA PSK Mode Requires WPA-enabled Provides good security in small networks system and network card Requires manual management of pre-shared key driver (native support provided in Windows XP) The access point can simultaneously support clients using various different security mechanisms. The configuration for these security combinations are outlined in the following table.
Page 80 Table 11 Security Combinations (Continued) Client Security RADIUS Configuration Summary Combination Authentication Server Static and dynamic Enter 1 to 4 WEP keys Local, RADIUS, or (802.1x) WEP keys Disabled Select a WEP transmit key Interface Detail Settings: Authentication: Open System Encryption: Enable 802.1x: Supported Set 802.1x key refresh and...
Page 81: Wired Equivalent Privacy (Wep)
Table 11 Security Combinations (Continued) Client Security RADIUS Configuration Summary Combination Authentication Server 802.1x WPA-WPA2 Mixed Interface Detail Settings: Local or Disabled Mode Authentication: WPA-WPA2-mixed Encryption: Enable WPA Configuration: Required Cipher Suite: TKIP 802.1x: Required Set 802.1x key refresh and reauthentication rates WPA-WPA2 Mixed Mode Interface Detail Settings:...
Page 82 To configure WEP security, click Radio settings for the A or G radio and scroll to the bottom of the page: Setting up shared keys enables the basic IEEE 802.11 Wired Equivalent Privacy (WEP) on the access point to prevent unauthorized access to the network. If you choose to use WEP shared keys instead of an open system, be sure to define at least one static WEP key for user authentication and data encryption.
Page 83 Table 12 WEP Configuration Settings WEP Only WEP Over 802.1X Authentication Type: Shared Key Authentication Type: Open System WEP (encryption): Enable WEP (encryption): Enable WPA clients only: Disable WPA clients only: Disable Multicast Cipher: WEP Multicast Cipher: WEP Shared Key: 64/128/152 Shared Key: 64/128 Key Type - 802.1X = Required...
Page 84 [0-3] or interface wireless a [0-3] command from the Exec mode. Aruba Networks AP-80MB#config Aruba Networks AP-80MB(config)#interface wireless g Aruba Networks AP-80MB(if-wireless g)#key 1 128 ascii abcdeabcdeabc Aruba Networks AP-80MB(if-wireless g)#vap 0 Aruba Networks AP-80MB(if-wireless g: VAP[0])#auth shared-key Data Encryption is set to enabled.
Page 85: Wi-Fi Protected Access (Wpa)
Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X required Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5 7-67 Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X session-key-refresh-rate 5 7-68 Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X session-timeout 300 Aruba Networks AP-80MB(if-wireless g: VAP[0])#auth open-system Aruba Networks AP-80MB(if-wireless g: VAP[0])#encryption...
Page 86 WPA2: WPA was introduced as an interim solution for the vulnerability of WEP pending the ratification of the IEEE 802.11i wireless security standard. In effect, the WPA security features are a subset of the 802.11i standard. WPA2 includes the now ratified 802.11i standard, but also offers backward compatibility with WPA.
Page 87 WPA-PSK: Clients using WPA with a Pre-shared Key are accepted for authentication. WPA2: Clients using WPA2 over 802.1X are accepted for authentication. WPA2-PSK: Clients using WPA2 with a Pre-shared Key are accepted for authentication. WPA-WPA2-mixed: Clients using WPA or WPA2 over 802.1X are accepted for authentication.
Page 88 Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5 Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X session-key-refresh-rate 5 Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1X session-timeout 300 7-68 802.1x IEEE 802.1X is a standard framework for network access control that uses a central RADIUS server for user authentication.
Page 89: Ap Status
Set the following parameters: 802.1x setup—Determines the requirement for 802.1X use by clients. (Default: Disable) Disable—The access point does not support 802.1X authentication for any wireless client. After successful wireless association with the access point, each client is allowed to access the network.
Page 90 Radio A refers to the 802.11a interface and Radio G to the 802.11b/g interface. Network Name (SSID)—The service set identifier (SSID) or network name for this VAP. Radio Channel—The radio channel currently used on the AP-80 MB/SB. Encryption—The key size used for data encryption for each VAP.
Page 91 CLI Commands for Displaying System Settings To view the current AP-80 MB/SB system settings, use the show system command from the Exec mode. To view the current radio interface settings, use the show interface wireless a command (see page 195).
Page 92: Station Status
The information is presented for the A and G interface. Station Address—MAC address of the remote AP-80 MB/SB. Authenticated—Indication of whether the station has been authenticated. The two basic methods of authentication supported for 802.11 wireless networks are “open system” and “shared key.” Open- system authentication accepts any client attempting to connect to the access point without verifying its identity.
Page 93: Wds-Stp Status
Aruba Networks AP-80MB#show station Station Table Information =========================================================== if-wireless A VAP [0] / Default 802.11a Channel : 36 No 802.11a Channel Stations. if-wireless G VAP [0]/ Default 802.11g Channel : 11 No 802.11g Channel Stations. =========================================================== Aruba Networks AP-80MB# WDS-STP Status The STP Status window shows network loop and link status information between WLANs and STP- compliant bridging devices.
Page 94: Event Logs
343000 Seconds topology-change-count: 0 Aruba Networks AP-80MB# Event Logs The Event Logs window shows the log messages generated by the AP-80 MB/SB and stored in memory. | Advanced Configuration Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 95 CLI Commands for Displaying the Event Logs From the global configuration mode, use the show logging command. Aruba Networks AP-80MB#show logging Logging Information ============================================ Syslog State : Enabled Logging Host State : Enabled Logging Console State : Enabled Server Domain name/IP : 192.168.1.19...
Page 96 | Advanced Configuration Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 97: Cli Commands
1. From the remote host, enter the Telnet command and the IP address of the device you want to access. 2. At the prompt, enter the user name and system password. The CLI displays the Aruba Networks AP-80MB# prompt to show that you are using executive (Exec) access mode.
Page 98: Entering Commands
To enter commands that require parameters, enter the required parameters after the command keyword. For example, to set a password for the administrator, enter: Aruba Networks AP-80MB(config)#username smith Minimum Abbreviation The CLI accepts a minimum number of characters that uniquely identify a command. For example, the command configure can be entered as con.
Page 99: Partial Keyword Lookup
Show 802.11 station table system Show system information version Show system version Show wds table The command show interface ? displays the following information: Aruba Networks AP-80MB#show interface ? ethernet Show Ethernet interface wireless Show wireless interface <cr> Aruba Networks AP-80MB#show interface...
Page 100: Exec Commands
To enter the Global Configuration mode, enter the command configure in Exec mode. The system prompt changes to “Aruba Networks AP-80MB(config)#” which gives you access privilege to all Global Configuration commands. Aruba Networks AP-80MB#configure...
Page 101: Command Line Processing
Command Line Processing Commands are not case sensitive. You can abbreviate commands and parameters as long as they contain enough letters to differentiate them from any other currently available commands or parameters. You can use the Tab key to complete partial commands, or enter a partial command followed by the ? character to display a list of possible matches.
Page 102: General Commands
Table 16 System Command Groups (Continued) Command Group Description DHCP Relay Configures settings to sending DHCP address requests to a DHCP server Commands SNMP Commands Configures community access strings and trap managers Flash/File Commands Manages code image or wireless bridge configuration files RADIUS Client Configures the RADIUS client used with 802.1x authentication Commands...
Page 103 Interface Configuration. See “Using the Command Line Interface” on page 97. Default Setting None Command Mode Exec Example Aruba Networks AP-80MB#configure Aruba Networks AP-80MB(config)# This command returns to the previous configuration mode. Default Setting None Command Mode Global Configuration, Interface Configuration...
Page 104 Network or host unreachable - The gateway found no corresponding entry in the route table. Press Esc to stop pinging. Example This command sends packets to address 10.1.0.19: Aruba Networks AP-80MB#ping 10.1.0.19 192.168.1.19 is alive | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 105: Show History
When the system is restarted, it always runs the Power-On Self-Test. Example 1 This example shows how to reset the system: Aruba Networks AP-80MB#reset board Reboot system now? <y/n>: y Example 2 This example shows how to restore the factory default settings: Aruba Networks AP-80MB#reset configuration Reset to Factory Defaults now? <y/n>: y...
Page 106: System Management Commands
========================= Aruba Networks AP-80MB show line This command displays the console port’s configuration settings. Syntax show line Command Mode Exec Example Aruba Networks AP-80MBshow line Console Line Information ====================================================== databits parity : none speed : 9600 stop bits ======================================================...
Page 107 Table 18 System Management Commands and Functions (Continued) Command Function Mode ip ssh-server enable Enables the Secure Shell server IC-E ip ssh-server port Sets the Secure Shell port IC-E ip telnet-server enable Enables the Telnet server IC-E password Specifies the password for management access show apmanagement Shows the AP management configuration EXEC...
Page 108 The available Country Code settings can be displayed by using the country ? command. Example This example sets the country code to US. Aruba Networks AP-80MB#country us | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 109: System Name
Outdoor Bridge Command Mode Global Configuration Example This command sets the system name to bridge-link: Aruba Networks AP-80MB(config)#system name bridge-link bridge-iink(config)# snmp-server contact This command sets the system contact string. Use the no form to remove the system contact information.
Page 110: Snmp-Server Location
Command Mode Global Configuration Example This example sets the system contact to Paul. Aruba Networks AP-80MB(config)#snmp-server contact Paul Related Commands snmp-server location (6-110) snmp-server location This command sets the system location string. Use the no form to remove the location string.
Page 111 You can delete an address range just by specifying the start address, or by specifying both the start address and end address. Example This example restricts management access to the indicated addresses. Aruba Networks AP-80MB(config)#apmgmtip multiple 192.168.1.50 255.255.255.0 Aruba Networks AP-80MB(config)# Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 112: Ip Ssh-Server Enable
Command Mode Global Configuration Example This example restricts management access to the indicated addresses. Aruba Networks AP-80MB(config)#apmgmtui SNMP enable Aruba Networks AP-80MB(config)# ip ssh-server enable This command enables the Secure Shell (SSH) server. Use the no form to disable the server.
Page 113: Ip Ssh-Server Port
This example enables the SSH server and sets the port to 1124. Aruba Networks AP-80MB(if-ethernet)#ip ssh-server enable Aruba Networks AP-80MB(if-ethernet)# Aruba Networks AP-80MB(if-ethernet)#ip ssh-server port 1124 Aruba Networks AP-80MB(if-ethernet)# ip telnet-server enable This command enables the Telnet server. Use the no form to disable the server.
Page 114: Show Apmanagement
Global Configuration Example This example sets the administrative password to adminpwd. Aruba Networks AP-80MB(config)#password adminpwd show apmanagement This command shows the AP management configuration, including the IP addresses of management stations allowed to access the access point, as well as the interface protocols which are open to management access.
Page 115: Ip Http Port
Default Setting Command Mode Global Configuration Example This example sets the port for the web interface to 1143. Aruba Networks AP-80MB(config)#ip http port 1143 Related Commands ip http server (6-116) Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 116: Ip Http Server
Default Setting Command Mode Global Configuration Example This example sets the session timeout to 600 seconds (10 minutes). Aruba Networks AP-80MB(config)#ip http session-timeout 600 Aruba Networks AP-80MB(config)# Related Commands ip http port (7-17) | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 117: Ip Https Port
URL, in this format: https://device:port_number Example This example sets the HTTPS port to 1234. Aruba Networks AP-80MB(config)#ip https port 1234 Aruba Networks AP-80MB(config)# ip https server Use this command to enable the secure hypertext transfer protocol (HTTPS) over the Secure Socket Layer (SSL), providing secure access (i.e., an encrypted connection) to the access point’s Web...
Page 118: Show Hardware
The client and server establish a secure encrypted connection. A padlock icon should appear in the status bar for Internet Explorer 5.x. Example This example enables the HTTPS server. Aruba Networks AP-80MB(config)#ip https server Aruba Networks AP-80MB(config)# show hardware This command displays the system hardware version.
Page 119: System Logging Commands
This command displays the software version for the system. Syntax show version Command Mode Exec Example Aruba Networks AP-80MB#show version Version v1.1.2.1B05 System Logging Commands These commands are used to configure system logging on the wireless bridge. Table 20 System Logging Commands Command...
Page 120: Logging Clear
Command Mode Global Configuration Example This example clears all log messages. Aruba Networks AP-80MB(config)#logging clear Aruba Networks AP-80MB(config)# logging console This command initiates logging of error messages to the console. Use the no form to disable logging to the console.
Page 121: Logging Host
Example This example sets the facility type for remote logging to 19. Aruba Networks AP-80MB(config)#logging facility 19 logging host This command specifies a syslog server host that will receive logging messages. Use the no form to remove syslog server host.
Page 122: Logging On
Messages sent include the selected level down to the Emergency level. Example This example sets the minimum log level to alert. Aruba Networks AP-80MB(config)#logging level alert logging on This command controls logging of error messages (sending debug or error messages to memory). The no form disables the logging process.
Page 123: System Clock Commands
Example Aruba Networks AP-80MB#show event-log Mar 09 11:57:55 Information: 802.11g:11g Radio Interface Enabled Mar 09 11:57:55 Information: 802.11g:Radio channel updated to 8 Mar 09 11:57:34 Information: 802.11g:11g Radio Interface Enabled Mar 09 11:57:18 Information: 802.11g:11g Radio Interface Enabled Mar 09 11:56:35 Information: 802.11a:11a Radio Interface Enabled Mar 09 11:55:52 Information: SSH task: Set SSH server port to 22 Mar 09 11:55:52 Information: SSH task: Enable SSH server.
Page 124: Sntp-Server Date-Time
Default Setting 00:14:00, January 1, 1970 Command Mode Global Configuration Example This example sets the system clock to 17:37 June 19, 2007. Aruba Networks AP-80MB(config)#sntp-server date-time Enter Year<1970-2100>: 2007 Enter Month<1-12>: 6 Enter Day<1-31>: 19 Enter Hour<0-23>: 17 Enter Min<0-59>: 37...
Page 125: Sntp-Server Enable
The command sets the system clock back one hour during the specified period. Example This example sets daylight savings time to be used from July 1st to September 1st. Aruba Networks AP-80MB(config)#sntp-server daylight-saving Enter Daylight saving from which month<1-12>: 6 and which day<1-31>: 1 Enter Daylight saving end to which month<1-12>: 9...
Page 126: Sntp-Server Ip
The wireless bridge polls the time servers in the order specified until a response is received. Example This example sets the SNTP server IP address to 10.1.0.19. Aruba Networks AP-80MB(config)#sntp-server ip 10.1.0.19 Related Commands sntp-server enable (6-125) show sntp (6-127) sntp-server timezone This command sets the time zone for the wireless bridge’s internal clock.
Page 127: Dhcp Relay Commands
(before) or west (after) of UTC. Example This example sets the time zone to 5 hours before UTC (U.S. Eastern time zone). Aruba Networks AP-80MB(config)#sntp-server timezone -5 show sntp This command displays the current time and configuration settings for the SNTP client.
Page 128: Dhcp-Relay Enable
Global Configuration Example This example sets the DHCP primary server IP address to 192.168.1.10. Aruba Networks AP-80MB(config)#dhcp-relay primary 192.168.1.10 Aruba Networks AP-80MB(config)# dhcp-relay enable This command enables the access point’s DHCP relay agent. Use the no form to disable the agent.
Page 129: Snmp Commands
This command displays the current DHCP relay configuration. Syntax show dhcp-relay Command Mode Exec Example Aruba Networks AP-80MB#show dhcp-relay DHCP Relay : ENABLED Primary DHCP Server : 192.168.1.10 Secondary DHCP Server : 0.0.0.0 Aruba Networks AP-80MB# SNMP Commands Controls access to this wireless bridge from management stations using the Simple Network Management Protocol (SNMP), as well as the hosts that will receive trap messages.
Page 130: Snmp-Server Community
If you enter a community string without the ro or rw option, the default is read only. Example This example sets the SNMP read/write community string to alpha. Aruba Networks AP-80MB(config)#snmp-server community alpha rw snmp-server enable server This command enables SNMP management access and also enables this device to send SNMP traps (notifications).
Page 131: Snmp-Server Engine-Id
If the engineID is deleted or changed, all SNMP users will be cleared. You will need to reconfigure all existing users Example This example assigns the AP-80 MB/SB ID to be 1a:2b:3c:4d:00:ff, as needed for SNMP. Aruba Networks AP-80MB(config)#snmp-server engine-id 1a:2b:3c:4d:00:ff Aruba Networks AP-80MB(config)# snmp-server filter This command configures SNMP v3 notification filters.
Page 132: Snmp-Server Filter-Assignments
1.3.6.1.2.1.2.2.1.1.23, the zero corresponds to the 10th subtree ID. When there are more subtree IDs than bits in the mask, the mask is padded with ones. Example This example defines the trapfilter notification with MIB subtree identifier .1. Aruba Networks AP-80MB(config)#snmp-server filter trapfilter include .1 Aruba Networks AP-80MB(config)#snmp-server filter trapfilter exclude .1.3.6.1.2.1.2.2.1.1.23 snmp-server filter-assignments This command assigns SNMP v3 notification filters to targets.
Page 133: Snmp-Server Host
None Command Mode Global Configuration Example This example assigns the notification filter trapfilter to the mytraps receiver. Aruba Networks AP-80MB(config)#snmp-server filter-assignments mytraps trapfilter Aruba Networks AP-80MB(config)#exit Aruba Networks AP-80MB#show snmp target Host ID : mytraps User : chris IP Address : 192.168.1.33...
Page 134: Snmp-Server Targets
Example This example assigns the notification target mytraps to IP address 192.168.1.33 and user chris. Aruba Networks AP-80MB(config)#snmp-server targets mytraps 192.168.1.33 chris Aruba Networks AP-80MB(config)# snmp-server trap This command enables the access point to send specific SNMP traps (notifications). Use the no form to disable specific trap messages.
Page 135 SNMP notifications. Example This example enables the access point to send the trap dot11StationAssociation. Aruba Networks AP-80MB(config)#no snmp-server trap dot11StationAssociation Aruba Networks AP-80MB(config)# Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 136: Snmp-Server User
snmp-server user This command configures the SNMP v3 users that are allowed to manage the access point. Use the no form to delete an SNMP v3 user. Syntax snmp-server user <user-name> Default Setting None Command Mode Global Configuration Command Usage Up to 10 SNMPv3 users can be configured on the access point.
Page 137: Show Snmp
Example This example sets parameters for an SNMP user. When you enter this command, the system prompts you to enter values. Aruba Networks AP-80MB(config)#snmp-server user User Name<1-32> :chris Group Name<1-32> :RWPriv Authtype(md5,<cr>none):md5 Passphrase<8-32>:a good secret Privacy(des,<cr>none) :des Passphrase<8-32>:a very good secret...
Page 138: Show Snmp Groups
Example Aruba Networks AP-80MB#show snmp group-assignments GroupName :RWPriv UserName :chris Aruba Networks AP-80MB# Aruba Networks AP-80MB# show snmp filter-assignments This command displays the SNMP v3 notification filter assignments. Syntax show snmp filter-assignments Command Mode Exec Example Aruba Networks AP-80MB#show snmp filter-assignments...
Page 139: Show Snmp Target
This command displays the SNMP v3 user group assignments. Syntax show snmp group-assignments Command Mode Exec Example Aruba Networks AP-80MB#show snmp group-assignments GroupName :RWPriv UserName :chris Aruba Networks AP-80MB# Aruba Networks AP-80MB# show snmp target This command displays the SNMP v3 notification target settings.
Page 140: Flash/File Commands
”, “_”) If the file contains an error, it cannot be set as the default file. Example This example sets the boot image to bridge-img.bin. Aruba Networks AP-80MB#bootfile bridge-img.bin | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 141 The system configuration file must be named syscfg in all copy commands. Example This example shows uploads configuration settings to a file on the TFTP server. Aruba Networks AP-80MB#copy config tftp TFTP Source file name:syscfg TFTP Server IP:192.168.1.19 This example downloads a configuration file.
Page 142 Example This example deletes the test.cfg configuration file from flash memory. Aruba Networks AP-80MB#delete test.cfg Are you sure you wish to delete this file? <y/n>: y Related Commands...
Page 143: Radius Client Commands
=================================== Bootfile : dflt-img.bin =================================== Aruba Networks AP-80MBshow bootfile ? RADIUS Client Commands Remote Authentication Dial-in User Service (RADIUS) is a logon authentication protocol that uses software running on a central server to control access for RADIUS-aware devices to the network. An authentication server contains a database of credentials, such as users names and passwords, for each wireless client that requires access to the access point.
Page 144: Radius-Server Address
- Host name of server (range: 1-20 characters) Default Setting None Command Mode Global Configuration Example This example sets the primary RADIUS server IP address to 192.168.1.25. Aruba Networks AP-80MB(config)#radius-server address 192.168.1.25 radius-server enable This command enables RADIUS features. Syntax radius-server enable no radius-server Default Setting...
Page 145: Radius-Server Key
DEFAULT Command Mode Global Configuration Example This example sets the RADIUS encryption key for the secondary server to green. Aruba Networks AP-80MB(config)#radius-server secondary key green radius-server port This command sets the RADIUS server network port. Syntax radius-server [secondary] port <port_number>...
Page 146: Radius-Server Port-Accounting
Example This example sets the accounting port for the primary RADIUS server to 1813. Aruba Networks AP-80MB(config)#radius-server port-accounting 1813 Aruba Networks AP-80MB(config)# radius-server radius-mac-format This command sets the format for specifying MAC addresses on the RADIUS server.
Page 147: Radius-Server Retransmit
Command Mode Global Configuration Example This example sets the number of retries for the secondary RADIUS server to 5. Aruba Networks AP-80MB(config)#radius-server secondary retransmit 5 radius-server timeout This command sets the interval between transmitting authentication requests to the RADIUS server. Syntax radius-server [secondary] timeout <number_of_seconds>...
Page 148: Radius-Server Timeout-Interim
Example This example sets the interval between transmitting accounting updates to the primary RADIUS server to 500 seconds. Aruba Networks AP-80MB(config)#radius-server timeout-interim 500 Aruba Networks AP-80MB(config)# radius-server vlan-format This command sets the format for specifying VLAN IDs on the RADIUS server.
Page 149: 802.1X Authentication Commands
This command displays the current settings for the RADIUS server. Syntax show radius Command Mode Exec Example Aruba Networks AP-80MB#show radius Radius Server Information ======================================== : 192.168.1.25 Port : 181 : ***** Retransmit Timeout : 10 ======================================== Radius Secondary Server Information ======================================== : 0.0.0.0...
Page 150: X Broadcast-Key-Refresh-Rate
Example This example sets the 802.1x broadcast interval to 5 minutes. Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1x broadcast-key-refresh-rate 5 802.1x session-key-refresh-rate This command sets the interval at which unicast session keys are refreshed for associated stations using dynamic keying.
Page 151: X Session-Timeout
Example This example sets the refresh rate for unicast keys to 5 minutes. Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1x session-key-refresh-rate 5 802.1x session-timeout This command sets the time period after which a connected client must be re-authenticated. Use the no form to disable 802.1x re-authentication.
Page 152 802.1x does not apply to the 10/100Base-TX port. Example This example specifies that 802.1x is supported, but not required. Aruba Networks AP-80MB(if-wireless g: VAP[0])#802.1x supported 802.1x supplicant This command sets the user name and password used for authentication of the access point when operating as a 802.1x supplicant and enables supplicant authentication.
Page 153: Show Authentication
The access point currently only supports EAP-MD5 CHAP for 802.1x supplicant authentication. Example This example sets the user name and password for WDS port 1. Aruba Networks AP-80MB(config)#802.1x supplicant wds_user 1 David Aruba Networks AP-80MB(config)#802.1x supplicant wds_password 1 ABC Aruba Networks AP-80MB(config)#802.1x supplicant wds 1 show authentication This command shows all 802.1x authentication settings, as well as the address filter table.
Page 154: Mac Address Authentication Commands
Command Mode Global Configuration Example This example configures the system to deny listed MAC addresses. Aruba Networks AP-80MB(config)#address filter default denied Related Commands address filter entry (6-155) | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 155: Address Filter Delete
Example This command enters the MAC address 00-70-50-cc-99-1a into the filter table and specifies that the address is allowed. Aruba Networks AP-80MB(config)#address filter entry 00-70-50-cc-99-1a allowed Related Commands address filter default (6-154) Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 156: Mac-Authentication Server
Command Mode Global Configuration Example This example sets MAC This examples sets the MAC authentication server to be remote. Aruba Networks AP-80MB(config)#mac-authentication server remote Related Commands address filter entry (6-155) radius-server address (6-144) mac-authentication session-timeout This command sets the interval at which associated clients will be re-authenticated with the RADIUS server authentication database.
Page 157: Filtering Commands
However, it does not affect communications between wireless clients and the wired network. Example This example disables intra-VAP communications between wireless clients. Aruba Networks AP-80MB(config)#filter local-bridge intra-VAP Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide CLI Commands |...
Page 158: Filter Uplink Enable
[no] filter uplink enable Default Disabled Command Mode Global Configuration Example Aruba Networks AP-80MB(config)#filter uplink enable Aruba Networks AP-80MB(config)# filter uplink This command adds or deletes MAC addresses from the uplink filtering table. Syntax filter uplink {add | delete} <MAC-address>...
Page 159: Filter Ethernet-Type Protocol
Global Configuration Example This example adds the MAC address 00-12-34-56-78-9a to the uplink filtering table. Aruba Networks AP-80MB(config)#filter uplink add 00-12-34-56-78-9a Aruba Networks AP-80MB(config)# filter ethernet-type enable This command checks the Ethernet type on all incoming and outgoing Ethernet packets against the protocol filtering table.
Page 160: Show Filters
Example This example sets a filter for the ARP protocol. Aruba Networks AP-80MB(config)#filter ethernet-type protocol ARP Related Commands filter ethernet-type enable (6-159) show filters This command shows the filter options and protocol entries in the filter table.
Page 161: Wds Bridge Commands
- Operates as a slave with only one link to the master. Default Setting WA6202A: Slave WA6202AM: Master Command Mode Interface Configuration (Wireless) Example Aruba Networks AP-80MB(if-wireless g)#bridge mode master Aruba Networks AP-80MB(if-wireless g)# Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide CLI Commands |...
Page 162: Bridge Channel-Auto-Sync
The bridge link on the radio interface always uses the default VAP interface. In any bridge mode, VAP interfaces 1 to 7 are not available for use. Example Aruba Networks AP-80MB(if-wireless g)#bridge role ap Aruba Networks AP-80MB(if-wireless g)# bridge channel-auto-sync This command allows a child bridge to automatically find the operating channel of its parent bridge.
Page 163: Bridge-Link Parent
Command Mode Interface Configuration (Wireless) Example Aruba Networks AP-80MB(if-wireless g)#bridge channel-auto-sync enable Aruba Networks AP-80MB(if-wireless g)# bridge-link parent This command configures the MAC address of the parent bridge node. Syntax bridge-link parent <mac-address> mac-address - The wireless MAC address of the parent bridge unit. (12 hexadecimal digits in the form “xx-xx-xx-xx-xx-xx”).
Page 164: Bridge Dynamic-Entry Age-Time
2 to 6. Index number 1 is reserved for the parent link, which must be set using the bridge parent command. Example Aruba Networks AP-80MB(if-wireless a)#bridge-link child 2 00-08-3e-84-bc-6d Aruba Networks AP-80MB(if-wireless a)# bridge dynamic-entry age-time This command sets the time for aging out dynamic entries in the WDS forwarding table.
Page 165: Show Bridge Link
- The 802.11a radio interface. g - The 802.11g radio interface. index - The index number of a bridge link. (Range: 1 - 6) Command Mode Exec Example Aruba Networks AP-80MB#show bridge link ethernet Bridge Port/Link Information (Ethernet) =========================================================== Port-No status : Enabled...
Page 166: Spanning Tree Commands
Aruba Networks AP-80#show bridge link wireless a Interface Wireless A WDS Information ==================================== AP Role: Parent: NONE Child: NONE Aruba Networks AP-80MB#show bridge link wireless a 1 Bridge Port/Link Information (Wireless A 1) =========================================================== Port-No : 10 status : Enabled state...
Page 167: Bridge Stp Enable
Global Configuration Example This example sets the aging time to 1000 seconds. Aruba Networks AP-80MB(config)#bridge dynamic-entry age-time 1000 bridge stp enable Use this command to enable the Spanning Tree Protocol globally for the wireless bridge. Use the no form to disable it.
Page 168: Bridge Stp Forwarding-Delay
Example This example sets the forwarding delay to 15 seconds. Aruba Networks AP-80MB(config)#bridge stp forwarding-delay 15 bridge stp hello-time Use this command to configure the spanning tree bridge hello time globally for the wireless bridge. Use the no form to restore the default.
Page 169: Bridge Stp Max-Age
Example This example sets the time interval to 5 seconds. Aruba Networks AP-80MB(config)#bridge stp hello-time 5 bridge stp max-age Use this command to configure the spanning tree bridge maximum age globally for the wireless bridge. Use the no form to restore the default.
Page 170: Bridge Stp Priority
STP root device. However, if all devices have the same priority, the device with the lowest MAC address then becomes the root device. Example This example sets the priority to 40000. Aruba Networks AP-80MB(config)#bridge stp priority 40000 show bridge aging-time This command displays aging time for dynamic entries. Syntax...
Page 171 This command displays the MAC entries in the filter database. Syntax show bridge filter-entry Command Mode Exec Example Aruba Networks AP-80MBshow bridge filter-entry ============================================================================== Bridge MAC Addr Table Maximum Entries::512 ------------------------------------------------------------------------------ Port |Fwd_type| VlanID|origin life|remain Life| Type...
Page 172: Show Bridge Stp
: priority = 32768, MAC = 00:0B:86:C3:91:93 designated-port : priority = 128, port No = 1 forward-transitions : 1 Aruba Networks AP-80MB Aruba Networks AP-80MBshow bridge link wireless g Interface Wireless G WDS Information ==================================== AP Role: Parent: NONE...
Page 173: Ethernet Interface Commands
20 Seconds bridge Forward Delay : 10 Seconds time-since-top-change: 11493 Seconds topology-change-count: 25 Aruba Networks AP-80MB Ethernet Interface Commands The commands described in this section configure connection parameters for the Ethernet interface. Table 32 Ethernet Interface Commands and Function Command...
Page 174: Interface Ethernet
Command Usage The primary and secondary name servers are queried in sequence. Example This example specifies two domain-name servers. Aruba Networks AP-80MB(if-ethernet)#dns primary-server 192.168.1.55 Aruba Networks AP-80MB(if-ethernet)#dns secondary-server 10.1.0.55 Related Commands show interface ethernet (6-177) interface ethernet This command enters Ethernet interface configuration mode.
Page 175: Ip Dhcp
Example This example sets the IP address 192.167.1.2 and network mask 255.255.255.0. Aruba Networks AP-80MB(config)#interface ethernet Enter Ethernet configuration commands, one per line. Aruba Networks AP-80MB(if-ethernet)#ip address 192.168.1.2 255.255.255.0 192.168.1.253 Related Commands ip dhcp (6-175) ip dhcp This command enables the access point to obtain an IP address from a DHCP server.
Page 176 Enter Ethernet configuration commands, one per line. Aruba Networks AP-80MB(if-ethernet)#ip dhcp Related Commands ip address (6-174) speed-duplex This command configures the speed and duplex mode of a given interface when autonegotiation is disabled. Use the no form to restore the default.
Page 177: Wireless Interface Commands
Aruba Networks AP-80MB(if-ethernet)#shutdown show interface ethernet This command displays the status for the Ethernet interface. Syntax show interface [ethernet] Command Mode Exec Example Aruba Networks AP-80MB#show interface ethernet Ethernet Interface Information ======================================== IP Address : 192.168.1.1 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.1.253...
Page 178 Table 33 Wireless Interface Commands and Functions (Continued) Command Function Mode bridge Configures the rate at which beacon signals are transmitted IC-W from the wireless bridge channel Configures the radio channel IC-W cipher-suite Defines the cipher algorithm used for broadcasting and IC-W multicasting when using Wi-Fi Protected Access (WPA) security description...
Page 179 {diversity | left | right} antenna location {indoor | outdoor} left/right/diversity - Radio used for output. indoor/outdoor - Physical location of the AP-80 MB/SB. Default Setting Diversity (applies only to the G radio, outdoor Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 180 This command allows you to select a specific receive antenna or to allow the access point to choose the receive antenna in response to ambient noise conditions. Example This example sets antenna diversity for the 802.11g radio. Aruba Networks AP-80MB(if-wireless g)#antenna control diversity Aruba Networks AP-80MB(if-wireless g)# assoc-timeout-interval This command sets the timeout interval for client association.
Page 181 Aruba Networks AP-80MB(config)#interface wireless a Enter Wireless configuration commands, one per line. Aruba Networks AP-80MB(if-wireless a)#vap 0 Aruba Networks AP-80MB(if-wireless a: VAP[0])#auth-timeout-value 10 Aruba Networks AP-80MB(if-wireless a: VAP[0])# auth This command defines the 802.11 authentication type allowed by the access point.
Page 182 Example This example sets the authentication type for the 802.11g radio to WPA. Aruba Networks AP-80MB(if-wireless g: VAP[0])# auth wpa required Data Encryption is set to Enabled. WPA2 Clients mode is set to Disabled. WPA Clients Mode is set to Required.
Page 183 Command Mode Interface Configuration (Wireless) Example This example sets the bridge mode to master. Aruba Networks AP-80MB(if-wireless g)#bridge mode master Aruba Networks AP-80MB(if-wireless g)# channel This command configures the radio channel through which the local wireless bridge communicates with remote bridges.
Page 184 AES is also being incorporated as part of the 802.11 standard. Example This example sets the multicast cipher to TKIP. Aruba Networks AP-80MB(if-wireless g: VAP[0]):#multicast-cipher TKIP | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 185 This example sets the description RD-AP#3 for the 802.11a radio, VAP 0. Aruba Networks AP-80MB(config)#interface wireless a Aruba Networks AP-80MB(if-wireless g: VAP[0])#description RD-AP#3 dtim-period This command configures the interval during which remote bridges in sleep mode must wake up to receive broadcast/multicast transmissions.
Page 186 Note that encryption protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet. Example This example sets encryption to128-bit WEP. Aruba Networks AP-80MB(if-wireless a)#encryption wep 128 Related Commands transmit-key (6-197) | CLI Commands...
Page 187 However, it is more efficient to set the fragment size larger if very little or no interference is present because it requires overhead to send multiple frames. Example This example sets the fragmentation length to 512 bytes. Aruba Networks AP-80MB(if-wireless a)#fragmentation-length 512 hide-ssid This command suppression broadcast of the SSID in beacons. Syntax...
Page 188: Interface Wireless
Global Configuration Example This example enters configuration mode for the 802.11a radio. Aruba Networks AP-80MB(config)#interface wireless a Aruba Networks AP-80MB(if-wireless a)# This command sets the keys used for WEP and AES encryption. Use the no form to delete a configured key.
Page 189 The AES key type value entered using the key command must be the same as the type specified in the encryption command. Example This example sets WEP keys. Aruba Networks AP-80MB(if-wireless a)#key wep 1 64 ascii 12345 Aruba Networks AP-80MB(if-wireless a)#key wep 2 64 ascii abcde Related Commands encryption (6-186)
Page 190 Command Mode Interface Configuration (Wireless) Example This example sets the MIC mode to hardware for the 802.11g radio. Aruba Networks AP-80MB(if-wireless g)#mic_mode hardware Aruba Networks AP-80MB(if-wireless g)# multicast-data-rate This command sets the data rate for multicast messages. Syntax multicast-data-rate <rate>...
Page 191 If the client returns to the access point, it requires full reauthentication. The access point can store up to 256 entries in the PMKSA cache. Example Aruba Networks AP-80MB(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecret Aruba Networks AP-80MB(if-wireless g: VAP[0])# Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 192 To support pre-authentication, both clients and access points in the network must be WPA2 enabled. Pre-authentication requires all access points in the network to be on the same IP subnet. Example Aruba Networks AP-80MB(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecret Aruba Networks AP-80MB(if-wireless g: VAP[0])# protection-method This command sets the RTS (Request to Send) or CTS (Clear to Send) protection method.
Page 193 - RSSI output generation enabled or disabled. distance - The distance (Km) over which to measure RSSI in normal or turbo mode. port - the AP-80 MB/SB port for RSSI output. sample-duration - The period (seconds) over which each RSSI sample is taken.
Page 194 Wireless bridges contending for the wireless medium may not be aware of each other. The RTS/CTS mechanism can solve this “Hidden Node” problem. Example This example sets the RTS threshold to 256 bytes. Aruba Networks AP-80MB(if-wireless a)#rts-threshold 256 speed This command configures the maximum data rate for transmitting unicast packets on the wireless interface.
Page 195: Show Interface Wireless
Syntax show interface wireless a | g a - 802.11a radio interface g - 802.11g radio interface Command Mode Exec Example Aruba Networks AP-80MB#show interface wireless a Wireless Interface Information ========================================================= ----------------Identification----------------------------- Description : Enterprise 802.11a Access Point Service Type...
Page 196: Show Station
This command shows the wireless clients associated with the access point. Syntax show station Command Mode Exec Example Aruba Networks AP-80MB#show station Station Table Information =========================================================== 802.11a Channel : 56 No 802.11a Channel Stations. 802.11g Channel : 11 802.11g Channel Station Table...
Page 197: Super-G Or Super-A
Interface Configuration (Wireless) Command Usage Example This example enables the Super G enhancements. Aruba Networks AP-80MB(if-wireless g)#super-g transmit-key This command sets the index of the WEP key to be used for encrypting data frames broadcast or multicast from the wireless bridge.
Page 198 Other keys can be used for decryption of data from other nodes. Example This example sets the transmit key index to 2. Aruba Networks AP-80MB(if-wireless a)#transmit-key 2 transmit-power This command adjusts the power of the radio signals transmitted from the wireless bridge. Syntax transmit-power <signal-strength>...
Page 199: Rogue Ap Detection Commands
Command Mode Interface Configuration (Wireless) Example This example provides access to VAP 0 for the 802.11g radio. Aruba Networks AP-80MB(config)#interface wireless g Aruba Networks AP-80MB(if-wireless g)#vap 0 Aruba Networks AP-80MB(if-wireless g: VAP[0])# Rogue AP Detection Commands A “rogue AP” is either an access point that is not authorized to participate in the wireless network, or an access point that does not have the correct security configuration.
Page 200: Rogue-Ap Authenticate
143). Example This example disables the requirement that all access points must be authenticated to associate to the 802.11g interface. Aruba Networks AP-80MB(if-wireless g)#no rogue-ap authenticate Aruba Networks AP-80MB(if-wireless g)# | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 201: Rogue-Ap Duration
A long scan duration time will detect more access points in the area, but causes more disruption to client access. Example This example sets the scan duration to 200 milliseconds for the 802.11g interface. Aruba Networks AP-80MB(if-wireless g)#rogue-ap duration 200 Aruba Networks AP-80MB(if-wireless g)# Related Commands rogue-ap interval (7-117) rogue-ap enable This command enables the periodic detection of nearby access points.
Page 202: Rogue-Ap Interval
This command sets the interval at which scans occur. Frequent scanning will more readily detect other access points, but will cause more disruption to client access. Example This example sets the scan interval to 120 minutes for the 802.11a interface. Aruba Networks AP-80MB(if-wireless a)#rogue-ap interval 120 Aruba Networks AP-80MB(if-wireless a)# Related Commands rogue-ap duration (7-117) rogue-ap scan This command starts an immediate scan for access points on the radio interface.
Page 203: Link Integrity Commands
AP. Example This example performs a rogue AP scan. Aruba Networks AP-80MB(if-wireless g)#rogue-ap scan Aruba Networks AP-80MB(if-wireless g)#rogueApDetect Completed (Radio G) : 9 APs detected rogueAPDetect (Radio G): refreshing ap database now Aruba Networks AP-80MB(if-wireless g)# show rogue-ap This command displays the current rogue AP database.
Page 204: Link-Integrity Ping-Detect
When the number of failed responses (either the host does not respond or is unreachable) exceeds the limit set by the link-integrity ping-fail-retry command, the link is determined as lost. Example Aruba Networks AP-80MB(config)#link-integrity ping-detect Aruba Networks AP-80MB(config)# link-integrity ping-host This command configures the link host name or IP address.
Page 205: Link-Integrity Ping-Interval
- IP address of the host. Default Setting None Command Mode Global Configuration Example Aruba Networks AP-80MB(config)#link-integrity ping-host 192.168.1.10 Aruba Networks AP-80MB(config)# link-integrity ping-interval This command configures the time between each Ping sent to the link host. Syntax link-integrity ping-interval <interval>...
Page 206: Link-Integrity Ethernet-Detect
Example Aruba Networks AP-80MB(config)#link-integrity ping-fail-retry 5 Aruba Networks AP-80MB(config)# link-integrity ethernet-detect This command enables an integrity check to determine whether or not the access point is connected to the wired Ethernet. Syntax [no] link-integrity ethernet-detect Default Setting Disabled Command Mode...
Page 207: Iapp Commands
IAPP Commands The command described in this section enables the protocol signaling required to ensure the successful handover of wireless clients roaming between different 802.11f-compliant access points. In other words, the Inter Access-Point Protocol (IAPP), as defined by IEEE standard 802.11f, can ensure successful roaming between access points in a multi-vendor environment.
Page 208 Command Mode Interface Ethernet Example This example assigns VLAN ID 10 for untagged packets. Aruba Networks AP-80MB(if-ethernet)#untagged-vlanid 10 vlan-id This command configures the default VLAN ID for the VAP interface. | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 209: Wmm Commands
Syntax vlan-id <vlan-id> vlan-id - Native VLAN ID. (Range: 1-4094) Default Setting Command Mode Interface Configuration (Wireless-VAP) Command Usage To implement the default VLAN ID setting for VAP interface, the access point must enable VLAN support using the vlan command. When VLANs are enabled, the access point tags frames received from wireless clients with the default VLAN ID for the VAP interface.
Page 210 Interface Configuration (Wireless) Example This example specifies that WMM operational mode is required for the 802.11a interface. Aruba Networks AP-80MB(if-wireless a)#wmm required Aruba Networks AP-80MB(if-wireless a)# wmm-acknowledge-policy This command allows the acknowledgement wait time to be enabled or disabled for each Access Category (AC).
Page 211 This example sets the following WMM AP parameters for the 802.11a interface: AC=0, LogCwMin=4, LogCwMax=6, AIFS=3, TxOpLimit= 1, admission_contro=1. Aruba Networks AP-80MB(if-wireless a)#wmmparams ap 0 4 6 3 1 1 Aruba Networks AP-80MB(if-wireless a)# Aruba AP 80 Outdoor Wireless Access Point/Bridge...
Page 212 | CLI Commands Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 213: Appendix A Troubleshooting
Appendix A Troubleshooting This chapter includes some basic verifications that you should perform before you contact your local Technical Support. 1. If wireless bridge units do not associate with each other, check the following: Check the power injector LED for each bridge unit to be sure that power is being supplied. Be sure that antennas in the link are properly aligned.
Page 214 5. If all other recovery measures fail, and the wireless bridge is still not functioning properly, take any of these steps: Reset the wireless bridge’s hardware using the CLI, web interface, or through a power reset. Reset the wireless bridge to its default configuration. 6.
Page 215: Appendix B Configuration Example
Appendix C Cables, Pinouts Aruba 80 8-Pin DIN Ethernet Connector Pinout The Ethernet cable from the power injector connects to an 8-pin DIN connector on the Aruba 80 outdoor wireless Access Point. This IP67 8-pin male (pole) M12 circular DIN connector (with gold- plated (Au) contacts) is described below.
Page 216: Aruba 80 Power Over Ethernet Injector Module 10/100Base-Tx Pin Assignments
Aruba 80 Power over Ethernet Injector Module 10/100BASE-TX Pin Assignments Use unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections: 100-ohm Category 3 or better cable for 10 Mbps connections, or 100-ohm Category 5 or better cable for 100 Mbps connections.
Page 217: Appendix D Specifications
Appendix D Specifications Product Features Wireless dual-band transceiver Various antenna options Protocol-independent networking functionality Supports IEEE 802.11a or IEEE 802.11b/g operation as an AP Supports IEEE 802.11a and IEEE 802.11b/g operation as an AM Seamless connectivity to wired LANs augment existing networks quickly and easily Ethernet Compatibility The Aruba AP 80 Outdoor Wireless Access Point/Bridge attaches to 10/100 Mbps Ethernet (FE) LAN segments that utilize 10Base-T/100Base-TX (twisted-pair) wiring.
Page 218: Compliance
Compliance United States FCC - Class B This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Page 219: Japan
The use of this device operating either partially or completely outdoors may require the user to obtain a license for the system according to the Canadian regulations. For further information, contact your local Industry Canada office. RSS-210 This device, when operated in the 5150-5250 MHz frequency range, is only for indoor use. High power radars are allocated as primary users (meaning they have priority) in the 5250-5350 MHz and 5650-5850 MHz frequency ranges, and these radars could cause interference and/or damage to LE-LAN devices.
Page 220: Europe
Europe This is a Class B product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures WARNING This product complies with Directive 1999/5/EC as well as with EN5022 Class B and EN5024 standards. Taiwan Low-power, radio-frequency devices must not be altered by changing the operating frequency, increasing emission power, adding external antennas, and changing other original design features and...
Page 221 Table 39 IEEE 802.11b Maximum Distances Speed (Mbps) Condition Outdoor 152 m 233 m 315 m 396 m Environment (500 ft.) (766 ft.) (1033 ft.) (1300 ft.) Indoor 23 m 30 m 61 m 61 m Environment (75 ft.) (100 ft.) (200 ft.) (200 ft.) An Outdoor Environment is a line-of-sight environment with no interference or obstruction between the...
Page 222 Specifications Table 42 Aruba 80 802.11 Specifications Description 802.11a 802.11b/g External Antenna Aruba offer a wide variety of detachable antenna types suitable for use with the Aruba AP- 80 MB/SB. Please contact your local sales representative for details Frequency Band 5.150 ~ 5.250 GHz, channels country- 2.4 ~ 2.4835 GHz specific...
Page 223 AP-80SB—Aruba 80 Slave Outdoor Wireless Access Point/Bridge AP-80MB—Aruba 80 Master Outdoor Wireless Access Point/Bridge AP-AC-80-1—Indoor-rated Power Injector Kit Interfaces (Electrical): AP-80 MB/SB Common Interfaces 1 x 10/100 Base-TX auto-sensing Ethernet interface (IP67 8-pin male (pole) M12 circular DIN connector Au contacts): Auto-sensing MDI/MDX PoE 48V DC / 1.2A (30W) power over Ethernet (non-standard 802.3af)
Page 224: Aruba 80 Detachable Antennas
Table 43 Aruba 80 Characteristics (Continued) Description Power Requirements AP-80 MB/SB DC Input Voltage: 48 VDC DC Input Current: 1.2 A30W (non-standard 802.3af Power over Ethernet) Power Consumption: 30W, maximum External Power Adapter AC Input Voltage: 90VAC to 240VAC, auto-sensing AC Input Current: 1.5A @ 110 VAC...
Page 225: Ap-80Sb Integrated Antenna
Table 44 Detachable Antennas (Continued) Part Number Description Vendor Not certified for use in Japan. ° AP-ANT-84 2.4Ghz / 5.0dBi Wide-Angle 135 Directional Indoor / Outdoor Use. Cushcraft Antenna. N-Type Connector Part # SR24135DA36NM Not certified for use in Japan. AP-ANT-85 2.4Ghz / 15.0dBi High-Gain, Directional Panel Indoor / Outdoor Use.
Page 226: Specifications
Proper Disposal of Aruba Equipment For the most current information on Global Environmental Compliance and Aruba products please see our website at www.arubanetworks.com. Waste of Electrical and Electronic Equipment Aruba products at end of life are subject to separate collection and treatment in the EU Member States, Norway, and Switzerland and therefore are marked with the symbol shown at the left (crossed-out wheelie bin).
Page 227 Hazardous Materials Declaration Hazardous Substances) Chromium VI Polybrominated Polybrominated (Parts) Lead Mercury Cadmium Compounds Biphenyls Diphenyl Ether (Pb) (Hg) (Cd) (PBB) (PBDE) PCA Board Mechanical Subassembly SJ/T11363-2006 This component does not contain this hazardous substance above the maximum concentration values in homogeneous materials specified in the SJ/T11363-2006 Industry Standard.
Page 228 | Specifications Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...
Page 229 Glossary 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better UTP cable. 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 or better UTP cable. Access Point An internetworking device that seamlessly connects wired and wireless networks.
Page 230: China Rohs
Data Encryption Standard (DES) A widely used method of private key data encryption. Dynamic Host Configuration Protocol (DHCP) Provides a framework for passing configuration information to hosts on a TCP/IP network. DHCP is based on the Bootstrap Protocol (BOOTP), adding the capability of automatic allocation of reusable network addresses and additional configuration options.
Page 231 Local Area Network (LAN) A group of interconnected computer and support devices. MAC Address The physical layer address used to uniquely identify network nodes. Network Time Protocol (NTP) NTP provides the mechanisms to synchronize time across the network. The time servers operate in a hierarchical master-slave configuration in order to synchronize local clocks within the subnet with global time standards via wire or radio.
Page 232 Shared Key A shared key can be used to authenticate each client attached to a wireless network. Shared Key authentication must be used along with the 802.11 Wireless Equivalent Privacy (WEP) algorithm. Simple Network Management Protocol (SNMP) The application protocol in the Internet suite of protocols which offers network management services. Simple Network Time Protocol (SNTP) SNTP allows a device to set its internal clock based on periodic updates from a Network Time Protocol (NTP) server.
Page 233 75, 182 point-to-multipoint rate 75, 185 point-to-point BPDU polarization position and orientation bridge child AP management mode AP-80 MB/SB priority about antenna requirements compliance connecting Ethernet cables cable wiring connecting external antennas channel 74, 183 connecting power injector auto sync...
Page 234 cipher suite hide-ssid iapp 207, 208 Clear To Send See CTS interface ethernet interface wireless ip address CLI command modes ip dhcp command line interface See CLI ip http port ip http server commands ip http session-timeout 802.1x broadcast-key-refresh-rate ip https port 802.1x session-key-refresh-rate ip https server 802.1x session-timeout...
Page 235 60, 141 show hardware connector pinouts show history show interface ethernet connectors show interface wireless AP-80 MB/SB show line show link-integrity RSSI show logging country code show radius configuring show rogue-ap setting...
Page 236 EAP-TLS IEEE 802.11a 70, 188 configuring interface 71, 188 EAP-TTLS maximum data rate 75, 194 encryption 78, 81, 85, 186 radio channel 74, 183 engine ID IEEE 802.11b Ethernet IEEE 802.11f cable requirements IEEE 802.11g cabling and grounding configuring interface connecting cables maximum data rate pin assignments...
Page 237 75, 194 point-to-point bridge 802.11a interface 75, 194 802.11g interface point-to-point configuration polarization of antennas MDI connector ports AP-80 MB/SB MDI, RJ-45 pin configuration Ethernet Message Integrity Check (MIC) power injector, connecting mode Power over Ethernet See PoE access point bridge...
Page 238 resetting server 62, 126 access point software hard reset displaying version 59, 89, 119 without CLI, WebUI access downloading 60, 141 resetting the access point software, CLI for download restarting the system 60, 105 Spanning Tree Protocol. See STP. restoring configuration specifications rogue AP speed settings...
Page 239 TCP/IP weather conditions parameters Telnet 44, 97 ASCII key configuration settings Temporal Key Integrity Protocol See TKIP configuring 81, 186 Temporal Key Integrity Protocol (TKIP) description hexadecimal key time zone 62, 126 timeout, session options shared key TKIP 85, 184 Wi-Fi Multimedia Wireless.
Page 240 | Index Aruba AP 80 Outdoor Wireless Access Point/Bridge | Installation and User Guide...

This manual is also suitable for:

Ap-80 sb

Aruba Networks AP-80 MB Installation And User Manual

Preface

Overview of this Manual

Chapter 1 Hardware Overview

Chapter 2 Installation

Chapter 3 Planning and Deployment Considerations

Chapter 4 Provisioning and Initial Setup

Chapter 5 Advanced Configuration

Chapter 6 CLI Commands

Appendix A Troubleshooting

Appendix B Configuration Example

Appendix C Cables, Pinouts

Appendix D Specifications

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Aruba Networks AP-80 MB

Summary of Contents for Aruba Networks AP-80 MB